@adminiumjs/adminium 0.1.0-rc.1

package/dist/cli/commands/start.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `adminium start` — boot the server and serve the dashboard (01 §4.1).
+ *
+ * The single-process topology: Fastify + the SPA build + the in-process engine +
+ * the jobs loop, one node process, no Redis and no external scheduler. This
+ * command adds nothing to that — it resolves configuration, bootstraps the meta
+ * store, and hands off to the same composition root every other topology uses.
+ *
+ * BOOT RUNS `firstRun`, NOT `applyMigrations` (07-meta-store.md §6). Migrations
+ * create `adminium_roles`; NOTHING in the migration ledger seeds it. So a boot
+ * that only migrated would serve a first-run wizard whose `POST /setup/super-admin`
+ * dies inside `createFirstSuperAdmin` ("built-in roles missing") — permanently,
+ * because the claim row rolls back with it and every retry re-fails. `firstRun`
+ * is the documented, idempotent "safe to run at every boot" entry point: it
+ * migrates, seeds the built-in roles, and seeds `system.*` (including the
+ * `instanceId` telemetry needs). This is what makes the v0.5 gate criteria
+ * "Fresh install → super admin created" and "`docker run` boots to first-run
+ * wizard" true on a real install rather than only in a test harness.
+ */
+import type { Command } from '../command.js';
+export declare const startCommand: Command;
+//# sourceMappingURL=start.d.ts.map

package/dist/cli/commands/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,eAAO,MAAM,YAAY,EAAE,OAmF1B,CAAC"}

package/dist/cli/commands/start.js

@@ -0,0 +1,101 @@
+/**
+ * `adminium start` — boot the server and serve the dashboard (01 §4.1).
+ *
+ * The single-process topology: Fastify + the SPA build + the in-process engine +
+ * the jobs loop, one node process, no Redis and no external scheduler. This
+ * command adds nothing to that — it resolves configuration, bootstraps the meta
+ * store, and hands off to the same composition root every other topology uses.
+ *
+ * BOOT RUNS `firstRun`, NOT `applyMigrations` (07-meta-store.md §6). Migrations
+ * create `adminium_roles`; NOTHING in the migration ledger seeds it. So a boot
+ * that only migrated would serve a first-run wizard whose `POST /setup/super-admin`
+ * dies inside `createFirstSuperAdmin` ("built-in roles missing") — permanently,
+ * because the claim row rolls back with it and every retry re-fails. `firstRun`
+ * is the documented, idempotent "safe to run at every boot" entry point: it
+ * migrates, seeds the built-in roles, and seeds `system.*` (including the
+ * `instanceId` telemetry needs). This is what makes the v0.5 gate criteria
+ * "Fresh install → super admin created" and "`docker run` boots to first-run
+ * wizard" true on a real install rather than only in a test harness.
+ */
+import { firstRun } from '@adminium/meta';
+import { embeddedMetaWarning } from '../../meta/store.js';
+import { numberFlag, parseFlags, stringFlag } from '../args.js';
+import { EXIT_OK } from '../exit.js';
+import { loadCliEnv } from '../runtime.js';
+export const startCommand = {
+    name: 'start',
+    summary: 'Start the server and serve the dashboard',
+    usage: 'adminium start [--port <n>] [--host <addr>]',
+    describe: 'Boots Adminium against the configured meta store, applying any pending\n' +
+        'migrations first. With nothing configured it falls back to an embedded\n' +
+        'SQLite meta store under the data directory and says so.',
+    flags: {
+        port: {
+            type: 'string',
+            short: 'p',
+            placeholder: '<n>',
+            describe: 'Port to listen on',
+            defaultDescription: 'PORT or 4600',
+        },
+        host: {
+            type: 'string',
+            placeholder: '<addr>',
+            describe: 'Address to bind',
+            defaultDescription: 'HOST or 0.0.0.0',
+        },
+        'meta-url': {
+            type: 'string',
+            placeholder: '<dsn>',
+            describe: 'Meta store DSN',
+            defaultDescription: 'ADMINIUM_META_URL, else embedded SQLite',
+        },
+        'data-dir': {
+            type: 'string',
+            placeholder: '<path>',
+            describe: 'Data directory',
+            defaultDescription: 'ADMINIUM_DATA_DIR or ./data',
+        },
+        'log-level': {
+            type: 'string',
+            placeholder: '<level>',
+            describe: 'fatal|error|warn|info|debug|trace',
+            defaultDescription: 'ADMINIUM_LOG_LEVEL or info',
+        },
+        'skip-migrate': {
+            type: 'boolean',
+            describe: 'Do not bootstrap (migrate + seed built-in roles) the meta store on boot',
+        },
+    },
+    async run({ io, deps, argv }) {
+        const { values } = parseFlags(argv, startCommand.flags, startCommand.name);
+        const port = numberFlag(values.port, 'port', startCommand.name);
+        const host = stringFlag(values.host);
+        const dataDir = stringFlag(values['data-dir']);
+        const metaUrl = stringFlag(values['meta-url']);
+        const logLevel = stringFlag(values['log-level']);
+        const env = loadCliEnv(deps.env, {
+            ...(port === undefined ? {} : { port }),
+            ...(host === undefined ? {} : { host }),
+            ...(dataDir === undefined ? {} : { dataDir }),
+            ...(metaUrl === undefined ? {} : { metaUrl }),
+            ...(logLevel === undefined ? {} : { logLevel }),
+        });
+        const runtime = await deps.openRuntime(env);
+        // §3.1 OD-1: the embedded fallback is legitimate but must announce itself.
+        if (runtime.metaStore.source === 'embedded') {
+            io.err(embeddedMetaWarning(runtime.metaStore.url));
+        }
+        if (values['skip-migrate'] !== true) {
+            const { appliedMigrations } = await firstRun(runtime.metaStore.meta);
+            if (appliedMigrations.length > 0) {
+                io.out(`Applied ${String(appliedMigrations.length)} pending meta migration(s).`);
+            }
+        }
+        const server = await deps.startServer(runtime);
+        io.out(`Adminium is running at ${server.url}`);
+        // The process now lives until a signal; `start` never "finishes". The exit
+        // code is only reached in tests, where startServer is a fake.
+        return EXIT_OK;
+    },
+};
+//# sourceMappingURL=start.js.map

package/dist/cli/commands/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,0CAA0C;IACnD,KAAK,EAAE,6CAA6C;IACpD,QAAQ,EACN,0EAA0E;QAC1E,0EAA0E;QAC1E,yDAAyD;IAC3D,KAAK,EAAE;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,GAAG;YACV,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,mBAAmB;YAC7B,kBAAkB,EAAE,cAAc;SACnC;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,iBAAiB;YAC3B,kBAAkB,EAAE,iBAAiB;SACtC;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO;YACpB,QAAQ,EAAE,gBAAgB;YAC1B,kBAAkB,EAAE,yCAAyC;SAC9D;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,gBAAgB;YAC1B,kBAAkB,EAAE,6BAA6B;SAClD;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,mCAAmC;YAC7C,kBAAkB,EAAE,4BAA4B;SACjD;QACD,cAAc,EAAE;YACd,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,yEAAyE;SACpF;KACF;IAED,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE;YAC/B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAChD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAE5C,2EAA2E;QAC3E,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5C,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,EAAE,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/C,EAAE,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAE/C,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/cli/exit.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CLI exit codes. The `apply-llm-response` triple is a published contract
+ * (06-llm-assist.md §10.4: "Exit codes: `0` applied, `2` validation failed,
+ * `3` nothing accepted") — scripts and CI pipelines branch on it, so these
+ * numbers are as much an API as any route's status code. They live in one
+ * module so a command cannot invent a fourth meaning for `2`.
+ */
+export declare const EXIT_OK = 0;
+/** Anything that went wrong that is not one of the §10.4 outcomes: usage
+ *  errors, unreachable databases, missing files, bad configuration. */
+export declare const EXIT_ERROR = 1;
+/** §10.4: the LLM response failed validation (fatal or per-path). */
+export declare const EXIT_VALIDATION_FAILED = 2;
+/** §10.4: the response validated but nothing was accepted, so nothing applied. */
+export declare const EXIT_NOTHING_ACCEPTED = 3;
+export type ExitCode = typeof EXIT_OK | typeof EXIT_ERROR | typeof EXIT_VALIDATION_FAILED | typeof EXIT_NOTHING_ACCEPTED;
+/**
+ * An error carrying the exit code the CLI should die with. The dispatcher
+ * prints `message` (plus `hint`, when present) and returns `code` — commands
+ * throw this instead of calling `process.exit`, so every path is testable.
+ */
+export declare class CliError extends Error {
+    readonly name = "CliError";
+    readonly code: ExitCode;
+    readonly hint: string | null;
+    constructor(message: string, opts?: {
+        code?: ExitCode;
+        hint?: string;
+        cause?: unknown;
+    });
+}
+/** A usage/parse problem — the dispatcher appends the command's help. */
+export declare class CliUsageError extends CliError {
+    readonly command: string | null;
+    constructor(message: string, command?: string | null);
+}
+//# sourceMappingURL=exit.d.ts.map

package/dist/cli/exit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit.d.ts","sourceRoot":"","sources":["../../src/cli/exit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,IAAI,CAAC;AAEzB;uEACuE;AACvE,eAAO,MAAM,UAAU,IAAI,CAAC;AAE5B,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,MAAM,QAAQ,GAChB,OAAO,OAAO,GACd,OAAO,UAAU,GACjB,OAAO,sBAAsB,GAC7B,OAAO,qBAAqB,CAAC;AAEjC;;;;GAIG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,SAAkB,IAAI,cAAc;IACpC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAK5F;AAED,yEAAyE;AACzE,qBAAa,aAAc,SAAQ,QAAQ;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,GAAG,IAAW;CAI3D"}

package/dist/cli/exit.js

@@ -0,0 +1,39 @@
+/**
+ * CLI exit codes. The `apply-llm-response` triple is a published contract
+ * (06-llm-assist.md §10.4: "Exit codes: `0` applied, `2` validation failed,
+ * `3` nothing accepted") — scripts and CI pipelines branch on it, so these
+ * numbers are as much an API as any route's status code. They live in one
+ * module so a command cannot invent a fourth meaning for `2`.
+ */
+export const EXIT_OK = 0;
+/** Anything that went wrong that is not one of the §10.4 outcomes: usage
+ *  errors, unreachable databases, missing files, bad configuration. */
+export const EXIT_ERROR = 1;
+/** §10.4: the LLM response failed validation (fatal or per-path). */
+export const EXIT_VALIDATION_FAILED = 2;
+/** §10.4: the response validated but nothing was accepted, so nothing applied. */
+export const EXIT_NOTHING_ACCEPTED = 3;
+/**
+ * An error carrying the exit code the CLI should die with. The dispatcher
+ * prints `message` (plus `hint`, when present) and returns `code` — commands
+ * throw this instead of calling `process.exit`, so every path is testable.
+ */
+export class CliError extends Error {
+    name = 'CliError';
+    code;
+    hint;
+    constructor(message, opts = {}) {
+        super(message, opts.cause === undefined ? undefined : { cause: opts.cause });
+        this.code = opts.code ?? EXIT_ERROR;
+        this.hint = opts.hint ?? null;
+    }
+}
+/** A usage/parse problem — the dispatcher appends the command's help. */
+export class CliUsageError extends CliError {
+    command;
+    constructor(message, command = null) {
+        super(message, { code: EXIT_ERROR });
+        this.command = command;
+    }
+}
+//# sourceMappingURL=exit.js.map

package/dist/cli/exit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit.js","sourceRoot":"","sources":["../../src/cli/exit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AAEzB;uEACuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAQvC;;;;GAIG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACf,IAAI,GAAG,UAAU,CAAC;IAC3B,IAAI,CAAW;IACf,IAAI,CAAgB;IAE7B,YAAY,OAAe,EAAE,OAA4D,EAAE;QACzF,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAChC,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,aAAc,SAAQ,QAAQ;IAChC,OAAO,CAAgB;IAChC,YAAY,OAAe,EAAE,UAAyB,IAAI;QACxD,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF"}

package/dist/cli/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+/**
+ * `adminium` — the CLI entry point (`bin` in package.json, 01-architecture.md
+ * §4.1: "one `npx adminium` is a complete install").
+ *
+ * The only module allowed to end the process. Everything below it returns an
+ * exit code; `runCli` is the testable boundary.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG"}

package/dist/cli/index.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+/**
+ * `adminium` — the CLI entry point (`bin` in package.json, 01-architecture.md
+ * §4.1: "one `npx adminium` is a complete install").
+ *
+ * The only module allowed to end the process. Everything below it returns an
+ * exit code; `runCli` is the testable boundary.
+ */
+import { runCli } from './run.js';
+const code = await runCli(process.argv.slice(2));
+// `start` and the wizard leave a listening server behind: a non-zero code must
+// still exit, but a clean one must NOT tear down a server that is now serving.
+// An explicit exit here would kill it, so instead we let the event loop decide —
+// with no handles left (every other command closes its store), node exits on its
+// own with this code.
+process.exitCode = code;
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjD,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,sBAAsB;AACtB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC"}

package/dist/cli/io.d.ts

@@ -0,0 +1,49 @@
+/**
+ * CLI input/output seam.
+ *
+ * Every byte the CLI prints and every answer it reads goes through {@link CliIo},
+ * so the whole surface — including the init wizard's interactive prompts — is
+ * driven by a scripted fake in tests: no TTY, no spawned process, no timers.
+ * {@link nodeIo} is the only place that touches `process.stdout`/`stdin`.
+ */
+export interface AskOptions {
+    /** Returned when the user just presses Enter. */
+    default?: string;
+    /** Suppress echo (passwords). Best-effort: falls back to echoing on a non-TTY. */
+    mask?: boolean;
+}
+export interface CliIo {
+    /** Write a line to stdout. */
+    out(line?: string): void;
+    /** Write a line to stderr — errors and warnings only, so stdout stays pipeable. */
+    err(line?: string): void;
+    /** Prompt for a line of input. */
+    ask(question: string, opts?: AskOptions): Promise<string>;
+    /** Prompt for a yes/no. */
+    confirm(question: string, defaultYes?: boolean): Promise<boolean>;
+    /** True when stdin is interactive — gates the wizard. */
+    isInteractive: boolean;
+    /** Release any underlying readline handle. */
+    close(): Promise<void>;
+}
+/** Bold/dim helpers that no-op when stdout is not a TTY (pipes stay clean). */
+export interface Style {
+    bold(text: string): string;
+    dim(text: string): string;
+    ok(text: string): string;
+    warn(text: string): string;
+    danger(text: string): string;
+}
+export declare function createStyle(color: boolean): Style;
+/**
+ * The real IO. `readline` is created lazily: `adminium start` never prompts, and
+ * opening an interface would keep the event loop alive for no reason.
+ */
+export declare function nodeIo(): CliIo;
+/**
+ * Fixed-width table rendering — the `apply-llm-response` diff table (§10.4) and
+ * `migrate --status` both print one, and neither should hand-roll padding.
+ * Cells are truncated (never wrapped) so a row is always one line.
+ */
+export declare function renderTable(headers: readonly string[], rows: readonly (readonly string[])[], maxWidths?: readonly number[]): string;
+//# sourceMappingURL=io.d.ts.map

package/dist/cli/io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../src/cli/io.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,KAAK;IACpB,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kCAAkC;IAClC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,yDAAyD;IACzD,aAAa,EAAE,OAAO,CAAC;IACvB,8CAA8C;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,KAAK;IACpB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CASjD;AAED;;;GAGG;AACH,wBAAgB,MAAM,IAAI,KAAK,CAmC9B;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,EACpC,SAAS,GAAE,SAAS,MAAM,EAAO,GAChC,MAAM,CAeR"}

package/dist/cli/io.js

@@ -0,0 +1,77 @@
+/**
+ * CLI input/output seam.
+ *
+ * Every byte the CLI prints and every answer it reads goes through {@link CliIo},
+ * so the whole surface — including the init wizard's interactive prompts — is
+ * driven by a scripted fake in tests: no TTY, no spawned process, no timers.
+ * {@link nodeIo} is the only place that touches `process.stdout`/`stdin`.
+ */
+import { createInterface } from 'node:readline/promises';
+export function createStyle(color) {
+    const wrap = (open) => (text) => (color ? `\u001b[${open}m${text}\u001b[0m` : text);
+    return {
+        bold: wrap('1'),
+        dim: wrap('2'),
+        ok: wrap('32'),
+        warn: wrap('33'),
+        danger: wrap('31'),
+    };
+}
+/**
+ * The real IO. `readline` is created lazily: `adminium start` never prompts, and
+ * opening an interface would keep the event loop alive for no reason.
+ */
+export function nodeIo() {
+    let rl = null;
+    const readline = () => {
+        rl ??= createInterface({ input: process.stdin, output: process.stdout });
+        return rl;
+    };
+    return {
+        out(line = '') {
+            process.stdout.write(`${line}\n`);
+        },
+        err(line = '') {
+            process.stderr.write(`${line}\n`);
+        },
+        async ask(question, opts = {}) {
+            const suffix = opts.default === undefined ? '' : ` [${opts.default}]`;
+            const answer = (await readline().question(`${question}${suffix}: `)).trim();
+            return answer === '' ? (opts.default ?? '') : answer;
+        },
+        async confirm(question, defaultYes = true) {
+            const answer = (await readline().question(`${question} ${defaultYes ? '[Y/n]' : '[y/N]'}: `))
+                .trim()
+                .toLowerCase();
+            if (answer === '')
+                return defaultYes;
+            return answer === 'y' || answer === 'yes';
+        },
+        get isInteractive() {
+            return process.stdin.isTTY === true;
+        },
+        async close() {
+            rl?.close();
+            rl = null;
+            return Promise.resolve();
+        },
+    };
+}
+/**
+ * Fixed-width table rendering — the `apply-llm-response` diff table (§10.4) and
+ * `migrate --status` both print one, and neither should hand-roll padding.
+ * Cells are truncated (never wrapped) so a row is always one line.
+ */
+export function renderTable(headers, rows, maxWidths = []) {
+    const clip = (text, max) => max !== undefined && text.length > max ? `${text.slice(0, Math.max(0, max - 1))}…` : text;
+    const clipped = rows.map((row) => row.map((cell, i) => clip(cell, maxWidths[i])));
+    const all = [headers.map((h, i) => clip(h, maxWidths[i])), ...clipped];
+    const widths = headers.map((_, col) => Math.max(...all.map((row) => (row[col] ?? '').length)));
+    const line = (row) => row.map((cell, col) => cell.padEnd(widths[col] ?? 0)).join('  ').trimEnd();
+    return [
+        line(headers.map((h, i) => clip(h, maxWidths[i]))),
+        widths.map((w) => '─'.repeat(w)).join('  '),
+        ...clipped.map(line),
+    ].join('\n');
+}
+//# sourceMappingURL=io.js.map

package/dist/cli/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/cli/io.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAiCzD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpG,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACd,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;QAChB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;KACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM;IACpB,IAAI,EAAE,GAA8C,IAAI,CAAC;IACzD,MAAM,QAAQ,GAAG,GAAuC,EAAE;QACxD,EAAE,KAAK,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,CAAC,IAAI,GAAG,EAAE;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,EAAE;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC;YACtE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI;YACvC,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;iBAC1F,IAAI,EAAE;iBACN,WAAW,EAAE,CAAC;YACjB,IAAI,MAAM,KAAK,EAAE;gBAAE,OAAO,UAAU,CAAC;YACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;QAC5C,CAAC;QACD,IAAI,aAAa;YACf,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,KAAK;YACT,EAAE,EAAE,KAAK,EAAE,CAAC;YACZ,EAAE,GAAG,IAAI,CAAC;YACV,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,OAA0B,EAC1B,IAAoC,EACpC,YAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAuB,EAAU,EAAE,CAC7D,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,CAAC,GAAsB,EAAU,EAAE,CAC9C,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAE7E,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/cli/run.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The dispatcher: argv → command → exit code.
+ *
+ * Returns a code rather than calling `process.exit`, so the whole CLI is a pure
+ * function of (argv, deps) in tests — including the 06 §10.4 exit-code contract,
+ * which is asserted against this function's return value.
+ */
+import { type Command } from './command.js';
+import { type ExitCode } from './exit.js';
+import { type CliIo } from './io.js';
+import { type CliDeps } from './runtime.js';
+/** Registry order == the order `--help` lists them: setup first, then the rest. */
+export declare const COMMANDS: readonly Command[];
+export declare function findCommand(name: string): Command | undefined;
+/**
+ * True when argv asks for help — matching only tokens in FLAG POSITION.
+ *
+ * The old check was `argv.some((arg) => HELP_FLAGS.has(arg))`, which cannot tell
+ * a flag from a flag's VALUE: `--name help` and `--in help` are a connection
+ * named "help" and a bundle file named `help`, not requests for documentation.
+ * Both printed help and exited 0 — a silent no-op that a calling script reads as
+ * success. Everything after a `--` separator is passthrough and never a flag.
+ */
+export declare function wantsHelp(argv: readonly string[], command: Command): boolean;
+export interface RunCliOptions {
+    io?: CliIo;
+    deps?: CliDeps;
+    version?: string;
+}
+/**
+ * Parse and dispatch. `adminium` with no arguments runs the setup wizard, which
+ * is the whole point of `npx adminium` (01 §4.1).
+ */
+export declare function runCli(argv: readonly string[], opts?: RunCliOptions): Promise<ExitCode>;
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAqC,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAS/E,OAAO,EAAgD,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAU,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5D,mFAAmF;AACnF,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAStC,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE7D;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAQ5E;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+DjG"}

package/dist/cli/run.js

@@ -0,0 +1,139 @@
+/**
+ * The dispatcher: argv → command → exit code.
+ *
+ * Returns a code rather than calling `process.exit`, so the whole CLI is a pure
+ * function of (argv, deps) in tests — including the 06 §10.4 exit-code contract,
+ * which is asserted against this function's return value.
+ */
+import { APP_VERSION } from '../version.js';
+import { renderCommandHelp, renderRootHelp } from './command.js';
+import { applyLlmResponseCommand } from './commands/apply-llm-response.js';
+import { exportZipCommand } from './commands/export-zip.js';
+import { generatePromptCommand } from './commands/generate-prompt.js';
+import { importZipCommand } from './commands/import-zip.js';
+import { initCommand } from './commands/init.js';
+import { introspectCommand } from './commands/introspect.js';
+import { migrateCommand } from './commands/migrate.js';
+import { startCommand } from './commands/start.js';
+import { CliError, CliUsageError, EXIT_ERROR, EXIT_OK } from './exit.js';
+import { nodeIo } from './io.js';
+import { defaultCliDeps } from './runtime.js';
+/** Registry order == the order `--help` lists them: setup first, then the rest. */
+export const COMMANDS = [
+    initCommand,
+    startCommand,
+    migrateCommand,
+    introspectCommand,
+    generatePromptCommand,
+    applyLlmResponseCommand,
+    exportZipCommand,
+    importZipCommand,
+];
+export function findCommand(name) {
+    return COMMANDS.find((command) => command.name === name);
+}
+const HELP_FLAGS = new Set(['--help', '-h', 'help']);
+const VERSION_FLAGS = new Set(['--version', '-v']);
+/**
+ * Is `token` a string-valued flag of `command`, i.e. does it CONSUME the next
+ * argv token as its value? `--flag=value` carries its own value and consumes
+ * nothing.
+ */
+function consumesNextToken(token, command) {
+    if (token.includes('='))
+        return false;
+    if (token.startsWith('--')) {
+        return command.flags[token.slice(2)]?.type === 'string';
+    }
+    // A short cluster (`-abc`) can only end in a value-taking flag; resolving the
+    // last character is enough, and `-p` is the shape that actually occurs.
+    if (token.startsWith('-') && token.length >= 2) {
+        const short = token[token.length - 1];
+        return Object.values(command.flags).some((spec) => spec.short === short && spec.type === 'string');
+    }
+    return false;
+}
+/**
+ * True when argv asks for help — matching only tokens in FLAG POSITION.
+ *
+ * The old check was `argv.some((arg) => HELP_FLAGS.has(arg))`, which cannot tell
+ * a flag from a flag's VALUE: `--name help` and `--in help` are a connection
+ * named "help" and a bundle file named `help`, not requests for documentation.
+ * Both printed help and exited 0 — a silent no-op that a calling script reads as
+ * success. Everything after a `--` separator is passthrough and never a flag.
+ */
+export function wantsHelp(argv, command) {
+    for (let i = 0; i < argv.length; i += 1) {
+        const token = argv[i];
+        if (token === '--')
+            return false;
+        if (HELP_FLAGS.has(token))
+            return true;
+        if (consumesNextToken(token, command))
+            i += 1; // skip the value
+    }
+    return false;
+}
+/**
+ * Parse and dispatch. `adminium` with no arguments runs the setup wizard, which
+ * is the whole point of `npx adminium` (01 §4.1).
+ */
+export async function runCli(argv, opts = {}) {
+    const io = opts.io ?? nodeIo();
+    const deps = opts.deps ?? defaultCliDeps();
+    const version = opts.version ?? APP_VERSION;
+    const [first, ...rest] = argv;
+    if (first !== undefined && VERSION_FLAGS.has(first)) {
+        io.out(version);
+        return EXIT_OK;
+    }
+    // Bare `--help` / `help`, and `help <command>`.
+    if (first !== undefined && HELP_FLAGS.has(first)) {
+        const target = rest[0] === undefined ? undefined : findCommand(rest[0]);
+        io.out(target === undefined ? renderRootHelp(COMMANDS, version) : renderCommandHelp(target));
+        return EXIT_OK;
+    }
+    // No command → the wizard. Its own flags still parse (`adminium --port 8080`).
+    const command = first === undefined || first.startsWith('-') ? initCommand : findCommand(first);
+    const commandArgv = command === initCommand && first !== 'init' ? [...argv] : rest;
+    if (command === undefined) {
+        io.err(`Unknown command "${String(first)}".`);
+        io.err('');
+        io.err(renderRootHelp(COMMANDS, version));
+        return EXIT_ERROR;
+    }
+    // `adminium <command> --help` — before the command parses, so `--help` never
+    // has to be a flag on every command.
+    //
+    // Only tokens in FLAG POSITION count. A blind `argv.includes('--help')` also
+    // matched flag VALUES: `adminium init --name help` (a connection named
+    // "help") and `adminium import-zip --in help` (a bundle file named `help`)
+    // both printed help and returned EXIT_OK, so a script branching on exit 0
+    // concluded the command had run.
+    if (wantsHelp(commandArgv, command)) {
+        io.out(renderCommandHelp(command));
+        return EXIT_OK;
+    }
+    try {
+        return await command.run({ io, deps, argv: commandArgv });
+    }
+    catch (error) {
+        if (error instanceof CliUsageError) {
+            io.err(error.message);
+            io.err('');
+            io.err(renderCommandHelp(command));
+            return error.code;
+        }
+        if (error instanceof CliError) {
+            io.err(error.message);
+            if (error.hint !== null) {
+                io.err('');
+                io.err(error.hint);
+            }
+            return error.code;
+        }
+        io.err(error instanceof Error ? error.message : String(error));
+        return EXIT_ERROR;
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/cli/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAiB,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,MAAM,EAAc,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAgB,MAAM,cAAc,CAAC;AAE5D,mFAAmF;AACnF,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,WAAW;IACX,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,OAAgB;IACxD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC;IAC1D,CAAC;IACD,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAuB,EAAE,OAAgB;IACjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAuB,EAAE,OAAsB,EAAE;IAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IAE5C,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,OAAO,KAAK,WAAW,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,EAAE,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,6EAA6E;IAC7E,qCAAqC;IACrC,EAAE;IACF,6EAA6E;IAC7E,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACxB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACX,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC"}