@superblocksteam/vite-plugin-file-sync 2.0.137 → 2.0.138-next.0

package/dist/ai-service/app-interface/npm-registry.d.ts

@@ -1,13 +1,3 @@
-/**
- * Scopes whose existing `<scope>:registry=` lines in a project / pod `.npmrc`
- * must survive `writeNpmrc` calls. Shared between AppShell, TemplateRenderer,
- * and any other call site so a new scope only needs to be added in one place.
- *
- * `setup-template.sh` bakes
- * `@superblocksteam:registry=https://npm.pkg.github.com/` into the template
- * `.npmrc` for ephemeral environments; we must not clobber it.
- */
-export declare const PRESERVE_NPMRC_SCOPES: string[];
 /**
  * Wire shape for a single registry row returned by
  * `GET /api/v1/organizations/:orgId/npm-registry`. Mirrors the server's
@@ -16,12 +6,16 @@ export declare const PRESERVE_NPMRC_SCOPES: string[];
  *
  * `scope === null` is the default (unscoped) registry; otherwise it is a
  * single npm scope like `"@mycompany"`.
+ *
+ * `registryUrl` is the Superblocks npm proxy URL (the server rewrites each
+ * row to it). There is no token here: the auth token is the machine's own
+ * Superblocks login, stamped in by `registriesToConfig`, not a per-registry
+ * secret.
  */
 export interface NpmRegistryEntry {
     id: string;
     scope: string | null;
     registryUrl: string;
-    token: string | null;
 }
 /**
  * Renderable npm registry configuration. This is the shape `writeNpmrc`
@@ -145,20 +139,27 @@ export interface LastKnownRegistryPolicyStore {
  */
 export declare function shouldIgnoreInstallScripts(result: NpmRegistryFetchResult | undefined): boolean;
 /**
- * Translates a list of server-shaped registry entries into the renderable
- * `NpmRegistryConfig`. Centralised so `writeNpmrc`, tests, and any future
- * consumer all interpret the wire shape the same way.
- *
- * Multiple `scope === null` entries should never happen — the server's
- * UNIQUE (organization_id, scope) constraint forbids it — but we are
- * defensive: the FIRST default wins, subsequent ones are logged and
- * discarded so a server-side bug never silently rotates the default URL
- * mid-fetch.
- *
- * Duplicate scoped entries (same `scope` string) follow the same rule:
- * first wins.
+ * True only when `registryUrl` is genuinely the Superblocks npm proxy for THIS
+ * org on THIS server (matching origin AND the org-scoped `/npm-proxy` path).
+ *
+ * The client stamps the machine's own Superblocks login token onto every row
+ * `/config` returns. That is only safe if every row really is our proxy: a
+ * version-skewed or misconfigured server could return a customer's upstream
+ * registry URL (or a broken one built from an empty external-server URL), and
+ * blindly stamping the login token onto that would leak a Superblocks
+ * credential to a third-party host. So the client proves the proxy invariant
+ * before stamping and fails closed when it does not hold.
+ *
+ * Compares parsed origin + pathname (not a raw string prefix) so trailing
+ * slashes and default ports can't cause a false negative, and requires a path
+ * boundary so a lookalike like `…/npm-proxyEVIL` can't slip through. Also
+ * rejects anything the canonical proxy URL never carries — embedded
+ * userinfo (`https://user:pass@host/…` shares the host's `origin` but is not
+ * our proxy URL) and any query/fragment — so a crafted URL can't satisfy the
+ * origin check while smuggling something else into `.npmrc`.
  */
-export declare function registriesToConfig(entries: NpmRegistryEntry[], allowInstallScripts?: boolean): NpmRegistryConfig;
+export declare function isSuperblocksNpmProxyUrl(registryUrl: string, baseUrl: string, organizationId: string): boolean;
+export declare function registriesToConfig(entries: NpmRegistryEntry[], allowInstallScripts?: boolean, authToken?: string): NpmRegistryConfig;
 /**
  * Dependencies the `NpmRegistryClient` needs to fetch from the server.
  * Injected so the client itself stays free of `fs`, `~/.superblocks/auth.json`
@@ -239,6 +240,30 @@ export interface NpmRegistryClientDeps {
      */
     lastKnownPolicyStore?: LastKnownRegistryPolicyStore;
 }
+/**
+ * Per-call options for `NpmRegistryClient.getConfig`.
+ */
+export interface GetConfigOptions {
+    /**
+     * Skip the in-memory TTL cache and re-fetch from the server. Used by the
+     * just-in-time call sites (`.npmrc` synthesis before an install, package
+     * lookups, home-npmrc sync) so an admin clearing or changing the org's
+     * registry takes effect immediately rather than after the TTL expires.
+     * The last-known-good fallback on a server outage is unaffected — only
+     * the cache-hit read is bypassed.
+     */
+    forceRefresh?: boolean;
+    /**
+     * Freshness floor (ms) for a forced read: serve the cache if it is younger
+     * than this, otherwise re-fetch. Defaults to 0, which means a forced read
+     * always re-fetches (full bypass). Only meaningful when `forceRefresh` is
+     * set. The hot lookup path passes a small floor so a tight sequential batch
+     * of per-package lookups collapses onto one config fetch instead of one per
+     * package; the install/home `.npmrc` boundaries leave it at 0 so they always
+     * observe an admin change immediately.
+     */
+    forceRefreshMaxAgeMs?: number;
+}
 /**
  * Fetches per-org npm registry configuration from the server, caching the
  * result in-memory with a short TTL. Designed so callers do not have to
@@ -381,30 +406,61 @@ export declare class NpmRegistryClient {
     /**
      * Resolve the current npm registry configuration for the active org. See
      * the class docstring for the full state machine.
+     *
+     * `forceRefresh` bypasses the TTL cache-hit return below so a just-in-time
+     * caller (the `.npmrc` writer before an install, a package lookup, the
+     * home-npmrc sync) observes an admin clearing or changing the registry
+     * immediately instead of waiting out the TTL. `forceRefreshMaxAgeMs` lets a
+     * high-frequency caller (the package lookup) keep a small freshness floor so
+     * a tight sequential batch collapses onto one fetch; left at 0 (install /
+     * home sync) a forced read always re-fetches. It does NOT touch the cache
+     * before fetching: `serveStaleOrUnconfigured` still needs the last-known-good
+     * entries to fall back to during a 5xx/network outage. The flag-off
+     * short-circuit, inflight dedup, and all hard-fail branches behave
+     * identically.
      */
-    getConfig(): Promise<NpmRegistryFetchResult>;
+    getConfig(options?: GetConfigOptions): Promise<NpmRegistryFetchResult>;
     private fetchWithRefresh;
     /**
      * One full fetch attempt with the current JWT. Throws on getJwt failure
      * OR network failure so the caller's single try/catch handles both.
      */
     private attempt;
+    /**
+     * Signal when `lastKnownPolicy` supplied the install-scripts policy that the
+     * in-memory cache could not (`cachePolicy == null && lastKnownPolicy !=
+     * null`). That combination means an earlier auth-failure or 4xx branch wiped
+     * the cache and we fell back to the surviving policy, which is a sign
+     * something went wrong. Emit a WARN (with `orgId` and which branch ran) plus
+     * a low-cardinality counter so it can be alerted on from a dashboard without
+     * digging through logs or traces. `cachePolicy` is passed in (not re-read)
+     * because the 404 branch overwrites `this.cache` before this runs.
+     */
+    private signalPolicyFallback;
+    /**
+     * Render cached/fetched entries into a config, stamping the machine's current
+     * Superblocks login token onto every proxied registry (`registryUrl` is the
+     * proxy URL the server rewrote each row to). Read fresh each call so the
+     * `.npmrc` the caller writes right after carries a current token. `getJwt()`
+     * resolves immediately when a token is already primed, so this stays cheap on
+     * the cache-hit fast path; it throws only when no token is available, in
+     * which case there is no way to build a working proxy `.npmrc`.
+     */
+    private renderConfig;
+    /**
+     * Build a `configured` result, but route a JWT-read failure through the same
+     * fail-closed path as `serveStaleOrUnconfigured`. `renderConfig` reads the
+     * login token via `getJwt()`, which can reject (no token primed). A missing
+     * token is the same "we can't build a working proxy `.npmrc`" condition the
+     * stale path already treats as `unreachable`, so both the cache-hit and the
+     * fresh-fetch success paths must resolve it the same way rather than throwing
+     * out of `getConfig()`. With a warm cache this serves last-known-good; with
+     * no usable cache it reports `unreachable`.
+     */
+    private renderConfigured;
     private serveStaleOrUnconfigured;
 }
 export interface WriteNpmrcOptions {
-    /**
-     * Scope prefixes (e.g. `@superblocksteam`) whose existing
-     * `<scope>:registry=` lines must survive — together with every
-     * auth-family key (`_authToken`, `_password`, `username`, `email`,
-     * `_auth`) keyed on the same `//<origin>/` prefix as
-     * the preserved registry URL. Used to keep scope mappings baked into a
-     * template `.npmrc` by setup-template.sh in EE builds, including the
-     * GHPR token that authenticates `@superblocksteam/*` installs
-     * (APPS-4300). When the same scope is also overridden in
-     * `config.scopes`, both the registry line and its auth-family lines
-     * are dropped in favour of the override.
-     */
-    preserveScopeLines?: string[];
     /**
      * POSIX file mode for the written `.npmrc`. Defaults to `0o600` (owner
      * read/write) because the per-install-site writers rewrite the file on
@@ -443,14 +499,6 @@ export interface WriteNpmrcOptions {
  *     does not validate scope names.
  *   - https-only registry URLs: npm itself accepts http.
  *
- * When `preserveScopeLines` is provided, any existing `<scope>:registry=`
- * keys for those scopes are preserved (so EE-baked
- * `@superblocksteam:registry=https://npm.pkg.github.com/` survives) UNLESS
- * the same scope is explicitly overridden in `config.scopes`. The
- * preserved value is read via `ini.parse` from the existing file, so
- * `ini`'s own quoting rules apply (rather than our older line-grep that
- * could mis-handle quoted values).
- *
  * Idempotent: rewrites the file in full each call. Writes are atomic (tmp +
  * rename) and the file mode is restricted to 0600 because the file may carry
  * an auth token.
@@ -732,7 +780,7 @@ export declare function ensureNpmrcGitignored(dir: string): Promise<EnsureNpmrcG
  * Returns the resolved fetch result so callers can branch on `source` for
  * observability, or `undefined` when no client was provided.
  */
-export declare function maybeWriteNpmrcForDir(dir: string, options?: WriteNpmrcOptions, client?: NpmRegistryClient): Promise<NpmRegistryFetchResult | undefined>;
+export declare function maybeWriteNpmrcForDir(dir: string, client?: NpmRegistryClient): Promise<NpmRegistryFetchResult | undefined>;
 /**
  * Materializes the private-registry `.npmrc` AND unconditionally strips
  * `resolved` URLs from any lockfile present in `dir`, so a subsequent
@@ -766,7 +814,7 @@ export declare function maybeWriteNpmrcForDir(dir: string, options?: WriteNpmrcO
  * can branch on `source` for observability), or `undefined` when no client
  * was provided. The lockfile strip happens in both cases.
  */
-export declare function prepareForPrivateRegistry(dir: string, options?: WriteNpmrcOptions, client?: NpmRegistryClient): Promise<NpmRegistryFetchResult | undefined>;
+export declare function prepareForPrivateRegistry(dir: string, client?: NpmRegistryClient): Promise<NpmRegistryFetchResult | undefined>;
 /**
  * Removes the `resolved` field from every entry in `.packages` of an npm v2+
  * lockfile. TS-side counterpart to `scripts/strip-lockfile-resolved.sh`.

package/dist/ai-service/app-interface/npm-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-registry.d.ts","sourceRoot":"","sources":["../../../src/ai-service/app-interface/npm-registry.ts"],"names":[],"mappings":"AAgHA;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,UAAuB,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACvD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;;;;;;;;OAgBG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,4BAA4B;IAC3C,6DAA6D;IAC7D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,8EAA8E;IAC9E,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAAG,SAAS,GACzC,OAAO,CAET;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,mBAAmB,CAAC,EAAE,OAAO,GAC5B,iBAAiB,CAwCnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;OAQG;IACH,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B;;;;OAIG;IACH,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,4BAA4B,CAAC;CACrD;AAwED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAMnB;IACF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK,CAMC;IACd;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,QAAQ,CAA8C;IAC9D;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,eAAe,CAAsB;gBAEjC,IAAI,EAAE,qBAAqB;IAcvC;;;;;OAKG;IACH,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED;;;;;;;;OAQG;IACH,eAAe,IAAI,IAAI;IAIvB;;;;;;;;;;;;;;;;;;;OAmBG;YACW,oBAAoB;IAkBlC;;;;;OAKG;YACW,kBAAkB;IAmBhC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,sBAAsB,CAAC;YA4EpC,gBAAgB;IAsN9B;;;OAGG;YACW,OAAO;YAaP,wBAAwB;CA+DvC;AAmCD,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgPf;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,QAAQ,GACR,WAAW,GACX,QAAQ,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,2BAA2B,CAAC,CA0BtC;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;;;;;;OAcG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Gf;AAWD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;2BAMuB;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AAyeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,2BAA2B,CAAC,CAuFtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,iBAAsB,EAC/B,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAsG7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,iBAAsB,EAC/B,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAyB7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAoGf;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,4BAA4B,CAoE/B;AAKD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/E,YAAY,EACV,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"npm-registry.d.ts","sourceRoot":"","sources":["../../../src/ai-service/app-interface/npm-registry.ts"],"names":[],"mappings":"AA0HA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACvD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;;;;;;;;OAgBG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,4BAA4B;IAC3C,6DAA6D;IAC7D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,8EAA8E;IAC9E,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAAG,SAAS,GACzC,OAAO,CAET;AAsED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAsBT;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,mBAAmB,CAAC,EAAE,OAAO,EAC7B,SAAS,CAAC,EAAE,MAAM,GACjB,iBAAiB,CAwCnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;OAQG;IACH,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B;;;;OAIG;IACH,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,4BAA4B,CAAC;CACrD;AAID;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAsED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAMnB;IACF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK,CAMC;IACd;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,QAAQ,CAA8C;IAC9D;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,eAAe,CAAsB;gBAEjC,IAAI,EAAE,qBAAqB;IAcvC;;;;;OAKG;IACH,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED;;;;;;;;OAQG;IACH,eAAe,IAAI,IAAI;IAIvB;;;;;;;;;;;;;;;;;;;OAmBG;YACW,oBAAoB;IAkBlC;;;;;OAKG;YACW,kBAAkB;IAmBhC;;;;;;;;;;;;;;;OAeG;IACG,SAAS,CACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;YA4FpB,gBAAgB;IAmP9B;;;OAGG;YACW,OAAO;IAkBrB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;;;;;;;OAQG;YACW,YAAY;IAQ1B;;;;;;;;;OASG;YACW,gBAAgB;YAahB,wBAAwB;CAwFvC;AAmCD,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA0Ff;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,QAAQ,GACR,WAAW,GACX,QAAQ,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,2BAA2B,CAAC,CA0BtC;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;;;;;;OAcG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Gf;AAWD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;2BAMuB;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AAyeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,2BAA2B,CAAC,CAuFtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CA0G7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAyB7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAoGf;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,4BAA4B,CAoE/B;AAKD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/E,YAAY,EACV,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,aAAa,CAAC"}