create-authenik8-app 2.4.14 → 2.4.15

package/dist/src/commands/doctor/checks.js

@@ -0,0 +1,353 @@
+import { spawnSync } from "node:child_process";
+import fs from "fs-extra";
+import path from "node:path";
+import { parseEnv } from "node:util";
+import { supportsFullstackPreset } from "../../lib/preflight.js";
+import { PROJECT_MANIFEST_FILENAME } from "../../lib/projectManifest.js";
+import { redisEndpointFromEnv } from "./services.js";
+const AGENT_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const AGENT_SCOPE = /^[a-z][a-z0-9._/-]*(?::[a-z][a-z0-9._/-]*)+$/;
+function check(id, label, status, message, fix) {
+    return { id, label, status, message, ...(fix ? { fix } : {}) };
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function validateSigningKeys(source, activeKid) {
+    if (!source?.trim())
+        return "AUTHENIK8_SIGNING_JWKS is missing";
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch {
+        return "AUTHENIK8_SIGNING_JWKS is not valid JSON";
+    }
+    if (!Array.isArray(parsed) || parsed.length === 0) {
+        return "AUTHENIK8_SIGNING_JWKS must contain at least one key";
+    }
+    const keys = parsed.filter(isRecord);
+    if (keys.length !== parsed.length || keys.some((key) => key.kty !== "EC" || key.crv !== "P-256" ||
+        typeof key.kid !== "string" || !key.kid ||
+        typeof key.x !== "string" || !key.x ||
+        typeof key.y !== "string" || !key.y ||
+        (key.alg !== undefined && key.alg !== "ES256"))) {
+        return "the signing key ring must contain only ES256 P-256 JWKs with kid, x, and y";
+    }
+    const keyIds = keys.map((key) => key.kid);
+    if (new Set(keyIds).size !== keyIds.length)
+        return "signing key IDs must be unique";
+    if (!activeKid?.trim())
+        return "AUTHENIK8_ACTIVE_KID is missing";
+    const active = keys.find((key) => key.kid === activeKid);
+    if (!active)
+        return "AUTHENIK8_ACTIVE_KID does not select a key in the signing key ring";
+    if (typeof active.d !== "string" || !active.d) {
+        return "AUTHENIK8_ACTIVE_KID must select a private signing key";
+    }
+    return undefined;
+}
+function validHttpUrl(value) {
+    if (!value?.trim())
+        return false;
+    try {
+        const url = new URL(value);
+        return url.protocol === "http:" || url.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+function validAgentRegistry(source) {
+    if (!source?.trim())
+        return true;
+    try {
+        const registry = JSON.parse(source);
+        return isRecord(registry) && Object.entries(registry).every(([agentId, scopes]) => AGENT_ID.test(agentId) && Array.isArray(scopes) && scopes.length > 0 && scopes.length <= 64 &&
+            scopes.every((scope) => typeof scope === "string" && scope.length <= 128 && AGENT_SCOPE.test(scope)));
+    }
+    catch {
+        return false;
+    }
+}
+function looksLikePlaceholder(value) {
+    if (!value?.trim())
+        return true;
+    return /^(?:change-me|your-|replace-|example|todo)|(?:client-id|client-secret)/i.test(value.trim());
+}
+async function requiredFilesCheck(context) {
+    const files = [
+        ".env",
+        ".env.example",
+        ".gitignore",
+        "README.md",
+        "THREAT_MODEL.md",
+        "AGENT_IDENTITY.md",
+        context.preset === "fullstack" ? "apps/api/src/server.ts" : "src/server.ts",
+    ];
+    if (context.preset === "fullstack") {
+        files.push("scripts/run-local.mjs");
+    }
+    else {
+        files.push("docker-compose.yml");
+    }
+    if (context.usesPrisma) {
+        files.push(path.relative(context.rootDir, path.join(context.appDir, "prisma/schema.prisma")));
+        files.push(path.relative(context.rootDir, path.join(context.appDir, "prisma.config.ts")));
+        if (context.preset === "fullstack") {
+            files.push(path.relative(context.rootDir, path.join(context.appDir, "prisma/migrations/migration_lock.toml")));
+        }
+    }
+    const missing = (await Promise.all(files.map(async (file) => await fs.pathExists(path.join(context.rootDir, file)) ? undefined : file))).filter((file) => Boolean(file));
+    return missing.length === 0
+        ? check("project.files", "Project structure", "pass", "Required Authenik8 project files are present")
+        : check("project.files", "Project structure", "fail", `Missing required files: ${missing.join(", ")}`, "Restore the files from source control or regenerate the project before changing auth code.");
+}
+function scriptsCheck(context) {
+    const required = ["dev", "build"];
+    if (context.preset === "fullstack") {
+        required.push("setup", "db:seed");
+    }
+    const scripts = context.packageJson.scripts ?? {};
+    const missing = required.filter((name) => !scripts[name]);
+    if (context.usesPrisma) {
+        const hasMigrationScript = context.preset === "fullstack"
+            ? Boolean(scripts["db:migrate"])
+            : Boolean(scripts["db:migrate"] || scripts["prisma:migrate"]);
+        if (!hasMigrationScript)
+            missing.push("db:migrate");
+    }
+    return missing.length === 0
+        ? check("project.scripts", "Project scripts", "pass", "Development, build, and migration scripts are wired")
+        : check("project.scripts", "Project scripts", "fail", `Missing package scripts: ${missing.join(", ")}`, "Restore the generated package.json scripts before running the application.");
+}
+function declaredCoreVersion(packageJson) {
+    return packageJson.dependencies?.["authenik8-core"] ?? packageJson.devDependencies?.["authenik8-core"];
+}
+async function coreDependencyCheck(context, allowMissingCore = false) {
+    const declared = declaredCoreVersion(context.appPackageJson);
+    if (!declared) {
+        return check("dependency.core", "Identity engine", "fail", "authenik8-core is not declared", `${context.packageManager} install`);
+    }
+    const candidates = [
+        path.join(context.appDir, "node_modules/authenik8-core/package.json"),
+        path.join(context.rootDir, "node_modules/authenik8-core/package.json"),
+    ];
+    const installedPath = (await Promise.all(candidates.map(async (candidate) => await fs.pathExists(candidate) ? candidate : undefined))).find(Boolean);
+    if (!installedPath) {
+        return check("dependency.core", "Identity engine", allowMissingCore ? "warn" : "fail", `authenik8-core ${declared} is declared but not installed`, `${context.packageManager} install`);
+    }
+    let installed;
+    try {
+        installed = await fs.readJson(installedPath);
+    }
+    catch {
+        return check("dependency.core", "Identity engine", "fail", "The installed authenik8-core package metadata is unreadable", `${context.packageManager} install`);
+    }
+    if (!installed.version) {
+        return check("dependency.core", "Identity engine", "fail", "The installed authenik8-core version is missing", `${context.packageManager} install`);
+    }
+    if (/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(declared) && declared !== installed.version) {
+        return check("dependency.core", "Identity engine", "fail", `Declared authenik8-core ${declared}, but installed ${installed.version}`, `${context.packageManager} install`);
+    }
+    return check("dependency.core", "Identity engine", "pass", `authenik8-core ${installed.version} is installed`);
+}
+async function projectManifestCheck(context) {
+    if (context.manifest.status === "missing") {
+        return check("project.manifest", "Project manifest", "warn", `${PROJECT_MANIFEST_FILENAME} is missing; structural compatibility mode is active`, "Regenerate with a current create-authenik8-app release before using future upgrade automation.");
+    }
+    if (context.manifest.status === "invalid") {
+        return check("project.manifest", "Project manifest", "fail", context.manifest.message, `Restore ${PROJECT_MANIFEST_FILENAME} from source control; never add secrets to it.`);
+    }
+    const manifest = context.manifest.manifest;
+    const differences = [];
+    const declaredCore = declaredCoreVersion(context.appPackageJson);
+    const actualOAuth = [...context.oauthProviders].sort().join(",");
+    const manifestOAuth = [...manifest.features.oauthProviders].sort().join(",");
+    const hasPm2 = Boolean(context.packageJson.scripts?.["pm2:start"]);
+    if (manifest.projectName !== context.packageJson.name)
+        differences.push("project name");
+    if (manifest.preset !== context.preset)
+        differences.push("preset");
+    if (manifest.packageManager !== context.packageManager)
+        differences.push("package manager");
+    if (manifest.engine.version !== declaredCore)
+        differences.push("authenik8-core version");
+    if (manifest.features.prisma !== context.usesPrisma)
+        differences.push("Prisma feature");
+    if (manifest.database !== (context.databaseProvider ?? null))
+        differences.push("database provider");
+    if (manifestOAuth !== actualOAuth)
+        differences.push("OAuth providers");
+    if (manifest.features.pm2 !== hasPm2)
+        differences.push("PM2 feature");
+    if (manifest.features.pm2) {
+        const pm2Path = path.join(context.rootDir, "ecosystem.config.js");
+        if (await fs.pathExists(pm2Path)) {
+            const pm2Source = await fs.readFile(pm2Path, "utf8");
+            const runtime = /interpreter:\s*["']bun["']/.test(pm2Source) ? "bun" : "node";
+            if (manifest.runtime !== runtime)
+                differences.push("production runtime");
+        }
+        else {
+            differences.push("PM2 configuration");
+        }
+    }
+    return differences.length === 0
+        ? check("project.manifest", "Project manifest", "pass", `Schema v${manifest.schemaVersion} matches the generated project and authenik8-core declaration`)
+        : check("project.manifest", "Project manifest", "fail", `Manifest drift detected: ${differences.join(", ")}`, "Review intentional architecture changes, then update the manifest as one audited change.");
+}
+async function environmentSafetyCheck(context) {
+    const ignorePath = path.join(context.rootDir, ".gitignore");
+    if (!(await fs.pathExists(ignorePath))) {
+        return check("security.env", "Secret-file safety", "fail", ".gitignore is missing", "Add .env to .gitignore immediately.");
+    }
+    const ignored = (await fs.readFile(ignorePath, "utf8"))
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .some((line) => line === ".env" || line === ".env*" || line === ".env.*");
+    if (!ignored) {
+        return check("security.env", "Secret-file safety", "fail", ".env is not ignored by Git", "Add .env to .gitignore immediately.");
+    }
+    const insideGit = spawnSync("git", ["-C", context.rootDir, "rev-parse", "--is-inside-work-tree"], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+    });
+    if (insideGit.status === 0) {
+        const tracked = spawnSync("git", ["-C", context.rootDir, "ls-files", "--error-unmatch", ".env"], {
+            stdio: "ignore",
+        });
+        if (tracked.status === 0) {
+            return check("security.env", "Secret-file safety", "fail", ".env is tracked by Git and may expose signing or refresh secrets", "Remove .env from Git history and rotate every exposed signing key and refresh secret.");
+        }
+    }
+    const examplePath = path.join(context.rootDir, ".env.example");
+    if (await fs.pathExists(examplePath)) {
+        const source = await fs.readFile(examplePath, "utf8");
+        let example = {};
+        try {
+            example = parseEnv(source);
+        }
+        catch {
+            return check("security.env", "Secret-file safety", "warn", ".env.example could not be parsed", "Keep the example file valid and free of real secrets.");
+        }
+        if (/\"d\"\s*:/.test(example.AUTHENIK8_SIGNING_JWKS ?? "")) {
+            return check("security.env", "Secret-file safety", "fail", ".env.example contains a private signing JWK", "Remove the private key and rotate it if the file was committed.");
+        }
+        const exampleSecret = example.REFRESH_SECRET?.trim();
+        if (exampleSecret && exampleSecret.length >= 32 && !/(?:replace|change|example|generated|random)/i.test(exampleSecret)) {
+            return check("security.env", "Secret-file safety", "fail", ".env.example appears to contain a real refresh secret", "Replace it with an obvious placeholder and rotate the secret.");
+        }
+    }
+    return check("security.env", "Secret-file safety", "pass", ".env is ignored, untracked, and examples contain no private signing material");
+}
+async function databaseCheck(context) {
+    const value = context.env.DATABASE_URL?.trim();
+    const provider = context.databaseProvider;
+    const valid = provider === "sqlite"
+        ? value?.startsWith("file:")
+        : provider === "postgresql"
+            ? /^(?:postgresql|postgres):\/\//.test(value ?? "")
+            : false;
+    return valid
+        ? check("environment.database", "Database configuration", "pass", `${provider} DATABASE_URL matches the Prisma provider`)
+        : check("environment.database", "Database configuration", "fail", `DATABASE_URL does not match the ${provider ?? "unknown"} Prisma provider`, provider === "sqlite" ? "Use a file: URL." : "Use a postgresql:// URL.");
+}
+function oauthChecks(context) {
+    return context.oauthProviders.map((provider) => {
+        const prefix = provider.toUpperCase();
+        const clientId = context.env[`${prefix}_CLIENT_ID`];
+        const clientSecret = context.env[`${prefix}_CLIENT_SECRET`];
+        const redirect = context.env[`${prefix}_REDIRECT_URI`];
+        const expectedPath = context.preset === "fullstack"
+            ? `/api/auth/oauth/${provider}/callback`
+            : `/auth/${provider}/callback`;
+        let validRedirect = false;
+        try {
+            validRedirect = validHttpUrl(redirect) && new URL(redirect).pathname === expectedPath;
+        }
+        catch { }
+        if (looksLikePlaceholder(clientId) || looksLikePlaceholder(clientSecret)) {
+            return check(`oauth.${provider}`, `${provider} OAuth`, "warn", `${provider} is enabled, but its client credentials are not configured`, `Set ${prefix}_CLIENT_ID and ${prefix}_CLIENT_SECRET before testing ${provider} sign-in.`);
+        }
+        if (!validRedirect) {
+            return check(`oauth.${provider}`, `${provider} OAuth`, "fail", `${prefix}_REDIRECT_URI must be an HTTP(S) URL ending in ${expectedPath}`, `Use the exact same callback URL in .env and the ${provider} provider console.`);
+        }
+        return check(`oauth.${provider}`, `${provider} OAuth`, "pass", `${provider} credentials and callback shape are configured`);
+    });
+}
+function runtimeEnvironmentChecks(context) {
+    const portSource = context.env.PORT?.trim() || "3000";
+    const port = Number(portSource);
+    const portValid = Number.isInteger(port) && port >= 1 && port <= 65_535;
+    const checks = [portValid
+            ? check("environment.port", "Application port", "pass", `PORT ${port} is valid`)
+            : check("environment.port", "Application port", "fail", "PORT must be an integer from 1 to 65535", "Set a valid, available application port.")];
+    if (context.preset === "fullstack") {
+        checks.push(validHttpUrl(context.env.WEB_ORIGIN)
+            ? check("environment.origin", "Web origin", "pass", "WEB_ORIGIN is a valid HTTP(S) URL")
+            : check("environment.origin", "Web origin", "fail", "WEB_ORIGIN must be a valid HTTP(S) URL", "Set it to the exact browser origin allowed to call the API."));
+    }
+    const redisUrl = context.env.REDIS_URL?.trim();
+    const usesMemoryRedis = redisUrl === "memory://";
+    if (usesMemoryRedis) {
+        checks.push(context.env.NODE_ENV === "production"
+            ? check("environment.redis", "Redis configuration", "fail", "The in-process Redis store is for local development only", "Set REDIS_URL to a redis:// or rediss:// endpoint in production.")
+            : check("environment.redis", "Redis configuration", "pass", "The in-process Redis-compatible store is configured for local development"));
+        return checks;
+    }
+    const usesRedisUrl = context.preset === "fullstack" || Boolean(redisUrl);
+    try {
+        const endpoint = redisEndpointFromEnv(context.env, usesRedisUrl);
+        if (!endpoint.host
+            || !Number.isInteger(endpoint.port)
+            || endpoint.port < 1
+            || endpoint.port > 65_535) {
+            throw new Error("invalid Redis endpoint");
+        }
+        checks.push(check("environment.redis", "Redis configuration", "pass", "Redis host and port are structurally valid"));
+    }
+    catch {
+        checks.push(check("environment.redis", "Redis configuration", "fail", usesRedisUrl ? "REDIS_URL is invalid" : "REDIS_HOST or REDIS_PORT is invalid", usesRedisUrl ? "Use a redis:// or rediss:// URL." : "Set a host and a port from 1 to 65535."));
+    }
+    return checks;
+}
+export async function runStaticChecks(context, nodeVersion = process.versions.node, allowMissingCore = false) {
+    const checks = [];
+    checks.push(supportsFullstackPreset(nodeVersion)
+        ? check("runtime.node", "Node.js runtime", "pass", `Node.js ${nodeVersion} is supported`)
+        : check("runtime.node", "Node.js runtime", "fail", `Node.js ${nodeVersion} is unsupported`, "Use Node.js 20.19+, 22.12+, or 24+."));
+    checks.push(await requiredFilesCheck(context));
+    checks.push(await projectManifestCheck(context));
+    checks.push(scriptsCheck(context));
+    checks.push(await coreDependencyCheck(context, allowMissingCore));
+    checks.push(await environmentSafetyCheck(context));
+    if (context.envParseError) {
+        checks.push(check("environment.syntax", "Environment file", "fail", `.env is invalid: ${context.envParseError}`, "Fix .env syntax without printing or committing its values."));
+        return checks;
+    }
+    const signingError = validateSigningKeys(context.env.AUTHENIK8_SIGNING_JWKS, context.env.AUTHENIK8_ACTIVE_KID);
+    checks.push(signingError
+        ? check("auth.signing", "Signing key ring", "fail", signingError, "Restore the generated private ES256 key ring or rotate it deliberately.")
+        : check("auth.signing", "Signing key ring", "pass", "The active ES256 P-256 signing key is private and selectable"));
+    const issuerValid = validHttpUrl(context.env.AUTHENIK8_ISSUER);
+    const audienceValid = Boolean(context.env.AUTHENIK8_AUDIENCE?.trim());
+    checks.push(issuerValid && audienceValid
+        ? check("auth.claims", "Token claims", "pass", "Issuer and audience are configured")
+        : check("auth.claims", "Token claims", "fail", "AUTHENIK8_ISSUER must be an HTTP(S) URL and AUTHENIK8_AUDIENCE must be non-empty", "Set stable issuer and audience values before issuing tokens."));
+    checks.push((context.env.REFRESH_SECRET?.length ?? 0) >= 32
+        ? check("auth.refresh", "Refresh-token secret", "pass", "REFRESH_SECRET meets the minimum length")
+        : check("auth.refresh", "Refresh-token secret", "fail", "REFRESH_SECRET must contain at least 32 characters", "Generate a high-entropy secret and store it outside source control."));
+    checks.push(validAgentRegistry(context.env.AUTHENIK8_AGENTS)
+        ? check("auth.agents", "Agent identity", "pass", "Agent scopes are structurally valid (an empty registry disables agent identity)")
+        : check("auth.agents", "Agent identity", "fail", "AUTHENIK8_AGENTS must map valid agent IDs to 1-64 exact resource:action scopes", "Use {} to disable agent identity or grant only explicit, least-privilege scopes."));
+    checks.push(...runtimeEnvironmentChecks(context));
+    if (context.usesPrisma)
+        checks.push(await databaseCheck(context));
+    if (context.preset === "auth-oauth" && context.oauthProviders.length === 0) {
+        checks.push(check("oauth.routes", "OAuth routes", "fail", "The OAuth preset has no recognized provider routes", "Restore at least one generated Google or GitHub route and its matching configuration."));
+    }
+    checks.push(...oauthChecks(context));
+    return checks;
+}
+//# sourceMappingURL=checks.js.map

package/dist/src/commands/doctor/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../../src/commands/doctor/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAOrD,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AACtD,MAAM,WAAW,GAAG,8CAA8C,CAAC;AAEnE,SAAS,KAAK,CACZ,EAAU,EACV,KAAa,EACb,MAA6B,EAC7B,OAAe,EACf,GAAY;IAEZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA0B,EAAE,SAA6B;IACpF,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,mCAAmC,CAAC;IAChE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,sDAAsD,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACrD,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QACvC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG;QACvC,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAC/C,EAAE,CAAC;QACF,OAAO,4EAA4E,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAa,CAAC,CAAC;IACpD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,gCAAgC,CAAC;IACpF,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;QAAE,OAAO,iCAAiC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,oEAAoE,CAAC;IACzF,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,wDAAwD,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA0B;IACpD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;QAC/C,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAChF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3F,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,yEAAyE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAsB;IACtD,MAAM,KAAK,GAAG;QACZ,MAAM;QACN,cAAc;QACd,YAAY;QACZ,WAAW;QACX,iBAAiB;QACjB,mBAAmB;QACnB,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe;KAC5E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CACtB,OAAO,CAAC,OAAO,EACf,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,uCAAuC,CAAC,CACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1D,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CACzE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,EAAE,8CAA8C,CAAC;QACrG,CAAC,CAAC,KAAK,CACL,eAAe,EACf,mBAAmB,EACnB,MAAM,EACN,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/C,4FAA4F,CAC7F,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,OAAsB;IAC1C,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW;YACvD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAChC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,kBAAkB;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CACL,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,qDAAqD,CACtD;QACD,CAAC,CAAC,KAAK,CACL,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAChD,4EAA4E,CAC7E,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAwB;IACnD,OAAO,WAAW,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC,gBAAgB,CAAC,CAAC;AACzG,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAsB,EACtB,gBAAgB,GAAG,KAAK;IAExB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,gCAAgC,EAAE,GAAG,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC;IACpI,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,0CAA0C,CAAC;KACvE,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC1E,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAClC,kBAAkB,QAAQ,gCAAgC,EAC1D,GAAG,OAAO,CAAC,cAAc,UAAU,CACpC,CAAC;IACJ,CAAC;IAED,IAAI,SAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAgB,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,6DAA6D,EAAE,GAAG,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC;IACjK,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,iDAAiD,EAAE,GAAG,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC;IACrJ,CAAC;IACD,IAAI,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QACpF,OAAO,KAAK,CACV,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,2BAA2B,QAAQ,mBAAmB,SAAS,CAAC,OAAO,EAAE,EACzE,GAAG,OAAO,CAAC,cAAc,UAAU,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,SAAS,CAAC,OAAO,eAAe,CAAC,CAAC;AACjH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAsB;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CACV,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACN,GAAG,yBAAyB,sDAAsD,EAClF,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CACV,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACN,OAAO,CAAC,QAAQ,CAAC,OAAO,EACxB,WAAW,yBAAyB,gDAAgD,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC3C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAEnE,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI;QAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAAE,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,YAAY;QAAE,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU;QAAE,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpG,IAAI,aAAa,KAAK,WAAW;QAAE,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,KAAK,MAAM;QAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAClE,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9E,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;gBAAE,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,KAAK,CACL,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACN,WAAW,QAAQ,CAAC,aAAa,+DAA+D,CACjG;QACD,CAAC,CAAC,KAAK,CACL,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACN,4BAA4B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACpD,0FAA0F,CAC3F,CAAC;AACN,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAAsB;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,uBAAuB,EAAE,qCAAqC,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;SACpD,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,4BAA4B,EAAE,qCAAqC,CAAC,CAAC;IAClI,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE;QAChG,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE;YAC/F,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CACV,cAAc,EACd,oBAAoB,EACpB,MAAM,EACN,kEAAkE,EAClE,uFAAuF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,OAAO,GAAuC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,kCAAkC,EAAE,uDAAuD,CAAC,CAAC;QAC1J,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,6CAA6C,EAAE,iEAAiE,CAAC,CAAC;QAC/K,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QACrD,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACvH,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,uDAAuD,EAAE,+DAA+D,CAAC,CAAC;QACvL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,cAAc,EAAE,oBAAoB,EAAE,MAAM,EAAE,8EAA8E,CAAC,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAsB;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,QAAQ,KAAK,YAAY;YACzB,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC;IACZ,OAAO,KAAK;QACV,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,QAAQ,2CAA2C,CAAC;QACzH,CAAC,CAAC,KAAK,CACL,sBAAsB,EACtB,wBAAwB,EACxB,MAAM,EACN,mCAAmC,QAAQ,IAAI,SAAS,kBAAkB,EAC1E,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,CACxE,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW;YACjD,CAAC,CAAC,mBAAmB,QAAQ,WAAW;YACxC,CAAC,CAAC,SAAS,QAAQ,WAAW,CAAC;QACjC,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,QAAkB,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;YACzE,OAAO,KAAK,CACV,SAAS,QAAQ,EAAE,EACnB,GAAG,QAAQ,QAAQ,EACnB,MAAM,EACN,GAAG,QAAQ,4DAA4D,EACvE,OAAO,MAAM,kBAAkB,MAAM,iCAAiC,QAAQ,WAAW,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,KAAK,CACV,SAAS,QAAQ,EAAE,EACnB,GAAG,QAAQ,QAAQ,EACnB,MAAM,EACN,GAAG,MAAM,kDAAkD,YAAY,EAAE,EACzE,mDAAmD,QAAQ,oBAAoB,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,QAAQ,EAAE,EAAE,GAAG,QAAQ,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,gDAAgD,CAAC,CAAC;IAC9H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAsB;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,SAAS;YACvB,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,IAAI,WAAW,CAAC;YAChF,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE,0CAA0C,CAAC,CAAC,CAAC;IAElJ,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAC9C,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,YAAY,EAAE,MAAM,EAAE,mCAAmC,CAAC;YACxF,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,YAAY,EAAE,MAAM,EAAE,wCAAwC,EAAE,6DAA6D,CAAC,CAAC,CAAC;IAClK,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAG,QAAQ,KAAK,WAAW,CAAC;IACjD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC/C,CAAC,CAAC,KAAK,CACL,mBAAmB,EACnB,qBAAqB,EACrB,MAAM,EACN,0DAA0D,EAC1D,kEAAkE,CACnE;YACD,CAAC,CAAC,KAAK,CACL,mBAAmB,EACnB,qBAAqB,EACrB,MAAM,EACN,2EAA2E,CAC5E,CAAC,CAAC;QACL,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjE,IACE,CAAC,QAAQ,CAAC,IAAI;eACX,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;eAChC,QAAQ,CAAC,IAAI,GAAG,CAAC;eACjB,QAAQ,CAAC,IAAI,GAAG,MAAM,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,mBAAmB,EACnB,qBAAqB,EACrB,MAAM,EACN,4CAA4C,CAC7C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,mBAAmB,EACnB,qBAAqB,EACrB,MAAM,EACN,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qCAAqC,EAC7E,YAAY,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,wCAAwC,CAC7F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAsB,EACtB,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EACnC,gBAAgB,GAAG,KAAK;IAExB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC;QAC9C,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,WAAW,eAAe,CAAC;QACzF,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,WAAW,iBAAiB,EAAE,qCAAqC,CAAC,CAAC,CAAC;IACtI,MAAM,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,EAAE,oBAAoB,OAAO,CAAC,aAAa,EAAE,EAAE,4DAA4D,CAAC,CAAC,CAAC;QAChL,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CACtC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CACjC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,YAAY;QACtB,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,yEAAyE,CAAC;QAC5I,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,8DAA8D,CAAC,CAAC,CAAC;IAEvH,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,aAAa;QACtC,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,oCAAoC,CAAC;QACpF,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,kFAAkF,EAAE,8DAA8D,CAAC,CAAC,CAAC;IAEtM,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE;QACzD,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,sBAAsB,EAAE,MAAM,EAAE,yCAAyC,CAAC;QAClG,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,sBAAsB,EAAE,MAAM,EAAE,oDAAoD,EAAE,qEAAqE,CAAC,CAAC,CAAC;IAExL,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,iFAAiF,CAAC;QACnI,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,gFAAgF,EAAE,kFAAkF,CAAC,CAAC,CAAC;IAE1N,MAAM,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,cAAc,EACd,cAAc,EACd,MAAM,EACN,oDAAoD,EACpD,uFAAuF,CACxF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/commands/doctor/context.d.ts

@@ -0,0 +1,5 @@
+import type { DoctorContext } from "./types.js";
+export declare class DoctorProjectError extends Error {
+}
+export declare function createDoctorContext(directory: string): Promise<DoctorContext>;
+//# sourceMappingURL=context.d.ts.map

package/dist/src/commands/doctor/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,aAAa,EAId,MAAM,YAAY,CAAC;AAEpB,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAyGhD,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAgDnF"}

package/dist/src/commands/doctor/context.js

@@ -0,0 +1,134 @@
+import fs from "fs-extra";
+import path from "node:path";
+import { parseEnv } from "node:util";
+import { supportedOAuthProviders } from "../../lib/oauth.js";
+import { readProjectManifest } from "../../lib/projectManifest.js";
+export class DoctorProjectError extends Error {
+}
+function dependency(packageJson, name) {
+    return packageJson.dependencies?.[name] ?? packageJson.devDependencies?.[name];
+}
+async function readPackageJson(filename) {
+    try {
+        return await fs.readJson(filename);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        throw new DoctorProjectError(`Could not read ${filename}: ${detail}`);
+    }
+}
+async function detectPackageManager(rootDir, packageJson, manifestPackageManager) {
+    if (await fs.pathExists(path.join(rootDir, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (await fs.pathExists(path.join(rootDir, "pnpm-workspace.yaml")))
+        return "pnpm";
+    if (await fs.pathExists(path.join(rootDir, "bun.lock")) ||
+        await fs.pathExists(path.join(rootDir, "bun.lockb")) ||
+        Array.isArray(packageJson.trustedDependencies)) {
+        return "bun";
+    }
+    return manifestPackageManager ?? "npm";
+}
+function parseExpressProviders(source) {
+    const matches = [...source.matchAll(/router\.get\("\/(google|github)(?:\/|\")/g)];
+    const providers = matches
+        .map((match) => match[1])
+        .filter((provider) => typeof provider === "string");
+    return supportedOAuthProviders([...new Set(providers)]);
+}
+function parseFullstackProviders(source) {
+    const arraySource = source.match(/enabledOAuthProviders[^=]*=\s*(\[[^;]*\])/s)?.[1];
+    if (!arraySource)
+        return [];
+    try {
+        const providers = JSON.parse(arraySource);
+        return Array.isArray(providers)
+            ? supportedOAuthProviders(providers.filter((value) => typeof value === "string"))
+            : [];
+    }
+    catch {
+        return [];
+    }
+}
+async function readOAuthProviders(rootDir, preset) {
+    const filename = preset === "fullstack"
+        ? path.join(rootDir, "apps/web/src/auth/providers.ts")
+        : path.join(rootDir, "src/auth/routes/oauth.routes.ts");
+    if (!(await fs.pathExists(filename)))
+        return [];
+    const source = await fs.readFile(filename, "utf8");
+    return preset === "fullstack"
+        ? parseFullstackProviders(source)
+        : parseExpressProviders(source);
+}
+async function detectPreset(rootDir, rootPackage) {
+    const apiPackagePath = path.join(rootDir, "apps/api/package.json");
+    const fullstackServerPath = path.join(rootDir, "apps/api/src/server.ts");
+    if (Array.isArray(rootPackage.workspaces) &&
+        await fs.pathExists(apiPackagePath) &&
+        await fs.pathExists(fullstackServerPath)) {
+        const appDir = path.join(rootDir, "apps/api");
+        const appPackageJson = await readPackageJson(apiPackagePath);
+        if (!dependency(appPackageJson, "authenik8-core")) {
+            throw new DoctorProjectError("The API workspace does not declare authenik8-core.");
+        }
+        return { preset: "fullstack", appDir, appPackageJson };
+    }
+    if (dependency(rootPackage, "authenik8-core") &&
+        await fs.pathExists(path.join(rootDir, "src/server.ts"))) {
+        const oauthRoutes = path.join(rootDir, "src/auth/routes/oauth.routes.ts");
+        const authRoutes = path.join(rootDir, "src/routes/auth.routes.ts");
+        const preset = await fs.pathExists(oauthRoutes)
+            ? "auth-oauth"
+            : await fs.pathExists(authRoutes)
+                ? "auth"
+                : "base";
+        return { preset, appDir: rootDir, appPackageJson: rootPackage };
+    }
+    throw new DoctorProjectError("This directory is not a recognized Authenik8 project. Run doctor from the generated project root.");
+}
+export async function createDoctorContext(directory) {
+    const rootDir = path.resolve(directory);
+    const rootPackagePath = path.join(rootDir, "package.json");
+    if (!(await fs.pathExists(rootPackagePath))) {
+        throw new DoctorProjectError(`No package.json found in ${rootDir}.`);
+    }
+    const packageJson = await readPackageJson(rootPackagePath);
+    const manifest = await readProjectManifest(rootDir);
+    const { preset, appDir, appPackageJson } = await detectPreset(rootDir, packageJson);
+    const prismaSchemaPath = path.join(appDir, "prisma/schema.prisma");
+    const usesPrisma = await fs.pathExists(prismaSchemaPath);
+    let databaseProvider;
+    if (usesPrisma) {
+        const prismaSchema = await fs.readFile(prismaSchemaPath, "utf8");
+        const provider = prismaSchema.match(/provider\s*=\s*"(sqlite|postgresql)"/)?.[1];
+        if (provider === "sqlite" || provider === "postgresql")
+            databaseProvider = provider;
+    }
+    const envPath = path.join(rootDir, ".env");
+    let env = {};
+    let envParseError;
+    if (await fs.pathExists(envPath)) {
+        try {
+            env = parseEnv(await fs.readFile(envPath, "utf8"));
+        }
+        catch {
+            envParseError = "invalid dotenv syntax";
+        }
+    }
+    return {
+        rootDir,
+        appDir,
+        preset,
+        packageManager: await detectPackageManager(rootDir, packageJson, manifest.status === "valid" ? manifest.manifest.packageManager : undefined),
+        packageJson,
+        appPackageJson,
+        env,
+        ...(envParseError ? { envParseError } : {}),
+        oauthProviders: await readOAuthProviders(rootDir, preset),
+        usesPrisma,
+        ...(databaseProvider ? { databaseProvider } : {}),
+        manifest,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/src/commands/doctor/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/commands/doctor/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,uBAAuB,EAAsB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQnE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,SAAS,UAAU,CAAC,WAAwB,EAAE,IAAY;IACxD,OAAO,WAAW,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAgB,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,WAAwB,EACxB,sBAA6C;IAE7C,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7E,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAClF,IACE,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAC9C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,sBAAsB,IAAI,KAAK,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACxB,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC1E,OAAO,uBAAuB,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;QACrD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7B,CAAC,CAAC,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;YAClG,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAoB;IACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,WAAW;QACrC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gCAAgC,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IAE1D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,WAAwB;IAExB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnE,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAEzE,IACE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC;QACrC,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QACnC,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACxC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzD,CAAC;IAED,IACE,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC;QACzC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QACnE,MAAM,MAAM,GAAiB,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAC3D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC/B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,kBAAkB,CAC1B,mGAAmG,CACpG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,OAAO,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACzD,IAAI,gBAAqD,CAAC;IAC1D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY;YAAE,gBAAgB,GAAG,QAAQ,CAAC;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,GAAuC,EAAE,CAAC;IACjD,IAAI,aAAiC,CAAC;IAEtC,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,uBAAuB,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,MAAM;QACN,cAAc,EAAE,MAAM,oBAAoB,CACxC,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAC3E;QACD,WAAW;QACX,cAAc;QACd,GAAG;QACH,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,cAAc,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC;QACzD,UAAU;QACV,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/src/commands/doctor/index.d.ts

@@ -0,0 +1,9 @@
+import type { DoctorOptions, DoctorReport, DoctorRuntimeOptions } from "./types.js";
+export declare class DoctorUsageError extends Error {
+}
+export type ParsedDoctorArguments = DoctorOptions & {
+    help: boolean;
+};
+export declare function parseDoctorArguments(args: readonly string[], cwd?: string): ParsedDoctorArguments;
+export declare function runDoctor(options: DoctorOptions, runtime?: DoctorRuntimeOptions): Promise<DoctorReport>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/doctor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAEV,aAAa,EACb,YAAY,EACZ,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAE9C,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtE,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,SAAgB,GAClB,qBAAqB,CAqBvB;AAgBD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,YAAY,CAAC,CA6CvB"}

package/dist/src/commands/doctor/index.js

@@ -0,0 +1,80 @@
+import path from "node:path";
+import { createDoctorContext } from "./context.js";
+import { runStaticChecks } from "./checks.js";
+import { redisEndpointFromEnv, probeRedis } from "./services.js";
+export class DoctorUsageError extends Error {
+}
+export function parseDoctorArguments(args, cwd = process.cwd()) {
+    let directory;
+    let json = false;
+    let skipServices = false;
+    let help = false;
+    for (const argument of args) {
+        if (argument === "--json")
+            json = true;
+        else if (argument === "--skip-services")
+            skipServices = true;
+        else if (argument === "--help" || argument === "-h")
+            help = true;
+        else if (argument.startsWith("-"))
+            throw new DoctorUsageError(`Unknown doctor option: ${argument}`);
+        else if (directory)
+            throw new DoctorUsageError("Doctor accepts at most one project directory.");
+        else
+            directory = argument;
+    }
+    return {
+        directory: path.resolve(cwd, directory ?? "."),
+        json,
+        skipServices,
+        help,
+    };
+}
+function serviceCheck(status, message, fix) {
+    return {
+        id: "service.redis",
+        label: "Redis",
+        status,
+        message,
+        ...(fix ? { fix } : {}),
+    };
+}
+export async function runDoctor(options, runtime = {}) {
+    const context = await createDoctorContext(options.directory);
+    const checks = await runStaticChecks(context, runtime.nodeVersion, runtime.allowMissingCore);
+    if (options.skipServices) {
+        checks.push(serviceCheck("warn", "Live service checks were skipped"));
+    }
+    else if (context.envParseError) {
+        checks.push(serviceCheck("warn", "Redis was not checked because .env is invalid"));
+    }
+    else if (context.env.REDIS_URL?.trim() === "memory://") {
+        checks.push(serviceCheck("pass", "In-process Redis will initialize with the API process"));
+    }
+    else {
+        try {
+            const usesRedisUrl = context.preset === "fullstack"
+                || Boolean(context.env.REDIS_URL?.trim());
+            const endpoint = redisEndpointFromEnv(context.env, usesRedisUrl);
+            if (!endpoint.host
+                || !Number.isInteger(endpoint.port)
+                || endpoint.port < 1
+                || endpoint.port > 65_535) {
+                throw new Error("Redis host or port is invalid");
+            }
+            await (runtime.redisProbe ?? probeRedis)(endpoint);
+            checks.push(serviceCheck("pass", `Redis answered PING at ${endpoint.host}:${endpoint.port}`));
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            checks.push(serviceCheck("fail", `Redis is not ready: ${detail}`, "Start the configured Redis service, then rerun doctor."));
+        }
+    }
+    const summary = {
+        passed: checks.filter((item) => item.status === "pass").length,
+        warnings: checks.filter((item) => item.status === "warn").length,
+        failed: checks.filter((item) => item.status === "fail").length,
+    };
+    return { rootDir: context.rootDir, preset: context.preset, checks, summary };
+}
+//# sourceMappingURL=index.js.map