@peernova/cuneiform-sf 1.0.2 → 1.0.4-beta.10

package/lib/services/CompatibilityService.js

@@ -0,0 +1,118 @@
+/*
+ * Copyright (c) 2026, PeerNova, Inc. All Rights Reserved.
+ * PROPRIETARY AND CONFIDENTIAL. Unauthorized copying, modification,
+ * or distribution is strictly prohibited. Use is governed by the
+ * Master Subscription Agreement (MSA) between PeerNova, Inc. and the
+ * licensee. See LICENSE file in the repo root.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { SfError } from '@salesforce/core';
+/**
+ * Default manifest reader — loads `package.json` from the project root by
+ * resolving a path relative to this source file. Source layout:
+ * `src/services/CompatibilityService.ts` → `../../package.json`. The compiled
+ * layout (`lib/services/CompatibilityService.js`) resolves identically.
+ */
+const defaultManifestReader = () => {
+    const here = dirname(fileURLToPath(import.meta.url));
+    const pkgPath = join(here, '..', '..', 'package.json');
+    return JSON.parse(readFileSync(pkgPath, 'utf-8'));
+};
+/**
+ * Service for evaluating compatibility between the running CLI version and the
+ * Cuneiform For Salesforce managed package installed in a target org.
+ *
+ * Stateless. The required version is sourced from `package.json`; the installed
+ * version is supplied by the caller (typically via
+ * `OrgInfoService.getCuneiformPackageInfo`).
+ *
+ * Comparison semantics: version strings are parsed as integer tuples padded to
+ * four parts (`Major.Minor.Patch.Build`). Equality on the padded tuple yields
+ * `installed-match`; lexicographic order on the padded tuple yields
+ * `installed-newer` / `installed-older`. A null/undefined installed version
+ * yields `not-installed`.
+ */
+export class CompatibilityService {
+    manifestReader;
+    constructor(config) {
+        this.manifestReader = config?.manifestReader ?? defaultManifestReader;
+    }
+    /**
+     * Compare a required version to an installed version. Pure function — exposed
+     * as a static method since it does not depend on instance state.
+     *
+     * @param required - required version string (`Major.Minor` or `Major.Minor.Patch.Build`)
+     * @param installed - installed version string, or `null`/`undefined` if absent
+     * @returns one of `installed-match`, `installed-newer`, `installed-older`, `not-installed`
+     * @throws SfError (E4682) when either version string contains a non-numeric component
+     */
+    static compare(required, installed) {
+        if (installed === null || installed === undefined)
+            return 'not-installed';
+        const requiredParts = parseVersion(required, 'required');
+        const installedParts = parseVersion(installed, 'installed');
+        for (let i = 0; i < 4; i++) {
+            const r = requiredParts[i] ?? 0;
+            const v = installedParts[i] ?? 0;
+            if (v > r)
+                return 'installed-newer';
+            if (v < r)
+                return 'installed-older';
+        }
+        return 'installed-match';
+    }
+    /**
+     * Load the required Cuneiform For Salesforce app version from the manifest.
+     *
+     * @returns the parsed required version
+     * @throws SfError (E4681) when `cuneiform.requiredAppVersion` is missing or empty
+     */
+    loadRequired() {
+        const manifest = this.manifestReader();
+        const raw = manifest.cuneiform?.requiredAppVersion;
+        if (typeof raw !== 'string' || raw.trim() === '') {
+            throw new SfError('package.json is missing the required "cuneiform.requiredAppVersion" field. ' +
+                'Add it as part of the CLI release procedure (see README → "Compatibility").', 'E4681');
+        }
+        return { version: stripLeadingV(raw.trim()) };
+    }
+    /**
+     * Load the CLI plugin's own version from the manifest (`package.json` `version` field).
+     *
+     * @returns the CLI version string verbatim (e.g., "1.0.4-beta.1")
+     * @throws SfError (E4684) when `version` is missing or empty (should never happen for npm-published packages)
+     */
+    loadCliVersion() {
+        const manifest = this.manifestReader();
+        const raw = manifest.version;
+        if (typeof raw !== 'string' || raw.trim() === '') {
+            throw new SfError('package.json is missing the "version" field.', 'E4684');
+        }
+        return raw.trim();
+    }
+}
+/**
+ * Parse a Salesforce package version string into a 4-tuple of integers, padding
+ * missing parts with 0.
+ */
+function parseVersion(raw, label) {
+    const stripped = stripLeadingV(raw.trim());
+    const parts = stripped.split('.');
+    const tuple = [];
+    for (const part of parts) {
+        if (!/^\d+$/.test(part)) {
+            throw new SfError(`${label} version "${raw}" contains a non-numeric component "${part}". ` +
+                'Expected Major.Minor or Major.Minor.Patch.Build.', 'E4682');
+        }
+        tuple.push(Number.parseInt(part, 10));
+    }
+    while (tuple.length < 4)
+        tuple.push(0);
+    return tuple;
+}
+function stripLeadingV(raw) {
+    return raw.startsWith('v') || raw.startsWith('V') ? raw.slice(1) : raw;
+}
+//# sourceMappingURL=CompatibilityService.js.map

package/lib/services/CompatibilityService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CompatibilityService.js","sourceRoot":"","sources":["../../src/services/CompatibilityService.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAkD3C;;;;;GAKG;AACH,MAAM,qBAAqB,GAAgC,GAAG,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAA0B,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAoB;IACd,cAAc,CAA8B;IAE7D,YAAmB,MAAoC;QACrD,IAAI,CAAC,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,qBAAqB,CAAC;IACxE,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,OAAO,CAAC,QAAgB,EAAE,SAAoC;QAC1E,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;QAE1E,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,iBAAiB,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,iBAAiB,CAAC;QACtC,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACI,YAAY;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,OAAO,CACf,6EAA6E;gBAC3E,6EAA6E,EAC/E,OAAO,CACR,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACI,cAAc;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,OAAO,CAAC,8CAA8C,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,KAA+B;IAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,OAAO,CACf,GAAG,KAAK,aAAa,GAAG,uCAAuC,IAAI,KAAK;gBACtE,kDAAkD,EACpD,OAAO,CACR,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACzE,CAAC"}

package/lib/services/ConfigureMode.d.ts

@@ -0,0 +1,98 @@
+import type { ServiceResult } from '../models/service-result.js';
+import type { UserReadiness } from './UserReadinessService.js';
+import { type UserConfigurationResult, type IConfigurationServiceDeps } from './UserConfigurationTypes.js';
+/**
+ * Handles the configure workflow for UserConfigurationService.
+ *
+ * Checks the current user state, identifies required changes (permission sets,
+ * API-only profiling), and optionally applies them. Supports dry-run mode to
+ * preview changes without applying them.
+ *
+ * This class is instantiated by UserConfigurationService and should not be
+ * used directly by consumers.
+ */
+export declare class ConfigureMode {
+    private readonly deps;
+    constructor(deps: IConfigurationServiceDeps);
+    /**
+     * Creates an empty UserConfigurationResult for error cases.
+     */
+    private static createEmptyConfigurationResult;
+    /**
+     * Builds the previous configuration state from readiness check.
+     */
+    private static buildConfigurationState;
+    /**
+     * Builds the list of required configuration actions.
+     */
+    private static buildConfigurationActions;
+    /**
+     * Creates the result when Cuneiform is not installed.
+     */
+    private static createCuneiformNotInstalledResult;
+    /**
+     * Handles permission set insert failures, mapping error codes appropriately.
+     */
+    private static handlePermissionSetInsertFailure;
+    /**
+     * Orchestrates user configuration for Cuneiform operations.
+     *
+     * Checks the current user state, identifies required changes (permission sets,
+     * API-only profiling), and optionally applies them. Supports dry-run mode to
+     * preview changes without applying them.
+     *
+     * **Idempotency**: Skips already-configured items. Re-running configure() on
+     * a fully configured user will report all actions as 'skipped'.
+     *
+     * @param userId - The Salesforce user ID to configure
+     * @param options - Configuration options
+     * @param options.dryRun - If true, reports planned changes without applying them (default: false)
+     * @param options.readiness - Pre-fetched readiness snapshot. When provided, reuses it instead of issuing a second checkReadiness call — guaranteeing agreement with the caller's display.
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    execute(userId: string, options?: {
+        dryRun?: boolean;
+        readiness?: UserReadiness;
+    }): Promise<ServiceResult<UserConfigurationResult>>;
+    /**
+     * Executes a single permission set assignment action.
+     */
+    private executePermissionSetAction;
+    /**
+     * Executes a single API-only profiling action.
+     */
+    private executeApiOnlyProfilingAction;
+    /**
+     * Executes all configuration actions sequentially.
+     *
+     * Actions are executed sequentially because permission set assignments
+     * may have dependencies and order matters for proper error reporting.
+     */
+    private executeConfigurationActions;
+    /**
+     * Builds user state from a pre-fetched readiness snapshot. Avoids a second
+     * `checkReadiness` call when the caller already has a fresh snapshot — the
+     * canonical agreement guarantee for `user details --configure`.
+     *
+     * Username is still fetched independently (different SOQL query than readiness).
+     * `getUserInfo` failures degrade to an empty username — matching the tolerance
+     * of `fetchUserReadinessState` so the caller path is no less defensive.
+     */
+    private fetchUserStateWithCachedReadiness;
+    /**
+     * Fetches user readiness state and user info in parallel.
+     */
+    private fetchUserReadinessState;
+    /**
+     * Fetches the updated configuration state after applying changes.
+     */
+    private fetchUpdatedState;
+    /**
+     * Builds the final configuration result based on execution outcomes.
+     */
+    private buildConfigurationResult;
+    /**
+     * Creates the result for dry-run mode or when no changes are needed.
+     */
+    private createDryRunOrNoChangesResult;
+}

package/lib/services/ConfigureMode.js

@@ -0,0 +1,413 @@
+/*
+ * Copyright (c) 2026, PeerNova, Inc. All Rights Reserved.
+ * PROPRIETARY AND CONFIDENTIAL. Unauthorized copying, modification,
+ * or distribution is strictly prohibited. Use is governed by the
+ * Master Subscription Agreement (MSA) between PeerNova, Inc. and the
+ * licensee. See LICENSE file in the repo root.
+ */
+import { createSuccessResult, createFailureResult } from '../models/service-result.js';
+import { AdapterErrorCodes, ServiceErrorCodes } from '../adapters/errors.js';
+import { CUNEIFORM_NAMESPACE } from './namespace-constants.js';
+import { validateRequiredString } from './validation.js';
+import { REQUIRED_PERMISSION_SETS, REQUIRED_PERMISSION_SET_LABELS } from './UserReadinessService.js';
+import { CONFIGURABLE_PERMISSION_SETS, } from './UserConfigurationTypes.js';
+/**
+ * Handles the configure workflow for UserConfigurationService.
+ *
+ * Checks the current user state, identifies required changes (permission sets,
+ * API-only profiling), and optionally applies them. Supports dry-run mode to
+ * preview changes without applying them.
+ *
+ * This class is instantiated by UserConfigurationService and should not be
+ * used directly by consumers.
+ */
+export class ConfigureMode {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    // ============================================================================
+    // Static helpers
+    // ============================================================================
+    /**
+     * Creates an empty UserConfigurationResult for error cases.
+     */
+    static createEmptyConfigurationResult(userId, dryRun, username = '') {
+        return {
+            user: { id: userId, username },
+            dryRun,
+            previousState: {
+                userId,
+                username,
+                hasRequiredPermissionSets: false,
+                missingPermissionSets: [...REQUIRED_PERMISSION_SETS],
+                apiOnlyProfilingEnabled: false,
+            },
+            actions: [],
+            currentState: null,
+            summary: {
+                changesRequired: 0,
+                changesApplied: 0,
+                changesFailed: 0,
+                isReady: false,
+            },
+        };
+    }
+    /**
+     * Builds the previous configuration state from readiness check.
+     */
+    static buildConfigurationState(userId, username, readiness) {
+        return {
+            userId,
+            username,
+            hasRequiredPermissionSets: readiness.permissionSets.hasAllRequired,
+            missingPermissionSets: readiness.permissionSets.missingRequired,
+            apiOnlyProfilingEnabled: readiness.configProfile.apiOnlyProfilingEnabled ?? false,
+            profileDeveloperName: readiness.configProfile.profileDeveloperName,
+        };
+    }
+    /**
+     * Builds the list of required configuration actions.
+     */
+    static buildConfigurationActions(previousState, dryRun) {
+        const actions = [];
+        // Only create assignment actions for configurable permission sets.
+        // Admin User Pro is a prerequisite (read-only verification) — not assigned by CLI.
+        const configurableMissing = previousState.missingPermissionSets.filter((ps) => CONFIGURABLE_PERMISSION_SETS.includes(ps));
+        for (const missingPerm of configurableMissing) {
+            actions.push({
+                type: 'assignPermissionSet',
+                target: missingPerm,
+                targetLabel: REQUIRED_PERMISSION_SET_LABELS[missingPerm],
+                status: dryRun ? 'skipped' : 'applied',
+                message: dryRun ? 'Would assign permission set' : undefined,
+            });
+        }
+        if (!previousState.apiOnlyProfilingEnabled && previousState.profileDeveloperName) {
+            actions.push({
+                type: 'enableApiOnlyProfiling',
+                target: previousState.profileDeveloperName,
+                status: dryRun ? 'skipped' : 'applied',
+                message: dryRun ? 'Would enable API-only profiling' : undefined,
+            });
+        }
+        return actions;
+    }
+    /**
+     * Creates the result when Cuneiform is not installed.
+     */
+    static createCuneiformNotInstalledResult(userId, username, dryRun, previousState, startTime) {
+        return createFailureResult({
+            user: { id: userId, username },
+            dryRun,
+            previousState,
+            actions: [],
+            currentState: null,
+            summary: { changesRequired: 0, changesApplied: 0, changesFailed: 0, isReady: false },
+        }, ServiceErrorCodes.USER_CUNEIFORM_NAMESPACE_NOT_FOUND, 'Cuneiform for Salesforce is not installed in this org', { metadata: { duration: Date.now() - startTime } });
+    }
+    /**
+     * Handles permission set insert failures, mapping error codes appropriately.
+     */
+    static handlePermissionSetInsertFailure(insertResult) {
+        if (insertResult.errorCode === AdapterErrorCodes.INSERT_DUPLICATE_VALUE) {
+            return { status: 'skipped', message: 'Permission set already assigned', failed: false };
+        }
+        if (insertResult.errorCode === AdapterErrorCodes.INSERT_INSUFFICIENT_ACCESS) {
+            return { status: 'failed', message: 'Insufficient access to assign permission set', failed: true };
+        }
+        return {
+            status: 'failed',
+            message: insertResult.message ?? 'Permission set assignment failed',
+            failed: true,
+        };
+    }
+    /**
+     * Orchestrates user configuration for Cuneiform operations.
+     *
+     * Checks the current user state, identifies required changes (permission sets,
+     * API-only profiling), and optionally applies them. Supports dry-run mode to
+     * preview changes without applying them.
+     *
+     * **Idempotency**: Skips already-configured items. Re-running configure() on
+     * a fully configured user will report all actions as 'skipped'.
+     *
+     * @param userId - The Salesforce user ID to configure
+     * @param options - Configuration options
+     * @param options.dryRun - If true, reports planned changes without applying them (default: false)
+     * @param options.readiness - Pre-fetched readiness snapshot. When provided, reuses it instead of issuing a second checkReadiness call — guaranteeing agreement with the caller's display.
+     * @returns ServiceResult containing UserConfigurationResult with actions taken/skipped/failed
+     */
+    async execute(userId, options) {
+        const startTime = Date.now();
+        const dryRun = options?.dryRun ?? false;
+        // Validate userId
+        const validationError = validateRequiredString(userId, 'User ID');
+        if (validationError) {
+            return createFailureResult(ConfigureMode.createEmptyConfigurationResult(userId, dryRun), ServiceErrorCodes.USER_CONFIG_USER_ID_REQUIRED, validationError, { metadata: { duration: Date.now() - startTime } });
+        }
+        try {
+            this.deps.logger?.log(`Configuring user: ${userId}${dryRun ? ' (dry-run)' : ''}`);
+            // Step 1: Get current user readiness state.
+            // When the caller injects a readiness snapshot (canonical: from `user details` outer fetch),
+            // reuse it so the caller's displayed readiness and the configure `previousState` agree.
+            // Otherwise fall back to fetching ourselves (operational resilience for direct callers).
+            const { readiness: rawReadiness, username, errorResult, } = options?.readiness !== undefined
+                ? await this.fetchUserStateWithCachedReadiness(userId, options.readiness)
+                : await this.fetchUserReadinessState(userId, dryRun, startTime);
+            if (errorResult)
+                return errorResult;
+            // readiness is guaranteed non-undefined when errorResult is null
+            const readiness = rawReadiness;
+            const previousState = ConfigureMode.buildConfigurationState(userId, username, readiness);
+            // Check if Cuneiform is installed
+            if (!readiness.isCuneiformInstalled) {
+                return ConfigureMode.createCuneiformNotInstalledResult(userId, username, dryRun, previousState, startTime);
+            }
+            // Gate: Self-registration must be enabled for CLI self-provisioning
+            // This ensures the admin has explicitly authorized users to self-configure
+            // API profiling access via the CLI. Without this, the permission set
+            // assignment is blocked to preserve the admin's security posture.
+            // Only enforced when a config profile exists — if no profile is configured,
+            // the configure flow will create/enable it (handled by downstream actions).
+            if (readiness.configProfile.isConfigured && readiness.configProfile.selfRegistrationEnabled !== true) {
+                return createFailureResult(ConfigureMode.createEmptyConfigurationResult(userId, dryRun, username), ServiceErrorCodes.SELF_REGISTRATION_NOT_ENABLED, 'Cuneiform is installed and API-Only Profiling is enabled, but CLI self-provisioning is not available. ' +
+                    'Your administrator has not enabled CLI self-provisioning for API-based profiling. ' +
+                    'This setting ensures your admin controls which users can configure their own API profiling access. ' +
+                    'Ask your Salesforce administrator to enable "Enable API Profiling Self-Registration" ' +
+                    'in the Cuneiform Configuration Profile (Custom Metadata), ' +
+                    'or request they assign the API-Based Profiling permission set to you directly.', { metadata: { duration: Date.now() - startTime } });
+            }
+            // Step 2: Identify required actions
+            const actions = ConfigureMode.buildConfigurationActions(previousState, dryRun);
+            const changesRequired = actions.length;
+            // If dry-run or no changes needed, return early
+            if (dryRun || changesRequired === 0) {
+                return this.createDryRunOrNoChangesResult(userId, username, dryRun, previousState, actions, changesRequired, readiness.isReady, startTime);
+            }
+            // Step 3: Execute actions
+            const { changesApplied, changesFailed } = await this.executeConfigurationActions(actions, userId);
+            // Step 4: Get updated state (if changes were made)
+            const currentState = await this.fetchUpdatedState(userId, username, changesApplied);
+            return this.buildConfigurationResult(userId, username, dryRun, previousState, actions, currentState, changesRequired, changesApplied, changesFailed, Date.now() - startTime);
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            this.deps.logger?.log(`Configuration failed: ${errorMessage}`);
+            return createFailureResult(ConfigureMode.createEmptyConfigurationResult(userId, dryRun), ServiceErrorCodes.USER_CONFIG_QUERY_FAILED, errorMessage, { metadata: { duration: Date.now() - startTime } });
+        }
+    }
+    // ============================================================================
+    // Private instance helpers
+    // ============================================================================
+    /**
+     * Executes a single permission set assignment action.
+     */
+    async executePermissionSetAction(action, userId) {
+        const permSetIdResult = await this.deps.getPermissionSetId(action.target, CUNEIFORM_NAMESPACE);
+        if (!permSetIdResult.success || !permSetIdResult.data) {
+            return {
+                applied: false,
+                failed: true,
+                update: {
+                    status: 'failed',
+                    message: permSetIdResult.message ?? 'Permission set not found',
+                },
+            };
+        }
+        const insertResult = await this.deps.restApiAdapter.insertRecord('PermissionSetAssignment', {
+            AssigneeId: userId,
+            PermissionSetId: permSetIdResult.data,
+        });
+        if (!insertResult.success) {
+            const failureInfo = ConfigureMode.handlePermissionSetInsertFailure(insertResult);
+            return {
+                applied: false,
+                failed: failureInfo.failed,
+                update: { status: failureInfo.status, message: failureInfo.message },
+            };
+        }
+        return {
+            applied: true,
+            failed: false,
+            update: {
+                status: 'applied',
+                message: 'Permission set assigned',
+                details: { permissionSetAssignmentId: insertResult.data.id },
+            },
+        };
+    }
+    /**
+     * Executes a single API-only profiling action.
+     */
+    async executeApiOnlyProfilingAction(action) {
+        const deployResult = await this.deps.enableApiOnlyProfiling(action.target);
+        if (!deployResult.success) {
+            return {
+                applied: false,
+                failed: true,
+                update: {
+                    status: 'failed',
+                    message: deployResult.message ?? 'Failed to enable API-only profiling',
+                },
+            };
+        }
+        const update = {
+            status: 'applied',
+            message: 'API-only profiling deployment triggered',
+        };
+        if (deployResult.data.jobId) {
+            update.details = { deploymentJobId: deployResult.data.jobId };
+            // Wait for deployment to complete so state is consistent for subsequent operations
+            const completionResult = await this.deps.waitForDeploymentCompletion(deployResult.data.jobId);
+            if (completionResult.success && completionResult.data.status === 'Failed') {
+                return {
+                    applied: false,
+                    failed: true,
+                    update: {
+                        status: 'failed',
+                        message: completionResult.data.errorMessage ?? 'CMT deployment failed',
+                        details: { deploymentJobId: deployResult.data.jobId },
+                    },
+                };
+            }
+            update.message = `API-only profiling deployment ${completionResult.data.status.toLowerCase()}`;
+        }
+        return { applied: true, failed: false, update };
+    }
+    /**
+     * Executes all configuration actions sequentially.
+     *
+     * Actions are executed sequentially because permission set assignments
+     * may have dependencies and order matters for proper error reporting.
+     */
+    async executeConfigurationActions(actions, userId) {
+        let changesApplied = 0;
+        let changesFailed = 0;
+        /* eslint-disable no-await-in-loop -- Sequential execution required: permission set dependencies */
+        for (const [i, action] of actions.entries()) {
+            const result = action.type === 'assignPermissionSet'
+                ? await this.executePermissionSetAction(action, userId)
+                : await this.executeApiOnlyProfilingAction(action);
+            // Apply the update to the action in the array
+            Object.assign(actions[i], result.update);
+            if (result.applied)
+                changesApplied++;
+            if (result.failed)
+                changesFailed++;
+        }
+        /* eslint-enable no-await-in-loop */
+        return { changesApplied, changesFailed };
+    }
+    /**
+     * Builds user state from a pre-fetched readiness snapshot. Avoids a second
+     * `checkReadiness` call when the caller already has a fresh snapshot — the
+     * canonical agreement guarantee for `user details --configure`.
+     *
+     * Username is still fetched independently (different SOQL query than readiness).
+     * `getUserInfo` failures degrade to an empty username — matching the tolerance
+     * of `fetchUserReadinessState` so the caller path is no less defensive.
+     */
+    async fetchUserStateWithCachedReadiness(userId, cachedReadiness) {
+        const userInfoResult = await this.deps.userReadinessService.getUserInfo(userId);
+        return {
+            readiness: cachedReadiness,
+            username: userInfoResult.success ? userInfoResult.data.username : '',
+            errorResult: null,
+        };
+    }
+    /**
+     * Fetches user readiness state and user info in parallel.
+     */
+    async fetchUserReadinessState(userId, dryRun, startTime) {
+        const [readinessResult, userInfoResult] = await Promise.all([
+            this.deps.userReadinessService.checkReadiness(userId),
+            this.deps.userReadinessService.getUserInfo(userId),
+        ]);
+        if (!readinessResult.success) {
+            return {
+                readiness: undefined,
+                username: '',
+                errorResult: createFailureResult(ConfigureMode.createEmptyConfigurationResult(userId, dryRun), readinessResult.errorCode ?? ServiceErrorCodes.USER_CONFIG_QUERY_FAILED, readinessResult.message ?? 'Failed to check user readiness', { metadata: { duration: Date.now() - startTime } }),
+            };
+        }
+        return {
+            readiness: readinessResult.data,
+            username: userInfoResult.success ? userInfoResult.data.username : '',
+            errorResult: null,
+        };
+    }
+    /**
+     * Fetches the updated configuration state after applying changes.
+     */
+    async fetchUpdatedState(userId, username, changesApplied) {
+        if (changesApplied === 0)
+            return null;
+        const updatedReadinessResult = await this.deps.userReadinessService.checkReadiness(userId);
+        if (!updatedReadinessResult.success)
+            return null;
+        return ConfigureMode.buildConfigurationState(userId, username, updatedReadinessResult.data);
+    }
+    /**
+     * Builds the final configuration result based on execution outcomes.
+     */
+    buildConfigurationResult(userId, username, dryRun, previousState, actions, currentState, changesRequired, changesApplied, changesFailed, duration) {
+        const isReady = currentState?.hasRequiredPermissionSets === true && currentState?.apiOnlyProfilingEnabled === true;
+        const result = {
+            user: { id: userId, username },
+            dryRun,
+            previousState,
+            actions,
+            currentState,
+            summary: { changesRequired, changesApplied, changesFailed, isReady },
+        };
+        // All changes failed
+        if (changesFailed > 0 && changesApplied === 0) {
+            this.deps.logger?.log(`Configuration failed: all ${changesFailed} change(s) failed`);
+            return createFailureResult(result, ServiceErrorCodes.USER_CONFIG_PERMISSION_SET_ASSIGN_FAILED, `Configuration failed: all ${changesFailed} change(s) failed`, { metadata: { duration } });
+        }
+        // Partial failure
+        if (changesFailed > 0) {
+            this.deps.logger?.log(`Configuration partially complete: ${changesApplied} applied, ${changesFailed} failed`);
+            return createSuccessResult(result, {
+                message: `Configuration partially complete: ${changesApplied} applied, ${changesFailed} failed`,
+                warnings: [`${changesFailed} configuration action(s) failed`],
+                metadata: { duration },
+            });
+        }
+        // All changes applied successfully
+        this.deps.logger?.log(`Configuration complete: ${changesApplied} change(s) applied`);
+        return createSuccessResult(result, {
+            message: `Configuration complete: ${changesApplied} change(s) applied`,
+            metadata: { duration },
+        });
+    }
+    /**
+     * Creates the result for dry-run mode or when no changes are needed.
+     */
+    createDryRunOrNoChangesResult(userId, username, dryRun, previousState, actions, changesRequired, isReadinessReady, startTime) {
+        const duration = Date.now() - startTime;
+        const isReady = changesRequired === 0 && isReadinessReady;
+        const message = dryRun
+            ? `Dry-run complete: ${changesRequired} change(s) would be applied`
+            : 'This user is already fully configured; no changes are necessary';
+        this.deps.logger?.log(message);
+        return createSuccessResult({
+            user: { id: userId, username },
+            dryRun,
+            previousState,
+            actions: actions.map((a) => ({ ...a, message: dryRun ? 'Would be applied' : 'Already configured' })),
+            currentState: dryRun ? null : previousState,
+            summary: {
+                changesRequired,
+                changesApplied: 0,
+                changesFailed: 0,
+                isReady,
+            },
+        }, {
+            message,
+            metadata: { duration },
+        });
+    }
+}
+//# sourceMappingURL=ConfigureMode.js.map

package/lib/services/ConfigureMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigureMode.js","sourceRoot":"","sources":["../../src/services/ConfigureMode.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,EACL,4BAA4B,GAK7B,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IACP,IAAI,CAA4B;IAEjD,YAAmB,IAA+B;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACK,MAAM,CAAC,8BAA8B,CAC3C,MAAc,EACd,MAAe,EACf,QAAQ,GAAG,EAAE;QAEb,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM;YACN,aAAa,EAAE;gBACb,MAAM;gBACN,QAAQ;gBACR,yBAAyB,EAAE,KAAK;gBAChC,qBAAqB,EAAE,CAAC,GAAG,wBAAwB,CAAC;gBACpD,uBAAuB,EAAE,KAAK;aAC/B;YACD,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE;gBACP,eAAe,EAAE,CAAC;gBAClB,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK;aACf;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,uBAAuB,CACpC,MAAc,EACd,QAAgB,EAChB,SAAwB;QAExB,OAAO;YACL,MAAM;YACN,QAAQ;YACR,yBAAyB,EAAE,SAAS,CAAC,cAAc,CAAC,cAAc;YAClE,qBAAqB,EAAE,SAAS,CAAC,cAAc,CAAC,eAAe;YAC/D,uBAAuB,EAAE,SAAS,CAAC,aAAa,CAAC,uBAAuB,IAAI,KAAK;YACjF,oBAAoB,EAAE,SAAS,CAAC,aAAa,CAAC,oBAAoB;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,yBAAyB,CAAC,aAAiC,EAAE,MAAe;QACzF,MAAM,OAAO,GAA0B,EAAE,CAAC;QAE1C,mEAAmE;QACnE,mFAAmF;QACnF,MAAM,mBAAmB,GAAG,aAAa,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5E,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAC1C,CAAC;QAEF,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,8BAA8B,CAAC,WAAW,CAAC;gBACxD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACtC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,uBAAuB,IAAI,aAAa,CAAC,oBAAoB,EAAE,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,aAAa,CAAC,oBAAoB;gBAC1C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACtC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS;aAChE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,iCAAiC,CAC9C,MAAc,EACd,QAAgB,EAChB,MAAe,EACf,aAAiC,EACjC,SAAiB;QAEjB,OAAO,mBAAmB,CACxB;YACE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM;YACN,aAAa;YACb,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;SACrF,EACD,iBAAiB,CAAC,kCAAkC,EACpD,uDAAuD,EACvD,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,gCAAgC,CAAC,YAA2C;QAKzF,IAAI,YAAY,CAAC,SAAS,KAAK,iBAAiB,CAAC,sBAAsB,EAAE,CAAC;YACxE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1F,CAAC;QAED,IAAI,YAAY,CAAC,SAAS,KAAK,iBAAiB,CAAC,0BAA0B,EAAE,CAAC;YAC5E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,8CAA8C,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACrG,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,kCAAkC;YACnE,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,OAAO,CAClB,MAAc,EACd,OAAyD;QAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QAExC,kBAAkB;QAClB,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,mBAAmB,CACxB,aAAa,CAAC,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5D,iBAAiB,CAAC,4BAA4B,EAC9C,eAAe,EACf,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,qBAAqB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAElF,4CAA4C;YAC5C,6FAA6F;YAC7F,wFAAwF;YACxF,yFAAyF;YACzF,MAAM,EACJ,SAAS,EAAE,YAAY,EACvB,QAAQ,EACR,WAAW,GACZ,GAAG,OAAO,EAAE,SAAS,KAAK,SAAS;gBAClC,CAAC,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC;gBACzE,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;YACpC,iEAAiE;YACjE,MAAM,SAAS,GAAG,YAAa,CAAC;YAEhC,MAAM,aAAa,GAAG,aAAa,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAEzF,kCAAkC;YAClC,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC;gBACpC,OAAO,aAAa,CAAC,iCAAiC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;YAC7G,CAAC;YAED,oEAAoE;YACpE,2EAA2E;YAC3E,qEAAqE;YACrE,kEAAkE;YAClE,4EAA4E;YAC5E,4EAA4E;YAC5E,IAAI,SAAS,CAAC,aAAa,CAAC,YAAY,IAAI,SAAS,CAAC,aAAa,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;gBACrG,OAAO,mBAAmB,CACxB,aAAa,CAAC,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EACtE,iBAAiB,CAAC,6BAA6B,EAC/C,wGAAwG;oBACtG,oFAAoF;oBACpF,qGAAqG;oBACrG,uFAAuF;oBACvF,4DAA4D;oBAC5D,gFAAgF,EAClF,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;YACJ,CAAC;YAED,oCAAoC;YACpC,MAAM,OAAO,GAAG,aAAa,CAAC,yBAAyB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC/E,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;YAEvC,gDAAgD;YAChD,IAAI,MAAM,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAC,6BAA6B,CACvC,MAAM,EACN,QAAQ,EACR,MAAM,EACN,aAAa,EACb,OAAO,EACP,eAAe,EACf,SAAS,CAAC,OAAO,EACjB,SAAS,CACV,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAElG,mDAAmD;YACnD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YAEpF,OAAO,IAAI,CAAC,wBAAwB,CAClC,MAAM,EACN,QAAQ,EACR,MAAM,EACN,aAAa,EACb,OAAO,EACP,YAAY,EACZ,eAAe,EACf,cAAc,EACd,aAAa,EACb,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAE/D,OAAO,mBAAmB,CACxB,aAAa,CAAC,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5D,iBAAiB,CAAC,wBAAwB,EAC1C,YAAY,EACZ,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2BAA2B;IAC3B,+EAA+E;IAE/E;;OAEG;IACK,KAAK,CAAC,0BAA0B,CACtC,MAA2B,EAC3B,MAAc;QAMd,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAE/F,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,eAAe,CAAC,OAAO,IAAI,0BAA0B;iBAC/D;aACF,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,yBAAyB,EAAE;YAC1F,UAAU,EAAE,MAAM;YAClB,eAAe,EAAE,eAAe,CAAC,IAAI;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,aAAa,CAAC,gCAAgC,CAAC,YAAY,CAAC,CAAC;YACjF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE;aACrE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,EAAE,yBAAyB,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,6BAA6B,CAAC,MAA2B;QAKrE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE3E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,qCAAqC;iBACvE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAiC;YAC3C,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,yCAAyC;SACnD,CAAC;QACF,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAE9D,mFAAmF;YACnF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9F,IAAI,gBAAgB,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE;wBACN,MAAM,EAAE,QAAQ;wBAChB,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,IAAI,uBAAuB;wBACtE,OAAO,EAAE,EAAE,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE;qBACtD;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,OAAO,GAAG,iCAAiC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,2BAA2B,CACvC,OAA8B,EAC9B,MAAc;QAEd,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,mGAAmG;QACnG,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,qBAAqB;gBACnC,CAAC,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC;gBACvD,CAAC,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;YAEvD,8CAA8C;YAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,MAAM,CAAC,OAAO;gBAAE,cAAc,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM;gBAAE,aAAa,EAAE,CAAC;QACrC,CAAC;QACD,oCAAoC;QAEpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,iCAAiC,CAC7C,MAAc,EACd,eAA8B;QAM9B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO;YACL,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACpE,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CACnC,MAAc,EACd,MAAe,EACf,SAAiB;QAMjB,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,mBAAmB,CAC9B,aAAa,CAAC,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5D,eAAe,CAAC,SAAS,IAAI,iBAAiB,CAAC,wBAAwB,EACvE,eAAe,CAAC,OAAO,IAAI,gCAAgC,EAC3D,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,CACnD;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,eAAe,CAAC,IAAI;YAC/B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACpE,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,MAAc,EACd,QAAgB,EAChB,cAAsB;QAEtB,IAAI,cAAc,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,sBAAsB,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEjD,OAAO,aAAa,CAAC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC9B,MAAc,EACd,QAAgB,EAChB,MAAe,EACf,aAAiC,EACjC,OAA8B,EAC9B,YAAuC,EACvC,eAAuB,EACvB,cAAsB,EACtB,aAAqB,EACrB,QAAgB;QAEhB,MAAM,OAAO,GAAG,YAAY,EAAE,yBAAyB,KAAK,IAAI,IAAI,YAAY,EAAE,uBAAuB,KAAK,IAAI,CAAC;QAEnH,MAAM,MAAM,GAA4B;YACtC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM;YACN,aAAa;YACb,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE;SACrE,CAAC;QAEF,qBAAqB;QACrB,IAAI,aAAa,GAAG,CAAC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,6BAA6B,aAAa,mBAAmB,CAAC,CAAC;YACrF,OAAO,mBAAmB,CACxB,MAAM,EACN,iBAAiB,CAAC,wCAAwC,EAC1D,6BAA6B,aAAa,mBAAmB,EAC7D,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,qCAAqC,cAAc,aAAa,aAAa,SAAS,CAAC,CAAC;YAC9G,OAAO,mBAAmB,CAAC,MAAM,EAAE;gBACjC,OAAO,EAAE,qCAAqC,cAAc,aAAa,aAAa,SAAS;gBAC/F,QAAQ,EAAE,CAAC,GAAG,aAAa,iCAAiC,CAAC;gBAC7D,QAAQ,EAAE,EAAE,QAAQ,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,2BAA2B,cAAc,oBAAoB,CAAC,CAAC;QACrF,OAAO,mBAAmB,CAAC,MAAM,EAAE;YACjC,OAAO,EAAE,2BAA2B,cAAc,oBAAoB;YACtE,QAAQ,EAAE,EAAE,QAAQ,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,6BAA6B,CACnC,MAAc,EACd,QAAgB,EAChB,MAAe,EACf,aAAiC,EACjC,OAA8B,EAC9B,eAAuB,EACvB,gBAAyB,EACzB,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,eAAe,KAAK,CAAC,IAAI,gBAAgB,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,qBAAqB,eAAe,6BAA6B;YACnE,CAAC,CAAC,iEAAiE,CAAC;QAEtE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAE/B,OAAO,mBAAmB,CACxB;YACE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9B,MAAM;YACN,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACpG,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;YAC3C,OAAO,EAAE;gBACP,eAAe;gBACf,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;gBAChB,OAAO;aACR;SACF,EACD;YACE,OAAO;YACP,QAAQ,EAAE,EAAE,QAAQ,EAAE;SACvB,CACF,CAAC;IACJ,CAAC;CACF"}