run402 3.6.0 → 3.7.0

package/README.md

@@ -35,11 +35,15 @@ Every command prints **JSON to stdout**, **JSON errors to stderr**, and exits **
 
 ```bash
 run402 up --name my-app -y
-run402 up --dry-run
+run402 up --manifest run402.deploy.ts --check
+run402 up --manifest run402.deploy.ts --plan
+run402 up --manifest run402.deploy.ts --require-plan plan_...
 run402 up --manifest run402.deploy.json --project prj_...
 ```
 
-`up` is a thin CLI shim over the Node SDK action runner. It discovers `run402.deploy.json` then `app.json`, validates the deploy input before any mutation, resolves the project as `--project` → `.run402/project.json` → manifest `project_id` → approved creation from `--name` → approved active-project fallback, then applies the manifest. `--name` is creation/link metadata only; it is not a manifest field and never renames an existing project. When everything is already configured, plain `run402 up` deploys. Non-interactive recursive prerequisites/local writes require `-y/--yes`; `--dry-run` prints planned `steps[]` without gateway mutations, uploads, or local writes. Use repeatable `--allow-warning <code>` for reviewed deploy warnings and reserve broad `--allow-warnings` for exceptional reviewed cases. Run402 Core skips Cloud allowance/tier prerequisites and fails closed when no Core project is selected.
+`up` is a thin CLI shim over the Node SDK action runner. It discovers `run402.deploy.json` then `app.json`, validates the deploy input before any mutation, resolves the project as `--project` → `.run402/project.json` → manifest `project_id` → approved creation from `--name` → approved active-project fallback, then applies the manifest. `--name` is creation/link metadata only; it is not a manifest field and never renames an existing project. When everything is already configured, plain `run402 up` deploys. Non-interactive recursive prerequisites/local writes require `-y/--yes`.
+
+For typed `run402.deploy.ts` configs, pass `--manifest` explicitly because TypeScript/JavaScript configs execute local code. Use `--check` for local-only import/normalize/file validation, `--print-spec` to inspect the normalized `ReleaseSpec`, `--plan` for a gateway-reviewed non-deploying plan, and `--require-plan <plan_id>` to apply only that reviewed intent. Warning flags are not used with `--require-plan`; the reviewed plan binds the exact warning/destructive set. Run402 Core skips Cloud allowance/tier prerequisites and fails closed when no Core project is selected.
 
 ### Allowance
 

package/lib/deploy-v2.mjs

@@ -23,10 +23,11 @@
  */
 
 import { existsSync, fstatSync, readFileSync } from "node:fs";
-import { resolve, dirname, isAbsolute } from "node:path";
+import { resolve, dirname, extname, isAbsolute } from "node:path";
 import {
   buildDeployResolveSummary,
   githubActionsCredentials,
+  loadDeployManifest,
   normalizeDeployManifest,
   normalizeDeployResolveRequest,
 } from "#sdk/node";
@@ -41,8 +42,8 @@ import { editRequestAction, nextAction, retryAction } from "./next-actions.mjs";
 const APPLY_HELP = `run402 deploy apply — Unified deploy primitive (v1.34+)
 
 Usage:
-  run402 deploy apply --manifest <path> [--project <id>] [--quiet|--final-only] [--allow-warning <code>] [--allow-warnings]
-  run402 deploy apply --spec '<json>' [--project <id>] [--quiet|--final-only] [--allow-warning <code>] [--allow-warnings]
+  run402 deploy apply --manifest <path> [--project <id>] [--check|--print-spec|--plan|--require-plan <id>] [--quiet|--final-only]
+  run402 deploy apply --spec '<json>' [--project <id>] [--check|--print-spec|--plan|--require-plan <id>] [--quiet|--final-only]
   run402 deploy apply --dir <build-output> [--manifest <path>] [--project <id>]
   cat spec.json | run402 deploy apply [--project <id>]
 
@@ -90,6 +91,10 @@ Options:
                           the slice carries the build output. Requires
                           @run402/astro installed in the project.
   --project <id>          Override project_id from the manifest
+  --check                 Validate and normalize locally. No gateway calls or uploads.
+  --print-spec            Print the normalized ReleaseSpec JSON. No gateway calls or uploads.
+  --plan                  Ask the gateway for a reviewed plan. No upload or commit.
+  --require-plan <id>     Apply only if this reviewed plan still matches.
   --quiet                 Suppress per-event JSON-line stderr (final result still on stdout)
   --final-only            Alias for --quiet; final success/error envelope is still preserved
   --allow-warning <code>  Continue past this reviewed warning code (repeatable)
@@ -138,6 +143,8 @@ Internationalization (routed functions):
   Static-route hits do NOT receive locale negotiation; only routed HTTP function invocations do. Run402 does NOT inject Vary headers.
 `;
 
+const EXECUTABLE_MANIFEST_EXTENSIONS = new Set([".ts", ".mts", ".cts", ".js", ".mjs", ".cjs"]);
+
 const RESUME_HELP = `run402 deploy resume — Resume a stuck deploy operation
 
 Usage:
@@ -494,8 +501,18 @@ function makeStderrEventWriter(quiet) {
 }
 
 function parseApplyArgs(args) {
-  const opts = { manifest: null, spec: null, dir: null, project: null, quiet: false, allowWarnings: false, allowWarningCodes: [] };
-  const allowedFlags = ["--manifest", "--spec", "--dir", "--project", "--quiet", "--final-only", "--allow-warning", "--allow-warnings", "--help", "-h"];
+  const opts = {
+    manifest: null,
+    spec: null,
+    dir: null,
+    project: null,
+    quiet: false,
+    allowWarnings: false,
+    allowWarningCodes: [],
+    mode: null,
+    planFingerprint: null,
+  };
+  const allowedFlags = ["--manifest", "--spec", "--dir", "--project", "--quiet", "--final-only", "--allow-warning", "--allow-warnings", "--check", "--print-spec", "--plan", "--require-plan", "--plan-fingerprint", "--help", "-h"];
 
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -503,7 +520,7 @@ function parseApplyArgs(args) {
       console.log(APPLY_HELP);
       process.exit(0);
     }
-    if (arg === "--manifest" || arg === "--spec" || arg === "--dir" || arg === "--project" || arg === "--allow-warning") {
+    if (arg === "--manifest" || arg === "--spec" || arg === "--dir" || arg === "--project" || arg === "--allow-warning" || arg === "--require-plan" || arg === "--plan-fingerprint") {
       const value = args[i + 1];
       if (value === undefined || (typeof value === "string" && value.startsWith("--"))) {
         fail({
@@ -541,14 +558,21 @@ function parseApplyArgs(args) {
         opts.dir = value;
       } else if (arg === "--project") {
         opts.project = value;
-      } else {
+      } else if (arg === "--allow-warning") {
         opts.allowWarningCodes.push(value);
+      } else if (arg === "--require-plan") {
+        setApplyMode(opts, { kind: "applyReviewed", planId: value }, "--require-plan");
+      } else {
+        opts.planFingerprint = value;
       }
       i += 1;
       continue;
     }
     if (arg === "--quiet" || arg === "--final-only") { opts.quiet = true; continue; }
     if (arg === "--allow-warnings") { opts.allowWarnings = true; continue; }
+    if (arg === "--check") { setApplyMode(opts, "check", "--check"); continue; }
+    if (arg === "--print-spec") { setApplyMode(opts, "printSpec", "--print-spec"); continue; }
+    if (arg === "--plan") { setApplyMode(opts, "plan", "--plan"); continue; }
     if (typeof arg === "string" && arg.startsWith("-")) {
       fail({
         code: "BAD_USAGE",
@@ -562,10 +586,38 @@ function parseApplyArgs(args) {
       details: { argument: arg },
     });
   }
+  if (opts.planFingerprint && (!opts.mode || opts.mode.kind !== "applyReviewed")) {
+    fail({
+      code: "BAD_USAGE",
+      message: "--plan-fingerprint can only be used with --require-plan.",
+      details: { flag: "--plan-fingerprint" },
+    });
+  }
+  if (opts.mode && opts.mode.kind === "applyReviewed") {
+    if (opts.planFingerprint) opts.mode.planFingerprint = opts.planFingerprint;
+    if (opts.allowWarnings || opts.allowWarningCodes.length > 0) {
+      fail({
+        code: "BAD_USAGE",
+        message: "--allow-warning/--allow-warnings are not used with --require-plan; the reviewed plan already binds the warning set.",
+        details: { flag: "--require-plan" },
+      });
+    }
+  }
 
   return opts;
 }
 
+function setApplyMode(opts, mode, flag) {
+  if (opts.mode !== null) {
+    fail({
+      code: "BAD_USAGE",
+      message: "Choose only one execution mode for deploy apply.",
+      details: { existing_mode: opts.mode, flag },
+    });
+  }
+  opts.mode = mode;
+}
+
 // Resolve the single manifest source from parsed opts + whether stdin actually
 // has data (a pipe/file on fd 0). Explicit --manifest/--spec/--dir take
 // precedence over incidental stdin: a CI runner (e.g. GitHub Actions) hands the
@@ -738,12 +790,14 @@ async function applyCmd(args) {
 
   let raw;
   let manifestPath = null;
+  let executableManifest = false;
   if (source === "spec") {
     raw = opts.spec;
   } else if (source === "manifest") {
     try {
       manifestPath = isAbsolute(opts.manifest) ? opts.manifest : resolve(process.cwd(), opts.manifest);
-      raw = readFileSync(manifestPath, "utf-8");
+      executableManifest = EXECUTABLE_MANIFEST_EXTENSIONS.has(extname(manifestPath).toLowerCase());
+      raw = executableManifest ? null : readFileSync(manifestPath, "utf-8");
     } catch (err) {
       fail({
         code: "BAD_USAGE",
@@ -760,21 +814,30 @@ async function applyCmd(args) {
     raw = await readStdin();
   }
 
-  let spec;
-  try {
-    spec = JSON.parse(raw);
-  } catch (err) {
+  let spec = null;
+  if (!executableManifest) {
+    try {
+      spec = JSON.parse(raw);
+    } catch (err) {
+      fail({
+        code: "BAD_USAGE",
+        message: `Manifest is not valid JSON: ${err.message}`,
+        details: { source, parse_error: err.message },
+      });
+    }
+    rejectLegacySecretManifest(spec, {
+      source,
+      ...(manifestPath ? { path: manifestPath } : {}),
+    });
+  }
+
+  if (opts.dir !== null && executableManifest) {
     fail({
       code: "BAD_USAGE",
-      message: `Manifest is not valid JSON: ${err.message}`,
-      details: { source, parse_error: err.message },
+      message: "--dir cannot be merged into an executable deploy config. Put the site/function helper in the config file instead.",
+      details: { flag: "--dir", manifest: manifestPath },
     });
   }
-  rejectLegacySecretManifest(spec, {
-    source,
-    ...(manifestPath ? { path: manifestPath } : {}),
-  });
-
   if (opts.dir !== null) {
     await mergeAstroReleaseSlice(spec, opts.dir);
   }
@@ -810,8 +873,10 @@ async function applyCmd(args) {
     if (key === "i18n" && value === null) return true;
     return hasContent(value);
   }
-  const hasMeaningfulContent = spec && typeof spec === "object" && !Array.isArray(spec) &&
-    meaningful.some((key) => hasDeployableSection(key, spec[key]));
+  const hasMeaningfulContent = executableManifest || (
+    spec && typeof spec === "object" && !Array.isArray(spec) &&
+    meaningful.some((key) => hasDeployableSection(key, spec[key]))
+  );
   if (!hasMeaningfulContent) {
     fail({
       code: "MANIFEST_EMPTY",
@@ -825,7 +890,7 @@ async function applyCmd(args) {
     });
   }
 
-  const manifestProject = spec.project ?? spec.project_id;
+  const manifestProject = spec?.project ?? spec?.project_id;
   if (opts.project && manifestProject && manifestProject !== opts.project) {
     fail({
       code: "BAD_USAGE",
@@ -841,11 +906,16 @@ async function applyCmd(args) {
 
   let normalizedManifest;
   try {
-    normalizedManifest = await normalizeDeployManifest(spec, {
-      baseDir: manifestPath ? dirname(manifestPath) : process.cwd(),
-      ...(opts.project ? { project: opts.project } : {}),
-      ...(defaultProject ? { defaultProject } : {}),
-    });
+    normalizedManifest = executableManifest
+      ? await loadDeployManifest(manifestPath, {
+          ...(opts.project ? { project: opts.project } : {}),
+          ...(defaultProject ? { defaultProject } : {}),
+        })
+      : await normalizeDeployManifest(spec, {
+          baseDir: manifestPath ? dirname(manifestPath) : process.cwd(),
+          ...(opts.project ? { project: opts.project } : {}),
+          ...(defaultProject ? { defaultProject } : {}),
+        });
   } catch (err) {
     reportSdkError(err);
   }
@@ -853,6 +923,20 @@ async function applyCmd(args) {
   const releaseSpec = normalizedManifest.spec;
   const idempotencyKey = normalizedManifest.idempotencyKey;
 
+  if (opts.mode === "check") {
+    console.log(JSON.stringify({
+      ok: true,
+      mode: "check",
+      project_id: releaseSpec.project,
+      manifest_path: manifestPath,
+    }, null, 2));
+    return;
+  }
+  if (opts.mode === "printSpec") {
+    console.log(JSON.stringify(releaseSpec, null, 2));
+    return;
+  }
+
   // Pre-flight source scan (auth-aware-ssr Section 9). Bypass via
   // RUN402_DEPLOY_SKIP_SCAN=1 — useful for forcing a deploy when
   // the scanner has a false positive that the operator has confirmed
@@ -865,7 +949,7 @@ async function applyCmd(args) {
   // manifest deploy: running from inside an unrelated source tree (e.g.
   // the gateway monorepo, which legitimately has dozens of `getUser`
   // references) would otherwise block a deploy of one unrelated HTML file.
-  if (process.env.RUN402_DEPLOY_SKIP_SCAN !== "1") {
+  if (!isNonApplyingMode(opts.mode) && process.env.RUN402_DEPLOY_SKIP_SCAN !== "1") {
     try {
       const { scanSourceTree, scanSourceFiles, SCAN_SEVERITY } = await import(
         "./doctor-source-scan.mjs"
@@ -879,7 +963,7 @@ async function applyCmd(args) {
         findings = scanSourceTree(scanRoot, { cwd: process.cwd() });
       } else {
         const baseDir = manifestPath ? dirname(manifestPath) : process.cwd();
-        const files = collectManifestSourceFiles(spec, baseDir).filter(
+        const files = collectManifestSourceFiles(spec ?? normalizedManifest.manifest, baseDir).filter(
           (p) => scannableExt.test(p) && existsSync(p),
         );
         findings = files.length > 0
@@ -925,12 +1009,24 @@ async function applyCmd(args) {
   }
 
   try {
+    if (opts.mode === "plan") {
+      const result = await getSdk(sdkOpts)._applyEngine.plan(releaseSpec, {
+        idempotencyKey,
+        mode: "reviewedPlan",
+      });
+      console.log(JSON.stringify(result.plan, null, 2));
+      return;
+    }
+    const requiredPlan = opts.mode && opts.mode.kind === "applyReviewed"
+      ? { planId: opts.mode.planId, ...(opts.mode.planFingerprint ? { planFingerprint: opts.mode.planFingerprint } : {}) }
+      : undefined;
     const result = await withAutoApprove(() =>
       getSdk(sdkOpts)._applyEngine.apply(releaseSpec, {
         onEvent: makeStderrEventWriter(opts.quiet),
         idempotencyKey,
         allowWarnings: opts.allowWarnings,
         allowWarningCodes: opts.allowWarningCodes,
+        ...(requiredPlan ? { requiredPlan } : {}),
         target: isCoreApiTarget() ? "core" : "cloud",
       }),
     );
@@ -940,6 +1036,10 @@ async function applyCmd(args) {
   }
 }
 
+function isNonApplyingMode(mode) {
+  return mode === "check" || mode === "printSpec" || mode === "plan";
+}
+
 function hasGithubActionsOidcEnv(env = process.env) {
   return env.GITHUB_ACTIONS === "true" &&
     Boolean(env.ACTIONS_ID_TOKEN_REQUEST_URL) &&

package/lib/up.mjs

@@ -7,7 +7,7 @@ import { assertKnownFlags, flagValue, normalizeArgv, positionalArgs } from "./ar
 const HELP = `run402 up — Provision/link/deploy the current app
 
 Usage:
-  run402 up [--name <name>] [--project <id>] [--manifest <path>] [--dir <path>] [--tier <tier>] [-y|--yes] [--dry-run] [--quiet]
+  run402 up [--name <name>] [--project <id>] [--manifest <path>] [--dir <path>] [--tier <tier>] [-y|--yes] [--check|--print-spec|--plan|--require-plan <id>] [--quiet]
 
 Options:
   --name <name>       Project display name when up needs to create a project.
@@ -20,8 +20,16 @@ Options:
                       (prototype, hobby, team; default prototype).
   -y, --yes           Approve recursive prerequisites/local writes (allowance,
                       tier, project creation, workspace link) for non-interactive runs.
-  --dry-run           Plan the recursive action graph without gateway mutations,
+  --check             Validate the manifest/config locally. No gateway calls,
                       uploads, or local writes.
+  --print-spec        Print the normalized ReleaseSpec JSON. No gateway calls,
+                      uploads, or local writes.
+  --plan              Ask the gateway for a reviewed deploy plan. No upload,
+                      commit, project provisioning, or workspace link write.
+  --require-plan <id> Apply only if this reviewed plan still matches.
+  --plan-fingerprint <fingerprint>
+                      Optional fingerprint returned by --plan. Only valid
+                      with --require-plan.
   --allow-warning <code>
                       Acknowledge a reviewed deploy warning code (repeatable).
   --allow-warnings    Acknowledge all reviewed deploy warnings.
@@ -33,8 +41,9 @@ Project resolution:
 
 Examples:
   run402 up --name my-app -y
-  run402 up --dry-run
-  run402 up --manifest run402.deploy.json --project prj_...
+  run402 up --manifest run402.deploy.ts --check
+  run402 up --manifest run402.deploy.ts --plan
+  run402 up --manifest run402.deploy.ts --require-plan pln_...
 `;
 
 const TIERS = new Set(["prototype", "hobby", "team"]);
@@ -47,8 +56,8 @@ export async function run(args = []) {
   }
   assertKnownFlags(
     parsed,
-    ["--help", "-h", "-y", "--yes", "--dry-run", "--quiet", "--final-only", "--allow-warnings"],
-    ["--name", "--project", "--manifest", "--dir", "--tier", "--idempotency-key", "--allow-warning"],
+    ["--help", "-h", "-y", "--yes", "--dry-run", "--check", "--print-spec", "--plan", "--quiet", "--final-only", "--allow-warnings"],
+    ["--name", "--project", "--manifest", "--dir", "--tier", "--idempotency-key", "--allow-warning", "--require-plan", "--plan-fingerprint"],
   );
   const extras = positionalArgs(parsed, [
     "--name",
@@ -58,6 +67,8 @@ export async function run(args = []) {
     "--tier",
     "--idempotency-key",
     "--allow-warning",
+    "--require-plan",
+    "--plan-fingerprint",
   ]);
   if (extras.length > 0) {
     fail({
@@ -78,7 +89,22 @@ export async function run(args = []) {
 
   const yes = parsed.includes("-y") || parsed.includes("--yes");
   const quiet = parsed.includes("--quiet") || parsed.includes("--final-only");
+  const mode = parseExecutionMode(parsed);
   const dryRun = parsed.includes("--dry-run");
+  if (dryRun && mode !== undefined) {
+    fail({
+      code: "BAD_USAGE",
+      message: "--dry-run cannot be combined with --check, --print-spec, --plan, or --require-plan.",
+      details: { flag: "--dry-run" },
+    });
+  }
+  if (isApplyReviewedMode(mode) && (parsed.includes("--allow-warnings") || parsed.includes("--allow-warning"))) {
+    fail({
+      code: "BAD_USAGE",
+      message: "--allow-warning/--allow-warnings are not used with --require-plan; the reviewed plan already binds the warning set.",
+      details: { flag: "--require-plan" },
+    });
+  }
   const allowWarningCodes = collectRepeatedValues(parsed, "--allow-warning");
 
   try {
@@ -93,18 +119,62 @@ export async function run(args = []) {
       allowWarnings: parsed.includes("--allow-warnings") ? true : undefined,
       allowWarningCodes,
     }, {
+      ...(mode !== undefined ? { mode } : {}),
       dryRun,
       approval: makeApproval(yes),
       onEvent: quiet ? undefined : (event) => {
         console.error(JSON.stringify(event));
       },
     });
-    console.log(JSON.stringify(result, null, 2));
+    if (mode === "printSpec") {
+      console.log(JSON.stringify(result.result?.spec ?? null, null, 2));
+    } else {
+      console.log(JSON.stringify(result, null, 2));
+    }
   } catch (err) {
     reportSdkError(err);
   }
 }
 
+function parseExecutionMode(args) {
+  const modes = [];
+  if (args.includes("--check")) modes.push("--check");
+  if (args.includes("--print-spec")) modes.push("--print-spec");
+  if (args.includes("--plan")) modes.push("--plan");
+  const requiredPlan = flagValue(args, "--require-plan");
+  if (requiredPlan) modes.push("--require-plan");
+  const fingerprint = flagValue(args, "--plan-fingerprint");
+  if (fingerprint && !requiredPlan) {
+    fail({
+      code: "BAD_USAGE",
+      message: "--plan-fingerprint can only be used with --require-plan.",
+      details: { flag: "--plan-fingerprint" },
+    });
+  }
+  if (modes.length > 1) {
+    fail({
+      code: "BAD_USAGE",
+      message: `Choose only one execution mode: ${modes.join(", ")}`,
+      details: { modes },
+    });
+  }
+  if (args.includes("--check")) return "check";
+  if (args.includes("--print-spec")) return "printSpec";
+  if (args.includes("--plan")) return "plan";
+  if (requiredPlan) {
+    return {
+      kind: "applyReviewed",
+      planId: requiredPlan,
+      ...(fingerprint ? { planFingerprint: fingerprint } : {}),
+    };
+  }
+  return undefined;
+}
+
+function isApplyReviewedMode(mode) {
+  return mode && typeof mode === "object" && mode.kind === "applyReviewed";
+}
+
 function collectRepeatedValues(args, flag) {
   const values = [];
   for (let i = 0; i < args.length; i++) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {
@@ -24,6 +24,7 @@
     "@x402/evm": "^2.6.0",
     "@x402/fetch": "^2.6.0",
     "mppx": "^0.4.7",
+    "tsx": "^4.21.0",
     "viem": "^2.47.1"
   },
   "engines": {

package/sdk/dist/actions.d.ts

@@ -1,6 +1,7 @@
-import type { DeployResult } from "./namespaces/deploy.types.js";
+import type { DeployResult, PlanResponse, ReleaseSpec } from "./namespaces/deploy.types.js";
 import type { ProvisionResult } from "./namespaces/projects.types.js";
 import type { TierName, TierSetResult } from "./namespaces/tier.js";
+import type { Run402ExecutionMode } from "./config.js";
 /**
  * Stable action identifiers for the SDK action runner. Use these constants
  * instead of hand-typed strings so TypeScript narrows action inputs cleanly.
@@ -63,7 +64,18 @@ export interface Run402ActionApprovalRequest {
 export type Run402ActionMutation = "allowance.create" | "allowance.faucet" | "tier.set" | "projects.provision" | "workspace.link.write" | "deploy.apply";
 export interface Run402ActionRunOptions {
     /**
-     * Plan only. No gateway mutations, uploads, or local writes are performed.
+     * Canonical execution mode for typed-config workflows.
+     *
+     * - `check`: local manifest/config validation only
+     * - `printSpec`: local validation plus normalized ReleaseSpec output
+     * - `plan`: gateway-reviewed plan, no upload or commit
+     * - `{ kind: "applyReviewed" }`: apply only if a reviewed plan still matches
+     * - `apply`: default mutation path
+     */
+    mode?: Run402ExecutionMode;
+    /**
+     * Legacy action-graph dry run. Prefer `mode: "check"` for local-only
+     * typed-config validation or `mode: "plan"` for gateway-reviewed plans.
      */
     dryRun?: boolean;
     /**
@@ -98,6 +110,7 @@ export interface Run402ActionEvent {
 }
 export interface Run402ActionResult<T = unknown> {
     action: Run402ActionType;
+    mode: Run402ExecutionMode | "legacyDryRun";
     dry_run: boolean;
     target: "cloud" | "core" | "unknown";
     steps: Run402ActionStep[];
@@ -107,6 +120,8 @@ export interface Run402UpResult {
     project_id: string;
     manifest_path: string;
     workspace_link_path?: string;
+    spec?: ReleaseSpec;
+    plan?: PlanResponse;
     deploy?: DeployResult;
 }
 export type Run402ProjectsProvisionActionResult = Run402ActionResult<ProvisionResult>;

package/sdk/dist/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,wBAAwB,GACxB,mBAAmB,CAAC;AAExB,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,YAAY,CAAC,OAAO,CAAC;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,YAAY,CAAC,EAAE,CAAC;IAC7B,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,KAAK,GACL,+BAA+B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,kBAAkB,GAClB,UAAU,GACV,oBAAoB,GACpB,sBAAsB,GACtB,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IACxF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,MAAM,mCAAmC,GAC7C,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEtC,MAAM,MAAM,yBAAyB,GACnC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,CACD,KAAK,EAAE,kCAAkC,EACzC,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,GAAG,CACD,KAAK,EAAE,wBAAwB,EAC/B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,GAAG,CACD,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC3F"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,wBAAwB,GACxB,mBAAmB,CAAC;AAExB,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,YAAY,CAAC,OAAO,CAAC;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,YAAY,CAAC,EAAE,CAAC;IAC7B,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,KAAK,GACL,+BAA+B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,kBAAkB,GAClB,UAAU,GACV,oBAAoB,GACpB,sBAAsB,GACtB,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IACxF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,mBAAmB,GAAG,cAAc,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,MAAM,mCAAmC,GAC7C,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEtC,MAAM,MAAM,yBAAyB,GACnC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,CACD,KAAK,EAAE,kCAAkC,EACzC,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,GAAG,CACD,KAAK,EAAE,wBAAwB,EAC/B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,GAAG,CACD,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC3F"}

package/sdk/dist/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,UAAU;IACnB,EAAE,EAAE,IAAI;CACA,CAAC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,UAAU;IACnB,EAAE,EAAE,IAAI;CACA,CAAC"}

package/sdk/dist/config.d.ts

@@ -0,0 +1,61 @@
+import type { FsFileSource, FunctionSpec, LocalDirRef, ReleaseSpec } from "./namespaces/deploy.types.js";
+export type Run402ExecutionMode = "apply" | "check" | "printSpec" | "plan" | {
+    kind: "applyReviewed";
+    planId: string;
+    planFingerprint?: string;
+};
+export interface Run402ReviewedPlanRequirement {
+    planId: string;
+    planFingerprint?: string;
+}
+export interface Run402FileConfigOptions {
+    contentType?: string;
+    content_type?: string;
+}
+export interface Run402DirConfigOptions {
+    prefix?: string;
+    ignore?: ReadonlyArray<string>;
+    includeSensitive?: boolean;
+}
+export interface Run402SqlFileConfigOptions {
+    id?: string;
+    checksum?: string;
+    transaction?: "required" | "none";
+}
+export interface Run402NodeFunctionConfigOptions extends Omit<FunctionSpec, "source" | "files" | "runtime"> {
+    runtime?: "node22";
+    source?: never;
+    files?: never;
+}
+export interface Run402FileConfigSource extends FsFileSource {
+    readonly content_type?: string;
+}
+export interface Run402SqlFileConfigMigration {
+    id: string;
+    sql_file: string;
+    checksum?: string;
+    transaction?: "required" | "none";
+}
+export type Run402ReleaseConfig = Omit<ReleaseSpec, "project"> & {
+    project?: string;
+    project_id?: string;
+    idempotency_key?: string;
+};
+export interface Run402ConfigEnv {
+    readonly accessed: readonly string[];
+    get(name: string): string | undefined;
+    required(name: string): string;
+    readonly [name: `RUN402_${string}`]: string | undefined;
+}
+export interface Run402ConfigContext {
+    manifestPath: string;
+    rootDir: string;
+    env: Run402ConfigEnv;
+}
+export type Run402ExecutableConfigExport = Run402ReleaseConfig | ((context: Run402ConfigContext) => Run402ReleaseConfig | Promise<Run402ReleaseConfig>);
+export declare function defineConfig<const T extends Run402ExecutableConfigExport>(config: T): T;
+export declare function dir(path: string, options?: Run402DirConfigOptions): LocalDirRef;
+export declare function file(path: string, options?: Run402FileConfigOptions): Run402FileConfigSource;
+export declare function sqlFile(path: string, options?: Run402SqlFileConfigOptions): Run402SqlFileConfigMigration;
+export declare function nodeFunction(path: string, options?: Run402NodeFunctionConfigOptions): FunctionSpec;
+//# sourceMappingURL=config.d.ts.map

package/sdk/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACZ,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,mBAAmB,GAC3B,OAAO,GACP,OAAO,GACP,WAAW,GACX,MAAM,GACN;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,+BACf,SAAQ,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1D,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CACnC;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,EAAE,IAAI,EAAE,UAAU,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,eAAe,CAAC;CACtB;AAED,MAAM,MAAM,4BAA4B,GACpC,mBAAmB,GACnB,CAAC,CAAC,OAAO,EAAE,mBAAmB,KAAK,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAE3F,wBAAgB,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,4BAA4B,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEvF;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,WAAW,CAQnF;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,sBAAsB,CAWhG;AAED,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,0BAA+B,GACvC,4BAA4B,CAO9B;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,+BAAoC,GAC5C,YAAY,CAad"}