@portaidentity/cli 1.7.3 → 1.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5 -0
- package/README.md +125 -105
- package/dist/admin/admin-date-time.d.ts +6 -0
- package/dist/admin/admin-date-time.d.ts.map +1 -0
- package/dist/admin/admin-date-time.js +33 -0
- package/dist/admin/admin-date-time.js.map +1 -0
- package/dist/admin/application-client-features.d.ts +38 -0
- package/dist/admin/application-client-features.d.ts.map +1 -0
- package/dist/admin/application-client-features.js +545 -0
- package/dist/admin/application-client-features.js.map +1 -0
- package/dist/admin/application-controller.d.ts +58 -0
- package/dist/admin/application-controller.d.ts.map +1 -0
- package/dist/admin/application-controller.js +286 -0
- package/dist/admin/application-controller.js.map +1 -0
- package/dist/admin/application-dialogs.d.ts +91 -0
- package/dist/admin/application-dialogs.d.ts.map +1 -0
- package/dist/admin/application-dialogs.js +250 -0
- package/dist/admin/application-dialogs.js.map +1 -0
- package/dist/admin/application-rbac-controller.d.ts +56 -0
- package/dist/admin/application-rbac-controller.d.ts.map +1 -0
- package/dist/admin/application-rbac-controller.js +280 -0
- package/dist/admin/application-rbac-controller.js.map +1 -0
- package/dist/admin/application-rbac-features.d.ts +51 -0
- package/dist/admin/application-rbac-features.d.ts.map +1 -0
- package/dist/admin/application-rbac-features.js +175 -0
- package/dist/admin/application-rbac-features.js.map +1 -0
- package/dist/admin/application-rbac-workspace.d.ts +62 -0
- package/dist/admin/application-rbac-workspace.d.ts.map +1 -0
- package/dist/admin/application-rbac-workspace.js +344 -0
- package/dist/admin/application-rbac-workspace.js.map +1 -0
- package/dist/admin/application-runtime.d.ts +44 -0
- package/dist/admin/application-runtime.d.ts.map +1 -0
- package/dist/admin/application-runtime.js +183 -0
- package/dist/admin/application-runtime.js.map +1 -0
- package/dist/admin/application-service.d.ts +39 -0
- package/dist/admin/application-service.d.ts.map +1 -0
- package/dist/admin/application-service.js +248 -0
- package/dist/admin/application-service.js.map +1 -0
- package/dist/admin/application-state.d.ts +109 -0
- package/dist/admin/application-state.d.ts.map +1 -0
- package/dist/admin/application-state.js +3 -0
- package/dist/admin/application-state.js.map +1 -0
- package/dist/admin/application-workspace.d.ts +77 -0
- package/dist/admin/application-workspace.d.ts.map +1 -0
- package/dist/admin/application-workspace.js +302 -0
- package/dist/admin/application-workspace.js.map +1 -0
- package/dist/admin/application.d.ts +88 -0
- package/dist/admin/application.d.ts.map +1 -0
- package/dist/admin/application.js +932 -0
- package/dist/admin/application.js.map +1 -0
- package/dist/admin/client-authentication-dialog.d.ts +77 -0
- package/dist/admin/client-authentication-dialog.d.ts.map +1 -0
- package/dist/admin/client-authentication-dialog.js +217 -0
- package/dist/admin/client-authentication-dialog.js.map +1 -0
- package/dist/admin/client-controller.d.ts +58 -0
- package/dist/admin/client-controller.d.ts.map +1 -0
- package/dist/admin/client-controller.js +462 -0
- package/dist/admin/client-controller.js.map +1 -0
- package/dist/admin/client-credential-dialogs.d.ts +36 -0
- package/dist/admin/client-credential-dialogs.d.ts.map +1 -0
- package/dist/admin/client-credential-dialogs.js +145 -0
- package/dist/admin/client-credential-dialogs.js.map +1 -0
- package/dist/admin/client-dialogs.d.ts +64 -0
- package/dist/admin/client-dialogs.d.ts.map +1 -0
- package/dist/admin/client-dialogs.js +110 -0
- package/dist/admin/client-dialogs.js.map +1 -0
- package/dist/admin/client-form-scroller.d.ts +17 -0
- package/dist/admin/client-form-scroller.d.ts.map +1 -0
- package/dist/admin/client-form-scroller.js +67 -0
- package/dist/admin/client-form-scroller.js.map +1 -0
- package/dist/admin/client-registration-dialog.d.ts +27 -0
- package/dist/admin/client-registration-dialog.d.ts.map +1 -0
- package/dist/admin/client-registration-dialog.js +195 -0
- package/dist/admin/client-registration-dialog.js.map +1 -0
- package/dist/admin/client-service.d.ts +41 -0
- package/dist/admin/client-service.d.ts.map +1 -0
- package/dist/admin/client-service.js +484 -0
- package/dist/admin/client-service.js.map +1 -0
- package/dist/admin/client-state.d.ts +157 -0
- package/dist/admin/client-state.d.ts.map +1 -0
- package/dist/admin/client-state.js +3 -0
- package/dist/admin/client-state.js.map +1 -0
- package/dist/admin/client-workspace.d.ts +88 -0
- package/dist/admin/client-workspace.d.ts.map +1 -0
- package/dist/admin/client-workspace.js +484 -0
- package/dist/admin/client-workspace.js.map +1 -0
- package/dist/admin/delete-confirmation-layout.d.ts +38 -0
- package/dist/admin/delete-confirmation-layout.d.ts.map +1 -0
- package/dist/admin/delete-confirmation-layout.js +52 -0
- package/dist/admin/delete-confirmation-layout.js.map +1 -0
- package/dist/admin/index.d.ts +64 -0
- package/dist/admin/index.d.ts.map +1 -0
- package/dist/admin/index.js +31 -0
- package/dist/admin/index.js.map +1 -0
- package/dist/admin/organization-controller.d.ts +77 -0
- package/dist/admin/organization-controller.d.ts.map +1 -0
- package/dist/admin/organization-controller.js +472 -0
- package/dist/admin/organization-controller.js.map +1 -0
- package/dist/admin/organization-dialogs.d.ts +63 -0
- package/dist/admin/organization-dialogs.d.ts.map +1 -0
- package/dist/admin/organization-dialogs.js +303 -0
- package/dist/admin/organization-dialogs.js.map +1 -0
- package/dist/admin/organization-service.d.ts +110 -0
- package/dist/admin/organization-service.d.ts.map +1 -0
- package/dist/admin/organization-service.js +548 -0
- package/dist/admin/organization-service.js.map +1 -0
- package/dist/admin/organization-workspace.d.ts +29 -0
- package/dist/admin/organization-workspace.d.ts.map +1 -0
- package/dist/admin/organization-workspace.js +421 -0
- package/dist/admin/organization-workspace.js.map +1 -0
- package/dist/admin/portability-controller.d.ts +83 -0
- package/dist/admin/portability-controller.d.ts.map +1 -0
- package/dist/admin/portability-controller.js +466 -0
- package/dist/admin/portability-controller.js.map +1 -0
- package/dist/admin/portability-service.d.ts +31 -0
- package/dist/admin/portability-service.d.ts.map +1 -0
- package/dist/admin/portability-service.js +51 -0
- package/dist/admin/portability-service.js.map +1 -0
- package/dist/admin/portability-state.d.ts +88 -0
- package/dist/admin/portability-state.d.ts.map +1 -0
- package/dist/admin/portability-state.js +3 -0
- package/dist/admin/portability-state.js.map +1 -0
- package/dist/admin/portability-workspace.d.ts +78 -0
- package/dist/admin/portability-workspace.d.ts.map +1 -0
- package/dist/admin/portability-workspace.js +337 -0
- package/dist/admin/portability-workspace.js.map +1 -0
- package/dist/admin/presentation.d.ts +46 -0
- package/dist/admin/presentation.d.ts.map +1 -0
- package/dist/admin/presentation.js +271 -0
- package/dist/admin/presentation.js.map +1 -0
- package/dist/admin/rbac-dialogs.d.ts +73 -0
- package/dist/admin/rbac-dialogs.d.ts.map +1 -0
- package/dist/admin/rbac-dialogs.js +345 -0
- package/dist/admin/rbac-dialogs.js.map +1 -0
- package/dist/admin/rbac-service.d.ts +47 -0
- package/dist/admin/rbac-service.d.ts.map +1 -0
- package/dist/admin/rbac-service.js +258 -0
- package/dist/admin/rbac-service.js.map +1 -0
- package/dist/admin/rbac-state.d.ts +129 -0
- package/dist/admin/rbac-state.d.ts.map +1 -0
- package/dist/admin/rbac-state.js +136 -0
- package/dist/admin/rbac-state.js.map +1 -0
- package/dist/admin/selectable-read-only-input.d.ts +18 -0
- package/dist/admin/selectable-read-only-input.d.ts.map +1 -0
- package/dist/admin/selectable-read-only-input.js +24 -0
- package/dist/admin/selectable-read-only-input.js.map +1 -0
- package/dist/admin/session-service.d.ts +169 -0
- package/dist/admin/session-service.d.ts.map +1 -0
- package/dist/admin/session-service.js +353 -0
- package/dist/admin/session-service.js.map +1 -0
- package/dist/admin/state.d.ts +301 -0
- package/dist/admin/state.d.ts.map +1 -0
- package/dist/admin/state.js +10 -0
- package/dist/admin/state.js.map +1 -0
- package/dist/admin/system-config-controller.d.ts +58 -0
- package/dist/admin/system-config-controller.d.ts.map +1 -0
- package/dist/admin/system-config-controller.js +218 -0
- package/dist/admin/system-config-controller.js.map +1 -0
- package/dist/admin/system-config-service.d.ts +54 -0
- package/dist/admin/system-config-service.d.ts.map +1 -0
- package/dist/admin/system-config-service.js +180 -0
- package/dist/admin/system-config-service.js.map +1 -0
- package/dist/admin/system-config-state.d.ts +77 -0
- package/dist/admin/system-config-state.d.ts.map +1 -0
- package/dist/admin/system-config-state.js +78 -0
- package/dist/admin/system-config-state.js.map +1 -0
- package/dist/admin/system-config-workspace.d.ts +47 -0
- package/dist/admin/system-config-workspace.d.ts.map +1 -0
- package/dist/admin/system-config-workspace.js +217 -0
- package/dist/admin/system-config-workspace.js.map +1 -0
- package/dist/admin/user-controller-types.d.ts +67 -0
- package/dist/admin/user-controller-types.d.ts.map +1 -0
- package/dist/admin/user-controller-types.js +3 -0
- package/dist/admin/user-controller-types.js.map +1 -0
- package/dist/admin/user-controller.d.ts +6 -0
- package/dist/admin/user-controller.d.ts.map +1 -0
- package/dist/admin/user-controller.js +674 -0
- package/dist/admin/user-controller.js.map +1 -0
- package/dist/admin/user-dialog-fields.d.ts +44 -0
- package/dist/admin/user-dialog-fields.d.ts.map +1 -0
- package/dist/admin/user-dialog-fields.js +130 -0
- package/dist/admin/user-dialog-fields.js.map +1 -0
- package/dist/admin/user-dialogs.d.ts +66 -0
- package/dist/admin/user-dialogs.d.ts.map +1 -0
- package/dist/admin/user-dialogs.js +374 -0
- package/dist/admin/user-dialogs.js.map +1 -0
- package/dist/admin/user-role-controller.d.ts +82 -0
- package/dist/admin/user-role-controller.d.ts.map +1 -0
- package/dist/admin/user-role-controller.js +337 -0
- package/dist/admin/user-role-controller.js.map +1 -0
- package/dist/admin/user-role-dialog.d.ts +94 -0
- package/dist/admin/user-role-dialog.d.ts.map +1 -0
- package/dist/admin/user-role-dialog.js +265 -0
- package/dist/admin/user-role-dialog.js.map +1 -0
- package/dist/admin/user-service-types.d.ts +100 -0
- package/dist/admin/user-service-types.d.ts.map +1 -0
- package/dist/admin/user-service-types.js +3 -0
- package/dist/admin/user-service-types.js.map +1 -0
- package/dist/admin/user-service.d.ts +14 -0
- package/dist/admin/user-service.d.ts.map +1 -0
- package/dist/admin/user-service.js +612 -0
- package/dist/admin/user-service.js.map +1 -0
- package/dist/admin/user-state.d.ts +158 -0
- package/dist/admin/user-state.d.ts.map +1 -0
- package/dist/admin/user-state.js +3 -0
- package/dist/admin/user-state.js.map +1 -0
- package/dist/admin/user-workspace.d.ts +65 -0
- package/dist/admin/user-workspace.d.ts.map +1 -0
- package/dist/admin/user-workspace.js +366 -0
- package/dist/admin/user-workspace.js.map +1 -0
- package/dist/auth/browser-flow.d.ts +27 -1
- package/dist/auth/browser-flow.d.ts.map +1 -1
- package/dist/auth/browser-flow.js +55 -33
- package/dist/auth/browser-flow.js.map +1 -1
- package/dist/auth/callback-server.d.ts.map +1 -1
- package/dist/auth/callback-server.js +5 -9
- package/dist/auth/callback-server.js.map +1 -1
- package/dist/auth/id-token-verifier.d.ts +39 -0
- package/dist/auth/id-token-verifier.d.ts.map +1 -0
- package/dist/auth/id-token-verifier.js +104 -0
- package/dist/auth/id-token-verifier.js.map +1 -0
- package/dist/auth/login-coordinator.d.ts +72 -0
- package/dist/auth/login-coordinator.d.ts.map +1 -0
- package/dist/auth/login-coordinator.js +190 -0
- package/dist/auth/login-coordinator.js.map +1 -0
- package/dist/auth/metadata.d.ts +2 -1
- package/dist/auth/metadata.d.ts.map +1 -1
- package/dist/auth/metadata.js +67 -6
- package/dist/auth/metadata.js.map +1 -1
- package/dist/auth/types.d.ts +14 -0
- package/dist/auth/types.d.ts.map +1 -1
- package/dist/client-factory.d.ts.map +1 -1
- package/dist/client-factory.js +15 -2
- package/dist/client-factory.js.map +1 -1
- package/dist/commands/admin.d.ts +22 -0
- package/dist/commands/admin.d.ts.map +1 -0
- package/dist/commands/admin.js +112 -0
- package/dist/commands/admin.js.map +1 -0
- package/dist/commands/app-claim.d.ts.map +1 -1
- package/dist/commands/app-claim.js +11 -4
- package/dist/commands/app-claim.js.map +1 -1
- package/dist/commands/app-module.d.ts.map +1 -1
- package/dist/commands/app-module.js +61 -12
- package/dist/commands/app-module.js.map +1 -1
- package/dist/commands/app-permission.d.ts.map +1 -1
- package/dist/commands/app-permission.js +66 -24
- package/dist/commands/app-permission.js.map +1 -1
- package/dist/commands/app-role.d.ts.map +1 -1
- package/dist/commands/app-role.js +48 -27
- package/dist/commands/app-role.js.map +1 -1
- package/dist/commands/app.d.ts.map +1 -1
- package/dist/commands/app.js +37 -25
- package/dist/commands/app.js.map +1 -1
- package/dist/commands/bulk.d.ts.map +1 -1
- package/dist/commands/bulk.js +9 -2
- package/dist/commands/bulk.js.map +1 -1
- package/dist/commands/client-secret.d.ts.map +1 -1
- package/dist/commands/client-secret.js +12 -6
- package/dist/commands/client-secret.js.map +1 -1
- package/dist/commands/client.d.ts +3 -2
- package/dist/commands/client.d.ts.map +1 -1
- package/dist/commands/client.js +87 -43
- package/dist/commands/client.js.map +1 -1
- package/dist/commands/config.d.ts +4 -0
- package/dist/commands/config.d.ts.map +1 -1
- package/dist/commands/config.js +68 -7
- package/dist/commands/config.js.map +1 -1
- package/dist/commands/export.d.ts +6 -0
- package/dist/commands/export.d.ts.map +1 -0
- package/dist/commands/export.js +182 -0
- package/dist/commands/export.js.map +1 -0
- package/dist/commands/import.d.ts +6 -0
- package/dist/commands/import.d.ts.map +1 -0
- package/dist/commands/import.js +142 -0
- package/dist/commands/import.js.map +1 -0
- package/dist/commands/keys.d.ts.map +1 -1
- package/dist/commands/keys.js +11 -4
- package/dist/commands/keys.js.map +1 -1
- package/dist/commands/login.d.ts.map +1 -1
- package/dist/commands/login.js +24 -10
- package/dist/commands/login.js.map +1 -1
- package/dist/commands/org.d.ts +2 -4
- package/dist/commands/org.d.ts.map +1 -1
- package/dist/commands/org.js +16 -76
- package/dist/commands/org.js.map +1 -1
- package/dist/commands/user-role.d.ts.map +1 -1
- package/dist/commands/user-role.js +19 -14
- package/dist/commands/user-role.js.map +1 -1
- package/dist/commands/user.d.ts +3 -2
- package/dist/commands/user.d.ts.map +1 -1
- package/dist/commands/user.js +47 -71
- package/dist/commands/user.js.map +1 -1
- package/dist/commands/version.d.ts +1 -1
- package/dist/commands/version.js +1 -1
- package/dist/credential-lock.d.ts +20 -0
- package/dist/credential-lock.d.ts.map +1 -0
- package/dist/credential-lock.js +130 -0
- package/dist/credential-lock.js.map +1 -0
- package/dist/credential-store.d.ts +14 -0
- package/dist/credential-store.d.ts.map +1 -1
- package/dist/credential-store.js +114 -3
- package/dist/credential-store.js.map +1 -1
- package/dist/error-handler.d.ts.map +1 -1
- package/dist/error-handler.js +2 -0
- package/dist/error-handler.js.map +1 -1
- package/dist/global-options.d.ts +8 -0
- package/dist/global-options.d.ts.map +1 -1
- package/dist/global-options.js +19 -8
- package/dist/global-options.js.map +1 -1
- package/dist/index.js +7 -5
- package/dist/index.js.map +1 -1
- package/dist/output.d.ts +11 -0
- package/dist/output.d.ts.map +1 -1
- package/dist/output.js +25 -6
- package/dist/output.js.map +1 -1
- package/dist/prompt.d.ts +2 -2
- package/dist/prompt.d.ts.map +1 -1
- package/dist/prompt.js +27 -7
- package/dist/prompt.js.map +1 -1
- package/package.json +7 -3
- package/dist/commands/gui.d.ts +0 -21
- package/dist/commands/gui.d.ts.map +0 -1
- package/dist/commands/gui.js +0 -67
- package/dist/commands/gui.js.map +0 -1
- package/dist/commands/provision.d.ts +0 -47
- package/dist/commands/provision.d.ts.map +0 -1
- package/dist/commands/provision.js +0 -444
- package/dist/commands/provision.js.map +0 -1
|
@@ -1,444 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Provision command — declarative tenant infrastructure from YAML/JSON.
|
|
3
|
-
*
|
|
4
|
-
* Reads a YAML (or JSON) provisioning file with a nested structure
|
|
5
|
-
* (organizations → applications → clients/roles/permissions/claims),
|
|
6
|
-
* transforms it into the flat import manifest format, and sends it
|
|
7
|
-
* to the import API via the SDK. All entities are created in a single
|
|
8
|
-
* transaction.
|
|
9
|
-
*
|
|
10
|
-
* Supports three modes:
|
|
11
|
-
* merge (default): skip existing entities, create new
|
|
12
|
-
* overwrite: update existing entities, create new
|
|
13
|
-
* dry-run: preview what would change without applying
|
|
14
|
-
*
|
|
15
|
-
* Usage:
|
|
16
|
-
* porta provision --file infrastructure.yaml
|
|
17
|
-
* porta provision --file infrastructure.yaml --dry-run
|
|
18
|
-
* porta provision --file infrastructure.yaml --mode overwrite
|
|
19
|
-
* porta provision --file infrastructure.yaml --json
|
|
20
|
-
*
|
|
21
|
-
* @module commands/provision
|
|
22
|
-
*/
|
|
23
|
-
import fs from 'node:fs';
|
|
24
|
-
import path from 'node:path';
|
|
25
|
-
import { parse as parseYaml } from 'yaml';
|
|
26
|
-
import { createClient } from '../client-factory.js';
|
|
27
|
-
import { handleError } from '../error-handler.js';
|
|
28
|
-
import { printTable, printJson, success, warn, error as printError } from '../output.js';
|
|
29
|
-
// ============================================================================
|
|
30
|
-
// Slug generation — simple kebab-case conversion
|
|
31
|
-
// ============================================================================
|
|
32
|
-
/**
|
|
33
|
-
* Generate a URL-safe slug from a name.
|
|
34
|
-
*
|
|
35
|
-
* Converts to lowercase, replaces non-alphanumeric chars with hyphens,
|
|
36
|
-
* collapses multiple hyphens, and trims leading/trailing hyphens.
|
|
37
|
-
*/
|
|
38
|
-
function slugify(name) {
|
|
39
|
-
return name
|
|
40
|
-
.toLowerCase()
|
|
41
|
-
.replace(/[^a-z0-9]+/g, '-')
|
|
42
|
-
.replace(/-+/g, '-')
|
|
43
|
-
.replace(/^-|-$/g, '');
|
|
44
|
-
}
|
|
45
|
-
// ============================================================================
|
|
46
|
-
// Duration parser — converts human-friendly durations to ISO dates
|
|
47
|
-
// ============================================================================
|
|
48
|
-
/**
|
|
49
|
-
* Parse a duration string into a future Date.
|
|
50
|
-
*
|
|
51
|
-
* Supports: Nd (days), Nm (months), Ny (years), Nh (hours).
|
|
52
|
-
* Examples: "90d" (90 days), "6m" (6 months), "1y" (1 year), "24h" (24 hours).
|
|
53
|
-
*/
|
|
54
|
-
export function parseDuration(duration) {
|
|
55
|
-
const match = duration.match(/^(\d+)([dmyh])$/);
|
|
56
|
-
if (!match) {
|
|
57
|
-
throw new Error(`Invalid duration format: "${duration}". Use Nd, Nm, Ny, or Nh (e.g., 90d, 6m, 1y, 24h).`);
|
|
58
|
-
}
|
|
59
|
-
const amount = parseInt(match[1], 10);
|
|
60
|
-
const unit = match[2];
|
|
61
|
-
const date = new Date();
|
|
62
|
-
switch (unit) {
|
|
63
|
-
case 'd':
|
|
64
|
-
date.setDate(date.getDate() + amount);
|
|
65
|
-
break;
|
|
66
|
-
case 'm':
|
|
67
|
-
date.setMonth(date.getMonth() + amount);
|
|
68
|
-
break;
|
|
69
|
-
case 'y':
|
|
70
|
-
date.setFullYear(date.getFullYear() + amount);
|
|
71
|
-
break;
|
|
72
|
-
case 'h':
|
|
73
|
-
date.setHours(date.getHours() + amount);
|
|
74
|
-
break;
|
|
75
|
-
}
|
|
76
|
-
return date;
|
|
77
|
-
}
|
|
78
|
-
// ============================================================================
|
|
79
|
-
// File parser — reads YAML or JSON based on extension
|
|
80
|
-
// ============================================================================
|
|
81
|
-
/**
|
|
82
|
-
* Read and parse a provisioning file from disk or stdin.
|
|
83
|
-
*
|
|
84
|
-
* Detects format by file extension (.yaml/.yml for YAML, .json for JSON).
|
|
85
|
-
* When reading from `/dev/stdin` (no extension), defaults to YAML parsing
|
|
86
|
-
* which also handles valid JSON since YAML is a superset of JSON.
|
|
87
|
-
*/
|
|
88
|
-
export function parseProvisioningFile(filePath) {
|
|
89
|
-
const isStdin = filePath === '/dev/stdin';
|
|
90
|
-
if (!isStdin && !fs.existsSync(filePath)) {
|
|
91
|
-
throw new Error(`File not found: ${filePath}`);
|
|
92
|
-
}
|
|
93
|
-
const content = fs.readFileSync(filePath, 'utf-8');
|
|
94
|
-
const ext = path.extname(filePath).toLowerCase();
|
|
95
|
-
if (ext === '.yaml' || ext === '.yml') {
|
|
96
|
-
return parseYaml(content);
|
|
97
|
-
}
|
|
98
|
-
else if (ext === '.json') {
|
|
99
|
-
return JSON.parse(content);
|
|
100
|
-
}
|
|
101
|
-
else if (isStdin || ext === '') {
|
|
102
|
-
return parseYaml(content);
|
|
103
|
-
}
|
|
104
|
-
else {
|
|
105
|
-
throw new Error(`Unsupported file format: ${ext}. Use .yaml, .yml, or .json`);
|
|
106
|
-
}
|
|
107
|
-
}
|
|
108
|
-
/**
|
|
109
|
-
* Transform a nested provisioning file into a flat import manifest.
|
|
110
|
-
*
|
|
111
|
-
* Walks the nested org → app → (clients, roles, permissions, claims) tree
|
|
112
|
-
* and produces flat arrays with explicit organization_slug and application_slug
|
|
113
|
-
* references for each entity.
|
|
114
|
-
*/
|
|
115
|
-
function transformToManifest(input) {
|
|
116
|
-
const manifest = {
|
|
117
|
-
version: input.version,
|
|
118
|
-
organizations: [],
|
|
119
|
-
applications: [],
|
|
120
|
-
clients: [],
|
|
121
|
-
roles: [],
|
|
122
|
-
permissions: [],
|
|
123
|
-
claim_definitions: [],
|
|
124
|
-
users: [],
|
|
125
|
-
application_modules: [],
|
|
126
|
-
role_permission_mappings: [],
|
|
127
|
-
user_role_assignments: [],
|
|
128
|
-
user_claim_values: [],
|
|
129
|
-
};
|
|
130
|
-
if ('allow_passwords' in input) {
|
|
131
|
-
throw new Error('Password provisioning is not supported');
|
|
132
|
-
}
|
|
133
|
-
for (const org of input.organizations) {
|
|
134
|
-
for (const user of org.users ?? []) {
|
|
135
|
-
if (user.password !== undefined) {
|
|
136
|
-
throw new Error('Password provisioning is not supported');
|
|
137
|
-
}
|
|
138
|
-
}
|
|
139
|
-
}
|
|
140
|
-
for (const org of input.organizations) {
|
|
141
|
-
const orgSlug = org.slug ?? slugify(org.name);
|
|
142
|
-
// Add organization
|
|
143
|
-
manifest.organizations.push({
|
|
144
|
-
name: org.name,
|
|
145
|
-
slug: orgSlug,
|
|
146
|
-
default_locale: org.default_locale,
|
|
147
|
-
default_login_methods: org.default_login_methods,
|
|
148
|
-
two_factor_policy: org.two_factor_policy,
|
|
149
|
-
branding_primary_color: org.branding?.primary_color,
|
|
150
|
-
branding_company_name: org.branding?.company_name,
|
|
151
|
-
branding_custom_css: org.branding?.custom_css,
|
|
152
|
-
branding_logo_url: org.branding?.logo_url,
|
|
153
|
-
branding_favicon_url: org.branding?.favicon_url,
|
|
154
|
-
});
|
|
155
|
-
// Flatten users + extract role/claim assignments
|
|
156
|
-
for (const user of org.users ?? []) {
|
|
157
|
-
manifest.users.push({
|
|
158
|
-
email: user.email,
|
|
159
|
-
organization_slug: orgSlug,
|
|
160
|
-
given_name: user.given_name,
|
|
161
|
-
family_name: user.family_name,
|
|
162
|
-
locale: user.locale,
|
|
163
|
-
status: user.status,
|
|
164
|
-
email_verified: user.email_verified,
|
|
165
|
-
});
|
|
166
|
-
for (const roleRef of user.roles ?? []) {
|
|
167
|
-
manifest.user_role_assignments.push({
|
|
168
|
-
email: user.email,
|
|
169
|
-
organization_slug: orgSlug,
|
|
170
|
-
application_slug: roleRef.app,
|
|
171
|
-
role_slug: roleRef.role,
|
|
172
|
-
});
|
|
173
|
-
}
|
|
174
|
-
for (const claimRef of user.claims ?? []) {
|
|
175
|
-
manifest.user_claim_values.push({
|
|
176
|
-
email: user.email,
|
|
177
|
-
organization_slug: orgSlug,
|
|
178
|
-
application_slug: claimRef.app,
|
|
179
|
-
claim_slug: claimRef.claim,
|
|
180
|
-
value: claimRef.value,
|
|
181
|
-
});
|
|
182
|
-
}
|
|
183
|
-
}
|
|
184
|
-
for (const app of org.applications ?? []) {
|
|
185
|
-
const appSlug = app.slug ?? slugify(app.name);
|
|
186
|
-
// Add application
|
|
187
|
-
manifest.applications.push({
|
|
188
|
-
name: app.name,
|
|
189
|
-
slug: appSlug,
|
|
190
|
-
organization_slug: orgSlug,
|
|
191
|
-
description: app.description,
|
|
192
|
-
});
|
|
193
|
-
// Flatten clients
|
|
194
|
-
for (const clientDef of app.clients ?? []) {
|
|
195
|
-
// Validate and flatten secret block
|
|
196
|
-
if (clientDef.secret) {
|
|
197
|
-
if (clientDef.client_type === 'public') {
|
|
198
|
-
throw new Error(`Client "${clientDef.client_name}": secret block not allowed on public clients`);
|
|
199
|
-
}
|
|
200
|
-
if (clientDef.secret.expires_at && clientDef.secret.expires_in) {
|
|
201
|
-
throw new Error(`Client "${clientDef.client_name}": expires_at and expires_in are mutually exclusive`);
|
|
202
|
-
}
|
|
203
|
-
}
|
|
204
|
-
let secretLabel;
|
|
205
|
-
let secretExpiresAt;
|
|
206
|
-
if (clientDef.secret) {
|
|
207
|
-
secretLabel = clientDef.secret.label;
|
|
208
|
-
if (clientDef.secret.expires_at) {
|
|
209
|
-
secretExpiresAt = clientDef.secret.expires_at;
|
|
210
|
-
}
|
|
211
|
-
else if (clientDef.secret.expires_in) {
|
|
212
|
-
secretExpiresAt = parseDuration(clientDef.secret.expires_in).toISOString();
|
|
213
|
-
}
|
|
214
|
-
}
|
|
215
|
-
const { secret: _secretBlock, ...clientFields } = clientDef;
|
|
216
|
-
manifest.clients.push({
|
|
217
|
-
...clientFields,
|
|
218
|
-
application_slug: appSlug,
|
|
219
|
-
organization_slug: orgSlug,
|
|
220
|
-
...(secretLabel !== undefined ? { secret_label: secretLabel } : {}),
|
|
221
|
-
...(secretExpiresAt !== undefined ? { secret_expires_at: secretExpiresAt } : {}),
|
|
222
|
-
});
|
|
223
|
-
}
|
|
224
|
-
// Flatten permissions
|
|
225
|
-
for (const perm of app.permissions ?? []) {
|
|
226
|
-
manifest.permissions.push({
|
|
227
|
-
...perm,
|
|
228
|
-
application_slug: appSlug,
|
|
229
|
-
organization_slug: orgSlug,
|
|
230
|
-
});
|
|
231
|
-
}
|
|
232
|
-
// Flatten roles + extract permission mappings
|
|
233
|
-
for (const role of app.roles ?? []) {
|
|
234
|
-
const roleSlug = role.slug ?? slugify(role.name);
|
|
235
|
-
manifest.roles.push({
|
|
236
|
-
name: role.name,
|
|
237
|
-
slug: roleSlug,
|
|
238
|
-
description: role.description,
|
|
239
|
-
application_slug: appSlug,
|
|
240
|
-
organization_slug: orgSlug,
|
|
241
|
-
});
|
|
242
|
-
if (role.permissions && role.permissions.length > 0) {
|
|
243
|
-
manifest.role_permission_mappings.push({
|
|
244
|
-
role_slug: roleSlug,
|
|
245
|
-
permission_slugs: role.permissions,
|
|
246
|
-
application_slug: appSlug,
|
|
247
|
-
organization_slug: orgSlug,
|
|
248
|
-
});
|
|
249
|
-
}
|
|
250
|
-
}
|
|
251
|
-
// Flatten claim definitions
|
|
252
|
-
for (const claim of app.claim_definitions ?? []) {
|
|
253
|
-
manifest.claim_definitions.push({
|
|
254
|
-
...claim,
|
|
255
|
-
application_slug: appSlug,
|
|
256
|
-
organization_slug: orgSlug,
|
|
257
|
-
});
|
|
258
|
-
}
|
|
259
|
-
// Flatten application modules
|
|
260
|
-
for (const mod of app.modules ?? []) {
|
|
261
|
-
manifest.application_modules.push({
|
|
262
|
-
name: mod.name,
|
|
263
|
-
slug: mod.slug,
|
|
264
|
-
description: mod.description,
|
|
265
|
-
status: mod.status,
|
|
266
|
-
application_slug: appSlug,
|
|
267
|
-
organization_slug: orgSlug,
|
|
268
|
-
});
|
|
269
|
-
}
|
|
270
|
-
}
|
|
271
|
-
}
|
|
272
|
-
// Attach config overrides
|
|
273
|
-
if (input.config) {
|
|
274
|
-
manifest.config = input.config;
|
|
275
|
-
}
|
|
276
|
-
return manifest;
|
|
277
|
-
}
|
|
278
|
-
// ============================================================================
|
|
279
|
-
// Result display helpers
|
|
280
|
-
// ============================================================================
|
|
281
|
-
/**
|
|
282
|
-
* Display a summary of the import result.
|
|
283
|
-
*
|
|
284
|
-
* Shows counts of created/updated/skipped entities, any errors,
|
|
285
|
-
* and client credentials for confidential clients.
|
|
286
|
-
*/
|
|
287
|
-
function displayResult(result, _mode) {
|
|
288
|
-
const isDryRun = result.mode === 'dry-run';
|
|
289
|
-
const label = isDryRun ? 'Dry-run preview' : 'Provisioning complete';
|
|
290
|
-
success(`${label} (${result.mode} mode)`);
|
|
291
|
-
console.log();
|
|
292
|
-
// Summary counts
|
|
293
|
-
const summaryRows = [];
|
|
294
|
-
if (result.created.length > 0) {
|
|
295
|
-
summaryRows.push(['Created', String(result.created.length)]);
|
|
296
|
-
}
|
|
297
|
-
if (result.updated.length > 0) {
|
|
298
|
-
summaryRows.push(['Updated', String(result.updated.length)]);
|
|
299
|
-
}
|
|
300
|
-
if (result.skipped.length > 0) {
|
|
301
|
-
summaryRows.push(['Skipped', String(result.skipped.length)]);
|
|
302
|
-
}
|
|
303
|
-
if ((result.errors?.length ?? 0) > 0) {
|
|
304
|
-
summaryRows.push(['Errors', String(result.errors?.length ?? 0)]);
|
|
305
|
-
}
|
|
306
|
-
if (summaryRows.length > 0) {
|
|
307
|
-
printTable(['Action', 'Count'], summaryRows);
|
|
308
|
-
}
|
|
309
|
-
// Created entities
|
|
310
|
-
if (result.created.length > 0) {
|
|
311
|
-
console.log();
|
|
312
|
-
console.log(' Created:');
|
|
313
|
-
printTable(['Type', 'Slug', 'Name'], result.created.map((e) => [formatTypeName(e.type), e.slug, e.name]));
|
|
314
|
-
}
|
|
315
|
-
// Updated entities
|
|
316
|
-
if (result.updated.length > 0) {
|
|
317
|
-
console.log();
|
|
318
|
-
console.log(' Updated:');
|
|
319
|
-
printTable(['Type', 'Slug', 'Name', 'Changes'], result.updated.map((e) => [
|
|
320
|
-
formatTypeName(e.type),
|
|
321
|
-
e.slug,
|
|
322
|
-
e.name,
|
|
323
|
-
e.changes?.join(', ') ?? '',
|
|
324
|
-
]));
|
|
325
|
-
}
|
|
326
|
-
// Skipped entities
|
|
327
|
-
if (result.skipped.length > 0) {
|
|
328
|
-
console.log();
|
|
329
|
-
console.log(' Skipped:');
|
|
330
|
-
printTable(['Type', 'Slug', 'Reason'], result.skipped.map((e) => [formatTypeName(e.type), e.slug, e.reason]));
|
|
331
|
-
}
|
|
332
|
-
// Errors
|
|
333
|
-
if ((result.errors?.length ?? 0) > 0) {
|
|
334
|
-
console.log();
|
|
335
|
-
printError(`${result.errors?.length ?? 0} error(s):`);
|
|
336
|
-
printTable(['Type', 'Slug', 'Error'], (result.errors ?? []).map((e) => [formatTypeName(e.type), e.slug, e.error]));
|
|
337
|
-
}
|
|
338
|
-
else {
|
|
339
|
-
console.log(` Errors: 0`);
|
|
340
|
-
}
|
|
341
|
-
// Client credentials — shown once, never stored
|
|
342
|
-
if (result.credentials.length > 0) {
|
|
343
|
-
console.log();
|
|
344
|
-
console.log(' Client Credentials:');
|
|
345
|
-
printTable(['Client', 'Client ID', 'Type', 'Secret', 'Label', 'Expires'], result.credentials.map((c) => [
|
|
346
|
-
c.clientName,
|
|
347
|
-
c.clientId ?? '—',
|
|
348
|
-
c.clientType,
|
|
349
|
-
c.credentialWillBeGenerated ? 'would be generated' : (c.secretPlaintext ?? '—'),
|
|
350
|
-
c.secretLabel ?? '—',
|
|
351
|
-
c.secretExpiresAt ?? '—',
|
|
352
|
-
]));
|
|
353
|
-
if (!isDryRun) {
|
|
354
|
-
warn('Save these credentials now — secrets cannot be retrieved later.');
|
|
355
|
-
}
|
|
356
|
-
}
|
|
357
|
-
}
|
|
358
|
-
/**
|
|
359
|
-
* Format an entity type name for display (e.g., "claim_definitions" → "Claim Definitions").
|
|
360
|
-
*/
|
|
361
|
-
function formatTypeName(type) {
|
|
362
|
-
return type
|
|
363
|
-
.split('_')
|
|
364
|
-
.map((w) => w.charAt(0).toUpperCase() + w.slice(1))
|
|
365
|
-
.join(' ');
|
|
366
|
-
}
|
|
367
|
-
export const provisionCommand = {
|
|
368
|
-
command: 'provision',
|
|
369
|
-
describe: 'Provision tenant infrastructure from a YAML or JSON file',
|
|
370
|
-
builder: (yargs) => yargs
|
|
371
|
-
.option('file', {
|
|
372
|
-
alias: 'f',
|
|
373
|
-
type: 'string',
|
|
374
|
-
describe: 'Path to provisioning YAML or JSON file',
|
|
375
|
-
demandOption: true,
|
|
376
|
-
})
|
|
377
|
-
.option('mode', {
|
|
378
|
-
type: 'string',
|
|
379
|
-
describe: 'Import mode: merge (skip existing) or overwrite (update existing)',
|
|
380
|
-
choices: ['merge', 'overwrite'],
|
|
381
|
-
default: 'merge',
|
|
382
|
-
})
|
|
383
|
-
.option('dry-run', {
|
|
384
|
-
type: 'boolean',
|
|
385
|
-
describe: 'Preview what would change without applying',
|
|
386
|
-
default: false,
|
|
387
|
-
}),
|
|
388
|
-
handler: async (argv) => {
|
|
389
|
-
try {
|
|
390
|
-
const isJson = argv.json;
|
|
391
|
-
const isDryRun = argv['dry-run'];
|
|
392
|
-
// 1. Read and parse provisioning file
|
|
393
|
-
if (!isJson) {
|
|
394
|
-
console.log(`Reading ${argv.file}...`);
|
|
395
|
-
}
|
|
396
|
-
const rawData = parseProvisioningFile(argv.file);
|
|
397
|
-
// 2. Basic validation
|
|
398
|
-
const data = rawData;
|
|
399
|
-
if (!data.version || !data.organizations || !Array.isArray(data.organizations)) {
|
|
400
|
-
throw new Error('Invalid provisioning file: must contain "version" and "organizations" array');
|
|
401
|
-
}
|
|
402
|
-
// 3. Transform nested → flat manifest
|
|
403
|
-
const manifest = transformToManifest(data);
|
|
404
|
-
if (!isJson) {
|
|
405
|
-
const entityCount = manifest.organizations.length +
|
|
406
|
-
manifest.applications.length +
|
|
407
|
-
manifest.clients.length +
|
|
408
|
-
manifest.roles.length +
|
|
409
|
-
manifest.permissions.length +
|
|
410
|
-
manifest.claim_definitions.length +
|
|
411
|
-
manifest.users.length;
|
|
412
|
-
const mappingCount = manifest.role_permission_mappings.length;
|
|
413
|
-
const hasConfig = !!manifest.config;
|
|
414
|
-
console.log(`Found ${entityCount} entities, ${mappingCount} role-permission mappings${hasConfig ? ', config overrides' : ''}`);
|
|
415
|
-
console.log();
|
|
416
|
-
}
|
|
417
|
-
// 4. Determine import mode
|
|
418
|
-
const importMode = isDryRun ? 'dry-run' : argv.mode;
|
|
419
|
-
// 5. Send via SDK imports.provision()
|
|
420
|
-
const client = createClient(argv);
|
|
421
|
-
const sdkManifest = {
|
|
422
|
-
manifest: manifest,
|
|
423
|
-
mode: importMode,
|
|
424
|
-
};
|
|
425
|
-
const result = await client.imports.provision(sdkManifest);
|
|
426
|
-
// 6. Display results
|
|
427
|
-
if (isJson) {
|
|
428
|
-
printJson(result);
|
|
429
|
-
}
|
|
430
|
-
else {
|
|
431
|
-
displayResult(result, importMode);
|
|
432
|
-
}
|
|
433
|
-
// 7. Show dry-run warning
|
|
434
|
-
if (isDryRun && !isJson) {
|
|
435
|
-
console.log();
|
|
436
|
-
warn('Dry-run mode — no changes were applied. Remove --dry-run to apply.');
|
|
437
|
-
}
|
|
438
|
-
}
|
|
439
|
-
catch (err) {
|
|
440
|
-
handleError(err, argv.verbose);
|
|
441
|
-
}
|
|
442
|
-
},
|
|
443
|
-
};
|
|
444
|
-
//# sourceMappingURL=provision.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/commands/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAI1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzF,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,oDAAoD,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;YACtC,MAAM;QACR,KAAK,GAAG;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;YACxC,MAAM;QACR,KAAK,GAAG;YACN,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,CAAC;YAC9C,MAAM;QACR,KAAK,GAAG;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;YACxC,MAAM;IACV,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,sDAAsD;AACtD,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,OAAO,GAAG,QAAQ,KAAK,YAAY,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,6BAA6B,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAsND;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAuB;IAClD,MAAM,QAAQ,GAAiB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,EAAE;QACf,iBAAiB,EAAE,EAAE;QACrB,KAAK,EAAE,EAAE;QACT,mBAAmB,EAAE,EAAE;QACvB,wBAAwB,EAAE,EAAE;QAC5B,qBAAqB,EAAE,EAAE;QACzB,iBAAiB,EAAE,EAAE;KACtB,CAAC;IAEF,IAAI,iBAAiB,IAAI,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE9C,mBAAmB;QACnB,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;YAChD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,sBAAsB,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa;YACnD,qBAAqB,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY;YACjD,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU;YAC7C,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ;YACzC,oBAAoB,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW;SAChD,CAAC,CAAC;QAEH,iDAAiD;QACjD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACnC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,iBAAiB,EAAE,OAAO;gBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC;YAEH,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACvC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,iBAAiB,EAAE,OAAO;oBAC1B,gBAAgB,EAAE,OAAO,CAAC,GAAG;oBAC7B,SAAS,EAAE,OAAO,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,iBAAiB,EAAE,OAAO;oBAC1B,gBAAgB,EAAE,QAAQ,CAAC,GAAG;oBAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;oBAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAE9C,kBAAkB;YAClB,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;gBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,OAAO;gBACb,iBAAiB,EAAE,OAAO;gBAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;YAEH,kBAAkB;YAClB,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBAC1C,oCAAoC;gBACpC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACrB,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;wBACvC,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,CAAC,WAAW,+CAA+C,CAChF,CAAC;oBACJ,CAAC;oBACD,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBAC/D,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,CAAC,WAAW,qDAAqD,CACtF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,WAA+B,CAAC;gBACpC,IAAI,eAAmC,CAAC;gBAExC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACrB,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;oBACrC,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBAChC,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;oBAChD,CAAC;yBAAM,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBACvC,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC;gBAE5D,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpB,GAAG,YAAY;oBACf,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;oBAC1B,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjF,CAAC,CAAC;YACL,CAAC;YAED,sBAAsB;YACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACzC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;oBACxB,GAAG,IAAI;oBACP,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,8CAA8C;YAC9C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEjD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC;wBACrC,SAAS,EAAE,QAAQ;wBACnB,gBAAgB,EAAE,IAAI,CAAC,WAAW;wBAClC,gBAAgB,EAAE,OAAO;wBACzB,iBAAiB,EAAE,OAAO;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;gBAChD,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC9B,GAAG,KAAK;oBACR,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBACpC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,gBAAgB,EAAE,OAAO;oBACzB,iBAAiB,EAAE,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAS,aAAa,CAAC,MAAoB,EAAE,KAAa;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAErE,OAAO,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,iBAAiB;IACjB,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,UAAU,CACR,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,UAAU,CACR,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EACnC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACxB,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;SAC5B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,UAAU,CACR,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAC1B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,UAAU,CACR,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EACzB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,UAAU,CACR,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAC7D,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ,IAAI,GAAG;YACjB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;YAC/E,CAAC,CAAC,WAAW,IAAI,GAAG;YACpB,CAAC,CAAC,eAAe,IAAI,GAAG;SACzB,CAAC,CACH,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAYD,MAAM,CAAC,MAAM,gBAAgB,GAAmD;IAC9E,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,0DAA0D;IACpE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,wCAAwC;QAClD,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,mEAAmE;QAC7E,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,CAAU;QACxC,OAAO,EAAE,OAAgB;KAC1B,CAAC;SACD,MAAM,CAAC,SAAS,EAAE;QACjB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,KAAK;KACf,CAAC;IAEN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAEjC,sCAAsC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjD,sBAAsB;YACtB,MAAM,IAAI,GAAG,OAA2B,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,WAAW,GACf,QAAQ,CAAC,aAAa,CAAC,MAAM;oBAC7B,QAAQ,CAAC,YAAY,CAAC,MAAM;oBAC5B,QAAQ,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ,CAAC,KAAK,CAAC,MAAM;oBACrB,QAAQ,CAAC,WAAW,CAAC,MAAM;oBAC3B,QAAQ,CAAC,iBAAiB,CAAC,MAAM;oBACjC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;gBACxB,MAAM,YAAY,GAAG,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC;gBAC9D,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpC,OAAO,CAAC,GAAG,CACT,SAAS,WAAW,cAAc,YAAY,4BAA4B,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,CAClH,CAAC;gBACF,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,2BAA2B;YAC3B,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAEpD,sCAAsC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,WAAW,GAAmB;gBAClC,QAAQ,EAAE,QAA8C;gBACxD,IAAI,EAAE,UAAU;aACjB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAE3D,qBAAqB;YACrB,IAAI,MAAM,EAAE,CAAC;gBACX,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACpC,CAAC;YAED,0BAA0B;YAC1B,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,oEAAoE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF,CAAC"}
|