primitive-admin 1.1.0-alpha.7 → 1.1.0-alpha.71

package/dist/src/commands/sync-app-settings.js

@@ -0,0 +1,330 @@
+/**
+ * Shared app-settings helpers (issue #1033, Phase 2; narrowed by #2645).
+ *
+ * The descriptor-driven `app.toml` round-trip (issue #1033, Phase 1) was born
+ * inside the big `config pull` / `config push` command flow. Phase 2 lifted the
+ * app-settings-specific pieces here so both surfaces could drive them. #2645
+ * then removed the second surface: `app.toml` is authored like every other
+ * configuration file and applied by `config push`, so what is left here is what
+ * `sync` calls (`serializeAppSettings`, `writePulledAppSettings`,
+ * `collectAppSettingsPushErrors`, `diffAppSettings` for `config diff --only app`)
+ * plus the one thing the file cannot answer — `renderAppSettings`, the
+ * server-effective view behind `primitive apps get` (#2759).
+ *
+ * #2880 added the comparison the whole epic is about — `appSettingsFieldDiffs`,
+ * `hashAppSettingsForDiff` and `appSettingsNameExcluded` — and removed the last
+ * caller of the retired byte-hash/present-only rule (the `settings push`
+ * orchestrator #2645 had already unhooked). `app.toml` is now compared field by
+ * field against live state by both commands, over the full writable descriptor
+ * set, and applied as the whole truth.
+ *
+ * Google is a typed client map here (#2891): `googleClients` renders as
+ * `[auth.google.clients.<type>]`, and each entry's `clientSecret` holds a whole
+ * `{{secrets.KEY}}` reference, not the secret itself, so the map pulls, pushes,
+ * diffs and shows like any other setting. The secrets' values live only in the
+ * app secret store (`primitive secrets set`).
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { join } from "path";
+import { createHash } from "crypto";
+import { parseConfigToml, stringifyConfigToml } from "../lib/config-toml.js";
+import { APP_SETTINGS_DESCRIPTOR, APP_SETTINGS_SECTIONS, buildAppSettingsPayload, projectAppSettingsForComparison, serializeAppSettingsToToml, } from "../lib/app-settings-descriptor.js";
+import { canonicalJsonStringify } from "../lib/canonical-json.js";
+import { success, error, info, json, result as printResult, divider, } from "../lib/output.js";
+/** The app-settings file name inside a sync directory. */
+export const APP_TOML_FILENAME = "app.toml";
+/** Absolute path to `app.toml` inside a sync directory. */
+export function appTomlPath(configDir) {
+    return join(configDir, APP_TOML_FILENAME);
+}
+/**
+ * Serialize server settings into the `app.toml` string (pull direction).
+ * Descriptor-driven; this is the single serializer every pull path uses.
+ */
+export function serializeAppSettings(settings) {
+    return stringifyConfigToml(serializeAppSettingsToToml(settings));
+}
+/** SHA-256 of a file's bytes — the per-file content hash tracked in sync state. */
+function contentHashOfFile(filePath) {
+    return createHash("sha256").update(readFileSync(filePath)).digest("hex");
+}
+function ensureDir(dirPath) {
+    if (!existsSync(dirPath))
+        mkdirSync(dirPath, { recursive: true });
+}
+/**
+ * Write `app.toml` from server settings and return its content hash. Shared by
+ * `config pull` (whole-tree and `--only app`), so the file and the hash have one
+ * producer.
+ */
+export function writeAppSettingsToml(configDir, settings) {
+    const path = appTomlPath(configDir);
+    writeFileSync(path, serializeAppSettings(settings));
+    return contentHashOfFile(path);
+}
+/**
+ * Validate a parsed `app.toml` for push and return the fatal errors (a type
+ * mismatch, an unrecognized or retired key, a missing required key). An empty
+ * array means the push may proceed. Warnings (advisory notes) are intentionally
+ * not returned here — the caller surfaces those at apply time.
+ *
+ * ONE validator, run by `config push`'s preflight AND by `config diff` (#2880
+ * criterion 1): a file diff calls Synced is a file push accepts, and a file
+ * push refuses is named by diff with the identical message.
+ */
+export function collectAppSettingsPushErrors(tomlData, options = {}) {
+    return buildAppSettingsPayload(tomlData, options).errors;
+}
+// --- Shared single sync-state entry (entities.app) -------------------------
+// These read and write the SAME `.primitive-sync.json` that
+// `sync` maintains, touching only `entities.app` and preserving every other
+// entity. Kept as small local load/save helpers (rather than importing
+// `sync.ts`) to avoid an import cycle — `sync.ts` imports the serializer above.
+function syncStatePath(configDir) {
+    return join(configDir, ".primitive-sync.json");
+}
+function loadSyncState(configDir) {
+    const p = syncStatePath(configDir);
+    if (!existsSync(p))
+        return null;
+    try {
+        return JSON.parse(readFileSync(p, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+// --- Display helpers -------------------------------------------------------
+function formatValue(value) {
+    if (value === undefined)
+        return "(not set)";
+    if (value === null)
+        return "(null)";
+    if (Array.isArray(value))
+        return value.length === 0 ? "[]" : `[${value.join(", ")}]`;
+    if (typeof value === "object")
+        return JSON.stringify(value);
+    return String(value);
+}
+/**
+ * Deep equality for one setting's comparable value.
+ *
+ * The SAME canonical encoding `hashAppSettingsForDiff` hashes with (#2880):
+ * `JSON.stringify` preserves object key ORDER, so reordering the
+ * `[auth.google.clients.<type>]` tables in `app.toml` reported a `Modified`
+ * field while the push gate — hashing the sorted encoding — skipped the file.
+ * A cosmetic edit has to be a change to neither command, so both read one
+ * encoding. Arrays stay order-sensitive: a reordered list is a real edit.
+ */
+function settingsEqual(a, b) {
+    return canonicalJsonStringify(a ?? null) === canonicalJsonStringify(b ?? null);
+}
+// --- Command orchestrators -------------------------------------------------
+/**
+ * Render server-effective settings grouped by `app.toml` section — the view
+ * `apps get` prints (issue #2759; it was `apps get` before the fold).
+ *
+ * Descriptor-driven on purpose: a new setting appears here by being declared,
+ * where the hand-curated block `apps get` used to print showed whichever
+ * fields somebody remembered to add.
+ *
+ * Nothing is redacted (#2256, #2891): the only credential-shaped settings are
+ * the per-entry `clientSecret`s inside `googleClients`, and each is a whole
+ * `{{secrets.KEY}}` reference rather than the secret itself — so printing one
+ * tells the operator which secret is in use rather than leaking one. There is
+ * no withheld state left to explain.
+ *
+ * Takes settings rather than a client, and never exits: `apps get` fetches the
+ * app and its settings together and tolerates a settings fetch it is not
+ * allowed to make, so failure handling belongs at the call site.
+ */
+export function renderAppSettings(settings) {
+    for (const section of APP_SETTINGS_SECTIONS) {
+        const descriptors = APP_SETTINGS_DESCRIPTOR.filter((d) => d.section === section);
+        divider();
+        info(`[${section}]`);
+        for (const d of descriptors) {
+            printResult(`  ${d.key}`, formatValue(settings[d.field]));
+        }
+    }
+}
+/**
+ * Write the pulled `app.toml`.
+ *
+ * The file carries EVERY writable setting as of #2891 — the server withholds
+ * nothing, so there is no longer a class of value the pull has to warn about
+ * being absent (#2307's warning went with the withholding layer). `config pull`
+ * calls this for `app.toml`, whether the pull is whole-tree or `--only app`.
+ */
+export function writePulledAppSettings(configDir, settings, options = {}) {
+    ensureDir(configDir);
+    const contentHash = writeAppSettingsToml(configDir, settings);
+    options.log?.(`Wrote ${appTomlPath(configDir)}`);
+    return { path: appTomlPath(configDir), contentHash };
+}
+/**
+ * Whether `[app].name` is out of BOTH the comparison and the payload right now
+ * (#2880 DSO-001) — the cross-app rule, shared so diff and push cannot disagree.
+ *
+ * A cross-app push (the sync state belongs to a different app) applies the file
+ * to the target with `name` excluded, so it never renames the target, and it
+ * RECORDS the file's name in `entities.app.excludedName` with the baseline
+ * hashed the same way. While that record stands and the file still states that
+ * name, the field stays excluded: the target keeps its own name and no phantom
+ * difference appears.
+ *
+ * A file name that DIFFERS from the recorded one is, by construction, a local
+ * name edit — the operator changed the line — so the exclusion lifts, the name
+ * goes into the payload, and the baseline is restamped with `name` from the
+ * server's returned record. It cannot be discovered by comparison instead:
+ * `classifyPushChange` only answers `local-edited` when the remote hash equals
+ * the baseline, and a baseline stamped without `name` matches neither side once
+ * `name` re-enters, so every post-cross-app rename would report `both-changed`.
+ */
+export function appSettingsNameExcluded(input) {
+    if (input.isCrossAppPush)
+        return true;
+    if (input.recordedExcludedName === undefined)
+        return false;
+    return sameStatedName(input.fileName, input.recordedExcludedName);
+}
+/**
+ * Is the file still stating the name the exclusion was recorded for?
+ *
+ * Compared as TOML STATED it, not as a string (#2936). The name a cross-app
+ * push leaves alone is the name the file carried, and a cross-app push strips
+ * that line before it is type-checked — so the recorded value can be any TOML
+ * value, `name = 123` included. Coercing either side to text would read the
+ * unedited `123` as a rename to `"123"` on the next run, lifting the exclusion
+ * and aborting on the very field that is supposed to be out of play; two
+ * distinct values (`123` and `"123"`) must not compare equal either. Shape
+ * comparison covers the values with no useful identity of their own — an
+ * array, an inline table, a TOML date.
+ */
+function sameStatedName(fileName, recorded) {
+    if (fileName === recorded)
+        return true;
+    if (fileName === undefined || recorded === undefined)
+        return false;
+    if (typeof fileName === "object" && typeof recorded === "object") {
+        return JSON.stringify(fileName) === JSON.stringify(recorded);
+    }
+    return false;
+}
+/** `appSettingsNameExcluded` for a caller holding the loaded state (diff). */
+export function appSettingsNameExcludedForState(state, appId, tomlData) {
+    return appSettingsNameExcluded({
+        isCrossAppPush: !!(state && state.appId !== appId),
+        recordedExcludedName: state?.entities?.app?.excludedName,
+        fileName: tomlData?.app?.name,
+    });
+}
+/**
+ * The fields the local `app.toml` and the live settings disagree on (#2880).
+ *
+ * Compared over the FULL writable descriptor set, not just the keys the file
+ * carries: `app.toml` is the whole truth, so a key the file omits is not "no
+ * opinion", it is the absent-value the push will send. Both sides run through
+ * `projectAppSettingsForComparison`, which applies the same canonicalization
+ * and the same `whenSet`-empty flattening to each — so a pulled file compares
+ * equal to the server it was pulled from, and a deleted key shows as the clear
+ * push would apply.
+ *
+ * One helper, three callers: `config diff --only app`'s per-field output, the
+ * app-settings row in the full `config diff`, and the push gate.
+ */
+export function appSettingsFieldDiffs(localSettings, remoteSettings, options = {}) {
+    const local = projectAppSettingsForComparison(localSettings, options);
+    const remote = projectAppSettingsForComparison(remoteSettings, options);
+    const diffs = [];
+    for (const d of APP_SETTINGS_DESCRIPTOR) {
+        if (!(d.field in local))
+            continue;
+        if (settingsEqual(local[d.field], remote[d.field]))
+            continue;
+        diffs.push({
+            field: d.field,
+            section: d.section,
+            key: d.key,
+            local: local[d.field],
+            remote: remote[d.field],
+        });
+    }
+    return diffs;
+}
+/**
+ * The comparator's hash of one side's app settings — the push gate's
+ * `localHash`/`remoteHash`, and the `entities.app.semanticHash` baseline
+ * stamped once the two agree (#2880 criterion 6).
+ */
+export function hashAppSettingsForDiff(settings, options = {}) {
+    return createHash("sha256")
+        .update(canonicalJsonStringify(projectAppSettingsForComparison(settings, options)))
+        .digest("hex");
+}
+/**
+ * `config diff --only app` — the per-field report, over the full writable set.
+ */
+export async function diffAppSettings(client, appId, configDir, options = {}) {
+    try {
+        const path = appTomlPath(configDir);
+        if (!existsSync(path)) {
+            error(`No ${APP_TOML_FILENAME} found at ${path}. Run 'primitive config pull --only app' first.`);
+            process.exit(1);
+        }
+        // Local-parse-first, mirroring `settings push`: validate the file before
+        // touching the server so an unpushable file never issues `GET /settings`.
+        let tomlData;
+        try {
+            tomlData = parseConfigToml(readFileSync(path, "utf-8"));
+        }
+        catch (err) {
+            error(`Aborting diff: could not parse ${APP_TOML_FILENAME}: ${err?.message || String(err)}`);
+            process.exit(1);
+        }
+        // Mirror push's cross-app determination: when the sync state belongs to a
+        // different app, the push payload leaves `[app].name` out, so diff leaves it
+        // out too — otherwise a malformed local `name` would abort diff on a file
+        // push would accept and ignore, and the target's own name would report as a
+        // difference push has no intention of applying.
+        const state = loadSyncState(configDir);
+        const excludeName = appSettingsNameExcludedForState(state, appId, tomlData);
+        // ONE validator with push (#2880 criterion 1): whole-truth payload, so a
+        // missing required key is an error here exactly as it is there.
+        const { settings: local, errors } = buildAppSettingsPayload(tomlData, {
+            excludeName,
+        });
+        // A file with validation errors is unpushable, so diff must not present its
+        // surviving values as clean (or as a partial diff) — that would advertise
+        // changes push will never apply. `--json` is ignored on this path, exactly
+        // as push does.
+        if (errors.length > 0) {
+            error(`Aborting diff: ${errors.length} validation error(s) in ${APP_TOML_FILENAME} — this file cannot be pushed.`);
+            for (const e of errors)
+                error(`  ${e}`);
+            process.exit(1);
+        }
+        const remote = (await client.getAppSettings(appId)) ?? {};
+        const diffs = appSettingsFieldDiffs(local, remote, { excludeName });
+        if (options.json) {
+            json({ diffs });
+            return;
+        }
+        if (diffs.length === 0) {
+            success(`No differences — ${APP_TOML_FILENAME} matches server settings.`);
+            return;
+        }
+        info(`${diffs.length} field(s) differ between ${APP_TOML_FILENAME} and the server:`);
+        for (const df of diffs) {
+            divider();
+            info(`[${df.section}].${df.key}`);
+            printResult("  local", formatValue(df.local));
+            printResult("  remote", formatValue(df.remote));
+        }
+    }
+    catch (err) {
+        error(err.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=sync-app-settings.js.map

package/dist/src/commands/sync-app-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-app-settings.js","sourceRoot":"","sources":["../../../src/commands/sync-app-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,0BAA0B,GAE3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EACL,OAAO,EACP,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,MAAM,IAAI,WAAW,EACrB,OAAO,GACR,MAAM,kBAAkB,CAAC;AAE1B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,2DAA2D;AAC3D,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAa;IAChD,OAAO,mBAAmB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,mFAAmF;AACnF,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,QAAa;IACnE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAA6B,EAC7B,UAA+D,EAAE;IAEjE,OAAO,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,4EAA4E;AAC5E,uEAAuE;AACvE,gFAAgF;AAEhF,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAc,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,CAAU,EAAE,CAAU;IAC3C,OAAO,sBAAsB,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,sBAAsB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAa;IAC7C,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAM,OAA6B,CACpD,CAAC;QACF,OAAO,EAAE,CAAC;QACV,IAAI,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,CAAE,QAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,QAAa,EACb,UAA+C,EAAE;IAEjD,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAOvC;IACC,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CAAC,QAAiB,EAAE,QAAiB;IAC1D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,+BAA+B,CAC7C,KAAuB,EACvB,KAAa,EACb,QAAgD;IAEhD,OAAO,uBAAuB,CAAC;QAC7B,cAAc,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;QAClD,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY;QACxD,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI;KAC9B,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAkC,EAClC,cAAsD,EACtD,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,+BAA+B,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,+BAA+B,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,uBAAuB,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,SAAS;QAClC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7D,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgD,EAChD,UAAqC,EAAE;IAEvC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,sBAAsB,CACpB,+BAA+B,CAAC,QAAQ,EAAE,OAAO,CAAC,CACnD,CACF;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,KAAa,EACb,SAAiB,EACjB,UAA8B,EAAE;IAEhC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,KAAK,CACH,MAAM,iBAAiB,aAAa,IAAI,iDAAiD,CAC1F,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,QAA6B,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CACH,kCAAkC,iBAAiB,KAAK,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,+BAA+B,CACjD,KAAK,EACL,KAAK,EACL,QAAQ,CACT,CAAC;QAEF,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,QAAQ,EAAE;YACpE,WAAW;SACZ,CAAC,CAAC;QAEH,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,gBAAgB;QAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CACH,kBAAkB,MAAM,CAAC,MAAM,2BAA2B,iBAAiB,gCAAgC,CAC5G,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1D,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAEpE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,oBAAoB,iBAAiB,2BAA2B,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,4BAA4B,iBAAiB,kBAAkB,CAAC,CAAC;QACrF,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YAClC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}