@signstack/cli 0.1.1

package/dist/apps/signstack-cli/src/lib/scenario-file.js

@@ -0,0 +1,80 @@
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+const SCENARIOS_DIR = 'scenarios';
+/**
+ * Load a specific scenario by key from the contract's scenarios/ folder.
+ * Returns null if the file doesn't exist.
+ */
+export function loadScenario(contractDir, scenarioKey) {
+    const filePath = join(contractDir, SCENARIOS_DIR, `${scenarioKey}.json`);
+    if (!existsSync(filePath))
+        return null;
+    const raw = readFileSync(filePath, 'utf-8');
+    return JSON.parse(raw);
+}
+/**
+ * Load the default scenario (first alphabetically) from the contract's scenarios/ folder.
+ * Returns null if no scenarios/ folder or no .json files exist.
+ */
+export function loadDefaultScenario(contractDir) {
+    const dir = join(contractDir, SCENARIOS_DIR);
+    if (!existsSync(dir))
+        return null;
+    const files = readdirSync(dir)
+        .filter((f) => f.endsWith('.json'))
+        .sort();
+    if (files.length === 0)
+        return null;
+    const key = files[0].replace(/\.json$/, '');
+    const raw = readFileSync(join(dir, files[0]), 'utf-8');
+    return { key, entities: JSON.parse(raw) };
+}
+/**
+ * Save multiple scenarios to the contract's scenarios/ folder.
+ * Each scenario is written as <snake_case_name>.json.
+ */
+export function saveScenarios(contractDir, scenarios) {
+    if (scenarios.length === 0)
+        return;
+    const dir = join(contractDir, SCENARIOS_DIR);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    for (const scenario of scenarios) {
+        const fileName = toSnakeCase(scenario.name) + '.json';
+        const filePath = join(dir, fileName);
+        writeFileSync(filePath, JSON.stringify(scenario.entities, null, 2), 'utf-8');
+    }
+}
+/**
+ * List available scenario keys (filenames without .json) in the contract's scenarios/ folder.
+ */
+export function listScenarioKeys(contractDir) {
+    const dir = join(contractDir, SCENARIOS_DIR);
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((f) => f.endsWith('.json'))
+        .map((f) => f.replace(/\.json$/, ''))
+        .sort();
+}
+/**
+ * Check if a scenario value looks like a file path (vs a key).
+ */
+export function isScenarioFilePath(value) {
+    return value.includes('/') || value.endsWith('.json');
+}
+/**
+ * Load scenario entities from a direct file path.
+ */
+export function loadScenarioFromPath(filePath) {
+    const raw = readFileSync(filePath, 'utf-8');
+    return JSON.parse(raw);
+}
+export function toSnakeCase(str) {
+    return str
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '_')
+        .replace(/^_|_$/g, '');
+}
+//# sourceMappingURL=scenario-file.js.map

package/dist/apps/signstack-cli/src/lib/scenario-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario-file.js","sourceRoot":"","sources":["../../../../../src/lib/scenario-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,WAAmB,EACnB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE,CAAC;IAEV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,WAAmB,EACnB,SAGE;IAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;SACpC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG;SACP,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/apps/signstack-cli/src/lib/schema-validator.d.ts

@@ -0,0 +1,8 @@
+import { SchemaValidator } from '@signstack/base';
+export { SchemaValidator };
+/**
+ * Get or create a schema validator instance.
+ * Reads schema files from disk and passes them to SchemaValidator.
+ * @param schemasDir Optional custom schemas directory (creates new instance if provided)
+ */
+export declare function getSchemaValidator(schemasDir?: string): SchemaValidator;

package/dist/apps/signstack-cli/src/lib/schema-validator.js

@@ -0,0 +1,39 @@
+import { dirname, join } from 'node:path';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { SchemaValidator, SCHEMA_FILE_MAP } from '@signstack/base';
+// Re-export the class so existing CLI imports continue to work
+export { SchemaValidator };
+// ESM __dirname equivalent — used to resolve the schemas directory relative to the CLI build output
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+/**
+ * Load all JSON schema files from a directory into a Map.
+ */
+function loadSchemas(schemasDir) {
+    const schemas = new Map();
+    for (const [kind, filename] of Object.entries(SCHEMA_FILE_MAP)) {
+        const schemaPath = join(schemasDir, filename);
+        const content = readFileSync(schemaPath, 'utf-8');
+        schemas.set(kind, JSON.parse(content));
+    }
+    return schemas;
+}
+/**
+ * Singleton instance of the schema validator.
+ */
+let validatorInstance = null;
+/**
+ * Get or create a schema validator instance.
+ * Reads schema files from disk and passes them to SchemaValidator.
+ * @param schemasDir Optional custom schemas directory (creates new instance if provided)
+ */
+export function getSchemaValidator(schemasDir) {
+    if (!validatorInstance || schemasDir) {
+        const resolvedDir = schemasDir ?? join(__dirname, '..', '..', 'schemas');
+        const schemas = loadSchemas(resolvedDir);
+        validatorInstance = new SchemaValidator(schemas);
+    }
+    return validatorInstance;
+}
+//# sourceMappingURL=schema-validator.js.map

package/dist/apps/signstack-cli/src/lib/schema-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../../../../../src/lib/schema-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAc,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE/E,+DAA+D;AAC/D,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,oGAAoG;AACpG,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC;;GAEG;AACH,SAAS,WAAW,CAAC,UAAkB;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,IAAI,iBAAiB,GAA2B,IAAI,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAmB;IACpD,IAAI,CAAC,iBAAiB,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACzC,iBAAiB,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/apps/signstack-cli/src/lib/url-validator.d.ts

@@ -0,0 +1,17 @@
+export interface UrlValidationResult {
+    isValid: boolean;
+    sanitizedUrl: string;
+    error?: string;
+}
+/**
+ * Validate and sanitize an API URL
+ * - Must be a valid URL format
+ * - Must use HTTPS (except for localhost/127.0.0.1 for local development)
+ * - Returns sanitized URL with trailing slash removed
+ */
+export declare function validateApiUrl(apiUrl: string): UrlValidationResult;
+/**
+ * Validate API URL and throw an error if invalid
+ * Use this when you want to fail fast on invalid URLs
+ */
+export declare function validateApiUrlOrThrow(apiUrl: string): string;

package/dist/apps/signstack-cli/src/lib/url-validator.js

@@ -0,0 +1,61 @@
+import { isIP } from 'node:net';
+/**
+ * Validate and sanitize an API URL
+ * - Must be a valid URL format
+ * - Must use HTTPS (except for localhost/127.0.0.1 for local development)
+ * - Returns sanitized URL with trailing slash removed
+ */
+export function validateApiUrl(apiUrl) {
+    // Parse and validate URL
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(apiUrl);
+    }
+    catch {
+        return {
+            isValid: false,
+            sanitizedUrl: '',
+            error: `Invalid API URL format: ${apiUrl}`,
+        };
+    }
+    // Must be http or https
+    if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
+        return {
+            isValid: false,
+            sanitizedUrl: '',
+            error: `Invalid protocol: ${parsedUrl.protocol}. Only http and https are allowed.`,
+        };
+    }
+    // Check if localhost (allowed for HTTP in development)
+    const isLocalhost = parsedUrl.hostname === 'localhost' ||
+        parsedUrl.hostname === '127.0.0.1' ||
+        parsedUrl.hostname === '::1' ||
+        (isIP(parsedUrl.hostname) === 4 && parsedUrl.hostname.startsWith('127.'));
+    // Enforce HTTPS for non-localhost URLs
+    if (parsedUrl.protocol === 'http:' && !isLocalhost) {
+        return {
+            isValid: false,
+            sanitizedUrl: '',
+            error: 'Insecure API URL detected. HTTPS is required for non-localhost URLs to protect your credentials. ' +
+                `Use ${apiUrl.replace('http://', 'https://')} instead, or use http://localhost for local development.`,
+        };
+    }
+    // Sanitize: remove trailing slash
+    const sanitizedUrl = apiUrl.replace(/\/+$/, '');
+    return {
+        isValid: true,
+        sanitizedUrl,
+    };
+}
+/**
+ * Validate API URL and throw an error if invalid
+ * Use this when you want to fail fast on invalid URLs
+ */
+export function validateApiUrlOrThrow(apiUrl) {
+    const result = validateApiUrl(apiUrl);
+    if (!result.isValid) {
+        throw new Error(result.error);
+    }
+    return result.sanitizedUrl;
+}
+//# sourceMappingURL=url-validator.js.map

package/dist/apps/signstack-cli/src/lib/url-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-validator.js","sourceRoot":"","sources":["../../../../../src/lib/url-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAQhC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,yBAAyB;IACzB,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,2BAA2B,MAAM,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,qBAAqB,SAAS,CAAC,QAAQ,oCAAoC;SACnF,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,MAAM,WAAW,GACf,SAAS,CAAC,QAAQ,KAAK,WAAW;QAClC,SAAS,CAAC,QAAQ,KAAK,WAAW;QAClC,SAAS,CAAC,QAAQ,KAAK,KAAK;QAC5B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,uCAAuC;IACvC,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,EAAE;YAChB,KAAK,EACH,mGAAmG;gBACnG,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,0DAA0D;SACzG,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC"}

package/dist/apps/signstack-cli/src/lib/yaml-document-parser.d.ts

@@ -0,0 +1,25 @@
+import { type ParsedDocument } from '@signstack/base';
+import { type ValidationResult } from '../types/schema.types.js';
+/** Directories to ignore when discovering YAML files */
+export declare const IGNORED_DIRECTORIES: readonly ["**/node_modules/**"];
+/** Standard separator length for CLI output formatting */
+export declare const SEPARATOR_LENGTH = 50;
+/**
+ * Discover all YAML files in a folder recursively.
+ */
+export declare function discoverYamlFiles(folderPath: string): Promise<string[]>;
+/**
+ * Parse a single YAML file into ParsedDocument objects.
+ * Handles reading, YAML parsing, and basic document structure validation.
+ */
+export declare function parseSingleYamlFile(filePath: string): {
+    documents: ParsedDocument[];
+    parseErrors: ValidationResult[];
+};
+/**
+ * Parse all YAML files into ParsedDocument objects.
+ */
+export declare function parseAllYamlFiles(filePaths: string[]): {
+    documents: ParsedDocument[];
+    parseErrors: ValidationResult[];
+};

package/dist/apps/signstack-cli/src/lib/yaml-document-parser.js

@@ -0,0 +1,133 @@
+import fg from 'fast-glob';
+import { readFileSync } from 'node:fs';
+import { parseAllDocuments } from 'yaml';
+import { DependencyGraph, extractReferences } from '@signstack/base';
+import { normalizePath } from './path-utils.js';
+import { isSchemaKind, ValidationErrorKeyword, } from '../types/schema.types.js';
+/** Directories to ignore when discovering YAML files */
+export const IGNORED_DIRECTORIES = ['**/node_modules/**'];
+/** Standard separator length for CLI output formatting */
+export const SEPARATOR_LENGTH = 50;
+/**
+ * Discover all YAML files in a folder recursively.
+ */
+export async function discoverYamlFiles(folderPath) {
+    const pattern = `${normalizePath(folderPath)}/**/*.{yaml,yml}`;
+    const matches = await fg(pattern, {
+        absolute: true,
+        onlyFiles: true,
+        ignore: [...IGNORED_DIRECTORIES],
+    });
+    return matches.sort();
+}
+/**
+ * Parse a single YAML file into ParsedDocument objects.
+ * Handles reading, YAML parsing, and basic document structure validation.
+ */
+export function parseSingleYamlFile(filePath) {
+    const documents = [];
+    const parseErrors = [];
+    let content;
+    try {
+        content = readFileSync(filePath, 'utf-8');
+    }
+    catch (error) {
+        parseErrors.push({
+            valid: false,
+            errors: [
+                {
+                    path: '/',
+                    message: `Failed to read file: ${error.message}`,
+                    keyword: ValidationErrorKeyword.FileRead,
+                },
+            ],
+            schemaKind: 'unknown',
+            filePath,
+        });
+        return { documents, parseErrors };
+    }
+    let parsedDocs;
+    try {
+        const yamlDocs = parseAllDocuments(content);
+        parsedDocs = yamlDocs.map((doc) => {
+            if (doc.errors?.length) {
+                throw new Error(doc.errors.map((e) => e.message).join(', '));
+            }
+            return doc.toJSON();
+        });
+    }
+    catch (error) {
+        parseErrors.push({
+            valid: false,
+            errors: [
+                {
+                    path: '/',
+                    message: `YAML parse error: ${error.message}`,
+                    keyword: ValidationErrorKeyword.YamlParse,
+                },
+            ],
+            schemaKind: 'unknown',
+            filePath,
+        });
+        return { documents, parseErrors };
+    }
+    const validDocs = parsedDocs.filter((d) => d != null);
+    const isMultiDoc = validDocs.length > 1;
+    for (let i = 0; i < parsedDocs.length; i++) {
+        const doc = parsedDocs[i];
+        if (doc == null || typeof doc !== 'object')
+            continue;
+        const docContent = doc;
+        const kind = docContent['kind'];
+        const metadata = docContent['metadata'];
+        if (!kind || !isSchemaKind(kind))
+            continue; // Skip non-SignStack docs
+        const docKey = metadata?.['key'];
+        const docVersion = metadata?.['version'];
+        const documentIndex = isMultiDoc ? i : undefined;
+        if (!docKey || !docVersion) {
+            parseErrors.push({
+                valid: false,
+                errors: [
+                    {
+                        path: '/metadata',
+                        message: 'Document missing metadata.key or metadata.version',
+                        keyword: ValidationErrorKeyword.Type,
+                    },
+                ],
+                schemaKind: kind,
+                filePath,
+                documentIndex,
+            });
+            continue;
+        }
+        const schemaKind = kind;
+        const id = DependencyGraph.createId(schemaKind, docKey, docVersion);
+        const references = extractReferences(docContent, schemaKind);
+        documents.push({
+            id,
+            kind: schemaKind,
+            key: docKey,
+            version: docVersion,
+            filePath,
+            documentIndex,
+            content: docContent,
+            references,
+        });
+    }
+    return { documents, parseErrors };
+}
+/**
+ * Parse all YAML files into ParsedDocument objects.
+ */
+export function parseAllYamlFiles(filePaths) {
+    const documents = [];
+    const parseErrors = [];
+    for (const filePath of filePaths) {
+        const result = parseSingleYamlFile(filePath);
+        documents.push(...result.documents);
+        parseErrors.push(...result.parseErrors);
+    }
+    return { documents, parseErrors };
+}
+//# sourceMappingURL=yaml-document-parser.js.map

package/dist/apps/signstack-cli/src/lib/yaml-document-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-document-parser.js","sourceRoot":"","sources":["../../../../../src/lib/yaml-document-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAuB,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,YAAY,EAEZ,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AAElC,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,oBAAoB,CAAU,CAAC;AAEnE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,OAAO,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,kBAAkB,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE;QAChC,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,mBAAmB,CAAC;KACjC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAIlD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAE3C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,wBAAyB,KAAe,CAAC,OAAO,EAAE;oBAC3D,OAAO,EAAE,sBAAsB,CAAC,QAAQ;iBACzC;aACF;YACD,UAAU,EAAE,SAAS;YACrB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,qBAAsB,KAAe,CAAC,OAAO,EAAE;oBACxD,OAAO,EAAE,sBAAsB,CAAC,SAAS;iBAC1C;aACF;YACD,UAAU,EAAE,SAAS;YACrB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAErD,MAAM,UAAU,GAAG,GAA8B,CAAC;QAClD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAuB,CAAC;QACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAEzB,CAAC;QAEd,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,0BAA0B;QAEtE,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAuB,CAAC;QACvD,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC,SAAS,CAAuB,CAAC;QAC/D,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,mDAAmD;wBAC5D,OAAO,EAAE,sBAAsB,CAAC,IAAI;qBACrC;iBACF;gBACD,UAAU,EAAE,IAAkB;gBAC9B,QAAQ;gBACR,aAAa;aACd,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,IAAkB,CAAC;QACtC,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAE7D,SAAS,CAAC,IAAI,CAAC;YACb,EAAE;YACF,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,MAAM;YACX,OAAO,EAAE,UAAU;YACnB,QAAQ;YACR,aAAa;YACb,OAAO,EAAE,UAAU;YACnB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAmB;IAInD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAE3C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/dist/apps/signstack-cli/src/lib/yaml-transforms.d.ts

@@ -0,0 +1,3 @@
+export { normalizeExpression, extractExpressionString, splitKeyVersion, extractBlueprintInputKey, resolveRequired, transformInputs, transformRole, transformField, transformAssetObjectRefs, normalizeYamlFunctionsBlock as normalizeYamlFunctions, } from '@signstack/base';
+export declare const MIME_TYPES: Record<string, string>;
+export declare function getContentType(filePath: string): string;

package/dist/apps/signstack-cli/src/lib/yaml-transforms.js

@@ -0,0 +1,32 @@
+import { extname } from 'node:path';
+// Re-export shared transform functions from @signstack/base
+export { normalizeExpression, extractExpressionString, splitKeyVersion, extractBlueprintInputKey, resolveRequired, transformInputs, transformRole, transformField, transformAssetObjectRefs, normalizeYamlFunctionsBlock as normalizeYamlFunctions, } from '@signstack/base';
+// CLI-only: MIME type mapping (requires Node.js `extname`)
+export const MIME_TYPES = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.svg': 'image/svg+xml',
+    '.webp': 'image/webp',
+    '.ico': 'image/x-icon',
+    '.pdf': 'application/pdf',
+    '.doc': 'application/msword',
+    '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    '.html': 'text/html',
+    '.htm': 'text/html',
+    '.hbs': 'text/html',
+    '.css': 'text/css',
+    '.js': 'application/javascript',
+    '.json': 'application/json',
+    '.xml': 'application/xml',
+    '.txt': 'text/plain',
+    '.md': 'text/markdown',
+    '.yaml': 'text/yaml',
+    '.yml': 'text/yaml',
+};
+export function getContentType(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    return MIME_TYPES[ext] || 'application/octet-stream';
+}
+//# sourceMappingURL=yaml-transforms.js.map

package/dist/apps/signstack-cli/src/lib/yaml-transforms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-transforms.js","sourceRoot":"","sources":["../../../../../src/lib/yaml-transforms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,4DAA4D;AAC5D,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,2BAA2B,IAAI,sBAAsB,GACtD,MAAM,iBAAiB,CAAC;AAEzB,2DAA2D;AAE3D,MAAM,CAAC,MAAM,UAAU,GAA2B;IAChD,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EACL,yEAAyE;IAC3E,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACvD,CAAC"}

package/dist/apps/signstack-cli/src/lib/yaml-writer.d.ts

@@ -0,0 +1,47 @@
+import { SchemaKind } from '../types/schema.types.js';
+/**
+ * YamlWriter — Handles all file I/O for the pull operation.
+ *
+ * Creates the output folder structure and writes YAML documents,
+ * JSON schema definitions, text content (HTML/CSS), and binary files.
+ */
+export declare class YamlWriter {
+    private readonly baseDir;
+    constructor(baseDir: string);
+    /** Create the output base directory */
+    ensureDirectories(): void;
+    /** Ensure a subdirectory exists before writing into it */
+    private ensureSubdir;
+    /**
+     * Write a YAML document for a resource.
+     * Returns the written file path relative to baseDir.
+     */
+    writeYaml(kind: SchemaKind, key: string, doc: Record<string, unknown>): string;
+    /**
+     * Write a JSON schema definition file into the schemas/ folder
+     * (co-located with the schema YAML that references it).
+     * Returns the relative path from the schema YAML's perspective (e.g., ./employee.json).
+     */
+    writeJsonDefinition(key: string, definition: Record<string, unknown>): string;
+    /**
+     * Write text content (HTML or CSS) to the assets/ folder
+     * (co-located with the asset YAML that references it).
+     * Returns the relative path from the asset YAML's perspective (e.g., ./key.hbs).
+     */
+    writeTextContent(_subdir: string, filename: string, content: string): string;
+    /**
+     * Download a binary file from a signed URL and write it to the assets/ folder
+     * (co-located with the asset YAML that references it).
+     * Returns the relative path from the asset YAML's perspective (e.g., ./key.pdf).
+     *
+     * The URL is validated to be an HTTPS GCS signed URL before fetching,
+     * preventing SSRF if a malicious or misconfigured API returns a bad URL.
+     */
+    downloadBinaryFile(key: string, ext: string, signedUrl: string): Promise<string>;
+    /**
+     * Write a minimal placeholder PDF for assets whose actual PDF is resolved
+     * dynamically at runtime (e.g. supplement templates with a dynamic fileId).
+     * This satisfies the local file-reference validator without a real file.
+     */
+    writePlaceholderPdf(key: string): void;
+}

package/dist/apps/signstack-cli/src/lib/yaml-writer.js

@@ -0,0 +1,160 @@
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { stringify } from 'yaml';
+import { SchemaKind } from '../types/schema.types.js';
+/**
+ * Valid resource key pattern — must match backend validation.
+ * Keys are snake_case: lowercase letters, digits, single underscores only.
+ */
+const SAFE_KEY_REGEX = /^[a-z][a-z0-9]*(_[a-z0-9]+)*$/;
+/**
+ * Assert that a key coming from the API is safe to use as a filename component.
+ * Throws if it contains path traversal characters or doesn't match the
+ * expected snake_case format.
+ */
+function assertSafeKey(key) {
+    if (!SAFE_KEY_REGEX.test(key)) {
+        throw new Error(`Unsafe resource key received from API: "${key}". Keys must be snake_case (lowercase letters, digits, single underscores).`);
+    }
+}
+/** Map SchemaKind to output subdirectory name */
+const KIND_DIRS = {
+    [SchemaKind.Blueprint]: 'blueprints',
+    [SchemaKind.Template]: 'templates',
+    [SchemaKind.Asset]: 'assets',
+    [SchemaKind.Schema]: 'schemas',
+    [SchemaKind.JsonataFunction]: 'functions',
+};
+/**
+ * Allowed hostnames for signed file download URLs.
+ * GCS signed URLs always use storage.googleapis.com.
+ */
+const ALLOWED_SIGNED_URL_HOSTS = new Set([
+    'storage.googleapis.com',
+]);
+/**
+ * Validate that a signed URL is safe to fetch:
+ * - Must use HTTPS
+ * - Host must be a known GCS domain
+ *
+ * Throws if the URL fails validation to prevent SSRF.
+ */
+function validateSignedUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`Invalid signed URL: "${url}"`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error(`Signed URL must use HTTPS, got "${parsed.protocol}" — rejecting to prevent SSRF`);
+    }
+    if (!ALLOWED_SIGNED_URL_HOSTS.has(parsed.hostname)) {
+        throw new Error(`Signed URL hostname "${parsed.hostname}" is not an allowed GCS domain — rejecting to prevent SSRF`);
+    }
+}
+/**
+ * YamlWriter — Handles all file I/O for the pull operation.
+ *
+ * Creates the output folder structure and writes YAML documents,
+ * JSON schema definitions, text content (HTML/CSS), and binary files.
+ */
+export class YamlWriter {
+    baseDir;
+    constructor(baseDir) {
+        this.baseDir = baseDir;
+    }
+    /** Create the output base directory */
+    ensureDirectories() {
+        mkdirSync(this.baseDir, { recursive: true });
+    }
+    /** Ensure a subdirectory exists before writing into it */
+    ensureSubdir(subdir) {
+        mkdirSync(join(this.baseDir, subdir), { recursive: true });
+    }
+    /**
+     * Write a YAML document for a resource.
+     * Returns the written file path relative to baseDir.
+     */
+    writeYaml(kind, key, doc) {
+        assertSafeKey(key);
+        const dir = KIND_DIRS[kind] ?? 'other';
+        this.ensureSubdir(dir);
+        const relPath = join(dir, `${key}.yaml`);
+        const absPath = join(this.baseDir, relPath);
+        const yamlStr = stringify(doc, { lineWidth: 0 });
+        writeFileSync(absPath, yamlStr, 'utf-8');
+        return relPath;
+    }
+    /**
+     * Write a JSON schema definition file into the schemas/ folder
+     * (co-located with the schema YAML that references it).
+     * Returns the relative path from the schema YAML's perspective (e.g., ./employee.json).
+     */
+    writeJsonDefinition(key, definition) {
+        assertSafeKey(key);
+        this.ensureSubdir('schemas');
+        const relPath = join('schemas', `${key}.json`);
+        const absPath = join(this.baseDir, relPath);
+        writeFileSync(absPath, JSON.stringify(definition, null, 2) + '\n', 'utf-8');
+        // Path relative to the schemas/ dir (where the YAML lives)
+        return `./${key}.json`;
+    }
+    /**
+     * Write text content (HTML or CSS) to the assets/ folder
+     * (co-located with the asset YAML that references it).
+     * Returns the relative path from the asset YAML's perspective (e.g., ./key.hbs).
+     */
+    writeTextContent(_subdir, filename, content) {
+        // filename is always `${key}${fixedExt}` — the key portion must be safe
+        const dotIdx = filename.lastIndexOf('.');
+        const keyPart = dotIdx > 0 ? filename.slice(0, dotIdx) : filename;
+        assertSafeKey(keyPart);
+        this.ensureSubdir('assets');
+        const absPath = join(this.baseDir, 'assets', filename);
+        writeFileSync(absPath, content, 'utf-8');
+        return `./${filename}`;
+    }
+    /**
+     * Download a binary file from a signed URL and write it to the assets/ folder
+     * (co-located with the asset YAML that references it).
+     * Returns the relative path from the asset YAML's perspective (e.g., ./key.pdf).
+     *
+     * The URL is validated to be an HTTPS GCS signed URL before fetching,
+     * preventing SSRF if a malicious or misconfigured API returns a bad URL.
+     */
+    async downloadBinaryFile(key, ext, signedUrl) {
+        validateSignedUrl(signedUrl);
+        assertSafeKey(key);
+        this.ensureSubdir('assets');
+        const filename = `${key}${ext}`;
+        const absPath = join(this.baseDir, 'assets', filename);
+        const response = await fetch(signedUrl);
+        if (!response.ok) {
+            throw new Error(`Failed to download file for ${key}: ${response.status} ${response.statusText}`);
+        }
+        const buffer = Buffer.from(await response.arrayBuffer());
+        writeFileSync(absPath, buffer);
+        return `./${filename}`;
+    }
+    /**
+     * Write a minimal placeholder PDF for assets whose actual PDF is resolved
+     * dynamically at runtime (e.g. supplement templates with a dynamic fileId).
+     * This satisfies the local file-reference validator without a real file.
+     */
+    writePlaceholderPdf(key) {
+        assertSafeKey(key);
+        this.ensureSubdir('assets');
+        const absPath = join(this.baseDir, 'assets', `${key}.pdf`);
+        // Minimal well-formed PDF — 1 empty page
+        const placeholder = '%PDF-1.4\n1 0 obj<</Type/Catalog/Pages 2 0 R>>endobj ' +
+            '2 0 obj<</Type/Pages/Kids[3 0 R]/Count 1>>endobj ' +
+            '3 0 obj<</Type/Page/MediaBox[0 0 612 792]/Parent 2 0 R>>endobj\n' +
+            'xref\n0 4\n0000000000 65535 f\n0000000009 00000 n\n' +
+            '0000000058 00000 n\n0000000115 00000 n\n' +
+            'trailer<</Size 4/Root 1 0 R>>\nstartxref\n190\n%%EOF\n';
+        writeFileSync(absPath, placeholder, 'utf-8');
+    }
+}
+//# sourceMappingURL=yaml-writer.js.map

package/dist/apps/signstack-cli/src/lib/yaml-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-writer.js","sourceRoot":"","sources":["../../../../../src/lib/yaml-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD;;;GAGG;AACH,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,6EAA6E,CAC5H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,SAAS,GAA2B;IACxC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY;IACpC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW;IAClC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ;IAC5B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS;IAC9B,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,WAAW;CAC1C,CAAC;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,wBAAwB;CACzB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,QAAQ,+BAA+B,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,CAAC,QAAQ,4DAA4D,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD,uCAAuC;IACvC,iBAAiB;QACf,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,0DAA0D;IAClD,YAAY,CAAC,MAAc;QACjC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,SAAS,CACP,IAAgB,EAChB,GAAW,EACX,GAA4B;QAE5B,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CACjB,GAAW,EACX,UAAmC;QAEnC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5E,2DAA2D;QAC3D,OAAO,KAAK,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,OAAe;QACjE,wEAAwE;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,KAAK,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CACtB,GAAW,EACX,GAAW,EACX,SAAiB;QAEjB,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE7B,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,KAAK,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,GAAW;QAC7B,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;QAC3D,yCAAyC;QACzC,MAAM,WAAW,GACf,uDAAuD;YACvD,mDAAmD;YACnD,kEAAkE;YAClE,qDAAqD;YACrD,0CAA0C;YAC1C,wDAAwD,CAAC;QAC3D,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;CACF"}