@vaharoni/devops 1.0.47

package/README.md

@@ -0,0 +1,51 @@
+# devops for Monorepos
+
+Monorepos support multiple apps, allowing them to reuse functionality through shared libraries. `devops` is a tool that helps deploy and manage such setup on a kubernetes cluster using github actions. 
+
+`devops` is...
+- **a generator** - it generates boilerplate code when starting a new monorepo, such as github actions and docker images
+- **a CLI** - making it easy to manage your local and remote env variables, connect to your remote databases, or launch remote console
+- **a builder** - identifies which folders need to reside in which docker image through dependency discovery
+- **a gitops deployer** - sets up github actions to watch pushes to `staging` and `production` branches, identifies which images are affected by those commits, and determines whether to run db migrations
+- **an SDK** - helps with inter-application communication, by addressing the minor differences between local and remote environments in the DNS of endpoints, and by issuing tokens so that apps can validate traffic originated from within the cluster
+- **a scheduler** - leverages kubernetes to execute curl commands to your endpoints at a certain cron schedule to trigger some background processes
+- **a set of instructions** - for how to install kubernetes clusters from scratch with support for multi environments, postgres, and redis
+
+`devops` currently supports node and python. The repo that contains the python CLI can be found [here](https://github.com/vaharoni/devops-python).
+
+# Documentation
+
+- [Repo setup](./docs/RepoSetup.md)
+- [Working with Python](./docs/WorkingWithPython.md)
+- [Day to day work](./docs/DayToDay.md)
+- [The devops architecture](./docs/Architecture.md)
+
+# Limitations
+
+Currently, the repo works with `bun` as the package manager for node and `uv` for python.
+
+# Contributing
+
+Run this in your local copy of the devops folder:
+```shell
+bun link
+```
+
+Run this in a local package using the project for testing:
+```shell
+bun link @vaharoni/devops
+bun run build
+```
+
+When done:
+```shell
+# In the local copy of this repo
+bun unlink
+```
+
+To release:
+```shell
+npm version patch
+git push --tags
+gh release create vX.Y.Z
+```

package/dist/app-support/crypto/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * A simple token generation/verification class that relies on the subject field of an internal JWT-like token. It can:
+ * - generate a short-lived (60s) token with the given subject
+ * - verify that a token has not expired and bears the given subject
+ *
+ * Relies on the MONOREPO_BASE_SECRET environment variable for signing and verifying the token.
+ */
+export declare class InternalToken {
+    subject: string;
+    constructor(subject: string);
+    generate(): string;
+    verifyOrThrow(token: string): void;
+    verifyFromHeaderOrThrow(authorizationHeader?: string | null): void;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/app-support/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app-support/crypto/index.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,qBAAa,aAAa;IACL,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;IAElC,QAAQ;IAIR,aAAa,CAAC,KAAK,EAAE,MAAM;IAO3B,uBAAuB,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI;CAO5D"}

package/dist/app-support/crypto/index.js

@@ -0,0 +1,30 @@
+import { generateInternalAuthToken, parseInternalAuthTokenOrThrow } from "./internal-token";
+/**
+ * A simple token generation/verification class that relies on the subject field of an internal JWT-like token. It can:
+ * - generate a short-lived (60s) token with the given subject
+ * - verify that a token has not expired and bears the given subject
+ *
+ * Relies on the MONOREPO_BASE_SECRET environment variable for signing and verifying the token.
+ */
+export class InternalToken {
+    subject;
+    constructor(subject) {
+        this.subject = subject;
+    }
+    generate() {
+        return generateInternalAuthToken({ sub: this.subject });
+    }
+    verifyOrThrow(token) {
+        const parsedToken = parseInternalAuthTokenOrThrow(token);
+        if (parsedToken.sub !== this.subject) {
+            throw new Error('Invalid token');
+        }
+    }
+    verifyFromHeaderOrThrow(authorizationHeader) {
+        if (!authorizationHeader) {
+            throw new Error('Authorization header not found');
+        }
+        const token = authorizationHeader.replace('Bearer ', '');
+        this.verifyOrThrow(token);
+    }
+}

package/dist/app-support/crypto/internal-token.d.ts

@@ -0,0 +1,20 @@
+export type InternalTokenClaims<CustomClaims extends object = object> = CustomClaims & {
+    /** The token issuer */
+    iss: string;
+    /** Issued at */
+    iat: number;
+    /** Expires at */
+    exp: number;
+    /** The subject of the token. Should contain a string of the "service account" who bears the token. */
+    sub?: string;
+    /** The audience of the token. Should contain a string of who the token is intended for. */
+    aud?: string;
+};
+export declare function generateInternalAuthToken({ customClaims, expiresInSeconds, sub, aud, }?: {
+    customClaims?: Record<string, string>;
+    expiresInSeconds?: number;
+    sub?: string;
+    aud?: string;
+}): string;
+export declare function parseInternalAuthTokenOrThrow<CustomClaims extends object = object>(token: string): InternalTokenClaims<CustomClaims>;
+//# sourceMappingURL=internal-token.d.ts.map

package/dist/app-support/crypto/internal-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-token.d.ts","sourceRoot":"","sources":["../../../src/app-support/crypto/internal-token.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,mBAAmB,CAAC,YAAY,SAAS,MAAM,GAAG,MAAM,IAClE,YAAY,GAAG;IACb,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AA4BJ,wBAAgB,yBAAyB,CAAC,EACxC,YAAiB,EACjB,gBAAqB,EACrB,GAAG,EACH,GAAG,GACJ,GAAE;IACD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACT,UAUL;AAED,wBAAgB,6BAA6B,CAAC,YAAY,SAAS,MAAM,GAAG,MAAM,EAChF,KAAK,EAAE,MAAM,GACZ,mBAAmB,CAAC,YAAY,CAAC,CAcnC"}

package/dist/app-support/crypto/internal-token.js

@@ -0,0 +1,42 @@
+import { getConst } from '../../libs/config';
+import { sign, verify } from './secret';
+class InternalTokenError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InternalTokenError';
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+function defaultClaims({ expiresInSeconds, sub, aud, }) {
+    return {
+        iss: `${getConst('project-name')}-internal`,
+        iat: Math.floor(Date.now() / 1000),
+        exp: Math.floor(Date.now() / 1000) + expiresInSeconds,
+        sub,
+        aud,
+    };
+}
+export function generateInternalAuthToken({ customClaims = {}, expiresInSeconds = 60, sub, aud, } = {}) {
+    const data = {
+        ...customClaims,
+        // This should be after the customClaims so that custom claims cannot override the default claims
+        ...defaultClaims({ expiresInSeconds, sub, aud }),
+    };
+    const str = JSON.stringify(data);
+    const encodedData = Buffer.from(str).toString('base64');
+    const signature = sign(encodedData);
+    return `${encodedData}.${signature}`;
+}
+export function parseInternalAuthTokenOrThrow(token) {
+    const [encodedData, signature] = token.split('.');
+    const isSignatureOk = verify(encodedData, signature);
+    if (!isSignatureOk) {
+        throw new InternalTokenError('Invalid token');
+    }
+    const dataStr = Buffer.from(encodedData, 'base64').toString('utf-8');
+    const data = JSON.parse(dataStr);
+    if (data.exp < Math.floor(Date.now() / 1000)) {
+        throw new InternalTokenError('Token expired');
+    }
+    return data;
+}

package/dist/app-support/crypto/internal-token.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=internal-token.spec.d.ts.map

package/dist/app-support/crypto/internal-token.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-token.spec.d.ts","sourceRoot":"","sources":["../../../src/app-support/crypto/internal-token.spec.ts"],"names":[],"mappings":""}

package/dist/app-support/crypto/internal-token.spec.js

@@ -0,0 +1,45 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { generateInternalAuthToken, parseInternalAuthTokenOrThrow } from './internal-token';
+vi.mock('../../libs/config', () => ({
+    getConst: () => 'test',
+}));
+describe('generate and verify internal token', () => {
+    beforeEach(() => {
+        process.env.MONOREPO_BASE_SECRET = '1234567890abcdef';
+    });
+    it('works for default tokens', () => {
+        const token = generateInternalAuthToken();
+        const parsedPayload = parseInternalAuthTokenOrThrow(token);
+        expect(parsedPayload.iss).toEqual('test-internal');
+        expect(parsedPayload.exp - parsedPayload.iat).toEqual(60);
+    });
+    it('works for custom tokens', () => {
+        const payload = { hello: 'world' };
+        const token = generateInternalAuthToken({
+            customClaims: payload,
+            expiresInSeconds: 30,
+            aud: 'aud',
+            sub: 'sub',
+        });
+        const parsedPayload = parseInternalAuthTokenOrThrow(token);
+        expect(parsedPayload.iss).toEqual('test-internal');
+        expect(parsedPayload.exp - parsedPayload.iat).toEqual(30);
+        expect(parsedPayload.hello).toEqual('world');
+        expect(parsedPayload.aud).toEqual('aud');
+        expect(parsedPayload.sub).toEqual('sub');
+    });
+    it('throws for expired tokens', () => {
+        const invalidToken = generateInternalAuthToken({
+            expiresInSeconds: -1,
+        });
+        expect(() => parseInternalAuthTokenOrThrow(invalidToken)).toThrowError('Token expired');
+    });
+    it('throws for invalid signature', () => {
+        const payload = { hello: 'world' };
+        const token = generateInternalAuthToken({
+            customClaims: payload,
+        });
+        const invalidToken = token.replace(/.$/, 'x');
+        expect(() => parseInternalAuthTokenOrThrow(invalidToken)).toThrowError('Invalid token');
+    });
+});

package/dist/app-support/crypto/secret.d.ts

@@ -0,0 +1,3 @@
+export declare function sign(data: string): string;
+export declare function verify(data: string, signature: string): boolean;
+//# sourceMappingURL=secret.d.ts.map

package/dist/app-support/crypto/secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.d.ts","sourceRoot":"","sources":["../../../src/app-support/crypto/secret.ts"],"names":[],"mappings":"AAEA,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,UAKhC;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,WAGrD"}

package/dist/app-support/crypto/secret.js

@@ -0,0 +1,12 @@
+import { createHmac } from 'crypto';
+export function sign(data) {
+    const keyStr = process.env.MONOREPO_BASE_SECRET;
+    if (!keyStr)
+        throw new Error('Secret not set');
+    const key = Buffer.from(keyStr, 'hex');
+    return createHmac('sha256', key).update(data).digest('hex');
+}
+export function verify(data, signature) {
+    const generatedSignature = sign(data);
+    return generatedSignature === signature;
+}

package/dist/app-support/crypto/secret.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret.spec.d.ts.map

package/dist/app-support/crypto/secret.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.spec.d.ts","sourceRoot":"","sources":["../../../src/app-support/crypto/secret.spec.ts"],"names":[],"mappings":""}

package/dist/app-support/crypto/secret.spec.js

@@ -0,0 +1,15 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { sign, verify } from './secret';
+describe('sign and verify', () => {
+    beforeEach(() => {
+        process.env.MONOREPO_BASE_SECRET = '1234567890abcdef';
+    });
+    it('verify should return true for correct signature', async () => {
+        const sig = sign('data');
+        expect(verify('data', sig)).toEqual(true);
+    });
+    it('verify should return false for correct signature', async () => {
+        const sig = sign('data');
+        expect(verify('data2', sig)).toEqual(false);
+    });
+});

package/dist/app-support/discovery/dev-discovery-loader.d.ts

@@ -0,0 +1,2 @@
+export declare function getPortForServiceName(serviceName: string): number;
+//# sourceMappingURL=dev-discovery-loader.d.ts.map

package/dist/app-support/discovery/dev-discovery-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-discovery-loader.d.ts","sourceRoot":"","sources":["../../../src/app-support/discovery/dev-discovery-loader.ts"],"names":[],"mappings":"AAgCA,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,UAExD"}

package/dist/app-support/discovery/dev-discovery-loader.js

@@ -0,0 +1,30 @@
+import { workspaces } from "../../libs/discovery";
+let _portLookupByServiceName = null;
+function getPortLookup() {
+    if (_portLookupByServiceName)
+        return _portLookupByServiceName;
+    if (process.env["IS_KUBERNETES"] === "true") {
+        throw new Error("getPortLookup() should only be used in local development. In production, the service name is sufficient.");
+    }
+    _portLookupByServiceName = {};
+    Object.values(workspaces()).forEach((workspace) => {
+        workspace.packageDataEntries.forEach((pkg) => {
+            const serviceName = pkg.deployment?.service_name;
+            const port = pkg.deployment?.port;
+            if (!serviceName || !port)
+                return;
+            const existing = _portLookupByServiceName[serviceName];
+            if (!existing) {
+                _portLookupByServiceName[serviceName] = port;
+            }
+            else if (existing !== port) {
+                console.error(`Service name ${serviceName} has conflicting ports: ${existing} and ${port}`);
+                process.exit(1);
+            }
+        });
+    });
+    return _portLookupByServiceName;
+}
+export function getPortForServiceName(serviceName) {
+    return getPortLookup()[serviceName];
+}

package/dist/app-support/discovery/service-endpoint.d.ts

@@ -0,0 +1,2 @@
+export declare function getServiceEndpoint(serviceName: string): string;
+//# sourceMappingURL=service-endpoint.d.ts.map

package/dist/app-support/discovery/service-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-endpoint.d.ts","sourceRoot":"","sources":["../../../src/app-support/discovery/service-endpoint.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAS9D"}

package/dist/app-support/discovery/service-endpoint.js

@@ -0,0 +1,10 @@
+import { getPortForServiceName } from "./dev-discovery-loader";
+export function getServiceEndpoint(serviceName) {
+    if (process.env["IS_KUBERNETES"] === "true") {
+        return `http://${serviceName}`;
+    }
+    const servicePort = getPortForServiceName(serviceName);
+    if (!servicePort)
+        throw new Error(`Port not found for service ${serviceName}`);
+    return `http://127.0.0.1:${servicePort}`;
+}

package/dist/cli/affected.d.ts

@@ -0,0 +1,11 @@
+import { CLICommandParser } from "./common";
+declare function run(cmdObj: CLICommandParser): Promise<void>;
+declare const _default: {
+    affected: {
+        oneLiner: string;
+        keyExamples: string;
+        run: typeof run;
+    };
+};
+export default _default;
+//# sourceMappingURL=affected.d.ts.map

package/dist/cli/affected.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"affected.d.ts","sourceRoot":"","sources":["../../src/cli/affected.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAmC,MAAM,UAAU,CAAC;AAoD7E,iBAAe,GAAG,CAAC,MAAM,EAAE,gBAAgB,iBAoD1C;;;;;;;;AAED,wBAEE"}

package/dist/cli/affected.js

@@ -0,0 +1,103 @@
+import { findImagesAffected, findImagesWithAffectedWorkspace, isImageAffected, isWorkspaceAffected, } from "../libs/affected-entities";
+import { getImageData } from "../libs/config";
+import { CLICommandParser, printUsageAndExit, StrongParams } from "./common";
+const oneLiner = "Command to check whether an image or a workspace is affected by certain commit(s)";
+const keyExamples = `
+    $ devops affected list-images
+    $ devops affected workspace db --base <sha1> --head <sha2>
+    $ devops affected image main-node --from-live-version
+    $ devops affected find-migrator --from-live-version
+`;
+const usage = `
+${oneLiner}
+
+GENERAL USAGE
+  List
+    devops affected list-images --base [SHA1] --head [SHA2]
+    devops affected list-images --from-live-version
+
+    These return a list of all images affected by the given commits.
+
+  Checkers
+    devops affected workspace <workspace> --base [SHA1] --head [SHA2]
+
+    devops affected image     <image>     --base [SHA1] --head [SHA2]
+    devops affected image     <image>     --from-live-version
+
+    These return "true" or "false". 
+
+  Finders
+    devops affected find-migrator --base [SHA1] --head [SHA2]
+    devops affected find-migrator --from-live-version
+
+    When --base and --head are used, it checks whether the db project is affected. If it is, it returns the name of one random 
+    affected image.
+    When --from-live-version is used, it iterates on the live version of each image that depends on db, and returns the first image that is 
+    affected by a db project change since that commit.
+
+    If the db project is unaffected, returns an empty string.
+
+  Options
+    Which commits are regarded for the affected calculation can be changed using:
+    --base               Base of the current branch (HEAD^ by default)
+    --head               Latest commit of the current branch (HEAD by default)
+    --from-live-version  Use the live version of the image/workspace as the base (see devops image version get)
+
+    If --from-live-version is present, --base and --head are ignored.
+
+EXAMPLES
+    ${keyExamples.trim()}
+`;
+async function run(cmdObj) {
+    const options = cmdObj.parseOptions({
+        params: ["--base", "--head"],
+        booleans: ["--from-live-version"],
+    });
+    if (cmdObj.help || options.args.length < 1)
+        printUsageAndExit(usage);
+    const baseSha = options.options["--base"]?.toString();
+    const headSha = options.options["--head"]?.toString();
+    const fromLiveVersion = Boolean(options.options["--from-live-version"]);
+    const commonOpts = {
+        baseSha,
+        headSha,
+        fromLiveVersion,
+        monorepoEnv: cmdObj.env,
+    };
+    const [cmd, imageOrWorkspace] = options.args;
+    const params = new StrongParams(usage, { imageOrWorkspace });
+    switch (cmd) {
+        case "list-images": {
+            console.log(findImagesAffected(commonOpts).join("\n"));
+            break;
+        }
+        case "workspace": {
+            // prettier-ignore
+            const affected = isWorkspaceAffected(params.required("imageOrWorkspace"), commonOpts);
+            console.log(affected ? "true" : "false");
+            break;
+        }
+        case "image": {
+            const affected = isImageAffected(params.required("imageOrWorkspace"), commonOpts);
+            console.log(affected ? "true" : "false");
+            break;
+        }
+        case "find-migrator": {
+            const migrator = findImagesWithAffectedWorkspace("db", commonOpts);
+            if (!migrator.length)
+                break;
+            const firstMigrator = migrator.find(imageName => getImageData(imageName)["can-db-migrate"]);
+            if (!firstMigrator) {
+                console.error(`The db project was changed and affects the following images: ${migrator.join(", ")}. However, no image in the list has can-db-migrate=true in .devops/config/images.yaml.`);
+                process.exit(1);
+            }
+            console.log(firstMigrator);
+            break;
+        }
+        default:
+            printUsageAndExit(usage);
+    }
+}
+export default {
+    affected: { oneLiner, keyExamples, run },
+};

package/dist/cli/common.d.ts

@@ -0,0 +1,89 @@
+type ParsedArgs = {
+    args: string[];
+    argsStr: string;
+    options: {
+        [key: string]: string | boolean;
+    };
+    passthrough?: string[];
+};
+export declare class CLICommandParser {
+    command: string;
+    args: string[];
+    env: string;
+    envForced: boolean;
+    help: boolean;
+    skipEnvCheck: boolean;
+    constructor(cmdArray: string[]);
+    executorFromEnv(commandStr: string, options?: Omit<CommandExecutorOptions, "env">): CommandExecutor;
+    parseOptions({ params, booleans, passthroughArgs, }?: {
+        /** Param is used like so: --param value */
+        params?: string[];
+        /** Boolean flag is used like so: --flag */
+        booleans?: string[];
+        /** Pass through args are used like so: -- arg1 arg2 */
+        passthroughArgs?: boolean;
+    }): ParsedArgs;
+    _validateEnv(env: string): boolean;
+    _separateOptions(args: string[], { params, booleans, passthroughArgs, }?: {
+        params?: string[];
+        booleans?: string[];
+        passthroughArgs?: boolean;
+    }): ParsedArgs;
+}
+type CommandExecutorOptions = {
+    env?: string;
+    quiet?: boolean;
+    checkEnvYaml?: boolean;
+    redactedCommand?: string;
+};
+export declare class CommandExecutor {
+    commandStr: string;
+    env?: string;
+    quiet: boolean;
+    redactedCommand?: string;
+    checkEnvYaml: boolean;
+    constructor(commandStr: string, { env, quiet, redactedCommand, checkEnvYaml, }?: CommandExecutorOptions);
+    /** Non-interactive use only. stdout is returned. */
+    exec(options?: {
+        onlyStatusCode?: false;
+        asObject?: false;
+        env?: object;
+    }): string;
+    exec(options: {
+        onlyStatusCode?: false;
+        asObject: true;
+        env?: object;
+    }): {
+        statusCode: number;
+        stdout: string;
+        stderr: string;
+    };
+    exec(options: {
+        onlyStatusCode: true;
+        asObject?: boolean;
+        env?: object;
+    }): number;
+    /** Should be used for CLI commands intended to be used locally. Provides interactivity. Unlike exec(), stdout is not returned. */
+    spawn({ env }?: {
+        env?: {} | undefined;
+    }): Promise<unknown>;
+    _prepareFullCommand(): string;
+    _getProcessEnv(envOverride?: {}): {
+        MONOREPO_ENV: string | undefined;
+        TZ?: string;
+        NODE_ENV?: string;
+    };
+    _envInjectorPrefix(): string;
+    _checkEnvYamlFiles(): void;
+}
+export declare function dotEnvFilesForEnv(env?: string): string[];
+export declare function printUsageAndExit(text: string): never;
+export declare class StrongParams {
+    private usage;
+    private args;
+    constructor(usage: string, args: Record<string, string | undefined>);
+    required(key: string): string;
+    optional(key: string): string | undefined;
+}
+export {};
+//# sourceMappingURL=common.d.ts.map

package/dist/cli/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/cli/common.ts"],"names":[],"mappings":"AAMA,KAAK,UAAU,GAAG;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAQF,qBAAa,gBAAgB;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;gBAEV,QAAQ,EAAE,MAAM,EAAE;IAsB9B,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAM,GAChD,eAAe;IAiBlB,YAAY,CAAC,EACX,MAAW,EACX,QAAa,EACb,eAAuB,GACxB,GAAE;QACD,2CAA2C;QAC3C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,2CAA2C;QAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,uDAAuD;QACvD,eAAe,CAAC,EAAE,OAAO,CAAC;KACtB,GAAG,UAAU;IAQnB,YAAY,CAAC,GAAG,EAAE,MAAM;IAWxB,gBAAgB,CACd,IAAI,EAAE,MAAM,EAAE,EACd,EACE,MAAW,EACX,QAAa,EACb,eAAuB,GACxB,GAAE;QACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,OAAO,CAAC;KACtB,GACL,UAAU;CA8Bd;AAED,KAAK,sBAAsB,GAAG;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AACF,qBAAa,eAAe;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;gBAGpB,UAAU,EAAE,MAAM,EAClB,EACE,GAAG,EACH,KAAa,EACb,eAAe,EACf,YAAoB,GACrB,GAAE,sBAA2B;IAShC,oDAAoD;IACpD,IAAI,CAAC,OAAO,CAAC,EAAE;QACb,cAAc,CAAC,EAAE,KAAK,CAAC;QACvB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,MAAM;IACV,IAAI,CAAC,OAAO,EAAE;QAAE,cAAc,CAAC,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QACvE,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB;IACD,IAAI,CAAC,OAAO,EAAE;QACZ,cAAc,EAAE,IAAI,CAAC;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,MAAM;IA6BV,kIAAkI;IAClI,KAAK,CAAC,EAAE,GAAQ,EAAE;;KAAK;IAiCvB,mBAAmB;IAmBnB,cAAc,CAAC,WAAW,KAAK;;;;;IAI/B,kBAAkB;IASlB,kBAAkB;CASnB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,YAS7C;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAGrD;AAED,qBAAa,YAAY;IACX,OAAO,CAAC,KAAK;IAAU,OAAO,CAAC,IAAI;gBAA3B,KAAK,EAAE,MAAM,EAAU,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnF,QAAQ,CAAC,GAAG,EAAE,MAAM;IAQpB,QAAQ,CAAC,GAAG,EAAE,MAAM;CAGrB"}