@adminiumjs/adminium 0.1.0-rc.1

package/dist/export/import-service.js

@@ -0,0 +1,515 @@
+/**
+ * Zip-import service — the other half of M10-T03 (01-architecture.md §6.1,
+ * §8.2; acceptance: "Zip export from version N imports into version N+1 with all
+ * config documents upgraded to the current `v` and validating against
+ * `@adminium/engine/config`").
+ *
+ * VERSION REPLAY, the whole point of the manifest carrying versions:
+ *   1. the meta migrator brings the target's *schema* up (`firstRun`);
+ *   2. `runConfigMigrations` replays every config *document* `v` → latest;
+ *   3. `pageEnvelopeSchema` then validates the upgraded document.
+ * Order matters. Validating before migrating would reject exactly the old
+ * bundles that replay exists to accept — a v1 page must be allowed in the door
+ * so it can become a v2 page. So the bundle's row schemas (`bundle.ts`) are
+ * structural only, and `@adminium/engine/config` — the §6.1 "single validation
+ * authority ... [for] zip import" — is applied after the upgrade.
+ *
+ * A bundle from a NEWER build is refused outright (exit ≠ 0), never partially
+ * read: a build that does not understand `v: 3` would silently drop the parts of
+ * the document it cannot see, and a silent partial restore is worse than a
+ * failed one.
+ *
+ * WRITE SEMANTICS: upsert by *natural* key, not by id. A fresh target has
+ * already seeded its own built-in roles with its own ULIDs, so matching
+ * `roles.slug` (and `pages(connection_id, slug)`, `views(page_id, name)`) is
+ * what makes a round-trip land instead of colliding on a unique index. Ids are
+ * remapped accordingly and the maps are threaded into dependent rows.
+ */
+import { readFile } from 'node:fs/promises';
+import { ConfigMigrationError, configMigrations, latestConfigVersion, pageEnvelopeSchema, runConfigMigrations, } from '@adminium/engine/config';
+import { firstRun, newId, settingsRepo, writeBool } from '@adminium/meta';
+import { strFromU8, unzipSync } from 'fflate';
+import { BUNDLE_RESOURCES, MANIFEST_PATH, RESOURCE_SCHEMAS, bundleManifestSchema, resourcePath, } from './bundle.js';
+import { EXPORT_ZIP_MANIFEST_VERSION } from './zip-service.js';
+export class ImportZipError extends Error {
+    hint;
+    name = 'ImportZipError';
+    constructor(message, hint) {
+        super(message);
+        this.hint = hint;
+    }
+}
+/** Read + structurally validate the archive. No database access. */
+function parseBundle(bytes) {
+    let files;
+    try {
+        files = unzipSync(bytes);
+    }
+    catch (error) {
+        throw new ImportZipError('Could not read the archive — it is not a valid zip file.', error instanceof Error ? error.message : undefined);
+    }
+    const readJsonEntry = (path) => {
+        const entry = files[path];
+        if (entry === undefined) {
+            throw new ImportZipError(`The archive is missing "${path}" — it is not an Adminium configuration bundle.`, 'Bundles are produced by `adminium export-zip`.');
+        }
+        try {
+            return JSON.parse(strFromU8(entry));
+        }
+        catch (error) {
+            throw new ImportZipError(`"${path}" in the archive is not valid JSON.`, error instanceof Error ? error.message : undefined);
+        }
+    };
+    const manifestResult = bundleManifestSchema.safeParse(readJsonEntry(MANIFEST_PATH));
+    if (!manifestResult.success) {
+        throw new ImportZipError('The bundle manifest is malformed.', manifestResult.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('\n'));
+    }
+    const manifest = manifestResult.data;
+    if (manifest.formatVersion > EXPORT_ZIP_MANIFEST_VERSION) {
+        throw new ImportZipError(`This bundle uses layout version ${String(manifest.formatVersion)}; this build understands ` +
+            `up to ${String(EXPORT_ZIP_MANIFEST_VERSION)}.`, `The bundle was written by Adminium ${manifest.appVersion}. Upgrade to that version or later to import it.`);
+    }
+    const bundle = { manifest };
+    for (const resource of BUNDLE_RESOURCES) {
+        const raw = readJsonEntry(resourcePath(resource));
+        const parsed = RESOURCE_SCHEMAS[resource].array().safeParse(raw);
+        if (!parsed.success) {
+            throw new ImportZipError(`"${resourcePath(resource)}" is malformed.`, parsed.error.issues
+                .slice(0, 10)
+                .map((i) => `${i.path.join('.')}: ${i.message}`)
+                .join('\n'));
+        }
+        // Structurally validated above; the per-resource types line up by construction.
+        bundle[resource] = parsed.data;
+    }
+    return bundle;
+}
+/**
+ * Replay one config document forward, then validate it. `validate` is applied
+ * only after the upgrade — see this module's header for why the order is load
+ * bearing.
+ */
+function replayDocument(config, migrations, where, validator) {
+    // Documents without a `v` are not envelopes (view grid state is opaque JSON,
+    // 07 §3.18) — there is nothing to replay and nothing to validate.
+    if (typeof config !== 'object' || config === null || Array.isArray(config)) {
+        return { config, migrated: false };
+    }
+    const before = config['v'];
+    if (typeof before !== 'number')
+        return { config, migrated: false };
+    let upgraded;
+    try {
+        upgraded = runConfigMigrations(config, migrations);
+    }
+    catch (error) {
+        if (error instanceof ConfigMigrationError) {
+            throw new ImportZipError(`${where}: ${error.message}`);
+        }
+        throw error;
+    }
+    if (validator !== null) {
+        const result = validator.safeParse(upgraded);
+        if (!result.success) {
+            throw new ImportZipError(`${where}: the config document does not validate against this build's schema.`, (result.error?.issues ?? [])
+                .slice(0, 10)
+                .map((i) => `${i.path.join('.')}: ${i.message}`)
+                .join('\n'));
+        }
+    }
+    return { config: upgraded, migrated: upgraded.v !== before };
+}
+function packJson(value) {
+    return JSON.stringify(value ?? null);
+}
+/**
+ * Booleans must be bound dialect-correctly (`repos/util.ts`): better-sqlite3
+ * refuses to bind a boolean, Postgres refuses a number for a boolean column.
+ * Every boolean this module writes goes through here.
+ */
+function bool(meta, value) {
+    return writeBool(meta, value);
+}
+/**
+ * Import a configuration bundle.
+ *
+ * Everything happens inside one transaction so a bundle that fails halfway
+ * (a page that will not validate, say) leaves no half-restored instance behind.
+ */
+export const importZip = async (opts) => {
+    // Resolved ONCE and used for both the replay and the version guard below.
+    // They must never disagree: a guard that computed its target from the
+    // registered chain while the replay ran a different (or empty) one would
+    // accept a v1 document into a v2 build and store it un-migrated — the silent
+    // half-restore this service exists to prevent.
+    const chain = opts.configMigrations ?? configMigrations;
+    const dryRun = opts.dryRun ?? false;
+    const now = opts.now ?? Date.now;
+    if (opts.inPath === undefined && opts.bytes === undefined) {
+        throw new ImportZipError('No bundle given — pass a path or bytes.');
+    }
+    let bytes;
+    if (opts.bytes !== undefined) {
+        bytes = opts.bytes;
+    }
+    else {
+        try {
+            bytes = new Uint8Array(await readFile(opts.inPath));
+        }
+        catch (error) {
+            throw new ImportZipError(`Could not read ${String(opts.inPath)}.`, error instanceof Error ? error.message : undefined);
+        }
+    }
+    const bundle = parseBundle(bytes);
+    const { manifest } = bundle;
+    const warnings = [];
+    // §8.2 replay guard. `latestConfigVersion` accounts for the injected chain, so
+    // this is the same question the runner itself would ask, asked early and once.
+    const target = latestConfigVersion(chain);
+    if (manifest.configVersion > target) {
+        throw new ImportZipError(`This bundle carries config version ${String(manifest.configVersion)}; this build supports up to ` +
+            `${String(target)}.`, `The bundle was written by Adminium ${manifest.appVersion}. A bundle only imports into that ` +
+            'version or a later one — upgrade this instance rather than importing into an older build, ' +
+            'which would drop the parts of your configuration it cannot read.');
+    }
+    if (manifest.secrets.policy === 'omitted' && bundle.connections.length > 0) {
+        warnings.push(`This bundle carries no credentials for its ${String(bundle.connections.length)} connection(s): ` +
+            'any that are new to this instance need their connection string entered before they will ' +
+            'work. Connections already configured here keep the string they have.');
+    }
+    if (manifest.secrets.encrypted.length > 0) {
+        warnings.push('This bundle carries encrypted secrets; they only decrypt under the same ADMINIUM_SECRET the ' +
+            'exporting instance used. If this instance has a different secret, re-enter them.');
+    }
+    // ── replay every config document before touching the database ─────────────
+    let migratedDocuments = 0;
+    const validator = opts.envelopeSchema ?? pageEnvelopeSchema;
+    const pages = bundle.pages.map((page) => {
+        const { config, migrated } = replayDocument(page.config, chain, `pages.${page.slug}`, validator);
+        if (migrated)
+            migratedDocuments += 1;
+        return { ...page, config };
+    });
+    const views = bundle.views.map((view) => {
+        // Views hold opaque grid/layout state, not page envelopes — replay if it
+        // carries a `v`, but do not judge it against the page schema.
+        const { config, migrated } = replayDocument(view.config, chain, `views.${view.name}`, null);
+        if (migrated)
+            migratedDocuments += 1;
+        return { ...view, config };
+    });
+    const counts = {};
+    for (const resource of BUNDLE_RESOURCES) {
+        counts[resource] = bundle[resource]?.length ?? 0;
+    }
+    if (dryRun) {
+        return { manifest, counts, migratedDocuments, warnings, dryRun: true };
+    }
+    // ── the target's schema must be current before any write ──────────────────
+    await firstRun(opts.meta, now());
+    const at = now();
+    const { db } = opts.meta;
+    await db.transaction().execute(async (trx) => {
+        const settings = settingsRepo({ ...opts.meta, db: trx });
+        // settings — through settingsRepo so the registry validates every value.
+        // Unknown or invalid keys are skipped rather than aborting the whole import:
+        // a stale key in an old bundle should not make the bundle unimportable.
+        for (const row of bundle.settings) {
+            try {
+                await settings.set(row.key, row.value, { at });
+            }
+            catch {
+                warnings.push(`Skipped unknown or invalid setting "${row.key}".`);
+                counts.settings = (counts.settings ?? 1) - 1;
+            }
+        }
+        // roles — matched by slug; a fresh target already seeded its built-ins with
+        // its own ids, so the bundle's role ids are remapped, not forced.
+        const roleIdMap = new Map();
+        for (const role of bundle.roles) {
+            const existing = await trx
+                .selectFrom('adminium_roles')
+                .select('id')
+                .where('slug', '=', role.slug)
+                .executeTakeFirst();
+            if (existing) {
+                roleIdMap.set(role.id, existing.id);
+                await trx
+                    .updateTable('adminium_roles')
+                    .set({ name: role.name, description: role.description ?? null, updatedAt: at })
+                    .where('id', '=', existing.id)
+                    .execute();
+            }
+            else {
+                roleIdMap.set(role.id, role.id);
+                await trx
+                    .insertInto('adminium_roles')
+                    .values({
+                    id: role.id,
+                    slug: role.slug,
+                    name: role.name,
+                    description: role.description ?? null,
+                    isBuiltin: bool(opts.meta, role.isBuiltin),
+                    createdAt: at,
+                    updatedAt: at,
+                })
+                    .execute();
+            }
+        }
+        // role permissions — the bundle is authoritative for the roles it carries,
+        // so replace their matrix wholesale rather than merging two permission sets
+        // (a merge could only ever grant more than the export described).
+        const targetRoleIds = [...new Set(roleIdMap.values())];
+        if (targetRoleIds.length > 0) {
+            await trx
+                .deleteFrom('adminium_role_permissions')
+                .where('roleId', 'in', targetRoleIds)
+                .execute();
+        }
+        for (const permission of bundle.rolePermissions) {
+            const roleId = roleIdMap.get(permission.roleId);
+            if (roleId === undefined) {
+                warnings.push(`Dropped a permission for unknown role "${permission.roleId}".`);
+                counts.rolePermissions = (counts.rolePermissions ?? 1) - 1;
+                continue;
+            }
+            await trx
+                .insertInto('adminium_role_permissions')
+                .values({
+                id: newId('perm'),
+                roleId,
+                resourceKind: permission.resourceKind,
+                resourceRef: permission.resourceRef,
+                actions: packJson(permission.actions),
+            })
+                .execute();
+        }
+        // connections — no natural key beyond the id; upsert by id.
+        //
+        // THE DSN COLUMNS ARE ABSENT-vs-NULL SENSITIVE. A default bundle omits
+        // secrets (the shareable default), so `connection.dataDsnEncrypted` is
+        // `undefined` — "this bundle does not carry it", NOT "there is none". They
+        // were coalesced with `?? null` and written on the UPDATE path, which turned
+        // "not carried" into "erase it": re-importing a no-secrets bundle into a
+        // configured instance — the flow the docs endorse, "a re-import updates what
+        // is already there instead of duplicating it" — NULLed the live encrypted
+        // DSNs and flipped every connection to `unconfigured`. The plaintext existed
+        // only as AES-256-GCM ciphertext in the meta store and was never in the
+        // bundle, so it was gone: working credentials destroyed, silently, by a sync.
+        const secretsOmitted = manifest.secrets.policy === 'omitted';
+        let preservedDsnConnections = 0;
+        for (const connection of bundle.connections) {
+            const existing = await trx
+                .selectFrom('adminium_connections')
+                .select('id')
+                .where('id', '=', connection.id)
+                .executeTakeFirst();
+            const config = {
+                name: connection.name,
+                engine: connection.engine,
+                sourceKind: connection.sourceKind,
+                readOnly: bool(opts.meta, connection.readOnly),
+                ssl: connection.ssl == null ? null : packJson(connection.ssl),
+                settings: packJson(connection.settings),
+                updatedAt: at,
+            };
+            const dsns = {
+                introspectDsnEncrypted: connection.introspectDsnEncrypted ?? null,
+                dataDsnEncrypted: connection.dataDsnEncrypted ?? null,
+                // No DSN ⇒ the target cannot talk to the database yet. `unconfigured` is
+                // the honest status; claiming `connected` would fail on first use.
+                status: connection.dataDsnEncrypted == null ? 'unconfigured' : 'connected',
+            };
+            if (existing) {
+                // Carry the bundle's config over; touch the DSN columns only when the
+                // bundle actually carries credentials to put there.
+                if (secretsOmitted) {
+                    preservedDsnConnections += 1;
+                    await trx
+                        .updateTable('adminium_connections')
+                        .set(config)
+                        .where('id', '=', connection.id)
+                        .execute();
+                }
+                else {
+                    await trx
+                        .updateTable('adminium_connections')
+                        .set({ ...config, ...dsns })
+                        .where('id', '=', connection.id)
+                        .execute();
+                }
+            }
+            else {
+                await trx
+                    .insertInto('adminium_connections')
+                    .values({ id: connection.id, ...config, ...dsns, createdAt: at })
+                    .execute();
+            }
+        }
+        if (preservedDsnConnections > 0) {
+            warnings.push(`Kept the existing connection string for ${String(preservedDsnConnections)} connection(s) ` +
+                'already on this instance: this bundle carries no credentials, so it has nothing to ' +
+                'replace them with.');
+        }
+        const connectionIds = new Set(bundle.connections.map((c) => c.id));
+        // snapshots — upsert by id; each belongs to a connection in this bundle.
+        for (const snapshot of bundle.snapshots) {
+            if (!connectionIds.has(snapshot.connectionId)) {
+                warnings.push(`Dropped a schema snapshot for unknown connection "${snapshot.connectionId}".`);
+                counts.snapshots = (counts.snapshots ?? 1) - 1;
+                continue;
+            }
+            const existing = await trx
+                .selectFrom('adminium_schema_snapshots')
+                .select('id')
+                .where('id', '=', snapshot.id)
+                .executeTakeFirst();
+            if (existing)
+                continue; // snapshots are immutable (07 §3.14)
+            // Exactly one active snapshot per connection is app-enforced; clear the
+            // incumbent inside this transaction rather than trusting the target's state.
+            if (snapshot.isActive) {
+                await trx
+                    .updateTable('adminium_schema_snapshots')
+                    .set({ isActive: bool(opts.meta, false) })
+                    .where('connectionId', '=', snapshot.connectionId)
+                    .execute();
+            }
+            await trx
+                .insertInto('adminium_schema_snapshots')
+                .values({
+                id: snapshot.id,
+                connectionId: snapshot.connectionId,
+                source: snapshot.source,
+                importFormat: snapshot.importFormat ?? null,
+                engineVersion: snapshot.engineVersion ?? null,
+                schema: packJson(snapshot.schema),
+                stats: snapshot.stats == null ? null : packJson(snapshot.stats),
+                checksum: snapshot.checksum,
+                isActive: bool(opts.meta, snapshot.isActive),
+                createdAt: at,
+            })
+                .execute();
+        }
+        // overrides — upsert by id.
+        for (const override of bundle.overrides) {
+            if (!connectionIds.has(override.connectionId)) {
+                warnings.push(`Dropped a schema override for unknown connection "${override.connectionId}".`);
+                counts.overrides = (counts.overrides ?? 1) - 1;
+                continue;
+            }
+            const existing = await trx
+                .selectFrom('adminium_schema_overrides')
+                .select('id')
+                .where('id', '=', override.id)
+                .executeTakeFirst();
+            const shared = {
+                connectionId: override.connectionId,
+                op: override.op,
+                tableName: override.tableName,
+                columnName: override.columnName ?? null,
+                value: packJson(override.value),
+                origin: override.origin,
+                status: override.status,
+                confidence: override.confidence ?? null,
+                updatedAt: at,
+            };
+            if (existing) {
+                await trx.updateTable('adminium_schema_overrides').set(shared).where('id', '=', override.id).execute();
+            }
+            else {
+                await trx
+                    .insertInto('adminium_schema_overrides')
+                    .values({ id: override.id, ...shared, createdAt: at })
+                    .execute();
+            }
+        }
+        // pages — matched on the (connection_id, slug) unique index.
+        const snapshotIds = new Set(bundle.snapshots.map((s) => s.id));
+        const pageIdMap = new Map();
+        for (const page of pages) {
+            if (page.connectionId !== null && !connectionIds.has(page.connectionId)) {
+                warnings.push(`Dropped page "${page.slug}" — it belongs to a connection not in this bundle.`);
+                counts.pages = (counts.pages ?? 1) - 1;
+                continue;
+            }
+            let query = trx.selectFrom('adminium_pages').select(['id', 'revision']).where('slug', '=', page.slug);
+            query = page.connectionId === null
+                ? query.where('connectionId', 'is', null)
+                : query.where('connectionId', '=', page.connectionId);
+            const existing = await query.executeTakeFirst();
+            const shared = {
+                type: page.type,
+                title: page.title,
+                icon: page.icon ?? null,
+                navGroup: page.navGroup ?? null,
+                navOrder: page.navOrder,
+                config: packJson(page.config),
+                origin: page.origin,
+                generatedFromSnapshotId: page.generatedFromSnapshotId != null && snapshotIds.has(page.generatedFromSnapshotId)
+                    ? page.generatedFromSnapshotId
+                    : null,
+                isEnabled: bool(opts.meta, page.isEnabled),
+                updatedAt: at,
+            };
+            if (existing) {
+                pageIdMap.set(page.id, existing.id);
+                await trx
+                    .updateTable('adminium_pages')
+                    // Bump the revision: watchers hold optimistic-concurrency tokens and an
+                    // import is a write like any other (07 §3.16).
+                    .set({ ...shared, revision: existing.revision + 1 })
+                    .where('id', '=', existing.id)
+                    .execute();
+            }
+            else {
+                pageIdMap.set(page.id, page.id);
+                await trx
+                    .insertInto('adminium_pages')
+                    .values({
+                    id: page.id,
+                    connectionId: page.connectionId,
+                    slug: page.slug,
+                    ...shared,
+                    manifestId: null,
+                    revision: 1,
+                    createdAt: at,
+                })
+                    .execute();
+            }
+        }
+        // views — shared views only; matched on (page_id, user_id IS NULL, name).
+        for (const view of views) {
+            const pageId = pageIdMap.get(view.pageId);
+            if (pageId === undefined) {
+                warnings.push(`Dropped view "${view.name}" — its page is not in this bundle.`);
+                counts.views = (counts.views ?? 1) - 1;
+                continue;
+            }
+            const existing = await trx
+                .selectFrom('adminium_views')
+                .select('id')
+                .where('pageId', '=', pageId)
+                .where('userId', 'is', null)
+                .where('name', '=', view.name)
+                .executeTakeFirst();
+            const shared = {
+                kind: view.kind,
+                config: packJson(view.config),
+                isDefault: bool(opts.meta, view.isDefault),
+                updatedAt: at,
+            };
+            if (existing) {
+                await trx.updateTable('adminium_views').set(shared).where('id', '=', existing.id).execute();
+            }
+            else {
+                await trx
+                    .insertInto('adminium_views')
+                    .values({ id: view.id, pageId, userId: null, name: view.name, ...shared, createdAt: at })
+                    .execute();
+            }
+        }
+    });
+    return { manifest, counts, migratedDocuments, warnings, dryRun: false };
+};
+//# sourceMappingURL=import-service.js.map

package/dist/export/import-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-service.js","sourceRoot":"","sources":["../../src/export/import-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAe,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,GAGb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAa/D,MAAM,OAAO,cAAe,SAAQ,KAAK;IAI5B;IAHO,IAAI,GAAG,gBAAgB,CAAC;IAC1C,YACE,OAAe,EACN,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAS;IAGxB,CAAC;CACF;AA+CD,oEAAoE;AACpE,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CACtB,0DAA0D,EAC1D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAW,EAAE;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CACtB,2BAA2B,IAAI,iDAAiD,EAChF,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CACtB,IAAI,IAAI,qCAAqC,EAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,oBAAoB,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,cAAc,CACtB,mCAAmC,EACnC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;IAErC,IAAI,QAAQ,CAAC,aAAa,GAAG,2BAA2B,EAAE,CAAC;QACzD,MAAM,IAAI,cAAc,CACtB,mCAAmC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,2BAA2B;YAC1F,SAAS,MAAM,CAAC,2BAA2B,CAAC,GAAG,EACjD,sCAAsC,QAAQ,CAAC,UAAU,kDAAkD,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAkB,CAAC;IAC5C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CACtB,IAAI,YAAY,CAAC,QAAQ,CAAC,iBAAiB,EAC3C,MAAM,CAAC,KAAK,CAAC,MAAM;iBAChB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;QACD,gFAAgF;QAC/E,MAA6C,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD;;;;GAIG;AACH,SAAS,cAAc,CACrB,MAAe,EACf,UAAsC,EACtC,KAAa,EACb,SAAmC;IAEnC,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAI,MAAkC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAEnE,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CACtB,GAAG,KAAK,sEAAsE,EAC9E,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;iBACzB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,SAAS,IAAI,CAAC,IAAY,EAAE,KAAc;IACxC,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAc,KAAK,EAAE,IAAI,EAAE,EAAE;IACjD,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,6EAA6E;IAC7E,+CAA+C;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEjC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,KAAiB,CAAC;IACtB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CACtB,kBAAkB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EACxC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,sCAAsC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,8BAA8B;YAChG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EACtB,sCAAsC,QAAQ,CAAC,UAAU,oCAAoC;YAC3F,4FAA4F;YAC5F,kEAAkE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,QAAQ,CAAC,IAAI,CACX,8CAA8C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB;YAC/F,0FAA0F;YAC1F,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CACX,8FAA8F;YAC5F,kFAAkF,CACrF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;QACjG,IAAI,QAAQ;YAAE,iBAAiB,IAAI,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,yEAAyE;QACzE,8DAA8D;QAC9D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5F,IAAI,QAAQ;YAAE,iBAAiB,IAAI,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,GAAI,MAA+C,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzE,CAAC;IAED,6EAA6E;IAC7E,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAEzB,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEzD,yEAAyE;QACzE,6EAA6E;QAC7E,wEAAwE;QACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAY,EAAE,GAAG,CAAC,KAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBAClE,MAAM,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;iBAC7B,gBAAgB,EAAE,CAAC;YACtB,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACpC,MAAM,GAAG;qBACN,WAAW,CAAC,gBAAgB,CAAC;qBAC7B,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBAC9E,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;qBAC7B,OAAO,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,GAAG;qBACN,UAAU,CAAC,gBAAgB,CAAC;qBAC5B,MAAM,CAAC;oBACN,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC1C,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,EAAE;iBACd,CAAC;qBACD,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG;iBACN,UAAU,CAAC,2BAA2B,CAAC;iBACvC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC;iBACpC,OAAO,EAAE,CAAC;QACf,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,0CAA0C,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC/E,MAAM,CAAC,eAAe,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,MAAM,GAAG;iBACN,UAAU,CAAC,2BAA2B,CAAC;iBACvC,MAAM,CAAC;gBACN,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;gBACjB,MAAM;gBACN,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;aACtC,CAAC;iBACD,OAAO,EAAE,CAAC;QACf,CAAC;QAED,4DAA4D;QAC5D,EAAE;QACF,uEAAuE;QACvE,uEAAuE;QACvE,2EAA2E;QAC3E,6EAA6E;QAC7E,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,6EAA6E;QAC7E,wEAAwE;QACxE,8EAA8E;QAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,IAAI,uBAAuB,GAAG,CAAC,CAAC;QAChC,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,UAAU,CAAC,sBAAsB,CAAC;iBAClC,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;iBAC/B,gBAAgB,EAAE,CAAC;YAEtB,MAAM,MAAM,GAAG;gBACb,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;gBAC9C,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC7D,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACvC,SAAS,EAAE,EAAE;aACd,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,sBAAsB,EAAE,UAAU,CAAC,sBAAsB,IAAI,IAAI;gBACjE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI;gBACrD,yEAAyE;gBACzE,mEAAmE;gBACnE,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW;aAC3E,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,sEAAsE;gBACtE,oDAAoD;gBACpD,IAAI,cAAc,EAAE,CAAC;oBACnB,uBAAuB,IAAI,CAAC,CAAC;oBAC7B,MAAM,GAAG;yBACN,WAAW,CAAC,sBAAsB,CAAC;yBACnC,GAAG,CAAC,MAAM,CAAC;yBACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;yBAC/B,OAAO,EAAE,CAAC;gBACf,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG;yBACN,WAAW,CAAC,sBAAsB,CAAC;yBACnC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;yBAC3B,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;yBAC/B,OAAO,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG;qBACN,UAAU,CAAC,sBAAsB,CAAC;qBAClC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBAChE,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,uBAAuB,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CACX,2CAA2C,MAAM,CAAC,uBAAuB,CAAC,iBAAiB;gBACzF,qFAAqF;gBACrF,oBAAoB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEnE,yEAAyE;QACzE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC,qDAAqD,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC9F,MAAM,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;iBAC7B,gBAAgB,EAAE,CAAC;YACtB,IAAI,QAAQ;gBAAE,SAAS,CAAC,qCAAqC;YAC7D,wEAAwE;YACxE,6EAA6E;YAC7E,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG;qBACN,WAAW,CAAC,2BAA2B,CAAC;qBACxC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;qBACzC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC;qBACjD,OAAO,EAAE,CAAC;YACf,CAAC;YACD,MAAM,GAAG;iBACN,UAAU,CAAC,2BAA2B,CAAC;iBACvC,MAAM,CAAC;gBACN,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,IAAI;gBAC3C,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI;gBAC7C,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC/D,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAC5C,SAAS,EAAE,EAAE;aACd,CAAC;iBACD,OAAO,EAAE,CAAC;QACf,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC,qDAAqD,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC9F,MAAM,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;iBAC7B,gBAAgB,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG;gBACb,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;gBACvC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;gBACvC,SAAS,EAAE,EAAE;aACd,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACzG,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG;qBACN,UAAU,CAAC,2BAA2B,CAAC;qBACvC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBACrD,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;gBAC9F,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,IAAI,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACtG,KAAK,GAAG,IAAI,CAAC,YAAY,KAAK,IAAI;gBAChC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC;gBACzC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAEhD,MAAM,MAAM,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,uBAAuB,EACrB,IAAI,CAAC,uBAAuB,IAAI,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC;oBACnF,CAAC,CAAC,IAAI,CAAC,uBAAuB;oBAC9B,CAAC,CAAC,IAAI;gBACV,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC1C,SAAS,EAAE,EAAE;aACd,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACpC,MAAM,GAAG;qBACN,WAAW,CAAC,gBAAgB,CAAC;oBAC9B,wEAAwE;oBACxE,+CAA+C;qBAC9C,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;qBACnD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;qBAC7B,OAAO,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,GAAG;qBACN,UAAU,CAAC,gBAAgB,CAAC;qBAC5B,MAAM,CAAC;oBACN,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,MAAM;oBACT,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,CAAC;oBACX,SAAS,EAAE,EAAE;iBACd,CAAC;qBACD,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,qCAAqC,CAAC,CAAC;gBAC/E,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG;iBACvB,UAAU,CAAC,gBAAgB,CAAC;iBAC5B,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;iBAC3B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;iBAC7B,gBAAgB,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC1C,SAAS,EAAE,EAAE;aACd,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG;qBACN,UAAU,CAAC,gBAAgB,CAAC;qBAC5B,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBACxF,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC,CAAC"}

package/dist/export/readme.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The bundle's README. Its whole job is to answer, before anyone opens
+ * `config/`, the question this export is most likely to be misread as: "is this
+ * my admin panel's source code?" It is not, it never will be, and the first
+ * heading says so (BRIEF §3 / 16-milestones M10-T03).
+ *
+ * Not user-facing dashboard copy — this is a file written into a downloadable
+ * artifact, so it is deliberately plain English and not routed through i18n
+ * (t('key') has no meaning in a zip read outside the app).
+ */
+import type { BundleManifest } from './bundle.js';
+/** Render the bundle README for `manifest`. */
+export declare function renderReadme(manifest: BundleManifest): string;
+/**
+ * The bundle's `package.json`. Pins the published package exactly: a bundle
+ * that replayed into a *different* build than the one it names would defeat
+ * the point of the manifest carrying versions at all.
+ *
+ * The dependency key MUST come from `NPM_PACKAGE_NAME` and never be the bare
+ * string `adminium`: that unscoped npm name is an unrelated third party's
+ * package, so a hand-written pin would send restorers to install a stranger's
+ * library (and fail outright, since its versions start at 1.0.0).
+ */
+export declare function renderPackageJson(manifest: BundleManifest): string;
+//# sourceMappingURL=readme.d.ts.map

package/dist/export/readme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readme.d.ts","sourceRoot":"","sources":["../../src/export/readme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAsClD,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CA2F7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAclE"}