@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/schema-import/schema.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Zod request/response schemas for `routes/schema-import/`
+ * (09-generated-app.md §8.2 source mode c, M5-T01).
+ *
+ * The request mirrors the `@adminium/schema-import` contract
+ * `parseSchemaFile(content, { format? }) → { model, format, warnings }`;
+ * `format` additionally accepts the wizard-friendly aliases `sql`/`json`.
+ */
+import { z } from 'zod';
+import { importFormatSchema } from '@adminium/engine';
+/** Wizard aliases → canonical engine `ImportFormat` values. */
+export declare const FORMAT_ALIASES: Record<string, z.infer<typeof importFormatSchema>>;
+export declare const parseRequestFormat: z.ZodPipe<z.ZodUnion<readonly [z.ZodEnum<{
+    "sql-ddl": "sql-ddl";
+    prisma: "prisma";
+    drizzle: "drizzle";
+    typeorm: "typeorm";
+    sequelize: "sequelize";
+    rails: "rails";
+    django: "django";
+    "json-ir": "json-ir";
+}>, z.ZodEnum<{
+    json: "json";
+    sql: "sql";
+}>]>, z.ZodTransform<"sql-ddl" | "prisma" | "drizzle" | "typeorm" | "sequelize" | "rails" | "django" | "json-ir", "sql-ddl" | "prisma" | "drizzle" | "typeorm" | "sequelize" | "rails" | "django" | "json-ir" | "json" | "sql">>;
+export declare const schemaImportParseBody: z.ZodObject<{
+    format: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodEnum<{
+        "sql-ddl": "sql-ddl";
+        prisma: "prisma";
+        drizzle: "drizzle";
+        typeorm: "typeorm";
+        sequelize: "sequelize";
+        rails: "rails";
+        django: "django";
+        "json-ir": "json-ir";
+    }>, z.ZodEnum<{
+        json: "json";
+        sql: "sql";
+    }>]>, z.ZodTransform<"sql-ddl" | "prisma" | "drizzle" | "typeorm" | "sequelize" | "rails" | "django" | "json-ir", "sql-ddl" | "prisma" | "drizzle" | "typeorm" | "sequelize" | "rails" | "django" | "json-ir" | "json" | "sql">>>;
+    content: z.ZodString;
+    fileName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SchemaImportParseBody = z.infer<typeof schemaImportParseBody>;
+export declare const schemaImportParseReply: z.ZodObject<{
+    model: z.ZodUnknown;
+    format: z.ZodEnum<{
+        "sql-ddl": "sql-ddl";
+        prisma: "prisma";
+        drizzle: "drizzle";
+        typeorm: "typeorm";
+        sequelize: "sequelize";
+        rails: "rails";
+        django: "django";
+        "json-ir": "json-ir";
+    }>;
+    warnings: z.ZodArray<z.ZodString>;
+    summary: z.ZodObject<{
+        tables: z.ZodNumber;
+        columns: z.ZodNumber;
+        relations: z.ZodNumber;
+        enums: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SchemaImportParseReply = z.infer<typeof schemaImportParseReply>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/schema-import/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/schema-import/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,+DAA+D;AAC/D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAG7E,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;gOAEgE,CAAC;AAEhG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;iBAOhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;iBAYjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/routes/schema-import/schema.js

@@ -0,0 +1,40 @@
+/**
+ * Zod request/response schemas for `routes/schema-import/`
+ * (09-generated-app.md §8.2 source mode c, M5-T01).
+ *
+ * The request mirrors the `@adminium/schema-import` contract
+ * `parseSchemaFile(content, { format? }) → { model, format, warnings }`;
+ * `format` additionally accepts the wizard-friendly aliases `sql`/`json`.
+ */
+import { z } from 'zod';
+import { importFormatSchema } from '@adminium/engine';
+/** Wizard aliases → canonical engine `ImportFormat` values. */
+export const FORMAT_ALIASES = {
+    sql: 'sql-ddl',
+    json: 'json-ir',
+};
+export const parseRequestFormat = z
+    .union([importFormatSchema, z.enum(['sql', 'json'])])
+    .transform((value) => FORMAT_ALIASES[value] ?? value);
+export const schemaImportParseBody = z.object({
+    /** Omit to sniff from the content / file name. */
+    format: parseRequestFormat.optional(),
+    /** Raw schema file text (2 MB body cap comes from the server default). */
+    content: z.string().min(1),
+    /** Original file name — improves sniffing and the model name. */
+    fileName: z.string().min(1).max(255).optional(),
+});
+export const schemaImportParseReply = z.object({
+    /** Engine `DatabaseModel` (validated by `parseDatabaseModel` before reply). */
+    model: z.unknown(),
+    format: importFormatSchema,
+    warnings: z.array(z.string()),
+    /** Preview counts for the wizard's schema-file card. */
+    summary: z.object({
+        tables: z.number().int().nonnegative(),
+        columns: z.number().int().nonnegative(),
+        relations: z.number().int().nonnegative(),
+        enums: z.number().int().nonnegative(),
+    }),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/schema-import/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/schema-import/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAuD;IAChF,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;KACpD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAK,KAA4C,CAAC,CAAC;AAEhG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,kDAAkD;IAClD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,0EAA0E;IAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,+EAA+E;IAC/E,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;CACH,CAAC,CAAC"}

package/dist/routes/search/index.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Global search (`routes/search/`, 08-server-api.md §2.9, M4-T06 — the ⌘K
+ * palette's server half):
+ *
+ *   GET /api/v1/search?q=&types=&connectionId=&tables=&limit=
+ *
+ * Two group kinds in v1. The §2.9 meta-entity groups (users, files,
+ * automations, views) are a KNOWN, tracked pre-v1 gap: their features have
+ * shipped, but the Kysely-over-meta-store search groups (with the
+ * system:users:read-style RBAC filters) have not been built yet — adding them
+ * means new SEARCH_TYPES entries plus per-group schemas here and in the
+ * palette client:
+ *
+ *  - `page`: enabled nav rows matched by TITLE, filtered by the SAME
+ *    `page:<id>:view` grant the bootstrap nav applies (09 §2.1) — search can
+ *    never surface a page the sidebar would hide.
+ *  - `record`: one group per searchable table the caller holds
+ *    `table:<conn>:<table>:read` on. A table is searched only when an enabled,
+ *    view-permitted page renders it (its envelope `source.table`) — that page's
+ *    slug is what makes a hit navigable (`/p/:slug/r/:recordId`). Matching is
+ *    the crud quick-search compiler (`compileQuickSearch` → dialect-aware
+ *    ILIKE: postgres `ILIKE`, mysql/sqlite `LOWER(...) LIKE LOWER(...)`), so
+ *    identifiers are snapshot strings and values bind as parameters (§7 item 1).
+ *
+ * PII (§5.3): the search context pins `canReadPii: false` for EVERY caller —
+ * masked columns neither match nor surface as labels, even for callers who
+ * hold the unmask grant, because labels outlive the request (the palette's
+ * localStorage Recent list). Labels come from the classifier's displayColumn
+ * (engine `classifyTable`) when it is a clean text column, else the first
+ * unmasked text column, else the PK label.
+ *
+ * Budgets (§2.9): per-table searches run in parallel with a 2 s per-table
+ * timeout inside a 5 s total budget; a timed-out (or failing) table degrades
+ * to `{ partial: true }` on its group instead of failing the request.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+import type { ConnectionManager } from '../../connections/manager.js';
+import type { ResolvedTable, SnapshotView } from '../../crud/identifiers.js';
+import type { Row } from '../../crud/mask.js';
+export declare const SEARCH_PER_TABLE_TIMEOUT_MS = 2000;
+export declare const SEARCH_TOTAL_BUDGET_MS = 5000;
+/** At most this many tables are searched per request (deterministic prefix). */
+export declare const SEARCH_MAX_TABLES = 20;
+/** Total record-hit cap across all groups (limit per table × table cap trim). */
+export declare const SEARCH_MAX_TOTAL_HITS = 50;
+export interface SearchRoutesDeps {
+    manager: ConnectionManager;
+    meta: MetaDb;
+}
+/**
+ * The label column for record hits: classifier displayColumn when it is a
+ * readable (text-ish, unmasked, non-secret) column, else the first such
+ * column, else null (→ PK label). Masked columns NEVER label a hit (§5.3).
+ */
+export declare function labelColumnFor(view: SnapshotView, table: ResolvedTable): string | null;
+/** Number of columns a hit's §2.9 context string draws from. */
+export declare const CONTEXT_COLUMN_CAP = 2;
+/**
+ * The columns a record hit's `context` string draws from (§2.9 "record hits
+ * show row context", e.g. `budget £150,000 · status active`): the first
+ * `CONTEXT_COLUMN_CAP` readable text/number columns beyond the label and the
+ * PK. Masked/secret columns never appear — the same §5.3 rule that governs
+ * matching and labels, because context strings outlive the request in the
+ * palette's Recent list too.
+ */
+export declare function contextColumnsFor(table: ResolvedTable, labelColumn: string | null): string[];
+/** `col1 v1 · col2 v2` over the non-empty context values of one row. */
+export declare function contextStringFor(row: Row, columns: readonly string[]): string | undefined;
+export declare function searchRoutes(deps: SearchRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/search/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/search/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAuB,KAAK,MAAM,EAAa,MAAM,gBAAgB,CAAC;AAI7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE7E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAY9C,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AACjD,eAAO,MAAM,sBAAsB,OAAQ,CAAC;AAC5C,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AA0BD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAatF;AAED,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAkBpC;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAU5F;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAUzF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,qBAAqB,CAyO1E"}

package/dist/routes/search/index.js

@@ -0,0 +1,361 @@
+/**
+ * Global search (`routes/search/`, 08-server-api.md §2.9, M4-T06 — the ⌘K
+ * palette's server half):
+ *
+ *   GET /api/v1/search?q=&types=&connectionId=&tables=&limit=
+ *
+ * Two group kinds in v1. The §2.9 meta-entity groups (users, files,
+ * automations, views) are a KNOWN, tracked pre-v1 gap: their features have
+ * shipped, but the Kysely-over-meta-store search groups (with the
+ * system:users:read-style RBAC filters) have not been built yet — adding them
+ * means new SEARCH_TYPES entries plus per-group schemas here and in the
+ * palette client:
+ *
+ *  - `page`: enabled nav rows matched by TITLE, filtered by the SAME
+ *    `page:<id>:view` grant the bootstrap nav applies (09 §2.1) — search can
+ *    never surface a page the sidebar would hide.
+ *  - `record`: one group per searchable table the caller holds
+ *    `table:<conn>:<table>:read` on. A table is searched only when an enabled,
+ *    view-permitted page renders it (its envelope `source.table`) — that page's
+ *    slug is what makes a hit navigable (`/p/:slug/r/:recordId`). Matching is
+ *    the crud quick-search compiler (`compileQuickSearch` → dialect-aware
+ *    ILIKE: postgres `ILIKE`, mysql/sqlite `LOWER(...) LIKE LOWER(...)`), so
+ *    identifiers are snapshot strings and values bind as parameters (§7 item 1).
+ *
+ * PII (§5.3): the search context pins `canReadPii: false` for EVERY caller —
+ * masked columns neither match nor surface as labels, even for callers who
+ * hold the unmask grant, because labels outlive the request (the palette's
+ * localStorage Recent list). Labels come from the classifier's displayColumn
+ * (engine `classifyTable`) when it is a clean text column, else the first
+ * unmasked text column, else the PK label.
+ *
+ * Budgets (§2.9): per-table searches run in parallel with a 2 s per-table
+ * timeout inside a 5 s total budget; a timed-out (or failing) table degrades
+ * to `{ partial: true }` on its group instead of failing the request.
+ */
+import { pagesRepo, readBool } from '@adminium/meta';
+import { classifyTable } from '@adminium/engine';
+import { UnauthorizedError } from '../../errors.js';
+import { compileQuickSearch } from '../../crud/filters.js';
+import { pkLabel } from '../../crud/records.js';
+import { loadSnapshotView } from '../../data-io/snapshot-view.js';
+import { SEARCH_LIMIT_DEFAULT, searchQuery, searchReply, } from './schema.js';
+export const SEARCH_PER_TABLE_TIMEOUT_MS = 2_000;
+export const SEARCH_TOTAL_BUDGET_MS = 5_000;
+/** At most this many tables are searched per request (deterministic prefix). */
+export const SEARCH_MAX_TABLES = 20;
+/** Total record-hit cap across all groups (limit per table × table cap trim). */
+export const SEARCH_MAX_TOTAL_HITS = 50;
+const TIMEOUT = Symbol('search-timeout');
+async function withTimeout(promise, ms) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((resolve) => {
+                timer = setTimeout(() => resolve(TIMEOUT), Math.max(0, ms));
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * The label column for record hits: classifier displayColumn when it is a
+ * readable (text-ish, unmasked, non-secret) column, else the first such
+ * column, else null (→ PK label). Masked columns NEVER label a hit (§5.3).
+ */
+export function labelColumnFor(view, table) {
+    const usable = (name) => {
+        const column = table.columns.get(name);
+        return column !== undefined && column.textish && !column.secret && !column.masked;
+    };
+    const classified = classifyTable(view.model, table.table);
+    if (classified.displayColumn !== null && usable(classified.displayColumn)) {
+        return classified.displayColumn;
+    }
+    return [...table.columns.values()].find((c) => usable(c.name))?.name ?? null;
+}
+/** Number of columns a hit's §2.9 context string draws from. */
+export const CONTEXT_COLUMN_CAP = 2;
+/** Each context value is clipped so one long text column can't flood the palette row. */
+const CONTEXT_VALUE_MAX = 40;
+/** Scalar logical types beyond text that read well in a context string. */
+const CONTEXT_SCALAR_TYPES = new Set([
+    'integer',
+    'bigint',
+    'decimal',
+    'float',
+    'boolean',
+    'date',
+    'time',
+    'timestamp',
+    'timestamptz',
+    'enum',
+]);
+/**
+ * The columns a record hit's `context` string draws from (§2.9 "record hits
+ * show row context", e.g. `budget £150,000 · status active`): the first
+ * `CONTEXT_COLUMN_CAP` readable text/number columns beyond the label and the
+ * PK. Masked/secret columns never appear — the same §5.3 rule that governs
+ * matching and labels, because context strings outlive the request in the
+ * palette's Recent list too.
+ */
+export function contextColumnsFor(table, labelColumn) {
+    const out = [];
+    for (const column of table.columns.values()) {
+        if (out.length >= CONTEXT_COLUMN_CAP)
+            break;
+        if (column.name === labelColumn || column.isPrimaryKey)
+            continue;
+        if (column.masked || column.secret)
+            continue;
+        if (!column.textish && !CONTEXT_SCALAR_TYPES.has(column.logicalType))
+            continue;
+        out.push(column.name);
+    }
+    return out;
+}
+/** `col1 v1 · col2 v2` over the non-empty context values of one row. */
+export function contextStringFor(row, columns) {
+    const parts = [];
+    for (const name of columns) {
+        const raw = row[name];
+        if (raw === null || raw === undefined)
+            continue;
+        const value = String(raw).replace(/\s+/g, ' ').trim();
+        if (value.length === 0)
+            continue;
+        parts.push(`${name} ${value.length > CONTEXT_VALUE_MAX ? `${value.slice(0, CONTEXT_VALUE_MAX - 1)}…` : value}`);
+    }
+    return parts.length === 0 ? undefined : parts.join(' · ');
+}
+export function searchRoutes(deps) {
+    const { manager, meta } = deps;
+    const pages = pagesRepo(meta);
+    return async (app) => {
+        /** `page:<id>:view` / `table:...:read`, tolerant of rbac-less harnesses. */
+        function can(request, permission) {
+            if (typeof request.can !== 'function')
+                return Promise.resolve(true);
+            return request.can(permission);
+        }
+        /** The envelope's `source.table`, when the page renders one table. */
+        function sourceTableOf(page) {
+            if (typeof page.config !== 'object' || page.config === null)
+                return null;
+            const source = page.config['source'];
+            if (typeof source !== 'object' || source === null)
+                return null;
+            const table = source['table'];
+            return typeof table === 'string' && table.length > 0 ? table : null;
+        }
+        app.get('/search', {
+            // §6 row 5: 60/min — each request fans out parallel per-table ILIKE
+            // queries, so it gets its own bucket (limits live in RATE_BUCKETS).
+            config: { rateLimitBucket: 'search' },
+            schema: { querystring: searchQuery, response: { 200: searchReply } },
+        }, async (request) => {
+            // Session or API-key principal required (401, same rule as bootstrap).
+            if ((request.user ?? null) === null && (request.apiKeyPrincipal ?? null) === null) {
+                throw new UnauthorizedError('UNAUTHENTICATED');
+            }
+            const q = request.query.q.trim();
+            // Zod enforces ≥ 2 raw chars; re-check after trimming (§2.9).
+            if (q.length < 2)
+                return { data: { groups: [] } };
+            const qLower = q.toLowerCase();
+            const limit = request.query.limit ?? SEARCH_LIMIT_DEFAULT;
+            const typeFilter = request.query.types === undefined
+                ? null
+                : new Set(request.query.types.split(',').map((t) => t.trim()));
+            const wants = (type) => typeFilter === null || typeFilter.has(type);
+            const tableFilter = request.query.tables === undefined
+                ? null
+                : new Set(request.query.tables.split(',').map((t) => t.trim()));
+            const groups = [];
+            const startedAt = Date.now();
+            // --- pages group (nav rows by title, view-filtered) -------------------
+            if (wants('page')) {
+                const navRows = [...(await pages.navRows())].sort((a, b) => a.title.localeCompare(b.title) || a.slug.localeCompare(b.slug));
+                const hits = [];
+                for (const row of navRows) {
+                    if (hits.length >= limit)
+                        break;
+                    if (!readBool(row.isEnabled))
+                        continue;
+                    if (!row.title.toLowerCase().includes(qLower))
+                        continue;
+                    if (!(await can(request, `page:${row.id}:view`)))
+                        continue;
+                    hits.push({ pageId: row.id, slug: row.slug, title: row.title, icon: row.icon });
+                }
+                groups.push({ type: 'page', count: hits.length, hits });
+            }
+            // --- record groups (per readable, page-backed, searchable table) ------
+            if (wants('record')) {
+                const candidates = await collectCandidates(request);
+                const settled = await Promise.all(candidates.map(async (candidate) => {
+                    const budgetLeft = SEARCH_TOTAL_BUDGET_MS - (Date.now() - startedAt);
+                    const timeoutMs = Math.min(SEARCH_PER_TABLE_TIMEOUT_MS, budgetLeft);
+                    try {
+                        const result = await withTimeout(searchTable(candidate), timeoutMs);
+                        if (result !== TIMEOUT)
+                            return result;
+                    }
+                    catch (error) {
+                        request.log.warn({ err: error, table: candidate.table.id }, 'search: per-table query failed — degrading to partial');
+                    }
+                    // Timed out / failed: degraded group, not a failed request (§2.9).
+                    return {
+                        type: 'record',
+                        connectionId: candidate.connectionId,
+                        table: candidate.table.id,
+                        pageSlug: candidate.pageSlug,
+                        count: 0,
+                        partial: true,
+                        hits: [],
+                    };
+                }));
+                let total = 0;
+                for (const group of settled) {
+                    if (group === null)
+                        continue;
+                    if (group.hits.length === 0 && group.partial !== true)
+                        continue; // omit empty
+                    if (total >= SEARCH_MAX_TOTAL_HITS)
+                        break; // total cap, deterministic prefix
+                    groups.push(group);
+                    total += group.hits.length;
+                }
+            }
+            return { data: { groups } };
+            /**
+             * Deterministic candidate prefix: connections in create order, then
+             * that connection's pages in nav order; the first page rendering a
+             * table wins its slug (page-crud pages first, so the record route is
+             * the canonical target when both a crud page and e.g. a board exist).
+             */
+            async function collectCandidates(req) {
+                const connectionRows = await meta.db
+                    .selectFrom('adminium_connections')
+                    .select(['id'])
+                    .orderBy('createdAt', 'asc')
+                    .orderBy('id', 'asc')
+                    .execute();
+                const connectionIds = connectionRows
+                    .map((row) => row.id)
+                    .filter((id) => request.query.connectionId === undefined || id === request.query.connectionId);
+                const out = [];
+                for (const connectionId of connectionIds) {
+                    if (out.length >= SEARCH_MAX_TABLES)
+                        break;
+                    const pageRows = (await pages.listForConnection(connectionId)).filter((page) => page.isEnabled && sourceTableOf(page) !== null);
+                    // page-crud first — its `/p/:slug/r/:recordId` route is the target.
+                    pageRows.sort((a, b) => Number(b.type === 'page-crud') - Number(a.type === 'page-crud'));
+                    const pageByTable = new Map();
+                    for (const page of pageRows) {
+                        const tableId = sourceTableOf(page);
+                        if (!pageByTable.has(tableId))
+                            pageByTable.set(tableId, page);
+                    }
+                    if (pageByTable.size === 0)
+                        continue;
+                    let view;
+                    try {
+                        view = await loadSnapshotView(meta, connectionId);
+                    }
+                    catch {
+                        continue; // no snapshot — nothing searchable on this connection
+                    }
+                    for (const [tableId, page] of pageByTable) {
+                        if (out.length >= SEARCH_MAX_TABLES)
+                            break;
+                        if (tableFilter !== null && !tableFilter.has(tableId))
+                            continue;
+                        let table;
+                        try {
+                            table = view.table(tableId);
+                        }
+                        catch {
+                            continue; // stale page vs. re-introspected snapshot
+                        }
+                        // Record hits need a navigable record route → a PK (§2.7.2).
+                        if (table.primaryKey.length === 0)
+                            continue;
+                        // Searchable = at least one unmasked text column (§2.9 + §5.3).
+                        const searchable = [...table.columns.values()].some((c) => c.textish && !c.secret && !c.masked);
+                        if (!searchable)
+                            continue;
+                        // RBAC: the same table-read grant the data routes enforce (§5.2),
+                        // plus the page-view grant so a hit never navigates into a 403.
+                        if (!(await can(req, `table:${connectionId}:${table.id}:read`)))
+                            continue;
+                        if (!(await can(req, `page:${page.id}:view`)))
+                            continue;
+                        out.push({ connectionId, view, table, pageSlug: page.slug });
+                    }
+                }
+                return out;
+            }
+            /** One table's hits via the dialect-aware quick-search compiler. */
+            async function searchTable(candidate) {
+                const { connectionId, view, table, pageSlug } = candidate;
+                const { db, dialect } = await manager.data(connectionId);
+                // canReadPii pinned false: masked columns never match nor surface.
+                const ctx = {
+                    view,
+                    table,
+                    canReadPii: false,
+                    dynamic: db.dynamic,
+                    dialect,
+                };
+                const labelColumn = labelColumnFor(view, table);
+                const contextColumns = contextColumnsFor(table, labelColumn);
+                const selectNames = new Set(table.primaryKey);
+                if (labelColumn !== null)
+                    selectNames.add(labelColumn);
+                for (const name of contextColumns)
+                    selectNames.add(name);
+                let qb = db
+                    .selectFrom(table.id)
+                    .select([...selectNames].map((name) => db.dynamic.ref(name)));
+                qb = qb.where((eb) => {
+                    const match = compileQuickSearch(eb, ctx, q);
+                    return match ?? eb(eb.val(1), '=', 0);
+                });
+                for (const pk of table.primaryKey)
+                    qb = qb.orderBy(db.dynamic.ref(pk), 'asc');
+                const rows = (await qb.limit(limit).execute());
+                if (rows.length === 0)
+                    return null;
+                const hits = rows.map((row) => {
+                    const pk = Object.fromEntries(table.primaryKey.map((name) => [name, row[name]]));
+                    const raw = labelColumn === null ? null : row[labelColumn];
+                    const label = raw === null || raw === undefined || String(raw).length === 0
+                        ? pkLabel(table, pk)
+                        : String(raw);
+                    const context = contextStringFor(row, contextColumns);
+                    return {
+                        connectionId,
+                        table: table.id,
+                        recordId: pkLabel(table, pk),
+                        label,
+                        ...(context === undefined ? {} : { context }),
+                        pageSlug,
+                    };
+                });
+                return {
+                    type: 'record',
+                    connectionId,
+                    table: table.id,
+                    pageSlug,
+                    count: hits.length,
+                    hits,
+                };
+            }
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/search/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/search/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAA0B,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAuC,MAAM,kBAAkB,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAA6B,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,WAAW,GAKZ,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAexC,MAAM,OAAO,GAAkB,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAExD,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,EAAU;IAC3D,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;gBACtC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB,EAAE,KAAoB;IACrE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACpF,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,aAAa,CAC9B,IAAI,CAAC,KAAsB,EAC3B,KAAK,CAAC,KAA8B,CACrC,CAAC;IACF,IAAI,UAAU,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1E,OAAO,UAAU,CAAC,aAAa,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAC/E,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,yFAAyF;AACzF,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,WAAW;IACX,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAoB,EAAE,WAA0B;IAChF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY;YAAE,SAAS;QACjE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,SAAS;QAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAQ,EAAE,OAA0B;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,4EAA4E;QAC5E,SAAS,GAAG,CAAC,OAAuB,EAAE,UAAkB;YACtD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpE,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QAED,sEAAsE;QACtE,SAAS,aAAa,CAAC,IAAU;YAC/B,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzE,MAAM,MAAM,GAAI,IAAI,CAAC,MAAkC,CAAC,QAAQ,CAAC,CAAC;YAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,KAAK,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,CAAC;QAED,GAAG,CAAC,GAAG,CACL,SAAS,EACT;YACE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE;YACrC,MAAM,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE;SACrE,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,uEAAuE;YACvE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClF,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,8DAA8D;YAC9D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,oBAAoB,CAAC;YAC1D,MAAM,UAAU,GACd,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;gBAC/B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,CAAC,IAAuB,EAAW,EAAE,CACjD,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,WAAW,GACf,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;gBAChC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAEpE,MAAM,MAAM,GAAkB,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,yEAAyE;YACzE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACzE,CAAC;gBACF,MAAM,IAAI,GAAoB,EAAE,CAAC;gBACjC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;wBAAE,MAAM;oBAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;wBAAE,SAAS;oBACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACxD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;wBAAE,SAAS;oBAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,yEAAyE;YACzE,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAqC,EAAE;oBACpE,MAAM,UAAU,GAAG,sBAAsB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;oBACrE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;oBACpE,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;wBACpE,IAAI,MAAM,KAAK,OAAO;4BAAE,OAAO,MAAM,CAAC;oBACxC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EACzC,uDAAuD,CACxD,CAAC;oBACJ,CAAC;oBACD,mEAAmE;oBACnE,OAAO;wBACL,IAAI,EAAE,QAAQ;wBACd,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;wBACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,EAAE;qBACT,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,KAAK,KAAK,IAAI;wBAAE,SAAS;oBAC7B,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;wBAAE,SAAS,CAAC,aAAa;oBAC9E,IAAI,KAAK,IAAI,qBAAqB;wBAAE,MAAM,CAAC,kCAAkC;oBAC7E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnB,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;YAE5B;;;;;eAKG;YACH,KAAK,UAAU,iBAAiB,CAAC,GAAmB;gBAClD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,EAAE;qBACjC,UAAU,CAAC,sBAAsB,CAAC;qBAClC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;qBACd,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;qBAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;qBACpB,OAAO,EAAE,CAAC;gBACb,MAAM,aAAa,GAAG,cAAc;qBACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAEjG,MAAM,GAAG,GAAsB,EAAE,CAAC;gBAClC,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;oBACzC,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAiB;wBAAE,MAAM;oBAE3C,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CACnE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,CACzD,CAAC;oBACF,oEAAoE;oBACpE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC;oBACzF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgB,CAAC;oBAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;wBAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAW,CAAC;wBAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;4BAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAChE,CAAC;oBACD,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;wBAAE,SAAS;oBAErC,IAAI,IAAkB,CAAC;oBACvB,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACpD,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,sDAAsD;oBAClE,CAAC;oBAED,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;wBAC1C,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAiB;4BAAE,MAAM;wBAC3C,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;4BAAE,SAAS;wBAChE,IAAI,KAAoB,CAAC;wBACzB,IAAI,CAAC;4BACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAC9B,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS,CAAC,0CAA0C;wBACtD,CAAC;wBACD,6DAA6D;wBAC7D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;4BAAE,SAAS;wBAC5C,gEAAgE;wBAChE,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAC3C,CAAC;wBACF,IAAI,CAAC,UAAU;4BAAE,SAAS;wBAC1B,kEAAkE;wBAClE,gEAAgE;wBAChE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,SAAS,YAAY,IAAI,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;4BAAE,SAAS;wBAC1E,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;4BAAE,SAAS;wBACxD,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YAED,oEAAoE;YACpE,KAAK,UAAU,WAAW,CAAC,SAA0B;gBACnD,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;gBAC1D,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzD,mEAAmE;gBACnE,MAAM,GAAG,GAAyB;oBAChC,IAAI;oBACJ,KAAK;oBACL,UAAU,EAAE,KAAK;oBACjB,OAAO,EAAE,EAAE,CAAC,OAAO;oBACnB,OAAO;iBACR,CAAC;gBACF,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAChD,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,WAAW,KAAK,IAAI;oBAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACvD,KAAK,MAAM,IAAI,IAAI,cAAc;oBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAEzD,IAAI,EAAE,GAAG,EAAE;qBACR,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;oBACnB,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;oBACtD,OAAO,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC,CAAC;gBACH,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU;oBAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAU,CAAC;gBACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAEnC,MAAM,IAAI,GAAsB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;oBAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjF,MAAM,GAAG,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC3D,MAAM,KAAK,GACT,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;wBAC3D,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;wBACpB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAClB,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;oBACtD,OAAO;wBACL,YAAY;wBACZ,KAAK,EAAE,KAAK,CAAC,EAAE;wBACf,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC5B,KAAK;wBACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;wBAC7C,QAAQ;qBACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,YAAY;oBACZ,KAAK,EAAE,KAAK,CAAC,EAAE;oBACf,QAAQ;oBACR,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClB,IAAI;iBACL,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}