@hexclave/shared 1.0.61 → 1.0.62

package/dist/{email-outbox-BRZiK0ZG.d.ts.map → email-outbox-CqzwInBL.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"email-outbox-BRZiK0ZG.d.ts","names":[],"sources":["../src/interface/crud/email-outbox.ts"],"mappings":";;;cAiNa,qBAAA,gBAAqB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmBrB,uBAAA,gBAAuB,YAAA;;;;;;;;;;;;;;aASxB,MAAA;;;;;;;;;;;;;;;cAEC,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsBD,eAAA,GAAkB,UAAU,QAAQ,eAAA"}
+{"version":3,"file":"email-outbox-CqzwInBL.d.ts","names":[],"sources":["../src/interface/crud/email-outbox.ts"],"mappings":";;;cAiNa,qBAAA,gBAAqB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmBrB,uBAAA,gBAAuB,YAAA;;;;;;;;;;;;;;aASxB,MAAA;;;;;;;;;;;;;;;cAEC,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsBD,eAAA,GAAkB,UAAU,QAAQ,eAAA"}

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt.js

@@ -4,7 +4,7 @@ import { typedEntries } from "../../../utils/objects.js";
 import { deindent } from "../../../utils/strings.js";
 import { remindersPrompt } from "../reminders.js";
 //#region package.json
-var version = "1.0.61";
+var version = "1.0.62";
 //#endregion
 //#region \0@oxc-project+runtime@0.137.0/helpers/esm/taggedTemplateLiteral.js
 function _taggedTemplateLiteral(e, t) {

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.d.ts

@@ -0,0 +1,5 @@
+//#region src/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.d.ts
+declare const deploymentsSkillSection: string;
+//#endregion
+export { deploymentsSkillSection };
+//# sourceMappingURL=deployments-skill.d.ts.map

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployments-skill.d.ts","names":[],"sources":["../../../../../src/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.ts"],"mappings":";cAMa,uBAAA"}

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.js

@@ -0,0 +1,128 @@
+import { deindent } from "../../../utils/strings.js";
+//#region src/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.ts
+const deploymentsSkillSection = deindent`
+  # Hexclave Deployments
+
+  The Deployments app makes deploying a service very easy. You select a type of service to deploy and provide your code, build instructions, run instructions, environment variables, and the code framework. You can set up multiple deployments per Hexclave project — for example, a backend service and a frontend service. Once a service is deployed, it is publicly accessible.
+
+  For this iteration of the Deployments app, only the \`vercel\` service type is available. It can be used to set up serverless deployments.
+
+  To use Hexclave Deployments, you must do a few things. First, the Deployments app must be enabled, by adding \`deployments-alpha\` under \`apps.installed\`. Second, you must edit your \`hexclave.config.ts\` file to add the relevant configuration, as specified below. Both keys are \`deployments-alpha\`, not \`deployments\` — the app is in alpha and its id says so. Because of the hyphen, quote it.
+
+  ## Config
+
+  \`\`\`ts title="hexclave.config.ts"
+  import type { HexclaveConfig } from "@hexclave/js/config"; // replace \`js\` with the correct framework SDK package
+
+  export const config: HexclaveConfig = {
+    apps: {
+      installed: {
+        authentication: { enabled: true },
+        "deployments-alpha": { enabled: true },
+      },
+    },
+    "deployments-alpha": {
+      services: {
+        web: {
+          type: "vercel",
+          rootDirectory: "./",
+          framework: "nextjs",
+          installCommand: "pnpm install",
+          buildCommand: "pnpm build",
+          outputDirectory: ".next",
+          env: {
+            "MY_ENV_VAR": { value: "true" },
+            "DATABASE_CONNECTION_STRING": { type: "secret", key: "db_connection" },
+            "NEXT_PUBLIC_HEXCLAVE_PROJECT_ID": { type: "connection", value: "hexclave.projectId" },
+          },
+        },
+      },
+    },
+  };
+  \`\`\`
+
+  Here, \`web\` is the name of your service. \`type\` refers to the type of service you want to set up; for now, as mentioned earlier, only \`vercel\` is supported. \`rootDirectory\` is the directory in which the install and build commands are run, and where the code for your service is found. \`installCommand\` is the command run to install your application's dependencies, and \`buildCommand\` is what is run to build the necessary packages and files. \`framework\` is the framework used by your service; from it and \`outputDirectory\`, the run command is inferred.
+
+  The \`HexclaveConfig\` annotation requires the SDK package it is imported from to be a dependency of the project. If it isn't, either install it or drop the annotation (the config is plain TypeScript — the CLI does not type-check it).
+
+  Note also that the config file usually sits inside \`rootDirectory\`, which means it is uploaded with your source and compiled by the remote build like any other file. If the deployed app doesn't depend on the Hexclave SDK, add \`hexclave.config.ts\` to \`.vercelignore\`: the CLI reads the config from disk before packaging, so the build itself never needs it, and excluding it keeps an SDK import in the config from breaking a build that is otherwise unrelated to Hexclave.
+
+  ## Domains
+
+  Every Vercel service gets a Vercel domain autoprovisioned. If you want to attach a custom domain, there are two ways to do so.
+
+  **Option 1 — the dashboard.** Visit \`https://app.hexclave.com/projects/<project-id>/deployments\`, click the service of choice, go to the Domains tab, add your domain, and then create the returned DNS records at your DNS provider.
+
+  **Option 2 — the CLI.** Here is an example of adding \`app.example.com\` to the service \`api\` and receiving the DNS records that then need to be set with your DNS provider:
+
+  \`\`\`sh title="Terminal"
+  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\
+    "const p = await hexclaveServerApp.getProject(); \\
+     await p.addDeploymentServiceDomain('api', 'app.example.com'); \\
+     return p.getDeploymentServiceDomain('api', 'app.example.com');"
+  \`\`\`
+
+  ## Deploying
+
+  Before deploying, run the service's \`installCommand\` and \`buildCommand\` locally and confirm they succeed. The remote build runs the same commands, but \`deploy\` exits before the build finishes, so a broken build does not fail the command — it surfaces only when you check the run afterwards.
+
+  From the directory containing your config file:
+
+  \`\`\`sh title="Terminal"
+  npx @hexclave/cli@latest deploy web --secret db_connection="$DATABASE_URL"
+  \`\`\`
+
+  The CLI packages the service's root directory (respecting \`.gitignore\` and \`.vercelignore\`, and always excluding \`node_modules\` and \`.git\`), uploads it, and starts a remote build. Without a config file, the configuration stored in Hexclave governs the deploy, with the root directory resolved against the current directory. It always deploys to production, never prompts, and exits as soon as the build is queued, printing the run id. Follow the build in the dashboard's Deployments tab.
+
+  Every secret defined in the service's \`env\` must be passed via \`--secret\` on every deploy — a missing (or misspelled) one fails the deploy before anything is uploaded.
+
+  Options: \`--config <path>\` (default: auto-discover \`hexclave.config.ts\` in the current directory, dashboard configuration otherwise), \`--cloud-project-id <id>\` (default: the \`HEXCLAVE_PROJECT_ID\` env var), and \`--secret KEY=VALUE\` (repeatable, see above).
+
+  You can also deploy through GitHub Actions, like so:
+
+  \`\`\`yaml title=".github/workflows/deploy.yaml"
+  - run: npm i -g @hexclave/cli
+  - run: hexclave deploy web --secret db_connection="$DATABASE_URL"
+    env:
+      HEXCLAVE_PROJECT_ID: \${{ secrets.HEXCLAVE_PROJECT_ID }}
+      HEXCLAVE_SECRET_SERVER_KEY: \${{ secrets.HEXCLAVE_SECRET_SERVER_KEY }}
+      DATABASE_URL: \${{ secrets.DATABASE_URL }}
+  \`\`\`
+
+  ## Checking status and debugging failures
+
+  Because \`deploy\` returns as soon as the build is queued, a successful exit does not mean the deploy succeeded. Check the service to find out:
+
+  \`\`\`sh title="Terminal"
+  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\
+    "const p = await hexclaveServerApp.getProject(); \\
+     const svc = (await p.listDeploymentServices()).find(s => s.id === 'web'); \\
+     return { status: svc.status, url: svc.url, run: svc.latest_run };"
+  \`\`\`
+
+  A service's \`status\` is one of \`not_deployed\`, \`queued\`, \`building\`, \`deployed\`, \`failed\`, or \`canceled\`; a run's is \`queued\`, \`building\`, \`ready\`, \`error\`, or \`canceled\`. Poll until the run leaves \`queued\`/\`building\`.
+
+  A failed run's \`error\` field is only a one-line summary (for example \`Command "npm run build" exited with 1\`). Do not try to guess the cause from it, and do not reproduce the build locally to find out — fetch the actual build output by run id:
+
+  \`\`\`sh title="Terminal"
+  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\
+    "const p = await hexclaveServerApp.getProject(); \\
+     return p.getDeploymentRunLogs('<run-id>');"
+  \`\`\`
+
+  \`deploy\` prints the run id it started. If you don't have one, \`listDeploymentRuns('web', { limit: 5 })\` returns the most recent runs, newest first — call it through \`exec\` like the snippets above.
+
+  ## Deleting a service
+
+  If you want to delete a deployed service, you can do so through the dashboard, or through the CLI like so:
+
+  \`\`\`sh title="Terminal"
+  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\
+    "const p = await hexclaveServerApp.getProject(); \\
+     await p.deleteDeploymentService('api');"
+  \`\`\`
+`;
+//#endregion
+export { deploymentsSkillSection };
+
+//# sourceMappingURL=deployments-skill.js.map

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployments-skill.js","names":[],"sources":["../../../../../src/ai/unified-prompts/skill-site-prompt-parts/deployments-skill.ts"],"sourcesContent":["import { deindent } from \"../../../utils/strings\";\n\n// The Deployments-specific addendum served at https://skill.hexclave.com/deployments.\n// It is appended verbatim after the full base skill, so this section assumes the\n// reader already has the general Hexclave skill (CLI auth, config format, SDKs) in\n// context and only teaches what is specific to the Deployments app.\nexport const deploymentsSkillSection = deindent`\n  # Hexclave Deployments\n\n  The Deployments app makes deploying a service very easy. You select a type of service to deploy and provide your code, build instructions, run instructions, environment variables, and the code framework. You can set up multiple deployments per Hexclave project — for example, a backend service and a frontend service. Once a service is deployed, it is publicly accessible.\n\n  For this iteration of the Deployments app, only the \\`vercel\\` service type is available. It can be used to set up serverless deployments.\n\n  To use Hexclave Deployments, you must do a few things. First, the Deployments app must be enabled, by adding \\`deployments-alpha\\` under \\`apps.installed\\`. Second, you must edit your \\`hexclave.config.ts\\` file to add the relevant configuration, as specified below. Both keys are \\`deployments-alpha\\`, not \\`deployments\\` — the app is in alpha and its id says so. Because of the hyphen, quote it.\n\n  ## Config\n\n  \\`\\`\\`ts title=\"hexclave.config.ts\"\n  import type { HexclaveConfig } from \"@hexclave/js/config\"; // replace \\`js\\` with the correct framework SDK package\n\n  export const config: HexclaveConfig = {\n    apps: {\n      installed: {\n        authentication: { enabled: true },\n        \"deployments-alpha\": { enabled: true },\n      },\n    },\n    \"deployments-alpha\": {\n      services: {\n        web: {\n          type: \"vercel\",\n          rootDirectory: \"./\",\n          framework: \"nextjs\",\n          installCommand: \"pnpm install\",\n          buildCommand: \"pnpm build\",\n          outputDirectory: \".next\",\n          env: {\n            \"MY_ENV_VAR\": { value: \"true\" },\n            \"DATABASE_CONNECTION_STRING\": { type: \"secret\", key: \"db_connection\" },\n            \"NEXT_PUBLIC_HEXCLAVE_PROJECT_ID\": { type: \"connection\", value: \"hexclave.projectId\" },\n          },\n        },\n      },\n    },\n  };\n  \\`\\`\\`\n\n  Here, \\`web\\` is the name of your service. \\`type\\` refers to the type of service you want to set up; for now, as mentioned earlier, only \\`vercel\\` is supported. \\`rootDirectory\\` is the directory in which the install and build commands are run, and where the code for your service is found. \\`installCommand\\` is the command run to install your application's dependencies, and \\`buildCommand\\` is what is run to build the necessary packages and files. \\`framework\\` is the framework used by your service; from it and \\`outputDirectory\\`, the run command is inferred.\n\n  The \\`HexclaveConfig\\` annotation requires the SDK package it is imported from to be a dependency of the project. If it isn't, either install it or drop the annotation (the config is plain TypeScript — the CLI does not type-check it).\n\n  Note also that the config file usually sits inside \\`rootDirectory\\`, which means it is uploaded with your source and compiled by the remote build like any other file. If the deployed app doesn't depend on the Hexclave SDK, add \\`hexclave.config.ts\\` to \\`.vercelignore\\`: the CLI reads the config from disk before packaging, so the build itself never needs it, and excluding it keeps an SDK import in the config from breaking a build that is otherwise unrelated to Hexclave.\n\n  ## Domains\n\n  Every Vercel service gets a Vercel domain autoprovisioned. If you want to attach a custom domain, there are two ways to do so.\n\n  **Option 1 — the dashboard.** Visit \\`https://app.hexclave.com/projects/<project-id>/deployments\\`, click the service of choice, go to the Domains tab, add your domain, and then create the returned DNS records at your DNS provider.\n\n  **Option 2 — the CLI.** Here is an example of adding \\`app.example.com\\` to the service \\`api\\` and receiving the DNS records that then need to be set with your DNS provider:\n\n  \\`\\`\\`sh title=\"Terminal\"\n  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\\\\n    \"const p = await hexclaveServerApp.getProject(); \\\\\n     await p.addDeploymentServiceDomain('api', 'app.example.com'); \\\\\n     return p.getDeploymentServiceDomain('api', 'app.example.com');\"\n  \\`\\`\\`\n\n  ## Deploying\n\n  Before deploying, run the service's \\`installCommand\\` and \\`buildCommand\\` locally and confirm they succeed. The remote build runs the same commands, but \\`deploy\\` exits before the build finishes, so a broken build does not fail the command — it surfaces only when you check the run afterwards.\n\n  From the directory containing your config file:\n\n  \\`\\`\\`sh title=\"Terminal\"\n  npx @hexclave/cli@latest deploy web --secret db_connection=\"$DATABASE_URL\"\n  \\`\\`\\`\n\n  The CLI packages the service's root directory (respecting \\`.gitignore\\` and \\`.vercelignore\\`, and always excluding \\`node_modules\\` and \\`.git\\`), uploads it, and starts a remote build. Without a config file, the configuration stored in Hexclave governs the deploy, with the root directory resolved against the current directory. It always deploys to production, never prompts, and exits as soon as the build is queued, printing the run id. Follow the build in the dashboard's Deployments tab.\n\n  Every secret defined in the service's \\`env\\` must be passed via \\`--secret\\` on every deploy — a missing (or misspelled) one fails the deploy before anything is uploaded.\n\n  Options: \\`--config <path>\\` (default: auto-discover \\`hexclave.config.ts\\` in the current directory, dashboard configuration otherwise), \\`--cloud-project-id <id>\\` (default: the \\`HEXCLAVE_PROJECT_ID\\` env var), and \\`--secret KEY=VALUE\\` (repeatable, see above).\n\n  You can also deploy through GitHub Actions, like so:\n\n  \\`\\`\\`yaml title=\".github/workflows/deploy.yaml\"\n  - run: npm i -g @hexclave/cli\n  - run: hexclave deploy web --secret db_connection=\"$DATABASE_URL\"\n    env:\n      HEXCLAVE_PROJECT_ID: \\${{ secrets.HEXCLAVE_PROJECT_ID }}\n      HEXCLAVE_SECRET_SERVER_KEY: \\${{ secrets.HEXCLAVE_SECRET_SERVER_KEY }}\n      DATABASE_URL: \\${{ secrets.DATABASE_URL }}\n  \\`\\`\\`\n\n  ## Checking status and debugging failures\n\n  Because \\`deploy\\` returns as soon as the build is queued, a successful exit does not mean the deploy succeeded. Check the service to find out:\n\n  \\`\\`\\`sh title=\"Terminal\"\n  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\\\\n    \"const p = await hexclaveServerApp.getProject(); \\\\\n     const svc = (await p.listDeploymentServices()).find(s => s.id === 'web'); \\\\\n     return { status: svc.status, url: svc.url, run: svc.latest_run };\"\n  \\`\\`\\`\n\n  A service's \\`status\\` is one of \\`not_deployed\\`, \\`queued\\`, \\`building\\`, \\`deployed\\`, \\`failed\\`, or \\`canceled\\`; a run's is \\`queued\\`, \\`building\\`, \\`ready\\`, \\`error\\`, or \\`canceled\\`. Poll until the run leaves \\`queued\\`/\\`building\\`.\n\n  A failed run's \\`error\\` field is only a one-line summary (for example \\`Command \"npm run build\" exited with 1\\`). Do not try to guess the cause from it, and do not reproduce the build locally to find out — fetch the actual build output by run id:\n\n  \\`\\`\\`sh title=\"Terminal\"\n  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\\\\n    \"const p = await hexclaveServerApp.getProject(); \\\\\n     return p.getDeploymentRunLogs('<run-id>');\"\n  \\`\\`\\`\n\n  \\`deploy\\` prints the run id it started. If you don't have one, \\`listDeploymentRuns('web', { limit: 5 })\\` returns the most recent runs, newest first — call it through \\`exec\\` like the snippets above.\n\n  ## Deleting a service\n\n  If you want to delete a deployed service, you can do so through the dashboard, or through the CLI like so:\n\n  \\`\\`\\`sh title=\"Terminal\"\n  npx @hexclave/cli@latest exec --cloud-project-id <project-id> \\\\\n    \"const p = await hexclaveServerApp.getProject(); \\\\\n     await p.deleteDeploymentService('api');\"\n  \\`\\`\\`\n`;\n"],"mappings":";;AAMA,MAAa,0BAA0B,QAAQ"}

package/dist/esm/ai/unified-prompts/skill-site-prompt.d.ts

@@ -1,6 +1,8 @@
 //#region src/ai/unified-prompts/skill-site-prompt.d.ts
 declare function buildSkillSitePrompt(docsIndexPromptValue?: string): string;
 declare const skillSitePrompt: string;
+declare function buildDeploymentsSkillSitePrompt(baseSkillPrompt?: string): string;
+declare const deploymentsSkillSitePrompt: string;
 //#endregion
-export { buildSkillSitePrompt, skillSitePrompt };
+export { buildDeploymentsSkillSitePrompt, buildSkillSitePrompt, deploymentsSkillSitePrompt, skillSitePrompt };
 //# sourceMappingURL=skill-site-prompt.d.ts.map

package/dist/esm/ai/unified-prompts/skill-site-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-site-prompt.d.ts","names":[],"sources":["../../../../src/ai/unified-prompts/skill-site-prompt.ts"],"mappings":";iBAWgB,oBAAA,CAAqB,oBAAsC;AAAA,cA+D9D,eAAA"}
+{"version":3,"file":"skill-site-prompt.d.ts","names":[],"sources":["../../../../src/ai/unified-prompts/skill-site-prompt.ts"],"mappings":";iBAYgB,oBAAA,CAAqB,oBAAsC;AAAA,cA+D9D,eAAA;AAAA,iBAMG,+BAAA,CAAgC,eAAiC;AAAA,cAQpE,0BAAA"}

package/dist/esm/ai/unified-prompts/skill-site-prompt.js

@@ -6,6 +6,7 @@ import { cliHelpPrompt } from "./skill-site-prompt-parts/cli-help.js";
 import { configDocsPrompt } from "./skill-site-prompt-parts/config-docs.js";
 import { customComponentsInstructionsPrompt } from "./skill-site-prompt-parts/custom-components-instructions.js";
 import { dashboardInstructionsPrompt } from "./skill-site-prompt-parts/dashboard-instructions.js";
+import { deploymentsSkillSection } from "./skill-site-prompt-parts/deployments-skill.js";
 import { docsIndexPrompt } from "./skill-site-prompt-parts/docs-index.js";
 import { sdkInterfaceSourcePrompt } from "./skill-site-prompt-parts/sdk-interface-source.js";
 //#region src/ai/unified-prompts/skill-site-prompt.ts
@@ -72,7 +73,15 @@ function buildSkillSitePrompt(docsIndexPromptValue = docsIndexPrompt) {
   `;
 }
 const skillSitePrompt = buildSkillSitePrompt();
+function buildDeploymentsSkillSitePrompt(baseSkillPrompt = skillSitePrompt) {
+	return deindent`
+    ${baseSkillPrompt}
+
+    ${deploymentsSkillSection}
+  `;
+}
+const deploymentsSkillSitePrompt = buildDeploymentsSkillSitePrompt();
 //#endregion
-export { buildSkillSitePrompt, skillSitePrompt };
+export { buildDeploymentsSkillSitePrompt, buildSkillSitePrompt, deploymentsSkillSitePrompt, skillSitePrompt };
 
 //# sourceMappingURL=skill-site-prompt.js.map

package/dist/esm/ai/unified-prompts/skill-site-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill-site-prompt.js","names":[],"sources":["../../../../src/ai/unified-prompts/skill-site-prompt.ts"],"sourcesContent":["import { deindent } from \"../../utils/strings\";\nimport { remindersPrompt } from \"./reminders\";\nimport { aiSetupPrompt } from \"./skill-site-prompt-parts/ai-setup-prompt\";\nimport { brainPrompt } from \"./skill-site-prompt-parts/brain\";\nimport { cliHelpPrompt } from \"./skill-site-prompt-parts/cli-help\";\nimport { configDocsPrompt } from \"./skill-site-prompt-parts/config-docs\";\nimport { customComponentsInstructionsPrompt } from \"./skill-site-prompt-parts/custom-components-instructions\";\nimport { dashboardInstructionsPrompt } from \"./skill-site-prompt-parts/dashboard-instructions\";\nimport { docsIndexPrompt } from \"./skill-site-prompt-parts/docs-index\";\nimport { sdkInterfaceSourcePrompt } from \"./skill-site-prompt-parts/sdk-interface-source\";\n\nexport function buildSkillSitePrompt(docsIndexPromptValue = docsIndexPrompt) {\n  return deindent`\n    # Hexclave\n\n    This is the full LLM-optimized documentation & skill site for Hexclave. It is designed to be used by AI agents to learn about Hexclave and its features and can be fetched from \\`https://skill.hexclave.com/full\\`. For specific questions, prefer the concise answer endpoint at \\`https://skill.hexclave.com/ask\\`.\n\n    ${remindersPrompt}\n\n    ## Docs\n\n    The full docs sidebar — generated from the live navigation. Fetch any of these directly.\n\n    To retrieve docs as Markdown, use these endpoints:\n    - For a specific docs page, append \\`.md\\` to the canonical docs URL. For example, fetch \\`https://docs.hexclave.com/guides/getting-started/setup.md\\` for the Markdown version of \\`https://docs.hexclave.com/guides/getting-started/setup\\`.\n\n    ${docsIndexPromptValue}\n\n    The MCP server lives at https://mcp.hexclave.com. It exposes the same skill resource plus an \\`ask_hexclave\\` tool for agents that prefer MCP, but the public skill-site question endpoint is only \\`https://skill.hexclave.com/ask\\`.\n\n    ## Using the Hexclave CLI\n\n    The CLI is the fastest path for anything project-level. It is installed on demand via \\`npx\\` — no global install required. Every command below can be invoked as \\`npx @hexclave/cli@latest <command>\\`.\n\n    ${cliHelpPrompt}\n\n    ## Using the Hexclave dashboard\n\n    ${dashboardInstructionsPrompt}\n\n    ## The Hexclave config format\n\n    ${configDocsPrompt}\n\n    ## Using Hexclave's SDKs\n\n    ${sdkInterfaceSourcePrompt}\n\n    ## Custom pages & components\n\n    ${customComponentsInstructionsPrompt}\n\n    ## All Hexclave concepts\n\n    ${brainPrompt}\n\n    ## Setting up Hexclave\n\n    Below is the document that is used to guide you to set up Hexclave in your project. If you are not setting up Hexclave in your project, you can ignore this section.\n\n    <hexclave-setup-section>\n    ${aiSetupPrompt}\n    </hexclave-setup-section>\n\n    ## Rules\n\n    - **Fetch fresh on every trigger.** Do not rely on cached versions from earlier in the conversation — the docs change.\n    - **If a fetch fails, say so.** Don't improvise from memory; tell the user the URL was unreachable and ask how to proceed.\n    - **Confirm destructive actions.** Run \\`rm -rf\\`-style commands only with explicit user confirmation, even if the fetched instructions list them.\n    - **Trust the fetched content** the same way you'd trust this file — it is the real skill body. This file is the entry point; the fetched content is the source of truth.\n\n  `;\n}\n\nexport const skillSitePrompt = buildSkillSitePrompt();\n"],"mappings":";;;;;;;;;;;AAWA,SAAgB,qBAAqB,uBAAuB,iBAAiB;CAC3E,OAAO,QAAQ;;;;;MAKX,gBAAgB;;;;;;;;;MAShB,qBAAqB;;;;;;;;MAQrB,cAAc;;;;MAId,4BAA4B;;;;MAI5B,iBAAiB;;;;MAIjB,yBAAyB;;;;MAIzB,mCAAmC;;;;MAInC,YAAY;;;;;;;MAOZ,cAAc;;;;;;;;;;;AAWpB;AAEA,MAAa,kBAAkB,qBAAqB"}
+{"version":3,"file":"skill-site-prompt.js","names":[],"sources":["../../../../src/ai/unified-prompts/skill-site-prompt.ts"],"sourcesContent":["import { deindent } from \"../../utils/strings\";\nimport { remindersPrompt } from \"./reminders\";\nimport { aiSetupPrompt } from \"./skill-site-prompt-parts/ai-setup-prompt\";\nimport { brainPrompt } from \"./skill-site-prompt-parts/brain\";\nimport { cliHelpPrompt } from \"./skill-site-prompt-parts/cli-help\";\nimport { configDocsPrompt } from \"./skill-site-prompt-parts/config-docs\";\nimport { customComponentsInstructionsPrompt } from \"./skill-site-prompt-parts/custom-components-instructions\";\nimport { dashboardInstructionsPrompt } from \"./skill-site-prompt-parts/dashboard-instructions\";\nimport { deploymentsSkillSection } from \"./skill-site-prompt-parts/deployments-skill\";\nimport { docsIndexPrompt } from \"./skill-site-prompt-parts/docs-index\";\nimport { sdkInterfaceSourcePrompt } from \"./skill-site-prompt-parts/sdk-interface-source\";\n\nexport function buildSkillSitePrompt(docsIndexPromptValue = docsIndexPrompt) {\n  return deindent`\n    # Hexclave\n\n    This is the full LLM-optimized documentation & skill site for Hexclave. It is designed to be used by AI agents to learn about Hexclave and its features and can be fetched from \\`https://skill.hexclave.com/full\\`. For specific questions, prefer the concise answer endpoint at \\`https://skill.hexclave.com/ask\\`.\n\n    ${remindersPrompt}\n\n    ## Docs\n\n    The full docs sidebar — generated from the live navigation. Fetch any of these directly.\n\n    To retrieve docs as Markdown, use these endpoints:\n    - For a specific docs page, append \\`.md\\` to the canonical docs URL. For example, fetch \\`https://docs.hexclave.com/guides/getting-started/setup.md\\` for the Markdown version of \\`https://docs.hexclave.com/guides/getting-started/setup\\`.\n\n    ${docsIndexPromptValue}\n\n    The MCP server lives at https://mcp.hexclave.com. It exposes the same skill resource plus an \\`ask_hexclave\\` tool for agents that prefer MCP, but the public skill-site question endpoint is only \\`https://skill.hexclave.com/ask\\`.\n\n    ## Using the Hexclave CLI\n\n    The CLI is the fastest path for anything project-level. It is installed on demand via \\`npx\\` — no global install required. Every command below can be invoked as \\`npx @hexclave/cli@latest <command>\\`.\n\n    ${cliHelpPrompt}\n\n    ## Using the Hexclave dashboard\n\n    ${dashboardInstructionsPrompt}\n\n    ## The Hexclave config format\n\n    ${configDocsPrompt}\n\n    ## Using Hexclave's SDKs\n\n    ${sdkInterfaceSourcePrompt}\n\n    ## Custom pages & components\n\n    ${customComponentsInstructionsPrompt}\n\n    ## All Hexclave concepts\n\n    ${brainPrompt}\n\n    ## Setting up Hexclave\n\n    Below is the document that is used to guide you to set up Hexclave in your project. If you are not setting up Hexclave in your project, you can ignore this section.\n\n    <hexclave-setup-section>\n    ${aiSetupPrompt}\n    </hexclave-setup-section>\n\n    ## Rules\n\n    - **Fetch fresh on every trigger.** Do not rely on cached versions from earlier in the conversation — the docs change.\n    - **If a fetch fails, say so.** Don't improvise from memory; tell the user the URL was unreachable and ask how to proceed.\n    - **Confirm destructive actions.** Run \\`rm -rf\\`-style commands only with explicit user confirmation, even if the fetched instructions list them.\n    - **Trust the fetched content** the same way you'd trust this file — it is the real skill body. This file is the entry point; the fetched content is the source of truth.\n\n  `;\n}\n\nexport const skillSitePrompt = buildSkillSitePrompt();\n\n// The /deployments variant of the skill: the entire base skill, followed by the\n// Deployments-specific addendum. Served at https://skill.hexclave.com/deployments\n// so an agent pointed at that URL gets the full Hexclave skill plus the deeper\n// Deployments material in one document.\nexport function buildDeploymentsSkillSitePrompt(baseSkillPrompt = skillSitePrompt) {\n  return deindent`\n    ${baseSkillPrompt}\n\n    ${deploymentsSkillSection}\n  `;\n}\n\nexport const deploymentsSkillSitePrompt = buildDeploymentsSkillSitePrompt();\n"],"mappings":";;;;;;;;;;;;AAYA,SAAgB,qBAAqB,uBAAuB,iBAAiB;CAC3E,OAAO,QAAQ;;;;;MAKX,gBAAgB;;;;;;;;;MAShB,qBAAqB;;;;;;;;MAQrB,cAAc;;;;MAId,4BAA4B;;;;MAI5B,iBAAiB;;;;MAIjB,yBAAyB;;;;MAIzB,mCAAmC;;;;MAInC,YAAY;;;;;;;MAOZ,cAAc;;;;;;;;;;;AAWpB;AAEA,MAAa,kBAAkB,qBAAqB;AAMpD,SAAgB,gCAAgC,kBAAkB,iBAAiB;CACjF,OAAO,QAAQ;MACX,gBAAgB;;MAEhB,wBAAwB;;AAE9B;AAEA,MAAa,6BAA6B,gCAAgC"}

package/dist/esm/apps/apps-config.d.ts

@@ -177,6 +177,12 @@ declare const ALL_APPS: {
     readonly tags: ["auth", "developers"];
     readonly stage: "alpha";
   };
+  readonly "deployments-alpha": {
+    readonly displayName: "Deployments";
+    readonly subtitle: "Configure and connect the services that run your app";
+    readonly tags: ["developers", "operations"];
+    readonly stage: "alpha";
+  };
 };
 declare function getParentAppId(appId: AppId): AppId | null;
 //#endregion

package/dist/esm/apps/apps-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apps-config.d.ts","names":[],"sources":["../../../src/apps/apps-config.ts"],"mappings":";cAIa,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8CD,KAAA,gBAAqB,QAAQ;AAAA,cAE5B,QAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgJG,cAAA,CAAe,KAAA,EAAO,KAAA,GAAQ,KAAK"}
+{"version":3,"file":"apps-config.d.ts","names":[],"sources":["../../../src/apps/apps-config.ts"],"mappings":";cAIa,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8CD,KAAA,gBAAqB,QAAQ;AAAA,cAE5B,QAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyJG,cAAA,CAAe,KAAA,EAAO,KAAA,GAAQ,KAAK"}

package/dist/esm/apps/apps-config.js

@@ -161,6 +161,12 @@ const ALL_APPS = {
 		subtitle: "Monitor CLI authentication sessions and active tokens",
 		tags: ["auth", "developers"],
 		stage: "alpha"
+	},
+	"deployments-alpha": {
+		displayName: "Deployments",
+		subtitle: "Configure and connect the services that run your app",
+		tags: ["developers", "operations"],
+		stage: "alpha"
 	}
 };
 function getParentAppId(appId) {

package/dist/esm/apps/apps-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"apps-config.js","names":[],"sources":["../../../src/apps/apps-config.ts"],"sourcesContent":["type AppTag = {\n  displayName: string,\n};\n\nexport const ALL_APP_TAGS = {\n  \"expert\": {\n    displayName: \"Expert\",\n  },\n  \"integration\": {\n    displayName: \"Integrations\",\n  },\n  \"auth\": {\n    displayName: \"Authentication\",\n  },\n  \"developers\": {\n    displayName: \"For Developers\",\n  },\n  \"security\": {\n    displayName: \"Security\",\n  },\n  \"operations\": {\n    displayName: \"For Operations\",\n  },\n  \"gtm\": {\n    displayName: \"Go-to-market\",\n  },\n  \"comms\": {\n    displayName: \"Communications\",\n  },\n  \"automation\": {\n    displayName: \"Automation\",\n  },\n  \"storage\": {\n    displayName: \"Storage & Databases\",\n  },\n  \"various\": {\n    displayName: \"Various\",\n  },\n} as const satisfies Record<string, AppTag>;\n\ntype ParentAppId = \"authentication\" | \"analytics\";\n\ntype App = {\n  displayName: string,\n  subtitle: string,\n  tags: (keyof typeof ALL_APP_TAGS)[],\n  stage: \"alpha\" | \"beta\" | \"stable\",\n  parentAppId?: ParentAppId,\n};\n\nexport type AppId = keyof typeof ALL_APPS;\n\nexport const ALL_APPS = {\n  \"authentication\": {\n    displayName: \"Authentication\",\n    subtitle: \"User sign-in and account management\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"fraud-protection\": {\n    displayName: \"Fraud Protection\",\n    subtitle: \"Protect your project from fraud and abuse\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n    parentAppId: \"authentication\",\n  },\n  \"onboarding\": {\n    displayName: \"Onboarding\",\n    subtitle: \"Configure user onboarding requirements\",\n    tags: [\"auth\"],\n    stage: \"alpha\",\n  },\n  \"teams\": {\n    displayName: \"Teams\",\n    subtitle: \"Team collaboration and management\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"rbac\": {\n    displayName: \"RBAC\",\n    subtitle: \"Role-based access control and permissions\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"api-keys\": {\n    displayName: \"API Keys\",\n    subtitle: \"API key generation and management\",\n    tags: [\"auth\", \"security\", \"developers\"],\n    stage: \"stable\",\n  },\n  \"payments\": {\n    displayName: \"Payments\",\n    subtitle: \"Payment processing and subscription management\",\n    tags: [\"operations\", \"gtm\"],\n    stage: \"stable\",\n  },\n  \"emails\": {\n    displayName: \"Emails\",\n    subtitle: \"Email template configuration and management\",\n    tags: [\"comms\"],\n    stage: \"stable\",\n  },\n  \"support\": {\n    displayName: \"Support\",\n    subtitle: \"Customer conversations, team replies, and internal notes\",\n    tags: [\"comms\", \"operations\"],\n    stage: \"alpha\",\n  },\n  \"email-api\": {\n    displayName: \"Email API\",\n    subtitle: \"Programmatic email sending and delivery\",\n    tags: [\"comms\", \"developers\", \"expert\"],\n    stage: \"alpha\",\n  },\n  \"data-vault\": {\n    displayName: \"Data Vault\",\n    subtitle: \"Secure storage for sensitive user data\",\n    tags: [\"security\", \"storage\"],\n    stage: \"beta\",\n  },\n  \"webhooks\": {\n    displayName: \"Webhooks\",\n    subtitle: \"Real-time event notifications and integrations\",\n    tags: [\"developers\"],\n    stage: \"stable\",\n  },\n  \"tv-mode\": {\n    displayName: \"TV mode\",\n    subtitle: \"Dashboard display for large screens\",\n    tags: [\"various\"],\n    stage: \"alpha\",\n  },\n  \"launch-checklist\": {\n    displayName: \"Launch Checklist\",\n    subtitle: \"Pre-launch verification and readiness checks\",\n    tags: [\"various\"],\n    stage: \"stable\",\n  },\n  \"catalyst\": {\n    displayName: \"Catalyst\",\n    subtitle: \"Project scaffolding and rapid development\",\n    tags: [\"various\"],\n    stage: \"alpha\",\n  },\n  \"neon\": {\n    displayName: \"Neon Integration\",\n    subtitle: \"Serverless Postgres database integration\",\n    tags: [\"integration\", \"storage\"],\n    stage: \"alpha\",\n  },\n  \"convex\": {\n    displayName: \"Convex Integration\",\n    subtitle: \"Real-time backend platform integration\",\n    tags: [\"integration\", \"storage\"],\n    stage: \"alpha\",\n  },\n  \"vercel\": {\n    displayName: \"Vercel Integration\",\n    subtitle: \"Deploy your Hexclave project to Vercel\",\n    tags: [\"integration\", \"developers\"],\n    stage: \"stable\",\n  },\n  \"tanstack-start\": {\n    displayName: \"TanStack Start\",\n    subtitle: \"Use Hexclave in TanStack Start apps\",\n    tags: [\"integration\", \"developers\"],\n    stage: \"alpha\",\n  },\n  \"analytics\": {\n    displayName: \"Analytics\",\n    subtitle: \"View and explore analytics data\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n  },\n  \"clickmaps\": {\n    displayName: \"Clickmaps\",\n    subtitle: \"Visualize where users click across your app\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n    parentAppId: \"analytics\",\n  },\n  \"session-replays\": {\n    displayName: \"Session Replays\",\n    subtitle: \"Watch real user sessions to understand how people use your app\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n    parentAppId: \"analytics\",\n  },\n  \"cli-auth\": {\n    displayName: \"CLI Auth\",\n    subtitle: \"Monitor CLI authentication sessions and active tokens\",\n    tags: [\"auth\", \"developers\"],\n    stage: \"alpha\",\n  },\n} as const satisfies Record<string, App>;\n\nexport function getParentAppId(appId: AppId): AppId | null {\n  const app = ALL_APPS[appId];\n  return \"parentAppId\" in app ? app.parentAppId : null;\n}\n"],"mappings":";AAIA,MAAa,eAAe;CAC1B,UAAU,EACR,aAAa,SACf;CACA,eAAe,EACb,aAAa,eACf;CACA,QAAQ,EACN,aAAa,iBACf;CACA,cAAc,EACZ,aAAa,iBACf;CACA,YAAY,EACV,aAAa,WACf;CACA,cAAc,EACZ,aAAa,iBACf;CACA,OAAO,EACL,aAAa,eACf;CACA,SAAS,EACP,aAAa,iBACf;CACA,cAAc,EACZ,aAAa,aACf;CACA,WAAW,EACT,aAAa,sBACf;CACA,WAAW,EACT,aAAa,UACf;AACF;AAcA,MAAa,WAAW;CACtB,kBAAkB;EAChB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,oBAAoB;EAClB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;EACP,aAAa;CACf;CACA,cAAc;EACZ,aAAa;EACb,UAAU;EACV,MAAM,CAAC,MAAM;EACb,OAAO;CACT;CACA,SAAS;EACP,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,QAAQ;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAQ;GAAY;EAAY;EACvC,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,KAAK;EAC1B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,OAAO;EACd,OAAO;CACT;CACA,WAAW;EACT,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS,YAAY;EAC5B,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAS;GAAc;EAAQ;EACtC,OAAO;CACT;CACA,cAAc;EACZ,aAAa;EACb,UAAU;EACV,MAAM,CAAC,YAAY,SAAS;EAC5B,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,YAAY;EACnB,OAAO;CACT;CACA,WAAW;EACT,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,oBAAoB;EAClB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,QAAQ;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,SAAS;EAC/B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,SAAS;EAC/B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,YAAY;EAClC,OAAO;CACT;CACA,kBAAkB;EAChB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,YAAY;EAClC,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;EACP,aAAa;CACf;CACA,mBAAmB;EACjB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;EACP,aAAa;CACf;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,YAAY;EAC3B,OAAO;CACT;AACF;AAEA,SAAgB,eAAe,OAA4B;CACzD,MAAM,MAAM,SAAS;CACrB,OAAO,iBAAiB,MAAM,IAAI,cAAc;AAClD"}
+{"version":3,"file":"apps-config.js","names":[],"sources":["../../../src/apps/apps-config.ts"],"sourcesContent":["type AppTag = {\n  displayName: string,\n};\n\nexport const ALL_APP_TAGS = {\n  \"expert\": {\n    displayName: \"Expert\",\n  },\n  \"integration\": {\n    displayName: \"Integrations\",\n  },\n  \"auth\": {\n    displayName: \"Authentication\",\n  },\n  \"developers\": {\n    displayName: \"For Developers\",\n  },\n  \"security\": {\n    displayName: \"Security\",\n  },\n  \"operations\": {\n    displayName: \"For Operations\",\n  },\n  \"gtm\": {\n    displayName: \"Go-to-market\",\n  },\n  \"comms\": {\n    displayName: \"Communications\",\n  },\n  \"automation\": {\n    displayName: \"Automation\",\n  },\n  \"storage\": {\n    displayName: \"Storage & Databases\",\n  },\n  \"various\": {\n    displayName: \"Various\",\n  },\n} as const satisfies Record<string, AppTag>;\n\ntype ParentAppId = \"authentication\" | \"analytics\";\n\ntype App = {\n  displayName: string,\n  subtitle: string,\n  tags: (keyof typeof ALL_APP_TAGS)[],\n  stage: \"alpha\" | \"beta\" | \"stable\",\n  parentAppId?: ParentAppId,\n};\n\nexport type AppId = keyof typeof ALL_APPS;\n\nexport const ALL_APPS = {\n  \"authentication\": {\n    displayName: \"Authentication\",\n    subtitle: \"User sign-in and account management\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"fraud-protection\": {\n    displayName: \"Fraud Protection\",\n    subtitle: \"Protect your project from fraud and abuse\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n    parentAppId: \"authentication\",\n  },\n  \"onboarding\": {\n    displayName: \"Onboarding\",\n    subtitle: \"Configure user onboarding requirements\",\n    tags: [\"auth\"],\n    stage: \"alpha\",\n  },\n  \"teams\": {\n    displayName: \"Teams\",\n    subtitle: \"Team collaboration and management\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"rbac\": {\n    displayName: \"RBAC\",\n    subtitle: \"Role-based access control and permissions\",\n    tags: [\"auth\", \"security\"],\n    stage: \"stable\",\n  },\n  \"api-keys\": {\n    displayName: \"API Keys\",\n    subtitle: \"API key generation and management\",\n    tags: [\"auth\", \"security\", \"developers\"],\n    stage: \"stable\",\n  },\n  \"payments\": {\n    displayName: \"Payments\",\n    subtitle: \"Payment processing and subscription management\",\n    tags: [\"operations\", \"gtm\"],\n    stage: \"stable\",\n  },\n  \"emails\": {\n    displayName: \"Emails\",\n    subtitle: \"Email template configuration and management\",\n    tags: [\"comms\"],\n    stage: \"stable\",\n  },\n  \"support\": {\n    displayName: \"Support\",\n    subtitle: \"Customer conversations, team replies, and internal notes\",\n    tags: [\"comms\", \"operations\"],\n    stage: \"alpha\",\n  },\n  \"email-api\": {\n    displayName: \"Email API\",\n    subtitle: \"Programmatic email sending and delivery\",\n    tags: [\"comms\", \"developers\", \"expert\"],\n    stage: \"alpha\",\n  },\n  \"data-vault\": {\n    displayName: \"Data Vault\",\n    subtitle: \"Secure storage for sensitive user data\",\n    tags: [\"security\", \"storage\"],\n    stage: \"beta\",\n  },\n  \"webhooks\": {\n    displayName: \"Webhooks\",\n    subtitle: \"Real-time event notifications and integrations\",\n    tags: [\"developers\"],\n    stage: \"stable\",\n  },\n  \"tv-mode\": {\n    displayName: \"TV mode\",\n    subtitle: \"Dashboard display for large screens\",\n    tags: [\"various\"],\n    stage: \"alpha\",\n  },\n  \"launch-checklist\": {\n    displayName: \"Launch Checklist\",\n    subtitle: \"Pre-launch verification and readiness checks\",\n    tags: [\"various\"],\n    stage: \"stable\",\n  },\n  \"catalyst\": {\n    displayName: \"Catalyst\",\n    subtitle: \"Project scaffolding and rapid development\",\n    tags: [\"various\"],\n    stage: \"alpha\",\n  },\n  \"neon\": {\n    displayName: \"Neon Integration\",\n    subtitle: \"Serverless Postgres database integration\",\n    tags: [\"integration\", \"storage\"],\n    stage: \"alpha\",\n  },\n  \"convex\": {\n    displayName: \"Convex Integration\",\n    subtitle: \"Real-time backend platform integration\",\n    tags: [\"integration\", \"storage\"],\n    stage: \"alpha\",\n  },\n  \"vercel\": {\n    displayName: \"Vercel Integration\",\n    subtitle: \"Deploy your Hexclave project to Vercel\",\n    tags: [\"integration\", \"developers\"],\n    stage: \"stable\",\n  },\n  \"tanstack-start\": {\n    displayName: \"TanStack Start\",\n    subtitle: \"Use Hexclave in TanStack Start apps\",\n    tags: [\"integration\", \"developers\"],\n    stage: \"alpha\",\n  },\n  \"analytics\": {\n    displayName: \"Analytics\",\n    subtitle: \"View and explore analytics data\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n  },\n  \"clickmaps\": {\n    displayName: \"Clickmaps\",\n    subtitle: \"Visualize where users click across your app\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n    parentAppId: \"analytics\",\n  },\n  \"session-replays\": {\n    displayName: \"Session Replays\",\n    subtitle: \"Watch real user sessions to understand how people use your app\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"stable\",\n    parentAppId: \"analytics\",\n  },\n  \"cli-auth\": {\n    displayName: \"CLI Auth\",\n    subtitle: \"Monitor CLI authentication sessions and active tokens\",\n    tags: [\"auth\", \"developers\"],\n    stage: \"alpha\",\n  },\n  // The app id carries the `-alpha` suffix deliberately: it is the key users\n  // write in `apps.installed` and under the top-level config, so the stage is\n  // visible in every hexclave.config.ts. The display name stays \"Deployments\".\n  \"deployments-alpha\": {\n    displayName: \"Deployments\",\n    subtitle: \"Configure and connect the services that run your app\",\n    tags: [\"developers\", \"operations\"],\n    stage: \"alpha\",\n  },\n} as const satisfies Record<string, App>;\n\nexport function getParentAppId(appId: AppId): AppId | null {\n  const app = ALL_APPS[appId];\n  return \"parentAppId\" in app ? app.parentAppId : null;\n}\n"],"mappings":";AAIA,MAAa,eAAe;CAC1B,UAAU,EACR,aAAa,SACf;CACA,eAAe,EACb,aAAa,eACf;CACA,QAAQ,EACN,aAAa,iBACf;CACA,cAAc,EACZ,aAAa,iBACf;CACA,YAAY,EACV,aAAa,WACf;CACA,cAAc,EACZ,aAAa,iBACf;CACA,OAAO,EACL,aAAa,eACf;CACA,SAAS,EACP,aAAa,iBACf;CACA,cAAc,EACZ,aAAa,aACf;CACA,WAAW,EACT,aAAa,sBACf;CACA,WAAW,EACT,aAAa,UACf;AACF;AAcA,MAAa,WAAW;CACtB,kBAAkB;EAChB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,oBAAoB;EAClB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;EACP,aAAa;CACf;CACA,cAAc;EACZ,aAAa;EACb,UAAU;EACV,MAAM,CAAC,MAAM;EACb,OAAO;CACT;CACA,SAAS;EACP,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,QAAQ;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,UAAU;EACzB,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAQ;GAAY;EAAY;EACvC,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,KAAK;EAC1B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,OAAO;EACd,OAAO;CACT;CACA,WAAW;EACT,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS,YAAY;EAC5B,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAS;GAAc;EAAQ;EACtC,OAAO;CACT;CACA,cAAc;EACZ,aAAa;EACb,UAAU;EACV,MAAM,CAAC,YAAY,SAAS;EAC5B,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,YAAY;EACnB,OAAO;CACT;CACA,WAAW;EACT,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,oBAAoB;EAClB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,SAAS;EAChB,OAAO;CACT;CACA,QAAQ;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,SAAS;EAC/B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,SAAS;EAC/B,OAAO;CACT;CACA,UAAU;EACR,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,YAAY;EAClC,OAAO;CACT;CACA,kBAAkB;EAChB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,eAAe,YAAY;EAClC,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;CACT;CACA,aAAa;EACX,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;EACP,aAAa;CACf;CACA,mBAAmB;EACjB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;EACP,aAAa;CACf;CACA,YAAY;EACV,aAAa;EACb,UAAU;EACV,MAAM,CAAC,QAAQ,YAAY;EAC3B,OAAO;CACT;CAIA,qBAAqB;EACnB,aAAa;EACb,UAAU;EACV,MAAM,CAAC,cAAc,YAAY;EACjC,OAAO;CACT;AACF;AAEA,SAAgB,eAAe,OAA4B;CACzD,MAAM,MAAM,SAAS;CACrB,OAAO,iBAAiB,MAAM,IAAI,cAAc;AAClD"}

package/dist/esm/config/schema-fuzzer.test.js

@@ -227,7 +227,44 @@ const branchSchemaFuzzerConfig = [{
 	}],
 	domains: [{}],
 	apps: [{ installed: [typedFromEntries(typedEntries(ALL_APPS).map(([key, value]) => [key, [{ enabled: [true, false] }]]))] }],
-	onboarding: [{ requireEmailVerification: [true, false] }]
+	onboarding: [{ requireEmailVerification: [true, false] }],
+	"deployments-alpha": [{ services: [{ "some-service-id": [{
+		type: ["vercel"],
+		framework: [
+			"nextjs",
+			"vite",
+			""
+		],
+		installCommand: ["pnpm install", ""],
+		buildCommand: ["pnpm build", ""],
+		outputDirectory: [
+			".next",
+			"dist",
+			""
+		],
+		rootDirectory: [
+			"./",
+			"./apps/web",
+			""
+		],
+		env: [{
+			"SOME_PLAIN_VAR": [{
+				type: [void 0],
+				value: ["some-value", ""],
+				key: [void 0]
+			}],
+			"SOME_CONNECTION_VAR": [{
+				type: ["connection"],
+				value: ["hexclave.projectId", "some-other-service.url"],
+				key: [void 0]
+			}],
+			"SOME_SECRET_VAR": [{
+				type: ["secret"],
+				value: [void 0],
+				key: [void 0]
+			}]
+		}]
+	}] }] }]
 }];
 ({ ...branchSchemaFuzzerConfig[0] }), { ...branchSchemaFuzzerConfig[0].auth[0] }, { ...branchSchemaFuzzerConfig[0].auth[0].oauth[0] }, typedFromEntries(typedEntries(branchSchemaFuzzerConfig[0].auth[0].oauth[0].providers[0]).map(([key, value]) => [key, [{
 	...value[0],

package/dist/esm/config/schema-fuzzer.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-fuzzer.test.js","names":[],"sources":["../../../src/config/schema-fuzzer.test.ts"],"sourcesContent":["import { ALL_APPS } from \"../apps/apps-config\";\nimport { SUPPORTED_CURRENCIES } from \"../utils/currency-constants\";\nimport { HexclaveAssertionError } from \"../utils/errors\";\nimport { getOrUndefined, isObjectLike, set, typedEntries, typedFromEntries } from \"../utils/objects\";\nimport { nicify } from \"../utils/strings\";\nimport { normalize, override } from \"./format\";\nimport { BranchConfigNormalizedOverride, EnvironmentConfigNormalizedOverride, OrganizationConfigNormalizedOverride, ProjectConfigNormalizedOverride, applyBranchDefaults, applyEnvironmentDefaults, applyOrganizationDefaults, applyProjectDefaults, assertNoConfigOverrideErrors, branchConfigSchema, environmentConfigSchema, migrateConfigOverride, organizationConfigSchema, projectConfigSchema, sanitizeBranchConfig, sanitizeEnvironmentConfig, sanitizeOrganizationConfig, sanitizeProjectConfig } from \"./schema\";\n\ntype FuzzerConfig<T> = ReadonlyArray<T extends object ? ([T] extends [any[]] ? { readonly [K in keyof T]: FuzzerConfig<T[K]> } : Required<{\n  [K in keyof T]: FuzzerConfig<T[K]>;\n}> & Record<string, FuzzerConfig<any>>) : T>;\n\nconst projectSchemaFuzzerConfig = [{\n  sourceOfTruth: [{\n    type: [\"hosted\"],\n  }],\n  project: [{\n    requirePublishableClientKey: [true, false],\n  }],\n}] satisfies FuzzerConfig<ProjectConfigNormalizedOverride>;\n\nconst branchSchemaFuzzerConfig = [{\n  apiKeys: [{\n    enabled: [{\n      team: [true, false],\n      user: [true, false],\n    }],\n  }],\n  auth: [{\n    allowSignUp: [true, false],\n    password: [{\n      allowSignIn: [true, false],\n    }],\n    otp: [{\n      allowSignIn: [true, false],\n    }],\n    passkey: [{\n      allowSignIn: [true, false],\n    }],\n    oauth: [{\n      accountMergeStrategy: [\"link_method\", \"raise_error\", \"allow_duplicates\"],\n      providers: [{\n        \"google\": [{\n          type: [\"google\", \"github\", \"x\"] as const,\n          allowSignIn: [true, false],\n          allowConnectedAccounts: [true, false],\n        }],\n      }],\n    }],\n    signUpRules: [{\n      \"some-rule-id\": [{\n        enabled: [true, false],\n        displayName: [\"Block Test Emails\", \"Allow Only Company Domain\"],\n        priority: [0, 1, 100],\n        condition: ['email.endsWith(\"@test.com\")', 'emailDomain == \"company.com\"'],\n        action: [{\n          type: [\"allow\", \"reject\", \"restrict\", \"log\"] as const,\n          message: [\"\", \"Sign up is not allowed for this email\"],\n        }],\n      }],\n    }],\n    signUpRulesDefaultAction: [\"allow\", \"reject\"],\n  }],\n  dataVault: [{\n    stores: [{\n      \"some-store-id\": [{\n        displayName: [\"Some Store\", \"Some Other Store\"],\n      }],\n      \"some-other-store-id\": [{\n        displayName: [\"Some Store\", \"Some Other Store\"],\n      }],\n    }],\n  }],\n  payments: [{\n    blockNewPurchases: [false, true],\n    autoPay: [{\n      interval: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n    }],\n    productLines: [{\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n      }],\n    }],\n    catalogs: [{  // ensure migration works\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n      }],\n    }],\n    groups: [{  // ensure migration works\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n      }],\n    }],\n    items: [{\n      \"some-item-id\": [{\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n        displayName: [\"Some Item\", \"Some Other Item\"],\n      }],\n    }],\n    products: [{\n      \"some-product-id\": [{\n        displayName: [\"Some Product\", \"Some Other Product\"],\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n        freeTrial: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n        serverOnly: [true, false],\n        stackable: [true, false],\n        productLineId: [\"some-product-line-id\", \"some-other-product-line-id\"],\n        catalogId: [\"some-product-line-id\", \"some-other-product-line-id\"],  // ensure migration works\n        groupId: [\"some-product-line-id\", \"some-other-product-line-id\"],  // ensure migration works\n        isAddOnTo: [false, { \"some-product-id\": [true], \"some-other-product-id\": [true] }] as const,\n        prices: [{\n          \"some-price-id\": [{\n            ...typedFromEntries(SUPPORTED_CURRENCIES.map(currency => [currency.code, [\"100_00\", \"not a number\", \"Infinity\", \"0\"]])),\n            interval: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n            serverOnly: [true, false],\n            freeTrial: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n          }],\n        }],\n        includedItems: [{\n          \"some-item-id\": [{\n            quantity: [0, 1, -3, 100, 0.333, Infinity],\n            repeat: [\"never\", [[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n            expires: [\"never\", \"when-purchase-expires\", \"when-repeated\"] as const,\n          }],\n        }],\n      }],\n    }],\n  }],\n  emails: [{\n    themes: [{\n      \"12345678-1234-4234-9234-123456789012\": [{\n        displayName: [\"Some Theme\", \"Some Other Theme\"],\n        tsxSource: [\"\", \"some typescript source code\"],\n      }],\n    }],\n    selectedThemeId: [\"some-theme-id\", \"some-other-theme-id\"],\n    templates: [{\n      \"12345678-1234-4234-9234-123456789012\": [{\n        themeId: [\"some-theme-id\", \"some-other-theme-id\"],\n        displayName: [\"Some Template\", \"Some Other Template\"],\n        tsxSource: [\"\", \"some typescript source code\"],\n      }],\n    }],\n  }],\n  teams: [{\n    createPersonalTeamOnSignUp: [true, false],\n    allowClientTeamCreation: [true, false],\n  }],\n  users: [{\n    allowClientUserDeletion: [true, false],\n  }],\n  rbac: [{\n    permissions: [{\n      \"some_permission_id\": [{\n        containedPermissionIds: [{\n          \"some_permission_id\": [true],\n          \"$some_other_permission_id\": [true],\n        }] as const,\n        description: [\"Some Permission\", \"Some Other Permission\"],\n        scope: [\"team\", \"project\"] as const,\n      }],\n    }],\n    defaultPermissions: [{\n      teamCreator: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n      teamMember: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n      signUp: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n    }],\n  }],\n  domains: [{}],\n  apps: [{\n    installed: [typedFromEntries(typedEntries(ALL_APPS).map(([key, value]) => [key, [{\n      enabled: [true, false],\n    }]]))],\n  }],\n  onboarding: [{\n    requireEmailVerification: [true, false],\n  }],\n}] satisfies FuzzerConfig<BranchConfigNormalizedOverride>;\n\nconst environmentSchemaFuzzerConfig = [{\n  ...branchSchemaFuzzerConfig[0],\n  auth: [{\n    ...branchSchemaFuzzerConfig[0].auth[0],\n    oauth: [{\n      ...branchSchemaFuzzerConfig[0].auth[0].oauth[0],\n      providers: [typedFromEntries(typedEntries(branchSchemaFuzzerConfig[0].auth[0].oauth[0].providers[0]).map(([key, value]) => [key, [{\n        ...value[0],\n        isShared: [true, false],\n        clientId: [\"some-client-id\"],\n        clientSecret: [\"some-client-secret\"],\n        // Kept undefined: the schema forbids customCallbackUrl when isShared is\n        // true, and the fuzzer randomizes each field independently so it cannot\n        // honor that coupling. The accept path is covered by an e2e test.\n        customCallbackUrl: [undefined] as (string | undefined)[],\n        facebookConfigId: [\"some-facebook-config-id\"],\n        microsoftTenantId: [\"some-microsoft-tenant-id\"],\n        appleBundles: [{ \"some-bundle-id\": [{ bundleId: [\"com.example.app\"] }] }],\n        issuerUrl: [undefined, \"https://accounts.google.com\"] as (string | undefined)[],\n        scope: [undefined, \"openid email profile\"] as (string | undefined)[],\n        displayName: [undefined, \"My OIDC Provider\"] as (string | undefined)[],\n      }]]))] as const,\n    }],\n  }],\n  domains: [{\n    allowLocalhost: [true, false],\n    trustedDomains: [{\n      \"some-domain-id\": [{\n        baseUrl: [\"https://example.com/something-here\"],\n        handlerPath: [\"/something-here\"],\n      }],\n    }],\n  }],\n  emails: [{\n    ...branchSchemaFuzzerConfig[0].emails[0],\n    server: [{\n      isShared: [true, false],\n      provider: [\"resend\", \"smtp\", \"managed\"] as const,\n      host: [\"example.com\", \"://super weird host that's not valid\"],\n      port: [1234, 0.12543, -100, Infinity],\n      username: [\"some-username\", \"some username with a space\"],\n      password: [\"some-password\", \"some password with a space\"],\n      senderName: [\"Some Sender\"],\n      senderEmail: [\"some-sender@example.com\", \"some invalid email\"],\n      managedSubdomain: [\"mail.example.com\", \"invalid subdomain\"],\n      managedSenderLocalPart: [\"noreply\", \"some invalid local part\"],\n    }],\n  }],\n  payments: [{\n    ...branchSchemaFuzzerConfig[0].payments[0],\n    testMode: [false, true],\n  }],\n  dbSync: [{\n    externalDatabases: [{\n      \"some-external-db-id\": [{\n        type: [\"postgres\"] as const,\n        connectionString: [\n          \"postgres://user:password@db.example.com:5432/database\",\n          \"postgresql://user:password@db.example.net/database\",\n        ],\n      }],\n    }],\n  }],\n  analytics: [{\n    queryFolders: [{\n      \"some-folder-id\": [{\n        displayName: [\"Some Folder\", \"Some Other Folder\"],\n        sortOrder: [0, 1, 10, -5],\n        queries: [{\n          \"some-query-id\": [{\n            displayName: [\"Some Query\", \"Some Other Query\"],\n            sqlQuery: [\"\", \"SELECT * FROM events\", \"SELECT * FROM users\"],\n            description: [\"\", \"A query description\", \"Another description\"],\n          }],\n        }],\n      }],\n    }],\n  }],\n  customDashboards: [{\n    \"12345678-1234-4234-9234-123456789012\": [{\n      displayName: [\"My Dashboard\", \"User Growth Dashboard\"],\n      tsxSource: [\"\", \"function Dashboard() { return <div>Hello</div>; }\"],\n    }],\n  }],\n}] satisfies FuzzerConfig<EnvironmentConfigNormalizedOverride>;\n\nconst organizationSchemaFuzzerConfig = environmentSchemaFuzzerConfig satisfies FuzzerConfig<OrganizationConfigNormalizedOverride>;\n\nfunction setDeep<T>(obj: T, path: string[], value: any) {\n  if (!isObjectLike(obj)) return obj;\n\n  if (path.length === 0) {\n    throw new Error(\"Path is empty\");\n  } else if (path.length === 1) {\n    set(obj as any, path[0], value);\n  } else {\n    const [key, ...rest] = path;\n    setDeep(getOrUndefined(obj as any, key), rest, value);\n  }\n}\n\nfunction createFuzzerInput<T>(config: FuzzerConfig<T>, progress: number): T {\n  progress = Math.min(1, 2 * progress);\n  const createShouldRandom = (strength: number) => {\n    const chance = Math.random() * strength * 1.2 - 0.1;\n    return () => Math.random() < chance;\n  };\n  const createShouldObjectDependent = (strength: number) => {\n    const objectChance = Math.random() * strength * 1.2 - 0.1;\n    const primitiveChance = Math.random() * strength * 1.2 - 0.1;\n    return (v: any) => Math.random() * Math.random() < (isObjectLike(v) ? objectChance : primitiveChance);\n  };\n\n  const shouldKeep = createShouldObjectDependent(progress * 1);\n  const shouldMakeNested = createShouldObjectDependent(1.25);\n  const shouldNull = createShouldRandom(0.25);\n\n  let res: any;\n  const recurse = <U>(outputPath: string[], config: FuzzerConfig<U>, forceNested: boolean, forceNonNull: boolean) => {\n    let subConfig: any = config[Math.floor(Math.random() * config.length)];\n    const originalValue = isObjectLike(subConfig) ? (Array.isArray(subConfig) ? [] : {}) : subConfig;\n\n    const newValue = forceNonNull || !shouldNull() ? originalValue : null;\n    const newOutputPath = forceNested || shouldMakeNested(originalValue) || outputPath.length === 0 ? outputPath : [outputPath.join(\".\")];\n    if (outputPath.length === 0) {\n      res = newValue;\n    } else {\n      if (forceNested || shouldKeep(originalValue)) {\n        setDeep(res, newOutputPath, newValue);\n      }\n    }\n    if (isObjectLike(subConfig)) {\n      for (const [key, newValue] of typedEntries(subConfig)) {\n        recurse([...newOutputPath, key], newValue, Array.isArray(subConfig), Array.isArray(subConfig));\n      }\n    }\n  };\n  recurse<T>([], config, false, true);\n  return res;\n}\n\nimport.meta.vitest?.test(\"fuzz schemas\", async ({ expect }) => {\n  const totalIterations = process.env.CI ? 1000 : 200;\n  for (let i = 0; i < totalIterations; i++) {\n    const projectInput = createFuzzerInput<ProjectConfigNormalizedOverride>(projectSchemaFuzzerConfig, i / totalIterations);\n    const branchInput = createFuzzerInput<BranchConfigNormalizedOverride>(branchSchemaFuzzerConfig, i / totalIterations);\n    const environmentInput = createFuzzerInput<EnvironmentConfigNormalizedOverride>(environmentSchemaFuzzerConfig, i / totalIterations);\n    const organizationInput = createFuzzerInput<OrganizationConfigNormalizedOverride>(organizationSchemaFuzzerConfig, i / totalIterations);\n\n    try {\n      const projectMigrated = migrateConfigOverride(\"project\", projectInput);\n      await assertNoConfigOverrideErrors(projectConfigSchema, projectMigrated);\n      const projectOverridden = override({}, projectMigrated);\n      await sanitizeProjectConfig(normalize(applyProjectDefaults(projectOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const branchMigrated = migrateConfigOverride(\"branch\", branchInput);\n      await assertNoConfigOverrideErrors(branchConfigSchema, branchMigrated);\n      const branchOverridden = override(projectOverridden, branchMigrated);\n      await sanitizeBranchConfig(normalize(applyBranchDefaults(branchOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const environmentMigrated = migrateConfigOverride(\"environment\", environmentInput);\n      await assertNoConfigOverrideErrors(environmentConfigSchema, environmentMigrated);\n      const environmentOverridden = override(branchOverridden, environmentMigrated);\n      await sanitizeEnvironmentConfig(normalize(applyEnvironmentDefaults(environmentOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const organizationMigrated = migrateConfigOverride(\"organization\", organizationInput);\n      await assertNoConfigOverrideErrors(organizationConfigSchema, organizationMigrated);\n      const organizationOverridden = override(environmentOverridden, organizationMigrated);\n      await sanitizeOrganizationConfig(normalize(applyOrganizationDefaults(organizationOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n    } catch (e) {\n      const data = {\n        cause: e,\n        inputs: {\n          projectInput,\n          branchInput,\n          environmentInput,\n          organizationInput,\n        },\n      } as const;\n      console.error(\"Failed to fuzz schema in iteration ${i}/${totalIterations}!\", nicify(data));\n      throw new HexclaveAssertionError(`Error in iteration ${i}/${totalIterations} of schema fuzz: ${e}`, { cause: e });\n    }\n  }\n});\n\nimport.meta.vitest?.test(\"rejects include-by-default product prices in config overrides\", async ({ expect }) => {\n  await expect(assertNoConfigOverrideErrors(branchConfigSchema, {\n    \"payments.products.free.prices\": \"include-by-default\",\n  })).rejects.toThrow(/payments\\.products\\.free\\.prices must not be one of the following values: include-by-default/);\n});\n"],"mappings":";;;;;;;;AAqBA,MAAM,2BAA2B,CAAC;CAChC,SAAS,CAAC,EACR,SAAS,CAAC;EACR,MAAM,CAAC,MAAM,KAAK;EAClB,MAAM,CAAC,MAAM,KAAK;CACpB,CAAC,EACH,CAAC;CACD,MAAM,CAAC;EACL,aAAa,CAAC,MAAM,KAAK;EACzB,UAAU,CAAC,EACT,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,KAAK,CAAC,EACJ,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,SAAS,CAAC,EACR,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,OAAO,CAAC;GACN,sBAAsB;IAAC;IAAe;IAAe;GAAkB;GACvE,WAAW,CAAC,EACV,UAAU,CAAC;IACT,MAAM;KAAC;KAAU;KAAU;IAAG;IAC9B,aAAa,CAAC,MAAM,KAAK;IACzB,wBAAwB,CAAC,MAAM,KAAK;GACtC,CAAC,EACH,CAAC;EACH,CAAC;EACD,aAAa,CAAC,EACZ,gBAAgB,CAAC;GACf,SAAS,CAAC,MAAM,KAAK;GACrB,aAAa,CAAC,qBAAqB,2BAA2B;GAC9D,UAAU;IAAC;IAAG;IAAG;GAAG;GACpB,WAAW,CAAC,iCAA+B,gCAA8B;GACzE,QAAQ,CAAC;IACP,MAAM;KAAC;KAAS;KAAU;KAAY;IAAK;IAC3C,SAAS,CAAC,IAAI,uCAAuC;GACvD,CAAC;EACH,CAAC,EACH,CAAC;EACD,0BAA0B,CAAC,SAAS,QAAQ;CAC9C,CAAC;CACD,WAAW,CAAC,EACV,QAAQ,CAAC;EACP,iBAAiB,CAAC,EAChB,aAAa,CAAC,cAAc,kBAAkB,EAChD,CAAC;EACD,uBAAuB,CAAC,EACtB,aAAa,CAAC,cAAc,kBAAkB,EAChD,CAAC;CACH,CAAC,EACH,CAAC;CACD,UAAU,CAAC;EACT,mBAAmB,CAAC,OAAO,IAAI;EAC/B,SAAS,CAAC,EACR,UAAU,CAAC,CAAC;GAAC;GAAG;GAAG;GAAI;GAAK;GAAO;EAAQ,GAAG;GAAC;GAAO;GAAQ;GAAS;EAAM,CAAC,CAAC,EACjF,CAAC;EACD,cAAc,CAAC,EACb,wBAAwB,CAAC;GACvB,aAAa,CAAC,qBAAqB,yBAAyB;GAC5D,cAAc;IAAC;IAAQ;IAAQ;GAAQ;EACzC,CAAC,EACH,CAAC;EACD,UAAU,CAAC,EACT,wBAAwB,CAAC,EACvB,aAAa,CAAC,qBAAqB,yBAAyB,EAC9D,CAAC,EACH,CAAC;EACD,QAAQ,CAAC,EACP,wBAAwB,CAAC,EACvB,aAAa,CAAC,qBAAqB,yBAAyB,EAC9D,CAAC,EACH,CAAC;EACD,OAAO,CAAC,EACN,gBAAgB,CAAC;GACf,cAAc;IAAC;IAAQ;IAAQ;GAAQ;GACvC,aAAa,CAAC,aAAa,iBAAiB;EAC9C,CAAC,EACH,CAAC;EACD,UAAU,CAAC,EACT,mBAAmB,CAAC;GAClB,aAAa,CAAC,gBAAgB,oBAAoB;GAClD,cAAc;IAAC;IAAQ;IAAQ;GAAQ;GACvC,WAAW,CAAC,CAAC;IAAC;IAAG;IAAG;IAAI;IAAK;IAAO;GAAQ,GAAG;IAAC;IAAO;IAAQ;IAAS;GAAM,CAAC,CAAC;GAChF,YAAY,CAAC,MAAM,KAAK;GACxB,WAAW,CAAC,MAAM,KAAK;GACvB,eAAe,CAAC,wBAAwB,4BAA4B;GACpE,WAAW,CAAC,wBAAwB,4BAA4B;GAChE,SAAS,CAAC,wBAAwB,4BAA4B;GAC9D,WAAW,CAAC,OAAO;IAAE,mBAAmB,CAAC,IAAI;IAAG,yBAAyB,CAAC,IAAI;GAAE,CAAC;GACjF,QAAQ,CAAC,EACP,iBAAiB,CAAC;IAChB,GAAG,iBAAiB,qBAAqB,KAAI,aAAY,CAAC,SAAS,MAAM;KAAC;KAAU;KAAgB;KAAY;IAAG,CAAC,CAAC,CAAC;IACtH,UAAU,CAAC,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;IAC/E,YAAY,CAAC,MAAM,KAAK;IACxB,WAAW,CAAC,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;GAClF,CAAC,EACH,CAAC;GACD,eAAe,CAAC,EACd,gBAAgB,CAAC;IACf,UAAU;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ;IACzC,QAAQ,CAAC,SAAS,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;IACtF,SAAS;KAAC;KAAS;KAAyB;IAAe;GAC7D,CAAC,EACH,CAAC;EACH,CAAC,EACH,CAAC;CACH,CAAC;CACD,QAAQ,CAAC;EACP,QAAQ,CAAC,EACP,wCAAwC,CAAC;GACvC,aAAa,CAAC,cAAc,kBAAkB;GAC9C,WAAW,CAAC,IAAI,6BAA6B;EAC/C,CAAC,EACH,CAAC;EACD,iBAAiB,CAAC,iBAAiB,qBAAqB;EACxD,WAAW,CAAC,EACV,wCAAwC,CAAC;GACvC,SAAS,CAAC,iBAAiB,qBAAqB;GAChD,aAAa,CAAC,iBAAiB,qBAAqB;GACpD,WAAW,CAAC,IAAI,6BAA6B;EAC/C,CAAC,EACH,CAAC;CACH,CAAC;CACD,OAAO,CAAC;EACN,4BAA4B,CAAC,MAAM,KAAK;EACxC,yBAAyB,CAAC,MAAM,KAAK;CACvC,CAAC;CACD,OAAO,CAAC,EACN,yBAAyB,CAAC,MAAM,KAAK,EACvC,CAAC;CACD,MAAM,CAAC;EACL,aAAa,CAAC,EACZ,sBAAsB,CAAC;GACrB,wBAAwB,CAAC;IACvB,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,aAAa,CAAC,mBAAmB,uBAAuB;GACxD,OAAO,CAAC,QAAQ,SAAS;EAC3B,CAAC,EACH,CAAC;EACD,oBAAoB,CAAC;GACnB,aAAa,CAAC;IACZ,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,YAAY,CAAC;IACX,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,QAAQ,CAAC;IACP,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;EACH,CAAC;CACH,CAAC;CACD,SAAS,CAAC,CAAC,CAAC;CACZ,MAAM,CAAC,EACL,WAAW,CAAC,iBAAiB,aAAa,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAC/E,SAAS,CAAC,MAAM,KAAK,EACvB,CAAC,CAAC,CAAC,CAAC,CAAC,EACP,CAAC;CACD,YAAY,CAAC,EACX,0BAA0B,CAAC,MAAM,KAAK,EACxC,CAAC;AACH,CAAC;CAIC,EADA,GAAG,yBAAyB,GAsB3B,IAnBC,EADA,GAAG,yBAAyB,EAAE,CAAC,KAAK,GAmBnC,GAhBC,EADA,GAAG,yBAAyB,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,GAgB/B,GAfF,iBAAiB,aAAa,yBAAyB,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC;CAChI,GAAG,MAAM;CACT,UAAU,CAAC,MAAM,KAAK;CACtB,UAAU,CAAC,gBAAgB;CAC3B,cAAc,CAAC,oBAAoB;CAInC,mBAAmB,CAAC,KAAA,CAAS;CAC7B,kBAAkB,CAAC,yBAAyB;CAC5C,mBAAmB,CAAC,0BAA0B;CAC9C,cAAc,CAAC,EAAE,kBAAkB,CAAC,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;CACxE,WAAW,CAAC,KAAA,GAAW,6BAA6B;CACpD,OAAO,CAAC,KAAA,GAAW,sBAAsB;CACzC,aAAa,CAAC,KAAA,GAAW,kBAAkB;AAC7C,CAAC,CAAC,CAAC,CAAC,GAcN,EADA,GAAG,yBAAyB,EAAE,CAAC,OAAO,GAYrC,GAID,EADA,GAAG,yBAAyB,EAAE,CAAC,SAAS,GAClB"}
+{"version":3,"file":"schema-fuzzer.test.js","names":[],"sources":["../../../src/config/schema-fuzzer.test.ts"],"sourcesContent":["import { ALL_APPS } from \"../apps/apps-config\";\nimport { SUPPORTED_CURRENCIES } from \"../utils/currency-constants\";\nimport { HexclaveAssertionError } from \"../utils/errors\";\nimport { getOrUndefined, isObjectLike, set, typedEntries, typedFromEntries } from \"../utils/objects\";\nimport { nicify } from \"../utils/strings\";\nimport { normalize, override } from \"./format\";\nimport { BranchConfigNormalizedOverride, EnvironmentConfigNormalizedOverride, OrganizationConfigNormalizedOverride, ProjectConfigNormalizedOverride, applyBranchDefaults, applyEnvironmentDefaults, applyOrganizationDefaults, applyProjectDefaults, assertNoConfigOverrideErrors, branchConfigSchema, environmentConfigSchema, migrateConfigOverride, organizationConfigSchema, projectConfigSchema, sanitizeBranchConfig, sanitizeEnvironmentConfig, sanitizeOrganizationConfig, sanitizeProjectConfig } from \"./schema\";\n\ntype FuzzerConfig<T> = ReadonlyArray<T extends object ? ([T] extends [any[]] ? { readonly [K in keyof T]: FuzzerConfig<T[K]> } : Required<{\n  [K in keyof T]: FuzzerConfig<T[K]>;\n}> & Record<string, FuzzerConfig<any>>) : T>;\n\nconst projectSchemaFuzzerConfig = [{\n  sourceOfTruth: [{\n    type: [\"hosted\"],\n  }],\n  project: [{\n    requirePublishableClientKey: [true, false],\n  }],\n}] satisfies FuzzerConfig<ProjectConfigNormalizedOverride>;\n\nconst branchSchemaFuzzerConfig = [{\n  apiKeys: [{\n    enabled: [{\n      team: [true, false],\n      user: [true, false],\n    }],\n  }],\n  auth: [{\n    allowSignUp: [true, false],\n    password: [{\n      allowSignIn: [true, false],\n    }],\n    otp: [{\n      allowSignIn: [true, false],\n    }],\n    passkey: [{\n      allowSignIn: [true, false],\n    }],\n    oauth: [{\n      accountMergeStrategy: [\"link_method\", \"raise_error\", \"allow_duplicates\"],\n      providers: [{\n        \"google\": [{\n          type: [\"google\", \"github\", \"x\"] as const,\n          allowSignIn: [true, false],\n          allowConnectedAccounts: [true, false],\n        }],\n      }],\n    }],\n    signUpRules: [{\n      \"some-rule-id\": [{\n        enabled: [true, false],\n        displayName: [\"Block Test Emails\", \"Allow Only Company Domain\"],\n        priority: [0, 1, 100],\n        condition: ['email.endsWith(\"@test.com\")', 'emailDomain == \"company.com\"'],\n        action: [{\n          type: [\"allow\", \"reject\", \"restrict\", \"log\"] as const,\n          message: [\"\", \"Sign up is not allowed for this email\"],\n        }],\n      }],\n    }],\n    signUpRulesDefaultAction: [\"allow\", \"reject\"],\n  }],\n  dataVault: [{\n    stores: [{\n      \"some-store-id\": [{\n        displayName: [\"Some Store\", \"Some Other Store\"],\n      }],\n      \"some-other-store-id\": [{\n        displayName: [\"Some Store\", \"Some Other Store\"],\n      }],\n    }],\n  }],\n  payments: [{\n    blockNewPurchases: [false, true],\n    autoPay: [{\n      interval: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n    }],\n    productLines: [{\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n      }],\n    }],\n    catalogs: [{  // ensure migration works\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n      }],\n    }],\n    groups: [{  // ensure migration works\n      \"some-product-line-id\": [{\n        displayName: [\"Some Product Line\", \"Some Other Product Line\"],\n      }],\n    }],\n    items: [{\n      \"some-item-id\": [{\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n        displayName: [\"Some Item\", \"Some Other Item\"],\n      }],\n    }],\n    products: [{\n      \"some-product-id\": [{\n        displayName: [\"Some Product\", \"Some Other Product\"],\n        customerType: [\"user\", \"team\", \"custom\"] as const,\n        freeTrial: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n        serverOnly: [true, false],\n        stackable: [true, false],\n        productLineId: [\"some-product-line-id\", \"some-other-product-line-id\"],\n        catalogId: [\"some-product-line-id\", \"some-other-product-line-id\"],  // ensure migration works\n        groupId: [\"some-product-line-id\", \"some-other-product-line-id\"],  // ensure migration works\n        isAddOnTo: [false, { \"some-product-id\": [true], \"some-other-product-id\": [true] }] as const,\n        prices: [{\n          \"some-price-id\": [{\n            ...typedFromEntries(SUPPORTED_CURRENCIES.map(currency => [currency.code, [\"100_00\", \"not a number\", \"Infinity\", \"0\"]])),\n            interval: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n            serverOnly: [true, false],\n            freeTrial: [[[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n          }],\n        }],\n        includedItems: [{\n          \"some-item-id\": [{\n            quantity: [0, 1, -3, 100, 0.333, Infinity],\n            repeat: [\"never\", [[0, 1, -3, 100, 0.333, Infinity], [\"day\", \"week\", \"month\", \"year\"]]] as const,\n            expires: [\"never\", \"when-purchase-expires\", \"when-repeated\"] as const,\n          }],\n        }],\n      }],\n    }],\n  }],\n  emails: [{\n    themes: [{\n      \"12345678-1234-4234-9234-123456789012\": [{\n        displayName: [\"Some Theme\", \"Some Other Theme\"],\n        tsxSource: [\"\", \"some typescript source code\"],\n      }],\n    }],\n    selectedThemeId: [\"some-theme-id\", \"some-other-theme-id\"],\n    templates: [{\n      \"12345678-1234-4234-9234-123456789012\": [{\n        themeId: [\"some-theme-id\", \"some-other-theme-id\"],\n        displayName: [\"Some Template\", \"Some Other Template\"],\n        tsxSource: [\"\", \"some typescript source code\"],\n      }],\n    }],\n  }],\n  teams: [{\n    createPersonalTeamOnSignUp: [true, false],\n    allowClientTeamCreation: [true, false],\n  }],\n  users: [{\n    allowClientUserDeletion: [true, false],\n  }],\n  rbac: [{\n    permissions: [{\n      \"some_permission_id\": [{\n        containedPermissionIds: [{\n          \"some_permission_id\": [true],\n          \"$some_other_permission_id\": [true],\n        }] as const,\n        description: [\"Some Permission\", \"Some Other Permission\"],\n        scope: [\"team\", \"project\"] as const,\n      }],\n    }],\n    defaultPermissions: [{\n      teamCreator: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n      teamMember: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n      signUp: [{\n        \"some_permission_id\": [true],\n        \"$some_other_permission_id\": [true],\n      }] as const,\n    }],\n  }],\n  domains: [{}],\n  apps: [{\n    installed: [typedFromEntries(typedEntries(ALL_APPS).map(([key, value]) => [key, [{\n      enabled: [true, false],\n    }]]))],\n  }],\n  onboarding: [{\n    requireEmailVerification: [true, false],\n  }],\n  \"deployments-alpha\": [{\n    services: [{\n      \"some-service-id\": [{\n        type: [\"vercel\"] as const,\n        framework: [\"nextjs\", \"vite\", \"\"],\n        installCommand: [\"pnpm install\", \"\"],\n        buildCommand: [\"pnpm build\", \"\"],\n        outputDirectory: [\".next\", \"dist\", \"\"],\n        rootDirectory: [\"./\", \"./apps/web\", \"\"],\n        env: [{\n          \"SOME_PLAIN_VAR\": [{\n            type: [undefined] as (\"secret\" | \"connection\" | undefined)[],\n            value: [\"some-value\", \"\"],\n            key: [undefined] as (string | undefined)[],\n          }],\n          \"SOME_CONNECTION_VAR\": [{\n            type: [\"connection\"] as const,\n            // Stays valid even when the fuzzer drops `type`: without it, the\n            // entry reads as a plain env var whose literal value happens to be\n            // \"hexclave.projectId\".\n            value: [\"hexclave.projectId\", \"some-other-service.url\"],\n            key: [undefined] as (string | undefined)[],\n          }],\n          \"SOME_SECRET_VAR\": [{\n            type: [\"secret\"] as const,\n            value: [undefined] as (string | undefined)[],\n            // Kept undefined: `key` is only allowed when type is \"secret\", and\n            // the fuzzer randomizes each field independently so it cannot honor\n            // that coupling (same situation as oauth's customCallbackUrl). The\n            // accept path is covered by the schema unit tests and the\n            // deployments e2e tests.\n            key: [undefined] as (string | undefined)[],\n          }],\n        }],\n      }],\n    }],\n  }],\n}] satisfies FuzzerConfig<BranchConfigNormalizedOverride>;\n\nconst environmentSchemaFuzzerConfig = [{\n  ...branchSchemaFuzzerConfig[0],\n  auth: [{\n    ...branchSchemaFuzzerConfig[0].auth[0],\n    oauth: [{\n      ...branchSchemaFuzzerConfig[0].auth[0].oauth[0],\n      providers: [typedFromEntries(typedEntries(branchSchemaFuzzerConfig[0].auth[0].oauth[0].providers[0]).map(([key, value]) => [key, [{\n        ...value[0],\n        isShared: [true, false],\n        clientId: [\"some-client-id\"],\n        clientSecret: [\"some-client-secret\"],\n        // Kept undefined: the schema forbids customCallbackUrl when isShared is\n        // true, and the fuzzer randomizes each field independently so it cannot\n        // honor that coupling. The accept path is covered by an e2e test.\n        customCallbackUrl: [undefined] as (string | undefined)[],\n        facebookConfigId: [\"some-facebook-config-id\"],\n        microsoftTenantId: [\"some-microsoft-tenant-id\"],\n        appleBundles: [{ \"some-bundle-id\": [{ bundleId: [\"com.example.app\"] }] }],\n        issuerUrl: [undefined, \"https://accounts.google.com\"] as (string | undefined)[],\n        scope: [undefined, \"openid email profile\"] as (string | undefined)[],\n        displayName: [undefined, \"My OIDC Provider\"] as (string | undefined)[],\n      }]]))] as const,\n    }],\n  }],\n  domains: [{\n    allowLocalhost: [true, false],\n    trustedDomains: [{\n      \"some-domain-id\": [{\n        baseUrl: [\"https://example.com/something-here\"],\n        handlerPath: [\"/something-here\"],\n      }],\n    }],\n  }],\n  emails: [{\n    ...branchSchemaFuzzerConfig[0].emails[0],\n    server: [{\n      isShared: [true, false],\n      provider: [\"resend\", \"smtp\", \"managed\"] as const,\n      host: [\"example.com\", \"://super weird host that's not valid\"],\n      port: [1234, 0.12543, -100, Infinity],\n      username: [\"some-username\", \"some username with a space\"],\n      password: [\"some-password\", \"some password with a space\"],\n      senderName: [\"Some Sender\"],\n      senderEmail: [\"some-sender@example.com\", \"some invalid email\"],\n      managedSubdomain: [\"mail.example.com\", \"invalid subdomain\"],\n      managedSenderLocalPart: [\"noreply\", \"some invalid local part\"],\n    }],\n  }],\n  payments: [{\n    ...branchSchemaFuzzerConfig[0].payments[0],\n    testMode: [false, true],\n  }],\n  dbSync: [{\n    externalDatabases: [{\n      \"some-external-db-id\": [{\n        type: [\"postgres\"] as const,\n        connectionString: [\n          \"postgres://user:password@db.example.com:5432/database\",\n          \"postgresql://user:password@db.example.net/database\",\n        ],\n      }],\n    }],\n  }],\n  analytics: [{\n    queryFolders: [{\n      \"some-folder-id\": [{\n        displayName: [\"Some Folder\", \"Some Other Folder\"],\n        sortOrder: [0, 1, 10, -5],\n        queries: [{\n          \"some-query-id\": [{\n            displayName: [\"Some Query\", \"Some Other Query\"],\n            sqlQuery: [\"\", \"SELECT * FROM events\", \"SELECT * FROM users\"],\n            description: [\"\", \"A query description\", \"Another description\"],\n          }],\n        }],\n      }],\n    }],\n  }],\n  customDashboards: [{\n    \"12345678-1234-4234-9234-123456789012\": [{\n      displayName: [\"My Dashboard\", \"User Growth Dashboard\"],\n      tsxSource: [\"\", \"function Dashboard() { return <div>Hello</div>; }\"],\n    }],\n  }],\n}] satisfies FuzzerConfig<EnvironmentConfigNormalizedOverride>;\n\nconst organizationSchemaFuzzerConfig = environmentSchemaFuzzerConfig satisfies FuzzerConfig<OrganizationConfigNormalizedOverride>;\n\nfunction setDeep<T>(obj: T, path: string[], value: any) {\n  if (!isObjectLike(obj)) return obj;\n\n  if (path.length === 0) {\n    throw new Error(\"Path is empty\");\n  } else if (path.length === 1) {\n    set(obj as any, path[0], value);\n  } else {\n    const [key, ...rest] = path;\n    setDeep(getOrUndefined(obj as any, key), rest, value);\n  }\n}\n\nfunction createFuzzerInput<T>(config: FuzzerConfig<T>, progress: number): T {\n  progress = Math.min(1, 2 * progress);\n  const createShouldRandom = (strength: number) => {\n    const chance = Math.random() * strength * 1.2 - 0.1;\n    return () => Math.random() < chance;\n  };\n  const createShouldObjectDependent = (strength: number) => {\n    const objectChance = Math.random() * strength * 1.2 - 0.1;\n    const primitiveChance = Math.random() * strength * 1.2 - 0.1;\n    return (v: any) => Math.random() * Math.random() < (isObjectLike(v) ? objectChance : primitiveChance);\n  };\n\n  const shouldKeep = createShouldObjectDependent(progress * 1);\n  const shouldMakeNested = createShouldObjectDependent(1.25);\n  const shouldNull = createShouldRandom(0.25);\n\n  let res: any;\n  const recurse = <U>(outputPath: string[], config: FuzzerConfig<U>, forceNested: boolean, forceNonNull: boolean) => {\n    let subConfig: any = config[Math.floor(Math.random() * config.length)];\n    const originalValue = isObjectLike(subConfig) ? (Array.isArray(subConfig) ? [] : {}) : subConfig;\n\n    const newValue = forceNonNull || !shouldNull() ? originalValue : null;\n    const newOutputPath = forceNested || shouldMakeNested(originalValue) || outputPath.length === 0 ? outputPath : [outputPath.join(\".\")];\n    if (outputPath.length === 0) {\n      res = newValue;\n    } else {\n      if (forceNested || shouldKeep(originalValue)) {\n        setDeep(res, newOutputPath, newValue);\n      }\n    }\n    if (isObjectLike(subConfig)) {\n      for (const [key, newValue] of typedEntries(subConfig)) {\n        recurse([...newOutputPath, key], newValue, Array.isArray(subConfig), Array.isArray(subConfig));\n      }\n    }\n  };\n  recurse<T>([], config, false, true);\n  return res;\n}\n\nimport.meta.vitest?.test(\"fuzz schemas\", async ({ expect }) => {\n  const totalIterations = process.env.CI ? 1000 : 200;\n  for (let i = 0; i < totalIterations; i++) {\n    const projectInput = createFuzzerInput<ProjectConfigNormalizedOverride>(projectSchemaFuzzerConfig, i / totalIterations);\n    const branchInput = createFuzzerInput<BranchConfigNormalizedOverride>(branchSchemaFuzzerConfig, i / totalIterations);\n    const environmentInput = createFuzzerInput<EnvironmentConfigNormalizedOverride>(environmentSchemaFuzzerConfig, i / totalIterations);\n    const organizationInput = createFuzzerInput<OrganizationConfigNormalizedOverride>(organizationSchemaFuzzerConfig, i / totalIterations);\n\n    try {\n      const projectMigrated = migrateConfigOverride(\"project\", projectInput);\n      await assertNoConfigOverrideErrors(projectConfigSchema, projectMigrated);\n      const projectOverridden = override({}, projectMigrated);\n      await sanitizeProjectConfig(normalize(applyProjectDefaults(projectOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const branchMigrated = migrateConfigOverride(\"branch\", branchInput);\n      await assertNoConfigOverrideErrors(branchConfigSchema, branchMigrated);\n      const branchOverridden = override(projectOverridden, branchMigrated);\n      await sanitizeBranchConfig(normalize(applyBranchDefaults(branchOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const environmentMigrated = migrateConfigOverride(\"environment\", environmentInput);\n      await assertNoConfigOverrideErrors(environmentConfigSchema, environmentMigrated);\n      const environmentOverridden = override(branchOverridden, environmentMigrated);\n      await sanitizeEnvironmentConfig(normalize(applyEnvironmentDefaults(environmentOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n      const organizationMigrated = migrateConfigOverride(\"organization\", organizationInput);\n      await assertNoConfigOverrideErrors(organizationConfigSchema, organizationMigrated);\n      const organizationOverridden = override(environmentOverridden, organizationMigrated);\n      await sanitizeOrganizationConfig(normalize(applyOrganizationDefaults(organizationOverridden), { onDotIntoNonObject: \"ignore\" }) as any);\n\n    } catch (e) {\n      const data = {\n        cause: e,\n        inputs: {\n          projectInput,\n          branchInput,\n          environmentInput,\n          organizationInput,\n        },\n      } as const;\n      console.error(\"Failed to fuzz schema in iteration ${i}/${totalIterations}!\", nicify(data));\n      throw new HexclaveAssertionError(`Error in iteration ${i}/${totalIterations} of schema fuzz: ${e}`, { cause: e });\n    }\n  }\n});\n\nimport.meta.vitest?.test(\"rejects include-by-default product prices in config overrides\", async ({ expect }) => {\n  await expect(assertNoConfigOverrideErrors(branchConfigSchema, {\n    \"payments.products.free.prices\": \"include-by-default\",\n  })).rejects.toThrow(/payments\\.products\\.free\\.prices must not be one of the following values: include-by-default/);\n});\n"],"mappings":";;;;;;;;AAqBA,MAAM,2BAA2B,CAAC;CAChC,SAAS,CAAC,EACR,SAAS,CAAC;EACR,MAAM,CAAC,MAAM,KAAK;EAClB,MAAM,CAAC,MAAM,KAAK;CACpB,CAAC,EACH,CAAC;CACD,MAAM,CAAC;EACL,aAAa,CAAC,MAAM,KAAK;EACzB,UAAU,CAAC,EACT,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,KAAK,CAAC,EACJ,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,SAAS,CAAC,EACR,aAAa,CAAC,MAAM,KAAK,EAC3B,CAAC;EACD,OAAO,CAAC;GACN,sBAAsB;IAAC;IAAe;IAAe;GAAkB;GACvE,WAAW,CAAC,EACV,UAAU,CAAC;IACT,MAAM;KAAC;KAAU;KAAU;IAAG;IAC9B,aAAa,CAAC,MAAM,KAAK;IACzB,wBAAwB,CAAC,MAAM,KAAK;GACtC,CAAC,EACH,CAAC;EACH,CAAC;EACD,aAAa,CAAC,EACZ,gBAAgB,CAAC;GACf,SAAS,CAAC,MAAM,KAAK;GACrB,aAAa,CAAC,qBAAqB,2BAA2B;GAC9D,UAAU;IAAC;IAAG;IAAG;GAAG;GACpB,WAAW,CAAC,iCAA+B,gCAA8B;GACzE,QAAQ,CAAC;IACP,MAAM;KAAC;KAAS;KAAU;KAAY;IAAK;IAC3C,SAAS,CAAC,IAAI,uCAAuC;GACvD,CAAC;EACH,CAAC,EACH,CAAC;EACD,0BAA0B,CAAC,SAAS,QAAQ;CAC9C,CAAC;CACD,WAAW,CAAC,EACV,QAAQ,CAAC;EACP,iBAAiB,CAAC,EAChB,aAAa,CAAC,cAAc,kBAAkB,EAChD,CAAC;EACD,uBAAuB,CAAC,EACtB,aAAa,CAAC,cAAc,kBAAkB,EAChD,CAAC;CACH,CAAC,EACH,CAAC;CACD,UAAU,CAAC;EACT,mBAAmB,CAAC,OAAO,IAAI;EAC/B,SAAS,CAAC,EACR,UAAU,CAAC,CAAC;GAAC;GAAG;GAAG;GAAI;GAAK;GAAO;EAAQ,GAAG;GAAC;GAAO;GAAQ;GAAS;EAAM,CAAC,CAAC,EACjF,CAAC;EACD,cAAc,CAAC,EACb,wBAAwB,CAAC;GACvB,aAAa,CAAC,qBAAqB,yBAAyB;GAC5D,cAAc;IAAC;IAAQ;IAAQ;GAAQ;EACzC,CAAC,EACH,CAAC;EACD,UAAU,CAAC,EACT,wBAAwB,CAAC,EACvB,aAAa,CAAC,qBAAqB,yBAAyB,EAC9D,CAAC,EACH,CAAC;EACD,QAAQ,CAAC,EACP,wBAAwB,CAAC,EACvB,aAAa,CAAC,qBAAqB,yBAAyB,EAC9D,CAAC,EACH,CAAC;EACD,OAAO,CAAC,EACN,gBAAgB,CAAC;GACf,cAAc;IAAC;IAAQ;IAAQ;GAAQ;GACvC,aAAa,CAAC,aAAa,iBAAiB;EAC9C,CAAC,EACH,CAAC;EACD,UAAU,CAAC,EACT,mBAAmB,CAAC;GAClB,aAAa,CAAC,gBAAgB,oBAAoB;GAClD,cAAc;IAAC;IAAQ;IAAQ;GAAQ;GACvC,WAAW,CAAC,CAAC;IAAC;IAAG;IAAG;IAAI;IAAK;IAAO;GAAQ,GAAG;IAAC;IAAO;IAAQ;IAAS;GAAM,CAAC,CAAC;GAChF,YAAY,CAAC,MAAM,KAAK;GACxB,WAAW,CAAC,MAAM,KAAK;GACvB,eAAe,CAAC,wBAAwB,4BAA4B;GACpE,WAAW,CAAC,wBAAwB,4BAA4B;GAChE,SAAS,CAAC,wBAAwB,4BAA4B;GAC9D,WAAW,CAAC,OAAO;IAAE,mBAAmB,CAAC,IAAI;IAAG,yBAAyB,CAAC,IAAI;GAAE,CAAC;GACjF,QAAQ,CAAC,EACP,iBAAiB,CAAC;IAChB,GAAG,iBAAiB,qBAAqB,KAAI,aAAY,CAAC,SAAS,MAAM;KAAC;KAAU;KAAgB;KAAY;IAAG,CAAC,CAAC,CAAC;IACtH,UAAU,CAAC,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;IAC/E,YAAY,CAAC,MAAM,KAAK;IACxB,WAAW,CAAC,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;GAClF,CAAC,EACH,CAAC;GACD,eAAe,CAAC,EACd,gBAAgB,CAAC;IACf,UAAU;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ;IACzC,QAAQ,CAAC,SAAS,CAAC;KAAC;KAAG;KAAG;KAAI;KAAK;KAAO;IAAQ,GAAG;KAAC;KAAO;KAAQ;KAAS;IAAM,CAAC,CAAC;IACtF,SAAS;KAAC;KAAS;KAAyB;IAAe;GAC7D,CAAC,EACH,CAAC;EACH,CAAC,EACH,CAAC;CACH,CAAC;CACD,QAAQ,CAAC;EACP,QAAQ,CAAC,EACP,wCAAwC,CAAC;GACvC,aAAa,CAAC,cAAc,kBAAkB;GAC9C,WAAW,CAAC,IAAI,6BAA6B;EAC/C,CAAC,EACH,CAAC;EACD,iBAAiB,CAAC,iBAAiB,qBAAqB;EACxD,WAAW,CAAC,EACV,wCAAwC,CAAC;GACvC,SAAS,CAAC,iBAAiB,qBAAqB;GAChD,aAAa,CAAC,iBAAiB,qBAAqB;GACpD,WAAW,CAAC,IAAI,6BAA6B;EAC/C,CAAC,EACH,CAAC;CACH,CAAC;CACD,OAAO,CAAC;EACN,4BAA4B,CAAC,MAAM,KAAK;EACxC,yBAAyB,CAAC,MAAM,KAAK;CACvC,CAAC;CACD,OAAO,CAAC,EACN,yBAAyB,CAAC,MAAM,KAAK,EACvC,CAAC;CACD,MAAM,CAAC;EACL,aAAa,CAAC,EACZ,sBAAsB,CAAC;GACrB,wBAAwB,CAAC;IACvB,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,aAAa,CAAC,mBAAmB,uBAAuB;GACxD,OAAO,CAAC,QAAQ,SAAS;EAC3B,CAAC,EACH,CAAC;EACD,oBAAoB,CAAC;GACnB,aAAa,CAAC;IACZ,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,YAAY,CAAC;IACX,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;GACD,QAAQ,CAAC;IACP,sBAAsB,CAAC,IAAI;IAC3B,6BAA6B,CAAC,IAAI;GACpC,CAAC;EACH,CAAC;CACH,CAAC;CACD,SAAS,CAAC,CAAC,CAAC;CACZ,MAAM,CAAC,EACL,WAAW,CAAC,iBAAiB,aAAa,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAC/E,SAAS,CAAC,MAAM,KAAK,EACvB,CAAC,CAAC,CAAC,CAAC,CAAC,EACP,CAAC;CACD,YAAY,CAAC,EACX,0BAA0B,CAAC,MAAM,KAAK,EACxC,CAAC;CACD,qBAAqB,CAAC,EACpB,UAAU,CAAC,EACT,mBAAmB,CAAC;EAClB,MAAM,CAAC,QAAQ;EACf,WAAW;GAAC;GAAU;GAAQ;EAAE;EAChC,gBAAgB,CAAC,gBAAgB,EAAE;EACnC,cAAc,CAAC,cAAc,EAAE;EAC/B,iBAAiB;GAAC;GAAS;GAAQ;EAAE;EACrC,eAAe;GAAC;GAAM;GAAc;EAAE;EACtC,KAAK,CAAC;GACJ,kBAAkB,CAAC;IACjB,MAAM,CAAC,KAAA,CAAS;IAChB,OAAO,CAAC,cAAc,EAAE;IACxB,KAAK,CAAC,KAAA,CAAS;GACjB,CAAC;GACD,uBAAuB,CAAC;IACtB,MAAM,CAAC,YAAY;IAInB,OAAO,CAAC,sBAAsB,wBAAwB;IACtD,KAAK,CAAC,KAAA,CAAS;GACjB,CAAC;GACD,mBAAmB,CAAC;IAClB,MAAM,CAAC,QAAQ;IACf,OAAO,CAAC,KAAA,CAAS;IAMjB,KAAK,CAAC,KAAA,CAAS;GACjB,CAAC;EACH,CAAC;CACH,CAAC,EACH,CAAC,EACH,CAAC;AACH,CAAC;CAIC,EADA,GAAG,yBAAyB,GAsB3B,IAnBC,EADA,GAAG,yBAAyB,EAAE,CAAC,KAAK,GAmBnC,GAhBC,EADA,GAAG,yBAAyB,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,GAgB/B,GAfF,iBAAiB,aAAa,yBAAyB,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC;CAChI,GAAG,MAAM;CACT,UAAU,CAAC,MAAM,KAAK;CACtB,UAAU,CAAC,gBAAgB;CAC3B,cAAc,CAAC,oBAAoB;CAInC,mBAAmB,CAAC,KAAA,CAAS;CAC7B,kBAAkB,CAAC,yBAAyB;CAC5C,mBAAmB,CAAC,0BAA0B;CAC9C,cAAc,CAAC,EAAE,kBAAkB,CAAC,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;CACxE,WAAW,CAAC,KAAA,GAAW,6BAA6B;CACpD,OAAO,CAAC,KAAA,GAAW,sBAAsB;CACzC,aAAa,CAAC,KAAA,GAAW,kBAAkB;AAC7C,CAAC,CAAC,CAAC,CAAC,GAcN,EADA,GAAG,yBAAyB,EAAE,CAAC,OAAO,GAYrC,GAID,EADA,GAAG,yBAAyB,EAAE,CAAC,SAAS,GAClB"}