@sponson/sim 0.0.0-stage → 0.5.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,10 @@
-# Temporary Holding Version
+# @sponson/sim
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A local fake cloud for testing [Sponson](https://github.com/MishaBear94/Sponson#readme): subsets of the Vercel, Neon and Clerk APIs with chaos injection, started in-process with `startSim()` or from the command line with `sponson-sim`.
+
+- `npx --yes @sponson/sim --demo sponson-demo`: the fake cloud plus a ready demo repository, and the commands to run
+  next (the "Try it in 60 seconds" section of Sponson's README).
+- `npx --yes @sponson/sim --port 4777`: just the fake cloud.
+- `eval "$(npx --yes @sponson/sim env)"`: point `sponson` at a sim already running on that port.
+
+Documentation: <https://sponson.mintlify.site>. Source and issues: [GitHub](https://github.com/MishaBear94/Sponson).

package/dist/auth.d.ts

@@ -0,0 +1,60 @@
+import type { IncomingHttpHeaders } from "node:http";
+import { Reply, type AuthRequest } from "./provider.js";
+/** What a SigV4 signature must be made with: the access keys the "account" has, and the expected scope. */
+export interface SigV4Config {
+    /** Access key id → secret access key. */
+    keys: Record<string, string>;
+    region: string;
+    /** The signing name the request's path belongs to (`s3`, `amplify`). */
+    service: string;
+    /** The clock, for the 15-minute skew AWS allows. */
+    now?: () => number;
+}
+/** The signature AWS would compute for this request with `secret` (exported for the sim's own tests). */
+export declare function expectedSigV4(req: AuthRequest, headers: IncomingHttpHeaders, secret: string, scope: {
+    date: string;
+    region: string;
+    service: string;
+    signed: string[];
+    amzDate: string;
+}): string;
+/** Why a SigV4 request is refused, or null when its signature is valid for `config`. */
+export declare function sigV4Problem(headers: IncomingHttpHeaders, req: AuthRequest, config: SigV4Config): string | null;
+/** Digest users and the challenge the sim issues. */
+export interface DigestConfig {
+    users: Record<string, string>;
+    algorithm?: "MD5" | "SHA-256";
+    realm?: string;
+}
+/** Server-side Digest state: the nonces handed out. */
+export interface DigestState {
+    nonces: string[];
+}
+/** A 401 carrying a fresh Digest challenge. */
+export declare function digestChallenge(config: DigestConfig, state: DigestState, n: number, stale?: boolean): Reply;
+/** Why a Digest `Authorization` does not authenticate this request, or null when it does. */
+export declare function digestProblem(headers: IncomingHttpHeaders, req: AuthRequest, config: DigestConfig, state: DigestState): string | null;
+/** A token the sim's token endpoint issued. */
+export interface IssuedToken {
+    token: string;
+    client: string;
+    /** How the client authenticated to the token endpoint. */
+    method: "client_secret_basic" | "client_secret_post";
+    audience?: string;
+    scope?: string;
+    expiresAt: number;
+    revoked?: true;
+}
+/** OAuth2 clients and the tokens issued to them. */
+export interface OAuthState {
+    clients: Record<string, string>;
+    ttlSeconds: number;
+    issued: IssuedToken[];
+}
+/**
+ * RFC 6749 §4.4 at a token endpoint: `grant_type=client_credentials`, the client authenticated by HTTP Basic
+ * (`client_secret_basic`) or by `client_id`/`client_secret` in the form (`client_secret_post`), never both.
+ */
+export declare function issueToken(state: OAuthState, headers: Record<string, string>, body: unknown, now?: number): Reply;
+/** True when the bearer token was issued by the endpoint, is not revoked and has not expired. */
+export declare function tokenValid(state: OAuthState, token: string, now?: number): boolean;

package/dist/auth.js

@@ -0,0 +1,195 @@
+/**
+ * Credential checks a simulated provider can configure, server side: an OAuth2 client-credentials token endpoint,
+ * HTTP Digest challenges (RFC 7616), and AWS Signature Version 4 verification. They are written here from the
+ * specifications, independently of the client code in @sponson/adapters (the sim depends on nothing in the repo),
+ * and both sides are checked against the same published vectors (AWS's SigV4 test suite, RFC 7616 §3.9.1); a
+ * client bug therefore fails against the sim instead of being mirrored by it.
+ */
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { Reply } from "./provider.js";
+function sha256Hex(s) {
+    return createHash("sha256").update(s, "utf8").digest("hex");
+}
+function sameText(a, b) {
+    const x = Buffer.from(a);
+    const y = Buffer.from(b);
+    return x.length === y.length && timingSafeEqual(x, y);
+}
+function header(headers, name) {
+    const v = headers[name];
+    return Array.isArray(v) ? v.join(", ") : v;
+}
+/** RFC 3986 percent-encoding of every byte but the unreserved characters, upper-case hex. */
+function awsEncode(s) {
+    let out = "";
+    for (const byte of Buffer.from(s, "utf8")) {
+        const c = String.fromCharCode(byte);
+        out += /[A-Za-z0-9\-._~]/.test(c) ? c : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
+    }
+    return out;
+}
+function decoded(s) {
+    try {
+        return decodeURIComponent(s);
+    }
+    catch {
+        return s;
+    }
+}
+/** Canonical URI from the request target: segments encoded once for S3, twice for every other service. */
+function sigv4Uri(path, service) {
+    if (path === "" || path === "/")
+        return "/";
+    return path
+        .split("/")
+        .map((seg) => (service === "s3" ? awsEncode(decoded(seg)) : awsEncode(awsEncode(decoded(seg)))))
+        .join("/");
+}
+function sigv4Query(query) {
+    if (query === "")
+        return "";
+    return query
+        .split("&")
+        .filter((p) => p !== "")
+        .map((p) => {
+        const i = p.indexOf("=");
+        return [awsEncode(decoded(i < 0 ? p : p.slice(0, i))), awsEncode(decoded(i < 0 ? "" : p.slice(i + 1)))];
+    })
+        .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : a[1] < b[1] ? -1 : a[1] > b[1] ? 1 : 0))
+        .map(([k, v]) => `${k}=${v}`)
+        .join("&");
+}
+/** The parts of a SigV4 `Authorization` header. */
+function parseSigV4(value) {
+    const m = /^AWS4-HMAC-SHA256\s+Credential=([^/,\s]+)\/(\d{8})\/([^/,\s]+)\/([^/,\s]+)\/aws4_request,\s*SignedHeaders=([a-z0-9;-]+),\s*Signature=([0-9a-f]{64})$/.exec(value.trim());
+    return m ? { key: m[1], date: m[2], region: m[3], service: m[4], signed: m[5].split(";"), signature: m[6] } : null;
+}
+/** The signature AWS would compute for this request with `secret` (exported for the sim's own tests). */
+export function expectedSigV4(req, headers, secret, scope) {
+    const q = req.target.indexOf("?");
+    const path = q < 0 ? req.target : req.target.slice(0, q);
+    const query = q < 0 ? "" : req.target.slice(q + 1);
+    const canonicalHeaders = scope.signed.map((h) => `${h}:${(header(headers, h) ?? "").trim().replace(/\s+/g, " ")}\n`).join("");
+    const payload = header(headers, "x-amz-content-sha256") ?? sha256Hex(req.raw);
+    const canonical = [req.method, sigv4Uri(path, scope.service), sigv4Query(query), canonicalHeaders, scope.signed.join(";"), payload].join("\n");
+    const credentialScope = `${scope.date}/${scope.region}/${scope.service}/aws4_request`;
+    const toSign = ["AWS4-HMAC-SHA256", scope.amzDate, credentialScope, sha256Hex(canonical)].join("\n");
+    let key = `AWS4${secret}`;
+    for (const part of [scope.date, scope.region, scope.service, "aws4_request"])
+        key = createHmac("sha256", key).update(part).digest();
+    return createHmac("sha256", key).update(toSign).digest("hex");
+}
+/** X-Amz-Date must be there, match the credential scope's day and be within the 15 minutes AWS allows. */
+function amzDateProblem(amzDate, day, now) {
+    if (!/^\d{8}T\d{6}Z$/.test(amzDate) || amzDate.slice(0, 8) !== day)
+        return "X-Amz-Date is missing or does not match the credential scope";
+    const at = Date.UTC(+amzDate.slice(0, 4), +amzDate.slice(4, 6) - 1, +amzDate.slice(6, 8), +amzDate.slice(9, 11), +amzDate.slice(11, 13), +amzDate.slice(13, 15));
+    return Math.abs(at - now()) > 15 * 60_000 ? "RequestTimeTooSkewed" : null;
+}
+/** Why a SigV4 request is refused, or null when its signature is valid for `config`. */
+export function sigV4Problem(headers, req, config) {
+    const auth = parseSigV4(header(headers, "authorization") ?? "");
+    if (!auth)
+        return "missing or malformed AWS4-HMAC-SHA256 Authorization header";
+    const secret = config.keys[auth.key];
+    if (secret === undefined)
+        return "InvalidAccessKeyId";
+    if (auth.region !== config.region || auth.service !== config.service)
+        return `credential scope ${auth.region}/${auth.service} is not ${config.region}/${config.service}`;
+    const amzDate = header(headers, "x-amz-date") ?? "";
+    const dateProblem = amzDateProblem(amzDate, auth.date, config.now ?? Date.now);
+    if (dateProblem)
+        return dateProblem;
+    if (!auth.signed.includes("host") || !auth.signed.includes("x-amz-date"))
+        return "SignedHeaders must include host and x-amz-date";
+    const claimed = header(headers, "x-amz-content-sha256");
+    if (claimed !== undefined && claimed !== sha256Hex(req.raw))
+        return "XAmzContentSHA256Mismatch";
+    const expected = expectedSigV4(req, headers, secret, { date: auth.date, region: auth.region, service: auth.service, signed: auth.signed, amzDate });
+    return sameText(expected, auth.signature) ? null : "SignatureDoesNotMatch";
+}
+const DEFAULT_REALM = "Sponson Sim API";
+function digestParams(value) {
+    const out = {};
+    for (const m of value.replace(/^Digest\s+/i, "").matchAll(/([a-z0-9-]+)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^\s,]+))/gi))
+        out[m[1].toLowerCase()] = m[2] !== undefined ? m[2].replace(/\\(.)/g, "$1") : m[3];
+    return out;
+}
+/** A 401 carrying a fresh Digest challenge. */
+export function digestChallenge(config, state, n, stale = false) {
+    const nonce = `sim-nonce-${n}-${createHash("sha256").update(String(n)).digest("hex").slice(0, 16)}`;
+    state.nonces.push(nonce);
+    const challenge = `Digest realm="${config.realm ?? DEFAULT_REALM}", domain="", nonce="${nonce}", algorithm=${config.algorithm ?? "MD5"}, qop="auth", stale=${stale ? "TRUE" : "FALSE"}`;
+    return new Reply(401, { error: "unauthorized", detail: "Digest authentication required" }, { "www-authenticate": challenge });
+}
+/** What is wrong with a Digest answer's parameters, before its response is checked. */
+function digestFormProblem(p, req, algorithm, state) {
+    if (!p.nonce || !state.nonces.includes(p.nonce))
+        return "unknown nonce";
+    if (p.qop !== "auth" || !/^[0-9a-f]{8}$/.test(p.nc ?? "") || !p.cnonce)
+        return "qop=auth with nc and cnonce is required";
+    if ((p.algorithm ?? "MD5").toUpperCase() !== algorithm)
+        return "wrong algorithm";
+    if (p.uri !== req.target)
+        return "uri does not match the request";
+    return null;
+}
+/** Why a Digest `Authorization` does not authenticate this request, or null when it does. */
+export function digestProblem(headers, req, config, state) {
+    const value = header(headers, "authorization") ?? "";
+    if (!/^Digest\s/i.test(value))
+        return "no Digest credentials";
+    const p = digestParams(value);
+    const algorithm = config.algorithm ?? "MD5";
+    const password = p.username === undefined ? undefined : config.users[p.username];
+    if (password === undefined)
+        return "unknown user";
+    const problem = digestFormProblem(p, req, algorithm, state);
+    if (problem)
+        return problem;
+    const h = (s) => createHash(algorithm === "MD5" ? "md5" : "sha256").update(s, "utf8").digest("hex");
+    const ha1 = h(`${p.username}:${config.realm ?? DEFAULT_REALM}:${password}`);
+    const ha2 = h(`${req.method}:${p.uri}`);
+    const expected = h(`${ha1}:${p.nonce}:${p.nc}:${p.cnonce}:auth:${ha2}`);
+    return sameText(expected, p.response ?? "") ? null : "wrong response";
+}
+function form(v) {
+    if (typeof v !== "object" || v === null)
+        return {};
+    return Object.fromEntries(Object.entries(v).filter(([, x]) => typeof x === "string"));
+}
+function oauthError(status, error, description) {
+    return new Reply(status, { error, error_description: description });
+}
+/** The client a token request authenticates as (Basic or form, never both); the refusal otherwise. */
+function clientOf(state, headers, f) {
+    const basic = /^Basic\s+(\S+)$/i.exec(headers.authorization ?? "");
+    if (basic && (f.client_id !== undefined || f.client_secret !== undefined))
+        return oauthError(400, "invalid_request", "client authenticated twice");
+    const [client, secret] = basic ? Buffer.from(basic[1], "base64").toString("utf8").split(/:(.*)/s) : [f.client_id, f.client_secret];
+    const expected = client === undefined ? undefined : state.clients[client];
+    if (!client || secret === undefined || expected === undefined || !sameText(expected, secret))
+        return oauthError(401, "invalid_client", "client authentication failed");
+    return { client, basic: basic !== null };
+}
+/**
+ * RFC 6749 §4.4 at a token endpoint: `grant_type=client_credentials`, the client authenticated by HTTP Basic
+ * (`client_secret_basic`) or by `client_id`/`client_secret` in the form (`client_secret_post`), never both.
+ */
+export function issueToken(state, headers, body, now = Date.now()) {
+    const f = form(body);
+    if (f.grant_type !== "client_credentials")
+        return oauthError(400, "unsupported_grant_type", "only client_credentials is supported");
+    const who = clientOf(state, headers, f);
+    if (who instanceof Reply)
+        return who;
+    const { client, basic } = who;
+    const token = `oauth-access-token-${state.issued.length + 1}`;
+    state.issued.push({ token, client, method: basic ? "client_secret_basic" : "client_secret_post", ...(f.audience ? { audience: f.audience } : {}), ...(f.scope ? { scope: f.scope } : {}), expiresAt: now + state.ttlSeconds * 1000 });
+    return new Reply(200, { access_token: token, token_type: "Bearer", expires_in: state.ttlSeconds, ...(f.scope ? { scope: f.scope } : {}) });
+}
+/** True when the bearer token was issued by the endpoint, is not revoked and has not expired. */
+export function tokenValid(state, token, now = Date.now()) {
+    return state.issued.some((t) => t.token === token && !t.revoked && t.expiresAt > now);
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,KAAK,EAAoB,MAAM,eAAe,CAAC;AAExD,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,OAA4B,EAAE,IAAY;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAiBD,6FAA6F;AAC7F,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5C,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/F,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACrG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,CAAC,GAAG,sJAAsJ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpL,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3H,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,GAAgB,EAAE,OAA4B,EAAE,MAAc,EAAE,KAA2F;IACvL,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,sBAAsB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/I,MAAM,eAAe,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,eAAe,CAAC;IACtF,MAAM,MAAM,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrG,IAAI,GAAG,GAAoB,OAAO,MAAM,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC;QAAE,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACpI,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,0GAA0G;AAC1G,SAAS,cAAc,CAAC,OAAe,EAAE,GAAW,EAAE,GAAiB;IACrE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,8DAA8D,CAAC;IAC1I,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjK,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAAC,OAA4B,EAAE,GAAgB,EAAE,MAAmB;IAC9F,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,4DAA4D,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,oBAAoB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,WAAW,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;IACzK,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,gDAAgD,CAAC;IAClI,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAChG,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACpJ,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC;AAC7E,CAAC;AAkBD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1M,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,KAAkB,EAAE,CAAS,EAAE,KAAK,GAAG,KAAK;IAChG,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACpG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,iBAAiB,MAAM,CAAC,KAAK,IAAI,aAAa,wBAAwB,KAAK,gBAAgB,MAAM,CAAC,SAAS,IAAI,KAAK,uBAAuB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxL,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;AAChI,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,CAAyB,EAAE,GAAgB,EAAE,SAAiB,EAAE,KAAkB;IAC3G,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACxE,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,yCAAyC,CAAC;IACzH,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACjF,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,gCAAgC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,OAA4B,EAAE,GAAgB,EAAE,MAAoB,EAAE,KAAkB;IACpH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC9D,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5G,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACxE,CAAC;AAyBD,SAAS,IAAI,CAAC,CAAU;IACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAA2B,CAAC;AAClH,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,KAAa,EAAE,WAAmB;IACpE,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,sGAAsG;AACtG,SAAS,QAAQ,CAAC,KAAiB,EAAE,OAA+B,EAAE,CAAyB;IAC7F,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACnE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IACnJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IACvK,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,OAA+B,EAAE,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC5G,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,UAAU,KAAK,oBAAoB;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,wBAAwB,EAAE,sCAAsC,CAAC,CAAC;IACpI,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC9B,MAAM,KAAK,GAAG,sBAAsB,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC9D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC;IACtO,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC7I,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC3E,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;AACxF,CAAC"}

package/dist/bin.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import { runSimCli } from "./cli.js";
+const { code, sim } = await runSimCli(process.argv.slice(2), {
+    stdout: (s) => process.stdout.write(s),
+    stderr: (s) => process.stderr.write(s),
+    env: process.env,
+    cwd: process.cwd(),
+});
+if (!sim)
+    process.exit(code);
+const stop = () => {
+    void sim.close().finally(() => process.exit(0));
+};
+process.on("SIGINT", stop);
+process.on("SIGTERM", stop);
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;IAC3D,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;CACnB,CAAC,CAAC;AACH,IAAI,CAAC,GAAG;IAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE7B,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC"}

package/dist/chaos.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Chaos configuration: what the fake cloud does wrong on purpose, and which requests it does it to. Set it with
+ * `POST /_chaos` or a seed's `chaos:`; counters (`*_next`) decrement per matching request.
+ */
+export interface ChaosConfig {
+    latency_ms: number;
+    /** Remaining requests (matching `fail_on`) that will fail with `status`. */
+    fail_next: number;
+    status: number;
+    /** Sent as `Retry-After` (seconds) with chaos 429s. */
+    retry_after?: number;
+    /** Remaining requests (matching `fail_on`) that are performed, then answered by destroying the socket. */
+    drop_response_next: number;
+    /** Remaining requests (matching `fail_on`) that are accepted and never answered. */
+    hang_next: number;
+    /**
+     * Remaining requests (matching `fail_on`) that are held, neither performed nor answered, until released
+     * (`POST /_release` or `state.release()`); then they are performed and answered as usual. Lets a test pin
+     * one client inside a request while another runs, instead of hoping timing makes them overlap.
+     */
+    hold_next: number;
+    /**
+     * Which requests the counters above apply to: `"METHOD /path-glob"` or a list of them.
+     * Absent means every write. Reads are only affected by a rule whose method is GET.
+     */
+    fail_on?: string | string[];
+    /** Deployment mode: ok | never | fail | stale | double | cancel | delay:<seconds>. */
+    deploy: string;
+    /** QUEUED → BUILDING → READY takes this long for deployments created through the API (and `ok` auto-deploys). */
+    deploy_ms: number;
+    /** After a Neon branch create, writes to that branch and further creates in the project answer 423 for this long. */
+    neon_op_ms: number;
+    /** A PlanetScale branch created through the API reports `ready: false` for this long (0: ready at its first read). */
+    planetscale_ready_ms: number;
+    /** A Supabase branch created through the API reports `COMING_UP` for this long, then `ACTIVE_HEALTHY`. */
+    supabase_ready_ms: number;
+    /** When > 0, Neon branches, Vercel envs and Clerk redirect URLs are listed in pages of this size. */
+    page_size: number;
+    /** Keys a Vercel bulk upsert reports under `failed` (and does not write). */
+    env_upsert_fail: string[];
+}
+/** The body of `POST /_chaos`: any chaos settings to merge, plus drift to apply immediately. */
+export interface ChaosRequest extends Partial<ChaosConfig> {
+    /** Applied immediately to state, not stored. */
+    drift?: Record<string, string>;
+}
+/** What chaos does to one request. */
+export type ChaosAction = {
+    kind: "hold";
+} | {
+    kind: "hang";
+} | {
+    kind: "drop";
+} | {
+    kind: "fail";
+    status: number;
+    headers: Record<string, string>;
+};
+/** No chaos: every request is answered normally and immediately. */
+export declare const DEFAULT_CHAOS: ChaosConfig;
+/**
+ * Every key `POST /_chaos` accepts besides `drift`; anything else is rejected so a misspelt key cannot silently
+ * do nothing.
+ */
+export declare const CHAOS_KEYS: Set<string>;
+/** A fresh default config (no shared arrays). */
+export declare function defaultChaos(): ChaosConfig;
+/**
+ * Decide what chaos does to this request, consuming one count of `c` when it does something.
+ * Writes are eligible when `fail_on` is absent or matches; reads only when a GET rule matches.
+ */
+export declare function chaosFor(c: ChaosConfig, method: string, path: string): ChaosAction | null;
+/** `"DELETE /neon/*"`: method must match exactly (or be `*`), `*` in the path matches anything. */
+export declare function matchesRule(rule: string, method: string, path: string): boolean;