@adminiumjs/meta 0.2.2 → 0.2.4

package/dist/migrations/0020_manifests_add_on.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Wave 0020 — the add-on half of `adminium_manifests`, plus the attachment
+ * table an add-on needs and an app does not
+ * (26-add-on-runtime.md §4, as amended 2026-08-29).
+ *
+ * ─── This ALTERs. It does not create. ───────────────────────────────────────
+ *
+ * 26 §4 as first written said `adminium_manifests` "does not exist at all
+ * today, so this creates it rather than altering it", and `research/BRIEF.md`
+ * §6 and `16-milestones.md` M16-T02 repeated it. All three were wrong: the
+ * table has shipped since `0006_platform.ts:319-348`. It has no repo, no
+ * writer and zero rows, which is how three documents came to record a shipped
+ * table as absent — and it is why this migration adds two columns to something
+ * that is already there rather than creating a fourth copy of the idea.
+ *
+ * Three shipped columns this plan never accounted for come along for the ride:
+ * `connection_id`, `status`, and **`license_key_encrypted`** — a column 17
+ * defers by name. It is deliberately left alone rather than dropped: it is
+ * empty, dropping a column is the one irreversible thing a migration can do,
+ * and "17 defers licences" is an argument for never WRITING it, which costs
+ * nothing to honour. `repos/manifests.ts` never reads or writes it.
+ *
+ * ─── Why attachments are a table and not `attached_to` on the row ───────────
+ *
+ * 26 O3 asks how one add-on attaches to several hosts and recommends "two rows,
+ * keyed `(manifest_key, attached_to)`". **This does not do that**, and the
+ * reason is a cost O3 could not have weighed, because it was written believing
+ * the table did not exist yet:
+ *
+ *  1. **Two rows means two manifest documents.** `manifest` is the whole
+ *     validated JSON. An add-on attached to two hosts would store it twice, and
+ *     every upgrade would have to rewrite N rows atomically to avoid a
+ *     deployment where one attachment is on 1.1.0 and the other on 1.0.0.
+ *  2. **It makes the credential FK ambiguous.** `adminium_add_on_credentials`
+ *     (0021) is one row per CONNECTED add-on — a DHL API key belongs to the
+ *     add-on, not to one of its attachments. With two manifest rows, that FK
+ *     points at whichever row happened to be inserted first, and disconnecting
+ *     "the other one" either orphans a secret or deletes a live one.
+ *  3. **It requires editing a shipped constraint.** `uq_adminium_manifests_manifest_key`
+ *     is UNIQUE on `manifest_key` ALONE (`0006_platform.ts:344-348`). Two rows
+ *     per key violates it, so O3's shape means dropping and recreating a shipped
+ *     index across three dialects — against §4's own "never edit a shipped
+ *     migration".
+ *
+ * An attachment is a many-to-many fact between a manifest and a host app, so it
+ * gets the table that models one. The shipped unique index stays true (one
+ * manifest, one row, one document, one credential), and `attaches` in the
+ * manifest stays what it always was: the set of hosts this add-on MAY attach to,
+ * of which the rows below record the ones it actually is attached to.
+ *
+ * ─── Why `disabled_at` and not a boolean ───────────────────────────────────
+ *
+ * §5.1's `PATCH /add-ons/:key` enables and disables per surface, and that state
+ * belongs on the attachment rather than on the manifest: an add-on can be
+ * legitimately live on one host and switched off on another. The timestamp
+ * follows 0019's discipline verbatim — NULL means enabled, and "how long has
+ * this been off" is the question that follows a disable, which a boolean cannot
+ * answer.
+ *
+ * ─── Backfill ──────────────────────────────────────────────────────────────
+ *
+ * None, and not for the usual reason: the table has zero rows in every
+ * deployment, because nothing has ever written to it. `kind` still carries a
+ * default so the column is honest about what a pre-existing row would have
+ * meant — `adminium_manifests` was introduced for installed micro-SaaS apps
+ * (13-marketplace.md), so an unlabelled row is an app.
+ */
+import type { Kysely } from 'kysely';
+import type { ColumnHelpers } from '../columns.js';
+export declare function up(db: Kysely<unknown>, c: ColumnHelpers): Promise<void>;
+//# sourceMappingURL=0020_manifests_add_on.d.ts.map

package/dist/migrations/0020_manifests_add_on.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"0020_manifests_add_on.d.ts","sourceRoot":"","sources":["../../src/migrations/0020_manifests_add_on.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD7E"}

package/dist/migrations/0020_manifests_add_on.js

@@ -0,0 +1,111 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * Wave 0020 — the add-on half of `adminium_manifests`, plus the attachment
+ * table an add-on needs and an app does not
+ * (26-add-on-runtime.md §4, as amended 2026-08-29).
+ *
+ * ─── This ALTERs. It does not create. ───────────────────────────────────────
+ *
+ * 26 §4 as first written said `adminium_manifests` "does not exist at all
+ * today, so this creates it rather than altering it", and `research/BRIEF.md`
+ * §6 and `16-milestones.md` M16-T02 repeated it. All three were wrong: the
+ * table has shipped since `0006_platform.ts:319-348`. It has no repo, no
+ * writer and zero rows, which is how three documents came to record a shipped
+ * table as absent — and it is why this migration adds two columns to something
+ * that is already there rather than creating a fourth copy of the idea.
+ *
+ * Three shipped columns this plan never accounted for come along for the ride:
+ * `connection_id`, `status`, and **`license_key_encrypted`** — a column 17
+ * defers by name. It is deliberately left alone rather than dropped: it is
+ * empty, dropping a column is the one irreversible thing a migration can do,
+ * and "17 defers licences" is an argument for never WRITING it, which costs
+ * nothing to honour. `repos/manifests.ts` never reads or writes it.
+ *
+ * ─── Why attachments are a table and not `attached_to` on the row ───────────
+ *
+ * 26 O3 asks how one add-on attaches to several hosts and recommends "two rows,
+ * keyed `(manifest_key, attached_to)`". **This does not do that**, and the
+ * reason is a cost O3 could not have weighed, because it was written believing
+ * the table did not exist yet:
+ *
+ *  1. **Two rows means two manifest documents.** `manifest` is the whole
+ *     validated JSON. An add-on attached to two hosts would store it twice, and
+ *     every upgrade would have to rewrite N rows atomically to avoid a
+ *     deployment where one attachment is on 1.1.0 and the other on 1.0.0.
+ *  2. **It makes the credential FK ambiguous.** `adminium_add_on_credentials`
+ *     (0021) is one row per CONNECTED add-on — a DHL API key belongs to the
+ *     add-on, not to one of its attachments. With two manifest rows, that FK
+ *     points at whichever row happened to be inserted first, and disconnecting
+ *     "the other one" either orphans a secret or deletes a live one.
+ *  3. **It requires editing a shipped constraint.** `uq_adminium_manifests_manifest_key`
+ *     is UNIQUE on `manifest_key` ALONE (`0006_platform.ts:344-348`). Two rows
+ *     per key violates it, so O3's shape means dropping and recreating a shipped
+ *     index across three dialects — against §4's own "never edit a shipped
+ *     migration".
+ *
+ * An attachment is a many-to-many fact between a manifest and a host app, so it
+ * gets the table that models one. The shipped unique index stays true (one
+ * manifest, one row, one document, one credential), and `attaches` in the
+ * manifest stays what it always was: the set of hosts this add-on MAY attach to,
+ * of which the rows below record the ones it actually is attached to.
+ *
+ * ─── Why `disabled_at` and not a boolean ───────────────────────────────────
+ *
+ * §5.1's `PATCH /add-ons/:key` enables and disables per surface, and that state
+ * belongs on the attachment rather than on the manifest: an add-on can be
+ * legitimately live on one host and switched off on another. The timestamp
+ * follows 0019's discipline verbatim — NULL means enabled, and "how long has
+ * this been off" is the question that follows a disable, which a boolean cannot
+ * answer.
+ *
+ * ─── Backfill ──────────────────────────────────────────────────────────────
+ *
+ * None, and not for the usual reason: the table has zero rows in every
+ * deployment, because nothing has ever written to it. `kind` still carries a
+ * default so the column is honest about what a pre-existing row would have
+ * meant — `adminium_manifests` was introduced for installed micro-SaaS apps
+ * (13-marketplace.md), so an unlabelled row is an app.
+ */
+import { metaTable } from '../prefix.js';
+export async function up(db, c) {
+    // `kind` — 'app' | 'add-on' (@adminium/manifest MANIFEST_KINDS). An add-on IS
+    // a manifest (26 §4), so install, upgrade, uninstall and the audit trail need
+    // no parallel code path; this column is what tells the two apart.
+    await db.schema
+        .alterTable(metaTable('manifests'))
+        .addColumn('kind', c.str(12), (col) => col.notNull().defaultTo('app'))
+        .execute();
+    await db.schema
+        .createTable(metaTable('manifest_attachments'))
+        .ifNotExists()
+        .addColumn('id', c.id, (col) => col.primaryKey())
+        .addColumn('manifest_id', c.id, (col) => col.notNull())
+        // The host app's `manifest_key` (24 §5.7) — 80 to match
+        // `adminium_manifests.manifest_key`, the column it points at by value.
+        .addColumn('attached_to', c.str(80), (col) => col.notNull())
+        /** NULL = enabled on this host. Epoch ms, never a native datetime. */
+        .addColumn('disabled_at', c.ts)
+        .addColumn('created_at', c.ts, (col) => col.notNull())
+        // CASCADE, unlike the shipped manifests FKs' `set null`: an attachment with
+        // no manifest is not a degraded row, it is a row that means nothing. A
+        // named table-level constraint because MySQL parses an inline column-level
+        // `REFERENCES` and silently discards it (the 2026-07-20 CI onion).
+        .addForeignKeyConstraint('fk_adminium_manifest_attachments_manifest_id', ['manifest_id'], metaTable('manifests'), ['id'], (cb) => cb.onDelete('cascade'))
+        .execute();
+    // One attachment per (manifest, host). Re-attaching is idempotent rather than
+    // a second row, and the enable/disable state has one home.
+    await db.schema
+        .createIndex('uq_adminium_manifest_attachments_pair')
+        .on(metaTable('manifest_attachments'))
+        .columns(['manifest_id', 'attached_to'])
+        .unique()
+        .execute();
+    // The read the runtime actually makes: "what is attached to this host app,
+    // and is it on?" — `GET /api/v1/add-ons` runs it on every host page load.
+    await db.schema
+        .createIndex('ix_adminium_manifest_attachments_host')
+        .on(metaTable('manifest_attachments'))
+        .columns(['attached_to'])
+        .execute();
+}
+//# sourceMappingURL=0020_manifests_add_on.js.map

package/dist/migrations/0020_manifests_add_on.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0020_manifests_add_on.js","sourceRoot":"","sources":["../../src/migrations/0020_manifests_add_on.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAKH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB,EAAE,CAAgB;IAC5D,8EAA8E;IAC9E,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;SAClC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SACrE,OAAO,EAAE,CAAC;IAEb,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;SAC9C,WAAW,EAAE;SACb,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;SAChD,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACvD,wDAAwD;QACxD,uEAAuE;SACtE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5D,sEAAsE;SACrE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC;SAC9B,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACtD,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,mEAAmE;SAClE,uBAAuB,CACtB,8CAA8C,EAC9C,CAAC,aAAa,CAAC,EACf,SAAS,CAAC,WAAW,CAAC,EACtB,CAAC,IAAI,CAAC,EACN,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC/B;SACA,OAAO,EAAE,CAAC;IAEb,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,uCAAuC,CAAC;SACpD,EAAE,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;SACrC,OAAO,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;SACvC,MAAM,EAAE;SACR,OAAO,EAAE,CAAC;IAEb,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,uCAAuC,CAAC;SACpD,EAAE,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;SACrC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;SACxB,OAAO,EAAE,CAAC;AACf,CAAC"}

package/dist/migrations/0021_add_on_credentials.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Wave 0021 — `adminium_add_on_credentials`: the secret a connected add-on was
+ * given, and nothing else (26-add-on-runtime.md §4, D2, D5).
+ *
+ * ─── One row per connected add-on ──────────────────────────────────────────
+ *
+ * Not per attachment. A DHL API key belongs to the add-on the operator
+ * connected, not to each host app it happens to be mounted on — connecting it
+ * twice because it is attached twice would mean two copies of one secret, two
+ * places to revoke, and a disconnect that leaves one behind. The unique index
+ * on `manifest_id` is what makes "connected" a boolean fact about an add-on.
+ *
+ * ─── What is stored, and what is deliberately not ──────────────────────────
+ *
+ * `payload` is AES-256-GCM ciphertext over the whole credential envelope,
+ * encrypted with a key derived from `ADMINIUM_SECRET` — the same discipline
+ * `adminium_connections` uses for DSNs, reached through the same
+ * `config/secrets.ts` helpers rather than a second crypto path. Its plaintext
+ * shape is a JSON object whose keys differ per `kind`, which is precisely why
+ * it is one opaque column and not a set of typed ones: an `api-key` credential
+ * and an `oauth2` token pair have nothing in common worth normalising, and
+ * columns named `access_token` invite a log line that prints them.
+ *
+ * `expires_at` and `scopes` sit OUTSIDE the ciphertext on purpose. Both are
+ * needed to decide whether to refresh and what the consent dialog should say,
+ * and neither is a secret — putting them inside would mean decrypting a token
+ * to find out it had expired, on every request.
+ *
+ * There is no `refresh_token` column. It lives inside `payload` with the access
+ * token, because a refresh token IS the credential once an access token lapses,
+ * and a schema that stores it beside the ciphertext rather than inside it is a
+ * schema that will eventually have it read by something that thought it was
+ * metadata.
+ *
+ * ─── D5: disconnect deletes this row, and only this row ────────────────────
+ *
+ * 24 D16 / 26 D5 — disconnecting keeps every table the add-on brought and
+ * destroys the keys. That is a DELETE here plus nothing anywhere else, which is
+ * a property the schema should make easy to get right: this table holds only
+ * secrets, so "delete the secrets" is one statement and cannot take data with
+ * it by accident.
+ *
+ * The FK cascades for the uninstall path — a credential outliving its manifest
+ * is an orphaned secret nothing can reach to revoke, which is strictly worse
+ * than one that is gone.
+ */
+import type { Kysely } from 'kysely';
+import type { ColumnHelpers } from '../columns.js';
+export declare function up(db: Kysely<unknown>, c: ColumnHelpers): Promise<void>;
+//# sourceMappingURL=0021_add_on_credentials.d.ts.map

package/dist/migrations/0021_add_on_credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"0021_add_on_credentials.d.ts","sourceRoot":"","sources":["../../src/migrations/0021_add_on_credentials.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC7E"}

package/dist/migrations/0021_add_on_credentials.js

@@ -0,0 +1,80 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * Wave 0021 — `adminium_add_on_credentials`: the secret a connected add-on was
+ * given, and nothing else (26-add-on-runtime.md §4, D2, D5).
+ *
+ * ─── One row per connected add-on ──────────────────────────────────────────
+ *
+ * Not per attachment. A DHL API key belongs to the add-on the operator
+ * connected, not to each host app it happens to be mounted on — connecting it
+ * twice because it is attached twice would mean two copies of one secret, two
+ * places to revoke, and a disconnect that leaves one behind. The unique index
+ * on `manifest_id` is what makes "connected" a boolean fact about an add-on.
+ *
+ * ─── What is stored, and what is deliberately not ──────────────────────────
+ *
+ * `payload` is AES-256-GCM ciphertext over the whole credential envelope,
+ * encrypted with a key derived from `ADMINIUM_SECRET` — the same discipline
+ * `adminium_connections` uses for DSNs, reached through the same
+ * `config/secrets.ts` helpers rather than a second crypto path. Its plaintext
+ * shape is a JSON object whose keys differ per `kind`, which is precisely why
+ * it is one opaque column and not a set of typed ones: an `api-key` credential
+ * and an `oauth2` token pair have nothing in common worth normalising, and
+ * columns named `access_token` invite a log line that prints them.
+ *
+ * `expires_at` and `scopes` sit OUTSIDE the ciphertext on purpose. Both are
+ * needed to decide whether to refresh and what the consent dialog should say,
+ * and neither is a secret — putting them inside would mean decrypting a token
+ * to find out it had expired, on every request.
+ *
+ * There is no `refresh_token` column. It lives inside `payload` with the access
+ * token, because a refresh token IS the credential once an access token lapses,
+ * and a schema that stores it beside the ciphertext rather than inside it is a
+ * schema that will eventually have it read by something that thought it was
+ * metadata.
+ *
+ * ─── D5: disconnect deletes this row, and only this row ────────────────────
+ *
+ * 24 D16 / 26 D5 — disconnecting keeps every table the add-on brought and
+ * destroys the keys. That is a DELETE here plus nothing anywhere else, which is
+ * a property the schema should make easy to get right: this table holds only
+ * secrets, so "delete the secrets" is one statement and cannot take data with
+ * it by accident.
+ *
+ * The FK cascades for the uninstall path — a credential outliving its manifest
+ * is an orphaned secret nothing can reach to revoke, which is strictly worse
+ * than one that is gone.
+ */
+import { metaTable } from '../prefix.js';
+export async function up(db, c) {
+    await db.schema
+        .createTable(metaTable('add_on_credentials'))
+        .ifNotExists()
+        .addColumn('id', c.id, (col) => col.primaryKey())
+        .addColumn('manifest_id', c.id, (col) => col.notNull())
+        /** `api-key` | `oauth2` — `none` never reaches this table (D2). */
+        .addColumn('kind', c.str(12), (col) => col.notNull())
+        /** AES-256-GCM ciphertext over the whole envelope. Never logged, never served. */
+        .addColumn('payload', c.text, (col) => col.notNull())
+        /** Epoch ms; NULL for a credential that does not expire (an API key). */
+        .addColumn('expires_at', c.ts)
+        /** The granted OAuth scopes, for the consent surface. Not a secret. */
+        .addColumn('scopes', c.json)
+        .addColumn('created_at', c.ts, (col) => col.notNull())
+        .addColumn('updated_at', c.ts, (col) => col.notNull())
+        // Named and table-level: MySQL parses an inline column-level `REFERENCES`
+        // and silently discards it, which would leave the cascade below existing
+        // only in this file (the 2026-07-20 CI onion).
+        .addForeignKeyConstraint('fk_adminium_add_on_credentials_manifest_id', ['manifest_id'], metaTable('manifests'), ['id'], (cb) => cb.onDelete('cascade'))
+        .execute();
+    // One credential per add-on — see the header. Unique rather than merely
+    // indexed, so a second connect is an upsert and can never become a duplicate
+    // secret the disconnect path would miss.
+    await db.schema
+        .createIndex('uq_adminium_add_on_credentials_manifest')
+        .on(metaTable('add_on_credentials'))
+        .columns(['manifest_id'])
+        .unique()
+        .execute();
+}
+//# sourceMappingURL=0021_add_on_credentials.js.map

package/dist/migrations/0021_add_on_credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0021_add_on_credentials.js","sourceRoot":"","sources":["../../src/migrations/0021_add_on_credentials.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAKH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB,EAAE,CAAgB;IAC5D,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;SAC5C,WAAW,EAAE;SACb,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;SAChD,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACvD,mEAAmE;SAClE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrD,kFAAkF;SACjF,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrD,yEAAyE;SACxE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9B,uEAAuE;SACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;SAC3B,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;SACrD,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACtD,0EAA0E;QAC1E,yEAAyE;QACzE,+CAA+C;SAC9C,uBAAuB,CACtB,4CAA4C,EAC5C,CAAC,aAAa,CAAC,EACf,SAAS,CAAC,WAAW,CAAC,EACtB,CAAC,IAAI,CAAC,EACN,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC/B;SACA,OAAO,EAAE,CAAC;IAEb,wEAAwE;IACxE,6EAA6E;IAC7E,yCAAyC;IACzC,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,yCAAyC,CAAC;SACtD,EAAE,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;SACnC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;SACxB,MAAM,EAAE;SACR,OAAO,EAAE,CAAC;AACf,CAAC"}

package/dist/migrations/0022_studio_namespace.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Wave 0022 — the Studio's messages moved namespace, so the operator's
+ * rewordings of them have to move with the messages (10-T06).
+ *
+ * ─── What moved, and why it is not a rename ────────────────────────────────
+ *
+ * `common.studio.*` and `common.studioPages.*` — 971 keys, the whole admin
+ * console — became the `studio` namespace's `*` and `pages.*`. The point was
+ * bundle weight: `studio` is fetched when somebody opens the Studio instead of
+ * shipping in every user's first load. But `adminium_translations` files a row
+ * by `(scope, locale, namespace, key)`, so an override an admin wrote against
+ * the old address stops resolving the moment the message answers to a new one.
+ * Nothing errors. The string simply reverts to the compiled English, on the
+ * one surface whose users are the people who did the rewording.
+ *
+ * So this is a DATA move, in JavaScript rather than SQL: `substr` and string
+ * concatenation are spelled three different ways across sqlite, postgres and
+ * mysql, and the row count here is bounded by how many messages a human has
+ * personally rewritten.
+ *
+ * ─── The two carried keys ──────────────────────────────────────────────────
+ *
+ * The topbar's Studio menu used to title its two items from `studio.hub.title`
+ * and `studio.settingsHub.title`. It paints on every route, long before any
+ * Studio chunk exists, so it now has its own `common:topbar.*` keys.
+ *
+ * An override on either old key is COPIED to the new one rather than only
+ * moved. The alternative is an operator who renamed "Data connections" to
+ * "Databases" finding the page still says Databases and the menu item that
+ * opens it saying Data connections — a split they did not ask for and cannot
+ * see the cause of. The cost is honest and small: two rows where there was
+ * one, so a later reset has to be done twice. Preserving what they configured
+ * is worth more than saving them a click they may never make.
+ *
+ * ─── No version bump ───────────────────────────────────────────────────────
+ *
+ * The i18n version counter in `adminium_settings` is what makes a warm browser
+ * refetch. It is deliberately untouched: a cached override under a key that no
+ * longer exists resolves for nothing and is inert, and the next ordinary write
+ * moves the counter anyway.
+ */
+import type { Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=0022_studio_namespace.d.ts.map

package/dist/migrations/0022_studio_namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"0022_studio_namespace.d.ts","sourceRoot":"","sources":["../../src/migrations/0022_studio_namespace.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAwCrC,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsD3D"}

package/dist/migrations/0022_studio_namespace.js

@@ -0,0 +1,113 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * Wave 0022 — the Studio's messages moved namespace, so the operator's
+ * rewordings of them have to move with the messages (10-T06).
+ *
+ * ─── What moved, and why it is not a rename ────────────────────────────────
+ *
+ * `common.studio.*` and `common.studioPages.*` — 971 keys, the whole admin
+ * console — became the `studio` namespace's `*` and `pages.*`. The point was
+ * bundle weight: `studio` is fetched when somebody opens the Studio instead of
+ * shipping in every user's first load. But `adminium_translations` files a row
+ * by `(scope, locale, namespace, key)`, so an override an admin wrote against
+ * the old address stops resolving the moment the message answers to a new one.
+ * Nothing errors. The string simply reverts to the compiled English, on the
+ * one surface whose users are the people who did the rewording.
+ *
+ * So this is a DATA move, in JavaScript rather than SQL: `substr` and string
+ * concatenation are spelled three different ways across sqlite, postgres and
+ * mysql, and the row count here is bounded by how many messages a human has
+ * personally rewritten.
+ *
+ * ─── The two carried keys ──────────────────────────────────────────────────
+ *
+ * The topbar's Studio menu used to title its two items from `studio.hub.title`
+ * and `studio.settingsHub.title`. It paints on every route, long before any
+ * Studio chunk exists, so it now has its own `common:topbar.*` keys.
+ *
+ * An override on either old key is COPIED to the new one rather than only
+ * moved. The alternative is an operator who renamed "Data connections" to
+ * "Databases" finding the page still says Databases and the menu item that
+ * opens it saying Data connections — a split they did not ask for and cannot
+ * see the cause of. The cost is honest and small: two rows where there was
+ * one, so a later reset has to be done twice. Preserving what they configured
+ * is worth more than saving them a click they may never make.
+ *
+ * ─── No version bump ───────────────────────────────────────────────────────
+ *
+ * The i18n version counter in `adminium_settings` is what makes a warm browser
+ * refetch. It is deliberately untouched: a cached override under a key that no
+ * longer exists resolves for nothing and is inert, and the next ordinary write
+ * moves the counter anyway.
+ */
+import { newId } from '../ids.js';
+import { metaTable } from '../prefix.js';
+/** Old `common` key → its address in the `studio` namespace. */
+function movedKey(key) {
+    if (key.startsWith('studioPages.'))
+        return `pages.${key.slice('studioPages.'.length)}`;
+    if (key.startsWith('studio.'))
+        return key.slice('studio.'.length);
+    return null;
+}
+/** Old `common` key → the `common` key the topbar reads it from now. */
+const CARRIED = {
+    'studio.hub.title': 'topbar.dataConnections',
+    'studio.settingsHub.title': 'topbar.workspaceSettings',
+};
+// No column-helpers parameter: this wave adds no column. It is the only
+// migration in this directory that moves DATA rather than shape, and a
+// declared-but-unused helper would suggest otherwise.
+export async function up(db) {
+    const table = metaTable('translations');
+    const moveDb = db;
+    const rows = await moveDb
+        .selectFrom(table)
+        .select(['id', 'scope', 'locale', 'namespace', 'key', 'value', 'sourceText', 'updatedBy', 'createdAt', 'updatedAt'])
+        .where('namespace', '=', 'common')
+        .execute();
+    for (const row of rows) {
+        const moved = movedKey(row.key);
+        if (moved === null)
+            continue;
+        // Copy BEFORE the move, while the row still says what it used to. Guarded
+        // rather than assumed unique: the unique index is
+        // (scope, locale, namespace, key), and an admin who had already
+        // overridden `topbar.*` — impossible today, but this migration outlives
+        // that fact — must not lose the row they wrote by hand.
+        const carried = CARRIED[row.key];
+        if (carried !== undefined) {
+            const existing = await moveDb
+                .selectFrom(table)
+                .select('id')
+                .where('scope', '=', row.scope)
+                .where('locale', '=', row.locale)
+                .where('namespace', '=', 'common')
+                .where('key', '=', carried)
+                .executeTakeFirst();
+            if (existing === undefined) {
+                await moveDb
+                    .insertInto(table)
+                    .values({
+                    id: newId('trn'),
+                    scope: row.scope,
+                    locale: row.locale,
+                    namespace: 'common',
+                    key: carried,
+                    value: row.value,
+                    sourceText: row.sourceText,
+                    updatedBy: row.updatedBy,
+                    createdAt: row.createdAt,
+                    updatedAt: row.updatedAt,
+                })
+                    .execute();
+            }
+        }
+        await moveDb
+            .updateTable(table)
+            .set({ namespace: 'studio', key: moved })
+            .where('id', '=', row.id)
+            .execute();
+    }
+}
+//# sourceMappingURL=0022_studio_namespace.js.map

package/dist/migrations/0022_studio_namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0022_studio_namespace.js","sourceRoot":"","sources":["../../src/migrations/0022_studio_namespace.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAqBzC,gEAAgE;AAChE,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IACvF,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,OAAO,GAAqC;IAChD,kBAAkB,EAAE,wBAAwB;IAC5C,0BAA0B,EAAE,0BAA0B;CACvD,CAAC;AAEF,wEAAwE;AACxE,uEAAuE;AACvE,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAY,CAAC;IAE5B,MAAM,IAAI,GAAG,MAAM,MAAM;SACtB,UAAU,CAAC,KAAK,CAAC;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;SACnH,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC;SACjC,OAAO,EAAE,CAAC;IAEb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAE7B,0EAA0E;QAC1E,kDAAkD;QAClD,gEAAgE;QAChE,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,MAAM;iBAC1B,UAAU,CAAC,KAAK,CAAC;iBACjB,MAAM,CAAC,IAAI,CAAC;iBACZ,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;iBAC9B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC;iBAChC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC;iBACjC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC;iBAC1B,gBAAgB,EAAE,CAAC;YACtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM;qBACT,UAAU,CAAC,KAAK,CAAC;qBACjB,MAAM,CAAC;oBACN,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;oBAChB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,QAAQ;oBACnB,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC;qBACD,OAAO,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,MAAM,MAAM;aACT,WAAW,CAAC,KAAK,CAAC;aAClB,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACxC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;aACxB,OAAO,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAgBnD,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAED,eAAO,MAAM,cAAc,EAAE,SAAS,aAAa,EAelD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAwBnD,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAED,eAAO,MAAM,cAAc,EAAE,SAAS,aAAa,EAuBlD,CAAC"}

package/dist/migrations/index.js

@@ -32,7 +32,15 @@ import { up as up0010 } from './0010_llm_prompt_version_width.js';
 import { up as up0011 } from './0011_i18n_runtime.js';
 import { up as up0012 } from './0012_locale_width.js';
 import { up as up0013 } from './0013_connection_last_error_hint.js';
+import { up as up0015 } from './0015_connection_tenant_config.js';
 import { up as up0014 } from './0014_public_surface.js';
+import { up as up0016 } from './0016_audit_entity.js';
+import { up as up0017 } from './0017_surface_binding.js';
+import { up as up0018 } from './0018_connection_timezone_source.js';
+import { up as up0019 } from './0019_connection_disabled.js';
+import { up as up0020 } from './0020_manifests_add_on.js';
+import { up as up0021 } from './0021_add_on_credentials.js';
+import { up as up0022 } from './0022_studio_namespace.js';
 export const ALL_MIGRATIONS = [
     { name: '0001_core_auth', up: up0001 },
     { name: '0002_rbac', up: up0002 },
@@ -48,5 +56,13 @@ export const ALL_MIGRATIONS = [
     { name: '0012_locale_width', up: up0012 },
     { name: '0013_connection_last_error_hint', up: up0013 },
     { name: '0014_public_surface', up: up0014 },
+    { name: '0015_connection_tenant_config', up: up0015 },
+    { name: '0016_audit_entity', up: up0016 },
+    { name: '0017_surface_binding', up: up0017 },
+    { name: '0018_connection_timezone_source', up: up0018 },
+    { name: '0019_connection_disabled', up: up0019 },
+    { name: '0020_manifests_add_on', up: up0020 },
+    { name: '0021_add_on_credentials', up: up0021 },
+    { name: '0022_studio_namespace', up: up0022 },
 ];
 //# sourceMappingURL=index.js.map

package/dist/migrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAQxD,MAAM,CAAC,MAAM,cAAc,GAA6B;IACtD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE;IACjC,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC/C,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE;IACxC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE;IAChC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE;IACrC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE;IACrC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE;IACvC,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,MAAM,EAAE;IACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE;IACzC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE;IACzC,EAAE,IAAI,EAAE,iCAAiC,EAAE,EAAE,EAAE,MAAM,EAAE;IACvD,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE;CAC5C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAQ1D,MAAM,CAAC,MAAM,cAAc,GAA6B;IACtD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE;IACjC,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC/C,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE;IACxC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE;IAChC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE;IACrC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE;IACrC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE;IACvC,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,MAAM,EAAE;IACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE;IACzC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE;IACzC,EAAE,IAAI,EAAE,iCAAiC,EAAE,EAAE,EAAE,MAAM,EAAE;IACvD,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC3C,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,MAAM,EAAE;IACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE;IACzC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC5C,EAAE,IAAI,EAAE,iCAAiC,EAAE,EAAE,EAAE,MAAM,EAAE;IACvD,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE;IAChD,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC7C,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE;IAC/C,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE;CAC9C,CAAC"}

package/dist/repos/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACrG,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA4BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM;kBAGd,eAAe,OAAM,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;kBAqBxE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC,UAAU,EAAE,CAAC;IAYxB,qFAAqF;WACxE,MAAM,iBAAiB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;EAM/D;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAML,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACrG,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA4BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM;kBAGd,eAAe,OAAM,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;kBA2BxE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC,UAAU,EAAE,CAAC;IAYxB,qFAAqF;WACxE,MAAM,iBAAiB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;EAM/D;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC"}

package/dist/repos/audit.js

@@ -5,7 +5,7 @@
  * capped at 16 KB serialized (replaced by `{ "_truncated": true }` beyond it).
  */
 import { newId } from '../ids.js';
-import { AUDIT_CHANGES_MAX_BYTES, actorKindSchema, auditCategorySchema, recordRefSchema, } from '../schema/json-payloads.js';
+import { AUDIT_CHANGES_MAX_BYTES, actorKindSchema, auditCategorySchema, auditEntityKeyOf, recordRefSchema, } from '../schema/json-payloads.js';
 import { packJson, readJsonOrNull } from './util.js';
 function mapEntry(row) {
     return {
@@ -37,6 +37,10 @@ export function auditRepo(meta) {
     const { db } = meta;
     return {
         async append(input, at = Date.now()) {
+            const entity = input.entity === null || input.entity === undefined ? null : recordRefSchema.parse(input.entity);
+            // Denormalized per-record lookup keys (30-record-pages.md WS-A): the
+            // indexed columns the activity feed filters on, derived once at write.
+            const entityKeys = entity === null ? null : auditEntityKeyOf(entity);
             const row = {
                 id: newId('aud'),
                 createdAt: at,
@@ -46,7 +50,9 @@ export function auditRepo(meta) {
                 category: auditCategorySchema.parse(input.category),
                 action: input.action,
                 connectionId: input.connectionId ?? null,
-                entity: input.entity === null || input.entity === undefined ? null : packJson(recordRefSchema.parse(input.entity)),
+                entity: entity === null ? null : packJson(entity),
+                entityTable: entityKeys?.entityTable ?? null,
+                entityId: entityKeys?.entityId ?? null,
                 changes: packChanges(input.changes),
                 ip: input.ip ?? null,
                 userAgent: input.userAgent ?? null,

package/dist/repos/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;GAIG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,eAAe,GAIhB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiCrD,SAAS,QAAQ,CAAC,GAAsC;IACtD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/C,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,cAAc,CAAY,GAAG,CAAC,MAAM,CAAC;QAC7C,OAAO,EAAE,cAAc,CAA0B,GAAG,CAAC,OAAO,CAAC;QAC7D,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,WAAW,CAAC,OAAmC;IACtD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAAE,OAAO,UAAU,CAAC;IACxF,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAsB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC1D,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACnD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClH,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAChE,OAAO,QAAQ,CAAC,GAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,IAAI,CACR,SAAyE,EAAE;YAE3E,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,CAAC;iBACjB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC;iBAC1B,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,qFAAqF;QACrF,KAAK,CAAC,EAAE,CAAC,EAAU,EAAE,aAAqB;YACxC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,GAAG,UAAU,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzG,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;GAIG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAIhB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiCrD,SAAS,QAAQ,CAAC,GAAsC;IACtD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/C,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,cAAc,CAAY,GAAG,CAAC,MAAM,CAAC;QAC7C,OAAO,EAAE,cAAc,CAA0B,GAAG,CAAC,OAAO,CAAC;QAC7D,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,WAAW,CAAC,OAAmC;IACtD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAAE,OAAO,UAAU,CAAC;IACxF,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAsB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChH,qEAAqE;YACrE,uEAAuE;YACvE,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACnD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,WAAW,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI;gBAC5C,QAAQ,EAAE,UAAU,EAAE,QAAQ,IAAI,IAAI;gBACtC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAChE,OAAO,QAAQ,CAAC,GAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,IAAI,CACR,SAAyE,EAAE;YAE3E,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,CAAC;iBACjB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC;iBAC1B,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,qFAAqF;QACrF,KAAK,CAAC,EAAE,CAAC,EAAU,EAAE,aAAqB;YACxC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,GAAG,UAAU,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzG,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC"}