@nimbase/cli 0.1.0 → 0.2.0

package/dist/chunk-2BYB6W4B.js

@@ -0,0 +1,44 @@
+import {
+  authPageUrl,
+  openInBrowser,
+  startBrowserAuthCallback
+} from "./chunk-IJCEQQWX.js";
+import {
+  NimbaseCommand,
+  describeError,
+  env,
+  writeSession
+} from "./chunk-KKZVWJDK.js";
+
+// src/browser-auth-command.ts
+var BrowserAuthCommand = class extends NimbaseCommand {
+  async authenticateInBrowser(page) {
+    const callback = await startBrowserAuthCallback(
+      new URL(env.NIMBASE_CLI_APP_URL).origin
+    ).catch((error) => this.error(describeError(error, this.apiUrl)));
+    const url = authPageUrl(env.NIMBASE_CLI_APP_URL, page, {
+      callbackPort: callback.port,
+      state: callback.state
+    });
+    this.log(`Opening Nimbase ${page} in your browser: ${url}`);
+    try {
+      await openInBrowser(url).catch(() => {
+        this.warn(`Could not open a browser. Visit ${url}`);
+      });
+      const oneTimeToken = await callback.token;
+      const token = await this.api.exchangeOneTimeToken(oneTimeToken);
+      const user = await this.api.getUser(token);
+      await writeSession(this.apiUrl, token);
+      this.log(`Signed in as ${user.email}.`);
+    } catch (error) {
+      this.error(describeError(error, this.apiUrl));
+    } finally {
+      await callback.close().catch(() => void 0);
+    }
+  }
+};
+
+export {
+  BrowserAuthCommand
+};
+//# sourceMappingURL=chunk-2BYB6W4B.js.map

package/dist/chunk-2BYB6W4B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser-auth-command.ts"],"sourcesContent":["import type { AuthPage } from \"./browser.js\";\nimport { NimbaseCommand } from \"./base-command.js\";\nimport {\n  authPageUrl,\n  openInBrowser,\n  startBrowserAuthCallback,\n} from \"./browser.js\";\nimport { writeSession } from \"./credentials.js\";\nimport { env } from \"./env.js\";\nimport { describeError } from \"./error-message.js\";\n\nexport abstract class BrowserAuthCommand extends NimbaseCommand {\n  protected async authenticateInBrowser(page: AuthPage): Promise<void> {\n    const callback = await startBrowserAuthCallback(\n      new URL(env.NIMBASE_CLI_APP_URL).origin,\n    ).catch((error: unknown) => this.error(describeError(error, this.apiUrl)));\n    const url = authPageUrl(env.NIMBASE_CLI_APP_URL, page, {\n      callbackPort: callback.port,\n      state: callback.state,\n    });\n\n    this.log(`Opening Nimbase ${page} in your browser: ${url}`);\n    try {\n      await openInBrowser(url).catch(() => {\n        this.warn(`Could not open a browser. Visit ${url}`);\n      });\n      const oneTimeToken = await callback.token;\n      const token = await this.api.exchangeOneTimeToken(oneTimeToken);\n      const user = await this.api.getUser(token);\n      await writeSession(this.apiUrl, token);\n      this.log(`Signed in as ${user.email}.`);\n    } catch (error) {\n      this.error(describeError(error, this.apiUrl));\n    } finally {\n      await callback.close().catch(() => undefined);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAWO,IAAe,qBAAf,cAA0C,eAAe;AAAA,EAC9D,MAAgB,sBAAsB,MAA+B;AACnE,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI,IAAI,IAAI,mBAAmB,EAAE;AAAA,IACnC,EAAE,MAAM,CAAC,UAAmB,KAAK,MAAM,cAAc,OAAO,KAAK,MAAM,CAAC,CAAC;AACzE,UAAM,MAAM,YAAY,IAAI,qBAAqB,MAAM;AAAA,MACrD,cAAc,SAAS;AAAA,MACvB,OAAO,SAAS;AAAA,IAClB,CAAC;AAED,SAAK,IAAI,mBAAmB,IAAI,qBAAqB,GAAG,EAAE;AAC1D,QAAI;AACF,YAAM,cAAc,GAAG,EAAE,MAAM,MAAM;AACnC,aAAK,KAAK,mCAAmC,GAAG,EAAE;AAAA,MACpD,CAAC;AACD,YAAM,eAAe,MAAM,SAAS;AACpC,YAAM,QAAQ,MAAM,KAAK,IAAI,qBAAqB,YAAY;AAC9D,YAAM,OAAO,MAAM,KAAK,IAAI,QAAQ,KAAK;AACzC,YAAM,aAAa,KAAK,QAAQ,KAAK;AACrC,WAAK,IAAI,gBAAgB,KAAK,KAAK,GAAG;AAAA,IACxC,SAAS,OAAO;AACd,WAAK,MAAM,cAAc,OAAO,KAAK,MAAM,CAAC;AAAA,IAC9C,UAAE;AACA,YAAM,SAAS,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IAC9C;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-6MCLE65K.js

@@ -0,0 +1,46 @@
+// src/connectors.ts
+function resolveConnector(connections, selector) {
+  const normalized = selector.trim().toLowerCase();
+  const matches = connections.filter(
+    (connection2) => connection2.id === selector || connection2.provider.toLowerCase() === normalized || connection2.displayName.toLowerCase() === normalized
+  );
+  const connection = matches[0];
+  if (!connection) return { kind: "not_found" };
+  if (matches.length > 1) return { kind: "ambiguous" };
+  return { kind: "found", connection };
+}
+function changedProviderConnection(before, after, provider) {
+  const timestamps = new Map(
+    before.map((connection) => [connection.id, connection.updatedAt.getTime()])
+  );
+  return after.find((connection) => {
+    if (connection.provider !== provider || connection.status !== "active") {
+      return false;
+    }
+    const previous = timestamps.get(connection.id);
+    return previous === void 0 || connection.updatedAt.getTime() > previous;
+  }) ?? null;
+}
+async function waitForConnectorConnection(load, before, provider, options) {
+  const now = options.now ?? Date.now;
+  const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+  const deadline = now() + options.timeoutMs;
+  while (now() <= deadline) {
+    const connection = changedProviderConnection(
+      before,
+      await load(),
+      provider
+    );
+    if (connection) return connection;
+    const remaining = deadline - now();
+    if (remaining <= 0) return null;
+    await sleep(Math.min(options.pollIntervalMs ?? 1e3, remaining));
+  }
+  return null;
+}
+
+export {
+  resolveConnector,
+  waitForConnectorConnection
+};
+//# sourceMappingURL=chunk-6MCLE65K.js.map

package/dist/chunk-6MCLE65K.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connectors.ts"],"sourcesContent":["import type { ConnectorConnection } from \"@nimbase/sdk\";\n\nexport function resolveConnector(\n  connections: readonly ConnectorConnection[],\n  selector: string,\n):\n  | { readonly kind: \"found\"; readonly connection: ConnectorConnection }\n  | { readonly kind: \"not_found\" }\n  | { readonly kind: \"ambiguous\" } {\n  const normalized = selector.trim().toLowerCase();\n  const matches = connections.filter(\n    (connection) =>\n      connection.id === selector ||\n      connection.provider.toLowerCase() === normalized ||\n      connection.displayName.toLowerCase() === normalized,\n  );\n  const connection = matches[0];\n  if (!connection) return { kind: \"not_found\" };\n  if (matches.length > 1) return { kind: \"ambiguous\" };\n  return { kind: \"found\", connection };\n}\n\nexport function changedProviderConnection(\n  before: readonly ConnectorConnection[],\n  after: readonly ConnectorConnection[],\n  provider: string,\n): ConnectorConnection | null {\n  const timestamps = new Map(\n    before.map((connection) => [connection.id, connection.updatedAt.getTime()]),\n  );\n  return (\n    after.find((connection) => {\n      if (connection.provider !== provider || connection.status !== \"active\") {\n        return false;\n      }\n      const previous = timestamps.get(connection.id);\n      return (\n        previous === undefined || connection.updatedAt.getTime() > previous\n      );\n    }) ?? null\n  );\n}\n\nexport async function waitForConnectorConnection(\n  load: () => Promise<readonly ConnectorConnection[]>,\n  before: readonly ConnectorConnection[],\n  provider: string,\n  options: {\n    readonly timeoutMs: number;\n    readonly pollIntervalMs?: number;\n    readonly now?: () => number;\n    readonly sleep?: (milliseconds: number) => Promise<void>;\n  },\n): Promise<ConnectorConnection | null> {\n  const now = options.now ?? Date.now;\n  const sleep =\n    options.sleep ??\n    ((milliseconds: number) =>\n      new Promise<void>((resolve) => setTimeout(resolve, milliseconds)));\n  const deadline = now() + options.timeoutMs;\n  while (now() <= deadline) {\n    const connection = changedProviderConnection(\n      before,\n      await load(),\n      provider,\n    );\n    if (connection) return connection;\n    const remaining = deadline - now();\n    if (remaining <= 0) return null;\n    await sleep(Math.min(options.pollIntervalMs ?? 1_000, remaining));\n  }\n  return null;\n}\n"],"mappings":";AAEO,SAAS,iBACd,aACA,UAIiC;AACjC,QAAM,aAAa,SAAS,KAAK,EAAE,YAAY;AAC/C,QAAM,UAAU,YAAY;AAAA,IAC1B,CAACA,gBACCA,YAAW,OAAO,YAClBA,YAAW,SAAS,YAAY,MAAM,cACtCA,YAAW,YAAY,YAAY,MAAM;AAAA,EAC7C;AACA,QAAM,aAAa,QAAQ,CAAC;AAC5B,MAAI,CAAC,WAAY,QAAO,EAAE,MAAM,YAAY;AAC5C,MAAI,QAAQ,SAAS,EAAG,QAAO,EAAE,MAAM,YAAY;AACnD,SAAO,EAAE,MAAM,SAAS,WAAW;AACrC;AAEO,SAAS,0BACd,QACA,OACA,UAC4B;AAC5B,QAAM,aAAa,IAAI;AAAA,IACrB,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,WAAW,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC5E;AACA,SACE,MAAM,KAAK,CAAC,eAAe;AACzB,QAAI,WAAW,aAAa,YAAY,WAAW,WAAW,UAAU;AACtE,aAAO;AAAA,IACT;AACA,UAAM,WAAW,WAAW,IAAI,WAAW,EAAE;AAC7C,WACE,aAAa,UAAa,WAAW,UAAU,QAAQ,IAAI;AAAA,EAE/D,CAAC,KAAK;AAEV;AAEA,eAAsB,2BACpB,MACA,QACA,UACA,SAMqC;AACrC,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,QACJ,QAAQ,UACP,CAAC,iBACA,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,YAAY,CAAC;AACpE,QAAM,WAAW,IAAI,IAAI,QAAQ;AACjC,SAAO,IAAI,KAAK,UAAU;AACxB,UAAM,aAAa;AAAA,MACjB;AAAA,MACA,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AACA,QAAI,WAAY,QAAO;AACvB,UAAM,YAAY,WAAW,IAAI;AACjC,QAAI,aAAa,EAAG,QAAO;AAC3B,UAAM,MAAM,KAAK,IAAI,QAAQ,kBAAkB,KAAO,SAAS,CAAC;AAAA,EAClE;AACA,SAAO;AACT;","names":["connection"]}

package/dist/chunk-IJCEQQWX.js

@@ -0,0 +1,150 @@
+// src/browser.ts
+import { spawn } from "child_process";
+import { randomBytes, timingSafeEqual } from "crypto";
+import { createServer } from "http";
+function authPageUrl(appUrl, page, callback) {
+  const url = new URL(appUrl);
+  url.pathname = `/${page}`;
+  url.search = "";
+  url.hash = "";
+  if (callback) {
+    url.searchParams.set("callback_port", callback.callbackPort.toString());
+    url.searchParams.set("state", callback.state);
+  }
+  return url.toString();
+}
+async function startBrowserAuthCallback(allowedOrigin, options = {}) {
+  const origin = new URL(allowedOrigin).origin;
+  const state = options.state ?? randomBytes(32).toString("base64url");
+  const timeoutMs = options.timeoutMs ?? 5 * 60 * 1e3;
+  let completed = false;
+  let resolveToken = () => void 0;
+  let rejectToken = () => void 0;
+  const token = new Promise((resolve, reject) => {
+    resolveToken = resolve;
+    rejectToken = reject;
+  });
+  const server = createServer((request, response) => {
+    void handleCallbackRequest(request, response, {
+      origin,
+      state,
+      completed: () => completed,
+      complete: (oneTimeToken) => {
+        completed = true;
+        resolveToken(oneTimeToken);
+      }
+    }).catch(() => {
+      if (!response.headersSent) response.writeHead(400);
+      response.end();
+    });
+  });
+  await new Promise((resolve, reject) => {
+    const handleError = (error) => reject(error);
+    server.once("error", handleError);
+    server.listen(0, "127.0.0.1", () => {
+      server.off("error", handleError);
+      resolve();
+    });
+  });
+  server.on("error", (error) => rejectToken(error));
+  const address = server.address();
+  const timer = setTimeout(() => {
+    rejectToken(new Error("Browser authentication timed out. Try again."));
+    void closeServer(server);
+  }, timeoutMs);
+  void token.finally(() => clearTimeout(timer)).catch(() => void 0);
+  return {
+    port: address.port,
+    state,
+    token,
+    close: () => closeServer(server)
+  };
+}
+function browserLaunchCommand(url, platform = process.platform) {
+  if (platform === "darwin") return { command: "open", args: [url] };
+  if (platform === "win32") {
+    return {
+      command: "cmd",
+      args: ["/d", "/s", "/c", `start "" "${url}"`]
+    };
+  }
+  return { command: "xdg-open", args: [url] };
+}
+async function openInBrowser(url) {
+  const launch = browserLaunchCommand(url);
+  await new Promise((resolve, reject) => {
+    const child = spawn(launch.command, launch.args, {
+      detached: true,
+      stdio: "ignore"
+    });
+    child.once("error", reject);
+    child.once("spawn", () => {
+      child.unref();
+      resolve();
+    });
+  });
+}
+async function handleCallbackRequest(request, response, options) {
+  if (request.headers.origin !== options.origin) {
+    response.writeHead(403).end();
+    return;
+  }
+  response.setHeader("Access-Control-Allow-Origin", options.origin);
+  response.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
+  response.setHeader("Access-Control-Allow-Headers", "Content-Type");
+  response.setHeader("Vary", "Origin");
+  if (request.headers["access-control-request-private-network"] === "true") {
+    response.setHeader("Access-Control-Allow-Private-Network", "true");
+  }
+  if (request.method === "OPTIONS") {
+    response.writeHead(204).end();
+    return;
+  }
+  if (request.method !== "POST" || request.url !== "/callback") {
+    response.writeHead(404).end();
+    return;
+  }
+  if (options.completed()) {
+    response.writeHead(409).end();
+    return;
+  }
+  const body = await readRequestBody(request);
+  const parsed = JSON.parse(body);
+  if (!isCallbackPayload(parsed) || !statesMatch(parsed.state, options.state)) {
+    response.writeHead(403).end();
+    return;
+  }
+  response.writeHead(204).end();
+  options.complete(parsed.token);
+}
+async function readRequestBody(request) {
+  let body = "";
+  for await (const chunk of request) {
+    body += Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk);
+    if (Buffer.byteLength(body) > 8 * 1024) {
+      throw new Error("Callback payload is too large.");
+    }
+  }
+  return body;
+}
+function isCallbackPayload(value) {
+  return typeof value === "object" && value !== null && "state" in value && typeof value.state === "string" && "token" in value && typeof value.token === "string" && value.token.length > 0 && value.token.length <= 512;
+}
+function statesMatch(received, expected) {
+  const receivedBytes = Buffer.from(received);
+  const expectedBytes = Buffer.from(expected);
+  return receivedBytes.length === expectedBytes.length && timingSafeEqual(receivedBytes, expectedBytes);
+}
+async function closeServer(server) {
+  if (!server.listening) return;
+  await new Promise((resolve, reject) => {
+    server.close((error) => error ? reject(error) : resolve());
+  });
+}
+
+export {
+  authPageUrl,
+  startBrowserAuthCallback,
+  openInBrowser
+};
+//# sourceMappingURL=chunk-IJCEQQWX.js.map

package/dist/chunk-IJCEQQWX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { createServer } from \"node:http\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { AddressInfo } from \"node:net\";\n\nexport type AuthPage = \"login\" | \"signup\";\n\ninterface AuthCallbackParameters {\n  callbackPort: number;\n  state: string;\n}\n\nexport interface BrowserAuthCallback {\n  readonly port: number;\n  readonly state: string;\n  readonly token: Promise<string>;\n  close(): Promise<void>;\n}\n\nexport function authPageUrl(\n  appUrl: string,\n  page: AuthPage,\n  callback?: AuthCallbackParameters,\n): string {\n  const url = new URL(appUrl);\n  url.pathname = `/${page}`;\n  url.search = \"\";\n  url.hash = \"\";\n  if (callback) {\n    url.searchParams.set(\"callback_port\", callback.callbackPort.toString());\n    url.searchParams.set(\"state\", callback.state);\n  }\n  return url.toString();\n}\n\nexport async function startBrowserAuthCallback(\n  allowedOrigin: string,\n  options: { state?: string; timeoutMs?: number } = {},\n): Promise<BrowserAuthCallback> {\n  const origin = new URL(allowedOrigin).origin;\n  const state = options.state ?? randomBytes(32).toString(\"base64url\");\n  const timeoutMs = options.timeoutMs ?? 5 * 60 * 1_000;\n  let completed = false;\n  let resolveToken: (token: string) => void = () => undefined;\n  let rejectToken: (error: Error) => void = () => undefined;\n  const token = new Promise<string>((resolve, reject) => {\n    resolveToken = resolve;\n    rejectToken = reject;\n  });\n\n  const server = createServer((request, response) => {\n    void handleCallbackRequest(request, response, {\n      origin,\n      state,\n      completed: () => completed,\n      complete: (oneTimeToken) => {\n        completed = true;\n        resolveToken(oneTimeToken);\n      },\n    }).catch(() => {\n      if (!response.headersSent) response.writeHead(400);\n      response.end();\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    const handleError = (error: Error) => reject(error);\n    server.once(\"error\", handleError);\n    server.listen(0, \"127.0.0.1\", () => {\n      server.off(\"error\", handleError);\n      resolve();\n    });\n  });\n\n  server.on(\"error\", (error) => rejectToken(error));\n  const address = server.address() as AddressInfo;\n  const timer = setTimeout(() => {\n    rejectToken(new Error(\"Browser authentication timed out. Try again.\"));\n    void closeServer(server);\n  }, timeoutMs);\n  void token.finally(() => clearTimeout(timer)).catch(() => undefined);\n\n  return {\n    port: address.port,\n    state,\n    token,\n    close: () => closeServer(server),\n  };\n}\n\nexport function browserLaunchCommand(\n  url: string,\n  platform: NodeJS.Platform = process.platform,\n): { command: string; args: string[] } {\n  if (platform === \"darwin\") return { command: \"open\", args: [url] };\n  if (platform === \"win32\") {\n    return {\n      command: \"cmd\",\n      args: [\"/d\", \"/s\", \"/c\", `start \"\" \"${url}\"`],\n    };\n  }\n  return { command: \"xdg-open\", args: [url] };\n}\n\nexport async function openInBrowser(url: string): Promise<void> {\n  const launch = browserLaunchCommand(url);\n\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn(launch.command, launch.args, {\n      detached: true,\n      stdio: \"ignore\",\n    });\n    child.once(\"error\", reject);\n    child.once(\"spawn\", () => {\n      child.unref();\n      resolve();\n    });\n  });\n}\n\ninterface CallbackRequestOptions {\n  origin: string;\n  state: string;\n  completed(): boolean;\n  complete(token: string): void;\n}\n\nasync function handleCallbackRequest(\n  request: IncomingMessage,\n  response: ServerResponse,\n  options: CallbackRequestOptions,\n): Promise<void> {\n  if (request.headers.origin !== options.origin) {\n    response.writeHead(403).end();\n    return;\n  }\n\n  response.setHeader(\"Access-Control-Allow-Origin\", options.origin);\n  response.setHeader(\"Access-Control-Allow-Methods\", \"POST, OPTIONS\");\n  response.setHeader(\"Access-Control-Allow-Headers\", \"Content-Type\");\n  response.setHeader(\"Vary\", \"Origin\");\n  if (request.headers[\"access-control-request-private-network\"] === \"true\") {\n    response.setHeader(\"Access-Control-Allow-Private-Network\", \"true\");\n  }\n\n  if (request.method === \"OPTIONS\") {\n    response.writeHead(204).end();\n    return;\n  }\n  if (request.method !== \"POST\" || request.url !== \"/callback\") {\n    response.writeHead(404).end();\n    return;\n  }\n  if (options.completed()) {\n    response.writeHead(409).end();\n    return;\n  }\n\n  const body = await readRequestBody(request);\n  const parsed: unknown = JSON.parse(body);\n  if (!isCallbackPayload(parsed) || !statesMatch(parsed.state, options.state)) {\n    response.writeHead(403).end();\n    return;\n  }\n\n  response.writeHead(204).end();\n  options.complete(parsed.token);\n}\n\nasync function readRequestBody(request: IncomingMessage): Promise<string> {\n  let body = \"\";\n  for await (const chunk of request) {\n    body += Buffer.isBuffer(chunk) ? chunk.toString(\"utf8\") : String(chunk);\n    if (Buffer.byteLength(body) > 8 * 1_024) {\n      throw new Error(\"Callback payload is too large.\");\n    }\n  }\n  return body;\n}\n\nfunction isCallbackPayload(\n  value: unknown,\n): value is { state: string; token: string } {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    \"state\" in value &&\n    typeof value.state === \"string\" &&\n    \"token\" in value &&\n    typeof value.token === \"string\" &&\n    value.token.length > 0 &&\n    value.token.length <= 512\n  );\n}\n\nfunction statesMatch(received: string, expected: string): boolean {\n  const receivedBytes = Buffer.from(received);\n  const expectedBytes = Buffer.from(expected);\n  return (\n    receivedBytes.length === expectedBytes.length &&\n    timingSafeEqual(receivedBytes, expectedBytes)\n  );\n}\n\nasync function closeServer(\n  server: ReturnType<typeof createServer>,\n): Promise<void> {\n  if (!server.listening) return;\n  await new Promise<void>((resolve, reject) => {\n    server.close((error) => (error ? reject(error) : resolve()));\n  });\n}\n"],"mappings":";AAAA,SAAS,aAAa;AACtB,SAAS,aAAa,uBAAuB;AAC7C,SAAS,oBAAoB;AAkBtB,SAAS,YACd,QACA,MACA,UACQ;AACR,QAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,MAAI,WAAW,IAAI,IAAI;AACvB,MAAI,SAAS;AACb,MAAI,OAAO;AACX,MAAI,UAAU;AACZ,QAAI,aAAa,IAAI,iBAAiB,SAAS,aAAa,SAAS,CAAC;AACtE,QAAI,aAAa,IAAI,SAAS,SAAS,KAAK;AAAA,EAC9C;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,eAAsB,yBACpB,eACA,UAAkD,CAAC,GACrB;AAC9B,QAAM,SAAS,IAAI,IAAI,aAAa,EAAE;AACtC,QAAM,QAAQ,QAAQ,SAAS,YAAY,EAAE,EAAE,SAAS,WAAW;AACnE,QAAM,YAAY,QAAQ,aAAa,IAAI,KAAK;AAChD,MAAI,YAAY;AAChB,MAAI,eAAwC,MAAM;AAClD,MAAI,cAAsC,MAAM;AAChD,QAAM,QAAQ,IAAI,QAAgB,CAAC,SAAS,WAAW;AACrD,mBAAe;AACf,kBAAc;AAAA,EAChB,CAAC;AAED,QAAM,SAAS,aAAa,CAAC,SAAS,aAAa;AACjD,SAAK,sBAAsB,SAAS,UAAU;AAAA,MAC5C;AAAA,MACA;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,UAAU,CAAC,iBAAiB;AAC1B,oBAAY;AACZ,qBAAa,YAAY;AAAA,MAC3B;AAAA,IACF,CAAC,EAAE,MAAM,MAAM;AACb,UAAI,CAAC,SAAS,YAAa,UAAS,UAAU,GAAG;AACjD,eAAS,IAAI;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AAED,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,cAAc,CAAC,UAAiB,OAAO,KAAK;AAClD,WAAO,KAAK,SAAS,WAAW;AAChC,WAAO,OAAO,GAAG,aAAa,MAAM;AAClC,aAAO,IAAI,SAAS,WAAW;AAC/B,cAAQ;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AAED,SAAO,GAAG,SAAS,CAAC,UAAU,YAAY,KAAK,CAAC;AAChD,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,QAAQ,WAAW,MAAM;AAC7B,gBAAY,IAAI,MAAM,8CAA8C,CAAC;AACrE,SAAK,YAAY,MAAM;AAAA,EACzB,GAAG,SAAS;AACZ,OAAK,MAAM,QAAQ,MAAM,aAAa,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAEnE,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd;AAAA,IACA;AAAA,IACA,OAAO,MAAM,YAAY,MAAM;AAAA,EACjC;AACF;AAEO,SAAS,qBACd,KACA,WAA4B,QAAQ,UACC;AACrC,MAAI,aAAa,SAAU,QAAO,EAAE,SAAS,QAAQ,MAAM,CAAC,GAAG,EAAE;AACjE,MAAI,aAAa,SAAS;AACxB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM,CAAC,MAAM,MAAM,MAAM,aAAa,GAAG,GAAG;AAAA,IAC9C;AAAA,EACF;AACA,SAAO,EAAE,SAAS,YAAY,MAAM,CAAC,GAAG,EAAE;AAC5C;AAEA,eAAsB,cAAc,KAA4B;AAC9D,QAAM,SAAS,qBAAqB,GAAG;AAEvC,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,QAAQ,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,MAC/C,UAAU;AAAA,MACV,OAAO;AAAA,IACT,CAAC;AACD,UAAM,KAAK,SAAS,MAAM;AAC1B,UAAM,KAAK,SAAS,MAAM;AACxB,YAAM,MAAM;AACZ,cAAQ;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AASA,eAAe,sBACb,SACA,UACA,SACe;AACf,MAAI,QAAQ,QAAQ,WAAW,QAAQ,QAAQ;AAC7C,aAAS,UAAU,GAAG,EAAE,IAAI;AAC5B;AAAA,EACF;AAEA,WAAS,UAAU,+BAA+B,QAAQ,MAAM;AAChE,WAAS,UAAU,gCAAgC,eAAe;AAClE,WAAS,UAAU,gCAAgC,cAAc;AACjE,WAAS,UAAU,QAAQ,QAAQ;AACnC,MAAI,QAAQ,QAAQ,wCAAwC,MAAM,QAAQ;AACxE,aAAS,UAAU,wCAAwC,MAAM;AAAA,EACnE;AAEA,MAAI,QAAQ,WAAW,WAAW;AAChC,aAAS,UAAU,GAAG,EAAE,IAAI;AAC5B;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,UAAU,QAAQ,QAAQ,aAAa;AAC5D,aAAS,UAAU,GAAG,EAAE,IAAI;AAC5B;AAAA,EACF;AACA,MAAI,QAAQ,UAAU,GAAG;AACvB,aAAS,UAAU,GAAG,EAAE,IAAI;AAC5B;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,gBAAgB,OAAO;AAC1C,QAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,MAAI,CAAC,kBAAkB,MAAM,KAAK,CAAC,YAAY,OAAO,OAAO,QAAQ,KAAK,GAAG;AAC3E,aAAS,UAAU,GAAG,EAAE,IAAI;AAC5B;AAAA,EACF;AAEA,WAAS,UAAU,GAAG,EAAE,IAAI;AAC5B,UAAQ,SAAS,OAAO,KAAK;AAC/B;AAEA,eAAe,gBAAgB,SAA2C;AACxE,MAAI,OAAO;AACX,mBAAiB,SAAS,SAAS;AACjC,YAAQ,OAAO,SAAS,KAAK,IAAI,MAAM,SAAS,MAAM,IAAI,OAAO,KAAK;AACtE,QAAI,OAAO,WAAW,IAAI,IAAI,IAAI,MAAO;AACvC,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBACP,OAC2C;AAC3C,SACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAO,MAAM,UAAU,YACvB,WAAW,SACX,OAAO,MAAM,UAAU,YACvB,MAAM,MAAM,SAAS,KACrB,MAAM,MAAM,UAAU;AAE1B;AAEA,SAAS,YAAY,UAAkB,UAA2B;AAChE,QAAM,gBAAgB,OAAO,KAAK,QAAQ;AAC1C,QAAM,gBAAgB,OAAO,KAAK,QAAQ;AAC1C,SACE,cAAc,WAAW,cAAc,UACvC,gBAAgB,eAAe,aAAa;AAEhD;AAEA,eAAe,YACb,QACe;AACf,MAAI,CAAC,OAAO,UAAW;AACvB,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,WAAO,MAAM,CAAC,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;AAAA,EAC7D,CAAC;AACH;","names":[]}