@pax8-cta/core 0.1.0

package/dist/services/drift-analyzer.js

@@ -0,0 +1,273 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// ============================================================================
+// Configuration
+// ============================================================================
+/** Weights for risk factors (higher = more impact on score) */
+const WEIGHTS = {
+    versionsBehind: 8,
+    lastDeployResult: 7,
+    timeSinceLastDeploy: 5,
+    deploySuccessRate: 4,
+    productionTag: 6,
+};
+const HIGH_RISK_TAGS = ["production", "enterprise", "priority", "finance"];
+const LOW_RISK_TAGS = ["test", "staging", "dev", "sandbox"];
+// ============================================================================
+// DriftAnalyzer
+// ============================================================================
+export class DriftAnalyzer {
+    /**
+     * Analyze drift risk for a single tenant
+     */
+    analyzeTenant(tenant, versionStatus, history) {
+        const factors = [];
+        const outdatedSolutions = versionStatus.solutions.filter((s) => s.status === "outdated");
+        // If tenant is current, short-circuit
+        if (versionStatus.overallStatus === "current") {
+            return {
+                tenantId: tenant.tenantId,
+                tenantName: tenant.name,
+                environmentUrl: tenant.environmentUrl,
+                riskLevel: "low",
+                riskScore: 0,
+                recommendation: "current",
+                recommendationReason: "All solutions are at the expected version",
+                factors: [],
+                versionStatus,
+                outdatedSolutions: [],
+            };
+        }
+        // Factor 1: How many versions behind
+        const maxDrift = Math.max(...outdatedSolutions.map((s) => Math.abs(s.versionDrift)), 0);
+        if (maxDrift >= 3) {
+            factors.push({
+                name: "versions_behind",
+                level: "high",
+                weight: WEIGHTS.versionsBehind,
+                description: `${maxDrift} version(s) behind — significant gap increases upgrade risk`,
+            });
+        }
+        else if (maxDrift === 2) {
+            factors.push({
+                name: "versions_behind",
+                level: "medium",
+                weight: WEIGHTS.versionsBehind,
+                description: `${maxDrift} version(s) behind`,
+            });
+        }
+        else if (maxDrift === 1) {
+            factors.push({
+                name: "versions_behind",
+                level: "low",
+                weight: WEIGHTS.versionsBehind,
+                description: "1 version behind — minor update",
+            });
+        }
+        // Factor 2: Last deployment result
+        if (history) {
+            if (history.lastDeployResult === "failure") {
+                factors.push({
+                    name: "last_deploy_failed",
+                    level: "high",
+                    weight: WEIGHTS.lastDeployResult,
+                    description: "Last deployment failed — retrying may hit the same issue",
+                });
+            }
+            else if (history.lastDeployResult === "success") {
+                factors.push({
+                    name: "last_deploy_succeeded",
+                    level: "low",
+                    weight: WEIGHTS.lastDeployResult,
+                    description: "Last deployment succeeded",
+                });
+            }
+            // Factor 3: Time since last deploy
+            if (history.lastDeployDate) {
+                const daysSince = Math.floor((Date.now() - new Date(history.lastDeployDate).getTime()) / (1000 * 60 * 60 * 24));
+                if (daysSince > 90) {
+                    factors.push({
+                        name: "stale_environment",
+                        level: "high",
+                        weight: WEIGHTS.timeSinceLastDeploy,
+                        description: `${daysSince} days since last deploy — environment may have drifted significantly`,
+                    });
+                }
+                else if (daysSince > 30) {
+                    factors.push({
+                        name: "aging_environment",
+                        level: "medium",
+                        weight: WEIGHTS.timeSinceLastDeploy,
+                        description: `${daysSince} days since last deploy`,
+                    });
+                }
+                else {
+                    factors.push({
+                        name: "recent_deploy",
+                        level: "low",
+                        weight: WEIGHTS.timeSinceLastDeploy,
+                        description: `${daysSince} days since last deploy — recently active`,
+                    });
+                }
+            }
+            // Factor 4: Deploy success rate
+            if (history.totalDeploys > 0) {
+                const successRate = history.successfulDeploys / history.totalDeploys;
+                if (successRate < 0.5) {
+                    factors.push({
+                        name: "low_success_rate",
+                        level: "high",
+                        weight: WEIGHTS.deploySuccessRate,
+                        description: `${Math.round(successRate * 100)}% deploy success rate — this tenant is flaky`,
+                    });
+                }
+                else if (successRate < 0.8) {
+                    factors.push({
+                        name: "moderate_success_rate",
+                        level: "medium",
+                        weight: WEIGHTS.deploySuccessRate,
+                        description: `${Math.round(successRate * 100)}% deploy success rate`,
+                    });
+                }
+            }
+        }
+        // Factor 5: Tenant tags (production = higher risk)
+        const tags = tenant.tags || [];
+        const hasHighRiskTag = tags.some((t) => HIGH_RISK_TAGS.includes(t.toLowerCase()));
+        const hasLowRiskTag = tags.some((t) => LOW_RISK_TAGS.includes(t.toLowerCase()));
+        if (hasHighRiskTag) {
+            factors.push({
+                name: "production_tenant",
+                level: "medium",
+                weight: WEIGHTS.productionTag,
+                description: `Tagged as ${tags.filter((t) => HIGH_RISK_TAGS.includes(t.toLowerCase())).join(", ")} — higher blast radius`,
+            });
+        }
+        else if (hasLowRiskTag) {
+            factors.push({
+                name: "non_production_tenant",
+                level: "low",
+                weight: WEIGHTS.productionTag,
+                description: `Tagged as ${tags.filter((t) => LOW_RISK_TAGS.includes(t.toLowerCase())).join(", ")} — lower risk`,
+            });
+        }
+        // Calculate composite score
+        const riskScore = this.calculateScore(factors);
+        const riskLevel = this.scoreToLevel(riskScore);
+        const { recommendation, reason } = this.getRecommendation(riskLevel, factors);
+        return {
+            tenantId: tenant.tenantId,
+            tenantName: tenant.name,
+            environmentUrl: tenant.environmentUrl,
+            riskLevel,
+            riskScore,
+            recommendation,
+            recommendationReason: reason,
+            factors,
+            versionStatus,
+            outdatedSolutions,
+        };
+    }
+    /**
+     * Analyze drift risk for a fleet of tenants
+     */
+    analyzeFleet(tenants, versionStatuses, histories) {
+        const analyses = tenants.map((tenant, i) => {
+            const versionStatus = versionStatuses[i];
+            const history = histories?.get(tenant.tenantId);
+            return this.analyzeTenant(tenant, versionStatus, history);
+        });
+        return {
+            tenants: analyses,
+            summary: {
+                total: analyses.length,
+                current: analyses.filter((a) => a.recommendation === "current").length,
+                safeToUpdate: analyses.filter((a) => a.recommendation === "safe_to_update").length,
+                reviewRecommended: analyses.filter((a) => a.recommendation === "review_recommended").length,
+                risky: analyses.filter((a) => a.recommendation === "update_risky").length,
+                doNotUpdate: analyses.filter((a) => a.recommendation === "do_not_update").length,
+            },
+        };
+    }
+    // ============================================================================
+    // Private
+    // ============================================================================
+    calculateScore(factors) {
+        if (factors.length === 0)
+            return 0;
+        let weightedSum = 0;
+        let totalWeight = 0;
+        for (const factor of factors) {
+            const levelScore = factor.level === "high" ? 100 : factor.level === "medium" ? 50 : 10;
+            weightedSum += levelScore * factor.weight;
+            totalWeight += factor.weight;
+        }
+        return totalWeight > 0 ? Math.round(weightedSum / totalWeight) : 0;
+    }
+    scoreToLevel(score) {
+        if (score >= 65)
+            return "high";
+        if (score >= 35)
+            return "medium";
+        return "low";
+    }
+    getRecommendation(level, factors) {
+        const hasLastDeployFailed = factors.some((f) => f.name === "last_deploy_failed");
+        const hasStaleEnv = factors.some((f) => f.name === "stale_environment");
+        const hasLowSuccessRate = factors.some((f) => f.name === "low_success_rate");
+        // Hard blockers
+        if (hasLastDeployFailed && hasStaleEnv) {
+            return {
+                recommendation: "do_not_update",
+                reason: "Last deploy failed and environment is stale — investigate before retrying",
+            };
+        }
+        if (hasLowSuccessRate && hasLastDeployFailed) {
+            return {
+                recommendation: "do_not_update",
+                reason: "Chronically failing tenant — fix underlying issues first",
+            };
+        }
+        // Score-based
+        if (level === "high") {
+            return {
+                recommendation: "update_risky",
+                reason: this.getTopRiskDescription(factors),
+            };
+        }
+        if (level === "medium") {
+            return {
+                recommendation: "review_recommended",
+                reason: this.getTopRiskDescription(factors),
+            };
+        }
+        return {
+            recommendation: "safe_to_update",
+            reason: "Low risk — safe to proceed",
+        };
+    }
+    getTopRiskDescription(factors) {
+        const highFactors = factors.filter((f) => f.level === "high" || f.level === "medium");
+        if (highFactors.length === 0)
+            return "Minor risk factors present";
+        // Sort by weight descending, take top factor
+        highFactors.sort((a, b) => b.weight - a.weight);
+        return highFactors[0].description;
+    }
+}
+// Export singleton
+export const driftAnalyzer = new DriftAnalyzer();
+//# sourceMappingURL=drift-analyzer.js.map

package/dist/services/drift-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-analyzer.js","sourceRoot":"","sources":["../../src/services/drift-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA0EH,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,+DAA+D;AAC/D,MAAM,OAAO,GAAG;IACd,cAAc,EAAE,CAAC;IACjB,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAC3E,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,aAAa,CACX,MAAoB,EACpB,aAAkC,EAClC,OAAiC;QAEjC,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,iBAAiB,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAEzF,sCAAsC;QACtC,IAAI,aAAa,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,CAAC;gBACZ,cAAc,EAAE,SAAS;gBACzB,oBAAoB,EAAE,2CAA2C;gBACjE,OAAO,EAAE,EAAE;gBACX,aAAa;gBACb,iBAAiB,EAAE,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,OAAO,CAAC,cAAc;gBAC9B,WAAW,EAAE,GAAG,QAAQ,6DAA6D;aACtF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,OAAO,CAAC,cAAc;gBAC9B,WAAW,EAAE,GAAG,QAAQ,oBAAoB;aAC7C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc;gBAC9B,WAAW,EAAE,iCAAiC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,OAAO,CAAC,gBAAgB;oBAChC,WAAW,EAAE,0DAA0D;iBACxE,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,uBAAuB;oBAC7B,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,OAAO,CAAC,gBAAgB;oBAChC,WAAW,EAAE,2BAA2B;iBACzC,CAAC,CAAC;YACL,CAAC;YAED,mCAAmC;YACnC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAC1B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAClF,CAAC;gBAEF,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,mBAAmB;wBACzB,KAAK,EAAE,MAAM;wBACb,MAAM,EAAE,OAAO,CAAC,mBAAmB;wBACnC,WAAW,EAAE,GAAG,SAAS,sEAAsE;qBAChG,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,mBAAmB;wBACzB,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,OAAO,CAAC,mBAAmB;wBACnC,WAAW,EAAE,GAAG,SAAS,yBAAyB;qBACnD,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,eAAe;wBACrB,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,OAAO,CAAC,mBAAmB;wBACnC,WAAW,EAAE,GAAG,SAAS,2CAA2C;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;gBACrE,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,kBAAkB;wBACxB,KAAK,EAAE,MAAM;wBACb,MAAM,EAAE,OAAO,CAAC,iBAAiB;wBACjC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,8CAA8C;qBAC5F,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,OAAO,CAAC,iBAAiB;wBACjC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,uBAAuB;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEhF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,OAAO,CAAC,aAAa;gBAC7B,WAAW,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;aAC1H,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,OAAO,CAAC,aAAa;gBAC7B,WAAW,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe;aAChH,CAAC,CAAC;QACL,CAAC;QAED,4BAA4B;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9E,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS;YACT,SAAS;YACT,cAAc;YACd,oBAAoB,EAAE,MAAM;YAC5B,OAAO;YACP,aAAa;YACb,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CACV,OAAuB,EACvB,eAAsC,EACtC,SAAgD;QAEhD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,MAAM,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE;gBACP,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,MAAM;gBACtE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC,MAAM;gBAClF,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,oBAAoB,CAAC,CAAC,MAAM;gBAC3F,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC,MAAM;gBACzE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,eAAe,CAAC,CAAC,MAAM;aACjF;SACF,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,UAAU;IACV,+EAA+E;IAEvE,cAAc,CAAC,OAA0B;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,WAAW,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1C,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,YAAY,CAAC,KAAa;QAChC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC;QAC/B,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CACvB,KAAqB,EACrB,OAA0B;QAE1B,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;QACxE,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAE7E,gBAAgB;QAChB,IAAI,mBAAmB,IAAI,WAAW,EAAE,CAAC;YACvC,OAAO;gBACL,cAAc,EAAE,eAAe;gBAC/B,MAAM,EAAE,2EAA2E;aACpF,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,IAAI,mBAAmB,EAAE,CAAC;YAC7C,OAAO;gBACL,cAAc,EAAE,eAAe;gBAC/B,MAAM,EAAE,0DAA0D;aACnE,CAAC;QACJ,CAAC;QAED,cAAc;QACd,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO;gBACL,cAAc,EAAE,cAAc;gBAC9B,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;aAC5C,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,cAAc,EAAE,oBAAoB;gBACpC,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;aAC5C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,cAAc,EAAE,gBAAgB;YAChC,MAAM,EAAE,4BAA4B;SACrC,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,OAA0B;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACtF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,4BAA4B,CAAC;QAElE,6CAA6C;QAC7C,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACpC,CAAC;CACF;AAED,mBAAmB;AACnB,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/services/environment-setup.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Environment Setup Service
+ *
+ * Manages Power Platform application user lifecycle:
+ * - Checking if an app user exists in a Dataverse environment
+ * - Verifying security role assignments
+ * - Creating app users and assigning roles
+ * - Validating tenant readiness for deployment
+ *
+ * Extracted from CLI setup.ts, validate.ts, and deploy.ts (prepareEnvironment)
+ * to eliminate duplication and make the logic testable and reusable.
+ */
+import { DataverseClient } from "../dataverse/client.js";
+export interface SystemUser {
+    systemuserid: string;
+    fullname?: string;
+    applicationid?: string;
+    isdisabled?: boolean;
+}
+export type SetupStatusCode = "ready" | "needs_setup" | "partial" | "error";
+export interface SetupStatus {
+    tenantName: string;
+    environmentUrl: string;
+    appRegistered: boolean;
+    roleAssigned: boolean;
+    status: SetupStatusCode;
+    error?: string;
+    userId?: string;
+}
+export interface TenantValidationResult {
+    appUserExists: boolean;
+    hasSystemAdminRole: boolean;
+    userId?: string;
+}
+export interface PrepareEnvironmentResult {
+    success: boolean;
+    message: string;
+}
+export declare class EnvironmentSetupService {
+    /**
+     * Check if an app user exists and has the System Administrator role.
+     *
+     * This is the core validation used by `pax8-cta validate` and `pax8-cta setup --check`.
+     */
+    validateTenant(client: DataverseClient, appId: string): Promise<TenantValidationResult>;
+    /**
+     * Check the full setup status for a tenant, including error handling.
+     *
+     * Returns a structured status object suitable for display in tables or JSON output.
+     * Used by `pax8-cta setup --check`.
+     */
+    checkSetupStatus(client: DataverseClient, appId: string, tenantName: string, environmentUrl: string): Promise<SetupStatus>;
+    /**
+     * Create an application user in the Dataverse environment.
+     *
+     * Finds the root business unit and creates the app user bound to it.
+     * Returns the new user's system user ID.
+     */
+    createAppUser(client: DataverseClient, appId: string): Promise<string>;
+    /**
+     * Assign the System Administrator role to a user.
+     */
+    assignSystemAdminRole(client: DataverseClient, userId: string, environmentUrl: string): Promise<void>;
+    /**
+     * Ensure an app user is created and has System Administrator role.
+     *
+     * This is the "setup" action used by both `pax8-cta setup` and
+     * the auto-setup step in `pax8-cta deploy`.
+     */
+    setupTenant(client: DataverseClient, appId: string, environmentUrl: string, currentStatus: SetupStatus): Promise<void>;
+    /**
+     * Prepare an environment for deployment by ensuring app user exists with proper permissions.
+     *
+     * Combines check + setup into a single operation. Returns a result suitable for
+     * progress reporting.
+     *
+     * This was previously `prepareEnvironment()` in deploy.ts.
+     */
+    prepareEnvironment(client: DataverseClient, appId: string, environmentUrl: string): Promise<PrepareEnvironmentResult>;
+}
+export declare const environmentSetupService: EnvironmentSetupService;
+//# sourceMappingURL=environment-setup.d.ts.map

package/dist/services/environment-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-setup.d.ts","sourceRoot":"","sources":["../../src/services/environment-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAOzD,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,qBAAa,uBAAuB;IAClC;;;;OAIG;IACG,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAiC7F;;;;;OAKG;IACG,gBAAgB,CACpB,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,CAAC;IA2DvB;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgC5E;;OAEG;IACG,qBAAqB,CACzB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC;IAoBhB;;;;;OAKG;IACG,WAAW,CACf,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,WAAW,GACzB,OAAO,CAAC,IAAI,CAAC;IAchB;;;;;;;OAOG;IACG,kBAAkB,CACtB,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,wBAAwB,CAAC;CAmErC;AAGD,eAAO,MAAM,uBAAuB,yBAAgC,CAAC"}

package/dist/services/environment-setup.js

@@ -0,0 +1,250 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// ============================================================================
+// Service
+// ============================================================================
+export class EnvironmentSetupService {
+    /**
+     * Check if an app user exists and has the System Administrator role.
+     *
+     * This is the core validation used by `pax8-cta validate` and `pax8-cta setup --check`.
+     */
+    async validateTenant(client, appId) {
+        // Check if app user exists
+        const result = await client.get("/systemusers", {
+            $filter: `applicationid eq '${appId}'`,
+            $select: "systemuserid,fullname,applicationid,isdisabled",
+        });
+        if (result.value.length === 0) {
+            return {
+                appUserExists: false,
+                hasSystemAdminRole: false,
+            };
+        }
+        const user = result.value[0];
+        // Check if System Administrator role is assigned
+        const rolesResult = await client.get(`/systemusers(${user.systemuserid})/systemuserroles_association`, {
+            $select: "roleid,name",
+        });
+        const hasAdminRole = rolesResult.value.some((r) => r.name === "System Administrator");
+        return {
+            appUserExists: true,
+            hasSystemAdminRole: hasAdminRole,
+            userId: user.systemuserid,
+        };
+    }
+    /**
+     * Check the full setup status for a tenant, including error handling.
+     *
+     * Returns a structured status object suitable for display in tables or JSON output.
+     * Used by `pax8-cta setup --check`.
+     */
+    async checkSetupStatus(client, appId, tenantName, environmentUrl) {
+        try {
+            const validation = await this.validateTenant(client, appId);
+            if (!validation.appUserExists) {
+                return {
+                    tenantName,
+                    environmentUrl,
+                    appRegistered: false,
+                    roleAssigned: false,
+                    status: "needs_setup",
+                };
+            }
+            if (!validation.hasSystemAdminRole) {
+                return {
+                    tenantName,
+                    environmentUrl,
+                    appRegistered: true,
+                    roleAssigned: false,
+                    status: "partial",
+                    userId: validation.userId,
+                };
+            }
+            return {
+                tenantName,
+                environmentUrl,
+                appRegistered: true,
+                roleAssigned: true,
+                status: "ready",
+                userId: validation.userId,
+            };
+        }
+        catch (error) {
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            // Check if it's an auth error (app not registered at tenant level)
+            if (errorMsg.includes("not a member of the organization")) {
+                return {
+                    tenantName,
+                    environmentUrl,
+                    appRegistered: false,
+                    roleAssigned: false,
+                    status: "needs_setup",
+                    error: "App not registered in this environment (bootstrap required)",
+                };
+            }
+            return {
+                tenantName,
+                environmentUrl,
+                appRegistered: false,
+                roleAssigned: false,
+                status: "error",
+                error: errorMsg,
+            };
+        }
+    }
+    /**
+     * Create an application user in the Dataverse environment.
+     *
+     * Finds the root business unit and creates the app user bound to it.
+     * Returns the new user's system user ID.
+     */
+    async createAppUser(client, appId) {
+        // Get root business unit
+        const buResult = await client.get("/businessunits", {
+            $filter: "parentbusinessunitid eq null",
+            $select: "businessunitid,name",
+        });
+        if (buResult.value.length === 0) {
+            throw new Error("Could not find root business unit");
+        }
+        const buId = buResult.value[0].businessunitid;
+        // Create app user
+        await client.post("/systemusers", {
+            applicationid: appId,
+            "businessunitid@odata.bind": `/businessunits(${buId})`,
+        });
+        // Get the newly created user's ID
+        const userResult = await client.get("/systemusers", {
+            $filter: `applicationid eq '${appId}'`,
+            $select: "systemuserid",
+        });
+        if (userResult.value.length === 0) {
+            throw new Error("Failed to create app user");
+        }
+        return userResult.value[0].systemuserid;
+    }
+    /**
+     * Assign the System Administrator role to a user.
+     */
+    async assignSystemAdminRole(client, userId, environmentUrl) {
+        // Get System Administrator role
+        const roleResult = await client.get("/roles", {
+            $filter: "name eq 'System Administrator'",
+            $select: "roleid,name",
+        });
+        if (roleResult.value.length === 0) {
+            throw new Error("Could not find System Administrator role");
+        }
+        const roleId = roleResult.value[0].roleid;
+        // Assign role to user
+        const apiUrl = environmentUrl.replace(/\/$/, "") + "/api/data/v9.2";
+        await client.post(`/systemusers(${userId})/systemuserroles_association/$ref`, {
+            "@odata.id": `${apiUrl}/roles(${roleId})`,
+        });
+    }
+    /**
+     * Ensure an app user is created and has System Administrator role.
+     *
+     * This is the "setup" action used by both `pax8-cta setup` and
+     * the auto-setup step in `pax8-cta deploy`.
+     */
+    async setupTenant(client, appId, environmentUrl, currentStatus) {
+        let userId = currentStatus.userId;
+        // Create app user if needed
+        if (!currentStatus.appRegistered) {
+            userId = await this.createAppUser(client, appId);
+        }
+        // Assign System Administrator role if needed
+        if (!currentStatus.roleAssigned && userId) {
+            await this.assignSystemAdminRole(client, userId, environmentUrl);
+        }
+    }
+    /**
+     * Prepare an environment for deployment by ensuring app user exists with proper permissions.
+     *
+     * Combines check + setup into a single operation. Returns a result suitable for
+     * progress reporting.
+     *
+     * This was previously `prepareEnvironment()` in deploy.ts.
+     */
+    async prepareEnvironment(client, appId, environmentUrl) {
+        try {
+            const validation = await this.validateTenant(client, appId);
+            if (validation.appUserExists && validation.hasSystemAdminRole) {
+                return { success: true, message: "Ready" };
+            }
+            // Need to create user or assign role
+            if (!validation.appUserExists) {
+                try {
+                    const userId = await this.createAppUser(client, appId);
+                    await this.assignSystemAdminRole(client, userId, environmentUrl);
+                    return {
+                        success: true,
+                        message: "Created app user and assigned System Administrator role",
+                    };
+                }
+                catch (error) {
+                    const errorMsg = error instanceof Error ? error.message : String(error);
+                    if (errorMsg.includes("not a member of the organization")) {
+                        return {
+                            success: false,
+                            message: "App not registered (requires manual bootstrap in Power Platform admin center)",
+                        };
+                    }
+                    return {
+                        success: false,
+                        message: `Failed to create app user: ${errorMsg}`,
+                    };
+                }
+            }
+            // User exists but needs role
+            if (validation.userId) {
+                try {
+                    await this.assignSystemAdminRole(client, validation.userId, environmentUrl);
+                    return {
+                        success: true,
+                        message: "Assigned System Administrator role",
+                    };
+                }
+                catch (error) {
+                    const errorMsg = error instanceof Error ? error.message : String(error);
+                    return {
+                        success: false,
+                        message: `Failed to assign role: ${errorMsg}`,
+                    };
+                }
+            }
+            return { success: false, message: "Unexpected state" };
+        }
+        catch (error) {
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            if (errorMsg.includes("not a member of the organization")) {
+                return {
+                    success: false,
+                    message: "App not registered (requires manual bootstrap in Power Platform admin center)",
+                };
+            }
+            return {
+                success: false,
+                message: `Error: ${errorMsg}`,
+            };
+        }
+    }
+}
+// Export singleton for convenience
+export const environmentSetupService = new EnvironmentSetupService();
+//# sourceMappingURL=environment-setup.js.map

package/dist/services/environment-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-setup.js","sourceRoot":"","sources":["../../src/services/environment-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoDH,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,OAAO,uBAAuB;IAClC;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,MAAuB,EAAE,KAAa;QACzD,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAA0B,cAAc,EAAE;YACvE,OAAO,EAAE,qBAAqB,KAAK,GAAG;YACtC,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,kBAAkB,EAAE,KAAK;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7B,iDAAiD;QACjD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,GAAG,CAClC,gBAAgB,IAAI,CAAC,YAAY,+BAA+B,EAChE;YACE,OAAO,EAAE,aAAa;SACvB,CACF,CAAC;QAEF,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;QAEtF,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,YAAY;YAChC,MAAM,EAAE,IAAI,CAAC,YAAY;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAuB,EACvB,KAAa,EACb,UAAkB,EAClB,cAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAE5D,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC9B,OAAO;oBACL,UAAU;oBACV,cAAc;oBACd,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,KAAK;oBACnB,MAAM,EAAE,aAAa;iBACtB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;gBACnC,OAAO;oBACL,UAAU;oBACV,cAAc;oBACd,aAAa,EAAE,IAAI;oBACnB,YAAY,EAAE,KAAK;oBACnB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU;gBACV,cAAc;gBACd,aAAa,EAAE,IAAI;gBACnB,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,mEAAmE;YACnE,IAAI,QAAQ,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;gBAC1D,OAAO;oBACL,UAAU;oBACV,cAAc;oBACd,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,KAAK;oBACnB,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,6DAA6D;iBACrE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU;gBACV,cAAc;gBACd,aAAa,EAAE,KAAK;gBACpB,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,QAAQ;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,MAAuB,EAAE,KAAa;QACxD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAA4B,gBAAgB,EAAE;YAC7E,OAAO,EAAE,8BAA8B;YACvC,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAE9C,kBAAkB;QAClB,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;YAChC,aAAa,EAAE,KAAK;YACpB,2BAA2B,EAAE,kBAAkB,IAAI,GAAG;SACvD,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAA0B,cAAc,EAAE;YAC3E,OAAO,EAAE,qBAAqB,KAAK,GAAG;YACtC,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,MAAuB,EACvB,MAAc,EACd,cAAsB;QAEtB,gCAAgC;QAChC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAA4B,QAAQ,EAAE;YACvE,OAAO,EAAE,gCAAgC;YACzC,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAE1C,sBAAsB;QACtB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,gBAAgB,CAAC;QACpE,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,oCAAoC,EAAE;YAC5E,WAAW,EAAE,GAAG,MAAM,UAAU,MAAM,GAAG;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,MAAuB,EACvB,KAAa,EACb,cAAsB,EACtB,aAA0B;QAE1B,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QAElC,4BAA4B;QAC5B,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;YACjC,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,aAAa,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAuB,EACvB,KAAa,EACb,cAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAE5D,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;gBAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC7C,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBACvD,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;oBACjE,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,yDAAyD;qBACnE,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,IAAI,QAAQ,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;wBAC1D,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,OAAO,EACL,+EAA+E;yBAClF,CAAC;oBACJ,CAAC;oBACD,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,8BAA8B,QAAQ,EAAE;qBAClD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,6BAA6B;YAC7B,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;oBAC5E,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,oCAAoC;qBAC9C,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,0BAA0B,QAAQ,EAAE;qBAC9C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,IAAI,QAAQ,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,+EAA+E;iBACzF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,UAAU,QAAQ,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC"}