p-dev-harness 0.3.0

package/dist/setup/remote-setup-summary.js

@@ -0,0 +1,93 @@
+import { loadHarnessConfig } from "../config/load-config.js";
+import { formatHarnessDispatchRepo, readGitRemoteOrigin, resolveHarnessDispatchRepo, } from "./harness-dispatch-repo.js";
+import { previewTargetWorkflowSetup } from "./target-workflow-setup.js";
+export { evaluateHarnessSecretPresence } from "./remote-actions.js";
+import { previewHarnessSecretSetup } from "./harness-secret-setup.js";
+import { loadGithubTokenFromEnvLocal } from "./setup-github-auth.js";
+import { deriveStaleSmokeDiagnostics, } from "./stale-smoke-repo.js";
+export async function buildRemoteSetupSummary(options) {
+    const cwd = options?.cwd;
+    const githubToken = await loadGithubTokenFromEnvLocal({ cwd });
+    const harnessDispatchRepo = await resolveHarnessDispatchRepo({
+        cwd,
+        manualRepo: options?.manualHarnessDispatchRepo,
+    });
+    const harnessDispatchRepoSlug = formatHarnessDispatchRepo(harnessDispatchRepo);
+    let harnessRepoAccess = "unknown";
+    let harnessSecretStatuses = [];
+    if (options?.provider && harnessDispatchRepo.resolved) {
+        harnessRepoAccess = await options.provider.checkHarnessRepoAccess(harnessDispatchRepoSlug);
+        harnessSecretStatuses = await options.provider.listHarnessSecretStatuses(harnessDispatchRepoSlug);
+    }
+    else {
+        const preview = await previewHarnessSecretSetup({
+            cwd,
+            manualHarnessDispatchRepo: options?.manualHarnessDispatchRepo,
+        });
+        harnessSecretStatuses = preview.secretWritePlan.map((entry) => ({
+            name: entry.name,
+            status: "unknown",
+        }));
+    }
+    const targetRepos = [];
+    let configRepos;
+    let allowedTargetRepos;
+    try {
+        const loaded = await loadHarnessConfig({ baseDir: cwd });
+        configRepos = loaded.config.repos.map((repo) => ({
+            id: repo.id,
+            targetRepo: repo.targetRepo,
+        }));
+        allowedTargetRepos = loaded.config.allowedTargetRepos;
+        for (const repo of loaded.config.repos) {
+            const workflowPreview = previewTargetWorkflowSetup({
+                repoConfigId: repo.id,
+                targetRepo: repo.targetRepo,
+                productionBranch: repo.productionBranch ?? "main",
+                harnessDispatchRepo,
+            });
+            let repoAccess = "unknown";
+            let workflowStatus = workflowPreview.plan.workflowStatus;
+            if (options?.provider &&
+                workflowPreview.plan.targetRepoSlug !== "<invalid-target-repo>") {
+                const status = await options.provider.checkTargetWorkflowStatus({
+                    targetRepoSlug: workflowPreview.plan.targetRepoSlug,
+                    workflowPath: workflowPreview.plan.workflowPath,
+                    intendedWorkflowContent: workflowPreview.workflowContent,
+                    productionBranch: workflowPreview.plan.productionBranch,
+                });
+                repoAccess = status.repoAccess;
+                workflowStatus = status.workflowStatus;
+            }
+            targetRepos.push({
+                repoConfigId: repo.id,
+                targetRepo: repo.targetRepo,
+                productionBranch: repo.productionBranch ?? "main",
+                repoAccess,
+                workflowStatus,
+                harnessDispatchRepo: harnessDispatchRepoSlug,
+            });
+        }
+    }
+    catch {
+        // unresolved config is valid summary state
+    }
+    const gitRemoteOriginUrl = await readGitRemoteOrigin(cwd);
+    const staleSmokeDiagnostics = deriveStaleSmokeDiagnostics({
+        harnessDispatchRepo: harnessDispatchRepoSlug,
+        gitRemoteOriginUrl,
+        targetRepos: configRepos,
+        allowedTargetRepos,
+    });
+    return {
+        githubTokenConfigured: Boolean(githubToken),
+        harnessDispatchRepo: harnessDispatchRepoSlug,
+        harnessDispatchRepoResolved: harnessDispatchRepo.resolved,
+        harnessDispatchRepoSource: harnessDispatchRepo.source,
+        harnessRepoAccess,
+        harnessSecretStatuses,
+        targetRepos,
+        staleSmokeDiagnostics,
+    };
+}
+//# sourceMappingURL=remote-setup-summary.js.map

package/dist/setup/remote-setup-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-setup-summary.js","sourceRoot":"","sources":["../../src/setup/remote-setup-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAOxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,2BAA2B,GAE5B,MAAM,uBAAuB,CAAC;AAsB/B,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAI7C;IACC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAC;IACzB,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC;QAC3D,GAAG;QACH,UAAU,EAAE,OAAO,EAAE,yBAAyB;KAC/C,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;IAE/E,IAAI,iBAAiB,GAAuB,SAAS,CAAC;IACtD,IAAI,qBAAqB,GAA+B,EAAE,CAAC;IAE3D,IAAI,OAAO,EAAE,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACtD,iBAAiB,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAC/D,uBAAuB,CACxB,CAAC;QACF,qBAAqB,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CACtE,uBAAuB,CACxB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC;YAC9C,GAAG;YACH,yBAAyB,EAAE,OAAO,EAAE,yBAAyB;SAC9D,CAAC,CAAC;QACH,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9D,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,SAAkB;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAA6B,EAAE,CAAC;IACjD,IAAI,WAAkE,CAAC;IACvE,IAAI,kBAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC,CAAC;QACJ,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,eAAe,GAAG,0BAA0B,CAAC;gBACjD,YAAY,EAAE,IAAI,CAAC,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,MAAM;gBACjD,mBAAmB;aACpB,CAAC,CAAC;YAEH,IAAI,UAAU,GAAuB,SAAS,CAAC;YAC/C,IAAI,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;YAEzD,IACE,OAAO,EAAE,QAAQ;gBACjB,eAAe,CAAC,IAAI,CAAC,cAAc,KAAK,uBAAuB,EAC/D,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;oBAC9D,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,cAAc;oBACnD,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY;oBAC/C,uBAAuB,EAAE,eAAe,CAAC,eAAe;oBACxD,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,gBAAgB;iBACxD,CAAC,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC/B,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YACzC,CAAC;YAED,WAAW,CAAC,IAAI,CAAC;gBACf,YAAY,EAAE,IAAI,CAAC,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,MAAM;gBACjD,UAAU;gBACV,cAAc;gBACd,mBAAmB,EAAE,uBAAuB;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;QACxD,mBAAmB,EAAE,uBAAuB;QAC5C,kBAAkB;QAClB,WAAW,EAAE,WAAW;QACxB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO;QACL,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC;QAC3C,mBAAmB,EAAE,uBAAuB;QAC5C,2BAA2B,EAAE,mBAAmB,CAAC,QAAQ;QACzD,yBAAyB,EAAE,mBAAmB,CAAC,MAAM;QACrD,iBAAiB;QACjB,qBAAqB;QACrB,WAAW;QACX,qBAAqB;KACtB,CAAC;AACJ,CAAC"}

package/dist/setup/secret-change-token.d.ts

@@ -0,0 +1,2 @@
+export declare function tokenizeSecretInput(value?: string): string;
+//# sourceMappingURL=secret-change-token.d.ts.map

package/dist/setup/secret-change-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-change-token.d.ts","sourceRoot":"","sources":["../../src/setup/secret-change-token.ts"],"names":[],"mappings":"AAWA,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D"}

package/dist/setup/secret-change-token.js

@@ -0,0 +1,14 @@
+function secretChangeToken(value) {
+    if (!value) {
+        return "";
+    }
+    let checksum = 0;
+    for (let index = 0; index < value.length; index += 1) {
+        checksum = (checksum + value.charCodeAt(index)) % 1_000_000_007;
+    }
+    return `${value.length}:${checksum}`;
+}
+export function tokenizeSecretInput(value) {
+    return secretChangeToken(value?.trim() ?? "");
+}
+//# sourceMappingURL=secret-change-token.js.map

package/dist/setup/secret-change-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-change-token.js","sourceRoot":"","sources":["../../src/setup/secret-change-token.ts"],"names":[],"mappings":"AAAA,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,QAAQ,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,aAAa,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/setup/service-verification.d.ts

@@ -0,0 +1,60 @@
+import { type GitHubTokenMetadata } from "./github-workflow-permissions.js";
+export type SetupServiceName = "linear" | "cursor" | "github" | "vercel";
+export type VerificationStatus = "connected" | "failed";
+export interface ServiceVerificationResult {
+    status: VerificationStatus;
+    label?: string;
+    message: string;
+    limitation?: string;
+}
+export interface RepoVerificationResult {
+    status: VerificationStatus;
+    message: string;
+    repoSlug?: string;
+    normalizedUrl?: string;
+    workflowInstallReady?: boolean;
+    limitation?: string;
+}
+export declare function inspectGitHubTokenMetadata(token: string): Promise<GitHubTokenMetadata>;
+export declare function parseTargetRepoUrl(targetRepo: string): {
+    owner: string;
+    repo: string;
+    slug: string;
+    normalizedUrl: string;
+} | null;
+export declare function verifyLinearToken(token: string): Promise<ServiceVerificationResult>;
+export declare function verifyGitHubToken(token: string): Promise<ServiceVerificationResult>;
+export declare function verifyCursorToken(token: string): Promise<ServiceVerificationResult>;
+export declare function verifyGitHubRepoAccess(input: {
+    token: string;
+    targetRepo: string;
+}): Promise<RepoVerificationResult>;
+export declare function verifyVercelTokenForSetup(token: string): Promise<ServiceVerificationResult>;
+export declare function loadSecretFromEnvLocal(options: {
+    cwd?: string;
+    key: "LINEAR_API_KEY" | "CURSOR_API_KEY" | "GITHUB_TOKEN" | "VERCEL_TOKEN" | "LINEAR_WEBHOOK_SECRET";
+}): Promise<string | undefined>;
+export declare function resolveServiceToken(options: {
+    cwd?: string;
+    service: SetupServiceName;
+    token?: string;
+}): Promise<{
+    token?: string;
+    usedSavedKey: boolean;
+}>;
+export declare function verifySetupService(options: {
+    cwd?: string;
+    service: SetupServiceName;
+    token?: string;
+}): Promise<ServiceVerificationResult & {
+    usedSavedKey?: boolean;
+}>;
+export declare function verifySetupTargetRepo(options: {
+    cwd?: string;
+    targetRepo: string;
+    githubToken?: string;
+}): Promise<RepoVerificationResult & {
+    usedSavedGithubToken?: boolean;
+}>;
+export declare function normalizeRepoSlugForDisplay(targetRepo: string): string | null;
+//# sourceMappingURL=service-verification.d.ts.map

package/dist/setup/service-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-verification.d.ts","sourceRoot":"","sources":["../../src/setup/service-verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,mBAAmB,EACzB,MAAM,kCAAkC,CAAC;AAU1C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,QAAQ,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AA8CD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAWP;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,CAsBpC;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,CAuCpC;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,CAsCpC;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAiKlC;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,yBAAyB,CAAC,CA+BpC;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EACC,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,uBAAuB,CAAC;CAC7B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK9B;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC,CA0BrD;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,yBAAyB,GAAG;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAqClE;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,sBAAsB,GAAG;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAgBvE;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7E"}

package/dist/setup/service-verification.js

@@ -0,0 +1,419 @@
+import { assessClassicPatGuidedCapabilities, FINE_GRAINED_WORKFLOW_WRITE_LIMITATION, GITHUB_CLASSIC_PAT_MISSING_WORKFLOW_MESSAGE, GITHUB_FINE_GRAINED_STEP1_LIMITATION, GITHUB_TOKEN_VERIFY_HELP_HINT, GITHUB_WORKFLOW_SCOPE_SETUP_ERROR, resolveGitHubTokenType, } from "./github-workflow-permissions.js";
+import { GitHubApiError, GitHubClient } from "../github/client.js";
+import { parseGitHubRepoUrl } from "../github/base-branch.js";
+import { pingLinear } from "../linear/client.js";
+import { redactKnownSecretValues } from "./redact-secrets.js";
+import { parseGitHubRepoSlug } from "./github-repo-slug.js";
+import { readExistingEnvFile } from "./env-merge.js";
+import { resolveLocalFilePaths } from "./setup-state.js";
+import { verifyVercelToken } from "./vercel-setup-client.js";
+export async function inspectGitHubTokenMetadata(token) {
+    const client = new GitHubClient({ token: token.trim() });
+    const inspected = await client.inspectAuthenticatedUser();
+    const tokenType = resolveGitHubTokenType(inspected.tokenType, inspected.oauthScopes);
+    return {
+        login: inspected.login,
+        tokenType,
+        oauthScopes: inspected.oauthScopes,
+        hasWorkflowScope: inspected.oauthScopes.includes("workflow"),
+        hasRepoScope: inspected.oauthScopes.includes("repo") ||
+            inspected.oauthScopes.includes("public_repo"),
+    };
+}
+function isWorkflowPermissionApiError(error) {
+    return ((error.status === 403 || error.status === 404) &&
+        /workflow/i.test(error.message));
+}
+function sanitizeMessage(message, secrets) {
+    return redactKnownSecretValues(message, secrets);
+}
+function formatGitHubTokenError(error, token) {
+    if (error instanceof GitHubApiError) {
+        if (error.status === 401) {
+            return "GitHub rejected this token. Check that GITHUB_TOKEN is valid and not expired.";
+        }
+        if (error.status === 403) {
+            return "GitHub accepted the request but denied access. The token may lack required scopes.";
+        }
+        return sanitizeMessage(`GitHub API returned HTTP ${error.status}. Check the token and try again.`, [token]);
+    }
+    const raw = error instanceof Error ? error.message : String(error);
+    return sanitizeMessage(raw, [token]);
+}
+function formatLinearTokenError(error, token) {
+    const raw = error instanceof Error ? error.message : String(error);
+    if (/unauthorized|invalid|forbidden|authentication/i.test(raw)) {
+        return "Linear rejected this API key. Check that LINEAR_API_KEY is valid.";
+    }
+    return sanitizeMessage(raw, [token]);
+}
+function formatCursorTokenError(error, token) {
+    const raw = error instanceof Error ? error.message : String(error);
+    if (/unauthorized|invalid|forbidden|authentication|401|403/i.test(raw)) {
+        return "Cursor rejected this API key. Check that CURSOR_API_KEY is valid.";
+    }
+    return sanitizeMessage(raw, [token]);
+}
+export function parseTargetRepoUrl(targetRepo) {
+    const parsed = parseGitHubRepoUrl(targetRepo.trim());
+    if (!parsed) {
+        return null;
+    }
+    const slug = `${parsed.owner}/${parsed.repo}`;
+    return {
+        ...parsed,
+        slug,
+        normalizedUrl: `https://github.com/${slug}`,
+    };
+}
+export async function verifyLinearToken(token) {
+    const trimmed = token.trim();
+    if (!trimmed) {
+        return {
+            status: "failed",
+            message: "Enter a Linear API key before verifying.",
+        };
+    }
+    try {
+        const label = await pingLinear(trimmed);
+        return {
+            status: "connected",
+            label,
+            message: `Connected as ${label}.`,
+        };
+    }
+    catch (error) {
+        return {
+            status: "failed",
+            message: formatLinearTokenError(error, trimmed),
+        };
+    }
+}
+export async function verifyGitHubToken(token) {
+    const trimmed = token.trim();
+    if (!trimmed) {
+        return {
+            status: "failed",
+            message: "Enter a GitHub token before verifying.",
+        };
+    }
+    try {
+        const metadata = await inspectGitHubTokenMetadata(trimmed);
+        const capability = assessClassicPatGuidedCapabilities(metadata);
+        if (!capability.ok) {
+            return {
+                status: "failed",
+                message: capability.message,
+                limitation: GITHUB_TOKEN_VERIFY_HELP_HINT,
+            };
+        }
+        const limitation = capability.limitation ??
+            (metadata.tokenType === "classic"
+                ? undefined
+                : GITHUB_FINE_GRAINED_STEP1_LIMITATION);
+        return {
+            status: "connected",
+            label: metadata.login,
+            message: `Connected as ${metadata.login}.`,
+            limitation,
+        };
+    }
+    catch (error) {
+        return {
+            status: "failed",
+            message: formatGitHubTokenError(error, trimmed),
+            limitation: GITHUB_TOKEN_VERIFY_HELP_HINT,
+        };
+    }
+}
+export async function verifyCursorToken(token) {
+    const trimmed = token.trim();
+    if (!trimmed) {
+        return {
+            status: "failed",
+            message: "Enter a Cursor API key before verifying.",
+        };
+    }
+    try {
+        const { Cursor } = await import("@cursor/sdk");
+        const models = await Cursor.models.list({ apiKey: trimmed });
+        const count = models.length;
+        let repoHint = "";
+        try {
+            const repos = await Cursor.repositories.list({ apiKey: trimmed });
+            if (repos.length > 0) {
+                repoHint = ` ${repos.length} connected repo(s) visible to Cursor.`;
+            }
+        }
+        catch {
+            // repositories.list is optional enrichment only
+        }
+        return {
+            status: "connected",
+            label: `${count} model(s)`,
+            message: `Cursor API key accepted (${count} model(s) available).${repoHint}`,
+            limitation: "This confirms the key works with Cursor SDK listing. It does not guarantee a future cloud run can access every target repo.",
+        };
+    }
+    catch (error) {
+        return {
+            status: "failed",
+            message: formatCursorTokenError(error, trimmed),
+            limitation: "Cursor verification uses read-only SDK model listing, not a live agent run.",
+        };
+    }
+}
+export async function verifyGitHubRepoAccess(input) {
+    const token = input.token.trim();
+    const targetRepo = input.targetRepo.trim();
+    if (!targetRepo) {
+        return {
+            status: "failed",
+            message: "Enter a GitHub target repo URL before verifying.",
+        };
+    }
+    const parsed = parseTargetRepoUrl(targetRepo);
+    if (!parsed) {
+        return {
+            status: "failed",
+            message: "Enter a valid GitHub repo URL like https://github.com/acme/my-product.",
+        };
+    }
+    if (!token) {
+        return {
+            status: "failed",
+            message: "Add or save a GitHub token first, then verify repo + workflow access.",
+        };
+    }
+    try {
+        const metadata = await inspectGitHubTokenMetadata(token);
+        if (metadata.tokenType === "classic" && !metadata.hasWorkflowScope) {
+            return {
+                status: "failed",
+                repoSlug: parsed.slug,
+                normalizedUrl: parsed.normalizedUrl,
+                workflowInstallReady: false,
+                message: GITHUB_CLASSIC_PAT_MISSING_WORKFLOW_MESSAGE,
+                limitation: GITHUB_TOKEN_VERIFY_HELP_HINT,
+            };
+        }
+        const client = new GitHubClient({ token });
+        const repository = await client.getRepository(parsed.owner, parsed.repo);
+        const canRead = repository.permissions?.pull === true ||
+            repository.permissions?.push === true ||
+            repository.permissions?.admin === true ||
+            repository.permissions?.maintain === true;
+        const canWriteContents = repository.permissions?.push === true ||
+            repository.permissions?.admin === true ||
+            repository.permissions?.maintain === true;
+        if (!canRead) {
+            return {
+                status: "failed",
+                repoSlug: parsed.slug,
+                normalizedUrl: parsed.normalizedUrl,
+                workflowInstallReady: false,
+                message: `GitHub token cannot read ${parsed.slug}. Grant repo read access to this token.`,
+            };
+        }
+        if (!canWriteContents) {
+            return {
+                status: "failed",
+                repoSlug: parsed.slug,
+                normalizedUrl: parsed.normalizedUrl,
+                workflowInstallReady: false,
+                message: `GitHub token cannot write repository contents for ${parsed.slug}. Workflow install PRs need Contents write access. Use a classic PAT with repo + workflow or a fine-grained PAT with Contents write + Workflows write on this repo.`,
+            };
+        }
+        try {
+            await client.listActionsWorkflows(parsed.owner, parsed.repo);
+        }
+        catch (error) {
+            if (error instanceof GitHubApiError && isWorkflowPermissionApiError(error)) {
+                return {
+                    status: "failed",
+                    repoSlug: parsed.slug,
+                    normalizedUrl: parsed.normalizedUrl,
+                    workflowInstallReady: false,
+                    message: GITHUB_WORKFLOW_SCOPE_SETUP_ERROR,
+                };
+            }
+            if (error instanceof GitHubApiError && error.status === 403) {
+                return {
+                    status: "failed",
+                    repoSlug: parsed.slug,
+                    normalizedUrl: parsed.normalizedUrl,
+                    workflowInstallReady: false,
+                    message: `GitHub denied Actions workflow access for ${parsed.slug}. Grant Workflows write (fine-grained PAT) or workflow scope (classic PAT), then update GITHUB_TOKEN and verify again.`,
+                };
+            }
+            throw error;
+        }
+        if (metadata.tokenType === "fine-grained") {
+            return {
+                status: "connected",
+                repoSlug: parsed.slug,
+                normalizedUrl: parsed.normalizedUrl,
+                workflowInstallReady: true,
+                message: `Connected to ${parsed.slug} with repo + workflow install access expected.`,
+                limitation: FINE_GRAINED_WORKFLOW_WRITE_LIMITATION,
+            };
+        }
+        return {
+            status: "connected",
+            repoSlug: parsed.slug,
+            normalizedUrl: parsed.normalizedUrl,
+            workflowInstallReady: true,
+            message: `Connected to ${parsed.slug} with repo + workflow install access.`,
+        };
+    }
+    catch (error) {
+        if (error instanceof GitHubApiError) {
+            if (error.status === 404) {
+                return {
+                    status: "failed",
+                    repoSlug: parsed.slug,
+                    normalizedUrl: parsed.normalizedUrl,
+                    workflowInstallReady: false,
+                    message: `Repo ${parsed.slug} was not found or this token cannot access it.`,
+                };
+            }
+            if (error.status === 401) {
+                return {
+                    status: "failed",
+                    workflowInstallReady: false,
+                    message: "GitHub rejected the token. Verify GITHUB_TOKEN and try again.",
+                };
+            }
+            if (error.status === 403) {
+                return {
+                    status: "failed",
+                    repoSlug: parsed.slug,
+                    normalizedUrl: parsed.normalizedUrl,
+                    workflowInstallReady: false,
+                    message: `GitHub denied access to ${parsed.slug}. Check token permissions for this repo.`,
+                };
+            }
+            return {
+                status: "failed",
+                workflowInstallReady: false,
+                message: sanitizeMessage(`GitHub API returned HTTP ${error.status} while checking ${parsed.slug}.`, [token]),
+            };
+        }
+        return {
+            status: "failed",
+            workflowInstallReady: false,
+            message: sanitizeMessage(error instanceof Error ? error.message : String(error), [token]),
+        };
+    }
+}
+export async function verifyVercelTokenForSetup(token) {
+    const trimmed = token.trim();
+    if (!trimmed) {
+        return {
+            status: "failed",
+            message: "Enter a Vercel token before verifying.",
+        };
+    }
+    try {
+        const user = await verifyVercelToken(trimmed);
+        return {
+            status: "connected",
+            label: user.username,
+            message: `Connected as ${user.username}.`,
+            limitation: "This confirms the Vercel token can read account metadata. Project and env var writes still require preview + confirmation.",
+        };
+    }
+    catch (error) {
+        const raw = error instanceof Error ? error.message : String(error);
+        if (/unauthorized|forbidden|401|403/i.test(raw)) {
+            return {
+                status: "failed",
+                message: "Vercel rejected this token. Check that VERCEL_TOKEN is valid.",
+            };
+        }
+        return {
+            status: "failed",
+            message: sanitizeMessage(raw, [trimmed]),
+        };
+    }
+}
+export async function loadSecretFromEnvLocal(options) {
+    const paths = resolveLocalFilePaths(options.cwd);
+    const existingEnv = await readExistingEnvFile(paths);
+    const value = existingEnv?.values[options.key]?.trim();
+    return value || undefined;
+}
+export async function resolveServiceToken(options) {
+    const trimmed = options.token?.trim();
+    if (trimmed) {
+        return { token: trimmed, usedSavedKey: false };
+    }
+    const keyMap = {
+        linear: "LINEAR_API_KEY",
+        cursor: "CURSOR_API_KEY",
+        github: "GITHUB_TOKEN",
+        vercel: "VERCEL_TOKEN",
+    };
+    const saved = await loadSecretFromEnvLocal({
+        cwd: options.cwd,
+        key: keyMap[options.service],
+    });
+    if (saved) {
+        return { token: saved, usedSavedKey: true };
+    }
+    return { token: undefined, usedSavedKey: false };
+}
+export async function verifySetupService(options) {
+    const resolved = await resolveServiceToken(options);
+    if (!resolved.token) {
+        const labels = {
+            linear: "LINEAR_API_KEY",
+            cursor: "CURSOR_API_KEY",
+            github: "GITHUB_TOKEN",
+            vercel: "VERCEL_TOKEN",
+        };
+        return {
+            status: "failed",
+            message: `Enter ${labels[options.service]} or save it in .env.local before verifying.`,
+            usedSavedKey: false,
+        };
+    }
+    let result;
+    switch (options.service) {
+        case "linear":
+            result = await verifyLinearToken(resolved.token);
+            break;
+        case "cursor":
+            result = await verifyCursorToken(resolved.token);
+            break;
+        case "github":
+            result = await verifyGitHubToken(resolved.token);
+            break;
+        case "vercel":
+            result = await verifyVercelTokenForSetup(resolved.token);
+            break;
+    }
+    return {
+        ...result,
+        usedSavedKey: resolved.usedSavedKey,
+    };
+}
+export async function verifySetupTargetRepo(options) {
+    const resolved = await resolveServiceToken({
+        cwd: options.cwd,
+        service: "github",
+        token: options.githubToken,
+    });
+    const result = await verifyGitHubRepoAccess({
+        token: resolved.token ?? "",
+        targetRepo: options.targetRepo,
+    });
+    return {
+        ...result,
+        usedSavedGithubToken: resolved.usedSavedKey,
+    };
+}
+export function normalizeRepoSlugForDisplay(targetRepo) {
+    return parseGitHubRepoSlug(targetRepo);
+}
+//# sourceMappingURL=service-verification.js.map

package/dist/setup/service-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-verification.js","sourceRoot":"","sources":["../../src/setup/service-verification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,sCAAsC,EACtC,2CAA2C,EAC3C,oCAAoC,EACpC,6BAA6B,EAC7B,iCAAiC,EACjC,sBAAsB,GAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAsB7D,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,sBAAsB,CACtC,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,WAAW,CACtB,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,gBAAgB,EAAE,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5D,YAAY,EACV,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAqB;IACzD,OAAO,CACL,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,OAA0B;IAClE,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,+EAA+E,CAAC;QACzF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,oFAAoF,CAAC;QAC9F,CAAC;QACD,OAAO,eAAe,CACpB,4BAA4B,KAAK,CAAC,MAAM,kCAAkC,EAC1E,CAAC,KAAK,CAAC,CACR,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,wDAAwD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IAMnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,OAAO;QACL,GAAG,MAAM;QACT,IAAI;QACJ,aAAa,EAAE,sBAAsB,IAAI,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa;IAEb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,KAAK;YACL,OAAO,EAAE,gBAAgB,KAAK,GAAG;SAClC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC;SAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa;IAEb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,wCAAwC;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,kCAAkC,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU,EAAE,6BAA6B;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GACd,UAAU,CAAC,UAAU;YACrB,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAE5C,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,gBAAgB,QAAQ,CAAC,KAAK,GAAG;YAC1C,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC;YAC/C,UAAU,EAAE,6BAA6B;SAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa;IAEb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,GAAG,IAAI,KAAK,CAAC,MAAM,uCAAuC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QAED,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,GAAG,KAAK,WAAW;YAC1B,OAAO,EAAE,4BAA4B,KAAK,wBAAwB,QAAQ,EAAE;YAC5E,UAAU,EACR,6HAA6H;SAChI,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC;YAC/C,UAAU,EACR,6EAA6E;SAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAG5C;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,kDAAkD;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EACL,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EACL,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACnE,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,oBAAoB,EAAE,KAAK;gBAC3B,OAAO,EAAE,2CAA2C;gBACpD,UAAU,EAAE,6BAA6B;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,OAAO,GACX,UAAU,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI;YACrC,UAAU,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI;YACrC,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI;YACtC,UAAU,CAAC,WAAW,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC5C,MAAM,gBAAgB,GACpB,UAAU,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI;YACrC,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI;YACtC,UAAU,CAAC,WAAW,EAAE,QAAQ,KAAK,IAAI,CAAC;QAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,oBAAoB,EAAE,KAAK;gBAC3B,OAAO,EAAE,4BAA4B,MAAM,CAAC,IAAI,yCAAyC;aAC1F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,oBAAoB,EAAE,KAAK;gBAC3B,OAAO,EAAE,qDAAqD,MAAM,CAAC,IAAI,qKAAqK;aAC/O,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3E,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,KAAK;oBAC3B,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5D,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,KAAK;oBAC3B,OAAO,EAAE,6CAA6C,MAAM,CAAC,IAAI,wHAAwH;iBAC1L,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC1C,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,oBAAoB,EAAE,IAAI;gBAC1B,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,gDAAgD;gBACpF,UAAU,EAAE,sCAAsC;aACnD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,oBAAoB,EAAE,IAAI;YAC1B,OAAO,EAAE,gBAAgB,MAAM,CAAC,IAAI,uCAAuC;SAC5E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,KAAK;oBAC3B,OAAO,EAAE,QAAQ,MAAM,CAAC,IAAI,gDAAgD;iBAC7E,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,oBAAoB,EAAE,KAAK;oBAC3B,OAAO,EAAE,+DAA+D;iBACzE,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,oBAAoB,EAAE,KAAK;oBAC3B,OAAO,EAAE,2BAA2B,MAAM,CAAC,IAAI,0CAA0C;iBAC1F,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,oBAAoB,EAAE,KAAK;gBAC3B,OAAO,EAAE,eAAe,CACtB,4BAA4B,KAAK,CAAC,MAAM,mBAAmB,MAAM,CAAC,IAAI,GAAG,EACzE,CAAC,KAAK,CAAC,CACR;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,oBAAoB,EAAE,KAAK;YAC3B,OAAO,EAAE,eAAe,CACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD,CAAC,KAAK,CAAC,CACR;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa;IAEb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,wCAAwC;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,OAAO,EAAE,gBAAgB,IAAI,CAAC,QAAQ,GAAG;YACzC,UAAU,EACR,4HAA4H;SAC/H,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,+DAA+D;aACzE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAQ5C;IACC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACvD,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAIzC;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAGR;QACF,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,cAAc;KACvB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAIxC;IACC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEpD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAqC;YAC/C,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,cAAc;SACvB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,6CAA6C;YACtF,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,MAAiC,CAAC;IACtC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM;IACV,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,YAAY,EAAE,QAAQ,CAAC,YAAY;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAI3C;IACC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,OAAO,CAAC,WAAW;KAC3B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,EAAE;QAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,MAAM;QACT,oBAAoB,EAAE,QAAQ,CAAC,YAAY;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC"}