@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/generate/index.js

@@ -0,0 +1,80 @@
+/**
+ * Generation route (M4-T08 — "the zero manual config default"):
+ *
+ *   POST /api/v1/connections/:id/generate
+ *
+ * Loads the latest classified snapshot (running introspection first when the
+ * connection has none), computes the v1 page set (`page-crud` per included
+ * table + one `page-dashboard` per FK-cluster domain), persists it
+ * idempotently to `adminium_pages`, audits the run, and publishes a
+ * `config-changed` realtime event so open dashboards re-bootstrap
+ * (09-generated-app.md §2.1 step 5).
+ *
+ * Guarded by `system:connections:manage` like the sibling connection routes.
+ */
+import { pagesRepo } from '@adminium/meta';
+import { runGeneration } from '../../generate/run.js';
+import { CONNECTIONS_MANAGE } from '../connections/index.js';
+import { generateBody, generateParams, generateReply } from './schema.js';
+export function generateRoutes(deps) {
+    const { manager, meta } = deps;
+    return async (app) => {
+        app.post('/connections/:id/generate', {
+            preHandler: app.rbac.require(CONNECTIONS_MANAGE),
+            schema: {
+                params: generateParams,
+                body: generateBody,
+                response: { 200: generateReply },
+            },
+        }, async (request) => {
+            const connection = await manager.mustFind(request.params.id);
+            const actorId = request.apiKeyPrincipal === null
+                ? (request.user?.id ?? null)
+                : null;
+            const run = await runGeneration({
+                manager,
+                meta,
+                connectionId: connection.id,
+                createdBy: actorId,
+                intent: request.body?.intent,
+            });
+            await app.rbac.audit(request, {
+                category: 'schema',
+                action: 'schema.generate',
+                connectionId: connection.id,
+                changes: {
+                    after: {
+                        snapshotId: run.snapshotId,
+                        intent: run.intent,
+                        pages: run.pages.length,
+                        created: run.persistence.created,
+                        updated: run.persistence.updated,
+                        unchanged: run.persistence.unchanged,
+                        pruned: run.persistence.pruned,
+                        skippedEdited: run.persistence.skippedEdited.length,
+                        keptEdited: run.persistence.keptEdited.length,
+                    },
+                },
+            });
+            // Open dashboards drop stale caches on config-changed (09 §2.1).
+            if (app.hasDecorator('realtime')) {
+                app.realtime.publish('config-changed', 'config-changed', {
+                    connectionId: connection.id,
+                    configVersion: await pagesRepo(meta).configVersion(),
+                });
+            }
+            return {
+                pages: run.pages.length,
+                navGroups: run.navGroups,
+                snapshotId: run.snapshotId,
+                introspected: run.introspected,
+                intent: run.intent,
+                result: run.persistence,
+                llmPagesMaterialized: run.llmPagesMaterialized,
+                warnings: run.warnings,
+                durationMs: run.durationMs,
+            };
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/generate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/generate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,SAAS,EAAe,MAAM,gBAAgB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO1E,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAE/B,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,GAAG,CAAC,IAAI,CACN,2BAA2B,EAC3B;YACE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChD,MAAM,EAAE;gBACN,MAAM,EAAE,cAAc;gBACtB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;aACjC;SACF,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,GACX,OAAO,CAAC,eAAe,KAAK,IAAI;gBAC9B,CAAC,CAAC,CAAE,OAAiD,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;gBACvE,CAAC,CAAC,IAAI,CAAC;YAEX,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,OAAO;gBACP,IAAI;gBACJ,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM;aAC7B,CAAC,CAAC;YAEH,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,iBAAiB;gBACzB,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;wBACvB,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO;wBAChC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO;wBAChC,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS;wBACpC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM;wBAC9B,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM;wBACnD,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM;qBAC9C;iBACF;aACF,CAAC,CAAC;YAEH,iEAAiE;YACjE,IAAI,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;oBACvD,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,aAAa,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACvB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,WAAW;gBACvB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;gBAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/generate/schema.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Zod request/response schemas for `routes/generate/` (M4-T08; the M5
+ * `/regenerate` review flow from 05 §11 builds on the same shapes).
+ */
+import { z } from 'zod';
+export declare const generateParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+/** Body is optional (POSTs without one arrive as null); a provided intent overrides the connection setting for this run. */
+export declare const generateBody: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    intent: z.ZodOptional<z.ZodEnum<{
+        "full-admin": "full-admin";
+        "read-only-analytics": "read-only-analytics";
+        crud: "crud";
+        "support-console": "support-console";
+    }>>;
+}, z.core.$strip>>>;
+export declare const generateReply: z.ZodObject<{
+    pages: z.ZodNumber;
+    navGroups: z.ZodArray<z.ZodString>;
+    snapshotId: z.ZodString;
+    introspected: z.ZodBoolean;
+    intent: z.ZodEnum<{
+        "full-admin": "full-admin";
+        "read-only-analytics": "read-only-analytics";
+        crud: "crud";
+        "support-console": "support-console";
+    }>;
+    result: z.ZodObject<{
+        created: z.ZodNumber;
+        updated: z.ZodNumber;
+        unchanged: z.ZodNumber;
+        pruned: z.ZodNumber;
+        preserved: z.ZodArray<z.ZodString>;
+        skippedEdited: z.ZodArray<z.ZodString>;
+        keptEdited: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    llmPagesMaterialized: z.ZodNumber;
+    warnings: z.ZodArray<z.ZodString>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>;
+export type GenerateReply = z.infer<typeof generateReply>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/generate/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/generate/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,cAAc;;iBAAsC,CAAC;AAElE,4HAA4H;AAC5H,eAAO,MAAM,YAAY;;;;;;;mBAEb,CAAC;AAEb,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;iBAwBxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/routes/generate/schema.js

@@ -0,0 +1,37 @@
+/**
+ * Zod request/response schemas for `routes/generate/` (M4-T08; the M5
+ * `/regenerate` review flow from 05 §11 builds on the same shapes).
+ */
+import { z } from 'zod';
+import { generateIntentSchema } from '@adminium/engine';
+export const generateParams = z.object({ id: z.string().min(1) });
+/** Body is optional (POSTs without one arrive as null); a provided intent overrides the connection setting for this run. */
+export const generateBody = z
+    .object({ intent: generateIntentSchema.optional() })
+    .nullish();
+export const generateReply = z.object({
+    /** Number of pages the generator now owns for this connection. */
+    pages: z.number().int().nonnegative(),
+    /** Distinct nav groups the emitted pages landed in (09 §2.2 five-group set). */
+    navGroups: z.array(z.string()),
+    snapshotId: z.string(),
+    /** True when generation had to run introspection first. */
+    introspected: z.boolean(),
+    intent: generateIntentSchema,
+    result: z.object({
+        created: z.number().int().nonnegative(),
+        updated: z.number().int().nonnegative(),
+        unchanged: z.number().int().nonnegative(),
+        pruned: z.number().int().nonnegative(),
+        preserved: z.array(z.string()),
+        /** Human-edited generated pages left untouched (user delta wins, 04 §6.3). */
+        skippedEdited: z.array(z.string()),
+        /** Human-edited pages the generator dropped — kept instead of pruned (user delta wins extends to deletion). */
+        keptEdited: z.array(z.string()),
+    }),
+    /** `origin: 'llm'` seed rows expanded into envelopes this run (06 §8.3). */
+    llmPagesMaterialized: z.number().int().nonnegative(),
+    warnings: z.array(z.string()),
+    durationMs: z.number().nonnegative(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/generate/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/generate/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,4HAA4H;AAC5H,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE,EAAE,CAAC;KACnD,OAAO,EAAE,CAAC;AAEb,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,kEAAkE;IAClE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,gFAAgF;IAChF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,2DAA2D;IAC3D,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,8EAA8E;QAC9E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAClC,+GAA+G;QAC/G,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,4EAA4E;IAC5E,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC"}

package/dist/routes/imports/index.d.ts

@@ -0,0 +1,21 @@
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type DataImport, type EnqueueJobInput, type Job, type MetaDb } from '@adminium/meta';
+import type { ConnectionManager } from '../../connections/manager.js';
+import { SnapshotView, type ResolvedTable } from '../../crud/identifiers.js';
+import type { FileStorage } from '../../files/storage.js';
+import { type ValidationReport } from './schema.js';
+/** Companion to exports' manage grant — see the handoff note there. */
+export declare const IMPORTS_MANAGE_PERMISSION = "system:imports:manage";
+/** Upload cap: 32 MiB of CSV (route-scoped bodyLimit). */
+export declare const UPLOAD_BODY_LIMIT: number;
+export interface ImportsRoutesDeps {
+    meta: MetaDb;
+    manager: ConnectionManager;
+    storage: FileStorage;
+    /** `app.jobs.enqueue` in compose; a jobsRepo-backed stub in tests. */
+    enqueue: (input: EnqueueJobInput) => Promise<Job>;
+}
+/** The VALIDATE stage (§11.1 step 3) — pure, also exercised directly in tests. */
+export declare function validateRows(rows: string[][], header: string[], mapping: DataImport['mapping'], view: SnapshotView, table: ResolvedTable): ValidationReport;
+export declare function importsRoutes(deps: ImportsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/imports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/imports/index.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,GAAG,EACR,KAAK,MAAM,EACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAW7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAcL,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AAErB,uEAAuE;AACvE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,sEAAsE;IACtE,OAAO,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACnD;AA2BD,kFAAkF;AAClF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EAAE,EAAE,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,aAAa,GACnB,gBAAgB,CA6ClB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,CAyP5E"}

package/dist/routes/imports/index.js

@@ -0,0 +1,288 @@
+import { filesRepo, importsRepo, newId, } from '@adminium/meta';
+import { SnapshotView } from '../../crud/identifiers.js';
+import { coerceCell } from '../../data-io/coerce.js';
+import { parseCsv } from '../../data-io/csv.js';
+import { loadSnapshotView } from '../../data-io/snapshot-view.js';
+import { ConflictError, ForbiddenError, NotFoundError, UnauthorizedError, ValidationFailedError, } from '../../errors.js';
+import { IMPORT_RUN_KIND } from '../../jobs/import-run.js';
+import { REPORT_ISSUE_CAP, UPLOAD_SAMPLE_ROWS, importIdParams, importsCreateBody, importsCreateReply, importsGetReply, importsListQuery, importsListReply, importsRunReply, importsUploadQuery, importsUploadReply, } from './schema.js';
+/** Companion to exports' manage grant — see the handoff note there. */
+export const IMPORTS_MANAGE_PERMISSION = 'system:imports:manage';
+/** Upload cap: 32 MiB of CSV (route-scoped bodyLimit). */
+export const UPLOAD_BODY_LIMIT = 32 * 1024 * 1024;
+function requireUserId(request) {
+    const user = request.user;
+    const id = user?.id ?? request.apiKeyPrincipal?.id ?? null;
+    if (id === null)
+        throw new UnauthorizedError();
+    return id;
+}
+function toView(row) {
+    return {
+        id: row.id,
+        connectionId: row.connectionId,
+        tableName: row.tableName,
+        requestedBy: row.requestedBy,
+        fileId: row.fileId,
+        mapping: row.mapping,
+        options: row.options,
+        status: row.status,
+        stats: row.stats,
+        errorReportFileId: row.errorReportFileId,
+        createdAt: row.createdAt,
+        startedAt: row.startedAt,
+        finishedAt: row.finishedAt,
+    };
+}
+/** The VALIDATE stage (§11.1 step 3) — pure, also exercised directly in tests. */
+export function validateRows(rows, header, mapping, view, table) {
+    const byName = new Map();
+    header.forEach((name, index) => byName.set(name.trim(), index));
+    const mapped = [];
+    for (const entry of mapping.columns) {
+        if (entry.to === null)
+            continue;
+        const index = byName.get(entry.from.trim());
+        if (index === undefined) {
+            throw new ValidationFailedError(`Mapped source column ${JSON.stringify(entry.from)} is not in the file header.`, { from: entry.from });
+        }
+        mapped.push({ index, column: view.column(table, entry.to) });
+    }
+    if (mapped.length === 0) {
+        throw new ValidationFailedError('The mapping imports no columns.', {});
+    }
+    const issues = [];
+    let invalid = 0;
+    let total = 0;
+    for (const record of rows) {
+        if (record.length === 1 && record[0]?.trim() === '')
+            continue;
+        total += 1;
+        let bad = false;
+        for (const target of mapped) {
+            const raw = record[target.index] ?? '';
+            const result = coerceCell(raw, target.column);
+            if (!result.ok) {
+                bad = true;
+                if (issues.length < REPORT_ISSUE_CAP) {
+                    issues.push({
+                        row: total,
+                        column: target.column.name,
+                        code: result.code,
+                        message: result.message,
+                        value: raw,
+                    });
+                }
+            }
+        }
+        if (bad)
+            invalid += 1;
+    }
+    return { total, valid: total - invalid, invalid, issues };
+}
+export function importsRoutes(deps) {
+    const { meta, manager, storage } = deps;
+    const imports = importsRepo(meta);
+    const files = filesRepo(meta);
+    async function assertVisible(request, row, userId) {
+        if (row.requestedBy === userId)
+            return;
+        if (await request.can(IMPORTS_MANAGE_PERMISSION))
+            return;
+        throw new NotFoundError(`Import ${row.id} not found.`);
+    }
+    async function readStoredCsv(storageKey) {
+        const stream = await storage.read(storageKey);
+        stream.setEncoding('utf8');
+        let text = '';
+        for await (const chunk of stream)
+            text += chunk;
+        return text;
+    }
+    return async (app) => {
+        // Raw CSV bodies, this plugin's scope only.
+        app.addContentTypeParser('text/csv', { parseAs: 'buffer' }, (_request, body, done) => {
+            done(null, body);
+        });
+        app.post('/imports/upload', {
+            bodyLimit: UPLOAD_BODY_LIMIT,
+            schema: { querystring: importsUploadQuery, response: { 201: importsUploadReply } },
+        }, async (request, reply) => {
+            const userId = requireUserId(request);
+            const body = request.body;
+            if (!Buffer.isBuffer(body) || body.byteLength === 0) {
+                throw new ValidationFailedError('Send the CSV file as a raw `text/csv` body.', {});
+            }
+            const text = body.toString('utf8');
+            const rows = parseCsv(text);
+            const header = rows[0];
+            if (header === undefined || header.every((cell) => cell.trim() === '')) {
+                throw new ValidationFailedError('The file has no header row.', {});
+            }
+            const dataRows = rows
+                .slice(1)
+                .filter((record) => !(record.length === 1 && record[0]?.trim() === ''));
+            const fileId = newId('file');
+            const written = await storage.write(fileId, body);
+            const file = await files.create({
+                id: fileId,
+                filename: request.query.filename,
+                mime: 'text/csv; charset=utf-8',
+                sizeBytes: written.sizeBytes,
+                sha256: written.sha256,
+                kind: 'import',
+                uploadedBy: userId,
+            });
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'import.upload',
+                changes: { after: { fileId: file.id, filename: file.filename, rows: dataRows.length } },
+            });
+            return reply.status(201).send({
+                data: {
+                    fileId: file.id,
+                    filename: file.filename,
+                    sizeBytes: file.sizeBytes,
+                    sha256: file.sha256,
+                    columns: header,
+                    sampleRows: dataRows.slice(0, UPLOAD_SAMPLE_ROWS),
+                    totalRows: dataRows.length,
+                },
+            });
+        });
+        app.post('/imports', { schema: { body: importsCreateBody, response: { 201: importsCreateReply } } }, async (request, reply) => {
+            const userId = requireUserId(request);
+            const { fileId, connectionId, table: tableParam, mapping, options } = request.body;
+            const connection = await manager.mustFind(connectionId);
+            const view = await loadSnapshotView(meta, connectionId);
+            // Identifier resolution FIRST, then RBAC on the resolved name (§5.2).
+            const table = view.table(tableParam);
+            const permission = `table:${connectionId}:${table.id}:import`;
+            if (!(await request.can(permission))) {
+                throw new ForbiddenError('You do not have import access to this table.', 'TABLE_FORBIDDEN', {
+                    permission,
+                });
+            }
+            if (connection.readOnly) {
+                throw new ForbiddenError('This connection is read-only — Adminium never writes to it.', 'READ_ONLY_MODE', { connectionId });
+            }
+            if (table.readOnly) {
+                throw new ForbiddenError('This table has no primary key (or is a view) and is read-only.', 'READ_ONLY_MODE', { table: table.id });
+            }
+            if ((options.mode ?? 'insert') === 'upsert') {
+                const match = options.matchColumn ?? null;
+                if (match === null) {
+                    throw new ValidationFailedError('Upsert mode requires `options.matchColumn`.', {});
+                }
+                const matchResolved = view.column(table, match); // 422 on unknown/secret
+                // The match column must actually be IMPORTED — otherwise every row's
+                // match value is undefined and the "upsert" either errors per row or
+                // blindly inserts duplicates (M7 wave-2 finding).
+                const matchMapped = mapping.columns.some((entry) => entry.to !== null && view.column(table, entry.to).name === matchResolved.name);
+                if (!matchMapped) {
+                    throw new ValidationFailedError('Upsert mode requires `options.matchColumn` to be one of the mapped target columns.', { matchColumn: match });
+                }
+            }
+            const upload = await files.findById(fileId);
+            if (upload === null || upload.kind !== 'import' || upload.deletedAt !== null) {
+                throw new NotFoundError(`Upload ${fileId} not found.`);
+            }
+            if (upload.uploadedBy !== userId) {
+                throw new ForbiddenError('You can only import files you uploaded.', 'FORBIDDEN', {});
+            }
+            // --- VALIDATE stage (§11.1): parse + coerce, collect per-row issues ----
+            const rows = parseCsv(await readStoredCsv(upload.storageKey));
+            const header = rows[0];
+            if (header === undefined)
+                throw new ValidationFailedError('The file is empty.', {});
+            const report = validateRows(rows.slice(1), header, mapping, view, table);
+            const row = await imports.create({
+                connectionId,
+                tableName: table.id,
+                requestedBy: userId,
+                fileId,
+                mapping,
+                options,
+            });
+            await imports.markReady(row.id, { total: report.total });
+            const ready = (await imports.findById(row.id)) ?? row;
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'import.validate',
+                connectionId,
+                changes: {
+                    after: { importId: row.id, table: table.id, total: report.total, invalid: report.invalid },
+                },
+            });
+            return reply.status(201).send({ data: { import: toView(ready), report } });
+        });
+        app.post('/imports/:id/run', { schema: { params: importIdParams, response: { 202: importsRunReply } } }, async (request, reply) => {
+            const userId = requireUserId(request);
+            const row = await imports.findById(request.params.id);
+            if (row === null)
+                throw new NotFoundError(`Import ${request.params.id} not found.`);
+            await assertVisible(request, row, userId);
+            if (row.status !== 'ready') {
+                throw new ConflictError(`Import is ${row.status}.`, 'CONFLICT', { status: row.status });
+            }
+            // The grant is re-checked at enqueue time — it may have been revoked
+            // between validate and run.
+            const permission = `table:${row.connectionId}:${row.tableName}:import`;
+            if (!(await request.can(permission))) {
+                throw new ForbiddenError('You do not have import access to this table.', 'TABLE_FORBIDDEN', {
+                    permission,
+                });
+            }
+            const job = await deps.enqueue({
+                kind: IMPORT_RUN_KIND,
+                payload: { importId: row.id, userId },
+            });
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'import.run',
+                connectionId: row.connectionId,
+                changes: { after: { importId: row.id, jobId: job.id } },
+            });
+            return reply.status(202).send({ data: { import: toView(row), jobId: job.id } });
+        });
+        app.get('/imports', { schema: { querystring: importsListQuery, response: { 200: importsListReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const manage = await request.can(IMPORTS_MANAGE_PERMISSION);
+            const rows = await imports.list({
+                ...(manage ? {} : { requestedBy: userId }),
+                limit: request.query.limit,
+            });
+            return { data: rows.map(toView) };
+        });
+        app.get('/imports/:id', { schema: { params: importIdParams, response: { 200: importsGetReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const row = await imports.findById(request.params.id);
+            if (row === null)
+                throw new NotFoundError(`Import ${request.params.id} not found.`);
+            await assertVisible(request, row, userId);
+            return { data: toView(row) };
+        });
+        app.get('/imports/:id/error-report', { schema: { params: importIdParams } }, async (request, reply) => {
+            const userId = requireUserId(request);
+            const row = await imports.findById(request.params.id);
+            if (row === null)
+                throw new NotFoundError(`Import ${request.params.id} not found.`);
+            await assertVisible(request, row, userId);
+            if (row.errorReportFileId === null) {
+                throw new NotFoundError('This import has no error report.');
+            }
+            const file = await files.findById(row.errorReportFileId);
+            if (file === null || file.deletedAt !== null) {
+                throw new NotFoundError('The error report is no longer stored.');
+            }
+            const stream = await storage.read(file.storageKey);
+            const safeName = file.filename.replaceAll(/["\\\r\n]/g, '_');
+            return reply
+                .header('content-type', file.mime)
+                .header('content-length', String(file.sizeBytes))
+                .header('content-disposition', `attachment; filename="${safeName}"`)
+                .send(stream);
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/imports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/imports/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,GAKN,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAsB,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GAInB,MAAM,aAAa,CAAC;AAErB,uEAAuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAUlD,SAAS,aAAa,CAAC,OAAuB;IAC5C,MAAM,IAAI,GAAI,OAAiD,CAAC,IAAI,CAAC;IACrE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,IAAI,CAAC;IAC3D,IAAI,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,GAAe;IAC7B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,MAAgB,EAChB,OAA8B,EAC9B,IAAkB,EAClB,KAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAoE,EAAE,CAAC;IACnF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAqB,CAC7B,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAC/E,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAC9D,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,GAAG,GAAG,IAAI,CAAC;gBACX,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBACrC,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG,EAAE,KAAK;wBACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;wBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,KAAK,UAAU,aAAa,CAAC,OAAuB,EAAE,GAAe,EAAE,MAAc;QACnF,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO;QACvC,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAAE,OAAO;QACzD,MAAM,IAAI,aAAa,CAAC,UAAU,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,UAAkB;QAC7C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,IAAI,KAAe,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,4CAA4C;QAC5C,GAAG,CAAC,oBAAoB,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACnF,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CACN,iBAAiB,EACjB;YACE,SAAS,EAAE,iBAAiB;YAC5B,MAAM,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE;SACnF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,qBAAqB,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI;iBAClB,KAAK,CAAC,CAAC,CAAC;iBACR,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBAC9B,EAAE,EAAE,MAAM;gBACV,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;gBAChC,IAAI,EAAE,yBAAyB;gBAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;aACxF,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;oBACjD,SAAS,EAAE,QAAQ,CAAC,MAAM;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,IAAI,CACN,UAAU,EACV,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAC9E,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAEnF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxD,sEAAsE;YACtE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,SAAS,CAAC;YAC9D,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,EAAE;oBAC1F,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YACD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,cAAc,CACtB,6DAA6D,EAC7D,gBAAgB,EAChB,EAAE,YAAY,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CACtB,gEAAgE,EAChE,gBAAgB,EAChB,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;gBAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,MAAM,IAAI,qBAAqB,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;gBACrF,CAAC;gBACD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,wBAAwB;gBACzE,qEAAqE;gBACrE,qEAAqE;gBACrE,kDAAkD;gBAClD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,CACzF,CAAC;gBACF,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,qBAAqB,CAC7B,oFAAoF,EACpF,EAAE,WAAW,EAAE,KAAK,EAAE,CACvB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC7E,MAAM,IAAI,aAAa,CAAC,UAAU,MAAM,aAAa,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,cAAc,CAAC,yCAAyC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;YAED,0EAA0E;YAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAEzE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBAC/B,YAAY;gBACZ,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,WAAW,EAAE,MAAM;gBACnB,MAAM;gBACN,OAAO;gBACP,OAAO;aACR,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC;YAEtD,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,iBAAiB;gBACzB,YAAY;gBACZ,OAAO,EAAE;oBACP,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;iBAC3F;aACF,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,IAAI,CACN,kBAAkB,EAClB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,EAC1E,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YACpF,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,qEAAqE;YACrE,4BAA4B;YAC5B,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,SAAS,SAAS,CAAC;YACvE,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,cAAc,CAAC,8CAA8C,EAAE,iBAAiB,EAAE;oBAC1F,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBAC7B,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,YAAY;gBACpB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE;aACxD,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,GAAG,CACL,UAAU,EACV,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAClF,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC1C,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;aAC3B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,GAAG,CACL,cAAc,EACd,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,EAC1E,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YACpF,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,GAAG,CACL,2BAA2B,EAC3B,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EACtC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YACpF,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACzD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC7C,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO,KAAK;iBACT,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC;iBACjC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBAChD,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,QAAQ,GAAG,CAAC;iBACnE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}