@lumenflow/cli 5.7.12 → 5.7.14

package/dist/distribution-preflight.js

@@ -1,230 +0,0 @@
-#!/usr/bin/env node
-// Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
-/**
- * distribution:preflight CLI Command (WU-2898)
- *
- * Audits every consumer repo that installs @lumenflow/* and reports whether
- * each one is ready for the npm-access flip from "public" to "restricted".
- *
- * For each consumer the preflight checks:
- *   - GitHub: NPM_TOKEN is registered as an Actions secret on the repo
- *     (`gh api repos/<repo>/actions/secrets`), and the repo has a `.npmrc`
- *     wired to the token.
- *   - Azure DevOps: prints a documented manual-check instruction. We cannot
- *     read pipeline secret variables programmatically without standing up an
- *     `az` PAT, so the report flags Azure rows as "needs manual check" so
- *     Tom can verify in the Azure DevOps web UI before the flip.
- *
- * Exits non-zero if any GitHub consumer is missing wiring, or if any Azure
- * DevOps row is unverified. Print a single table and a copy/paste remediation
- * footer so an operator can fix the gap and re-run.
- *
- * Usage:
- *   pnpm distribution:preflight
- *   pnpm distribution:preflight --json
- */
-import { execFileSync } from 'node:child_process';
-import { WU_STATUS } from '@lumenflow/core';
-import chalk from 'chalk';
-import Table from 'cli-table3';
-import { Command } from 'commander';
-export const DEFAULT_CONSUMERS = [
-    { kind: 'github', repo: 'hellmai/lumenflow-dev' },
-    { kind: 'github', repo: 'hellmai/lumenflow-cloud' },
-    { kind: 'github', repo: 'hellmai/patientpath.co.uk' },
-    { kind: 'azure-devops', project: 'skynexe', repo: 'skynexe-hub' },
-    { kind: 'azure-devops', project: 'skynexe', repo: 'skynexe-fund-analyser' },
-    { kind: 'azure-devops', project: 'skynexe', repo: 'skynexe-risk' },
-];
-/**
- * Production GitHub probe. Shells out to `gh` (already required by other
- * lifecycle commands), expecting the operator to be authenticated.
- */
-export const defaultRunGh = (args) => {
-    // sonarjs/no-os-command-from-path: this is a developer-machine CLI tool
-    // intentionally invoked by name so the operator's `gh` install (homebrew,
-    // apt, scoop, etc.) is picked up. Hard-coding an absolute path would
-    // break portability across the Mac/Linux/CI surfaces this script targets.
-    // eslint-disable-next-line sonarjs/no-os-command-from-path
-    return execFileSync('gh', args, {
-        encoding: 'utf8',
-        stdio: ['ignore', 'pipe', 'pipe'],
-    });
-};
-const NPM_TOKEN_NAME = 'NPM_TOKEN';
-/**
- * Probe a single GitHub consumer. Returns a ConsumerReport row.
- *
- * Failure semantics: if `gh` is unauthenticated or the repo is unreachable,
- * we return `npmTokenPresent: false` with a diagnostic note rather than
- * throwing — the preflight should report ALL consumer states in one pass,
- * not abort on the first error.
- */
-export function probeGitHubConsumer(consumer, deps) {
-    const repo = consumer.repo;
-    let npmTokenPresent = false;
-    let npmrcWired = false;
-    const notes = [];
-    // Check 1: repo Actions secrets contain NPM_TOKEN
-    try {
-        const stdout = deps.runGh(['api', `repos/${repo}/actions/secrets`]);
-        const parsed = JSON.parse(stdout);
-        const secrets = parsed.secrets ?? [];
-        npmTokenPresent = secrets.some((s) => s.name === NPM_TOKEN_NAME);
-        if (!npmTokenPresent) {
-            notes.push(`secret ${NPM_TOKEN_NAME} not found on ${repo}`);
-        }
-    }
-    catch (error) {
-        notes.push(`gh secrets probe failed: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    // Check 2: repo root contains a .npmrc with NPM_TOKEN auth
-    try {
-        const stdout = deps.runGh(['api', `repos/${repo}/contents/.npmrc`]);
-        const parsed = JSON.parse(stdout);
-        if (parsed.content && parsed.encoding === 'base64') {
-            const decoded = Buffer.from(parsed.content, 'base64').toString('utf8');
-            npmrcWired = /_authToken=\$\{?NPM_TOKEN\}?/.test(decoded);
-            if (!npmrcWired) {
-                notes.push(`.npmrc found on ${repo} but does not reference NPM_TOKEN`);
-            }
-        }
-        else {
-            notes.push(`.npmrc payload on ${repo} not in expected base64 shape`);
-        }
-    }
-    catch (error) {
-        notes.push(`.npmrc probe failed (${repo}): ${error instanceof Error ? error.message : String(error)}`);
-    }
-    return {
-        repo,
-        platform: 'github',
-        npmTokenPresent,
-        npmrcWired,
-        readyToFlip: npmTokenPresent && npmrcWired,
-        note: notes.join('; ') || 'OK',
-    };
-}
-/**
- * Build the manual-check report row for an Azure DevOps consumer.
- *
- * We deliberately do NOT shell out to `az` here. Authenticating the Azure
- * DevOps CLI requires per-developer PAT setup that the LumenFlow CI surface
- * does not own. Treating the row as "needs manual check" is honest — a false
- * green here would directly cause the consumer pipelines to break on the
- * privatization flip.
- */
-export function buildAzureDevOpsRow(consumer) {
-    const repo = `${consumer.project}/${consumer.repo}`;
-    return {
-        repo,
-        platform: 'azure-devops',
-        npmTokenPresent: null,
-        npmrcWired: null,
-        readyToFlip: null,
-        note: 'manual check required — verify pipeline variable NPM_TOKEN is set as a secret ' +
-            'and that .npmrc is wired in the repo root',
-    };
-}
-/**
- * Run the full preflight against the supplied consumer list. Returns the
- * raw report rows — formatting/exit-code policy is applied by `main`.
- */
-export function runPreflight(consumers, deps = { runGh: defaultRunGh }) {
-    return consumers.map((c) => c.kind === 'github' ? probeGitHubConsumer(c, deps) : buildAzureDevOpsRow(c));
-}
-/**
- * Pretty-print the report as an aligned ASCII table.
- *
- * The status column uses three glyphs:
- *   ready  = both checks passed (GitHub) — safe to flip
- *   FAIL   = GitHub repo missing NPM_TOKEN or .npmrc — fix before flip
- *   manual = Azure DevOps row — operator must verify out-of-band
- */
-export function formatReport(rows) {
-    const table = new Table({
-        head: ['Consumer', 'Platform', 'NPM_TOKEN', '.npmrc', 'Ready', 'Note'],
-        style: { head: [] },
-    });
-    const triBool = (v) => {
-        if (v === null)
-            return chalk.yellow('manual');
-        return v ? chalk.green('yes') : chalk.red('no');
-    };
-    const status = (row) => {
-        if (row.readyToFlip === null)
-            return chalk.yellow('manual');
-        if (row.readyToFlip)
-            return chalk.green(WU_STATUS.READY);
-        return chalk.red('FAIL');
-    };
-    for (const row of rows) {
-        table.push([
-            row.repo,
-            row.platform,
-            triBool(row.npmTokenPresent),
-            triBool(row.npmrcWired),
-            status(row),
-            row.note,
-        ]);
-    }
-    return table.toString();
-}
-/**
- * Compute the exit code policy. Non-zero if any GitHub row failed or any
- * row needs manual verification (since the operator MUST acknowledge the
- * Azure rows before the flip is safe).
- */
-export function computeExitCode(rows) {
-    const anyFail = rows.some((r) => r.readyToFlip === false);
-    const anyManual = rows.some((r) => r.readyToFlip === null);
-    return anyFail || anyManual ? 1 : 0;
-}
-/**
- * CLI entry point. Returns the resolved exit code so tests can assert it
- * without spawning a subprocess.
- */
-export function main(argv = process.argv, deps = { runGh: defaultRunGh }, log = (m) => console.log(m)) {
-    const program = new Command()
-        .name('distribution-preflight')
-        .description('Audit consumer repos for @lumenflow/* privatization readiness (WU-2898)')
-        .option('--json', 'Emit raw JSON instead of an ASCII table', false)
-        .parse(argv);
-    const opts = program.opts();
-    const rows = runPreflight(DEFAULT_CONSUMERS, deps);
-    if (opts.json) {
-        log(JSON.stringify(rows, null, 2));
-    }
-    else {
-        log(formatReport(rows));
-        const failed = rows.filter((r) => r.readyToFlip === false);
-        const manual = rows.filter((r) => r.readyToFlip === null);
-        if (failed.length > 0) {
-            log('');
-            log(chalk.red(`✗ ${failed.length} GitHub consumer(s) not ready:`));
-            for (const r of failed)
-                log(`  - ${r.repo}: ${r.note}`);
-        }
-        if (manual.length > 0) {
-            log('');
-            log(chalk.yellow(`⚠ ${manual.length} Azure DevOps consumer(s) need manual verification:`));
-            for (const r of manual)
-                log(`  - ${r.repo}: ${r.note}`);
-        }
-        if (failed.length === 0 && manual.length === 0) {
-            log('');
-            log(chalk.green('✓ all consumers ready to flip'));
-        }
-    }
-    return computeExitCode(rows);
-}
-// Run when invoked directly (not when imported by tests).
-const isDirectInvocation = import.meta.url === `file://${process.argv[1]}` ||
-    // tsup bundles the CLI as ESM with the bin shim — argv[1] still ends with
-    // distribution-preflight.js so this guard remains correct after build.
-    process.argv[1]?.endsWith('distribution-preflight.js');
-if (isDirectInvocation) {
-    process.exit(main());
-}
-//# sourceMappingURL=distribution-preflight.js.map

package/dist/distribution-preflight.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"distribution-preflight.js","sourceRoot":"","sources":["../src/distribution-preflight.ts"],"names":[],"mappings":";AACA,iCAAiC;AACjC,4DAA4D;AAE5D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACjD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACrD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE;IACjE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC3E,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE;CACnE,CAAC;AA+BF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAA2B,CAAC,IAAI,EAAE,EAAE;IAC3D,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,0EAA0E;IAC1E,2DAA2D;IAC3D,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;QAC9B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,WAAW,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAwB,EAAE,IAAmB;IAC/E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,kDAAkD;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA0C,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,UAAU,cAAc,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CACR,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4C,CAAC;QAC7E,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvE,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,mCAAmC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,+BAA+B,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CACR,wBAAwB,IAAI,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,QAAQ;QAClB,eAAe;QACf,UAAU;QACV,WAAW,EAAE,eAAe,IAAI,UAAU;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA6B;IAC/D,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpD,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,cAAc;QACxB,eAAe,EAAE,IAAI;QACrB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;QACjB,IAAI,EACF,gFAAgF;YAChF,2CAA2C;KAC9C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAqB,EACrB,OAAsB,EAAE,KAAK,EAAE,YAAY,EAAE;IAE7C,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;QACtE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;KACpB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,CAAiB,EAAU,EAAE;QAC5C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAmB,EAAU,EAAE;QAC7C,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,CAAC,IAAI;YACR,GAAG,CAAC,QAAQ;YACZ,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC;YACX,GAAG,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAClB,OAAiB,OAAO,CAAC,IAAI,EAC7B,OAAsB,EAAE,KAAK,EAAE,YAAY,EAAE,EAC7C,MAA6B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAElD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,wBAAwB,CAAC;SAC9B,WAAW,CAAC,yEAAyE,CAAC;SACtF,MAAM,CAAC,QAAQ,EAAE,yCAAyC,EAAE,KAAK,CAAC;SAClE,KAAK,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAqB,CAAC;IAE/C,MAAM,IAAI,GAAG,YAAY,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,EAAE,CAAC,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,gCAAgC,CAAC,CAAC,CAAC;YACnE,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,EAAE,CAAC,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,qDAAqD,CAAC,CAAC,CAAC;YAC3F,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,EAAE,CAAC,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,0DAA0D;AAC1D,MAAM,kBAAkB,GACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAC/C,0EAA0E;IAC1E,uEAAuE;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;AACzD,IAAI,kBAAkB,EAAE,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACvB,CAAC"}