create-nola-lang 0.1.4 → 0.1.6

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAqB,KAAK,cAAc,EAAc,MAAM,UAAU,CAAC;AAC/F,OAAO,EAA8B,KAAK,OAAO,EAAgB,MAAM,kBAAkB,CAAC;AAI1F;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,qBAAa,sBAAuB,SAAQ,KAAK;IACtC,IAAI,SAA4B;gBAC7B,OAAO,SAAsD;CAG1E;AAED,wFAAwF;AACxF,qBAAa,WAAY,SAAQ,KAAK;IAC3B,IAAI,SAAiB;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,+GAA+G;AAC/G,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,8JAA8J;AAC9J,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAC/C,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAsD1C,kFAAkF;AAClF,wBAAgB,QAAQ,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAGlE;AAED,kIAAkI;AAClI,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAY3I;AAmGD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAE3E;AAED,wGAAwG;AACxG,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAE/E;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAYxH;AAED,4EAA4E;AAC5E,wBAAsB,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlH;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD,mIAAmI;AACnI,wBAAsB,UAAU,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAU/G;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,0EAA0E;IAC1E,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,uKAAuK;IACvK,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,2HAA2H;AAC3H,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAgClE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAAC,CAmBrH;AAED,iDAAiD;AACjD,wBAAsB,OAAO,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,GAAG,eAAe,CAAC,CAY7F"}

package/dist/auth.js

@@ -0,0 +1,334 @@
+import { createHash, randomBytes } from "node:crypto";
+import { createServer } from "node:http";
+import { fetchCapabilities, nolaApiUrl } from "./api.js";
+import { deleteSession, readSession, writeSession } from "./credentials.js";
+import { readHomeConfig } from "./home-config.js";
+import { openBrowser } from "./open-url.js";
+/**
+ * Sign-in for the CLI: the Auth0 Authorization Code + PKCE flow (RFC 7636)
+ * with a loopback redirect (RFC 8252 §7.3), against the tenant the Nola API
+ * names in `GET /v1/capabilities` (platform spec 2026-09-07 §6). The machine's
+ * recorded trial account id rides `/authorize` as `ext-nola_account`; the
+ * tenant's Action puts it in the access token and the API claims the account.
+ * Zero deps — node:http for the one callback, form-encoded POSTs over fetch.
+ * Tokens live in `~/.nola/credentials.json` and are never printed.
+ */
+/** The server does not offer sign-in (no `auth` in its capabilities). */
+export class SignInUnavailableError extends Error {
+    name = "SignInUnavailableError";
+    constructor(message = "Sign-in is not available on this Nola server yet.") {
+        super(message);
+    }
+}
+/** The sign-in ran but did not complete (denied, expired, network, malformed reply). */
+export class SignInError extends Error {
+    name = "SignInError";
+}
+/** Mirrors core's NOLA_ACCOUNT_PARAM — the /authorize query parameter the tenant's post-login Action reads. */
+export const ACCOUNT_PARAM = "ext-nola_account";
+/** Mirrors core's NOLA_ACCOUNT_CLAIM — the access-token claim the Action sets; the API refuses tokens without it (spec 2026-09-07 account-claim-required). */
+export const ACCOUNT_CLAIM = "nola:account_id";
+/** How long the browser has to come back to the loopback callback. */
+export const SIGN_IN_TIMEOUT_MS = 300_000;
+const SCOPE = "openid profile email offline_access";
+const CALLBACK_PATH = "/callback";
+/** Refresh when the access token has less than this left. */
+const REFRESH_MARGIN_MS = 60_000;
+async function postForm(init, url, form) {
+    const doFetch = init.fetch ?? globalThis.fetch;
+    let res;
+    try {
+        res = await doFetch(url, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+            body: new URLSearchParams(form).toString(),
+        });
+    }
+    catch (err) {
+        throw new SignInError(`Could not reach the sign-in provider at ${url}: ${err instanceof Error ? err.message : String(err)}`, {
+            cause: err,
+        });
+    }
+    const text = await res.text();
+    let body;
+    try {
+        body = text === "" ? {} : JSON.parse(text);
+    }
+    catch {
+        body = {};
+    }
+    return { ok: res.ok, status: res.status, body: typeof body === "object" && body !== null ? body : {} };
+}
+const str = (v) => (typeof v === "string" && v !== "" ? v : undefined);
+const num = (v, fallback) => (typeof v === "number" && Number.isFinite(v) ? v : fallback);
+function describe(body, fallback) {
+    return str(body.error_description) ?? str(body.error) ?? fallback;
+}
+function tokenSetOf(body) {
+    const accessToken = str(body.access_token);
+    if (!accessToken)
+        throw new SignInError("Sign-in did not complete: the provider returned no access token.");
+    return {
+        accessToken,
+        ...(str(body.refresh_token) ? { refreshToken: str(body.refresh_token) } : {}),
+        expiresIn: num(body.expires_in, 3600),
+        ...(str(body.id_token) ? { idToken: str(body.id_token) } : {}),
+    };
+}
+/** RFC 7636: a 32-byte random verifier and its S256 challenge, both base64url. */
+export function pkcePair() {
+    const verifier = randomBytes(32).toString("base64url");
+    return { verifier, challenge: createHash("sha256").update(verifier).digest("base64url") };
+}
+/** The `/authorize` URL: code flow, PKCE S256, our audience and scopes, `state`, and the trial hint when this machine has one. */
+export function authorizeUrl(auth, p) {
+    const u = new URL(`${auth.issuer}/authorize`);
+    u.searchParams.set("response_type", "code");
+    u.searchParams.set("client_id", auth.clientId);
+    u.searchParams.set("redirect_uri", p.redirectUri);
+    u.searchParams.set("scope", SCOPE);
+    u.searchParams.set("audience", auth.audience);
+    u.searchParams.set("code_challenge", p.challenge);
+    u.searchParams.set("code_challenge_method", "S256");
+    u.searchParams.set("state", p.state);
+    if (p.accountId)
+        u.searchParams.set(ACCOUNT_PARAM, p.accountId);
+    return u.href;
+}
+const HTML_ESCAPES = { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" };
+const escapeHtml = (s) => s.replace(/[&<>"']/g, (c) => HTML_ESCAPES[c]);
+const page = (title, body) => `<!doctype html><meta charset="utf-8"><title>${escapeHtml(title)}</title><body style="font:16px system-ui;margin:3rem auto;max-width:32rem"><h1>${escapeHtml(title)}</h1><p>${escapeHtml(body)}</p></body>`;
+/** Bind 127.0.0.1 on the first free port of the list (0 = any, tests only). All busy → SignInError. */
+async function listenOnOneOf(ports, handler) {
+    for (const port of ports) {
+        const server = createServer(handler);
+        const bound = await new Promise((resolve, reject) => {
+            server.once("error", (err) => (err.code === "EADDRINUSE" || err.code === "EACCES" ? resolve(undefined) : reject(err)));
+            server.listen(port, "127.0.0.1", () => resolve(server.address().port));
+        });
+        if (bound !== undefined)
+            return { server, port: bound };
+    }
+    throw new SignInError(`Sign-in could not start: ports ${ports.join(", ")} on 127.0.0.1 are in use.`);
+}
+/**
+ * The one callback: `run` gets the redirect URI once the listener is up (and
+ * opens the browser); the promise is the authorization code, or the
+ * user-facing SignInError. The browser tab gets a page either way; the
+ * listener closes as soon as the outcome is known or the deadline passes.
+ */
+async function awaitCallback(ports, state, timeoutMs, run) {
+    let settle;
+    const result = new Promise((resolve, reject) => {
+        settle = { resolve, reject };
+    });
+    // `connection: close`: the browser's socket ends with the page, so closing the server below never waits on keep-alive
+    const html = { "content-type": "text/html; charset=utf-8", connection: "close" };
+    const { server, port } = await listenOnOneOf(ports, (req, res) => {
+        const url = new URL(req.url ?? "/", "http://127.0.0.1");
+        if (url.pathname !== CALLBACK_PATH) {
+            res.writeHead(404, { "content-type": "text/plain", connection: "close" }).end("not found");
+            return;
+        }
+        if (!settle) {
+            res.writeHead(410, html).end(page("Nola", "This sign-in already finished. Return to the terminal."));
+            return;
+        }
+        const { resolve, reject } = settle;
+        settle = undefined;
+        const q = url.searchParams;
+        if (q.get("state") !== state) {
+            res.writeHead(400, html).end(page("Sign-in failed", "The browser returned an unexpected state. Return to the terminal and run the command again."));
+            reject(new SignInError("Sign-in failed: the browser returned an unexpected state."));
+            return;
+        }
+        const error = q.get("error");
+        if (error) {
+            const reason = error === "access_denied" ? "Sign-in was declined in the browser." : `Sign-in failed: ${q.get("error_description") ?? error}`;
+            res.writeHead(200, html).end(page("Sign-in failed", `${reason} Return to the terminal.`));
+            reject(new SignInError(reason));
+            return;
+        }
+        const code = q.get("code");
+        if (!code) {
+            res.writeHead(400, html).end(page("Sign-in failed", "The browser returned no code. Return to the terminal and run the command again."));
+            reject(new SignInError("Sign-in failed: the browser returned no authorization code."));
+            return;
+        }
+        res.writeHead(200, html).end(page("Signed in to Nola", "You can close this tab and return to the terminal."));
+        resolve(code);
+    });
+    const timer = setTimeout(() => {
+        settle?.reject(new SignInError("Sign-in timed out — the browser did not come back within 5 minutes. Run the command again."));
+        settle = undefined;
+    }, timeoutMs);
+    try {
+        run(`http://127.0.0.1:${port}${CALLBACK_PATH}`);
+        return await result;
+    }
+    finally {
+        clearTimeout(timer);
+        // stop accepting; drop idle keep-alive sockets (a browser's speculative second connection) but let the page finish sending
+        const closed = new Promise((r) => server.close(() => r()));
+        server.closeIdleConnections();
+        await closed;
+    }
+}
+/** A JWT's payload, decoded and NOT verified — display and sanity checks only; the API is the verifier. */
+function claimsOf(token) {
+    const payload = token?.split(".")[1];
+    if (!payload)
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+        return typeof parsed === "object" && parsed !== null ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The `email` claim of an id token's payload — display only, never verified. */
+export function emailFromIdToken(idToken) {
+    return str(claimsOf(idToken)?.email) ?? null;
+}
+/** The `nola:account_id` claim of an access token, or null when the tenant's Action did not set one. */
+export function accountIdOfToken(accessToken) {
+    return str(claimsOf(accessToken)?.[ACCOUNT_CLAIM]) ?? null;
+}
+/** A refresh; Auth0's rotating refresh tokens return a replacement, which callers store. */
+export async function refreshTokens(auth, refreshToken, init = {}) {
+    const { ok, status, body } = await postForm(init, `${auth.issuer}/oauth/token`, {
+        grant_type: "refresh_token",
+        client_id: auth.clientId,
+        refresh_token: refreshToken,
+    });
+    if (!ok) {
+        const err = new SignInError(`Your Nola session could not be refreshed (${status}): ${describe(body, "refresh failed")}`);
+        err.status = status;
+        throw err;
+    }
+    return tokenSetOf(body);
+}
+/** Best effort: tell the tenant the refresh token is dead. Never throws. */
+export async function revokeToken(auth, refreshToken, init = {}) {
+    const doFetch = init.fetch ?? globalThis.fetch;
+    try {
+        await doFetch(`${auth.issuer}/oauth/revoke`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ client_id: auth.clientId, token: refreshToken }),
+        });
+    }
+    catch {
+        // the local session is deleted regardless
+    }
+}
+function resolve(opts) {
+    const apiUrl = (opts.apiUrl ?? opts.baseUrl ?? nolaApiUrl()).replace(/\/$/, "");
+    return { apiUrl, client: { ...(opts.fetch ? { fetch: opts.fetch } : {}), baseUrl: apiUrl } };
+}
+/** The server's sign-in configuration (issuer, client, audience, at least one usable loopback port), or SignInUnavailableError. */
+export async function authConfig(opts = {}) {
+    const { client } = resolve(opts);
+    const caps = await fetchCapabilities(client);
+    const auth = caps.auth;
+    const ports = Array.isArray(auth?.redirectPorts) ? auth.redirectPorts.filter((p) => Number.isInteger(p) && p >= 0 && p <= 65535) : [];
+    if (!auth || !str(auth.issuer) || !str(auth.clientId) || !str(auth.audience) || ports.length === 0)
+        throw new SignInUnavailableError();
+    return {
+        auth: { issuer: auth.issuer.replace(/\/$/, ""), clientId: auth.clientId, audience: auth.audience, redirectPorts: ports },
+        ...(caps.consoleUrl ? { consoleUrl: caps.consoleUrl } : {}),
+    };
+}
+function sessionOf(tokens, previous) {
+    const refreshToken = tokens.refreshToken ?? previous?.refreshToken;
+    if (!refreshToken)
+        throw new SignInError("Sign-in did not complete: the provider returned no refresh token (offline_access is required).");
+    return {
+        accessToken: tokens.accessToken,
+        refreshToken,
+        expiresAt: new Date(Date.now() + tokens.expiresIn * 1000).toISOString(),
+        email: emailFromIdToken(tokens.idToken) ?? previous?.email ?? null,
+    };
+}
+/** The whole PKCE flow: discover, listen, open /authorize, take the callback, exchange, store. Returns the new session. */
+export async function signIn(opts) {
+    const { apiUrl, client } = resolve(opts);
+    const { auth } = await authConfig(opts);
+    const { verifier, challenge } = pkcePair();
+    const state = randomBytes(16).toString("base64url");
+    const accountId = (await readHomeConfig(opts.home))?.accounts[apiUrl]?.accountId;
+    let redirectUri = "";
+    const code = await awaitCallback(auth.redirectPorts ?? [], state, opts.timeoutMs ?? SIGN_IN_TIMEOUT_MS, (uri) => {
+        redirectUri = uri;
+        const url = authorizeUrl(auth, { redirectUri, challenge, state, ...(accountId ? { accountId } : {}) });
+        opts.note(`Sign in to Nola: open ${url}`);
+        (opts.open ?? openBrowser)(url);
+        opts.note("Waiting for the browser…");
+    });
+    const { ok, status, body } = await postForm(client, `${auth.issuer}/oauth/token`, {
+        grant_type: "authorization_code",
+        client_id: auth.clientId,
+        code,
+        code_verifier: verifier,
+        redirect_uri: redirectUri,
+    });
+    if (!ok)
+        throw new SignInError(`Sign-in failed (${status}): ${describe(body, "token request failed")}`);
+    const session = sessionOf(tokenSetOf(body));
+    // account-claim-required: the tenant's Action provisions the account at login and names it in the token; a token without it is useless to the API
+    if (!accountIdOfToken(session.accessToken)) {
+        throw new SignInError("Sign-in did not return your Nola account — the server's sign-in provider is misconfigured. Nothing was stored.");
+    }
+    if ((await writeSession(opts.home, apiUrl, session)) === "skipped") {
+        opts.note("Could not store the session in ~/.nola/credentials.json — you will be asked to sign in again next time.");
+    }
+    opts.note(session.email ? `Signed in as ${session.email}.` : "Signed in.");
+    return session;
+}
+/**
+ * A usable access token for the API URL, refreshing (and re-storing) when
+ * the stored one is within a minute of expiry. undefined = not signed in. A
+ * refresh the tenant refuses deletes the session (the user signs in again);
+ * a network failure during refresh throws so callers can say so.
+ */
+export async function accessTokenFor(opts = {}) {
+    const { apiUrl, client } = resolve(opts);
+    const session = await readSession(opts.home, apiUrl);
+    if (!session)
+        return undefined;
+    if (Date.parse(session.expiresAt) - Date.now() > REFRESH_MARGIN_MS)
+        return { token: session.accessToken, session };
+    const { auth } = await authConfig(opts);
+    let tokens;
+    try {
+        tokens = await refreshTokens(auth, session.refreshToken, client);
+    }
+    catch (err) {
+        if (err instanceof SignInError && typeof err.status === "number") {
+            await deleteSession(opts.home, apiUrl);
+            return undefined;
+        }
+        throw err;
+    }
+    const next = sessionOf(tokens, session);
+    await writeSession(opts.home, apiUrl, next);
+    return { token: next.accessToken, session: next };
+}
+/** Revoke best-effort and forget the session. */
+export async function signOut(opts = {}) {
+    const { apiUrl, client } = resolve(opts);
+    const session = await readSession(opts.home, apiUrl);
+    if (!session)
+        return "not-signed-in";
+    try {
+        const { auth } = await authConfig(opts);
+        await revokeToken(auth, session.refreshToken, client);
+    }
+    catch {
+        // unreachable tenant or a server without auth: the local session still goes
+    }
+    await deleteSession(opts.home, apiUrl);
+    return "signed-out";
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAmB,iBAAiB,EAAuB,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAgB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,wBAAwB,CAAC;IACzC,YAAY,OAAO,GAAG,mDAAmD;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,aAAa,CAAC;CAC/B;AAUD,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAChD,8JAA8J;AAC9J,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,sEAAsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,KAAK,GAAG,qCAAqC,CAAC;AACpD,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAIjC,KAAK,UAAU,QAAQ,CACrB,IAAgB,EAChB,GAAW,EACX,IAAU;IAEV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAC/C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5F,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,2CAA2C,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YAC3H,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtI,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACpG,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,QAAgB,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAEnH,SAAS,QAAQ,CAAC,IAA6B,EAAE,QAAgB;IAC/D,OAAO,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,WAAW,CAAC,kEAAkE,CAAC,CAAC;IAC5G,OAAO;QACL,WAAW;QACX,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ;IACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,kIAAkI;AAClI,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,CAAgF;IACjI,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC;IAC9C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,YAAY,GAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AACrH,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAW,CAAC,CAAC;AAC1F,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAC3C,+CAA+C,UAAU,CAAC,KAAK,CAAC,kFAAkF,UAAU,CAAC,KAAK,CAAC,WAAW,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;AAI9M,uGAAuG;AACvG,KAAK,UAAU,aAAa,CAAC,KAAwB,EAAE,OAAgB;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9I,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAE,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,WAAW,CAAC,kCAAkC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AACvG,CAAC;AAID;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,KAAwB,EAAE,KAAa,EAAE,SAAiB,EAAE,GAAkC;IACzH,IAAI,MAA0B,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,sHAAsH;IACtH,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,0BAA0B,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,wDAAwD,CAAC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QACnC,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,6FAA6F,CAAC,CAAC,CAAC;YACpJ,MAAM,CAAC,IAAI,WAAW,CAAC,2DAA2D,CAAC,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;YAC7I,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,iFAAiF,CAAC,CAAC,CAAC;YACxI,MAAM,CAAC,IAAI,WAAW,CAAC,6DAA6D,CAAC,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,oDAAoD,CAAC,CAAC,CAAC;QAC9G,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,4FAA4F,CAAC,CAAC,CAAC;QAC9H,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,IAAI,CAAC;QACH,GAAG,CAAC,oBAAoB,IAAI,GAAG,aAAa,EAAE,CAAC,CAAC;QAChD,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,2HAA2H;QAC3H,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC9B,MAAM,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,QAAQ,CAAC,KAAyB;IACzC,MAAM,OAAO,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvF,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;AAC/C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,gBAAgB,CAAC,WAA+B;IAC9D,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7D,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB,EAAE,YAAoB,EAAE,OAAmB,EAAE;IACnG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,cAAc,EAAE;QAC9E,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,6CAA6C,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACxH,GAAwC,CAAC,MAAM,GAAG,MAAM,CAAC;QAC1D,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAoB,EAAE,YAAoB,EAAE,OAAmB,EAAE;IACjG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,eAAe,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;AACH,CAAC;AASD,SAAS,OAAO,CAAC,IAAiB;IAChC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,mIAAmI;AACnI,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAoB,EAAE;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACvI,OAAO;QACL,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE;QACxH,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAWD,SAAS,SAAS,CAAC,MAAgB,EAAE,QAAkB;IACrD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,QAAQ,EAAE,YAAY,CAAC;IACnE,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,gGAAgG,CAAC,CAAC;IAC3I,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACvE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,KAAK,IAAI,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IACjF,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9G,WAAW,GAAG,GAAG,CAAC;QAClB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,cAAc,EAAE;QAChF,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,IAAI;QACJ,aAAa,EAAE,QAAQ;QACvB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,kJAAkJ;IAClJ,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,WAAW,CAAC,gHAAgH,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAoB,EAAE;IACzD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;IACnH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,IAAI,OAAQ,GAAyC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB,EAAE;IAClD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IACD,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/checkout.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The nola-monorepo root when this module runs from inside the dev checkout
+ * (both src/ and dist/ sit two levels below the root's packages/ dir), else
+ * null. A published copy lives under node_modules and never matches.
+ */
+export declare function checkoutRoot(): Promise<string | null>;
+/**
+ * Dev-only switch: the absolute path of a nola-monorepo checkout. When set,
+ * the init flow relinks a freshly installed scaffold to that checkout's
+ * packages/ (see linkCheckoutPackages). An env var rather than detection so
+ * a CLI installed outside the monorepo can be pointed at it while testing.
+ */
+export declare const LINK_CHECKOUT_ENV = "NOLA_LINK_CHECKOUT";
+/** The checkout root NOLA_LINK_CHECKOUT names, or null when unset/blank. */
+export declare function linkCheckoutFromEnv(env?: NodeJS.ProcessEnv): string | null;
+export declare const CHECKOUT_LINKED_PACKAGES: readonly string[];
+/**
+ * Dev mode only: replace the scaffold's registry copies of the Nola packages
+ * with junctions into the checkout's packages/, so a `nola init` run from a
+ * linked CLI tests the workspace build instead of the last npm release.
+ * Returns the linked package names.
+ */
+export declare function linkCheckoutPackages(dir: string, root: string): Promise<string[]>;
+//# sourceMappingURL=checkout.d.ts.map

package/dist/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../src/checkout.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAU3D;AAaD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAGvF;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAAgC,CAAC;AAEvF;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAYvF"}

package/dist/checkout.js

@@ -0,0 +1,65 @@
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rm, symlink } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/**
+ * The nola-monorepo root when this module runs from inside the dev checkout
+ * (both src/ and dist/ sit two levels below the root's packages/ dir), else
+ * null. A published copy lives under node_modules and never matches.
+ */
+export async function checkoutRoot() {
+    const repoRoot = fileURLToPath(new URL("../../..", import.meta.url));
+    const rootManifest = join(repoRoot, "package.json");
+    if (!existsSync(rootManifest))
+        return null;
+    try {
+        const pkg = JSON.parse(await readFile(rootManifest, "utf8"));
+        return pkg.name === "nola-monorepo" ? repoRoot : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The packages a scaffold depends on directly, as package name → workspace
+ * dir. Their internal deps resolve through the junction's real path into the
+ * checkout's hoisted node_modules, so nothing else needs linking.
+ */
+const LINKS = [
+    ["@nola-lang/runtime", "runtime"],
+    ["@nola-lang/providers", "providers"],
+    ["nola-lang", "nola-lang"],
+];
+/**
+ * Dev-only switch: the absolute path of a nola-monorepo checkout. When set,
+ * the init flow relinks a freshly installed scaffold to that checkout's
+ * packages/ (see linkCheckoutPackages). An env var rather than detection so
+ * a CLI installed outside the monorepo can be pointed at it while testing.
+ */
+export const LINK_CHECKOUT_ENV = "NOLA_LINK_CHECKOUT";
+/** The checkout root NOLA_LINK_CHECKOUT names, or null when unset/blank. */
+export function linkCheckoutFromEnv(env = process.env) {
+    const value = env[LINK_CHECKOUT_ENV]?.trim();
+    return value ? value : null;
+}
+export const CHECKOUT_LINKED_PACKAGES = LINKS.map(([name]) => name);
+/**
+ * Dev mode only: replace the scaffold's registry copies of the Nola packages
+ * with junctions into the checkout's packages/, so a `nola init` run from a
+ * linked CLI tests the workspace build instead of the last npm release.
+ * Returns the linked package names.
+ */
+export async function linkCheckoutPackages(dir, root) {
+    const linked = [];
+    for (const [name, pkg] of LINKS) {
+        const target = join(root, "packages", pkg);
+        const link = join(dir, "node_modules", name);
+        await mkdir(dirname(link), { recursive: true });
+        // rm lstat's its path: an existing junction is unlinked, never descended.
+        await rm(link, { recursive: true, force: true });
+        await symlink(target, link, "junction");
+        linked.push(name);
+    }
+    return linked;
+}
+//# sourceMappingURL=checkout.js.map

package/dist/checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.js","sourceRoot":"","sources":["../src/checkout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAsB,CAAC;QAClF,OAAO,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,KAAK,GAAwD;IACjE,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACjC,CAAC,sBAAsB,EAAE,WAAW,CAAC;IACrC,CAAC,WAAW,EAAE,WAAW,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAsB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAY;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,0EAA0E;QAC1E,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}