@package-broker/cli 0.19.8 → 2.0.0-rc.1

package/dist/commands/admin.js

@@ -0,0 +1,447 @@
+import { existsSync, lstatSync, unlinkSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { lstat, open, unlink } from 'node:fs/promises';
+import { randomToken, sha256Hex } from '@package-broker/core/auth/primitives';
+import { DEFAULT_ROLES } from '@package-broker/core/authz/permissions';
+import { DbError } from '@package-broker/core/db/errors';
+import { orgContext } from '@package-broker/core/db/port';
+import { isoTimestamp, systemClock, ulid } from '@package-broker/core/ids';
+import { isReservedProviderId, isValidProviderId, isValidTrustAnchor, } from '@package-broker/core/identity/port';
+import { normalizeEmail } from '@package-broker/core/identity/policy';
+import { reportableErrorName } from '@package-broker/core/kernel/error-name';
+import { formatMasterKey, generateMasterKey } from '@package-broker/core/secrets/master-key';
+import { bootstrapAdminWithTopUp, resetLocalLogin, } from '@package-broker/db-sqlite/repositories/admin-bootstrap';
+import { createOrganizationBootstrap } from '@package-broker/db-sqlite/repositories/organization';
+import { readProviderBinding, rebindProvider, } from '@package-broker/db-sqlite/repositories/provider-binding';
+import { openBetterSqliteExecutor } from '@package-broker/runtime-node/db/better-sqlite3-executor';
+import { createD1HttpExecutor, isLostResponse } from '../cloudflare/d1-http-executor.js';
+const SIGNALS = ['SIGINT', 'SIGTERM'];
+const SETUP_TOKEN_TTL_MS = 24 * 3_600_000;
+const KEY_VERSION = /^[1-9][0-9]{0,8}$/;
+const UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const ACCOUNT_ID_SHAPE = /^[0-9a-f]{32}$/;
+const TOKEN_SHAPE = /^[\x21-\x7e]+$/;
+const NEXT = [
+    'POST /_pb/auth/local/setup/start {"token"}',
+    'POST /_pb/auth/local/setup/finish {"token","password","code"}',
+];
+const BROWSER_NEXT = 'next: open /_pb/ui/setup on the broker in a browser and paste the setup token there; the token never goes into the address bar. Or call the two POST routes named under "next".';
+function say(command, text) {
+    console.error(`${command}: ${text}`);
+}
+export async function runGenerateMasterKey(o) {
+    const command = 'secrets generate-master-key';
+    const version = o.keyVersion === undefined ? 1 : Number(o.keyVersion);
+    if (o.keyVersion !== undefined && !KEY_VERSION.test(o.keyVersion)) {
+        say(command, 'invalid_key_version');
+        return 2;
+    }
+    try {
+        const key = formatMasterKey(generateMasterKey(version));
+        console.error('store this key in a secret manager and set PB_MASTER_KEY; it is not shown again');
+        console.log(key);
+        return 0;
+    }
+    catch (error) {
+        if (error instanceof RangeError) {
+            say(command, 'invalid_key_version');
+            return 2;
+        }
+        say(command, `failed (${reportableErrorName(error)})`);
+        return 1;
+    }
+}
+function cloudflareExecutor(command, target) {
+    const apiToken = target.env.CLOUDFLARE_API_TOKEN;
+    const accountId = target.env.CLOUDFLARE_ACCOUNT_ID;
+    if (apiToken === undefined || apiToken === '') {
+        say(command, 'CLOUDFLARE_API_TOKEN is required');
+        return null;
+    }
+    if (accountId === undefined || accountId === '') {
+        say(command, 'CLOUDFLARE_ACCOUNT_ID is required');
+        return null;
+    }
+    if (!TOKEN_SHAPE.test(apiToken)) {
+        say(command, 'CLOUDFLARE_API_TOKEN must be visible ASCII without whitespace');
+        return null;
+    }
+    if (!ACCOUNT_ID_SHAPE.test(accountId)) {
+        say(command, 'CLOUDFLARE_ACCOUNT_ID must be 32 lowercase hex characters');
+        return null;
+    }
+    if (!UUID_SHAPE.test(target.databaseId)) {
+        say(command, '--database-id must be a UUID');
+        return null;
+    }
+    return createD1HttpExecutor({
+        accountId,
+        databaseId: target.databaseId,
+        apiToken,
+        ...(target.fetch === undefined ? {} : { fetch: target.fetch }),
+    });
+}
+function openTarget(command, target) {
+    if (target.kind === 'cloudflare') {
+        const executor = cloudflareExecutor(command, target);
+        return executor === null ? null : { executor, close: async () => undefined };
+    }
+    if (!existsSync(target.file)) {
+        say(command, 'sqlite_file_not_found');
+        return null;
+    }
+    return openBetterSqliteExecutor(target.file);
+}
+async function createTokenFile(command, path) {
+    try {
+        return await open(path, 'wx', 0o600);
+    }
+    catch (error) {
+        if (error?.code === 'EEXIST') {
+            say(command, 'token_file_exists');
+            return 'exists';
+        }
+        say(command, `token_file_failed (${reportableErrorName(error)})`);
+        return 'failed';
+    }
+}
+const DIRECTORY_SYNC_UNSUPPORTED = new Set(['EISDIR', 'EPERM', 'EINVAL']);
+async function syncDirectoryOf(path) {
+    let directory;
+    try {
+        directory = await open(dirname(path), 'r');
+    }
+    catch (error) {
+        if (DIRECTORY_SYNC_UNSUPPORTED.has(error?.code ?? ''))
+            return;
+        throw error;
+    }
+    try {
+        await directory.sync();
+    }
+    catch (error) {
+        if (!DIRECTORY_SYNC_UNSUPPORTED.has(error?.code ?? '')) {
+            throw error;
+        }
+    }
+    finally {
+        await directory.close().catch(() => undefined);
+    }
+}
+function sameFile(a, b) {
+    return a.dev === b.dev && a.ino === b.ino;
+}
+function unlinkTokenFileSync(path, identity) {
+    try {
+        if (sameFile(lstatSync(path, { bigint: true }), identity))
+            unlinkSync(path);
+    }
+    catch {
+        /* the file may already be gone */
+    }
+}
+async function unlinkTokenFile(path, identity) {
+    try {
+        if (sameFile(await lstat(path, { bigint: true }), identity))
+            await unlink(path);
+    }
+    catch {
+        /* the file may already be gone */
+    }
+}
+function roleIds() {
+    const ids = {};
+    for (const { key } of DEFAULT_ROLES)
+        ids[key] = ulid();
+    return ids;
+}
+function toppedUpText(count) {
+    return `topped up ${count} organization_admin ${count === 1 ? 'permission' : 'permissions'}`;
+}
+const cliAdminSink = {
+    diagnostic: (message) => console.error(message),
+    output: (value) => console.log(JSON.stringify(value)),
+};
+async function issue(command, o, sink = cliAdminSink) {
+    const say = (_command, text) => sink.diagnostic(`${command}: ${text}`);
+    const finish = (exitCode, state = exitCode === 7 ? 'unknown' : 'error', expiresAt = null) => ({ exitCode, state, expiresAt });
+    const email = typeof o.email === 'string' ? normalizeEmail(o.email) : null;
+    if (email === null) {
+        say(command, 'invalid_email');
+        return finish(2);
+    }
+    let handle = null;
+    let identity = null;
+    let issued = false;
+    const pending = { signal: null };
+    let opened = null;
+    const onSignal = (signal) => {
+        const repeated = pending.signal !== null;
+        pending.signal ??= signal;
+        if (identity !== null && o.tokenFile !== undefined) {
+            unlinkTokenFileSync(o.tokenFile, identity);
+        }
+        if (repeated) {
+            for (const name of SIGNALS)
+                process.off(name, onSignal);
+            process.kill(process.pid, signal);
+        }
+    };
+    if (o.tokenFile !== undefined)
+        for (const name of SIGNALS)
+            process.on(name, onSignal);
+    try {
+        if (o.tokenFile !== undefined) {
+            const file = await createTokenFile(command, o.tokenFile);
+            if (file === 'exists')
+                return finish(2);
+            if (file === 'failed')
+                return finish(1);
+            handle = file;
+            const { dev, ino } = await handle.stat({ bigint: true });
+            identity = { dev, ino };
+        }
+        opened = openTarget(command, o.target);
+        if (opened === null)
+            return finish(2);
+        const organization = await createOrganizationBootstrap(opened.executor).findSingleton();
+        if (organization === null) {
+            say(command, 'organization not found; run pb bootstrap or pb cloudflare bootstrap first');
+            return finish(5);
+        }
+        const now = systemClock.now();
+        const token = randomToken();
+        const input = {
+            email,
+            userId: ulid(),
+            setupHash: await sha256Hex(token),
+            setupExpiresAt: isoTimestamp(new Date(now.getTime() + SETUP_TOKEN_TTL_MS)),
+            grantId: ulid(),
+            roleIds: roleIds(),
+            opId: ulid(),
+            now: isoTimestamp(now),
+        };
+        const ctx = orgContext(organization.id);
+        if (pending.signal !== null) {
+            say(command, 'outcome unknown; re-running is safe');
+            return finish(7);
+        }
+        if (handle !== null && o.tokenFile !== undefined) {
+            await handle.writeFile(`${token}\n`);
+            await handle.sync();
+            await handle.close();
+            handle = null;
+            await syncDirectoryOf(o.tokenFile);
+        }
+        if (pending.signal !== null) {
+            say(command, 'outcome unknown; re-running is safe');
+            return finish(7);
+        }
+        const outcome = await runOperation(command, opened.executor, ctx, input);
+        if (pending.signal !== null) {
+            say(command, 'outcome unknown; re-running is safe');
+            return finish(7);
+        }
+        if (!outcome.issued && 'toppedUp' in outcome) {
+            say(command, `already_set_up; ${toppedUpText(outcome.toppedUp)}; no setup token issued; run pb admin reset-local to issue a new setup token`);
+            sink.output({ result: 'already_set_up', toppedUp: outcome.toppedUp });
+            return finish(0, 'already_set_up');
+        }
+        if (!outcome.issued) {
+            say(command, outcome.text);
+            return finish(outcome.exit, outcome.exit === 6 ? 'already_set_up' : 'error');
+        }
+        issued = true;
+        if (outcome.toppedUp > 0)
+            say(command, toppedUpText(outcome.toppedUp));
+        if (command === 'admin bootstrap') {
+            say(command, 'does not check for existing administrators; it adds or refreshes this e-mail as an organization admin');
+        }
+        const toTerminal = o.stdoutIsTTY ?? process.stdout.isTTY === true;
+        if (o.tokenFile === undefined && !toTerminal && sink.deliver === undefined) {
+            say(command, 'warning: the setup token is being written to a non-terminal stdout; use --token-file to keep it out of logs');
+        }
+        say(command, BROWSER_NEXT);
+        await sink.deliver?.(token);
+        sink.output({
+            result: outcome.result,
+            setupToken: o.tokenFile === undefined && sink.deliver === undefined ? token : null,
+            tokenFile: o.tokenFile ?? null,
+            expiresAt: input.setupExpiresAt,
+            next: NEXT,
+        });
+        return finish(0, 'issued', input.setupExpiresAt);
+    }
+    catch (error) {
+        if (issued && sink !== cliAdminSink) {
+            say(command, 'outcome unknown; use explicit setup-token refresh if delivery was lost');
+            return finish(7);
+        }
+        if (error instanceof DbError && error.kind === 'foreign_key') {
+            say(command, 'organization not found; run pb bootstrap or pb cloudflare bootstrap first');
+            return finish(5);
+        }
+        if (isLostResponse(error)) {
+            say(command, 'outcome unknown; re-running is safe');
+            return finish(7);
+        }
+        say(command, `failed (${reportableErrorName(error)})`);
+        return finish(1);
+    }
+    finally {
+        await handle?.close().catch(() => undefined);
+        if (identity !== null && !issued && o.tokenFile !== undefined) {
+            await unlinkTokenFile(o.tokenFile, identity);
+        }
+        await opened?.close().catch(() => undefined);
+        for (const name of SIGNALS)
+            process.off(name, onSignal);
+        if (pending.signal !== null)
+            process.kill(process.pid, pending.signal);
+    }
+}
+async function runOperation(command, executor, ctx, input) {
+    if (command === 'admin bootstrap') {
+        const { result, toppedUp } = await bootstrapAdminWithTopUp(executor, ctx, input);
+        if (result === 'already_set_up') {
+            if (toppedUp > 0)
+                return { issued: false, toppedUp };
+            return {
+                issued: false,
+                exit: 6,
+                text: 'already_set_up; nothing changed; run pb admin reset-local to issue a new setup token',
+            };
+        }
+        return { issued: true, result, toppedUp };
+    }
+    const { email, setupHash, setupExpiresAt, grantId, roleIds: ids, opId, now } = input;
+    const result = await resetLocalLogin(executor, ctx, {
+        email,
+        setupHash,
+        setupExpiresAt,
+        grantId,
+        roleIds: ids,
+        opId,
+        now,
+    });
+    if (result === 'not_found') {
+        return {
+            issued: false,
+            exit: 6,
+            text: 'not_found; no local user with that e-mail; nothing changed',
+        };
+    }
+    if (result === 'admin_role_missing') {
+        return {
+            issued: false,
+            exit: 8,
+            text: 'admin_role_missing; the organization has no organization_admin role; run pb admin bootstrap first',
+        };
+    }
+    return { issued: true, result, toppedUp: 0 };
+}
+export function bootstrapAdmin(o, sink) {
+    return issue('admin bootstrap', o, sink);
+}
+export function runAdminBootstrap(o) {
+    return issue('admin bootstrap', o).then((result) => result.exitCode);
+}
+export function runAdminResetLocal(o) {
+    return issue('admin reset-local', o).then((result) => result.exitCode);
+}
+function rebindUsageError(o) {
+    if (typeof o.provider !== 'string' || o.confirm !== o.provider)
+        return 'confirm_mismatch';
+    if (!isValidProviderId(o.provider) || isReservedProviderId(o.provider)) {
+        return 'invalid_provider';
+    }
+    for (const anchor of [o.expectedAnchor, o.newAnchor]) {
+        if (typeof anchor !== 'string' || !isValidTrustAnchor(anchor))
+            return 'invalid_anchor';
+    }
+    return o.expectedAnchor === o.newAnchor ? 'anchors_equal' : null;
+}
+export async function runAdminRebindProvider(o) {
+    const command = 'admin rebind-provider';
+    const usageError = rebindUsageError(o);
+    if (usageError !== null) {
+        say(command, usageError);
+        return 2;
+    }
+    let opened = null;
+    try {
+        opened = openTarget(command, o.target);
+        if (opened === null)
+            return 2;
+        const organization = await createOrganizationBootstrap(opened.executor).findSingleton();
+        if (organization === null) {
+            say(command, 'organization not found; run pb bootstrap or pb cloudflare bootstrap first');
+            return 5;
+        }
+        const result = await rebindProvider(opened.executor, orgContext(organization.id), o.provider, o.expectedAnchor, o.newAnchor, isoTimestamp(systemClock.now()));
+        if (!result.swapped) {
+            say(command, 'anchor_mismatch; no binding with that provider and expected anchor; nothing changed');
+            return 6;
+        }
+        console.log(JSON.stringify({
+            provider: o.provider,
+            identities: result.identities,
+            sessions: result.sessions,
+        }));
+        return 0;
+    }
+    catch (error) {
+        if (isLostResponse(error)) {
+            say(command, 'outcome unknown; the swap may have applied; a re-run that reports anchor_mismatch means it did or the anchor is wrong');
+            return 7;
+        }
+        say(command, `failed (${reportableErrorName(error)})`);
+        return 1;
+    }
+    finally {
+        await opened?.close().catch(() => undefined);
+    }
+}
+export async function runAdminShowProviderBinding(o) {
+    const command = 'admin show-provider-binding';
+    if (typeof o.provider !== 'string' ||
+        !isValidProviderId(o.provider) ||
+        isReservedProviderId(o.provider)) {
+        say(command, 'invalid_provider');
+        return 2;
+    }
+    let opened = null;
+    try {
+        opened = openTarget(command, o.target);
+        if (opened === null)
+            return 2;
+        const organization = await createOrganizationBootstrap(opened.executor).findSingleton();
+        if (organization === null) {
+            say(command, 'organization not found; run pb bootstrap or pb cloudflare bootstrap first');
+            return 5;
+        }
+        const binding = await readProviderBinding(opened.executor, orgContext(organization.id), o.provider);
+        if (binding === null) {
+            say(command, 'no_binding; nothing is bound for that provider');
+            return 6;
+        }
+        console.log(JSON.stringify({
+            provider: o.provider,
+            anchor: binding.anchor,
+            createdAt: binding.createdAt,
+        }));
+        return 0;
+    }
+    catch (error) {
+        if (isLostResponse(error)) {
+            say(command, 'outcome unknown; re-running is safe');
+            return 7;
+        }
+        say(command, `failed (${reportableErrorName(error)})`);
+        return 1;
+    }
+    finally {
+        await opened?.close().catch(() => undefined);
+    }
+}
+//# sourceMappingURL=admin.js.map

package/dist/commands/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/commands/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAuB,MAAM,wCAAwC,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACzD,OAAO,EAAE,UAAU,EAA0B,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EACL,uBAAuB,EACvB,eAAe,GAChB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EACL,mBAAmB,EACnB,cAAc,GACf,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAuBzF,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC;AAC/C,MAAM,kBAAkB,GAAG,EAAE,GAAG,SAAS,CAAC;AAC1C,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,UAAU,GAAG,iEAAiE,CAAC;AACrF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,IAAI,GAAG;IACX,4CAA4C;IAC5C,+DAA+D;CAChE,CAAC;AAEF,MAAM,YAAY,GAChB,iLAAiL,CAAC;AAEpL,SAAS,GAAG,CAAC,OAAe,EAAE,IAAY;IACxC,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,CAE1C;IACC,MAAM,OAAO,GAAG,6BAA6B,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,WAAW,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgB,EAChB,MAAoD;IAEpD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,GAAG,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,EAAE,+DAA+D,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,OAAO,EAAE,2DAA2D,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,oBAAoB,CAAC;QAC1B,SAAS;QACT,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAOD,SAAS,UAAU,CAAC,OAAgB,EAAE,MAAmB;IACvD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,IAAY;IAEZ,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAAmC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAClC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,sBAAsB,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAOD,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1E,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,0BAA0B,CAAC,GAAG,CAAE,KAAkC,EAAE,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO;QAC5F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAE,KAAkC,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAe,EAAE,CAAe;IAChD,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAsB;IAC/D,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,QAAsB;IACjE,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,EAAoC,CAAC;IACjD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,aAAa;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,aAAa,KAAK,uBAAuB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/F,CAAC;AAcD,MAAM,YAAY,GAAoB;IACpC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC/C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;CACtD,CAAC;AAEF,KAAK,UAAU,KAAK,CAClB,OAAgB,EAChB,CAAe,EACf,OAAwB,YAAY;IAEpC,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,CACb,QAAgB,EAChB,QAAmC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EACvE,YAA2B,IAAI,EACb,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,GAAsB,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAwB,IAAI,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,OAAO,GAAsC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QACzC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QAC1B,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnD,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEtF,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACxF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,EAAE,2EAA2E,CAAC,CAAC;YAC1F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG;YACZ,KAAK;YACL,MAAM,EAAE,IAAI,EAAE;YACd,SAAS,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC;YACjC,cAAc,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC;YAC1E,OAAO,EAAE,IAAI,EAAE;YACf,OAAO,EAAE,OAAO,EAAE;YAClB,IAAI,EAAE,IAAI,EAAE;YACZ,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;SACvB,CAAC;QACF,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAExC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAC7C,GAAG,CACD,OAAO,EACP,mBAAmB,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,8EAA8E,CAChI,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEvE,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAClC,GAAG,CACD,OAAO,EACP,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;QAClE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3E,GAAG,CACD,OAAO,EACP,6GAA6G,CAC9G,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAClF,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;YAC9B,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACpC,GAAG,CAAC,OAAO,EAAE,wEAAwE,CAAC,CAAC;YACvF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,YAAY,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,EAAE,2EAA2E,CAAC,CAAC;YAC1F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,WAAW,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAgB,EAChB,QAA2B,EAC3B,GAAkC,EAClC,KAAoD;IAEpD,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,IAAI,QAAQ,GAAG,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACrD,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,sFAAsF;aAC7F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClD,KAAK;QACL,SAAS;QACT,cAAc;QACd,OAAO;QACP,OAAO,EAAE,GAAG;QACZ,IAAI;QACJ,GAAG;KACJ,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,4DAA4D;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,mGAAmG;SAC1G,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAe,EAAE,IAAqB;IACnE,OAAO,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAe;IAC/C,OAAO,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAe;IAChD,OAAO,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAUD,SAAS,gBAAgB,CAAC,CAAwB;IAChD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IAC1F,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAAE,OAAO,gBAAgB,CAAC;IACzF,CAAC;IACD,OAAO,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,CAAwB;IACnE,MAAM,OAAO,GAAG,uBAAuB,CAAC;IACxC,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACxF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,EAAE,2EAA2E,CAAC,CAAC;YAC1F,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,CAAC,QAAQ,EACf,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,EAC3B,CAAC,CAAC,QAAQ,EACV,CAAC,CAAC,cAAc,EAChB,CAAC,CAAC,SAAS,EACX,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAChC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CACD,OAAO,EACP,qFAAqF,CACtF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,GAAG,CACD,OAAO,EACP,uHAAuH,CACxH,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,WAAW,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,CAA6B;IAC7E,MAAM,OAAO,GAAG,6BAA6B,CAAC;IAC9C,IACE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9B,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAChC,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACxF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,EAAE,2EAA2E,CAAC,CAAC;YAC1F,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,MAAM,CAAC,QAAQ,EACf,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,EAC3B,CAAC,CAAC,QAAQ,CACX,CAAC;QACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,WAAW,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/commands/built-manifest.d.ts

@@ -0,0 +1,13 @@
+import type { DiagnosticRoute } from '@package-broker/core/authz/catalogue-diagnostics';
+import { type MigrationSource } from '@package-broker/db-sqlite/migrations/source';
+export declare class BuiltManifestError extends Error {
+    constructor(message: string);
+}
+export declare class LegacyRouteTableError extends BuiltManifestError {
+    constructor();
+}
+export declare function loadBuiltMigrations(outDir: string): Promise<MigrationSource[]>;
+export declare function loadBuiltRoutes(outDir: string): Promise<DiagnosticRoute[] | null>;
+export declare function builtRouteProblems(outDir: string): Promise<string[] | null>;
+export declare function routesAreValid(outDir: string): Promise<boolean>;
+//# sourceMappingURL=built-manifest.d.ts.map

package/dist/commands/built-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-manifest.d.ts","sourceRoot":"","sources":["../../src/commands/built-manifest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAGxF,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,6CAA6C,CAAC;AAErD,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,kBAAkB;;CAK5D;AA4FD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAqBpF;AAsCD,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,CAkBvF;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAGjF;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAerE"}