@heychunky/core 0.1.0

package/dist/config/names.js

@@ -0,0 +1,75 @@
+/**
+ * How an app's name maps onto the names providers actually use.
+ *
+ * There is no single right answer, because providers were named by hand over
+ * years and disagree with each other. Today, for the same estate:
+ *
+ *   delters.com    → Vercel project "delters"        (bare name)
+ *   carmelcity.ai  → Vercel project "carmelcity-ai"  (dots to hyphens)
+ *
+ * So a lookup cannot slug one way and hope. It generates the forms a provider
+ * plausibly used and tries them in order of how likely they are to be right.
+ *
+ * The previous rule stripped every non-alphanumeric character, turning
+ * "delters.com" into "delterscom" — which matched nothing, ever. `sync-env`
+ * therefore never found a project for any app, and the apps report claimed
+ * there were no Vercel projects while eleven existed.
+ */
+/** Lowercase, keep only letters, digits and single hyphens. */
+function clean(s) {
+    return s
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+/**
+ * The product name without its domain suffix.
+ * `delters.com` → `delters`, `carmel.city` → `carmel`, `heychunky` → `heychunky`.
+ */
+export function baseName(app) {
+    const dot = app.indexOf(".");
+    return clean(dot === -1 ? app : app.slice(0, dot));
+}
+/**
+ * Every form a provider might have used for this app, most likely first.
+ * Deduplicated, so a name with no dot yields exactly one candidate.
+ *
+ *   carmelcity.ai → ["carmelcity-ai", "carmelcity", "carmelcityai"]
+ *   delters.com   → ["delters-com", "delters", "delterscom"]
+ *   heychunky     → ["heychunky"]
+ */
+export function nameCandidates(app) {
+    const hyphenated = clean(app);
+    const bare = baseName(app);
+    const squashed = app.toLowerCase().replace(/[^a-z0-9]/g, "");
+    return [...new Set([hyphenated, bare, squashed].filter(Boolean))];
+}
+/**
+ * Find the entry whose name matches this app, preferring earlier candidates.
+ * Returns undefined rather than throwing — a missing project is a normal
+ * state during provisioning, not an error.
+ */
+export function matchByName(app, items, nameOf) {
+    const candidates = nameCandidates(app);
+    for (const candidate of candidates) {
+        const hit = items.find((i) => clean(nameOf(i)) === candidate);
+        if (hit)
+            return hit;
+    }
+    return undefined;
+}
+/** The app's storage zone names on Bunny: `<base>` and `<base>-private`. */
+export function zoneNames(app) {
+    const base = baseName(app);
+    return { public: base, private: `${base}-private` };
+}
+/** Subdomains the factory attaches to an app's domain. */
+export function subdomains(domain) {
+    return {
+        test: `test.${domain}`,
+        cdn: `cdn.${domain}`,
+        secure: `secure.${domain}`,
+        www: `www.${domain}`,
+    };
+}
+//# sourceMappingURL=names.js.map

package/dist/config/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/config/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,+DAA+D;AAC/D,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC;SACL,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,GAAW,EACX,KAAmB,EACnB,MAA2B;IAE3B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO;QACL,IAAI,EAAE,QAAQ,MAAM,EAAE;QACtB,GAAG,EAAE,OAAO,MAAM,EAAE;QACpB,MAAM,EAAE,UAAU,MAAM,EAAE;QAC1B,GAAG,EAAE,OAAO,MAAM,EAAE;KACrB,CAAC;AACJ,CAAC"}

package/dist/http/errors.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Typed failures.
+ *
+ * Every failure used to be `new Error(string)`, which means a caller cannot
+ * tell "retry in 30 seconds" from "this will never work". A worker resuming a
+ * 45-step provisioning run has to know the difference, so the type carries it.
+ */
+export declare abstract class HttpError extends Error {
+    readonly status: number;
+    readonly url: string;
+    readonly body: string;
+    constructor(name: string, message: string, status: number, url: string, body: string);
+    /** Whether trying the same request again could plausibly succeed. */
+    abstract get retryable(): boolean;
+}
+/** The credential is wrong, expired, or lacks the permission. Never retry. */
+export declare class AuthError extends HttpError {
+    constructor(status: number, url: string, body: string);
+    get retryable(): boolean;
+}
+/** It does not exist. Often a normal state, not a failure. */
+export declare class NotFoundError extends HttpError {
+    constructor(url: string, body: string);
+    get retryable(): boolean;
+}
+/** The request was malformed. Retrying sends the same bad request. */
+export declare class ValidationError extends HttpError {
+    constructor(status: number, url: string, body: string);
+    get retryable(): boolean;
+}
+/** Slow down. Carries the provider's own advice on how long to wait. */
+export declare class RateLimitError extends HttpError {
+    /** Seconds to wait, when the provider said. */
+    readonly retryAfter: number | undefined;
+    constructor(url: string, body: string, retryAfter?: number);
+    get retryable(): boolean;
+}
+/** The provider broke. Worth trying again. */
+export declare class ServiceError extends HttpError {
+    constructor(status: number, url: string, body: string);
+    get retryable(): boolean;
+}
+/** Map a response onto the right error. */
+export declare function errorFor(status: number, url: string, body: string, retryAfter?: number): HttpError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/http/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,8BAAsB,SAAU,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAQpF,qEAAqE;IACrE,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC;CACnC;AAED,8EAA8E;AAC9E,qBAAa,SAAU,SAAQ,SAAS;gBAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAGrD,IAAI,SAAS,IAAI,OAAO,CAAkB;CAC3C;AAED,8DAA8D;AAC9D,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAGrC,IAAI,SAAS,IAAI,OAAO,CAAkB;CAC3C;AAED,sEAAsE;AACtE,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAGrD,IAAI,SAAS,IAAI,OAAO,CAAkB;CAC3C;AAED,wEAAwE;AACxE,qBAAa,cAAe,SAAQ,SAAS;IAC3C,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE5B,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;IAI1D,IAAI,SAAS,IAAI,OAAO,CAAiB;CAC1C;AAED,8CAA8C;AAC9C,qBAAa,YAAa,SAAQ,SAAS;gBAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAGrD,IAAI,SAAS,IAAI,OAAO,CAAiB;CAC1C;AAED,2CAA2C;AAC3C,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAMlG"}

package/dist/http/errors.js

@@ -0,0 +1,70 @@
+/**
+ * Typed failures.
+ *
+ * Every failure used to be `new Error(string)`, which means a caller cannot
+ * tell "retry in 30 seconds" from "this will never work". A worker resuming a
+ * 45-step provisioning run has to know the difference, so the type carries it.
+ */
+export class HttpError extends Error {
+    status;
+    url;
+    body;
+    constructor(name, message, status, url, body) {
+        super(message);
+        this.name = name;
+        this.status = status;
+        this.url = url;
+        this.body = body;
+    }
+}
+/** The credential is wrong, expired, or lacks the permission. Never retry. */
+export class AuthError extends HttpError {
+    constructor(status, url, body) {
+        super("AuthError", `Not authorised (${status}) — the key is wrong or lacks permission`, status, url, body);
+    }
+    get retryable() { return false; }
+}
+/** It does not exist. Often a normal state, not a failure. */
+export class NotFoundError extends HttpError {
+    constructor(url, body) {
+        super("NotFoundError", "Not found", 404, url, body);
+    }
+    get retryable() { return false; }
+}
+/** The request was malformed. Retrying sends the same bad request. */
+export class ValidationError extends HttpError {
+    constructor(status, url, body) {
+        super("ValidationError", `Rejected (${status}): ${body.slice(0, 200)}`, status, url, body);
+    }
+    get retryable() { return false; }
+}
+/** Slow down. Carries the provider's own advice on how long to wait. */
+export class RateLimitError extends HttpError {
+    /** Seconds to wait, when the provider said. */
+    retryAfter;
+    constructor(url, body, retryAfter) {
+        super("RateLimitError", `Rate limited${retryAfter ? ` — retry in ${retryAfter}s` : ""}`, 429, url, body);
+        this.retryAfter = retryAfter;
+    }
+    get retryable() { return true; }
+}
+/** The provider broke. Worth trying again. */
+export class ServiceError extends HttpError {
+    constructor(status, url, body) {
+        super("ServiceError", `Service error (${status})`, status, url, body);
+    }
+    get retryable() { return true; }
+}
+/** Map a response onto the right error. */
+export function errorFor(status, url, body, retryAfter) {
+    if (status === 401 || status === 403)
+        return new AuthError(status, url, body);
+    if (status === 404)
+        return new NotFoundError(url, body);
+    if (status === 429)
+        return new RateLimitError(url, body, retryAfter);
+    if (status >= 500)
+        return new ServiceError(status, url, body);
+    return new ValidationError(status, url, body);
+}
+//# sourceMappingURL=errors.js.map

package/dist/http/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,OAAgB,SAAU,SAAQ,KAAK;IAClC,MAAM,CAAS;IACf,GAAG,CAAS;IACZ,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAc,EAAE,GAAW,EAAE,IAAY;QAClF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CAIF;AAED,8EAA8E;AAC9E,MAAM,OAAO,SAAU,SAAQ,SAAS;IACtC,YAAY,MAAc,EAAE,GAAW,EAAE,IAAY;QACnD,KAAK,CAAC,WAAW,EAAE,mBAAmB,MAAM,0CAA0C,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,SAAS,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;CAC3C;AAED,8DAA8D;AAC9D,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,GAAW,EAAE,IAAY;QACnC,KAAK,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,SAAS,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;CAC3C;AAED,sEAAsE;AACtE,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAY,MAAc,EAAE,GAAW,EAAE,IAAY;QACnD,KAAK,CAAC,iBAAiB,EAAE,aAAa,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,SAAS,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;CAC3C;AAED,wEAAwE;AACxE,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C,+CAA+C;IACtC,UAAU,CAAqB;IAExC,YAAY,GAAW,EAAE,IAAY,EAAE,UAAmB;QACxD,KAAK,CAAC,gBAAgB,EAAE,eAAe,UAAU,CAAC,CAAC,CAAC,eAAe,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACzG,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;CAC1C;AAED,8CAA8C;AAC9C,MAAM,OAAO,YAAa,SAAQ,SAAS;IACzC,YAAY,MAAc,EAAE,GAAW,EAAE,IAAY;QACnD,KAAK,CAAC,cAAc,EAAE,kBAAkB,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;CAC1C;AAED,2CAA2C;AAC3C,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,GAAW,EAAE,IAAY,EAAE,UAAmB;IACrF,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC"}

package/dist/http/request.d.ts

@@ -0,0 +1,36 @@
+/** How a service wants its credential presented. */
+export interface Credentials {
+    token: string;
+    /** Header name. Default `authorization: Bearer <token>`. */
+    header?: string;
+    /** Prefix for the value. Default `Bearer ` when using authorization. */
+    scheme?: string;
+}
+export interface RequestOptions {
+    method?: "GET" | "POST" | "PATCH" | "PUT" | "DELETE";
+    credentials?: Credentials;
+    body?: unknown;
+    headers?: Record<string, string>;
+    /** Injected for tests. Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+}
+/** Like `request`, but hands back headers too — GitHub declares scopes there. */
+export declare function requestWithHeaders<T>(url: string, opts?: RequestOptions): Promise<{
+    data: T;
+    headers: Headers;
+    status: number;
+}>;
+export declare function request<T>(url: string, opts?: RequestOptions): Promise<T>;
+/**
+ * Retry a request while the error says it is worth retrying.
+ *
+ * Honours the provider's own `Retry-After` rather than guessing, and gives up
+ * immediately on anything unretryable — an auth failure retried three times is
+ * three failures and a slower error message.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, opts?: {
+    attempts?: number;
+    baseDelayMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<T>;
+//# sourceMappingURL=request.d.ts.map

package/dist/http/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/http/request.ts"],"names":[],"mappings":"AASA,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;IACrD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAQD,iFAAiF;AACjF,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBxD;AAED,wBAAsB,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GAC5F,OAAO,CAAC,CAAC,CAAC,CAmBZ"}

package/dist/http/request.js

@@ -0,0 +1,73 @@
+/**
+ * One request helper for every service.
+ *
+ * Isomorphic: `fetch` only. The `fetchImpl` option exists so tests can drive it
+ * without a network, which is what lets the Core's test suite run with no vault
+ * session and no connection.
+ */
+import { errorFor, RateLimitError } from "./errors.js";
+function authHeaders(c) {
+    if (!c)
+        return {};
+    if (c.header)
+        return { [c.header]: c.scheme ? `${c.scheme}${c.token}` : c.token };
+    return { authorization: `${c.scheme ?? "Bearer "}${c.token}` };
+}
+/** Like `request`, but hands back headers too — GitHub declares scopes there. */
+export async function requestWithHeaders(url, opts = {}) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const headers = {
+        accept: "application/json",
+        ...authHeaders(opts.credentials),
+        ...opts.headers,
+    };
+    if (opts.body !== undefined)
+        headers["content-type"] = "application/json";
+    const res = await doFetch(url, {
+        method: opts.method ?? "GET",
+        headers,
+        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        const after = res.headers.get("retry-after");
+        throw errorFor(res.status, url, text, after ? Number(after) : undefined);
+    }
+    if (res.status === 204) {
+        return { data: undefined, headers: res.headers, status: res.status };
+    }
+    return { data: (await res.json()), headers: res.headers, status: res.status };
+}
+export async function request(url, opts = {}) {
+    return (await requestWithHeaders(url, opts)).data;
+}
+/**
+ * Retry a request while the error says it is worth retrying.
+ *
+ * Honours the provider's own `Retry-After` rather than guessing, and gives up
+ * immediately on anything unretryable — an auth failure retried three times is
+ * three failures and a slower error message.
+ */
+export async function withRetry(fn, opts = {}) {
+    const attempts = opts.attempts ?? 3;
+    const base = opts.baseDelayMs ?? 500;
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    let last;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            last = err;
+            const e = err;
+            if (typeof e?.retryable !== "boolean" || !e.retryable)
+                throw err;
+            if (i === attempts - 1)
+                break;
+            const advised = err instanceof RateLimitError && err.retryAfter ? err.retryAfter * 1000 : 0;
+            await sleep(Math.max(advised, base * 2 ** i));
+        }
+    }
+    throw last;
+}
+//# sourceMappingURL=request.js.map

package/dist/http/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/http/request.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAkB,MAAM,aAAa,CAAC;AAoBvE,SAAS,WAAW,CAAC,CAA0B;IAC7C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAClF,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,OAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;QAChC,GAAG,IAAI,CAAC,OAAO;KAChB,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAE1E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,SAAc,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,GAAW,EAAE,OAAuB,EAAE;IACrE,OAAO,CAAC,MAAM,kBAAkB,CAAI,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,OAA2F,EAAE;IAE7F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEpF,IAAI,IAAa,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,GAAG,CAAC;YACX,MAAM,CAAC,GAAG,GAAgB,CAAC;YAC3B,IAAI,OAAO,CAAC,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS;gBAAE,MAAM,GAAG,CAAC;YACjE,IAAI,CAAC,KAAK,QAAQ,GAAG,CAAC;gBAAE,MAAM;YAC9B,MAAM,OAAO,GAAG,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @heychunky/core — the engine the CLI, the worker and apps run on.
+ *
+ * This entry point is isomorphic: it runs in a browser bundle, an edge
+ * function and Node alike. Anything needing a filesystem, a child process or
+ * an operator's vault session lives behind `@heychunky/core/admin`.
+ */
+export * from "./config/names.ts";
+export * from "./config/environments.ts";
+export * from "./secrets/store.ts";
+export * from "./services/types.ts";
+export * from "./registry.ts";
+export * from "./http/errors.ts";
+export * from "./http/request.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+/**
+ * @heychunky/core — the engine the CLI, the worker and apps run on.
+ *
+ * This entry point is isomorphic: it runs in a browser bundle, an edge
+ * function and Node alike. Anything needing a filesystem, a child process or
+ * an operator's vault session lives behind `@heychunky/core/admin`.
+ */
+export * from "./config/names.js";
+export * from "./config/environments.js";
+export * from "./secrets/store.js";
+export * from "./services/types.js";
+export * from "./registry.js";
+export * from "./http/errors.js";
+export * from "./http/request.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Every action the factory can take, declared as data.
+ *
+ * Four things read this list and therefore cannot disagree with each other:
+ * the CLI's help, the CLI's decision to prompt, the worker's decision whether
+ * to retry after a crash, and the access report comparing what a key *holds*
+ * against what any command actually *uses*.
+ *
+ * The gate is data, not a judgement made at runtime. A whole policy you can
+ * read in one file beats one scattered across thirty call sites.
+ */
+/** How much ceremony an action requires before it runs. */
+export type Gate = 
+/** Reads. Nothing changes. Runs without asking. */
+"none"
+/** Say what is about to happen, wait for a yes. */
+ | "confirm"
+/**
+ * Spends money, destroys data, or reaches citizens. A fresh explicit yes
+ * every time — never inherited from earlier in the session — naming the
+ * target. The client refuses without it, so the guarantee survives a wrong
+ * skill file.
+ */
+ | "danger";
+/** Which credential an action reaches for. */
+export type Tier = 
+/** Factory keys. The operator's side. */
+"admin"
+/** The app's own credentials. Never a factory key. */
+ | "app";
+export interface Action {
+    service: string;
+    /** verb-noun, kebab-case. `create-repo`, not `create`. */
+    action: string;
+    tier: Tier;
+    gate: Gate;
+    /**
+     * Whether running it twice is the same as running it once.
+     *
+     * Load-bearing for the worker: a job that dies mid-run must know which steps
+     * are safe to repeat. Creating a Neon branch is; buying a domain is not.
+     */
+    idempotent: boolean;
+    /** True when running it costs money. */
+    spends?: boolean;
+    /** One line, for `--help` and the access report. */
+    summary: string;
+}
+export declare const ACTIONS: Action[];
+/** Every action for a service, in declaration order. */
+export declare function actionsFor(service: string): Action[];
+/** One action, or undefined. Callers decide whether a miss is an error. */
+export declare function findAction(service: string, action: string): Action | undefined;
+/** Services that appear in the registry, deduplicated, in declaration order. */
+export declare function services(): string[];
+/** Everything that spends money, destroys data, or reaches citizens. */
+export declare function dangerous(): Action[];
+/**
+ * Whether this action may run given what the caller has confirmed.
+ *
+ * Advisory — the guarantee is that destructive clients refuse without an
+ * explicit flag. This is what lets a CLI or a worker decide *before* calling,
+ * so it can ask rather than fail.
+ */
+export declare function mayRun(action: Action, confirmed: boolean): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,2DAA2D;AAC3D,MAAM,MAAM,IAAI;AACd,mDAAmD;AACjD,MAAM;AACR,mDAAmD;GACjD,SAAS;AACX;;;;;GAKG;GACD,QAAQ,CAAC;AAEb,8CAA8C;AAC9C,MAAM,MAAM,IAAI;AACd,yCAAyC;AACvC,OAAO;AACT,sDAAsD;GACpD,KAAK,CAAC;AAEV,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,eAAO,MAAM,OAAO,EAAE,MAAM,EAwG3B,CAAC;AAEF,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpD;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE9E;AAED,gFAAgF;AAChF,wBAAgB,QAAQ,IAAI,MAAM,EAAE,CAEnC;AAED,wEAAwE;AACxE,wBAAgB,SAAS,IAAI,MAAM,EAAE,CAEpC;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAElE"}

package/dist/registry.js

@@ -0,0 +1,137 @@
+/**
+ * Every action the factory can take, declared as data.
+ *
+ * Four things read this list and therefore cannot disagree with each other:
+ * the CLI's help, the CLI's decision to prompt, the worker's decision whether
+ * to retry after a crash, and the access report comparing what a key *holds*
+ * against what any command actually *uses*.
+ *
+ * The gate is data, not a judgement made at runtime. A whole policy you can
+ * read in one file beats one scattered across thirty call sites.
+ */
+const A = (a) => a;
+export const ACTIONS = [
+    // ─── github ────────────────────────────────────────────────────────────────
+    A({ service: "github", action: "list-repos", tier: "admin", gate: "none", idempotent: true,
+        summary: "Every repository this token can reach, across all organisations" }),
+    A({ service: "github", action: "list-public-repos", tier: "admin", gate: "none", idempotent: true,
+        summary: "Public repositories on the user — the policy expects none" }),
+    A({ service: "github", action: "create-repo", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Create a private repository in an organisation or on the user" }),
+    A({ service: "github", action: "delete-repo", tier: "admin", gate: "danger", idempotent: false,
+        summary: "Delete a repository, with its issues, pull requests and history" }),
+    A({ service: "github", action: "create-branch", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Create a branch from another branch" }),
+    // ─── vercel ────────────────────────────────────────────────────────────────
+    A({ service: "vercel", action: "list-projects", tier: "admin", gate: "none", idempotent: true,
+        summary: "Vercel projects on the team" }),
+    A({ service: "vercel", action: "list-deployments", tier: "admin", gate: "none", idempotent: true,
+        summary: "Recent deployments, newest first" }),
+    A({ service: "vercel", action: "list-env-keys", tier: "admin", gate: "none", idempotent: true,
+        summary: "Environment variable names on a project — never their values" }),
+    A({ service: "vercel", action: "create-project", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Create a project, optionally linked to a GitHub repository" }),
+    A({ service: "vercel", action: "list-domains", tier: "admin", gate: "none", idempotent: true,
+        summary: "Domains on a project, and whether their DNS checks out" }),
+    A({ service: "vercel", action: "add-domain", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Attach a domain to a project" }),
+    A({ service: "vercel", action: "create-deployment", tier: "admin", gate: "confirm", idempotent: false,
+        summary: "Build a git ref — production needs the branch named" }),
+    A({ service: "vercel", action: "promote-deployment", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Make an existing deployment the live one, without rebuilding" }),
+    A({ service: "vercel", action: "set-env-var", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Set one variable for one environment, replacing what is there" }),
+    // ─── neon ──────────────────────────────────────────────────────────────────
+    A({ service: "neon", action: "list-projects", tier: "admin", gate: "none", idempotent: true,
+        summary: "Neon projects across every organisation this key can see" }),
+    A({ service: "neon", action: "list-branches", tier: "admin", gate: "none", idempotent: true,
+        summary: "Branches on a Neon project, and which is the default" }),
+    A({ service: "neon", action: "create-project", tier: "admin", gate: "confirm", idempotent: true,
+        spends: true, summary: "Create a database project, with its default branch and endpoint" }),
+    A({ service: "neon", action: "create-branch", tier: "admin", gate: "confirm", idempotent: true,
+        spends: true, summary: "Create a branch with its own compute endpoint" }),
+    A({ service: "neon", action: "delete-branch", tier: "admin", gate: "danger", idempotent: false,
+        summary: "Delete a branch and everything in it. Neon refuses the default branch" }),
+    A({ service: "neon", action: "reset-branch", tier: "admin", gate: "danger", idempotent: false,
+        summary: "Overwrite a branch from its parent, discarding everything in it" }),
+    A({ service: "neon", action: "list-tables", tier: "app", gate: "none", idempotent: true,
+        summary: "Tables in the app's own database" }),
+    A({ service: "neon", action: "list-columns", tier: "app", gate: "none", idempotent: true,
+        summary: "Columns of one table, with their types" }),
+    A({ service: "neon", action: "run-query", tier: "app", gate: "none", idempotent: true,
+        summary: "Read-only SQL, inside a Postgres READ ONLY transaction" }),
+    A({ service: "neon", action: "run-write", tier: "app", gate: "confirm", idempotent: false,
+        summary: "Mutate the app's data — production requires a separate opt-in" }),
+    // ─── cloudflare ────────────────────────────────────────────────────────────
+    A({ service: "cloudflare", action: "list-zones", tier: "admin", gate: "none", idempotent: true,
+        summary: "Cloudflare zones on the account, and whether each is active" }),
+    A({ service: "cloudflare", action: "list-dns-records", tier: "admin", gate: "none", idempotent: true,
+        summary: "DNS records for one domain" }),
+    A({ service: "cloudflare", action: "set-dns-record", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Add a DNS record, replacing one of the same type and name" }),
+    // ─── resend ────────────────────────────────────────────────────────────────
+    A({ service: "resend", action: "list-domains", tier: "admin", gate: "none", idempotent: true,
+        summary: "Sending domains and whether they are verified" }),
+    A({ service: "resend", action: "create-domain", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Add a sending domain, and return the DNS records it needs" }),
+    A({ service: "resend", action: "verify-domain", tier: "admin", gate: "confirm", idempotent: true,
+        summary: "Ask Resend to check a domain's DNS and mark it verified" }),
+    A({ service: "resend", action: "create-sending-key", tier: "admin", gate: "confirm", idempotent: false,
+        summary: "A key that can only send, and only from one domain" }),
+    A({ service: "resend", action: "list-keys", tier: "admin", gate: "none", idempotent: true,
+        summary: "API keys on the account — names only" }),
+    // ─── agentmail ─────────────────────────────────────────────────────────────
+    A({ service: "agentmail", action: "list-inboxes", tier: "admin", gate: "none", idempotent: true,
+        summary: "Agent inboxes on the account, with their addresses" }),
+    A({ service: "agentmail", action: "list-domains", tier: "admin", gate: "none", idempotent: true,
+        summary: "Sending domains and their DKIM state" }),
+    // ─── bunny ─────────────────────────────────────────────────────────────────
+    A({ service: "bunny", action: "list-zones", tier: "admin", gate: "none", idempotent: true,
+        summary: "Storage zones and how much they hold" }),
+    A({ service: "bunny", action: "list-app-zones", tier: "admin", gate: "none", idempotent: true,
+        summary: "Storage zones belonging to one app" }),
+    // ─── inference ─────────────────────────────────────────────────────────────
+    A({ service: "elevenlabs", action: "list-voices", tier: "admin", gate: "none", idempotent: true,
+        summary: "Voices available on the plan" }),
+    A({ service: "elevenlabs", action: "list-models", tier: "admin", gate: "none", idempotent: true,
+        summary: "Speech synthesis models available on the plan" }),
+    A({ service: "ai-gateway", action: "list-models", tier: "admin", gate: "none", idempotent: true,
+        summary: "Models reachable through the AI Gateway" }),
+    A({ service: "ai-gateway", action: "get-credits", tier: "admin", gate: "none", idempotent: true,
+        summary: "Remaining balance on the AI Gateway account" }),
+    A({ service: "togetherai", action: "list-models", tier: "admin", gate: "none", idempotent: true,
+        summary: "Models available for inference on Together AI" }),
+    A({ service: "fireworks", action: "list-models", tier: "admin", gate: "none", idempotent: true,
+        summary: "Models available for inference on Fireworks" }),
+    A({ service: "firecrawl", action: "get-credits", tier: "admin", gate: "none", idempotent: true,
+        summary: "Remaining crawl credits and when the period ends" }),
+    A({ service: "firecrawl", action: "scrape-url", tier: "admin", gate: "confirm", idempotent: true,
+        spends: true, summary: "Scrape one URL — consumes credits" }),
+];
+/** Every action for a service, in declaration order. */
+export function actionsFor(service) {
+    return ACTIONS.filter((a) => a.service === service);
+}
+/** One action, or undefined. Callers decide whether a miss is an error. */
+export function findAction(service, action) {
+    return ACTIONS.find((a) => a.service === service && a.action === action);
+}
+/** Services that appear in the registry, deduplicated, in declaration order. */
+export function services() {
+    return [...new Set(ACTIONS.map((a) => a.service))];
+}
+/** Everything that spends money, destroys data, or reaches citizens. */
+export function dangerous() {
+    return ACTIONS.filter((a) => a.gate === "danger");
+}
+/**
+ * Whether this action may run given what the caller has confirmed.
+ *
+ * Advisory — the guarantee is that destructive clients refuse without an
+ * explicit flag. This is what lets a CLI or a worker decide *before* calling,
+ * so it can ask rather than fail.
+ */
+export function mayRun(action, confirmed) {
+    return action.gate === "none" || confirmed;
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA0CH,MAAM,CAAC,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,OAAO,GAAa;IAC/B,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACtF,OAAO,EAAE,iEAAiE,EAAE,CAAC;IACjF,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC7F,OAAO,EAAE,2DAA2D,EAAE,CAAC;IAC3E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC1F,OAAO,EAAE,+DAA+D,EAAE,CAAC;IAC/E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK;QAC1F,OAAO,EAAE,iEAAiE,EAAE,CAAC;IACjF,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC5F,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAErD,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACzF,OAAO,EAAE,6BAA6B,EAAE,CAAC;IAC7C,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC5F,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAClD,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACzF,OAAO,EAAE,8DAA8D,EAAE,CAAC;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC7F,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAC5E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACxF,OAAO,EAAE,wDAAwD,EAAE,CAAC;IACxE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QACzF,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK;QACjG,OAAO,EAAE,qDAAqD,EAAE,CAAC;IACrE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QACjG,OAAO,EAAE,8DAA8D,EAAE,CAAC;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC1F,OAAO,EAAE,+DAA+D,EAAE,CAAC;IAE/E,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACvF,OAAO,EAAE,0DAA0D,EAAE,CAAC;IAC1E,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACvF,OAAO,EAAE,sDAAsD,EAAE,CAAC;IACtE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC3F,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,iEAAiE,EAAE,CAAC;IAC/F,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC1F,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC7E,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK;QAC1F,OAAO,EAAE,uEAAuE,EAAE,CAAC;IACvF,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK;QACzF,OAAO,EAAE,iEAAiE,EAAE,CAAC;IACjF,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACnF,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAClD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACpF,OAAO,EAAE,wCAAwC,EAAE,CAAC;IACxD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACjF,OAAO,EAAE,wDAAwD,EAAE,CAAC;IACxE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK;QACrF,OAAO,EAAE,+DAA+D,EAAE,CAAC;IAE/E,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC1F,OAAO,EAAE,6DAA6D,EAAE,CAAC;IAC7E,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAChG,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAC5C,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QACjG,OAAO,EAAE,2DAA2D,EAAE,CAAC;IAE3E,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACxF,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC/D,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC5F,OAAO,EAAE,2DAA2D,EAAE,CAAC;IAC3E,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC5F,OAAO,EAAE,yDAAyD,EAAE,CAAC;IACzE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK;QAClG,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACrF,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAEtD,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,sCAAsC,EAAE,CAAC;IAEtD,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACrF,OAAO,EAAE,sCAAsC,EAAE,CAAC;IACtD,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QACzF,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAEpD,8EAA8E;IAC9E,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC/D,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACzD,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC7D,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC3F,OAAO,EAAE,+CAA+C,EAAE,CAAC;IAC/D,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC1F,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC7D,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;QAC1F,OAAO,EAAE,kDAAkD,EAAE,CAAC;IAClE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI;QAC5F,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;CAClE,CAAC;AAEF,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,MAAc;IACxD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ;IACtB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,SAAkB;IACvD,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC;AAC7C,CAAC"}