@pleri/olam-cli 0.1.70 → 0.1.73

package/dist/__tests__/auth-upgrade.test.js

@@ -1,397 +0,0 @@
-/**
- * Unit tests for auth-upgrade.ts pure helpers.
- *
- * Only tests the stateless, side-effect-free helpers. The full upgrade
- * pipeline (docker build, stop, rm, start) is too side-effectful to
- * integration-test inside the devbox — same philosophy as upgrade.test.ts.
- */
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import { validateAuthRepoRoot, parseAuthUpgradeOpts, smokeTestCodexProvider, runAuthUpgradePullByDigest, } from '../commands/auth-upgrade.js';
-import {} from '../commands/bootstrap.js';
-import { EXIT_BOOTSTRAP_PULL_FAILED, EXIT_GENERIC_ERROR, EXIT_PROTOCOL_MISMATCH, } from '../exit-codes.js';
-// ── validateAuthRepoRoot ──────────────────────────────────────────
-describe('validateAuthRepoRoot', () => {
-    let tmpDir;
-    beforeEach(() => {
-        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'olam-auth-upgrade-test-'));
-    });
-    afterEach(() => {
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    });
-    it('returns ok:false when the marker file is absent', () => {
-        const result = validateAuthRepoRoot(tmpDir);
-        expect(result.ok).toBe(false);
-        if (!result.ok) {
-            expect(result.error).toMatch(/packages\/auth-service\/Dockerfile/);
-            expect(result.error).toMatch(/olam repo root/i);
-        }
-    });
-    it('returns ok:true when packages/auth-service/Dockerfile exists', () => {
-        const authServiceDir = path.join(tmpDir, 'packages/auth-service');
-        fs.mkdirSync(authServiceDir, { recursive: true });
-        fs.writeFileSync(path.join(authServiceDir, 'Dockerfile'), 'FROM node:22-slim');
-        const result = validateAuthRepoRoot(tmpDir);
-        expect(result.ok).toBe(true);
-    });
-    it('error message includes the expected path', () => {
-        const result = validateAuthRepoRoot('/nonexistent-definitely-not-a-real-path');
-        expect(result.ok).toBe(false);
-        if (!result.ok) {
-            expect(result.error).toContain('Dockerfile');
-        }
-    });
-    it('error message includes a remediation hint', () => {
-        const result = validateAuthRepoRoot(tmpDir);
-        expect(result.ok).toBe(false);
-        if (!result.ok) {
-            expect(result.error).toContain('olam auth upgrade');
-        }
-    });
-});
-// ── parseAuthUpgradeOpts ──────────────────────────────────────────
-describe('parseAuthUpgradeOpts', () => {
-    it('defaults all options to false when called with empty object', () => {
-        const opts = parseAuthUpgradeOpts({});
-        expect(opts.yes).toBe(false);
-        expect(opts.skipRecreate).toBe(false);
-    });
-    it('sets yes:true when raw.yes is true', () => {
-        expect(parseAuthUpgradeOpts({ yes: true }).yes).toBe(true);
-    });
-    it('sets yes:false when raw.yes is false', () => {
-        expect(parseAuthUpgradeOpts({ yes: false }).yes).toBe(false);
-    });
-    it('sets yes:false when raw.yes is undefined', () => {
-        expect(parseAuthUpgradeOpts({ yes: undefined }).yes).toBe(false);
-    });
-    it('sets skipRecreate:true when raw.skipRecreate is true', () => {
-        expect(parseAuthUpgradeOpts({ skipRecreate: true }).skipRecreate).toBe(true);
-    });
-    it('sets skipRecreate:false when raw.skipRecreate is undefined', () => {
-        expect(parseAuthUpgradeOpts({}).skipRecreate).toBe(false);
-    });
-    it('accepts both options at once', () => {
-        const opts = parseAuthUpgradeOpts({ yes: true, skipRecreate: true });
-        expect(opts.yes).toBe(true);
-        expect(opts.skipRecreate).toBe(true);
-    });
-    it('defaults fromSource to false', () => {
-        expect(parseAuthUpgradeOpts({}).fromSource).toBe(false);
-    });
-    it('sets fromSource:true when raw.fromSource is true', () => {
-        expect(parseAuthUpgradeOpts({ fromSource: true }).fromSource).toBe(true);
-    });
-    it('result is a plain object (no mutation of input)', () => {
-        const raw = { yes: true };
-        const opts = parseAuthUpgradeOpts(raw);
-        expect(opts).not.toBe(raw);
-    });
-});
-// ── smokeTestCodexProvider ────────────────────────────────────────
-// These tests verify that the smoke gate correctly distinguishes a stale
-// (pre-codex) image from a current one. A stale image returns a
-// claude.com loginUrl for provider=codex; a current image returns an
-// OpenAI verification URL.
-describe('smokeTestCodexProvider', () => {
-    beforeEach(() => {
-        vi.stubGlobal('fetch', undefined);
-    });
-    afterEach(() => {
-        vi.unstubAllGlobals();
-    });
-    function makeResponse(body, status = 200) {
-        return new Response(JSON.stringify(body), {
-            status,
-            headers: { 'Content-Type': 'application/json' },
-        });
-    }
-    it('returns ok:true when codex response has no claude.com loginUrl', async () => {
-        vi.stubGlobal('fetch', async () => makeResponse({
-            verificationUriComplete: 'https://login.microsoftonline.com/common/oauth2/v2.0/deviceauth',
-            userCode: 'TEST-CODE',
-            state: 'abc123',
-        }));
-        const result = await smokeTestCodexProvider(null);
-        expect(result.ok).toBe(true);
-    });
-    it('returns ok:false when codex response contains a claude.com loginUrl (stale image)', async () => {
-        vi.stubGlobal('fetch', async () => makeResponse({
-            loginUrl: 'https://claude.com/oauth/authorize?...',
-            state: 'pkce-state',
-        }));
-        const result = await smokeTestCodexProvider(null);
-        expect(result.ok).toBe(false);
-        if (!result.ok) {
-            expect(result.error).toMatch(/claude\.com/);
-            expect(result.error).toMatch(/stale/i);
-        }
-    });
-    it('returns ok:false when codex response contains a claude.ai loginUrl', async () => {
-        vi.stubGlobal('fetch', async () => makeResponse({ loginUrl: 'https://claude.ai/oauth/authorize' }));
-        const result = await smokeTestCodexProvider(null);
-        expect(result.ok).toBe(false);
-    });
-    it('returns ok:true for 502 (OpenAI unreachable) — not a stale-image failure', async () => {
-        vi.stubGlobal('fetch', async () => makeResponse({ error: 'OpenAI device auth endpoint unavailable' }, 502));
-        const result = await smokeTestCodexProvider(null);
-        expect(result.ok).toBe(true);
-    });
-    it('returns ok:false when fetch throws (network error)', async () => {
-        vi.stubGlobal('fetch', async () => { throw new Error('ECONNREFUSED'); });
-        const result = await smokeTestCodexProvider(null);
-        expect(result.ok).toBe(false);
-        if (!result.ok) {
-            expect(result.error).toMatch(/ECONNREFUSED/);
-        }
-    });
-    it('sends X-Olam-Secret header when authSecret is provided', async () => {
-        let capturedHeaders;
-        vi.stubGlobal('fetch', async (_url, init) => {
-            capturedHeaders = init.headers;
-            return makeResponse({ userCode: 'X' });
-        });
-        await smokeTestCodexProvider('super-secret');
-        expect(capturedHeaders?.['X-Olam-Secret']).toBe('super-secret');
-    });
-    it('omits X-Olam-Secret header when authSecret is null', async () => {
-        let capturedHeaders;
-        vi.stubGlobal('fetch', async (_url, init) => {
-            capturedHeaders = init.headers;
-            return makeResponse({ userCode: 'X' });
-        });
-        await smokeTestCodexProvider(null);
-        expect(capturedHeaders?.['X-Olam-Secret']).toBeUndefined();
-    });
-});
-// ── runAuthUpgradePullByDigest — orchestrator (Phase C — C6) ─────
-const FIXTURE_DIGESTS = {
-    'host-cp': 'sha256:' + 'a'.repeat(64),
-    auth: 'sha256:' + 'b'.repeat(64),
-    devbox: 'sha256:' + 'c'.repeat(64),
-    $registry: 'ghcr.io/pleri',
-    $published_version: '0.1.16',
-};
-function ok(stdout = '') {
-    return { exitCode: 0, stdout, stderr: '' };
-}
-function err(stderr, exitCode = 1) {
-    return { exitCode, stdout: '', stderr };
-}
-function makeMockDocker(opts = {}) {
-    const calls = opts.calls ?? { pull: [], inspect: [] };
-    return {
-        info: vi.fn(async () => (opts.infoOk === false ? err('cannot connect to docker') : ok())),
-        pull: vi.fn(async (ref) => {
-            calls.pull.push(ref);
-            return opts.pullResults?.get(ref) ?? ok();
-        }),
-        inspectLabel: vi.fn(async (ref, label) => {
-            calls.inspect.push(`${ref}#${label}`);
-            const value = opts.inspectLabels?.get(ref) ?? '1';
-            return ok(`${value}\n`);
-        }),
-        tag: vi.fn(async () => ok()),
-    };
-}
-describe('runAuthUpgradePullByDigest — happy path', () => {
-    beforeEach(() => {
-        vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
-        vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
-    });
-    afterEach(() => {
-        vi.restoreAllMocks();
-    });
-    it('exits 0 when daemon up + pull succeeds + handshake passes + recreate succeeds', async () => {
-        const docker = makeMockDocker();
-        const tagCalls = [];
-        let recreated = 0;
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: (from, to) => {
-                tagCalls.push({ from, to });
-                return { ok: true };
-            },
-            recreateAuth: async () => {
-                recreated++;
-                return { ok: true };
-            },
-        });
-        expect(result.exitCode).toBe(0);
-        expect(result.summary).toContain('upgraded');
-        expect(tagCalls).toHaveLength(1);
-        expect(tagCalls[0]?.from).toContain(`olam-auth@${FIXTURE_DIGESTS.auth}`);
-        expect(tagCalls[0]?.to).toBe('olam-auth:local');
-        expect(recreated).toBe(1);
-    });
-    it('pulls only olam-auth (not host-cp / devbox)', async () => {
-        const calls = { pull: [], inspect: [] };
-        const docker = makeMockDocker({ calls });
-        await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(calls.pull).toHaveLength(1);
-        expect(calls.pull[0]).toBe(`ghcr.io/pleri/olam-auth@${FIXTURE_DIGESTS.auth}`);
-    });
-    it('honours deps.registry override', async () => {
-        const calls = { pull: [], inspect: [] };
-        const docker = makeMockDocker({ calls });
-        await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            registry: 'localhost:5000/test',
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(calls.pull[0]).toContain('localhost:5000/test/olam-auth');
-    });
-});
-describe('runAuthUpgradePullByDigest — failure paths', () => {
-    beforeEach(() => {
-        vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
-        vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
-    });
-    afterEach(() => {
-        vi.restoreAllMocks();
-    });
-    it('exits EXIT_GENERIC_ERROR (1) when docker daemon not reachable', async () => {
-        const docker = makeMockDocker({ infoOk: false });
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(EXIT_GENERIC_ERROR);
-        expect(result.summary).toContain('docker daemon');
-    });
-    it('exits EXIT_BOOTSTRAP_PULL_FAILED (3) when the auth pull fails terminally', async () => {
-        const docker = makeMockDocker({
-            pullResults: new Map([
-                [`ghcr.io/pleri/olam-auth@${FIXTURE_DIGESTS.auth}`, err('manifest unknown', 1)],
-            ]),
-        });
-        let recreated = 0;
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => {
-                recreated++;
-                return { ok: true };
-            },
-        });
-        expect(result.exitCode).toBe(EXIT_BOOTSTRAP_PULL_FAILED);
-        expect(result.summary).toContain('pull failed');
-        expect(recreated).toBe(0); // bailed before recreate
-    });
-    it('exits EXIT_PROTOCOL_MISMATCH (4) when LABEL declares non-overlapping versions', async () => {
-        const docker = makeMockDocker({
-            inspectLabels: new Map([
-                [`ghcr.io/pleri/olam-auth@${FIXTURE_DIGESTS.auth}`, '99'],
-            ]),
-        });
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(EXIT_PROTOCOL_MISMATCH);
-        expect(result.summary).toContain('auth');
-    });
-    it('exits EXIT_PROTOCOL_MISMATCH when LABEL is missing', async () => {
-        const docker = makeMockDocker({
-            inspectLabels: new Map([
-                [`ghcr.io/pleri/olam-auth@${FIXTURE_DIGESTS.auth}`, '<no value>'],
-            ]),
-        });
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(EXIT_PROTOCOL_MISMATCH);
-    });
-    it('exits EXIT_GENERIC_ERROR when docker tag fails', async () => {
-        const docker = makeMockDocker();
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: false, error: 'image not found' }),
-            recreateAuth: async () => ({ ok: true }),
-        });
-        expect(result.exitCode).toBe(EXIT_GENERIC_ERROR);
-        expect(result.summary).toContain('tag failed');
-    });
-    it('exits EXIT_GENERIC_ERROR when auth recreate fails', async () => {
-        const docker = makeMockDocker();
-        const result = await runAuthUpgradePullByDigest({
-            docker,
-            digests: FIXTURE_DIGESTS,
-            tagImpl: () => ({ ok: true }),
-            recreateAuth: async () => ({ ok: false, error: 'health check failed' }),
-        });
-        expect(result.exitCode).toBe(EXIT_GENERIC_ERROR);
-        expect(result.summary).toContain('auth recreate');
-    });
-});
-// ── --from-source dev-mode gating (Phase C — C6) ──────────────────
-describe('--from-source flag gating — outside dev mode', () => {
-    let originalDev;
-    beforeEach(() => {
-        originalDev = process.env.OLAM_DEV;
-        delete process.env.OLAM_DEV;
-    });
-    afterEach(() => {
-        if (originalDev === undefined) {
-            delete process.env.OLAM_DEV;
-        }
-        else {
-            process.env.OLAM_DEV = originalDev;
-        }
-    });
-    it('MissingBuildScriptError is the hint surfaced when --from-source runs outside dev mode', async () => {
-        const { isDevMode, MissingBuildScriptError } = await import('../install-root.js');
-        expect(isDevMode()).toBe(false);
-        const e = new MissingBuildScriptError('packages/adapters/src/docker/build-auth.sh');
-        expect(e.message).toMatch(/Build script .* not available/);
-        expect(e.message).toMatch(/OLAM_DEV=1/);
-        expect(e.message).toMatch(/--from-source/);
-    });
-});
-describe('--from-source flag gating — inside dev mode', () => {
-    let originalDev;
-    let tmpDir;
-    beforeEach(() => {
-        originalDev = process.env.OLAM_DEV;
-        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'olam-auth-c6-fromsource-'));
-        process.env.OLAM_DEV = '1';
-    });
-    afterEach(() => {
-        if (originalDev === undefined) {
-            delete process.env.OLAM_DEV;
-        }
-        else {
-            process.env.OLAM_DEV = originalDev;
-        }
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    });
-    it('isDevMode returns true when OLAM_DEV=1 + packages/ sibling exists', async () => {
-        const repoRoot = path.join(tmpDir, 'repo');
-        const installRootDir = path.join(repoRoot, 'packages', 'cli');
-        fs.mkdirSync(installRootDir, { recursive: true });
-        fs.mkdirSync(path.join(repoRoot, 'packages'), { recursive: true });
-        fs.writeFileSync(path.join(repoRoot, 'package.json'), '{}');
-        const { isDevMode } = await import('../install-root.js');
-        expect(isDevMode(process.env, installRootDir)).toBe(true);
-    });
-});
-//# sourceMappingURL=auth-upgrade.test.js.map

package/dist/__tests__/auth-upgrade.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-upgrade.test.js","sourceRoot":"","sources":["../../src/__tests__/auth-upgrade.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAIN,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,qEAAqE;AAErE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,yCAAyC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AACrE,yEAAyE;AACzE,gEAAgE;AAChE,qEAAqE;AACrE,2BAA2B;AAE3B,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;QAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACxC,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAChC,YAAY,CAAC;YACX,uBAAuB,EAAE,iEAAiE;YAC1F,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,QAAQ;SAChB,CAAC,CACH,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAChC,YAAY,CAAC;YACX,QAAQ,EAAE,wCAAwC;YAClD,KAAK,EAAE,YAAY;SACpB,CAAC,CACH,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAChC,YAAY,CAAC,EAAE,QAAQ,EAAE,mCAAmC,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAChC,YAAY,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,EAAE,GAAG,CAAC,CACxE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,IAAI,eAAmD,CAAC;QACxD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAY,EAAE,IAAiB,EAAE,EAAE;YAC/D,eAAe,GAAG,IAAI,CAAC,OAAiC,CAAC;YACzD,OAAO,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,eAAe,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,IAAI,eAAmD,CAAC;QACxD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAY,EAAE,IAAiB,EAAE,EAAE;YAC/D,eAAe,GAAG,IAAI,CAAC,OAAiC,CAAC;YACzD,OAAO,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,eAAe,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,MAAM,eAAe,GAAiB;IACpC,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,IAAI,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAChC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,eAAe;IAC1B,kBAAkB,EAAE,QAAQ;CAC7B,CAAC;AAEF,SAAS,EAAE,CAAC,MAAM,GAAG,EAAE;IACrB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC7C,CAAC;AACD,SAAS,GAAG,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AASD,SAAS,cAAc,CAAC,OAAwB,EAAE;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,CAAC,CAAC;QACF,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACvC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;YAClD,OAAO,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAwC,EAAE,CAAC;QACzD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;gBACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,YAAY,EAAE,KAAK,IAAI,EAAE;gBACvB,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,EAAc,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,MAAM,0BAA0B,CAAC;YAC/B,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,EAAc,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,MAAM,0BAA0B,CAAC;YAC/B,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,qBAAqB;YAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,WAAW,EAAE,IAAI,GAAG,CAAC;gBACnB,CAAC,2BAA2B,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;aAChF,CAAC;SACH,CAAC,CAAC;QACH,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE;gBACvB,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,aAAa,EAAE,IAAI,GAAG,CAAC;gBACrB,CAAC,2BAA2B,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC;aAC1D,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,aAAa,EAAE,IAAI,GAAG,CAAC;gBACrB,CAAC,2BAA2B,eAAe,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC;aAClE,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACxD,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,MAAM;YACN,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,IAAI,WAA+B,CAAC;IAEpC,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClF,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,uBAAuB,CAAC,4CAA4C,CAAC,CAAC;QACpF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,WAA+B,CAAC;IACpC,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnC,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC;QACrC,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/bootstrap-tag-mcp-auth.test.d.ts

@@ -1,22 +0,0 @@
-/**
- * bootstrap-tag-mcp-auth.test.ts — contractual regression for the
- * fix that makes `olam bootstrap` tag mcp-auth.
- *
- * Bug history: PR #361 added `'mcp-auth'?: string` to the
- * ImageDigests type and started PUBLISHING image-digests.json with
- * the field, but `olam bootstrap` never read it. The image was
- * neither pulled nor tagged. Downstream `olam auth up` (called
- * during bootstrap chain + by the D3 conformance CI smoke) failed
- * with: "mcp-auth image 'olam-mcp-auth:local' not found locally".
- * Every fresh-machine install + the D3 fixture-asserts CI job
- * silently broke for ~24h until #366's CI run surfaced it.
- *
- * Pin the contract: when the digests blob carries an `mcp-auth` key,
- * bootstrap.ts MUST (a) reference it in the imageRefs construction,
- * (b) tag the pulled digest as `olam-mcp-auth:local` (the
- * services.ts MCP_AUTH_LOCAL_TAG constant). The previous PR-validator
- * pattern wins again — string-level assertion against the source is
- * the cheapest enforcement.
- */
-export {};
-//# sourceMappingURL=bootstrap-tag-mcp-auth.test.d.ts.map

package/dist/__tests__/bootstrap-tag-mcp-auth.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-tag-mcp-auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/bootstrap-tag-mcp-auth.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/__tests__/bootstrap-tag-mcp-auth.test.js

@@ -1,63 +0,0 @@
-/**
- * bootstrap-tag-mcp-auth.test.ts — contractual regression for the
- * fix that makes `olam bootstrap` tag mcp-auth.
- *
- * Bug history: PR #361 added `'mcp-auth'?: string` to the
- * ImageDigests type and started PUBLISHING image-digests.json with
- * the field, but `olam bootstrap` never read it. The image was
- * neither pulled nor tagged. Downstream `olam auth up` (called
- * during bootstrap chain + by the D3 conformance CI smoke) failed
- * with: "mcp-auth image 'olam-mcp-auth:local' not found locally".
- * Every fresh-machine install + the D3 fixture-asserts CI job
- * silently broke for ~24h until #366's CI run surfaced it.
- *
- * Pin the contract: when the digests blob carries an `mcp-auth` key,
- * bootstrap.ts MUST (a) reference it in the imageRefs construction,
- * (b) tag the pulled digest as `olam-mcp-auth:local` (the
- * services.ts MCP_AUTH_LOCAL_TAG constant). The previous PR-validator
- * pattern wins again — string-level assertion against the source is
- * the cheapest enforcement.
- */
-import { describe, it, expect } from 'vitest';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const BOOTSTRAP_PATH = path.join(__dirname, '..', 'commands', 'bootstrap.ts');
-describe("bootstrap.ts mcp-auth tagging contract", () => {
-    it('imageRefs handles mcp-auth as a possible entry', () => {
-        const src = fs.readFileSync(BOOTSTRAP_PATH, 'utf-8');
-        // The imageRefs name union (or push) must include mcp-auth.
-        expect(src).toMatch(/['"]mcp-auth['"]/);
-        // Push or array-literal entry, either is fine.
-        expect(src).toMatch(/olam-mcp-auth@\$\{/);
-    });
-    it('tagPlan tags mcp-auth as olam-mcp-auth:local when digest is present', () => {
-        const src = fs.readFileSync(BOOTSTRAP_PATH, 'utf-8');
-        // The canonical local tag — services.ts expects exactly this string.
-        expect(src).toMatch(/['"]olam-mcp-auth:local['"]/);
-        // The push must be guarded so older image-digests.json without
-        // the field still bootstrap successfully. Either via .find() with a
-        // 'mcp-auth' string check or an `if (digests['mcp-auth'])` style.
-        expect(src).toMatch(/['"]mcp-auth['"][\s\S]{0,100}olam-mcp-auth:local/);
-    });
-    it('the guarded push pattern survives', () => {
-        const src = fs.readFileSync(BOOTSTRAP_PATH, 'utf-8');
-        // Either pattern is acceptable; the key invariant is "guarded".
-        const hasFindPattern = /imageRefs\.find\(/.test(src);
-        const hasIfPattern = /if\s*\(\s*digests\[['"]mcp-auth['"]\]\s*\)/.test(src);
-        expect(hasFindPattern || hasIfPattern).toBe(true);
-    });
-    it('handshake + tag spinner messages are NOT hardcoded to "3 images"', () => {
-        // Once mcp-auth is in the pull list, "3" is wrong. This guards
-        // against a future revert that puts the literal back.
-        const src = fs.readFileSync(BOOTSTRAP_PATH, 'utf-8');
-        // The handshake success log line should reference the count
-        // dynamically, not a literal "3".
-        expect(src).not.toMatch(/handshake passed \(all 3 images\)/);
-        // Either dynamic interpolation (`${count} images`) or absent.
-        expect(src).toMatch(/handshake passed \(all \$\{[^}]+\.length\} images\)/);
-    });
-});
-//# sourceMappingURL=bootstrap-tag-mcp-auth.test.js.map

package/dist/__tests__/bootstrap-tag-mcp-auth.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-tag-mcp-auth.test.js","sourceRoot":"","sources":["../../src/__tests__/bootstrap-tag-mcp-auth.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAE9E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,4DAA4D;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACxC,+CAA+C;QAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,qEAAqE;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAEnD,+DAA+D;QAC/D,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,gEAAgE;QAChE,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,+DAA+D;QAC/D,sDAAsD;QACtD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAErD,4DAA4D;QAC5D,kCAAkC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC7D,8DAA8D;QAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/cli-mcp-revoke.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Tests for `olam mcp revoke`.
- *
- * Acceptance: revoke_drops_token (with mock mcp-auth server),
- * multi_tenant_false_noop (no HTTP call, warning printed).
- */
-export {};
-//# sourceMappingURL=cli-mcp-revoke.test.d.ts.map

package/dist/__tests__/cli-mcp-revoke.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-mcp-revoke.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/cli-mcp-revoke.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}