@adonis-agora/durable 0.21.1 → 0.23.0

package/dist/providers/dashboard_provider.js

@@ -1,34 +1,60 @@
-import { SESSION_COOKIE_NAME, performLogin, readSession, } from '../src/dashboard/auth.js';
+import { readFile } from 'node:fs/promises';
+import { basename, resolve as resolvePath } from 'node:path';
+import { PassThrough } from 'node:stream';
+import { fileURLToPath } from 'node:url';
+import { SESSION_COOKIE_NAME, performLogin, performSession, readSession, } from '../src/dashboard/auth.js';
 import { compat, enumerateLiveFleet, mergeFleets, } from '../src/dashboard/compat.js';
 import { resolveConfig, } from '../src/dashboard/define_config.js';
 import { BlockedDiagnosticsRecorder } from '../src/dashboard/diagnostics-recorder.js';
 import { dashboardEngineForRole } from '../src/dashboard/gateway-adapter.js';
-import { cancelRun, getRun, health, listRuns, redispatchPendingRun, retryRun, } from '../src/dashboard/handlers.js';
+import { bulkAction, cancelRun, continueRun, getRun, health, listRuns, redispatchPendingRun, retryRun, retryWithInputRun, topology, workers, } from '../src/dashboard/handlers.js';
 import { renderDashboard } from '../src/dashboard/html.js';
 import { renderLoginPage } from '../src/dashboard/login_page.js';
+import { contentTypeFor, renderIndexHtml } from '../src/dashboard/spa.js';
 import { WorkflowEngine } from '../src/index.js';
 import { DURABLE_TRANSPORT } from '../src/role_bindings.js';
 /**
- * Mounts the durable dashboard into an AdonisJS app: a JSON API over the
- * {@link WorkflowEngine}'s read surface, and a single self-contained HTML page
- * that consumes it. All routes sit behind the configurable `authorize` guard from
- * `config/durable_dashboard.ts`.
+ * Directory of the built SPA (`dist/spa`, copied in by `copy:stubs` — see `package.json`), relative to
+ * this compiled provider (`dist/providers`). Resolved lazily (not at module scope) for the same reason
+ * `@adonis-agora/media-dashboard`'s provider resolves its SPA directory lazily: `fileURLToPath` throws
+ * on any non-`file:` `import.meta.url`, which would make this provider unimportable under a test
+ * runner that doesn't use real file URLs.
+ */
+let spaDir;
+function spaDirectory() {
+    spaDir ??= fileURLToPath(new URL('../assets/spa/', import.meta.url));
+    return spaDir;
+}
+/**
+ * Mounts the durable dashboard into an AdonisJS app: the `@adonis-agora/durable-dashboard` React SPA
+ * (a JSON API over the {@link WorkflowEngine}'s read/control surface, served under a configurable
+ * path) plus, for backward compatibility, the original hand-rolled `assets/dashboard.html` at
+ * `<path>/legacy`.
  *
  * Routes (relative to the configured `path`, default `/durable`):
- * - `GET  /`                  → the dashboard HTML
- * - `GET  /api/runs`          → list runs (status/workflow/tag filters, paged)
- * - `GET  /api/runs/:id`      → run detail (run + step timeline + children)
- * - `POST /api/runs/:id/retry`  → re-enqueue the run
- * - `POST /api/runs/:id/redispatch` → re-dispatch a run's lost pending remote steps
- * - `POST /api/runs/:id/cancel` → cancel the run
- * - `GET  /api/health`        → worker-group health
+ * - `GET  /`                          -> the dashboard SPA's `index.html`
+ * - `GET  /assets/:file`              -> the SPA's hashed JS/CSS bundle
+ * - `GET  /legacy`                    -> the original static dashboard (compat fallback)
+ * - `GET  /api/runs`                  -> list runs (status/workflow/tag/namespace/attr filters, paged)
+ * - `GET  /api/runs/:id`              -> run detail (run + step timeline + children)
+ * - `GET  /api/runs/:id/stream`       -> SSE live-tail of one run's lifecycle events
+ * - `POST /api/runs/:id/retry`        -> re-enqueue the run
+ * - `POST /api/runs/:id/retry-with-input` -> fix-and-replay: start a corrected linked run
+ * - `POST /api/runs/:id/redispatch`   -> re-dispatch a run's lost pending remote steps
+ * - `POST /api/runs/:id/cancel`       -> cancel the run
+ * - `POST /api/runs/:id/continue`     -> resume a run paused at a breakpoint
+ * - `POST /api/bulk/:action`          -> bulk retry/cancel every run matching a filter
+ * - `GET  /api/health`                -> worker-group health (compact; legacy HTML)
+ * - `GET  /api/workers`               -> worker-group health (full heartbeats; SPA)
+ * - `GET  /api/topology`              -> this deployment's durable role
+ * - `GET  /api/compat`                -> fleet health / protocol-compatibility panel
  */
 export default class DashboardProvider {
     app;
     constructor(app) {
         this.app = app;
     }
-    /** Warn once so a throwing `login` hook doesn't spam the logs on every failed attempt. */
+    /** Warn once so a throwing `login`/`session` hook doesn't spam the logs on every failed attempt. */
     warnedOnHookThrow = false;
     /**
      * Captures the engine's `capability.unavailable` / `protocol.incompatible` diagnostics events so the
@@ -47,34 +73,15 @@ export default class DashboardProvider {
         if (!config.enabled)
             return;
         const role = this.durableRole();
-        // Route registration can't happen synchronously in `boot()`: at this point in the AdonisJS
-        // lifecycle the HTTP server/router binding may not be resolvable yet (bindings from other
-        // providers' `boot()` methods can still be pending), and — critically — the *documented*
-        // `@adonisjs/core/services/router` singleton is only assigned once the app's "booted" hooks run
-        // (`await app.booted(async () => { router = ... })` inside that service module itself), which
-        // fire strictly AFTER every provider's own `boot()`. A provider that imports that singleton and
-        // calls `router.get(...)` directly inside `boot()` crashes every entrypoint (serve/ace/tests)
-        // that registers it, because `router` is still `undefined` at that point.
-        //
-        // Deferring to `app.booted(...)` runs our route registration as another "booted" hook — the
-        // same mechanism the router service uses to become available in the first place — which is
-        // guaranteed to fire BEFORE `app.start()`'s callback boots the HTTP server and commits the
-        // router (the last point at which routes can still be added). Resolving `router` fresh from the
-        // container here (rather than depending on that service singleton) is also the same pattern
-        // `@adonisjs/core`'s own `AppServiceProvider` uses internally.
+        // Route registration can't happen synchronously in `boot()` — see the long-standing note this
+        // provider always carried: the router singleton isn't committed until the app's "booted" hooks
+        // run, which fire strictly AFTER every provider's own `boot()`.
         await this.app.booted(async () => {
             const router = await this.app.container.make('router');
             this.registerRoutes(router, config, role);
             await this.attachDiagnostics(role);
         });
     }
-    /**
-     * Subscribe the {@link diagnostics} recorder to the store-backed engine's lifecycle events so the
-     * `/compat` panel is fed live (design §10). Store-role only: a `tenant` pod owns no engine (structural
-     * isolation), so its panel shows blocked runs reason-only. Defensive: if the engine can't be resolved
-     * (the dashboard mounted without `@adonis-agora/durable`'s provider), the recorder simply stays empty
-     * rather than crashing boot.
-     */
     async attachDiagnostics(role) {
         if (role === 'tenant')
             return;
@@ -89,27 +96,17 @@ export default class DashboardProvider {
     registerRoutes(router, config, role) {
         const apiBase = `${config.path}/api`;
         // Resolve the dashboard's read/control port lazily per request, branched by role (design §5/§8):
-        // a store role resolves the engine (built by @adonis-agora/durable's provider); a store-less `tenant`
+        // a store role adapts the engine (built by @adonis-agora/durable's provider); a store-less `tenant`
         // pod resolves the DURABLE_RUN_GATEWAY token (a ProxyRunGateway) and adapts it — NO engine, NO store.
         const resolveEngine = () => dashboardEngineForRole(role, this.app.container, WorkflowEngine);
         const deps = async () => ({ engine: await resolveEngine() });
-        // Built-in `dashboardAuth` login screen (opt-in). Registered ONLY when configured, so omitting
-        // `dashboardAuth` leaves route registration byte-for-byte as it was. These endpoints are public
-        // (behind NEITHER guard): they MINT the session the guard checks for, and the login page must
-        // stay reachable while unauthenticated — including in production, where the default `authorize`
-        // hook would otherwise deny it.
+        // Built-in `dashboardAuth` (Mode A `session` and/or Mode B `login`, opt-in). Registered ONLY when
+        // configured, so omitting `dashboardAuth` leaves route registration byte-for-byte as it was. These
+        // endpoints are public (behind NEITHER guard): they MINT the session the guard checks for.
         if (config.dashboardAuth) {
             this.registerAuthRoutes(router, config, config.dashboardAuth);
         }
-        // The HTML page.
-        router
-            .get(config.path === '' ? '/' : config.path, async (ctx) => {
-            if (!(await this.enforce(config, ctx, 'page')))
-                return;
-            ctx.response.header('content-type', 'text/html; charset=utf-8');
-            return ctx.response.send(renderDashboard(apiBase));
-        })
-            .as('durable_dashboard.index');
+        this.registerSpaRoutes(router, config, apiBase);
         // JSON API.
         const json = (handler) => {
             return async (ctx) => {
@@ -129,13 +126,46 @@ export default class DashboardProvider {
         router.get(`${apiBase}/runs`, json(listRuns)).as('durable_dashboard.runs.index');
         router.get(`${apiBase}/runs/:id`, json(getRun)).as('durable_dashboard.runs.show');
         router.post(`${apiBase}/runs/:id/retry`, json(retryRun)).as('durable_dashboard.runs.retry');
+        router
+            .post(`${apiBase}/runs/:id/retry-with-input`, json(retryWithInputRun))
+            .as('durable_dashboard.runs.retry_with_input');
         router
             .post(`${apiBase}/runs/:id/redispatch`, json(redispatchPendingRun))
             .as('durable_dashboard.runs.redispatch');
         router.post(`${apiBase}/runs/:id/cancel`, json(cancelRun)).as('durable_dashboard.runs.cancel');
+        router
+            .post(`${apiBase}/runs/:id/continue`, json(continueRun))
+            .as('durable_dashboard.runs.continue');
+        router.post(`${apiBase}/bulk/:action`, json(bulkAction)).as('durable_dashboard.bulk');
         router
             .get(`${apiBase}/health`, json((d) => health(d)))
             .as('durable_dashboard.health');
+        router
+            .get(`${apiBase}/workers`, json((d) => workers(d)))
+            .as('durable_dashboard.workers');
+        router
+            .get(`${apiBase}/topology`, async (ctx) => {
+            if (!(await this.enforce(config, ctx, 'api')))
+                return;
+            // Only a `TenantConfig` carries a `partition` (its `<name>@<tenant>` routing suffix, spec
+            // §6.1) — the field this dashboard's `DurableTopology.tenant` badge actually names.
+            const durableConfig = this.app.config.get('durable', {});
+            const tenant = durableConfig.role === 'tenant' ? durableConfig.partition : undefined;
+            const result = topology(role, tenant);
+            return ctx.response.status(result.status).json(result.body);
+        })
+            .as('durable_dashboard.topology');
+        // Live-tail one run's lifecycle events over SSE — needs the raw HTTP response, so it's wired
+        // directly here rather than through the JSON `ApiResponse` convention the other routes share.
+        router
+            .get(`${apiBase}/runs/:id/stream`, async (ctx) => {
+            if (!(await this.enforce(config, ctx, 'api')))
+                return;
+            const id = ctx.params.id;
+            const engine = await resolveEngine();
+            await this.streamRun(ctx, engine, id);
+        })
+            .as('durable_dashboard.runs.stream');
         // Fleet health / protocol-compatibility panel (design §7.6, §10): per queue/group/pod protocol +
         // negotiated level + red-flag reason on incompatibility, plus blocked runs with their structured delta.
         router
@@ -155,17 +185,85 @@ export default class DashboardProvider {
             .as('durable_dashboard.compat');
     }
     /**
-     * Assemble the {@link CompatSource} the `/compat` handler reads (design §10). The fleet view is the LIVE
-     * green fleet enumerated off the transport (every advertising worker — compatible OR incompatible, even
-     * one that never triggered a blocked dispatch) merged with the descriptors the {@link diagnostics}
-     * recorder reconstructed from past blocks; the live descriptors win per instance (fresher). Captured
-     * diagnostics + blocked runs stay as they were.
-     *
-     * The live enumeration is snapshotted ONCE per request (an `async` fetch off the transport), then handed
-     * to the handler as a synchronous `fleet()` closure — so {@link CompatSource} keeps its cheap sync shape.
-     * A `tenant` pod (or a transport without the fleet capability) has no {@link DURABLE_TRANSPORT} binding →
-     * live fleet is empty → the panel degrades to the diagnostics-only view exactly as before.
+     * Mount the React SPA at `config.path` (default) plus a `<path>/legacy` fallback serving the
+     * original hand-rolled `assets/dashboard.html` — kept for any bookmark/integration built against it,
+     * but no longer the default (per the SPA rollout, the built React console is now `GET <path>`).
+     */
+    registerSpaRoutes(router, config, apiBase) {
+        const indexPath = config.path === '' ? '/' : config.path;
+        router
+            .get(indexPath, async (ctx) => {
+            if (!(await this.enforce(config, ctx, 'page')))
+                return;
+            let html;
+            try {
+                html = await readFile(resolvePath(spaDirectory(), 'index.html'), 'utf8');
+            }
+            catch {
+                return ctx.response
+                    .status(404)
+                    .send('The durable dashboard SPA is not built. Run `pnpm --filter @adonis-agora/durable-dashboard build` (or the package build) to emit dist/spa.');
+            }
+            return ctx.response
+                .header('content-type', 'text/html; charset=utf-8')
+                .header('cache-control', 'no-store, must-revalidate')
+                .send(renderIndexHtml(html, config.path, apiBase));
+        })
+            .as('durable_dashboard.index');
+        router
+            .get(`${config.path}/assets/:file`, async (ctx) => {
+            if (!(await this.enforce(config, ctx, 'page')))
+                return;
+            const file = basename(String(ctx.params.file));
+            const root = resolvePath(spaDirectory(), 'assets');
+            const assetPath = resolvePath(root, file);
+            if (!assetPath.startsWith(root))
+                return ctx.response.status(404).send('');
+            let bytes;
+            try {
+                bytes = await readFile(assetPath);
+            }
+            catch {
+                return ctx.response.status(404).send('');
+            }
+            return ctx.response
+                .header('content-type', contentTypeFor(file))
+                .header('cache-control', 'public, max-age=31536000, immutable')
+                .send(bytes);
+        })
+            .as('durable_dashboard.assets');
+        router
+            .get(`${config.path}/legacy`, async (ctx) => {
+            if (!(await this.enforce(config, ctx, 'page')))
+                return;
+            ctx.response.header('content-type', 'text/html; charset=utf-8');
+            return ctx.response.send(renderDashboard(apiBase));
+        })
+            .as('durable_dashboard.legacy');
+    }
+    /**
+     * Stream one run's lifecycle events as `text/event-stream`, via AdonisJS's `response.stream()` (a
+     * managed pipe with graceful error handling — no raw `ServerResponse` writes). The stream stays
+     * open until the client disconnects, at which point the engine subscription is torn down and the
+     * stream ended, mirroring the NestJS sibling's `@Sse` route (`gateway.subscribe` unsubscribed on
+     * teardown).
      */
+    async streamRun(ctx, engine, runId) {
+        ctx.response.header('content-type', 'text/event-stream');
+        ctx.response.header('cache-control', 'no-cache');
+        ctx.response.header('connection', 'keep-alive');
+        ctx.response.header('x-accel-buffering', 'no');
+        const stream = new PassThrough();
+        const unsubscribe = engine.subscribe(runId, (event) => {
+            stream.write(`data: ${JSON.stringify(event)}\n\n`);
+        });
+        const cleanup = () => {
+            unsubscribe();
+            stream.end();
+        };
+        ctx.request.request.on('close', cleanup);
+        ctx.response.stream(stream);
+    }
     async compatSource(engine) {
         const live = await enumerateLiveFleet(await this.fleetTransport());
         const fleet = mergeFleets(this.diagnostics.fleet(), live);
@@ -176,9 +274,6 @@ export default class DashboardProvider {
             diagnosticsFor: (runId) => this.diagnostics.diagnosticsFor(runId),
         };
     }
-    /** Resolve the store role's task transport (published under {@link DURABLE_TRANSPORT}) for LIVE fleet
-     *  enumeration, or `null` when unavailable — a `tenant` pod never binds it, and a mis-mounted dashboard
-     *  degrades cleanly to the diagnostics-only view rather than crashing the panel. */
     async fleetTransport() {
         try {
             return (await this.app.container.make(DURABLE_TRANSPORT));
@@ -188,64 +283,84 @@ export default class DashboardProvider {
         }
     }
     /**
-     * Mount the built-in `dashboardAuth` endpoints under `basePath`. All three are public (no guard):
-     * they create/destroy the session the {@link enforce} guard checks for.
+     * Mount the built-in `dashboardAuth` endpoints under `basePath`. All are public (no guard): they
+     * create/destroy the session the {@link enforce} guard checks for.
      *
-     * - `GET  <base>/login`  → the server-rendered login page (never varies per request beyond the
-     *    developer-controlled `basePath`; `returnTo`/`error` are read client-side from the query).
-     * - `POST <base>/login`  → verifies credentials via the host `login` hook and mints the cookie.
-     *    Called by the login page's own `fetch` (JSON body). Uniform `401` on ANY failure — unknown
-     *    user, wrong password, or a throwing hook — so there is no user-enumeration.
-     * - `GET  <base>/logout` → clears the cookie and redirects back to the login page. A plain `GET`
-     *    (idempotent, only ever destroys the caller's own session) so a simple `<a href>` works.
+     * - `GET  <base>/login`  -> the server-rendered login page (Mode B only).
+     * - `POST <base>/login`  -> verifies credentials via the host `login` hook and mints the cookie.
+     * - `POST <base>/session` -> Mode A: verifies the HOST APP's own auth (off the raw request) via the
+     *    `session` hook and mints the cookie. No body — the hook reads whatever it needs off `request`.
+     *    `204` on success, uniform `401` on denial. Mirrors `@dudousxd/nestjs-durable-dashboard`'s
+     *    `DurableAuthController.session` and `client/console-session.ts`'s `mintDurableConsoleSession`.
+     * - `GET  <base>/logout` -> clears the cookie and redirects to the login page (Mode B) or the
+     *    dashboard root (Mode A only). A plain `GET` (idempotent, only ever destroys the caller's own
+     *    session) so a simple `<a href>` works.
      */
     registerAuthRoutes(router, config, auth) {
         const loginPath = `${config.path}/login`;
+        const sessionPath = `${config.path}/session`;
         const logoutPath = `${config.path}/logout`;
-        router
-            .get(loginPath, async (ctx) => {
-            ctx.response.header('content-type', 'text/html; charset=utf-8');
-            ctx.response.header('cache-control', 'no-store, must-revalidate');
-            return ctx.response.send(renderLoginPage(config.path));
-        })
-            .as('durable_dashboard.login.page');
-        router
-            .post(loginPath, async (ctx) => {
-            const outcome = await performLogin(auth, ctx.request.body(), config.path);
-            if (outcome.kind === 'bad-request') {
-                return ctx.response.status(400).json({ error: outcome.message });
-            }
-            if (outcome.kind === 'unauthorized') {
-                // A throwing hook is a denial (never a 500), warn-logged once so a buggy hook doesn't
-                // flood the logs. The client sees the same uniform 401 either way.
-                if (outcome.hookError !== undefined && !this.warnedOnHookThrow) {
-                    this.warnedOnHookThrow = true;
-                    const message = outcome.hookError instanceof Error
-                        ? outcome.hookError.message
-                        : String(outcome.hookError);
-                    const logger = await this.app.container.make('logger');
-                    logger.warn(`dashboardAuth login hook threw; treating as denial. ${message}`);
+        if (auth.login) {
+            router
+                .get(loginPath, async (ctx) => {
+                ctx.response.header('content-type', 'text/html; charset=utf-8');
+                ctx.response.header('cache-control', 'no-store, must-revalidate');
+                return ctx.response.send(renderLoginPage(config.path));
+            })
+                .as('durable_dashboard.login.page');
+            router
+                .post(loginPath, async (ctx) => {
+                const outcome = await performLogin(auth, ctx.request.body(), config.path);
+                if (outcome.kind === 'bad-request') {
+                    return ctx.response.status(400).json({ error: outcome.message });
                 }
-                return ctx.response.status(401).json({ error: outcome.message });
-            }
-            this.writeSessionCookie(ctx, auth, outcome.cookieValue);
-            return ctx.response.status(200).json({ redirectTo: outcome.redirectTo });
-        })
-            .as('durable_dashboard.login.submit');
+                if (outcome.kind === 'unauthorized') {
+                    this.warnHookThrow(outcome.hookError);
+                    return ctx.response.status(401).json({ error: outcome.message });
+                }
+                this.writeSessionCookie(ctx, auth, outcome.cookieValue);
+                return ctx.response.status(200).json({ redirectTo: outcome.redirectTo });
+            })
+                .as('durable_dashboard.login.submit');
+        }
+        if (auth.session) {
+            router
+                .post(sessionPath, async (ctx) => {
+                const outcome = await performSession(auth, ctx.request.request);
+                if (outcome.kind === 'unauthorized') {
+                    this.warnHookThrow(outcome.hookError);
+                    return ctx.response.status(401).json({ error: 'unauthorized' });
+                }
+                this.writeSessionCookie(ctx, auth, outcome.cookieValue);
+                return ctx.response.status(204).send('');
+            })
+                .as('durable_dashboard.session.mint');
+        }
         router
             .get(logoutPath, async (ctx) => {
             ctx.response.clearCookie(SESSION_COOKIE_NAME, { path: '/' });
-            return ctx.response.redirect().toPath(loginPath);
+            return ctx.response.redirect().toPath(auth.login ? loginPath : config.path || '/');
         })
             .as('durable_dashboard.logout');
     }
+    async warnHookThrow(hookError) {
+        if (hookError === undefined || this.warnedOnHookThrow)
+            return;
+        this.warnedOnHookThrow = true;
+        const message = hookError instanceof Error ? hookError.message : String(hookError);
+        const logger = await this.app.container.make('logger');
+        logger.warn(`dashboardAuth login/session hook threw; treating as denial. ${message}`);
+    }
     /**
      * Run the guards for a dashboard resource. Composes the existing `authorize` hook (bearer
      * token/custom) with the optional `dashboardAuth` session guard — BOTH must pass:
      *
-     * 1. `authorize` fails → `403` (unchanged behavior).
-     * 2. `dashboardAuth` configured AND no valid session → for a `page` request, redirect `302` to
-     *    the login page carrying a sanitized `returnTo`; for an `api` request, a plain `401`.
+     * 1. `authorize` fails -> `403` (unchanged behavior).
+     * 2. `dashboardAuth` configured AND no valid session -> for a `page` request, redirect `302` to
+     *    the login page (Mode B) carrying a sanitized `returnTo`, or a `401` "session required" notice
+     *    (Mode A only, no login page to redirect to); for an `api` request, a plain
+     *    `401 { error: 'unauthorized', auth: { modes } }` — the `modes` list lets the SPA's client
+     *    (`durable-client.ts`) decide whether to offer the login page.
      *
      * When `dashboardAuth` is unconfigured only step 1 runs, so behavior is byte-for-byte unchanged.
      * Returns `false` (and has already written the response) when the request must short-circuit.
@@ -253,10 +368,6 @@ export default class DashboardProvider {
     async enforce(config, ctx, mode) {
         const allowed = await config.authorize(ctx);
         if (!allowed) {
-            // A custom hook may have WRITTEN its own denial before returning false — typically a redirect
-            // to the host app's login page (`ctx.response.redirect('/login')`), the natural UX when the
-            // dashboard is guarded by the app's own session instead of a bearer token. Respect it: only
-            // fall back to the uniform 403 when the hook left the response untouched (no Location header).
             if (!ctx.response.getHeader('location')) {
                 ctx.response.status(403).json({ error: 'forbidden' });
             }
@@ -269,24 +380,27 @@ export default class DashboardProvider {
         if (session)
             return true;
         if (mode === 'page') {
-            const returnTo = ctx.request.url(true);
-            ctx.response.redirect().withQs('returnTo', returnTo).toPath(`${config.path}/login`);
+            if (auth.login) {
+                const returnTo = ctx.request.url(true);
+                ctx.response.redirect().withQs('returnTo', returnTo).toPath(`${config.path}/login`);
+                return false;
+            }
+            // Mode A only: there's no login page to send the browser to — this deployment expects the
+            // host app to mint a session via `POST <path>/session` before ever navigating here.
+            ctx.response
+                .status(401)
+                .header('content-type', 'text/html; charset=utf-8')
+                .header('cache-control', 'no-store, must-revalidate')
+                .send('<!doctype html><html><body style="font-family:ui-monospace,monospace;background:#09090b;color:#e7e7ea;display:flex;align-items:center;justify-content:center;height:100vh;margin:0"><p>Open this console from your application.</p></body></html>');
             return false;
         }
-        ctx.response.status(401).json({ error: 'unauthorized' });
+        ctx.response.status(401).json({ error: 'unauthorized', auth: { modes: auth.modes } });
         return false;
     }
-    /** Read the raw (unencoded) session cookie value, or `undefined` when absent. */
     readSessionCookie(ctx) {
         const value = ctx.request.plainCookie(SESSION_COOKIE_NAME, undefined, false);
         return typeof value === 'string' && value !== '' ? value : undefined;
     }
-    /**
-     * Write the signed session as an unsigned (`plainCookie`, `encode: false`) cookie — the value
-     * carries its own HMAC signature, so AdonisJS's cookie signing would be redundant double-wrapping.
-     * `HttpOnly` + `SameSite=Lax` (blocks cross-site POSTs carrying the cookie — CSRF coverage) +
-     * `Secure` on https. `Path=/` so it reaches both the UI and API mounts regardless of prefix.
-     */
     writeSessionCookie(ctx, auth, value) {
         ctx.response.plainCookie(SESSION_COOKIE_NAME, value, {
             httpOnly: true,
@@ -297,7 +411,6 @@ export default class DashboardProvider {
             encode: false,
         });
     }
-    /** Detach the diagnostics subscription so the recorder stops listening on a clean shutdown/redeploy. */
     async shutdown() {
         this.detachDiagnostics?.();
         this.detachDiagnostics = null;

package/dist/providers/dashboard_provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard_provider.js","sourceRoot":"","sources":["../../providers/dashboard_provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,mBAAmB,EACnB,YAAY,EACZ,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,MAAM,EACN,kBAAkB,EAClB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,aAAa,GACd,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAKL,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,QAAQ,GACT,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACd;IAAtB,YAAsB,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAEjD,0FAA0F;IAClF,iBAAiB,GAAG,KAAK,CAAC;IAElC;;;;OAIG;IACc,WAAW,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAChE,oFAAoF;IAC5E,iBAAiB,GAAwB,IAAI,CAAC;IAEtD,oGAAoG;IAC5F,WAAW;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAgB,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAyB,mBAAmB,EAAE,EAAE,CAAC,CACrE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEhC,2FAA2F;QAC3F,0FAA0F;QAC1F,yFAAyF;QACzF,gGAAgG;QAChG,8FAA8F;QAC9F,gGAAgG;QAChG,8FAA8F;QAC9F,0EAA0E;QAC1E,EAAE;QACF,4FAA4F;QAC5F,2FAA2F;QAC3F,2FAA2F;QAC3F,gGAAgG;QAChG,4FAA4F;QAC5F,+DAA+D;QAC/D,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,iBAAiB,CAAC,IAA+C;QAC7E,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,4FAA4F;QAC9F,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,MAAyB,EACzB,MAAsC,EACtC,IAA+C;QAE/C,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,MAAM,CAAC;QAErC,iGAAiG;QACjG,sGAAsG;QACtG,sGAAsG;QACtG,MAAM,aAAa,GAAG,GAA6B,EAAE,CACnD,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;QAE5E,+FAA+F;QAC/F,gGAAgG;QAChG,8FAA8F;QAC9F,gGAAgG;QAChG,gCAAgC;QAChC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,CAAC;QAED,iBAAiB;QACjB,MAAM;aACH,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACzD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO;YACvD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAChE,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC;aACD,EAAE,CAAC,yBAAyB,CAAC,CAAC;QAEjC,YAAY;QACZ,MAAM,IAAI,GAAG,CAAC,OAA2D,EAAE,EAAE;YAC3E,OAAO,KAAK,EAAE,GAAgB,EAAE,EAAE;gBAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBAAE,OAAO;gBACtD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC9D,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,QAAQ;yBAChB,MAAM,CAAC,GAAG,CAAC;yBACX,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;QAC5F,MAAM;aACH,IAAI,CAAC,GAAG,OAAO,sBAAsB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;aAClE,EAAE,CAAC,mCAAmC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC;QAC/F,MAAM;aACH,GAAG,CACF,GAAG,OAAO,SAAS,EACnB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACvB;aACA,EAAE,CAAC,0BAA0B,CAAC,CAAC;QAElC,iGAAiG;QACjG,wGAAwG;QACxG,MAAM;aACH,GAAG,CAAC,GAAG,OAAO,SAAS,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACnD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC;gBAC5E,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,QAAQ;qBAChB,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,YAAY,CAAC,MAAuB;QAChD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO;YACL,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE;YACvE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;YAClB,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC;SAClE,CAAC;IACJ,CAAC;IAED;;wFAEoF;IAC5E,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAmB,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,kBAAkB,CACxB,MAAyB,EACzB,MAAsC,EACtC,IAA2B;QAE3B,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC;QACzC,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,SAAS,CAAC;QAE3C,MAAM;aACH,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC;aACD,EAAE,CAAC,8BAA8B,CAAC,CAAC;QAEtC,MAAM;aACH,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACpC,sFAAsF;gBACtF,mEAAmE;gBACnE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;oBAC9B,MAAM,OAAO,GACX,OAAO,CAAC,SAAS,YAAY,KAAK;wBAChC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;wBAC3B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,uDAAuD,OAAO,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC;aACD,EAAE,CAAC,gCAAgC,CAAC,CAAC;QAExC,MAAM;aACH,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,OAAO,CACnB,MAAsC,EACtC,GAAgB,EAChB,IAAoB;QAEpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,8FAA8F;YAC9F,4FAA4F;YAC5F,4FAA4F;YAC5F,+FAA+F;YAC/F,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IACzE,iBAAiB,CAAC,GAAgB;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,GAAgB,EAAE,IAA2B,EAAE,KAAa;QACrF,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE;YACnD,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE;YAC5B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACrC,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,GAAgB;IACpC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAA4C;QACxD,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAmD;QACxE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"dashboard_provider.js","sourceRoot":"","sources":["../../providers/dashboard_provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAEL,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,MAAM,EACN,kBAAkB,EAClB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,aAAa,GACd,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAKL,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,EACN,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,iBAAiB,EACjB,QAAQ,EACR,OAAO,GACR,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;;GAMG;AACH,IAAI,MAA0B,CAAC;AAC/B,SAAS,YAAY;IACnB,MAAM,KAAK,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACd;IAAtB,YAAsB,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAEjD,oGAAoG;IAC5F,iBAAiB,GAAG,KAAK,CAAC;IAElC;;;;OAIG;IACc,WAAW,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAChE,oFAAoF;IAC5E,iBAAiB,GAAwB,IAAI,CAAC;IAEtD,oGAAoG;IAC5F,WAAW;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAgB,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAyB,mBAAmB,EAAE,EAAE,CAAC,CACrE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEhC,8FAA8F;QAC9F,+FAA+F;QAC/F,gEAAgE;QAChE,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,IAA+C;QAC7E,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,4FAA4F;QAC9F,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,MAAyB,EACzB,MAAsC,EACtC,IAA+C;QAE/C,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,MAAM,CAAC;QAErC,iGAAiG;QACjG,oGAAoG;QACpG,sGAAsG;QACtG,MAAM,aAAa,GAAG,GAA6B,EAAE,CACnD,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;QAE5E,kGAAkG;QAClG,mGAAmG;QACnG,2FAA2F;QAC3F,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEhD,YAAY;QACZ,MAAM,IAAI,GAAG,CAAC,OAA2D,EAAE,EAAE;YAC3E,OAAO,KAAK,EAAE,GAAgB,EAAE,EAAE;gBAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBAAE,OAAO;gBACtD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC9D,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,QAAQ;yBAChB,MAAM,CAAC,GAAG,CAAC;yBACX,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;QAC5F,MAAM;aACH,IAAI,CAAC,GAAG,OAAO,4BAA4B,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;aACrE,EAAE,CAAC,yCAAyC,CAAC,CAAC;QACjD,MAAM;aACH,IAAI,CAAC,GAAG,OAAO,sBAAsB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;aAClE,EAAE,CAAC,mCAAmC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC;QAC/F,MAAM;aACH,IAAI,CAAC,GAAG,OAAO,oBAAoB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;aACvD,EAAE,CAAC,iCAAiC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;QACtF,MAAM;aACH,GAAG,CACF,GAAG,OAAO,SAAS,EACnB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACvB;aACA,EAAE,CAAC,0BAA0B,CAAC,CAAC;QAClC,MAAM;aACH,GAAG,CACF,GAAG,OAAO,UAAU,EACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CACxB;aACA,EAAE,CAAC,2BAA2B,CAAC,CAAC;QACnC,MAAM;aACH,GAAG,CAAC,GAAG,OAAO,WAAW,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACrD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtD,0FAA0F;YAC1F,oFAAoF;YACpF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAgB,SAAS,EAAE,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC;aACD,EAAE,CAAC,4BAA4B,CAAC,CAAC;QAEpC,6FAA6F;QAC7F,8FAA8F;QAC9F,MAAM;aACH,GAAG,CAAC,GAAG,OAAO,kBAAkB,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC;aACD,EAAE,CAAC,+BAA+B,CAAC,CAAC;QAEvC,iGAAiG;QACjG,wGAAwG;QACxG,MAAM;aACH,GAAG,CAAC,GAAG,OAAO,SAAS,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACnD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO;YACtD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC;gBAC5E,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,QAAQ;qBAChB,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CACvB,MAAyB,EACzB,MAAsC,EACtC,OAAe;QAEf,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAEzD,MAAM;aACH,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO;YACvD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,CAAC,QAAQ;qBAChB,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CACH,4IAA4I,CAC7I,CAAC;YACN,CAAC;YACD,OAAO,GAAG,CAAC,QAAQ;iBAChB,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBAClD,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;iBACpD,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC;aACD,EAAE,CAAC,yBAAyB,CAAC,CAAC;QAEjC,MAAM;aACH,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,eAAe,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YAC7D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO;YACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,GAAG,CAAC,QAAQ;iBAChB,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;iBAC5C,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC;iBAC9D,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;QAElC,MAAM;aACH,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,SAAS,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACvD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO;YACvD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAChE,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,SAAS,CAAC,GAAgB,EAAE,MAAuB,EAAE,KAAa;QAC9E,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,CAAC,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAuB;QAChD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO;YACL,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE;YACvE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;YAClB,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC;SAClE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAmB,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,kBAAkB,CACxB,MAAyB,EACzB,MAAsC,EACtC,IAA2B;QAE3B,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC;QAC7C,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,SAAS,CAAC;QAE3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM;iBACH,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAChE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;gBAClE,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC;iBACD,EAAE,CAAC,8BAA8B,CAAC,CAAC;YAEtC,MAAM;iBACH,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACpC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;gBACxD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC;iBACD,EAAE,CAAC,gCAAgC,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM;iBACH,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC/B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChE,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACpC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;gBACxD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC,CAAC;iBACD,EAAE,CAAC,gCAAgC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM;aACH,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACrF,CAAC,CAAC;aACD,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAAkB;QAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO;QAC9D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,MAAM,OAAO,GAAG,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,+DAA+D,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,OAAO,CACnB,MAAsC,EACtC,GAAgB,EAChB,IAAoB;QAEpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,0FAA0F;YAC1F,oFAAoF;YACpF,GAAG,CAAC,QAAQ;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBAClD,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;iBACpD,IAAI,CACH,mPAAmP,CACpP,CAAC;YACJ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CAAC,GAAgB;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAEO,kBAAkB,CAAC,GAAgB,EAAE,IAA2B,EAAE,KAAa;QACrF,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE;YACnD,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE;YAC5B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACrC,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,GAAgB;IACpC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAA4C;QACxD,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAmD;QACxE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC"}

package/dist/src/dashboard/attr-filter.d.ts

@@ -0,0 +1,8 @@
+import type { AttributeFilter } from '../interfaces.js';
+/**
+ * Parse `attr=key:op:value` query params (repeatable, ANDed) into {@link AttributeFilter}s — e.g.
+ * `?attr=amount:gte:200&attr=tier:eq:pro`. `op` must be a known operator; a colon in the value is
+ * preserved (only the first two colons delimit). Malformed entries are skipped.
+ */
+export declare function parseAttrFilters(attr?: string | string[]): AttributeFilter[] | undefined;
+//# sourceMappingURL=attr-filter.d.ts.map

package/dist/src/dashboard/attr-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attr-filter.d.ts","sourceRoot":"","sources":["../../../src/dashboard/attr-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,kBAAkB,CAAC;AAkBrE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,eAAe,EAAE,GAAG,SAAS,CAUxF"}

package/dist/src/dashboard/attr-filter.js

@@ -0,0 +1,35 @@
+/**
+ * Ported from `@dudousxd/nestjs-durable-dashboard`'s `attr-filter.ts` — parses the same
+ * `attr=key:op:value` query convention so the dashboard's search-attribute filtering behaves
+ * identically across both ecosystems.
+ */
+const ATTR_OPS = new Set(['eq', 'ne', 'gt', 'gte', 'lt', 'lte']);
+/** Coerce a query-string value: `true`/`false` -> boolean, numeric -> number, else the raw string. */
+function coerce(v) {
+    if (v === 'true')
+        return true;
+    if (v === 'false')
+        return false;
+    if (v !== '' && !Number.isNaN(Number(v)))
+        return Number(v);
+    return v;
+}
+/**
+ * Parse `attr=key:op:value` query params (repeatable, ANDed) into {@link AttributeFilter}s — e.g.
+ * `?attr=amount:gte:200&attr=tier:eq:pro`. `op` must be a known operator; a colon in the value is
+ * preserved (only the first two colons delimit). Malformed entries are skipped.
+ */
+export function parseAttrFilters(attr) {
+    if (!attr)
+        return undefined;
+    const raw = Array.isArray(attr) ? attr : [attr];
+    const filters = [];
+    for (const entry of raw) {
+        const [key, op, ...rest] = entry.split(':');
+        if (!key || !ATTR_OPS.has(op) || rest.length === 0)
+            continue;
+        filters.push({ key, op: op, value: coerce(rest.join(':')) });
+    }
+    return filters.length ? filters : undefined;
+}
+//# sourceMappingURL=attr-filter.js.map

package/dist/src/dashboard/attr-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attr-filter.js","sourceRoot":"","sources":["../../../src/dashboard/attr-filter.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAE9E,sGAAsG;AACtG,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAwB;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAiB,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC"}