@prisma/composer-prisma-cloud 0.2.0 → 0.3.0-dev.1

package/dist/control.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"control.mjs","names":["Config","attempt","managementClientLayer","Prisma.Bucket","Prisma.BucketKey","Prisma.ComputeService","Prisma.EnvironmentVariable","Prisma.packageComputeArtifact","Prisma.Deployment","Prisma.Database","Prisma.Connection","Prisma.ServiceKey","Prisma.COMPUTE_REGIONS","Prisma.providers","Prisma.ServiceKeyProvider"],"sources":["../../../1-prisma-cloud/0-lowering/lowering/dist/http-CJM0E6rj.mjs","../../../1-prisma-cloud/0-lowering/lowering/dist/buckets.mjs","../../../1-prisma-cloud/0-lowering/lowering/dist/compute.mjs","../../../1-prisma-cloud/0-lowering/lowering/dist/postgres.mjs","../../../1-prisma-cloud/0-lowering/lowering/dist/index.mjs","../../../1-prisma-cloud/0-lowering/lowering/dist/state.mjs","../../../1-prisma-cloud/1-extensions/target/dist/control.mjs"],"sourcesContent":["import { createManagementApiClient } from \"@prisma/management-api-sdk\";\nimport * as Context from \"effect/Context\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Redacted from \"effect/Redacted\";\nimport * as Config from \"effect/Config\";\nimport * as Data from \"effect/Data\";\n//#region src/credentials.ts\n/**\n* The Prisma service token used to authenticate Management API calls. Kept\n* as a Redacted value so it never lands in logs or error output.\n*/\nvar PrismaCredentials = class extends Context.Service()(\"PrismaCredentials\") {};\n/** Resolve the token from the `PRISMA_SERVICE_TOKEN` environment variable. */\nconst fromEnv = () => Layer.effect(PrismaCredentials, Effect.gen(function* () {\n\treturn { token: yield* Config.redacted(\"PRISMA_SERVICE_TOKEN\") };\n}));\n//#endregion\n//#region src/client.ts\n/**\n* The typed Prisma Management API client, built once from the resolved\n* credentials. Providers yield this in their outer Effect and call it inside\n* `reconcile` / `delete`.\n*/\nvar ManagementClient = class extends Context.Service()(\"PrismaManagementClient\") {};\nconst layer = () => Layer.effect(ManagementClient, Effect.gen(function* () {\n\tconst { token } = yield* PrismaCredentials;\n\treturn createManagementApiClient({ token: Redacted.value(token) });\n}));\n//#endregion\n//#region src/http.ts\n/** A non-2xx response from the Management API (or a transport failure). */\nvar PrismaApiError = class extends Data.TaggedError(\"PrismaApiError\") {};\nconst attempt = (f) => Effect.tryPromise({\n\ttry: f,\n\tcatch: (cause) => new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: String(cause)\n\t})\n});\nconst fail = (r) => Effect.fail(new PrismaApiError({\n\tstatus: r.response.status,\n\tmessage: JSON.stringify(r.error)\n}));\n/** Unwrap `data`, failing on any API error. Preserves the SDK's response type. */\nconst call = (f) => attempt(f).pipe(Effect.flatMap((r) => r.error !== void 0 || r.data === void 0 ? fail(r) : Effect.succeed(r.data)));\n/** Unwrap `data`, mapping a 404 to `undefined` (resource gone / not found). */\nconst callOptional = (f) => attempt(f).pipe(Effect.flatMap((r) => r.response.status === 404 ? Effect.succeed(void 0) : r.error !== void 0 ? fail(r) : Effect.succeed(r.data)));\n/** Fire-and-forget a call, tolerating a 404 (already deleted). */\nconst callVoid = (f) => attempt(f).pipe(Effect.flatMap((r) => r.response.status === 404 || r.error === void 0 ? Effect.void : fail(r)));\n//#endregion\nexport { ManagementClient as a, fromEnv as c, callVoid as i, call as n, layer as o, callOptional as r, PrismaCredentials as s, PrismaApiError as t };\n\n//# sourceMappingURL=http-CJM0E6rj.mjs.map","import { a as ManagementClient, i as callVoid, n as call, r as callOptional } from \"./http-CJM0E6rj.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Redacted from \"effect/Redacted\";\nimport * as Provider from \"alchemy/Provider\";\nimport { Resource } from \"alchemy\";\n//#region src/buckets/Bucket.ts\n/** A Prisma **Object Store bucket** inside a project. */\nconst Bucket = Resource(\"Prisma.Bucket\");\nconst BucketProvider = () => Provider.effect(Bucket, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tconst observed = output?.id ? yield* callOptional(() => client.GET(\"/v1/buckets/{bucketId}\", { params: { path: { bucketId: output.id } } })) : void 0;\n\t\t\tif (observed) return {\n\t\t\t\tid: observed.data.id,\n\t\t\t\tname: observed.data.name\n\t\t\t};\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/buckets\", { body: {\n\t\t\t\tprojectId: news.projectId,\n\t\t\t\tname: news.name,\n\t\t\t\t...news.branchId !== void 0 ? { branchId: news.branchId } : {}\n\t\t\t} }));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tname: created.data.name\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/buckets/{bucketId}\", { params: { path: { bucketId: output.id } } }));\n\t\t}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.id) return void 0;\n\t\t\tconst b = yield* callOptional(() => client.GET(\"/v1/buckets/{bucketId}\", { params: { path: { bucketId: output.id } } }));\n\t\t\treturn b ? {\n\t\t\t\tid: b.data.id,\n\t\t\t\tname: b.data.name\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/buckets/BucketKey.ts\n/** A **bucket access key** for a Prisma Object Store bucket — yields the S3 credentials. */\nconst BucketKey = Resource(\"Prisma.BucketKey\");\nconst BucketKeyProvider = () => Provider.effect(BucketKey, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\n\t\t\t\"id\",\n\t\t\t\"bucketId\",\n\t\t\t\"secretAccessKey\",\n\t\t\t\"accessKeyId\",\n\t\t\t\"endpoint\",\n\t\t\t\"bucketName\"\n\t\t],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tif (output?.id) return output;\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/buckets/{bucketId}/keys\", {\n\t\t\t\tparams: { path: { bucketId: news.bucketId } },\n\t\t\t\tbody: {\n\t\t\t\t\tname: news.name,\n\t\t\t\t\trole: news.role\n\t\t\t\t}\n\t\t\t}));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tbucketId: news.bucketId,\n\t\t\t\taccessKeyId: created.data.accessKeyId,\n\t\t\t\tsecretAccessKey: Redacted.make(created.data.secretAccessKey),\n\t\t\t\tendpoint: created.data.endpoint,\n\t\t\t\tbucketName: created.data.bucketName\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/buckets/{bucketId}/keys/{keyId}\", { params: { path: {\n\t\t\t\tbucketId: output.bucketId,\n\t\t\t\tkeyId: output.id\n\t\t\t} } }));\n\t\t})\n\t};\n}));\n//#endregion\nexport { Bucket, BucketKey, BucketKeyProvider, BucketProvider };\n\n//# sourceMappingURL=buckets.mjs.map","import { a as ManagementClient, i as callVoid, n as call, r as callOptional, t as PrismaApiError } from \"./http-CJM0E6rj.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Provider from \"alchemy/Provider\";\nimport { Resource } from \"alchemy\";\nimport * as Schedule from \"effect/Schedule\";\nimport * as fs from \"node:fs\";\nimport * as crypto$1 from \"node:crypto\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\nimport * as zlib from \"node:zlib\";\n//#region src/compute/ComputeService.ts\n/**\n* Stopping a deployment before the app that owns it can be\n* deleted is asynchronous on the platform's side: DELETE can 409 with this\n* message while the deployment is still winding down. Retrying blindly on\n* every API error would mask real failures (bad auth, a genuinely conflicting\n* state, etc.), so this only matches the platform's specific \"not delete-safe\n* yet\" wording — everything else fails immediately, as before.\n*/\nconst isDeleteNotSafeYet = (error) => error.message.includes(\"did not reach a delete-safe state\");\n/**\n* Backs off exponentially from 2s, capped at 5 minutes total — long enough\n* for the platform to finish stopping the deployment, short enough to still\n* fail loudly (rather than hang forever) if it never does.\n*/\nconst deleteSafeRetrySchedule = Schedule.both(Schedule.exponential(\"2 seconds\", 2), Schedule.during(\"5 minutes\"));\n/** Every region Prisma Compute serves — the runtime source of truth; `ComputeRegion` is derived from it so the two can never drift. */\nconst COMPUTE_REGIONS = [\n\t\"us-east-1\",\n\t\"us-west-1\",\n\t\"eu-west-3\",\n\t\"eu-central-1\",\n\t\"ap-northeast-1\",\n\t\"ap-southeast-1\"\n];\n/** A Prisma **Compute service** — the stable app identity behind a project. */\nconst ComputeService = Resource(\"Prisma.ComputeService\");\nconst ComputeServiceProvider = () => Provider.effect(ComputeService, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tconst observed = output?.id ? yield* callOptional(() => client.GET(\"/v1/apps/{appId}\", { params: { path: { appId: output.id } } })) : void 0;\n\t\t\tif (observed) return {\n\t\t\t\tid: observed.data.id,\n\t\t\t\tname: observed.data.name,\n\t\t\t\tendpointDomain: observed.data.appEndpointDomain\n\t\t\t};\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/apps\", { body: {\n\t\t\t\tdisplayName: news.name,\n\t\t\t\tprojectId: news.projectId,\n\t\t\t\t...news.region && { regionId: news.region },\n\t\t\t\t...news.branchId !== void 0 && { branchId: news.branchId }\n\t\t\t} }));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tname: created.data.name,\n\t\t\t\tendpointDomain: created.data.appEndpointDomain\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/apps/{appId}\", { params: { path: { appId: output.id } } })).pipe(Effect.retry({\n\t\t\t\tschedule: deleteSafeRetrySchedule,\n\t\t\t\twhile: isDeleteNotSafeYet\n\t\t\t}));\n\t\t}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.id) return void 0;\n\t\t\tconst s = yield* callOptional(() => client.GET(\"/v1/apps/{appId}\", { params: { path: { appId: output.id } } }));\n\t\t\treturn s ? {\n\t\t\t\tid: s.data.id,\n\t\t\t\tname: s.data.name,\n\t\t\t\tendpointDomain: s.data.appEndpointDomain\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/compute/Deployment.ts\n/**\n* A **deployment** of a Prisma app — creates a deployment, uploads\n* its artifact, starts the VM, waits for it to run, then promotes it to the\n* app's stable endpoint.\n*/\nconst Deployment = Resource(\"Prisma.Deployment\");\nconst DeploymentProvider = () => Provider.effect(Deployment, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst waitForRunning = (deploymentId) => call(() => client.GET(\"/v1/deployments/{deploymentId}\", { params: { path: { deploymentId } } })).pipe(Effect.flatMap((v) => v.data.status === \"running\" ? Effect.void : Effect.fail(new PrismaApiError({\n\t\tstatus: 409,\n\t\tmessage: `deployment ${deploymentId} is ${v.data.status}, not running`\n\t}))), Effect.retry(Schedule.both(Schedule.spaced(\"2 seconds\"), Schedule.during(\"2 minutes\"))));\n\treturn {\n\t\tstables: [],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news }) {\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/apps/{appId}/deployments\", {\n\t\t\t\tparams: { path: { appId: news.computeServiceId } },\n\t\t\t\tbody: news.port !== void 0 ? { portMapping: { http: news.port } } : {}\n\t\t\t}));\n\t\t\tconst deploymentId = created.data.id;\n\t\t\tif (created.data.uploadUrl) {\n\t\t\t\tconst uploadUrl = created.data.uploadUrl;\n\t\t\t\tconst artifact = yield* Effect.try({\n\t\t\t\t\ttry: () => fs.readFileSync(news.artifactPath),\n\t\t\t\t\tcatch: (cause) => new PrismaApiError({\n\t\t\t\t\t\tstatus: 0,\n\t\t\t\t\t\tmessage: `failed to read artifact ${news.artifactPath}: ${String(cause)}`\n\t\t\t\t\t})\n\t\t\t\t});\n\t\t\t\tyield* Effect.tryPromise({\n\t\t\t\t\ttry: async () => {\n\t\t\t\t\t\tconst res = await fetch(uploadUrl, {\n\t\t\t\t\t\t\tmethod: \"PUT\",\n\t\t\t\t\t\t\tbody: artifact\n\t\t\t\t\t\t});\n\t\t\t\t\t\tif (!res.ok) throw new PrismaApiError({\n\t\t\t\t\t\t\tstatus: res.status,\n\t\t\t\t\t\t\tmessage: `artifact upload failed: ${res.status} ${res.statusText}`\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t\tcatch: (cause) => cause instanceof PrismaApiError ? cause : new PrismaApiError({\n\t\t\t\t\t\tstatus: 0,\n\t\t\t\t\t\tmessage: String(cause)\n\t\t\t\t\t})\n\t\t\t\t});\n\t\t\t}\n\t\t\tyield* call(() => client.POST(\"/v1/deployments/{deploymentId}/start\", { params: { path: { deploymentId } } }));\n\t\t\tyield* waitForRunning(deploymentId);\n\t\t\tconst deployedUrl = (yield* call(() => client.POST(\"/v1/apps/{appId}/promote\", {\n\t\t\t\tparams: { path: { appId: news.computeServiceId } },\n\t\t\t\tbody: { deploymentId }\n\t\t\t}))).data.appEndpointDomain;\n\t\t\treturn {\n\t\t\t\tdeploymentId,\n\t\t\t\t...deployedUrl !== void 0 && { deployedUrl }\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* () {}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.deploymentId) return void 0;\n\t\t\tconst v = yield* callOptional(() => client.GET(\"/v1/deployments/{deploymentId}\", { params: { path: { deploymentId: output.deploymentId } } }));\n\t\t\treturn v ? {\n\t\t\t\tdeploymentId: v.data.id,\n\t\t\t\t...v.data.previewDomain && { deployedUrl: v.data.previewDomain }\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/compute/EnvironmentVariable.ts\n/**\n* A project-scoped **environment variable** that Compute injects into the\n* project's services from their attached branch (e.g. wiring one module's URL into\n* another).\n*/\nconst EnvironmentVariable = Resource(\"Prisma.EnvironmentVariable\");\nconst EnvironmentVariableProvider = () => Provider.effect(EnvironmentVariable, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tconst cls = news.class ?? \"production\";\n\t\t\tlet id = output?.id;\n\t\t\tif (id !== void 0) {\n\t\t\t\tconst priorId = id;\n\t\t\t\tif (!(yield* callOptional(() => client.GET(\"/v1/environment-variables/{envVarId}\", { params: { path: { envVarId: priorId } } })))) id = void 0;\n\t\t\t}\n\t\t\tif (id === void 0) {\n\t\t\t\tconst matchId = (yield* call(() => client.GET(\"/v1/environment-variables\", { params: { query: {\n\t\t\t\t\tprojectId: news.projectId,\n\t\t\t\t\tclass: cls,\n\t\t\t\t\tkey: news.key\n\t\t\t\t} } }))).data?.[0]?.id;\n\t\t\t\tif (matchId !== void 0) {\n\t\t\t\t\tif (!(news.key === \"DATABASE_URL\" || news.key === \"DATABASE_URL_POOLED\")) throw new Error(`EnvironmentVariable \"${news.key}\" (project \"${news.projectId}\", class \"${cls}\") exists but is untracked in this deploy state — refusing to overwrite a reserved COMPOSER_ key. Restore this deploy's hosted state, or remove the variable to let this deploy recreate it.`);\n\t\t\t\t\tid = matchId;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (id !== void 0) {\n\t\t\t\tconst targetId = id;\n\t\t\t\tyield* call(() => client.PATCH(\"/v1/environment-variables/{envVarId}\", {\n\t\t\t\t\tparams: { path: { envVarId: targetId } },\n\t\t\t\t\tbody: { value: news.value }\n\t\t\t\t}));\n\t\t\t\treturn {\n\t\t\t\t\tid,\n\t\t\t\t\tkey: news.key\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/environment-variables\", { body: {\n\t\t\t\tprojectId: news.projectId,\n\t\t\t\tclass: cls,\n\t\t\t\tkey: news.key,\n\t\t\t\tvalue: news.value,\n\t\t\t\t...news.branchId ? { branchId: news.branchId } : {}\n\t\t\t} }));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tkey: created.data.key\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/environment-variables/{envVarId}\", { params: { path: { envVarId: output.id } } }));\n\t\t}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.id) return void 0;\n\t\t\tconst v = yield* callOptional(() => client.GET(\"/v1/environment-variables/{envVarId}\", { params: { path: { envVarId: output.id } } }));\n\t\t\treturn v ? {\n\t\t\t\tid: v.data.id,\n\t\t\t\tkey: v.data.key\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/compute/artifact.ts\n/**\n* Assembles a Prisma Compute artifact: the app-built bundle plus the\n* extension-printed bootstrap and manifest, tarred and gzipped deterministically\n* (fixed mtimes, sorted entry order) so an unchanged service noops on\n* redeploy — a rebuild is the only thing that changes the hash. Lives here\n* (not in @prisma/composer-prisma-cloud/control) because it needs node:fs/node:zlib,\n* which the extension's shipped src may never import (invariant 5).\n*/\nconst MANIFEST_VERSION = \"1\";\n/** Finds main.js/main.mjs in a bundle dir when no explicit entry is given. */\nfunction resolveEntry(bundleDir, entry) {\n\tif (entry !== void 0) return entry;\n\tconst found = fs.readdirSync(bundleDir).find((f) => /^main\\.m?js$/.test(f));\n\tif (found === void 0) throw new Error(`no main.js/main.mjs found in bundle dir ${bundleDir}`);\n\treturn found;\n}\n/** All files under `dir`, as dir-relative POSIX paths, in sorted order. A\n* symlink is a hard error: deploy bundles must be flat (ADR-0005), and the\n* user's build owns flattening — dereferencing here would relink the tree and\n* risk packaging files from outside it. */\nfunction walkFiles(dir) {\n\tconst out = [];\n\tconst visit = (sub) => {\n\t\tfor (const entry of fs.readdirSync(path.join(dir, sub), { withFileTypes: true })) {\n\t\t\tconst rel = sub.length > 0 ? `${sub}/${entry.name}` : entry.name;\n\t\t\tif (entry.isSymbolicLink()) throw new Error(`bundle contains a symlink at ${rel} — deploy bundles must be flat; materialize links in your build (e.g. cp -RL) so the tree is self-contained.`);\n\t\t\tif (entry.isDirectory()) visit(rel);\n\t\t\telse out.push(rel);\n\t\t}\n\t};\n\tvisit(\"\");\n\treturn out.sort();\n}\nfunction octal(value, length) {\n\treturn `${value.toString(8).padStart(length - 1, \"0\")}\\0`;\n}\n/** Splits a path into ustar's name (<=100 bytes) + prefix (<=155 bytes) fields. */\nfunction splitUstarPath(relPath) {\n\tif (Buffer.byteLength(relPath, \"utf8\") <= 100) return {\n\t\tname: relPath,\n\t\tprefix: \"\"\n\t};\n\tfor (let i = relPath.length - 1; i >= 0; i--) {\n\t\tif (relPath[i] !== \"/\") continue;\n\t\tconst prefix = relPath.slice(0, i);\n\t\tconst name = relPath.slice(i + 1);\n\t\tif (Buffer.byteLength(prefix, \"utf8\") <= 155 && Buffer.byteLength(name, \"utf8\") <= 100) return {\n\t\t\tname,\n\t\t\tprefix\n\t\t};\n\t}\n\tthrow new Error(`path too long for a ustar tar entry: ${relPath}`);\n}\nfunction ustarHeader(relPath, size) {\n\tconst { name, prefix } = splitUstarPath(relPath);\n\tconst buf = Buffer.alloc(512);\n\tbuf.write(name, 0, 100, \"utf8\");\n\tbuf.write(octal(420, 8), 100, 8, \"utf8\");\n\tbuf.write(octal(0, 8), 108, 8, \"utf8\");\n\tbuf.write(octal(0, 8), 116, 8, \"utf8\");\n\tbuf.write(octal(size, 12), 124, 12, \"utf8\");\n\tbuf.write(octal(0, 12), 136, 12, \"utf8\");\n\tbuf.write(\"        \", 148, 8, \"utf8\");\n\tbuf.write(\"0\", 156, 1, \"utf8\");\n\tbuf.write(\"ustar\\0\", 257, 6, \"utf8\");\n\tbuf.write(\"00\", 263, 2, \"utf8\");\n\tbuf.write(prefix, 345, 155, \"utf8\");\n\tlet sum = 0;\n\tfor (const b of buf) sum += b;\n\tbuf.write(`${sum.toString(8).padStart(6, \"0\")}\\0 `, 148, 8, \"utf8\");\n\treturn buf;\n}\nfunction createDeterministicTarGz(entries) {\n\tconst sorted = [...entries].sort((a, b) => a.relPath.localeCompare(b.relPath));\n\tconst chunks = [];\n\tfor (const entry of sorted) {\n\t\tchunks.push(ustarHeader(entry.relPath, entry.content.length));\n\t\tchunks.push(entry.content);\n\t\tconst pad = (512 - entry.content.length % 512) % 512;\n\t\tif (pad > 0) chunks.push(Buffer.alloc(pad));\n\t}\n\tchunks.push(Buffer.alloc(1024));\n\treturn zlib.gzipSync(Buffer.concat(chunks));\n}\n/**\n* Prints the bootstrap + manifest and tars them with the bundle into a\n* deterministic artifact. If bundleDir doesn't exist (e.g. `alchemy destroy`\n* run before any build), returns a placeholder rather than throwing — the\n* artifact is never read on destroy.\n*/\nfunction packageComputeArtifact(opts) {\n\tif (!fs.existsSync(opts.bundleDir)) return {\n\t\tpath: \"\",\n\t\tsha256: \"absent\"\n\t};\n\tconst bootstrap = `import main from \"./${resolveEntry(opts.bundleDir, opts.bundleEntry)}\";\\nawait main.run(${JSON.stringify(opts.address)}, () => import(${JSON.stringify(`./${opts.appEntry}`)}));\\n`;\n\tconst manifest = `${JSON.stringify({\n\t\tmanifestVersion: MANIFEST_VERSION,\n\t\tentrypoint: \"bootstrap.js\"\n\t}, null, 2)}\\n`;\n\tconst files = walkFiles(opts.bundleDir).map((relPath) => ({\n\t\trelPath,\n\t\tcontent: fs.readFileSync(path.join(opts.bundleDir, relPath))\n\t}));\n\tfiles.push({\n\t\trelPath: \"bootstrap.js\",\n\t\tcontent: Buffer.from(bootstrap, \"utf8\")\n\t});\n\tfiles.push({\n\t\trelPath: \"compute.manifest.json\",\n\t\tcontent: Buffer.from(manifest, \"utf8\")\n\t});\n\tfiles.push({\n\t\trelPath: \"bunfig.toml\",\n\t\tcontent: Buffer.from(\"[install]\\nauto = \\\"disable\\\"\\n\", \"utf8\")\n\t});\n\tconst gz = createDeterministicTarGz(files);\n\tconst sha256 = crypto$1.createHash(\"sha256\").update(gz).digest(\"hex\");\n\tconst outDir = path.join(os.tmpdir(), `prisma-composer-compute-${String(os.userInfo().uid)}`, sha256.slice(0, 16));\n\tfs.mkdirSync(outDir, { recursive: true });\n\tconst outPath = path.join(outDir, `${opts.id}.tar.gz`);\n\tconst tmpPath = path.join(outDir, `.${opts.id}.${crypto$1.randomUUID()}.tmp`);\n\tfs.writeFileSync(tmpPath, gz);\n\tfs.renameSync(tmpPath, outPath);\n\treturn {\n\t\tpath: outPath,\n\t\tsha256\n\t};\n}\n//#endregion\n//#region src/compute/ServiceKey.ts\n/**\n* The `ServiceKey` Alchemy resource (ADR-0030) — mints a random 256-bit key\n* ONCE at create and keeps it STABLE across deploys, so an unchanged edge\n* no-ops on redeploy. Same mint-once-stable lifecycle as `S3Credentials`\n* (`packages/1-prisma-cloud/1-extensions/target/src/s3-credentials-resource.ts`):\n* Web Crypto only (`crypto.getRandomValues` — no `node:` import), persisted in\n* Alchemy state; on every later apply the provider returns the persisted\n* attributes (`reconcile`'s `output`) unchanged. One resource per RPC edge;\n* rotation is destroy/recreate.\n*/\n/** The `ServiceKey` resource constructor — `yield* Prisma.ServiceKey(id, {})` in the lowering. */\nconst ServiceKey = Resource(\"PrismaCloud.ServiceKey\");\n/** A fresh 256-bit key as 64 lowercase hex chars (Web Crypto — no node import). */\nfunction mintServiceKey() {\n\tconst bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(32));\n\treturn { value: Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\") };\n}\n/**\n* The `ServiceKey` provider service. `reconcile` runs for create and update;\n* it returns the persisted `output` when present (a redeploy reuses the\n* stored key — the no-op property) and mints a fresh key only on first\n* create. Nothing to enumerate (`list` → `[]`) or tear down (`delete` →\n* no-op; the key lives only in state).\n*/\nconst serviceKeyProviderService = {\n\tlist: () => Effect.succeed([]),\n\treconcile: ({ output }) => Effect.sync(() => output ?? mintServiceKey()),\n\tdelete: () => Effect.void\n};\n/** The `ServiceKey` provider layer — merged into the Prisma Cloud extension's `providers()`. */\nconst ServiceKeyProvider = () => Provider.effect(ServiceKey, Effect.succeed(serviceKeyProviderService));\n//#endregion\nexport { COMPUTE_REGIONS, ComputeService, ComputeServiceProvider, Deployment, DeploymentProvider, EnvironmentVariable, EnvironmentVariableProvider, ServiceKey, ServiceKeyProvider, deleteSafeRetrySchedule, isDeleteNotSafeYet, mintServiceKey, packageComputeArtifact, serviceKeyProviderService };\n\n//# sourceMappingURL=compute.mjs.map","import { a as ManagementClient, i as callVoid, n as call, r as callOptional, t as PrismaApiError } from \"./http-CJM0E6rj.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Redacted from \"effect/Redacted\";\nimport * as Provider from \"alchemy/Provider\";\nimport { Resource } from \"alchemy\";\n//#region src/postgres/Connection.ts\n/** A **connection** to a Prisma Postgres database — yields the connection string. */\nconst Connection = Resource(\"Prisma.Connection\");\nconst ConnectionProvider = () => Provider.effect(Connection, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\", \"connectionString\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tif (output?.id) return output;\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/databases/{databaseId}/connections\", {\n\t\t\t\tparams: { path: { databaseId: news.databaseId } },\n\t\t\t\tbody: { name: news.name }\n\t\t\t}));\n\t\t\tconst endpoints = created.data.endpoints;\n\t\t\tconst dsn = endpoints?.direct?.connectionString ?? endpoints?.pooled?.connectionString;\n\t\t\tif (dsn === void 0) return yield* Effect.fail(new PrismaApiError({\n\t\t\t\tstatus: 0,\n\t\t\t\tmessage: `connection ${created.data.id} returned no direct/pooled connection string`\n\t\t\t}));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tconnectionString: Redacted.make(dsn)\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/connections/{id}\", { params: { path: { id: output.id } } }));\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/postgres/Database.ts\n/** A Prisma **Postgres database** inside a project. */\nconst Database = Resource(\"Prisma.Database\");\nconst DatabaseProvider = () => Provider.effect(Database, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tconst observed = output?.id ? yield* callOptional(() => client.GET(\"/v1/databases/{databaseId}\", { params: { path: { databaseId: output.id } } })) : void 0;\n\t\t\tif (!observed) {\n\t\t\t\tconst created = yield* call(() => client.POST(\"/v1/databases\", { body: {\n\t\t\t\t\tprojectId: news.projectId,\n\t\t\t\t\tname: news.name,\n\t\t\t\t\tregion: news.region,\n\t\t\t\t\t...news.isDefault !== void 0 && { isDefault: news.isDefault },\n\t\t\t\t\t...news.branchId !== void 0 && { branchId: news.branchId }\n\t\t\t\t} }));\n\t\t\t\treturn {\n\t\t\t\t\tid: created.data.id,\n\t\t\t\t\tname: created.data.name\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst result = {\n\t\t\t\tid: observed.data.id,\n\t\t\t\tname: observed.data.name\n\t\t\t};\n\t\t\tif (news.branchId !== void 0) {\n\t\t\t\tconst branchId = news.branchId;\n\t\t\t\tyield* call(() => client.PATCH(\"/v1/databases/{databaseId}\", {\n\t\t\t\t\tparams: { path: { databaseId: result.id } },\n\t\t\t\t\tbody: { branchId }\n\t\t\t\t}));\n\t\t\t}\n\t\t\treturn result;\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/databases/{databaseId}\", { params: { path: { databaseId: output.id } } }));\n\t\t}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.id) return void 0;\n\t\t\tconst d = yield* callOptional(() => client.GET(\"/v1/databases/{databaseId}\", { params: { path: { databaseId: output.id } } }));\n\t\t\treturn d ? {\n\t\t\t\tid: d.data.id,\n\t\t\t\tname: d.data.name\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\n//#region src/postgres/Project.ts\n/** A Prisma Developer Platform **Project** — the container for databases and compute services. */\nconst Project = Resource(\"Prisma.Project\");\nconst ProjectProvider = () => Provider.effect(Project, Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\treturn {\n\t\tstables: [\"id\"],\n\t\tlist: () => Effect.succeed([]),\n\t\treconcile: Effect.fn(function* ({ news, output }) {\n\t\t\tconst observed = output?.id ? yield* callOptional(() => client.GET(\"/v1/projects/{id}\", { params: { path: { id: output.id } } })) : void 0;\n\t\t\tif (observed) return {\n\t\t\t\tid: observed.data.id,\n\t\t\t\tname: observed.data.name\n\t\t\t};\n\t\t\tconst created = yield* call(() => client.POST(\"/v1/projects\", { body: {\n\t\t\t\tname: news.name,\n\t\t\t\tworkspaceId: news.workspaceId\n\t\t\t} }));\n\t\t\treturn {\n\t\t\t\tid: created.data.id,\n\t\t\t\tname: created.data.name\n\t\t\t};\n\t\t}),\n\t\tdelete: Effect.fn(function* ({ output }) {\n\t\t\tyield* callVoid(() => client.DELETE(\"/v1/projects/{id}\", { params: { path: { id: output.id } } }));\n\t\t}),\n\t\tread: Effect.fn(function* ({ output }) {\n\t\t\tif (!output?.id) return void 0;\n\t\t\tconst p = yield* callOptional(() => client.GET(\"/v1/projects/{id}\", { params: { path: { id: output.id } } }));\n\t\t\treturn p ? {\n\t\t\t\tid: p.data.id,\n\t\t\t\tname: p.data.name\n\t\t\t} : void 0;\n\t\t})\n\t};\n}));\n//#endregion\nexport { Connection, ConnectionProvider, Database, DatabaseProvider, Project, ProjectProvider };\n\n//# sourceMappingURL=postgres.mjs.map","import { a as ManagementClient, c as fromEnv, i as callVoid, n as call, o as layer, s as PrismaCredentials } from \"./http-CJM0E6rj.mjs\";\nimport { Bucket, BucketKey, BucketKeyProvider, BucketProvider } from \"./buckets.mjs\";\nimport { COMPUTE_REGIONS, ComputeService, ComputeServiceProvider, Deployment, DeploymentProvider, EnvironmentVariable, EnvironmentVariableProvider, ServiceKey, ServiceKeyProvider, deleteSafeRetrySchedule, isDeleteNotSafeYet, mintServiceKey, packageComputeArtifact, serviceKeyProviderService } from \"./compute.mjs\";\nimport { Connection, ConnectionProvider, Database, DatabaseProvider, Project, ProjectProvider } from \"./postgres.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Data from \"effect/Data\";\nimport * as Provider from \"alchemy/Provider\";\n//#region src/container.ts\n/** Raised with `ensure: false` when the app's Project (or a named stage's Branch) doesn't exist. */\nvar ContainerNotFoundError = class extends Data.TaggedError(\"ContainerNotFoundError\") {};\nconst listAllProjects = (client) => Effect.gen(function* () {\n\tconst projects = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {} : { cursor };\n\t\tconst page = yield* call(() => client.GET(\"/v1/projects\", { params: { query } }));\n\t\tprojects.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn projects;\n});\n/**\n* Workspace ids circulate in two shapes: `wksp_`-prefixed and bare. Compare\n* bare-to-bare so a `wksp_`-prefixed API id still matches a bare configured\n* one (the same normalization `state/bootstrap.ts` applies to the same\n* `/v1/projects` listing).\n*/\nconst bareWorkspaceId = (id) => id.startsWith(\"wksp_\") ? id.slice(5) : id;\n/**\n* Finds the app's Project by name in the workspace — PDP allows duplicate\n* project names, so more than one can match; the oldest wins. Creates one\n* if none match, unless `ensure` is `false` (find-only — `destroy`), in\n* which case an absent Project fails with `ContainerNotFoundError`. No\n* ownership marker and no `--project` override (both deferred — see\n* ADR-0019).\n*/\nconst resolveProject = (client, workspaceId, appName, ensure) => Effect.gen(function* () {\n\tconst oldest = (yield* listAllProjects(client)).filter((p) => bareWorkspaceId(p.workspace.id) === bareWorkspaceId(workspaceId) && p.name === appName).sort((a, b) => a.createdAt.localeCompare(b.createdAt))[0];\n\tif (oldest !== void 0) return oldest.id;\n\tif (!ensure) return yield* Effect.fail(new ContainerNotFoundError({ appName }));\n\treturn (yield* call(() => client.POST(\"/v1/projects\", { body: {\n\t\tname: appName,\n\t\tworkspaceId\n\t} }))).data.id;\n});\nconst findBranchId = (client, projectId, gitName) => call(() => client.GET(\"/v1/projects/{projectId}/branches\", { params: {\n\tpath: { projectId },\n\tquery: { gitName }\n} })).pipe(Effect.map((page) => page.data[0]?.id));\n/**\n* Finds the stage's Branch by its exact `gitName`, creating it if absent\n* unless `ensure` is `false` (find-only — `destroy`), in which case an\n* absent Branch fails with `ContainerNotFoundError`. The Management API has\n* no server-side \"create-or-return\" idempotency (`POST\n* /v1/projects/:id/branches` 409s on a duplicate `gitName`, with no request\n* field to make that a no-op), so idempotency is client-side: observe\n* first, and on a racing 409 from create, re-observe rather than fail.\n*/\nconst resolveBranch = (client, projectId, gitName, appName, ensure) => Effect.gen(function* () {\n\tconst existing = yield* findBranchId(client, projectId, gitName);\n\tif (existing !== void 0) return existing;\n\tif (!ensure) return yield* Effect.fail(new ContainerNotFoundError({\n\t\tappName,\n\t\tstage: gitName\n\t}));\n\treturn yield* call(() => client.POST(\"/v1/projects/{projectId}/branches\", {\n\t\tparams: { path: { projectId } },\n\t\tbody: { gitName }\n\t})).pipe(Effect.map((r) => r.data.id), Effect.catch((err) => err.status === 409 ? findBranchId(client, projectId, gitName).pipe(Effect.flatMap((id) => id === void 0 ? Effect.fail(err) : Effect.succeed(id))) : Effect.fail(err)));\n});\n/**\n* Resolves the two containers a stage's deploy runs into (ADR-0019): the\n* app's **Project**, found-or-created by name, and — for a named stage\n* only — its **Branch**, found-or-created by `gitName`. The default stage\n* (no `stage`) creates no Branch; `branchId` is omitted. With `ensure:\n* false` (`destroy`), nothing is created — an absent Project or Branch\n* fails with `ContainerNotFoundError` instead.\n*/\nconst resolveContainer = (opts) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst ensure = opts.ensure ?? true;\n\tconst projectId = yield* resolveProject(client, opts.workspaceId, opts.appName, ensure);\n\tif (opts.stage === void 0) return { projectId };\n\treturn {\n\t\tprojectId,\n\t\tbranchId: yield* resolveBranch(client, projectId, opts.stage, opts.appName, ensure)\n\t};\n});\n/**\n* Soft-deletes a Branch. Tolerates a 404 (already gone). The API refuses if\n* the Branch still has live members or is the production/default Branch —\n* that surfaces as a `PrismaApiError`.\n*/\nconst deleteBranch = (branchId) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tyield* callVoid(() => client.DELETE(\"/v1/branches/{branchId}\", { params: { path: { branchId } } }));\n});\n/**\n* Deletes a Project. Tolerates a 404 (already gone). The API refuses with a\n* 400 if the Project still has live dependencies (e.g. another stage's\n* Branch/resources) — that surfaces as a `PrismaApiError`.\n*/\nconst deleteProject = (projectId) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tyield* callVoid(() => client.DELETE(\"/v1/projects/{id}\", { params: { path: { id: projectId } } }));\n});\n//#endregion\n//#region src/providers.ts\n/** The collection of Prisma resource providers. */\nvar Providers = class extends Provider.ProviderCollection()(\"Prisma\") {};\n/**\n* The Prisma provider bundle: every resource provider, the Management API\n* client, and env-based credentials. Plug into a stack with\n* `{ providers: Prisma.providers() }`.\n*/\nconst providers = () => Layer.effect(Providers, Provider.collection([\n\tProject,\n\tDatabase,\n\tConnection,\n\tComputeService,\n\tDeployment,\n\tEnvironmentVariable,\n\tBucket,\n\tBucketKey\n])).pipe(Layer.provide(Layer.mergeAll(ProjectProvider(), DatabaseProvider(), ConnectionProvider(), ComputeServiceProvider(), DeploymentProvider(), EnvironmentVariableProvider(), BucketProvider(), BucketKeyProvider())), Layer.provideMerge(layer()), Layer.provideMerge(fromEnv()), Layer.orDie);\n//#endregion\nexport { Bucket, BucketKey, BucketKeyProvider, BucketProvider, COMPUTE_REGIONS, ComputeService, ComputeServiceProvider, Connection, ConnectionProvider, ContainerNotFoundError, Database, DatabaseProvider, Deployment, DeploymentProvider, EnvironmentVariable, EnvironmentVariableProvider, ManagementClient, PrismaCredentials, Project, ProjectProvider, Providers, ServiceKey, ServiceKeyProvider, deleteBranch, deleteProject, deleteSafeRetrySchedule, fromEnv, isDeleteNotSafeYet, layer as managementClientLayer, mintServiceKey, packageComputeArtifact, providers, resolveContainer, serviceKeyProviderService };\n\n//# sourceMappingURL=index.mjs.map","import { a as ManagementClient, c as fromEnv, i as callVoid, n as call, o as layer, t as PrismaApiError } from \"./http-CJM0E6rj.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Redacted from \"effect/Redacted\";\nimport * as Data from \"effect/Data\";\nimport { Stack } from \"alchemy\";\nimport * as Schedule from \"effect/Schedule\";\nimport postgres from \"postgres\";\nimport { STATE_STORE_VERSION, State, StateStoreError, encodeState, reviveStateRecursive } from \"alchemy/State\";\nimport { blindCast } from \"@internal/foundation/casts\";\n//#region src/state/discovery.ts\n/** The framework-owned database a stage's deploy state lives in — a child of that stage's Branch (ADR-0034). */\nconst STATE_DATABASE_NAME = \"prisma-composer-state\";\n/** Every connection created against a state database carries this prefix — see `cleanupAgedConnections`. */\nconst CONNECTION_NAME_PREFIX = \"prisma-composer-state-\";\nconst listAllBranches = (client, projectId) => Effect.gen(function* () {\n\tconst branches = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {} : { cursor };\n\t\tconst page = yield* call(() => client.GET(\"/v1/projects/{projectId}/branches\", { params: {\n\t\t\tpath: { projectId },\n\t\t\tquery\n\t\t} }));\n\t\tbranches.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn branches;\n});\n/**\n* The project's implicit default Branch — every live Project owns exactly\n* one (a platform invariant). The list endpoint has no `isDefault` filter, so\n* this pages through every Branch and picks it out client-side. Never creates\n* one: its absence means the platform's invariant is broken, which is not\n* something a deploy can repair.\n*/\nconst resolveDefaultBranchId = (client, projectId) => Effect.gen(function* () {\n\tconst found = (yield* listAllBranches(client, projectId)).find((b) => b.isDefault);\n\tif (found !== void 0) return found.id;\n\treturn yield* Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `project ${projectId} has no default Branch — the platform guarantees every live Project owns one; contact support.`\n\t}));\n});\n/** A named stage carries its `branchId`; production omits it, and its state lives on the Project's default Branch. */\nconst resolveBranchId = (client, container) => container.branchId !== void 0 ? Effect.succeed(container.branchId) : resolveDefaultBranchId(client, container.projectId);\n/**\n* Every database on this Branch. Uses the flat `GET /v1/databases`, which\n* accepts `projectId` and `branchId` together — the project-scoped listing\n* has no branch filter at all.\n*/\nconst listAllDatabasesOnBranch = (client, projectId, branchId) => Effect.gen(function* () {\n\tconst databases = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t} : {\n\t\t\tprojectId,\n\t\t\tbranchId,\n\t\t\tcursor\n\t\t};\n\t\tconst page = yield* call(() => client.GET(\"/v1/databases\", { params: { query } }));\n\t\tdatabases.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn databases;\n});\n/**\n* Databases on this Branch named `prisma-composer-state`, oldest first,\n* excluding the Branch's own default database. The default database is always\n* the user's, never ours to adopt or delete. A name match alone proves\n* nothing — the platform allows duplicate names — so every caller must still\n* verify ownership before acting on a candidate.\n*/\nconst listStateDatabaseCandidates = (client, projectId, branchId) => listAllDatabasesOnBranch(client, projectId, branchId).pipe(Effect.map((databases) => databases.filter((d) => d.name === \"prisma-composer-state\" && !d.isDefault).sort((a, b) => a.createdAt.localeCompare(b.createdAt))));\n/**\n* Creates a fresh Postgres connection and reads its connection string. Reads\n* `endpoints.direct.connectionString` only — never `endpoints.pooled`, and\n* never the deprecated top-level `connectionString`/`url` (PRO-212), neither\n* of which the platform guarantees.\n*\n* The connection string is returned only when the connection is created and\n* cannot be read back afterwards, which is why every run creates a fresh\n* connection instead of reusing one.\n*/\nconst createConnection = (client, databaseId) => call(() => client.POST(\"/v1/databases/{databaseId}/connections\", {\n\tparams: { path: { databaseId } },\n\tbody: { name: `${CONNECTION_NAME_PREFIX}${Date.now()}` }\n})).pipe(Effect.flatMap((r) => {\n\tconst created = r.data;\n\tconst dsn = created.endpoints.direct?.connectionString;\n\treturn dsn === void 0 ? Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `connection ${created.id} returned no endpoints.direct.connectionString (PRO-212)`\n\t})) : Effect.succeed(Redacted.make(dsn));\n}));\n//#endregion\n//#region src/state/errors.ts\n/** Collapses any thrown value (postgres.js failures included) into a {@link StateStoreError}. */\nconst toStateStoreError = (cause) => cause instanceof Error ? new StateStoreError({\n\tmessage: cause.message,\n\tcause\n}) : new StateStoreError({ message: String(cause) });\n/**\n* An operator-facing failure from the hosted-state bootstrap pipeline\n* (branch/database discovery, connection creation, schema migration, or lock\n* acquisition) — what a deployer actually sees, instead of a raw Effect\n* defect.\n*/\nvar HostedStateBootstrapError = class extends Data.TaggedError(\"HostedStateBootstrapError\") {\n\tget message() {\n\t\treturn `hosted-state bootstrap failed in ${this.container}: ${this.step} — ${this.reason}`;\n\t}\n};\n/**\n* Builds a {@link HostedStateBootstrapError} from whatever the failed step\n* threw. Never retains the raw driver/API error object as `cause`: a\n* postgres.js connection failure's `.message`/properties are not verified to\n* omit the DSN or credentials, so only the extracted message text survives\n* into the operator-facing error.\n*/\nconst hostedStateBootstrapError = (container, step, cause) => new HostedStateBootstrapError({\n\tcontainer,\n\tstep,\n\treason: cause instanceof Error ? cause.message : String(cause)\n});\n//#endregion\n//#region src/state/schema.ts\n/**\n* The well-known marker row written into every database this store owns.\n* Its presence proves the database is genuinely Prisma App's state store, not\n* a same-named project squatting on the discovery query (see `bootstrap.ts`\n* `verifyOwnership` — PDP allows duplicate project names).\n*/\nconst STATE_META_MARKER = \"prisma-composer-state-v1\";\n/**\n* Idempotent schema migration for the Prisma-hosted state store — safe to run\n* on every deploy, since `create table if not exists` no-ops once the tables\n* exist. Run this against `sql` before serving a {@link StateService} built\n* by `makePrismaStateService` over the same client.\n*/\nconst migratePrismaState = (sql) => Effect.tryPromise({\n\ttry: async () => {\n\t\tawait sql`\n        create table if not exists alchemy_resource_state (\n          stack text not null,\n          stage text not null,\n          fqn text not null,\n          value jsonb not null,\n          updated_at timestamptz not null default now(),\n          primary key (stack, stage, fqn)\n        )\n      `;\n\t\tawait sql`\n        create table if not exists alchemy_stack_output (\n          stack text not null,\n          stage text not null,\n          value jsonb not null,\n          updated_at timestamptz not null default now(),\n          primary key (stack, stage)\n        )\n      `;\n\t\tawait sql`\n        create table if not exists prisma_app_state_meta (\n          marker text primary key,\n          created_at timestamptz not null default now()\n        )\n      `;\n\t\tawait sql`\n        insert into prisma_app_state_meta (marker) values (${STATE_META_MARKER})\n        on conflict (marker) do nothing\n      `;\n\t},\n\tcatch: toStateStoreError\n});\n//#endregion\n//#region src/state/bootstrap.ts\nconst CONNECTION_MAX_AGE_MS = 1440 * 60 * 1e3;\n/**\n* Creates the state database on the stage's Branch, using the flat endpoint\n* because it is the only one that accepts a `branchId`. The platform still\n* creates the row on the project's default Branch and attaches it afterwards,\n* so a failed attach can leave a database behind on the default Branch. It\n* checks the Branch exists before creating, and this is one request instead of\n* two, so that window is much narrower than attaching from here — but it is\n* narrowed, not closed.\n*\n* `isDefault` is left at the API's `false` default: the state database must\n* never be the stage's default database, which belongs to the user.\n*/\nconst createStateDatabase = (client, projectId, branchId) => call(() => client.POST(\"/v1/databases\", { body: {\n\tprojectId,\n\tname: STATE_DATABASE_NAME,\n\tregion: \"inherit\",\n\tbranchId\n} })).pipe(Effect.map((created) => ({\n\tid: created.data.id,\n\tname: created.data.name,\n\tisDefault: created.data.isDefault,\n\tcreatedAt: created.data.createdAt\n})));\nconst listAllConnections = (client, databaseId) => Effect.gen(function* () {\n\tconst connections = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {} : { cursor };\n\t\tconst page = yield* call(() => client.GET(\"/v1/databases/{databaseId}/connections\", { params: {\n\t\t\tpath: { databaseId },\n\t\t\tquery\n\t\t} }));\n\t\tconnections.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn connections;\n});\nconst deleteConnection = (client, connectionId) => callVoid(() => client.DELETE(\"/v1/connections/{id}\", { params: { path: { id: connectionId } } }));\n/**\n* Every deploy creates a fresh connection (`createConnection`) and nothing ever\n* closes it, so the state database otherwise accumulates one connection\n* resource per run without bound. Best-effort, never blocks bootstrap: lists\n* this database's connections, deletes the ones matching our naming pattern\n* older than the age threshold, and swallows any failure (a transient API\n* error here must never fail the deploy it's cleaning up after).\n*/\nconst cleanupAgedConnections = (client, databaseId) => Effect.gen(function* () {\n\tconst connections = yield* listAllConnections(client, databaseId);\n\tconst cutoff = Date.now() - CONNECTION_MAX_AGE_MS;\n\tconst aged = connections.filter((c) => c.name.startsWith(\"prisma-composer-state-\") && Date.parse(c.createdAt) < cutoff);\n\tyield* Effect.forEach(aged, (c) => deleteConnection(client, c.id), { discard: true });\n}).pipe(Effect.ignore);\n/**\n* PDP allows duplicate database names, so a database named `prisma-composer-state`\n* found by listing is not proof it's ours — it could be an unrelated\n* database that happens to share the name (a squatter, deliberate or not).\n* Connects to the candidate and inspects its tables:\n*\n* - our marker table with our marker row present → `ours`, adopt outright.\n* - our state tables (`alchemy_resource_state`/`alchemy_stack_output`) but no\n*   marker → `legacy`: a database from before this ownership check existed.\n*   The real, currently-in-use workspace state is in this shape today, so it\n*   must keep working — adopt it, and `migratePrismaState` (idempotent)\n*   writes the marker on the way in.\n* - no tables at all → `empty`, a freshly-created database — adopt.\n* - anything else → `squatter`: foreign data occupies the name; refuse it.\n*/\nconst verifyOwnership = (connectionString) => Effect.tryPromise({\n\ttry: async () => {\n\t\tconst sql = postgres(Redacted.value(connectionString), {\n\t\t\tmax: 1,\n\t\t\tonnotice: () => {}\n\t\t});\n\t\ttry {\n\t\t\tconst rows = await sql`\n          select tablename from pg_tables where schemaname = 'public'\n        `;\n\t\t\tconst tables = new Set(rows.map((row) => row.tablename));\n\t\t\tif (tables.has(\"prisma_app_state_meta\")) return (await sql`\n            select marker from prisma_app_state_meta where marker = ${\"prisma-composer-state-v1\"}\n          `).length > 0 ? { kind: \"ours\" } : {\n\t\t\t\tkind: \"squatter\",\n\t\t\t\ttables: [...tables]\n\t\t\t};\n\t\t\tif (tables.has(\"alchemy_resource_state\") || tables.has(\"alchemy_stack_output\")) return { kind: \"legacy\" };\n\t\t\treturn tables.size === 0 ? { kind: \"empty\" } : {\n\t\t\t\tkind: \"squatter\",\n\t\t\t\ttables: [...tables]\n\t\t\t};\n\t\t} finally {\n\t\t\tawait sql.end({ timeout: 5 });\n\t\t}\n\t},\n\tcatch: (cause) => new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `ownership verification failed: ${cause instanceof Error ? cause.message : String(cause)}`\n\t})\n});\n/**\n* Finds the Branch's `prisma-composer-state` database, verifying ownership\n* rather than trusting the name alone (PDP allows duplicate names — see\n* `verifyOwnership`). Finding none creates one, with nothing to verify: only\n* this run can have touched a database it just created.\n*\n* Candidates are tried oldest first, so repeated runs pick the same one. The\n* first that verifies as ours is used. A candidate that fails verification is\n* skipped. If every candidate fails, bootstrap fails and names each rejected\n* database id, so an operator knows which to rename or remove.\n*/\nconst resolveStateDatabase = (client, projectId, branchId, verify) => Effect.gen(function* () {\n\tconst candidates = yield* listStateDatabaseCandidates(client, projectId, branchId);\n\tif (candidates.length === 0) {\n\t\tconst database = yield* createStateDatabase(client, projectId, branchId);\n\t\tconst connectionString = yield* createConnection(client, database.id);\n\t\tconsole.error(`hosted state: provisioned state database ${database.id} on branch ${branchId} (project ${projectId})`);\n\t\treturn {\n\t\t\tdatabase,\n\t\t\tconnectionString\n\t\t};\n\t}\n\tconst rejected = [];\n\tfor (const candidate of candidates) {\n\t\tconst connectionString = yield* createConnection(client, candidate.id);\n\t\tconst verdict = yield* verify(connectionString);\n\t\tif (verdict.kind === \"squatter\") {\n\t\t\trejected.push(`${candidate.id} (foreign tables: ${verdict.tables.join(\", \")})`);\n\t\t\tcontinue;\n\t\t}\n\t\tconsole.error(`hosted state: using state database ${candidate.id} on branch ${branchId} (${verdict.kind}) — ${candidates.length} candidate(s) named ${STATE_DATABASE_NAME}`);\n\t\treturn {\n\t\t\tdatabase: candidate,\n\t\t\tconnectionString\n\t\t};\n\t}\n\treturn yield* Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `found ${candidates.length} database(s) named \"${STATE_DATABASE_NAME}\" on branch ${branchId}, but none verified as Composer's state store: ${rejected.join(\"; \")}. Rename or remove the offending database(s).`\n\t}));\n});\n/**\n* Resolves the stage's Branch, find-or-creates its `prisma-composer-state`\n* database, and creates a fresh connection — the automatic bootstrap every\n* deploy runs once, needing nothing beyond the service token and the\n* Project/Branch ids the CLI already resolved.\n*/\nconst bootstrapStateConnection = (container) => bootstrapStateConnectionWith(container, verifyOwnership);\n/**\n* Identical to {@link bootstrapStateConnection}, except the ownership check is\n* a parameter so `bootstrap.test.ts` can supply a fake instead of opening a\n* real Postgres connection.\n*/\nconst bootstrapStateConnectionWith = (container, verify) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst branchId = yield* resolveBranchId(client, container);\n\tconst { database, connectionString } = yield* resolveStateDatabase(client, container.projectId, branchId, verify);\n\tyield* cleanupAgedConnections(client, database.id);\n\treturn {\n\t\tprojectId: container.projectId,\n\t\tdatabaseId: database.id,\n\t\tconnectionString\n\t};\n});\n//#endregion\n//#region src/state/delete.ts\nconst deleteDatabase = (client, databaseId) => callVoid(() => client.DELETE(\"/v1/databases/{databaseId}\", { params: { path: { databaseId } } }));\n/**\n* Removes the stage's state database, so the CLI's destroy leaves nothing\n* behind: for a named stage the Branch cannot be deleted while this database\n* is still a live member, and for production it would otherwise outlive the\n* stage and hold a quota slot.\n*\n* Every candidate is checked for our ownership marker before deletion —\n* deleting by name alone would destroy a user's database that happens to\n* share the name. All owned candidates are removed, not just the first: a\n* crashed earlier run can leave duplicates, and they are all ours. Finding\n* none succeeds, which is what makes a retried destroy a no-op.\n*/\nconst deleteStateDatabase = (container) => deleteStateDatabaseWith(container, verifyOwnership);\n/**\n* Identical to {@link deleteStateDatabase}, except the ownership check is a\n* parameter so tests can supply a fake instead of opening a real Postgres\n* connection.\n*/\nconst deleteStateDatabaseWith = (container, verify) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst branchId = yield* resolveBranchId(client, container);\n\tconst candidates = yield* listStateDatabaseCandidates(client, container.projectId, branchId);\n\tfor (const candidate of candidates) {\n\t\tconst verdict = yield* verify(yield* createConnection(client, candidate.id));\n\t\tif (verdict.kind === \"squatter\") {\n\t\t\tconsole.warn(`hosted state: left database ${candidate.id} on branch ${branchId} alone — it is named ${STATE_DATABASE_NAME} but holds unrelated data (tables: ${verdict.tables.join(\", \")}).`);\n\t\t\tcontinue;\n\t\t}\n\t\tyield* deleteDatabase(client, candidate.id);\n\t\tconsole.error(`hosted state: removed state database ${candidate.id} from branch ${branchId}`);\n\t}\n});\n//#endregion\n//#region src/state/transient.ts\n/** Codes for \"can't reach the host yet\" — DNS/refusal, not a mid-session drop. */\nconst ESTABLISHMENT_CODES = /* @__PURE__ */ new Set([\n\t\"ECONNREFUSED\",\n\t\"ENOTFOUND\",\n\t\"EAI_AGAIN\"\n]);\n/** Connection-establishment failure messages (no useful `err.code`). `upstream database` is PPg's edge proxy while a cold/idle upstream warms up. */\nconst ESTABLISHMENT_MESSAGE_FRAGMENTS = [\"upstream database\", \"connection refused\"];\n/**\n* Whether a failure is a connection-establishment error against a warming\n* upstream (retry), as opposed to a lost lease, a mid-session drop, or a real\n* query error (all of which must surface at once). Unwraps a\n* {@link StateStoreError} to its driver `cause` so a code-only error still\n* classifies.\n*/\nconst isColdStartConnectError = (error) => {\n\tif (typeof error !== \"object\" || error === null) return false;\n\tconst code = \"code\" in error && typeof error.code === \"string\" ? error.code : void 0;\n\tif (code !== void 0 && ESTABLISHMENT_CODES.has(code)) return true;\n\tconst message = \"message\" in error && typeof error.message === \"string\" ? error.message.toLowerCase() : \"\";\n\tif (ESTABLISHMENT_MESSAGE_FRAGMENTS.some((fragment) => message.includes(fragment))) return true;\n\tconst cause = \"cause\" in error ? error.cause : void 0;\n\treturn cause !== void 0 && cause !== error && isColdStartConnectError(cause);\n};\n/** The same ~2-minute budget the bootstrap migration uses (`layer.ts`): retry every 5s, up to 2 minutes. */\nconst COLD_START_SCHEDULE = Schedule.both(Schedule.spaced(\"5 seconds\"), Schedule.during(\"2 minutes\"));\n/**\n* Retries a state operation past a cold-start connection rejection only; every\n* other failure surfaces immediately. `schedule` is injectable so tests drive\n* it without real delay.\n*/\nconst retryColdStart = (operation, schedule = COLD_START_SCHEDULE) => Effect.retry(operation, {\n\twhile: isColdStartConnectError,\n\tschedule\n});\n//#endregion\n//#region src/state/lock.ts\n/** Another deploy already holds the lock for this stack/stage. Never queued — fails immediately. */\nvar StateLockContentionError = class extends Data.TaggedError(\"StateLockContentionError\") {\n\tget message() {\n\t\treturn `another deploy holds the state lock for ${this.stack}/${this.stage}`;\n\t}\n};\nconst lockKey = (stack, stage) => `prisma-composer:${stack}/${stage}`;\n/**\n* Acquires a session-scoped Postgres advisory lock on a reserved\n* connection pulled from `sql`'s pool — session (not transaction) scope,\n* because a transaction-scoped lock releases at the first commit and a\n* deploy spans many. Held for the run's whole lifetime; contention fails\n* immediately rather than queuing. If the process crashes, the reserved\n* connection drops and Postgres auto-releases the session lock — no\n* explicit crash-recovery bookkeeping needed.\n*/\nconst acquireStateLock = (sql, stack, stage) => Effect.gen(function* () {\n\tconst key = lockKey(stack, stage);\n\tconst reserved = yield* Effect.tryPromise({\n\t\ttry: () => sql.reserve(),\n\t\tcatch: toStateStoreError\n\t});\n\tconst acquired = yield* Effect.tryPromise({\n\t\ttry: async () => {\n\t\t\treturn (await reserved`\n          select\n            pg_try_advisory_lock(hashtextextended(${key}, 0)) as acquired,\n            pg_backend_pid() as pid\n        `)[0];\n\t\t},\n\t\tcatch: toStateStoreError\n\t});\n\tif (acquired?.acquired !== true) {\n\t\treserved.release();\n\t\treturn yield* Effect.fail(new StateLockContentionError({\n\t\t\tstack,\n\t\t\tstage\n\t\t}));\n\t}\n\tconst lockPid = acquired.pid;\n\tconst checkLive = retryColdStart(Effect.tryPromise({\n\t\ttry: async () => {\n\t\t\treturn (await sql`\n            select exists (\n              select 1 from pg_locks\n              where locktype = 'advisory'\n                and pid = ${lockPid}\n                and objsubid = 1\n                and granted\n                and ((classid::bigint << 32) | (objid::bigint & 4294967295))\n                  = hashtextextended(${key}, 0)\n            ) as live\n          `)[0]?.live ?? false;\n\t\t},\n\t\tcatch: toStateStoreError\n\t}).pipe(Effect.flatMap((live) => live ? Effect.void : Effect.fail(new StateStoreError({ message: `the state lock for ${stack}/${stage} was lost mid-run; refusing to continue unlocked` })))));\n\tconst release = async () => {\n\t\ttry {\n\t\t\tawait reserved`select pg_advisory_unlock(hashtextextended(${key}, 0))`;\n\t\t} catch {} finally {\n\t\t\treserved.release();\n\t\t}\n\t};\n\treturn {\n\t\tcheckLive,\n\t\trelease\n\t};\n});\n//#endregion\n//#region src/state/service.ts\nconst attempt = (f) => retryColdStart(Effect.tryPromise({\n\ttry: f,\n\tcatch: toStateStoreError\n}));\n/**\n* Wraps an already-`encodeState`d value as a jsonb-typed bind parameter.\n* Must go through `sql.json(...)` (not `JSON.stringify(...)::jsonb`) —\n* postgres.js re-serializes the parameter once it learns the server-inferred\n* type is jsonb, so a pre-stringified value passed through a `::jsonb` cast\n* gets JSON-encoded *twice* and lands as a jsonb string instead of an\n* object. `sql.json` gives postgres.js the raw value up front and declares\n* the jsonb oid itself, so it is serialized exactly once.\n*/\nconst jsonParam = (sql, value) => sql.json(blindCast(encodeState(value)));\n/**\n* `reviveStateRecursive` is typed to return `unknown` — the caller is\n* expected to know the shape it revived. Here the shape is known by\n* construction: every row was written by `set()`, which persists a value\n* through `encodeState` first, so reviving it recovers a `PersistedState`.\n*/\nconst revivePersistedState = (value) => blindCast(reviveStateRecursive(value));\n/** Same reasoning as {@link revivePersistedState}, narrowed by the SQL status filter. */\nconst reviveReplacedResourceState = (value) => blindCast(reviveStateRecursive(value));\n/**\n* Builds alchemy's `StateService` over a caller-supplied postgres.js client,\n* against the two-table schema `migratePrismaState` creates. The caller owns\n* the client's lifecycle (connection pooling, reconnects, `.end()`); this\n* factory only issues queries.\n*/\nconst makePrismaStateService = (sql) => ({\n\tid: \"prisma-postgres\",\n\tgetVersion: () => Effect.succeed(STATE_STORE_VERSION),\n\tlistStacks: () => attempt(() => sql`\n        select stack from alchemy_resource_state\n        union\n        select stack from alchemy_stack_output\n        order by stack\n      `).pipe(Effect.map((rows) => rows.map((row) => row.stack))),\n\tlistStages: (stack) => attempt(() => sql`\n        select stage from alchemy_resource_state where stack = ${stack}\n        union\n        select stage from alchemy_stack_output where stack = ${stack}\n        order by stage\n      `).pipe(Effect.map((rows) => rows.map((row) => row.stage))),\n\tget: (request) => attempt(() => sql`\n        select value from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage} and fqn = ${request.fqn}\n      `).pipe(Effect.map((rows) => {\n\t\tconst row = rows[0];\n\t\treturn row === void 0 ? void 0 : revivePersistedState(row.value);\n\t})),\n\tgetReplacedResources: (request) => attempt(() => sql`\n        select value from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage}\n          and value ->> 'status' = 'replaced'\n      `).pipe(Effect.map((rows) => rows.map((row) => reviveReplacedResourceState(row.value)))),\n\tset: (request) => attempt(() => sql`\n        insert into alchemy_resource_state (stack, stage, fqn, value, updated_at)\n        values (\n          ${request.stack}, ${request.stage}, ${request.fqn},\n          ${jsonParam(sql, request.value)}, now()\n        )\n        on conflict (stack, stage, fqn) do update\n          set value = excluded.value, updated_at = excluded.updated_at\n      `).pipe(Effect.map(() => request.value)),\n\tdelete: (request) => attempt(() => sql`\n        delete from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage} and fqn = ${request.fqn}\n      `).pipe(Effect.asVoid),\n\tdeleteStack: (request) => attempt(async () => {\n\t\tif (request.stage === void 0) {\n\t\t\tawait sql`delete from alchemy_resource_state where stack = ${request.stack}`;\n\t\t\tawait sql`delete from alchemy_stack_output where stack = ${request.stack}`;\n\t\t} else {\n\t\t\tawait sql`\n          delete from alchemy_resource_state\n          where stack = ${request.stack} and stage = ${request.stage}\n        `;\n\t\t\tawait sql`\n          delete from alchemy_stack_output\n          where stack = ${request.stack} and stage = ${request.stage}\n        `;\n\t\t}\n\t}),\n\tlist: (request) => attempt(() => sql`\n        select fqn from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage}\n        order by fqn\n      `).pipe(Effect.map((rows) => rows.map((row) => row.fqn))),\n\tgetOutput: (request) => attempt(() => sql`\n        select value from alchemy_stack_output\n        where stack = ${request.stack} and stage = ${request.stage}\n      `).pipe(Effect.map((rows) => {\n\t\tconst row = rows[0];\n\t\treturn row === void 0 ? void 0 : reviveStateRecursive(row.value);\n\t})),\n\tsetOutput: (request) => attempt(() => sql`\n        insert into alchemy_stack_output (stack, stage, value, updated_at)\n        values (${request.stack}, ${request.stage}, ${jsonParam(sql, request.value)}, now())\n        on conflict (stack, stage) do update\n          set value = excluded.value, updated_at = excluded.updated_at\n      `).pipe(Effect.map(() => request.value))\n});\n/**\n* How long a passing lease check is trusted before the next storage\n* operation re-verifies it. A deploy issues many state ops in quick\n* succession, and each raw `checkLive` is a `pg_locks` round-trip; without\n* amortization the guard roughly doubles the store's traffic. The cost of the\n* window is bounded: a lease lost mid-window is detected within this many ms,\n* not instantly — an accepted tradeoff on top of the already-accepted\n* non-atomic (TOCTOU) gap between the check and the operation.\n*/\nconst LEASE_CHECK_TTL_MS = 5e3;\n/**\n* Amortizes a lease check over a short TTL: a *passing* check is trusted for\n* `ttlMs`, so a burst of operations inside the window does one round-trip, not\n* one per op. A *failing* check is never cached — it propagates immediately\n* and leaves the last-good timestamp untouched, so the very next op re-checks.\n* The `lastOkAt` state is captured per call, so each store (each layer) gets\n* its own window — two stores in one process never share a cached success.\n*/\nconst amortizeCheck = (checkLive, ttlMs, now) => {\n\tlet lastOkAt;\n\treturn Effect.suspend(() => {\n\t\tif (lastOkAt !== void 0 && now() - lastOkAt < ttlMs) return Effect.void;\n\t\treturn checkLive.pipe(Effect.tap(() => Effect.sync(() => {\n\t\t\tlastOkAt = now();\n\t\t})));\n\t});\n};\n/**\n* Wraps a {@link StateService} so every method that touches storage first\n* re-verifies the state lock's lease via `checkLive`. Used to enforce \"a\n* dropped lock connection fails loudly\" — see {@link ../lock.ts}. The check is\n* amortized over a short TTL (see {@link amortizeCheck}), so a run of\n* back-to-back operations does not fire one `pg_locks` round-trip per call.\n*\n* Reads are gated too, not just writes: a lost lease means a concurrent\n* deploy may already be mutating this stack's rows, so a read could return\n* stale or conflicting data — untrustworthy either way, not just the writes.\n* The check is best-effort and not atomic with the operation it guards (the\n* lease could be lost in the gap between `checkLive` passing and the wrapped\n* call executing, or within the TTL window); that residual race is accepted.\n*\n* `getVersion` is excluded: it returns a compile-time constant\n* (`STATE_STORE_VERSION`), so guarding it would only add a pointless\n* reserved-connection round-trip.\n*\n* `now` is injectable so tests can advance the clock deterministically; it\n* defaults to `Date.now` (fine in library runtime code — only Workflow\n* scripts forbid it).\n*/\nconst guardStateService = (service, checkLive, now = Date.now) => {\n\tconst guard = amortizeCheck(checkLive, LEASE_CHECK_TTL_MS, now);\n\treturn {\n\t\tid: service.id,\n\t\tgetVersion: () => service.getVersion(),\n\t\tlistStacks: () => guard.pipe(Effect.andThen(service.listStacks())),\n\t\tlistStages: (stack) => guard.pipe(Effect.andThen(service.listStages(stack))),\n\t\tget: (request) => guard.pipe(Effect.andThen(service.get(request))),\n\t\tgetReplacedResources: (request) => guard.pipe(Effect.andThen(service.getReplacedResources(request))),\n\t\tset: (request) => guard.pipe(Effect.andThen(service.set(request))),\n\t\tdelete: (request) => guard.pipe(Effect.andThen(service.delete(request))),\n\t\tdeleteStack: (request) => guard.pipe(Effect.andThen(service.deleteStack(request))),\n\t\tlist: (request) => guard.pipe(Effect.andThen(service.list(request))),\n\t\tgetOutput: (request) => guard.pipe(Effect.andThen(service.getOutput(request))),\n\t\tsetOutput: (request) => guard.pipe(Effect.andThen(service.setOutput(request)))\n\t};\n};\n//#endregion\n//#region src/state/layer.ts\n/**\n* The hosted Alchemy state store. On layer init (scoped, once per stack\n* run): resolve the stage's Branch, find-or-create its `prisma-composer-state`\n* database, create a fresh connection, migrate the schema, and acquire the\n* (stack, stage) advisory lock — see `bootstrap.ts` and `lock.ts`. The\n* Management API plumbing (`ManagementClient`, `PrismaCredentials`) is\n* provided internally, so the returned layer's only requirements are the\n* ones alchemy itself already provides to every state store\n* (`StackServices`).\n*\n* Any bootstrap/lock/migration failure is wrapped into an operator-facing\n* `HostedStateBootstrapError` (naming the Project/Branch and the step that\n* failed, never the raw driver/API error — see `errors.ts`) before dying the\n* layer (loud, immediate, unrecoverable) rather than surfacing as a typed\n* error — matching core's `LowerOptions.state: Layer.Layer<State, never,\n* StackServices>` contract and alchemy's own convention (e.g. a missing\n* state store is `Effect.die` in `Stack.make`).\n*/\nconst prismaStateLayer = (ids) => {\n\tconst { projectId, branchId } = ids;\n\treturn Layer.effect(State, Effect.gen(function* () {\n\t\tconst stack = yield* Stack;\n\t\tconst container = branchId === void 0 ? projectId : `${projectId}/${branchId}`;\n\t\tconst bootstrapError = (step) => (cause) => hostedStateBootstrapError(container, step, cause);\n\t\tconst { connectionString } = yield* bootstrapStateConnection(branchId === void 0 ? { projectId } : {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t}).pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))), Effect.mapError(bootstrapError(\"resolving the state database on the stage branch\")));\n\t\tconst sql = postgres(Redacted.value(connectionString), {\n\t\t\tmax: 5,\n\t\t\tonnotice: () => {}\n\t\t});\n\t\tyield* Effect.addFinalizer(() => Effect.promise(() => sql.end({ timeout: 5 })));\n\t\tyield* migratePrismaState(sql).pipe(Effect.retry(Schedule.both(Schedule.spaced(\"5 seconds\"), Schedule.during(\"2 minutes\"))), Effect.mapError(bootstrapError(\"schema migration\")));\n\t\tconst lock = yield* acquireStateLock(sql, stack.name, stack.stage).pipe(Effect.mapError(bootstrapError(\"lock acquisition\")));\n\t\tyield* Effect.addFinalizer(() => Effect.promise(() => lock.release()));\n\t\tconst service = guardStateService(makePrismaStateService(sql), lock.checkLive);\n\t\treturn Effect.succeed(service);\n\t})).pipe(Layer.orDie);\n};\n//#endregion\nexport { deleteStateDatabase, deleteStateDatabaseWith, makePrismaStateService, migratePrismaState, prismaStateLayer, verifyOwnership };\n\n//# sourceMappingURL=state.mjs.map","import { a as paramName, i as paramBindingFor, o as RESERVED_PROVIDER_PARAMS, r as isEnvParamSource, s as STREAMS_API_KEY, t as provisionedEdges } from \"./provisioned-edges-DIQAR4q4.mjs\";\nimport { a as encodeParamPointer, f as secretName, i as encode, o as paramEntries, s as secretPointerRows, t as configKey } from \"./serializer-CX4VYdf_.mjs\";\nimport { i as withConnectionRetry, n as normalizeSslMode } from \"./pg-connection-CadPZuEK.mjs\";\nimport { n as isPnPostgresResourceNode } from \"./prisma-next-DlU01kXJ.mjs\";\nimport { isParamSource, paramManifest, provisionManifest } from \"@internal/core\";\nimport { blindCast } from \"@internal/foundation/casts\";\nimport { RPC_PEER_KEY } from \"@internal/service-rpc\";\nimport * as Prisma from \"@internal/lowering\";\nimport { ManagementClient, deleteBranch, deleteProject, fromEnv, managementClientLayer, resolveContainer } from \"@internal/lowering\";\nimport { deleteStateDatabaseWith, prismaStateLayer, verifyOwnership } from \"@internal/lowering/state\";\nimport * as Output from \"alchemy/Output\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Redacted from \"effect/Redacted\";\nimport { Resource } from \"alchemy\";\nimport * as Provider from \"alchemy/Provider\";\nimport pg from \"pg\";\nimport { loadConfig } from \"@prisma-next/config-loader\";\nimport { resolve } from \"pathe\";\nimport { readRef } from \"@prisma-next/migration-tools/refs\";\nimport { APP_SPACE_ID, readContractSpaceHeadRef, spaceMigrationDirectory, spaceRefsDirectory } from \"@prisma-next/migration-tools/spaces\";\nimport { createPostgresControlClient } from \"@prisma-next/postgres/control\";\n//#region src/container.ts\nconst PRISMA_CLOUD_EXTENSION_ID = \"@prisma/composer-prisma-cloud\";\nvar PrismaCloudContainer = class {\n\tinput;\n\tprojectId;\n\tbranchId;\n\tconstructor(input, projectId, branchId) {\n\t\tthis.input = input;\n\t\tthis.projectId = projectId;\n\t\tthis.branchId = branchId;\n\t}\n\tserialize() {\n\t\treturn JSON.stringify({\n\t\t\tinput: this.input,\n\t\t\tprojectId: this.projectId,\n\t\t\t...this.branchId !== void 0 ? { branchId: this.branchId } : {}\n\t\t});\n\t}\n};\n/** `instanceof` — parent-side instances and child-side deserialized instances are both constructed by this module. */\nfunction isPrismaCloudContainer(value) {\n\treturn value instanceof PrismaCloudContainer;\n}\n/** Narrow-or-throw for hook inputs. */\nfunction prismaCloudContainerOf(value) {\n\tif (!isPrismaCloudContainer(value)) throw new Error(\"the Prisma Cloud container was not resolved — the extension's container descriptor did not run.\");\n\treturn value;\n}\nfunction isRecord(value) {\n\treturn typeof value === \"object\" && value !== null;\n}\nfunction invalidPayloadError(reason) {\n\treturn /* @__PURE__ */ new Error(`${PRISMA_CLOUD_EXTENSION_ID}: invalid container transport payload — ${reason}.`);\n}\n/** Reconstructs a `PrismaCloudContainer` from `serialize()`'s JSON output — real narrowing, no casts. */\nfunction deserialize(serialized) {\n\tlet parsed;\n\ttry {\n\t\tparsed = JSON.parse(serialized);\n\t} catch (error) {\n\t\tthrow invalidPayloadError(`not valid JSON (${error instanceof Error ? error.message : String(error)})`);\n\t}\n\tif (!isRecord(parsed)) throw invalidPayloadError(\"not an object\");\n\tconst input = parsed[\"input\"];\n\tif (!isRecord(input)) throw invalidPayloadError(\"\\\"input\\\" is not an object\");\n\tconst appName = input[\"appName\"];\n\tif (typeof appName !== \"string\") throw invalidPayloadError(\"\\\"input.appName\\\" is not a string\");\n\tconst stage = input[\"stage\"];\n\tif (stage !== void 0 && typeof stage !== \"string\") throw invalidPayloadError(\"\\\"input.stage\\\" is not a string or absent\");\n\tconst projectId = parsed[\"projectId\"];\n\tif (typeof projectId !== \"string\") throw invalidPayloadError(\"\\\"projectId\\\" is not a string\");\n\tconst branchId = parsed[\"branchId\"];\n\tif (branchId !== void 0 && typeof branchId !== \"string\") throw invalidPayloadError(\"\\\"branchId\\\" is not a string or absent\");\n\treturn new PrismaCloudContainer({\n\t\tappName,\n\t\tstage\n\t}, projectId, branchId);\n}\nconst workspaceRequiredError = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_WORKSPACE_ID is required.\");\nconst tokenRequiredError$2 = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_SERVICE_TOKEN is required.\");\nfunction requireWorkspaceId() {\n\tconst workspaceId = process.env[\"PRISMA_WORKSPACE_ID\"];\n\tif (workspaceId === void 0 || workspaceId.length === 0) throw workspaceRequiredError();\n\treturn workspaceId;\n}\nfunction requireTokenUnlessInjected(deps) {\n\tif (deps?.client === void 0 && (process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) throw tokenRequiredError$2();\n}\nasync function ensureContainer(input, deps) {\n\tconst workspaceId = requireWorkspaceId();\n\trequireTokenUnlessInjected(deps);\n\tconst program = resolveContainer({\n\t\tworkspaceId,\n\t\tappName: input.appName,\n\t\t...input.stage !== void 0 ? { stage: input.stage } : {},\n\t\tensure: true\n\t}).pipe(Effect.map((c) => ({\n\t\tok: true,\n\t\tcontainer: c\n\t})), Effect.catchTag(\"PrismaApiError\", (e) => Effect.succeed({\n\t\tok: false,\n\t\tmessage: `Prisma Management API error resolving containers: ${e.message}.`\n\t})));\n\tconst provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv()))));\n\tconst outcome = await Effect.runPromise(provided);\n\tif (!outcome.ok) throw new Error(outcome.message);\n\treturn new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId);\n}\nasync function locateContainer(input, deps) {\n\tconst workspaceId = requireWorkspaceId();\n\trequireTokenUnlessInjected(deps);\n\tconst program = resolveContainer({\n\t\tworkspaceId,\n\t\tappName: input.appName,\n\t\t...input.stage !== void 0 ? { stage: input.stage } : {},\n\t\tensure: false\n\t}).pipe(Effect.map((c) => ({\n\t\tok: true,\n\t\tcontainer: c\n\t})), Effect.catchTag(\"ContainerNotFoundError\", () => Effect.succeed({ ok: false })), Effect.catchTag(\"PrismaApiError\", (e) => Effect.fail(/* @__PURE__ */ new Error(`Prisma Management API error resolving containers: ${e.message}.`))));\n\tconst provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv()))));\n\tconst outcome = await Effect.runPromise(provided);\n\tif (!outcome.ok) return void 0;\n\treturn new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId);\n}\n/**\n* Soft-deletes a named stage's Branch after a successful `alchemy destroy`\n* has removed its members — the Management API refuses to delete a Branch\n* that still has live members.\n*/\nasync function removeStageBranch(branchId, deps) {\n\trequireTokenUnlessInjected(deps);\n\tconst program = deleteBranch(branchId).pipe(Effect.map(() => ({ ok: true })), Effect.catchTag(\"PrismaApiError\", (e) => Effect.succeed({\n\t\tok: false,\n\t\tmessage: `Failed to delete the stage Branch: ${e.message}.`\n\t})));\n\tconst provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv()))));\n\tconst outcome = await Effect.runPromise(provided);\n\tif (!outcome.ok) throw new Error(outcome.message);\n}\n/**\n* Best-effort cleanup after a successful `--production` destroy: removes\n* the app's Project so hand-run stacks don't accumulate as empty Projects\n* (they eventually hit the workspace's plan limit). Unlike `removeStageBranch`,\n* this never throws: the destroy itself already succeeded, and the API's own\n* 400 (\"still has dependencies\") is the only check that matters — failing\n* the command over a cleanup step would be worse than leaving a Project shell.\n*/\nasync function removeAppProject(projectId, deps) {\n\tif (deps?.client === void 0 && (process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) {\n\t\tconsole.warn(`Skipped removing the Project (${projectId}): PRISMA_SERVICE_TOKEN is not set.`);\n\t\treturn;\n\t}\n\tconst program = deleteProject(projectId).pipe(Effect.map(() => ({ ok: true })), Effect.catchTag(\"PrismaApiError\", (e) => Effect.succeed({\n\t\tok: false,\n\t\terror: e\n\t})));\n\tconst provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv()))));\n\tconst outcome = await Effect.runPromise(provided);\n\tif (outcome.ok) {\n\t\tconsole.log(`Removed the Project (${projectId}) — nothing was left in it.`);\n\t\treturn;\n\t}\n\tif (outcome.error.status === 400) {\n\t\tconsole.log(`Kept the Project (${projectId}) — it still has another stage's resources.`);\n\t\treturn;\n\t}\n\tconsole.warn(`Could not remove the Project (${projectId}) after destroy: ${outcome.error.message}.`);\n}\nfunction containerDescriptor(deps) {\n\treturn {\n\t\tensure: (input) => ensureContainer(input, deps),\n\t\tlocate: (input) => locateContainer(input, deps),\n\t\tremove: (instance) => instance.input.stage !== void 0 ? removeStageBranch(instance.branchId ?? missingBranchId(instance), deps) : removeAppProject(instance.projectId, deps),\n\t\tdeserialize\n\t};\n}\n/** Defensive: a named-stage container always resolves a Branch together with its stage — `ensure`/`locate`/`deserialize` never produce one without the other. */\nfunction missingBranchId(instance) {\n\tthrow new Error(`${PRISMA_CLOUD_EXTENSION_ID}: a named-stage (\"${instance.input.stage}\") container instance is missing its branchId — this is a bug in ensure/locate/deserialize.`);\n}\nconst PRISMA_NAME_MIN = 3;\nconst PRISMA_NAME_MAX = 65;\nfunction validateName(value, source) {\n\tif (value.length < PRISMA_NAME_MIN || value.length > PRISMA_NAME_MAX) throw new Error(`prisma-cloud: ${source} \"${value}\" (${value.length} characters) is not a valid Prisma resource name — Prisma requires ${PRISMA_NAME_MIN}–${PRISMA_NAME_MAX} characters. Rename the provision id (or the deploy --name) to fit.`);\n}\nfunction isCloudApplication(value) {\n\treturn typeof value === \"object\" && value !== null && \"projectId\" in value && typeof value.projectId === \"string\" && \"branchId\" in value && (value.branchId === void 0 || typeof value.branchId === \"string\");\n}\n/** Narrows `ctx.application`, which core hands over as `unknown`, to this extension's own product; throws naming the hook when it hasn't run. */\nfunction cloudApplicationOf(application) {\n\tif (!isCloudApplication(application)) throw new Error(\"prisma-cloud: ctx.application is not this extension's application product — the prismaCloud() application hook must run before any node lowers.\");\n\treturn application;\n}\nfunction projectIdOf(application) {\n\treturn cloudApplicationOf(application).projectId;\n}\n//#endregion\n//#region src/descriptors/bucket.ts\n/**\n* One Bucket per module-provisioned bucket resource — `id` is the module\n* provision id, so a resource shared by several consumers is created exactly\n* once. A BucketKey is minted for the bucket: it is the reveal-once credential\n* carrier, and its attributes (endpoint, bucketName, accessKeyId,\n* secretAccessKey) become the four S3Config outputs consumers resolve by name.\n*/\nfunction bucketDescriptor(_o) {\n\tconst lowering = ({ id, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst bkt = yield* Prisma.Bucket(`${id}-bucket`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst key = yield* Prisma.BucketKey(`${id}-key`, {\n\t\t\tbucketId: bkt.id,\n\t\t\tname: id,\n\t\t\trole: \"read_write\"\n\t\t});\n\t\tconst secretAccessKey = Output.map(key.secretAccessKey, (v) => Redacted.value(v));\n\t\treturn {\n\t\t\toutputs: {\n\t\t\t\turl: key.endpoint,\n\t\t\t\tbucket: key.bucketName,\n\t\t\t\taccessKeyId: key.accessKeyId,\n\t\t\t\tsecretAccessKey\n\t\t\t},\n\t\t\tentities: [{\n\t\t\t\tkind: \"bucket\",\n\t\t\t\tid: bkt.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/descriptors/compute.ts\n/** The `compute` node kind's descriptor: the four service hooks — provision, serialize, package, deploy. */\n/**\n* Returns the PRECISE descriptor type, not the erased `NodeDescriptor`: the\n* registry in control.ts erases it on assignment anyway (method bivariance),\n* but s3-store composes over these hooks and needs their P/S to stay visible.\n* Annotating this `NodeDescriptor` would force s3-store to cast them back.\n*/\nfunction computeDescriptor(o) {\n\treturn {\n\t\tkind: \"service\",\n\t\tprovision: ({ id, application }) => Effect.gen(function* () {\n\t\t\tvalidateName(id, \"service name (from provision id)\");\n\t\t\tconst projectId = projectIdOf(application);\n\t\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\t\treturn {\n\t\t\t\tserviceId: (yield* Prisma.ComputeService(`${id}-svc`, {\n\t\t\t\t\tprojectId,\n\t\t\t\t\tname: id,\n\t\t\t\t\tregion: o.region ?? \"us-east-1\",\n\t\t\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t\t\t})).id,\n\t\t\t\tprojectId\n\t\t\t};\n\t\t}),\n\t\tserialize: (ctx, provisioned, config) => Effect.gen(function* () {\n\t\t\tconst { address, node, graph } = ctx;\n\t\t\tconst branchId = cloudApplicationOf(ctx.application).branchId;\n\t\t\tconst cls = branchId ? \"preview\" : \"production\";\n\t\t\tconst branch = branchId !== void 0 ? { branchId } : {};\n\t\t\tconst projectId = provisioned.projectId;\n\t\t\tconst svc = node;\n\t\t\tconst records = [];\n\t\t\tfor (const d of paramEntries(svc)) {\n\t\t\t\tconst value = d.owner === \"service\" ? config.service[d.name] : config.inputs[d.owner.input]?.[d.name];\n\t\t\t\tif (value === void 0) continue;\n\t\t\t\tconst key = configKey(address, d);\n\t\t\t\tconst rowValue = d.owner === \"service\" && isParamSource(value) ? encodeParamPointer(paramName(paramBindingFor(graph.params, address, d.name))) : encode(d.owner, value);\n\t\t\t\trecords.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\t\tprojectId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue: rowValue,\n\t\t\t\t\tclass: cls,\n\t\t\t\t\t...branch\n\t\t\t\t}));\n\t\t\t}\n\t\t\tfor (const { key, name } of secretPointerRows(svc, address, graph.secrets)) records.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\tprojectId,\n\t\t\t\tkey,\n\t\t\t\tvalue: name,\n\t\t\t\tclass: cls,\n\t\t\t\t...branch\n\t\t\t}));\n\t\t\tif (svc.expose !== void 0 && Object.keys(svc.expose).length > 0) {\n\t\t\t\tconst refsByBrand = /* @__PURE__ */ new Map();\n\t\t\t\tfor (const edge of provisionedEdges(graph)) {\n\t\t\t\t\tif (edge.providerAddress !== address) continue;\n\t\t\t\t\tconst ref = ctx.provisioned.get(edge.edgeId);\n\t\t\t\t\tif (ref === void 0) continue;\n\t\t\t\t\tconst refs = refsByBrand.get(edge.brand) ?? [];\n\t\t\t\t\trefs.push(ref);\n\t\t\t\t\trefsByBrand.set(edge.brand, refs);\n\t\t\t\t}\n\t\t\t\tfor (const [brand, entry] of o.providerParams) {\n\t\t\t\t\tconst raw = entry.value(refsByBrand.get(brand) ?? []);\n\t\t\t\t\tif (raw === void 0) continue;\n\t\t\t\t\tconst key = configKey(address, {\n\t\t\t\t\t\towner: \"service\",\n\t\t\t\t\t\tname: entry.name\n\t\t\t\t\t});\n\t\t\t\t\tconst value = Output.isOutput(raw) ? Output.map(raw, (v) => encode(\"service\", v)) : encode(\"service\", raw);\n\t\t\t\t\trecords.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\t\t\tprojectId,\n\t\t\t\t\t\tkey,\n\t\t\t\t\t\tvalue,\n\t\t\t\t\t\tclass: cls,\n\t\t\t\t\t\t...branch\n\t\t\t\t\t}));\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tenvironment: records,\n\t\t\t\tport: typeof config.service[\"port\"] === \"number\" ? config.service[\"port\"] : 3e3\n\t\t\t};\n\t\t}),\n\t\tpackage: ({ id }, { assembled, address }) => Effect.try(() => Prisma.packageComputeArtifact({\n\t\t\tid,\n\t\t\tbundleDir: assembled.dir,\n\t\t\tappEntry: assembled.entry,\n\t\t\taddress\n\t\t})),\n\t\tdeploy: ({ id }, provisioned, artifact, serialized) => Effect.gen(function* () {\n\t\t\tconst deployment = yield* Prisma.Deployment(`${id}-deploy`, {\n\t\t\t\tcomputeServiceId: provisioned.serviceId,\n\t\t\t\tartifactPath: artifact.path,\n\t\t\t\tartifactHash: artifact.sha256,\n\t\t\t\tenvironment: serialized.environment,\n\t\t\t\tport: serialized.port\n\t\t\t});\n\t\t\treturn {\n\t\t\t\toutputs: {\n\t\t\t\t\turl: deployment.deployedUrl,\n\t\t\t\t\tprojectId: provisioned.projectId\n\t\t\t\t},\n\t\t\t\tentities: [{\n\t\t\t\t\tkind: \"compute-service\",\n\t\t\t\t\tid: provisioned.serviceId,\n\t\t\t\t\turl: deployment.deployedUrl\n\t\t\t\t}]\n\t\t\t};\n\t\t})\n\t};\n}\n//#endregion\n//#region src/pg-warm-resource.ts\n/**\n* The `PgWarm` Alchemy resource (slice 3, FT-5226) — warm a freshly-provisioned\n* Prisma Postgres database at apply-time so it is ready by deploy-end, and the\n* first real connection (a service's runtime client, or the migration) doesn't\n* eat the cold-start reject.\n*\n* The DB `url` is a lazy `Output` at lowering time, so warming must be an\n* apply-time tracked resource (same pattern as `PnMigration`): its `reconcile`\n* receives the RESOLVED url and connects with `withConnectionRetry` + `select 1`,\n* riding out the cold-start. Shared by BOTH the bare-`postgres` and the\n* `prisma-next` lowerings; keyed on the connection `url`, so an unchanged\n* redeploy is a no-op (warming is idempotent anyway).\n*\n* Deploy-time only: imports `pg` directly + `alchemy`. Imported by `control.ts`\n* and tests, never by `index.ts` / the `./prisma-next` authoring entry — the\n* isolation invariants hold.\n*/\n/** The `PgWarm` resource constructor — `yield* PgWarm(id, { url })` in a lowering. */\nconst PgWarm = Resource(\"PrismaCloud.PgWarm\");\n/** Connect (retrying the cold-start) and run `select 1`, then release the connection. */\nasync function warmDatabase(url) {\n\tawait withConnectionRetry(async () => {\n\t\tconst client = new pg.Client({ connectionString: normalizeSslMode(url) });\n\t\tawait client.connect();\n\t\ttry {\n\t\t\tawait client.query(\"select 1\");\n\t\t} finally {\n\t\t\tawait client.end();\n\t\t}\n\t});\n}\n/**\n* The `PgWarm` provider service. `reconcile` warms the DB (retrying the\n* cold-start) and echoes the `url` so a downstream resource that reads\n* `warm.url` runs only after the DB is warm. Idempotent — safe on redeploy;\n* nothing to enumerate (`list` → `[]`) or tear down (`delete` → no-op; the DB's\n* own deletion handles teardown). Exported so tests can drive it directly.\n*/\nconst pgWarmProviderService = {\n\tlist: () => Effect.succeed([]),\n\treconcile: ({ news }) => Effect.tryPromise({\n\t\ttry: () => warmDatabase(news.url),\n\t\tcatch: (error) => error\n\t}).pipe(Effect.map(() => ({ url: news.url }))),\n\tdelete: () => Effect.void\n};\n/** The `PgWarm` provider layer — merged into the extension descriptor's `providers()`. */\nconst PgWarmProvider = () => Provider.effect(PgWarm, Effect.succeed(pgWarmProviderService));\n//#endregion\n//#region src/descriptors/postgres.ts\n/**\n* One Database per module-provisioned postgres resource — `id` is the\n* module provision id, so a resource shared by several consumers is created\n* exactly once.\n*/\nfunction postgresDescriptor(o) {\n\tconst lowering = ({ id, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst db = yield* Prisma.Database(`${id}-db`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\tregion: o.region ?? \"us-east-1\",\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst conn = yield* Prisma.Connection(`${id}-conn`, {\n\t\t\tdatabaseId: db.id,\n\t\t\tname: id\n\t\t});\n\t\tconst url = Output.map(conn.connectionString, (value) => Redacted.value(value));\n\t\treturn {\n\t\t\toutputs: { url: (yield* PgWarm(`${id}-warm`, { url })).url },\n\t\t\tentities: [{\n\t\t\t\tkind: \"postgres-database\",\n\t\t\t\tid: db.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/pn-config.ts\n/**\n* Resolves a `pnPostgres` resource's `prisma-next.config.ts` path to the\n* on-disk migrations directory the control client's `migrate`/`dbInit` needs\n* (ADR-0022, slice 2). Deploy-time only: loads PN's config (via c12) and\n* applies PN's own convention — `migrations.dir`, or the default `migrations/`,\n* relative to the config file's directory (mirrors the CLI's\n* `resolveMigrationPaths`). Imported by `control.ts` + tests, never by\n* `index.ts` / the `./prisma-next` authoring entry.\n*\n* `pathe` (not `node:path`) does the path work so the shipped source carries no\n* `node:` import — the same discipline `control.ts` already follows by\n* delegating fs/tar to `@internal/lowering` (invariant 5).\n*/\n/** The absolute migrations directory PN reads authored migration packages from. */\nasync function resolveMigrationsDir(configPath) {\n\treturn resolve(configPath, \"..\", (await loadConfig(configPath)).migrations?.dir ?? \"migrations\");\n}\n//#endregion\n//#region src/prisma-next-migrate.ts\n/**\n* The Prisma Next migration step of the deploy lowering (ADR-0022, slice 2) —\n* the safety-critical decision that brings a live database to a target REF\n* using ONLY Prisma Next's authored migrations.\n*\n* Deploy-time only: this module imports `@prisma-next/postgres/control` (which\n* transitively pulls PN's control/migration machinery + `pg`). It is imported\n* by the deploy descriptors and this package's tests, NEVER by `index.ts` / the\n* `./prisma-next` authoring entry — so it never lands in an app runtime bundle\n* (the index-isolation invariant holds).\n*\n* The target is a ref `{ hash, invariants }` — not a bare `storageHash`. A\n* ref's `invariants` are named postconditions established by `data`-class\n* migration steps (e.g. a backfill), recorded monotonically on the live\n* marker. Keying on the hash alone would make a pure data-invariant change an\n* A→A self-edge the deploy wrongly skips. The decision, given the live marker\n* and the target ref (see {@link decideMigrationAction}):\n*   - marker at ref.hash AND ref.invariants ⊆ marker.invariants → no-op\n*   - no marker (fresh DB) AND no required invariants           → `dbInit`\n*   - otherwise                                                  → `migrate`\n*\n* `dbInit` is additive-only synthesis — it NEVER runs app-space data steps —\n* so it is only correct when the ref requires no invariants; a fresh DB whose\n* target carries invariants goes through `migrate`, which walks the AUTHORED\n* graph (including the invariant-bearing data migrations) from empty.\n*\n* Never `dbUpdate`: synthesized diff-and-apply plans are never run against a\n* deployed database. A no-authored-path (`MIGRATION_PATH_NOT_FOUND`) or a\n* runner failure fails the deploy as a typed `PnMigrationError` (not swallowed).\n* PN applies each migration in its own transaction, so a failed apply is atomic\n* and resume-safe — the marker and schema are left as the last committed step.\n*/\n/** A deploy-failing migration error — surfaced, never swallowed. */\nvar PnMigrationError = class extends Error {\n\tcode;\n\t/** PN's structured explanation, when present. */\n\twhy;\n\tconstructor(code, summary, why) {\n\t\tsuper(`prisma-next migrate (${code}): ${summary}`);\n\t\tthis.name = \"PnMigrationError\";\n\t\tthis.code = code;\n\t\tthis.why = why;\n\t}\n};\n/**\n* The target `storageHash` a contract heads to — `contractJson.storage.storageHash`.\n* Read defensively: `contractJson` crosses the boundary as `unknown`.\n*/\nfunction targetStorageHash(contractJson) {\n\tif (typeof contractJson === \"object\" && contractJson !== null && \"storage\" in contractJson) {\n\t\tconst storage = contractJson.storage;\n\t\tif (typeof storage === \"object\" && storage !== null && \"storageHash\" in storage) {\n\t\t\tconst hash = storage.storageHash;\n\t\t\tif (typeof hash === \"string\" && hash.length > 0) return hash;\n\t\t}\n\t}\n\tthrow new PnMigrationError(\"INIT_FAILED\", \"the contract has no storage.storageHash — cannot determine the target schema version\");\n}\n/**\n* Resolve the deploy's target ref from the migrations dir.\n*\n* - `targetRef` named: read `migrations/app/refs/<name>.json` — fail loudly\n*   (`TARGET_REF_NOT_FOUND`) when the ref doesn't exist or can't be parsed.\n* - Default: the app space's head. PN synthesizes the app head from the\n*   emitted contract — `{ hash: contract.storage.storageHash, invariants: [] }`\n*   (`contract emit` writes no app-space `refs/head.json` today; extension\n*   spaces have one on disk). When a future PN version does emit one, the\n*   on-disk `head.json` wins — read via `readContractSpaceHeadRef`, exactly\n*   the loader PN's own migrate uses.\n*/\nasync function resolveTargetRef(migrationsDir, contractJson, targetRef) {\n\tif (targetRef !== void 0) {\n\t\tconst refsDir = spaceRefsDirectory(spaceMigrationDirectory(migrationsDir, APP_SPACE_ID));\n\t\ttry {\n\t\t\tconst ref = await readRef(refsDir, targetRef);\n\t\t\treturn {\n\t\t\t\thash: ref.hash,\n\t\t\t\tinvariants: ref.invariants\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tthrow new PnMigrationError(\"TARGET_REF_NOT_FOUND\", `targetRef \"${targetRef}\" could not be read from ${refsDir}`, error instanceof Error ? error.message : String(error));\n\t\t}\n\t}\n\tconst head = await readContractSpaceHeadRef(migrationsDir, APP_SPACE_ID);\n\tif (head !== null) return {\n\t\thash: head.hash,\n\t\tinvariants: head.invariants\n\t};\n\treturn {\n\t\thash: targetStorageHash(contractJson),\n\t\tinvariants: []\n\t};\n}\n/**\n* The pure migration decision, mirroring PN's own verifier: the database is\n* AT the target when the marker's hash equals the ref's hash AND every ref\n* invariant is on the marker (marker invariants are monotonic). `dbInit` is\n* additive-only synthesis, so it is chosen only for a fresh DB whose\n* effective required invariants (`ref.invariants − marker.invariants`) are\n* empty; anything else — different hash, missing invariant (the A→A\n* data-only self-edge), or a fresh DB with required invariants — walks the\n* authored graph via `migrate`.\n*/\nfunction decideMigrationAction(marker, ref) {\n\tconst markerInvariants = new Set(marker?.invariants ?? []);\n\tconst missing = ref.invariants.filter((id) => !markerInvariants.has(id));\n\tif (marker !== null && marker.storageHash === ref.hash && missing.length === 0) return \"noop\";\n\tif (marker === null && missing.length === 0) return \"init\";\n\treturn \"migrate\";\n}\n/**\n* Bring the database at `url` to the target ref via PN's authored migrations.\n* Reads the live marker, decides no-op / init / migrate\n* ({@link decideMigrationAction}), applies, and throws a typed\n* {@link PnMigrationError} on a no-path or runner failure. `migrationsDir` is\n* the on-disk migrations root and `ref` the resolved target\n* ({@link resolveTargetRef} — both resolved by the lowering, which also keys\n* the PnMigration resource on them). `refName` (the resource's `targetRef`,\n* when set) is threaded into `migrate` so PN targets the named ref's hash and\n* plans an invariant-bearing path.\n*/\nasync function applyPnMigration(opts) {\n\tconst connection = normalizeSslMode(opts.url);\n\treturn withConnectionRetry(() => runMigration(connection, opts.contractJson, opts.migrationsDir, opts.ref, opts.refName), { shouldRetry: (error) => !(error instanceof PnMigrationError) });\n}\nasync function runMigration(connection, contractJson, migrationsDir, ref, refName) {\n\tconst client = createPostgresControlClient({ connection });\n\tawait client.connect();\n\ttry {\n\t\tconst marker = await client.readMarker();\n\t\tconst markerHashBefore = marker?.storageHash ?? null;\n\t\tconst action = decideMigrationAction(marker, ref);\n\t\tif (action === \"noop\") return {\n\t\t\taction,\n\t\t\ttargetHash: ref.hash,\n\t\t\tmarkerHashBefore\n\t\t};\n\t\tif (action === \"init\") {\n\t\t\tconst result = await client.dbInit({\n\t\t\t\tcontract: contractJson,\n\t\t\t\tmode: \"apply\",\n\t\t\t\tmigrationsDir\n\t\t\t});\n\t\t\tif (!result.ok) throw new PnMigrationError(\"INIT_FAILED\", result.failure.summary, result.failure.why);\n\t\t\treturn {\n\t\t\t\taction,\n\t\t\t\ttargetHash: ref.hash,\n\t\t\t\tmarkerHashBefore\n\t\t\t};\n\t\t}\n\t\tconst result = await client.migrate({\n\t\t\tcontract: contractJson,\n\t\t\tmigrationsDir,\n\t\t\t...refName !== void 0 ? {\n\t\t\t\trefHash: ref.hash,\n\t\t\t\trefInvariants: ref.invariants,\n\t\t\t\trefName\n\t\t\t} : {}\n\t\t});\n\t\tif (!result.ok) throw new PnMigrationError(result.failure.code === \"MIGRATION_PATH_NOT_FOUND\" ? \"MIGRATION_PATH_NOT_FOUND\" : \"RUNNER_FAILED\", result.failure.summary, result.failure.why);\n\t\treturn {\n\t\t\taction,\n\t\t\ttargetHash: ref.hash,\n\t\t\tmarkerHashBefore\n\t\t};\n\t} finally {\n\t\tawait client.close();\n\t}\n}\n//#endregion\n//#region src/pn-migration-resource.ts\n/**\n* The `PnMigration` Alchemy resource (ADR-0022, slice 2 D2) — the migration\n* step modeled as a tracked resource so it participates in deploy state: keyed\n* on the target REF identity (`targetHash` + sorted `invariants`), an\n* unchanged redeploy is an Alchemy-level no-op (on top of the marker read),\n* and a contract change — or a DATA-ONLY change that adds a ref invariant at\n* the same hash — re-runs the migration.\n*\n* Its provider's `reconcile` receives the RESOLVED props at apply-time — in\n* particular the concrete DB `url` (a lazy `Output` until the Connection\n* provisions) — and delegates to the proven `applyPnMigration` decision. The\n* provider is a standalone `Provider<PnMigration>` layer; the extension\n* descriptor merges it into its `providers()` (`Layer.merge(Prisma.providers(),\n* PnMigrationProvider())`), and Alchemy resolves it at apply via a direct\n* provider-tag lookup (`tryFindProviderByType`) — no change to `@internal/lowering`.\n*\n* Deploy-time only: imports `@prisma-next/postgres/control` (via the helper) +\n* `alchemy`. Imported by `control.ts` and tests, never by `index.ts` / the\n* `./prisma-next` authoring entry — index isolation holds.\n*/\n/** The `PnMigration` resource constructor — `yield* PnMigration(id, props)` in the lowering. */\nconst PnMigration = Resource(\"PrismaNext.Migration\");\n/**\n* The `PnMigration` provider service. `reconcile` runs for both create and\n* update (Alchemy's unified lifecycle); `applyPnMigration` is idempotent via\n* the live marker read, so it is safe to run for either — the marker decides\n* no-op / init / migrate. A migration has nothing to enumerate (`list` → `[]`)\n* and nothing to tear down on its own (`delete` → no-op; the DB's own deletion\n* handles teardown). Exported so tests can drive `reconcile` directly, without\n* building an Effect layer.\n*/\nconst pnMigrationProviderService = {\n\tlist: () => Effect.succeed([]),\n\treconcile: ({ news }) => Effect.tryPromise({\n\t\ttry: () => applyPnMigration({\n\t\t\turl: news.url,\n\t\t\tcontractJson: news.contractJson,\n\t\t\tmigrationsDir: news.migrationsDir,\n\t\t\tref: {\n\t\t\t\thash: news.targetHash,\n\t\t\t\tinvariants: news.invariants\n\t\t\t},\n\t\t\t...news.refName !== void 0 ? { refName: news.refName } : {}\n\t\t}),\n\t\tcatch: (error) => error\n\t}).pipe(Effect.map((outcome) => ({\n\t\tstorageHash: outcome.targetHash,\n\t\tinvariants: news.invariants\n\t}))),\n\tdelete: () => Effect.void\n};\n/** The `PnMigration` provider layer — merged into the extension descriptor's `providers()`. */\nconst PnMigrationProvider = () => Provider.effect(PnMigration, Effect.succeed(pnMigrationProviderService));\n//#endregion\n//#region src/descriptors/prisma-next.ts\n/**\n* The migration is a tracked `PnMigration` Alchemy resource keyed on the\n* target REF identity (hash + sorted invariants): unchanged redeploy is a\n* no-op, a contract or ref-invariant change re-migrates.\n*/\nfunction prismaNextDescriptor(o) {\n\tconst lowering = ({ id, node, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst db = yield* Prisma.Database(`${id}-db`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\tregion: o.region ?? \"us-east-1\",\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst conn = yield* Prisma.Connection(`${id}-conn`, {\n\t\t\tdatabaseId: db.id,\n\t\t\tname: id\n\t\t});\n\t\tconst url = Output.map(conn.connectionString, (value) => Redacted.value(value));\n\t\tif (!isPnPostgresResourceNode(node)) throw new Error(`prisma-next lowering received a non-prisma-next node (${id}).`);\n\t\tconst contractJson = node.provides.__cmp.contractJson;\n\t\tconst migrationsDir = yield* Effect.promise(() => resolveMigrationsDir(node.config));\n\t\tconst ref = yield* Effect.promise(() => resolveTargetRef(migrationsDir, contractJson, node.targetRef));\n\t\tconst warm = yield* PgWarm(`${id}-warm`, { url });\n\t\tyield* PnMigration(`${id}-migrate`, {\n\t\t\turl: warm.url,\n\t\t\tcontractJson,\n\t\t\tmigrationsDir,\n\t\t\ttargetHash: ref.hash,\n\t\t\tinvariants: [...ref.invariants].sort(),\n\t\t\t...node.targetRef !== void 0 ? { refName: node.targetRef } : {}\n\t\t});\n\t\treturn {\n\t\t\toutputs: { url: warm.url },\n\t\t\tentities: [{\n\t\t\t\tkind: \"postgres-database\",\n\t\t\t\tid: db.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/s3-credentials-resource.ts\n/**\n* The `S3Credentials` Alchemy resource (S5) — mints a random SigV4 key pair\n* ONCE at create and keeps it STABLE across deploys, so an unchanged module\n* no-ops on redeploy. The pair is generated with the Web Crypto global\n* (`crypto.getRandomValues` — no `node:` import, matching this package's\n* runtime-coupling invariant) and persisted in Alchemy state; on every later\n* apply the provider returns the persisted attributes (`reconcile`'s `output`)\n* unchanged — the same way the postgres resource keeps a Connection stable.\n* Rotation is destroy/recreate (a platform ask, not solved here).\n*\n* Deploy-time only: imports `alchemy`. Imported by `control.ts` and tests,\n* never by `index.ts` / the authoring entry.\n*/\n/** The `S3Credentials` resource constructor — `yield* S3Credentials(id, {})` in the lowering. */\nconst S3Credentials = Resource(\"PrismaCloud.S3Credentials\");\nfunction randomBytes(n) {\n\treturn crypto.getRandomValues(new Uint8Array(n));\n}\nfunction toHexUpper(bytes) {\n\treturn Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\").toUpperCase();\n}\n/** A fresh SigV4 key pair: an AKIA-prefixed id and a 40-char base64 secret. */\nfunction mintKeyPair() {\n\treturn {\n\t\taccessKeyId: `AKIA${toHexUpper(randomBytes(8))}`,\n\t\tsecretAccessKey: btoa(String.fromCharCode(...randomBytes(30)))\n\t};\n}\n/**\n* The `S3Credentials` provider service. `reconcile` runs for create and update;\n* it returns the persisted `output` when present (a redeploy reuses the stored\n* pair — the no-op property) and mints a fresh pair only on first create.\n* Nothing to enumerate (`list` → `[]`) or tear down (`delete` → no-op; the pair\n* lives only in state). Exported so tests can drive it directly.\n*/\nconst s3CredentialsProviderService = {\n\tlist: () => Effect.succeed([]),\n\treconcile: ({ output }) => Effect.sync(() => output ?? mintKeyPair()),\n\tdelete: () => Effect.void\n};\n/** The `S3Credentials` provider layer — merged into the extension descriptor's `providers()`. */\nconst S3CredentialsProvider = () => Provider.effect(S3Credentials, Effect.succeed(s3CredentialsProviderService));\n//#endregion\n//#region src/descriptors/s3-credentials.ts\n/**\n* One `S3Credentials` resource per provisioned credentials node — `id` is the\n* module provision id, so a pair shared by the storage service is minted once\n* and kept stable across deploys (the resource's provider preserves it).\n* `_o` is unused today (the mint needs no region/project) but kept for symmetry\n* with the other descriptors' signature.\n*/\nfunction s3CredentialsDescriptor(_o) {\n\tconst lowering = ({ id }) => Effect.gen(function* () {\n\t\tconst creds = yield* S3Credentials(`${id}-creds`, {});\n\t\treturn {\n\t\t\toutputs: {\n\t\t\t\taccessKeyId: creds.accessKeyId,\n\t\t\t\tsecretAccessKey: creds.secretAccessKey\n\t\t\t},\n\t\t\tentities: []\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/descriptors/s3-store.ts\nfunction s3StoreDescriptor(o) {\n\tconst base = computeDescriptor(o);\n\treturn {\n\t\tkind: \"service\",\n\t\tprovision: base.provision,\n\t\tpackage: base.package,\n\t\tserialize: (ctx, provisioned, config) => Effect.gen(function* () {\n\t\t\tconst serialized = yield* base.serialize(ctx, provisioned, config);\n\t\t\tconst credentials = config.inputs[\"credentials\"] ?? {};\n\t\t\tconst bucket = config.service[\"bucket\"];\n\t\t\tif (credentials[\"accessKeyId\"] === void 0 || credentials[\"secretAccessKey\"] === void 0 || bucket === void 0) throw new Error(\"s3-store service must wire a 'credentials' dependency and a 'bucket' param\");\n\t\t\treturn {\n\t\t\t\t...serialized,\n\t\t\t\tbucket,\n\t\t\t\taccessKeyId: credentials[\"accessKeyId\"],\n\t\t\t\tsecretAccessKey: credentials[\"secretAccessKey\"]\n\t\t\t};\n\t\t}),\n\t\tdeploy: (ctx, provisioned, artifact, serialized) => Effect.gen(function* () {\n\t\t\tconst deployed = yield* base.deploy(ctx, provisioned, artifact, serialized);\n\t\t\treturn {\n\t\t\t\t...deployed,\n\t\t\t\toutputs: {\n\t\t\t\t\t...deployed.outputs,\n\t\t\t\t\tbucket: serialized.bucket,\n\t\t\t\t\taccessKeyId: serialized.accessKeyId,\n\t\t\t\t\tsecretAccessKey: serialized.secretAccessKey\n\t\t\t\t}\n\t\t\t};\n\t\t})\n\t};\n}\n//#endregion\n//#region src/preflight.ts\n/**\n* Deploy preflight (ADR-0029, extended for env-sourced params): before Alchemy\n* runs, verify every secret binding AND every env-sourced param binding in the\n* app's manifests (each a platform env-var NAME) exists on Prisma Cloud for\n* the target stage. A literal-bound param never touches the platform — only\n* `envParam(...)` sources are checked here.\n* A name absent on the platform but present in the deploy shell is provisioned\n* via a direct Management API POST — NEVER an Alchemy resource, so the value\n* never lands in hosted deploy state. A name absent from both fails the deploy,\n* listing exactly what is missing and where to set it.\n*\n* Control-plane only (imported by control.ts → prisma-composer.config.ts); runs\n* in the CLI parent, so it builds its own Management API client from env — the\n* same credential path `container.ts`'s `ensure`/`locate` use.\n*/\n/** production for the default stage; preview for a named stage — matching how the pack writes config rows. */\nconst classFor = (branchId) => branchId === void 0 ? \"production\" : \"preview\";\n/**\n* One page of the env-var list. The query is `blindCast` to `never` because\n* openapi-fetch types this path's query as `never` (an SDK path/operation\n* mismatch); that same workaround defeats the client's response-type inference,\n* so the result is projected to the small shape we actually read.\n*/\nasync function listEnvVars(client, query) {\n\treturn blindCast(await client.GET(\"/v1/environment-variables\", { params: { query: blindCast(query) } }));\n}\nasync function existsOnPlatform(client, projectId, branchId, key) {\n\tconst cls = classFor(branchId);\n\tconst visible = (row) => branchId === void 0 || row.branchId === null || row.branchId === branchId;\n\tlet cursor = null;\n\tdo {\n\t\tconst res = await listEnvVars(client, cursor === null ? {\n\t\t\tprojectId,\n\t\t\tclass: cls,\n\t\t\tkey\n\t\t} : {\n\t\t\tprojectId,\n\t\t\tclass: cls,\n\t\t\tkey,\n\t\t\tcursor\n\t\t});\n\t\tif (res.error !== void 0) throw listFailedError(key, res.error);\n\t\tconst page = res.data;\n\t\tif (page === void 0) return false;\n\t\tif (page.data.some(visible)) return true;\n\t\tcursor = page.pagination.hasMore ? page.pagination.nextCursor : null;\n\t} while (cursor !== null);\n\treturn false;\n}\n/**\n* Provision `key`=`value` directly via the Management API for the target\n* stage's scope (a production template for the default stage; a preview branch\n* override for a named stage — the same scope the pack writes config rows to,\n* EnvironmentVariable.ts). A 409 means a concurrent deploy already provisioned\n* it — tolerated. The value is never logged.\n*/\nasync function fillMissing(client, projectId, branchId, key, value) {\n\tconst res = await client.POST(\"/v1/environment-variables\", { body: {\n\t\tprojectId,\n\t\tclass: classFor(branchId),\n\t\tkey,\n\t\tvalue,\n\t\t...branchId !== void 0 ? { branchId } : {}\n\t} });\n\tif (res.error !== void 0 && res.response.status !== 409) throw fillFailedError(key, res.error);\n}\nconst tokenRequiredError$1 = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_SERVICE_TOKEN is required for deploy preflight.\");\nconst listFailedError = (key, error) => /* @__PURE__ */ new Error(`deploy preflight: Prisma Management API error listing \"${key}\": ${JSON.stringify(error)}.`);\nconst fillFailedError = (key, error) => /* @__PURE__ */ new Error(`deploy preflight: failed to provision \"${key}\" from the deploy shell: ${JSON.stringify(error)}.`);\nfunction missingError(missing, branchId, stage) {\n\tconst scope = branchId === void 0 ? \"the production class (project-level template)\" : `the preview class of stage \"${stage ?? branchId}\" (branch override or template)`;\n\tconst lines = missing.map((m) => `  - ${m.name}  (required by service \"${m.serviceAddress}\")`);\n\treturn /* @__PURE__ */ new Error(`Deploy preflight failed — ${missing.length} env var(s) (secret or env-sourced param) are not provisioned on Prisma Cloud for ${scope}, and are absent from the deploy shell:\\n${lines.join(\"\\n\")}\\n\\nSet each in the deploy shell environment (the CLI will provision it on deploy), or create it on the platform (Prisma Console or the Management API) in ${scope}.`);\n}\nasync function managementClient$1() {\n\tif ((process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) throw tokenRequiredError$1();\n\treturn Effect.runPromise(Effect.gen(function* () {\n\t\treturn yield* ManagementClient;\n\t}).pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv())))));\n}\n/**\n* The Prisma Cloud extension's `preflight`. Aggregates the target-agnostic\n* manifests (core's `provisionManifest` for secrets, `paramManifest` filtered\n* to env-sourced bindings for params), checks each pointer name against the\n* platform, fills from the shell where possible, and fails loudly on anything\n* absent from both. Accepts an injected client for tests; otherwise builds one\n* from env.\n*/\nasync function runPreflight(input, deps) {\n\tconst { projectId, branchId } = prismaCloudContainerOf(input.container);\n\tconst names = /* @__PURE__ */ new Map();\n\tfor (const binding of provisionManifest(input.graph)) {\n\t\tconst name = secretName(binding);\n\t\tif (!names.has(name)) names.set(name, {\n\t\t\tname,\n\t\t\tserviceAddress: binding.serviceAddress\n\t\t});\n\t}\n\tfor (const binding of paramManifest(input.graph)) {\n\t\tif (!isEnvParamSource(binding.binding)) continue;\n\t\tconst name = paramName(binding);\n\t\tif (!names.has(name)) names.set(name, {\n\t\t\tname,\n\t\t\tserviceAddress: binding.serviceAddress\n\t\t});\n\t}\n\tif (names.size === 0) return;\n\tconst client = deps?.client ?? await managementClient$1();\n\tconst missing = [];\n\tfor (const meta of names.values()) {\n\t\tif (await existsOnPlatform(client, projectId, branchId, meta.name)) continue;\n\t\tconst shellValue = process.env[meta.name];\n\t\tif (shellValue !== void 0 && shellValue.length > 0) {\n\t\t\tawait fillMissing(client, projectId, branchId, meta.name, shellValue);\n\t\t\tcontinue;\n\t\t}\n\t\tmissing.push(meta);\n\t}\n\tif (missing.length > 0) throw missingError(missing, branchId, input.stage);\n}\n//#endregion\n//#region src/teardown.ts\nconst tokenRequiredError = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_SERVICE_TOKEN is required for destroy teardown.\");\nasync function managementClient() {\n\tif ((process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) throw tokenRequiredError();\n\treturn Effect.runPromise(Effect.gen(function* () {\n\t\treturn yield* ManagementClient;\n\t}).pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv())))));\n}\n/**\n* The Prisma Cloud extension's `teardown`. Removes the stage's state database,\n* with failure handling that differs by stage because the consequences do:\n*\n* - **Named stage: throw.** The Branch delete that follows would fail anyway —\n*   the platform refuses a Branch that still has a database attached — so\n*   failing here names the actual cause instead of a confusing symptom.\n* - **Production: warn and continue.** Nothing blocks the Project delete on\n*   this; removing the database only stops production's state outliving\n*   production and holding a quota slot. That is a cleanup step, and a cleanup\n*   step must not fail the command.\n*\n* Accepts an injected client and ownership verifier for tests; otherwise\n* builds a client from env and verifies against the real database.\n*/\nasync function runTeardown(input, deps) {\n\tconst { projectId, branchId } = prismaCloudContainerOf(input.container);\n\tconst isNamedStage = branchId !== void 0;\n\ttry {\n\t\tconst client = deps?.client ?? await managementClient();\n\t\tawait Effect.runPromise(deleteStateDatabaseWith({\n\t\t\tprojectId,\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t}, deps?.verify ?? verifyOwnership).pipe(Effect.provideService(ManagementClient, client)));\n\t} catch (error) {\n\t\tconst reason = error instanceof Error ? error.message : String(error);\n\t\tif (isNamedStage) throw new Error(`Failed to delete the deploy-state database: ${reason}`);\n\t\tconsole.warn(`Could not remove production's deploy-state database: ${reason}`);\n\t}\n}\n//#endregion\n//#region src/control/extension.ts\n/** The Prisma Cloud–hosted deploy state store; its implementation lives in @internal/lowering. */\n/**\n* ADR-0031's registered provisioner for RPC_PEER_KEY: mints one `ServiceKey`\n* resource per edge (ADR-0030) and forwards its value as the opaque ref core\n* writes into the consumer's `serviceKey` param. The resource id keeps the\n* `servicekey-${edgeId}` scheme byte-identical to slice 2's, so an existing\n* deploy's keys are found, not re-minted. Defined here, not in service-keys.ts:\n* that module is also reachable from the runtime/authoring side, which must\n* never import `@internal/lowering` or `effect`.\n*/\nconst serviceKeyProvisioner = { provision: (edge) => Effect.gen(function* () {\n\treturn (yield* Prisma.ServiceKey(`servicekey-${edge.edgeId}`, {})).value;\n}) };\n/**\n* `ctx.provisioned`'s refs are typed `unknown` — core forwards a provisioner's\n* ref without inspecting it. Each provider param below is the sole reader of\n* its own provisioner's output, so the shape is asserted here, once, rather\n* than checked.\n*/\nconst asKeyOutputs = (refs) => refs.map((ref) => blindCast(ref));\n/**\n* RPC's deploy-side `value(refs)` (ADR-0030): the provider stores a SET — one\n* key per inbound edge — into the accepted-keys var `serve()` reads. Paired\n* with the provisioner above: mint per edge, aggregate every edge.\n*\n* Zero consumers still emits, and that is the whole point of #100: an ABSENT\n* var means \"never provisioned\" and passes every caller through, so a deployed\n* provider nobody wired must say \"[]\" — deny everything — rather than say\n* nothing. Written as a literal because `Output.all()` with no arguments has\n* nothing to resolve.\n*/\nconst rpcAcceptedKeysValue = (refs) => refs.length > 0 ? Output.all(...asKeyOutputs(refs)) : [];\n/**\n* ADR-0031's registered provisioner for STREAMS_API_KEY — the same `ServiceKey`\n* mint, keyed PER PROVIDER instead of per edge: the resource id is the\n* provider's address, so every consumer edge of one streams module resolves to\n* the same resource and therefore the same stable value. That is what\n* `@prisma/streams-server` requires (it authenticates a single `API_KEY`), and\n* cardinality is exactly what ADR-0031 leaves to the provisioner. Making it\n* per-edge later is this id's shape plus an accepted-set provider param — no\n* new resource, no core change.\n*/\nconst streamsApiKeyProvisioner = { provision: (edge) => Effect.gen(function* () {\n\treturn (yield* Prisma.ServiceKey(`streamskey-${edge.providerAddress}`, {})).value;\n}) };\n/**\n* Streams' deploy-side `value(refs)`: ONE value, not a set —\n* `@prisma/streams-server` authenticates a single `API_KEY`, which is why the\n* provisioner above mints per provider. That pairing is the invariant this\n* param depends on, so it asserts rather than trusts it: a future per-edge\n* flip without a paired accepted-set param here would otherwise ship\n* whichever key came first and leave every other consumer 401ing, silently.\n* The refs are lazy Outputs (not comparable at serialize time); inside\n* `Output.map` they are resolved strings, the same seam RPC's set aggregates\n* on.\n*\n* Zero consumers emits NOTHING — the streams counterpart to RPC's \"[]\".\n* `@prisma/streams-server` has no deny-all mode: it either authenticates a key\n* or runs --no-auth, so there is no value here that means \"refuse everyone\".\n* Writing no key is what fails closed — the entrypoint refuses to boot with\n* a named error rather than serve unauthenticated.\n*/\nconst streamsApiKeyValue = (refs) => {\n\tif (refs.length === 0) return void 0;\n\treturn Output.map(Output.all(...asKeyOutputs(refs)), (vals) => {\n\t\tconst distinct = [...new Set(vals)];\n\t\tif (distinct.length > 1) throw new Error(`a streams provider was provisioned ${distinct.length} distinct keys across its ${refs.length} inbound bindings, but it can only be given one (@prisma/streams-server authenticates a single API_KEY). Its provisioner must mint per provider, not per edge — or this param must store an accepted-key set, once the server accepts one.`);\n\t\treturn distinct[0] ?? \"\";\n\t});\n};\n/** The user-facing state descriptor: `state: prismaState()` in `prisma-composer.config.ts` (ADR-0017). */\nconst prismaState = () => ({\n\textension: PRISMA_CLOUD_EXTENSION_ID,\n\tcreate: (container) => {\n\t\tconst { projectId, branchId } = prismaCloudContainerOf(container);\n\t\treturn prismaStateLayer(branchId !== void 0 ? {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t} : { projectId });\n\t}\n});\nconst KNOWN_REGION_SET = new Set(Prisma.COMPUTE_REGIONS);\nfunction isComputeRegion(value) {\n\treturn KNOWN_REGION_SET.has(value);\n}\n/** Prisma.providers()'s ProviderCollection doesn't structurally unify with Alchemy's inferred providers Layer (a @internal/lowering typings gap); it satisfies it at runtime. */\nfunction asProvidersLayer(layer) {\n\treturn layer;\n}\n/**\n* This extension's brands, each with the two halves ADR-0031 splits: the\n* PROVISIONER core resolves a mint through, and the reserved PROVIDER PARAM\n* that stores the minted values on the provider. So this file stays the only\n* place a brand is named — `descriptors/compute.ts` just looks a provider\n* param up by brand.\n*\n* `__tests__/provider-params.test.ts` asserts this map's brands are exactly\n* `PROVIDER_PARAMS`'s brands: a brand minted here with no provider param\n* below would leave the value it mints written to consumers while no\n* provider ever stores an accepted-keys row for it — `serve()` (or the\n* equivalent runtime reader) then sees an absent var and passes every caller\n* through.\n*/\nconst PROVISIONERS = /* @__PURE__ */ new Map([[RPC_PEER_KEY, serviceKeyProvisioner], [STREAMS_API_KEY, streamsApiKeyProvisioner]]);\n/**\n* Every brand's deploy-side `value(refs)` — the only per-brand thing this\n* file still holds directly. `PROVIDER_PARAMS` below is built by mapping\n* `RESERVED_PROVIDER_PARAMS` (`provider-params.ts`, the boot-side list) onto\n* this map, so a param can exist on the deploy side only if it already\n* exists on the boot side: `RESERVED_PROVIDER_PARAMS` is the single source of\n* which reserved provider params exist at all, closing the drift the old\n* name-comparison test only detected after the fact.\n*/\nconst PROVIDER_PARAM_VALUES = /* @__PURE__ */ new Map([[RPC_PEER_KEY, rpcAcceptedKeysValue], [STREAMS_API_KEY, streamsApiKeyValue]]);\n/**\n* Builds the deploy-side registry from the boot-side list, keyed by brand —\n* throws if a boot-side entry has no registered deploy-side `value(refs)`, so\n* `RESERVED_PROVIDER_PARAMS` stays the single source of which reserved\n* provider params exist: deploy can no longer write a row boot never\n* stashes. Exported (rather than inlined into `PROVIDER_PARAMS` below) so\n* `__tests__/provider-params.test.ts` can drive it directly with a\n* deliberately incomplete value map and watch it throw.\n*/\nfunction buildProviderParams(entries, values) {\n\treturn new Map(entries.map((entry) => {\n\t\tconst value = values.get(entry.brand);\n\t\tif (value === void 0) throw new Error(`prisma-cloud: reserved provider param \"${entry.name}\" (provider-params.ts) has no registered deploy-side value() in control.ts's PROVIDER_PARAM_VALUES — every param in RESERVED_PROVIDER_PARAMS must have one.`);\n\t\treturn [entry.brand, {\n\t\t\t...entry,\n\t\t\tvalue\n\t\t}];\n\t}));\n}\nconst PROVIDER_PARAMS = buildProviderParams(RESERVED_PROVIDER_PARAMS, PROVIDER_PARAM_VALUES);\n/**\n* Resolves the factory's env-or-option inputs, failing fast with the exact\n* variable name.\n*/\nfunction resolveOptions(opts) {\n\tconst workspaceId = opts.workspaceId ?? process.env[\"PRISMA_WORKSPACE_ID\"];\n\tif (workspaceId === void 0 || workspaceId.length === 0) throw new Error(\"prismaCloud(): environment variable PRISMA_WORKSPACE_ID is required.\");\n\tif (opts.region !== void 0) return {\n\t\tworkspaceId,\n\t\tregion: opts.region,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n\tconst region = process.env[\"PRISMA_REGION\"];\n\tif (region === void 0 || region.length === 0) return {\n\t\tworkspaceId,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n\tif (!isComputeRegion(region)) throw new Error(`prismaCloud(): environment variable PRISMA_REGION=\"${region}\" is not a known region (expected one of: ${Prisma.COMPUTE_REGIONS.join(\", \")}).`);\n\treturn {\n\t\tworkspaceId,\n\t\tregion,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n}\n/** The Prisma Cloud extension descriptor — `prisma-composer.config.ts` lists it under `extensions`. */\nconst prismaCloud = (opts = {}) => {\n\tconst o = resolveOptions(opts);\n\treturn {\n\t\tid: PRISMA_CLOUD_EXTENSION_ID,\n\t\tcontainer: containerDescriptor(),\n\t\tproviders: () => asProvidersLayer(Layer.mergeAll(Prisma.providers(), PgWarmProvider(), PnMigrationProvider(), S3CredentialsProvider(), Prisma.ServiceKeyProvider())),\n\t\tpreflight: (input) => runPreflight(input),\n\t\tteardown: (input) => runTeardown(input),\n\t\tapplication: { provision: (ctx) => Effect.gen(function* () {\n\t\t\tconst { projectId, branchId } = prismaCloudContainerOf(ctx.container);\n\t\t\tfor (const key of [\"DATABASE_URL\", \"DATABASE_URL_POOLED\"]) yield* Prisma.EnvironmentVariable(`${key}-poison`, {\n\t\t\t\tprojectId,\n\t\t\t\tkey,\n\t\t\t\tvalue: \"-\",\n\t\t\t\tclass: branchId ? \"preview\" : \"production\",\n\t\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tprojectId,\n\t\t\t\tbranchId\n\t\t\t};\n\t\t}) },\n\t\tprovisions: PROVISIONERS,\n\t\tnodes: {\n\t\t\tpostgres: postgresDescriptor(o),\n\t\t\t\"prisma-next\": prismaNextDescriptor(o),\n\t\t\tcompute: computeDescriptor(o),\n\t\t\tcredentials: s3CredentialsDescriptor(o),\n\t\t\t\"s3-store\": s3StoreDescriptor(o),\n\t\t\ts3: bucketDescriptor(o)\n\t\t}\n\t};\n};\n//#endregion\nexport { PROVIDER_PARAMS, buildProviderParams, prismaCloud, prismaState };\n\n//# sourceMappingURL=control.mjs.map"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAI,oBAAoB,cAAc,QAAQ,QAAQ,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;;AAE9E,MAAM,gBAAgB,MAAM,OAAO,mBAAmB,OAAO,IAAI,aAAa;CAC7E,OAAO,EAAE,OAAO,OAAOA,SAAO,SAAS,sBAAsB,EAAE;AAChE,CAAC,CAAC;;;;;;AAQF,IAAI,mBAAmB,cAAc,QAAQ,QAAQ,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAClF,MAAM,cAAc,MAAM,OAAO,kBAAkB,OAAO,IAAI,aAAa;CAC1E,MAAM,EAAE,UAAU,OAAO;CACzB,OAAO,0BAA0B,EAAE,OAAO,SAAS,MAAM,KAAK,EAAE,CAAC;AAClE,CAAC,CAAC;;AAIF,IAAI,iBAAiB,cAAc,KAAK,YAAY,gBAAgB,CAAC,CAAC,CAAC;AACvE,MAAMC,aAAW,MAAM,OAAO,WAAW;CACxC,KAAK;CACL,QAAQ,UAAU,IAAI,eAAe;EACpC,QAAQ;EACR,SAAS,OAAO,KAAK;CACtB,CAAC;AACF,CAAC;AACD,MAAM,QAAQ,MAAM,OAAO,KAAK,IAAI,eAAe;CAClD,QAAQ,EAAE,SAAS;CACnB,SAAS,KAAK,UAAU,EAAE,KAAK;AAChC,CAAC,CAAC;;AAEF,MAAM,QAAQ,MAAMA,UAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM,EAAE,UAAU,KAAK,KAAK,EAAE,SAAS,KAAK,IAAI,KAAK,CAAC,IAAI,OAAO,QAAQ,EAAE,IAAI,CAAC,CAAC;;AAErI,MAAM,gBAAgB,MAAMA,UAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM,EAAE,SAAS,WAAW,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,KAAK,CAAC,IAAI,OAAO,QAAQ,EAAE,IAAI,CAAC,CAAC;;AAE7K,MAAM,YAAY,MAAMA,UAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM,EAAE,SAAS,WAAW,OAAO,EAAE,UAAU,KAAK,IAAI,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC;;;;AC1CtI,MAAM,SAAS,SAAS,eAAe;AACvC,MAAM,uBAAuB,SAAS,OAAO,QAAQ,OAAO,IAAI,aAAa;CAC5E,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,IAAI;EACd,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,MAAM,WAAW,QAAQ,KAAK,OAAO,mBAAmB,OAAO,IAAI,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK;GACpJ,IAAI,UAAU,OAAO;IACpB,IAAI,SAAS,KAAK;IAClB,MAAM,SAAS,KAAK;GACrB;GACA,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,eAAe,EAAE,MAAM;IACpE,WAAW,KAAK;IAChB,MAAM,KAAK;IACX,GAAG,KAAK,aAAa,KAAK,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;GAC9D,EAAE,CAAC,CAAC;GACJ,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,MAAM,QAAQ,KAAK;GACpB;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;EAC7G,CAAC;EACD,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;GAC7B,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;GACvH,OAAO,IAAI;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,KAAK;GACd,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;AAIF,MAAM,YAAY,SAAS,kBAAkB;AAC7C,MAAM,0BAA0B,SAAS,OAAO,WAAW,OAAO,IAAI,aAAa;CAClF,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;EACD;EACA,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,IAAI,QAAQ,IAAI,OAAO;GACvB,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,+BAA+B;IAC5E,QAAQ,EAAE,MAAM,EAAE,UAAU,KAAK,SAAS,EAAE;IAC5C,MAAM;KACL,MAAM,KAAK;KACX,MAAM,KAAK;IACZ;GACD,CAAC,CAAC;GACF,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,UAAU,KAAK;IACf,aAAa,QAAQ,KAAK;IAC1B,iBAAiB,SAAS,KAAK,QAAQ,KAAK,eAAe;IAC3D,UAAU,QAAQ,KAAK;IACvB,YAAY,QAAQ,KAAK;GAC1B;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,uCAAuC,EAAE,QAAQ,EAAE,MAAM;IAC5F,UAAU,OAAO;IACjB,OAAO,OAAO;GACf,EAAE,EAAE,CAAC,CAAC;EACP,CAAC;CACF;AACD,CAAC,CAAC;;;;;;;;;;;AChEF,MAAM,sBAAsB,UAAU,MAAM,QAAQ,SAAS,mCAAmC;;;;;;AAMhG,MAAM,0BAA0B,SAAS,KAAK,SAAS,YAAY,aAAa,CAAC,GAAG,SAAS,OAAO,WAAW,CAAC;;AAEhH,MAAM,kBAAkB;CACvB;CACA;CACA;CACA;CACA;CACA;AACD;;AAEA,MAAM,iBAAiB,SAAS,uBAAuB;AACvD,MAAM,+BAA+B,SAAS,OAAO,gBAAgB,OAAO,IAAI,aAAa;CAC5F,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,IAAI;EACd,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,MAAM,WAAW,QAAQ,KAAK,OAAO,mBAAmB,OAAO,IAAI,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK;GAC3I,IAAI,UAAU,OAAO;IACpB,IAAI,SAAS,KAAK;IAClB,MAAM,SAAS,KAAK;IACpB,gBAAgB,SAAS,KAAK;GAC/B;GACA,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,YAAY,EAAE,MAAM;IACjE,aAAa,KAAK;IAClB,WAAW,KAAK;IAChB,GAAG,KAAK,UAAU,EAAE,UAAU,KAAK,OAAO;IAC1C,GAAG,KAAK,aAAa,KAAK,KAAK,EAAE,UAAU,KAAK,SAAS;GAC1D,EAAE,CAAC,CAAC;GACJ,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,MAAM,QAAQ,KAAK;IACnB,gBAAgB,QAAQ,KAAK;GAC9B;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;IACtH,UAAU;IACV,OAAO;GACR,CAAC,CAAC;EACH,CAAC;EACD,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;GAC7B,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;GAC9G,OAAO,IAAI;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,KAAK;GACxB,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;;;;;AAQF,MAAM,aAAa,SAAS,mBAAmB;AAC/C,MAAM,2BAA2B,SAAS,OAAO,YAAY,OAAO,IAAI,aAAa;CACpF,MAAM,SAAS,OAAO;CACtB,MAAM,kBAAkB,iBAAiB,WAAW,OAAO,IAAI,kCAAkC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM,EAAE,KAAK,WAAW,YAAY,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;EAC/O,QAAQ;EACR,SAAS,cAAc,aAAa,MAAM,EAAE,KAAK,OAAO;CACzD,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,SAAS,KAAK,SAAS,OAAO,WAAW,GAAG,SAAS,OAAO,WAAW,CAAC,CAAC,CAAC;CAC7F,OAAO;EACN,SAAS,CAAC;EACV,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,QAAQ;GACzC,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,gCAAgC;IAC7E,QAAQ,EAAE,MAAM,EAAE,OAAO,KAAK,iBAAiB,EAAE;IACjD,MAAM,KAAK,SAAS,KAAK,IAAI,EAAE,aAAa,EAAE,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC;GACtE,CAAC,CAAC;GACF,MAAM,eAAe,QAAQ,KAAK;GAClC,IAAI,QAAQ,KAAK,WAAW;IAC3B,MAAM,YAAY,QAAQ,KAAK;IAC/B,MAAM,WAAW,OAAO,OAAO,IAAI;KAClC,WAAW,GAAG,aAAa,KAAK,YAAY;KAC5C,QAAQ,UAAU,IAAI,eAAe;MACpC,QAAQ;MACR,SAAS,2BAA2B,KAAK,aAAa,IAAI,OAAO,KAAK;KACvE,CAAC;IACF,CAAC;IACD,OAAO,OAAO,WAAW;KACxB,KAAK,YAAY;MAChB,MAAM,MAAM,MAAM,MAAM,WAAW;OAClC,QAAQ;OACR,MAAM;MACP,CAAC;MACD,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,eAAe;OACrC,QAAQ,IAAI;OACZ,SAAS,2BAA2B,IAAI,OAAO,GAAG,IAAI;MACvD,CAAC;KACF;KACA,QAAQ,UAAU,iBAAiB,iBAAiB,QAAQ,IAAI,eAAe;MAC9E,QAAQ;MACR,SAAS,OAAO,KAAK;KACtB,CAAC;IACF,CAAC;GACF;GACA,OAAO,WAAW,OAAO,KAAK,wCAAwC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;GAC7G,OAAO,eAAe,YAAY;GAClC,MAAM,eAAe,OAAO,WAAW,OAAO,KAAK,4BAA4B;IAC9E,QAAQ,EAAE,MAAM,EAAE,OAAO,KAAK,iBAAiB,EAAE;IACjD,MAAM,EAAE,aAAa;GACtB,CAAC,CAAC,EAAA,CAAG,KAAK;GACV,OAAO;IACN;IACA,GAAG,gBAAgB,KAAK,KAAK,EAAE,YAAY;GAC5C;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,aAAa,CAAC,CAAC;EACjC,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,cAAc,OAAO,KAAK;GACvC,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,kCAAkC,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,OAAO,aAAa,EAAE,EAAE,CAAC,CAAC;GAC7I,OAAO,IAAI;IACV,cAAc,EAAE,KAAK;IACrB,GAAG,EAAE,KAAK,iBAAiB,EAAE,aAAa,EAAE,KAAK,cAAc;GAChE,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;;;;;AAQF,MAAM,sBAAsB,SAAS,4BAA4B;AACjE,MAAM,oCAAoC,SAAS,OAAO,qBAAqB,OAAO,IAAI,aAAa;CACtG,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,IAAI;EACd,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,MAAM,MAAM,KAAK,SAAS;GAC1B,IAAI,KAAK,QAAQ;GACjB,IAAI,OAAO,KAAK,GAAG;IAClB,MAAM,UAAU;IAChB,IAAI,EAAE,OAAO,mBAAmB,OAAO,IAAI,wCAAwC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK;GAC9I;GACA,IAAI,OAAO,KAAK,GAAG;IAClB,MAAM,WAAW,OAAO,WAAW,OAAO,IAAI,6BAA6B,EAAE,QAAQ,EAAE,OAAO;KAC7F,WAAW,KAAK;KAChB,OAAO;KACP,KAAK,KAAK;IACX,EAAE,EAAE,CAAC,CAAC,EAAA,CAAG,OAAO,EAAE,EAAE;IACpB,IAAI,YAAY,KAAK,GAAG;KACvB,IAAI,EAAE,KAAK,QAAQ,kBAAkB,KAAK,QAAQ,wBAAwB,MAAM,IAAI,MAAM,wBAAwB,KAAK,IAAI,cAAc,KAAK,UAAU,YAAY,IAAI,6LAA6L;KACrW,KAAK;IACN;GACD;GACA,IAAI,OAAO,KAAK,GAAG;IAClB,MAAM,WAAW;IACjB,OAAO,WAAW,OAAO,MAAM,wCAAwC;KACtE,QAAQ,EAAE,MAAM,EAAE,UAAU,SAAS,EAAE;KACvC,MAAM,EAAE,OAAO,KAAK,MAAM;IAC3B,CAAC,CAAC;IACF,OAAO;KACN;KACA,KAAK,KAAK;IACX;GACD;GACA,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,6BAA6B,EAAE,MAAM;IAClF,WAAW,KAAK;IAChB,OAAO;IACP,KAAK,KAAK;IACV,OAAO,KAAK;IACZ,GAAG,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;GACnD,EAAE,CAAC,CAAC;GACJ,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,KAAK,QAAQ,KAAK;GACnB;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,wCAAwC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;EAC3H,CAAC;EACD,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;GAC7B,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,wCAAwC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;GACrI,OAAO,IAAI;IACV,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,KAAK;GACb,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;;;;;;;;AAWF,MAAM,mBAAmB;;AAEzB,SAAS,aAAa,WAAW,OAAO;CACvC,IAAI,UAAU,KAAK,GAAG,OAAO;CAC7B,MAAM,QAAQ,GAAG,YAAY,SAAS,CAAC,CAAC,MAAM,MAAM,eAAe,KAAK,CAAC,CAAC;CAC1E,IAAI,UAAU,KAAK,GAAG,MAAM,IAAI,MAAM,2CAA2C,WAAW;CAC5F,OAAO;AACR;;;;;AAKA,SAAS,UAAU,KAAK;CACvB,MAAM,MAAM,CAAC;CACb,MAAM,SAAS,QAAQ;EACtB,KAAK,MAAM,SAAS,GAAG,YAAY,KAAK,KAAK,KAAK,GAAG,GAAG,EAAE,eAAe,KAAK,CAAC,GAAG;GACjF,MAAM,MAAM,IAAI,SAAS,IAAI,GAAG,IAAI,GAAG,MAAM,SAAS,MAAM;GAC5D,IAAI,MAAM,eAAe,GAAG,MAAM,IAAI,MAAM,gCAAgC,IAAI,6GAA6G;GAC7L,IAAI,MAAM,YAAY,GAAG,MAAM,GAAG;QAC7B,IAAI,KAAK,GAAG;EAClB;CACD;CACA,MAAM,EAAE;CACR,OAAO,IAAI,KAAK;AACjB;AACA,SAAS,MAAM,OAAO,QAAQ;CAC7B,OAAO,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,SAAS,SAAS,GAAG,GAAG,EAAE;AACvD;;AAEA,SAAS,eAAe,SAAS;CAChC,IAAI,OAAO,WAAW,SAAS,MAAM,KAAK,KAAK,OAAO;EACrD,MAAM;EACN,QAAQ;CACT;CACA,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC7C,IAAI,QAAQ,OAAO,KAAK;EACxB,MAAM,SAAS,QAAQ,MAAM,GAAG,CAAC;EACjC,MAAM,OAAO,QAAQ,MAAM,IAAI,CAAC;EAChC,IAAI,OAAO,WAAW,QAAQ,MAAM,KAAK,OAAO,OAAO,WAAW,MAAM,MAAM,KAAK,KAAK,OAAO;GAC9F;GACA;EACD;CACD;CACA,MAAM,IAAI,MAAM,wCAAwC,SAAS;AAClE;AACA,SAAS,YAAY,SAAS,MAAM;CACnC,MAAM,EAAE,MAAM,WAAW,eAAe,OAAO;CAC/C,MAAM,MAAM,OAAO,MAAM,GAAG;CAC5B,IAAI,MAAM,MAAM,GAAG,KAAK,MAAM;CAC9B,IAAI,MAAM,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,MAAM;CACvC,IAAI,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM;CACrC,IAAI,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM;CACrC,IAAI,MAAM,MAAM,MAAM,EAAE,GAAG,KAAK,IAAI,MAAM;CAC1C,IAAI,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,IAAI,MAAM;CACvC,IAAI,MAAM,YAAY,KAAK,GAAG,MAAM;CACpC,IAAI,MAAM,KAAK,KAAK,GAAG,MAAM;CAC7B,IAAI,MAAM,WAAW,KAAK,GAAG,MAAM;CACnC,IAAI,MAAM,MAAM,KAAK,GAAG,MAAM;CAC9B,IAAI,MAAM,QAAQ,KAAK,KAAK,MAAM;CAClC,IAAI,MAAM;CACV,KAAK,MAAM,KAAK,KAAK,OAAO;CAC5B,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,MAAM,KAAK,GAAG,MAAM;CAClE,OAAO;AACR;AACA,SAAS,yBAAyB,SAAS;CAC1C,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,QAAQ,cAAc,EAAE,OAAO,CAAC;CAC7E,MAAM,SAAS,CAAC;CAChB,KAAK,MAAM,SAAS,QAAQ;EAC3B,OAAO,KAAK,YAAY,MAAM,SAAS,MAAM,QAAQ,MAAM,CAAC;EAC5D,OAAO,KAAK,MAAM,OAAO;EACzB,MAAM,OAAO,MAAM,MAAM,QAAQ,SAAS,OAAO;EACjD,IAAI,MAAM,GAAG,OAAO,KAAK,OAAO,MAAM,GAAG,CAAC;CAC3C;CACA,OAAO,KAAK,OAAO,MAAM,IAAI,CAAC;CAC9B,OAAO,KAAK,SAAS,OAAO,OAAO,MAAM,CAAC;AAC3C;;;;;;;AAOA,SAAS,uBAAuB,MAAM;CACrC,IAAI,CAAC,GAAG,WAAW,KAAK,SAAS,GAAG,OAAO;EAC1C,MAAM;EACN,QAAQ;CACT;CACA,MAAM,YAAY,uBAAuB,aAAa,KAAK,WAAW,KAAK,WAAW,EAAE,qBAAqB,KAAK,UAAU,KAAK,OAAO,EAAE,iBAAiB,KAAK,UAAU,KAAK,KAAK,UAAU,EAAE;CAChM,MAAM,WAAW,GAAG,KAAK,UAAU;EAClC,iBAAiB;EACjB,YAAY;CACb,GAAG,MAAM,CAAC,EAAE;CACZ,MAAM,QAAQ,UAAU,KAAK,SAAS,CAAC,CAAC,KAAK,aAAa;EACzD;EACA,SAAS,GAAG,aAAa,KAAK,KAAK,KAAK,WAAW,OAAO,CAAC;CAC5D,EAAE;CACF,MAAM,KAAK;EACV,SAAS;EACT,SAAS,OAAO,KAAK,WAAW,MAAM;CACvC,CAAC;CACD,MAAM,KAAK;EACV,SAAS;EACT,SAAS,OAAO,KAAK,UAAU,MAAM;CACtC,CAAC;CACD,MAAM,KAAK;EACV,SAAS;EACT,SAAS,OAAO,KAAK,mCAAmC,MAAM;CAC/D,CAAC;CACD,MAAM,KAAK,yBAAyB,KAAK;CACzC,MAAM,SAAS,SAAS,WAAW,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK;CACpE,MAAM,SAAS,KAAK,KAAK,GAAG,OAAO,GAAG,2BAA2B,OAAO,GAAG,SAAS,CAAC,CAAC,GAAG,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC;CACjH,GAAG,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;CACxC,MAAM,UAAU,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,QAAQ;CACrD,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,GAAG,SAAS,WAAW,EAAE,KAAK;CAC5E,GAAG,cAAc,SAAS,EAAE;CAC5B,GAAG,WAAW,SAAS,OAAO;CAC9B,OAAO;EACN,MAAM;EACN;CACD;AACD;;;;;;;;;;;;AAcA,MAAM,aAAa,SAAS,wBAAwB;;AAEpD,SAAS,iBAAiB;CACzB,MAAM,QAAQ,OAAO,gCAAgC,IAAI,WAAW,EAAE,CAAC;CACvE,OAAO,EAAE,OAAO,MAAM,KAAK,QAAQ,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;AACpF;;;;;;;;AAQA,MAAM,4BAA4B;CACjC,YAAY,OAAO,QAAQ,CAAC,CAAC;CAC7B,YAAY,EAAE,aAAa,OAAO,WAAW,UAAU,eAAe,CAAC;CACvE,cAAc,OAAO;AACtB;;AAEA,MAAM,2BAA2B,SAAS,OAAO,YAAY,OAAO,QAAQ,yBAAyB,CAAC;;;;ACpXtG,MAAM,aAAa,SAAS,mBAAmB;AAC/C,MAAM,2BAA2B,SAAS,OAAO,YAAY,OAAO,IAAI,aAAa;CACpF,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,MAAM,kBAAkB;EAClC,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,IAAI,QAAQ,IAAI,OAAO;GACvB,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,0CAA0C;IACvF,QAAQ,EAAE,MAAM,EAAE,YAAY,KAAK,WAAW,EAAE;IAChD,MAAM,EAAE,MAAM,KAAK,KAAK;GACzB,CAAC,CAAC;GACF,MAAM,YAAY,QAAQ,KAAK;GAC/B,MAAM,MAAM,WAAW,QAAQ,oBAAoB,WAAW,QAAQ;GACtE,IAAI,QAAQ,KAAK,GAAG,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;IAChE,QAAQ;IACR,SAAS,cAAc,QAAQ,KAAK,GAAG;GACxC,CAAC,CAAC;GACF,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,kBAAkB,SAAS,KAAK,GAAG;GACpC;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;EACrG,CAAC;CACF;AACD,CAAC,CAAC;;AAIF,MAAM,WAAW,SAAS,iBAAiB;AAC3C,MAAM,yBAAyB,SAAS,OAAO,UAAU,OAAO,IAAI,aAAa;CAChF,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,IAAI;EACd,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,MAAM,WAAW,QAAQ,KAAK,OAAO,mBAAmB,OAAO,IAAI,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK;GAC1J,IAAI,CAAC,UAAU;IACd,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,iBAAiB,EAAE,MAAM;KACtE,WAAW,KAAK;KAChB,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,GAAG,KAAK,cAAc,KAAK,KAAK,EAAE,WAAW,KAAK,UAAU;KAC5D,GAAG,KAAK,aAAa,KAAK,KAAK,EAAE,UAAU,KAAK,SAAS;IAC1D,EAAE,CAAC,CAAC;IACJ,OAAO;KACN,IAAI,QAAQ,KAAK;KACjB,MAAM,QAAQ,KAAK;IACpB;GACD;GACA,MAAM,SAAS;IACd,IAAI,SAAS,KAAK;IAClB,MAAM,SAAS,KAAK;GACrB;GACA,IAAI,KAAK,aAAa,KAAK,GAAG;IAC7B,MAAM,WAAW,KAAK;IACtB,OAAO,WAAW,OAAO,MAAM,8BAA8B;KAC5D,QAAQ,EAAE,MAAM,EAAE,YAAY,OAAO,GAAG,EAAE;KAC1C,MAAM,EAAE,SAAS;IAClB,CAAC,CAAC;GACH;GACA,OAAO;EACR,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;EACnH,CAAC;EACD,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;GAC7B,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;GAC7H,OAAO,IAAI;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,KAAK;GACd,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;AAIF,MAAM,UAAU,SAAS,gBAAgB;AACzC,MAAM,wBAAwB,SAAS,OAAO,SAAS,OAAO,IAAI,aAAa;CAC9E,MAAM,SAAS,OAAO;CACtB,OAAO;EACN,SAAS,CAAC,IAAI;EACd,YAAY,OAAO,QAAQ,CAAC,CAAC;EAC7B,WAAW,OAAO,GAAG,WAAW,EAAE,MAAM,UAAU;GACjD,MAAM,WAAW,QAAQ,KAAK,OAAO,mBAAmB,OAAO,IAAI,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK;GACzI,IAAI,UAAU,OAAO;IACpB,IAAI,SAAS,KAAK;IAClB,MAAM,SAAS,KAAK;GACrB;GACA,MAAM,UAAU,OAAO,WAAW,OAAO,KAAK,gBAAgB,EAAE,MAAM;IACrE,MAAM,KAAK;IACX,aAAa,KAAK;GACnB,EAAE,CAAC,CAAC;GACJ,OAAO;IACN,IAAI,QAAQ,KAAK;IACjB,MAAM,QAAQ,KAAK;GACpB;EACD,CAAC;EACD,QAAQ,OAAO,GAAG,WAAW,EAAE,UAAU;GACxC,OAAO,eAAe,OAAO,OAAO,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;EAClG,CAAC;EACD,MAAM,OAAO,GAAG,WAAW,EAAE,UAAU;GACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;GAC7B,MAAM,IAAI,OAAO,mBAAmB,OAAO,IAAI,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC,CAAC;GAC5G,OAAO,IAAI;IACV,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,KAAK;GACd,IAAI,KAAK;EACV,CAAC;CACF;AACD,CAAC,CAAC;;;;AC/GF,IAAI,yBAAyB,cAAc,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC;AACvF,MAAM,mBAAmB,WAAW,OAAO,IAAI,aAAa;CAC3D,MAAM,WAAW,CAAC;CAClB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO;EAChD,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;EAChF,SAAS,KAAK,GAAG,KAAK,IAAI;EAC1B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;;;;;;;AAOD,MAAM,mBAAmB,OAAO,GAAG,WAAW,OAAO,IAAI,GAAG,MAAM,CAAC,IAAI;;;;;;;;;AASvE,MAAM,kBAAkB,QAAQ,aAAa,SAAS,WAAW,OAAO,IAAI,aAAa;CACxF,MAAM,UAAU,OAAO,gBAAgB,MAAM,EAAA,CAAG,QAAQ,MAAM,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,WAAW,KAAK,EAAE,SAAS,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,UAAU,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;CAC7M,IAAI,WAAW,KAAK,GAAG,OAAO,OAAO;CACrC,IAAI,CAAC,QAAQ,OAAO,OAAO,OAAO,KAAK,IAAI,uBAAuB,EAAE,QAAQ,CAAC,CAAC;CAC9E,QAAQ,OAAO,WAAW,OAAO,KAAK,gBAAgB,EAAE,MAAM;EAC7D,MAAM;EACN;CACD,EAAE,CAAC,CAAC,EAAA,CAAG,KAAK;AACb,CAAC;AACD,MAAM,gBAAgB,QAAQ,WAAW,YAAY,WAAW,OAAO,IAAI,qCAAqC,EAAE,QAAQ;CACzH,MAAM,EAAE,UAAU;CAClB,OAAO,EAAE,QAAQ;AAClB,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;AAUjD,MAAM,iBAAiB,QAAQ,WAAW,SAAS,SAAS,WAAW,OAAO,IAAI,aAAa;CAC9F,MAAM,WAAW,OAAO,aAAa,QAAQ,WAAW,OAAO;CAC/D,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,CAAC,QAAQ,OAAO,OAAO,OAAO,KAAK,IAAI,uBAAuB;EACjE;EACA,OAAO;CACR,CAAC,CAAC;CACF,OAAO,OAAO,WAAW,OAAO,KAAK,qCAAqC;EACzE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;EAC9B,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,OAAO,QAAQ,IAAI,WAAW,MAAM,aAAa,QAAQ,WAAW,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,OAAO,OAAO,KAAK,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,QAAQ,EAAE,CAAC,CAAC,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;AACnO,CAAC;;;;;;;;;AASD,MAAM,oBAAoB,SAAS,OAAO,IAAI,aAAa;CAC1D,MAAM,SAAS,OAAO;CACtB,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,YAAY,OAAO,eAAe,QAAQ,KAAK,aAAa,KAAK,SAAS,MAAM;CACtF,IAAI,KAAK,UAAU,KAAK,GAAG,OAAO,EAAE,UAAU;CAC9C,OAAO;EACN;EACA,UAAU,OAAO,cAAc,QAAQ,WAAW,KAAK,OAAO,KAAK,SAAS,MAAM;CACnF;AACD,CAAC;;;;;;AAMD,MAAM,gBAAgB,aAAa,OAAO,IAAI,aAAa;CAC1D,MAAM,SAAS,OAAO;CACtB,OAAO,eAAe,OAAO,OAAO,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;;;;;;AAMD,MAAM,iBAAiB,cAAc,OAAO,IAAI,aAAa;CAC5D,MAAM,SAAS,OAAO;CACtB,OAAO,eAAe,OAAO,OAAO,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;;AAID,IAAI,YAAY,cAAc,SAAS,mBAAmB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;;;;;;AAMvE,MAAM,kBAAkB,MAAM,OAAO,WAAW,SAAS,WAAW;CACnE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,QAAQ,MAAM,SAAS,gBAAgB,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,uBAAuB,GAAG,mBAAmB,GAAG,4BAA4B,GAAG,eAAe,GAAG,kBAAkB,CAAC,CAAC,GAAG,MAAM,aAAa,MAAM,CAAC,GAAG,MAAM,aAAa,QAAQ,CAAC,GAAG,MAAM,KAAK;;;;AClHlS,MAAM,sBAAsB;;AAE5B,MAAM,yBAAyB;AAC/B,MAAM,mBAAmB,QAAQ,cAAc,OAAO,IAAI,aAAa;CACtE,MAAM,WAAW,CAAC;CAClB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO;EAChD,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,qCAAqC,EAAE,QAAQ;GACxF,MAAM,EAAE,UAAU;GAClB;EACD,EAAE,CAAC,CAAC;EACJ,SAAS,KAAK,GAAG,KAAK,IAAI;EAC1B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;;;;;;;;AAQD,MAAM,0BAA0B,QAAQ,cAAc,OAAO,IAAI,aAAa;CAC7E,MAAM,SAAS,OAAO,gBAAgB,QAAQ,SAAS,EAAA,CAAG,MAAM,MAAM,EAAE,SAAS;CACjF,IAAI,UAAU,KAAK,GAAG,OAAO,MAAM;CACnC,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;EAC5C,QAAQ;EACR,SAAS,WAAW,UAAU;CAC/B,CAAC,CAAC;AACH,CAAC;;AAED,MAAM,mBAAmB,QAAQ,cAAc,UAAU,aAAa,KAAK,IAAI,OAAO,QAAQ,UAAU,QAAQ,IAAI,uBAAuB,QAAQ,UAAU,SAAS;;;;;;AAMtK,MAAM,4BAA4B,QAAQ,WAAW,aAAa,OAAO,IAAI,aAAa;CACzF,MAAM,YAAY,CAAC;CACnB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI;GACjC;GACA;EACD,IAAI;GACH;GACA;GACA;EACD;EACA,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;EACjF,UAAU,KAAK,GAAG,KAAK,IAAI;EAC3B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;;;;;;;;AAQD,MAAM,+BAA+B,QAAQ,WAAW,aAAa,yBAAyB,QAAQ,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,KAAK,cAAc,UAAU,QAAQ,MAAM,EAAE,SAAS,2BAA2B,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,UAAU,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;;;;;;;;;;;AAW7R,MAAM,oBAAoB,QAAQ,eAAe,WAAW,OAAO,KAAK,0CAA0C;CACjH,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;CAC/B,MAAM,EAAE,MAAM,GAAG,yBAAyB,KAAK,IAAI,IAAI;AACxD,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM;CAC9B,MAAM,UAAU,EAAE;CAClB,MAAM,MAAM,QAAQ,UAAU,QAAQ;CACtC,OAAO,QAAQ,KAAK,IAAI,OAAO,KAAK,IAAI,eAAe;EACtD,QAAQ;EACR,SAAS,cAAc,QAAQ,GAAG;CACnC,CAAC,CAAC,IAAI,OAAO,QAAQ,SAAS,KAAK,GAAG,CAAC;AACxC,CAAC,CAAC;;AAIF,MAAM,qBAAqB,UAAU,iBAAiB,QAAQ,IAAI,gBAAgB;CACjF,SAAS,MAAM;CACf;AACD,CAAC,IAAI,IAAI,gBAAgB,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC;;;;;;;AAOnD,IAAI,4BAA4B,cAAc,KAAK,YAAY,2BAA2B,CAAC,CAAC;CAC3F,IAAI,UAAU;EACb,OAAO,oCAAoC,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,KAAK;CACnF;AACD;;;;;;;;AAQA,MAAM,6BAA6B,WAAW,MAAM,UAAU,IAAI,0BAA0B;CAC3F;CACA;CACA,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D,CAAC;;;;;;;AASD,MAAM,oBAAoB;;;;;;;AAO1B,MAAM,sBAAsB,QAAQ,OAAO,WAAW;CACrD,KAAK,YAAY;EAChB,MAAM,GAAG;;;;;;;;;;EAUT,MAAM,GAAG;;;;;;;;;EAST,MAAM,GAAG;;;;;;EAMT,MAAM,GAAG;6DACkD,kBAAkB;;;CAG9E;CACA,OAAO;AACR,CAAC;AAGD,MAAM,wBAAwB,OAAO,KAAK;;;;;;;;;;;;;AAa1C,MAAM,uBAAuB,QAAQ,WAAW,aAAa,WAAW,OAAO,KAAK,iBAAiB,EAAE,MAAM;CAC5G;CACA,MAAM;CACN,QAAQ;CACR;AACD,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,aAAa;CACnC,IAAI,QAAQ,KAAK;CACjB,MAAM,QAAQ,KAAK;CACnB,WAAW,QAAQ,KAAK;CACxB,WAAW,QAAQ,KAAK;AACzB,EAAE,CAAC;AACH,MAAM,sBAAsB,QAAQ,eAAe,OAAO,IAAI,aAAa;CAC1E,MAAM,cAAc,CAAC;CACrB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO;EAChD,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,0CAA0C,EAAE,QAAQ;GAC7F,MAAM,EAAE,WAAW;GACnB;EACD,EAAE,CAAC,CAAC;EACJ,YAAY,KAAK,GAAG,KAAK,IAAI;EAC7B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;AACD,MAAM,oBAAoB,QAAQ,iBAAiB,eAAe,OAAO,OAAO,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,EAAE,CAAC,CAAC;;;;;;;;;AASnJ,MAAM,0BAA0B,QAAQ,eAAe,OAAO,IAAI,aAAa;CAC9E,MAAM,cAAc,OAAO,mBAAmB,QAAQ,UAAU;CAChE,MAAM,SAAS,KAAK,IAAI,IAAI;CAC5B,MAAM,OAAO,YAAY,QAAQ,MAAM,EAAE,KAAK,WAAW,wBAAwB,KAAK,KAAK,MAAM,EAAE,SAAS,IAAI,MAAM;CACtH,OAAO,OAAO,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,CAAC;AACrF,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;;;;;;;;;;;;;;;;AAgBrB,MAAM,mBAAmB,qBAAqB,OAAO,WAAW;CAC/D,KAAK,YAAY;EAChB,MAAM,MAAM,SAAS,SAAS,MAAM,gBAAgB,GAAG;GACtD,KAAK;GACL,gBAAgB,CAAC;EAClB,CAAC;EACD,IAAI;GACH,MAAM,OAAO,MAAM,GAAG;;;GAGtB,MAAM,SAAS,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC;GACvD,IAAI,OAAO,IAAI,uBAAuB,GAAG,QAAQ,MAAM,GAAG;sEACS,2BAA2B;YACtF,CAAE,SAAS,IAAI,EAAE,MAAM,OAAO,IAAI;IACzC,MAAM;IACN,QAAQ,CAAC,GAAG,MAAM;GACnB;GACA,IAAI,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI,sBAAsB,GAAG,OAAO,EAAE,MAAM,SAAS;GACxG,OAAO,OAAO,SAAS,IAAI,EAAE,MAAM,QAAQ,IAAI;IAC9C,MAAM;IACN,QAAQ,CAAC,GAAG,MAAM;GACnB;EACD,UAAU;GACT,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;EAC7B;CACD;CACA,QAAQ,UAAU,IAAI,eAAe;EACpC,QAAQ;EACR,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACjG,CAAC;AACF,CAAC;;;;;;;;;;;;AAYD,MAAM,wBAAwB,QAAQ,WAAW,UAAU,WAAW,OAAO,IAAI,aAAa;CAC7F,MAAM,aAAa,OAAO,4BAA4B,QAAQ,WAAW,QAAQ;CACjF,IAAI,WAAW,WAAW,GAAG;EAC5B,MAAM,WAAW,OAAO,oBAAoB,QAAQ,WAAW,QAAQ;EACvE,MAAM,mBAAmB,OAAO,iBAAiB,QAAQ,SAAS,EAAE;EACpE,QAAQ,MAAM,4CAA4C,SAAS,GAAG,aAAa,SAAS,YAAY,UAAU,EAAE;EACpH,OAAO;GACN;GACA;EACD;CACD;CACA,MAAM,WAAW,CAAC;CAClB,KAAK,MAAM,aAAa,YAAY;EACnC,MAAM,mBAAmB,OAAO,iBAAiB,QAAQ,UAAU,EAAE;EACrE,MAAM,UAAU,OAAO,OAAO,gBAAgB;EAC9C,IAAI,QAAQ,SAAS,YAAY;GAChC,SAAS,KAAK,GAAG,UAAU,GAAG,oBAAoB,QAAQ,OAAO,KAAK,IAAI,EAAE,EAAE;GAC9E;EACD;EACA,QAAQ,MAAM,sCAAsC,UAAU,GAAG,aAAa,SAAS,IAAI,QAAQ,KAAK,MAAM,WAAW,OAAO,sBAAsB,qBAAqB;EAC3K,OAAO;GACN,UAAU;GACV;EACD;CACD;CACA,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;EAC5C,QAAQ;EACR,SAAS,SAAS,WAAW,OAAO,sBAAsB,oBAAoB,cAAc,SAAS,iDAAiD,SAAS,KAAK,IAAI,EAAE;CAC3K,CAAC,CAAC;AACH,CAAC;;;;;;;AAOD,MAAM,4BAA4B,cAAc,6BAA6B,WAAW,eAAe;;;;;;AAMvG,MAAM,gCAAgC,WAAW,WAAW,OAAO,IAAI,aAAa;CACnF,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,gBAAgB,QAAQ,SAAS;CACzD,MAAM,EAAE,UAAU,qBAAqB,OAAO,qBAAqB,QAAQ,UAAU,WAAW,UAAU,MAAM;CAChH,OAAO,uBAAuB,QAAQ,SAAS,EAAE;CACjD,OAAO;EACN,WAAW,UAAU;EACrB,YAAY,SAAS;EACrB;CACD;AACD,CAAC;AAGD,MAAM,kBAAkB,QAAQ,eAAe,eAAe,OAAO,OAAO,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;;;;;;AAmB/I,MAAM,2BAA2B,WAAW,WAAW,OAAO,IAAI,aAAa;CAC9E,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,gBAAgB,QAAQ,SAAS;CACzD,MAAM,aAAa,OAAO,4BAA4B,QAAQ,UAAU,WAAW,QAAQ;CAC3F,KAAK,MAAM,aAAa,YAAY;EACnC,MAAM,UAAU,OAAO,OAAO,OAAO,iBAAiB,QAAQ,UAAU,EAAE,CAAC;EAC3E,IAAI,QAAQ,SAAS,YAAY;GAChC,QAAQ,KAAK,+BAA+B,UAAU,GAAG,aAAa,SAAS,uBAAuB,oBAAoB,qCAAqC,QAAQ,OAAO,KAAK,IAAI,EAAE,GAAG;GAC5L;EACD;EACA,OAAO,eAAe,QAAQ,UAAU,EAAE;EAC1C,QAAQ,MAAM,wCAAwC,UAAU,GAAG,eAAe,UAAU;CAC7F;AACD,CAAC;;AAID,MAAM,sCAAsC,IAAI,IAAI;CACnD;CACA;CACA;AACD,CAAC;;AAED,MAAM,kCAAkC,CAAC,qBAAqB,oBAAoB;;;;;;;;AAQlF,MAAM,2BAA2B,UAAU;CAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAK;CACnF,IAAI,SAAS,KAAK,KAAK,oBAAoB,IAAI,IAAI,GAAG,OAAO;CAC7D,MAAM,UAAU,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,QAAQ,YAAY,IAAI;CACxG,IAAI,gCAAgC,MAAM,aAAa,QAAQ,SAAS,QAAQ,CAAC,GAAG,OAAO;CAC3F,MAAM,QAAQ,WAAW,QAAQ,MAAM,QAAQ,KAAK;CACpD,OAAO,UAAU,KAAK,KAAK,UAAU,SAAS,wBAAwB,KAAK;AAC5E;;AAEA,MAAM,sBAAsB,SAAS,KAAK,SAAS,OAAO,WAAW,GAAG,SAAS,OAAO,WAAW,CAAC;;;;;;AAMpG,MAAM,kBAAkB,WAAW,WAAW,wBAAwB,OAAO,MAAM,WAAW;CAC7F,OAAO;CACP;AACD,CAAC;;AAID,IAAI,2BAA2B,cAAc,KAAK,YAAY,0BAA0B,CAAC,CAAC;CACzF,IAAI,UAAU;EACb,OAAO,2CAA2C,KAAK,MAAM,GAAG,KAAK;CACtE;AACD;AACA,MAAM,WAAW,OAAO,UAAU,mBAAmB,MAAM,GAAG;;;;;;;;;;AAU9D,MAAM,oBAAoB,KAAK,OAAO,UAAU,OAAO,IAAI,aAAa;CACvE,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,WAAW,OAAO,OAAO,WAAW;EACzC,WAAW,IAAI,QAAQ;EACvB,OAAO;CACR,CAAC;CACD,MAAM,WAAW,OAAO,OAAO,WAAW;EACzC,KAAK,YAAY;GAChB,QAAQ,MAAM,QAAQ;;oDAE2B,IAAI;;UAE/C,CAAE;EACT;EACA,OAAO;CACR,CAAC;CACD,IAAI,UAAU,aAAa,MAAM;EAChC,SAAS,QAAQ;EACjB,OAAO,OAAO,OAAO,KAAK,IAAI,yBAAyB;GACtD;GACA;EACD,CAAC,CAAC;CACH;CACA,MAAM,UAAU,SAAS;CACzB,MAAM,YAAY,eAAe,OAAO,WAAW;EAClD,KAAK,YAAY;GAChB,QAAQ,MAAM,GAAG;;;;4BAIQ,QAAQ;;;;uCAIG,IAAI;;YAEhC,CAAE,EAAE,EAAE,QAAQ;EACvB;EACA,OAAO;CACR,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,SAAS,OAAO,OAAO,OAAO,OAAO,KAAK,IAAI,gBAAgB,EAAE,SAAS,sBAAsB,MAAM,GAAG,MAAM,kDAAkD,CAAC,CAAC,CAAC,CAAC,CAAC;CAC7L,MAAM,UAAU,YAAY;EAC3B,IAAI;GACH,MAAM,QAAQ,8CAA8C,IAAI;EACjE,QAAQ,CAAC,UAAU;GAClB,SAAS,QAAQ;EAClB;CACD;CACA,OAAO;EACN;EACA;CACD;AACD,CAAC;AAGD,MAAM,WAAW,MAAM,eAAe,OAAO,WAAW;CACvD,KAAK;CACL,OAAO;AACR,CAAC,CAAC;;;;;;;;;;AAUF,MAAM,aAAa,KAAK,UAAU,IAAI,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC;;;;;;;AAOxE,MAAM,wBAAwB,UAAU,UAAU,qBAAqB,KAAK,CAAC;;AAE7E,MAAM,+BAA+B,UAAU,UAAU,qBAAqB,KAAK,CAAC;;;;;;;AAOpF,MAAM,0BAA0B,SAAS;CACxC,IAAI;CACJ,kBAAkB,OAAO,QAAQ,mBAAmB;CACpD,kBAAkB,cAAc,GAAG;;;;;OAK7B,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;CAC/D,aAAa,UAAU,cAAc,GAAG;iEACwB,MAAM;;+DAER,MAAM;;OAE9D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;CAC/D,MAAM,YAAY,cAAc,GAAG;;wBAEZ,QAAQ,MAAM,eAAe,QAAQ,MAAM,aAAa,QAAQ,IAAI;OACrF,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS;EACjC,MAAM,MAAM,KAAK;EACjB,OAAO,QAAQ,KAAK,IAAI,KAAK,IAAI,qBAAqB,IAAI,KAAK;CAChE,CAAC,CAAC;CACF,uBAAuB,YAAY,cAAc,GAAG;;wBAE7B,QAAQ,MAAM,eAAe,QAAQ,MAAM;;OAE5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,4BAA4B,IAAI,KAAK,CAAC,CAAC,CAAC;CAC5F,MAAM,YAAY,cAAc,GAAG;;;YAGxB,QAAQ,MAAM,IAAI,QAAQ,MAAM,IAAI,QAAQ,IAAI;YAChD,UAAU,KAAK,QAAQ,KAAK,EAAE;;;;OAInC,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,KAAK,CAAC;CAC5C,SAAS,YAAY,cAAc,GAAG;;wBAEf,QAAQ,MAAM,eAAe,QAAQ,MAAM,aAAa,QAAQ,IAAI;OACrF,CAAC,CAAC,KAAK,OAAO,MAAM;CAC1B,cAAc,YAAY,QAAQ,YAAY;EAC7C,IAAI,QAAQ,UAAU,KAAK,GAAG;GAC7B,MAAM,GAAG,oDAAoD,QAAQ;GACrE,MAAM,GAAG,kDAAkD,QAAQ;EACpE,OAAO;GACN,MAAM,GAAG;;0BAEc,QAAQ,MAAM,eAAe,QAAQ,MAAM;;GAElE,MAAM,GAAG;;0BAEc,QAAQ,MAAM,eAAe,QAAQ,MAAM;;EAEnE;CACD,CAAC;CACD,OAAO,YAAY,cAAc,GAAG;;wBAEb,QAAQ,MAAM,eAAe,QAAQ,MAAM;;OAE5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC;CAC7D,YAAY,YAAY,cAAc,GAAG;;wBAElB,QAAQ,MAAM,eAAe,QAAQ,MAAM;OAC5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS;EACjC,MAAM,MAAM,KAAK;EACjB,OAAO,QAAQ,KAAK,IAAI,KAAK,IAAI,qBAAqB,IAAI,KAAK;CAChE,CAAC,CAAC;CACF,YAAY,YAAY,cAAc,GAAG;;kBAExB,QAAQ,MAAM,IAAI,QAAQ,MAAM,IAAI,UAAU,KAAK,QAAQ,KAAK,EAAE;;;OAG7E,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,KAAK,CAAC;AAC7C;;;;;;;;;;AAUA,MAAM,qBAAqB;;;;;;;;;AAS3B,MAAM,iBAAiB,WAAW,OAAO,QAAQ;CAChD,IAAI;CACJ,OAAO,OAAO,cAAc;EAC3B,IAAI,aAAa,KAAK,KAAK,IAAI,IAAI,WAAW,OAAO,OAAO,OAAO;EACnE,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO,WAAW;GACxD,WAAW,IAAI;EAChB,CAAC,CAAC,CAAC;CACJ,CAAC;AACF;;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAM,qBAAqB,SAAS,WAAW,MAAM,KAAK,QAAQ;CACjE,MAAM,QAAQ,cAAc,WAAW,oBAAoB,GAAG;CAC9D,OAAO;EACN,IAAI,QAAQ;EACZ,kBAAkB,QAAQ,WAAW;EACrC,kBAAkB,MAAM,KAAK,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC;EACjE,aAAa,UAAU,MAAM,KAAK,OAAO,QAAQ,QAAQ,WAAW,KAAK,CAAC,CAAC;EAC3E,MAAM,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;EACjE,uBAAuB,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,qBAAqB,OAAO,CAAC,CAAC;EACnG,MAAM,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;EACjE,SAAS,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,CAAC,CAAC;EACvE,cAAc,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,YAAY,OAAO,CAAC,CAAC;EACjF,OAAO,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,KAAK,OAAO,CAAC,CAAC;EACnE,YAAY,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,UAAU,OAAO,CAAC,CAAC;EAC7E,YAAY,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,UAAU,OAAO,CAAC,CAAC;CAC9E;AACD;;;;;;;;;;;;;;;;;;;AAqBA,MAAM,oBAAoB,QAAQ;CACjC,MAAM,EAAE,WAAW,aAAa;CAChC,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI,aAAa;EAClD,MAAM,QAAQ,OAAO;EACrB,MAAM,YAAY,aAAa,KAAK,IAAI,YAAY,GAAG,UAAU,GAAG;EACpE,MAAM,kBAAkB,UAAU,UAAU,0BAA0B,WAAW,MAAM,KAAK;EAC5F,MAAM,EAAE,qBAAqB,OAAO,yBAAyB,aAAa,KAAK,IAAI,EAAE,UAAU,IAAI;GAClG;GACA;EACD,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,SAAS,eAAe,kDAAkD,CAAC,CAAC;EACnJ,MAAM,MAAM,SAAS,SAAS,MAAM,gBAAgB,GAAG;GACtD,KAAK;GACL,gBAAgB,CAAC;EAClB,CAAC;EACD,OAAO,OAAO,mBAAmB,OAAO,cAAc,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;EAC9E,OAAO,mBAAmB,GAAG,CAAC,CAAC,KAAK,OAAO,MAAM,SAAS,KAAK,SAAS,OAAO,WAAW,GAAG,SAAS,OAAO,WAAW,CAAC,CAAC,GAAG,OAAO,SAAS,eAAe,kBAAkB,CAAC,CAAC;EAChL,MAAM,OAAO,OAAO,iBAAiB,KAAK,MAAM,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,OAAO,SAAS,eAAe,kBAAkB,CAAC,CAAC;EAC3H,OAAO,OAAO,mBAAmB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;EACrE,MAAM,UAAU,kBAAkB,uBAAuB,GAAG,GAAG,KAAK,SAAS;EAC7E,OAAO,OAAO,QAAQ,OAAO;CAC9B,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,KAAK;AACrB;;;ACpqBA,MAAM,4BAA4B;AAClC,IAAI,uBAAuB,MAAM;CAChC;CACA;CACA;CACA,YAAY,OAAO,WAAW,UAAU;EACvC,KAAK,QAAQ;EACb,KAAK,YAAY;EACjB,KAAK,WAAW;CACjB;CACA,YAAY;EACX,OAAO,KAAK,UAAU;GACrB,OAAO,KAAK;GACZ,WAAW,KAAK;GAChB,GAAG,KAAK,aAAa,KAAK,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;EAC9D,CAAC;CACF;AACD;;AAEA,SAAS,uBAAuB,OAAO;CACtC,OAAO,iBAAiB;AACzB;;AAEA,SAAS,uBAAuB,OAAO;CACtC,IAAI,CAAC,uBAAuB,KAAK,GAAG,MAAM,IAAI,MAAM,iGAAiG;CACrJ,OAAO;AACR;AACA,SAAS,SAAS,OAAO;CACxB,OAAO,OAAO,UAAU,YAAY,UAAU;AAC/C;AACA,SAAS,oBAAoB,QAAQ;CACpC,uBAAuB,IAAI,MAAM,GAAG,0BAA0B,0CAA0C,OAAO,EAAE;AAClH;;AAEA,SAAS,YAAY,YAAY;CAChC,IAAI;CACJ,IAAI;EACH,SAAS,KAAK,MAAM,UAAU;CAC/B,SAAS,OAAO;EACf,MAAM,oBAAoB,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,EAAE;CACvG;CACA,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,oBAAoB,eAAe;CAChE,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,oBAAoB,4BAA4B;CAC5E,MAAM,UAAU,MAAM;CACtB,IAAI,OAAO,YAAY,UAAU,MAAM,oBAAoB,mCAAmC;CAC9F,MAAM,QAAQ,MAAM;CACpB,IAAI,UAAU,KAAK,KAAK,OAAO,UAAU,UAAU,MAAM,oBAAoB,2CAA2C;CACxH,MAAM,YAAY,OAAO;CACzB,IAAI,OAAO,cAAc,UAAU,MAAM,oBAAoB,+BAA+B;CAC5F,MAAM,WAAW,OAAO;CACxB,IAAI,aAAa,KAAK,KAAK,OAAO,aAAa,UAAU,MAAM,oBAAoB,wCAAwC;CAC3H,OAAO,IAAI,qBAAqB;EAC/B;EACA;CACD,GAAG,WAAW,QAAQ;AACvB;AACA,MAAM,+CAA+C,IAAI,MAAM,uDAAuD;AACtH,MAAM,6CAA6C,IAAI,MAAM,wDAAwD;AACrH,SAAS,qBAAqB;CAC7B,MAAM,cAAc,QAAQ,IAAI;CAChC,IAAI,gBAAgB,KAAK,KAAK,YAAY,WAAW,GAAG,MAAM,uBAAuB;CACrF,OAAO;AACR;AACA,SAAS,2BAA2B,MAAM;CACzC,IAAI,MAAM,WAAW,KAAK,MAAM,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG,MAAM,qBAAqB;AACrH;AACA,eAAe,gBAAgB,OAAO,MAAM;CAC3C,MAAM,cAAc,mBAAmB;CACvC,2BAA2B,IAAI;CAC/B,MAAM,UAAU,iBAAiB;EAChC;EACA,SAAS,MAAM;EACf,GAAG,MAAM,UAAU,KAAK,IAAI,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;EACtD,QAAQ;CACT,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,OAAO;EAC1B,IAAI;EACJ,WAAW;CACZ,EAAE,GAAG,OAAO,SAAS,mBAAmB,MAAM,OAAO,QAAQ;EAC5D,IAAI;EACJ,SAAS,qDAAqD,EAAE,QAAQ;CACzE,CAAC,CAAC,CAAC;CACH,MAAM,WAAW,MAAM,WAAW,KAAK,IAAI,QAAQ,KAAK,OAAO,eAAe,kBAAkB,KAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQC,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnM,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,QAAQ,OAAO;CAChD,OAAO,IAAI,qBAAqB,OAAO,QAAQ,UAAU,WAAW,QAAQ,UAAU,QAAQ;AAC/F;AACA,eAAe,gBAAgB,OAAO,MAAM;CAC3C,MAAM,cAAc,mBAAmB;CACvC,2BAA2B,IAAI;CAC/B,MAAM,UAAU,iBAAiB;EAChC;EACA,SAAS,MAAM;EACf,GAAG,MAAM,UAAU,KAAK,IAAI,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;EACtD,QAAQ;CACT,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,OAAO;EAC1B,IAAI;EACJ,WAAW;CACZ,EAAE,GAAG,OAAO,SAAS,gCAAgC,OAAO,QAAQ,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,OAAO,SAAS,mBAAmB,MAAM,OAAO,qBAAqB,IAAI,MAAM,qDAAqD,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;CACxO,MAAM,WAAW,MAAM,WAAW,KAAK,IAAI,QAAQ,KAAK,OAAO,eAAe,kBAAkB,KAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQA,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnM,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK;CAC7B,OAAO,IAAI,qBAAqB,OAAO,QAAQ,UAAU,WAAW,QAAQ,UAAU,QAAQ;AAC/F;;;;;;AAMA,eAAe,kBAAkB,UAAU,MAAM;CAChD,2BAA2B,IAAI;CAC/B,MAAM,UAAU,aAAa,QAAQ,CAAC,CAAC,KAAK,OAAO,WAAW,EAAE,IAAI,KAAK,EAAE,GAAG,OAAO,SAAS,mBAAmB,MAAM,OAAO,QAAQ;EACrI,IAAI;EACJ,SAAS,sCAAsC,EAAE,QAAQ;CAC1D,CAAC,CAAC,CAAC;CACH,MAAM,WAAW,MAAM,WAAW,KAAK,IAAI,QAAQ,KAAK,OAAO,eAAe,kBAAkB,KAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQA,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnM,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,QAAQ,OAAO;AACjD;;;;;;;;;AASA,eAAe,iBAAiB,WAAW,MAAM;CAChD,IAAI,MAAM,WAAW,KAAK,MAAM,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG;EACxF,QAAQ,KAAK,iCAAiC,UAAU,oCAAoC;EAC5F;CACD;CACA,MAAM,UAAU,cAAc,SAAS,CAAC,CAAC,KAAK,OAAO,WAAW,EAAE,IAAI,KAAK,EAAE,GAAG,OAAO,SAAS,mBAAmB,MAAM,OAAO,QAAQ;EACvI,IAAI;EACJ,OAAO;CACR,CAAC,CAAC,CAAC;CACH,MAAM,WAAW,MAAM,WAAW,KAAK,IAAI,QAAQ,KAAK,OAAO,eAAe,kBAAkB,KAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQA,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnM,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,IAAI,QAAQ,IAAI;EACf,QAAQ,IAAI,wBAAwB,UAAU,4BAA4B;EAC1E;CACD;CACA,IAAI,QAAQ,MAAM,WAAW,KAAK;EACjC,QAAQ,IAAI,qBAAqB,UAAU,4CAA4C;EACvF;CACD;CACA,QAAQ,KAAK,iCAAiC,UAAU,mBAAmB,QAAQ,MAAM,QAAQ,EAAE;AACpG;AACA,SAAS,oBAAoB,MAAM;CAClC,OAAO;EACN,SAAS,UAAU,gBAAgB,OAAO,IAAI;EAC9C,SAAS,UAAU,gBAAgB,OAAO,IAAI;EAC9C,SAAS,aAAa,SAAS,MAAM,UAAU,KAAK,IAAI,kBAAkB,SAAS,YAAY,gBAAgB,QAAQ,GAAG,IAAI,IAAI,iBAAiB,SAAS,WAAW,IAAI;EAC3K;CACD;AACD;;AAEA,SAAS,gBAAgB,UAAU;CAClC,MAAM,IAAI,MAAM,GAAG,0BAA0B,oBAAoB,SAAS,MAAM,MAAM,4FAA4F;AACnL;AACA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,SAAS,aAAa,OAAO,QAAQ;CACpC,IAAI,MAAM,SAAS,mBAAmB,MAAM,SAAS,iBAAiB,MAAM,IAAI,MAAM,iBAAiB,OAAO,IAAI,MAAM,KAAK,MAAM,OAAO,qEAAqE,gBAAgB,GAAG,gBAAgB,oEAAoE;AACvT;AACA,SAAS,mBAAmB,OAAO;CAClC,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,eAAe,SAAS,OAAO,MAAM,cAAc,YAAY,cAAc,UAAU,MAAM,aAAa,KAAK,KAAK,OAAO,MAAM,aAAa;AACrM;;AAEA,SAAS,mBAAmB,aAAa;CACxC,IAAI,CAAC,mBAAmB,WAAW,GAAG,MAAM,IAAI,MAAM,iJAAiJ;CACvM,OAAO;AACR;AACA,SAAS,YAAY,aAAa;CACjC,OAAO,mBAAmB,WAAW,CAAC,CAAC;AACxC;;;;;;;;AAUA,SAAS,iBAAiB,IAAI;CAC7B,MAAM,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;EACjE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,MAAM,OAAOC,OAAc,GAAG,GAAG,UAAU;GAChD,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,MAAM,OAAOC,UAAiB,GAAG,GAAG,OAAO;GAChD,UAAU,IAAI;GACd,MAAM;GACN,MAAM;EACP,CAAC;EACD,MAAM,kBAAkB,OAAO,IAAI,IAAI,kBAAkB,MAAM,SAAS,MAAM,CAAC,CAAC;EAChF,OAAO;GACN,SAAS;IACR,KAAK,IAAI;IACT,QAAQ,IAAI;IACZ,aAAa,IAAI;IACjB;GACD;GACA,UAAU,CAAC;IACV,MAAM;IACN,IAAI,IAAI;GACT,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;AAUA,SAAS,kBAAkB,GAAG;CAC7B,OAAO;EACN,MAAM;EACN,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;GAC3D,aAAa,IAAI,kCAAkC;GACnD,MAAM,YAAY,YAAY,WAAW;GACzC,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;GACjD,OAAO;IACN,YAAY,OAAOC,eAAsB,GAAG,GAAG,OAAO;KACrD;KACA,MAAM;KACN,QAAQ,EAAE,UAAU;KACpB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;IAC1C,CAAC,EAAA,CAAG;IACJ;GACD;EACD,CAAC;EACD,YAAY,KAAK,aAAa,WAAW,OAAO,IAAI,aAAa;GAChE,MAAM,EAAE,SAAS,MAAM,UAAU;GACjC,MAAM,WAAW,mBAAmB,IAAI,WAAW,CAAC,CAAC;GACrD,MAAM,MAAM,WAAW,YAAY;GACnC,MAAM,SAAS,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;GACrD,MAAM,YAAY,YAAY;GAC9B,MAAM,MAAM;GACZ,MAAM,UAAU,CAAC;GACjB,KAAK,MAAM,KAAK,aAAa,GAAG,GAAG;IAClC,MAAM,QAAQ,EAAE,UAAU,YAAY,OAAO,QAAQ,EAAE,QAAQ,OAAO,OAAO,EAAE,MAAM,MAAM,GAAG,EAAE;IAChG,IAAI,UAAU,KAAK,GAAG;IACtB,MAAM,MAAM,UAAU,SAAS,CAAC;IAChC,MAAM,WAAW,EAAE,UAAU,aAAa,cAAc,KAAK,IAAI,mBAAmB,UAAU,gBAAgB,MAAM,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,OAAO,EAAE,OAAO,KAAK;IACtK,QAAQ,KAAK,OAAOC,oBAA2B,GAAG,IAAI,OAAO;KAC5D;KACA;KACA,OAAO;KACP,OAAO;KACP,GAAG;IACJ,CAAC,CAAC;GACH;GACA,KAAK,MAAM,EAAE,KAAK,UAAU,kBAAkB,KAAK,SAAS,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAOA,oBAA2B,GAAG,IAAI,OAAO;IACxI;IACA;IACA,OAAO;IACP,OAAO;IACP,GAAG;GACJ,CAAC,CAAC;GACF,IAAI,IAAI,WAAW,KAAK,KAAK,OAAO,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS,GAAG;IAChE,MAAM,8BAA8B,IAAI,IAAI;IAC5C,KAAK,MAAM,QAAQ,iBAAiB,KAAK,GAAG;KAC3C,IAAI,KAAK,oBAAoB,SAAS;KACtC,MAAM,MAAM,IAAI,YAAY,IAAI,KAAK,MAAM;KAC3C,IAAI,QAAQ,KAAK,GAAG;KACpB,MAAM,OAAO,YAAY,IAAI,KAAK,KAAK,KAAK,CAAC;KAC7C,KAAK,KAAK,GAAG;KACb,YAAY,IAAI,KAAK,OAAO,IAAI;IACjC;IACA,KAAK,MAAM,CAAC,OAAO,UAAU,EAAE,gBAAgB;KAC9C,MAAM,MAAM,MAAM,MAAM,YAAY,IAAI,KAAK,KAAK,CAAC,CAAC;KACpD,IAAI,QAAQ,KAAK,GAAG;KACpB,MAAM,MAAM,UAAU,SAAS;MAC9B,OAAO;MACP,MAAM,MAAM;KACb,CAAC;KACD,MAAM,QAAQ,OAAO,SAAS,GAAG,IAAI,OAAO,IAAI,MAAM,MAAM,OAAO,WAAW,CAAC,CAAC,IAAI,OAAO,WAAW,GAAG;KACzG,QAAQ,KAAK,OAAOA,oBAA2B,GAAG,IAAI,OAAO;MAC5D;MACA;MACA;MACA,OAAO;MACP,GAAG;KACJ,CAAC,CAAC;IACH;GACD;GACA,OAAO;IACN,aAAa;IACb,MAAM,OAAO,OAAO,QAAQ,YAAY,WAAW,OAAO,QAAQ,UAAU;GAC7E;EACD,CAAC;EACD,UAAU,EAAE,MAAM,EAAE,WAAW,cAAc,OAAO,UAAUC,uBAA8B;GAC3F;GACA,WAAW,UAAU;GACrB,UAAU,UAAU;GACpB;EACD,CAAC,CAAC;EACF,SAAS,EAAE,MAAM,aAAa,UAAU,eAAe,OAAO,IAAI,aAAa;GAC9E,MAAM,aAAa,OAAOC,WAAkB,GAAG,GAAG,UAAU;IAC3D,kBAAkB,YAAY;IAC9B,cAAc,SAAS;IACvB,cAAc,SAAS;IACvB,aAAa,WAAW;IACxB,MAAM,WAAW;GAClB,CAAC;GACD,OAAO;IACN,SAAS;KACR,KAAK,WAAW;KAChB,WAAW,YAAY;IACxB;IACA,UAAU,CAAC;KACV,MAAM;KACN,IAAI,YAAY;KAChB,KAAK,WAAW;IACjB,CAAC;GACF;EACD,CAAC;CACF;AACD;;;;;;;;;;;;;;;;;;;AAqBA,MAAM,SAAS,SAAS,oBAAoB;;AAE5C,eAAe,aAAa,KAAK;CAChC,MAAM,oBAAoB,YAAY;EACrC,MAAM,SAAS,IAAI,GAAG,OAAO,EAAE,kBAAkB,iBAAiB,GAAG,EAAE,CAAC;EACxE,MAAM,OAAO,QAAQ;EACrB,IAAI;GACH,MAAM,OAAO,MAAM,UAAU;EAC9B,UAAU;GACT,MAAM,OAAO,IAAI;EAClB;CACD,CAAC;AACF;;;;;;;;AAQA,MAAM,wBAAwB;CAC7B,YAAY,OAAO,QAAQ,CAAC,CAAC;CAC7B,YAAY,EAAE,WAAW,OAAO,WAAW;EAC1C,WAAW,aAAa,KAAK,GAAG;EAChC,QAAQ,UAAU;CACnB,CAAC,CAAC,CAAC,KAAK,OAAO,WAAW,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;CAC7C,cAAc,OAAO;AACtB;;AAEA,MAAM,uBAAuB,SAAS,OAAO,QAAQ,OAAO,QAAQ,qBAAqB,CAAC;;;;;;AAQ1F,SAAS,mBAAmB,GAAG;CAC9B,MAAM,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;EACjE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,KAAK,OAAOC,SAAgB,GAAG,GAAG,MAAM;GAC7C,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,QAAQ,EAAE,UAAU;GACpB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,OAAO,OAAOC,WAAkB,GAAG,GAAG,QAAQ;GACnD,YAAY,GAAG;GACf,MAAM;EACP,CAAC;EACD,MAAM,MAAM,OAAO,IAAI,KAAK,mBAAmB,UAAU,SAAS,MAAM,KAAK,CAAC;EAC9E,OAAO;GACN,SAAS,EAAE,MAAM,OAAO,OAAO,GAAG,GAAG,QAAQ,EAAE,IAAI,CAAC,EAAA,CAAG,IAAI;GAC3D,UAAU,CAAC;IACV,MAAM;IACN,IAAI,GAAG;GACR,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;;;;;;;;AAiBA,eAAe,qBAAqB,YAAY;CAC/C,OAAO,QAAQ,YAAY,OAAO,MAAM,WAAW,UAAU,EAAA,CAAG,YAAY,OAAO,YAAY;AAChG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAI,mBAAmB,cAAc,MAAM;CAC1C;;CAEA;CACA,YAAY,MAAM,SAAS,KAAK;EAC/B,MAAM,wBAAwB,KAAK,KAAK,SAAS;EACjD,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,MAAM;CACZ;AACD;;;;;AAKA,SAAS,kBAAkB,cAAc;CACxC,IAAI,OAAO,iBAAiB,YAAY,iBAAiB,QAAQ,aAAa,cAAc;EAC3F,MAAM,UAAU,aAAa;EAC7B,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,iBAAiB,SAAS;GAChF,MAAM,OAAO,QAAQ;GACrB,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,GAAG,OAAO;EACzD;CACD;CACA,MAAM,IAAI,iBAAiB,eAAe,sFAAsF;AACjI;;;;;;;;;;;;;AAaA,eAAe,iBAAiB,eAAe,cAAc,WAAW;CACvE,IAAI,cAAc,KAAK,GAAG;EACzB,MAAM,UAAU,mBAAmB,wBAAwB,eAAe,YAAY,CAAC;EACvF,IAAI;GACH,MAAM,MAAM,MAAM,QAAQ,SAAS,SAAS;GAC5C,OAAO;IACN,MAAM,IAAI;IACV,YAAY,IAAI;GACjB;EACD,SAAS,OAAO;GACf,MAAM,IAAI,iBAAiB,wBAAwB,cAAc,UAAU,2BAA2B,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EACxK;CACD;CACA,MAAM,OAAO,MAAM,yBAAyB,eAAe,YAAY;CACvE,IAAI,SAAS,MAAM,OAAO;EACzB,MAAM,KAAK;EACX,YAAY,KAAK;CAClB;CACA,OAAO;EACN,MAAM,kBAAkB,YAAY;EACpC,YAAY,CAAC;CACd;AACD;;;;;;;;;;;AAWA,SAAS,sBAAsB,QAAQ,KAAK;CAC3C,MAAM,mBAAmB,IAAI,IAAI,QAAQ,cAAc,CAAC,CAAC;CACzD,MAAM,UAAU,IAAI,WAAW,QAAQ,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;CACvE,IAAI,WAAW,QAAQ,OAAO,gBAAgB,IAAI,QAAQ,QAAQ,WAAW,GAAG,OAAO;CACvF,IAAI,WAAW,QAAQ,QAAQ,WAAW,GAAG,OAAO;CACpD,OAAO;AACR;;;;;;;;;;;;AAYA,eAAe,iBAAiB,MAAM;CACrC,MAAM,aAAa,iBAAiB,KAAK,GAAG;CAC5C,OAAO,0BAA0B,aAAa,YAAY,KAAK,cAAc,KAAK,eAAe,KAAK,KAAK,KAAK,OAAO,GAAG,EAAE,cAAc,UAAU,EAAE,iBAAiB,kBAAkB,CAAC;AAC3L;AACA,eAAe,aAAa,YAAY,cAAc,eAAe,KAAK,SAAS;CAClF,MAAM,SAAS,4BAA4B,EAAE,WAAW,CAAC;CACzD,MAAM,OAAO,QAAQ;CACrB,IAAI;EACH,MAAM,SAAS,MAAM,OAAO,WAAW;EACvC,MAAM,mBAAmB,QAAQ,eAAe;EAChD,MAAM,SAAS,sBAAsB,QAAQ,GAAG;EAChD,IAAI,WAAW,QAAQ,OAAO;GAC7B;GACA,YAAY,IAAI;GAChB;EACD;EACA,IAAI,WAAW,QAAQ;GACtB,MAAM,SAAS,MAAM,OAAO,OAAO;IAClC,UAAU;IACV,MAAM;IACN;GACD,CAAC;GACD,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,iBAAiB,eAAe,OAAO,QAAQ,SAAS,OAAO,QAAQ,GAAG;GACpG,OAAO;IACN;IACA,YAAY,IAAI;IAChB;GACD;EACD;EACA,MAAM,SAAS,MAAM,OAAO,QAAQ;GACnC,UAAU;GACV;GACA,GAAG,YAAY,KAAK,IAAI;IACvB,SAAS,IAAI;IACb,eAAe,IAAI;IACnB;GACD,IAAI,CAAC;EACN,CAAC;EACD,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,iBAAiB,OAAO,QAAQ,SAAS,6BAA6B,6BAA6B,iBAAiB,OAAO,QAAQ,SAAS,OAAO,QAAQ,GAAG;EACxL,OAAO;GACN;GACA,YAAY,IAAI;GAChB;EACD;CACD,UAAU;EACT,MAAM,OAAO,MAAM;CACpB;AACD;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,cAAc,SAAS,sBAAsB;;;;;;;;;;AAUnD,MAAM,6BAA6B;CAClC,YAAY,OAAO,QAAQ,CAAC,CAAC;CAC7B,YAAY,EAAE,WAAW,OAAO,WAAW;EAC1C,WAAW,iBAAiB;GAC3B,KAAK,KAAK;GACV,cAAc,KAAK;GACnB,eAAe,KAAK;GACpB,KAAK;IACJ,MAAM,KAAK;IACX,YAAY,KAAK;GAClB;GACA,GAAG,KAAK,YAAY,KAAK,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;EAC3D,CAAC;EACD,QAAQ,UAAU;CACnB,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,aAAa;EAChC,aAAa,QAAQ;EACrB,YAAY,KAAK;CAClB,EAAE,CAAC;CACH,cAAc,OAAO;AACtB;;AAEA,MAAM,4BAA4B,SAAS,OAAO,aAAa,OAAO,QAAQ,0BAA0B,CAAC;;;;;;AAQzG,SAAS,qBAAqB,GAAG;CAChC,MAAM,YAAY,EAAE,IAAI,MAAM,kBAAkB,OAAO,IAAI,aAAa;EACvE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,KAAK,OAAOD,SAAgB,GAAG,GAAG,MAAM;GAC7C,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,QAAQ,EAAE,UAAU;GACpB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,OAAO,OAAOC,WAAkB,GAAG,GAAG,QAAQ;GACnD,YAAY,GAAG;GACf,MAAM;EACP,CAAC;EACD,MAAM,MAAM,OAAO,IAAI,KAAK,mBAAmB,UAAU,SAAS,MAAM,KAAK,CAAC;EAC9E,IAAI,CAAC,yBAAyB,IAAI,GAAG,MAAM,IAAI,MAAM,yDAAyD,GAAG,GAAG;EACpH,MAAM,eAAe,KAAK,SAAS,MAAM;EACzC,MAAM,gBAAgB,OAAO,OAAO,cAAc,qBAAqB,KAAK,MAAM,CAAC;EACnF,MAAM,MAAM,OAAO,OAAO,cAAc,iBAAiB,eAAe,cAAc,KAAK,SAAS,CAAC;EACrG,MAAM,OAAO,OAAO,OAAO,GAAG,GAAG,QAAQ,EAAE,IAAI,CAAC;EAChD,OAAO,YAAY,GAAG,GAAG,WAAW;GACnC,KAAK,KAAK;GACV;GACA;GACA,YAAY,IAAI;GAChB,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK;GACrC,GAAG,KAAK,cAAc,KAAK,IAAI,EAAE,SAAS,KAAK,UAAU,IAAI,CAAC;EAC/D,CAAC;EACD,OAAO;GACN,SAAS,EAAE,KAAK,KAAK,IAAI;GACzB,UAAU,CAAC;IACV,MAAM;IACN,IAAI,GAAG;GACR,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;;;;;;;;AAiBA,MAAM,gBAAgB,SAAS,2BAA2B;AAC1D,SAAS,YAAY,GAAG;CACvB,OAAO,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC;AAChD;AACA,SAAS,WAAW,OAAO;CAC1B,OAAO,MAAM,KAAK,QAAQ,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY;AACvF;;AAEA,SAAS,cAAc;CACtB,OAAO;EACN,aAAa,OAAO,WAAW,YAAY,CAAC,CAAC;EAC7C,iBAAiB,KAAK,OAAO,aAAa,GAAG,YAAY,EAAE,CAAC,CAAC;CAC9D;AACD;;;;;;;;AAQA,MAAM,+BAA+B;CACpC,YAAY,OAAO,QAAQ,CAAC,CAAC;CAC7B,YAAY,EAAE,aAAa,OAAO,WAAW,UAAU,YAAY,CAAC;CACpE,cAAc,OAAO;AACtB;;AAEA,MAAM,8BAA8B,SAAS,OAAO,eAAe,OAAO,QAAQ,4BAA4B,CAAC;;;;;;;;AAU/G,SAAS,wBAAwB,IAAI;CACpC,MAAM,YAAY,EAAE,SAAS,OAAO,IAAI,aAAa;EACpD,MAAM,QAAQ,OAAO,cAAc,GAAG,GAAG,SAAS,CAAC,CAAC;EACpD,OAAO;GACN,SAAS;IACR,aAAa,MAAM;IACnB,iBAAiB,MAAM;GACxB;GACA,UAAU,CAAC;EACZ;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;AAGA,SAAS,kBAAkB,GAAG;CAC7B,MAAM,OAAO,kBAAkB,CAAC;CAChC,OAAO;EACN,MAAM;EACN,WAAW,KAAK;EAChB,SAAS,KAAK;EACd,YAAY,KAAK,aAAa,WAAW,OAAO,IAAI,aAAa;GAChE,MAAM,aAAa,OAAO,KAAK,UAAU,KAAK,aAAa,MAAM;GACjE,MAAM,cAAc,OAAO,OAAO,kBAAkB,CAAC;GACrD,MAAM,SAAS,OAAO,QAAQ;GAC9B,IAAI,YAAY,mBAAmB,KAAK,KAAK,YAAY,uBAAuB,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM,IAAI,MAAM,4EAA4E;GACzM,OAAO;IACN,GAAG;IACH;IACA,aAAa,YAAY;IACzB,iBAAiB,YAAY;GAC9B;EACD,CAAC;EACD,SAAS,KAAK,aAAa,UAAU,eAAe,OAAO,IAAI,aAAa;GAC3E,MAAM,WAAW,OAAO,KAAK,OAAO,KAAK,aAAa,UAAU,UAAU;GAC1E,OAAO;IACN,GAAG;IACH,SAAS;KACR,GAAG,SAAS;KACZ,QAAQ,WAAW;KACnB,aAAa,WAAW;KACxB,iBAAiB,WAAW;IAC7B;GACD;EACD,CAAC;CACF;AACD;;;;;;;;;;;;;;;;;AAmBA,MAAM,YAAY,aAAa,aAAa,KAAK,IAAI,eAAe;;;;;;;AAOpE,eAAe,YAAY,QAAQ,OAAO;CACzC,OAAO,UAAU,MAAM,OAAO,IAAI,6BAA6B,EAAE,QAAQ,EAAE,OAAO,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;AACxG;AACA,eAAe,iBAAiB,QAAQ,WAAW,UAAU,KAAK;CACjE,MAAM,MAAM,SAAS,QAAQ;CAC7B,MAAM,WAAW,QAAQ,aAAa,KAAK,KAAK,IAAI,aAAa,QAAQ,IAAI,aAAa;CAC1F,IAAI,SAAS;CACb,GAAG;EACF,MAAM,MAAM,MAAM,YAAY,QAAQ,WAAW,OAAO;GACvD;GACA,OAAO;GACP;EACD,IAAI;GACH;GACA,OAAO;GACP;GACA;EACD,CAAC;EACD,IAAI,IAAI,UAAU,KAAK,GAAG,MAAM,gBAAgB,KAAK,IAAI,KAAK;EAC9D,MAAM,OAAO,IAAI;EACjB,IAAI,SAAS,KAAK,GAAG,OAAO;EAC5B,IAAI,KAAK,KAAK,KAAK,OAAO,GAAG,OAAO;EACpC,SAAS,KAAK,WAAW,UAAU,KAAK,WAAW,aAAa;CACjE,SAAS,WAAW;CACpB,OAAO;AACR;;;;;;;;AAQA,eAAe,YAAY,QAAQ,WAAW,UAAU,KAAK,OAAO;CACnE,MAAM,MAAM,MAAM,OAAO,KAAK,6BAA6B,EAAE,MAAM;EAClE;EACA,OAAO,SAAS,QAAQ;EACxB;EACA;EACA,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;CAC1C,EAAE,CAAC;CACH,IAAI,IAAI,UAAU,KAAK,KAAK,IAAI,SAAS,WAAW,KAAK,MAAM,gBAAgB,KAAK,IAAI,KAAK;AAC9F;AACA,MAAM,6CAA6C,IAAI,MAAM,6EAA6E;AAC1I,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,MAAM,0DAA0D,IAAI,KAAK,KAAK,UAAU,KAAK,EAAE,EAAE;AAC7J,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,MAAM,0CAA0C,IAAI,2BAA2B,KAAK,UAAU,KAAK,EAAE,EAAE;AACnK,SAAS,aAAa,SAAS,UAAU,OAAO;CAC/C,MAAM,QAAQ,aAAa,KAAK,IAAI,kDAAkD,+BAA+B,SAAS,SAAS;CACvI,MAAM,QAAQ,QAAQ,KAAK,MAAM,OAAO,EAAE,KAAK,0BAA0B,EAAE,eAAe,GAAG;CAC7F,uBAAuB,IAAI,MAAM,6BAA6B,QAAQ,OAAO,oFAAoF,MAAM,2CAA2C,MAAM,KAAK,IAAI,EAAE,6JAA6J,MAAM,EAAE;AACzY;AACA,eAAe,qBAAqB;CACnC,KAAK,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG,MAAM,qBAAqB;CACzF,OAAO,OAAO,WAAW,OAAO,IAAI,aAAa;EAChD,OAAO,OAAO;CACf,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQR,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF;;;;;;;;;AASA,eAAe,aAAa,OAAO,MAAM;CACxC,MAAM,EAAE,WAAW,aAAa,uBAAuB,MAAM,SAAS;CACtE,MAAM,wBAAwB,IAAI,IAAI;CACtC,KAAK,MAAM,WAAW,kBAAkB,MAAM,KAAK,GAAG;EACrD,MAAM,OAAO,WAAW,OAAO;EAC/B,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM;GACrC;GACA,gBAAgB,QAAQ;EACzB,CAAC;CACF;CACA,KAAK,MAAM,WAAW,cAAc,MAAM,KAAK,GAAG;EACjD,IAAI,CAAC,iBAAiB,QAAQ,OAAO,GAAG;EACxC,MAAM,OAAO,UAAU,OAAO;EAC9B,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM;GACrC;GACA,gBAAgB,QAAQ;EACzB,CAAC;CACF;CACA,IAAI,MAAM,SAAS,GAAG;CACtB,MAAM,SAAS,MAAM,UAAU,MAAM,mBAAmB;CACxD,MAAM,UAAU,CAAC;CACjB,KAAK,MAAM,QAAQ,MAAM,OAAO,GAAG;EAClC,IAAI,MAAM,iBAAiB,QAAQ,WAAW,UAAU,KAAK,IAAI,GAAG;EACpE,MAAM,aAAa,QAAQ,IAAI,KAAK;EACpC,IAAI,eAAe,KAAK,KAAK,WAAW,SAAS,GAAG;GACnD,MAAM,YAAY,QAAQ,WAAW,UAAU,KAAK,MAAM,UAAU;GACpE;EACD;EACA,QAAQ,KAAK,IAAI;CAClB;CACA,IAAI,QAAQ,SAAS,GAAG,MAAM,aAAa,SAAS,UAAU,MAAM,KAAK;AAC1E;AAGA,MAAM,2CAA2C,IAAI,MAAM,6EAA6E;AACxI,eAAe,mBAAmB;CACjC,KAAK,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG,MAAM,mBAAmB;CACvF,OAAO,OAAO,WAAW,OAAO,IAAI,aAAa;EAChD,OAAO,OAAO;CACf,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQA,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF;;;;;;;;;;;;;;;;AAgBA,eAAe,YAAY,OAAO,MAAM;CACvC,MAAM,EAAE,WAAW,aAAa,uBAAuB,MAAM,SAAS;CACtE,MAAM,eAAe,aAAa,KAAK;CACvC,IAAI;EACH,MAAM,SAAS,MAAM,UAAU,MAAM,iBAAiB;EACtD,MAAM,OAAO,WAAW,wBAAwB;GAC/C;GACA,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,GAAG,MAAM,UAAU,eAAe,CAAC,CAAC,KAAK,OAAO,eAAe,kBAAkB,MAAM,CAAC,CAAC;CAC1F,SAAS,OAAO;EACf,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,IAAI,cAAc,MAAM,IAAI,MAAM,+CAA+C,QAAQ;EACzF,QAAQ,KAAK,wDAAwD,QAAQ;CAC9E;AACD;;;;;;;;;;;AAaA,MAAM,wBAAwB,EAAE,YAAY,SAAS,OAAO,IAAI,aAAa;CAC5E,QAAQ,OAAOS,WAAkB,cAAc,KAAK,UAAU,CAAC,CAAC,EAAA,CAAG;AACpE,CAAC,EAAE;;;;;;;AAOH,MAAM,gBAAgB,SAAS,KAAK,KAAK,QAAQ,UAAU,GAAG,CAAC;;;;;;;;;;;;AAY/D,MAAM,wBAAwB,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;AAW9F,MAAM,2BAA2B,EAAE,YAAY,SAAS,OAAO,IAAI,aAAa;CAC/E,QAAQ,OAAOA,WAAkB,cAAc,KAAK,mBAAmB,CAAC,CAAC,EAAA,CAAG;AAC7E,CAAC,EAAE;;;;;;;;;;;;;;;;;;AAkBH,MAAM,sBAAsB,SAAS;CACpC,IAAI,KAAK,WAAW,GAAG,OAAO,KAAK;CACnC,OAAO,OAAO,IAAI,OAAO,IAAI,GAAG,aAAa,IAAI,CAAC,IAAI,SAAS;EAC9D,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;EAClC,IAAI,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,4BAA4B,KAAK,OAAO,2OAA2O;EAClX,OAAO,SAAS,MAAM;CACvB,CAAC;AACF;;AAEA,MAAM,qBAAqB;CAC1B,WAAW;CACX,SAAS,cAAc;EACtB,MAAM,EAAE,WAAW,aAAa,uBAAuB,SAAS;EAChE,OAAO,iBAAiB,aAAa,KAAK,IAAI;GAC7C;GACA;EACD,IAAI,EAAE,UAAU,CAAC;CAClB;AACD;AACA,MAAM,mBAAmB,IAAI,IAAIC,eAAsB;AACvD,SAAS,gBAAgB,OAAO;CAC/B,OAAO,iBAAiB,IAAI,KAAK;AAClC;;AAEA,SAAS,iBAAiB,OAAO;CAChC,OAAO;AACR;;;;;;;;;;;;;;;AAeA,MAAM,+BAA+B,IAAI,IAAI,CAAC,CAAC,cAAc,qBAAqB,GAAG,CAAC,iBAAiB,wBAAwB,CAAC,CAAC;;;;;;;;;;AAUjI,MAAM,wCAAwC,IAAI,IAAI,CAAC,CAAC,cAAc,oBAAoB,GAAG,CAAC,iBAAiB,kBAAkB,CAAC,CAAC;;;;;;;;;;AAUnI,SAAS,oBAAoB,SAAS,QAAQ;CAC7C,OAAO,IAAI,IAAI,QAAQ,KAAK,UAAU;EACrC,MAAM,QAAQ,OAAO,IAAI,MAAM,KAAK;EACpC,IAAI,UAAU,KAAK,GAAG,MAAM,IAAI,MAAM,0CAA0C,MAAM,KAAK,4JAA4J;EACvP,OAAO,CAAC,MAAM,OAAO;GACpB,GAAG;GACH;EACD,CAAC;CACF,CAAC,CAAC;AACH;AACA,MAAM,kBAAkB,oBAAoB,0BAA0B,qBAAqB;;;;;AAK3F,SAAS,eAAe,MAAM;CAC7B,MAAM,cAAc,KAAK,eAAe,QAAQ,IAAI;CACpD,IAAI,gBAAgB,KAAK,KAAK,YAAY,WAAW,GAAG,MAAM,IAAI,MAAM,sEAAsE;CAC9I,IAAI,KAAK,WAAW,KAAK,GAAG,OAAO;EAClC;EACA,QAAQ,KAAK;EACb,gBAAgB;CACjB;CACA,MAAM,SAAS,QAAQ,IAAI;CAC3B,IAAI,WAAW,KAAK,KAAK,OAAO,WAAW,GAAG,OAAO;EACpD;EACA,gBAAgB;CACjB;CACA,IAAI,CAAC,gBAAgB,MAAM,GAAG,MAAM,IAAI,MAAM,sDAAsD,OAAO,4CAAA,gBAAmE,KAAK,IAAI,EAAE,GAAG;CAC5L,OAAO;EACN;EACA;EACA,gBAAgB;CACjB;AACD;;AAEA,MAAM,eAAe,OAAO,CAAC,MAAM;CAClC,MAAM,IAAI,eAAe,IAAI;CAC7B,OAAO;EACN,IAAI;EACJ,WAAW,oBAAoB;EAC/B,iBAAiB,iBAAiB,MAAM,SAASC,UAAiB,GAAG,eAAe,GAAG,oBAAoB,GAAG,sBAAsB,GAAGC,mBAA0B,CAAC,CAAC;EACnK,YAAY,UAAU,aAAa,KAAK;EACxC,WAAW,UAAU,YAAY,KAAK;EACtC,aAAa,EAAE,YAAY,QAAQ,OAAO,IAAI,aAAa;GAC1D,MAAM,EAAE,WAAW,aAAa,uBAAuB,IAAI,SAAS;GACpE,KAAK,MAAM,OAAO,CAAC,gBAAgB,qBAAqB,GAAG,OAAOR,oBAA2B,GAAG,IAAI,UAAU;IAC7G;IACA;IACA,OAAO;IACP,OAAO,WAAW,YAAY;IAC9B,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;GAC1C,CAAC;GACD,OAAO;IACN;IACA;GACD;EACD,CAAC,EAAE;EACH,YAAY;EACZ,OAAO;GACN,UAAU,mBAAmB,CAAC;GAC9B,eAAe,qBAAqB,CAAC;GACrC,SAAS,kBAAkB,CAAC;GAC5B,aAAa,wBAAwB,CAAC;GACtC,YAAY,kBAAkB,CAAC;GAC/B,IAAI,iBAAiB,CAAC;EACvB;CACD;AACD"}
+{"version":3,"file":"control.mjs","names":["Prisma.Bucket","Prisma.BucketKey","Prisma.ComputeService","Prisma.EnvironmentVariable","Prisma.packageComputeArtifact","Prisma.Deployment","Prisma.Database","Prisma.Connection","managementClientLayer","Prisma.ServiceKey","Prisma.COMPUTE_REGIONS","Prisma.providers","Prisma.ServiceKeyProvider"],"sources":["../../../1-prisma-cloud/0-lowering/lowering/dist/state.mjs","../../../1-prisma-cloud/1-extensions/target/dist/control.mjs"],"sourcesContent":["import { a as ManagementClient, c as fromEnv, i as callVoid, n as call, o as layer, t as PrismaApiError } from \"./http-CJM0E6rj.mjs\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Redacted from \"effect/Redacted\";\nimport * as Data from \"effect/Data\";\nimport { Stack } from \"alchemy\";\nimport * as Schedule from \"effect/Schedule\";\nimport postgres from \"postgres\";\nimport { STATE_STORE_VERSION, State, StateStoreError, encodeState, reviveStateRecursive } from \"alchemy/State\";\nimport { blindCast } from \"@internal/foundation/casts\";\n//#region src/state/discovery.ts\n/** The framework-owned database a stage's deploy state lives in — a child of that stage's Branch (ADR-0034). */\nconst STATE_DATABASE_NAME = \"prisma-composer-state\";\n/** Every connection created against a state database carries this prefix — see `cleanupAgedConnections`. */\nconst CONNECTION_NAME_PREFIX = \"prisma-composer-state-\";\nconst listAllBranches = (client, projectId) => Effect.gen(function* () {\n\tconst branches = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {} : { cursor };\n\t\tconst page = yield* call(() => client.GET(\"/v1/projects/{projectId}/branches\", { params: {\n\t\t\tpath: { projectId },\n\t\t\tquery\n\t\t} }));\n\t\tbranches.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn branches;\n});\n/**\n* The project's implicit default Branch — every live Project owns exactly\n* one (a platform invariant). The list endpoint has no `isDefault` filter, so\n* this pages through every Branch and picks it out client-side. Never creates\n* one: its absence means the platform's invariant is broken, which is not\n* something a deploy can repair.\n*/\nconst resolveDefaultBranchId = (client, projectId) => Effect.gen(function* () {\n\tconst found = (yield* listAllBranches(client, projectId)).find((b) => b.isDefault);\n\tif (found !== void 0) return found.id;\n\treturn yield* Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `project ${projectId} has no default Branch — the platform guarantees every live Project owns one; contact support.`\n\t}));\n});\n/** A named stage carries its `branchId`; production omits it, and its state lives on the Project's default Branch. */\nconst resolveBranchId = (client, container) => container.branchId !== void 0 ? Effect.succeed(container.branchId) : resolveDefaultBranchId(client, container.projectId);\n/**\n* Every database on this Branch. Uses the flat `GET /v1/databases`, which\n* accepts `projectId` and `branchId` together — the project-scoped listing\n* has no branch filter at all.\n*/\nconst listAllDatabasesOnBranch = (client, projectId, branchId) => Effect.gen(function* () {\n\tconst databases = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t} : {\n\t\t\tprojectId,\n\t\t\tbranchId,\n\t\t\tcursor\n\t\t};\n\t\tconst page = yield* call(() => client.GET(\"/v1/databases\", { params: { query } }));\n\t\tdatabases.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn databases;\n});\n/**\n* Databases on this Branch named `prisma-composer-state`, oldest first,\n* excluding the Branch's own default database. The default database is always\n* the user's, never ours to adopt or delete. A name match alone proves\n* nothing — the platform allows duplicate names — so every caller must still\n* verify ownership before acting on a candidate.\n*/\nconst listStateDatabaseCandidates = (client, projectId, branchId) => listAllDatabasesOnBranch(client, projectId, branchId).pipe(Effect.map((databases) => databases.filter((d) => d.name === \"prisma-composer-state\" && !d.isDefault).sort((a, b) => a.createdAt.localeCompare(b.createdAt))));\n/**\n* Creates a fresh Postgres connection and reads its connection string. Reads\n* `endpoints.direct.connectionString` only — never `endpoints.pooled`, and\n* never the deprecated top-level `connectionString`/`url` (PRO-212), neither\n* of which the platform guarantees.\n*\n* The connection string is returned only when the connection is created and\n* cannot be read back afterwards, which is why every run creates a fresh\n* connection instead of reusing one.\n*/\nconst createConnection = (client, databaseId) => call(() => client.POST(\"/v1/databases/{databaseId}/connections\", {\n\tparams: { path: { databaseId } },\n\tbody: { name: `${CONNECTION_NAME_PREFIX}${Date.now()}` }\n})).pipe(Effect.flatMap((r) => {\n\tconst created = r.data;\n\tconst dsn = created.endpoints.direct?.connectionString;\n\treturn dsn === void 0 ? Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `connection ${created.id} returned no endpoints.direct.connectionString (PRO-212)`\n\t})) : Effect.succeed(Redacted.make(dsn));\n}));\n//#endregion\n//#region src/state/errors.ts\n/** Collapses any thrown value (postgres.js failures included) into a {@link StateStoreError}. */\nconst toStateStoreError = (cause) => cause instanceof Error ? new StateStoreError({\n\tmessage: cause.message,\n\tcause\n}) : new StateStoreError({ message: String(cause) });\n/**\n* An operator-facing failure from the hosted-state bootstrap pipeline\n* (branch/database discovery, connection creation, schema migration, or lock\n* acquisition) — what a deployer actually sees, instead of a raw Effect\n* defect.\n*/\nvar HostedStateBootstrapError = class extends Data.TaggedError(\"HostedStateBootstrapError\") {\n\tget message() {\n\t\treturn `hosted-state bootstrap failed in ${this.container}: ${this.step} — ${this.reason}`;\n\t}\n};\n/**\n* Builds a {@link HostedStateBootstrapError} from whatever the failed step\n* threw. Never retains the raw driver/API error object as `cause`: a\n* postgres.js connection failure's `.message`/properties are not verified to\n* omit the DSN or credentials, so only the extracted message text survives\n* into the operator-facing error.\n*/\nconst hostedStateBootstrapError = (container, step, cause) => new HostedStateBootstrapError({\n\tcontainer,\n\tstep,\n\treason: cause instanceof Error ? cause.message : String(cause)\n});\n//#endregion\n//#region src/state/schema.ts\n/**\n* The well-known marker row written into every database this store owns.\n* Its presence proves the database is genuinely Prisma App's state store, not\n* a same-named project squatting on the discovery query (see `bootstrap.ts`\n* `verifyOwnership` — PDP allows duplicate project names).\n*/\nconst STATE_META_MARKER = \"prisma-composer-state-v1\";\n/**\n* Idempotent schema migration for the Prisma-hosted state store — safe to run\n* on every deploy, since `create table if not exists` no-ops once the tables\n* exist. Run this against `sql` before serving a {@link StateService} built\n* by `makePrismaStateService` over the same client.\n*/\nconst migratePrismaState = (sql) => Effect.tryPromise({\n\ttry: async () => {\n\t\tawait sql`\n        create table if not exists alchemy_resource_state (\n          stack text not null,\n          stage text not null,\n          fqn text not null,\n          value jsonb not null,\n          updated_at timestamptz not null default now(),\n          primary key (stack, stage, fqn)\n        )\n      `;\n\t\tawait sql`\n        create table if not exists alchemy_stack_output (\n          stack text not null,\n          stage text not null,\n          value jsonb not null,\n          updated_at timestamptz not null default now(),\n          primary key (stack, stage)\n        )\n      `;\n\t\tawait sql`\n        create table if not exists prisma_app_state_meta (\n          marker text primary key,\n          created_at timestamptz not null default now()\n        )\n      `;\n\t\tawait sql`\n        insert into prisma_app_state_meta (marker) values (${STATE_META_MARKER})\n        on conflict (marker) do nothing\n      `;\n\t},\n\tcatch: toStateStoreError\n});\n//#endregion\n//#region src/state/bootstrap.ts\nconst CONNECTION_MAX_AGE_MS = 1440 * 60 * 1e3;\n/**\n* Creates the state database on the stage's Branch, using the flat endpoint\n* because it is the only one that accepts a `branchId`. The platform still\n* creates the row on the project's default Branch and attaches it afterwards,\n* so a failed attach can leave a database behind on the default Branch. It\n* checks the Branch exists before creating, and this is one request instead of\n* two, so that window is much narrower than attaching from here — but it is\n* narrowed, not closed.\n*\n* `isDefault` is left at the API's `false` default: the state database must\n* never be the stage's default database, which belongs to the user.\n*/\nconst createStateDatabase = (client, projectId, branchId) => call(() => client.POST(\"/v1/databases\", { body: {\n\tprojectId,\n\tname: STATE_DATABASE_NAME,\n\tregion: \"inherit\",\n\tbranchId\n} })).pipe(Effect.map((created) => ({\n\tid: created.data.id,\n\tname: created.data.name,\n\tisDefault: created.data.isDefault,\n\tcreatedAt: created.data.createdAt\n})));\nconst listAllConnections = (client, databaseId) => Effect.gen(function* () {\n\tconst connections = [];\n\tlet cursor;\n\tfor (;;) {\n\t\tconst query = cursor === void 0 ? {} : { cursor };\n\t\tconst page = yield* call(() => client.GET(\"/v1/databases/{databaseId}/connections\", { params: {\n\t\t\tpath: { databaseId },\n\t\t\tquery\n\t\t} }));\n\t\tconnections.push(...page.data);\n\t\tif (!page.pagination.hasMore || page.pagination.nextCursor === null) break;\n\t\tcursor = page.pagination.nextCursor;\n\t}\n\treturn connections;\n});\nconst deleteConnection = (client, connectionId) => callVoid(() => client.DELETE(\"/v1/connections/{id}\", { params: { path: { id: connectionId } } }));\n/**\n* Every deploy creates a fresh connection (`createConnection`) and nothing ever\n* closes it, so the state database otherwise accumulates one connection\n* resource per run without bound. Best-effort, never blocks bootstrap: lists\n* this database's connections, deletes the ones matching our naming pattern\n* older than the age threshold, and swallows any failure (a transient API\n* error here must never fail the deploy it's cleaning up after).\n*/\nconst cleanupAgedConnections = (client, databaseId) => Effect.gen(function* () {\n\tconst connections = yield* listAllConnections(client, databaseId);\n\tconst cutoff = Date.now() - CONNECTION_MAX_AGE_MS;\n\tconst aged = connections.filter((c) => c.name.startsWith(\"prisma-composer-state-\") && Date.parse(c.createdAt) < cutoff);\n\tyield* Effect.forEach(aged, (c) => deleteConnection(client, c.id), { discard: true });\n}).pipe(Effect.ignore);\n/**\n* PDP allows duplicate database names, so a database named `prisma-composer-state`\n* found by listing is not proof it's ours — it could be an unrelated\n* database that happens to share the name (a squatter, deliberate or not).\n* Connects to the candidate and inspects its tables:\n*\n* - our marker table with our marker row present → `ours`, adopt outright.\n* - our state tables (`alchemy_resource_state`/`alchemy_stack_output`) but no\n*   marker → `legacy`: a database from before this ownership check existed.\n*   The real, currently-in-use workspace state is in this shape today, so it\n*   must keep working — adopt it, and `migratePrismaState` (idempotent)\n*   writes the marker on the way in.\n* - no tables at all → `empty`, a freshly-created database — adopt.\n* - anything else → `squatter`: foreign data occupies the name; refuse it.\n*/\nconst verifyOwnership = (connectionString) => Effect.tryPromise({\n\ttry: async () => {\n\t\tconst sql = postgres(Redacted.value(connectionString), {\n\t\t\tmax: 1,\n\t\t\tonnotice: () => {}\n\t\t});\n\t\ttry {\n\t\t\tconst rows = await sql`\n          select tablename from pg_tables where schemaname = 'public'\n        `;\n\t\t\tconst tables = new Set(rows.map((row) => row.tablename));\n\t\t\tif (tables.has(\"prisma_app_state_meta\")) return (await sql`\n            select marker from prisma_app_state_meta where marker = ${\"prisma-composer-state-v1\"}\n          `).length > 0 ? { kind: \"ours\" } : {\n\t\t\t\tkind: \"squatter\",\n\t\t\t\ttables: [...tables]\n\t\t\t};\n\t\t\tif (tables.has(\"alchemy_resource_state\") || tables.has(\"alchemy_stack_output\")) return { kind: \"legacy\" };\n\t\t\treturn tables.size === 0 ? { kind: \"empty\" } : {\n\t\t\t\tkind: \"squatter\",\n\t\t\t\ttables: [...tables]\n\t\t\t};\n\t\t} finally {\n\t\t\tawait sql.end({ timeout: 5 });\n\t\t}\n\t},\n\tcatch: (cause) => new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `ownership verification failed: ${cause instanceof Error ? cause.message : String(cause)}`\n\t})\n});\n/**\n* Finds the Branch's `prisma-composer-state` database, verifying ownership\n* rather than trusting the name alone (PDP allows duplicate names — see\n* `verifyOwnership`). Finding none creates one, with nothing to verify: only\n* this run can have touched a database it just created.\n*\n* Candidates are tried oldest first, so repeated runs pick the same one. The\n* first that verifies as ours is used. A candidate that fails verification is\n* skipped. If every candidate fails, bootstrap fails and names each rejected\n* database id, so an operator knows which to rename or remove.\n*/\nconst resolveStateDatabase = (client, projectId, branchId, verify) => Effect.gen(function* () {\n\tconst candidates = yield* listStateDatabaseCandidates(client, projectId, branchId);\n\tif (candidates.length === 0) {\n\t\tconst database = yield* createStateDatabase(client, projectId, branchId);\n\t\tconst connectionString = yield* createConnection(client, database.id);\n\t\tconsole.error(`hosted state: provisioned state database ${database.id} on branch ${branchId} (project ${projectId})`);\n\t\treturn {\n\t\t\tdatabase,\n\t\t\tconnectionString\n\t\t};\n\t}\n\tconst rejected = [];\n\tfor (const candidate of candidates) {\n\t\tconst connectionString = yield* createConnection(client, candidate.id);\n\t\tconst verdict = yield* verify(connectionString);\n\t\tif (verdict.kind === \"squatter\") {\n\t\t\trejected.push(`${candidate.id} (foreign tables: ${verdict.tables.join(\", \")})`);\n\t\t\tcontinue;\n\t\t}\n\t\tconsole.error(`hosted state: using state database ${candidate.id} on branch ${branchId} (${verdict.kind}) — ${candidates.length} candidate(s) named ${STATE_DATABASE_NAME}`);\n\t\treturn {\n\t\t\tdatabase: candidate,\n\t\t\tconnectionString\n\t\t};\n\t}\n\treturn yield* Effect.fail(new PrismaApiError({\n\t\tstatus: 0,\n\t\tmessage: `found ${candidates.length} database(s) named \"${STATE_DATABASE_NAME}\" on branch ${branchId}, but none verified as Composer's state store: ${rejected.join(\"; \")}. Rename or remove the offending database(s).`\n\t}));\n});\n/**\n* Resolves the stage's Branch, find-or-creates its `prisma-composer-state`\n* database, and creates a fresh connection — the automatic bootstrap every\n* deploy runs once, needing nothing beyond the service token and the\n* Project/Branch ids the CLI already resolved.\n*/\nconst bootstrapStateConnection = (container) => bootstrapStateConnectionWith(container, verifyOwnership);\n/**\n* Identical to {@link bootstrapStateConnection}, except the ownership check is\n* a parameter so `bootstrap.test.ts` can supply a fake instead of opening a\n* real Postgres connection.\n*/\nconst bootstrapStateConnectionWith = (container, verify) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst branchId = yield* resolveBranchId(client, container);\n\tconst { database, connectionString } = yield* resolveStateDatabase(client, container.projectId, branchId, verify);\n\tyield* cleanupAgedConnections(client, database.id);\n\treturn {\n\t\tprojectId: container.projectId,\n\t\tdatabaseId: database.id,\n\t\tconnectionString\n\t};\n});\n//#endregion\n//#region src/state/delete.ts\nconst deleteDatabase = (client, databaseId) => callVoid(() => client.DELETE(\"/v1/databases/{databaseId}\", { params: { path: { databaseId } } }));\n/**\n* Removes the stage's state database, so the CLI's destroy leaves nothing\n* behind: for a named stage the Branch cannot be deleted while this database\n* is still a live member, and for production it would otherwise outlive the\n* stage and hold a quota slot.\n*\n* Every candidate is checked for our ownership marker before deletion —\n* deleting by name alone would destroy a user's database that happens to\n* share the name. All owned candidates are removed, not just the first: a\n* crashed earlier run can leave duplicates, and they are all ours. Finding\n* none succeeds, which is what makes a retried destroy a no-op.\n*/\nconst deleteStateDatabase = (container) => deleteStateDatabaseWith(container, verifyOwnership);\n/**\n* Identical to {@link deleteStateDatabase}, except the ownership check is a\n* parameter so tests can supply a fake instead of opening a real Postgres\n* connection.\n*/\nconst deleteStateDatabaseWith = (container, verify) => Effect.gen(function* () {\n\tconst client = yield* ManagementClient;\n\tconst branchId = yield* resolveBranchId(client, container);\n\tconst candidates = yield* listStateDatabaseCandidates(client, container.projectId, branchId);\n\tfor (const candidate of candidates) {\n\t\tconst verdict = yield* verify(yield* createConnection(client, candidate.id));\n\t\tif (verdict.kind === \"squatter\") {\n\t\t\tconsole.warn(`hosted state: left database ${candidate.id} on branch ${branchId} alone — it is named ${STATE_DATABASE_NAME} but holds unrelated data (tables: ${verdict.tables.join(\", \")}).`);\n\t\t\tcontinue;\n\t\t}\n\t\tyield* deleteDatabase(client, candidate.id);\n\t\tconsole.error(`hosted state: removed state database ${candidate.id} from branch ${branchId}`);\n\t}\n});\n//#endregion\n//#region src/state/transient.ts\n/** Codes for \"can't reach the host yet\" — DNS/refusal, not a mid-session drop. */\nconst ESTABLISHMENT_CODES = /* @__PURE__ */ new Set([\n\t\"ECONNREFUSED\",\n\t\"ENOTFOUND\",\n\t\"EAI_AGAIN\"\n]);\n/** Connection-establishment failure messages (no useful `err.code`). `upstream database` is PPg's edge proxy while a cold/idle upstream warms up. */\nconst ESTABLISHMENT_MESSAGE_FRAGMENTS = [\"upstream database\", \"connection refused\"];\n/**\n* Whether a failure is a connection-establishment error against a warming\n* upstream (retry), as opposed to a lost lease, a mid-session drop, or a real\n* query error (all of which must surface at once). Unwraps a\n* {@link StateStoreError} to its driver `cause` so a code-only error still\n* classifies.\n*/\nconst isColdStartConnectError = (error) => {\n\tif (typeof error !== \"object\" || error === null) return false;\n\tconst code = \"code\" in error && typeof error.code === \"string\" ? error.code : void 0;\n\tif (code !== void 0 && ESTABLISHMENT_CODES.has(code)) return true;\n\tconst message = \"message\" in error && typeof error.message === \"string\" ? error.message.toLowerCase() : \"\";\n\tif (ESTABLISHMENT_MESSAGE_FRAGMENTS.some((fragment) => message.includes(fragment))) return true;\n\tconst cause = \"cause\" in error ? error.cause : void 0;\n\treturn cause !== void 0 && cause !== error && isColdStartConnectError(cause);\n};\n/** The same ~2-minute budget the bootstrap migration uses (`layer.ts`): retry every 5s, up to 2 minutes. */\nconst COLD_START_SCHEDULE = Schedule.both(Schedule.spaced(\"5 seconds\"), Schedule.during(\"2 minutes\"));\n/**\n* Retries a state operation past a cold-start connection rejection only; every\n* other failure surfaces immediately. `schedule` is injectable so tests drive\n* it without real delay.\n*/\nconst retryColdStart = (operation, schedule = COLD_START_SCHEDULE) => Effect.retry(operation, {\n\twhile: isColdStartConnectError,\n\tschedule\n});\n//#endregion\n//#region src/state/lock.ts\n/** Another deploy already holds the lock for this stack/stage. Never queued — fails immediately. */\nvar StateLockContentionError = class extends Data.TaggedError(\"StateLockContentionError\") {\n\tget message() {\n\t\treturn `another deploy holds the state lock for ${this.stack}/${this.stage}`;\n\t}\n};\nconst lockKey = (stack, stage) => `prisma-composer:${stack}/${stage}`;\n/**\n* Acquires a session-scoped Postgres advisory lock on a reserved\n* connection pulled from `sql`'s pool — session (not transaction) scope,\n* because a transaction-scoped lock releases at the first commit and a\n* deploy spans many. Held for the run's whole lifetime; contention fails\n* immediately rather than queuing. If the process crashes, the reserved\n* connection drops and Postgres auto-releases the session lock — no\n* explicit crash-recovery bookkeeping needed.\n*/\nconst acquireStateLock = (sql, stack, stage) => Effect.gen(function* () {\n\tconst key = lockKey(stack, stage);\n\tconst reserved = yield* Effect.tryPromise({\n\t\ttry: () => sql.reserve(),\n\t\tcatch: toStateStoreError\n\t});\n\tconst acquired = yield* Effect.tryPromise({\n\t\ttry: async () => {\n\t\t\treturn (await reserved`\n          select\n            pg_try_advisory_lock(hashtextextended(${key}, 0)) as acquired,\n            pg_backend_pid() as pid\n        `)[0];\n\t\t},\n\t\tcatch: toStateStoreError\n\t});\n\tif (acquired?.acquired !== true) {\n\t\treserved.release();\n\t\treturn yield* Effect.fail(new StateLockContentionError({\n\t\t\tstack,\n\t\t\tstage\n\t\t}));\n\t}\n\tconst lockPid = acquired.pid;\n\tconst checkLive = retryColdStart(Effect.tryPromise({\n\t\ttry: async () => {\n\t\t\treturn (await sql`\n            select exists (\n              select 1 from pg_locks\n              where locktype = 'advisory'\n                and pid = ${lockPid}\n                and objsubid = 1\n                and granted\n                and ((classid::bigint << 32) | (objid::bigint & 4294967295))\n                  = hashtextextended(${key}, 0)\n            ) as live\n          `)[0]?.live ?? false;\n\t\t},\n\t\tcatch: toStateStoreError\n\t}).pipe(Effect.flatMap((live) => live ? Effect.void : Effect.fail(new StateStoreError({ message: `the state lock for ${stack}/${stage} was lost mid-run; refusing to continue unlocked` })))));\n\tconst release = async () => {\n\t\ttry {\n\t\t\tawait reserved`select pg_advisory_unlock(hashtextextended(${key}, 0))`;\n\t\t} catch {} finally {\n\t\t\treserved.release();\n\t\t}\n\t};\n\treturn {\n\t\tcheckLive,\n\t\trelease\n\t};\n});\n//#endregion\n//#region src/state/service.ts\nconst attempt = (f) => retryColdStart(Effect.tryPromise({\n\ttry: f,\n\tcatch: toStateStoreError\n}));\n/**\n* Wraps an already-`encodeState`d value as a jsonb-typed bind parameter.\n* Must go through `sql.json(...)` (not `JSON.stringify(...)::jsonb`) —\n* postgres.js re-serializes the parameter once it learns the server-inferred\n* type is jsonb, so a pre-stringified value passed through a `::jsonb` cast\n* gets JSON-encoded *twice* and lands as a jsonb string instead of an\n* object. `sql.json` gives postgres.js the raw value up front and declares\n* the jsonb oid itself, so it is serialized exactly once.\n*/\nconst jsonParam = (sql, value) => sql.json(blindCast(encodeState(value)));\n/**\n* `reviveStateRecursive` is typed to return `unknown` — the caller is\n* expected to know the shape it revived. Here the shape is known by\n* construction: every row was written by `set()`, which persists a value\n* through `encodeState` first, so reviving it recovers a `PersistedState`.\n*/\nconst revivePersistedState = (value) => blindCast(reviveStateRecursive(value));\n/** Same reasoning as {@link revivePersistedState}, narrowed by the SQL status filter. */\nconst reviveReplacedResourceState = (value) => blindCast(reviveStateRecursive(value));\n/**\n* Builds alchemy's `StateService` over a caller-supplied postgres.js client,\n* against the two-table schema `migratePrismaState` creates. The caller owns\n* the client's lifecycle (connection pooling, reconnects, `.end()`); this\n* factory only issues queries.\n*/\nconst makePrismaStateService = (sql) => ({\n\tid: \"prisma-postgres\",\n\tgetVersion: () => Effect.succeed(STATE_STORE_VERSION),\n\tlistStacks: () => attempt(() => sql`\n        select stack from alchemy_resource_state\n        union\n        select stack from alchemy_stack_output\n        order by stack\n      `).pipe(Effect.map((rows) => rows.map((row) => row.stack))),\n\tlistStages: (stack) => attempt(() => sql`\n        select stage from alchemy_resource_state where stack = ${stack}\n        union\n        select stage from alchemy_stack_output where stack = ${stack}\n        order by stage\n      `).pipe(Effect.map((rows) => rows.map((row) => row.stage))),\n\tget: (request) => attempt(() => sql`\n        select value from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage} and fqn = ${request.fqn}\n      `).pipe(Effect.map((rows) => {\n\t\tconst row = rows[0];\n\t\treturn row === void 0 ? void 0 : revivePersistedState(row.value);\n\t})),\n\tgetReplacedResources: (request) => attempt(() => sql`\n        select value from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage}\n          and value ->> 'status' = 'replaced'\n      `).pipe(Effect.map((rows) => rows.map((row) => reviveReplacedResourceState(row.value)))),\n\tset: (request) => attempt(() => sql`\n        insert into alchemy_resource_state (stack, stage, fqn, value, updated_at)\n        values (\n          ${request.stack}, ${request.stage}, ${request.fqn},\n          ${jsonParam(sql, request.value)}, now()\n        )\n        on conflict (stack, stage, fqn) do update\n          set value = excluded.value, updated_at = excluded.updated_at\n      `).pipe(Effect.map(() => request.value)),\n\tdelete: (request) => attempt(() => sql`\n        delete from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage} and fqn = ${request.fqn}\n      `).pipe(Effect.asVoid),\n\tdeleteStack: (request) => attempt(async () => {\n\t\tif (request.stage === void 0) {\n\t\t\tawait sql`delete from alchemy_resource_state where stack = ${request.stack}`;\n\t\t\tawait sql`delete from alchemy_stack_output where stack = ${request.stack}`;\n\t\t} else {\n\t\t\tawait sql`\n          delete from alchemy_resource_state\n          where stack = ${request.stack} and stage = ${request.stage}\n        `;\n\t\t\tawait sql`\n          delete from alchemy_stack_output\n          where stack = ${request.stack} and stage = ${request.stage}\n        `;\n\t\t}\n\t}),\n\tlist: (request) => attempt(() => sql`\n        select fqn from alchemy_resource_state\n        where stack = ${request.stack} and stage = ${request.stage}\n        order by fqn\n      `).pipe(Effect.map((rows) => rows.map((row) => row.fqn))),\n\tgetOutput: (request) => attempt(() => sql`\n        select value from alchemy_stack_output\n        where stack = ${request.stack} and stage = ${request.stage}\n      `).pipe(Effect.map((rows) => {\n\t\tconst row = rows[0];\n\t\treturn row === void 0 ? void 0 : reviveStateRecursive(row.value);\n\t})),\n\tsetOutput: (request) => attempt(() => sql`\n        insert into alchemy_stack_output (stack, stage, value, updated_at)\n        values (${request.stack}, ${request.stage}, ${jsonParam(sql, request.value)}, now())\n        on conflict (stack, stage) do update\n          set value = excluded.value, updated_at = excluded.updated_at\n      `).pipe(Effect.map(() => request.value))\n});\n/**\n* How long a passing lease check is trusted before the next storage\n* operation re-verifies it. A deploy issues many state ops in quick\n* succession, and each raw `checkLive` is a `pg_locks` round-trip; without\n* amortization the guard roughly doubles the store's traffic. The cost of the\n* window is bounded: a lease lost mid-window is detected within this many ms,\n* not instantly — an accepted tradeoff on top of the already-accepted\n* non-atomic (TOCTOU) gap between the check and the operation.\n*/\nconst LEASE_CHECK_TTL_MS = 5e3;\n/**\n* Amortizes a lease check over a short TTL: a *passing* check is trusted for\n* `ttlMs`, so a burst of operations inside the window does one round-trip, not\n* one per op. A *failing* check is never cached — it propagates immediately\n* and leaves the last-good timestamp untouched, so the very next op re-checks.\n* The `lastOkAt` state is captured per call, so each store (each layer) gets\n* its own window — two stores in one process never share a cached success.\n*/\nconst amortizeCheck = (checkLive, ttlMs, now) => {\n\tlet lastOkAt;\n\treturn Effect.suspend(() => {\n\t\tif (lastOkAt !== void 0 && now() - lastOkAt < ttlMs) return Effect.void;\n\t\treturn checkLive.pipe(Effect.tap(() => Effect.sync(() => {\n\t\t\tlastOkAt = now();\n\t\t})));\n\t});\n};\n/**\n* Wraps a {@link StateService} so every method that touches storage first\n* re-verifies the state lock's lease via `checkLive`. Used to enforce \"a\n* dropped lock connection fails loudly\" — see {@link ../lock.ts}. The check is\n* amortized over a short TTL (see {@link amortizeCheck}), so a run of\n* back-to-back operations does not fire one `pg_locks` round-trip per call.\n*\n* Reads are gated too, not just writes: a lost lease means a concurrent\n* deploy may already be mutating this stack's rows, so a read could return\n* stale or conflicting data — untrustworthy either way, not just the writes.\n* The check is best-effort and not atomic with the operation it guards (the\n* lease could be lost in the gap between `checkLive` passing and the wrapped\n* call executing, or within the TTL window); that residual race is accepted.\n*\n* `getVersion` is excluded: it returns a compile-time constant\n* (`STATE_STORE_VERSION`), so guarding it would only add a pointless\n* reserved-connection round-trip.\n*\n* `now` is injectable so tests can advance the clock deterministically; it\n* defaults to `Date.now` (fine in library runtime code — only Workflow\n* scripts forbid it).\n*/\nconst guardStateService = (service, checkLive, now = Date.now) => {\n\tconst guard = amortizeCheck(checkLive, LEASE_CHECK_TTL_MS, now);\n\treturn {\n\t\tid: service.id,\n\t\tgetVersion: () => service.getVersion(),\n\t\tlistStacks: () => guard.pipe(Effect.andThen(service.listStacks())),\n\t\tlistStages: (stack) => guard.pipe(Effect.andThen(service.listStages(stack))),\n\t\tget: (request) => guard.pipe(Effect.andThen(service.get(request))),\n\t\tgetReplacedResources: (request) => guard.pipe(Effect.andThen(service.getReplacedResources(request))),\n\t\tset: (request) => guard.pipe(Effect.andThen(service.set(request))),\n\t\tdelete: (request) => guard.pipe(Effect.andThen(service.delete(request))),\n\t\tdeleteStack: (request) => guard.pipe(Effect.andThen(service.deleteStack(request))),\n\t\tlist: (request) => guard.pipe(Effect.andThen(service.list(request))),\n\t\tgetOutput: (request) => guard.pipe(Effect.andThen(service.getOutput(request))),\n\t\tsetOutput: (request) => guard.pipe(Effect.andThen(service.setOutput(request)))\n\t};\n};\n//#endregion\n//#region src/state/layer.ts\n/**\n* The hosted Alchemy state store. On layer init (scoped, once per stack\n* run): resolve the stage's Branch, find-or-create its `prisma-composer-state`\n* database, create a fresh connection, migrate the schema, and acquire the\n* (stack, stage) advisory lock — see `bootstrap.ts` and `lock.ts`. The\n* Management API plumbing (`ManagementClient`, `PrismaCredentials`) is\n* provided internally, so the returned layer's only requirements are the\n* ones alchemy itself already provides to every state store\n* (`StackServices`).\n*\n* Any bootstrap/lock/migration failure is wrapped into an operator-facing\n* `HostedStateBootstrapError` (naming the Project/Branch and the step that\n* failed, never the raw driver/API error — see `errors.ts`) before dying the\n* layer (loud, immediate, unrecoverable) rather than surfacing as a typed\n* error — matching core's `LowerOptions.state: Layer.Layer<State, never,\n* StackServices>` contract and alchemy's own convention (e.g. a missing\n* state store is `Effect.die` in `Stack.make`).\n*/\nconst prismaStateLayer = (ids) => {\n\tconst { projectId, branchId } = ids;\n\treturn Layer.effect(State, Effect.gen(function* () {\n\t\tconst stack = yield* Stack;\n\t\tconst container = branchId === void 0 ? projectId : `${projectId}/${branchId}`;\n\t\tconst bootstrapError = (step) => (cause) => hostedStateBootstrapError(container, step, cause);\n\t\tconst { connectionString } = yield* bootstrapStateConnection(branchId === void 0 ? { projectId } : {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t}).pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))), Effect.mapError(bootstrapError(\"resolving the state database on the stage branch\")));\n\t\tconst sql = postgres(Redacted.value(connectionString), {\n\t\t\tmax: 5,\n\t\t\tonnotice: () => {}\n\t\t});\n\t\tyield* Effect.addFinalizer(() => Effect.promise(() => sql.end({ timeout: 5 })));\n\t\tyield* migratePrismaState(sql).pipe(Effect.retry(Schedule.both(Schedule.spaced(\"5 seconds\"), Schedule.during(\"2 minutes\"))), Effect.mapError(bootstrapError(\"schema migration\")));\n\t\tconst lock = yield* acquireStateLock(sql, stack.name, stack.stage).pipe(Effect.mapError(bootstrapError(\"lock acquisition\")));\n\t\tyield* Effect.addFinalizer(() => Effect.promise(() => lock.release()));\n\t\tconst service = guardStateService(makePrismaStateService(sql), lock.checkLive);\n\t\treturn Effect.succeed(service);\n\t})).pipe(Layer.orDie);\n};\n//#endregion\nexport { deleteStateDatabase, deleteStateDatabaseWith, makePrismaStateService, migratePrismaState, prismaStateLayer, verifyOwnership };\n\n//# sourceMappingURL=state.mjs.map","import { a as encode, l as secretPointerRows, n as configKey, o as encodeParamPointer, s as paramEntries } from \"./serializer-CJiOhF2d.mjs\";\nimport { n as RESERVED_PROVIDER_PARAMS, o as SELF_ORIGIN, r as STREAMS_API_KEY, t as provisionedEdges } from \"./provisioned-edges-C1wSO3cx.mjs\";\nimport { i as paramName, r as paramBindingFor } from \"./param-BTzY0ne5.mjs\";\nimport { a as PnMigrationProvider, c as PgWarmProvider, d as containerDescriptor, i as PnMigration, l as PRISMA_CLOUD_EXTENSION_ID, n as S3Credentials, o as resolveTargetRef, p as prismaCloudContainerOf, r as S3CredentialsProvider, s as PgWarm, t as collectPreflightNames } from \"./preflight-names-BPL-qsZF.mjs\";\nimport { n as isPnPostgresResourceNode } from \"./prisma-next-BvBwGCIt.mjs\";\nimport { isParamSource } from \"@internal/core\";\nimport { blindCast } from \"@internal/foundation/casts\";\nimport { RPC_PEER_KEY } from \"@internal/service-rpc\";\nimport * as Prisma from \"@internal/lowering\";\nimport { ManagementClient, fromEnv, managementClientLayer } from \"@internal/lowering\";\nimport { deleteStateDatabaseWith, prismaStateLayer, verifyOwnership } from \"@internal/lowering/state\";\nimport * as Output from \"alchemy/Output\";\nimport * as Effect from \"effect/Effect\";\nimport * as Layer from \"effect/Layer\";\nimport * as Redacted from \"effect/Redacted\";\nimport { loadConfig } from \"@prisma-next/config-loader\";\nimport { resolve } from \"pathe\";\nconst PRISMA_NAME_MIN = 3;\nconst PRISMA_NAME_MAX = 65;\nfunction validateName(value, source) {\n\tif (value.length < PRISMA_NAME_MIN || value.length > PRISMA_NAME_MAX) throw new Error(`prisma-cloud: ${source} \"${value}\" (${value.length} characters) is not a valid Prisma resource name — Prisma requires ${PRISMA_NAME_MIN}–${PRISMA_NAME_MAX} characters. Rename the provision id (or the deploy --name) to fit.`);\n}\nfunction isCloudApplication(value) {\n\treturn typeof value === \"object\" && value !== null && \"projectId\" in value && typeof value.projectId === \"string\" && \"branchId\" in value && (value.branchId === void 0 || typeof value.branchId === \"string\");\n}\n/** Narrows `ctx.application`, which core hands over as `unknown`, to this extension's own product; throws naming the hook when it hasn't run. */\nfunction cloudApplicationOf(application) {\n\tif (!isCloudApplication(application)) throw new Error(\"prisma-cloud: ctx.application is not this extension's application product — the prismaCloud() application hook must run before any node lowers.\");\n\treturn application;\n}\nfunction projectIdOf(application) {\n\treturn cloudApplicationOf(application).projectId;\n}\n//#endregion\n//#region src/descriptors/bucket.ts\n/**\n* One Bucket per module-provisioned bucket resource — `id` is the module\n* provision id, so a resource shared by several consumers is created exactly\n* once. A BucketKey is minted for the bucket: it is the reveal-once credential\n* carrier, and its attributes (endpoint, bucketName, accessKeyId,\n* secretAccessKey) become the four S3Config outputs consumers resolve by name.\n*/\nfunction bucketDescriptor(_o) {\n\tconst lowering = ({ id, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst bkt = yield* Prisma.Bucket(`${id}-bucket`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst key = yield* Prisma.BucketKey(`${id}-key`, {\n\t\t\tbucketId: bkt.id,\n\t\t\tname: id,\n\t\t\trole: \"read_write\"\n\t\t});\n\t\tconst secretAccessKey = Output.map(key.secretAccessKey, (v) => Redacted.value(v));\n\t\treturn {\n\t\t\toutputs: {\n\t\t\t\turl: key.endpoint,\n\t\t\t\tbucket: key.bucketName,\n\t\t\t\taccessKeyId: key.accessKeyId,\n\t\t\t\tsecretAccessKey\n\t\t\t},\n\t\t\tentities: [{\n\t\t\t\tkind: \"bucket\",\n\t\t\t\tid: bkt.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/descriptors/compute.ts\n/** The `compute` node kind's descriptor: the four service hooks — provision, serialize, package, deploy. */\n/**\n* Returns the PRECISE descriptor type, not the erased `NodeDescriptor`: the\n* registry in control.ts erases it on assignment anyway (method bivariance),\n* but s3-store composes over these hooks and needs their P/S to stay visible.\n* Annotating this `NodeDescriptor` would force s3-store to cast them back.\n*/\nfunction computeDescriptor(o) {\n\treturn {\n\t\tkind: \"service\",\n\t\tprovision: ({ id, application }) => Effect.gen(function* () {\n\t\t\tvalidateName(id, \"service name (from provision id)\");\n\t\t\tconst projectId = projectIdOf(application);\n\t\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\t\tconst svc = yield* Prisma.ComputeService(`${id}-svc`, {\n\t\t\t\tprojectId,\n\t\t\t\tname: id,\n\t\t\t\tregion: o().region ?? \"us-east-1\",\n\t\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tserviceId: svc.id,\n\t\t\t\tprojectId,\n\t\t\t\tendpointDomain: svc.endpointDomain\n\t\t\t};\n\t\t}),\n\t\tserialize: (ctx, provisioned, config) => Effect.gen(function* () {\n\t\t\tconst { address, node, graph } = ctx;\n\t\t\tconst branchId = cloudApplicationOf(ctx.application).branchId;\n\t\t\tconst cls = branchId ? \"preview\" : \"production\";\n\t\t\tconst branch = branchId !== void 0 ? { branchId } : {};\n\t\t\tconst projectId = provisioned.projectId;\n\t\t\tconst svc = node;\n\t\t\tconst records = [];\n\t\t\tfor (const d of paramEntries(svc)) {\n\t\t\t\tconst value = d.owner === \"service\" ? config.service[d.name] : config.inputs[d.owner.input]?.[d.name];\n\t\t\t\tif (value === void 0) continue;\n\t\t\t\tconst key = configKey(address, d);\n\t\t\t\tconst rowValue = d.owner === \"service\" && isParamSource(value) ? encodeParamPointer(paramName(paramBindingFor(graph.params, address, d.name))) : encode(d.owner, value);\n\t\t\t\trecords.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\t\tprojectId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue: rowValue,\n\t\t\t\t\tclass: cls,\n\t\t\t\t\t...branch\n\t\t\t\t}));\n\t\t\t}\n\t\t\tfor (const { key, name } of secretPointerRows(svc, address, graph.secrets)) records.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\tprojectId,\n\t\t\t\tkey,\n\t\t\t\tvalue: name,\n\t\t\t\tclass: cls,\n\t\t\t\t...branch\n\t\t\t}));\n\t\t\tconst exposes = svc.expose !== void 0 && Object.keys(svc.expose).length > 0;\n\t\t\tconst refsByBrand = /* @__PURE__ */ new Map();\n\t\t\tif (exposes) for (const edge of provisionedEdges(graph)) {\n\t\t\t\tif (edge.providerAddress !== address) continue;\n\t\t\t\tconst ref = ctx.provisioned.get(edge.edgeId);\n\t\t\t\tif (ref === void 0) continue;\n\t\t\t\tconst refs = refsByBrand.get(edge.brand) ?? [];\n\t\t\t\trefs.push(ref);\n\t\t\t\trefsByBrand.set(edge.brand, refs);\n\t\t\t}\n\t\t\tfor (const [brand, entry] of o().providerParams) {\n\t\t\t\tconst raw = \"valueForService\" in entry ? entry.valueForService(provisioned, address) : exposes ? entry.value(refsByBrand.get(brand) ?? []) : void 0;\n\t\t\t\tif (raw === void 0) continue;\n\t\t\t\tconst key = configKey(address, {\n\t\t\t\t\towner: \"service\",\n\t\t\t\t\tname: entry.name\n\t\t\t\t});\n\t\t\t\tconst value = Output.isOutput(raw) ? Output.map(raw, (v) => encode(\"service\", v)) : encode(\"service\", raw);\n\t\t\t\trecords.push(yield* Prisma.EnvironmentVariable(`${key}-var`, {\n\t\t\t\t\tprojectId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue,\n\t\t\t\t\tclass: cls,\n\t\t\t\t\t...branch\n\t\t\t\t}));\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tenvironment: records,\n\t\t\t\tport: typeof config.service[\"port\"] === \"number\" ? config.service[\"port\"] : 3e3\n\t\t\t};\n\t\t}),\n\t\tpackage: ({ id }, { assembled, address }) => Effect.try(() => Prisma.packageComputeArtifact({\n\t\t\tid,\n\t\t\tbundleDir: assembled.dir,\n\t\t\tappEntry: assembled.entry,\n\t\t\taddress\n\t\t})),\n\t\tdeploy: ({ id }, provisioned, artifact, serialized) => Effect.gen(function* () {\n\t\t\tconst deployment = yield* Prisma.Deployment(`${id}-deploy`, {\n\t\t\t\tcomputeServiceId: provisioned.serviceId,\n\t\t\t\tartifactPath: artifact.path,\n\t\t\t\tartifactHash: artifact.sha256,\n\t\t\t\tenvironment: serialized.environment,\n\t\t\t\tport: serialized.port\n\t\t\t});\n\t\t\treturn {\n\t\t\t\toutputs: {\n\t\t\t\t\turl: deployment.deployedUrl,\n\t\t\t\t\tprojectId: provisioned.projectId\n\t\t\t\t},\n\t\t\t\tentities: [{\n\t\t\t\t\tkind: \"compute-service\",\n\t\t\t\t\tid: provisioned.serviceId,\n\t\t\t\t\turl: deployment.deployedUrl\n\t\t\t\t}]\n\t\t\t};\n\t\t})\n\t};\n}\n//#endregion\n//#region src/descriptors/postgres.ts\n/**\n* One Database per module-provisioned postgres resource — `id` is the\n* module provision id, so a resource shared by several consumers is created\n* exactly once.\n*/\nfunction postgresDescriptor(o) {\n\tconst lowering = ({ id, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst db = yield* Prisma.Database(`${id}-db`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\tregion: o().region ?? \"us-east-1\",\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst conn = yield* Prisma.Connection(`${id}-conn`, {\n\t\t\tdatabaseId: db.id,\n\t\t\tname: id\n\t\t});\n\t\tconst url = Output.map(conn.connectionString, (value) => Redacted.value(value));\n\t\treturn {\n\t\t\toutputs: { url: (yield* PgWarm(`${id}-warm`, { url })).url },\n\t\t\tentities: [{\n\t\t\t\tkind: \"postgres-database\",\n\t\t\t\tid: db.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/pn-config.ts\n/**\n* Resolves a `pnPostgres` resource's `prisma-next.config.ts` path to the\n* on-disk migrations directory the control client's `migrate`/`dbInit` needs\n* (ADR-0022, slice 2). Deploy-time only: loads PN's config (via c12) and\n* applies PN's own convention — `migrations.dir`, or the default `migrations/`,\n* relative to the config file's directory (mirrors the CLI's\n* `resolveMigrationPaths`). Imported by `control.ts` + tests, never by\n* `index.ts` / the `./prisma-next` authoring entry.\n*\n* `pathe` (not `node:path`) does the path work so the shipped source carries no\n* `node:` import — the same discipline `control.ts` already follows by\n* delegating fs/tar to `@internal/lowering` (invariant 5).\n*/\n/** The absolute migrations directory PN reads authored migration packages from. */\nasync function resolveMigrationsDir(configPath) {\n\treturn resolve(configPath, \"..\", (await loadConfig(configPath)).migrations?.dir ?? \"migrations\");\n}\n//#endregion\n//#region src/descriptors/prisma-next.ts\n/**\n* The migration is a tracked `PnMigration` Alchemy resource keyed on the\n* target REF identity (hash + sorted invariants): unchanged redeploy is a\n* no-op, a contract or ref-invariant change re-migrates.\n*/\nfunction prismaNextDescriptor(o) {\n\tconst lowering = ({ id, node, application }) => Effect.gen(function* () {\n\t\tvalidateName(id, \"resource name (from provision id)\");\n\t\tconst branchId = cloudApplicationOf(application).branchId;\n\t\tconst db = yield* Prisma.Database(`${id}-db`, {\n\t\t\tprojectId: projectIdOf(application),\n\t\t\tname: id,\n\t\t\tregion: o().region ?? \"us-east-1\",\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t});\n\t\tconst conn = yield* Prisma.Connection(`${id}-conn`, {\n\t\t\tdatabaseId: db.id,\n\t\t\tname: id\n\t\t});\n\t\tconst url = Output.map(conn.connectionString, (value) => Redacted.value(value));\n\t\tif (!isPnPostgresResourceNode(node)) throw new Error(`prisma-next lowering received a non-prisma-next node (${id}).`);\n\t\tconst contractJson = node.provides.__cmp.contractJson;\n\t\tconst migrationsDir = yield* Effect.promise(() => resolveMigrationsDir(node.config));\n\t\tconst ref = yield* Effect.promise(() => resolveTargetRef(migrationsDir, contractJson, node.targetRef));\n\t\tconst warm = yield* PgWarm(`${id}-warm`, { url });\n\t\tyield* PnMigration(`${id}-migrate`, {\n\t\t\turl: warm.url,\n\t\t\tcontractJson,\n\t\t\tmigrationsDir,\n\t\t\ttargetHash: ref.hash,\n\t\t\tinvariants: [...ref.invariants].sort(),\n\t\t\t...node.targetRef !== void 0 ? { refName: node.targetRef } : {}\n\t\t});\n\t\treturn {\n\t\t\toutputs: { url: warm.url },\n\t\t\tentities: [{\n\t\t\t\tkind: \"postgres-database\",\n\t\t\t\tid: db.id\n\t\t\t}]\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/descriptors/s3-credentials.ts\n/**\n* One `S3Credentials` resource per provisioned credentials node — `id` is the\n* module provision id, so a pair shared by the storage service is minted once\n* and kept stable across deploys (the resource's provider preserves it).\n* `_o` is unused today (the mint needs no region/project) but kept for symmetry\n* with the other descriptors' signature.\n*/\nfunction s3CredentialsDescriptor(_o) {\n\tconst lowering = ({ id }) => Effect.gen(function* () {\n\t\tconst creds = yield* S3Credentials(`${id}-creds`, {});\n\t\treturn {\n\t\t\toutputs: {\n\t\t\t\taccessKeyId: creds.accessKeyId,\n\t\t\t\tsecretAccessKey: creds.secretAccessKey\n\t\t\t},\n\t\t\tentities: []\n\t\t};\n\t});\n\treturn Object.assign(lowering, { kind: \"resource\" });\n}\n//#endregion\n//#region src/descriptors/s3-store.ts\nfunction s3StoreDescriptor(o) {\n\tconst base = computeDescriptor(o);\n\treturn {\n\t\tkind: \"service\",\n\t\tprovision: base.provision,\n\t\tpackage: base.package,\n\t\tserialize: (ctx, provisioned, config) => Effect.gen(function* () {\n\t\t\tconst serialized = yield* base.serialize(ctx, provisioned, config);\n\t\t\tconst credentials = config.inputs[\"credentials\"] ?? {};\n\t\t\tconst bucket = config.service[\"bucket\"];\n\t\t\tif (credentials[\"accessKeyId\"] === void 0 || credentials[\"secretAccessKey\"] === void 0 || bucket === void 0) throw new Error(\"s3-store service must wire a 'credentials' dependency and a 'bucket' param\");\n\t\t\treturn {\n\t\t\t\t...serialized,\n\t\t\t\tbucket,\n\t\t\t\taccessKeyId: credentials[\"accessKeyId\"],\n\t\t\t\tsecretAccessKey: credentials[\"secretAccessKey\"]\n\t\t\t};\n\t\t}),\n\t\tdeploy: (ctx, provisioned, artifact, serialized) => Effect.gen(function* () {\n\t\t\tconst deployed = yield* base.deploy(ctx, provisioned, artifact, serialized);\n\t\t\treturn {\n\t\t\t\t...deployed,\n\t\t\t\toutputs: {\n\t\t\t\t\t...deployed.outputs,\n\t\t\t\t\tbucket: serialized.bucket,\n\t\t\t\t\taccessKeyId: serialized.accessKeyId,\n\t\t\t\t\tsecretAccessKey: serialized.secretAccessKey\n\t\t\t\t}\n\t\t\t};\n\t\t})\n\t};\n}\n//#endregion\n//#region src/preflight.ts\n/** production for the default stage; preview for a named stage — matching how the pack writes config rows. */\nconst classFor = (branchId) => branchId === void 0 ? \"production\" : \"preview\";\n/**\n* One page of the env-var list. The query is `blindCast` to `never` because\n* openapi-fetch types this path's query as `never` (an SDK path/operation\n* mismatch); that same workaround defeats the client's response-type inference,\n* so the result is projected to the small shape we actually read.\n*/\nasync function listEnvVars(client, query) {\n\treturn blindCast(await client.GET(\"/v1/environment-variables\", { params: { query: blindCast(query) } }));\n}\nasync function existsOnPlatform(client, projectId, branchId, key) {\n\tconst cls = classFor(branchId);\n\tconst visible = (row) => branchId === void 0 || row.branchId === null || row.branchId === branchId;\n\tlet cursor = null;\n\tdo {\n\t\tconst res = await listEnvVars(client, cursor === null ? {\n\t\t\tprojectId,\n\t\t\tclass: cls,\n\t\t\tkey\n\t\t} : {\n\t\t\tprojectId,\n\t\t\tclass: cls,\n\t\t\tkey,\n\t\t\tcursor\n\t\t});\n\t\tif (res.error !== void 0) throw listFailedError(key, res.error);\n\t\tconst page = res.data;\n\t\tif (page === void 0) return false;\n\t\tif (page.data.some(visible)) return true;\n\t\tcursor = page.pagination.hasMore ? page.pagination.nextCursor : null;\n\t} while (cursor !== null);\n\treturn false;\n}\n/**\n* Provision `key`=`value` directly via the Management API for the target\n* stage's scope (a production template for the default stage; a preview branch\n* override for a named stage — the same scope the pack writes config rows to,\n* EnvironmentVariable.ts). A 409 means a concurrent deploy already provisioned\n* it — tolerated. The value is never logged.\n*/\nasync function fillMissing(client, projectId, branchId, key, value) {\n\tconst res = await client.POST(\"/v1/environment-variables\", { body: {\n\t\tprojectId,\n\t\tclass: classFor(branchId),\n\t\tkey,\n\t\tvalue,\n\t\t...branchId !== void 0 ? { branchId } : {}\n\t} });\n\tif (res.error !== void 0 && res.response.status !== 409) throw fillFailedError(key, res.error);\n}\nconst tokenRequiredError$1 = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_SERVICE_TOKEN is required for deploy preflight.\");\nconst listFailedError = (key, error) => /* @__PURE__ */ new Error(`deploy preflight: Prisma Management API error listing \"${key}\": ${JSON.stringify(error)}.`);\nconst fillFailedError = (key, error) => /* @__PURE__ */ new Error(`deploy preflight: failed to provision \"${key}\" from the deploy shell: ${JSON.stringify(error)}.`);\nfunction missingError(missing, branchId, stage) {\n\tconst scope = branchId === void 0 ? \"the production class (project-level template)\" : `the preview class of stage \"${stage ?? branchId}\" (branch override or template)`;\n\tconst lines = missing.map((m) => `  - ${m.name}  (required by service \"${m.serviceAddress}\")`);\n\treturn /* @__PURE__ */ new Error(`Deploy preflight failed — ${missing.length} env var(s) (secret or env-sourced param) are not provisioned on Prisma Cloud for ${scope}, and are absent from the deploy shell:\\n${lines.join(\"\\n\")}\\n\\nSet each in the deploy shell environment (the CLI will provision it on deploy), or create it on the platform (Prisma Console or the Management API) in ${scope}.`);\n}\nasync function managementClient$1() {\n\tif ((process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) throw tokenRequiredError$1();\n\treturn Effect.runPromise(Effect.gen(function* () {\n\t\treturn yield* ManagementClient;\n\t}).pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv())))));\n}\n/**\n* The Prisma Cloud extension's `preflight`. Aggregates the target-agnostic\n* manifests (core's `provisionManifest` for secrets, `paramManifest` filtered\n* to env-sourced bindings for params), checks each pointer name against the\n* platform, fills from the shell where possible, and fails loudly on anything\n* absent from both. Accepts an injected client for tests; otherwise builds one\n* from env.\n*/\nasync function runPreflight(input, deps) {\n\tconst { projectId, branchId } = prismaCloudContainerOf(input.container);\n\tconst collected = collectPreflightNames(input.graph);\n\tconst names = /* @__PURE__ */ new Map();\n\tfor (const meta of [...collected.secrets, ...collected.envParams]) if (!names.has(meta.name)) names.set(meta.name, meta);\n\tif (names.size === 0) return;\n\tconst client = deps?.client ?? await managementClient$1();\n\tconst missing = [];\n\tfor (const meta of names.values()) {\n\t\tif (await existsOnPlatform(client, projectId, branchId, meta.name)) continue;\n\t\tconst shellValue = process.env[meta.name];\n\t\tif (shellValue !== void 0 && shellValue.length > 0) {\n\t\t\tawait fillMissing(client, projectId, branchId, meta.name, shellValue);\n\t\t\tcontinue;\n\t\t}\n\t\tmissing.push(meta);\n\t}\n\tif (missing.length > 0) throw missingError(missing, branchId, input.stage);\n}\n//#endregion\n//#region src/teardown.ts\nconst tokenRequiredError = () => /* @__PURE__ */ new Error(\"environment variable PRISMA_SERVICE_TOKEN is required for destroy teardown.\");\nasync function managementClient() {\n\tif ((process.env[\"PRISMA_SERVICE_TOKEN\"] ?? \"\").length === 0) throw tokenRequiredError();\n\treturn Effect.runPromise(Effect.gen(function* () {\n\t\treturn yield* ManagementClient;\n\t}).pipe(Effect.provide(managementClientLayer().pipe(Layer.provide(fromEnv())))));\n}\n/**\n* The Prisma Cloud extension's `teardown`. Removes the stage's state database,\n* with failure handling that differs by stage because the consequences do:\n*\n* - **Named stage: throw.** The Branch delete that follows would fail anyway —\n*   the platform refuses a Branch that still has a database attached — so\n*   failing here names the actual cause instead of a confusing symptom.\n* - **Production: warn and continue.** Nothing blocks the Project delete on\n*   this; removing the database only stops production's state outliving\n*   production and holding a quota slot. That is a cleanup step, and a cleanup\n*   step must not fail the command.\n*\n* Accepts an injected client and ownership verifier for tests; otherwise\n* builds a client from env and verifies against the real database.\n*/\nasync function runTeardown(input, deps) {\n\tconst { projectId, branchId } = prismaCloudContainerOf(input.container);\n\tconst isNamedStage = branchId !== void 0;\n\ttry {\n\t\tconst client = deps?.client ?? await managementClient();\n\t\tawait Effect.runPromise(deleteStateDatabaseWith({\n\t\t\tprojectId,\n\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t}, deps?.verify ?? verifyOwnership).pipe(Effect.provideService(ManagementClient, client)));\n\t} catch (error) {\n\t\tconst reason = error instanceof Error ? error.message : String(error);\n\t\tif (isNamedStage) throw new Error(`Failed to delete the deploy-state database: ${reason}`);\n\t\tconsole.warn(`Could not remove production's deploy-state database: ${reason}`);\n\t}\n}\n//#endregion\n//#region src/control/extension.ts\n/** The Prisma Cloud–hosted deploy state store; its implementation lives in @internal/lowering. */\n/**\n* ADR-0031's registered provisioner for RPC_PEER_KEY: mints one `ServiceKey`\n* resource per edge (ADR-0030) and forwards its value as the opaque ref core\n* writes into the consumer's `serviceKey` param. The resource id keeps the\n* `servicekey-${edgeId}` scheme byte-identical to slice 2's, so an existing\n* deploy's keys are found, not re-minted. Defined here, not in service-keys.ts:\n* that module is also reachable from the runtime/authoring side, which must\n* never import `@internal/lowering` or `effect`.\n*/\nconst serviceKeyProvisioner = { provision: (edge) => Effect.gen(function* () {\n\treturn (yield* Prisma.ServiceKey(`servicekey-${edge.edgeId}`, {})).value;\n}) };\n/**\n* `ctx.provisioned`'s refs are typed `unknown` — core forwards a provisioner's\n* ref without inspecting it. Each provider param below is the sole reader of\n* its own provisioner's output, so the shape is asserted here, once, rather\n* than checked.\n*/\nconst asKeyOutputs = (refs) => refs.map((ref) => blindCast(ref));\n/**\n* RPC's deploy-side `value(refs)` (ADR-0030): the provider stores a SET — one\n* key per inbound edge — into the accepted-keys var `serve()` reads. Paired\n* with the provisioner above: mint per edge, aggregate every edge.\n*\n* Zero consumers still emits, and that is the whole point of #100: an ABSENT\n* var means \"never provisioned\" and passes every caller through, so a deployed\n* provider nobody wired must say \"[]\" — deny everything — rather than say\n* nothing. Written as a literal because `Output.all()` with no arguments has\n* nothing to resolve.\n*/\nconst rpcAcceptedKeysValue = (refs) => refs.length > 0 ? Output.all(...asKeyOutputs(refs)) : [];\n/**\n* ADR-0031's registered provisioner for STREAMS_API_KEY — the same `ServiceKey`\n* mint, keyed PER PROVIDER instead of per edge: the resource id is the\n* provider's address, so every consumer edge of one streams module resolves to\n* the same resource and therefore the same stable value. That is what\n* `@prisma/streams-server` requires (it authenticates a single `API_KEY`), and\n* cardinality is exactly what ADR-0031 leaves to the provisioner. Making it\n* per-edge later is this id's shape plus an accepted-set provider param — no\n* new resource, no core change.\n*/\nconst streamsApiKeyProvisioner = { provision: (edge) => Effect.gen(function* () {\n\treturn (yield* Prisma.ServiceKey(`streamskey-${edge.providerAddress}`, {})).value;\n}) };\n/**\n* Streams' deploy-side `value(refs)`: ONE value, not a set —\n* `@prisma/streams-server` authenticates a single `API_KEY`, which is why the\n* provisioner above mints per provider. That pairing is the invariant this\n* param depends on, so it asserts rather than trusts it: a future per-edge\n* flip without a paired accepted-set param here would otherwise ship\n* whichever key came first and leave every other consumer 401ing, silently.\n* The refs are lazy Outputs (not comparable at serialize time); inside\n* `Output.map` they are resolved strings, the same seam RPC's set aggregates\n* on.\n*\n* Zero consumers emits NOTHING — the streams counterpart to RPC's \"[]\".\n* `@prisma/streams-server` has no deny-all mode: it either authenticates a key\n* or runs --no-auth, so there is no value here that means \"refuse everyone\".\n* Writing no key is what fails closed — the entrypoint refuses to boot with\n* a named error rather than serve unauthenticated.\n*/\nconst streamsApiKeyValue = (refs) => {\n\tif (refs.length === 0) return void 0;\n\treturn Output.map(Output.all(...asKeyOutputs(refs)), (vals) => {\n\t\tconst distinct = [...new Set(vals)];\n\t\tif (distinct.length > 1) throw new Error(`a streams provider was provisioned ${distinct.length} distinct keys across its ${refs.length} inbound bindings, but it can only be given one (@prisma/streams-server authenticates a single API_KEY). Its provisioner must mint per provider, not per edge — or this param must store an accepted-key set, once the server accepts one.`);\n\t\treturn distinct[0] ?? \"\";\n\t});\n};\n/**\n* Origin's deploy-side value function (service-derived): the provisioned\n* service's own `endpointDomain`, verbatim — `https://…`, no trailing slash,\n* no normalization. Every compute service gets this row, exposing or not.\n* The undefined guard is a deploy-time invariant check, not a policy: the\n* Management API always reports an endpoint domain post-PRO-200, so a missing\n* one means the platform predates the fix — fail the deploy loudly rather\n* than write a row origin() would trust. The raw string is JSON-encoded by\n* the descriptor's generic loop, like every other reserved provider param.\n*/\nconst selfOriginValue = (provisioned, address) => Output.map(provisioned.endpointDomain, (v) => {\n\tif (v === void 0) throw new Error(`ComputeService for \"${address}\" reported no endpointDomain at provision — cannot resolve the service's own origin (Management API predates the PRO-200 fix?)`);\n\treturn v;\n});\n/** The user-facing state descriptor: `state: prismaState()` in `prisma-composer.config.ts` (ADR-0017). */\nconst prismaState = () => ({\n\textension: PRISMA_CLOUD_EXTENSION_ID,\n\tcreate: (container) => {\n\t\tconst { projectId, branchId } = prismaCloudContainerOf(container);\n\t\treturn prismaStateLayer(branchId !== void 0 ? {\n\t\t\tprojectId,\n\t\t\tbranchId\n\t\t} : { projectId });\n\t}\n});\nconst KNOWN_REGION_SET = new Set(Prisma.COMPUTE_REGIONS);\nfunction isComputeRegion(value) {\n\treturn KNOWN_REGION_SET.has(value);\n}\n/** Prisma.providers()'s ProviderCollection doesn't structurally unify with Alchemy's inferred providers Layer (a @internal/lowering typings gap); it satisfies it at runtime. */\nfunction asProvidersLayer(layer) {\n\treturn layer;\n}\n/**\n* This extension's brands, each with the two halves ADR-0031 splits: the\n* PROVISIONER core resolves a mint through, and the reserved PROVIDER PARAM\n* that stores the minted values on the provider. So this file stays the only\n* place a brand is named — `descriptors/compute.ts` just looks a provider\n* param up by brand.\n*\n* `__tests__/provider-params.test.ts` asserts this map's brands are exactly\n* `PROVIDER_PARAMS`'s edge-derived brands (a service-derived param like the\n* origin mints nothing, so it has no provisioner): a brand minted here with no provider param\n* below would leave the value it mints written to consumers while no\n* provider ever stores an accepted-keys row for it — `serve()` (or the\n* equivalent runtime reader) then sees an absent var and passes every caller\n* through.\n*/\nconst PROVISIONERS = /* @__PURE__ */ new Map([[RPC_PEER_KEY, serviceKeyProvisioner], [STREAMS_API_KEY, streamsApiKeyProvisioner]]);\n/**\n* Every brand's deploy-side value function — the only per-brand thing this\n* file still holds directly. `PROVIDER_PARAMS` below is built by mapping\n* `RESERVED_PROVIDER_PARAMS` (`provider-params.ts`, the boot-side list) onto\n* this map, so a param can exist on the deploy side only if it already\n* exists on the boot side: `RESERVED_PROVIDER_PARAMS` is the single source of\n* which reserved provider params exist at all, closing the drift the old\n* name-comparison test only detected after the fact.\n*/\nconst PROVIDER_PARAM_VALUES = /* @__PURE__ */ new Map([\n\t[RPC_PEER_KEY, { value: rpcAcceptedKeysValue }],\n\t[STREAMS_API_KEY, { value: streamsApiKeyValue }],\n\t[SELF_ORIGIN, { valueForService: selfOriginValue }]\n]);\n/**\n* Builds the deploy-side registry from the boot-side list, keyed by brand —\n* throws if a boot-side entry has no registered deploy-side value function,\n* so `RESERVED_PROVIDER_PARAMS` stays the single source of which reserved\n* provider params exist: deploy can no longer write a row boot never\n* stashes. Exported (rather than inlined into `PROVIDER_PARAMS` below) so\n* `__tests__/provider-params.test.ts` can drive it directly with a\n* deliberately incomplete value map and watch it throw.\n*/\nfunction buildProviderParams(entries, values) {\n\treturn new Map(entries.map((entry) => {\n\t\tconst value = values.get(entry.brand);\n\t\tif (value === void 0) throw new Error(`prisma-cloud: reserved provider param \"${entry.name}\" (provider-params.ts) has no registered deploy-side value() in control.ts's PROVIDER_PARAM_VALUES — every param in RESERVED_PROVIDER_PARAMS must have one.`);\n\t\treturn [entry.brand, {\n\t\t\t...entry,\n\t\t\t...value\n\t\t}];\n\t}));\n}\nconst PROVIDER_PARAMS = buildProviderParams(RESERVED_PROVIDER_PARAMS, PROVIDER_PARAM_VALUES);\n/**\n* Resolves the factory's env-or-option inputs. Deliberately does NOT require\n* `PRISMA_WORKSPACE_ID`: nothing in this file reads `ResolvedCloudOptions.workspaceId`\n* downstream — it exists only so a caller MAY pin an explicit workspace, and\n* the real workspace check for a real deploy lives where the value actually\n* matters, `container.ts`'s `ensureContainer`/`locateContainer`. Region\n* validation stays eager-on-call (a garbage `PRISMA_REGION` still fails\n* loudly), but an ABSENT one resolves to `undefined` without touching\n* anything else — required for `prisma-composer dev`, which never sets\n* `PRISMA_REGION` and must not fail on its absence (local-dev spec § 5).\n*/\nfunction resolveOptions(opts) {\n\tconst workspaceId = opts.workspaceId ?? process.env[\"PRISMA_WORKSPACE_ID\"] ?? \"\";\n\tif (opts.region !== void 0) return {\n\t\tworkspaceId,\n\t\tregion: opts.region,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n\tconst region = process.env[\"PRISMA_REGION\"];\n\tif (region === void 0 || region.length === 0) return {\n\t\tworkspaceId,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n\tif (!isComputeRegion(region)) throw new Error(`prismaCloud(): environment variable PRISMA_REGION=\"${region}\" is not a known region (expected one of: ${Prisma.COMPUTE_REGIONS.join(\", \")}).`);\n\treturn {\n\t\tworkspaceId,\n\t\tregion,\n\t\tproviderParams: PROVIDER_PARAMS\n\t};\n}\n/**\n* A memoized thunk over `resolveOptions` — evaluated at FIRST LOWERING USE\n* (inside a node descriptor's `provision`/`serialize`), never at `prismaCloud()`\n* construction. The node descriptors take this thunk, not a resolved value\n* (local-dev spec § 5): `prismaCloud()` itself must construct with no\n* environment present, since it also builds the `localTarget` descriptor, which must\n* never require `PRISMA_WORKSPACE_ID`/`PRISMA_REGION`/`PRISMA_SERVICE_TOKEN`.\n*/\nfunction lazyOptions(opts) {\n\tlet cached;\n\treturn () => {\n\t\tcached ??= resolveOptions(opts);\n\t\treturn cached;\n\t};\n}\n/** The Prisma Cloud extension descriptor — `prisma-composer.config.ts` lists it under `extensions`. */\nconst prismaCloud = (opts = {}) => {\n\tconst o = lazyOptions(opts);\n\treturn {\n\t\tid: PRISMA_CLOUD_EXTENSION_ID,\n\t\tcontainer: containerDescriptor(),\n\t\tproviders: () => asProvidersLayer(Layer.mergeAll(Prisma.providers(), PgWarmProvider(), PnMigrationProvider(), S3CredentialsProvider(), Prisma.ServiceKeyProvider())),\n\t\tpreflight: (input) => runPreflight(input),\n\t\tteardown: (input) => runTeardown(input),\n\t\tapplication: { provision: (ctx) => Effect.gen(function* () {\n\t\t\tconst { projectId, branchId } = prismaCloudContainerOf(ctx.container);\n\t\t\tfor (const key of [\"DATABASE_URL\", \"DATABASE_URL_POOLED\"]) yield* Prisma.EnvironmentVariable(`${key}-poison`, {\n\t\t\t\tprojectId,\n\t\t\t\tkey,\n\t\t\t\tvalue: \"-\",\n\t\t\t\tclass: branchId ? \"preview\" : \"production\",\n\t\t\t\t...branchId !== void 0 ? { branchId } : {}\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tprojectId,\n\t\t\t\tbranchId\n\t\t\t};\n\t\t}) },\n\t\tprovisions: PROVISIONERS,\n\t\tnodes: {\n\t\t\tpostgres: postgresDescriptor(o),\n\t\t\t\"prisma-next\": prismaNextDescriptor(o),\n\t\t\tcompute: computeDescriptor(o),\n\t\t\tcredentials: s3CredentialsDescriptor(o),\n\t\t\t\"s3-store\": s3StoreDescriptor(o),\n\t\t\ts3: bucketDescriptor(o)\n\t\t},\n\t\tlocalTarget: () => import(\"@prisma/composer-prisma-cloud/local-target\").then((m) => m.localTargetDescriptor())\n\t};\n};\n//#endregion\nexport { PROVIDER_PARAMS, buildProviderParams, prismaCloud, prismaState };\n\n//# sourceMappingURL=control.mjs.map"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAYA,MAAM,sBAAsB;;AAE5B,MAAM,yBAAyB;AAC/B,MAAM,mBAAmB,QAAQ,cAAc,OAAO,IAAI,aAAa;CACtE,MAAM,WAAW,CAAC;CAClB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO;EAChD,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,qCAAqC,EAAE,QAAQ;GACxF,MAAM,EAAE,UAAU;GAClB;EACD,EAAE,CAAC,CAAC;EACJ,SAAS,KAAK,GAAG,KAAK,IAAI;EAC1B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;;;;;;;;AAQD,MAAM,0BAA0B,QAAQ,cAAc,OAAO,IAAI,aAAa;CAC7E,MAAM,SAAS,OAAO,gBAAgB,QAAQ,SAAS,EAAA,CAAG,MAAM,MAAM,EAAE,SAAS;CACjF,IAAI,UAAU,KAAK,GAAG,OAAO,MAAM;CACnC,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;EAC5C,QAAQ;EACR,SAAS,WAAW,UAAU;CAC/B,CAAC,CAAC;AACH,CAAC;;AAED,MAAM,mBAAmB,QAAQ,cAAc,UAAU,aAAa,KAAK,IAAI,OAAO,QAAQ,UAAU,QAAQ,IAAI,uBAAuB,QAAQ,UAAU,SAAS;;;;;;AAMtK,MAAM,4BAA4B,QAAQ,WAAW,aAAa,OAAO,IAAI,aAAa;CACzF,MAAM,YAAY,CAAC;CACnB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI;GACjC;GACA;EACD,IAAI;GACH;GACA;GACA;EACD;EACA,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;EACjF,UAAU,KAAK,GAAG,KAAK,IAAI;EAC3B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;;;;;;;;AAQD,MAAM,+BAA+B,QAAQ,WAAW,aAAa,yBAAyB,QAAQ,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO,KAAK,cAAc,UAAU,QAAQ,MAAM,EAAE,SAAS,2BAA2B,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,UAAU,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;;;;;;;;;;;AAW7R,MAAM,oBAAoB,QAAQ,eAAe,WAAW,OAAO,KAAK,0CAA0C;CACjH,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;CAC/B,MAAM,EAAE,MAAM,GAAG,yBAAyB,KAAK,IAAI,IAAI;AACxD,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,MAAM;CAC9B,MAAM,UAAU,EAAE;CAClB,MAAM,MAAM,QAAQ,UAAU,QAAQ;CACtC,OAAO,QAAQ,KAAK,IAAI,OAAO,KAAK,IAAI,eAAe;EACtD,QAAQ;EACR,SAAS,cAAc,QAAQ,GAAG;CACnC,CAAC,CAAC,IAAI,OAAO,QAAQ,SAAS,KAAK,GAAG,CAAC;AACxC,CAAC,CAAC;;AAIF,MAAM,qBAAqB,UAAU,iBAAiB,QAAQ,IAAI,gBAAgB;CACjF,SAAS,MAAM;CACf;AACD,CAAC,IAAI,IAAI,gBAAgB,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC;;;;;;;AAOnD,IAAI,4BAA4B,cAAc,KAAK,YAAY,2BAA2B,CAAC,CAAC;CAC3F,IAAI,UAAU;EACb,OAAO,oCAAoC,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,KAAK;CACnF;AACD;;;;;;;;AAQA,MAAM,6BAA6B,WAAW,MAAM,UAAU,IAAI,0BAA0B;CAC3F;CACA;CACA,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D,CAAC;;;;;;;AASD,MAAM,oBAAoB;;;;;;;AAO1B,MAAM,sBAAsB,QAAQ,OAAO,WAAW;CACrD,KAAK,YAAY;EAChB,MAAM,GAAG;;;;;;;;;;EAUT,MAAM,GAAG;;;;;;;;;EAST,MAAM,GAAG;;;;;;EAMT,MAAM,GAAG;6DACkD,kBAAkB;;;CAG9E;CACA,OAAO;AACR,CAAC;AAGD,MAAM,wBAAwB,OAAO,KAAK;;;;;;;;;;;;;AAa1C,MAAM,uBAAuB,QAAQ,WAAW,aAAa,WAAW,OAAO,KAAK,iBAAiB,EAAE,MAAM;CAC5G;CACA,MAAM;CACN,QAAQ;CACR;AACD,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,aAAa;CACnC,IAAI,QAAQ,KAAK;CACjB,MAAM,QAAQ,KAAK;CACnB,WAAW,QAAQ,KAAK;CACxB,WAAW,QAAQ,KAAK;AACzB,EAAE,CAAC;AACH,MAAM,sBAAsB,QAAQ,eAAe,OAAO,IAAI,aAAa;CAC1E,MAAM,cAAc,CAAC;CACrB,IAAI;CACJ,SAAS;EACR,MAAM,QAAQ,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO;EAChD,MAAM,OAAO,OAAO,WAAW,OAAO,IAAI,0CAA0C,EAAE,QAAQ;GAC7F,MAAM,EAAE,WAAW;GACnB;EACD,EAAE,CAAC,CAAC;EACJ,YAAY,KAAK,GAAG,KAAK,IAAI;EAC7B,IAAI,CAAC,KAAK,WAAW,WAAW,KAAK,WAAW,eAAe,MAAM;EACrE,SAAS,KAAK,WAAW;CAC1B;CACA,OAAO;AACR,CAAC;AACD,MAAM,oBAAoB,QAAQ,iBAAiB,eAAe,OAAO,OAAO,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,EAAE,CAAC,CAAC;;;;;;;;;AASnJ,MAAM,0BAA0B,QAAQ,eAAe,OAAO,IAAI,aAAa;CAC9E,MAAM,cAAc,OAAO,mBAAmB,QAAQ,UAAU;CAChE,MAAM,SAAS,KAAK,IAAI,IAAI;CAC5B,MAAM,OAAO,YAAY,QAAQ,MAAM,EAAE,KAAK,WAAW,wBAAwB,KAAK,KAAK,MAAM,EAAE,SAAS,IAAI,MAAM;CACtH,OAAO,OAAO,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,CAAC;AACrF,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;;;;;;;;;;;;;;;;AAgBrB,MAAM,mBAAmB,qBAAqB,OAAO,WAAW;CAC/D,KAAK,YAAY;EAChB,MAAM,MAAM,SAAS,SAAS,MAAM,gBAAgB,GAAG;GACtD,KAAK;GACL,gBAAgB,CAAC;EAClB,CAAC;EACD,IAAI;GACH,MAAM,OAAO,MAAM,GAAG;;;GAGtB,MAAM,SAAS,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC;GACvD,IAAI,OAAO,IAAI,uBAAuB,GAAG,QAAQ,MAAM,GAAG;sEACS,2BAA2B;YACtF,CAAE,SAAS,IAAI,EAAE,MAAM,OAAO,IAAI;IACzC,MAAM;IACN,QAAQ,CAAC,GAAG,MAAM;GACnB;GACA,IAAI,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI,sBAAsB,GAAG,OAAO,EAAE,MAAM,SAAS;GACxG,OAAO,OAAO,SAAS,IAAI,EAAE,MAAM,QAAQ,IAAI;IAC9C,MAAM;IACN,QAAQ,CAAC,GAAG,MAAM;GACnB;EACD,UAAU;GACT,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;EAC7B;CACD;CACA,QAAQ,UAAU,IAAI,eAAe;EACpC,QAAQ;EACR,SAAS,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACjG,CAAC;AACF,CAAC;;;;;;;;;;;;AAYD,MAAM,wBAAwB,QAAQ,WAAW,UAAU,WAAW,OAAO,IAAI,aAAa;CAC7F,MAAM,aAAa,OAAO,4BAA4B,QAAQ,WAAW,QAAQ;CACjF,IAAI,WAAW,WAAW,GAAG;EAC5B,MAAM,WAAW,OAAO,oBAAoB,QAAQ,WAAW,QAAQ;EACvE,MAAM,mBAAmB,OAAO,iBAAiB,QAAQ,SAAS,EAAE;EACpE,QAAQ,MAAM,4CAA4C,SAAS,GAAG,aAAa,SAAS,YAAY,UAAU,EAAE;EACpH,OAAO;GACN;GACA;EACD;CACD;CACA,MAAM,WAAW,CAAC;CAClB,KAAK,MAAM,aAAa,YAAY;EACnC,MAAM,mBAAmB,OAAO,iBAAiB,QAAQ,UAAU,EAAE;EACrE,MAAM,UAAU,OAAO,OAAO,gBAAgB;EAC9C,IAAI,QAAQ,SAAS,YAAY;GAChC,SAAS,KAAK,GAAG,UAAU,GAAG,oBAAoB,QAAQ,OAAO,KAAK,IAAI,EAAE,EAAE;GAC9E;EACD;EACA,QAAQ,MAAM,sCAAsC,UAAU,GAAG,aAAa,SAAS,IAAI,QAAQ,KAAK,MAAM,WAAW,OAAO,sBAAsB,qBAAqB;EAC3K,OAAO;GACN,UAAU;GACV;EACD;CACD;CACA,OAAO,OAAO,OAAO,KAAK,IAAI,eAAe;EAC5C,QAAQ;EACR,SAAS,SAAS,WAAW,OAAO,sBAAsB,oBAAoB,cAAc,SAAS,iDAAiD,SAAS,KAAK,IAAI,EAAE;CAC3K,CAAC,CAAC;AACH,CAAC;;;;;;;AAOD,MAAM,4BAA4B,cAAc,6BAA6B,WAAW,eAAe;;;;;;AAMvG,MAAM,gCAAgC,WAAW,WAAW,OAAO,IAAI,aAAa;CACnF,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,gBAAgB,QAAQ,SAAS;CACzD,MAAM,EAAE,UAAU,qBAAqB,OAAO,qBAAqB,QAAQ,UAAU,WAAW,UAAU,MAAM;CAChH,OAAO,uBAAuB,QAAQ,SAAS,EAAE;CACjD,OAAO;EACN,WAAW,UAAU;EACrB,YAAY,SAAS;EACrB;CACD;AACD,CAAC;AAGD,MAAM,kBAAkB,QAAQ,eAAe,eAAe,OAAO,OAAO,8BAA8B,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;;;;;;AAmB/I,MAAM,2BAA2B,WAAW,WAAW,OAAO,IAAI,aAAa;CAC9E,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,gBAAgB,QAAQ,SAAS;CACzD,MAAM,aAAa,OAAO,4BAA4B,QAAQ,UAAU,WAAW,QAAQ;CAC3F,KAAK,MAAM,aAAa,YAAY;EACnC,MAAM,UAAU,OAAO,OAAO,OAAO,iBAAiB,QAAQ,UAAU,EAAE,CAAC;EAC3E,IAAI,QAAQ,SAAS,YAAY;GAChC,QAAQ,KAAK,+BAA+B,UAAU,GAAG,aAAa,SAAS,uBAAuB,oBAAoB,qCAAqC,QAAQ,OAAO,KAAK,IAAI,EAAE,GAAG;GAC5L;EACD;EACA,OAAO,eAAe,QAAQ,UAAU,EAAE;EAC1C,QAAQ,MAAM,wCAAwC,UAAU,GAAG,eAAe,UAAU;CAC7F;AACD,CAAC;;AAID,MAAM,sCAAsC,IAAI,IAAI;CACnD;CACA;CACA;AACD,CAAC;;AAED,MAAM,kCAAkC,CAAC,qBAAqB,oBAAoB;;;;;;;;AAQlF,MAAM,2BAA2B,UAAU;CAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAK;CACnF,IAAI,SAAS,KAAK,KAAK,oBAAoB,IAAI,IAAI,GAAG,OAAO;CAC7D,MAAM,UAAU,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,QAAQ,YAAY,IAAI;CACxG,IAAI,gCAAgC,MAAM,aAAa,QAAQ,SAAS,QAAQ,CAAC,GAAG,OAAO;CAC3F,MAAM,QAAQ,WAAW,QAAQ,MAAM,QAAQ,KAAK;CACpD,OAAO,UAAU,KAAK,KAAK,UAAU,SAAS,wBAAwB,KAAK;AAC5E;;AAEA,MAAM,sBAAsB,SAAS,KAAK,SAAS,OAAO,WAAW,GAAG,SAAS,OAAO,WAAW,CAAC;;;;;;AAMpG,MAAM,kBAAkB,WAAW,WAAW,wBAAwB,OAAO,MAAM,WAAW;CAC7F,OAAO;CACP;AACD,CAAC;;AAID,IAAI,2BAA2B,cAAc,KAAK,YAAY,0BAA0B,CAAC,CAAC;CACzF,IAAI,UAAU;EACb,OAAO,2CAA2C,KAAK,MAAM,GAAG,KAAK;CACtE;AACD;AACA,MAAM,WAAW,OAAO,UAAU,mBAAmB,MAAM,GAAG;;;;;;;;;;AAU9D,MAAM,oBAAoB,KAAK,OAAO,UAAU,OAAO,IAAI,aAAa;CACvE,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,WAAW,OAAO,OAAO,WAAW;EACzC,WAAW,IAAI,QAAQ;EACvB,OAAO;CACR,CAAC;CACD,MAAM,WAAW,OAAO,OAAO,WAAW;EACzC,KAAK,YAAY;GAChB,QAAQ,MAAM,QAAQ;;oDAE2B,IAAI;;UAE/C,CAAE;EACT;EACA,OAAO;CACR,CAAC;CACD,IAAI,UAAU,aAAa,MAAM;EAChC,SAAS,QAAQ;EACjB,OAAO,OAAO,OAAO,KAAK,IAAI,yBAAyB;GACtD;GACA;EACD,CAAC,CAAC;CACH;CACA,MAAM,UAAU,SAAS;CACzB,MAAM,YAAY,eAAe,OAAO,WAAW;EAClD,KAAK,YAAY;GAChB,QAAQ,MAAM,GAAG;;;;4BAIQ,QAAQ;;;;uCAIG,IAAI;;YAEhC,CAAE,EAAE,EAAE,QAAQ;EACvB;EACA,OAAO;CACR,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,SAAS,OAAO,OAAO,OAAO,OAAO,KAAK,IAAI,gBAAgB,EAAE,SAAS,sBAAsB,MAAM,GAAG,MAAM,kDAAkD,CAAC,CAAC,CAAC,CAAC,CAAC;CAC7L,MAAM,UAAU,YAAY;EAC3B,IAAI;GACH,MAAM,QAAQ,8CAA8C,IAAI;EACjE,QAAQ,CAAC,UAAU;GAClB,SAAS,QAAQ;EAClB;CACD;CACA,OAAO;EACN;EACA;CACD;AACD,CAAC;AAGD,MAAM,WAAW,MAAM,eAAe,OAAO,WAAW;CACvD,KAAK;CACL,OAAO;AACR,CAAC,CAAC;;;;;;;;;;AAUF,MAAM,aAAa,KAAK,UAAU,IAAI,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC;;;;;;;AAOxE,MAAM,wBAAwB,UAAU,UAAU,qBAAqB,KAAK,CAAC;;AAE7E,MAAM,+BAA+B,UAAU,UAAU,qBAAqB,KAAK,CAAC;;;;;;;AAOpF,MAAM,0BAA0B,SAAS;CACxC,IAAI;CACJ,kBAAkB,OAAO,QAAQ,mBAAmB;CACpD,kBAAkB,cAAc,GAAG;;;;;OAK7B,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;CAC/D,aAAa,UAAU,cAAc,GAAG;iEACwB,MAAM;;+DAER,MAAM;;OAE9D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;CAC/D,MAAM,YAAY,cAAc,GAAG;;wBAEZ,QAAQ,MAAM,eAAe,QAAQ,MAAM,aAAa,QAAQ,IAAI;OACrF,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS;EACjC,MAAM,MAAM,KAAK;EACjB,OAAO,QAAQ,KAAK,IAAI,KAAK,IAAI,qBAAqB,IAAI,KAAK;CAChE,CAAC,CAAC;CACF,uBAAuB,YAAY,cAAc,GAAG;;wBAE7B,QAAQ,MAAM,eAAe,QAAQ,MAAM;;OAE5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,4BAA4B,IAAI,KAAK,CAAC,CAAC,CAAC;CAC5F,MAAM,YAAY,cAAc,GAAG;;;YAGxB,QAAQ,MAAM,IAAI,QAAQ,MAAM,IAAI,QAAQ,IAAI;YAChD,UAAU,KAAK,QAAQ,KAAK,EAAE;;;;OAInC,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,KAAK,CAAC;CAC5C,SAAS,YAAY,cAAc,GAAG;;wBAEf,QAAQ,MAAM,eAAe,QAAQ,MAAM,aAAa,QAAQ,IAAI;OACrF,CAAC,CAAC,KAAK,OAAO,MAAM;CAC1B,cAAc,YAAY,QAAQ,YAAY;EAC7C,IAAI,QAAQ,UAAU,KAAK,GAAG;GAC7B,MAAM,GAAG,oDAAoD,QAAQ;GACrE,MAAM,GAAG,kDAAkD,QAAQ;EACpE,OAAO;GACN,MAAM,GAAG;;0BAEc,QAAQ,MAAM,eAAe,QAAQ,MAAM;;GAElE,MAAM,GAAG;;0BAEc,QAAQ,MAAM,eAAe,QAAQ,MAAM;;EAEnE;CACD,CAAC;CACD,OAAO,YAAY,cAAc,GAAG;;wBAEb,QAAQ,MAAM,eAAe,QAAQ,MAAM;;OAE5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC;CAC7D,YAAY,YAAY,cAAc,GAAG;;wBAElB,QAAQ,MAAM,eAAe,QAAQ,MAAM;OAC5D,CAAC,CAAC,KAAK,OAAO,KAAK,SAAS;EACjC,MAAM,MAAM,KAAK;EACjB,OAAO,QAAQ,KAAK,IAAI,KAAK,IAAI,qBAAqB,IAAI,KAAK;CAChE,CAAC,CAAC;CACF,YAAY,YAAY,cAAc,GAAG;;kBAExB,QAAQ,MAAM,IAAI,QAAQ,MAAM,IAAI,UAAU,KAAK,QAAQ,KAAK,EAAE;;;OAG7E,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,KAAK,CAAC;AAC7C;;;;;;;;;;AAUA,MAAM,qBAAqB;;;;;;;;;AAS3B,MAAM,iBAAiB,WAAW,OAAO,QAAQ;CAChD,IAAI;CACJ,OAAO,OAAO,cAAc;EAC3B,IAAI,aAAa,KAAK,KAAK,IAAI,IAAI,WAAW,OAAO,OAAO,OAAO;EACnE,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO,WAAW;GACxD,WAAW,IAAI;EAChB,CAAC,CAAC,CAAC;CACJ,CAAC;AACF;;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAM,qBAAqB,SAAS,WAAW,MAAM,KAAK,QAAQ;CACjE,MAAM,QAAQ,cAAc,WAAW,oBAAoB,GAAG;CAC9D,OAAO;EACN,IAAI,QAAQ;EACZ,kBAAkB,QAAQ,WAAW;EACrC,kBAAkB,MAAM,KAAK,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC;EACjE,aAAa,UAAU,MAAM,KAAK,OAAO,QAAQ,QAAQ,WAAW,KAAK,CAAC,CAAC;EAC3E,MAAM,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;EACjE,uBAAuB,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,qBAAqB,OAAO,CAAC,CAAC;EACnG,MAAM,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;EACjE,SAAS,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,CAAC,CAAC;EACvE,cAAc,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,YAAY,OAAO,CAAC,CAAC;EACjF,OAAO,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,KAAK,OAAO,CAAC,CAAC;EACnE,YAAY,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,UAAU,OAAO,CAAC,CAAC;EAC7E,YAAY,YAAY,MAAM,KAAK,OAAO,QAAQ,QAAQ,UAAU,OAAO,CAAC,CAAC;CAC9E;AACD;;;;;;;;;;;;;;;;;;;AAqBA,MAAM,oBAAoB,QAAQ;CACjC,MAAM,EAAE,WAAW,aAAa;CAChC,OAAO,MAAM,OAAO,OAAO,OAAO,IAAI,aAAa;EAClD,MAAM,QAAQ,OAAO;EACrB,MAAM,YAAY,aAAa,KAAK,IAAI,YAAY,GAAG,UAAU,GAAG;EACpE,MAAM,kBAAkB,UAAU,UAAU,0BAA0B,WAAW,MAAM,KAAK;EAC5F,MAAM,EAAE,qBAAqB,OAAO,yBAAyB,aAAa,KAAK,IAAI,EAAE,UAAU,IAAI;GAClG;GACA;EACD,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,SAAS,eAAe,kDAAkD,CAAC,CAAC;EACnJ,MAAM,MAAM,SAAS,SAAS,MAAM,gBAAgB,GAAG;GACtD,KAAK;GACL,gBAAgB,CAAC;EAClB,CAAC;EACD,OAAO,OAAO,mBAAmB,OAAO,cAAc,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;EAC9E,OAAO,mBAAmB,GAAG,CAAC,CAAC,KAAK,OAAO,MAAM,SAAS,KAAK,SAAS,OAAO,WAAW,GAAG,SAAS,OAAO,WAAW,CAAC,CAAC,GAAG,OAAO,SAAS,eAAe,kBAAkB,CAAC,CAAC;EAChL,MAAM,OAAO,OAAO,iBAAiB,KAAK,MAAM,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,OAAO,SAAS,eAAe,kBAAkB,CAAC,CAAC;EAC3H,OAAO,OAAO,mBAAmB,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;EACrE,MAAM,UAAU,kBAAkB,uBAAuB,GAAG,GAAG,KAAK,SAAS;EAC7E,OAAO,OAAO,QAAQ,OAAO;CAC9B,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,KAAK;AACrB;;;AC1qBA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,SAAS,aAAa,OAAO,QAAQ;CACpC,IAAI,MAAM,SAAS,mBAAmB,MAAM,SAAS,iBAAiB,MAAM,IAAI,MAAM,iBAAiB,OAAO,IAAI,MAAM,KAAK,MAAM,OAAO,qEAAqE,gBAAgB,GAAG,gBAAgB,oEAAoE;AACvT;AACA,SAAS,mBAAmB,OAAO;CAClC,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,eAAe,SAAS,OAAO,MAAM,cAAc,YAAY,cAAc,UAAU,MAAM,aAAa,KAAK,KAAK,OAAO,MAAM,aAAa;AACrM;;AAEA,SAAS,mBAAmB,aAAa;CACxC,IAAI,CAAC,mBAAmB,WAAW,GAAG,MAAM,IAAI,MAAM,iJAAiJ;CACvM,OAAO;AACR;AACA,SAAS,YAAY,aAAa;CACjC,OAAO,mBAAmB,WAAW,CAAC,CAAC;AACxC;;;;;;;;AAUA,SAAS,iBAAiB,IAAI;CAC7B,MAAM,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;EACjE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,MAAM,OAAOA,OAAc,GAAG,GAAG,UAAU;GAChD,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,MAAM,OAAOC,UAAiB,GAAG,GAAG,OAAO;GAChD,UAAU,IAAI;GACd,MAAM;GACN,MAAM;EACP,CAAC;EACD,MAAM,kBAAkB,OAAO,IAAI,IAAI,kBAAkB,MAAM,SAAS,MAAM,CAAC,CAAC;EAChF,OAAO;GACN,SAAS;IACR,KAAK,IAAI;IACT,QAAQ,IAAI;IACZ,aAAa,IAAI;IACjB;GACD;GACA,UAAU,CAAC;IACV,MAAM;IACN,IAAI,IAAI;GACT,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;AAUA,SAAS,kBAAkB,GAAG;CAC7B,OAAO;EACN,MAAM;EACN,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;GAC3D,aAAa,IAAI,kCAAkC;GACnD,MAAM,YAAY,YAAY,WAAW;GACzC,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;GACjD,MAAM,MAAM,OAAOC,eAAsB,GAAG,GAAG,OAAO;IACrD;IACA,MAAM;IACN,QAAQ,EAAE,CAAC,CAAC,UAAU;IACtB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;GAC1C,CAAC;GACD,OAAO;IACN,WAAW,IAAI;IACf;IACA,gBAAgB,IAAI;GACrB;EACD,CAAC;EACD,YAAY,KAAK,aAAa,WAAW,OAAO,IAAI,aAAa;GAChE,MAAM,EAAE,SAAS,MAAM,UAAU;GACjC,MAAM,WAAW,mBAAmB,IAAI,WAAW,CAAC,CAAC;GACrD,MAAM,MAAM,WAAW,YAAY;GACnC,MAAM,SAAS,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;GACrD,MAAM,YAAY,YAAY;GAC9B,MAAM,MAAM;GACZ,MAAM,UAAU,CAAC;GACjB,KAAK,MAAM,KAAK,aAAa,GAAG,GAAG;IAClC,MAAM,QAAQ,EAAE,UAAU,YAAY,OAAO,QAAQ,EAAE,QAAQ,OAAO,OAAO,EAAE,MAAM,MAAM,GAAG,EAAE;IAChG,IAAI,UAAU,KAAK,GAAG;IACtB,MAAM,MAAM,UAAU,SAAS,CAAC;IAChC,MAAM,WAAW,EAAE,UAAU,aAAa,cAAc,KAAK,IAAI,mBAAmB,UAAU,gBAAgB,MAAM,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,OAAO,EAAE,OAAO,KAAK;IACtK,QAAQ,KAAK,OAAOC,oBAA2B,GAAG,IAAI,OAAO;KAC5D;KACA;KACA,OAAO;KACP,OAAO;KACP,GAAG;IACJ,CAAC,CAAC;GACH;GACA,KAAK,MAAM,EAAE,KAAK,UAAU,kBAAkB,KAAK,SAAS,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAOA,oBAA2B,GAAG,IAAI,OAAO;IACxI;IACA;IACA,OAAO;IACP,OAAO;IACP,GAAG;GACJ,CAAC,CAAC;GACF,MAAM,UAAU,IAAI,WAAW,KAAK,KAAK,OAAO,KAAK,IAAI,MAAM,CAAC,CAAC,SAAS;GAC1E,MAAM,8BAA8B,IAAI,IAAI;GAC5C,IAAI,SAAS,KAAK,MAAM,QAAQ,iBAAiB,KAAK,GAAG;IACxD,IAAI,KAAK,oBAAoB,SAAS;IACtC,MAAM,MAAM,IAAI,YAAY,IAAI,KAAK,MAAM;IAC3C,IAAI,QAAQ,KAAK,GAAG;IACpB,MAAM,OAAO,YAAY,IAAI,KAAK,KAAK,KAAK,CAAC;IAC7C,KAAK,KAAK,GAAG;IACb,YAAY,IAAI,KAAK,OAAO,IAAI;GACjC;GACA,KAAK,MAAM,CAAC,OAAO,UAAU,EAAE,CAAC,CAAC,gBAAgB;IAChD,MAAM,MAAM,qBAAqB,QAAQ,MAAM,gBAAgB,aAAa,OAAO,IAAI,UAAU,MAAM,MAAM,YAAY,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK;IAClJ,IAAI,QAAQ,KAAK,GAAG;IACpB,MAAM,MAAM,UAAU,SAAS;KAC9B,OAAO;KACP,MAAM,MAAM;IACb,CAAC;IACD,MAAM,QAAQ,OAAO,SAAS,GAAG,IAAI,OAAO,IAAI,MAAM,MAAM,OAAO,WAAW,CAAC,CAAC,IAAI,OAAO,WAAW,GAAG;IACzG,QAAQ,KAAK,OAAOA,oBAA2B,GAAG,IAAI,OAAO;KAC5D;KACA;KACA;KACA,OAAO;KACP,GAAG;IACJ,CAAC,CAAC;GACH;GACA,OAAO;IACN,aAAa;IACb,MAAM,OAAO,OAAO,QAAQ,YAAY,WAAW,OAAO,QAAQ,UAAU;GAC7E;EACD,CAAC;EACD,UAAU,EAAE,MAAM,EAAE,WAAW,cAAc,OAAO,UAAUC,uBAA8B;GAC3F;GACA,WAAW,UAAU;GACrB,UAAU,UAAU;GACpB;EACD,CAAC,CAAC;EACF,SAAS,EAAE,MAAM,aAAa,UAAU,eAAe,OAAO,IAAI,aAAa;GAC9E,MAAM,aAAa,OAAOC,WAAkB,GAAG,GAAG,UAAU;IAC3D,kBAAkB,YAAY;IAC9B,cAAc,SAAS;IACvB,cAAc,SAAS;IACvB,aAAa,WAAW;IACxB,MAAM,WAAW;GAClB,CAAC;GACD,OAAO;IACN,SAAS;KACR,KAAK,WAAW;KAChB,WAAW,YAAY;IACxB;IACA,UAAU,CAAC;KACV,MAAM;KACN,IAAI,YAAY;KAChB,KAAK,WAAW;IACjB,CAAC;GACF;EACD,CAAC;CACF;AACD;;;;;;AAQA,SAAS,mBAAmB,GAAG;CAC9B,MAAM,YAAY,EAAE,IAAI,kBAAkB,OAAO,IAAI,aAAa;EACjE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,KAAK,OAAOC,SAAgB,GAAG,GAAG,MAAM;GAC7C,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,QAAQ,EAAE,CAAC,CAAC,UAAU;GACtB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,OAAO,OAAOC,WAAkB,GAAG,GAAG,QAAQ;GACnD,YAAY,GAAG;GACf,MAAM;EACP,CAAC;EACD,MAAM,MAAM,OAAO,IAAI,KAAK,mBAAmB,UAAU,SAAS,MAAM,KAAK,CAAC;EAC9E,OAAO;GACN,SAAS,EAAE,MAAM,OAAO,OAAO,GAAG,GAAG,QAAQ,EAAE,IAAI,CAAC,EAAA,CAAG,IAAI;GAC3D,UAAU,CAAC;IACV,MAAM;IACN,IAAI,GAAG;GACR,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;;;;;;;;AAiBA,eAAe,qBAAqB,YAAY;CAC/C,OAAO,QAAQ,YAAY,OAAO,MAAM,WAAW,UAAU,EAAA,CAAG,YAAY,OAAO,YAAY;AAChG;;;;;;AAQA,SAAS,qBAAqB,GAAG;CAChC,MAAM,YAAY,EAAE,IAAI,MAAM,kBAAkB,OAAO,IAAI,aAAa;EACvE,aAAa,IAAI,mCAAmC;EACpD,MAAM,WAAW,mBAAmB,WAAW,CAAC,CAAC;EACjD,MAAM,KAAK,OAAOD,SAAgB,GAAG,GAAG,MAAM;GAC7C,WAAW,YAAY,WAAW;GAClC,MAAM;GACN,QAAQ,EAAE,CAAC,CAAC,UAAU;GACtB,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,CAAC;EACD,MAAM,OAAO,OAAOC,WAAkB,GAAG,GAAG,QAAQ;GACnD,YAAY,GAAG;GACf,MAAM;EACP,CAAC;EACD,MAAM,MAAM,OAAO,IAAI,KAAK,mBAAmB,UAAU,SAAS,MAAM,KAAK,CAAC;EAC9E,IAAI,CAAC,yBAAyB,IAAI,GAAG,MAAM,IAAI,MAAM,yDAAyD,GAAG,GAAG;EACpH,MAAM,eAAe,KAAK,SAAS,MAAM;EACzC,MAAM,gBAAgB,OAAO,OAAO,cAAc,qBAAqB,KAAK,MAAM,CAAC;EACnF,MAAM,MAAM,OAAO,OAAO,cAAc,iBAAiB,eAAe,cAAc,KAAK,SAAS,CAAC;EACrG,MAAM,OAAO,OAAO,OAAO,GAAG,GAAG,QAAQ,EAAE,IAAI,CAAC;EAChD,OAAO,YAAY,GAAG,GAAG,WAAW;GACnC,KAAK,KAAK;GACV;GACA;GACA,YAAY,IAAI;GAChB,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK;GACrC,GAAG,KAAK,cAAc,KAAK,IAAI,EAAE,SAAS,KAAK,UAAU,IAAI,CAAC;EAC/D,CAAC;EACD,OAAO;GACN,SAAS,EAAE,KAAK,KAAK,IAAI;GACzB,UAAU,CAAC;IACV,MAAM;IACN,IAAI,GAAG;GACR,CAAC;EACF;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;;;;;;;;AAUA,SAAS,wBAAwB,IAAI;CACpC,MAAM,YAAY,EAAE,SAAS,OAAO,IAAI,aAAa;EACpD,MAAM,QAAQ,OAAO,cAAc,GAAG,GAAG,SAAS,CAAC,CAAC;EACpD,OAAO;GACN,SAAS;IACR,aAAa,MAAM;IACnB,iBAAiB,MAAM;GACxB;GACA,UAAU,CAAC;EACZ;CACD,CAAC;CACD,OAAO,OAAO,OAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AACpD;AAGA,SAAS,kBAAkB,GAAG;CAC7B,MAAM,OAAO,kBAAkB,CAAC;CAChC,OAAO;EACN,MAAM;EACN,WAAW,KAAK;EAChB,SAAS,KAAK;EACd,YAAY,KAAK,aAAa,WAAW,OAAO,IAAI,aAAa;GAChE,MAAM,aAAa,OAAO,KAAK,UAAU,KAAK,aAAa,MAAM;GACjE,MAAM,cAAc,OAAO,OAAO,kBAAkB,CAAC;GACrD,MAAM,SAAS,OAAO,QAAQ;GAC9B,IAAI,YAAY,mBAAmB,KAAK,KAAK,YAAY,uBAAuB,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM,IAAI,MAAM,4EAA4E;GACzM,OAAO;IACN,GAAG;IACH;IACA,aAAa,YAAY;IACzB,iBAAiB,YAAY;GAC9B;EACD,CAAC;EACD,SAAS,KAAK,aAAa,UAAU,eAAe,OAAO,IAAI,aAAa;GAC3E,MAAM,WAAW,OAAO,KAAK,OAAO,KAAK,aAAa,UAAU,UAAU;GAC1E,OAAO;IACN,GAAG;IACH,SAAS;KACR,GAAG,SAAS;KACZ,QAAQ,WAAW;KACnB,aAAa,WAAW;KACxB,iBAAiB,WAAW;IAC7B;GACD;EACD,CAAC;CACF;AACD;;AAIA,MAAM,YAAY,aAAa,aAAa,KAAK,IAAI,eAAe;;;;;;;AAOpE,eAAe,YAAY,QAAQ,OAAO;CACzC,OAAO,UAAU,MAAM,OAAO,IAAI,6BAA6B,EAAE,QAAQ,EAAE,OAAO,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;AACxG;AACA,eAAe,iBAAiB,QAAQ,WAAW,UAAU,KAAK;CACjE,MAAM,MAAM,SAAS,QAAQ;CAC7B,MAAM,WAAW,QAAQ,aAAa,KAAK,KAAK,IAAI,aAAa,QAAQ,IAAI,aAAa;CAC1F,IAAI,SAAS;CACb,GAAG;EACF,MAAM,MAAM,MAAM,YAAY,QAAQ,WAAW,OAAO;GACvD;GACA,OAAO;GACP;EACD,IAAI;GACH;GACA,OAAO;GACP;GACA;EACD,CAAC;EACD,IAAI,IAAI,UAAU,KAAK,GAAG,MAAM,gBAAgB,KAAK,IAAI,KAAK;EAC9D,MAAM,OAAO,IAAI;EACjB,IAAI,SAAS,KAAK,GAAG,OAAO;EAC5B,IAAI,KAAK,KAAK,KAAK,OAAO,GAAG,OAAO;EACpC,SAAS,KAAK,WAAW,UAAU,KAAK,WAAW,aAAa;CACjE,SAAS,WAAW;CACpB,OAAO;AACR;;;;;;;;AAQA,eAAe,YAAY,QAAQ,WAAW,UAAU,KAAK,OAAO;CACnE,MAAM,MAAM,MAAM,OAAO,KAAK,6BAA6B,EAAE,MAAM;EAClE;EACA,OAAO,SAAS,QAAQ;EACxB;EACA;EACA,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;CAC1C,EAAE,CAAC;CACH,IAAI,IAAI,UAAU,KAAK,KAAK,IAAI,SAAS,WAAW,KAAK,MAAM,gBAAgB,KAAK,IAAI,KAAK;AAC9F;AACA,MAAM,6CAA6C,IAAI,MAAM,6EAA6E;AAC1I,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,MAAM,0DAA0D,IAAI,KAAK,KAAK,UAAU,KAAK,EAAE,EAAE;AAC7J,MAAM,mBAAmB,KAAK,0BAA0B,IAAI,MAAM,0CAA0C,IAAI,2BAA2B,KAAK,UAAU,KAAK,EAAE,EAAE;AACnK,SAAS,aAAa,SAAS,UAAU,OAAO;CAC/C,MAAM,QAAQ,aAAa,KAAK,IAAI,kDAAkD,+BAA+B,SAAS,SAAS;CACvI,MAAM,QAAQ,QAAQ,KAAK,MAAM,OAAO,EAAE,KAAK,0BAA0B,EAAE,eAAe,GAAG;CAC7F,uBAAuB,IAAI,MAAM,6BAA6B,QAAQ,OAAO,oFAAoF,MAAM,2CAA2C,MAAM,KAAK,IAAI,EAAE,6JAA6J,MAAM,EAAE;AACzY;AACA,eAAe,qBAAqB;CACnC,KAAK,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG,MAAM,qBAAqB;CACzF,OAAO,OAAO,WAAW,OAAO,IAAI,aAAa;EAChD,OAAO,OAAO;CACf,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQC,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF;;;;;;;;;AASA,eAAe,aAAa,OAAO,MAAM;CACxC,MAAM,EAAE,WAAW,aAAa,uBAAuB,MAAM,SAAS;CACtE,MAAM,YAAY,sBAAsB,MAAM,KAAK;CACnD,MAAM,wBAAwB,IAAI,IAAI;CACtC,KAAK,MAAM,QAAQ,CAAC,GAAG,UAAU,SAAS,GAAG,UAAU,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,IAAI;CACvH,IAAI,MAAM,SAAS,GAAG;CACtB,MAAM,SAAS,MAAM,UAAU,MAAM,mBAAmB;CACxD,MAAM,UAAU,CAAC;CACjB,KAAK,MAAM,QAAQ,MAAM,OAAO,GAAG;EAClC,IAAI,MAAM,iBAAiB,QAAQ,WAAW,UAAU,KAAK,IAAI,GAAG;EACpE,MAAM,aAAa,QAAQ,IAAI,KAAK;EACpC,IAAI,eAAe,KAAK,KAAK,WAAW,SAAS,GAAG;GACnD,MAAM,YAAY,QAAQ,WAAW,UAAU,KAAK,MAAM,UAAU;GACpE;EACD;EACA,QAAQ,KAAK,IAAI;CAClB;CACA,IAAI,QAAQ,SAAS,GAAG,MAAM,aAAa,SAAS,UAAU,MAAM,KAAK;AAC1E;AAGA,MAAM,2CAA2C,IAAI,MAAM,6EAA6E;AACxI,eAAe,mBAAmB;CACjC,KAAK,QAAQ,IAAI,2BAA2B,GAAA,CAAI,WAAW,GAAG,MAAM,mBAAmB;CACvF,OAAO,OAAO,WAAW,OAAO,IAAI,aAAa;EAChD,OAAO,OAAO;CACf,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQA,MAAsB,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF;;;;;;;;;;;;;;;;AAgBA,eAAe,YAAY,OAAO,MAAM;CACvC,MAAM,EAAE,WAAW,aAAa,uBAAuB,MAAM,SAAS;CACtE,MAAM,eAAe,aAAa,KAAK;CACvC,IAAI;EACH,MAAM,SAAS,MAAM,UAAU,MAAM,iBAAiB;EACtD,MAAM,OAAO,WAAW,wBAAwB;GAC/C;GACA,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;EAC1C,GAAG,MAAM,UAAU,eAAe,CAAC,CAAC,KAAK,OAAO,eAAe,kBAAkB,MAAM,CAAC,CAAC;CAC1F,SAAS,OAAO;EACf,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACpE,IAAI,cAAc,MAAM,IAAI,MAAM,+CAA+C,QAAQ;EACzF,QAAQ,KAAK,wDAAwD,QAAQ;CAC9E;AACD;;;;;;;;;;;AAaA,MAAM,wBAAwB,EAAE,YAAY,SAAS,OAAO,IAAI,aAAa;CAC5E,QAAQ,OAAOC,WAAkB,cAAc,KAAK,UAAU,CAAC,CAAC,EAAA,CAAG;AACpE,CAAC,EAAE;;;;;;;AAOH,MAAM,gBAAgB,SAAS,KAAK,KAAK,QAAQ,UAAU,GAAG,CAAC;;;;;;;;;;;;AAY/D,MAAM,wBAAwB,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;AAW9F,MAAM,2BAA2B,EAAE,YAAY,SAAS,OAAO,IAAI,aAAa;CAC/E,QAAQ,OAAOA,WAAkB,cAAc,KAAK,mBAAmB,CAAC,CAAC,EAAA,CAAG;AAC7E,CAAC,EAAE;;;;;;;;;;;;;;;;;;AAkBH,MAAM,sBAAsB,SAAS;CACpC,IAAI,KAAK,WAAW,GAAG,OAAO,KAAK;CACnC,OAAO,OAAO,IAAI,OAAO,IAAI,GAAG,aAAa,IAAI,CAAC,IAAI,SAAS;EAC9D,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;EAClC,IAAI,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,4BAA4B,KAAK,OAAO,2OAA2O;EAClX,OAAO,SAAS,MAAM;CACvB,CAAC;AACF;;;;;;;;;;;AAWA,MAAM,mBAAmB,aAAa,YAAY,OAAO,IAAI,YAAY,iBAAiB,MAAM;CAC/F,IAAI,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,uBAAuB,QAAQ,+HAA+H;CAChM,OAAO;AACR,CAAC;;AAED,MAAM,qBAAqB;CAC1B,WAAW;CACX,SAAS,cAAc;EACtB,MAAM,EAAE,WAAW,aAAa,uBAAuB,SAAS;EAChE,OAAO,iBAAiB,aAAa,KAAK,IAAI;GAC7C;GACA;EACD,IAAI,EAAE,UAAU,CAAC;CAClB;AACD;AACA,MAAM,mBAAmB,IAAI,IAAIC,eAAsB;AACvD,SAAS,gBAAgB,OAAO;CAC/B,OAAO,iBAAiB,IAAI,KAAK;AAClC;;AAEA,SAAS,iBAAiB,OAAO;CAChC,OAAO;AACR;;;;;;;;;;;;;;;;AAgBA,MAAM,+BAA+B,IAAI,IAAI,CAAC,CAAC,cAAc,qBAAqB,GAAG,CAAC,iBAAiB,wBAAwB,CAAC,CAAC;;;;;;;;;;AAUjI,MAAM,wCAAwC,IAAI,IAAI;CACrD,CAAC,cAAc,EAAE,OAAO,qBAAqB,CAAC;CAC9C,CAAC,iBAAiB,EAAE,OAAO,mBAAmB,CAAC;CAC/C,CAAC,aAAa,EAAE,iBAAiB,gBAAgB,CAAC;AACnD,CAAC;;;;;;;;;;AAUD,SAAS,oBAAoB,SAAS,QAAQ;CAC7C,OAAO,IAAI,IAAI,QAAQ,KAAK,UAAU;EACrC,MAAM,QAAQ,OAAO,IAAI,MAAM,KAAK;EACpC,IAAI,UAAU,KAAK,GAAG,MAAM,IAAI,MAAM,0CAA0C,MAAM,KAAK,4JAA4J;EACvP,OAAO,CAAC,MAAM,OAAO;GACpB,GAAG;GACH,GAAG;EACJ,CAAC;CACF,CAAC,CAAC;AACH;AACA,MAAM,kBAAkB,oBAAoB,0BAA0B,qBAAqB;;;;;;;;;;;;AAY3F,SAAS,eAAe,MAAM;CAC7B,MAAM,cAAc,KAAK,eAAe,QAAQ,IAAI,0BAA0B;CAC9E,IAAI,KAAK,WAAW,KAAK,GAAG,OAAO;EAClC;EACA,QAAQ,KAAK;EACb,gBAAgB;CACjB;CACA,MAAM,SAAS,QAAQ,IAAI;CAC3B,IAAI,WAAW,KAAK,KAAK,OAAO,WAAW,GAAG,OAAO;EACpD;EACA,gBAAgB;CACjB;CACA,IAAI,CAAC,gBAAgB,MAAM,GAAG,MAAM,IAAI,MAAM,sDAAsD,OAAO,4CAAA,gBAAmE,KAAK,IAAI,EAAE,GAAG;CAC5L,OAAO;EACN;EACA;EACA,gBAAgB;CACjB;AACD;;;;;;;;;AASA,SAAS,YAAY,MAAM;CAC1B,IAAI;CACJ,aAAa;EACZ,WAAW,eAAe,IAAI;EAC9B,OAAO;CACR;AACD;;AAEA,MAAM,eAAe,OAAO,CAAC,MAAM;CAClC,MAAM,IAAI,YAAY,IAAI;CAC1B,OAAO;EACN,IAAI;EACJ,WAAW,oBAAoB;EAC/B,iBAAiB,iBAAiB,MAAM,SAASC,UAAiB,GAAG,eAAe,GAAG,oBAAoB,GAAG,sBAAsB,GAAGC,mBAA0B,CAAC,CAAC;EACnK,YAAY,UAAU,aAAa,KAAK;EACxC,WAAW,UAAU,YAAY,KAAK;EACtC,aAAa,EAAE,YAAY,QAAQ,OAAO,IAAI,aAAa;GAC1D,MAAM,EAAE,WAAW,aAAa,uBAAuB,IAAI,SAAS;GACpE,KAAK,MAAM,OAAO,CAAC,gBAAgB,qBAAqB,GAAG,OAAOT,oBAA2B,GAAG,IAAI,UAAU;IAC7G;IACA;IACA,OAAO;IACP,OAAO,WAAW,YAAY;IAC9B,GAAG,aAAa,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC;GAC1C,CAAC;GACD,OAAO;IACN;IACA;GACD;EACD,CAAC,EAAE;EACH,YAAY;EACZ,OAAO;GACN,UAAU,mBAAmB,CAAC;GAC9B,eAAe,qBAAqB,CAAC;GACrC,SAAS,kBAAkB,CAAC;GAC5B,aAAa,wBAAwB,CAAC;GACtC,YAAY,kBAAkB,CAAC;GAC/B,IAAI,iBAAiB,CAAC;EACvB;EACA,mBAAmB,OAAO,6CAA6C,CAAC,MAAM,MAAM,EAAE,sBAAsB,CAAC;CAC9G;AACD"}