@adminiumjs/adminium 0.1.0-rc.1

package/dist/export/bundle.js

@@ -0,0 +1,172 @@
+/**
+ * The bundle format: layout, manifest, and the Zod schemas both front doors
+ * (export, import) validate against (M10-T03; 01-architecture.md §6.1, §8.2).
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHAT THIS IS, STATED ONCE SO IT CANNOT DRIFT: an Adminium bundle is
+ * **configuration for a server, not a server and not source code**. Adminium
+ * interprets config at runtime; it never emits an app. The bundle therefore
+ * carries the instance's `adminium_*` config content as portable JSON, plus a
+ * manifest that pins the versions needed to replay it, plus a README saying
+ * exactly this. `package.json` in the bundle pins the `@adminiumjs/adminium` npm package at
+ * the exporting version — per 01 §4.1 that single package *is* the complete
+ * install (server + dashboard dist + meta migrations), so pinning it is how the
+ * bundle names its runtime without shipping (unshippable, platform-specific,
+ * natively-compiled) copies of it.
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * VERSION REPLAY (§8.2): the manifest embeds `{ appVersion, configVersion,
+ * metaVersion }`. On import the meta migrator brings the target schema up, and
+ * `runConfigMigrations` from `@adminium/engine/config` replays every config
+ * document's `v` up to the running build's — so a bundle exported at N imports
+ * into any instance at ≥ N. A bundle from a *newer* build is refused rather
+ * than silently half-read.
+ */
+import { z } from 'zod';
+/** Bundle root inside the archive — one directory, so unzipping is tidy. */
+export const BUNDLE_ROOT = 'adminium-export';
+export const MANIFEST_PATH = `${BUNDLE_ROOT}/manifest.json`;
+export const README_PATH = `${BUNDLE_ROOT}/README.md`;
+export const PACKAGE_JSON_PATH = `${BUNDLE_ROOT}/package.json`;
+export const CONFIG_DIR = `${BUNDLE_ROOT}/config`;
+/** The config resources the bundle carries, in import (FK-safe) order. */
+export const BUNDLE_RESOURCES = [
+    'settings',
+    'roles',
+    'rolePermissions',
+    'connections',
+    'snapshots',
+    'overrides',
+    'pages',
+    'views',
+];
+export function resourcePath(resource) {
+    return `${CONFIG_DIR}/${resource}.json`;
+}
+// ─── Manifest ────────────────────────────────────────────────────────────────
+/**
+ * How secrets were treated. `omitted` is the default and means the target must
+ * re-enter DSNs and provider keys. `encrypted` means the ciphertext travelled
+ * and only the *same* `ADMINIUM_SECRET` can re-open it — stated explicitly so a
+ * bundle can never be mistaken for a self-contained credential store.
+ */
+export const secretsPolicySchema = z.enum(['omitted', 'encrypted']);
+export const bundleManifestSchema = z.object({
+    /** Bundle-layout version; bumped when this file's shape changes. */
+    formatVersion: z.number().int().min(1),
+    /** The `adminium` version that wrote the bundle (§8.2). */
+    appVersion: z.string().min(1),
+    /** Config-envelope version of the documents inside (§6.1 `v`, §8.2). */
+    configVersion: z.number().int().min(1),
+    /** Meta-schema high-water mark: the last applied migration name (§8.2). */
+    metaVersion: z.string().min(1),
+    exportedAt: z.number().int().nonnegative(),
+    /** Set when the export was scoped to one connection. */
+    connectionId: z.string().nullable(),
+    secrets: z.object({
+        policy: secretsPolicySchema,
+        /**
+         * Keys/columns carried as AES-256-GCM ciphertext. Non-empty ⇒ the bundle is
+         * sensitive and needs the source instance's ADMINIUM_SECRET.
+         */
+        encrypted: z.array(z.string()),
+        /** Secret settings dropped because secrets were not requested. */
+        omitted: z.array(z.string()),
+    }),
+    counts: z.record(z.string(), z.number().int().nonnegative()),
+});
+// ─── Resource payloads ───────────────────────────────────────────────────────
+/**
+ * Rows are validated structurally (ids/strings/JSON), not semantically: the
+ * semantic authority for a page's `config` is `@adminium/engine/config`, and the
+ * import runs documents through it *after* the config migrations replay. Keeping
+ * these loose is deliberate — a v1 bundle's page config must be allowed in the
+ * door so it can be migrated to v2; validating it against today's schema first
+ * would reject exactly the old bundles version replay exists to accept.
+ */
+const jsonValue = z.unknown();
+const id = z.string().min(1);
+export const settingsRowSchema = z.object({ key: z.string().min(1), value: jsonValue });
+export const roleRowSchema = z.object({
+    id,
+    slug: z.string().min(1),
+    name: z.string(),
+    description: z.string().nullable().optional(),
+    isBuiltin: z.boolean(),
+});
+export const rolePermissionRowSchema = z.object({
+    id,
+    roleId: id,
+    resourceKind: z.string(),
+    resourceRef: z.string(),
+    actions: jsonValue,
+});
+export const connectionRowSchema = z.object({
+    id,
+    name: z.string(),
+    engine: z.string(),
+    sourceKind: z.string(),
+    readOnly: z.boolean(),
+    ssl: jsonValue.nullable().optional(),
+    settings: jsonValue,
+    /** Ciphertext, present only in an `encrypted`-policy bundle. */
+    introspectDsnEncrypted: z.string().nullable().optional(),
+    dataDsnEncrypted: z.string().nullable().optional(),
+});
+export const snapshotRowSchema = z.object({
+    id,
+    connectionId: id,
+    source: z.string(),
+    importFormat: z.string().nullable().optional(),
+    engineVersion: z.string().nullable().optional(),
+    schema: jsonValue,
+    stats: jsonValue.nullable().optional(),
+    checksum: z.string(),
+    isActive: z.boolean(),
+});
+export const overrideRowSchema = z.object({
+    id,
+    connectionId: id,
+    op: z.string(),
+    tableName: z.string(),
+    columnName: z.string().nullable().optional(),
+    value: jsonValue,
+    origin: z.string(),
+    status: z.string(),
+    confidence: z.number().nullable().optional(),
+});
+export const pageRowSchema = z.object({
+    id,
+    connectionId: id.nullable(),
+    slug: z.string(),
+    type: z.string(),
+    title: z.string(),
+    icon: z.string().nullable().optional(),
+    navGroup: z.string().nullable().optional(),
+    navOrder: z.number(),
+    config: jsonValue,
+    origin: z.string(),
+    generatedFromSnapshotId: id.nullable().optional(),
+    isEnabled: z.boolean(),
+});
+export const viewRowSchema = z.object({
+    id,
+    pageId: id,
+    kind: z.string(),
+    name: z.string(),
+    config: jsonValue,
+    isDefault: z.boolean(),
+});
+/** Resource name → row schema. The import iterates this, so a resource without
+ *  a schema cannot be imported by accident. */
+export const RESOURCE_SCHEMAS = {
+    settings: settingsRowSchema,
+    roles: roleRowSchema,
+    rolePermissions: rolePermissionRowSchema,
+    connections: connectionRowSchema,
+    snapshots: snapshotRowSchema,
+    overrides: overrideRowSchema,
+    pages: pageRowSchema,
+    views: viewRowSchema,
+};
+//# sourceMappingURL=bundle.js.map

package/dist/export/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/export/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,WAAW,gBAAgB,CAAC;AAC5D,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,WAAW,YAAY,CAAC;AACtD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,WAAW,eAAe,CAAC;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,WAAW,SAAS,CAAC;AAElD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU;IACV,OAAO;IACP,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,WAAW;IACX,OAAO;IACP,OAAO;CACC,CAAC;AAIX,MAAM,UAAU,YAAY,CAAC,QAAwB;IACnD,OAAO,GAAG,UAAU,IAAI,QAAQ,OAAO,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAGpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,oEAAoE;IACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,2DAA2D;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,wEAAwE;IACxE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,wDAAwD;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,mBAAmB;QAC3B;;;WAGG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,kEAAkE;QAClE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;CAC7D,CAAC,CAAC;AAIH,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE;IACF,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,SAAS;IACnB,gEAAgE;IAChE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE;IACF,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE;IACF,YAAY,EAAE,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE;IACF,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,uBAAuB,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE;IACF,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH;+CAC+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,iBAAiB;IAC3B,KAAK,EAAE,aAAa;IACpB,eAAe,EAAE,uBAAuB;IACxC,WAAW,EAAE,mBAAmB;IAChC,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;CACgC,CAAC"}

package/dist/export/import-service.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Zip-import service — the other half of M10-T03 (01-architecture.md §6.1,
+ * §8.2; acceptance: "Zip export from version N imports into version N+1 with all
+ * config documents upgraded to the current `v` and validating against
+ * `@adminium/engine/config`").
+ *
+ * VERSION REPLAY, the whole point of the manifest carrying versions:
+ *   1. the meta migrator brings the target's *schema* up (`firstRun`);
+ *   2. `runConfigMigrations` replays every config *document* `v` → latest;
+ *   3. `pageEnvelopeSchema` then validates the upgraded document.
+ * Order matters. Validating before migrating would reject exactly the old
+ * bundles that replay exists to accept — a v1 page must be allowed in the door
+ * so it can become a v2 page. So the bundle's row schemas (`bundle.ts`) are
+ * structural only, and `@adminium/engine/config` — the §6.1 "single validation
+ * authority ... [for] zip import" — is applied after the upgrade.
+ *
+ * A bundle from a NEWER build is refused outright (exit ≠ 0), never partially
+ * read: a build that does not understand `v: 3` would silently drop the parts of
+ * the document it cannot see, and a silent partial restore is worse than a
+ * failed one.
+ *
+ * WRITE SEMANTICS: upsert by *natural* key, not by id. A fresh target has
+ * already seeded its own built-in roles with its own ULIDs, so matching
+ * `roles.slug` (and `pages(connection_id, slug)`, `views(page_id, name)`) is
+ * what makes a round-trip land instead of colliding on a unique index. Ids are
+ * remapped accordingly and the maps are threaded into dependent rows.
+ */
+import { type ConfigMigration } from '@adminium/engine/config';
+import { type MetaDb } from '@adminium/meta';
+import { type BundleManifest } from './bundle.js';
+/** The slice of a Zod schema this module needs — see `envelopeSchema`. */
+export interface SafeParseLike {
+    success: boolean;
+    error?: {
+        issues: {
+            path: PropertyKey[];
+            message: string;
+        }[];
+    } | undefined;
+}
+/** A validator for a config envelope: the `safeParse` surface, nothing more. */
+export interface EnvelopeValidator {
+    safeParse: (doc: unknown) => SafeParseLike;
+}
+export declare class ImportZipError extends Error {
+    readonly hint?: string | undefined;
+    readonly name = "ImportZipError";
+    constructor(message: string, hint?: string | undefined);
+}
+export interface ImportZipOptions {
+    /** The meta store to import into. */
+    meta: MetaDb;
+    /** Path to the `.zip` to read. Mutually exclusive with {@link bytes}. */
+    inPath?: string | undefined;
+    /** Archive bytes, when the caller already has them (tests, HTTP upload). */
+    bytes?: Uint8Array | undefined;
+    /** Validate + report without writing anything. */
+    dryRun?: boolean | undefined;
+    /**
+     * Config-migration chain — defaults to the build's registered migrations.
+     * Injectable (the same affordance `@adminium/meta`'s migrator offers with
+     * `MigratorOptions.migrations`) so the replay path can be exercised against a
+     * synthetic v1→v2 step while the shipped chain is still empty.
+     */
+    configMigrations?: readonly ConfigMigration[] | undefined;
+    /**
+     * The envelope validator. **Tests only** — production must use the default,
+     * because `@adminium/engine/config` is the §6.1 "single validation authority
+     * ... [for] zip import" and a caller supplying its own would be exactly the
+     * fork that rule exists to prevent.
+     *
+     * It exists because the validator and the migration chain are one world: the
+     * shipped envelope pins `v: literal(CONFIG_VERSION)`, so injecting a v1→v2
+     * migration without a v2-aware validator would describe a build that cannot
+     * exist. Overriding one requires overriding the other.
+     */
+    envelopeSchema?: EnvelopeValidator | undefined;
+    /** Clock override — tests. */
+    now?: () => number;
+}
+export interface ImportZipResult {
+    manifest: BundleManifest;
+    /** Rows written (or that would be written, under `dryRun`) per resource. */
+    counts: Readonly<Record<string, number>>;
+    /** Config documents whose `v` was upgraded on the way in. */
+    migratedDocuments: number;
+    /** Non-fatal notes — dangling refs dropped, secrets that need re-entering. */
+    warnings: string[];
+    dryRun: boolean;
+}
+export type ImportZip = (opts: ImportZipOptions) => Promise<ImportZipResult>;
+/**
+ * Import a configuration bundle.
+ *
+ * Everything happens inside one transaction so a bundle that fails halfway
+ * (a page that will not validate, say) leaves no half-restored instance behind.
+ */
+export declare const importZip: ImportZip;
+//# sourceMappingURL=import-service.d.ts.map

package/dist/export/import-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-service.d.ts","sourceRoot":"","sources":["../../src/export/import-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA4C,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGvF,OAAO,EAML,KAAK,cAAc,EAEpB,MAAM,aAAa,CAAC;AAGrB,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE;YAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC;CAC5E;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,aAAa,CAAC;CAC5C;AAED,qBAAa,cAAe,SAAQ,KAAK;IAIrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IAHxB,SAAkB,IAAI,oBAAoB;gBAExC,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;CAIzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,kDAAkD;IAClD,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,4EAA4E;IAC5E,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzC,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAmI7E;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,SAiZvB,CAAC"}