@jevitate/cli 0.9.0 → 0.10.0

package/dist/journeeze-api.js

@@ -0,0 +1,285 @@
+import { createHash } from "node:crypto";
+import { mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, relative, isAbsolute } from "node:path";
+import { envCredentialStore, redactText } from "@jevitate/ai-core";
+import { exportCatalogBundle } from "./catalog-bundle-api.js";
+import { loadLocalCredentials } from "./credentials-file.js";
+import { readCliVersion } from "./version.js";
+import { JOURNEEZE_API_PREFIX, JOURNEEZE_KEY_ENV, JOURNEEZE_KEY_RE, JOURNEEZE_URL_ENV, JourneezeError, clockSleep, defaultKeySources, describeError, describeRef, fetchJourneezeHttp, jsonBody, loadConnection, pinnedJourneezeOrigin, resolveKeyRef, runConnect, scrubError, sendPinned, } from "./journeeze-connect.js";
+/**
+ * #464 — the Journeeze upload (journeeze-saas `docs/contract/catalog-bundle-upload-v1.md` §9).
+ *
+ * - `jevitate connect journeeze [--url <base>]` — CLI ONLY, never an MCP tool (journeeze-connect.ts):
+ *   the person names where the per-product upload key (`jzu_…`) is kept — an env var, a command, or a
+ *   password-manager entry — or types it hidden to check it first; the key is verified with
+ *   `GET /api/upload/v1/whoami`, the person confirms the product, and ONLY the reference is saved
+ *   (`~/.jevitate/journeeze.json`, bound to the Journeeze origin). The key is never saved by jevitate.
+ * - `jevitate publish journeeze [--dry-run]` / MCP `publish_to_journeeze`: exports the bundle
+ *   (catalog-bundle-api.ts), `POST /api/upload/v1/bundles` (bundle.json as `application/json`: 0.10
+ *   exports no media) with `Idempotency-Key = sha256-<hex of bundle.json>`, polls `statusUrl` to
+ *   `imported`/`refused`, and reports summary, warnings and errors. The key is resolved by jevitate
+ *   itself: `JOURNEEZE_UPLOAD_KEY` (CI; never the plaintext credentials file), else the saved
+ *   reference. It is never an argument, never in a result, never in an error — the model never sees
+ *   it. Hosts are pinned (contract §2) and redirects are never followed. Publishing never approves.
+ */
+export const JOURNEEZE_DEFAULT_URL = "https://app.journeeze.dev";
+/** Interactive: needs a person at a terminal (refuses without a TTY). The key is read here, never passed in. */
+export async function connectJourneeze(req, deps = {}) {
+    return runConnect(req.baseUrl, req.projectDir, deps);
+}
+/** Contract §4.2/§6: the body limit, and bundle.json's own (the JSON body IS bundle.json). */
+const MAX_BUNDLE_JSON_BYTES = 16 * 1024 * 1024;
+const POLL_START_MS = 1_000;
+const POLL_CAP_MS = 15_000;
+const POLL_BUDGET_MS = 10 * 60_000;
+/** Attempts for a retryable failure (429/503/network) — always with the same Idempotency-Key. */
+const MAX_ATTEMPTS = 3;
+const MAX_RETRY_AFTER_MS = 60_000;
+/**
+ * The key and origin to publish with: `JOURNEEZE_UPLOAD_KEY` (through ai-core's CredentialStore,
+ * whose plaintext-file fallback is disabled for it) at `JOURNEEZE_URL` / the saved origin / the
+ * default; else the saved reference, at the origin it is bound to.
+ */
+async function resolvePublishKey(req, deps) {
+    const env = deps.env ?? process.env;
+    let local = {};
+    try {
+        local = loadLocalCredentials(deps.homedir ? { homedir: deps.homedir } : {});
+    }
+    catch {
+        local = {}; // an unreadable credentials file never supplies this key anyway
+    }
+    const fromEnv = envCredentialStore(env, local).read(JOURNEEZE_KEY_ENV);
+    const saved = await loadConnection(req.catalogDir, deps);
+    const envUrl = env[JOURNEEZE_URL_ENV]?.trim();
+    if (fromEnv !== undefined) {
+        if (!JOURNEEZE_KEY_RE.test(fromEnv)) {
+            throw new JourneezeError("E_JOURNEEZE_KEY_FORMAT", `${JOURNEEZE_KEY_ENV} is not a Journeeze upload key (jzu_ followed by 40 characters)`);
+        }
+        return { key: fromEnv, origin: pinnedJourneezeOrigin(envUrl || saved?.baseUrl || JOURNEEZE_DEFAULT_URL) };
+    }
+    if (saved === undefined) {
+        throw new JourneezeError("E_JOURNEEZE_NOT_CONNECTED", `this project is not connected to Journeeze: a person runs \`jevitate connect journeeze\` at their terminal (or CI sets ${JOURNEEZE_KEY_ENV})`);
+    }
+    const origin = pinnedJourneezeOrigin(saved.baseUrl);
+    if (pinnedJourneezeOrigin(saved.keyRef.origin) !== origin || (envUrl && pinnedJourneezeOrigin(envUrl) !== origin)) {
+        throw new JourneezeError("E_JOURNEEZE_ORIGIN", `the saved key reference is bound to ${saved.keyRef.origin} — refusing to use it for another origin; run \`jevitate connect journeeze\` again`);
+    }
+    const sources = deps.sources ?? defaultKeySources(env);
+    try {
+        return { key: await resolveKeyRef(saved.keyRef, sources), origin };
+    }
+    catch (err) {
+        if (err instanceof JourneezeError) {
+            throw new JourneezeError(err.code, `${err.message} — fix ${describeRef(saved.keyRef)} or run \`jevitate connect journeeze\` again`);
+        }
+        throw err;
+    }
+}
+/** Exports the bundle into a temp dir and checks what the contract checks before `202` (§4.2). */
+async function buildBundle(req, deps, key) {
+    const outDir = await mkdtemp(join(tmpdir(), "jev-journeeze-"));
+    try {
+        const exported = await (deps.exportBundle ?? exportCatalogBundle)({ format: "journeeze-bundle", catalogDir: req.catalogDir, journeysDir: req.journeysDir, outDir });
+        const rel = relative(outDir, exported.bundlePath);
+        if (rel === "" || rel.startsWith("..") || isAbsolute(rel))
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", "the exported bundle is not where it was asked to be written");
+        const body = new Uint8Array(await readFile(exported.bundlePath));
+        if (body.byteLength > MAX_BUNDLE_JSON_BYTES) {
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", `bundle.json is ${body.byteLength} bytes — over Journeeze's ${MAX_BUNDLE_JSON_BYTES}-byte limit`);
+        }
+        const text = Buffer.from(body).toString("utf8");
+        if (text.includes(key))
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", "the bundle contains the upload key — refusing to send it");
+        let bundle;
+        try {
+            bundle = JSON.parse(text);
+        }
+        catch {
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", "the exported bundle.json is not JSON");
+        }
+        if (bundle.kind !== "journeeze.catalog-bundle" || bundle.version !== 1) {
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", 'the exported bundle is not a v1 catalog bundle (kind "journeeze.catalog-bundle", version 1)');
+        }
+        if (Array.isArray(bundle.files) && bundle.files.length > 0) {
+            throw new JourneezeError("E_JOURNEEZE_BUNDLE", "the bundle lists media files; this version uploads only a media-free bundle (application/json)");
+        }
+        const hex = createHash("sha256").update(body).digest("hex");
+        return { body, idempotencyKey: `sha256-${hex}` };
+    }
+    finally {
+        await rm(outDir, { recursive: true, force: true });
+    }
+}
+const RETRYABLE = new Set([429, 503]);
+function retryAfterMs(res, attempt) {
+    const header = res.headers.get("retry-after");
+    const seconds = header === null ? NaN : Number(header);
+    const ms = Number.isFinite(seconds) && seconds >= 0 ? seconds * 1000 : POLL_START_MS * 2 ** attempt;
+    return Math.min(ms, MAX_RETRY_AFTER_MS);
+}
+/** Contract §5: what the person does about a non-2xx, by code. */
+function errorFor(res, body) {
+    const what = describeError(res, body);
+    const code = typeof body.code === "string" ? body.code : "";
+    if (res.status === 401)
+        return new JourneezeError("E_JOURNEEZE_KEY_REFUSED", `Journeeze refused the upload key (${what}) — a person runs \`jevitate connect journeeze\` with a valid key`);
+    if (code === "key_in_url")
+        return new JourneezeError("E_JOURNEEZE_KEY_REVOKED", `Journeeze revoked the key because it appeared in a URL (${what}) — create a new key and reconnect`);
+    if (res.status === 403)
+        return new JourneezeError("E_JOURNEEZE_FORBIDDEN", `Journeeze refused the upload (${what}) — the key lacks the upload scope or the product is suspended`);
+    if (res.status === 409)
+        return new JourneezeError("E_JOURNEEZE_CONFLICT", `Journeeze refused the upload (${what})`);
+    if (RETRYABLE.has(res.status))
+        return new JourneezeError("E_JOURNEEZE_UNAVAILABLE", `Journeeze is busy or unavailable (${what}) — retry later; the same bundle reuses its Idempotency-Key`);
+    return new JourneezeError("E_JOURNEEZE_HTTP", `Journeeze refused the upload (${what})`);
+}
+const TERMINAL = new Set(["imported", "refused"]);
+/**
+ * Builds the result from a status body (contract §4.3). The nested summary is flattened to
+ * `section.counter` numbers; findings become warnings; errors keep their code and path.
+ */
+function fromStatus(base, s, statusUrl) {
+    const summary = {};
+    const raw = s.body.summary;
+    if (typeof raw === "object" && raw !== null) {
+        for (const [k, v] of Object.entries(raw)) {
+            if (typeof v === "number")
+                summary[k] = v;
+            else if (typeof v === "object" && v !== null)
+                for (const [k2, n] of Object.entries(v))
+                    if (typeof n === "number")
+                        summary[`${k}.${k2}`] = n;
+        }
+    }
+    const list = (v) => (Array.isArray(v) ? v.filter((x) => typeof x === "object" && x !== null) : []);
+    const warnings = list(s.body.findings).map((f) => `${String(f.severity ?? "warning")} ${String(f.kind ?? "finding")}${Array.isArray(f.ids) ? `: ${f.ids.join(", ")}` : ""}`);
+    const errors = list(s.body.errors).map((e) => `${String(e.code ?? "error")}: ${String(e.message ?? "")}${typeof e.path === "string" ? ` (at ${e.path})` : ""}`);
+    const status = s.status === "imported" || s.status === "refused" ? s.status : "processing";
+    return {
+        dryRun: false,
+        ...base,
+        ...(s.uploadId === undefined ? {} : { uploadId: s.uploadId }),
+        statusUrl,
+        status,
+        ...(Object.keys(summary).length > 0 ? { summary } : {}),
+        warnings: status === "processing" ? [...warnings, `Journeeze is still processing the upload — check ${statusUrl} later`] : warnings,
+        errors,
+    };
+}
+function parseStatus(body) {
+    return {
+        ...(typeof body.uploadId === "string" ? { uploadId: body.uploadId } : {}),
+        ...(typeof body.status === "string" ? { status: body.status } : {}),
+        ...(typeof body.statusUrl === "string" ? { statusUrl: body.statusUrl } : {}),
+        body,
+    };
+}
+async function upload(origin, key, bundle, deps) {
+    const http = deps.http ?? fetchJourneezeHttp;
+    const sleep = deps.sleep ?? clockSleep;
+    const auth = `Bearer ${key}`;
+    const base = { baseUrl: origin, idempotencyKey: bundle.idempotencyKey };
+    const digest = `sha-256=:${createHash("sha256").update(bundle.body).digest("base64")}:`;
+    let accepted;
+    let digestRetried = false;
+    for (let attempt = 0; accepted === undefined; attempt++) {
+        let res;
+        try {
+            res = await sendPinned(http, origin, {
+                method: "POST",
+                url: `${origin}${JOURNEEZE_API_PREFIX}/bundles`,
+                headers: {
+                    Authorization: auth,
+                    "Content-Type": "application/json",
+                    "Content-Length": String(bundle.body.byteLength),
+                    "Content-Digest": digest,
+                    "Idempotency-Key": bundle.idempotencyKey,
+                    "Journeeze-Producer": `jevitate/${readCliVersion()}`,
+                    Accept: "application/json",
+                },
+                body: bundle.body,
+            });
+        }
+        catch (err) {
+            if (err instanceof JourneezeError || attempt + 1 >= MAX_ATTEMPTS)
+                throw err;
+            await sleep(POLL_START_MS * 2 ** attempt); // a network failure: retry, same Idempotency-Key
+            continue;
+        }
+        const body = await jsonBody(res);
+        if (res.status === 202 || res.status === 200) {
+            accepted = parseStatus(body);
+            break;
+        }
+        if (RETRYABLE.has(res.status) && attempt + 1 < MAX_ATTEMPTS) {
+            await sleep(retryAfterMs(res, attempt));
+            continue;
+        }
+        if (res.status === 400 && body.code === "digest_mismatch" && !digestRetried) {
+            digestRetried = true; // contract §5: retry once, then stop
+            continue;
+        }
+        if (res.status === 413 || res.status === 422) {
+            // The bundle itself was refused before processing: a refused upload, not a transport failure.
+            return { dryRun: false, ...base, status: "refused", warnings: [], errors: [describeError(res, body)] };
+        }
+        throw errorFor(res, body);
+    }
+    const statusPath = accepted.statusUrl ?? (accepted.uploadId ? `${JOURNEEZE_API_PREFIX}/bundles/${encodeURIComponent(accepted.uploadId)}` : undefined);
+    if (statusPath === undefined)
+        throw new JourneezeError("E_JOURNEEZE_HTTP", "Journeeze accepted the upload but returned no upload id");
+    const statusUrl = new URL(statusPath, origin);
+    if (statusUrl.origin !== origin)
+        throw new JourneezeError("E_JOURNEEZE_ORIGIN", `Journeeze's statusUrl points to ${statusUrl.origin} — the key is never sent to another origin`);
+    let current = accepted;
+    let waited = 0;
+    let delay = POLL_START_MS;
+    const budget = deps.pollBudgetMs ?? POLL_BUDGET_MS;
+    while (!TERMINAL.has(current.status ?? "") && waited < budget) {
+        await sleep(delay);
+        waited += delay;
+        delay = Math.min(delay * 2, POLL_CAP_MS);
+        let res;
+        try {
+            res = await sendPinned(http, origin, { method: "GET", url: statusUrl.href, headers: { Authorization: auth, Accept: "application/json" } });
+        }
+        catch (err) {
+            if (err instanceof JourneezeError)
+                throw err;
+            continue; // a network blip while polling: keep polling within the window
+        }
+        const body = await jsonBody(res);
+        if (res.status === 200) {
+            const next = parseStatus(body);
+            current = next.uploadId === undefined && current.uploadId !== undefined ? { ...next, uploadId: current.uploadId } : next;
+        }
+        else if (!RETRYABLE.has(res.status))
+            throw errorFor(res, body);
+    }
+    return fromStatus(base, current, statusUrl.href);
+}
+export async function publishToJourneeze(req, deps = {}) {
+    let key;
+    try {
+        const resolved = await resolvePublishKey(req, deps);
+        key = resolved.key;
+        const bundle = await buildBundle(req, deps, key);
+        const result = req.dryRun
+            ? { dryRun: true, baseUrl: resolved.origin, idempotencyKey: bundle.idempotencyKey, status: "dry-run", warnings: [], errors: [] }
+            : await upload(resolved.origin, key, bundle, deps);
+        // Belt and braces: whatever Journeeze echoed, the key never leaves in a result.
+        const text = JSON.stringify(result);
+        return text.includes(key) ? JSON.parse(redactText(text, [key])) : result;
+    }
+    catch (err) {
+        throw scrubError(err, key === undefined ? [] : [key], "E_PUBLISH_JOURNEEZE");
+    }
+}
+/** The human rendering (no `--json`). */
+export function renderPublishJourneeze(r) {
+    const summary = r.summary === undefined ? "" : `${Object.entries(r.summary).map(([k, v]) => `  ${k}: ${v}`).join("\n")}\n`;
+    return `${r.dryRun ? "dry run: nothing sent" : `upload ${r.uploadId ?? "?"}: ${r.status}`} (${r.idempotencyKey}) → ${r.baseUrl}\n${summary}${r.warnings.map((w) => `warning: ${w}\n`).join("")}${r.errors.map((e) => `error: ${e}\n`).join("")}`;
+}
+//# sourceMappingURL=journeeze-api.js.map

package/dist/journeeze-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journeeze-api.js","sourceRoot":"","sources":["../src/journeeze-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAmE,MAAM,yBAAyB,CAAC;AAC/H,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,UAAU,EACV,UAAU,EACV,UAAU,GAKX,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAiBjE,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAA4B,EAAE,OAAoB,EAAE;IACzF,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAoCD,8FAA8F;AAC9F,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AACnC,iGAAiG;AACjG,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAOlC;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAA4B,EAAE,IAAiB;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,KAAK,GAA4C,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAC,CAAC,gEAAgE;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,wBAAwB,EAAE,GAAG,iBAAiB,iEAAiE,CAAC,CAAC;QAC5I,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,CAAC,MAAM,IAAI,KAAK,EAAE,OAAO,IAAI,qBAAqB,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CACtB,2BAA2B,EAC3B,0HAA0H,iBAAiB,GAAG,CAC/I,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,uCAAuC,KAAK,CAAC,MAAM,CAAC,MAAM,oFAAoF,CAAC,CAAC;IACjM,CAAC;IACD,MAAM,OAAO,GAAe,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,UAAU,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAOD,kGAAkG;AAClG,KAAK,UAAU,WAAW,CAAC,GAA4B,EAAE,IAAiB,EAAE,GAAW;IACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACpK,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,6DAA6D,CAAC,CAAC;QACzK,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;YAC5C,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,kBAAkB,IAAI,CAAC,UAAU,6BAA6B,qBAAqB,aAAa,CAAC,CAAC;QACnJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,0DAA0D,CAAC,CAAC;QACnI,IAAI,MAA8D,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,6FAA6F,CAAC,CAAC;QAChJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,gGAAgG,CAAC,CAAC;QACnJ,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEtC,SAAS,YAAY,CAAC,GAA0B,EAAE,OAAe;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC;IACpG,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,kEAAkE;AAClE,SAAS,QAAQ,CAAC,GAA0B,EAAE,IAA6B;IACzE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,cAAc,CAAC,yBAAyB,EAAE,qCAAqC,IAAI,mEAAmE,CAAC,CAAC;IAC3L,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,cAAc,CAAC,yBAAyB,EAAE,2DAA2D,IAAI,oCAAoC,CAAC,CAAC;IACrL,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,cAAc,CAAC,uBAAuB,EAAE,iCAAiC,IAAI,gEAAgE,CAAC,CAAC;IAClL,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,cAAc,CAAC,sBAAsB,EAAE,iCAAiC,IAAI,GAAG,CAAC,CAAC;IACpH,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,cAAc,CAAC,yBAAyB,EAAE,qCAAqC,IAAI,6DAA6D,CAAC,CAAC;IAC5L,OAAO,IAAI,cAAc,CAAC,kBAAkB,EAAE,iCAAiC,IAAI,GAAG,CAAC,CAAC;AAC1F,CAAC;AASD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAElD;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAgE,EAAE,CAAe,EAAE,SAAiB;IACtH,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;gBAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9I,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAkC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1K,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7K,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChK,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,KAAK;QACb,GAAG,IAAI;QACP,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7D,SAAS;QACT,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,QAAQ,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,oDAAoD,SAAS,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ;QACnI,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,IAAI;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,GAAW,EAAE,MAAmB,EAAE,IAAiB;IACvF,MAAM,IAAI,GAAkB,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;IACvC,MAAM,IAAI,GAAG,UAAU,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IAExF,IAAI,QAAkC,CAAC;IACvC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,KAAK,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,GAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG,MAAM,GAAG,oBAAoB,UAAU;gBAC/C,OAAO,EAAE;oBACP,aAAa,EAAE,IAAI;oBACnB,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBAChD,gBAAgB,EAAE,MAAM;oBACxB,iBAAiB,EAAE,MAAM,CAAC,cAAc;oBACxC,oBAAoB,EAAE,YAAY,cAAc,EAAE,EAAE;oBACpD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,IAAI,OAAO,GAAG,CAAC,IAAI,YAAY;gBAAE,MAAM,GAAG,CAAC;YAC5E,MAAM,KAAK,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,iDAAiD;YAC5F,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,YAAY,EAAE,CAAC;YAC5D,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5E,aAAa,GAAG,IAAI,CAAC,CAAC,qCAAqC;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,8FAA8F;YAC9F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACzG,CAAC;QACD,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,oBAAoB,YAAY,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtJ,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,yDAAyD,CAAC,CAAC;IACtI,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,mCAAmC,SAAS,CAAC,MAAM,4CAA4C,CAAC,CAAC;IAEjL,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;QAC9D,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC;QAChB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,GAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC7I,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc;gBAAE,MAAM,GAAG,CAAC;YAC7C,SAAS,CAAC,+DAA+D;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3H,CAAC;aAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAA4B,EAAE,OAAoB,EAAE;IAC3F,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,MAAM,GAA2B,GAAG,CAAC,MAAM;YAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAChI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,gFAAgF;QAChF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,MAAM,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,sBAAsB,CAAC,CAAyB;IAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3H,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,cAAc,OAAO,CAAC,CAAC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACnP,CAAC"}

package/dist/journeeze-connect.d.ts

@@ -0,0 +1,156 @@
+/**
+ * #464 — the Journeeze connection: which hosts an upload key may go to, how the key is found, and
+ * what `jevitate connect journeeze` saves (journeeze-saas `docs/contract/catalog-bundle-upload-v1.md`).
+ *
+ * The key itself is NEVER saved by jevitate. `connect` saves a REFERENCE to where the person keeps it
+ * (an environment variable, a command that prints it, or a password-manager entry), bound to the
+ * Journeeze origin it was verified against, in `~/.jevitate/journeeze.json` (outside the repo, 0600).
+ * The reference is shaped like `@jevitate/secrets`' `SecretRef` (`{manager, key, origin, field}`):
+ * jevitate delegates to the external source on every use and never implements a vault.
+ */
+/** The upload key's format (contract §3): `jzu_` + 40 lowercase base32 characters. */
+export declare const JOURNEEZE_KEY_RE: RegExp;
+/** The CI env var (contract §9); read through ai-core's `CredentialStore` (never its plaintext file). */
+export declare const JOURNEEZE_KEY_ENV = "JOURNEEZE_UPLOAD_KEY";
+/** Optional base URL for CI (`publish` only); pinned like `--url`. */
+export declare const JOURNEEZE_URL_ENV = "JOURNEEZE_URL";
+export declare const JOURNEEZE_API_PREFIX = "/api/upload/v1";
+/** Contract §2: the only hosts an upload key is ever sent to (plus loopback, only with `JEVITATE_JOURNEEZE_DEV=1`). */
+export declare const JOURNEEZE_PINNED_ORIGINS: readonly string[];
+/** `JEVITATE_JOURNEEZE_DEV=1` allows a loopback Journeeze (local development of Journeeze itself). */
+export declare const JOURNEEZE_DEV_ENV = "JEVITATE_JOURNEEZE_DEV";
+/** A Journeeze-specific refusal. `code` is stable; the message never carries a key. */
+export declare class JourneezeError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * The Journeeze origin for a base URL, or a `JourneezeError`: HTTPS on a pinned host, or — only when
+ * `JEVITATE_JOURNEEZE_DEV=1` is set — http(s) on a loopback host (local development, contract §2;
+ * otherwise an upload key would go over plain HTTP to whatever listens on that port). No path,
+ * credentials, query or fragment.
+ */
+export declare function pinnedJourneezeOrigin(baseUrl: string, env?: Readonly<Record<string, string | undefined>>): string;
+export interface JourneezeHttpRequest {
+    readonly method: "GET" | "POST";
+    readonly url: string;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body?: Uint8Array;
+}
+export interface JourneezeHttpResponse {
+    readonly status: number;
+    readonly headers: {
+        get(name: string): string | null;
+    };
+    text(): Promise<string>;
+}
+/** The one way jevitate talks to Journeeze; tests inject a fake. Redirects are never followed. */
+export type JourneezeHttp = (req: JourneezeHttpRequest) => Promise<JourneezeHttpResponse>;
+export declare const fetchJourneezeHttp: JourneezeHttp;
+/** Sends `req`, refusing any response that is a redirect (the key never follows one to another origin). */
+export declare function sendPinned(http: JourneezeHttp, origin: string, req: JourneezeHttpRequest): Promise<JourneezeHttpResponse>;
+/** The JSON body of a response, or `{}` when it is not JSON (unknown fields are ignored, contract §8). */
+export declare function jsonBody(res: JourneezeHttpResponse): Promise<Record<string, unknown>>;
+/** `code (requestId)` of an error response (contract §5), for messages. Never echoes the request. */
+export declare function describeError(res: JourneezeHttpResponse, body: Record<string, unknown>): string;
+/** The managers a reference can name: `env` (a variable), `cmd` (a shell command), or a password manager CLI. */
+export type JourneezeKeyManager = "env" | "cmd" | "op" | "bw" | "pass";
+/** What `connect` saves: where the key lives (never the key), bound to the origin it was verified on. */
+export interface JourneezeKeyRef {
+    readonly manager: JourneezeKeyManager;
+    /** The variable name, the command, or the manager's entry (`op://…`, a `bw` item, a `pass` path). */
+    readonly key: string;
+    readonly origin: string;
+    readonly field: "journeeze-upload-key";
+}
+/**
+ * Parses what the person typed at the reference prompt: `env:<VAR>`, `cmd:<command>`, `op://…`,
+ * `bw:<item>` or `pass:<path>`. Anything that looks like a key itself is refused (without echoing it).
+ */
+export declare function parseKeyRef(text: string, origin: string): JourneezeKeyRef;
+/** How a reference is resolved; tests inject fakes. Nothing resolved is cached or persisted. */
+export interface KeySources {
+    readonly env: Readonly<Record<string, string | undefined>>;
+    /** Runs a shell command (a `cmd:` reference); resolves its stdout. */
+    readonly runCommand: (command: string) => Promise<string>;
+    /** Runs a password manager's CLI without a shell; resolves its stdout. */
+    readonly exec: (cmd: string, args: readonly string[]) => Promise<string>;
+}
+export declare function defaultKeySources(env?: Readonly<Record<string, string | undefined>>): KeySources;
+/**
+ * The key a reference points to, or a `JourneezeError` that names the reference — never the source's
+ * output (a misconfigured source may print the secret on failure). The value is checked for the key
+ * format; the caller uses it only for the `Authorization` header.
+ */
+export declare function resolveKeyRef(ref: JourneezeKeyRef, sources: KeySources): Promise<string>;
+/** A display form of a reference (never a value). */
+export declare function describeRef(ref: JourneezeKeyRef): string;
+export interface JourneezeConnection {
+    readonly baseUrl: string;
+    readonly product: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly keyPrefix: string;
+    readonly keyRef: JourneezeKeyRef;
+    readonly connectedAt: string;
+}
+export interface ConnectionStoreDeps {
+    readonly homedir?: () => string;
+}
+export declare function connectionsPath(deps?: ConnectionStoreDeps): string;
+/** The connection's lookup key: the project data dir (absolute), or `*` outside a project. */
+export declare function projectKey(projectDir: string | null): string;
+/**
+ * The saved connection for a project: ONLY that project's own (a connection made in one project, or
+ * outside any, never uploads another project's catalog). The `*` connection (made outside any
+ * project) applies only outside a project, and never inside an MCP call. A project without its own
+ * connection is not connected: a person runs `jevitate connect journeeze` in that project.
+ */
+export declare function loadConnection(projectDir: string | null, deps?: ConnectionStoreDeps): Promise<JourneezeConnection | undefined>;
+/** Saves a connection (a reference, never a key) — refuses anything that looks like a key. */
+export declare function saveConnection(projectDir: string | null, conn: JourneezeConnection, deps?: ConnectionStoreDeps): Promise<string>;
+export interface Whoami {
+    readonly product: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly tenant: string;
+    readonly keyPrefix: string;
+}
+/** Verifies a key with `GET /whoami` — the only call `connect` makes with it. */
+export declare function whoami(http: JourneezeHttp, origin: string, key: string): Promise<Whoami>;
+/** The terminal `connect` talks to; tests inject a scripted one. Prompts go to stderr (stdout is the result). */
+export interface ConnectTerminal {
+    readonly isTTY: boolean;
+    /** A visible answer (the reference, the confirmation). */
+    ask(question: string): Promise<string>;
+    /** A hidden answer (the key): never echoed. */
+    askHidden(question: string): Promise<string>;
+    say(line: string): void;
+}
+export declare function processTerminal(): ConnectTerminal;
+export interface ConnectDeps extends ConnectionStoreDeps {
+    readonly http?: JourneezeHttp;
+    readonly terminal?: ConnectTerminal;
+    readonly sources?: KeySources;
+}
+export interface ConnectOutcome {
+    readonly baseUrl: string;
+    readonly product: {
+        readonly id: string;
+        readonly name: string;
+    };
+    readonly keyPrefix: string;
+    readonly stored: boolean;
+}
+/**
+ * `jevitate connect journeeze`: the person names where the key is kept (or types the key, hidden, to
+ * check it first — then names where it is kept, which must hold the same key); the key is verified
+ * with `whoami`; the person confirms the product; only the reference is saved.
+ */
+export declare function runConnect(baseUrl: string, projectDir: string | null, deps?: ConnectDeps): Promise<ConnectOutcome>;
+/** Re-throws `err` as a `JourneezeError` whose message has every given secret removed. */
+export declare function scrubError(err: unknown, secrets: readonly string[], fallbackCode: string): JourneezeError;
+/** Sleeps on jevitate's clock (tests inject their own). */
+export declare function clockSleep(ms: number): Promise<void>;