@substrat-run/contracts 0.48.1 → 0.50.0

package/dist/ci.d.ts

@@ -0,0 +1,111 @@
+/**
+ * The builder's CI vocabulary: preview tag conventions, the PR sticky-comment bodies,
+ * and the generated GitHub Actions workflow.
+ *
+ * It lives here — not in the dashboard, not in the CLI — for the same reason the deploy
+ * manifest does: BOTH ends must speak the same shape. Three writers exist for the same
+ * two artifacts and any drift between them is a silent bug:
+ *
+ * - the **dashboard's one-click CI setup** commits the workflow to a customer repo and
+ *   (via `GithubRepoLinkDO`) posts the PR comment from the platform side;
+ * - **`substrat init --ci github`** writes the same workflow for a builder who owns their
+ *   own CI and never connected the GitHub App;
+ * - the **workflow itself** posts the same comment from the CI side, as the fallback for
+ *   an App installation that lacks `pull-requests: write`.
+ *
+ * The comment bodies are generated once here and rendered into the workflow's `printf`
+ * format string, so the platform-written and CI-written comments cannot say different
+ * things about the same PR. One generator, three writers, no drift.
+ *
+ * Pure string building — no zod, no network, no node. Safe in a worker, a CLI, and a
+ * browser bundle alike.
+ */
+/**
+ * The sticky preview tag for a PR — one long-lived fork, REBOUND on every push, so the
+ * URL always serves the PR's latest code. The git analogy is a **branch ref**: a moving
+ * pointer, bookmarked once. Successive pushes roll their migrations forward on the one
+ * fork, which is the rehearsal that de-risks the eventual release.
+ */
+export declare const previewTag: (prNumber: number) => string;
+/**
+ * The per-build preview tag — a FRESH scope per build, bound once and never rebound, so
+ * the URL is frozen to exactly that build forever. The git analogy is a **sha**.
+ *
+ * A moving pointer is only safe when every build is *also* addressable immutably: "the bug
+ * on the PR preview" must always de-reference to a fixed artifact. That is the whole reason
+ * this tag exists alongside the sticky one.
+ */
+export declare const buildPreviewTag: (prNumber: number, runId: string | number) => string;
+/**
+ * The prefix that matches every per-build tag of one PR, and NOTHING else — note that
+ * PR 12's sticky tag (`pr-12`) does not start with PR 1's build prefix (`pr-1-`), so the
+ * two numbering spaces never collide.
+ */
+export declare const buildPreviewTagPrefix: (prNumber: number) => string;
+/**
+ * The sticky-comment marker. Every writer upserts the comment that starts with this
+ * string, so whichever of the platform and CI posts first, the other updates in place
+ * rather than double-posting.
+ */
+export declare const PREVIEW_COMMENT_MARKER = "<!-- substrat-preview -->";
+/**
+ * The sticky comment while the preview is live.
+ *
+ * `build` is the per-build immutable URL and is optional: it is present only when the repo
+ * opted into per-build previews (`SUBSTRAT_PER_BUILD_PREVIEW`), because a frozen scope per
+ * build is a real cost that not every project wants to pay.
+ *
+ * NOTE: keep the prose free of apostrophes. This same text is rendered into the workflow's
+ * single-quoted `printf` format string, where one apostrophe closes the quote and takes the
+ * whole preview job red on what looks like a copy-edit.
+ */
+export declare function previewCommentBody(urls: {
+    sticky: string;
+    build?: string | null;
+}): string;
+/** The sticky comment after the PR closed and the preview forks were deleted. */
+export declare const previewReapedBody: () => string;
+/**
+ * How a merge to the deploy branch turns into a prod release.
+ *
+ * - `trunk` — **every merge releases.** The push carries no `--version`, so the registry
+ *   patch-bumps and `--promote prod` points prod at it in the same run. The simplest thing
+ *   that works, and the default the dashboard commits.
+ * - `changesets` — **the repo owns the version** (`package.json`), so a merge that only
+ *   lands a changeset must NOT release; only the merge that MOVES the version does. The job
+ *   compares `package.json` against the previous commit and no-ops when it did not change.
+ *   This is the workflow the release-train table in the docs describes.
+ *
+ * Both are legitimate; the platform enables workflows rather than encoding one (#509 §3).
+ */
+export type ReleaseMode = 'trunk' | 'changesets';
+export interface DeployWorkflowOptions {
+    /** The branch whose pushes deploy prod. */
+    branch: string;
+    /** The vertical's bare slug — the control plane forms the `<tenant>/` prefix. */
+    slug: string;
+    /** The control-plane API base, e.g. `https://console.substrat.net/api`. */
+    cpUrl: string;
+    /** Defaults to `trunk`. */
+    release?: ReleaseMode;
+}
+/**
+ * The workflow the one-click setup commits and `substrat init --ci github` writes.
+ *
+ * Self-contained on purpose: a committed file is read by humans, so there is no
+ * reusable-workflow indirection to chase. The install step is load-bearing — `substrat
+ * push`/`preview` runs the repo's OWN build (a wrangler custom build), which needs the
+ * repo's devDependencies on disk; corepack picks the package manager from the lockfile.
+ *
+ * Two behaviours are opt-in through **repository variables**, so one generated file serves
+ * every project and enabling them never means regenerating it:
+ *
+ * - `SUBSTRAT_TEST_SCOPE_ID` — a long-lived test scope. Set it and every merge rebinds that
+ *   scope to the just-built version: the "tracks main" environment, kept a CI step rather
+ *   than a platform noun (a "this scope auto-tracks X" setting would be the retired
+ *   dev/staging channel re-buried one layer down).
+ * - `SUBSTRAT_PER_BUILD_PREVIEW` — set it to `1` and each PR push also creates a frozen,
+ *   short-TTL clean-room preview whose URL names exactly that build.
+ */
+export declare function deployWorkflowYaml(opts: DeployWorkflowOptions): string;
+//# sourceMappingURL=ci.d.ts.map

package/dist/ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.d.ts","sourceRoot":"","sources":["../src/ci.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH;;;;;GAKG;AACH,eAAO,MAAM,UAAU,aAAc,MAAM,KAAG,MAA0B,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,aAAc,MAAM,SAAS,MAAM,GAAG,MAAM,KAAG,MAChD,CAAC;AAE5B;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,aAAc,MAAM,KAAG,MAA2B,CAAC;AAMrF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,CAa1F;AAED,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,QAAO,MACiF,CAAC;AAMvH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,YAAY,CAAC;AAEjD,MAAM,WAAW,qBAAqB;IACpC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAKD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CA8LtE"}

package/dist/ci.js

@@ -0,0 +1,279 @@
+/**
+ * The builder's CI vocabulary: preview tag conventions, the PR sticky-comment bodies,
+ * and the generated GitHub Actions workflow.
+ *
+ * It lives here — not in the dashboard, not in the CLI — for the same reason the deploy
+ * manifest does: BOTH ends must speak the same shape. Three writers exist for the same
+ * two artifacts and any drift between them is a silent bug:
+ *
+ * - the **dashboard's one-click CI setup** commits the workflow to a customer repo and
+ *   (via `GithubRepoLinkDO`) posts the PR comment from the platform side;
+ * - **`substrat init --ci github`** writes the same workflow for a builder who owns their
+ *   own CI and never connected the GitHub App;
+ * - the **workflow itself** posts the same comment from the CI side, as the fallback for
+ *   an App installation that lacks `pull-requests: write`.
+ *
+ * The comment bodies are generated once here and rendered into the workflow's `printf`
+ * format string, so the platform-written and CI-written comments cannot say different
+ * things about the same PR. One generator, three writers, no drift.
+ *
+ * Pure string building — no zod, no network, no node. Safe in a worker, a CLI, and a
+ * browser bundle alike.
+ */
+// ---------------------------------------------------------------------------
+// Tag conventions
+// ---------------------------------------------------------------------------
+/**
+ * The sticky preview tag for a PR — one long-lived fork, REBOUND on every push, so the
+ * URL always serves the PR's latest code. The git analogy is a **branch ref**: a moving
+ * pointer, bookmarked once. Successive pushes roll their migrations forward on the one
+ * fork, which is the rehearsal that de-risks the eventual release.
+ */
+export const previewTag = (prNumber) => `pr-${prNumber}`;
+/**
+ * The per-build preview tag — a FRESH scope per build, bound once and never rebound, so
+ * the URL is frozen to exactly that build forever. The git analogy is a **sha**.
+ *
+ * A moving pointer is only safe when every build is *also* addressable immutably: "the bug
+ * on the PR preview" must always de-reference to a fixed artifact. That is the whole reason
+ * this tag exists alongside the sticky one.
+ */
+export const buildPreviewTag = (prNumber, runId) => `pr-${prNumber}-${runId}`;
+/**
+ * The prefix that matches every per-build tag of one PR, and NOTHING else — note that
+ * PR 12's sticky tag (`pr-12`) does not start with PR 1's build prefix (`pr-1-`), so the
+ * two numbering spaces never collide.
+ */
+export const buildPreviewTagPrefix = (prNumber) => `pr-${prNumber}-`;
+// ---------------------------------------------------------------------------
+// The PR sticky comment
+// ---------------------------------------------------------------------------
+/**
+ * The sticky-comment marker. Every writer upserts the comment that starts with this
+ * string, so whichever of the platform and CI posts first, the other updates in place
+ * rather than double-posting.
+ */
+export const PREVIEW_COMMENT_MARKER = '<!-- substrat-preview -->';
+/**
+ * The sticky comment while the preview is live.
+ *
+ * `build` is the per-build immutable URL and is optional: it is present only when the repo
+ * opted into per-build previews (`SUBSTRAT_PER_BUILD_PREVIEW`), because a frozen scope per
+ * build is a real cost that not every project wants to pay.
+ *
+ * NOTE: keep the prose free of apostrophes. This same text is rendered into the workflow's
+ * single-quoted `printf` format string, where one apostrophe closes the quote and takes the
+ * whole preview job red on what looks like a copy-edit.
+ */
+export function previewCommentBody(urls) {
+    if (!urls.build) {
+        return (`${PREVIEW_COMMENT_MARKER}\n🔎 **Substrat preview:** ${urls.sticky}\n\n` +
+            '_Runs the code in this PR against a fork of prod, and follows the PR — every push rebinds it. ' +
+            'Reaped when the PR closes._');
+    }
+    return (`${PREVIEW_COMMENT_MARKER}\n🔎 **Substrat preview:** ${urls.sticky}\n📌 **This build:** ${urls.build}\n\n` +
+        '_The preview URL follows the PR — every push rebinds it, so it always serves the latest code. ' +
+        'The build URL is frozen to this one build and never moves. Both are reaped when the PR closes._');
+}
+/** The sticky comment after the PR closed and the preview forks were deleted. */
+export const previewReapedBody = () => `${PREVIEW_COMMENT_MARKER}\n🔎 **Substrat preview:** reaped — this PR is closed and the preview forks were deleted.`;
+/** Render a comment body as a single-quoted `printf` format string (literal `\n`, `%s` holes). */
+const printfFormat = (body) => body.replace(/\n/g, '\\n');
+/**
+ * The workflow the one-click setup commits and `substrat init --ci github` writes.
+ *
+ * Self-contained on purpose: a committed file is read by humans, so there is no
+ * reusable-workflow indirection to chase. The install step is load-bearing — `substrat
+ * push`/`preview` runs the repo's OWN build (a wrangler custom build), which needs the
+ * repo's devDependencies on disk; corepack picks the package manager from the lockfile.
+ *
+ * Two behaviours are opt-in through **repository variables**, so one generated file serves
+ * every project and enabling them never means regenerating it:
+ *
+ * - `SUBSTRAT_TEST_SCOPE_ID` — a long-lived test scope. Set it and every merge rebinds that
+ *   scope to the just-built version: the "tracks main" environment, kept a CI step rather
+ *   than a platform noun (a "this scope auto-tracks X" setting would be the retired
+ *   dev/staging channel re-buried one layer down).
+ * - `SUBSTRAT_PER_BUILD_PREVIEW` — set it to `1` and each PR push also creates a frozen,
+ *   short-TTL clean-room preview whose URL names exactly that build.
+ */
+export function deployWorkflowYaml(opts) {
+    const { branch, slug, cpUrl } = opts;
+    const release = opts.release ?? 'trunk';
+    const cli = 'npx @substrat-run/cli';
+    // The install block repeats across jobs (self-contained file, see above). `fetch-depth: 2`
+    // is what lets the changesets release gate diff package.json against the previous commit.
+    const setup = (fetchDepth) => `      - uses: actions/checkout@v4${fetchDepth ? `\n        with:\n          fetch-depth: ${fetchDepth}` : ''}
+      - uses: actions/setup-node@v4
+        with:
+          # 22+: corepack resolves the latest pnpm for lockfile-only repos, and pnpm 11
+          # needs Node >= 22.13 (node:sqlite).
+          node-version: 22
+      - name: Install dependencies
+        env:
+          COREPACK_ENABLE_DOWNLOAD_PROMPT: '0'
+        run: |
+          if [ -f pnpm-lock.yaml ]; then corepack enable && pnpm install --frozen-lockfile
+          elif [ -f yarn.lock ]; then corepack enable && yarn install --frozen-lockfile
+          elif [ -f package-lock.json ]; then npm ci
+          else npm install
+          fi`;
+    const cpEnv = `        env:
+          SUBSTRAT_SERVICE_TOKEN: \${{ secrets.SUBSTRAT_SERVICE_TOKEN }}
+          SUBSTRAT_CP_URL: ${cpUrl}`;
+    // --- the release step, per mode ------------------------------------------------------
+    //
+    // Both print the pushed version id on the `✓ pushed … version <id> …` line; the test-env
+    // bind below reads it back out of the captured stdout. `set -euo pipefail` means a failed
+    // push fails the step rather than letting a masked non-zero exit reach the bind.
+    const release_ = release === 'changesets'
+        ? `      - name: Release (only when package.json version moved)
+${cpEnv}
+        run: |
+          set -euo pipefail
+          CUR=$(node -p "require('./package.json').version")
+          PREV=$(git show HEAD^:package.json 2>/dev/null | node -pe "JSON.parse(require('fs').readFileSync(0,'utf8')).version" 2>/dev/null || echo '')
+          if [ "$CUR" = "$PREV" ]; then
+            echo "package.json version is still $CUR — this merge landed a changeset, not a release. Skipping prod."
+            exit 0
+          fi
+          echo "releasing $CUR (was \${PREV:-none})"
+          ${cli} push . --slug ${slug} --version "$CUR" --promote prod`
+        : `      - name: Release to prod
+${cpEnv}
+        run: |
+          set -euo pipefail
+          ${cli} push . --slug ${slug} --promote prod`;
+    // --- the "tracks main" test environment ---------------------------------------------
+    //
+    // Runs on EVERY merge, release or not — that is the point of a test env: it is always the
+    // head of the branch, a merge ahead of prod, rehearsing each migration on accumulated data.
+    // It pushes its OWN build rather than reusing the release step's, because in `changesets`
+    // mode most merges produce no release at all and the test env must still move; doing it the
+    // same way in both modes keeps one legible file. The label is a PRERELEASE, so this push can
+    // never claim or advance the release coordinate the repo owns.
+    const testEnv = `      - name: Update the test environment
+        if: vars.SUBSTRAT_TEST_SCOPE_ID != ''
+${cpEnv}
+        run: |
+          set -euo pipefail
+          BASE=$(node -p "require('./package.json').version")
+          ${cli} push . --slug ${slug} --version "$BASE-test.\${{ github.run_number }}" | tee push.out
+          # '|| true' so an unmatched grep does not trip pipefail before the message below —
+          # "could not read the pushed version id" beats a bare exit 1 from grep.
+          VID=$(grep -F '✓ pushed' push.out | grep -oE 'version [A-Za-z0-9]+' | head -1 | cut -d' ' -f2 || true)
+          if [ -z "$VID" ]; then echo "could not read the pushed version id from:" >&2; cat push.out >&2; exit 1; fi
+          ${cli} scope bind \${{ vars.SUBSTRAT_TEST_SCOPE_ID }} --version "$VID" --snapshot`;
+    // --- the PR previews -----------------------------------------------------------------
+    //
+    // Sticky first (it is the URL a reviewer bookmarks and must exist even if the optional
+    // per-build one fails), then the frozen per-build clean room when the repo opted in.
+    const previewSteps = `      - name: Create/update the preview
+${cpEnv}
+        run: |
+          set -euo pipefail
+          ${cli} preview create . --slug ${slug} --tag pr-\${{ github.event.number }} | tee preview.out
+          # Take the URL from the CLI success line (the ✓ marker) only — the push it runs
+          # first also prints an https:// *deploy endpoint* we must never mistake for a preview.
+          grep -F '✓ preview' preview.out | grep -oE 'https://[a-zA-Z0-9.:/_-]+' | tail -1 > preview.url || true
+      - name: Create the per-build preview
+        if: vars.SUBSTRAT_PER_BUILD_PREVIEW != ''
+${cpEnv}
+        run: |
+          set -euo pipefail
+          # A FRESH scope, bound once and never rebound, so this URL is frozen to this build
+          # forever. Clean-room (--empty) rather than a fork: a throwaway per build should not
+          # copy prod data every push. Short TTL — the sticky preview is the one that lives.
+          ${cli} preview create . --slug ${slug} \\
+            --tag pr-\${{ github.event.number }}-\${{ github.run_id }} --empty --ttl 24h | tee build.out
+          grep -F '✓ preview' build.out | grep -oE 'https://[a-zA-Z0-9.:/_-]+' | tail -1 > build.url || true`;
+    // The comment body comes from previewCommentBody() so the CI-written and platform-written
+    // comments cannot diverge. Two formats: with and without the per-build line.
+    const stickyOnlyFmt = printfFormat(previewCommentBody({ sticky: '%s' }));
+    const withBuildFmt = printfFormat(previewCommentBody({ sticky: '%s', build: '%s' }));
+    const commentStep = `      - name: Comment the preview URLs
+        env:
+          GH_TOKEN: \${{ github.token }}
+        run: |
+          set -uo pipefail
+          URL=$(cat preview.url 2>/dev/null || true)
+          [ -z "$URL" ] && exit 0
+          BUILD=$(cat build.url 2>/dev/null || true)
+          if [ -n "$BUILD" ]; then
+            BODY=$(printf '${withBuildFmt}' "$URL" "$BUILD")
+          else
+            BODY=$(printf '${stickyOnlyFmt}' "$URL")
+          fi
+          REPO=\${{ github.repository }}
+          PR=\${{ github.event.number }}
+          ID=$(gh api "repos/$REPO/issues/$PR/comments" --jq '.[] | select(.body | startswith("${PREVIEW_COMMENT_MARKER}")) | .id' | head -1)
+          if [ -n "$ID" ]; then
+            gh api -X PATCH "repos/$REPO/issues/comments/$ID" -f body="$BODY" >/dev/null
+          else
+            gh api -X POST "repos/$REPO/issues/$PR/comments" -f body="$BODY" >/dev/null
+          fi`;
+    // Close ⇒ reap both forks. The per-build tag is unknown at close time (it named a run id),
+    // so the sticky one is deleted by tag and the rest are left to their 24h TTL — the GC sweep
+    // is the backstop the short TTL exists for.
+    const cleanup = `  preview_cleanup:
+    # Reap only — no repo build needed, so skip checkout/install and just run the CLI.
+    if: github.event_name == 'pull_request' && github.event.action == 'closed'
+    runs-on: ubuntu-latest
+    concurrency: substrat-preview-\${{ github.event.number }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - name: Reap the preview
+${cpEnv}
+        run: ${cli} preview delete --slug ${slug} --tag pr-\${{ github.event.number }}`;
+    const releaseNote = release === 'changesets'
+        ? `    # Release train: the version lives in package.json and only a version PR moves it, so a
+    # merge releases ONLY when that version changed. Every merge still updates the test env.`
+        : `    # Trunk-based: every merge to ${branch} releases. A private vertical's push lands admitted
+    # and prod is self-serve, so the same run points prod at the new version.`;
+    return `name: Deploy to Substrat
+
+# Generated by Substrat (substrat init --ci github). The workflow this encodes — one prod
+# channel, previews as the only non-prod environment — is documented at
+# https://substrat.net/guide/environments-and-previews
+#
+# Optional repository variables (Settings → Secrets and variables → Actions → Variables):
+#   SUBSTRAT_TEST_SCOPE_ID      a long-lived scope rebound to every merge (the test env)
+#   SUBSTRAT_PER_BUILD_PREVIEW  set to 1 to also mint a frozen per-build preview URL per push
+
+on:
+  push:
+    branches: [${branch}]
+  # Per-PR previews: open/update a PR → a preview instance running the PR's code against a
+  # FORK of prod on its own URL; close the PR → it is reaped (the TTL is the GC backstop).
+  pull_request:
+    types: [opened, synchronize, reopened, closed]
+
+jobs:
+  deploy:
+${releaseNote}
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+${setup(release === 'changesets' ? 2 : undefined)}
+${release_}
+${testEnv}
+
+  preview:
+    if: github.event_name == 'pull_request' && github.event.action != 'closed'
+    runs-on: ubuntu-latest
+    # Never overlap two runs for the same PR — a rapid re-push waits for the first.
+    concurrency: substrat-preview-\${{ github.event.number }}
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+${setup()}
+${previewSteps}
+${commentStep}
+
+${cleanup}
+`;
+}
+//# sourceMappingURL=ci.js.map

package/dist/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../src/ci.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,MAAM,QAAQ,EAAE,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,KAAsB,EAAU,EAAE,CAClF,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,MAAM,QAAQ,GAAG,CAAC;AAErF,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA+C;IAChF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CACL,GAAG,sBAAsB,8BAA8B,IAAI,CAAC,MAAM,MAAM;YACxE,gGAAgG;YAChG,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,CACL,GAAG,sBAAsB,8BAA8B,IAAI,CAAC,MAAM,wBAAwB,IAAI,CAAC,KAAK,MAAM;QAC1G,gGAAgG;QAChG,iGAAiG,CAClG,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAC5C,GAAG,sBAAsB,2FAA2F,CAAC;AAgCvH,kGAAkG;AAClG,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA2B;IAC5D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACxC,MAAM,GAAG,GAAG,uBAAuB,CAAC;IAEpC,2FAA2F;IAC3F,0FAA0F;IAC1F,MAAM,KAAK,GAAG,CAAC,UAAmB,EAAU,EAAE,CAAC,oCAC7C,UAAU,CAAC,CAAC,CAAC,2CAA2C,UAAU,EAAE,CAAC,CAAC,CAAC,EACzE;;;;;;;;;;;;;;aAcW,CAAC;IAEZ,MAAM,KAAK,GAAG;;6BAEa,KAAK,EAAE,CAAC;IAEnC,wFAAwF;IACxF,EAAE;IACF,yFAAyF;IACzF,0FAA0F;IAC1F,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,KAAK,YAAY;QACvC,CAAC,CAAC;EACJ,KAAK;;;;;;;;;;YAUK,GAAG,kBAAkB,IAAI,kCAAkC;QACnE,CAAC,CAAC;EACJ,KAAK;;;YAGK,GAAG,kBAAkB,IAAI,iBAAiB,CAAC;IAErD,uFAAuF;IACvF,EAAE;IACF,0FAA0F;IAC1F,4FAA4F;IAC5F,0FAA0F;IAC1F,4FAA4F;IAC5F,6FAA6F;IAC7F,+DAA+D;IAC/D,MAAM,OAAO,GAAG;;EAEhB,KAAK;;;;YAIK,GAAG,kBAAkB,IAAI;;;;;YAKzB,GAAG,6EAA6E,CAAC;IAE3F,wFAAwF;IACxF,EAAE;IACF,uFAAuF;IACvF,qFAAqF;IACrF,MAAM,YAAY,GAAG;EACrB,KAAK;;;YAGK,GAAG,4BAA4B,IAAI;;;;;;EAM7C,KAAK;;;;;;YAMK,GAAG,4BAA4B,IAAI;;6GAE8D,CAAC;IAE5G,0FAA0F;IAC1F,6EAA6E;IAC7E,MAAM,aAAa,GAAG,YAAY,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,YAAY,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAErF,MAAM,WAAW,GAAG;;;;;;;;;6BASO,YAAY;;6BAEZ,aAAa;;;;iGAIuD,sBAAsB;;;;;aAK1G,CAAC;IAEZ,2FAA2F;IAC3F,4FAA4F;IAC5F,4CAA4C;IAC5C,MAAM,OAAO,GAAG;;;;;;;;;;EAUhB,KAAK;eACQ,GAAG,0BAA0B,IAAI,uCAAuC,CAAC;IAEtF,MAAM,WAAW,GAAG,OAAO,KAAK,YAAY;QAC1C,CAAC,CAAC;6FACuF;QACzF,CAAC,CAAC,qCAAqC,MAAM;8EAC6B,CAAC;IAE7E,OAAO;;;;;;;;;;;;iBAYQ,MAAM;;;;;;;;EAQrB,WAAW;;;;EAIX,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;EAC/C,QAAQ;EACR,OAAO;;;;;;;;;;;EAWP,KAAK,EAAE;EACP,YAAY;EACZ,WAAW;;EAEX,OAAO;CACR,CAAC;AACF,CAAC"}