@sponson/sim 0.0.0-stage → 0.5.0

package/dist/routes/clerk.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Simulated Clerk: the instance's allowed redirect URLs.
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against Clerk's published Backend API OpenAPI document (github.com/clerk/openapi-specs, bapi/2026-05-12.yml,
+ * identical for /redirect_urls back to 2021-02-05; fetched 2026-10-10); see docs/api-verification.md:
+ *   C1. A duplicate redirect URL answers 422 (ClerkErrors body). Unverified: the spec documents 400 and 422 for
+ *       POST /redirect_urls without saying which a duplicate gets. The adapter checks the list after either.
+ *   C2. GET /redirect_urls is a bare JSON array (verified); with `paginated=true` it is `{ data, total_count }`
+ *       paged by `offset`/`limit` (limit 1–500, default 10: verified parameters). The envelope is not in the
+ *       spec; it is how Clerk's own SDKs (clerk/javascript RedirectUrlApi, clerk-sdk-go redirecturl) call and
+ *       decode it. Chaos `page_size` caps the page further.
+ *   C3. A redirect URL is `{ object: "redirect_url", id, url, created_at, updated_at }` and DELETE answers a
+ *       DeletedObject `{ object, id, deleted }` (verified).
+ */
+import { type CreatedBy, type ProviderSim } from "../provider.js";
+/** One allow-listed redirect URL. */
+export interface ClerkRedirect {
+    id: string;
+    url: string;
+    createdAt: number;
+    createdBy: CreatedBy;
+}
+/** Simulated Clerk: the instance's redirect allow-list. */
+export interface ClerkState {
+    redirect_urls: ClerkRedirect[];
+}
+/** Initial Clerk state. */
+export interface ClerkSeed {
+    redirect_urls: string[];
+}
+/** Simulated Clerk (redirect URL allow-list); see the assumptions at the top of this file. */
+export declare const clerkSim: ProviderSim<ClerkState, ClerkSeed>;

package/dist/routes/clerk.js

@@ -0,0 +1,85 @@
+/**
+ * Simulated Clerk: the instance's allowed redirect URLs.
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against Clerk's published Backend API OpenAPI document (github.com/clerk/openapi-specs, bapi/2026-05-12.yml,
+ * identical for /redirect_urls back to 2021-02-05; fetched 2026-10-10); see docs/api-verification.md:
+ *   C1. A duplicate redirect URL answers 422 (ClerkErrors body). Unverified: the spec documents 400 and 422 for
+ *       POST /redirect_urls without saying which a duplicate gets. The adapter checks the list after either.
+ *   C2. GET /redirect_urls is a bare JSON array (verified); with `paginated=true` it is `{ data, total_count }`
+ *       paged by `offset`/`limit` (limit 1–500, default 10: verified parameters). The envelope is not in the
+ *       spec; it is how Clerk's own SDKs (clerk/javascript RedirectUrlApi, clerk-sdk-go redirecturl) call and
+ *       decode it. Chaos `page_size` caps the page further.
+ *   C3. A redirect URL is `{ object: "redirect_url", id, url, created_at, updated_at }` and DELETE answers a
+ *       DeletedObject `{ object, id, deleted }` (verified).
+ */
+import { page, Reply, route, router } from "../provider.js";
+/** Simulated Clerk (redirect URL allow-list); see the assumptions at the top of this file. */
+export const clerkSim = {
+    env: { token: "CLERK_SECRET_KEY", url: "CLERK_API_URL", testToken: "tok_clerk" },
+    defaultSeed: { redirect_urls: [] },
+    reset(core, seed) {
+        const now = Date.now();
+        return { redirect_urls: (seed?.redirect_urls ?? []).map((url) => redirect(core, url, now, "sim")) };
+    },
+    /** `redirect.<url>`: "delete" | "recreate". Clerk has one instance per key, so there is no `clerk:<project>.` form. */
+    drift(core, state, { key, rest, value, only }) {
+        if (only !== undefined || !rest.startsWith("redirect."))
+            return false;
+        const url = rest.slice("redirect.".length);
+        if (value !== "delete" && value !== "recreate")
+            throw new Error(`drift ${key}: only "delete" and "recreate" are supported`);
+        const hit = state.redirect_urls.filter((r) => r.url === url);
+        state.redirect_urls = state.redirect_urls.filter((r) => !hit.includes(r));
+        if (value === "recreate")
+            for (const r of hit)
+                state.redirect_urls.push(redirect(core, r.url, Date.now(), "sim"));
+        return true;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+const routes = router([
+    route("GET", "/redirect_urls", ({ core, state, url }) => {
+        const all = state.redirect_urls.map(publicRedirect);
+        if (url.searchParams.get("paginated") !== "true")
+            return new Reply(200, all);
+        const limit = url.searchParams.get("limit");
+        const offset = url.searchParams.get("offset");
+        if ((limit !== null && !/^\d+$/.test(limit)) || (offset !== null && !/^\d+$/.test(offset)) || Number(limit ?? 10) < 1 || Number(limit ?? 10) > 500) {
+            return clerkError(422, "form_param_format_invalid", "limit must be 1–500 and offset ≥ 0");
+        }
+        const pg = page(core, all, offset, Number(limit ?? 10));
+        return new Reply(200, { data: pg.items, total_count: all.length });
+    }),
+    route("POST", "/redirect_urls", ({ core, state, body }) => {
+        const b = (body ?? {});
+        if (!b.url)
+            return clerkError(422, "form_param_missing", "url is required");
+        if (state.redirect_urls.some((r) => r.url === b.url))
+            return clerkError(422, "duplicate_record", "redirect url already exists");
+        const r = redirect(core, b.url, Date.now(), "api");
+        state.redirect_urls.push(r);
+        return new Reply(200, publicRedirect(r));
+    }),
+    route("DELETE", "/redirect_urls/:id", ({ state, params }) => {
+        const r = state.redirect_urls.find((x) => x.id === params.id);
+        if (!r)
+            return clerkError(404, "resource_not_found", "not found");
+        state.redirect_urls = state.redirect_urls.filter((x) => x !== r);
+        return new Reply(200, { id: r.id, object: "redirect_url", deleted: true });
+    }),
+], () => clerkError(404, "resource_not_found", "not found"));
+/** The spec's RedirectURL: `object`, `id`, `url`, `created_at`, `updated_at` (all required). */
+function publicRedirect(r) {
+    return { object: "redirect_url", id: r.id, url: r.url, created_at: r.createdAt, updated_at: r.createdAt };
+}
+/** The spec's ClerkErrors body. */
+function clerkError(status, code, message) {
+    return new Reply(status, { errors: [{ code, message, long_message: message }] });
+}
+function redirect(core, url, createdAt, createdBy) {
+    return { id: core.nextId("ru_"), url, createdAt, createdBy };
+}
+//# sourceMappingURL=clerk.js.map

package/dist/routes/clerk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clerk.js","sourceRoot":"","sources":["../../src/routes/clerk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAkD,MAAM,gBAAgB,CAAC;AAoB5G,8FAA8F;AAC9F,MAAM,CAAC,MAAM,QAAQ,GAAuC;IAC1D,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE;IAChF,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;IAElC,KAAK,CAAC,IAAI,EAAE,IAAI;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;IACtG,CAAC;IAED,uHAAuH;IACvH,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,8CAA8C,CAAC,CAAC;QAC5H,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7D,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,UAAU;YAAE,KAAK,MAAM,CAAC,IAAI,GAAG;gBAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QAClH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;YACnJ,OAAO,UAAU,CAAC,GAAG,EAAE,2BAA2B,EAAE,oCAAoC,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACxD,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAqB,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;QAC5E,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;QAChI,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACnD,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC;CACH,EACD,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,oBAAoB,EAAE,WAAW,CAAC,CACzD,CAAC;AAEF,gGAAgG;AAChG,SAAS,cAAc,CAAC,CAAgB;IACtC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;AAC5G,CAAC;AAED,mCAAmC;AACnC,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC/D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,GAAW,EAAE,SAAiB,EAAE,SAAoB;IACnF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC"}

package/dist/routes/cloudflare.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Simulated Cloudflare: Pages projects and their per-environment variables (`deployment_configs.<env>.env_vars`).
+ *
+ * Assumptions about the real API that this fake encodes. Sources (fetched 2026-10-11): the official OpenAPI document
+ * https://github.com/cloudflare/api-schemas (`openapi.json`), the API reference pages
+ * https://developers.cloudflare.com/api/resources/pages/subresources/projects/methods/get/ and …/methods/edit/,
+ * and the Pages docs cited per item. The critical ones are pinned in scenarios/contract.test.ts
+ * (`assumption CF<n>: …`) so `pnpm test:live` checks them against a real account.
+ *
+ *   CF1. Base URL `https://api.cloudflare.com/client/v4`, `Authorization: Bearer <API token>` — verified
+ *        (https://developers.cloudflare.com/fundamentals/api/how-to/make-api-calls/). The token needs the
+ *        account permission "Cloudflare Pages Edit" (fundamentals/api/reference/permissions/; schema token groups
+ *        "Pages Read"/"Pages Write").
+ *   CF2. `GET /accounts/{account_id}/pages/projects/{project_name}` answers `200 { success, errors, messages, result }`,
+ *        `result` a project with `id`, `name`, `subdomain` and `deployment_configs.{preview,production}.env_vars`, a
+ *        nullable map NAME → `{ type: "plain_text" | "secret_text", value }` — verified (schema `pages_project`,
+ *        `pages_plain_text_env_var`, `pages_secret_text_env_var`).
+ *   CF3. A `secret_text` value is never returned: the entry is listed with its type and `value: ""` — partly
+ *        verified: the docs say secrets cannot be seen after they are set (pages/functions/bindings/), and the
+ *        schema's example is `{"type":"secret_text","value":""}`; whether the key comes back with `""`, null or
+ *        no `value` is not stated (the adapter accepts all three). Pinned.
+ *   CF4. `PATCH` of the same path merges: `deployment_configs.<env>.env_vars` keys not in the body are left alone, a
+ *        key set to `null` is deleted, and the answer is `200` with the updated project — `null` deletes and `200`
+ *        verified ("To delete an environment variable, set its key to `null`"); merging is implied by that rule and
+ *        by a body with no required fields, but not stated. Pinned: the adapter also re-reads and refuses to go on
+ *        if a variable it did not send disappeared.
+ *   CF5. No precondition (ETag / If-Match) exists for that PATCH — verified (only path parameters, no 412). Two
+ *        writers of the same key race; last write wins. Sponson's own writers take turns through the parent lock
+ *        (`lockOn`, ADR 0019).
+ *   CF6. Failures answer `4XX { success: false, errors: [{ code, message }], result: null }` — verified (schema
+ *        `pages_api-response-common-failure`). An unknown project answers `404` with code `8000007` — unverified:
+ *        the schema declares only `4XX`; the status and code come from Wrangler's error reports.
+ *   CF7. A write is visible to the next GET at once — unverified. Pinned.
+ *   CF8. Preview variables are one set shared by every preview deployment; there are no per-branch values —
+ *        verified ("This will set the configuration for all preview deployments, not just the deployments from a
+ *        specific branch", pages/functions/wrangler-configuration/).
+ *   CF9. Variable names: the schema gives no pattern (free-form map keys); the sim accepts any non-empty name.
+ *   CF10. Changing a variable does not change existing deployments; it applies to the next one — indirectly
+ *        documented ("Redeploy your project for the binding to take effect", pages/functions/bindings/). The sim
+ *        has no deployments, so nothing here depends on it.
+ */
+import { type CreatedBy, type ProviderSim } from "../provider.js";
+/** The two variable sets of a Pages project. */
+export type CloudflarePagesEnv = "preview" | "production";
+/** One variable as the simulated Cloudflare stores it (the secret's value included: the sim must compare it). */
+export interface CloudflareEnvVar {
+    type: "plain_text" | "secret_text";
+    value: string;
+}
+/** A Pages project, with the bookkeeping the sim adds (`createdBy`). */
+export interface CloudflarePagesProject {
+    id: string;
+    name: string;
+    subdomain: string;
+    createdBy: CreatedBy;
+    deployment_configs: Record<CloudflarePagesEnv, {
+        env_vars: Record<string, CloudflareEnvVar>;
+    }>;
+}
+/** The simulated Cloudflare's state: Pages projects per account id. */
+export interface CloudflareState {
+    accounts: Record<string, {
+        projects: Record<string, CloudflarePagesProject>;
+    }>;
+}
+/** Variables of one environment in a seed: NAME → a plain value, or `{ type, value }`. */
+export type CloudflareSeedVars = Record<string, string | {
+    type?: CloudflareEnvVar["type"];
+    value: string;
+}>;
+/** What a scenario or test seeds the simulated Cloudflare with (`seed: { cloudflare: … }`). */
+export interface CloudflareSeed {
+    /** Account id → project name → the variables that already exist (set "by a human", so unmanaged). */
+    accounts: Record<string, Record<string, {
+        preview?: CloudflareSeedVars;
+        production?: CloudflareSeedVars;
+    }>>;
+}
+/** The simulated Cloudflare API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/cloudflare`. */
+export declare const cloudflareSim: ProviderSim<CloudflareState, CloudflareSeed>;

package/dist/routes/cloudflare.js

@@ -0,0 +1,176 @@
+/**
+ * Simulated Cloudflare: Pages projects and their per-environment variables (`deployment_configs.<env>.env_vars`).
+ *
+ * Assumptions about the real API that this fake encodes. Sources (fetched 2026-10-11): the official OpenAPI document
+ * https://github.com/cloudflare/api-schemas (`openapi.json`), the API reference pages
+ * https://developers.cloudflare.com/api/resources/pages/subresources/projects/methods/get/ and …/methods/edit/,
+ * and the Pages docs cited per item. The critical ones are pinned in scenarios/contract.test.ts
+ * (`assumption CF<n>: …`) so `pnpm test:live` checks them against a real account.
+ *
+ *   CF1. Base URL `https://api.cloudflare.com/client/v4`, `Authorization: Bearer <API token>` — verified
+ *        (https://developers.cloudflare.com/fundamentals/api/how-to/make-api-calls/). The token needs the
+ *        account permission "Cloudflare Pages Edit" (fundamentals/api/reference/permissions/; schema token groups
+ *        "Pages Read"/"Pages Write").
+ *   CF2. `GET /accounts/{account_id}/pages/projects/{project_name}` answers `200 { success, errors, messages, result }`,
+ *        `result` a project with `id`, `name`, `subdomain` and `deployment_configs.{preview,production}.env_vars`, a
+ *        nullable map NAME → `{ type: "plain_text" | "secret_text", value }` — verified (schema `pages_project`,
+ *        `pages_plain_text_env_var`, `pages_secret_text_env_var`).
+ *   CF3. A `secret_text` value is never returned: the entry is listed with its type and `value: ""` — partly
+ *        verified: the docs say secrets cannot be seen after they are set (pages/functions/bindings/), and the
+ *        schema's example is `{"type":"secret_text","value":""}`; whether the key comes back with `""`, null or
+ *        no `value` is not stated (the adapter accepts all three). Pinned.
+ *   CF4. `PATCH` of the same path merges: `deployment_configs.<env>.env_vars` keys not in the body are left alone, a
+ *        key set to `null` is deleted, and the answer is `200` with the updated project — `null` deletes and `200`
+ *        verified ("To delete an environment variable, set its key to `null`"); merging is implied by that rule and
+ *        by a body with no required fields, but not stated. Pinned: the adapter also re-reads and refuses to go on
+ *        if a variable it did not send disappeared.
+ *   CF5. No precondition (ETag / If-Match) exists for that PATCH — verified (only path parameters, no 412). Two
+ *        writers of the same key race; last write wins. Sponson's own writers take turns through the parent lock
+ *        (`lockOn`, ADR 0019).
+ *   CF6. Failures answer `4XX { success: false, errors: [{ code, message }], result: null }` — verified (schema
+ *        `pages_api-response-common-failure`). An unknown project answers `404` with code `8000007` — unverified:
+ *        the schema declares only `4XX`; the status and code come from Wrangler's error reports.
+ *   CF7. A write is visible to the next GET at once — unverified. Pinned.
+ *   CF8. Preview variables are one set shared by every preview deployment; there are no per-branch values —
+ *        verified ("This will set the configuration for all preview deployments, not just the deployments from a
+ *        specific branch", pages/functions/wrangler-configuration/).
+ *   CF9. Variable names: the schema gives no pattern (free-form map keys); the sim accepts any non-empty name.
+ *   CF10. Changing a variable does not change existing deployments; it applies to the next one — indirectly
+ *        documented ("Redeploy your project for the binding to take effect", pages/functions/bindings/). The sim
+ *        has no deployments, so nothing here depends on it.
+ */
+import { Reply, route, router } from "../provider.js";
+const ENVS = ["preview", "production"];
+/** The simulated Cloudflare API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/cloudflare`. */
+export const cloudflareSim = {
+    env: { token: "CLOUDFLARE_API_TOKEN", url: "CLOUDFLARE_API_URL", testToken: "tok_cloudflare" },
+    defaultSeed: { accounts: { acc_demo: { demo: {} } } },
+    reset(core, seed) {
+        const accounts = {};
+        for (const [account, projects] of Object.entries(seed?.accounts ?? {})) {
+            accounts[account] = { projects: {} };
+            for (const [name, vars] of Object.entries(projects))
+                accounts[account].projects[name] = project(core, name, vars);
+        }
+        return { accounts };
+    },
+    /**
+     * `pages_env.<env>.<NAME>` or `cloudflare:<project>.pages_env.<env>.<NAME>`, what a human in the dashboard would do:
+     * `delete`; `plain:<value>` or `secret:<value>` (set, choosing the type); any other value replaces the value and
+     * keeps the type. Setting a variable that does not exist creates it as plain text.
+     */
+    drift(_core, state, { key, rest, value, only }) {
+        const m = /^pages_env\.(preview|production)\.(.+)$/.exec(rest);
+        if (!m)
+            return false;
+        const env = m[1];
+        const name = m[2];
+        const projects = Object.values(state.accounts).flatMap((a) => Object.values(a.projects)).filter((p) => only === undefined || p.name === only);
+        if (projects.length === 0)
+            throw new Error(`drift ${key}: no Pages project${only ? ` named ${only}` : ""}`);
+        for (const p of projects) {
+            const vars = p.deployment_configs[env].env_vars;
+            if (value === "delete")
+                delete vars[name];
+            else if (value.startsWith("plain:"))
+                vars[name] = { type: "plain_text", value: value.slice("plain:".length) };
+            else if (value.startsWith("secret:"))
+                vars[name] = { type: "secret_text", value: value.slice("secret:".length) };
+            else
+                vars[name] = { type: vars[name]?.type ?? "plain_text", value };
+        }
+        return true;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+const PROJECT = "/accounts/:account/pages/projects/:project";
+const routes = router([
+    route("GET", PROJECT, ({ state, params }) => {
+        const p = state.accounts[params.account]?.projects[params.project];
+        return p ? ok(publicProject(p)) : notFound();
+    }),
+    route("PATCH", PROJECT, ({ state, params, body }) => {
+        const p = state.accounts[params.account]?.projects[params.project];
+        if (!p)
+            return notFound();
+        const problem = patchProblem(body);
+        if (problem)
+            return failure(400, 8000000, problem);
+        const configs = body.deployment_configs ?? {};
+        for (const env of ENVS) {
+            // CF4: a merge. Keys absent from the body stay; `null` deletes.
+            for (const [name, v] of Object.entries(configs[env]?.env_vars ?? {})) {
+                if (v === null)
+                    delete p.deployment_configs[env].env_vars[name];
+                else
+                    p.deployment_configs[env].env_vars[name] = { type: v.type, value: v.value };
+            }
+        }
+        return ok(publicProject(p));
+    }),
+], () => failure(404, 7003, "No route for the URI"));
+/** Why a PATCH body is refused, or undefined. Only what the schema says about `env_vars` entries is checked. */
+function patchProblem(body) {
+    if (body === null || typeof body !== "object" || Array.isArray(body))
+        return "request body must be a JSON object";
+    const configs = body.deployment_configs;
+    if (configs === undefined)
+        return undefined;
+    if (configs === null || typeof configs !== "object")
+        return "deployment_configs must be an object";
+    for (const env of Object.keys(configs)) {
+        if (!ENVS.includes(env))
+            return `unknown deployment config ${env}`;
+        const problem = envVarsProblem(env, configs[env]?.env_vars);
+        if (problem)
+            return problem;
+    }
+    return undefined;
+}
+/** Why one `env_vars` map of a PATCH body is refused, or undefined. */
+function envVarsProblem(env, vars) {
+    if (vars === undefined || vars === null)
+        return undefined;
+    if (typeof vars !== "object" || Array.isArray(vars))
+        return `deployment_configs.${env}.env_vars must be an object`;
+    for (const [name, v] of Object.entries(vars)) {
+        if (name === "")
+            return "environment variable names must not be empty";
+        if (v === null)
+            continue;
+        const e = v;
+        if ((e.type !== "plain_text" && e.type !== "secret_text") || typeof e.value !== "string")
+            return `deployment_configs.${env}.env_vars.${name} must be { type: plain_text | secret_text, value: string }`;
+    }
+    return undefined;
+}
+function ok(result) {
+    return new Reply(200, { success: true, errors: [], messages: [], result });
+}
+function failure(status, code, message) {
+    return new Reply(status, { success: false, errors: [{ code, message }], messages: [], result: null });
+}
+/** CF6: what Wrangler reports for an unknown project. */
+function notFound() {
+    return failure(404, 8000007, "Project not found. The specified project name does not match any of your existing projects.");
+}
+function project(core, name, seed) {
+    const vars = (s) => Object.fromEntries(Object.entries(s ?? {}).map(([k, v]) => [k, typeof v === "string" ? { type: "plain_text", value: v } : { type: v.type ?? "plain_text", value: v.value }]));
+    return {
+        id: core.nextId("cf_"),
+        name,
+        subdomain: `${name}.pages.dev`,
+        createdBy: "sim",
+        deployment_configs: { preview: { env_vars: vars(seed.preview) }, production: { env_vars: vars(seed.production) } },
+    };
+}
+/** The project as GET answers it: CF3, a secret's value is never returned. */
+function publicProject(p) {
+    const config = (env) => ({
+        env_vars: Object.fromEntries(Object.entries(p.deployment_configs[env].env_vars).map(([k, v]) => [k, v.type === "secret_text" ? { type: v.type, value: "" } : { ...v }])),
+    });
+    return { id: p.id, name: p.name, subdomain: p.subdomain, production_branch: "main", deployment_configs: { preview: config("preview"), production: config("production") } };
+}
+//# sourceMappingURL=cloudflare.js.map

package/dist/routes/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/routes/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAkD,MAAM,gBAAgB,CAAC;AAkCtG,MAAM,IAAI,GAAkC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAEtE,0HAA0H;AAC1H,MAAM,CAAC,MAAM,aAAa,GAAiD;IACzE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,GAAG,EAAE,oBAAoB,EAAE,SAAS,EAAE,gBAAgB,EAAE;IAC9F,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;IAErD,KAAK,CAAC,IAAI,EAAE,IAAI;QACd,MAAM,QAAQ,GAAgC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC5C,MAAM,CAAC,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAuB,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9I,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,qBAAqB,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAChD,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;iBACrC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;iBACzG,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;;gBAC5G,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,YAAY,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAE7D,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAClD,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAI,IAA+G,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC1J,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,gEAAgE;YAChE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;;oBAC3D,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;CACH,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,sBAAsB,CAAC,CACjD,CAAC;AAEF,gHAAgH;AAChH,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,oCAAoC,CAAC;IAClH,MAAM,OAAO,GAAI,IAAgC,CAAC,kBAAkB,CAAC;IACrE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,sCAAsC,CAAC;IACnG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAE,IAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,6BAA6B,GAAG,EAAE,CAAC;QAC1F,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAG,OAAkD,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxG,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,GAAW,EAAE,IAAa;IAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,sBAAsB,GAAG,6BAA6B,CAAC;IACnH,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACxE,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,8CAA8C,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,MAAM,CAAC,GAAG,CAA8B,CAAC;QACzC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,sBAAsB,GAAG,aAAa,IAAI,4DAA4D,CAAC;IAC1M,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,EAAE,CAAC,MAAe;IACzB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC5D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,yDAAyD;AACzD,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,6FAA6F,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,IAAY,EAAE,IAAuE;IACnH,MAAM,IAAI,GAAG,CAAC,CAAiC,EAAoC,EAAE,CACnF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAChL,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACtB,IAAI;QACJ,SAAS,EAAE,GAAG,IAAI,YAAY;QAC9B,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE;KACnH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,CAAyB;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAE,EAAE,CAAC,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;KACzK,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;AAC7K,CAAC"}

package/dist/routes/digitalocean.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Simulated DigitalOcean App Platform: apps built from an app spec, each create and update starting a deployment.
+ *
+ * Assumptions about the real API this fake encodes, checked against the official OpenAPI document
+ * (https://github.com/digitalocean/openapi, `specification/resources/apps`) and the docs unless marked unverified.
+ * The critical ones are pinned in scenarios/contract.test.ts (`assumption DO…`).
+ *   DO1. The API is `https://api.digitalocean.com`, authenticated as `Authorization: Bearer <token>` (scopes
+ *        app:create/read/update/delete); doctl reads the token from `DIGITALOCEAN_ACCESS_TOKEN`. (verified:
+ *        https://docs.digitalocean.com/reference/api/digitalocean/, doctl README)
+ *   DO2. `POST /v2/apps` with `{ spec }` creates an app and answers `{ app: { id, spec, pending_deployment, … } }`;
+ *        `GET /v2/apps/{id}` answers `{ app }` (404 when gone); `GET /v2/apps?page=&per_page=` lists
+ *        `{ apps, links: { pages: { next } }, meta }`, with no name filter. (verified: apps_create.yml, apps_get.yml,
+ *        apps_list.yml)
+ *   DO3. An app's `spec.name` is unique in the account (`^[a-z][a-z0-9-]{0,30}[a-z0-9]$`); the status of a
+ *        duplicate create is not documented (unverified: the sim answers 409). (verified: app_spec.yml)
+ *   DO4. `PUT /v2/apps/{id}` with `{ spec }` replaces the whole spec and starts a deployment. (verified:
+ *        apps_update.yml; "starts a deployment" inferred from `pending_deployment` being set for UpdateApp)
+ *   DO5. `pending_deployment` names the deployment a create or update started; `GET
+ *        /v2/apps/{app_id}/deployments/{deployment_id}` answers `{ deployment: { id, phase } }`, the phase one of
+ *        PENDING_BUILD, BUILDING, PENDING_DEPLOY, DEPLOYING, ACTIVE, SUPERSEDED, ERROR, CANCELED. (verified:
+ *        app.yml, apps_get_deployment.yml, apps_deployment_response.yml, apps_deployment_phase.yml)
+ *   DO6. The platform adds defaults to the spec it stores (a region, instance counts); it keeps every field the
+ *        client sent, lists in the order sent. (unverified: the sim adds `region` and `instance_count`)
+ *   DO7. A `type: SECRET` variable's value is encrypted on first submission and read back as `EV[…]`.
+ *        (verified: app_variable_definition.yml, "encrypted on first submission"; the read-back form unverified)
+ *   DO8. `DELETE /v2/apps/{id}` deletes the app and its deployments (200 `{ id }`; 404 when gone). (verified:
+ *        apps_delete.yml)
+ */
+import { type CreatedBy, type ProviderSim } from "../provider.js";
+/** An app as the simulated App Platform stores it. */
+export interface DigitaloceanApp {
+    id: string;
+    spec: Record<string, unknown>;
+    liveUrl: string | null;
+    /** Deployments by id: phase, and polls left before the next phase. */
+    deployments: Record<string, {
+        phase: string;
+        polls: number;
+    }>;
+    pending: string | null;
+    createdBy: CreatedBy;
+}
+/** The simulated App Platform's state. */
+export interface DigitaloceanState {
+    apps: DigitaloceanApp[];
+    /** Polls a deployment answers BUILDING before it is ACTIVE (default 1); `fail` ends it ERROR instead. */
+    deployPolls: number;
+    failDeployments: boolean;
+}
+/** What a scenario or test seeds the simulated App Platform with (`seed: { digitalocean: … }`). */
+export interface DigitaloceanSeed {
+    /** Apps that exist already (unmanaged), by spec. */
+    apps?: Array<Record<string, unknown>>;
+    deployPolls?: number;
+    failDeployments?: boolean;
+}
+/** The simulated App Platform API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/digitalocean`. */
+export declare const digitaloceanSim: ProviderSim<DigitaloceanState, DigitaloceanSeed>;

package/dist/routes/digitalocean.js

@@ -0,0 +1,158 @@
+/**
+ * Simulated DigitalOcean App Platform: apps built from an app spec, each create and update starting a deployment.
+ *
+ * Assumptions about the real API this fake encodes, checked against the official OpenAPI document
+ * (https://github.com/digitalocean/openapi, `specification/resources/apps`) and the docs unless marked unverified.
+ * The critical ones are pinned in scenarios/contract.test.ts (`assumption DO…`).
+ *   DO1. The API is `https://api.digitalocean.com`, authenticated as `Authorization: Bearer <token>` (scopes
+ *        app:create/read/update/delete); doctl reads the token from `DIGITALOCEAN_ACCESS_TOKEN`. (verified:
+ *        https://docs.digitalocean.com/reference/api/digitalocean/, doctl README)
+ *   DO2. `POST /v2/apps` with `{ spec }` creates an app and answers `{ app: { id, spec, pending_deployment, … } }`;
+ *        `GET /v2/apps/{id}` answers `{ app }` (404 when gone); `GET /v2/apps?page=&per_page=` lists
+ *        `{ apps, links: { pages: { next } }, meta }`, with no name filter. (verified: apps_create.yml, apps_get.yml,
+ *        apps_list.yml)
+ *   DO3. An app's `spec.name` is unique in the account (`^[a-z][a-z0-9-]{0,30}[a-z0-9]$`); the status of a
+ *        duplicate create is not documented (unverified: the sim answers 409). (verified: app_spec.yml)
+ *   DO4. `PUT /v2/apps/{id}` with `{ spec }` replaces the whole spec and starts a deployment. (verified:
+ *        apps_update.yml; "starts a deployment" inferred from `pending_deployment` being set for UpdateApp)
+ *   DO5. `pending_deployment` names the deployment a create or update started; `GET
+ *        /v2/apps/{app_id}/deployments/{deployment_id}` answers `{ deployment: { id, phase } }`, the phase one of
+ *        PENDING_BUILD, BUILDING, PENDING_DEPLOY, DEPLOYING, ACTIVE, SUPERSEDED, ERROR, CANCELED. (verified:
+ *        app.yml, apps_get_deployment.yml, apps_deployment_response.yml, apps_deployment_phase.yml)
+ *   DO6. The platform adds defaults to the spec it stores (a region, instance counts); it keeps every field the
+ *        client sent, lists in the order sent. (unverified: the sim adds `region` and `instance_count`)
+ *   DO7. A `type: SECRET` variable's value is encrypted on first submission and read back as `EV[…]`.
+ *        (verified: app_variable_definition.yml, "encrypted on first submission"; the read-back form unverified)
+ *   DO8. `DELETE /v2/apps/{id}` deletes the app and its deployments (200 `{ id }`; 404 when gone). (verified:
+ *        apps_delete.yml)
+ */
+import { Reply, route, router } from "../provider.js";
+/** The simulated App Platform API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/digitalocean`. */
+export const digitaloceanSim = {
+    env: { token: "DIGITALOCEAN_ACCESS_TOKEN", url: "DIGITALOCEAN_API_URL", testToken: "tok_digitalocean" },
+    defaultSeed: { apps: [] },
+    reset(core, seed) {
+        const apps = (seed?.apps ?? []).map((spec) => ({ id: core.nextId("app_"), spec: stored(core, spec), liveUrl: `https://${String(spec.name)}.ondigitalocean.app`, deployments: {}, pending: null, createdBy: "sim" }));
+        return { apps, deployPolls: seed?.deployPolls ?? 1, failDeployments: seed?.failDeployments ?? false };
+    },
+    /**
+     * `app.<name>`: "delete"; `app.<name>.env.<KEY>`: a new value for that app-level variable — what a human in the
+     * control panel would do.
+     */
+    drift(_core, state, { key, rest, value, only }) {
+        if (only !== undefined || !rest.startsWith("app."))
+            return false;
+        const [name, kind, envKey] = rest.slice("app.".length).split(".");
+        const app = state.apps.find((a) => a.spec.name === name);
+        if (!app)
+            throw new Error(`drift ${key}: no app ${String(name)}`);
+        if (kind === undefined && value === "delete")
+            state.apps = state.apps.filter((a) => a !== app);
+        else if (kind === "env" && envKey) {
+            const env = (app.spec.envs ?? []).find((e) => e.key === envKey);
+            if (!env)
+                throw new Error(`drift ${key}: no variable ${envKey}`);
+            env.value = value;
+        }
+        else
+            throw new Error(`drift ${key}: use app.<name> = delete, or app.<name>.env.<KEY> = <value>`);
+        return true;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+/** The spec as stored: defaults added (DO6), SECRET values encrypted (DO7). */
+function stored(core, spec) {
+    const s = structuredClone(spec);
+    s.region ??= "nyc";
+    for (const svc of s.services ?? [])
+        svc.instance_count ??= 1;
+    const encrypt = (envs) => {
+        for (const e of envs ?? [])
+            if (e.type === "SECRET" && typeof e.value === "string" && !e.value.startsWith("EV["))
+                e.value = `EV[1:${core.nextId("")}:sim]`;
+    };
+    encrypt(s.envs);
+    for (const svc of s.services ?? [])
+        encrypt(svc.envs);
+    return s;
+}
+function deploy(core, state, app) {
+    const id = core.nextId("dep_");
+    app.deployments[id] = { phase: "PENDING_BUILD", polls: state.deployPolls };
+    app.pending = id;
+}
+function publicApp(a) {
+    return { id: a.id, spec: a.spec, ...(a.liveUrl ? { live_url: a.liveUrl } : {}), ...(a.pending ? { pending_deployment: { id: a.pending } } : {}) };
+}
+const NAME = /^[a-z][a-z0-9-]{0,30}[a-z0-9]$/;
+const notFound = () => new Reply(404, { id: "not_found", message: "The resource you were accessing could not be found." });
+function specOf(body) {
+    const spec = body?.spec;
+    if (typeof spec !== "object" || spec === null || Array.isArray(spec) || typeof spec.name !== "string" || !NAME.test(spec.name)) {
+        return new Reply(422, { id: "unprocessable_entity", message: "spec.name is invalid" });
+    }
+    return spec;
+}
+const routes = router([
+    route("GET", "/v2/apps", ({ state, url }) => {
+        const per = Math.max(1, Number(url.searchParams.get("per_page") ?? 20));
+        const page = Math.max(1, Number(url.searchParams.get("page") ?? 1));
+        const slice = state.apps.slice((page - 1) * per, page * per);
+        const next = page * per < state.apps.length ? { next: `https://api.digitalocean.com/v2/apps?page=${page + 1}&per_page=${per}` } : {};
+        return new Reply(200, { apps: slice.map(publicApp), links: { pages: next }, meta: { total: state.apps.length } });
+    }),
+    route("POST", "/v2/apps", ({ core, state, body }) => {
+        const spec = specOf(body);
+        if (spec instanceof Reply)
+            return spec;
+        if (state.apps.some((a) => a.spec.name === spec.name))
+            return new Reply(409, { id: "conflict", message: "an app with this name already exists" });
+        const app = { id: core.nextId("app_"), spec: stored(core, spec), liveUrl: null, deployments: {}, pending: null, createdBy: "api" };
+        deploy(core, state, app);
+        state.apps.push(app);
+        return new Reply(200, { app: publicApp(app) });
+    }),
+    route("GET", "/v2/apps/:id", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        return app ? new Reply(200, { app: publicApp(app) }) : notFound();
+    }),
+    route("PUT", "/v2/apps/:id", ({ core, state, params, body }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        if (!app)
+            return notFound();
+        const spec = specOf(body);
+        if (spec instanceof Reply)
+            return spec;
+        app.spec = stored(core, spec);
+        deploy(core, state, app);
+        return new Reply(200, { app: publicApp(app) });
+    }),
+    route("GET", "/v2/apps/:id/deployments/:deployment", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        const d = app?.deployments[params.deployment];
+        if (!app || !d)
+            return notFound();
+        if (d.polls > 0) {
+            d.polls--;
+            d.phase = "BUILDING";
+        }
+        else if (d.phase !== "ACTIVE" && d.phase !== "ERROR") {
+            d.phase = state.failDeployments ? "ERROR" : "ACTIVE";
+            if (d.phase === "ACTIVE") {
+                app.liveUrl = `https://${String(app.spec.name)}-${app.id.slice(4)}.ondigitalocean.app`;
+                app.pending = null;
+            }
+        }
+        return new Reply(200, { deployment: { id: params.deployment, phase: d.phase } });
+    }),
+    route("DELETE", "/v2/apps/:id", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        if (!app)
+            return notFound();
+        state.apps = state.apps.filter((a) => a !== app);
+        return new Reply(200, { id: app.id });
+    }),
+], notFound);
+//# sourceMappingURL=digitalocean.js.map

package/dist/routes/digitalocean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.js","sourceRoot":"","sources":["../../src/routes/digitalocean.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAkD,MAAM,gBAAgB,CAAC;AA6BtG,8HAA8H;AAC9H,MAAM,CAAC,MAAM,eAAe,GAAqD;IAC/E,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,kBAAkB,EAAE;IACvG,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAEzB,KAAK,CAAC,IAAI,EAAE,IAAI;QACd,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC,CAAC;QAC9N,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,KAAK,EAAE,CAAC;IACxG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,YAAY,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;aAC1F,IAAI,IAAI,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,CAAE,GAAG,CAAC,IAAI,CAAC,IAAmD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,iBAAiB,MAAM,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,8DAA8D,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,SAAS,MAAM,CAAC,IAAa,EAAE,IAA6B;IAC1D,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAK,CAAC,CAAC,QAAuD,IAAI,EAAE;QAAE,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE;QAChC,KAAK,MAAM,CAAC,IAAK,IAAmD,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,KAAK,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC;IAC7M,CAAC,CAAC;IACF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAK,CAAC,CAAC,QAAuD,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,IAAa,EAAE,KAAwB,EAAE,GAAoB;IAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC3E,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,CAAkB;IACnC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpJ,CAAC;AAED,MAAM,IAAI,GAAG,gCAAgC,CAAC;AAC9C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;AAE3H,SAAS,MAAM,CAAC,IAAa;IAC3B,MAAM,IAAI,GAAI,IAAkC,EAAE,IAAI,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAQ,IAA2B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAE,IAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7K,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,6CAA6C,IAAI,GAAG,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrI,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,YAAY,KAAK;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAClJ,MAAM,GAAG,GAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpJ,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,YAAY,KAAK;YAAE,OAAO,IAAI,CAAC;QACvC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,sCAAsC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAChB,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrD,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,OAAO,GAAG,WAAW,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBACvF,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IAEF,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACjD,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;CACH,EACD,QAAQ,CACT,CAAC"}