@numa-tech/numa 1.13.1 → 1.13.2

package/README.md

@@ -193,7 +193,9 @@ numa config \
 | `numa mcp list/inspect/install/bridge/...` | 需登录 | 通过企业 Router 安装/桥接 MCP，并维护版本、标签和工具状态 |
 | `numa registry approvals/router/audit` | 需登录 | 两人制发布、Router 健康/对账和追加式审计 |
 | `numa registry tui` | 需登录 | 打开 namespace、Skills、MCP、审批、Router、审计全屏工作台 |
-| `numa app onboard/apply/resume/inspect/list/tui` | 需登录 | 创建新应用、录入存量应用并恢复服务端入驻会话 |
+| `numa app begin/onboard/publication/jenkins-binding/observer-scope/first-build/...` | 需登录 | 创建、接入并按独立 child gate Promote 应用 |
+| `numa publication scan/plan/apply/status/events/...` | 公开扫描/需登录写入 | 把 clean Git HEAD 通过受控 bundle 发布到受管仓库 |
+| `numa jenkins job plan/apply/status/events/...` | 需登录 | 创建/校验 Jenkins Multibranch Job，默认不扫描、不构建 |
 | `numa app options` | 需登录 | 查询应用归属所需的团队、系统、业务域和环境 ID |
 | `numa app candidate list/inspect/preview/review/adopt` | 需登录 | 审查应用发现候选并确认收录，服务端执行最终管理员授权和审计 |
 | `numa media capabilities` | 需登录 | 查询媒体 API、Provider 和版本能力 |
@@ -492,6 +494,44 @@ v2 顶层字段使用严格白名单；旧 `repository`、provider 管理字段
 录入已有应用时改用 `repositoryStrategy: "ATTACH_EXISTING"`、`projectStrategy: "ASSESS_ONLY"` 和
 `repositoryRef: { "repositoryKey": "...", "expectedHead": "<40-64-hex>" }`。
 
+已有 clean Git 历史但没有 remote、并且需要完整 Promote 时使用 `schemaVersion: 3`。先幂等取得
+`sessionNo`，再创建 consumer=`APPLICATION_ONBOARDING`、consumerRef=`sessionNo` 的 Repository
+plan；Codeup 使用受管 README 初始化。parent 推进到 `ATTACH_PUBLICATION_PLAN` 后，CLI 才扫描
+clean HEAD 并附加 session-scoped Publication child。不得改用独立 `STANDALONE` publication plan，
+也不得直接 `git push`：
+
+```bash
+numa app begin --mode new --idempotency-key begin-code-index --yes --json
+
+# 取得 consumer-bound Repository plan 后，把 planNo/planHash 写入 v3 spec
+numa app onboard --session <session-no> --spec onboarding-v3.json --plan --json
+numa app apply <session-no> --idempotency-key apply-code-index-parent --json
+
+numa app publication attach <session-no> \
+  --source ./code-index --commit-message 'feat: publish code-index source' \
+  --client-request-id code-index-publication-1 \
+  --idempotency-key code-index-publication-1 --yes --json
+
+numa app jenkins-binding confirm <session-no> \
+  --binding-id <id> --expected-version <version> \
+  --idempotency-key confirm-code-index-binding --yes --json
+
+numa app observer-scope configure <session-no> \
+  --service-binding-id <id> \
+  --kustomization-namespace flux-system --kustomization-name prd \
+  --helm-release-namespace prd --helm-release-name code-index \
+  --workload-namespace prd --workload-kind Deployment --workload-name code-index \
+  --expected-version <version> --idempotency-key scope-code-index-prd --yes --json
+
+# DEFER 永不触发构建；TRIGGER 是独立授权，生产仍由服务端强制审批证据
+numa app first-build decide <session-no> --decision defer \
+  --idempotency-key defer-code-index-first-build --yes --json
+```
+
+v3 structural spec 只允许 MCI_FLUX_V1 结构字段，拒绝 image、仓库/分支/namespace/path、raw
+Kubernetes Secret 和明文敏感环境变量。Job Control Plane 默认 `scanMode=NONE`；`INDEX_ONLY`
+也必须通过服务端 NoTrigger 配置验证，不能等同于 build。
+
 ```bash
 # 只保存草稿并预检，不产生仓库、分支或 Jenkins 等外部副作用
 numa app onboard --spec onboarding.json --plan --json
@@ -544,7 +584,8 @@ numa repository namespace list --connection codeup-main --search 'numa/framework
 numa repository remote list --connection codeup-main --search code-index --json
 numa repository plan create \
   --connection codeup-main --namespace 99 --name code-index \
-  --visibility private --initialization empty --owner-team-id 12 --json
+  --visibility private --initialization readme --owner-team-id 12 \
+  --consumer application-onboarding --consumer-ref <session-no> --json
 
 # 重新读取并审阅已经生成的不可变计划
 numa repository plan get <plan-no> --json
@@ -556,7 +597,7 @@ numa repository create \
   --idempotency-key code-index-20260822 --yes --json
 ```
 
-DevOps New 的 v2 spec 创建新仓库时，先以 `--consumer application-onboarding` 生成 CREATE plan，
+DevOps New 的 v2/v3 spec 创建新仓库时，先以 `--consumer application-onboarding` 和真实 sessionNo 生成 CREATE plan，
 再把其 `planNo/planHash` 写入 `repositoryPlanRef`；录入已有应用时只写受管 catalog 的
 `repositoryKey` 和固定 `expectedHead`。旧 `numa app scm repository create` 已 fail-closed，不再调用
 Provider；只读 list/inspect 在兼容期保留。
@@ -625,17 +666,30 @@ SCM 管理接口位于 `/api/v1/admin/scm-connections`，最终权限始终由
 Client Role 校验。metadata JSON 只允许 provider、URL、组织、auth type 以及服务端托管的
 `aliyunAccountId`/`aliyunAssumeRoleId` 引用；Numa 不接收云 AK。CODEUP 必须引用
 `aliyunAccountId`，没有 access token 时直接使用服务端 Aliyun identity，不写入空 credential。
-GitHub App/PAT 或可选 Codeup access token 只能从 owner-only 文件或重定向 stdin 读取，禁止放在
-argv、环境变量和 metadata JSON 中，且不会出现在输出或错误中：
+Codeup Personal AT 只用于 OpenAPI，不能当作 HTTPS Git 密码；包含 `100755` 文件的 Publication
+另需 Codeup 的 HTTPS clone username/password。GitHub App/PAT 和这三项 Codeup credential 均为
+WRITE_ONLY，只能从 owner-only 文件或重定向 stdin 读取，禁止放在 argv、环境变量和 metadata
+JSON 中，且不会出现在输出或错误中。安全响应只返回 credential readiness boolean：
 
 ```bash
 numa app scm create --input codeup.json --json
 chmod 600 github-app.private.json
 numa app scm create --input github.json --credential-file github-app.private.json --json
 numa app scm rotate github-main --revision 4 --credential-stdin --yes --json < github-pat.private.json
+numa app scm rotate codeup-main --revision 5 --credential-file codeup.private.json --yes --json
 numa app scm disable old-codeup --revision 7 --yes --json
 ```
 
+Codeup 凭据文件结构如下；文件必须先执行 `chmod 600`，占位符不能直接使用：
+
+```json
+{
+  "accessToken": "<Codeup Personal AT>",
+  "cloneUsername": "<Codeup HTTPS clone account>",
+  "clonePassword": "<Codeup HTTPS clone password>"
+}
+```
+
 ## 应用候选收录
 
 Jenkins 发现任务只生成可审查的应用候选，不会直接创建正式应用。Numa 对外把后续动作称为

package/dist/application-onboarding/client.d.ts

@@ -1,6 +1,6 @@
 import type { AuthConfig } from "../config.js";
 import { type KeycloakTokenProvider } from "../oauth.js";
-import { OnboardingSessionSchema, type JsonValue, type OnboardingCapabilities, type OnboardingEvent, type OnboardingMode, type OnboardingPreflight, type OnboardingSession, type OnboardingSessionState, type OnboardingTask, type ScmAdminConnection, type ScmAdminConnectionInput, type ScmConnection, type ScmNamespace, type ScmRepositoryCreateInput, type ScmCredentialUpdate, type ScmProvider, type ScmRepository } from "./schemas.js";
+import { OnboardingSessionSchema, type JsonValue, type OnboardingCapabilities, type OnboardingEvent, type OnboardingFirstBuildActionRequest, type OnboardingFirstBuildActionResponse, type OnboardingJenkinsBindingActionRequest, type OnboardingJenkinsBindingActionResponse, type OnboardingMode, type OnboardingPreflight, type OnboardingObserverScopeActionRequest, type OnboardingObserverScopeActionResponse, type OnboardingPublicationPlanActionRequest, type OnboardingPublicationPlanActionResponse, type OnboardingSession, type OnboardingSessionState, type OnboardingTask, type ScmAdminConnection, type ScmAdminConnectionInput, type ScmConnection, type ScmNamespace, type ScmRepositoryCreateInput, type ScmCredentialUpdate, type ScmProvider, type ScmRepository } from "./schemas.js";
 export interface OnboardingClientDependencies {
     fetch?: typeof fetch;
     tokenProvider?: KeycloakTokenProvider;
@@ -77,7 +77,7 @@ export interface OnboardingApi {
         version: number;
     }): Promise<ScmAdminConnection>;
     disableAdminScmConnection(connectionCode: string, version: number): Promise<void>;
-    createSession(mode: OnboardingMode): Promise<OnboardingSession>;
+    createSession(mode: OnboardingMode, idempotencyKey?: string): Promise<OnboardingSession>;
     listSessions(options?: {
         state?: OnboardingSessionState;
         mine?: boolean;
@@ -97,6 +97,10 @@ export interface OnboardingApi {
         planHash: string;
         idempotencyKey: string;
     }): Promise<OnboardingTask>;
+    attachPublicationPlan(sessionNo: string, input: OnboardingPublicationPlanActionRequest, idempotencyKey: string): Promise<OnboardingPublicationPlanActionResponse>;
+    confirmJenkinsBinding(sessionNo: string, input: OnboardingJenkinsBindingActionRequest, idempotencyKey: string): Promise<OnboardingJenkinsBindingActionResponse>;
+    configureObserverScope(sessionNo: string, input: OnboardingObserverScopeActionRequest, idempotencyKey: string): Promise<OnboardingObserverScopeActionResponse>;
+    decideFirstBuild(sessionNo: string, input: OnboardingFirstBuildActionRequest, idempotencyKey: string): Promise<OnboardingFirstBuildActionResponse>;
     getEvents(sessionNo: string, afterSequence?: number): Promise<{
         items: OnboardingEvent[];
         nextSequence: number;
@@ -232,6 +236,8 @@ export declare class OnboardingClient implements OnboardingApi {
             lastError?: string | null | undefined;
             version: number;
             credentialConfigured: boolean;
+            codeupAccessTokenConfigured: boolean;
+            codeupCloneCredentialConfigured: boolean;
             credentialVersion?: number | undefined;
             credentialUpdatedAt?: string | null | undefined;
         }[];
@@ -247,7 +253,7 @@ export declare class OnboardingClient implements OnboardingApi {
         version: number;
     }): Promise<ScmAdminConnection>;
     disableAdminScmConnection(connectionCode: string, version: number): Promise<void>;
-    createSession(mode: OnboardingMode): Promise<OnboardingSession>;
+    createSession(mode: OnboardingMode, idempotencyKey?: string): Promise<OnboardingSession>;
     listSessions(options?: {
         state?: OnboardingSessionState;
         mine?: boolean;
@@ -267,6 +273,10 @@ export declare class OnboardingClient implements OnboardingApi {
         planHash: string;
         idempotencyKey: string;
     }): Promise<OnboardingTask>;
+    attachPublicationPlan(sessionNo: string, input: OnboardingPublicationPlanActionRequest, idempotencyKey: string): Promise<OnboardingPublicationPlanActionResponse>;
+    confirmJenkinsBinding(sessionNo: string, input: OnboardingJenkinsBindingActionRequest, idempotencyKey: string): Promise<OnboardingJenkinsBindingActionResponse>;
+    configureObserverScope(sessionNo: string, input: OnboardingObserverScopeActionRequest, idempotencyKey: string): Promise<OnboardingObserverScopeActionResponse>;
+    decideFirstBuild(sessionNo: string, input: OnboardingFirstBuildActionRequest, idempotencyKey: string): Promise<OnboardingFirstBuildActionResponse>;
     getEvents(sessionNo: string, afterSequence?: number): Promise<{
         items: {
             [x: string]: unknown;
@@ -296,6 +306,21 @@ export declare class OnboardingClient implements OnboardingApi {
                 warnCount?: number | undefined;
                 jenkinsCandidateBindingIds?: (string | number)[] | undefined;
                 jenkinsPendingTiers?: string[] | undefined;
+                publicationPlanNo?: string | undefined;
+                publicationPlanHash?: string | undefined;
+                publicationRunNo?: string | undefined;
+                publicationState?: string | undefined;
+                publicationRevision?: string | undefined;
+                publicationManifestDigest?: string | undefined;
+                publicationFilesWritten?: number | undefined;
+                jenkinsPlanNo?: string | undefined;
+                jenkinsPlanHash?: string | undefined;
+                jenkinsRunNo?: string | undefined;
+                jenkinsState?: string | undefined;
+                jenkinsJobId?: string | number | undefined;
+                jenkinsBindingId?: string | number | undefined;
+                jenkinsInventoryGeneration?: number | undefined;
+                jenkinsConfigDigest?: string | undefined;
                 gitopsPlanNumber?: string | undefined;
                 gitopsPlanHash?: string | undefined;
                 gitopsPlanFiles?: string[] | undefined;
@@ -309,6 +334,15 @@ export declare class OnboardingClient implements OnboardingApi {
                 gitopsBaseRevision?: string | undefined;
                 gitopsResultRevision?: string | undefined;
                 gitopsReviewUrl?: string | undefined;
+                observerScopeNo?: string | undefined;
+                observerScopeStatus?: string | undefined;
+                observerEvidenceFreshness?: string | undefined;
+                observerLastDriftState?: string | undefined;
+                observerLastSequence?: number | undefined;
+                observerLastObservedAt?: string | undefined;
+                firstBuildDecision?: string | undefined;
+                firstBuildRequestId?: string | undefined;
+                firstBuildState?: string | undefined;
                 retryAfterSeconds?: number | undefined;
                 recoveryAction?: string | undefined;
                 bundleDigest?: string | undefined;

package/dist/application-onboarding/client.js

@@ -1,7 +1,7 @@
 import { resolveBackendUrl } from "../backend.js";
 import { ensureAccessToken, fetchWithKeycloakIdentity } from "../oauth.js";
 import { OnboardingError, redactOnboardingText } from "./errors.js";
-import { OnboardingApiErrorSchema, OnboardingAssessmentSchema, OnboardingCapabilitiesSchema, OnboardingEventListSchema, OnboardingObjectListSchema, OnboardingPreflightSchema, OnboardingSessionListSchema, OnboardingSessionSchema, OnboardingTaskSchema, ScmAdminConnectionListSchema, ScmAdminConnectionSchema, ScmConnectionListSchema, ScmNamespacePageSchema, ScmRepositoryPageSchema, ScmRepositorySchema } from "./schemas.js";
+import { OnboardingApiErrorSchema, OnboardingAssessmentSchema, OnboardingCapabilitiesSchema, OnboardingEventListSchema, OnboardingFirstBuildActionResponseSchema, OnboardingJenkinsBindingActionResponseSchema, OnboardingObjectListSchema, OnboardingObserverScopeActionResponseSchema, OnboardingPreflightSchema, OnboardingPublicationPlanActionResponseSchema, OnboardingSessionListSchema, OnboardingSessionSchema, OnboardingTaskSchema, ScmAdminConnectionListSchema, ScmAdminConnectionSchema, ScmConnectionListSchema, ScmNamespacePageSchema, ScmRepositoryPageSchema, ScmRepositorySchema } from "./schemas.js";
 const API_ROOT = "/api/v1/application-onboarding";
 const ADMIN_SCM_ROOT = "/api/v1/admin/scm-connections";
 const SCM_ROOT = "/api/v1/scm/connections";
@@ -175,9 +175,10 @@ export class OnboardingClient {
             throw new OnboardingError(`Application onboarding API returned HTTP ${response.status}; expected 200 or 204.`, "onboarding_invalid_response", response.status, requestIdFrom(response, body));
         }
     }
-    createSession(mode) {
+    createSession(mode, idempotencyKey) {
         return this.json(`${API_ROOT}/sessions`, OnboardingSessionSchema, {
             method: "POST",
+            headers: idempotencyKey ? { "Idempotency-Key": idempotencyKey } : undefined,
             body: JSON.stringify({ mode })
         }, [200, 201]);
     }
@@ -205,6 +206,34 @@ export class OnboardingClient {
             body: JSON.stringify({ planHash: input.planHash })
         }, [200, 202]);
     }
+    attachPublicationPlan(sessionNo, input, idempotencyKey) {
+        return this.json(`${API_ROOT}/sessions/${encodeURIComponent(safeSessionNo(sessionNo))}/publication-plan`, OnboardingPublicationPlanActionResponseSchema, {
+            method: "POST",
+            headers: { "Idempotency-Key": idempotencyKey },
+            body: JSON.stringify(input)
+        });
+    }
+    confirmJenkinsBinding(sessionNo, input, idempotencyKey) {
+        return this.json(`${API_ROOT}/sessions/${encodeURIComponent(safeSessionNo(sessionNo))}/jenkins-binding/confirm`, OnboardingJenkinsBindingActionResponseSchema, {
+            method: "POST",
+            headers: { "Idempotency-Key": idempotencyKey },
+            body: JSON.stringify(input)
+        });
+    }
+    configureObserverScope(sessionNo, input, idempotencyKey) {
+        return this.json(`${API_ROOT}/sessions/${encodeURIComponent(safeSessionNo(sessionNo))}/observer-scope`, OnboardingObserverScopeActionResponseSchema, {
+            method: "PUT",
+            headers: { "Idempotency-Key": idempotencyKey },
+            body: JSON.stringify(input)
+        });
+    }
+    decideFirstBuild(sessionNo, input, idempotencyKey) {
+        return this.json(`${API_ROOT}/sessions/${encodeURIComponent(safeSessionNo(sessionNo))}/first-build-decision`, OnboardingFirstBuildActionResponseSchema, {
+            method: "POST",
+            headers: { "Idempotency-Key": idempotencyKey },
+            body: JSON.stringify(input)
+        }, [200, 202]);
+    }
     getEvents(sessionNo, afterSequence) {
         return this.json(queryPath(`${API_ROOT}/sessions/${encodeURIComponent(safeSessionNo(sessionNo))}/events`, { afterSequence }), OnboardingEventListSchema);
     }

package/dist/application-onboarding/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/application-onboarding/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAA8B,MAAM,aAAa,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EAiBpB,MAAM,cAAc,CAAC;AAEtB,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AAClD,MAAM,cAAc,GAAG,+BAA+B,CAAC;AACvD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AA0C3C,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB,EAAE,IAAa;IACtD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB,EAAE,IAAa;IACnD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;QAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,IAAI,4CAA4C;QAC5F,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,4CAA4C,CAAC;IAC1E,OAAO,IAAI,eAAe,CACxB,mCAAmC,QAAQ,CAAC,MAAM,KAAK,oBAAoB,CAAC,OAAO,CAAC,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,UAAU,aAAa,EAAE,EAC1J,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,EAClM,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,eAAe,EACpF,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAC3E,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,MAA6D;IAC5F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAQD,MAAM,OAAO,gBAAgB;IAIE,MAAM;IAHlB,SAAS,CAAe;IACxB,aAAa,CAAwB;IAEtD,YAA6B,MAAkB,EAAE,YAAY,GAAiC,EAAE;sBAAnE,MAAM;QACjC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,aAAa,IAAI,iBAAiB,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,IAAI,GAAgB,EAAE;QACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACxG,OAAO,yBAAyB,CAC9B,IAAI,CAAC,MAAM,EACX,GAAG,EACH,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAC5B,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAC7D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,MAAiB,EACjB,IAAI,GAAgB,EAAE,EACtB,gBAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,cAAc,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EACzG,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CACvB,4DAA4D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAClF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC7E,CAAC;IAED,kBAAkB,CAChB,IAA2D,EAC3D,OAAO,GAAwC,EAAE;QAEjD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE;YACpD,IAAI;YACJ,CAAC,EAAE,OAAO,CAAC,MAAM;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAO,GAAwB,EAAE;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,oBAAoB,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACpG,CAAC;IAED,aAAa,CAAC,OAAO,GAAwD,EAAE;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,YAAY,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC5F,CAAC;IAED,kBAAkB,CAAC,OAAO,GAAgD,EAAE;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,kBAAkB,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC/F,CAAC;IAED,gBAAgB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QACzG,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,oBAAoB,UAAU,eAAe,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1H,CAAC;IAED,iBAAiB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QAC1G,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,UAAU,aAAa,EAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACvG,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QAChH,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,UAAU,eAAe,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1G,CAAC;IAED,oBAAoB,CAAC,cAAsB,EAAE,UAAkB;QAC7D,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,UAAU,iBAAiB,UAAU,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAChG,CAAC;IAED,uBAAuB,CACrB,cAAsB,EACtB,KAA+B,EAC/B,cAAsB;QAEtB,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,UAAU,eAAe,EAAE,mBAAmB,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,uBAAuB;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;IACjE,CAAC;IAED,qBAAqB,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACvH,CAAC;IAED,wBAAwB,CAAC,KAA8B;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,wBAAwB,CACtB,cAAsB,EACtB,KAAoD;QAEpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,wBAAwB,EAAE;YACnH,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CACtB,cAAsB,EACtB,KAA0B;QAE1B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE,wBAAwB,EAAE;YAC/H,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,KAA0B;QACxE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,wBAAwB,EAAE;YACzH,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,cAAsB,EAAE,OAAe;QACrE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,wBAAwB,EACnF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAoB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,EAAE,uBAAuB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,OAAO,GAAwE,EAAE;QAC5F,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,WAAW,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAC5F,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACpH,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,KAAkE;QACjG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,uBAAuB,EAAE;YAChH,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,yBAAyB,EAAE;YAC5H,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,KAAmD;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE;YACnH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,EAAE;YACpD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACnD,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,aAAsB;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CACxB,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,EAC7E,EAAE,aAAa,EAAE,CAClB,EAAE,yBAAyB,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,aAAa,EACjF,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,MAAkD;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,EAAE,EAChF,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,8BAA8B,EACzF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/application-onboarding/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAA8B,MAAM,aAAa,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,wCAAwC,EACxC,4CAA4C,EAC5C,0BAA0B,EAC1B,2CAA2C,EAC3C,yBAAyB,EACzB,6CAA6C,EAC7C,2BAA2B,EAC3B,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EAyBpB,MAAM,cAAc,CAAC;AAEtB,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AAClD,MAAM,cAAc,GAAG,+BAA+B,CAAC;AACvD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AA8C3C,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB,EAAE,IAAa;IACtD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB,EAAE,IAAa;IACnD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;QAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,IAAI,4CAA4C;QAC5F,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,4CAA4C,CAAC;IAC1E,OAAO,IAAI,eAAe,CACxB,mCAAmC,QAAQ,CAAC,MAAM,KAAK,oBAAoB,CAAC,OAAO,CAAC,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,UAAU,aAAa,EAAE,EAC1J,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,EAClM,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,eAAe,EACpF,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAC3E,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,MAA6D;IAC5F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAQD,MAAM,OAAO,gBAAgB;IAIE,MAAM;IAHlB,SAAS,CAAe;IACxB,aAAa,CAAwB;IAEtD,YAA6B,MAAkB,EAAE,YAAY,GAAiC,EAAE;sBAAnE,MAAM;QACjC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,aAAa,IAAI,iBAAiB,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,IAAI,GAAgB,EAAE;QACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACxG,OAAO,yBAAyB,CAC9B,IAAI,CAAC,MAAM,EACX,GAAG,EACH,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAC5B,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAC7D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,MAAiB,EACjB,IAAI,GAAgB,EAAE,EACtB,gBAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,cAAc,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EACzG,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CACvB,4DAA4D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAClF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC7E,CAAC;IAED,kBAAkB,CAChB,IAA2D,EAC3D,OAAO,GAAwC,EAAE;QAEjD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE;YACpD,IAAI;YACJ,CAAC,EAAE,OAAO,CAAC,MAAM;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAO,GAAwB,EAAE;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,oBAAoB,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IACpG,CAAC;IAED,aAAa,CAAC,OAAO,GAAwD,EAAE;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,YAAY,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC5F,CAAC;IAED,kBAAkB,CAAC,OAAO,GAAgD,EAAE;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,kBAAkB,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC/F,CAAC;IAED,gBAAgB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QACzG,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,oBAAoB,UAAU,eAAe,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1H,CAAC;IAED,iBAAiB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QAC1G,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,UAAU,aAAa,EAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACvG,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,OAAO,GAAyD,EAAE;QAChH,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,UAAU,eAAe,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1G,CAAC;IAED,oBAAoB,CAAC,cAAsB,EAAE,UAAkB;QAC7D,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,UAAU,iBAAiB,UAAU,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAChG,CAAC;IAED,uBAAuB,CACrB,cAAsB,EACtB,KAA+B,EAC/B,cAAsB;QAEtB,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,UAAU,eAAe,EAAE,mBAAmB,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,uBAAuB;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;IACjE,CAAC;IAED,qBAAqB,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACvH,CAAC;IAED,wBAAwB,CAAC,KAA8B;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,wBAAwB,CACtB,cAAsB,EACtB,KAAoD;QAEpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,wBAAwB,EAAE;YACnH,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CACtB,cAAsB,EACtB,KAA0B;QAE1B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE,wBAAwB,EAAE;YAC/H,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,KAA0B;QACxE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,wBAAwB,EAAE;YACzH,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,cAAsB,EAAE,OAAe;QACrE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,cAAc,IAAI,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,wBAAwB,EACnF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAoB,EAAE,cAAuB;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,EAAE,uBAAuB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,OAAO,GAAwE,EAAE;QAC5F,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,WAAW,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAC5F,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACpH,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,KAAkE;QACjG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,uBAAuB,EAAE;YAChH,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,yBAAyB,EAAE;YAC5H,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,KAAmD;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE;YACnH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,EAAE;YACpD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACnD,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,qBAAqB,CACnB,SAAiB,EACjB,KAA6C,EAC7C,cAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,mBAAmB,EAAE,6CAA6C,EAAE;YACvJ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CACnB,SAAiB,EACjB,KAA4C,EAC5C,cAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,0BAA0B,EAAE,4CAA4C,EAAE;YAC7J,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CACpB,SAAiB,EACjB,KAA2C,EAC3C,cAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,iBAAiB,EAAE,2CAA2C,EAAE;YACnJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CACd,SAAiB,EACjB,KAAwC,EACxC,cAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,uBAAuB,EAAE,wCAAwC,EAAE;YACtJ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,aAAsB;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CACxB,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,EAC7E,EAAE,aAAa,EAAE,CAClB,EAAE,yBAAyB,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,aAAa,EACjF,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,MAAkD;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,GAAG,QAAQ,aAAa,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,EAAE,EAChF,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CACvB,4CAA4C,QAAQ,CAAC,MAAM,8BAA8B,EACzF,6BAA6B,EAC7B,QAAQ,CAAC,MAAM,EACf,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/application-onboarding/commands.d.ts

@@ -1,4 +1,5 @@
 import type { Command } from "commander";
+import { type PublicationScanResult } from "../publications/scanner.js";
 import { type OnboardingApi } from "./client.js";
 import { OnboardingError } from "./errors.js";
 import { type OnboardingEvent, type OnboardingEventOutput, type OnboardingMode, type OnboardingSession, type OnboardingSessionState, type OnboardingSpec, type ScmAuthType, type ScmConnection, type ScmCredentialBundle, type ScmCredentialUpdate } from "./schemas.js";
@@ -7,6 +8,7 @@ export interface ApplicationOnboardingCommandDependencies {
     clientFactory?: () => OnboardingApi;
     interactive?: () => boolean;
     runTui?: typeof runOnboardingTui;
+    scanPublication?: (sourceDirectory: string) => Promise<PublicationScanResult>;
     sleep?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
 }
 export interface OnboardingSpecExecutionResult {

package/dist/application-onboarding/commands.js

@@ -4,9 +4,10 @@ import { loadAppConfig } from "../app-config.js";
 import { loadConfig } from "../config.js";
 import { registerApplicationCandidateCommands } from "../application-candidates/commands.js";
 import { SourceRepositoryClient } from "../repositories/client.js";
+import { publicationScanSummary, scanProjectPublication } from "../publications/scanner.js";
 import { OnboardingClient } from "./client.js";
 import { OnboardingError, sanitizeOnboardingOutput } from "./errors.js";
-import { OnboardingModeSchema, OnboardingEventOutputSchema, OnboardingSessionStateSchema, OnboardingSpecSchema, ScmProviderSchema } from "./schemas.js";
+import { OnboardingModeSchema, OnboardingEventOutputSchema, OnboardingFirstBuildActionRequestSchema, OnboardingJenkinsBindingActionRequestSchema, OnboardingObserverScopeActionRequestSchema, OnboardingPublicationPlanActionRequestSchema, OnboardingSessionStateSchema, OnboardingSpecSchema, ScmProviderSchema } from "./schemas.js";
 import { readScmAdminConnectionInput, readScmCredentialBundle } from "./scm-credentials.js";
 import { runOnboardingTui } from "./tui.js";
 const TERMINAL_STATES = new Set(["COMPLETED", "FAILED", "CANCELLED"]);
@@ -211,6 +212,56 @@ function idempotencyKey(value, operation = "--apply") {
     }
     return candidate;
 }
+function stableActionText(value, label, maximum = 253) {
+    const candidate = value?.trim() ?? "";
+    if (!candidate || candidate.length > maximum || /[\u0000-\u001f\u007f]/u.test(candidate)) {
+        throw new OnboardingError(`${label} must be 1-${maximum} printable characters.`, "onboarding_input_invalid");
+    }
+    return candidate;
+}
+function sha256(value, label) {
+    const candidate = value?.trim() ?? "";
+    if (!/^[0-9a-f]{64}$/u.test(candidate)) {
+        throw new OnboardingError(`${label} must be the exact lower-case SHA-256 locked by the server.`, "onboarding_input_invalid");
+    }
+    return candidate;
+}
+function collectParameter(value, previous) {
+    return [...previous, value];
+}
+function buildParameters(values) {
+    if (!values?.length)
+        return undefined;
+    if (values.length > 100)
+        throw new OnboardingError("At most 100 first-build parameters are allowed.", "onboarding_input_invalid");
+    const result = {};
+    for (const value of values) {
+        const separator = value.indexOf("=");
+        const key = separator > 0 ? value.slice(0, separator).trim() : "";
+        const parameterValue = separator > 0 ? value.slice(separator + 1) : "";
+        if (!/^[A-Za-z_][A-Za-z0-9_.-]{0,127}$/u.test(key) || parameterValue.length > 2_000
+            || /[\u0000-\u001f\u007f]/u.test(parameterValue)) {
+            throw new OnboardingError("Each --parameter must be printable KEY=VALUE with a stable key.", "onboarding_input_invalid");
+        }
+        const normalizedKey = key.replace(/[^A-Za-z0-9]/gu, "").toLowerCase();
+        if (["secret", "password", "passwd", "credential", "token", "privatekey", "apikey", "accesskey"].some((part) => normalizedKey.includes(part))
+            || /\b(?:Bearer|Basic)\s+\S+/iu.test(parameterValue)
+            || /\b(?:gh[pousr]_[A-Za-z0-9_]{20,}|LTAI[A-Za-z0-9]{12,})\b/u.test(parameterValue)
+            || /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/u.test(parameterValue)) {
+            throw new OnboardingError("First-build parameters cannot contain credential-like keys or values.", "onboarding_secret_not_allowed");
+        }
+        if (Object.hasOwn(result, key))
+            throw new OnboardingError(`Duplicate first-build parameter: ${key}`, "onboarding_input_invalid");
+        result[key] = parameterValue;
+    }
+    return result;
+}
+function parsedActionInput(schema, value) {
+    const parsed = schema.safeParse(value);
+    if (!parsed.success)
+        throw new OnboardingError(`Invalid onboarding action input: ${parsed.error.message}`, "onboarding_input_invalid");
+    return parsed.data;
+}
 export async function readOnboardingSpec(path) {
     try {
         const info = await stat(path);
@@ -353,6 +404,7 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
     const client = () => dependencies.clientFactory?.() ?? new OnboardingClient(loadConfig("platform"));
     const isInteractive = dependencies.interactive ?? (() => Boolean(process.stdin.isTTY && process.stdout.isTTY));
     const tui = dependencies.runTui ?? runOnboardingTui;
+    const scanPublication = dependencies.scanPublication ?? scanProjectPublication;
     const sleep = dependencies.sleep ?? defaultSleep;
     const app = program.command("app")
         .description("创建新应用或把存量代码库接入 DevOps 平台")
@@ -388,7 +440,8 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
   live probe 与连接变更由服务端校验平台管理员权限和乐观锁 version。
   provider credential 只能来自权限受限文件或重定向 stdin；禁止通过 argv、环境变量或普通 JSON 输出传递。
   Codeup 云 AK/Role 只能引用已有 aliyunAccountId/aliyunAssumeRoleId，Numa 不读取或保存云 AK。
-  未提供 Codeup accessToken 时使用服务端 Aliyun identity，不提交空 credential bundle。
+  Codeup accessToken 只用于 OpenAPI；含 100755 文件的 Publication 另需 HTTPS cloneUsername/clonePassword。
+  三者只从 chmod 600 文件或重定向 stdin 写入；未提供时使用服务端 Aliyun identity，不提交空 credential bundle。
 `);
     addExamples(scm.command("list")
         .description("列出当前用户可见的安全 SCM 连接摘要")
@@ -541,7 +594,7 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
         if (credential) {
             connection = await onboarding.rotateAdminScmCredential(connection.code, scmCredentialUpdate(connection.version, connection.authType, credential));
         }
-        await output(command, { ok: true, connection }, `${connection.code}\t${connection.status}\tversion:${connection.version}\tcredential:${connection.credentialConfigured ? "configured" : "missing"}`);
+        await output(command, { ok: true, connection }, `${connection.code}\t${connection.status}\tversion:${connection.version}\tcredential:${connection.credentialConfigured ? "configured" : "missing"}\tcodeup-at:${connection.codeupAccessTokenConfigured ? "ready" : "missing"}\tcodeup-clone:${connection.codeupCloneCredentialConfigured ? "ready" : "missing"}`);
     }), [
         "numa app scm create --input github.json --credential-file github-app.private.json --json",
         "numa app scm create --input codeup.json --json"
@@ -565,7 +618,7 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
         await output(command, { ok: true, connection }, `${connection.code}\t${connection.status}\tversion:${connection.version}`);
     }), ["numa app scm update github-main --input github.json --revision 4 --yes --json"]);
     addExamples(scm.command("rotate <code>")
-        .description("平台管理员写入新 GitHub 或 Codeup access token；不会回显 credential")
+        .description("平台管理员轮换 GitHub 凭据或 Codeup OpenAPI/HTTPS clone 凭据；不会回显 credential")
         .requiredOption("--revision <number>", "当前乐观锁 version")
         .option("--credential-file <file>", "仅 owner 可读（chmod 600）的 provider credential JSON")
         .option("--credential-stdin", "从重定向 stdin 读取 provider credential JSON")
@@ -587,7 +640,7 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
         await output(command, { ok: true, connection }, `${connection.code}\tcredential:configured\tversion:${connection.version}`);
     }), [
         "numa app scm rotate github-main --revision 4 --credential-file github-app.private.json --yes --json",
-        "numa app scm rotate codeup-main --revision 2 --credential-stdin --yes --json < codeup-token.private.json"
+        "numa app scm rotate codeup-main --revision 2 --credential-stdin --yes --json < codeup.private.json"
     ]);
     addExamples(scm.command("disable <code>")
         .description("平台管理员软禁用连接；服务端会阻止仍被非终态会话使用的连接")
@@ -603,11 +656,27 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
         await onboarding.disableAdminScmConnection(code, version);
         await output(command, { ok: true, code, disabled: true, previousVersion: version }, `${code}\tDISABLED`);
     }), ["numa app scm disable github-main --revision 5 --yes --json"]);
+    addExamples(app.command("begin")
+        .description("幂等创建空 onboarding session，为 consumer-bound Repository plan 获取 sessionNo")
+        .requiredOption("--mode <mode>", "new|existing")
+        .requiredOption("--idempotency-key <key>", "同一 actor/mode 结果未知时复用")
+        .option("--yes", "确认创建服务端草稿会话")
+        .action(async (options, command) => {
+        requireConfirmation(options.yes, "Beginning an onboarding session");
+        const key = idempotencyKey(options.idempotencyKey, "onboarding begin");
+        const session = await client().createSession(parseOnboardingMode(options.mode), key);
+        await output(command, { ok: true, session, idempotencyKey: key }, sessionLine(session));
+    }), [
+        "numa app begin --mode new --idempotency-key begin-code-index-onboarding --yes --json"
+    ], [
+        "先取得 sessionNo，再创建 consumer=APPLICATION_ONBOARDING、consumerRef=sessionNo 的 Repository plan。",
+        "相同 actor/key/mode 安全返回原 session；不同 mode 冲突，不会创建第二个会话。"
+    ]);
     addExamples(app.command("onboard")
         .description("启动入驻向导，或按 JSON spec 创建、预检和执行")
         .option("--mode <mode>", "new|existing；如有 --spec 必须与文件一致")
         .option("--session <session-no>", "更新已有草稿并跨 Web/CLI 恢复；不创建新会话")
-        .option("--spec <file>", "schemaVersion=1（兼容）或 2（Repository Control Plane）的 onboarding JSON 文件")
+        .option("--spec <file>", "schemaVersion=1（兼容）、2（Repository CP）或 3（Promote 全链路）的 onboarding JSON 文件")
         .option("--plan", "保存草稿并执行服务端预检，不产生外部副作用")
         .option("--apply", "保存草稿、预检并提交服务端异步执行")
         .option("--idempotency-key <key>", "apply 幂等键；结果不明时必须复用")
@@ -648,6 +717,133 @@ export function registerApplicationOnboardingCommands(program, dependencies = {}
         "未指定 --plan/--apply 时只保存服务端草稿。",
         "完整 spec 保存的 currentStep 为稳定字符串 REVIEW。"
     ]);
+    const publicationAction = app.command("publication")
+        .description("为 schemaVersion=3 会话附加受控本地源码 Publication 计划");
+    addExamples(publicationAction.command("attach <session-no>")
+        .description("扫描 clean Git HEAD 并创建绑定当前 onboarding planHash 的 child plan；不写远端 Git")
+        .requiredOption("--source <directory>", "本地 Git worktree 根目录")
+        .requiredOption("--commit-message <message>", "受审提交消息，1-500字符")
+        .requiredOption("--client-request-id <id>", "稳定 child request ID")
+        .requiredOption("--idempotency-key <key>", "结果未知时必须复用；须与 client-request-id 相同")
+        .option("--yes", "确认上传受限源码 bundle 并附加 child plan")
+        .action(async (sessionNo, options, command) => {
+        requireConfirmation(options.yes, "Attaching a project publication plan");
+        const key = idempotencyKey(options.idempotencyKey, "publication attach");
+        const clientRequestId = stableActionText(options.clientRequestId, "client-request-id", 200);
+        if (key !== clientRequestId) {
+            throw new OnboardingError("idempotency-key must exactly match client-request-id for publication attachment.", "onboarding_input_invalid");
+        }
+        const onboarding = client();
+        const session = await onboarding.getSession(sessionNo);
+        const source = await scanPublication(options.source);
+        const input = parsedActionInput(OnboardingPublicationPlanActionRequestSchema, {
+            parentPlanHash: sha256(session.planHash, "session planHash"),
+            clientRequestId,
+            sourceRevision: source.sourceRevision,
+            sourceTreeDigest: source.sourceTreeDigest,
+            clean: true,
+            commitMessage: options.commitMessage,
+            files: source.requestFiles
+        });
+        const result = await onboarding.attachPublicationPlan(sessionNo, input, key);
+        await output(command, {
+            ok: true,
+            session: result.session,
+            publicationPlan: result.publicationPlan,
+            replayed: result.replayed,
+            scan: publicationScanSummary(source),
+            idempotencyKey: key
+        }, `${result.publicationPlan.planNo}\t${result.publicationPlan.state}\t${result.publicationPlan.planHash}\treplayed:${result.replayed}`);
+    }), [
+        "numa app publication attach <session-no> --source ./code-index --commit-message 'feat: publish code-index source' --client-request-id onboarding-code-index-publication --idempotency-key onboarding-code-index-publication --yes --json"
+    ], [
+        "只读取 clean Git HEAD；输出不含 sourceRoot、contentBase64 或 SCM credential。",
+        "该动作只创建 child plan；onboarding worker 仍会等待显式执行和验证。"
+    ]);
+    const jenkinsBindingAction = app.command("jenkins-binding")
+        .description("确认 Job Control Plane 产生的候选 Jenkins binding");
+    addExamples(jenkinsBindingAction.command("confirm <session-no>")
+        .requiredOption("--binding-id <id>", "会话事件返回的候选 binding ID")
+        .requiredOption("--expected-version <number>", "候选 binding 当前乐观锁版本")
+        .requiredOption("--idempotency-key <key>", "结果未知时复用同一 key")
+        .option("--yes", "确认该 Jenkins job 与应用/tier 的绑定关系")
+        .action(async (sessionNo, options, command) => {
+        requireConfirmation(options.yes, "Confirming a Jenkins binding");
+        const key = idempotencyKey(options.idempotencyKey, "jenkins binding confirmation");
+        const input = parsedActionInput(OnboardingJenkinsBindingActionRequestSchema, {
+            bindingId: positiveInteger(options.bindingId, "binding-id"),
+            expectedVersion: nonNegativeInteger(options.expectedVersion, "expected-version", 0)
+        });
+        const result = await client().confirmJenkinsBinding(sessionNo, input, key);
+        await output(command, { ok: true, ...result, idempotencyKey: key }, `${result.binding.id}\t${result.binding.confirmationStatus}\tv${result.binding.version}\treplayed:${result.replayed}`);
+    }), [
+        "numa app jenkins-binding confirm <session-no> --binding-id 42 --expected-version 0 --idempotency-key confirm-code-index-binding --yes --json"
+    ], ["确认不会触发 scan 或 build；Job Control Plane 已独立验证配置和 inventory generation。"]);
+    const observerScopeAction = app.command("observer-scope")
+        .description("把服务绑定关联到 observer 可验证的精确 Flux/Kubernetes 坐标");
+    addExamples(observerScopeAction.command("configure <session-no>")
+        .requiredOption("--service-binding-id <id>", "会话锁定的 GitOps service binding ID")
+        .requiredOption("--kustomization-namespace <name>", "Flux Kustomization namespace")
+        .requiredOption("--kustomization-name <name>", "Flux Kustomization name")
+        .requiredOption("--helm-release-namespace <name>", "HelmRelease namespace")
+        .requiredOption("--helm-release-name <name>", "HelmRelease name")
+        .requiredOption("--workload-namespace <name>", "最终 workload namespace")
+        .requiredOption("--workload-kind <kind>", "最终 workload kind")
+        .requiredOption("--workload-name <name>", "最终 workload name")
+        .requiredOption("--expected-version <number>", "scope 当前版本；首次创建使用服务端事件给出的版本")
+        .requiredOption("--idempotency-key <key>", "结果未知时复用同一 key")
+        .option("--yes", "确认精确运行态坐标")
+        .action(async (sessionNo, options, command) => {
+        requireConfirmation(options.yes, "Configuring an observer scope");
+        const key = idempotencyKey(options.idempotencyKey, "observer scope configuration");
+        const input = parsedActionInput(OnboardingObserverScopeActionRequestSchema, {
+            serviceBindingId: positiveInteger(options.serviceBindingId, "service-binding-id"),
+            kustomizationNamespace: stableActionText(options.kustomizationNamespace, "kustomization-namespace"),
+            kustomizationName: stableActionText(options.kustomizationName, "kustomization-name"),
+            helmReleaseNamespace: stableActionText(options.helmReleaseNamespace, "helm-release-namespace"),
+            helmReleaseName: stableActionText(options.helmReleaseName, "helm-release-name"),
+            workloadNamespace: stableActionText(options.workloadNamespace, "workload-namespace"),
+            workloadKind: stableActionText(options.workloadKind, "workload-kind", 160),
+            workloadName: stableActionText(options.workloadName, "workload-name"),
+            expectedVersion: nonNegativeInteger(options.expectedVersion, "expected-version", 0)
+        });
+        const result = await client().configureObserverScope(sessionNo, input, key);
+        await output(command, { ok: true, ...result, idempotencyKey: key }, `${result.scope.scopeNo}\t${result.scope.status}\t${result.scope.evidenceFreshness}\t${result.scope.lastDriftState ?? "-"}`);
+    }), [
+        "numa app observer-scope configure <session-no> --service-binding-id 17 --kustomization-namespace flux-system --kustomization-name prd --helm-release-namespace prd --helm-release-name code-index --workload-namespace prd --workload-kind Deployment --workload-name code-index --expected-version 0 --idempotency-key scope-code-index-prd --yes --json"
+    ], ["服务端强制 serviceBindingId 属于该会话；CLI 不允许任意 cluster/path/YAML。"]);
+    const firstBuildAction = app.command("first-build")
+        .description("在全部结构与运行证据就绪后，独立决定首次 Jenkins build");
+    addExamples(firstBuildAction.command("decide <session-no>")
+        .requiredOption("--decision <decision>", "trigger|defer")
+        .option("--branch <branch>", "TRIGGER 的分支；缺省由服务端锁定配置决定")
+        .option("--parameter <KEY=VALUE>", "非敏感构建参数，可重复", collectParameter, [])
+        .option("--approve-id <id>", "生产 TRIGGER 的审批记录 ID")
+        .option("--production-reason <reason>", "生产 TRIGGER 的受审原因（至少10字符）")
+        .requiredOption("--idempotency-key <key>", "结果未知时复用同一 key")
+        .option("--yes", "确认记录决定；TRIGGER 会真正提交 Jenkins build")
+        .action(async (sessionNo, options, command) => {
+        requireConfirmation(options.yes, "Recording the first-build decision");
+        const decision = options.decision.trim().toUpperCase();
+        const input = parsedActionInput(OnboardingFirstBuildActionRequestSchema, {
+            decision,
+            branch: options.branch?.trim() || undefined,
+            parameters: buildParameters(options.parameter),
+            approveId: options.approveId?.trim() || undefined,
+            productionReason: options.productionReason?.trim() || undefined
+        });
+        const key = idempotencyKey(options.idempotencyKey, "first-build decision");
+        const result = await client().decideFirstBuild(sessionNo, input, key);
+        await output(command, { ok: true, ...result, idempotencyKey: key }, result.build
+            ? `${result.decision}\t${result.build.requestId}\t${result.build.state}\treplayed:${result.replayed}`
+            : `${result.decision}\tno-build\treplayed:${result.replayed}`);
+    }), [
+        "numa app first-build decide <session-no> --decision defer --idempotency-key defer-code-index-first-build --yes --json",
+        "numa app first-build decide <session-no> --decision trigger --branch main --idempotency-key trigger-code-index-first-build --yes --json"
+    ], [
+        "DEFER 永不触发 build，且会话保持 WAITING_EXTERNAL。",
+        "生产 TRIGGER 仍由服务端强制 ops-admin 与受审生产依据；参数禁止凭据式 key/value。"
+    ]);
     addExamples(app.command("resume <session-no>")
         .description("让服务端重新检查外部等待条件，不在客户端推进状态")
         .action(async (sessionNo, _options, command) => {