@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/auth/session-auth.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionExpiredError = void 0;
+exports.ensureUsableSession = ensureUsableSession;
+exports.loadUsableSession = loadUsableSession;
+const device_flow_1 = require("./device-flow");
+const session_store_1 = require("./session-store");
+class SessionExpiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionExpiredError';
+    }
+}
+exports.SessionExpiredError = SessionExpiredError;
+async function ensureUsableSession(session, deps = (0, device_flow_1.defaultDeviceFlowDeps)(), path = session_store_1.SESSION_FILE) {
+    if (session === undefined) {
+        return undefined;
+    }
+    if ((0, session_store_1.isAccessTokenUsable)(session, deps.now())) {
+        return session;
+    }
+    if (session.refreshToken === undefined) {
+        throw new SessionExpiredError('Your Xema session has expired and carries no refresh token. ' +
+            'Run `xema login` to sign in again.');
+    }
+    const endpoints = await (0, device_flow_1.discoverOidcEndpoints)(session.issuer, deps);
+    const tokens = await (0, device_flow_1.refreshAccessToken)(endpoints, session.clientId, session.refreshToken, deps);
+    const refreshed = {
+        endpoint: session.endpoint,
+        issuer: session.issuer,
+        clientId: session.clientId,
+        accessToken: tokens.accessToken,
+        refreshToken: tokens.refreshToken ?? session.refreshToken,
+        expiresAt: tokens.expiresAt,
+        ...(session.subject !== undefined ? { subject: session.subject } : {}),
+    };
+    (0, session_store_1.writeSession)(refreshed, path);
+    return refreshed;
+}
+async function loadUsableSession(deps = (0, device_flow_1.defaultDeviceFlowDeps)(), path = session_store_1.SESSION_FILE) {
+    return ensureUsableSession((0, session_store_1.readSession)(path), deps, path);
+}
+//# sourceMappingURL=session-auth.js.map

package/dist/runtime/auth/session-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-auth.js","sourceRoot":"","sources":["../../../src/runtime/auth/session-auth.ts"],"names":[],"mappings":";;;AAyCA,kDAyCC;AAMD,8CAKC;AAjFD,+CAKuB;AACvB,mDAMyB;AAGzB,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AASM,KAAK,UAAU,mBAAmB,CACvC,OAAgC,EAChC,OAAuB,IAAA,mCAAqB,GAAE,EAC9C,OAAe,4BAAY;IAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAA,mCAAmB,EAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAC3B,8DAA8D;YAC5D,oCAAoC,CACvC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,IAAA,mCAAqB,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAkB,EACrC,SAAS,EACT,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,YAAY,EACpB,IAAI,CACL,CAAC;IAKF,MAAM,SAAS,GAAgB;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;QACzD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;IACF,IAAA,4BAAY,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAMM,KAAK,UAAU,iBAAiB,CACrC,OAAuB,IAAA,mCAAqB,GAAE,EAC9C,OAAe,4BAAY;IAE3B,OAAO,mBAAmB,CAAC,IAAA,2BAAW,EAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC"}

package/dist/runtime/auth/session-store.d.ts

@@ -0,0 +1,19 @@
+export declare const SESSION_FILE: string;
+export interface XemaSession {
+    readonly endpoint: string;
+    readonly issuer: string;
+    readonly clientId: string;
+    readonly accessToken: string;
+    readonly refreshToken?: string;
+    readonly expiresAt: number;
+    readonly subject?: string;
+}
+export declare class SessionStoreError extends Error {
+    constructor(message: string);
+}
+export declare function readSession(path?: string): XemaSession | undefined;
+export declare function writeSession(session: XemaSession, path?: string): void;
+export declare function clearSession(path?: string): boolean;
+export declare const SESSION_EXPIRY_SKEW_MS = 60000;
+export declare function isAccessTokenUsable(session: XemaSession, now: number): boolean;
+//# sourceMappingURL=session-store.d.ts.map

package/dist/runtime/auth/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../../src/runtime/auth/session-store.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,YAAY,QAA2C,CAAC;AAerE,MAAM,WAAW,WAAW;IAE1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAGD,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AA2BD,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAqB,GAAG,WAAW,GAAG,SAAS,CA0ChF;AAQD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,WAAW,EACpB,IAAI,GAAE,MAAqB,GAC1B,IAAI,CAON;AAMD,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAAqB,GAAG,OAAO,CAMjE;AASD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAG7C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9E"}

package/dist/runtime/auth/session-store.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_EXPIRY_SKEW_MS = exports.SessionStoreError = exports.SESSION_FILE = void 0;
+exports.readSession = readSession;
+exports.writeSession = writeSession;
+exports.clearSession = clearSession;
+exports.isAccessTokenUsable = isAccessTokenUsable;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+exports.SESSION_FILE = (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'session.json');
+const SESSION_FILE_MODE = 0o600;
+const SESSION_DIR_MODE = 0o700;
+class SessionStoreError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionStoreError';
+    }
+}
+exports.SessionStoreError = SessionStoreError;
+function readString(record, field, path) {
+    const value = record[field];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new SessionStoreError(`${path} is malformed: "${field}" must be a non-empty string. ` +
+            'Run `xema logout` then `xema login` to recreate it.');
+    }
+    return value;
+}
+function readSession(path = exports.SESSION_FILE) {
+    if (!(0, node_fs_1.existsSync)(path)) {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8'));
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new SessionStoreError(`${path} is not valid JSON (${detail}). Run \`xema logout\` to remove it.`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new SessionStoreError(`${path} is malformed: expected a JSON object. Run \`xema logout\` to remove it.`);
+    }
+    const record = parsed;
+    const expiresAt = record.expiresAt;
+    if (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)) {
+        throw new SessionStoreError(`${path} is malformed: "expiresAt" must be a number. ` +
+            'Run `xema logout` then `xema login` to recreate it.');
+    }
+    const refreshToken = record.refreshToken;
+    const subject = record.subject;
+    return {
+        endpoint: readString(record, 'endpoint', path),
+        issuer: readString(record, 'issuer', path),
+        clientId: readString(record, 'clientId', path),
+        accessToken: readString(record, 'accessToken', path),
+        ...(typeof refreshToken === 'string' && refreshToken.length > 0
+            ? { refreshToken }
+            : {}),
+        expiresAt,
+        ...(typeof subject === 'string' && subject.length > 0 ? { subject } : {}),
+    };
+}
+function writeSession(session, path = exports.SESSION_FILE) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true, mode: SESSION_DIR_MODE });
+    (0, node_fs_1.writeFileSync)(path, `${JSON.stringify(session, null, 2)}\n`, {
+        encoding: 'utf8',
+        mode: SESSION_FILE_MODE,
+    });
+    (0, node_fs_1.chmodSync)(path, SESSION_FILE_MODE);
+}
+function clearSession(path = exports.SESSION_FILE) {
+    if (!(0, node_fs_1.existsSync)(path)) {
+        return false;
+    }
+    (0, node_fs_1.rmSync)(path);
+    return true;
+}
+exports.SESSION_EXPIRY_SKEW_MS = 60_000;
+function isAccessTokenUsable(session, now) {
+    return session.expiresAt - exports.SESSION_EXPIRY_SKEW_MS > now;
+}
+//# sourceMappingURL=session-store.js.map

package/dist/runtime/auth/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/runtime/auth/session-store.ts"],"names":[],"mappings":";;;AA0FA,kCA0CC;AAQD,oCAUC;AAMD,oCAMC;AAYD,kDAEC;AAjKD,qCAOiB;AACjB,qCAAkC;AAClC,yCAA0C;AAG7B,QAAA,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAGrE,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAGhC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAyB/B,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAGD,SAAS,UAAU,CACjB,MAA+B,EAC/B,KAAa,EACb,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,mBAAmB,KAAK,gCAAgC;YAC7D,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,SAAgB,WAAW,CAAC,OAAe,oBAAY;IACrD,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,uBAAuB,MAAM,sCAAsC,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,0EAA0E,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,+CAA+C;YACpD,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAE/B,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC;QAC9C,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC1C,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC;QAC9C,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC;QACpD,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAC7D,CAAC,CAAC,EAAE,YAAY,EAAE;YAClB,CAAC,CAAC,EAAE,CAAC;QACP,SAAS;QACT,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAQD,SAAgB,YAAY,CAC1B,OAAoB,EACpB,OAAe,oBAAY;IAE3B,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtE,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC3D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,iBAAiB;KACxB,CAAC,CAAC;IACH,IAAA,mBAAS,EAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAMD,SAAgB,YAAY,CAAC,OAAe,oBAAY;IACtD,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AASY,QAAA,sBAAsB,GAAG,MAAM,CAAC;AAG7C,SAAgB,mBAAmB,CAAC,OAAoB,EAAE,GAAW;IACnE,OAAO,OAAO,CAAC,SAAS,GAAG,8BAAsB,GAAG,GAAG,CAAC;AAC1D,CAAC"}

package/dist/runtime/auth/token-claims.d.ts

@@ -0,0 +1,2 @@
+export declare function displaySubjectFromToken(token: string): string | undefined;
+//# sourceMappingURL=token-claims.d.ts.map

package/dist/runtime/auth/token-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-claims.d.ts","sourceRoot":"","sources":["../../../src/runtime/auth/token-claims.ts"],"names":[],"mappings":"AAiCA,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgCzE"}

package/dist/runtime/auth/token-claims.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.displaySubjectFromToken = displaySubjectFromToken;
+const SUBJECT_CLAIMS = ['preferred_username', 'email', 'sub'];
+function decodeSegment(segment) {
+    try {
+        return Buffer.from(segment, 'base64url').toString('utf8');
+    }
+    catch {
+        return undefined;
+    }
+}
+function displaySubjectFromToken(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        return undefined;
+    }
+    const payloadSegment = parts[1];
+    if (payloadSegment === undefined || payloadSegment.length === 0) {
+        return undefined;
+    }
+    const json = decodeSegment(payloadSegment);
+    if (json === undefined) {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(json);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        return undefined;
+    }
+    const claims = parsed;
+    for (const claim of SUBJECT_CLAIMS) {
+        const value = claims[claim];
+        if (typeof value === 'string' && value.length > 0) {
+            return value;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=token-claims.js.map

package/dist/runtime/auth/token-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-claims.js","sourceRoot":"","sources":["../../../src/runtime/auth/token-claims.ts"],"names":[],"mappings":";;AAiCA,0DAgCC;AAlDD,MAAM,cAAc,GAAG,CAAC,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAGvE,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AASD,SAAgB,uBAAuB,CAAC,KAAa;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/runtime/biome-dev.d.ts

@@ -0,0 +1,28 @@
+import { type BiomeValidationReport } from './biome-validate';
+import { type DiscoveredBiome } from './sources/manifest-walk';
+import type { BringUpResult } from './supervisor';
+export declare const BIOME_HOST_BIOME_ID = "biome-host";
+export declare function locateBiomeRoot(startPath: string): string | null;
+export declare function discoverTargetBiome(biomeRoot: string): DiscoveredBiome;
+export declare function devSliceBiomeIds(biome: DiscoveredBiome): string[];
+export declare enum OwnServiceState {
+    Ready = "ready",
+    Failed = "failed"
+}
+export interface OwnServiceStatus {
+    readonly name: string;
+    readonly state: OwnServiceState;
+    readonly detail: string;
+}
+export declare function projectOwnServices(biome: DiscoveredBiome, result: BringUpResult): OwnServiceStatus[];
+export declare function formatValidationResults(report: BiomeValidationReport): string;
+export interface BiomeDevReportInput {
+    readonly biome: DiscoveredBiome;
+    readonly biomeRoot: string;
+    readonly validation: BiomeValidationReport;
+    readonly sliceSize: number;
+    readonly addedPrerequisites: readonly string[];
+    readonly ownServices?: readonly OwnServiceStatus[];
+}
+export declare function formatBiomeDevReport(input: BiomeDevReportInput): string;
+//# sourceMappingURL=biome-dev.d.ts.map

package/dist/runtime/biome-dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-dev.d.ts","sourceRoot":"","sources":["../../src/runtime/biome-dev.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAmBlD,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAQhD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYhE;AAQD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAWtE;AAWD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,EAAE,CAejE;AAGD,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAOD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,aAAa,GACpB,gBAAgB,EAAE,CAepB;AASD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAc7E;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAE3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpD;AAOD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CA8CvE"}

package/dist/runtime/biome-dev.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OwnServiceState = exports.BIOME_HOST_BIOME_ID = void 0;
+exports.locateBiomeRoot = locateBiomeRoot;
+exports.discoverTargetBiome = discoverTargetBiome;
+exports.devSliceBiomeIds = devSliceBiomeIds;
+exports.projectOwnServices = projectOwnServices;
+exports.formatValidationResults = formatValidationResults;
+exports.formatBiomeDevReport = formatBiomeDevReport;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const biome_1 = require("@xemahq/kernel-contracts/biome");
+const biome_validate_1 = require("./biome-validate");
+const manifest_walk_1 = require("./sources/manifest-walk");
+exports.BIOME_HOST_BIOME_ID = 'biome-host';
+function locateBiomeRoot(startPath) {
+    let cursor = (0, node_path_1.resolve)(startPath);
+    for (;;) {
+        if ((0, node_fs_1.existsSync)((0, node_path_1.join)(cursor, biome_1.BIOME_MANIFEST_FILENAME))) {
+            return cursor;
+        }
+        const parent = (0, node_path_1.dirname)(cursor);
+        if (parent === cursor) {
+            return null;
+        }
+        cursor = parent;
+    }
+}
+function discoverTargetBiome(biomeRoot) {
+    const { biomes } = (0, manifest_walk_1.walkBiomeManifests)(biomeRoot);
+    const biome = biomes[0];
+    if (biomes.length !== 1 || biome === undefined) {
+        throw new Error(`discoverTargetBiome: expected exactly the root biome at ${biomeRoot}, ` +
+            `found ${String(biomes.length)}.`);
+    }
+    return biome;
+}
+function devSliceBiomeIds(biome) {
+    const ids = new Set();
+    if (biome.services.length > 0) {
+        ids.add(biome.id);
+    }
+    ids.add(exports.BIOME_HOST_BIOME_ID);
+    for (const required of biome.requires) {
+        ids.add(required);
+    }
+    if (biome.manifest.xema.target === 'server') {
+        for (const dep of biome.manifest.xema.dependencies ?? []) {
+            ids.add(dep);
+        }
+    }
+    return [...ids];
+}
+var OwnServiceState;
+(function (OwnServiceState) {
+    OwnServiceState["Ready"] = "ready";
+    OwnServiceState["Failed"] = "failed";
+})(OwnServiceState || (exports.OwnServiceState = OwnServiceState = {}));
+function projectOwnServices(biome, result) {
+    const running = new Map(result.running.map((r) => [r.name, r]));
+    const skipped = new Map(result.skipped.map((s) => [s.name, s]));
+    return biome.services.map((svc) => {
+        const up = running.get(svc.name);
+        if (up !== undefined) {
+            return { name: svc.name, state: OwnServiceState.Ready, detail: up.url };
+        }
+        const skip = skipped.get(svc.name);
+        return {
+            name: svc.name,
+            state: OwnServiceState.Failed,
+            detail: skip?.reason ?? 'not in the bring-up result (dropped before boot)',
+        };
+    });
+}
+const STATUS_GLYPH = {
+    [biome_validate_1.BiomeCheckStatus.Passed]: '✓',
+    [biome_validate_1.BiomeCheckStatus.Failed]: '✗',
+    [biome_validate_1.BiomeCheckStatus.Skipped]: '-',
+};
+function formatValidationResults(report) {
+    const lines = [];
+    const failed = report.results.filter((r) => r.status === biome_validate_1.BiomeCheckStatus.Failed).length;
+    lines.push(`validation : ${String(report.results.length)} check(s) — ` +
+        (failed > 0 ? `${String(failed)} FAILED` : 'all passed'));
+    for (const result of report.results) {
+        lines.push(`  ${STATUS_GLYPH[result.status]} ${result.check.padEnd(13)} ${result.summary}`);
+        for (const issue of result.issues) {
+            lines.push(`      - ${issue}`);
+        }
+    }
+    return lines.join('\n');
+}
+function formatBiomeDevReport(input) {
+    const { biome, validation } = input;
+    const lines = [];
+    const rule = '─'.repeat(72);
+    lines.push('xema biome dev — readiness report');
+    lines.push(rule);
+    lines.push(`biome      : ${biome.id} v${biome.version} (${biome.tier}, ${biome.target}) at ${input.biomeRoot}`);
+    lines.push(`slice      : ${String(input.sliceSize)} service(s)` +
+        (input.addedPrerequisites.length > 0
+            ? ` (+${String(input.addedPrerequisites.length)} hard prerequisite(s): ` +
+                `${input.addedPrerequisites.join(', ')})`
+            : ''));
+    lines.push(formatValidationResults(validation));
+    if (validation.contributionCounts.size > 0) {
+        const byKind = [...validation.contributionCounts.entries()]
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([kind, n]) => `${kind} ×${String(n)}`)
+            .join(', ');
+        lines.push(`contribs   : ${byKind}`);
+    }
+    if (input.ownServices !== undefined) {
+        if (input.ownServices.length === 0) {
+            lines.push('services   : (none — this biome ships no runnable services)');
+        }
+        else {
+            lines.push('services   :');
+            for (const svc of input.ownServices) {
+                const glyph = svc.state === OwnServiceState.Ready ? '✓' : '✗';
+                lines.push(`  ${glyph} ${svc.name.padEnd(30)} ${svc.state}  ${svc.detail}`);
+            }
+        }
+    }
+    lines.push(rule);
+    lines.push('next steps :');
+    lines.push(`  install into a running platform : xema biome install ${biome.id} --project <id> | --org <id>`);
+    lines.push(`  publish as a signed artifact    : xema biome publish ${input.biomeRoot}`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=biome-dev.js.map

package/dist/runtime/biome-dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-dev.js","sourceRoot":"","sources":["../../src/runtime/biome-dev.ts"],"names":[],"mappings":";;;AAmCA,0CAYC;AAQD,kDAWC;AAWD,4CAeC;AAqBD,gDAkBC;AASD,0DAcC;AAmBD,oDA8CC;AA3ND,qCAAqC;AACrC,yCAAmD;AAEnD,0DAAyE;AAEzE,qDAAgF;AAChF,2DAAmF;AAqBtE,QAAA,mBAAmB,GAAG,YAAY,CAAC;AAQhD,SAAgB,eAAe,CAAC,SAAiB;IAC/C,IAAI,MAAM,GAAG,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC;IAChC,SAAS,CAAC;QACR,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,+BAAuB,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAQD,SAAgB,mBAAmB,CAAC,SAAiB;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,SAAS,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAE/C,MAAM,IAAI,KAAK,CACb,2DAA2D,SAAS,IAAI;YACtE,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,SAAgB,gBAAgB,CAAC,KAAsB;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,2BAAmB,CAAC,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAGD,IAAY,eAGX;AAHD,WAAY,eAAe;IACzB,kCAAe,CAAA;IACf,oCAAiB,CAAA;AACnB,CAAC,EAHW,eAAe,+BAAf,eAAe,QAG1B;AAeD,SAAgB,kBAAkB,CAChC,KAAsB,EACtB,MAAqB;IAErB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,eAAe,CAAC,MAAM;YAC7B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,kDAAkD;SAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,YAAY,GAA+C;IAC/D,CAAC,iCAAgB,CAAC,MAAM,CAAC,EAAE,GAAG;IAC9B,CAAC,iCAAgB,CAAC,MAAM,CAAC,EAAE,GAAG;IAC9B,CAAC,iCAAgB,CAAC,OAAO,CAAC,EAAE,GAAG;CAChC,CAAC;AAGF,SAAgB,uBAAuB,CAAC,MAA6B;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iCAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACzF,KAAK,CAAC,IAAI,CACR,gBAAgB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc;QACzD,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAC3D,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAmBD,SAAgB,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE5B,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,IAAI,CACR,gBAAgB,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,SAAS,EAAE,CACpG,CAAC;IACF,KAAK,CAAC,IAAI,CACR,gBAAgB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa;QAClD,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,yBAAyB;gBACtE,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC3C,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC;IAEhD,IAAI,UAAU,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;aACxD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC9D,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,0DAA0D,KAAK,CAAC,EAAE,8BAA8B,CACjG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,0DAA0D,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/runtime/biome-local-install.d.ts

@@ -0,0 +1,29 @@
+import { type SourceSpec } from './sources/schema';
+import type { CredentialResolver } from './sources/credentials';
+import type { BiomeManifest } from '@xemahq/kernel-contracts/biome';
+export declare class LocalBiomeInstallError extends Error {
+    readonly exitCode: LocalBiomeInstallExitCode;
+    constructor(message: string, exitCode?: LocalBiomeInstallExitCode);
+}
+export declare enum LocalBiomeInstallExitCode {
+    GenericError = 1,
+    MissingDependency = 2,
+    ConfigurationError = 3
+}
+export interface FetchBiomeLocallyParams {
+    readonly biomeId: string;
+    readonly source: SourceSpec;
+    readonly credentials: CredentialResolver;
+    readonly packageOverride?: string;
+    readonly tag?: string;
+    readonly version?: string;
+    readonly log?: (line: string) => void;
+}
+export interface FetchedBiome {
+    readonly dir: string;
+    readonly manifest: BiomeManifest;
+    readonly biomeId: string;
+    readonly version: string;
+}
+export declare function fetchBiomeLocally(params: FetchBiomeLocallyParams): Promise<FetchedBiome>;
+//# sourceMappingURL=biome-local-install.d.ts.map

package/dist/runtime/biome-local-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-local-install.d.ts","sourceRoot":"","sources":["../../src/runtime/biome-local-install.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAmDpE,qBAAa,sBAAuB,SAAQ,KAAK;IAG7C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB;gBAD5C,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,yBAAkE;CAKxF;AAUD,oBAAY,yBAAyB;IACnC,YAAY,IAAI;IAChB,iBAAiB,IAAI;IACrB,kBAAkB,IAAI;CACvB;AAGD,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAE5B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAEzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAGD,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAUD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiB9F"}