@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/cli/help.js

@@ -0,0 +1,291 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.helpText = void 0;
+const install_source_1 = require("./install-source");
+const versions_1 = require("./versions");
+function helpText(version) {
+    return `
+pstack — @mouryaamit/nx-polystack CLI v${version}
+
+USAGE
+  pstack <command> [options]
+
+COMMANDS
+  new <dir>   Create a new polystack workspace in <dir> (installs deps, initialises git)
+  update      Upgrade this workspace's nx-polystack version and run its migrations
+  preset      Bootstrap a workspace root skeleton in the current directory
+  app         Scaffold a new application into an existing workspace
+  lib         Scaffold a shared library (ts, angular, ionic, flutter, assets, styles,
+              state, design-tokens, session, pii)
+  env         Add an environment to some or all apps later, copied from an existing one
+              (env file, build/serve/release configurations, Flutter env, npm scripts)
+  llm         Write or refresh the generated workspace block in CLAUDE.md, AGENTS.md and
+              .github/copilot-instructions.md (app/lib/env refresh it automatically)
+  migrate     Copy an existing project into the workspace, source never modified: a standalone
+              Angular CLI, Ionic/Capacitor or Flutter app (apps/<name>), the apps and libraries
+              of a multi-project Angular CLI repo (apps/, libs/), the Angular, Ionic and
+              Flutter projects of an Nx 15-17 workspace (same paths, names and aliases), or the
+              app and TypeScript library packages of an npm, Yarn or pnpm workspaces repo
+              (apps/, libs/)
+  encryption  Show or change the env encryption settings of release builds (nx.json
+              pstack.envEncryption)
+  build       Build every app (or some) for one environment: release targets of Angular/Ionic
+              apps and Flutter build targets, one at a time or --parallel, with a summary
+  release     Show or change an app's base href per release configuration
+  csp         Edit an app's csp-allowlist.json and write its .htaccess and nginx.conf from it
+              (strict CSP with a per-request nonce)
+  shared      Wire the shared assets and styles folders (libs/shared/assets, libs/shared/styles)
+              into existing Angular/Ionic apps; new apps get them automatically
+  hardening   Show or change an app's release hardening (leak check, source maps, comment and
+              console stripping, obfuscation, SRI for every chunk)
+  infra       Add repo docs, CI gates (affected lint/test/build, dependency cycles), quality
+              checks (knip, pre-push audit + secret scan) and a dependency-upgrade workflow
+
+OPTIONS — new / preset
+  --npmScope=<scope>           npm scope for the workspace (default: mouryaamit)
+  --baseBranch=<branch>        Default git branch (default: master)
+  --infra=<parts>              Run pstack infra with these parts: docs,ci,quality,upgrades | all |
+                               none (default: all)
+  --ci=<providers>             CI for the infra ci part: github-actions | jenkins (comma-separated;
+                               default: github-actions)
+  --ci-cache, --flutter=<mode>, --upgrade-schedule=<s>, --upgrade-scope=<s>
+                               passed to pstack infra
+  --llm=<tools>                AI-assistant files, as pstack llm: claude | agents | copilot
+                               (codex, openai-gpt → agents; comma-separated)
+  --projectDescription=<text>  Short project description
+  --skipFormat                 Skip Prettier format pass
+  --skip-install               new only — do not run npm install
+  --skip-git                   new only — do not initialise git
+  --force                      new only — allow creating inside another Nx workspace
+
+OPTIONS — update
+  --to=<version>               Target version (default: this CLI's version)
+  --allow-dirty                Run with uncommitted changes
+  --force                      Allow downgrading
+
+OPTIONS — app
+  --type=<type>                App type: angular | ionic | flutter  (required)
+  --name=<name>                Application name (required)
+  --dir=<path>                 Put the app in apps/<path>/<name> (v0.17.0+)
+  --tags=<tags>                Comma-separated Nx tags
+  --cspConnectSrc=<url>        Angular/Ionic — pre-fill CSP connect-src in csp-allowlist.json
+  --appId=<id>                 Ionic only — Capacitor appId (default: com.example.<name>)
+  --base-href=<path>           Base href of the uat and prod release configurations, e.g. /portal/
+  --port=<n>                   Dev-server port (default: the lowest free port from 4200)
+  --env-layout=<layout>        Angular/Ionic — default (environment.ts for dev) | per-env
+                               (environment.dev|uat|prod.ts replacing environments/environment.ts)
+
+OPTIONS — shared (--app or --all required)
+  --app=<a,b>                  Angular/Ionic apps to wire
+  --all                        Every Angular/Ionic app
+
+OPTIONS — lib
+  --type=<type>                Lib type (required): ts | angular | ionic | flutter | assets | styles |
+                               state | design-tokens | session (idle/session timeout) |
+                               pii (masking pipe and directive)
+  --name=<name>                Library name, kebab-case (required)
+  --scope=<scope>              Folder under libs/ and project-name prefix
+                               (default: shared; ionic → ionic; flutter → flutter)
+  --dir=<path>                 Put the lib in libs/<scope>/<path>/<name> (at most 2 folders; v0.19.0+)
+  --variant=<variant>          angular/ionic: internal | buildable | publishable
+                               (default: buildable)
+                               state: simple-service | ngrx (default: simple-service; always buildable)
+  --prefix=<prefix>            angular/ionic: component selector prefix (default: lib)
+  --tags=<tags>                Comma-separated extra Nx tags
+
+OPTIONS — env
+  --name=<name>                Environment slug, e.g. qa, sit, staging (required)
+  --app=<a,b> | --all          Apps to add it to (one of them is required)
+  --from=<env>                 Environment to copy (default uat); secret values become
+                               \${APP_ENV_KEY} placeholders filled at build time
+  --api-url=<url>              API base URL of the new environment
+  --production[=false]         production flag of the new Angular env file (default: as --from)
+  --base-href=<path>           Base href of the new configuration (default: as --from)
+  --domains=<hosts>            aes-gcm domain lock of the new release configuration
+
+OPTIONS — encryption (no options: show the settings)
+  --mode=<mode>                listed (encrypt the listed keys) | all (every field except publicKeys)
+  --add-key=<keys>             Add keys to encrypt in listed mode (comma-separated)
+  --remove-key=<keys>          Remove keys
+  --project=<env project>      Keys of this env project (default: default)
+  --add-public=<keys>          Keys kept in plain text in mode all
+  --remove-public=<keys>       Remove public keys
+  --format=<format>            raw | enc (values written as ENC(…), read by runtime/env-secret)
+  --profile-files=<files>      Files next to the env file whose sensitive fields are encrypted
+                               (e.g. app.profile.ts; empty value clears)
+  --meta-name=<name>           Meta tag carrying the build info and key (default: x-build)
+  --timezone=<tz>              Build stamp time zone, e.g. Asia/Kolkata (default: UTC)
+  --stamp-format=<format>      Build stamp format (default: DD MMM YYYY hh:mm:ss A z)
+  --cipher=<cipher>            cryptojs (default) | aes-gcm (Web Crypto; main.ts awaits envReady)
+  --key-sources=<list>         aes-gcm key factors besides the internal per-build key: commit,
+                               salt, env (PSTACK_ENV_KEY), custom (PSTACK_CUSTOM_KEY + getKey).
+                               salt and env values ship in the bundle like the commit: use a
+                               dedicated random value, never a real secret; only custom stays out
+  --rotate-salt                New tools/config/env-salt
+  --app=<project>              App whose release target gets the options below
+  --key-split=<split>          meta-bundle (default) | meta-bundle-asset
+  --domains=<conf>=<hosts>     Hosts the build may run on, per configuration, separated by ;
+                               e.g. uat=a.com,b.in;prod=a.com (uat= removes the list)
+  --include-www=<bool>         example.com also allows www.example.com (default: true)
+  --on-mismatch=<mode>         block (default) | warn
+
+OPTIONS — llm
+  --providers=<list>           claude | agents | copilot, comma-separated (default: all three;
+                               codex, openai-gpt → agents). Only the text between the
+                               nx-polystack markers is managed; the rest of each file is kept.
+
+OPTIONS — migrate
+  --source=<path>              Project to migrate: its repo root (required unless --rollback;
+                               read only)
+  --name=<name>                App name, kebab-case (default: the Angular project name or
+                               the pubspec name); for workspace sources the report name
+  --adapter=<id>               Skip detection: angular-cli | flutter | nx-workspace | angular-workspace | ionic |
+                               npm-workspaces, or an adapter listed in nx.json
+  --min-confidence=<n>         Use the best adapter when it reaches n (0.50 to 1.00; default 0.80; v0.15.0+)
+  --dir=<path>                 Single-app sources: put the app in apps/<path>/<name> (v0.16.0+)
+  --detect                     Print the detection table (adapter, confidence, reasons) and
+                               exit; writes nothing, works outside a workspace
+  --projects=<a,b>             Workspace sources: projects to migrate (default: every supported one)
+  --no-deps                    Workspace sources: only the --projects named, not the libs they import
+  --prefix=<p>                 Workspace sources: rename projects to <p>-<name> (aliases kept)
+  --force-angular              Migrate even when the workspace and the source use different
+                               Angular majors (the report flags it)
+  --max-files=<n>              Fail when more than n files would be copied (default: 20000)
+  --no-rewrite-imports         Keep the copied imports as they were (v0.21.0+). By default,
+                               relative imports into another moved project, imports through the
+                               source baseUrl, @nrwl/* packages and relative SCSS paths are
+                               rewritten in the copies; the report lists each one
+  --new-adapter=<id>           Write a starter adapter tools/migrate/<id>.adapter.ts (with a
+                               spec) and list it in nx.json "pstack.migrateAdapters" (v0.22.0+).
+                               Listed adapters join detection, --adapter and --config; write
+                               them with @mouryaamit/nx-polystack/migrate
+  --rollback=<name>            Undo migration <name> (v0.13.0+): removes the files it created and
+                               reverts its package.json/tsconfig/nx.json changes; anything edited
+                               since is kept and listed in docs/migrations/<name>.rollback.md
+  --force                      With --rollback: remove or restore the edited items too
+  --config=<file>              Run the migrations listed in a JSON batch file (v0.14.0+), all or
+                               nothing: { "defaults": {...}, "migrations": [ { "source": ... } ] };
+                               relative sources are resolved from the file's folder; values in
+                               the file win over --force-angular / --max-files
+  Writes docs/migrations/<name>.md and <name>.manifest.json (for --rollback). Without
+  --adapter the most confident adapter is used if its confidence is at least 0.80.
+
+OPTIONS — infra
+  --with=<parts>               docs | ci | quality | upgrades, comma-separated, or all | none
+                               (default: all)
+  --ci=<providers>             github-actions | jenkins, comma-separated (default: github-actions);
+                               the upgrade workflow is GitHub Actions only
+  --ci-cache                   GitHub Actions: cache the Nx cache directory between runs
+  --flutter=<mode>             Set up Flutter in CI: auto (when a pubspec.yaml is under apps/ or
+                               libs/) | on | off; default auto
+  --upgrade-schedule=<when>    weekly (Monday 03:17 UTC) | monthly (1st, 03:17 UTC); default weekly
+  --upgrade-scope=<scope>      polystack (pstack update) | nx-minor (also nx migrate within the
+                               current Nx major); default polystack
+  --lint-staged=warn|block     ESLint on commit: report without blocking (warn, the default of new
+                               workspaces) or block on errors
+  --force                      Overwrite files that already exist (.husky/pre-push is always
+                               appended to, never replaced)
+  The quality part also adds typecheck targets (tsc --noEmit) and the import/no-unresolved and
+  unused-imports ESLint rules (warnings).
+  Existing files are kept and listed; npm scripts and dependencies are only added when missing.
+
+OPTIONS — build
+  --env=<env>                  Environment, e.g. uat (configuration name or its env option)
+  --all | --projects=<a,b>     Every app, or these
+  --exclude=<a,b>              Leave these out
+  --parallel=<n>               Builds at once, 1-8 (default 1)
+  --continue                   Keep going after a failed build (default: stop)
+  --flutter-platforms=<list>   web,android,ios (default web)
+  --report=<file.json>         Also write the summary as JSON
+  --dry-run                    Show the plan only
+
+OPTIONS — release (--app required; no other options: show the base hrefs)
+  --app=<project>              App whose release configurations are shown or changed
+  --configuration=<name>       Only this configuration (default: every non-DEV configuration)
+  --base-href=<path>|none      Base href, starting and ending with / (none: remove)
+
+OPTIONS — csp (--app required; writes the server files that are missing or were written by it)
+  --app=<project>              Angular/Ionic app
+  --add=<dir>:<src>[,…]        Add sources, e.g. script-src:https://www.googletagmanager.com
+  --remove=<dir>:<src>[,…]     Remove sources
+  --import=<file|policy>       Merge an existing policy into csp-allowlist.json: a CSP header value,
+                               .htaccess / nginx.conf, or JSON (directive → sources); refused
+                               sources ('unsafe-inline', 'unsafe-eval', http:, …) are listed, not
+                               imported; paths covered by a host entry are dropped
+  --force                      Also replace hand-written .htaccess / nginx.conf
+  --dry-run                    Show what would change
+
+OPTIONS — hardening (--app required; no other options: show the settings)
+  --app=<project>              App whose release target is shown or changed
+  --configuration=<name>       Only this configuration (default: every non-DEV configuration)
+  --obfuscate=<level>          off | light (≈ +20% gzip) | medium (≈ +67%) | strong (also rc4
+                               and control-flow flattening on the decrypt chunk); adds
+                               javascript-obfuscator
+  --obfuscate-options=<json>   javascript-obfuscator overrides on top of the level, e.g.
+                               '{"stringArrayThreshold":0.3}' (none: clear)
+  --sri[=false]                Integrity for every chunk; aes-gcm decrypts nothing without it
+  --leak-check=fail|warn|off   Plaintext of encrypted env values in the output
+  --source-maps=fail|warn|off  .map files or sourceMappingURL comments in the output
+  --strip-comments[=false]     Remove comments from the built JS, CSS and index.html
+  --drop-console=<methods>     Console calls removed, e.g. log,debug,warn (none: keep all)
+
+GLOBAL FLAGS
+  --dry-run, -d                Preview changes without writing files
+  --verbose                    Verbose output
+  --help,    -h                Show this help
+  --version, -v                Print version
+  Flag values must use --flag=value (a space-separated value is read as an argument).
+
+Inside a workspace that has its own nx-polystack installed, pstack hands app/lib/env/llm/encryption/hardening/build/release/csp/shared/preset/migrate/infra
+to that pinned copy so generated files always match the workspace's plugin version.
+
+INSTALL${(0, install_source_1.installSource)().kind === 'github' ? ' (needs the GitHub CLI, signed in: gh auth login)' : ''}
+  ${(0, versions_1.globalInstallCommand)(version)}
+
+EXAMPLES
+  pstack new my-workspace --npmScope=acme --ci=github-actions --llm=claude
+  pstack app --type=angular --name=portal
+  pstack app --type=ionic --name=field-ops --appId=com.acme.fieldops
+  pstack app --type=flutter --name=mobile-app --tags=platform:mobile
+  pstack app --type=angular --name=portal --dir=legacy
+  pstack lib --type=angular --name=ui --variant=publishable
+  pstack lib --type=flutter --name=shared-core
+  pstack lib --type=state --name=orders --variant=ngrx
+  pstack lib --type=design-tokens --name=brand
+  pstack lib --type=session --name=session
+  pstack lib --type=pii --name=pii-mask
+  pstack lib --type=angular --name=ui --dir=forms
+  pstack env --name=qa --app=portal --api-url=https://qa.example.com/api
+  pstack env --name=sit --all --from=prod --production=false
+  pstack llm
+  pstack llm --providers=claude,agents
+  pstack migrate --source=../legacy-portal --detect
+  pstack migrate --source=../legacy-portal --min-confidence=0.6
+  pstack migrate --source=../legacy-portal --name=portal --dir=legacy
+  pstack migrate --source=../legacy-portal --name=portal
+  pstack migrate --source=../field_notes --adapter=flutter --dry-run
+  pstack migrate --source=../nx-repo --projects=portal --prefix=legacy
+  pstack migrate --rollback=portal --dry-run
+  pstack migrate --config=tools/migrations.json --dry-run
+  pstack infra
+  pstack infra --with=docs,ci --ci=jenkins
+  pstack infra --with=upgrades --upgrade-schedule=monthly --upgrade-scope=nx-minor
+  pstack infra --with=none --lint-staged=block
+  pstack new my-workspace --infra=docs,ci
+  pstack build --env=uat --all
+  pstack build --env=prod --projects=portal,admin --parallel=2 --continue --report=dist/build.json
+  pstack release --app=portal --base-href=/portal/
+  pstack app --type=angular --name=portal --base-href=/portal/
+  pstack app --type=angular --name=admin --port=4300 --env-layout=per-env
+  pstack shared --all
+  nx run portal:clean
+  pstack csp --app=portal --add=connect-src:https://api.example.com
+  pstack csp --app=portal --import=apps/portal/src/.htaccess --dry-run
+  pstack hardening --app=portal
+  pstack hardening --app=portal --configuration=uat --obfuscate=light --sri
+  pstack update
+  pstack update --to=0.3.0 --dry-run
+`.trimStart();
+}
+exports.helpText = helpText;
+//# sourceMappingURL=help.js.map

package/dist/src/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":";;;AAAA,qDAAiD;AACjD,yCAAkD;AAElD,SAAgB,QAAQ,CAAC,OAAe;IACtC,OAAO;yCACgC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA2O5C,IAAA,8BAAa,GAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,EAC5F;IACE,IAAA,+BAAoB,EAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6ChC,CAAC,SAAS,EAAE,CAAC;AACd,CAAC;AA7RD,4BA6RC"}

package/dist/src/cli/install-source.d.ts

@@ -0,0 +1,16 @@
+/** Where the plugin is installed from: a GitHub repo (git tags + release assets) or npm. */
+export type InstallSource = {
+    kind: 'github';
+    repo: string;
+} | {
+    kind: 'npm';
+};
+/** The private development repo; also the source when package.json does not say. */
+export declare const DEV_GITHUB_REPO = "example-org/private-plugin";
+/** `"npm"` or `"github:<owner>/<repo>"` (package.json `pstack.installSource`). */
+export declare function parseInstallSource(value: unknown): InstallSource;
+/** pstack.installSource from the plugin's own package.json (the first one above `from`). */
+export declare function readInstallSource(from?: string): InstallSource;
+export declare function installSource(): InstallSource;
+/** Tests only: pretend to be a build with another install source (undefined: read it again). */
+export declare function setInstallSourceForTests(source: InstallSource | undefined): void;

package/dist/src/cli/install-source.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setInstallSourceForTests = exports.installSource = exports.readInstallSource = exports.parseInstallSource = exports.DEV_GITHUB_REPO = void 0;
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const PACKAGE = '@mouryaamit/nx-polystack';
+/** The private development repo; also the source when package.json does not say. */
+exports.DEV_GITHUB_REPO = 'example-org/private-plugin';
+const DEFAULT = { kind: 'github', repo: exports.DEV_GITHUB_REPO };
+/** `"npm"` or `"github:<owner>/<repo>"` (package.json `pstack.installSource`). */
+function parseInstallSource(value) {
+    if (value === undefined)
+        return DEFAULT;
+    if (value === 'npm')
+        return { kind: 'npm' };
+    const m = typeof value === 'string' ? /^github:([\w.-]+\/[\w.-]+)$/.exec(value) : null;
+    if (m)
+        return { kind: 'github', repo: m[1] };
+    throw new Error(`${PACKAGE}: package.json pstack.installSource must be "npm" or "github:<owner>/<repo>", not ${JSON.stringify(value)}.`);
+}
+exports.parseInstallSource = parseInstallSource;
+/** pstack.installSource from the plugin's own package.json (the first one above `from`). */
+function readInstallSource(from = __dirname) {
+    for (let dir = from;;) {
+        const file = path.join(dir, 'package.json');
+        if (fs.existsSync(file)) {
+            const pkg = JSON.parse(fs.readFileSync(file, 'utf8'));
+            if (pkg.name === PACKAGE)
+                return parseInstallSource(pkg.pstack?.installSource);
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return DEFAULT;
+        dir = parent;
+    }
+}
+exports.readInstallSource = readInstallSource;
+let current;
+function installSource() {
+    return (current ??= readInstallSource());
+}
+exports.installSource = installSource;
+/** Tests only: pretend to be a build with another install source (undefined: read it again). */
+function setInstallSourceForTests(source) {
+    current = source;
+}
+exports.setInstallSourceForTests = setInstallSourceForTests;
+//# sourceMappingURL=install-source.js.map

package/dist/src/cli/install-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-source.js","sourceRoot":"","sources":["../../../src/cli/install-source.ts"],"names":[],"mappings":";;;;AAAA,+CAAyB;AACzB,mDAA6B;AAK7B,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,oFAAoF;AACvE,QAAA,eAAe,GAAG,4BAA4B,CAAC;AAC5D,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAe,EAAE,CAAC;AAEzE,kFAAkF;AAClF,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,qFAAqF,IAAI,CAAC,SAAS,CAC3G,KAAK,CACN,GAAG,CACL,CAAC;AACJ,CAAC;AAVD,gDAUC;AAED,4FAA4F;AAC5F,SAAgB,iBAAiB,CAAC,OAAe,SAAS;IACxD,KAAK,IAAI,GAAG,GAAG,IAAI,IAAM;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;SAChF;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC;QACnC,GAAG,GAAG,MAAM,CAAC;KACd;AACH,CAAC;AAXD,8CAWC;AAED,IAAI,OAAkC,CAAC;AAEvC,SAAgB,aAAa;IAC3B,OAAO,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC,CAAC;AAC3C,CAAC;AAFD,sCAEC;AAED,gGAAgG;AAChG,SAAgB,wBAAwB,CAAC,MAAiC;IACxE,OAAO,GAAG,MAAM,CAAC;AACnB,CAAC;AAFD,4DAEC"}

package/dist/src/cli/launcher.d.ts

@@ -0,0 +1,32 @@
+/// <reference types="node" />
+import type { Flags } from './args';
+import type { LocalPlugin } from './context';
+/** Commands the global CLI always runs itself. */
+export declare const NEVER_DELEGATE: Set<string>;
+/** Generator commands that act on the workspace (run from its root when delegated). */
+export declare const WORKSPACE_COMMANDS: Set<string>;
+/** First plugin version whose CLI has each command; older pinned copies cannot run them. */
+export declare const MIN_LOCAL_VERSION: Readonly<Record<string, string>>;
+/** First plugin version that understands a flag of a command (checked when the flag is given). */
+export declare const MIN_LOCAL_FLAG_VERSION: Readonly<Record<string, Readonly<Record<string, string>>>>;
+/**
+ * argv for the delegated CLI: relative path flags (e.g. migrate --source) made absolute when
+ * the delegate runs in a different directory than the caller.
+ */
+export declare function delegationArgs(command: string, argv: string[], cwd: string, delegateCwd: string): string[];
+/**
+ * Throws when the workspace's pinned plugin is too old for `command` (it would only print
+ * "Unknown command"). Unreadable versions are let through.
+ */
+export declare function assertLocalSupports(command: string, localVersion: string, flags?: Flags): void;
+export interface DelegationInput {
+    command: string;
+    flags: Flags;
+    env: NodeJS.ProcessEnv;
+    selfRoot: string;
+    local: LocalPlugin | null;
+}
+export declare function shouldDelegate(i: DelegationInput): boolean;
+/** Run another pstack CLI with the given args; returns its exit code. */
+export declare function delegate(cliPath: string, args: string[], cwd: string): number;
+export declare function upgradeHint(localVersion: string, selfVersion: string): string | null;

package/dist/src/cli/launcher.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upgradeHint = exports.delegate = exports.shouldDelegate = exports.assertLocalSupports = exports.delegationArgs = exports.MIN_LOCAL_FLAG_VERSION = exports.MIN_LOCAL_VERSION = exports.WORKSPACE_COMMANDS = exports.NEVER_DELEGATE = void 0;
+const tslib_1 = require("tslib");
+const child_process_1 = require("child_process");
+const fs = tslib_1.__importStar(require("fs"));
+const path = tslib_1.__importStar(require("path"));
+const types_1 = require("./types");
+const versions_1 = require("./versions");
+/** Commands the global CLI always runs itself. */
+exports.NEVER_DELEGATE = new Set(['', 'help', 'new', 'update', '_migrate']);
+/** Generator commands that act on the workspace (run from its root when delegated). */
+exports.WORKSPACE_COMMANDS = new Set([
+    'app',
+    'env',
+    'lib',
+    'llm',
+    'migrate',
+    'infra',
+    'encryption',
+    'hardening',
+    'build',
+    'release',
+    'csp',
+    'shared',
+]);
+/** First plugin version whose CLI has each command; older pinned copies cannot run them. */
+exports.MIN_LOCAL_VERSION = {
+    lib: '0.6.0',
+    llm: '0.7.0',
+    migrate: '0.12.0',
+    infra: '0.9.0',
+    encryption: '0.25.0',
+    hardening: '0.30.0',
+    build: '0.32.0',
+    release: '0.32.0',
+    csp: '0.33.0',
+    shared: '0.35.0',
+};
+/** First plugin version that understands a flag of a command (checked when the flag is given). */
+exports.MIN_LOCAL_FLAG_VERSION = {
+    app: { dir: '0.17.0', baseHref: '0.32.0', port: '0.35.0', envLayout: '0.35.0' },
+    env: { app: '0.34.0', all: '0.34.0', from: '0.34.0', baseHref: '0.34.0', domains: '0.34.0' },
+    lib: { dir: '0.19.0' },
+    csp: { import: '0.38.0' },
+    infra: { lintStaged: '0.36.0' },
+    migrate: {
+        rollback: '0.13.0',
+        config: '0.14.0',
+        minConfidence: '0.15.0',
+        dir: '0.16.0',
+        noRewriteImports: '0.21.0',
+        rewriteImports: '0.21.0',
+        newAdapter: '0.22.0',
+    },
+};
+/** Path flags resolved against the caller's cwd, so they survive delegating from another cwd. */
+const PATH_FLAGS = {
+    migrate: ['source', 'config'],
+    build: ['report'],
+    csp: ['import'],
+};
+/** Path flags that may also hold plain text: made absolute only when the file exists. */
+const PATH_FLAGS_IF_FILE = {
+    csp: ['import'],
+};
+/**
+ * argv for the delegated CLI: relative path flags (e.g. migrate --source) made absolute when
+ * the delegate runs in a different directory than the caller.
+ */
+function delegationArgs(command, argv, cwd, delegateCwd) {
+    const flags = PATH_FLAGS[command];
+    if (!flags || path.resolve(cwd) === path.resolve(delegateCwd))
+        return argv;
+    return argv.map((arg) => {
+        for (const flag of flags) {
+            const prefix = `--${flag}=`;
+            if (arg.startsWith(prefix)) {
+                const value = arg.slice(prefix.length);
+                if (!value || path.isAbsolute(value))
+                    return arg;
+                const resolved = path.resolve(cwd, value);
+                if (PATH_FLAGS_IF_FILE[command]?.includes(flag) && !fs.existsSync(resolved))
+                    return arg;
+                return `${prefix}${resolved}`;
+            }
+        }
+        return arg;
+    });
+}
+exports.delegationArgs = delegationArgs;
+/**
+ * Throws when the workspace's pinned plugin is too old for `command` (it would only print
+ * "Unknown command"). Unreadable versions are let through.
+ */
+function assertLocalSupports(command, localVersion, flags) {
+    const needs = [];
+    const min = exports.MIN_LOCAL_VERSION[command];
+    if (min)
+        needs.push([`pstack ${command}`, min]);
+    for (const [flag, v] of Object.entries(exports.MIN_LOCAL_FLAG_VERSION[command] ?? {})) {
+        if (flags && flags[flag] !== undefined && flags[flag] !== false) {
+            const kebab = flag.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`);
+            needs.push([`pstack ${command} --${kebab}`, v]);
+        }
+    }
+    for (const [what, version] of needs) {
+        let cmp;
+        try {
+            cmp = (0, versions_1.compareVersions)(localVersion, version);
+        }
+        catch {
+            return;
+        }
+        if (cmp < 0) {
+            throw new types_1.CliError(`${what} needs nx-polystack >= ${version} in this workspace (found ${localVersion}). ` +
+                'Run "pstack update" first.');
+        }
+    }
+}
+exports.assertLocalSupports = assertLocalSupports;
+function real(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return path.resolve(p);
+    }
+}
+function shouldDelegate(i) {
+    if (!i.local)
+        return false;
+    if (i.env['PSTACK_DELEGATED'] === '1')
+        return false;
+    if (exports.NEVER_DELEGATE.has(i.command))
+        return false;
+    if (i.flags['help'] || i.flags['h'] || i.flags['version'] || i.flags['v'])
+        return false;
+    return real(i.local.root) !== real(i.selfRoot);
+}
+exports.shouldDelegate = shouldDelegate;
+/** Run another pstack CLI with the given args; returns its exit code. */
+function delegate(cliPath, args, cwd) {
+    const r = (0, child_process_1.spawnSync)(process.execPath, [cliPath, ...args], {
+        cwd,
+        stdio: 'inherit',
+        env: { ...process.env, PSTACK_DELEGATED: '1' },
+    });
+    if (r.error)
+        throw r.error;
+    return r.status ?? 1;
+}
+exports.delegate = delegate;
+function upgradeHint(localVersion, selfVersion) {
+    let cmp;
+    try {
+        cmp = (0, versions_1.compareVersions)(localVersion, selfVersion);
+    }
+    catch {
+        return null;
+    }
+    if (cmp >= 0)
+        return null;
+    return (`pstack: workspace uses nx-polystack v${localVersion}, global CLI is v${selfVersion} — ` +
+        `run "pstack update" to upgrade.`);
+}
+exports.upgradeHint = upgradeHint;
+//# sourceMappingURL=launcher.js.map

package/dist/src/cli/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../../src/cli/launcher.ts"],"names":[],"mappings":";;;;AAAA,iDAA0C;AAC1C,+CAAyB;AACzB,mDAA6B;AAI7B,mCAAmC;AACnC,yCAA6C;AAE7C,kDAAkD;AACrC,QAAA,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjF,uFAAuF;AAC1E,QAAA,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACxC,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,SAAS;IACT,OAAO;IACP,YAAY;IACZ,WAAW;IACX,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH,4FAA4F;AAC/E,QAAA,iBAAiB,GAAqC;IACjE,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,OAAO;IACZ,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,QAAQ;IACjB,GAAG,EAAE,QAAQ;IACb,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,kGAAkG;AACrF,QAAA,sBAAsB,GAA+D;IAChG,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC/E,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5F,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;IACtB,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;IACzB,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE;IAC/B,OAAO,EAAE;QACP,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,QAAQ;QACvB,GAAG,EAAE,QAAQ;QACb,gBAAgB,EAAE,QAAQ;QAC1B,cAAc,EAAE,QAAQ;QACxB,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC;AAEF,iGAAiG;AACjG,MAAM,UAAU,GAAgD;IAC9D,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,GAAG,EAAE,CAAC,QAAQ,CAAC;CAChB,CAAC;AAEF,yFAAyF;AACzF,MAAM,kBAAkB,GAAgD;IACtE,GAAG,EAAE,CAAC,QAAQ,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,SAAgB,cAAc,CAC5B,OAAe,EACf,IAAc,EACd,GAAW,EACX,WAAmB;IAEnB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;YACxB,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,CAAC;YAC5B,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;gBAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,GAAG,CAAC;gBACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC1C,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,GAAG,CAAC;gBACxF,OAAO,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;aAC/B;SACF;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AArBD,wCAqBC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,OAAe,EAAE,YAAoB,EAAE,KAAa;IACtF,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,yBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,8BAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;QAC7E,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;SACjD;KACF;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE;QACnC,IAAI,GAAW,CAAC;QAChB,IAAI;YACF,GAAG,GAAG,IAAA,0BAAe,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;SAC9C;QAAC,MAAM;YACN,OAAO;SACR;QACD,IAAI,GAAG,GAAG,CAAC,EAAE;YACX,MAAM,IAAI,gBAAQ,CAChB,GAAG,IAAI,0BAA0B,OAAO,6BAA6B,YAAY,KAAK;gBACpF,4BAA4B,CAC/B,CAAC;SACH;KACF;AACH,CAAC;AAxBD,kDAwBC;AAUD,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI;QACF,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;KAC3B;IAAC,MAAM;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACxB;AACH,CAAC;AAED,SAAgB,cAAc,CAAC,CAAkB;IAC/C,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,sBAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC;AAND,wCAMC;AAED,yEAAyE;AACzE,SAAgB,QAAQ,CAAC,OAAe,EAAE,IAAc,EAAE,GAAW;IACnE,MAAM,CAAC,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE;QACxD,GAAG;QACH,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;KAC/C,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,KAAK;QAAE,MAAM,CAAC,CAAC,KAAK,CAAC;IAC3B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;AACvB,CAAC;AARD,4BAQC;AAED,SAAgB,WAAW,CAAC,YAAoB,EAAE,WAAmB;IACnE,IAAI,GAAW,CAAC;IAChB,IAAI;QACF,GAAG,GAAG,IAAA,0BAAe,EAAC,YAAY,EAAE,WAAW,CAAC,CAAC;KAClD;IAAC,MAAM;QACN,OAAO,IAAI,CAAC;KACb;IACD,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,CACL,wCAAwC,YAAY,oBAAoB,WAAW,KAAK;QACxF,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAZD,kCAYC"}

package/dist/src/cli/migrations.d.ts

@@ -0,0 +1,25 @@
+interface ManifestEntry {
+    version: string;
+    description?: string;
+    implementation?: string;
+}
+export interface MigrationsManifest {
+    generators?: Record<string, ManifestEntry>;
+}
+export interface MigrationEntry {
+    name: string;
+    version: string;
+    description?: string;
+    /** Path relative to the manifest directory. */
+    implementation: string;
+}
+export interface MigrationResult {
+    applied: string[];
+    failed?: {
+        name: string;
+        error: string;
+    };
+}
+export declare function selectMigrations(manifest: MigrationsManifest, from: string, to: string): MigrationEntry[];
+export declare function runMigrations(entries: MigrationEntry[], runOne: (e: MigrationEntry) => Promise<void>): Promise<MigrationResult>;
+export {};

package/dist/src/cli/migrations.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runMigrations = exports.selectMigrations = void 0;
+const versions_1 = require("./versions");
+function selectMigrations(manifest, from, to) {
+    return Object.entries(manifest.generators ?? {})
+        .filter(([, e]) => !!e.implementation)
+        .filter(([, e]) => (0, versions_1.compareVersions)(e.version, from) > 0 && (0, versions_1.compareVersions)(e.version, to) <= 0)
+        .map(([name, e]) => ({
+        name,
+        version: e.version,
+        description: e.description,
+        implementation: e.implementation,
+    }))
+        .sort((a, b) => (0, versions_1.compareVersions)(a.version, b.version) || a.name.localeCompare(b.name));
+}
+exports.selectMigrations = selectMigrations;
+async function runMigrations(entries, runOne) {
+    const applied = [];
+    for (const e of entries) {
+        try {
+            await runOne(e);
+            applied.push(e.name);
+        }
+        catch (err) {
+            return {
+                applied,
+                failed: { name: e.name, error: err instanceof Error ? err.message : String(err) },
+            };
+        }
+    }
+    return { applied };
+}
+exports.runMigrations = runMigrations;
+//# sourceMappingURL=migrations.js.map

package/dist/src/cli/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/cli/migrations.ts"],"names":[],"mappings":";;;AAAA,yCAA6C;AAyB7C,SAAgB,gBAAgB,CAC9B,QAA4B,EAC5B,IAAY,EACZ,EAAU;IAEV,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,0BAAe,EAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAA,0BAAe,EAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;SAC9F,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,cAAc,EAAE,CAAC,CAAC,cAAwB;KAC3C,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,0BAAe,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3F,CAAC;AAfD,4CAeC;AAEM,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,MAA4C;IAE5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;QACvB,IAAI;YACF,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACtB;QAAC,OAAO,GAAG,EAAE;YACZ,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAClF,CAAC;SACH;KACF;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAjBD,sCAiBC"}