@numa-tech/numa 1.14.51 → 1.15.0

package/dist/cloud/maintenance.js

@@ -0,0 +1,210 @@
+import { access } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { appConfigPath } from "../app-config.js";
+import { bootstrapApi, viewSchema, record, canonical, policyDocument, optional, trust, validateCloudMetadata, withOAuth, createEncryptedKey, saveReceipt, readReceipt, CloudCommandError, PlatformBootstrapApiError } from "./bootstrap.js";
+export async function inspectMaintenance(plan, keyId, call) {
+    validateCloudMetadata(plan);
+    const identity = await call("sts", "GetCallerIdentity");
+    if (identity.AccountId !== plan.accountUid)
+        throw new Error("阿里云登录账号与计划 UID 不一致。");
+    const differences = [], actions = [];
+    const diff = (code, resource, actual, expected, blocked = false) => differences.push({ code, resource, actual: typeof actual === "string" ? actual : JSON.stringify(actual ?? null), expected: typeof expected === "string" ? expected : JSON.stringify(expected ?? null), blocked });
+    const add = (stage, action, args) => actions.push({ stage, action, args });
+    const user = await optional(call, "GetUser", { UserName: plan.username }, "User");
+    const role = await optional(call, "GetRole", { RoleName: plan.managementRoleName }, "Role");
+    if (!user) {
+        diff("USER_MISSING", plan.username, "不存在", "补建系统入口用户");
+        add("USER", "CreateUser", { UserName: plan.username, DisplayName: plan.userDisplayName ?? "DevOps platform entry", Comments: plan.userComments ?? plan.ownershipMarker });
+    }
+    else if (user.Comments !== (plan.userComments ?? plan.ownershipMarker) && !String(user.Comments ?? "").includes(plan.ownershipMarker)) {
+        diff("OWNERSHIP_CONFLICT", plan.username, "同名用户的归属标记已改变", "请人工核对归属", true);
+    }
+    else if (user.Comments !== (plan.userComments ?? plan.ownershipMarker) || user.DisplayName !== (plan.userDisplayName ?? "DevOps platform entry")) {
+        diff("USER_METADATA", plan.username, { Comments: user.Comments, DisplayName: user.DisplayName }, { Comments: plan.userComments ?? plan.ownershipMarker, DisplayName: plan.userDisplayName ?? "DevOps platform entry" });
+        add("USER", "UpdateUser", { UserName: plan.username, NewDisplayName: plan.userDisplayName ?? "DevOps platform entry", NewComments: plan.userComments ?? plan.ownershipMarker });
+    }
+    if (!role) {
+        diff("ROLE_MISSING", plan.managementRoleName, "不存在", "补建管理 Role");
+        add("MANAGEMENT_ROLE", "CreateRole", { RoleName: plan.managementRoleName, Description: plan.managementRoleDescription ?? plan.ownershipMarker, AssumeRolePolicyDocument: JSON.stringify(trust(plan)) });
+    }
+    else if (role.Description !== (plan.managementRoleDescription ?? plan.ownershipMarker) && !String(role.Description ?? "").includes(plan.ownershipMarker)) {
+        diff("OWNERSHIP_CONFLICT", plan.managementRoleName, "同名 Role 的归属标记已改变", "请人工核对归属", true);
+    }
+    else {
+        if (role.Description !== (plan.managementRoleDescription ?? plan.ownershipMarker)) {
+            diff("ROLE_METADATA", plan.managementRoleName, role.Description ?? "", plan.managementRoleDescription ?? plan.ownershipMarker);
+            add("MANAGEMENT_ROLE", "UpdateRole", { RoleName: plan.managementRoleName, NewDescription: plan.managementRoleDescription ?? plan.ownershipMarker });
+        }
+        const observed = policyDocument(role.AssumeRolePolicyDocument);
+        if (canonical(observed) !== canonical(trust(plan))) {
+            diff("TRUST_DRIFT", plan.managementRoleName, observed, trust(plan));
+            add("MANAGEMENT_ROLE", "UpdateRole", { RoleName: plan.managementRoleName, NewAssumeRolePolicyDocument: JSON.stringify(trust(plan)) });
+        }
+    }
+    for (const [name, expected, stage] of [[plan.managementPolicyName, plan.managementPolicy, "MANAGEMENT_POLICY"], [plan.entryPolicyName, plan.entryPolicy, "ENTRY_POLICY"]]) {
+        const policy = await optional(call, "GetPolicy", { PolicyName: name, PolicyType: "Custom" }, "Policy");
+        if (!policy) {
+            diff("POLICY_MISSING", name, "不存在", expected);
+            add(stage, "CreatePolicy", { PolicyName: name, Description: plan.ownershipMarker, PolicyDocument: JSON.stringify(expected) });
+        }
+        else if (policy.Description !== plan.ownershipMarker)
+            diff("OWNERSHIP_CONFLICT", name, "策略归属标记已改变", "请人工核对归属", true);
+        else {
+            if (typeof policy.DefaultVersion !== "string")
+                throw new Error("云端策略版本响应不完整。");
+            const version = record((await call("ram", "GetPolicyVersion", { PolicyType: "Custom", PolicyName: name, VersionId: policy.DefaultVersion })).PolicyVersion);
+            const observed = policyDocument(version.PolicyDocument);
+            if (canonical(observed) !== canonical(expected)) {
+                diff("POLICY_DRIFT", name, observed, expected);
+                add(stage, "CreatePolicyVersion", { PolicyName: name, PolicyDocument: JSON.stringify(expected), SetAsDefault: "true", RotateStrategy: "None" });
+            }
+        }
+    }
+    for (const [exists, target, targetField, policy, stage, kind] of [[!!user, plan.username, "UserName", plan.entryPolicyName, "ENTRY_POLICY", "User"], [!!role, plan.managementRoleName, "RoleName", plan.managementPolicyName, "MANAGEMENT_POLICY", "Role"]]) {
+        const response = exists ? await call("ram", "ListPoliciesFor" + kind, { [targetField]: target }) : { Policies: { Policy: [] } };
+        const policies = record(response.Policies).Policy;
+        if (!Array.isArray(policies) || response.IsTruncated === true)
+            throw new Error("策略绑定结果不完整，停止检查。");
+        let attached = false;
+        for (const value of policies) {
+            const binding = record(value);
+            if (typeof binding.PolicyName !== "string" || !["Custom", "System"].includes(String(binding.PolicyType)))
+                throw new Error("策略绑定字段无效。");
+            if (binding.PolicyName === policy && binding.PolicyType === "Custom")
+                attached = true;
+            else {
+                diff("EXTRA_BINDING", target + ":" + binding.PolicyName, binding.PolicyType + "/" + binding.PolicyName, "移除不在初始化配置中的直接策略绑定");
+                add(stage, "DetachPolicyFrom" + kind, { [targetField]: target, PolicyType: String(binding.PolicyType), PolicyName: binding.PolicyName });
+            }
+        }
+        if (!attached) {
+            diff("BINDING_MISSING", target, "未绑定 " + policy, "绑定 Custom/" + policy);
+            add(stage, "AttachPolicyTo" + kind, { [targetField]: target, PolicyType: "Custom", PolicyName: policy });
+        }
+    }
+    const keys = user ? record((await call("ram", "ListAccessKeys", { UserName: plan.username })).AccessKeys).AccessKey : [];
+    if (!Array.isArray(keys))
+        throw new Error("AK 清单响应不完整。");
+    const active = keys.some(value => { const key = record(value); return key.AccessKeyId === keyId && String(key.Status).toLowerCase() === "active"; });
+    if (!active) {
+        diff("KEY_REPLACE", plan.username, "托管 AK 缺失或停用", "创建新 AK，验证后切换；不删除其他 AK");
+        if (keys.length >= 2)
+            diff("KEY_CAPACITY", plan.username, "已有两把 AK", "请先人工确认并清理不再使用的 AK", true);
+    }
+    return { report: { status: differences.length ? differences.some(d => d.blocked) ? "BLOCKED" : "DRIFT" : "HEALTHY", differences }, actions, replaceKey: !active };
+}
+export async function executeMaintenanceActions(plan, inspection, call, checkpoint, handoff) {
+    if (inspection.report.status === "BLOCKED")
+        throw new Error("存在需要人工核对的差异，未执行修复。");
+    for (const operation of inspection.actions) {
+        await checkpoint(operation.stage, "STARTED");
+        try {
+            await call("ram", operation.action, operation.args);
+            await checkpoint(operation.stage, "SUCCEEDED");
+        }
+        catch (error) {
+            await checkpoint(operation.stage, "FAILED").catch(() => { });
+            throw error;
+        }
+    }
+    if (inspection.replaceKey)
+        await createEncryptedKey(plan, call, checkpoint, handoff);
+}
+export async function executeMaintenance(current, options, deps = {}) {
+    const api = deps.api ?? bootstrapApi;
+    const id = current.plan.id;
+    let view = viewSchema.parse(await api(`/sessions/${id}/start`, {}));
+    const executionId = view.execution?.id;
+    if (!executionId)
+        throw new Error("维护执行租约不存在。");
+    const receiptPath = deps.receiptPath ?? join(dirname(appConfigPath()), "cloud-bootstrap", `${id}.json`);
+    let failure;
+    let heartbeat;
+    const timer = setInterval(() => { if (!heartbeat)
+        heartbeat = api(`/sessions/${id}/heartbeat`, { executionId }).catch(e => { failure = e; }).finally(() => { heartbeat = undefined; }); }, 30000);
+    const checkpoint = async (stage, status) => { if (failure)
+        throw failure; view = viewSchema.parse(await api(`/sessions/${id}/progress`, { executionId, stage, status })); options.display(stage, status); };
+    const persist = async (inspection) => { view = viewSchema.parse(await api(`/sessions/${id}/report`, { executionId, report: inspection.report })); };
+    const handoff = async (ciphertext) => { await saveReceipt(receiptPath, id, ciphertext); view = viewSchema.parse(await api(`/sessions/${id}/receipt`, { executionId, ciphertext })); };
+    const inspect = async (call) => {
+        await checkpoint("PREFLIGHT", "STARTED");
+        const result = await inspectMaintenance(view.plan, view.maintenance?.accessKeyId, call);
+        await persist(result);
+        await checkpoint("PREFLIGHT", "SUCCEEDED");
+        return result;
+    };
+    const guarded = (call) => async (...args) => { if (failure)
+        throw failure; return call(...args); };
+    try {
+        if (!view.receiptStored && await access(receiptPath).then(() => true, () => false))
+            view = viewSchema.parse(await api(`/sessions/${id}/receipt`, { executionId, ...await readReceipt(receiptPath, id) }));
+        {
+            if (!view.receiptStored && view.events.some(e => e.stage === "KEY" && e.status === "STARTED"))
+                throw new Error("AK 创建结果尚未确认，请恢复原机器回执；不会再次创建 AK。");
+            const platformCall = guarded(async (product, action, args = {}) => {
+                const result = record(await api(`/sessions/${id}/cloud-read`, { executionId, product, action, args }));
+                if (typeof result.errorCode === "string")
+                    throw new CloudCommandError(action, result.errorCode);
+                return result;
+            });
+            let initial;
+            try {
+                initial = await inspect(platformCall);
+            }
+            catch (e) {
+                if (!(e instanceof PlatformBootstrapApiError) || e.status !== 503)
+                    throw e;
+            }
+            if (initial && (view.maintenance?.operation === "CHECK" || initial.report.status === "HEALTHY")) {
+                await checkpoint("IMPORT", "STARTED");
+                return viewSchema.parse(await api(`/sessions/${id}/maintenance-finish`, { executionId }));
+            }
+            if (initial?.report.status === "BLOCKED")
+                throw new Error("检查发现归属冲突或 AK 容量不足，请先核对页面差异。");
+            if (!await options.oauthFallback())
+                throw new Error("已暂停维护，检查结果已保留。");
+            await checkpoint("LOGIN", "STARTED");
+            await (deps.oauth ?? withOAuth)(options.binary, async (cli) => {
+                await checkpoint("LOGIN", "SUCCEEDED");
+                const call = guarded(cli.call);
+                let observed = await inspect(call);
+                if (view.maintenance?.operation === "CHECK" || observed.report.status === "HEALTHY")
+                    return;
+                if (observed.report.status === "BLOCKED")
+                    throw new Error("检查发现归属冲突或 AK 容量不足，请先核对页面差异。");
+                if (view.receiptStored && observed.replaceKey)
+                    throw new Error("AK 创建结果已保存，但该 AK 又被删除或停用，请人工核对；不会再次创建 AK。");
+                if (!await options.approve(view))
+                    throw new Error("已暂停修复，差异已保留。");
+                // Re-read after human approval. Any change requires another confirmation.
+                const rechecked = await inspectMaintenance(view.plan, view.maintenance?.accessKeyId, call);
+                if (canonical(rechecked.report) !== canonical(observed.report)) {
+                    await persist(rechecked);
+                    throw new Error("云端差异在确认期间发生变化，请重新确认后修复。");
+                }
+                view = viewSchema.parse(await api(`/sessions/${id}/approve-repair`, { executionId, reportHash: view.maintenance?.reportHash }));
+                observed = rechecked;
+                await executeMaintenanceActions(view.plan, observed, call, checkpoint, handoff);
+                await inspect(call);
+            });
+        }
+        await checkpoint("IMPORT", "STARTED");
+        const done = viewSchema.parse(await api(`/sessions/${id}/maintenance-finish`, { executionId }));
+        options.display("IMPORT", "SUCCEEDED");
+        return done;
+    }
+    catch (error) {
+        clearInterval(timer);
+        if (heartbeat)
+            await heartbeat;
+        const reasonCode = error instanceof CloudCommandError ? "ALIYUN_" + error.cloudCode : error instanceof Error && error.message.includes("AK 创建结果") ? "KEY_OUTCOME_UNKNOWN" : error instanceof Error && error.message.startsWith("已暂停") ? "USER_PAUSED" : "MAINTENANCE_INTERRUPTED";
+        await api(`/sessions/${id}/pause`, { executionId, reasonCode }).catch(() => { });
+        throw error;
+    }
+    finally {
+        clearInterval(timer);
+        if (heartbeat)
+            await heartbeat;
+    }
+}
+//# sourceMappingURL=maintenance.js.map

package/dist/cloud/maintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance.js","sourceRoot":"","sources":["../../src/cloud/maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAC,UAAU,EAAC,MAAM,EAAC,SAAS,EAAC,cAAc,EAAC,QAAQ,EAAC,KAAK,EAAC,qBAAqB,EAAC,SAAS,EAAC,kBAAkB,EAAC,WAAW,EAAC,WAAW,EAAC,iBAAiB,EAAC,yBAAyB,EAAwE,MAAM,gBAAgB,CAAC;AAIrS,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAkB,EAAC,KAA2B,EAAC,IAAc;IACpG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,KAAK,EAAC,mBAAmB,CAAC,CAAC;IACrD,IAAG,QAAQ,CAAC,SAAS,KAAG,IAAI,CAAC,UAAU;QAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,WAAW,GAA4B,EAAE,EAAC,OAAO,GAAU,EAAE,CAAC;IACpE,MAAM,IAAI,GAAC,CAAC,IAAW,EAAC,QAAe,EAAC,MAAc,EAAC,QAAgB,EAAC,OAAO,GAAC,KAAK,EAAC,EAAE,CAAA,WAAW,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,MAAM,IAAE,IAAI,CAAC,EAAC,QAAQ,EAAC,OAAO,QAAQ,KAAG,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAE,IAAI,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC;IAClR,MAAM,GAAG,GAAC,CAAC,KAAY,EAAC,MAAa,EAAC,IAA0B,EAAC,EAAE,CAAA,OAAO,CAAC,IAAI,CAAC,EAAC,KAAK,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;IACrG,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,EAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,kBAAkB,EAAC,EAAC,MAAM,CAAC,CAAC;IACpF,IAAG,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,cAAc,EAAC,IAAI,CAAC,QAAQ,EAAC,KAAK,EAAC,UAAU,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,WAAW,EAAC,IAAI,CAAC,eAAe,IAAE,uBAAuB,EAAC,QAAQ,EAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,eAAe,EAAC,CAAC,CAAC;IAC/J,CAAC;SAAM,IAAG,IAAI,CAAC,QAAQ,KAAG,CAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACjI,IAAI,CAAC,oBAAoB,EAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC;IACzE,CAAC;SAAM,IAAG,IAAI,CAAC,QAAQ,KAAG,CAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,WAAW,KAAG,CAAC,IAAI,CAAC,eAAe,IAAE,uBAAuB,CAAC,EAAE,CAAC;QAC1I,IAAI,CAAC,eAAe,EAAC,IAAI,CAAC,QAAQ,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,eAAe,EAAC,WAAW,EAAC,IAAI,CAAC,eAAe,IAAE,uBAAuB,EAAC,CAAC,CAAC;QACvM,GAAG,CAAC,MAAM,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,EAAC,IAAI,CAAC,eAAe,IAAE,uBAAuB,EAAC,WAAW,EAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,eAAe,EAAC,CAAC,CAAC;IACrK,CAAC;IACD,IAAG,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,cAAc,EAAC,IAAI,CAAC,kBAAkB,EAAC,KAAK,EAAC,WAAW,CAAC,CAAC;QAC/D,GAAG,CAAC,iBAAiB,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,kBAAkB,EAAC,WAAW,EAAC,IAAI,CAAC,yBAAyB,IAAE,IAAI,CAAC,eAAe,EAAC,wBAAwB,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAC;IAC/L,CAAC;SAAM,IAAG,IAAI,CAAC,WAAW,KAAG,CAAC,IAAI,CAAC,yBAAyB,IAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACpJ,IAAI,CAAC,oBAAoB,EAAC,IAAI,CAAC,kBAAkB,EAAC,kBAAkB,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,IAAG,IAAI,CAAC,WAAW,KAAG,CAAC,IAAI,CAAC,yBAAyB,IAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,eAAe,EAAC,IAAI,CAAC,kBAAkB,EAAC,IAAI,CAAC,WAAW,IAAE,EAAE,EAAC,IAAI,CAAC,yBAAyB,IAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACxH,GAAG,CAAC,iBAAiB,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,kBAAkB,EAAC,cAAc,EAAC,IAAI,CAAC,yBAAyB,IAAE,IAAI,CAAC,eAAe,EAAC,CAAC,CAAC;QAC7I,CAAC;QACD,MAAM,QAAQ,GAAC,cAAc,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7D,IAAG,SAAS,CAAC,QAAQ,CAAC,KAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,kBAAkB,EAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACjE,GAAG,CAAC,iBAAiB,EAAC,YAAY,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,kBAAkB,EAAC,2BAA2B,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IACD,KAAI,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAC,IAAI,CAAC,gBAAgB,EAAC,mBAAmB,CAAC,EAAC,CAAC,IAAI,CAAC,eAAe,EAAC,IAAI,CAAC,WAAW,EAAC,cAAc,CAAC,CAAU,EAAE,CAAC;QAC3K,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,WAAW,EAAC,EAAC,UAAU,EAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,EAAC,QAAQ,CAAC,CAAC;QAC7F,IAAG,CAAC,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,EAAC,IAAI,EAAC,KAAK,EAAC,QAAQ,CAAC,CAAC;YAC3C,GAAG,CAAC,KAAK,EAAC,cAAc,EAAC,EAAC,UAAU,EAAC,IAAI,EAAC,WAAW,EAAC,IAAI,CAAC,eAAe,EAAC,cAAc,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;QACvH,CAAC;aAAM,IAAG,MAAM,CAAC,WAAW,KAAG,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,oBAAoB,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,IAAI,CAAC,CAAC;aAC3G,CAAC;YACJ,IAAG,OAAO,MAAM,CAAC,cAAc,KAAG,QAAQ;gBAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAC,kBAAkB,EAAC,EAAC,UAAU,EAAC,QAAQ,EAAC,UAAU,EAAC,IAAI,EAAC,SAAS,EAAC,MAAM,CAAC,cAAc,EAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACjJ,MAAM,QAAQ,GAAC,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACtD,IAAG,SAAS,CAAC,QAAQ,CAAC,KAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,cAAc,EAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC;gBAC5C,GAAG,CAAC,KAAK,EAAC,qBAAqB,EAAC,EAAC,UAAU,EAAC,IAAI,EAAC,cAAc,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC,YAAY,EAAC,MAAM,EAAC,cAAc,EAAC,MAAM,EAAC,CAAC,CAAC;YACvI,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAI,MAAM,CAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,QAAQ,EAAC,UAAU,EAAC,IAAI,CAAC,eAAe,EAAC,cAAc,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,kBAAkB,EAAC,UAAU,EAAC,IAAI,CAAC,oBAAoB,EAAC,mBAAmB,EAAC,MAAM,CAAC,CAAU,EAAE,CAAC;QACpP,MAAM,QAAQ,GAAC,MAAM,CAAA,CAAC,CAAA,MAAM,IAAI,CAAC,KAAK,EAAC,iBAAiB,GAAC,IAAI,EAAC,EAAC,CAAC,WAAW,CAAC,EAAC,MAAM,EAAC,CAAC,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,EAAE,EAAC,EAAC,CAAC;QAC7G,MAAM,QAAQ,GAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAChD,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,WAAW,KAAG,IAAI;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9F,IAAI,QAAQ,GAAC,KAAK,CAAC;QACnB,KAAI,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAG,OAAO,OAAO,CAAC,UAAU,KAAG,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAClI,IAAG,OAAO,CAAC,UAAU,KAAG,MAAM,IAAI,OAAO,CAAC,UAAU,KAAG,QAAQ;gBAAC,QAAQ,GAAC,IAAI,CAAC;iBACzE,CAAC;gBACJ,IAAI,CAAC,eAAe,EAAC,MAAM,GAAC,GAAG,GAAC,OAAO,CAAC,UAAU,EAAC,OAAO,CAAC,UAAU,GAAC,GAAG,GAAC,OAAO,CAAC,UAAU,EAAC,mBAAmB,CAAC,CAAC;gBAClH,GAAG,CAAC,KAAK,EAAC,kBAAkB,GAAC,IAAI,EAAC,EAAC,CAAC,WAAW,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;QACD,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,iBAAiB,EAAC,MAAM,EAAC,MAAM,GAAC,MAAM,EAAC,YAAY,GAAC,MAAM,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,EAAC,gBAAgB,GAAC,IAAI,EAAC,EAAC,CAAC,WAAW,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,QAAQ,EAAC,UAAU,EAAC,MAAM,EAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAC,IAAI,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAC,gBAAgB,EAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAA,CAAC,CAAA,EAAE,CAAC;IAC9G,IAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,GAAC,MAAM,GAAG,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,GAAG,CAAC,WAAW,KAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAG,QAAQ,CAAC,CAAA,CAAC,CAAC,CAAC;IACxI,IAAG,CAAC,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,QAAQ,EAAC,aAAa,EAAC,uBAAuB,CAAC,CAAC;QACxE,IAAG,IAAI,CAAC,MAAM,IAAE,CAAC;YAAC,IAAI,CAAC,cAAc,EAAC,IAAI,CAAC,QAAQ,EAAC,SAAS,EAAC,mBAAmB,EAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAC,MAAM,EAAC,EAAC,MAAM,EAAC,WAAW,CAAC,MAAM,CAAA,CAAC,CAAA,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,SAAS,EAAC,WAAW,EAAC,EAAC,OAAO,EAAC,UAAU,EAAC,CAAC,MAAM,EAAC,CAAC;AAChJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAkB,EAAC,UAAqB,EAAC,IAAc,EAAC,UAAsD,EAAC,OAAqC;IAClM,IAAG,UAAU,CAAC,MAAM,CAAC,MAAM,KAAG,SAAS;QAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC9E,KAAI,MAAM,SAAS,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAA,MAAM,IAAI,CAAC,KAAK,EAAC,SAAS,CAAC,MAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAA,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAC,WAAW,CAAC,CAAC;QAAA,CAAC;QACtG,OAAM,KAAK,EAAC,CAAC;YAAA,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IACrF,CAAC;IACD,IAAG,UAAU,CAAC,UAAU;QAAC,MAAM,kBAAkB,CAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAC,OAAO,CAAC,CAAC;AAClF,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAqB,EAAC,OAA0B,EAAC,IAAI,GAA6H,EAAE;IAC3N,MAAM,GAAG,GAAC,IAAI,CAAC,GAAG,IAAE,YAAY,CAAC;IAAA,MAAM,EAAE,GAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1D,IAAI,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,WAAW,GAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IAAA,IAAG,CAAC,WAAW;QAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACnF,MAAM,WAAW,GAAC,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,EAAC,iBAAiB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClG,IAAI,OAAe,CAAC;IAAA,IAAI,SAAoC,CAAC;IAC7D,MAAM,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAG,CAAC,SAAS;QAAC,SAAS,GAAC,GAAG,CAAC,aAAa,EAAE,YAAY,EAAC,EAAC,WAAW,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,SAAS,GAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,KAAK,CAAC,CAAC;IACxK,MAAM,UAAU,GAAC,KAAK,EAAC,KAAY,EAAC,MAAa,EAAC,EAAE,GAAC,IAAG,OAAO;QAAC,MAAM,OAAO,CAAC,CAAA,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,WAAW,EAAC,EAAC,WAAW,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAA,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAC;IACtM,MAAM,OAAO,GAAC,KAAK,EAAC,UAAqB,EAAC,EAAE,GAAC,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,SAAS,EAAC,EAAC,WAAW,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACjJ,MAAM,OAAO,GAAC,KAAK,EAAC,UAAiB,EAAC,EAAE,GAAC,MAAM,WAAW,CAAC,WAAW,EAAC,EAAE,EAAC,UAAU,CAAC,CAAC,CAAA,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,UAAU,EAAC,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC7K,MAAM,OAAO,GAAC,KAAK,EAAC,IAAc,EAAC,EAAE;QACnC,MAAM,UAAU,CAAC,WAAW,EAAC,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,GAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAC,IAAI,CAAC,CAAC;QACpF,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,UAAU,CAAC,WAAW,EAAC,WAAW,CAAC,CAAC;QAAA,OAAO,MAAM,CAAC;IAChF,CAAC,CAAC;IACF,MAAM,OAAO,GAAC,CAAC,IAAc,EAAW,EAAE,CAAA,KAAK,EAAC,GAAG,IAAI,EAAC,EAAE,GAAC,IAAG,OAAO;QAAC,MAAM,OAAO,CAAC,CAAA,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;IAC3G,IAAI,CAAC;QACH,IAAG,CAAC,IAAI,CAAC,aAAa,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,EAAC,GAAE,EAAE,CAAA,KAAK,CAAC;YAAC,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,UAAU,EAAC,EAAC,WAAW,EAAC,GAAG,MAAM,WAAW,CAAC,WAAW,EAAC,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC5L,CAAC;YACC,IAAG,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,CAAC,MAAM,KAAG,SAAS,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACxI,MAAM,YAAY,GAAW,OAAO,CAAC,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,GAAC,EAAE,EAAC,EAAE;gBAClE,MAAM,MAAM,GAAC,MAAM,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,aAAa,EAAC,EAAC,WAAW,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;gBAC/F,IAAG,OAAO,MAAM,CAAC,SAAS,KAAG,QAAQ;oBAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAA,OAAO,MAAM,CAAC;YAC3G,CAAC,CAAC,CAAC;YACH,IAAI,OAA4B,CAAC;YACjC,IAAI,CAAC;gBAAA,OAAO,GAAC,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,CAAC,EAAC,CAAC;gBAAA,IAAG,CAAC,CAAC,CAAC,YAAY,yBAAyB,CAAC,IAAE,CAAC,CAAC,MAAM,KAAG,GAAG;oBAAC,MAAM,CAAC,CAAC;YAAA,CAAC;YACzH,IAAG,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,KAAG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAG,SAAS,CAAC,EAAE,CAAC;gBAC3F,MAAM,UAAU,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC;gBAAA,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,qBAAqB,EAAC,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC;YAC9H,CAAC;YACD,IAAG,OAAO,EAAE,MAAM,CAAC,MAAM,KAAG,SAAS;gBAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACrF,IAAG,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE;gBAAC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpE,MAAM,UAAU,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAE,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAC,KAAK,EAAC,GAAG,EAAA,EAAE;gBACtD,MAAM,UAAU,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnE,IAAI,QAAQ,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAG,IAAI,CAAC,WAAW,EAAE,SAAS,KAAG,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAG,SAAS;oBAAC,OAAO;gBACtF,IAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAG,SAAS;oBAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACrF,IAAG,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,UAAU;oBAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC1G,IAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;gBAChE,0EAA0E;gBAC1E,MAAM,SAAS,GAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAC,IAAI,CAAC,CAAC;gBACvF,IAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,KAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAA,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;oBAAA,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAAA,CAAC;gBACnI,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAC,EAAC,WAAW,EAAC,UAAU,EAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAC,CAAC,CAAC,CAAC;gBACzH,QAAQ,GAAC,SAAS,CAAC;gBACnB,MAAM,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,UAAU,EAAC,OAAO,CAAC,CAAC;gBAC5E,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,qBAAqB,EAAC,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,WAAW,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAC/I,CAAC;IAAA,OAAM,KAAK,EAAE,CAAC;QACb,aAAa,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,SAAS;YAAC,MAAM,SAAS,CAAC;QAClD,MAAM,UAAU,GAAC,KAAK,YAAY,iBAAiB,CAAA,CAAC,CAAA,SAAS,GAAC,KAAK,CAAC,SAAS,CAAA,CAAC,CAAA,KAAK,YAAY,KAAK,IAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,qBAAqB,CAAA,CAAC,CAAA,KAAK,YAAY,KAAK,IAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,aAAa,CAAA,CAAC,CAAA,yBAAyB,CAAC;QAC9P,MAAM,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAC,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;QAAA,MAAM,KAAK,CAAC;IACxF,CAAC;YAAO,CAAC;QAAA,aAAa,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,SAAS;YAAC,MAAM,SAAS,CAAC;IAAA,CAAC;AAC9D,CAAC"}

package/dist/cloud/oss-bootstrap.d.ts

@@ -0,0 +1,11 @@
+import { OssClient } from "../oss/client.js";
+import type { OssBootstrapPlan } from "../oss/schemas.js";
+type BootstrapClient = Pick<OssClient, "bootstrapStatus" | "bootstrapPreview" | "bootstrapApply">;
+declare function approvePlan(plan: OssBootstrapPlan): Promise<boolean>;
+/** Uses the same read/preview/approved-plan contract as `oss bootstrap`. No automatic write retries. */
+export declare function runOssBootstrap(accountId: number, json?: boolean, dependencies?: {
+    client?: BootstrapClient;
+    approve?: typeof approvePlan;
+    display?: (message: string) => void;
+}): Promise<boolean>;
+export {};

package/dist/cloud/oss-bootstrap.js

@@ -0,0 +1,36 @@
+import { confirm, isCancel, note, outro } from "@clack/prompts";
+import { loadConfig } from "../config.js";
+import { OssClient } from "../oss/client.js";
+import { sanitizeOssOutput } from "../oss/errors.js";
+async function approvePlan(plan) {
+    note(`平台账号 ID：${plan.state.accountId}\n默认 Role：${plan.state.roleName}\n操作：${plan.roleAction}\n${plan.purpose}\n信任策略：${plan.trustPolicy}\n\n执行会将本账号 OSS 代理扮演清单固定为默认 Role；不会发布 Policy 或创建 Grant。`, "默认 OSS Role 初始化范围", { output: process.stderr });
+    const answer = await confirm({ message: "按以上计划初始化默认 OSS Role？", initialValue: false, output: process.stderr });
+    return !isCancel(answer) && answer;
+}
+/** Uses the same read/preview/approved-plan contract as `oss bootstrap`. No automatic write retries. */
+export async function runOssBootstrap(accountId, json = false, dependencies = {}) {
+    const client = dependencies.client ?? new OssClient(loadConfig("platform"));
+    const display = dependencies.display ?? (message => outro(message, { output: process.stderr }));
+    let state = await client.bootstrapStatus(accountId);
+    if (!state.ready) {
+        if (state.state === "RUNNING") {
+            display("OSS 初始化仍在执行；请稍后查询状态，不会重复提交。");
+            return false;
+        }
+        const plan = await client.bootstrapPreview(accountId);
+        if (!await (dependencies.approve ?? approvePlan)(plan)) {
+            display(`已保留 OSS 计划 ${plan.state.planId}；尚未执行，可按同一 UID 继续。`);
+            return false;
+        }
+        if (!plan.state.planId)
+            throw new Error("OSS 初始化预览缺少计划 ID，未执行。");
+        state = await client.bootstrapApply(accountId, plan.state.planId);
+    }
+    if (!state.ready)
+        throw new Error("OSS 初始化尚未就绪，请核对任务状态。");
+    display(`默认 OSS Role ${state.roleName} 已就绪。请在策略绑定与授权中配置业务访问。`);
+    if (json)
+        process.stdout.write(JSON.stringify(sanitizeOssOutput({ ok: true, oss: state })) + "\n");
+    return true;
+}
+//# sourceMappingURL=oss-bootstrap.js.map

package/dist/cloud/oss-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oss-bootstrap.js","sourceRoot":"","sources":["../../src/cloud/oss-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,KAAK,UAAU,WAAW,CAAC,IAAsB;IAC/C,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,QAAQ,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,WAAW,yDAAyD,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClP,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/G,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AACrC,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,IAAI,GAAG,KAAK,EAAE,YAAY,GAE/E,EAAE;IACJ,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChG,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,6BAA6B,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjE,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1D,OAAO,CAAC,eAAe,KAAK,CAAC,QAAQ,wBAAwB,CAAC,CAAC;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cloud/wizard.d.ts

@@ -0,0 +1,25 @@
+import { resolveBootstrapAccount } from "./accounts.js";
+import { bootstrapApi, type BootstrapView, type CloudCall } from "./bootstrap.js";
+export declare function progressSummary(view: BootstrapView): string;
+export declare function findWizardSession(options: {
+    sessionId?: string;
+    accountUid?: string;
+}, api?: typeof bootstrapApi, resolveAccount?: typeof resolveBootstrapAccount): Promise<BootstrapView>;
+/** All recovery decisions use server state. Only the encrypted handoff journal is also kept locally. */
+export declare function executeWizardSession(current: BootstrapView, options: {
+    binary: string;
+    approve: (view: BootstrapView) => Promise<boolean>;
+    display: (stage: string, status: string) => void;
+}, dependencies?: {
+    api?: typeof bootstrapApi;
+    oauth?: <T>(binary: string, run: (cli: {
+        call: CloudCall;
+    }) => Promise<T>) => Promise<T>;
+    receiptPath?: string;
+}): Promise<BootstrapView>;
+export declare function runBootstrapWizard(options: {
+    sessionId?: string;
+    accountUid?: string;
+    aliyunBin?: string;
+    confirmAccount?: string;
+}, json?: boolean): Promise<void>;

package/dist/cloud/wizard.js

@@ -0,0 +1,239 @@
+import { runOssBootstrap } from "./oss-bootstrap.js";
+import { intro, outro, note, select, text, confirm, isCancel } from "@clack/prompts";
+import { access } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { runBusinessBootstrap, businessStatusSchema } from "./business-bootstrap.js";
+import { executeMaintenance } from "./maintenance.js";
+import { appConfigPath } from "../app-config.js";
+import { resolveBootstrapAccount } from "./accounts.js";
+import { bootstrapApi, viewSchema, withOAuth, preflight, validateCloudMetadata, executePlan, saveReceipt, readReceipt, PlatformBootstrapApiError, CloudCommandError } from "./bootstrap.js";
+const labels = { LOGIN: "阿里云登录", IDENTITY: "核对云账号", PREFLIGHT: "核对云端现状", USER: "系统 RAM 用户", MANAGEMENT_ROLE: "管理 Role", MANAGEMENT_POLICY: "管理权限策略", ENTRY_POLICY: "角色扮演权限", KEY: "创建并保存加密凭据", IMPORT: "验证并切换平台凭据" };
+const statuses = { STARTED: "处理中 / 待核对", SUCCEEDED: "已完成", FAILED: "未完成，等待恢复" };
+export function progressSummary(view) {
+    const latest = new Map(view.events.map(event => [event.stage, event.status]));
+    return Object.entries(labels).map(([stage, label]) => `${label}：${latest.has(stage) ? statuses[latest.get(stage)] ?? latest.get(stage) : "待执行"}`).join("\n");
+}
+export async function findWizardSession(options, api = bootstrapApi, resolveAccount = resolveBootstrapAccount) {
+    if (options.sessionId && options.accountUid)
+        throw new Error("会话 ID 与 --account-uid 只能选择一个。");
+    if (options.sessionId)
+        return viewSchema.parse(await api(`/sessions/${options.sessionId}`));
+    const accountId = await resolveAccount(undefined, options.accountUid);
+    const status = await api(`/accounts/${accountId}/status`);
+    const latest = status.latest;
+    if (latest) {
+        const existing = viewSchema.parse(latest);
+        if (status.initialization && existing.state === "CANCELLED")
+            return viewSchema.parse(status.initialization);
+        if (["PLANNED", "RUNNING", "PAUSED", "COMPLETE", "CHECKED"].includes(existing.state)) {
+            if (!["COMPLETE", "CHECKED"].includes(existing.state) && !status.canResume)
+                throw new Error("该云账号已有其他管理员发起的初始化；可在云账号管理页面查看进度，请原发起人继续。");
+            return existing;
+        }
+    }
+    if (status.managementConfigured) {
+        return viewSchema.parse(await api(`/accounts/${accountId}/maintenance`, { operation: "CHECK" }));
+    }
+    return viewSchema.parse(await api(`/accounts/${accountId}`, {}));
+}
+/** All recovery decisions use server state. Only the encrypted handoff journal is also kept locally. */
+export async function executeWizardSession(current, options, dependencies = {}) {
+    const api = dependencies.api ?? bootstrapApi;
+    const id = current.plan.id;
+    let view = viewSchema.parse(await api(`/sessions/${id}/start`, {}));
+    if (view.state === "COMPLETE")
+        return view;
+    const executionId = view.execution?.id;
+    if (!executionId)
+        throw new Error("服务端未提供执行租约，请升级平台后再使用恢复向导。");
+    const receiptPath = dependencies.receiptPath ?? join(dirname(appConfigPath()), "cloud-bootstrap", `${id}.json`);
+    let heartbeatFailure;
+    let heartbeat;
+    const timer = setInterval(() => {
+        if (!heartbeat) {
+            heartbeat = api(`/sessions/${id}/heartbeat`, { executionId }).catch(error => { heartbeatFailure = error; }).finally(() => { heartbeat = undefined; });
+        }
+    }, 30_000);
+    const checkpoint = async (stage, status) => {
+        if (heartbeatFailure)
+            throw heartbeatFailure;
+        view = viewSchema.parse(await api(`/sessions/${id}/progress`, { executionId, stage, status }));
+        options.display(stage, status);
+    };
+    try {
+        const localReceipt = await access(receiptPath).then(() => true, () => false);
+        if (!view.receiptStored && localReceipt) {
+            view = viewSchema.parse(await api(`/sessions/${id}/receipt`, { executionId, ...await readReceipt(receiptPath, id) }));
+        }
+        if (!view.receiptStored) {
+            validateCloudMetadata(view.plan);
+            if (view.events.some(event => event.stage === "KEY" && event.status === "STARTED"))
+                throw new Error("上次 AK 创建结果尚未确认，服务端和本机均没有加密回执。请核对该 RAM 用户的 AK 或在原执行机器恢复回执；不会再次创建 AK。");
+            await checkpoint("LOGIN", "STARTED");
+            await (dependencies.oauth ?? withOAuth)(options.binary, async (cli) => {
+                await checkpoint("LOGIN", "SUCCEEDED");
+                const guardedCall = async (product, action, args) => { if (heartbeatFailure)
+                    throw heartbeatFailure; return cli.call(product, action, args); };
+                await checkpoint("IDENTITY", "STARTED");
+                await checkpoint("PREFLIGHT", "STARTED");
+                await preflight(view.plan, guardedCall, true);
+                await checkpoint("IDENTITY", "SUCCEEDED");
+                await checkpoint("PREFLIGHT", "SUCCEEDED");
+                if (!await options.approve(view))
+                    throw new Error("已暂停初始化，服务端进度已保留。再次运行同一 UID 的向导继续。");
+                await executePlan(view.plan, guardedCall, checkpoint, async (ciphertext) => {
+                    // Local fsync is the first handoff; upload follows before another cloud mutation or success event.
+                    await saveReceipt(receiptPath, id, ciphertext);
+                    view = viewSchema.parse(await api(`/sessions/${id}/receipt`, { executionId, ciphertext }));
+                }, { resume: true });
+            });
+        }
+        else {
+            options.display("KEY", "SUCCEEDED");
+            if (!await options.approve(view))
+                throw new Error("已暂停凭据导入，服务端加密回执已保留。");
+        }
+        await checkpoint("IMPORT", "STARTED");
+        const completed = viewSchema.parse(await api(`/sessions/${id}/finish`, { executionId }));
+        options.display("IMPORT", "SUCCEEDED");
+        return completed;
+    }
+    catch (error) {
+        clearInterval(timer);
+        if (heartbeat)
+            await heartbeat;
+        const reasonCode = error instanceof CloudCommandError ? "ALIYUN_" + error.cloudCode
+            : error instanceof PlatformBootstrapApiError ? "PLATFORM_HTTP_" + error.status
+                : error instanceof Error && error.message.includes("AK 创建结果") ? "KEY_OUTCOME_UNKNOWN"
+                    : error instanceof Error && error.message.startsWith("已暂停") ? "USER_PAUSED" : "EXECUTION_INTERRUPTED";
+        await api(`/sessions/${id}/pause`, { executionId, reasonCode }).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        clearInterval(timer);
+        if (heartbeat)
+            await heartbeat;
+    }
+}
+export async function runBootstrapWizard(options, json = false) {
+    if (!process.stdin.isTTY)
+        throw new Error("初始化向导需要交互式终端。预先审阅可使用 cloud bootstrap plan --account-uid UID。");
+    intro("阿里云系统身份初始化", { output: process.stderr });
+    if (!options.sessionId && !options.accountUid) {
+        const uid = await text({ message: "阿里云主账号 UID", output: process.stderr, validate: value => !/^\d{8,32}$/u.test(value ?? "") ? "请输入 8–32 位数字 UID。" : undefined });
+        if (isCancel(uid)) {
+            outro("已退出。", { output: process.stderr });
+            return;
+        }
+        options = { ...options, accountUid: uid };
+    }
+    let current = await findWizardSession(options);
+    note(`云账号：${current.plan.accountCode} (${current.plan.accountUid})\n系统用户：${current.plan.username}\n管理 Role：${current.plan.managementRoleName}\n会话：${current.plan.id}`, "初始化对象", { output: process.stderr });
+    note(progressSummary(current), "服务端保存的进度", { output: process.stderr });
+    if (["COMPLETE", "CHECKED"].includes(current.state)) {
+        const business = businessStatusSchema.parse(await bootstrapApi(`/accounts/${current.plan.accountId}/business`));
+        const maintenanceChoice = await select({ message: "系统身份维护", output: process.stderr, options: [
+                { value: "CHECK", label: "检查云端状态", hint: "只读检查，保存最近检查结果" },
+                { value: "REPAIR", label: "检查并修复系统身份差异", hint: "先展示差异，再确认修复" },
+                { value: "BUSINESS", label: business.configured ? "检查/维护共享业务身份" : "补齐共享业务身份", hint: business.latest?.canResume ? "继续服务端保存的业务身份任务" : "云账号共用，不依赖 OSS Role" },
+                { value: "OSS", label: "初始化/检查默认 OSS Role", hint: "共享业务身份就绪后，预览并确认 OSS 初始化" },
+                { value: "exit", label: "退出" }
+            ] });
+        if (isCancel(maintenanceChoice) || maintenanceChoice === "exit") {
+            outro("已退出。", { output: process.stderr });
+            return;
+        }
+        if (maintenanceChoice === "OSS") {
+            await runOssBootstrap(current.plan.accountId, json);
+            return;
+        }
+        if (maintenanceChoice === "BUSINESS") {
+            if (await runBusinessBootstrap(current.plan.accountId, json))
+                await runOssBootstrap(current.plan.accountId, json);
+            return;
+        }
+        current = viewSchema.parse(await bootstrapApi(`/accounts/${current.plan.accountId}/maintenance`, { operation: maintenanceChoice }));
+        note(`维护会话：${current.plan.id}\n再次按 UID 运行可继续本次维护。`, "维护任务已保存", { output: process.stderr });
+    }
+    if (current.state === "CANCELLED") {
+        outro("本次初始化已终止。如需新计划，请使用 --account-uid 重新进入向导。", { output: process.stderr });
+        if (json)
+            process.stdout.write(JSON.stringify({ ok: true, ...current }) + "\n");
+        return;
+    }
+    while (true) {
+        const choice = await select({ message: current.events.length ? "发现未完成的初始化" : "准备初始化", output: process.stderr, options: [
+                { value: "continue", label: current.events.length ? "从未完成步骤继续" : "开始向导", hint: "核对云端状态，保留已完成资源" },
+                { value: "exit", label: "稍后继续", hint: "保留服务端计划和进度" },
+                { value: "cancel", label: "终止本次初始化", hint: "结束当前计划，不能恢复执行" }
+            ] });
+        if (isCancel(choice) || choice === "exit") {
+            outro("进度已保留，再次运行同一 UID 的向导继续。", { output: process.stderr });
+            return;
+        }
+        if (choice !== "cancel")
+            break;
+        note(`云账号：${current.plan.accountCode} (${current.plan.accountUid})\n会话：${current.plan.id}\n\n终止后，本次计划无法恢复执行或导入凭据，服务端加密回执及其解密密钥会被清除。已创建的云资源不会自动删除。`, "确认终止影响", { output: process.stderr });
+        const answer = await confirm({ message: "确认终止本次初始化？", initialValue: false, output: process.stderr });
+        if (isCancel(answer) || !answer)
+            continue;
+        const cancelled = viewSchema.parse(await bootstrapApi(`/sessions/${current.plan.id}/cancel`, {}));
+        if (cancelled.plan.id !== current.plan.id || cancelled.state !== "CANCELLED")
+            throw new Error("服务端未确认终止，请查询初始化状态后重试。");
+        outro(`本次初始化已终止。如需新计划，请运行：numa cloud bootstrap run --account-uid ${current.plan.accountUid}`, { output: process.stderr });
+        if (json)
+            process.stdout.write(JSON.stringify({ ok: true, ...cancelled }) + "\n");
+        return;
+    }
+    if (options.confirmAccount && options.confirmAccount !== current.plan.accountUid)
+        throw new Error("--confirm-account 与计划 UID 不一致。");
+    const localBinary = "./tmp/aliyun-cli-3.5.0/aliyun";
+    const binary = options.aliyunBin ?? (await access(localBinary).then(() => localBinary, () => "aliyun"));
+    try {
+        if (current.maintenance) {
+            current = await executeMaintenance(current, { binary,
+                display: (stage, status) => process.stderr.write(`  ${status === "SUCCEEDED" ? "✓" : "›"} ${stage === "IMPORT" ? (current.maintenance?.operation === "CHECK" ? "保存检查结果" : "验证系统身份") : labels[stage] ?? stage} · ${statuses[status] ?? status}\n`),
+                oauthFallback: async () => {
+                    const answer = await confirm({ message: "使用本地阿里云管理员 OAuth 登录，以完成检查或执行修复？", initialValue: false, output: process.stderr });
+                    return !isCancel(answer) && answer;
+                },
+                approve: async (view) => {
+                    note(view.receiptStored && view.maintenance?.report?.status === "HEALTHY" ? "新凭据的加密回执已保存；验证成功后切换默认管理凭据。" : (view.maintenance?.report?.differences ?? []).map(d => `${d.resource} · ${d.code}\n当前：${d.actual}\n恢复为：${d.expected}`).join("\n\n"), "修复范围", { output: process.stderr });
+                    const answer = await confirm({ message: view.receiptStored ? "继续验证并导入已保存的新凭据？" : "确认按以上差异修复系统身份？", initialValue: false, output: process.stderr });
+                    return !isCancel(answer) && answer;
+                }
+            });
+            const report = current.maintenance?.report;
+            if (report)
+                note(report.differences.length ? report.differences.map(d => `${d.resource} · ${d.code}\n${d.actual} → ${d.expected}`).join("\n\n") : "检查范围内的系统用户、Role、策略、直接绑定及托管 AK 均符合保存的配置。", "最近检查结果", { output: process.stderr });
+            outro(current.state === "CHECKED" ? "云端检查完成，结果已保存。" : "系统身份修复及凭据验证完成。", { output: process.stderr });
+            if (json)
+                process.stdout.write(JSON.stringify({ ok: true, ...current }) + "\n");
+            return;
+        }
+        current = await executeWizardSession(current, { binary,
+            display: (stage, status) => process.stderr.write(`  ${status === "SUCCEEDED" ? "✓" : status === "FAILED" ? "!" : "›"} ${labels[stage] ?? stage} · ${statuses[status] ?? status}\n`),
+            approve: async (view) => {
+                note(`${view.plan.userComments ?? view.plan.ownershipMarker}\n\n管理权限：\n${JSON.stringify(view.plan.managementPolicy, null, 2)}\n\n完成后切换平台默认管理凭据，业务代理保持不变。`, view.receiptStored ? "恢复凭据验证与导入" : "确认初始化范围", { output: process.stderr });
+                if (options.confirmAccount)
+                    return true;
+                const answer = await confirm({ message: view.receiptStored ? "验证已保存的凭据并完成初始化？" : "按以上范围继续初始化？", initialValue: false, output: process.stderr });
+                return !isCancel(answer) && answer;
+            }
+        });
+        const businessReady = await runBusinessBootstrap(current.plan.accountId, json);
+        const ossReady = businessReady && await runOssBootstrap(current.plan.accountId, json);
+        outro(ossReady ? "系统身份、共享业务身份及默认 OSS Role 已就绪。访问策略发布与用户/Client 授权仍需单独配置。" : "系统管理阶段已完成；业务或 OSS 阶段尚未完成，可按相同 UID 继续。", { output: process.stderr });
+        if (json)
+            process.stdout.write(JSON.stringify({ ok: true, ...current }) + "\n");
+    }
+    catch (error) {
+        if (current.state === "COMPLETE") {
+            note(`系统身份已完成。再次按 UID 运行并选择共享业务身份或默认 OSS Role，可继续对应任务。`, "共享业务身份待继续", { output: process.stderr });
+            throw error;
+        }
+        note(`再次运行：numa cloud bootstrap run --account-uid ${current.plan.accountUid}\n会话：${current.plan.id}\n意外退出后，执行租约最多 3 分钟到期；服务端进度和加密回执会保留。`, "恢复初始化", { output: process.stderr });
+        throw error;
+    }
+}
+//# sourceMappingURL=wizard.js.map

package/dist/cloud/wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.js","sourceRoot":"","sources":["../../src/cloud/wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,yBAAyB,EAAE,iBAAiB,EAAsC,MAAM,gBAAgB,CAAC;AAEhO,MAAM,MAAM,GAA0B,EAAC,KAAK,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,SAAS,EAAC,QAAQ,EAAC,IAAI,EAAC,WAAW,EAAC,eAAe,EAAC,SAAS,EAAC,iBAAiB,EAAC,QAAQ,EAAC,YAAY,EAAC,QAAQ,EAAC,GAAG,EAAC,WAAW,EAAC,MAAM,EAAC,WAAW,EAAC,CAAC;AACzN,MAAM,QAAQ,GAA0B,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,KAAK,EAAC,MAAM,EAAC,UAAU,EAAC,CAAC;AAChG,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/J,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgD,EAAE,GAAG,GAAC,YAAY,EACxG,cAAc,GAAC,uBAAuB;IACtC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAC,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,MAAM,GAAC,MAAM,GAAG,CAAC,aAAa,SAAS,SAAS,CAA0H,CAAC;IACjL,MAAM,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,KAAK,KAAG,WAAW;YAAC,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACzG,IAAI,CAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,IAAG,CAAC,CAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACrI,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,SAAS,cAAc,EAAC,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,SAAS,EAAE,EAAC,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAsB,EAAE,OAGlE,EAAE,YAAY,GAIX,EAAE;IACJ,MAAM,GAAG,GAAC,YAAY,CAAC,GAAG,IAAE,YAAY,CAAC;IACzC,MAAM,EAAE,GAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IACzB,IAAI,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAG,IAAI,CAAC,KAAK,KAAG,UAAU;QAAC,OAAO,IAAI,CAAC;IACvC,MAAM,WAAW,GAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IACrC,IAAG,CAAC,WAAW;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAC,YAAY,CAAC,WAAW,IAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,EAAC,iBAAiB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1G,IAAI,gBAAwB,CAAC;IAAC,IAAI,SAAoC,CAAC;IACvE,MAAM,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE;QAC1B,IAAG,CAAC,SAAS,EAAE,CAAC;YACd,SAAS,GAAC,GAAG,CAAC,aAAa,EAAE,YAAY,EAAC,EAAC,WAAW,EAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,gBAAgB,GAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,SAAS,GAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC;QACvI,CAAC;IACH,CAAC,EAAC,MAAM,CAAC,CAAC;IACV,MAAM,UAAU,GAAC,KAAK,EAAC,KAAY,EAAC,MAAa,EAAC,EAAE;QAClD,IAAG,gBAAgB;YAAC,MAAM,gBAAgB,CAAC;QAC3C,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,WAAW,EAAC,EAAC,WAAW,EAAC,KAAK,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,YAAY,GAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,EAAC,GAAE,EAAE,CAAA,KAAK,CAAC,CAAC;QACtE,IAAG,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,UAAU,EAAC,EAAC,WAAW,EAAC,GAAG,MAAM,WAAW,CAAC,WAAW,EAAC,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACjH,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,KAAK,KAAG,KAAK,IAAI,KAAK,CAAC,MAAM,KAAG,SAAS,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,MAAM,UAAU,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,YAAY,CAAC,KAAK,IAAE,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAC,KAAK,EAAC,GAAG,EAAA,EAAE;gBAC9D,MAAM,UAAU,CAAC,OAAO,EAAC,WAAW,CAAC,CAAC;gBACtC,MAAM,WAAW,GAAW,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,GAAC,IAAG,gBAAgB;oBAAC,MAAM,gBAAgB,CAAC,CAAA,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;gBAC3I,MAAM,UAAU,CAAC,UAAU,EAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,UAAU,CAAC,WAAW,EAAC,SAAS,CAAC,CAAC;gBACxC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAC,WAAW,EAAC,IAAI,CAAC,CAAC;gBAC5C,MAAM,UAAU,CAAC,UAAU,EAAC,WAAW,CAAC,CAAC;gBACzC,MAAM,UAAU,CAAC,WAAW,EAAC,WAAW,CAAC,CAAC;gBAC1C,IAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACrF,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAC,WAAW,EAAC,UAAU,EAAC,KAAK,EAAC,UAAU,EAAA,EAAE;oBACnE,mGAAmG;oBACnG,MAAM,WAAW,CAAC,WAAW,EAAC,EAAE,EAAC,UAAU,CAAC,CAAC;oBAC7C,IAAI,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,UAAU,EAAC,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,CAAC,CAAC;gBACvF,CAAC,EAAC,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,OAAO,CAAC,KAAK,EAAC,WAAW,CAAC,CAAC;YACnC,IAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC;QACrC,MAAM,SAAS,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,SAAS,EAAC,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,WAAW,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAM,KAAK,EAAE,CAAC;QACd,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAG,SAAS;YAAC,MAAM,SAAS,CAAC;QAC7B,MAAM,UAAU,GAAC,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,SAAS,GAAC,KAAK,CAAC,SAAS;YAC7E,CAAC,CAAC,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,gBAAgB,GAAC,KAAK,CAAC,MAAM;gBAC5E,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,qBAAqB;oBACrF,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACxG,MAAM,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAC,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAG,SAAS;YAAC,MAAM,SAAS,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAuF,EAAE,IAAI,GAAC,KAAK;IAC1I,IAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACxG,KAAK,CAAC,YAAY,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;IAC5C,IAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAC,MAAM,IAAI,CAAC,EAAC,OAAO,EAAC,YAAY,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAAA,EAAE,CAAA,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,IAAE,EAAE,CAAC,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,SAAS,EAAC,CAAC,CAAC;QAChJ,IAAG,QAAQ,CAAC,GAAG,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAChE,OAAO,GAAC,EAAC,GAAG,OAAO,EAAC,UAAU,EAAC,GAAG,EAAC,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,GAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,WAAW,OAAO,CAAC,IAAI,CAAC,QAAQ,aAAa,OAAO,CAAC,IAAI,CAAC,kBAAkB,QAAQ,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;IACvM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAC,UAAU,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;IAClE,IAAG,CAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC;QAC9G,MAAM,iBAAiB,GAAC,MAAM,MAAM,CAAC,EAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,EAAC;gBACnF,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,eAAe,EAAC;gBACnD,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,aAAa,EAAC,IAAI,EAAC,aAAa,EAAC;gBACvD,EAAC,KAAK,EAAC,UAAU,EAAC,KAAK,EAAC,QAAQ,CAAC,UAAU,CAAA,CAAC,CAAA,aAAa,CAAA,CAAC,CAAA,UAAU,EAAC,IAAI,EAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA,CAAC,CAAA,gBAAgB,CAAA,CAAC,CAAA,oBAAoB,EAAC;gBAC3I,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,mBAAmB,EAAC,IAAI,EAAC,yBAAyB,EAAC;gBACtE,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,EAAC;aAC1B,EAAC,CAAC,CAAC;QACJ,IAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAE,iBAAiB,KAAG,MAAM,EAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAC1G,IAAG,iBAAiB,KAAG,KAAK,EAAC,CAAC;YAAA,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACzF,IAAG,iBAAiB,KAAG,UAAU,EAAC,CAAC;YAAA,IAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,IAAI,CAAC;gBAAC,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACzJ,OAAO,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,SAAS,cAAc,EAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,CAAC,CAAC,CAAC;QAC9H,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,EAAE,sBAAsB,EAAC,SAAS,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;IACxF,CAAC;IACD,IAAG,OAAO,CAAC,KAAK,KAAG,WAAW,EAAE,CAAC;QAAA,KAAK,CAAC,0CAA0C,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QAAA,IAAG,IAAI;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,OAAO,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAAA,OAAO;IAAA,CAAC;IAC3L,OAAM,IAAI,EAAE,CAAC;QACX,MAAM,MAAM,GAAC,MAAM,MAAM,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,EAAC;gBACzG,EAAC,KAAK,EAAC,UAAU,EAAC,KAAK,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,MAAM,EAAC,IAAI,EAAC,gBAAgB,EAAC;gBACtF,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,IAAI,EAAC,YAAY,EAAC;gBAC7C,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,eAAe,EAAC;aACtD,EAAC,CAAC,CAAC;QACJ,IAAG,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,KAAG,MAAM,EAAC,CAAC;YAAA,KAAK,CAAC,yBAAyB,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACvG,IAAG,MAAM,KAAG,QAAQ;YAAC,MAAM;QAC3B,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,SAAS,OAAO,CAAC,IAAI,CAAC,EAAE,0DAA0D,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QACrL,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,EAAC,OAAO,EAAC,YAAY,EAAC,YAAY,EAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QAC5F,IAAG,QAAQ,CAAC,MAAM,CAAC,IAAE,CAAC,MAAM;YAAC,SAAS;QACtC,MAAM,SAAS,GAAC,UAAU,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAC,EAAE,CAAC,CAAC,CAAC;QAC/F,IAAG,SAAS,CAAC,IAAI,CAAC,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,KAAG,WAAW;YAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjH,KAAK,CAAC,6DAA6D,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QACtH,IAAG,IAAI;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,SAAS,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,IAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,UAAU;QAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChI,MAAM,WAAW,GAAC,+BAA+B,CAAC;IAClD,MAAM,MAAM,GAAC,OAAO,CAAC,SAAS,IAAE,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,WAAW,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,IAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,GAAC,MAAM,kBAAkB,CAAC,OAAO,EAAC,EAAC,MAAM;gBAC9C,OAAO,EAAC,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,KAAG,WAAW,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,IAAI,KAAK,KAAG,QAAQ,CAAA,CAAC,CAAA,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,KAAG,OAAO,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,IAAE,KAAK,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,IAAI,CAAC;gBACvN,aAAa,EAAC,KAAK,IAAE,EAAE;oBACrB,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,EAAC,OAAO,EAAC,iCAAiC,EAAC,YAAY,EAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;oBACjH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC;gBACnC,CAAC;gBACD,OAAO,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE;oBAClB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,4BAA4B,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;oBACnQ,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,EAAC,OAAO,EAAC,IAAI,CAAC,aAAa,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,gBAAgB,EAAC,YAAY,EAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;oBACrI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC;gBACnC,CAAC;aACF,CAAC,CAAC;YACH,MAAM,MAAM,GAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;YACzC,IAAG,MAAM;gBAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,yCAAyC,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YACtN,KAAK,CAAC,OAAO,CAAC,KAAK,KAAG,SAAS,CAAA,CAAC,CAAA,eAAe,CAAA,CAAC,CAAA,gBAAgB,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YAC1F,IAAG,IAAI;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,OAAO,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;YAAA,OAAO;QACjF,CAAC;QACD,OAAO,GAAC,MAAM,oBAAoB,CAAC,OAAO,EAAC,EAAC,MAAM;YAChD,OAAO,EAAC,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,KAAG,WAAW,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAE,KAAK,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,IAAI,CAAC;YAC/J,OAAO,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE;gBAClB,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAE,IAAI,CAAC,IAAI,CAAC,eAAe,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAC,IAAI,EAAC,CAAC,CAAC,6BAA6B,EAAC,IAAI,CAAC,aAAa,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,SAAS,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;gBACxN,IAAG,OAAO,CAAC,cAAc;oBAAC,OAAO,IAAI,CAAC;gBACtC,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,EAAC,OAAO,EAAC,IAAI,CAAC,aAAa,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,aAAa,EAAC,YAAY,EAAC,KAAK,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;gBAClI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC;YACnC,CAAC;SACF,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,aAAa,IAAI,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;QACrF,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,uCAAuC,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QAC7I,IAAG,IAAI;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,OAAO,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAM,KAAK,EAAE,CAAC;QACd,IAAG,OAAO,CAAC,KAAK,KAAG,UAAU,EAAC,CAAC;YAAA,IAAI,CAAC,kDAAkD,EAAC,WAAW,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QACzI,IAAI,CAAC,+CAA+C,OAAO,CAAC,IAAI,CAAC,UAAU,QAAQ,OAAO,CAAC,IAAI,CAAC,EAAE,sCAAsC,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QAC1K,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}