saastore-port 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 saastore.ai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,86 @@
+# saastore-port
+
+MCP server the seller runs locally to port their app onto saastore hosting.
+
+The seller's IDE-side agent (Claude Code, Cursor, Cline, Zed, …) connects via
+stdio. The seller's existing API key drives any LLM calls — saastore never
+sees source or keys (see spec §7.1 in the saastore monorepo).
+
+## Status
+
+All 8 tools shipped at PoC quality. Concierge first-seller work will surface
+friction → polish iterations, but the surface is complete.
+
+| Tool | Status | Tests |
+| --- | --- | --- |
+| `analyze_repo` | ✓ Implemented | 7 |
+| `propose_auth_rewire` | ✓ Implemented (FastAPI kit; others as concierge surfaces them) | 4 |
+| `apply_auth_rewire` | ✓ Implemented | 6 |
+| `validate_compliance` | ✓ Implemented | 7 |
+| `generate_manifest` | ✓ Implemented | 8 |
+| `boot_test_local` | ✓ Implemented (integration; requires local docker) | — |
+| `package_image` | ✓ Implemented (integration; requires local docker) | — |
+| `push_image` | ✓ Implemented (integration; requires local docker + saastore registry token) | — |
+
+Unit tests: 32/32. Integration paths (boot_test_local, package_image,
+push_image) are covered by the saastore monorepo's
+`scripts/smoke_hosted_auth.sh` since they shell out to docker.
+
+## Install (during PoC)
+
+```bash
+cd tools/saastore-port
+npm install
+npm run build
+```
+
+Then point your agent at `tools/saastore-port/dist/server.js` as a stdio MCP server.
+
+Once we ship to npm:
+
+```bash
+npx saastore-port
+```
+
+## Tools
+
+### `analyze_repo`
+
+Scans a repository (defaults to CWD) and detects:
+
+- Detected languages (javascript, typescript, python, ruby, go, rust)
+- Frontend framework (Next.js, Remix, Nuxt, SvelteKit, React, Vue)
+- Backend framework (Express, Fastify, Hono, Koa; FastAPI, Django, Flask, Quart, Starlette)
+- Auth library (NextAuth, Auth.js, Supabase Auth, Passport, Clerk, Auth0, Lucia, Firebase, Django auth, Flask-Login, Authlib, DIY JWT)
+- Database (postgres, mongodb, sqlite, mysql, redis)
+- Payment processors (stripe, paddle, lemonsqueezy, braintree) — **flagged as must-remove**
+- External APIs called (openai, anthropic, google-genai, cohere, replicate, twilio, sendgrid, resend, aws, sentry)
+- Warnings (no manifest found, invalid JSON, payment processor present)
+
+Pure file analysis — reads `package.json` / `pyproject.toml` / `requirements.txt` / `Gemfile` / `go.mod` / `Cargo.toml`.
+
+### `generate_manifest`
+
+Takes the output of `analyze_repo` plus a few seller-supplied fields and
+returns a `saastore.yaml` manifest the seller commits.
+
+Inferences from analysis:
+- `app.framework`: prefers detected frontend framework, falls back to backend.
+- `app.port`: 3000 for next.js / remix / nuxt; 8000 for fastapi / django / flask; 8080 otherwise.
+- `auth.adapter`: derived from detected auth library (`nextauth` → `saastore-nextauth`, etc.)
+- `database.postgres`: true when DB is detected as postgres
+- `external_apis`: one entry per detected API (sentry excluded), uppercased to `*_API_KEY` env vars, default $5 cap
+
+Anything can be overridden via the `input` object (see the source for the full type).
+
+## Development
+
+```bash
+npm test          # runs node:test with tsx
+npm run build     # tsc -> dist/
+npm run dev       # tsc --watch
+```
+
+## License
+
+MIT

package/dist/analyze_repo.js

@@ -0,0 +1,203 @@
+/**
+ * analyze_repo — scan a seller's repository and detect:
+ *   - frontend / backend frameworks (Next.js, Express, FastAPI, Django, etc.)
+ *   - auth library in use (NextAuth, Passport, Supabase Auth, Devise, etc.)
+ *   - database type (Postgres? Mongo? SQLite?)
+ *   - external API dependencies the app calls into
+ *   - presence of payment processors (Stripe SDK, etc.) — flagged as
+ *     "must remove" per spec section 6.1
+ *
+ * Pure file analysis. Reads package.json / pyproject.toml / requirements.txt /
+ * Gemfile / go.mod, and greps source for known library imports. Returns
+ * structured findings; the seller's agent decides what to do with them.
+ */
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+// ----- Detection rules -----------------------------------------------------
+// (library substring on a line that looks like an import/require/from) -> tag
+const JS_FRAMEWORK_RULES = [
+    [/(^|[^a-z])next($|[^a-z])/i, "next.js"],
+    [/(^|[^a-z])remix($|[^a-z])/i, "remix"],
+    [/(^|[^a-z])nuxt($|[^a-z])/i, "nuxt"],
+    [/(^|[^a-z])sveltekit($|[^a-z])/i, "sveltekit"],
+    [/(^|[^a-z])react($|[^a-z])/i, "react"],
+    [/(^|[^a-z])vue($|[^a-z])/i, "vue"],
+];
+const JS_BACKEND_RULES = [
+    [/(^|[^a-z])express($|[^a-z])/i, "express"],
+    [/(^|[^a-z])fastify($|[^a-z])/i, "fastify"],
+    [/(^|[^a-z])hono($|[^a-z])/i, "hono"],
+    [/(^|[^a-z])koa($|[^a-z])/i, "koa"],
+];
+const JS_AUTH_RULES = [
+    [/next-auth/i, "nextauth"],
+    [/@auth\/[a-z-]+/i, "auth.js"],
+    [/@supabase\/auth/i, "supabase-auth"],
+    [/@supabase\/supabase-js/i, "supabase-auth"],
+    [/passport/i, "passport"],
+    [/@clerk\/[a-z-]+/i, "clerk"],
+    [/@auth0\/[a-z-]+/i, "auth0"],
+    [/lucia/i, "lucia"],
+    [/firebase\/auth/i, "firebase-auth"],
+];
+const PY_FRAMEWORK_RULES = [
+    [/fastapi/i, "fastapi"],
+    [/^django|[^a-z]django[^a-z]/i, "django"],
+    [/flask/i, "flask"],
+    [/quart/i, "quart"],
+    [/starlette/i, "starlette"],
+];
+const PY_AUTH_RULES = [
+    [/django\.contrib\.auth/i, "django-auth"],
+    [/flask-login/i, "flask-login"],
+    [/authlib/i, "authlib"],
+    [/python-jose|pyjwt/i, "diy-jwt"],
+];
+const DB_RULES = [
+    [/postgres|pg\b|psycopg|asyncpg|prisma|drizzle/i, "postgres"],
+    [/mongo/i, "mongodb"],
+    [/sqlite/i, "sqlite"],
+    [/mysql|mariadb/i, "mysql"],
+    [/redis/i, "redis"],
+];
+const PAYMENT_RULES = [
+    [/stripe/i, "stripe"],
+    [/paddle/i, "paddle"],
+    [/lemonsqueezy/i, "lemonsqueezy"],
+    [/braintree/i, "braintree"],
+];
+const EXTERNAL_API_RULES = [
+    [/openai/i, "openai"],
+    [/anthropic/i, "anthropic"],
+    [/google-genai|@google\/genai/i, "google-genai"],
+    [/cohere/i, "cohere"],
+    [/replicate/i, "replicate"],
+    [/twilio/i, "twilio"],
+    [/sendgrid|@sendgrid\//i, "sendgrid"],
+    [/resend/i, "resend"],
+    [/aws-sdk/i, "aws"],
+    [/sentry/i, "sentry"],
+];
+// ----- Helpers -------------------------------------------------------------
+function applyRules(text, rules, bag) {
+    for (const [pat, tag] of rules) {
+        if (pat.test(text))
+            bag.add(tag);
+    }
+}
+function pickFirstOrNull(set) {
+    return set.size > 0 ? [...set][0] : null;
+}
+async function readIfExists(path) {
+    if (!existsSync(path))
+        return null;
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+// ----- Main entry ----------------------------------------------------------
+/**
+ * Walk `root` (one level deep is enough for package manifests; we also peek
+ * at first-level source files like next.config.* and a couple of source
+ * roots) and return structured findings.
+ */
+export async function analyzeRepo(root) {
+    const warnings = [];
+    const languages = new Set();
+    const frameworks = new Set();
+    const backend = new Set();
+    const auth = new Set();
+    const db = new Set();
+    const payments = new Set();
+    const externalApis = new Set();
+    const manifestsSeen = [];
+    // --- JS/TS: package.json -------------------------------------------------
+    const pkgJson = await readIfExists(join(root, "package.json"));
+    if (pkgJson !== null) {
+        manifestsSeen.push("package.json");
+        languages.add("javascript");
+        let parsed = null;
+        try {
+            parsed = JSON.parse(pkgJson);
+        }
+        catch {
+            warnings.push("package.json is not valid JSON; skipping");
+        }
+        if (parsed) {
+            const deps = {
+                ...parsed.dependencies,
+                ...parsed.devDependencies,
+            };
+            const depString = Object.keys(deps).join("\n");
+            applyRules(depString, JS_FRAMEWORK_RULES, frameworks);
+            applyRules(depString, JS_BACKEND_RULES, backend);
+            applyRules(depString, JS_AUTH_RULES, auth);
+            applyRules(depString, DB_RULES, db);
+            applyRules(depString, PAYMENT_RULES, payments);
+            applyRules(depString, EXTERNAL_API_RULES, externalApis);
+            if (Object.keys(deps).some((d) => d.includes("typescript"))) {
+                languages.add("typescript");
+            }
+        }
+    }
+    // --- Python: pyproject.toml + requirements.txt --------------------------
+    const pyProject = await readIfExists(join(root, "pyproject.toml"));
+    if (pyProject !== null) {
+        manifestsSeen.push("pyproject.toml");
+        languages.add("python");
+        applyRules(pyProject, PY_FRAMEWORK_RULES, backend);
+        applyRules(pyProject, PY_AUTH_RULES, auth);
+        applyRules(pyProject, DB_RULES, db);
+        applyRules(pyProject, PAYMENT_RULES, payments);
+        applyRules(pyProject, EXTERNAL_API_RULES, externalApis);
+    }
+    const reqTxt = await readIfExists(join(root, "requirements.txt"));
+    if (reqTxt !== null) {
+        manifestsSeen.push("requirements.txt");
+        languages.add("python");
+        applyRules(reqTxt, PY_FRAMEWORK_RULES, backend);
+        applyRules(reqTxt, PY_AUTH_RULES, auth);
+        applyRules(reqTxt, DB_RULES, db);
+        applyRules(reqTxt, PAYMENT_RULES, payments);
+        applyRules(reqTxt, EXTERNAL_API_RULES, externalApis);
+    }
+    // --- Other ecosystems (presence only; PoC doesn't dig deeper) -----------
+    if (existsSync(join(root, "Gemfile"))) {
+        manifestsSeen.push("Gemfile");
+        languages.add("ruby");
+    }
+    if (existsSync(join(root, "go.mod"))) {
+        manifestsSeen.push("go.mod");
+        languages.add("go");
+    }
+    if (existsSync(join(root, "Cargo.toml"))) {
+        manifestsSeen.push("Cargo.toml");
+        languages.add("rust");
+    }
+    // --- Sanity warnings ----------------------------------------------------
+    if (manifestsSeen.length === 0) {
+        warnings.push("no recognised package manifest found; is this a repo root?");
+    }
+    if (payments.size > 0) {
+        warnings.push(`payment processor(s) detected (${[...payments].join(", ")}); per spec section 6.1 the seller's app must NOT process payments — saastore is merchant-of-record. Remove before packaging.`);
+    }
+    return {
+        detected_languages: [...languages].sort(),
+        framework: pickFirstOrNull(frameworks),
+        backend_framework: pickFirstOrNull(backend),
+        auth_library: pickFirstOrNull(auth),
+        database: pickFirstOrNull(db),
+        external_apis: [...externalApis].sort(),
+        payment_processors: [...payments].sort(),
+        package_manifests: manifestsSeen,
+        warnings,
+    };
+}
+// Re-export read helpers so the test file (and other tools) can stub them
+// without re-implementing.
+export const __test = { readIfExists };
+//# sourceMappingURL=analyze_repo.js.map

package/dist/analyze_repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze_repo.js","sourceRoot":"","sources":["../src/analyze_repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAiB,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAgBhC,8EAA8E;AAE9E,8EAA8E;AAC9E,MAAM,kBAAkB,GAA4B;IAClD,CAAC,2BAA2B,EAAE,SAAS,CAAC;IACxC,CAAC,4BAA4B,EAAE,OAAO,CAAC;IACvC,CAAC,2BAA2B,EAAE,MAAM,CAAC;IACrC,CAAC,gCAAgC,EAAE,WAAW,CAAC;IAC/C,CAAC,4BAA4B,EAAE,OAAO,CAAC;IACvC,CAAC,0BAA0B,EAAE,KAAK,CAAC;CACpC,CAAA;AACD,MAAM,gBAAgB,GAA4B;IAChD,CAAC,8BAA8B,EAAE,SAAS,CAAC;IAC3C,CAAC,8BAA8B,EAAE,SAAS,CAAC;IAC3C,CAAC,2BAA2B,EAAE,MAAM,CAAC;IACrC,CAAC,0BAA0B,EAAE,KAAK,CAAC;CACpC,CAAA;AACD,MAAM,aAAa,GAA4B;IAC7C,CAAC,YAAY,EAAE,UAAU,CAAC;IAC1B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,kBAAkB,EAAE,eAAe,CAAC;IACrC,CAAC,yBAAyB,EAAE,eAAe,CAAC;IAC5C,CAAC,WAAW,EAAE,UAAU,CAAC;IACzB,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,QAAQ,EAAE,OAAO,CAAC;IACnB,CAAC,iBAAiB,EAAE,eAAe,CAAC;CACrC,CAAA;AAED,MAAM,kBAAkB,GAA4B;IAClD,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,6BAA6B,EAAE,QAAQ,CAAC;IACzC,CAAC,QAAQ,EAAE,OAAO,CAAC;IACnB,CAAC,QAAQ,EAAE,OAAO,CAAC;IACnB,CAAC,YAAY,EAAE,WAAW,CAAC;CAC5B,CAAA;AACD,MAAM,aAAa,GAA4B;IAC7C,CAAC,wBAAwB,EAAE,aAAa,CAAC;IACzC,CAAC,cAAc,EAAE,aAAa,CAAC;IAC/B,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAClC,CAAA;AAED,MAAM,QAAQ,GAA4B;IACxC,CAAC,+CAA+C,EAAE,UAAU,CAAC;IAC7D,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrB,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC3B,CAAC,QAAQ,EAAE,OAAO,CAAC;CACpB,CAAA;AACD,MAAM,aAAa,GAA4B;IAC7C,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,eAAe,EAAE,cAAc,CAAC;IACjC,CAAC,YAAY,EAAE,WAAW,CAAC;CAC5B,CAAA;AACD,MAAM,kBAAkB,GAA4B;IAClD,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,YAAY,EAAE,WAAW,CAAC;IAC3B,CAAC,8BAA8B,EAAE,cAAc,CAAC;IAChD,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,YAAY,EAAE,WAAW,CAAC;IAC3B,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,uBAAuB,EAAE,UAAU,CAAC;IACrC,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,SAAS,EAAE,QAAQ,CAAC;CACtB,CAAA;AAED,8EAA8E;AAE9E,SAAS,UAAU,CACjB,IAAY,EACZ,KAA8B,EAC9B,GAAgB;IAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAgB;IACvC,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,EAAE,GAAG,IAAI,GAAG,EAAU,CAAA;IAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,MAAM,aAAa,GAAa,EAAE,CAAA;IAElC,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IAC9D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAClC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC3B,IAAI,MAAM,GAAmC,IAAI,CAAA;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAA;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG;gBACX,GAAI,MAAM,CAAC,YAAmD;gBAC9D,GAAI,MAAM,CAAC,eAAsD;aAClE,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9C,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAA;YACrD,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAA;YAChD,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAA;YAC1C,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;YACnC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;YAC9C,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAA;YACvD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC5D,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAClE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACpC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvB,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAA;QAClD,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAA;QAC1C,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QACnC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;QAC9C,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACtC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvB,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAA;QAC/C,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAA;QACvC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAChC,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;QAC3C,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,2EAA2E;IAC3E,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7B,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5B,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QACzC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IAED,2EAA2E;IAC3E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CACX,4DAA4D,CAC7D,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CACX,kCAAkC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,+HAA+H,CAC1L,CAAA;IACH,CAAC;IAED,OAAO;QACL,kBAAkB,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC;QACtC,iBAAiB,EAAE,eAAe,CAAC,OAAO,CAAC;QAC3C,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;QAC7B,aAAa,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QACvC,kBAAkB,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;QACxC,iBAAiB,EAAE,aAAa;QAChC,QAAQ;KACT,CAAA;AACH,CAAC;AAED,0EAA0E;AAC1E,2BAA2B;AAC3B,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,CAAA"}

package/dist/apply_auth_rewire.js

@@ -0,0 +1,64 @@
+/**
+ * apply_auth_rewire — write the create-intent files from a RewireProposal
+ * to the seller's working tree. Modify/delete intents are returned as
+ * "next steps" hints; the seller's agent applies them with its own AST/
+ * full-source context (we deliberately don't try to do source rewriting
+ * blind).
+ *
+ * Idempotent: refuses to overwrite an existing file unless force=true.
+ * Returns a structured result the agent uses to present a summary.
+ */
+import { existsSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+// ----- Main entry ----------------------------------------------------------
+export async function applyAuthRewire(proposal, opts = {}) {
+    const root = opts.root ?? process.cwd();
+    const force = opts.force ?? false;
+    const dryRun = opts.dry_run ?? false;
+    const applied = [];
+    const nextSteps = [];
+    const warnings = [...proposal.warnings];
+    for (const change of proposal.changes) {
+        if (change.intent !== "create") {
+            // modify + delete need source-aware tooling — pass them back to the agent
+            nextSteps.push(change);
+            continue;
+        }
+        if (!change.contents) {
+            warnings.push(`change for ${change.path}: intent=create but no contents — skipping`);
+            continue;
+        }
+        const absPath = join(root, ...change.path.split("/"));
+        if (existsSync(absPath) && !force) {
+            applied.push({
+                path: change.path,
+                status: "skipped_exists",
+                reason: `file exists; re-run with force=true to overwrite`,
+            });
+            continue;
+        }
+        if (dryRun) {
+            applied.push({
+                path: change.path,
+                status: "deferred",
+                reason: "dry_run=true; nothing written",
+            });
+            continue;
+        }
+        await mkdir(dirname(absPath), { recursive: true });
+        await writeFile(absPath, change.contents, "utf8");
+        applied.push({
+            path: change.path,
+            status: "written",
+            reason: change.reason,
+        });
+    }
+    return {
+        framework: proposal.framework,
+        applied,
+        next_steps: nextSteps,
+        warnings,
+    };
+}
+//# sourceMappingURL=apply_auth_rewire.js.map

package/dist/apply_auth_rewire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply_auth_rewire.js","sourceRoot":"","sources":["../src/apply_auth_rewire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA4BzC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAwB,EACxB,OAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAA;IAEpC,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,SAAS,GAAqB,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAa,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,0EAA0E;YAC1E,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACtB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX,cAAc,MAAM,CAAC,IAAI,4CAA4C,CACtE,CAAA;YACD,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,kDAAkD;aAC3D,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,+BAA+B;aACxC,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACjD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;QACP,UAAU,EAAE,SAAS;QACrB,QAAQ;KACT,CAAA;AACH,CAAC"}

package/dist/boot_test_local.js

@@ -0,0 +1,202 @@
+/**
+ * boot_test_local — replicate scripts/smoke_hosted_auth.sh as an MCP tool the
+ * seller's agent can drive locally. Builds the seller's Docker image, runs
+ * it on a random local port with a known SAASTORE_HMAC_SECRET, then probes:
+ *
+ *   - GET /health      -> expect 200
+ *   - GET /whoami with valid signed headers -> expect 200
+ *   - GET /whoami with bad signature        -> expect 401
+ *   - GET /whoami with stale timestamp      -> expect 401
+ *
+ * Returns a structured per-step result. The container is always destroyed
+ * in finally.
+ */
+import { spawn } from "node:child_process";
+import { createHmac } from "node:crypto";
+// ----- Helpers -------------------------------------------------------------
+function run(cmd, args, opts = {}) {
+    return new Promise((resolve) => {
+        const proc = spawn(cmd, args, { cwd: opts.cwd, shell: false });
+        let stdout = "";
+        let stderr = "";
+        proc.stdout?.on("data", (d) => (stdout += d.toString()));
+        proc.stderr?.on("data", (d) => (stderr += d.toString()));
+        let timer;
+        if (opts.timeout_ms) {
+            timer = setTimeout(() => proc.kill("SIGKILL"), opts.timeout_ms);
+        }
+        proc.on("close", (code) => {
+            if (timer)
+                clearTimeout(timer);
+            resolve({ code: code ?? -1, stdout, stderr });
+        });
+    });
+}
+function sign(secret, userId, email, plan, ts) {
+    const msg = `${userId}|${email}|${plan}|${ts}`;
+    return createHmac("sha256", secret).update(msg).digest("hex");
+}
+async function httpStatus(url, headers = {}) {
+    try {
+        const resp = await fetch(url, { headers });
+        return resp.status;
+    }
+    catch {
+        return -1;
+    }
+}
+async function httpText(url, headers = {}) {
+    try {
+        const resp = await fetch(url, { headers });
+        const text = await resp.text();
+        return { status: resp.status, text };
+    }
+    catch (e) {
+        return { status: -1, text: String(e) };
+    }
+}
+async function waitForHealth(port, timeoutS) {
+    const deadline = Date.now() + timeoutS * 1000;
+    while (Date.now() < deadline) {
+        const status = await httpStatus(`http://localhost:${port}/health`);
+        if (status === 200)
+            return true;
+        await new Promise((r) => setTimeout(r, 500));
+    }
+    return false;
+}
+// ----- Main entry ----------------------------------------------------------
+export async function bootTestLocal(opts = {}) {
+    const context = opts.context ?? process.cwd();
+    const dockerfile = opts.dockerfile ?? "Dockerfile";
+    const hostPort = opts.port ?? 8765;
+    const containerPort = opts.container_port ?? 8000;
+    const secret = opts.secret ?? "test-secret-32bytes-or-more-long-enough-for-real-use";
+    const timeoutS = opts.startup_timeout_s ?? 30;
+    const dockerBin = opts.docker_bin ?? "docker";
+    const userId = "9a3f12cd-1111-2222-3333-444455556666";
+    const email = "buyer@example.com";
+    const plan = "poc";
+    const tag = `saastore-bootlocal:${Date.now().toString(36)}`;
+    const steps = [];
+    let cid = null;
+    try {
+        // 1. Build the image
+        const build = await run(dockerBin, ["build", "-f", dockerfile, "-t", tag, "."], { cwd: context, timeout_ms: 5 * 60_000 });
+        if (build.code !== 0) {
+            steps.push({
+                name: "docker_build",
+                ok: false,
+                detail: `exit=${build.code}\n${build.stderr.slice(-500)}`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        steps.push({ name: "docker_build", ok: true, detail: `built ${tag}` });
+        // 2. Run the container detached
+        const runRes = await run(dockerBin, [
+            "run",
+            "-d",
+            "--rm",
+            "-p",
+            `${hostPort}:${containerPort}`,
+            "-e",
+            `SAASTORE_HMAC_SECRET=${secret}`,
+            tag,
+        ], { timeout_ms: 30_000 });
+        if (runRes.code !== 0) {
+            steps.push({
+                name: "docker_run",
+                ok: false,
+                detail: `exit=${runRes.code}\n${runRes.stderr.slice(-500)}`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        cid = runRes.stdout.trim();
+        steps.push({ name: "docker_run", ok: true, detail: `cid=${cid.slice(0, 12)}` });
+        // 3. Wait for /health
+        const healthy = await waitForHealth(hostPort, timeoutS);
+        if (!healthy) {
+            steps.push({
+                name: "health_200",
+                ok: false,
+                detail: `/health did not return 200 within ${timeoutS}s`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        steps.push({ name: "health_200", ok: true, detail: "/health returned 200" });
+        // 4. /whoami with valid signed headers -> 200
+        const ts = Math.floor(Date.now() / 1000);
+        const sig = sign(secret, userId, email, plan, ts);
+        const valid = await httpText(`http://localhost:${hostPort}/whoami`, {
+            "X-Saastore-Buyer-Id": userId,
+            "X-Saastore-User-Email": email,
+            "X-Saastore-Plan": plan,
+            "X-Saastore-Timestamp": String(ts),
+            "X-Saastore-Signature": sig,
+        });
+        if (valid.status !== 200) {
+            steps.push({
+                name: "whoami_signed_200",
+                ok: false,
+                detail: `expected 200, got ${valid.status}; body: ${valid.text.slice(0, 200)}`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        steps.push({
+            name: "whoami_signed_200",
+            ok: true,
+            detail: `/whoami returned 200`,
+        });
+        // 5. /whoami with bad signature -> 401
+        const badStatus = await httpStatus(`http://localhost:${hostPort}/whoami`, {
+            "X-Saastore-Buyer-Id": userId,
+            "X-Saastore-User-Email": email,
+            "X-Saastore-Plan": plan,
+            "X-Saastore-Timestamp": String(ts),
+            "X-Saastore-Signature": "0".repeat(64),
+        });
+        if (badStatus !== 401) {
+            steps.push({
+                name: "whoami_badsig_401",
+                ok: false,
+                detail: `expected 401, got ${badStatus}`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        steps.push({
+            name: "whoami_badsig_401",
+            ok: true,
+            detail: "bad signature correctly rejected",
+        });
+        // 6. /whoami with stale timestamp -> 401
+        const staleTs = ts - 10 * 60;
+        const staleSig = sign(secret, userId, email, plan, staleTs);
+        const staleStatus = await httpStatus(`http://localhost:${hostPort}/whoami`, {
+            "X-Saastore-Buyer-Id": userId,
+            "X-Saastore-User-Email": email,
+            "X-Saastore-Plan": plan,
+            "X-Saastore-Timestamp": String(staleTs),
+            "X-Saastore-Signature": staleSig,
+        });
+        if (staleStatus !== 401) {
+            steps.push({
+                name: "whoami_stale_401",
+                ok: false,
+                detail: `expected 401, got ${staleStatus}`,
+            });
+            return { ok: false, image_tag: tag, port: hostPort, steps };
+        }
+        steps.push({
+            name: "whoami_stale_401",
+            ok: true,
+            detail: "stale timestamp correctly rejected",
+        });
+        return { ok: true, image_tag: tag, port: hostPort, steps };
+    }
+    finally {
+        if (cid) {
+            await run(dockerBin, ["stop", cid], { timeout_ms: 10_000 }).catch(() => { });
+        }
+    }
+}
+//# sourceMappingURL=boot_test_local.js.map

package/dist/boot_test_local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot_test_local.js","sourceRoot":"","sources":["../src/boot_test_local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAkCxC,8EAA8E;AAE9E,SAAS,GAAG,CACV,GAAW,EACX,IAAc,EACd,OAA8C,EAAE;IAEhD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9D,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACxD,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACxD,IAAI,KAAiC,CAAA;QACrC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC9B,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa,EAAE,IAAY,EAAE,EAAU;IACnF,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,IAAI,EAAE,EAAE,CAAA;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,UAAkC,EAAE;IACzE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,UAAkC,EAAE;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,QAAgB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAA;IAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,IAAI,SAAS,CAAC,CAAA;QAClE,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC/B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB,EAAE;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,CAAA;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAA;IAClC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAA;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,sDAAsD,CAAA;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAA;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAA;IAE7C,MAAM,MAAM,GAAG,sCAAsC,CAAA;IACrD,MAAM,KAAK,GAAG,mBAAmB,CAAA;IACjC,MAAM,IAAI,GAAG,KAAK,CAAA;IAClB,MAAM,GAAG,GAAG,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;IAE3D,MAAM,KAAK,GAAmB,EAAE,CAAA;IAChC,IAAI,GAAG,GAAkB,IAAI,CAAA;IAE7B,IAAI,CAAC;QACH,qBAAqB;QACrB,MAAM,KAAK,GAAG,MAAM,GAAG,CACrB,SAAS,EACT,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAC3C,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,EAAE,CACzC,CAAA;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,cAAc;gBACpB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE;aAC1D,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAA;QAEtE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,SAAS,EACT;YACE,KAAK;YACL,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,GAAG,QAAQ,IAAI,aAAa,EAAE;YAC9B,IAAI;YACJ,wBAAwB,MAAM,EAAE;YAChC,GAAG;SACJ,EACD,EAAE,UAAU,EAAE,MAAM,EAAE,CACvB,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE;aAC5D,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAE/E,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qCAAqC,QAAQ,GAAG;aACzD,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;QAE5E,8CAA8C;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,oBAAoB,QAAQ,SAAS,EAAE;YAClE,qBAAqB,EAAE,MAAM;YAC7B,uBAAuB,EAAE,KAAK;YAC9B,iBAAiB,EAAE,IAAI;YACvB,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC;YAClC,sBAAsB,EAAE,GAAG;SAC5B,CAAC,CAAA;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,mBAAmB;gBACzB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAC/E,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAA;QAEF,uCAAuC;QACvC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,oBAAoB,QAAQ,SAAS,EAAE;YACxE,qBAAqB,EAAE,MAAM;YAC7B,uBAAuB,EAAE,KAAK;YAC9B,iBAAiB,EAAE,IAAI;YACvB,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC;YAClC,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACvC,CAAC,CAAA;QACF,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,mBAAmB;gBACzB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB,SAAS,EAAE;aACzC,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,kCAAkC;SAC3C,CAAC,CAAA;QAEF,yCAAyC;QACzC,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3D,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,oBAAoB,QAAQ,SAAS,EAAE;YAC1E,qBAAqB,EAAE,MAAM;YAC7B,uBAAuB,EAAE,KAAK;YAC9B,iBAAiB,EAAE,IAAI;YACvB,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC;YACvC,sBAAsB,EAAE,QAAQ;SACjC,CAAC,CAAA;QACF,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,qBAAqB,WAAW,EAAE;aAC3C,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,oCAAoC;SAC7C,CAAC,CAAA;QAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;AACH,CAAC"}