devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/provider-auth/provider-auth-generator.service.js

@@ -0,0 +1,367 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthGeneratorService = exports.PROVIDER_AUTH_GENERATOR_OPTIONS = void 0;
+exports.redactSecrets = redactSecrets;
+exports.buildLoginEnv = buildLoginEnv;
+exports.loginArgv = loginArgv;
+exports.resolveExecutable = resolveExecutable;
+const provider_cli_policy_1 = require("../providers/adapters/provider-cli-policy");
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const common_1 = require("@nestjs/common");
+const error_types_1 = require("../../common/errors/error-types");
+const logger_1 = require("../../common/logging/logger");
+const provider_adapter_factory_1 = require("../providers/adapters/provider-adapter.factory");
+const storage_interface_1 = require("../storage/interfaces/storage.interface");
+const process_executor_port_1 = require("../terminal/services/process-executor/process-executor.port");
+const standalone_terminal_service_1 = require("../terminal/services/standalone-terminal.service");
+const provider_auth_adapters_1 = require("./provider-auth-adapters");
+const provider_auth_vault_service_1 = require("./provider-auth-vault.service");
+const logger = (0, logger_1.createLogger)('ProviderAuthGeneratorService');
+exports.PROVIDER_AUTH_GENERATOR_OPTIONS = Symbol('PROVIDER_AUTH_GENERATOR_OPTIONS');
+const OUTPUT_LIMIT = 64 * 1024;
+const CONTROL_CHARS = /[\x00-\x1f\x7f]/;
+const FINISHED_KEPT = 50;
+const SECRET_PATTERNS = [
+    /\bgh[opsur]_[A-Za-z0-9]{20,}\b/g,
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]*/g,
+];
+function redactSecrets(text, secrets) {
+    let out = text;
+    for (const secret of [...secrets].sort((a, b) => b.length - a.length)) {
+        if (secret)
+            out = out.split(secret).join('[redacted]');
+    }
+    for (const pattern of SECRET_PATTERNS)
+        out = out.replace(pattern, '[redacted]');
+    return out;
+}
+function buildLoginEnv(base, change) {
+    const env = {};
+    for (const [key, value] of Object.entries(base)) {
+        if (value !== undefined &&
+            provider_auth_adapters_1.PROVIDER_AUTH_ENV_KEY_PATTERN.test(key) &&
+            !CONTROL_CHARS.test(value))
+            env[key] = value;
+    }
+    for (const key of change.unset)
+        delete env[key];
+    return { ...env, ...change.set };
+}
+function loginArgv(argv, change) {
+    return [
+        '/usr/bin/env',
+        ...change.unset.flatMap((key) => ['-u', key]),
+        ...Object.entries(change.set).map(([key, value]) => `${key}=${value}`),
+        ...argv,
+    ];
+}
+async function resolveExecutable(command, path) {
+    const candidates = command.includes('/')
+        ? [command]
+        : (path ?? '')
+            .split(node_path_1.delimiter)
+            .filter(Boolean)
+            .map((dir) => (0, node_path_1.join)(dir, command));
+    for (const candidate of candidates) {
+        if (!(0, node_path_1.isAbsolute)(candidate))
+            continue;
+        const ok = await (0, promises_1.access)(candidate, promises_1.constants.X_OK).then(() => true, () => false);
+        if (ok)
+            return candidate;
+    }
+    return null;
+}
+let ProviderAuthGeneratorService = class ProviderAuthGeneratorService {
+    vault;
+    terminals;
+    adapters;
+    executor;
+    storage;
+    generations = new Map();
+    starting = new Set();
+    baseDir;
+    pollIntervalMs;
+    timeoutMs;
+    commandTimeoutMs;
+    constructor(vault, terminals, adapters, executor, storage, options = null) {
+        this.vault = vault;
+        this.terminals = terminals;
+        this.adapters = adapters;
+        this.executor = executor;
+        this.storage = storage;
+        this.baseDir = options?.baseDir ?? (0, node_path_1.join)((0, node_os_1.homedir)(), 'devchain-auth-gen');
+        this.pollIntervalMs = options?.pollIntervalMs ?? 1000;
+        this.timeoutMs = options?.timeoutMs ?? 10 * 60_000;
+        this.commandTimeoutMs = options?.commandTimeoutMs ?? 120_000;
+    }
+    async onModuleInit() {
+        const names = await (0, promises_1.readdir)(this.baseDir).catch(() => []);
+        for (const name of names) {
+            const pid = Number(name.split('-')[0]);
+            if (!Number.isInteger(pid) || pid <= 0 || (0, standalone_terminal_service_1.isProcessAlive)(pid))
+                continue;
+            await (0, promises_1.rm)((0, node_path_1.join)(this.baseDir, name), { recursive: true, force: true }).catch((error) => logger.warn({ error: String(error) }, 'Could not remove a leftover isolated login dir'));
+        }
+    }
+    async onModuleDestroy() {
+        for (const running of this.generations.values()) {
+            await this.finish(running, 'cancelled', null);
+        }
+    }
+    async start(provider, label) {
+        const name = provider.trim().toLowerCase();
+        if (!this.adapters.isSupported(name)) {
+            throw new error_types_1.ValidationError(`Provider "${provider}" is not supported.`, {
+                reason: 'provider_not_supported',
+                supported: this.adapters.getSupportedProviders(),
+            });
+        }
+        const adapter = provider_auth_adapters_1.PROVIDER_AUTH_LOGIN_ADAPTERS[name];
+        if (!adapter) {
+            const storage = provider_auth_adapters_1.PROVIDER_AUTH_ADAPTERS[name];
+            throw new error_types_1.ValidationError(storage?.payloadKind === 'env'
+                ? `Provider "${name}" has no isolated login; paste its token instead.`
+                : `Provider "${name}" has no isolated login.`, { reason: 'provider_auth_paste_only' });
+        }
+        const running = [...this.generations.values()].find((generation) => generation.view.provider === name && !generation.finishing);
+        if (running || this.starting.has(name)) {
+            throw new error_types_1.ConflictError(`A ${name} login is already running.`, {
+                code: 'PROVIDER_AUTH_GENERATION_RUNNING',
+                generationId: running?.view.id,
+            });
+        }
+        this.starting.add(name);
+        try {
+            return await this.launch(name, adapter, label);
+        }
+        finally {
+            this.starting.delete(name);
+        }
+    }
+    async launch(name, adapter, label) {
+        const bin = await this.binResolver(adapter);
+        const id = (0, node_crypto_1.randomUUID)();
+        const dir = (0, node_path_1.join)(this.baseDir, `${process.pid}-${id}`);
+        await (0, promises_1.mkdir)(this.baseDir, { recursive: true, mode: 0o700 });
+        await (0, promises_1.mkdir)(dir, { mode: 0o700 });
+        for (const sub of adapter.prepareDirs)
+            await (0, promises_1.mkdir)((0, node_path_1.join)(dir, sub), { mode: 0o700 });
+        try {
+            const command = (0, provider_cli_policy_1.applyProviderCliNoUpdate)(name, adapter.loginCommand(bin));
+            const isolation = adapter.isolationEnv(dir);
+            const argv = loginArgv(command.argv, {
+                ...isolation,
+                set: { ...isolation.set, ...command.env },
+            });
+            const terminal = await this.terminals.start(argv, { cwd: dir });
+            const now = new Date();
+            const running = {
+                view: {
+                    id,
+                    provider: name,
+                    sessionId: terminal.sessionId,
+                    state: 'waiting',
+                    startedAt: now.toISOString(),
+                    finishedAt: null,
+                    entries: [],
+                    error: null,
+                },
+                adapter,
+                dir,
+                label: label?.trim() || `${name} login ${now.toISOString().slice(0, 16).replace('T', ' ')}`,
+                bin,
+                deadline: now.getTime() + this.timeoutMs,
+                lastSnapshot: null,
+                timer: null,
+                finishing: null,
+            };
+            this.generations.set(id, running);
+            this.pruneFinished();
+            logger.info({ generationId: id, provider: name, sessionId: terminal.sessionId }, 'Login started');
+            this.schedule(running);
+            return { ...running.view };
+        }
+        catch (error) {
+            await (0, promises_1.rm)(dir, { recursive: true, force: true });
+            throw error;
+        }
+    }
+    get(id) {
+        const running = this.generations.get(id);
+        if (!running)
+            throw new error_types_1.NotFoundError('Provider auth generation', id);
+        return { ...running.view, entries: [...running.view.entries] };
+    }
+    async cancel(id) {
+        const running = this.generations.get(id);
+        if (!running)
+            throw new error_types_1.NotFoundError('Provider auth generation', id);
+        await this.finish(running, 'cancelled', null);
+        return this.get(id);
+    }
+    schedule(running) {
+        running.timer = setTimeout(() => {
+            running.timer = null;
+            void this.tick(running).catch(async (error) => {
+                logger.error({ generationId: running.view.id, error: String(error) }, 'Login failed');
+                await this.finish(running, 'failed', 'The login could not be stored.');
+            });
+        }, this.pollIntervalMs);
+        running.timer.unref?.();
+    }
+    async tick(running) {
+        if (running.finishing)
+            return;
+        if (Date.now() > running.deadline) {
+            await this.finish(running, 'timed_out', 'No login was captured within the time limit.');
+            return;
+        }
+        const terminalRunning = await this.terminals.isRunning(running.view.sessionId);
+        const entries = await this.capture(running, terminalRunning);
+        if (running.finishing)
+            return;
+        if (!entries) {
+            if (!terminalRunning) {
+                await this.finish(running, 'failed', 'The login terminal closed before a login was captured.');
+                return;
+            }
+            this.schedule(running);
+            return;
+        }
+        running.view.state = 'verifying';
+        const verify = running.adapter.verifyCommand(running.dir, entries, running.bin);
+        const result = await this.runCommand(running.view.provider, verify.argv, verify.env, running.dir);
+        if (running.finishing)
+            return;
+        const secrets = entries.flatMap((entry) => entry.secrets);
+        if (result.code !== 0 || !verify.accepts(result.output)) {
+            const output = redactSecrets(result.output.trim(), secrets).slice(-4000);
+            await this.finish(running, 'failed', `The login did not verify (${[(0, node_path_1.basename)(verify.argv[0]), ...verify.argv.slice(1)].join(' ')} exited ${result.code ?? 'on a signal'}):\n${output}`);
+            return;
+        }
+        running.view.entries = await this.vault.createGenerated(running.view.provider, running.label, entries, new Date().toISOString());
+        await this.finish(running, 'stored', null);
+    }
+    async capture(running, terminalRunning) {
+        const { adapter, dir } = running;
+        let captured;
+        if (adapter.capture.kind === 'files') {
+            const files = {};
+            for (const file of adapter.capture.files) {
+                const content = await (0, promises_1.readFile)((0, node_path_1.join)(dir, file), 'utf8').catch(() => null);
+                if (content === null)
+                    return null;
+                files[file] = content;
+            }
+            captured = files;
+        }
+        else {
+            const ready = await (0, promises_1.stat)((0, node_path_1.join)(dir, adapter.capture.whenFile)).catch(() => null);
+            if (!ready)
+                return null;
+            const result = await this.runCommand(running.view.provider, adapter.capture.command(running.bin), adapter.isolationEnv(dir), dir);
+            if (result.code !== 0)
+                return null;
+            captured = result.stdout;
+        }
+        let entries;
+        try {
+            entries = adapter.parse(captured);
+        }
+        catch {
+            return null;
+        }
+        const snapshot = JSON.stringify(captured);
+        const stable = snapshot === running.lastSnapshot;
+        running.lastSnapshot = snapshot;
+        return stable || !terminalRunning ? entries : null;
+    }
+    finish(running, state, error) {
+        running.finishing ??= (async () => {
+            if (running.timer)
+                clearTimeout(running.timer);
+            running.timer = null;
+            const message = state === 'stored' ? 'Login stored in the provider auth vault.' : `Login ${state}.`;
+            await this.terminals
+                .end(running.view.sessionId, message)
+                .catch((cause) => logger.warn({ generationId: running.view.id, error: String(cause) }, 'Could not end terminal'));
+            await (0, promises_1.rm)(running.dir, { recursive: true, force: true });
+            running.view.state = state;
+            running.view.error = error;
+            running.view.finishedAt = new Date().toISOString();
+            logger.info({ generationId: running.view.id, state }, 'Login finished');
+        })();
+        return running.finishing;
+    }
+    pruneFinished() {
+        const finished = [...this.generations.values()].filter((running) => running.view.finishedAt);
+        for (const running of finished.slice(0, Math.max(0, finished.length - FINISHED_KEPT))) {
+            this.generations.delete(running.view.id);
+        }
+    }
+    async binResolver(adapter) {
+        const { items } = await this.storage.listProviders();
+        const configured = new Map(items.filter((row) => row.binPath).map((row) => [row.name.toLowerCase(), row.binPath]));
+        const wanted = new Set();
+        const record = (cli) => {
+            wanted.add(cli);
+            return cli;
+        };
+        adapter.loginCommand(record);
+        adapter.verifyCommand('', [], record);
+        if (adapter.capture.kind === 'command')
+            adapter.capture.command(record);
+        const resolved = new Map();
+        for (const cli of wanted) {
+            const path = await resolveExecutable(configured.get(cli) ?? cli, process.env.PATH);
+            if (!path) {
+                throw new error_types_1.ValidationError(`"${configured.get(cli) ?? cli}" was not found. Install it, or set the provider's binary path.`, { reason: 'provider_cli_missing', cli });
+            }
+            resolved.set(cli, path);
+        }
+        return (cli) => resolved.get(cli) ?? cli;
+    }
+    async runCommand(providerName, argv, change, cwd) {
+        const command = (0, provider_cli_policy_1.applyProviderCliNoUpdate)(providerName, argv);
+        const result = await this.executor.run({
+            argv: command.argv,
+            mode: 'pipe',
+            cwd,
+            env: buildLoginEnv(process.env, { ...change, set: { ...change.set, ...command.env } }),
+            timeout: this.commandTimeoutMs,
+            outputLimits: { maxBytes: OUTPUT_LIMIT },
+        });
+        const output = [result.stdout, result.stderr, result.timedOut ? '(timed out)' : '']
+            .filter(Boolean)
+            .join('\n');
+        return { code: result.exitCode, output, stdout: result.stdout };
+    }
+};
+exports.ProviderAuthGeneratorService = ProviderAuthGeneratorService;
+exports.ProviderAuthGeneratorService = ProviderAuthGeneratorService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(4, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __param(5, (0, common_1.Optional)()),
+    __param(5, (0, common_1.Inject)(exports.PROVIDER_AUTH_GENERATOR_OPTIONS)),
+    __metadata("design:paramtypes", [provider_auth_vault_service_1.ProviderAuthVaultService,
+        standalone_terminal_service_1.StandaloneTerminalService,
+        provider_adapter_factory_1.ProviderAdapterFactory,
+        process_executor_port_1.ProcessExecutor, Object, Object])
+], ProviderAuthGeneratorService);
+//# sourceMappingURL=provider-auth-generator.service.js.map

package/dist/server/modules/provider-auth/provider-auth-generator.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-generator.service.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-generator.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AA0FA,sCAOC;AAMD,sCAeC;AAMD,8BAOC;AAGD,8CAmBC;AAzJD,mFAAqF;AACrF,6CAAyC;AACzC,+CAAyF;AACzF,qCAAkC;AAClC,yCAAkE;AAClE,2CAA6F;AAC7F,iEAAgG;AAChG,wDAA2D;AAC3D,6FAAwF;AACxF,+EAAgG;AAChG,uGAA8F;AAC9F,kGAG0D;AAC1D,qEAQkC;AAElC,+EAAyE;AAEzE,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,8BAA8B,CAAC,CAAC;AAE/C,QAAA,+BAA+B,GAAG,MAAM,CAAC,iCAAiC,CAAC,CAAC;AAiDzF,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,aAAa,GAAG,EAAE,CAAC;AAGzB,MAAM,eAAe,GAAG;IACtB,iCAAiC;IACjC,4BAA4B;IAC5B,8DAA8D;CAC/D,CAAC;AAEF,SAAgB,aAAa,CAAC,IAAY,EAAE,OAAiB;IAC3D,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,IAAI,MAAM;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,SAAgB,aAAa,CAC3B,IAAuB,EACvB,MAA4B;IAE5B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IACE,KAAK,KAAK,SAAS;YACnB,sDAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAE1B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;AACnC,CAAC;AAMD,SAAgB,SAAS,CAAC,IAAc,EAAE,MAA4B;IACpE,OAAO;QACL,cAAc;QACd,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QACtE,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAGM,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,IAAwB;IAExB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtC,CAAC,CAAC,CAAC,OAAO,CAAC;QACX,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;aACT,KAAK,CAAC,qBAAS,CAAC;aAChB,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC;YAAE,SAAS;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,iBAAM,EAAC,SAAS,EAAE,oBAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CACrD,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;QACF,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASM,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAUpB;IACA;IACA;IACA;IACyB;IAb3B,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,OAAO,CAAS;IAChB,cAAc,CAAS;IACvB,SAAS,CAAS;IAClB,gBAAgB,CAAS;IAE1C,YACmB,KAA+B,EAC/B,SAAoC,EACpC,QAAgC,EAChC,QAAyB,EACA,OAA+C,EAGzF,UAA+C,IAAI;QAPlC,UAAK,GAAL,KAAK,CAA0B;QAC/B,cAAS,GAAT,SAAS,CAA2B;QACpC,aAAQ,GAAR,QAAQ,CAAwB;QAChC,aAAQ,GAAR,QAAQ,CAAiB;QACA,YAAO,GAAP,OAAO,CAAwC;QAMzF,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,mBAAmB,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC;QACnD,IAAI,CAAC,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,OAAO,CAAC;IAC/D,CAAC;IAOD,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;QACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAA,4CAAc,EAAC,GAAG,CAAC;gBAAE,SAAS;YACxE,MAAM,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC5F,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,gDAAgD,CAAC,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,KAAc;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,6BAAe,CAAC,aAAa,QAAQ,qBAAqB,EAAE;gBACpE,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,qDAA4B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,+CAAsB,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,6BAAe,CACvB,OAAO,EAAE,WAAW,KAAK,KAAK;gBAC5B,CAAC,CAAC,aAAa,IAAI,mDAAmD;gBACtE,CAAC,CAAC,aAAa,IAAI,0BAA0B,EAC/C,EAAE,MAAM,EAAE,0BAA0B,EAAE,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAC3E,CAAC;QACF,IAAI,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,2BAAa,CAAC,KAAK,IAAI,4BAA4B,EAAE;gBAC7D,IAAI,EAAE,kCAAkC;gBACxC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,IAAY,EACZ,OAAiC,EACjC,KAAyB;QAEzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAA,gBAAK,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW;YAAE,MAAM,IAAA,gBAAK,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,8CAAwB,EAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;gBACnC,GAAG,SAAS;gBACZ,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;aAC1C,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE;oBACJ,EAAE;oBACF,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,KAAK,EAAE,SAAS;oBAChB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;oBAC5B,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,IAAI;iBACZ;gBACD,OAAO;gBACP,GAAG;gBACH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,UAAU,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;gBAC3F,GAAG;gBACH,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS;gBACxC,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EACnE,eAAe,CAChB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,aAAE,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,2BAAa,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,2BAAa,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,OAA0B;QACzC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;YACrB,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBACrD,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;gBACtF,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,gCAAgC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAA0B;QAC3C,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,8CAA8C,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,CAAC,MAAM,CACf,OAAO,EACP,QAAQ,EACR,wDAAwD,CACzD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EACrB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,GAAG,EACV,OAAO,CAAC,GAAG,CACZ,CAAC;QACF,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,MAAM,CACf,OAAO,EACP,QAAQ,EACR,6BAA6B,CAAC,IAAA,oBAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,CACjJ,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CACrD,OAAO,CAAC,IAAI,CAAC,QAAQ,EACrB,OAAO,CAAC,KAAK,EACb,OAAO,EACP,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAMO,KAAK,CAAC,OAAO,CACnB,OAA0B,EAC1B,eAAwB;QAExB,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,QAAyC,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACrC,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1E,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACxB,CAAC;YACD,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAA,eAAI,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EACpC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EACzB,GAAG,CACJ,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,IAAI,OAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,YAAY,CAAC;QACjD,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;QAChC,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAGO,MAAM,CACZ,OAA0B,EAC1B,KAAkC,EAClC,KAAoB;QAEpB,OAAO,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;YAChC,IAAI,OAAO,CAAC,KAAK;gBAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;YACrB,MAAM,OAAO,GACX,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC;YACtF,MAAM,IAAI,CAAC,SAAS;iBACjB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;iBACpC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EACvD,wBAAwB,CACzB,CACF,CAAC;YACJ,MAAM,IAAA,aAAE,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC1E,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC;IAEO,aAAa;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAOO,KAAK,CAAC,WAAW,CAAC,OAAiC;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,OAAQ,CAAC,CAAC,CACxF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,MAAM,GAA4B,CAAC,GAAG,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QACF,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,6BAAe,CACvB,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,iEAAiE,EAC/F,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,CACxC,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;IAC3C,CAAC;IAGO,KAAK,CAAC,UAAU,CACtB,YAAoB,EACpB,IAAc,EACd,MAA4B,EAC5B,GAAW;QAEX,MAAM,OAAO,GAAG,IAAA,8CAAwB,EAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,MAAM;YACZ,GAAG;YACH,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;YACtF,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAClE,CAAC;CACF,CAAA;AAxVY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;IACvB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,uCAA+B,CAAC,CAAA;qCANhB,sDAAwB;QACpB,uDAAyB;QAC1B,iDAAsB;QACtB,uCAAe;GAbjC,4BAA4B,CAwVxC"}

package/dist/server/modules/provider-auth/provider-auth-release.service.d.ts

@@ -0,0 +1,14 @@
+import type { ProviderAuthEntryDto } from './provider-auth.dto';
+import { ProviderAuthVaultService } from './provider-auth-vault.service';
+import { ProviderAuthWritebackService } from './provider-auth-writeback.service';
+export type ProviderAuthReleasePullStatus = 'pulled' | 'offline' | 'not-needed';
+export interface ProviderAuthReleaseResult {
+    entry: ProviderAuthEntryDto;
+    pullStatus: ProviderAuthReleasePullStatus;
+}
+export declare class ProviderAuthReleaseService {
+    private readonly vault;
+    private readonly writeback;
+    constructor(vault: ProviderAuthVaultService, writeback: ProviderAuthWritebackService);
+    release(id: string): Promise<ProviderAuthReleaseResult>;
+}

package/dist/server/modules/provider-auth/provider-auth-release.service.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderAuthReleaseService = void 0;
+const common_1 = require("@nestjs/common");
+const provider_auth_vault_service_1 = require("./provider-auth-vault.service");
+const provider_auth_writeback_service_1 = require("./provider-auth-writeback.service");
+let ProviderAuthReleaseService = class ProviderAuthReleaseService {
+    vault;
+    writeback;
+    constructor(vault, writeback) {
+        this.vault = vault;
+        this.writeback = writeback;
+    }
+    async release(id) {
+        const current = await this.vault.get(id);
+        let pullStatus = 'not-needed';
+        if (current.checkedOutRemoteId) {
+            const pull = await this.writeback.pullFamiliesNow(current.checkedOutRemoteId);
+            pullStatus = pull.pulled ? 'pulled' : 'offline';
+        }
+        const entry = await this.vault.release(id);
+        return { entry, pullStatus };
+    }
+};
+exports.ProviderAuthReleaseService = ProviderAuthReleaseService;
+exports.ProviderAuthReleaseService = ProviderAuthReleaseService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [provider_auth_vault_service_1.ProviderAuthVaultService,
+        provider_auth_writeback_service_1.ProviderAuthWritebackService])
+], ProviderAuthReleaseService);
+//# sourceMappingURL=provider-auth-release.service.js.map

package/dist/server/modules/provider-auth/provider-auth-release.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-release.service.js","sourceRoot":"","sources":["../../../src/modules/provider-auth/provider-auth-release.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,+EAAyE;AACzE,uFAAiF;AAU1E,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAElB;IACA;IAFnB,YACmB,KAA+B,EAC/B,SAAuC;QADvC,UAAK,GAAL,KAAK,CAA0B;QAC/B,cAAS,GAAT,SAAS,CAA8B;IACvD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,UAAU,GAAkC,YAAY,CAAC;QAE7D,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC9E,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;CACF,CAAA;AAlBY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;qCAGe,sDAAwB;QACpB,8DAA4B;GAH/C,0BAA0B,CAkBtC"}

package/dist/server/modules/provider-auth/provider-auth-vault.service.d.ts

@@ -0,0 +1,38 @@
+import { ProviderAdapterFactory } from '../providers/adapters/provider-adapter.factory';
+import { type ProviderAuthStorage, type RemoteStorage } from '../storage/interfaces/storage.interface';
+import { type ProviderAuthClaimBundle, type ProviderAuthGeneratedEntry } from './provider-auth-adapters';
+import { type CreateProviderAuthStaticData, type OpencodeLoginDto, type PerProviderIdImportResult, type ProviderAuthEntryDto } from './provider-auth.dto';
+import type { ProviderAuthFamilyReport } from './provider-auth-watcher.service';
+export declare class ProviderAuthVaultService {
+    private readonly storage;
+    private readonly adapters;
+    constructor(storage: ProviderAuthStorage & RemoteStorage, adapters: ProviderAdapterFactory);
+    list(): Promise<ProviderAuthEntryDto[]>;
+    get(id: string): Promise<ProviderAuthEntryDto>;
+    opencodeProviderIds(entryIds: string[]): Promise<string[]>;
+    createStatic(input: CreateProviderAuthStaticData): Promise<ProviderAuthEntryDto>;
+    importOpencode(providerIds: string[]): Promise<PerProviderIdImportResult[]>;
+    listOpencodeLogins(): Promise<OpencodeLoginDto[]>;
+    createGenerated(provider: string, label: string, entries: ProviderAuthGeneratedEntry[], verifiedAt: string): Promise<ProviderAuthEntryDto[]>;
+    delete(id: string): Promise<void>;
+    checkout(id: string, remoteId: string): Promise<ProviderAuthEntryDto>;
+    release(id: string): Promise<ProviderAuthEntryDto>;
+    rename(id: string, label: string): Promise<ProviderAuthEntryDto>;
+    familiesOfRemote(remoteId: string): Promise<Array<{
+        provider: string;
+        entryId: string;
+        lastWritebackAt: string | null;
+    }>>;
+    writeBackFamilies(remoteId: string, reports: ProviderAuthFamilyReport[]): Promise<ProviderAuthEntryDto[]>;
+    private checkedOutFamilies;
+    buildClaimBundle(selection: {
+        entryIds: string[];
+        homePath: string;
+    }): Promise<ProviderAuthClaimBundle>;
+    private addEnv;
+    private addFile;
+    private requireSupportedProvider;
+    private readPcOpenCodeAuthFile;
+    private opencodeEntryType;
+    private toDto;
+}