pyric-tools 0.1.0-alpha.7

package/dist/deploy/hosting/walk.js

@@ -0,0 +1,167 @@
+/**
+ * Node-only directory walker. Reads every regular file under
+ * `localDir` recursively and returns `{ path, bytes }` entries with
+ * Hosting-shaped paths (leading `/`, forward slashes).
+ *
+ * `ignore` takes firebase.json hosting `ignore` globs. Semantics
+ * mirror firebase-tools' walker (`glob.sync('**\/*', { dot: true,
+ * ignore, nodir: true })`, clones/firebase-tools/src/listFiles.ts:3-11):
+ *   - patterns match the POSIX-relative path (no leading `/`);
+ *   - dotfiles are matched by `*`/`**` (glob's ignore is always
+ *     dot-mode);
+ *   - ignore FILTERS results — it does not prune traversal, so
+ *     `**\/.*` excludes `.env` but NOT `.git/config` (the last
+ *     segment isn't a dotfile). Verified against glob@10 (the version
+ *     firebase-tools pins); only patterns ending in `/**` prune a
+ *     directory's children, matching glob's `childrenIgnored`.
+ *
+ * Supported glob subset: `**`, `*`, `?`, `{a,b}` (no character
+ * classes / extglobs — no new dependency).
+ *
+ * Imports `node:*` and is therefore NOT browser-safe — wired only
+ * from the Node adapter (`namespaces.ts`), never from `core.ts`.
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, posix, relative, sep } from 'node:path';
+/**
+ * Globs every deploy ignores, before user config — firebase-tools
+ * hard-codes these in its walker (listFiles.ts:8).
+ */
+export const BASE_IGNORE_GLOBS = [
+    '**/firebase-debug.log',
+    '**/firebase-debug.*.log',
+    '.firebase/*',
+];
+/**
+ * Default `ignore` applied when firebase.json doesn't set one —
+ * firebase-tools writes exactly this list into every scaffolded
+ * firebase.json (clones/firebase-tools/src/init/features/hosting/
+ * index.ts:20 `DEFAULT_IGNORES`).
+ */
+export const DEFAULT_IGNORE_GLOBS = ['firebase.json', '**/.*', '**/node_modules/**'];
+export function walkDir(localDir, ignore) {
+    const matcher = compileIgnoreGlobs([...BASE_IGNORE_GLOBS, ...(ignore ?? DEFAULT_IGNORE_GLOBS)]);
+    const out = [];
+    walk(localDir, localDir, out, matcher);
+    return out;
+}
+function walk(root, dir, out, matcher) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const full = join(dir, entry.name);
+        if (entry.isSymbolicLink())
+            continue;
+        const rel = relative(root, full);
+        const posixRel = sep === posix.sep ? rel : rel.split(sep).join(posix.sep);
+        if (entry.isDirectory()) {
+            if (!matcher.ignoresChildren(posixRel))
+                walk(root, full, out, matcher);
+            continue;
+        }
+        if (!entry.isFile()) {
+            // Defensive: skip non-regular files (sockets, FIFOs, devices).
+            // Some platforms hand back `Unknown` from readdir.
+            try {
+                if (!statSync(full).isFile())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+        }
+        if (matcher.ignoresFile(posixRel))
+            continue;
+        out.push({
+            path: '/' + posixRel,
+            bytes: new Uint8Array(readFileSync(full)),
+        });
+    }
+}
+/** Compile ignore globs into a matcher. Exported for tests. */
+export function compileIgnoreGlobs(patterns) {
+    const fileRes = [];
+    const childrenRes = [];
+    for (const raw of patterns) {
+        for (const pattern of expandBraces(raw)) {
+            fileRes.push(globToRegExp(pattern));
+            if (pattern.endsWith('/**')) {
+                childrenRes.push(globToRegExp(pattern.slice(0, -3)));
+            }
+        }
+    }
+    return {
+        ignoresFile: (relPath) => fileRes.some((re) => re.test(relPath)),
+        ignoresChildren: (relDir) => childrenRes.some((re) => re.test(relDir)),
+    };
+}
+/**
+ * Expand `{a,b}` alternations (nesting supported) into plain globs.
+ * `{}`-free patterns pass through unchanged.
+ */
+function expandBraces(pattern) {
+    const open = pattern.indexOf('{');
+    if (open === -1)
+        return [pattern];
+    let depth = 0;
+    let close = -1;
+    for (let i = open; i < pattern.length; i++) {
+        if (pattern[i] === '{')
+            depth++;
+        else if (pattern[i] === '}') {
+            depth--;
+            if (depth === 0) {
+                close = i;
+                break;
+            }
+        }
+    }
+    if (close === -1)
+        return [pattern]; // unbalanced — treat literally
+    const head = pattern.slice(0, open);
+    const tail = pattern.slice(close + 1);
+    const body = pattern.slice(open + 1, close);
+    const options = [];
+    let level = 0;
+    let start = 0;
+    for (let i = 0; i <= body.length; i++) {
+        const ch = body[i];
+        if (i === body.length || (ch === ',' && level === 0)) {
+            options.push(body.slice(start, i));
+            start = i + 1;
+        }
+        else if (ch === '{')
+            level++;
+        else if (ch === '}')
+            level--;
+    }
+    return options.flatMap((opt) => expandBraces(head + opt + tail));
+}
+/**
+ * Translate one (brace-free) glob to a RegExp over a relative POSIX
+ * path. Dot-mode: `*` / `**` match dotfiles, exactly like glob's
+ * always-dot ignore handling.
+ */
+function globToRegExp(pattern) {
+    const segs = pattern.split('/');
+    let re = '^';
+    for (let i = 0; i < segs.length; i++) {
+        const seg = segs[i];
+        const last = i === segs.length - 1;
+        if (seg === '**') {
+            // Zero or more whole segments; as the final segment, anything.
+            re += last ? '.*' : '(?:[^/]+/)*';
+            continue;
+        }
+        let segRe = '';
+        for (const ch of seg) {
+            if (ch === '*')
+                segRe += '[^/]*';
+            else if (ch === '?')
+                segRe += '[^/]';
+            else
+                segRe += ch.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+        }
+        re += segRe + (last ? '' : '/');
+    }
+    return new RegExp(re + '$');
+}
+//# sourceMappingURL=walk.js.map

package/dist/deploy/hosting/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../../src/deploy/hosting/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAQvD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,uBAAuB;IACvB,yBAAyB;IACzB,aAAa;CACd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAErF,MAAM,UAAU,OAAO,CAAC,QAAgB,EAAE,MAAiB;IACzD,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,GAAW,EAAE,GAAiB,EAAE,OAAsB;IAChF,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,+DAA+D;YAC/D,mDAAmD;YACnD,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;oBAAE,SAAS;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC5C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG,GAAG,QAAQ;YACpB,KAAK,EAAE,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAeD,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,QAAkB;IACnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC3B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACnC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC1B,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,+DAA+D;YAC/D,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,IAAI,OAAO,CAAC;iBAC5B,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,IAAI,MAAM,CAAC;;gBAChC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,EAAE,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/deploy/index.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `pyric-tools/deploy` — Firebase control-plane primitives + tool
+ * factories. Pure-fetch over OAuth access tokens; works in browser
+ * and Node alike. Service-account flow via `fromServiceAccount`;
+ * browser hosts wrap Firebase Auth's `getIdToken`.
+ *
+ * See the design rationale,
+ * conventions F1–F8.
+ *
+ *   - F1: Per-domain factories are the registry-facing API
+ *         (`createXxxTools(deps) → ToolHandler[]`).
+ *   - F2: Identity is a value; lifecycle is a resolver.
+ *   - F3: `ProjectScope = { projectId, resolveToken }`.
+ *   - F4: Resolvers fire per-dispatch; hosts memoize via
+ *         `memoizeTtl` if cost matters.
+ *   - F5: Handlers are self-contained (deps + args + ctx; no
+ *         globals, no env, no module-level state).
+ *   - F6: `registry.register` throws on conflict; `replace` for
+ *         explicit overlays.
+ *   - F7: Decoration via `.map` before `register`.
+ *   - F8: `ToolContext` stays narrow (signal + optional
+ *         session-scoped extras).
+ *
+ * Primitives at this root throw `AdminApiError` on non-2xx;
+ * orchestrators return `Outcome`. The hosting + functions
+ * sub-paths (existing) flatten into root namespaces in Slice 3.
+ */
+export type { ProjectScope, Outcome } from './scope.js';
+export { AdminApiError } from './scope.js';
+export { fromServiceAccount } from './from-service-account.js';
+export { getDeploy } from './from-admin-app.js';
+export { memoizeTtl, type MemoizeTtlOptions } from './memoize-ttl.js';
+export { withResolvedScope } from './with-resolved-scope.js';
+export { hosting, functions, firestore, rtdb, recipes } from './namespaces.js';
+export type { DeployHostingScopedOptions, DeployFunctionsLocalOptions } from './namespaces.js';
+export type { RuleCheckResult, EnsureRuleOutcome, } from './firestore/rules.js';
+export type { ProvisionDatabaseOptions, ProvisionDatabaseOutcome, } from './firestore/databases.js';
+export type { QueryScope, IndexFieldOrder, ArrayConfig, IndexState, ApiScope, Density, VectorConfig, IndexField, Index, IndexesConfigEntry, IndexesConfig, IndexOperation, DeployIndexesOptions, PerIndexOutcome, DeployIndexesOutcome, GetIndexStatusOutcome, } from './firestore/indexes.js';
+export type { RtdbDeployRulesInput, RtdbFetchRulesInput, RtdbRulesDiscoveryResult, } from './rtdb/rules.js';
+export type { DeployHostingResult, DeployHostingSuccess, DeployHostingError, HostingErrorCode, } from './hosting/spec.js';
+export type { DeployHostingFilesInput } from './hosting/core.js';
+export type { WalkedFile } from './hosting/walk.js';
+export type { CreateSiteResult, EnsureSiteResult, HostingSiteResource, CreateHostingSiteInput, } from './hosting/sites.js';
+export type { HostingJsonConfig, HostingRewriteJson, HostingRedirectJson, HostingHeaderJson, HostingSource, } from './hosting/spec.js';
+export type { DeployFunctionsResult, DeployFunctionsSuccess, DeployFunctionsError, DeployedFunction, FunctionsErrorCode, FunctionDeployConfig, } from './functions/spec.js';
+export { runPreflight, checkHostingSite, checkFirestoreDatabase, checkIamPermissions, type PreflightCheckId, type PreflightCheckResult, type PreflightOptions, } from './preflight.js';
+export { createFirestoreDeployTools, createRtdbDeployTools, createHostingDeployTools, createFunctionsDeployTools, type ProjectScopedDeps, type DeployToolData, } from './tools.js';
+export type { DeployFunctionsCoreInput } from './functions/core.js';
+export type { BundleResult, BundleOptions } from './functions/bundle.js';
+export type { PollResult, PollOptions } from './functions/operation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/deploy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deploy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAU7D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAG/F,YAAY,EACV,eAAe,EACf,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,UAAU,EACV,eAAe,EACf,WAAW,EACX,UAAU,EACV,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,UAAU,EACV,KAAK,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAQzB,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACzE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/deploy/index.js

@@ -0,0 +1,50 @@
+/**
+ * `pyric-tools/deploy` — Firebase control-plane primitives + tool
+ * factories. Pure-fetch over OAuth access tokens; works in browser
+ * and Node alike. Service-account flow via `fromServiceAccount`;
+ * browser hosts wrap Firebase Auth's `getIdToken`.
+ *
+ * See the design rationale,
+ * conventions F1–F8.
+ *
+ *   - F1: Per-domain factories are the registry-facing API
+ *         (`createXxxTools(deps) → ToolHandler[]`).
+ *   - F2: Identity is a value; lifecycle is a resolver.
+ *   - F3: `ProjectScope = { projectId, resolveToken }`.
+ *   - F4: Resolvers fire per-dispatch; hosts memoize via
+ *         `memoizeTtl` if cost matters.
+ *   - F5: Handlers are self-contained (deps + args + ctx; no
+ *         globals, no env, no module-level state).
+ *   - F6: `registry.register` throws on conflict; `replace` for
+ *         explicit overlays.
+ *   - F7: Decoration via `.map` before `register`.
+ *   - F8: `ToolContext` stays narrow (signal + optional
+ *         session-scoped extras).
+ *
+ * Primitives at this root throw `AdminApiError` on non-2xx;
+ * orchestrators return `Outcome`. The hosting + functions
+ * sub-paths (existing) flatten into root namespaces in Slice 3.
+ */
+export { AdminApiError } from './scope.js';
+export { fromServiceAccount } from './from-service-account.js';
+export { getDeploy } from './from-admin-app.js';
+export { memoizeTtl } from './memoize-ttl.js';
+export { withResolvedScope } from './with-resolved-scope.js';
+// ─── Named-object namespaces (Slice 3) ───────────────────────────────
+//
+// `hosting` and `functions` are the scope-shaped groupings consumers
+// reach for. They wrap the existing portable primitives so every
+// operation takes a ProjectScope and resolves the token internally
+// per F4. The previous `pyric-tools/deploy/{hosting,functions}` sub-path
+// exports are removed.
+export { hosting, functions, firestore, rtdb, recipes } from './namespaces.js';
+// ─── Pre-flight checks ───────────────────────────────────────────────
+//
+// Cheap GETs (~200ms total) the playground deploy runs up front so
+// it can surface actionable remediation (missing IAM scopes,
+// uninitialized Firestore, etc.) before kicking off the real
+// hosting + rules + indexes work. See `preflight.ts`.
+export { runPreflight, checkHostingSite, checkFirestoreDatabase, checkIamPermissions, } from './preflight.js';
+// ─── Tool factories (Slice 9) ────────────────────────────────────────
+export { createFirestoreDeployTools, createRtdbDeployTools, createHostingDeployTools, createFunctionsDeployTools, } from './tools.js';
+//# sourceMappingURL=index.js.map

package/dist/deploy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deploy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAA0B,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,wEAAwE;AACxE,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,mEAAmE;AACnE,yEAAyE;AACzE,uBAAuB;AAEvB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAwE/E,wEAAwE;AACxE,EAAE;AACF,mEAAmE;AACnE,6DAA6D;AAC7D,6DAA6D;AAC7D,sDAAsD;AAEtD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AAExB,wEAAwE;AACxE,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,GAG3B,MAAM,YAAY,CAAC"}

package/dist/deploy/memoize-ttl.d.ts

@@ -0,0 +1,58 @@
+/**
+ * `memoizeTtl` — host-side caching wrapper for resolver functions.
+ *
+ * Per F4, the SDK convention is "resolvers fire per-dispatch; hosts
+ * memoize via `memoizeTtl` if cost matters." This is that memoizer.
+ *
+ * Default behavior (locked in v4.1):
+ * - Parse `expires_in` from the resolved token's claims when the
+ *   resolver returns an object whose shape carries it.
+ * - Refresh proactively at **90% of TTL** — gives the next caller a
+ *   fresh token before the in-flight window hits expiry.
+ * - Accept an explicit `ttlMs` override when the resolver doesn't
+ *   surface `expires_in` (rare; tests, mock tokens).
+ *
+ * Two shapes supported:
+ *
+ * 1. **Plain string resolver** — `() => Promise<string>`. Caller
+ *    must supply `ttlMs` (the SDK can't infer TTL from an opaque
+ *    string).
+ * 2. **Structured token resolver** — `() => Promise<{ token: string;
+ *    expiresIn?: number }>`. `expiresIn` is parsed as seconds; the
+ *    memoizer refreshes at 90% of that. Callers can still pass
+ *    `ttlMs` to override.
+ */
+export interface MemoizeTtlOptions {
+    /** Explicit TTL in milliseconds. Required for plain-string
+     *  resolvers; optional override for structured-token resolvers
+     *  (defaults to 90% of `expiresIn`). */
+    ttlMs?: number;
+    /** Fraction of TTL to use as the refresh window. Default 0.9. */
+    refreshAtFraction?: number;
+    /**
+     * Per-attempt timeout (ms) on the underlying resolver. Default
+     * 30_000 (30 seconds). If the resolver hangs longer than this,
+     * the in-flight wait rejects with a timeout error and the next
+     * caller can retry afresh — prevents a wedged resolver from
+     * deadlocking every subsequent call.
+     */
+    resolverTimeoutMs?: number;
+}
+/**
+ * Wrap a plain string-returning resolver with TTL memoization.
+ * Callers must supply `ttlMs` since opaque strings carry no
+ * expiry information.
+ */
+export declare function memoizeTtl(resolver: () => Promise<string>, opts: MemoizeTtlOptions & {
+    ttlMs: number;
+}): () => Promise<string>;
+/**
+ * Wrap a structured-token resolver with TTL memoization. The
+ * memoizer parses `expiresIn` (seconds) from the resolver's return
+ * value and refreshes at 90% of TTL by default.
+ */
+export declare function memoizeTtl(resolver: () => Promise<{
+    token: string;
+    expiresIn?: number;
+}>, opts?: MemoizeTtlOptions): () => Promise<string>;
+//# sourceMappingURL=memoize-ttl.d.ts.map

package/dist/deploy/memoize-ttl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoize-ttl.d.ts","sourceRoot":"","sources":["../../src/deploy/memoize-ttl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,WAAW,iBAAiB;IAChC;;4CAEwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAC/B,IAAI,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAEzB;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9D,IAAI,CAAC,EAAE,iBAAiB,GACvB,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/deploy/memoize-ttl.js

@@ -0,0 +1,88 @@
+/**
+ * `memoizeTtl` — host-side caching wrapper for resolver functions.
+ *
+ * Per F4, the SDK convention is "resolvers fire per-dispatch; hosts
+ * memoize via `memoizeTtl` if cost matters." This is that memoizer.
+ *
+ * Default behavior (locked in v4.1):
+ * - Parse `expires_in` from the resolved token's claims when the
+ *   resolver returns an object whose shape carries it.
+ * - Refresh proactively at **90% of TTL** — gives the next caller a
+ *   fresh token before the in-flight window hits expiry.
+ * - Accept an explicit `ttlMs` override when the resolver doesn't
+ *   surface `expires_in` (rare; tests, mock tokens).
+ *
+ * Two shapes supported:
+ *
+ * 1. **Plain string resolver** — `() => Promise<string>`. Caller
+ *    must supply `ttlMs` (the SDK can't infer TTL from an opaque
+ *    string).
+ * 2. **Structured token resolver** — `() => Promise<{ token: string;
+ *    expiresIn?: number }>`. `expiresIn` is parsed as seconds; the
+ *    memoizer refreshes at 90% of that. Callers can still pass
+ *    `ttlMs` to override.
+ */
+export function memoizeTtl(resolver, opts = {}) {
+    let entry = null;
+    let inFlight = null;
+    const fraction = opts.refreshAtFraction ?? 0.9;
+    const timeoutMs = opts.resolverTimeoutMs ?? 30_000;
+    return async () => {
+        const now = Date.now();
+        if (entry && entry.refreshAt > now)
+            return entry.value;
+        // Coalesce concurrent refreshes — only one inflight at a time.
+        if (inFlight)
+            return inFlight;
+        inFlight = (async () => {
+            // Race the resolver against a timeout so a hung resolver
+            // can't wedge every subsequent caller. The timer is cleared
+            // either way so we don't keep the process alive.
+            let timerHandle;
+            const timeout = new Promise((_, reject) => {
+                timerHandle = setTimeout(() => {
+                    reject(new Error(`memoizeTtl: resolver did not complete within ${timeoutMs}ms`));
+                }, timeoutMs);
+            });
+            let raw;
+            try {
+                raw = await Promise.race([resolver(), timeout]);
+            }
+            finally {
+                if (timerHandle !== undefined)
+                    clearTimeout(timerHandle);
+            }
+            let token;
+            let ttlMs;
+            if (typeof raw === 'string') {
+                token = raw;
+                if (opts.ttlMs === undefined) {
+                    throw new Error('memoizeTtl: plain-string resolver requires explicit ttlMs');
+                }
+                ttlMs = opts.ttlMs;
+            }
+            else {
+                token = raw.token;
+                ttlMs =
+                    opts.ttlMs ??
+                        (raw.expiresIn !== undefined
+                            ? raw.expiresIn * 1000
+                            : (() => {
+                                throw new Error('memoizeTtl: structured-token resolver returned no expiresIn; pass an explicit ttlMs');
+                            })());
+            }
+            entry = {
+                value: token,
+                refreshAt: Date.now() + Math.floor(ttlMs * fraction),
+            };
+            return token;
+        })();
+        try {
+            return await inFlight;
+        }
+        finally {
+            inFlight = null;
+        }
+    };
+}
+//# sourceMappingURL=memoize-ttl.js.map

package/dist/deploy/memoize-ttl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoize-ttl.js","sourceRoot":"","sources":["../../src/deploy/memoize-ttl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA8CH,MAAM,UAAU,UAAU,CACxB,QAE0D,EAC1D,OAA0B,EAAE;IAE5B,IAAI,KAAK,GAAyB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC;IAEnD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACvD,+DAA+D;QAC/D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,yDAAyD;YACzD,4DAA4D;YAC5D,iDAAiD;YACjD,IAAI,WAAsD,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/C,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,MAAM,CACJ,IAAI,KAAK,CACP,gDAAgD,SAAS,IAAI,CAC9D,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,IAAI,GAAmD,CAAC;YACxD,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,CAAC;oBAAS,CAAC;gBACT,IAAI,WAAW,KAAK,SAAS;oBAAE,YAAY,CAAC,WAAW,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,KAAa,CAAC;YAClB,IAAI,KAAa,CAAC;YAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,KAAK,GAAG,GAAG,CAAC;gBACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;gBACJ,CAAC;gBACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBAClB,KAAK;oBACH,IAAI,CAAC,KAAK;wBACV,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;4BAC1B,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI;4BACtB,CAAC,CAAC,CAAC,GAAG,EAAE;gCACJ,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;4BACJ,CAAC,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;YACD,KAAK,GAAG;gBACN,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;aACrD,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/deploy/namespaces.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Named-object groupings at the pyric-tools/deploy root entry. Each
+ * group bundles the primitives for one Firebase product (hosting,
+ * functions, etc.) under a typed namespace.
+ *
+ * Per F2 + F3, every operation that mutates a project takes
+ * `scope: ProjectScope` as its first argument. The namespaces here
+ * are thin re-wrappings of the underlying portable primitives —
+ * they call `withResolvedScope` to bridge the scope-vs-(token,
+ * projectId) shape mismatch with the existing internal functions.
+ */
+import { type WalkedFile } from './hosting/walk.js';
+import { type CreateHostingSiteInput } from './hosting/sites.js';
+import { type DeployFunctionsCoreInput } from './functions/core.js';
+import { type PollOptions } from './functions/operation.js';
+import type { FunctionDeployConfig } from './functions/spec.js';
+import * as rulesImpl from './firestore/rules.js';
+import * as indexesImpl from './firestore/indexes.js';
+import * as databasesImpl from './firestore/databases.js';
+import * as rtdbRulesImpl from './rtdb/rules.js';
+import type { HostingJsonConfig } from './hosting/spec.js';
+import type { ProjectScope } from './scope.js';
+export interface DeployHostingScopedOptions {
+    /** Hosting site id. */
+    siteId: string;
+    /** Local directory walked recursively (Node-only). */
+    localDir?: string;
+    /**
+     * firebase.json `ignore` globs applied while walking `localDir`
+     * (`**`, `*`, `?`, `{a,b}`). Omit for firebase-tools' scaffold
+     * defaults (`firebase.json`, `**\/.*`, `**\/node_modules/**`).
+     * Not applied to pre-walked `files`.
+     */
+    ignore?: string[];
+    /** Pre-walked file list — supply when the host runs in a browser. */
+    files?: WalkedFile[];
+    /**
+     * firebase.json-shaped hosting block (rewrites / redirects / headers
+     * / cleanUrls / trailingSlash / appAssociation / i18n) baked into
+     * the version's serving config.
+     */
+    config?: HostingJsonConfig;
+    /** Preview-channel id. Omit (or `'live'`) for a live release. */
+    channelId?: string;
+    /** Channel TTL (protobuf Duration, e.g. `'604800s'`) — create only. */
+    channelTtl?: string;
+}
+export declare const hosting: {
+    /**
+     * Walk a directory (Node) OR accept a pre-walked file list
+     * (browser), then deploy each file via content-hash dedup.
+     */
+    deployFiles(scope: ProjectScope, options: DeployHostingScopedOptions): Promise<import("./index.js").DeployHostingResult>;
+    sites: {
+        create(scope: ProjectScope, input: Omit<CreateHostingSiteInput, "projectId" | "accessToken">): Promise<import("./index.js").CreateSiteResult>;
+        ensure(scope: ProjectScope, input: Omit<CreateHostingSiteInput, "projectId" | "accessToken">): Promise<import("./index.js").EnsureSiteResult>;
+    };
+};
+export interface DeployFunctionsLocalOptions {
+    /** Path to the functions source directory (Node-only). */
+    localDir: string;
+    /** Functions to deploy from the same source bundle. */
+    functions: FunctionDeployConfig[];
+}
+export declare const functions: {
+    /**
+     * Bundle a local source directory (Node-only) and deploy. The
+     * one-call convenience the previous `FunctionsDeployHandler`
+     * exposed, reshaped onto ProjectScope.
+     */
+    deployLocal(scope: ProjectScope, options: DeployFunctionsLocalOptions): Promise<import("./index.js").DeployFunctionsResult>;
+    /**
+     * Deploy a pre-built bundle. Use when the caller manages bundling
+     * separately (e.g. a browser host shipping a zip from any source).
+     */
+    deploy(scope: ProjectScope, input: Omit<DeployFunctionsCoreInput, "accessToken" | "projectId">): Promise<import("./index.js").DeployFunctionsResult>;
+    /** Bundle source for a Cloud Function. Pure-Node (esbuild). */
+    bundle(localDir: string): import("./index.js").BundleResult;
+    /** Poll a long-running Cloud Functions operation. */
+    pollOperation(scope: ProjectScope, operationName: string, opts?: PollOptions): Promise<import("./index.js").PollResult>;
+    /** Grant the all-users public-invoker IAM binding to a function. */
+    grantPublicInvoker(scope: ProjectScope, input: {
+        region: string;
+        serviceId: string;
+    }): Promise<import("./functions/iam.js").IamGrantResult>;
+};
+export declare const firestore: {
+    rules: {
+        fetch: typeof rulesImpl.fetchCurrentRules;
+        deploy: typeof rulesImpl.deploy;
+        inject: typeof rulesImpl.inject;
+        check: typeof rulesImpl.check;
+        ensure: typeof rulesImpl.ensure;
+    };
+    indexes: {
+        create: typeof indexesImpl.create;
+        deployAll: typeof indexesImpl.deployAll;
+        getStatus: typeof indexesImpl.getStatus;
+    };
+    databases: {
+        provision: typeof databasesImpl.provision;
+    };
+};
+export declare const rtdb: {
+    rules: {
+        fetch: typeof rtdbRulesImpl.fetchRules;
+        deploy: typeof rtdbRulesImpl.deployRules;
+        discoverDefaultDatabaseUrl: typeof rtdbRulesImpl.discoverDefaultDatabaseUrl;
+        resolveDatabaseUrl: typeof rtdbRulesImpl.resolveDatabaseUrl;
+    };
+};
+export declare const recipes: {
+    pyricSessions: {
+        readonly marker: "match /pyric_sessions/";
+        readonly snippet: "    match /pyric_sessions/{sessionId} {\n      // Anyone signed in (anonymous OK) can create. Read/edit denied\n      // by default — owner reads via the Firebase Console.\n      allow create: if request.auth != null;\n      allow read, update, delete: if false;\n    }";
+        readonly freshTemplate: "rules_version = '2';\nservice cloud.firestore {\n  match /databases/{database}/documents {\n    match /pyric_sessions/{sessionId} {\n      // Anyone signed in (anonymous OK) can create. Read/edit denied\n      // by default — owner reads via the Firebase Console.\n      allow create: if request.auth != null;\n      allow read, update, delete: if false;\n    }\n  }\n}\n";
+    };
+};
+//# sourceMappingURL=namespaces.d.ts.map

package/dist/deploy/namespaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespaces.d.ts","sourceRoot":"","sources":["../../src/deploy/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK7D,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,WAAW,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAE1D,OAAO,KAAK,aAAa,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,WAAW,0BAA0B;IACzC,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,OAAO;IAClB;;;OAGG;uBACsB,YAAY,WAAW,0BAA0B;;sBAwB/D,YAAY,SACZ,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,aAAa,CAAC;sBAUzD,YAAY,SACZ,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,aAAa,CAAC;;CAUrE,CAAC;AAIF,MAAM,WAAW,2BAA2B;IAC1C,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,eAAO,MAAM,SAAS;IACpB;;;;OAIG;uBACsB,YAAY,WAAW,2BAA2B;IAgC3E;;;OAGG;kBAEM,YAAY,SACZ,IAAI,CAAC,wBAAwB,EAAE,aAAa,GAAG,WAAW,CAAC;IASpE,+DAA+D;qBAC9C,MAAM;IAGvB,qDAAqD;yBAC1B,YAAY,iBAAiB,MAAM,SAAS,WAAW;IAIlF,oEAAoE;8BAE3D,YAAY,SACZ;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;CAS/C,CAAC;AAyBF,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;CAgBrB,CAAC;AAIF,eAAO,MAAM,IAAI;;;;;;;CAOhB,CAAC;AAIF,eAAO,MAAM,OAAO;;;;;;CAEnB,CAAC"}