sandstream-kit 1.0.0

package/dist/team-model.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Team Management System — data models and types
+ * Supports RBAC, member management, invitations, audit logging
+ */
+export type Role = "owner" | "admin" | "developer" | "guest";
+export interface Team {
+    id: string;
+    name: string;
+    owner_id: string;
+    created_at: string;
+    updated_at: string;
+}
+export interface TeamMember {
+    id: string;
+    team_id: string;
+    user_id: string;
+    email: string;
+    role: Role;
+    invited_at: string;
+    joined_at: string | null;
+    status: "pending" | "accepted" | "revoked";
+}
+export interface TeamInvitation {
+    id: string;
+    team_id: string;
+    email: string;
+    role: Role;
+    token: string;
+    created_at: string;
+    expires_at: string;
+    accepted_at: string | null;
+}
+export interface AuditLog {
+    id: string;
+    team_id: string;
+    user_id: string;
+    action: AuditAction;
+    resource_type: string;
+    resource_id: string;
+    resource_name: string;
+    status: "success" | "failure";
+    details: Record<string, unknown>;
+    timestamp: string;
+}
+export type AuditAction = "team_created" | "team_updated" | "team_deleted" | "member_invited" | "member_joined" | "member_removed" | "member_role_changed" | "member_revoked" | "secret_accessed" | "secret_rotated" | "config_changed";
+/**
+ * RBAC Permission Matrix
+ * Maps role → actions allowed on resources
+ */
+export declare const PERMISSION_MATRIX: Record<Role, Record<string, boolean>>;
+/**
+ * Check if role has permission for action
+ */
+export declare function hasPermission(role: Role, action: string): boolean;
+/**
+ * Validate role
+ */
+export declare function isValidRole(role: string): role is Role;

package/dist/team-model.js

@@ -0,0 +1,83 @@
+/**
+ * Team Management System — data models and types
+ * Supports RBAC, member management, invitations, audit logging
+ */
+/**
+ * RBAC Permission Matrix
+ * Maps role → actions allowed on resources
+ */
+export const PERMISSION_MATRIX = {
+    owner: {
+        // Full access
+        "team:read": true,
+        "team:write": true,
+        "team:delete": true,
+        "member:read": true,
+        "member:invite": true,
+        "member:remove": true,
+        "member:role_change": true,
+        "secret:read": true,
+        "secret:write": true,
+        "secret:manage": true,
+        "audit:read": true,
+        "billing:manage": true,
+    },
+    admin: {
+        // Full access except billing
+        "team:read": true,
+        "team:write": true,
+        "team:delete": false,
+        "member:read": true,
+        "member:invite": true,
+        "member:remove": true,
+        "member:role_change": true,
+        "secret:read": true,
+        "secret:write": true,
+        "secret:manage": true,
+        "audit:read": true,
+        "billing:manage": false,
+    },
+    developer: {
+        // Can use team resources
+        "team:read": true,
+        "team:write": false,
+        "team:delete": false,
+        "member:read": true,
+        "member:invite": false,
+        "member:remove": false,
+        "member:role_change": false,
+        "secret:read": true,
+        "secret:write": false,
+        "secret:manage": false,
+        "audit:read": false,
+        "billing:manage": false,
+    },
+    guest: {
+        // Read-only access
+        "team:read": true,
+        "team:write": false,
+        "team:delete": false,
+        "member:read": true,
+        "member:invite": false,
+        "member:remove": false,
+        "member:role_change": false,
+        "secret:read": false,
+        "secret:write": false,
+        "secret:manage": false,
+        "audit:read": false,
+        "billing:manage": false,
+    },
+};
+/**
+ * Check if role has permission for action
+ */
+export function hasPermission(role, action) {
+    return PERMISSION_MATRIX[role]?.[action] ?? false;
+}
+/**
+ * Validate role
+ */
+export function isValidRole(role) {
+    return ["owner", "admin", "developer", "guest"].includes(role);
+}
+//# sourceMappingURL=team-model.js.map

package/dist/team-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-model.js","sourceRoot":"","sources":["../src/team-model.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4DH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0C;IACtE,KAAK,EAAE;QACL,cAAc;QACd,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;KACvB;IACD,KAAK,EAAE;QACL,6BAA6B;QAC7B,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,KAAK;KACxB;IACD,SAAS,EAAE;QACT,yBAAyB;QACzB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,KAAK;QAC3B,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,KAAK;KACxB;IACD,KAAK,EAAE;QACL,mBAAmB;QACnB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,KAAK;QAC3B,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,KAAK;KACxB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAU,EAAE,MAAc;IACtD,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC"}

package/dist/team-service.d.ts

@@ -0,0 +1,54 @@
+import type { Team, TeamMember, TeamInvitation, AuditLog } from "./team-model.js";
+/**
+ * Create team
+ */
+export declare function createTeam(name: string, owner_id: string): {
+    team: Team;
+    error?: string;
+};
+/**
+ * Get team by ID
+ */
+export declare function getTeam(team_id: string): Team | null;
+/**
+ * Invite user to team
+ */
+export declare function inviteToTeam(team_id: string, email: string, role: string, inviter_id: string): {
+    invitation: TeamInvitation;
+    error?: string;
+};
+/**
+ * Accept invitation and join team
+ */
+export declare function acceptInvitation(invitation_id: string, user_id: string, email: string): {
+    member: TeamMember;
+    error?: string;
+};
+/**
+ * List team members
+ */
+export declare function listTeamMembers(team_id: string): {
+    members: TeamMember[];
+    error?: string;
+};
+/**
+ * Remove member from team
+ */
+export declare function removeTeamMember(team_id: string, member_id: string, requester_id: string): {
+    success: boolean;
+    error?: string;
+};
+/**
+ * Change member role
+ */
+export declare function changeTeamMemberRole(team_id: string, member_id: string, new_role: string, requester_id: string): {
+    success: boolean;
+    error?: string;
+};
+/**
+ * Get audit logs
+ */
+export declare function getAuditLogs(team_id: string, limit?: number): {
+    logs: AuditLog[];
+    total: number;
+};

package/dist/team-service.js

@@ -0,0 +1,206 @@
+import { randomUUID } from "node:crypto";
+import { hasPermission, isValidRole } from "./team-model.js";
+/**
+ * In-memory team storage (production would use database)
+ */
+const teams = new Map();
+const members = new Map();
+const invitations = new Map();
+const auditLogs = [];
+/**
+ * Create team
+ */
+export function createTeam(name, owner_id) {
+    if (!name || name.trim().length === 0) {
+        return { team: {}, error: "Team name required" };
+    }
+    const team = {
+        id: `team_${randomUUID()}`,
+        name: name.trim(),
+        owner_id,
+        created_at: new Date().toISOString(),
+        updated_at: new Date().toISOString(),
+    };
+    teams.set(team.id, team);
+    // Add owner as member automatically
+    const ownerMember = {
+        id: `mem_${randomUUID()}`,
+        team_id: team.id,
+        user_id: owner_id,
+        email: `owner-${owner_id}@kit.local`, // Placeholder
+        role: "owner",
+        invited_at: team.created_at,
+        joined_at: team.created_at,
+        status: "accepted",
+    };
+    members.set(ownerMember.id, ownerMember);
+    logAudit(team.id, owner_id, "team_created", "team", team.id, name, {
+        owner_id,
+    });
+    return { team };
+}
+/**
+ * Get team by ID
+ */
+export function getTeam(team_id) {
+    return teams.get(team_id) ?? null;
+}
+/**
+ * Invite user to team
+ */
+export function inviteToTeam(team_id, email, role, inviter_id) {
+    // Validate team exists
+    const team = teams.get(team_id);
+    if (!team) {
+        return { invitation: {}, error: "Team not found" };
+    }
+    // Check inviter has permission
+    const inviter = Array.from(members.values()).find((m) => m.team_id === team_id && m.user_id === inviter_id);
+    if (!inviter || !hasPermission(inviter.role, "member:invite")) {
+        return { invitation: {}, error: "Not authorized to invite" };
+    }
+    // Validate role
+    if (!isValidRole(role)) {
+        return { invitation: {}, error: "Invalid role" };
+    }
+    // Check email not already member
+    const existing = Array.from(members.values()).find((m) => m.team_id === team_id && m.email === email);
+    if (existing && existing.status === "accepted") {
+        return { invitation: {}, error: "User already member" };
+    }
+    const invitation = {
+        id: `inv_${randomUUID()}`,
+        team_id,
+        email,
+        role: role,
+        token: randomUUID(),
+        created_at: new Date().toISOString(),
+        expires_at: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString(), // 7 days
+        accepted_at: null,
+    };
+    invitations.set(invitation.id, invitation);
+    logAudit(team_id, inviter_id, "member_invited", "user", email, email, {
+        role,
+    });
+    return { invitation };
+}
+/**
+ * Accept invitation and join team
+ */
+export function acceptInvitation(invitation_id, user_id, email) {
+    const invitation = invitations.get(invitation_id);
+    if (!invitation) {
+        return { member: {}, error: "Invitation not found" };
+    }
+    if (invitation.email !== email) {
+        return { member: {}, error: "Email mismatch" };
+    }
+    if (new Date(invitation.expires_at) < new Date()) {
+        return { member: {}, error: "Invitation expired" };
+    }
+    const member = {
+        id: `mem_${randomUUID()}`,
+        team_id: invitation.team_id,
+        user_id,
+        email,
+        role: invitation.role,
+        invited_at: invitation.created_at,
+        joined_at: new Date().toISOString(),
+        status: "accepted",
+    };
+    members.set(member.id, member);
+    invitation.accepted_at = new Date().toISOString();
+    logAudit(invitation.team_id, user_id, "member_joined", "user", user_id, email, {
+        role: invitation.role,
+    });
+    return { member };
+}
+/**
+ * List team members
+ */
+export function listTeamMembers(team_id) {
+    const team = teams.get(team_id);
+    if (!team) {
+        return { members: [], error: "Team not found" };
+    }
+    const teamMembers = Array.from(members.values()).filter((m) => m.team_id === team_id && m.status === "accepted");
+    return { members: teamMembers };
+}
+/**
+ * Remove member from team
+ */
+export function removeTeamMember(team_id, member_id, requester_id) {
+    const team = teams.get(team_id);
+    if (!team) {
+        return { success: false, error: "Team not found" };
+    }
+    // Check requester has permission
+    const requester = Array.from(members.values()).find((m) => m.team_id === team_id && m.user_id === requester_id);
+    if (!requester || !hasPermission(requester.role, "member:remove")) {
+        return { success: false, error: "Not authorized to remove members" };
+    }
+    const member = members.get(member_id);
+    if (!member || member.team_id !== team_id) {
+        return { success: false, error: "Member not found" };
+    }
+    // Prevent removing owner
+    if (member.role === "owner") {
+        return { success: false, error: "Cannot remove team owner" };
+    }
+    member.status = "revoked";
+    logAudit(team_id, requester_id, "member_removed", "user", member.user_id, member.email, {});
+    return { success: true };
+}
+/**
+ * Change member role
+ */
+export function changeTeamMemberRole(team_id, member_id, new_role, requester_id) {
+    if (!isValidRole(new_role)) {
+        return { success: false, error: "Invalid role" };
+    }
+    // Check requester has permission
+    const requester = Array.from(members.values()).find((m) => m.team_id === team_id && m.user_id === requester_id);
+    if (!requester || !hasPermission(requester.role, "member:role_change")) {
+        return { success: false, error: "Not authorized to change roles" };
+    }
+    const member = members.get(member_id);
+    if (!member || member.team_id !== team_id) {
+        return { success: false, error: "Member not found" };
+    }
+    const old_role = member.role;
+    member.role = new_role;
+    logAudit(team_id, requester_id, "member_role_changed", "user", member.user_id, member.email, {
+        old_role,
+        new_role,
+    });
+    return { success: true };
+}
+/**
+ * Get audit logs
+ */
+export function getAuditLogs(team_id, limit = 100) {
+    const filtered = auditLogs
+        .filter((log) => log.team_id === team_id)
+        .sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime())
+        .slice(0, limit);
+    return { logs: filtered, total: auditLogs.filter((l) => l.team_id === team_id).length };
+}
+/**
+ * Log audit event
+ */
+function logAudit(team_id, user_id, action, resource_type, resource_id, resource_name, details) {
+    const log = {
+        id: `audit_${randomUUID()}`,
+        team_id,
+        user_id,
+        action: action,
+        resource_type,
+        resource_id,
+        resource_name,
+        status: "success",
+        details,
+        timestamp: new Date().toISOString(),
+    };
+    auditLogs.push(log);
+}
+//# sourceMappingURL=team-service.js.map

package/dist/team-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-service.js","sourceRoot":"","sources":["../src/team-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE7D;;GAEG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;AACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;AAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;AACtD,MAAM,SAAS,GAAe,EAAE,CAAC;AAEjC;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,EAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAS;QACjB,EAAE,EAAE,QAAQ,UAAU,EAAE,EAAE;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QACjB,QAAQ;QACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAEzB,oCAAoC;IACpC,MAAM,WAAW,GAAe;QAC9B,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,SAAS,QAAQ,YAAY,EAAE,cAAc;QACpD,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAEzC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE;QACjE,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,KAAa,EACb,IAAY,EACZ,UAAkB;IAElB,uBAAuB;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,UAAU,EAAE,EAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CACzD,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,UAAU,EAAE,EAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACjF,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,UAAU,EAAE,EAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrE,CAAC;IAED,iCAAiC;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAClD,CAAC;IACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/C,OAAO,EAAE,UAAU,EAAE,EAAoB,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAmB;QACjC,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO;QACP,KAAK;QACL,IAAI,EAAE,IAAY;QAClB,KAAK,EAAE,UAAU,EAAE;QACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS;QACnF,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;QACpE,IAAI;KACL,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,OAAe,EACf,KAAa;IAEb,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,EAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,EAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,EAAgB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO;QACP,KAAK;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,UAAU;KACnB,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;QAC7E,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe;IAEf,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CACxD,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,SAAiB,EACjB,YAAoB;IAEpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACrD,CAAC;IAED,iCAAiC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,CAC3D,CAAC;IACF,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,SAAiB,EACjB,QAAgB,EAChB,YAAoB;IAEpB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACnD,CAAC;IAED,iCAAiC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,CAC3D,CAAC;IACF,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,CAAC,IAAI,GAAG,QAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE;QAC3F,QAAQ;QACR,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,KAAK,GAAG,GAAG;IAEX,MAAM,QAAQ,GAAG,SAAS;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;SACjF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CACf,OAAe,EACf,OAAe,EACf,MAAc,EACd,aAAqB,EACrB,WAAmB,EACnB,aAAqB,EACrB,OAAgC;IAEhC,MAAM,GAAG,GAAa;QACpB,EAAE,EAAE,SAAS,UAAU,EAAE,EAAE;QAC3B,OAAO;QACP,OAAO;QACP,MAAM,EAAE,MAAa;QACrB,aAAa;QACb,WAAW;QACX,aAAa;QACb,MAAM,EAAE,SAAS;QACjB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/toml-generator.d.ts

@@ -0,0 +1,8 @@
+import type { DetectedStack } from "./stack-detector.js";
+export type SecretsStore = "1password" | "infisical" | "bitwarden" | "doppler" | "vault" | "aws-sm" | "gcp-sm" | "azure-kv" | "env";
+/**
+ * Generate a .kit.toml string from a detected stack profile.
+ */
+export declare function generateToml(stack: DetectedStack, options?: {
+    secretsStore?: SecretsStore;
+}): string;

package/dist/toml-generator.js

@@ -0,0 +1,223 @@
+const SERVICE_TEMPLATES = {
+    stripe: {
+        login: "stripe login",
+        check: "stripe config --list",
+        secrets: ["STRIPE_SECRET_KEY", "STRIPE_PUBLISHABLE_KEY", "STRIPE_WEBHOOK_SECRET"],
+        tool: "stripe",
+    },
+    supabase: {
+        login: "supabase login",
+        check: "supabase projects list",
+        secrets: ["NEXT_PUBLIC_SUPABASE_URL", "NEXT_PUBLIC_SUPABASE_ANON_KEY", "SUPABASE_SERVICE_ROLE_KEY"],
+        tool: "supabase",
+    },
+    vercel: {
+        login: "vercel login",
+        check: "vercel whoami",
+        secrets: [],
+        tool: "vercel",
+    },
+    expo: {
+        login: "eas login",
+        check: "eas whoami",
+        secrets: ["EXPO_TOKEN"],
+        tool: "eas-cli",
+    },
+    resend: {
+        login: "# resend — no CLI login; set RESEND_API_KEY in env",
+        check: "# resend — check RESEND_API_KEY is set",
+        secrets: ["RESEND_API_KEY", "RESEND_FROM_EMAIL"],
+    },
+    clerk: {
+        login: "# clerk — no CLI login; get keys from https://dashboard.clerk.com",
+        check: "# clerk — check CLERK_SECRET_KEY is set",
+        secrets: ["CLERK_SECRET_KEY", "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY"],
+    },
+    liveblocks: {
+        login: "# liveblocks — no CLI login; get keys from https://liveblocks.io/dashboard",
+        check: "# liveblocks — check LIVEBLOCKS_SECRET_KEY is set",
+        secrets: ["LIVEBLOCKS_SECRET_KEY", "NEXT_PUBLIC_LIVEBLOCKS_PUBLIC_KEY"],
+    },
+    trigger: {
+        login: "# trigger — no CLI login; get key from https://cloud.trigger.dev",
+        check: "# trigger — check TRIGGER_SECRET_KEY is set",
+        secrets: ["TRIGGER_SECRET_KEY"],
+    },
+    inngest: {
+        login: "# inngest — no CLI login; get keys from https://app.inngest.com",
+        check: "# inngest — check INNGEST_EVENT_KEY is set",
+        secrets: ["INNGEST_EVENT_KEY", "INNGEST_SIGNING_KEY"],
+    },
+    sentry: {
+        login: "# sentry — no CLI login; get DSN from https://sentry.io",
+        check: "# sentry — check SENTRY_DSN is set",
+        secrets: ["SENTRY_DSN", "SENTRY_ORG", "SENTRY_PROJECT", "SENTRY_AUTH_TOKEN"],
+    },
+    netlify: {
+        login: "netlify login",
+        check: "netlify status",
+        secrets: ["NETLIFY_AUTH_TOKEN", "NETLIFY_SITE_ID"],
+        tool: "netlify",
+    },
+    "cloudflare-pages": {
+        login: "wrangler login",
+        check: "wrangler whoami",
+        secrets: ["CLOUDFLARE_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"],
+        tool: "wrangler",
+    },
+    typeorm: {
+        login: "# typeorm — no CLI login; configure DATABASE_URL",
+        check: "# typeorm — check DATABASE_URL is set",
+        secrets: ["DATABASE_URL"],
+    },
+    mongoose: {
+        login: "# mongoose — no CLI login; configure MONGODB_URI",
+        check: "# mongoose — check MONGODB_URI is set",
+        secrets: ["MONGODB_URI"],
+    },
+};
+const FRAMEWORK_SETUP = {
+    nextjs: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    remix: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    astro: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    sveltekit: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    nestjs: { install: "pnpm install", dev: "pnpm start:dev", verify: "pnpm build" },
+    express: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    react: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
+    fastapi: { install: "uv sync", dev: "uv run uvicorn main:app --reload", verify: "uv run pytest" },
+    django: { install: "uv sync", migrate: "uv run python manage.py migrate", verify: "uv run python manage.py check" },
+    flask: { install: "uv sync", dev: "uv run flask run", verify: "uv run pytest" },
+    gin: { install: "go mod download", dev: "go run .", verify: "go build ./..." },
+    echo: { install: "go mod download", dev: "go run .", verify: "go build ./..." },
+    fiber: { install: "go mod download", dev: "go run .", verify: "go build ./..." },
+    laravel: { install: "composer install", migrate: "php artisan migrate", verify: "php artisan test" },
+    symfony: { install: "composer install", verify: "php bin/console lint:all" },
+};
+function lines(...parts) {
+    return parts.filter(Boolean).join("\n");
+}
+function toolsSection(tools) {
+    if (Object.keys(tools).length === 0)
+        return "";
+    const entries = Object.entries(tools)
+        .map(([k, v]) => `${k} = "${v}"`)
+        .join("\n");
+    return `[tools]\n${entries}\n`;
+}
+function servicesSection(services, allTools) {
+    const sections = [];
+    for (const svc of services) {
+        const tmpl = SERVICE_TEMPLATES[svc];
+        if (!tmpl)
+            continue;
+        // Add tool to tools if needed (handled outside)
+        sections.push(`[services.${svc}]\nlogin = "${tmpl.login}"\ncheck = "${tmpl.check}"`);
+    }
+    return sections.join("\n\n");
+}
+function secretsSection(services, store = "1password") {
+    const allKeys = [];
+    for (const svc of services) {
+        const tmpl = SERVICE_TEMPLATES[svc];
+        if (tmpl?.secrets.length)
+            allKeys.push(...tmpl.secrets);
+    }
+    if (allKeys.length === 0)
+        return "";
+    const keyLines = allKeys.map((k) => {
+        let src;
+        switch (store) {
+            case "1password":
+                src = `source = "1password", ref = "op://Dev/Project/${k}"`;
+                break;
+            case "infisical":
+                src = `source = "infisical", name = "${k}"`;
+                break;
+            case "bitwarden":
+                src = `source = "bitwarden", name = "${k}"`;
+                break;
+            case "doppler":
+                src = `source = "doppler", name = "${k}"`;
+                break;
+            case "vault":
+                src = `source = "vault", vault_path = "secret/data/myapp", vault_field = "${k}"`;
+                break;
+            case "aws-sm":
+                src = `source = "aws-sm", name = "${k}"`;
+                break;
+            case "gcp-sm":
+                src = `source = "gcp-sm", name = "${k}"`;
+                break;
+            case "azure-kv":
+                src = `source = "azure-kv", name = "${k}"`;
+                break;
+            default:
+                src = `source = "env"`;
+        }
+        return `${k} = { ${src} }`;
+    });
+    return lines(`[secrets]`, `store = "${store}"`, `template = ".env.template"`, ``, `[secrets.keys]`, keyLines.join("\n"));
+}
+function setupSection(stack) {
+    const frameworkSetup = stack.framework ? FRAMEWORK_SETUP[stack.framework] : null;
+    // Detect package manager from tools
+    let installCmd;
+    if (stack.tools.pnpm)
+        installCmd = "pnpm install";
+    else if (stack.tools.yarn)
+        installCmd = "yarn install";
+    else if (stack.tools.bun)
+        installCmd = "bun install";
+    else if (stack.tools.uv)
+        installCmd = "uv sync";
+    else if (stack.language === "go")
+        installCmd = "go mod download";
+    else if (stack.language === "rust")
+        installCmd = "cargo fetch";
+    else if (stack.language === "php")
+        installCmd = "composer install";
+    else
+        installCmd = frameworkSetup?.install ?? "npm install";
+    const hasSupabase = stack.services.includes("supabase");
+    const hasPrisma = stack.services.includes("prisma");
+    const hasDrizzle = stack.services.includes("drizzle");
+    let migrateCmd = null;
+    if (hasSupabase)
+        migrateCmd = "supabase db push";
+    else if (hasPrisma)
+        migrateCmd = "npx prisma migrate deploy";
+    else if (hasDrizzle)
+        migrateCmd = "npx drizzle-kit migrate";
+    else if (frameworkSetup?.migrate)
+        migrateCmd = frameworkSetup.migrate;
+    const verifyCmd = frameworkSetup?.verify ?? null;
+    const parts = [`[setup]`, `install = "${installCmd}"`];
+    if (migrateCmd)
+        parts.push(`migrate = "${migrateCmd}"`);
+    if (verifyCmd)
+        parts.push(`verify = "${verifyCmd}"`);
+    return parts.join("\n");
+}
+/**
+ * Generate a .kit.toml string from a detected stack profile.
+ */
+export function generateToml(stack, options = {}) {
+    // Merge service tools into tools map
+    const tools = { ...stack.tools };
+    for (const svc of stack.services) {
+        const tmpl = SERVICE_TEMPLATES[svc];
+        if (tmpl?.tool && !tools[tmpl.tool]) {
+            tools[tmpl.tool] = "latest";
+        }
+    }
+    const header = lines(`# .kit.toml — generated by kit init`, stack.framework
+        ? `# Detected: ${stack.language} / ${stack.framework}${stack.services.length ? ` + ${stack.services.join(", ")}` : ""}`
+        : `# Detected: ${stack.language}${stack.services.length ? ` + ${stack.services.join(", ")}` : ""}`, ``);
+    const toolsSec = toolsSection(tools);
+    const servicesSec = servicesSection(stack.services, tools);
+    const secretsSec = secretsSection(stack.services, options.secretsStore ?? "1password");
+    const setupSec = setupSection(stack);
+    const parts = [header, toolsSec, servicesSec, secretsSec, setupSec].filter((s) => s.trim().length > 0);
+    return parts.join("\n") + "\n";
+}
+//# sourceMappingURL=toml-generator.js.map

package/dist/toml-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-generator.js","sourceRoot":"","sources":["../src/toml-generator.ts"],"names":[],"mappings":"AAYA,MAAM,iBAAiB,GAAoC;IACzD,MAAM,EAAE;QACN,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,CAAC;QACjF,IAAI,EAAE,QAAQ;KACf;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,CAAC,0BAA0B,EAAE,+BAA+B,EAAE,2BAA2B,CAAC;QACnG,IAAI,EAAE,UAAU;KACjB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,QAAQ;KACf;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,IAAI,EAAE,SAAS;KAChB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,oDAAoD;QAC3D,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;KACjD;IACD,KAAK,EAAE;QACL,KAAK,EAAE,mEAAmE;QAC1E,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;KACnE;IACD,UAAU,EAAE;QACV,KAAK,EAAE,4EAA4E;QACnF,KAAK,EAAE,mDAAmD;QAC1D,OAAO,EAAE,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;KACxE;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kEAAkE;QACzE,KAAK,EAAE,6CAA6C;QACpD,OAAO,EAAE,CAAC,oBAAoB,CAAC;KAChC;IACD,OAAO,EAAE;QACP,KAAK,EAAE,iEAAiE;QACxE,KAAK,EAAE,4CAA4C;QACnD,OAAO,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;KACtD;IACD,MAAM,EAAE;QACN,KAAK,EAAE,yDAAyD;QAChE,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;KAC7E;IACD,OAAO,EAAE;QACP,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,CAAC;QAClD,IAAI,EAAE,SAAS;KAChB;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;QAC1D,IAAI,EAAE,UAAU;KACjB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kDAAkD;QACzD,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,CAAC,cAAc,CAAC;KAC1B;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,kDAAkD;QACzD,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB;CACF,CAAC;AAEF,MAAM,eAAe,GAGjB;IACF,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC1E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,SAAS,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7E,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC3E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,EAAE,eAAe,EAAE;IACjG,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACnH,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE;IAC/E,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC9E,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC/E,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,0BAA0B,EAAE;CAC7E,CAAC;AAEF,SAAS,KAAK,CAAC,GAAG,KAAoC;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;SAChC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,YAAY,OAAO,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB,EAAE,QAAgC;IAC3E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,gDAAgD;QAChD,QAAQ,CAAC,IAAI,CACX,aAAa,GAAG,eAAe,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,GAAG,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAaD,SAAS,cAAc,CAAC,QAAkB,EAAE,QAAsB,WAAW;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,GAAW,CAAC;QAChB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW;gBACd,GAAG,GAAG,iDAAiD,CAAC,GAAG,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,SAAS;gBACZ,GAAG,GAAG,+BAA+B,CAAC,GAAG,CAAC;gBAC1C,MAAM;YACR,KAAK,OAAO;gBACV,GAAG,GAAG,sEAAsE,CAAC,GAAG,CAAC;gBACjF,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,UAAU;gBACb,GAAG,GAAG,gCAAgC,CAAC,GAAG,CAAC;gBAC3C,MAAM;YACR;gBACE,GAAG,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CACV,WAAW,EACX,YAAY,KAAK,GAAG,EACpB,4BAA4B,EAC5B,EAAE,EACF,gBAAgB,EAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,oCAAoC;IACpC,IAAI,UAAkB,CAAC;IACvB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAC7C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAClD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG;QAAE,UAAU,GAAG,aAAa,CAAC;SAChD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;QAAE,UAAU,GAAG,SAAS,CAAC;SAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,UAAU,GAAG,iBAAiB,CAAC;SAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,UAAU,GAAG,aAAa,CAAC;SAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,UAAU,GAAG,kBAAkB,CAAC;;QAC9D,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,aAAa,CAAC;IAE3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW;QAAE,UAAU,GAAG,kBAAkB,CAAC;SAC5C,IAAI,SAAS;QAAE,UAAU,GAAG,2BAA2B,CAAC;SACxD,IAAI,UAAU;QAAE,UAAU,GAAG,yBAAyB,CAAC;SACvD,IAAI,cAAc,EAAE,OAAO;QAAE,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC;IAEtE,MAAM,SAAS,GAAG,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC;IAEjD,MAAM,KAAK,GAAa,CAAC,SAAS,EAAE,cAAc,UAAU,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,UAAU,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,GAAG,CAAC,CAAC;IAErD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAoB,EACpB,UAA2C,EAAE;IAE7C,qCAAqC;IACrC,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAClB,qCAAqC,EACrC,KAAK,CAAC,SAAS;QACb,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACvH,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpG,EAAE,CACH,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CACxE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}