@heychunky/core 0.1.0

package/README.md

@@ -0,0 +1,2 @@
+# heychunky-core
+The Chunky Core Library

package/dist/admin/apps.d.ts

@@ -0,0 +1,49 @@
+import type { RunContext } from "./run.ts";
+export interface App {
+    id: string;
+    name: string;
+    owner_id: string;
+    org: string | null;
+    repo: string | null;
+    vercel_project: string | null;
+    neon_project: string | null;
+    created_at: string;
+}
+/** Refused because the owner already has as many apps as they may. */
+export declare class AppLimitError extends Error {
+    readonly limit: number;
+    constructor(email: string, limit: number);
+}
+export interface AppRecord {
+    name: string;
+    owner: string;
+    org?: string | undefined;
+    repo?: string | undefined;
+    vercelProject?: string | undefined;
+    neonProject?: string | undefined;
+}
+/** The user id for an email, or the sole superadmin when none is named. */
+export declare function ownerId(email: string | undefined, ctx: RunContext): Promise<string>;
+/**
+ * Refuse before anything is created, if the owner is at their limit.
+ *
+ * Asked before provisioning rather than at the point of recording, because by
+ * then a repository, a database and a deployment target already exist and the
+ * limit has been passed rather than enforced.
+ *
+ * A count of what someone already has, against a number on their row. It is
+ * not billing — it is the thing that makes inviting someone a bounded
+ * decision, which is what lets invitations be given out at all.
+ */
+export declare function assertCanCreate(owner: string, ctx: RunContext): Promise<void>;
+/**
+ * Record an app, or update what is known about one.
+ *
+ * By name, because that is what is unique across the factory — a repository, a
+ * Vercel project and a database all carry it. Re-running provisioning fills in
+ * what a first, partial run could not, rather than making a second row.
+ */
+export declare function recordApp(app: AppRecord, ctx: RunContext): Promise<App>;
+/** Apps an owner has, or every app when none is named. */
+export declare function listApps(owner: string | undefined, ctx: RunContext): Promise<App[]>;
+//# sourceMappingURL=apps.d.ts.map

package/dist/admin/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../src/admin/apps.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sEAAsE;AACtE,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAKzC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,2EAA2E;AAC3E,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAczF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAYnF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAe7E;AAED,0DAA0D;AAC1D,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAUzF"}

package/dist/admin/apps.js

@@ -0,0 +1,97 @@
+/**
+ * The register of apps the factory has made.
+ *
+ * This used to be JSON files under ~/.heychunky/runs, which is exactly right
+ * for one operator on one machine and wrong for everything after: a second
+ * machine knows nothing, the worker cannot see what exists, and no row anywhere
+ * says whose an app is. It lives in the factory's own database now.
+ *
+ * `owner_id` is the tenancy boundary. Every question about what a developer may
+ * see is a `where owner_id = $1`, and superadmin is the role that omits it —
+ * which is why that column exists before there is a second user to put in it.
+ *
+ * The local history is not replaced by this: it records what a *run* did, step
+ * by step, and stays useful for exactly that. This records what an app *is*.
+ */
+import { master } from "./master.js";
+/** Refused because the owner already has as many apps as they may. */
+export class AppLimitError extends Error {
+    limit;
+    constructor(email, limit) {
+        super(`${email} already has ${limit} app${limit === 1 ? "" : "s"}, which is their limit.`);
+        this.name = "AppLimitError";
+        this.limit = limit;
+    }
+}
+/** The user id for an email, or the sole superadmin when none is named. */
+export async function ownerId(email, ctx) {
+    const conn = await master(ctx);
+    if (email) {
+        const { rows } = await conn.query("select id from users where lower(email) = lower($1)", [email]);
+        const id = rows[0]?.["id"];
+        if (!id)
+            throw new Error(`No user ${email}. An account is created before it owns anything.`);
+        return String(id);
+    }
+    // No owner named means the operator, and until the API can say who that is,
+    // the operator is the one account that can do everything.
+    const { rows } = await conn.query("select id from users where role = 'superadmin'");
+    const id = rows[0]?.["id"];
+    if (!id)
+        throw new Error("No superadmin, so an app has nobody to belong to.");
+    return String(id);
+}
+/**
+ * Refuse before anything is created, if the owner is at their limit.
+ *
+ * Asked before provisioning rather than at the point of recording, because by
+ * then a repository, a database and a deployment target already exist and the
+ * limit has been passed rather than enforced.
+ *
+ * A count of what someone already has, against a number on their row. It is
+ * not billing — it is the thing that makes inviting someone a bounded
+ * decision, which is what lets invitations be given out at all.
+ */
+export async function assertCanCreate(owner, ctx) {
+    const conn = await master(ctx);
+    const { rows } = await conn.query(`select u.email, u.app_limit,
+            (select count(*) from apps a where a.owner_id = u.id) as owned
+       from users u where u.id = $1`, [owner]);
+    const row = rows[0];
+    if (!row)
+        throw new Error("No such owner.");
+    const limit = Number(row["app_limit"]);
+    if (Number(row["owned"]) >= limit)
+        throw new AppLimitError(String(row["email"]), limit);
+}
+/**
+ * Record an app, or update what is known about one.
+ *
+ * By name, because that is what is unique across the factory — a repository, a
+ * Vercel project and a database all carry it. Re-running provisioning fills in
+ * what a first, partial run could not, rather than making a second row.
+ */
+export async function recordApp(app, ctx) {
+    const conn = await master(ctx);
+    const { rows } = await conn.write(`insert into apps (name, owner_id, org, repo, vercel_project, neon_project)
+     values ($1, $2, $3, $4, $5, $6)
+     on conflict (lower(name)) do update set
+       org            = coalesce(excluded.org,            apps.org),
+       repo           = coalesce(excluded.repo,           apps.repo),
+       vercel_project = coalesce(excluded.vercel_project, apps.vercel_project),
+       neon_project   = coalesce(excluded.neon_project,   apps.neon_project)
+     returning *`, [app.name, app.owner, app.org ?? null, app.repo ?? null,
+        app.vercelProject ?? null, app.neonProject ?? null]);
+    return rows[0];
+}
+/** Apps an owner has, or every app when none is named. */
+export async function listApps(owner, ctx) {
+    const conn = await master(ctx);
+    const { rows } = owner
+        ? await conn.query(`select a.*, u.email as owner_email from apps a join users u on u.id = a.owner_id
+          where a.owner_id = $1 order by a.created_at`, [owner])
+        : await conn.query(`select a.*, u.email as owner_email from apps a join users u on u.id = a.owner_id
+          order by a.created_at`);
+    return rows;
+}
+//# sourceMappingURL=apps.js.map

package/dist/admin/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../src/admin/apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAcrC,sEAAsE;AACtE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,KAAK,CAAS;IACvB,YAAY,KAAa,EAAE,KAAa;QACtC,KAAK,CAAC,GAAG,KAAK,gBAAgB,KAAK,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAWD,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAyB,EAAE,GAAe;IACtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qDAAqD,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,kDAAkD,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpF,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,GAAe;IAClE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;oCAEgC,EAChC,CAAC,KAAK,CAAC,CACR,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAc,EAAE,GAAe;IAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;iBAOa,EACb,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;QACtD,GAAG,CAAC,aAAa,IAAI,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CACrD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAmB,CAAC;AACnC,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAyB,EAAE,GAAe;IACvE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK;QACpB,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CACd;sDAC8C,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CACd;gCACwB,CAAC,CAAC;IAChC,OAAO,IAAwB,CAAC;AAClC,CAAC"}

package/dist/admin/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @heychunky/core/admin — the operator side.
+ *
+ * Factory keys, provisioning, secret backends. Never imported by an app: the
+ * package's exports map keeps a bundler from reaching this path at all.
+ */
+export * from "./secrets/infisical.ts";
+export * from "./syncenv.ts";
+export * from "./master.ts";
+export * from "./apps.ts";
+export * from "./users.ts";
+export * from "./run.ts";
+export * from "./provision.ts";
+export * from "./services/github.ts";
+export * from "./services/vercel.ts";
+export * from "./services/neon.ts";
+export * from "./services/cloudflare.ts";
+export * from "./services/bunny.ts";
+export * from "./services/resend.ts";
+export * from "./services/agentmail.ts";
+export * from "./services/elevenlabs.ts";
+export * from "./services/ai-gateway.ts";
+export * from "./services/togetherai.ts";
+export * from "./services/fireworks.ts";
+export * from "./services/firecrawl.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/admin/index.js

@@ -0,0 +1,27 @@
+/**
+ * @heychunky/core/admin — the operator side.
+ *
+ * Factory keys, provisioning, secret backends. Never imported by an app: the
+ * package's exports map keeps a bundler from reaching this path at all.
+ */
+export * from "./secrets/infisical.js";
+export * from "./syncenv.js";
+export * from "./master.js";
+export * from "./apps.js";
+export * from "./users.js";
+export * from "./run.js";
+export * from "./provision.js";
+// One file per service, matching the registry.
+export * from "./services/github.js";
+export * from "./services/vercel.js";
+export * from "./services/neon.js";
+export * from "./services/cloudflare.js";
+export * from "./services/bunny.js";
+export * from "./services/resend.js";
+export * from "./services/agentmail.js";
+export * from "./services/elevenlabs.js";
+export * from "./services/ai-gateway.js";
+export * from "./services/togetherai.js";
+export * from "./services/fireworks.js";
+export * from "./services/firecrawl.js";
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAE/B,+CAA+C;AAC/C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/admin/master.d.ts

@@ -0,0 +1,9 @@
+import type { RunContext } from "./run.ts";
+export declare const MASTER_DB = "infisical://heychunky-apps/production/heychunky-app/DATABASE_URL";
+export declare const master: (ctx: RunContext) => Promise<{
+    query: (sql: string, params?: unknown[]) => Promise<import("./services/db.ts").Rows>;
+    write: (sql: string, params?: unknown[]) => Promise<import("./services/db.ts").Rows>;
+    tables(): Promise<string[]>;
+    columns(table: string): Promise<import("./services/db.ts").Column[]>;
+}>;
+//# sourceMappingURL=master.d.ts.map

package/dist/admin/master.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"master.d.ts","sourceRoot":"","sources":["../../src/admin/master.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3C,eAAO,MAAM,SAAS,qEAAqE,CAAC;AAE5F,eAAO,MAAM,MAAM,GAAU,KAAK,UAAU;;;;;EAAyC,CAAC"}

package/dist/admin/master.js

@@ -0,0 +1,14 @@
+/**
+ * The factory's own database.
+ *
+ * One register, named once. An app register or a user list that varied by
+ * environment would be several of each, and "which one is true" has no good
+ * answer — a developer's laptop, the worker and the API all read the same rows.
+ *
+ * It is heychunky-app's production database because that is what it is: the
+ * app is the factory's own app, and this is its data.
+ */
+import { db } from "./services/db.js";
+export const MASTER_DB = "infisical://heychunky-apps/production/heychunky-app/DATABASE_URL";
+export const master = async (ctx) => db(await ctx.secrets.get(MASTER_DB));
+//# sourceMappingURL=master.js.map

package/dist/admin/master.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"master.js","sourceRoot":"","sources":["../../src/admin/master.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAGtC,MAAM,CAAC,MAAM,SAAS,GAAG,kEAAkE,CAAC;AAE5F,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EAAE,GAAe,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/dist/admin/provision.d.ts

@@ -0,0 +1,42 @@
+import { type RunContext } from "./run.ts";
+export interface AppSpec {
+    /** The app's name. Becomes the repository, the database and the project. */
+    name: string;
+    /** GitHub organisation. Omitted means the authenticated user's account. */
+    org?: string;
+    /** Give it a database. */
+    neon?: boolean;
+    /** Give it somewhere to deploy. */
+    vercel?: boolean;
+}
+export type StepState = 
+/** Already there. Nothing was done. */
+"exists"
+/** Made just now. */
+ | "created"
+/** Would be made. Reported when planning. */
+ | "would-create"
+/** Tried and could not. The run stops here. */
+ | "failed";
+export interface StepResult {
+    step: string;
+    state: StepState;
+    detail: string;
+}
+export interface Run {
+    app: string;
+    /** True when nothing was created, because nothing was confirmed. */
+    planned: boolean;
+    steps: StepResult[];
+    /** Every step reached a good state. */
+    ok: boolean;
+}
+/**
+ * Run every wanted step, in order, stopping at the first failure.
+ *
+ * Returns rather than throws: a partial run is the normal outcome of
+ * provisioning against five providers, and the caller needs to see how far it
+ * got. A thrown error would lose exactly the steps that already succeeded.
+ */
+export declare function provision(spec: AppSpec, ctx: RunContext): Promise<Run>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/admin/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/admin/provision.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAGpD,MAAM,WAAW,OAAO;IACtB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mCAAmC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,SAAS;AACnB,uCAAuC;AACrC,QAAQ;AACV,qBAAqB;GACnB,SAAS;AACX,6CAA6C;GAC3C,cAAc;AAChB,+CAA+C;GAC7C,QAAQ,CAAC;AAEb,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,uCAAuC;IACvC,EAAE,EAAE,OAAO,CAAC;CACb;AA8GD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAgC5E"}

package/dist/admin/provision.js

@@ -0,0 +1,157 @@
+/**
+ * Provisioning an app: repository, database, deployment target.
+ *
+ * This is the engine, and it has two callers by design. `heychunky new` runs it
+ * from a terminal; the API will run it from a job the worker picked up. Neither
+ * owns the logic, so neither can drift from the other.
+ *
+ * Two properties make the second caller possible, and both are worth the cost
+ * even while only the first exists:
+ *
+ *   Every step asks before it acts. A step that finds its work already done
+ *   reports `exists` and moves on, so a run that died halfway is safe to
+ *   repeat — which is the only reason an unattended worker can retry at all.
+ *
+ *   A failure stops the run rather than skipping past it. Later steps depend on
+ *   earlier ones, and a Vercel project linked to a repository that was never
+ *   created is a worse outcome than an honest halt.
+ *
+ * Without `confirmed` this plans: every step is looked up, nothing is created.
+ * That falls out of the gate model rather than being a separate dry-run path,
+ * so the plan can never disagree with the run.
+ */
+import { github } from "./services/github.js";
+import { vercel } from "./services/vercel.js";
+import { neon } from "./services/neon.js";
+import { KEY_FOR } from "./run.js";
+import { BRANCHED, DEFAULT_BRANCH } from "../config/environments.js";
+const STEPS = [
+    {
+        name: "github repo",
+        wanted: () => true,
+        async find(spec, { gh }, carry) {
+            // What would be created, replaced below by what actually exists — the
+            // repository may be named a variant of the app, and later steps must link
+            // to the real one rather than to the name we guessed.
+            const owner = spec.org ?? (await gh.login());
+            carry.repo = `${owner}/${spec.name}`;
+            const repo = await gh.findRepoFor(spec.name, spec.org);
+            if (!repo)
+                return undefined;
+            carry.repo = repo.full_name;
+            return `${repo.full_name} · ${repo.private ? "private" : "PUBLIC"}`;
+        },
+        async create(spec, { gh }, carry) {
+            const repo = await gh.createRepo(spec.name, { org: spec.org });
+            carry.repo = repo.full_name;
+            return `${repo.full_name} · private`;
+        },
+    },
+    {
+        name: "neon project",
+        wanted: (spec) => spec.neon !== false,
+        async find(spec, { nn }, carry) {
+            const p = await nn.findProject(spec.name);
+            if (!p)
+                return undefined;
+            carry.neonProject = p.id;
+            return `${p.name} · ${p.region_id} · pg${p.pg_version}`;
+        },
+        async create(spec, { nn }, carry) {
+            const p = await nn.createProject(spec.name);
+            carry.neonProject = p.id;
+            return `${p.name} · ${p.region_id} · pg${p.pg_version}`;
+        },
+    },
+    {
+        // One step rather than five, because five would say the same thing five
+        // times in every plan. It still creates only what is absent, so a run that
+        // died after three branches makes the other two and no more.
+        name: "neon branches",
+        wanted: (spec) => spec.neon !== false,
+        async find(spec, { nn }, carry) {
+            if (!carry.neonProject)
+                return undefined;
+            const have = new Set((await nn.branches(carry.neonProject)).map((b) => b.name));
+            const missing = BRANCHED.filter((e) => !have.has(e));
+            return missing.length ? undefined : BRANCHED.join(", ");
+        },
+        async create(spec, { nn }, carry) {
+            if (!carry.neonProject)
+                throw new Error("No Neon project to branch from");
+            const all = await nn.branches(carry.neonProject);
+            const parent = all.find((b) => b.default) ?? all.find((b) => b.name === DEFAULT_BRANCH);
+            if (!parent)
+                throw new Error("No default branch to branch from");
+            const have = new Set(all.map((b) => b.name));
+            const made = [];
+            // Serially: Neon rejects concurrent branch creation on one project, and a
+            // partial failure here should leave the branches it did make rather than
+            // an indeterminate half of five.
+            for (const env of BRANCHED.filter((e) => !have.has(e))) {
+                await nn.createBranch(carry.neonProject, env, parent.id);
+                made.push(env);
+            }
+            return `${made.join(", ")} ${made.length === BRANCHED.length ? "" : "· "}from ${parent.name}`;
+        },
+    },
+    {
+        name: "vercel project",
+        wanted: (spec) => spec.vercel !== false,
+        async find(spec, { vc }) {
+            const p = await vc.findProject(spec.name);
+            return p && p.name;
+        },
+        async create(spec, { vc }, carry) {
+            // Linked to the repository from step one, which is why a failure there
+            // must stop the run rather than let this one invent an unlinked project.
+            const p = await vc.createProject(spec.name, { repo: carry.repo });
+            return carry.repo ? `${p.name} · linked to ${carry.repo}` : p.name;
+        },
+    },
+];
+async function clientsFor(ctx) {
+    const key = (service) => ctx.secrets.get(ctx.reference(KEY_FOR[service]));
+    const [g, v, n] = await Promise.all([key("github"), key("vercel"), key("neon")]);
+    return { gh: github(g), vc: vercel(v), nn: neon(n) };
+}
+/**
+ * Run every wanted step, in order, stopping at the first failure.
+ *
+ * Returns rather than throws: a partial run is the normal outcome of
+ * provisioning against five providers, and the caller needs to see how far it
+ * got. A thrown error would lose exactly the steps that already succeeded.
+ */
+export async function provision(spec, ctx) {
+    const clients = await clientsFor(ctx);
+    const carry = {};
+    const steps = [];
+    for (const step of STEPS.filter((s) => s.wanted(spec))) {
+        try {
+            const found = await step.find(spec, clients, carry);
+            if (found !== undefined) {
+                steps.push({ step: step.name, state: "exists", detail: found });
+                continue;
+            }
+            if (!ctx.confirmed) {
+                steps.push({ step: step.name, state: "would-create", detail: spec.name });
+                continue;
+            }
+            steps.push({ step: step.name, state: "created", detail: await step.create(spec, clients, carry) });
+        }
+        catch (err) {
+            steps.push({
+                step: step.name, state: "failed",
+                detail: err instanceof Error ? err.message : String(err),
+            });
+            break;
+        }
+    }
+    return {
+        app: spec.name,
+        planned: !ctx.confirmed,
+        steps,
+        ok: steps.every((s) => s.state !== "failed"),
+    };
+}
+//# sourceMappingURL=provision.js.map

package/dist/admin/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/admin/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAmB,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AA0DrE,MAAM,KAAK,GAAW;IACpB;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC5B,sEAAsE;YACtE,0EAA0E;YAC1E,sDAAsD;YACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC9B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,YAAY,CAAC;QACvC,CAAC;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;QACrC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC5B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzB,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC9B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1D,CAAC;KACF;IACD;QACE,wEAAwE;QACxE,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;QACrC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW;gBAAE,OAAO,SAAS,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC9B,IAAI,CAAC,KAAK,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAEjE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,0EAA0E;YAC1E,yEAAyE;YACzE,iCAAiC;YACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAChG,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK;QACvC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK;YAC9B,uEAAuE;YACvE,yEAAyE;YACzE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,gBAAgB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,CAAC;KACF;CACF,CAAC;AAEF,KAAK,UAAU,UAAU,CAAC,GAAe;IACvC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAE,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa,EAAE,GAAe;IAC5D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1E,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ;gBAChC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;YACH,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,IAAI;QACd,OAAO,EAAE,CAAC,GAAG,CAAC,SAAS;QACvB,KAAK;QACL,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/admin/run.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Execute one registry action.
+ *
+ * The registry says what exists and what it costs; this says how to perform it.
+ * They are separate so `registry.ts` stays isomorphic — an app, or a web UI,
+ * can list what the factory can do without pulling twelve Node clients into
+ * its bundle.
+ *
+ * Credentials are resolved here and handed to the client, never read from the
+ * environment inside one. That is what lets a worker run two apps at once.
+ */
+import { type Action } from "../registry.ts";
+import type { SecretStore } from "../secrets/store.ts";
+import type { Environment } from "../config/environments.ts";
+/** Which env var each service's factory key is stored under. */
+export declare const KEY_FOR: Record<string, string>;
+export interface RunContext {
+    /** Where credentials come from. */
+    secrets: SecretStore;
+    /** Turn an env var name into a reference the store understands. */
+    reference: (envVar: string) => string;
+    /** The caller has confirmed a gated action. */
+    confirmed?: boolean;
+    /**
+     * Whose data an `app`-tier action reaches.
+     *
+     * An `admin`-tier action acts on the factory's own key and needs none of
+     * this. An `app`-tier one reads and writes inside one app's database, in one
+     * environment, and must say which — there is no sensible default when the
+     * wrong guess writes to production.
+     */
+    app?: {
+        name: string;
+        environment: Environment;
+    };
+    /**
+     * The caller has opted in to changing production data specifically.
+     *
+     * Separate from `confirmed` on purpose. Confirming a write says "yes, run
+     * this statement"; this says "yes, against live data" — and someone who has
+     * typed --confirm all afternoon against their own branch should have to say
+     * the second thing out loud.
+     */
+    productionWrite?: boolean;
+}
+/** A write aimed at production without the separate opt-in. */
+export declare class ProductionWriteError extends Error {
+    readonly action: Action;
+    constructor(action: Action);
+}
+export declare class GateError extends Error {
+    readonly action: Action;
+    constructor(action: Action);
+}
+export declare class UnknownActionError extends Error {
+    constructor(service: string, action: string);
+}
+/**
+ * Run an action, refusing anything gated that has not been confirmed.
+ *
+ * This is the *interface* guard — it lets a caller ask before failing. The
+ * guarantee is separate and lives in the clients, which refuse without an
+ * explicit flag whatever this decides.
+ */
+export declare function runAction(service: string, action: string, args: string[], ctx: RunContext): Promise<unknown>;
+/**
+ * What every key enables, in parallel.
+ *
+ * The evidence tier is the honest part: most providers will not say what a key
+ * may do, and rendering "it authenticated" the same as "these are its declared
+ * scopes" implies an assurance nobody obtained.
+ */
+export declare function accessAll(ctx: RunContext): Promise<{
+    service: string;
+    ok: boolean;
+    evidence: string;
+    scopes?: string[];
+    can: string[];
+    notes: string[];
+    error?: string;
+}[]>;
+/** Every service's health, in parallel. */
+export declare function statusAll(ctx: RunContext): Promise<{
+    service: string;
+    ok: boolean;
+    detail: string;
+    error?: string;
+}[]>;
+//# sourceMappingURL=run.d.ts.map

package/dist/admin/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/admin/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAevD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,gEAAgE;AAChE,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAa1C,CAAC;AASF,MAAM,WAAW,UAAU;IACzB,mCAAmC;IACnC,OAAO,EAAE,WAAW,CAAC;IACrB,mEAAmE;IACnE,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACtC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,CAAC;IACjD;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,+DAA+D;AAC/D,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;CAQ3B;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;CAU3B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI5C;AA6FD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU;aAQ5B,MAAM;QAAM,OAAO;cAAY,MAAM;aACrC,MAAM,EAAE;SAAO,MAAM,EAAE;WAAS,MAAM,EAAE;YAAU,MAAM;KAU1E;AAED,2CAA2C;AAC3C,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU;aAOD,MAAM;QAAM,OAAO;YAAU,MAAM;YAAU,MAAM;KAShG"}