@noodleseed/one 0.23.0 → 0.25.0

package/node_modules/@noodle-borg/service/dist/github/app-client.js

@@ -1,17 +1,14 @@
-/**
- * The GitHub App integration seam for GHD-1 (repository connection). This phase ships routes and
- * persistence only — no live GitHub call is made anywhere in this slice. `GitHubAppClient` is the
- * narrow port the connection routes depend on; a later slice implements it against the real GitHub App
- * (JWT-signed app auth → installation access tokens → REST calls) once the private key / webhook secret
- * are wired from the credential broker. Tests and local/dev use {@link InMemoryGitHubAppClient}.
- */
+import { createPrivateKey } from 'node:crypto';
+import { SignJWT } from 'jose';
 /** Constructor-seeded fake for tests and local/dev — no network, no JWT, no live GitHub App required. */
 export class InMemoryGitHubAppClient {
     #installations;
     #repositoriesByInstallation;
+    #tokensByInstallation;
     constructor(seed) {
         this.#installations = new Map(seed.installations.map((installation) => [installation.id, installation]));
         this.#repositoriesByInstallation = new Map(Object.entries(seed.repositoriesByInstallation).map(([id, repos]) => [Number(id), repos]));
+        this.#tokensByInstallation = new Map(Object.entries(seed.tokensByInstallation ?? {}).map(([id, token]) => [Number(id), token]));
     }
     getInstallation(installationId) {
         return Promise.resolve(this.#installations.get(installationId));
@@ -19,5 +16,117 @@ export class InMemoryGitHubAppClient {
     listInstallationRepositories(installationId) {
         return Promise.resolve(this.#repositoriesByInstallation.get(installationId) ?? []);
     }
+    createInstallationAccessToken(installationId) {
+        return Promise.resolve(this.#tokensByInstallation.get(installationId) ?? {
+            token: `ghs-test-installation-${installationId}`,
+        });
+    }
+}
+/**
+ * Live GitHub App port: signs a short-lived app JWT locally and uses it only to ask GitHub for
+ * installation-scoped data/tokens. Installation access tokens are returned to the caller and never
+ * cached or persisted in this class.
+ */
+export class LiveGitHubAppClient {
+    #appId;
+    #appSlug;
+    #privateKeyPem;
+    #httpFetch;
+    #now;
+    constructor(options) {
+        if (options.privateKeyPem === undefined || options.privateKeyPem.trim() === '') {
+            throw new Error('GitHub App private key is required for live GitHub calls');
+        }
+        this.#appId = options.appId;
+        this.#appSlug = options.appSlug;
+        this.#privateKeyPem = options.privateKeyPem;
+        this.#httpFetch = options.httpFetch ?? fetch;
+        this.#now = options.now ?? (() => new Date());
+    }
+    async getInstallation(installationId) {
+        const res = await this.#request(`/app/installations/${installationId}`, { method: 'GET' });
+        if (res.status === 404)
+            return undefined;
+        await assertOk(res, 'get installation');
+        const body = (await res.json());
+        const id = typeof body.id === 'number' ? body.id : undefined;
+        const accountLogin = typeof body.account?.login === 'string' ? body.account.login : undefined;
+        if (id === undefined || accountLogin === undefined)
+            return undefined;
+        return { id, accountLogin };
+    }
+    async listInstallationRepositories(installationId) {
+        const res = await this.#request(`/installation/repositories`, {
+            method: 'GET',
+            installationId,
+        });
+        await assertOk(res, 'list installation repositories');
+        const body = (await res.json());
+        const repositories = Array.isArray(body.repositories) ? body.repositories : [];
+        return repositories.flatMap((repo) => summarizeRepo(repo));
+    }
+    async createInstallationAccessToken(installationId) {
+        const res = await this.#request(`/app/installations/${installationId}/access_tokens`, {
+            method: 'POST',
+        });
+        await assertOk(res, 'create installation access token');
+        const body = (await res.json());
+        if (typeof body.token !== 'string' || body.token.length === 0) {
+            throw new Error('GitHub returned no installation token');
+        }
+        return {
+            token: body.token,
+            ...(typeof body.expires_at === 'string' ? { expiresAt: body.expires_at } : {}),
+        };
+    }
+    async #request(path, options) {
+        const bearer = options.installationId === undefined
+            ? await this.#appJwt()
+            : (await this.createInstallationAccessToken(options.installationId)).token;
+        return this.#httpFetch(`https://api.github.com${path}`, {
+            method: options.method,
+            headers: {
+                accept: 'application/vnd.github+json',
+                authorization: `Bearer ${bearer}`,
+                'user-agent': `noodle-seed/${this.#appSlug}`,
+                'x-github-api-version': '2022-11-28',
+            },
+        });
+    }
+    async #appJwt() {
+        const nowSeconds = Math.floor(this.#now().getTime() / 1000);
+        const privateKey = createPrivateKey(this.#privateKeyPem);
+        return new SignJWT({})
+            .setProtectedHeader({ alg: 'RS256' })
+            .setIssuedAt(nowSeconds - 60)
+            .setExpirationTime(nowSeconds + 9 * 60)
+            .setIssuer(this.#appId)
+            .sign(privateKey);
+    }
+}
+async function assertOk(res, action) {
+    if (res.ok)
+        return;
+    throw new Error(`GitHub ${action} failed (HTTP ${res.status})`);
+}
+function summarizeRepo(repo) {
+    if (typeof repo.id !== 'number' ||
+        typeof repo.full_name !== 'string' ||
+        typeof repo.name !== 'string' ||
+        typeof repo.default_branch !== 'string' ||
+        typeof repo.owner?.login !== 'string' ||
+        typeof repo.private !== 'boolean') {
+        return [];
+    }
+    return [
+        {
+            id: repo.id,
+            fullName: repo.full_name,
+            owner: repo.owner.login,
+            name: repo.name,
+            defaultBranch: repo.default_branch,
+            private: repo.private,
+        },
+    ];
 }
 //# sourceMappingURL=app-client.js.map

package/node_modules/@noodle-borg/service/dist/github/app-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-client.js","sourceRoot":"","sources":["../../src/github/app-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuCH,yGAAyG;AACzG,MAAM,OAAO,uBAAuB;IACzB,cAAc,CAAiD;IAC/D,2BAA2B,CAGlC;IAEF,YAAY,IAKX;QACC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAC1E,CAAC;QACF,IAAI,CAAC,2BAA2B,GAAG,IAAI,GAAG,CACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAC1F,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,cAAsB;QACpC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,4BAA4B,CAC1B,cAAsB;QAEtB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;CACF"}
+{"version":3,"file":"app-client.js","sourceRoot":"","sources":["../../src/github/app-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAqD/B,yGAAyG;AACzG,MAAM,OAAO,uBAAuB;IACzB,cAAc,CAAiD;IAC/D,2BAA2B,CAGlC;IACO,qBAAqB,CAAqD;IAEnF,YAAY,IAMX;QACC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAC1E,CAAC;QACF,IAAI,CAAC,2BAA2B,GAAG,IAAI,GAAG,CACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAC1F,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,IAAI,GAAG,CAClC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAC1F,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,cAAsB;QACpC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,4BAA4B,CAC1B,cAAsB;QAEtB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,6BAA6B,CAAC,cAAsB;QAClD,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI;YAChD,KAAK,EAAE,yBAAyB,cAAc,EAAE;SACjD,CACF,CAAC;IACJ,CAAC;CACF;AAyBD;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IACrB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,cAAc,CAAS;IACvB,UAAU,CAAe;IACzB,IAAI,CAAa;IAE1B,YAAY,OAAmC;QAC7C,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;QACzD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,IAAI,EAAE,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,cAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC5D,MAAM,EAAE,KAAK;YACb,cAAc;SACf,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAqB,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,cAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,cAAc,gBAAgB,EAAE;YACpF,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;QAC7E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,OAA8E;QAE9E,MAAM,MAAM,GACV,OAAO,CAAC,cAAc,KAAK,SAAS;YAClC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE;YACtB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/E,OAAO,IAAI,CAAC,UAAU,CAAC,yBAAyB,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE;gBACP,MAAM,EAAE,6BAA6B;gBACrC,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,YAAY,EAAE,eAAe,IAAI,CAAC,QAAQ,EAAE;gBAC5C,sBAAsB,EAAE,YAAY;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;aACnB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,CAAC,UAAU,GAAG,EAAE,CAAC;aAC5B,iBAAiB,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC;aACtC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;aACtB,IAAI,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;CACF;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa,EAAE,MAAc;IACnD,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO;IACnB,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,IAAmB;IACxC,IACE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;QAC3B,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAClC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,KAAK,QAAQ;QACrC,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,EACjC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL;YACE,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/builder-auth.d.ts

@@ -0,0 +1,12 @@
+export interface GithubBuilderIdentity {
+    readonly email?: string;
+    readonly subject?: string;
+}
+export interface GithubBuilderIdentityVerifier {
+    verify(token: string, audience: string): Promise<GithubBuilderIdentity | undefined>;
+}
+export declare class GoogleGithubBuilderIdentityVerifier implements GithubBuilderIdentityVerifier {
+    #private;
+    verify(token: string, audience: string): Promise<GithubBuilderIdentity | undefined>;
+}
+//# sourceMappingURL=builder-auth.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/builder-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-auth.d.ts","sourceRoot":"","sources":["../../src/github/builder-auth.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CACrF;AAED,qBAAa,mCAAoC,YAAW,6BAA6B;;IAGjF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;CAiB1F"}

package/node_modules/@noodle-borg/service/dist/github/builder-auth.js

@@ -0,0 +1,19 @@
+export class GoogleGithubBuilderIdentityVerifier {
+    #clientPromise;
+    async verify(token, audience) {
+        const client = await this.#client();
+        const ticket = await client.verifyIdToken({ idToken: token, audience });
+        const payload = ticket.getPayload();
+        if (payload === undefined)
+            return undefined;
+        return {
+            ...(typeof payload.email === 'string' ? { email: payload.email } : {}),
+            ...(typeof payload.sub === 'string' ? { subject: payload.sub } : {}),
+        };
+    }
+    #client() {
+        this.#clientPromise ??= import('google-auth-library').then(({ OAuth2Client }) => new OAuth2Client());
+        return this.#clientPromise;
+    }
+}
+//# sourceMappingURL=builder-auth.js.map

package/node_modules/@noodle-borg/service/dist/github/builder-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-auth.js","sourceRoot":"","sources":["../../src/github/builder-auth.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,mCAAmC;IAC9C,cAAc,CAAuD;IAErE,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,OAAO;YACL,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CACzC,CAAC;QACF,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/github/builder-main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=builder-main.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/builder-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-main.d.ts","sourceRoot":"","sources":["../../src/github/builder-main.ts"],"names":[],"mappings":""}

package/node_modules/@noodle-borg/service/dist/github/builder-main.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { runCloudRunBuilder } from './builder-runner.js';
+runCloudRunBuilder().catch((error) => {
+    const name = error instanceof Error ? error.name : 'Error';
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`builder failed (${name}): ${message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=builder-main.js.map

package/node_modules/@noodle-borg/service/dist/github/builder-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-main.js","sourceRoot":"","sources":["../../src/github/builder-main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACnC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/builder-runner.d.ts

@@ -0,0 +1,21 @@
+import { spawn } from 'node:child_process';
+import type { DeployRunRecord } from '../store.js';
+export interface BuilderClaim {
+    readonly runToken: string;
+    readonly run: DeployRunRecord;
+    readonly repoFullName: string;
+    readonly repoRoot?: string;
+    readonly commitSha: string;
+    readonly githubInstallationToken: string;
+    readonly githubInstallationTokenExpiresAt?: string;
+}
+export interface BuilderRunnerOptions {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly httpFetch?: typeof fetch;
+    readonly spawnProcess?: typeof spawn;
+    readonly stdout?: Pick<NodeJS.WriteStream, 'write'>;
+    readonly stderr?: Pick<NodeJS.WriteStream, 'write'>;
+}
+export declare function sanitizeBuilderChildEnv(env: NodeJS.ProcessEnv): Record<string, string>;
+export declare function runCloudRunBuilder(options?: BuilderRunnerOptions): Promise<void>;
+//# sourceMappingURL=builder-runner.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/builder-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-runner.d.ts","sourceRoot":"","sources":["../../src/github/builder-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAI9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC;CACpD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACrD;AAID,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUtF;AAED,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C1F"}

package/node_modules/@noodle-borg/service/dist/github/builder-runner.js

@@ -0,0 +1,192 @@
+import { spawn } from 'node:child_process';
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { runDeployPipeline } from './deploy-pipeline.js';
+import { createLocalCompile } from './local-compile.js';
+const SAFE_ENV_KEYS = new Set(['PATH', 'HOME', 'TMPDIR', 'npm_config_cache', 'NPM_CONFIG_CACHE']);
+export function sanitizeBuilderChildEnv(env) {
+    const clean = {
+        CI: '1',
+        NOODLE_DISABLE_UPDATE_CHECK: '1',
+    };
+    for (const key of SAFE_ENV_KEYS) {
+        const value = env[key];
+        if (value !== undefined && value.length > 0)
+            clean[key] = value;
+    }
+    return clean;
+}
+export async function runCloudRunBuilder(options = {}) {
+    const env = options.env ?? process.env;
+    const stdout = options.stdout ?? process.stdout;
+    const stderr = options.stderr ?? process.stderr;
+    if (env.NOODLE_BUILDER_SELF_TEST === '1') {
+        stdout.write('builder self-test ok\n');
+        return;
+    }
+    const runId = requiredEnv(env, 'NOODLE_GHD_RUN_ID');
+    const serviceBaseUrl = trimTrailingSlash(requiredEnv(env, 'NOODLE_GHD_SERVICE_BASE_URL'));
+    const claim = await claimBuilderRun({
+        runId,
+        serviceBaseUrl,
+        audience: env.NOODLE_GHD_ID_TOKEN_AUDIENCE ?? serviceBaseUrl,
+        httpFetch: options.httpFetch ?? fetch,
+    });
+    const workDir = await mkdtemp(join(tmpdir(), 'noodle-ghd-builder-'));
+    try {
+        const sourceDir = await fetchSource({
+            claim,
+            workDir,
+            httpFetch: options.httpFetch ?? fetch,
+            spawnProcess: options.spawnProcess ?? spawn,
+        });
+        const localCompile = createLocalCompile({
+            exportManifest: createCliManifestExporter({
+                env,
+                spawnProcess: options.spawnProcess ?? spawn,
+                stderr,
+            }),
+        });
+        await runDeployPipeline({
+            run: claim.run,
+            runToken: claim.runToken,
+            serviceBaseUrl,
+            compile: () => localCompile(sourceDir),
+            httpFetch: options.httpFetch ?? fetch,
+        });
+    }
+    finally {
+        await rm(workDir, { recursive: true, force: true }).catch(() => undefined);
+    }
+}
+async function claimBuilderRun(input) {
+    const claimUrl = `${input.serviceBaseUrl}/v1/github/runs/${encodeURIComponent(input.runId)}/claim`;
+    if (input.serviceBaseUrl.startsWith('http://127.0.0.1') ||
+        input.serviceBaseUrl.startsWith('http://localhost')) {
+        const res = await input.httpFetch(claimUrl, { method: 'POST' });
+        return parseClaimResponse(res);
+    }
+    const { GoogleAuth } = await import('google-auth-library');
+    const auth = new GoogleAuth();
+    const client = await auth.getIdTokenClient(input.audience);
+    const res = await client.request({ url: claimUrl, method: 'POST' });
+    return parseClaimBody(res.data);
+}
+async function parseClaimResponse(res) {
+    const body = await res.json().catch(() => undefined);
+    if (!res.ok)
+        throw new Error(`builder claim failed (HTTP ${res.status})`);
+    return parseClaimBody(body);
+}
+function parseClaimBody(body) {
+    const data = asRecord(body)?.data;
+    const record = asRecord(data);
+    const runRecord = asRecord(record?.run);
+    if (record === undefined ||
+        typeof record.runToken !== 'string' ||
+        runRecord === undefined ||
+        typeof record.repoFullName !== 'string' ||
+        typeof record.commitSha !== 'string' ||
+        typeof record.githubInstallationToken !== 'string') {
+        throw new Error('builder claim response was malformed');
+    }
+    return {
+        runToken: record.runToken,
+        run: runRecord,
+        repoFullName: record.repoFullName,
+        ...(typeof record.repoRoot === 'string' && record.repoRoot.length > 0
+            ? { repoRoot: record.repoRoot }
+            : {}),
+        commitSha: record.commitSha,
+        githubInstallationToken: record.githubInstallationToken,
+        ...(typeof record.githubInstallationTokenExpiresAt === 'string'
+            ? { githubInstallationTokenExpiresAt: record.githubInstallationTokenExpiresAt }
+            : {}),
+    };
+}
+async function fetchSource(input) {
+    const archiveUrl = `https://api.github.com/repos/${input.claim.repoFullName}/tarball/${input.claim.commitSha}`;
+    const res = await input.httpFetch(archiveUrl, {
+        headers: {
+            accept: 'application/vnd.github+json',
+            authorization: `Bearer ${input.claim.githubInstallationToken}`,
+            'user-agent': 'noodle-seed-builder',
+            'x-github-api-version': '2022-11-28',
+        },
+    });
+    if (!res.ok)
+        throw new Error(`source fetch failed (HTTP ${res.status})`);
+    const archive = join(input.workDir, 'source.tar.gz');
+    await writeFile(archive, new Uint8Array(await res.arrayBuffer()));
+    const checkout = join(input.workDir, 'repo');
+    await mkdir(checkout, { recursive: true });
+    await runProcess(input.spawnProcess, 'tar', ['-xzf', archive, '--strip-components=1', '-C', checkout], { env: {} });
+    return input.claim.repoRoot !== undefined ? resolve(checkout, input.claim.repoRoot) : checkout;
+}
+function createCliManifestExporter(input) {
+    const cliBin = input.env.NOODLE_BUILDER_CLI_BIN ?? '/app/cli/dist/bin.js';
+    return async ({ entrypoint }) => {
+        const dir = await mkdtemp(join(tmpdir(), 'noodle-ghd-export-'));
+        const manifestPath = join(dir, 'manifest.json');
+        const connectorsPath = join(dir, 'connectors.json');
+        try {
+            const result = await runProcess(input.spawnProcess, process.execPath, [
+                cliBin,
+                'export',
+                'manifest',
+                entrypoint,
+                '--output',
+                manifestPath,
+                '--connectors-output',
+                connectorsPath,
+            ], { env: sanitizeBuilderChildEnv(input.env) });
+            if (result.stderr.length > 0)
+                input.stderr.write(result.stderr);
+            const manifest = await readFile(manifestPath, 'utf8');
+            const connectors = await readFile(connectorsPath, 'utf8').catch(() => undefined);
+            return {
+                manifest,
+                ...(connectors !== undefined && connectors.trim() !== '' ? { connectors } : {}),
+            };
+        }
+        finally {
+            await rm(dir, { recursive: true, force: true }).catch(() => undefined);
+        }
+    };
+}
+async function runProcess(spawnProcess, command, args, options) {
+    return new Promise((resolvePromise, reject) => {
+        const child = spawnProcess(command, [...args], {
+            ...options,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const stdout = [];
+        const stderr = [];
+        child.stdout?.on('data', (chunk) => stdout.push(Buffer.from(chunk)));
+        child.stderr?.on('data', (chunk) => stderr.push(Buffer.from(chunk)));
+        child.on('error', reject);
+        child.on('close', (code) => {
+            const out = Buffer.concat(stdout).toString('utf8');
+            const err = Buffer.concat(stderr).toString('utf8');
+            if (code === 0)
+                return resolvePromise({ stdout: out, stderr: err });
+            reject(new Error(`${command} exited ${code ?? 'without a status'}${err ? `: ${err}` : ''}`));
+        });
+    });
+}
+function requiredEnv(env, name) {
+    const value = env[name];
+    if (value === undefined || value.trim() === '')
+        throw new Error(`${name} is required`);
+    return value;
+}
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=builder-runner.js.map

package/node_modules/@noodle-borg/service/dist/github/builder-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-runner.js","sourceRoot":"","sources":["../../src/github/builder-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAyB,MAAM,oBAAoB,CAAC;AAoB/E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAElG,MAAM,UAAU,uBAAuB,CAAC,GAAsB;IAC5D,MAAM,KAAK,GAA2B;QACpC,EAAE,EAAE,GAAG;QACP,2BAA2B,EAAE,GAAG;KACjC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAgC,EAAE;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,iBAAiB,CAAC,WAAW,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;QAClC,KAAK;QACL,cAAc;QACd,QAAQ,EAAE,GAAG,CAAC,4BAA4B,IAAI,cAAc;QAC5D,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;KACtC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC;YAClC,KAAK;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;YACrC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;SAC5C,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,kBAAkB,CAAC;YACtC,cAAc,EAAE,yBAAyB,CAAC;gBACxC,GAAG;gBACH,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;gBAC3C,MAAM;aACP,CAAC;SACH,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAC;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc;YACd,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;SACtC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAK9B;IACC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,cAAc,mBAAmB,kBAAkB,CAC3E,KAAK,CAAC,KAAK,CACZ,QAAQ,CAAC;IACV,IACE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACnD,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,CAAC,EACnD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAa;IAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,IACE,MAAM,KAAK,SAAS;QACpB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,SAAS,KAAK,SAAS;QACvB,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QACvC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,uBAAuB,KAAK,QAAQ,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,EAAE,SAAuC;QAC5C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,GAAG,CAAC,OAAO,MAAM,CAAC,gCAAgC,KAAK,QAAQ;YAC7D,CAAC,CAAC,EAAE,gCAAgC,EAAE,MAAM,CAAC,gCAAgC,EAAE;YAC/E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAK1B;IACC,MAAM,UAAU,GAAG,gCAAgC,KAAK,CAAC,KAAK,CAAC,YAAY,YAAY,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IAC/G,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE;QAC5C,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE;YAC9D,YAAY,EAAE,qBAAqB;YACnC,sBAAsB,EAAE,YAAY;SACrC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,CACd,KAAK,CAAC,YAAY,EAClB,KAAK,EACL,CAAC,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,CAAC,EACzD,EAAE,GAAG,EAAE,EAAE,EAAE,CACZ,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjG,CAAC;AAED,SAAS,yBAAyB,CAAC,KAIlC;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,IAAI,sBAAsB,CAAC;IAC1E,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,EAAgC,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,KAAK,CAAC,YAAY,EAClB,OAAO,CAAC,QAAQ,EAChB;gBACE,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,YAAY;gBACZ,qBAAqB;gBACrB,cAAc;aACf,EACD,EAAE,GAAG,EAAE,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAC5C,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjF,OAAO;gBACL,QAAQ;gBACR,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,YAA0B,EAC1B,OAAe,EACf,IAAuB,EACvB,OAAqB;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC7C,GAAG,OAAO;YACV,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,WAAW,IAAI,IAAI,kBAAkB,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAsB,EAAE,IAAY;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/node_modules/@noodle-borg/service/dist/github/cloud-run-job-executor.d.ts

@@ -0,0 +1,45 @@
+import type { DeployRunDispatchInput, DeployRunExecutor } from './deploy-run-executor.js';
+export interface CloudRunJobsRunRequest {
+    readonly name: string;
+    readonly body: {
+        readonly overrides: {
+            readonly containerOverrides: readonly [
+                {
+                    readonly env: readonly {
+                        readonly name: string;
+                        readonly value: string;
+                    }[];
+                }
+            ];
+            readonly taskCount: number;
+            readonly timeout: string;
+        };
+    };
+}
+export interface CloudRunJobsRunClient {
+    runJob(request: CloudRunJobsRunRequest): Promise<void>;
+}
+export interface CloudRunJobExecutorOptions {
+    readonly project: string;
+    readonly region: string;
+    readonly job: string;
+    readonly environment: string;
+    readonly taskTimeoutSeconds?: number;
+    readonly client?: CloudRunJobsRunClient;
+}
+/**
+ * Production GHD-C3 executor: launches exactly one Cloud Run Job execution for a deploy run.
+ * It passes only routing metadata through execution overrides. The builder claims all sensitive
+ * credentials from the service after startup, authenticated as its runtime service account.
+ */
+export declare class CloudRunJobExecutor implements DeployRunExecutor {
+    #private;
+    constructor(options: CloudRunJobExecutorOptions);
+    dispatch(input: DeployRunDispatchInput): Promise<void>;
+}
+export declare function cloudRunJobName(options: {
+    readonly project: string;
+    readonly region: string;
+    readonly job: string;
+}): string;
+//# sourceMappingURL=cloud-run-job-executor.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/cloud-run-job-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-run-job-executor.d.ts","sourceRoot":"","sources":["../../src/github/cloud-run-job-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE1F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,EAAE;YAClB,QAAQ,CAAC,kBAAkB,EAAE,SAAS;gBACpC;oBACE,QAAQ,CAAC,GAAG,EAAE,SAAS;wBAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;wBAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;qBAAE,EAAE,CAAC;iBAC5E;aACF,CAAC;YACF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;CACzC;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,YAAW,iBAAiB;;gBAM/C,OAAO,EAAE,0BAA0B;IAOzC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CAuB7D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAET"}

package/node_modules/@noodle-borg/service/dist/github/cloud-run-job-executor.js

@@ -0,0 +1,64 @@
+/**
+ * Production GHD-C3 executor: launches exactly one Cloud Run Job execution for a deploy run.
+ * It passes only routing metadata through execution overrides. The builder claims all sensitive
+ * credentials from the service after startup, authenticated as its runtime service account.
+ */
+export class CloudRunJobExecutor {
+    #name;
+    #environment;
+    #taskTimeoutSeconds;
+    #client;
+    constructor(options) {
+        this.#name = cloudRunJobName(options);
+        this.#environment = options.environment;
+        this.#taskTimeoutSeconds = options.taskTimeoutSeconds ?? 180;
+        this.#client = options.client ?? new GoogleCloudRunJobsRunClient();
+    }
+    async dispatch(input) {
+        const body = {
+            overrides: {
+                containerOverrides: [
+                    {
+                        env: [
+                            { name: 'NOODLE_GHD_RUN_ID', value: input.run.runId },
+                            { name: 'NOODLE_GHD_SERVICE_BASE_URL', value: input.serviceBaseUrl },
+                            { name: 'NOODLE_GHD_ENVIRONMENT', value: this.#environment },
+                        ],
+                    },
+                ],
+                taskCount: 1,
+                timeout: `${this.#taskTimeoutSeconds}s`,
+            },
+        };
+        try {
+            await this.#client.runJob({ name: this.#name, body });
+        }
+        catch {
+            // Fire-and-forget contract: dispatch launch failures must not make webhook delivery fail.
+            // The sweeper/reconciler owns retry/failover behavior.
+        }
+    }
+}
+export function cloudRunJobName(options) {
+    return `projects/${options.project}/locations/${options.region}/jobs/${options.job}`;
+}
+class GoogleCloudRunJobsRunClient {
+    #authPromise;
+    async runJob(request) {
+        const auth = await this.#auth();
+        const client = await auth.getClient();
+        const url = `https://run.googleapis.com/v2/${request.name}:run`;
+        await client.request({
+            url,
+            method: 'POST',
+            data: request.body,
+        });
+    }
+    #auth() {
+        this.#authPromise ??= import('google-auth-library').then(({ GoogleAuth }) => new GoogleAuth({
+            scopes: ['https://www.googleapis.com/auth/cloud-platform'],
+        }));
+        return this.#authPromise;
+    }
+}
+//# sourceMappingURL=cloud-run-job-executor.js.map

package/node_modules/@noodle-borg/service/dist/github/cloud-run-job-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-run-job-executor.js","sourceRoot":"","sources":["../../src/github/cloud-run-job-executor.ts"],"names":[],"mappings":"AA8BA;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IACrB,KAAK,CAAS;IACd,YAAY,CAAS;IACrB,mBAAmB,CAAS;IAC5B,OAAO,CAAwB;IAExC,YAAY,OAAmC;QAC7C,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,2BAA2B,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA6B;QAC1C,MAAM,IAAI,GAAmC;YAC3C,SAAS,EAAE;gBACT,kBAAkB,EAAE;oBAClB;wBACE,GAAG,EAAE;4BACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE;4BACrD,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE;4BACpE,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE;yBAC7D;qBACF;iBACF;gBACD,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,GAAG,IAAI,CAAC,mBAAmB,GAAG;aACxC;SACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,0FAA0F;YAC1F,uDAAuD;QACzD,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,OAI/B;IACC,OAAO,YAAY,OAAO,CAAC,OAAO,cAAc,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,2BAA2B;IAC/B,YAAY,CAAqD;IAEjE,KAAK,CAAC,MAAM,CAAC,OAA+B;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,iCAAiC,OAAO,CAAC,IAAI,MAAM,CAAC;QAChE,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG;YACH,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACtD,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CACjB,IAAI,UAAU,CAAC;YACb,MAAM,EAAE,CAAC,gDAAgD,CAAC;SAC3D,CAAC,CACL,CAAC;QACF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/github/deploy-pipeline.d.ts

@@ -0,0 +1,64 @@
+import type { PreparedPackagedAsset } from '@noodle-borg/compiler';
+import type { DeployRunRecord } from '../store.js';
+/**
+ * The environment-agnostic untrusted-compile → trusted-deploy pipeline (GHD-3, ADR 0132 Decision 6).
+ * Every executor — LocalProcess (C2), CloudRunJob (C3), the E2E harness — shares THIS orchestration;
+ * only the injected `compile` (how source becomes a manifest) and `httpFetch` (the wire) differ.
+ *
+ * The trust split is structural: `compile` runs untrusted source and is NEVER handed the run token or
+ * any privileged credential — it only reads files and returns data. Only after it succeeds does the
+ * pipeline use the run-scoped token to preflight/upload assets and POST the deploy.
+ *
+ * Debuggability is the organizing principle (the founder directive): the pipeline walks the run
+ * `building → deploying → deployed`, and EVERY failure path reports `failed` with a pre-redacted
+ * `errorSummary` that names the stage, the reason, and (via the route's own message) the fix — the
+ * exact text `noodle github runs <id>` surfaces. Status reporting is best-effort: a dropped status
+ * report is observability loss, never a reason to fail a deploy that otherwise succeeded.
+ */
+/**
+ * One asset the worker must upload: its preflight metadata plus the bytes to PUT. `prepared` is the
+ * wire shape (no `absolutePath` — that stays in the sandbox; only the compile step reads bytes from it).
+ */
+export interface PipelineAsset {
+    readonly prepared: Omit<PreparedPackagedAsset, 'absolutePath'>;
+    readonly bytes: Uint8Array;
+}
+/** What the untrusted compile stage produces — everything the trusted deploy needs, nothing more. */
+export interface CompiledDeployInput {
+    readonly manifest: string;
+    readonly connectors?: string;
+    readonly serverVersion?: string;
+    /** Declared access mode from committed `noodle.json`; the deploy route resolves inherit → declared. */
+    readonly declaredAccessMode?: string;
+    readonly assets?: readonly PipelineAsset[];
+}
+export type CompileStageResult = {
+    readonly ok: true;
+    readonly input: CompiledDeployInput;
+} | {
+    readonly ok: false;
+    readonly errorSummary: string;
+};
+export type DeployStage = 'compile' | 'preflight' | 'upload' | 'deploy';
+export type DeployPipelineOutcome = {
+    readonly status: 'deployed';
+    readonly deploymentId: string;
+} | {
+    readonly status: 'superseded';
+} | {
+    readonly status: 'failed';
+    readonly stage: DeployStage;
+    readonly errorSummary: string;
+};
+export interface DeployPipelineDeps {
+    readonly run: DeployRunRecord;
+    /** Run-scoped credential for the status + preflight + deploy calls (never handed to `compile`). */
+    readonly runToken: string;
+    readonly serviceBaseUrl: string;
+    /** Untrusted compile — reads source, returns data; MUST NOT receive the run token. */
+    readonly compile: (run: DeployRunRecord) => Promise<CompileStageResult>;
+    /** Injected so tests use a fake and executors use global `fetch`. */
+    readonly httpFetch: typeof fetch;
+}
+export declare function runDeployPipeline(deps: DeployPipelineDeps): Promise<DeployPipelineOutcome>;
+//# sourceMappingURL=deploy-pipeline.d.ts.map

package/node_modules/@noodle-borg/service/dist/github/deploy-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-pipeline.d.ts","sourceRoot":"","sources":["../../src/github/deploy-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuB,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,qGAAqG;AACrG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,uGAAuG;IACvG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExE,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxE,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC;AA0BD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0HhG"}