@agent-native/core 0.85.7 → 0.86.1

package/dist/db-admin/operations.js

@@ -1,18 +1,19 @@
 /**
- * Dev-mode database admin operations.
+ * Database admin operations.
  *
  * Pure, dialect-agnostic, RAW/UNSCOPED helpers backing the Supabase-Studio-like
  * DB admin. These run the FULL database with no per-user `accessFilter`
- * scoping — they are a developer tool, gated to dev + localhost at the route
- * and agent-tool layers. Do NOT call these from any production-reachable
- * surface.
+ * scoping. Callers MUST gate access before invoking them. The built-in core
+ * route gates this to dev + localhost; production-reachable surfaces must pass
+ * an explicit runtime for the target database and enforce their own admin-only
+ * checks before reading or mutating.
  *
  * All access goes through the unified `getDbExec()` client, which uses `?`
  * placeholders (auto-converted to `$1,$2,…` for Postgres) and returns rows
  * keyed by column name. Identifiers are validated against a strict pattern and
  * always double-quoted; values are ALWAYS parameterized — never interpolated.
  */
-import { getDbExec, getDialect, isPostgres } from "../db/client.js";
+import { getDbExec, getDialect, } from "../db/client.js";
 import { notifyActionChange } from "../server/action-change.js";
 // ---------------------------------------------------------------------------
 // Identifier validation + quoting
@@ -29,13 +30,23 @@ function assertIdent(name, kind = "identifier") {
 function quoteIdent(name) {
     return `"${assertIdent(name)}"`;
 }
-function dialect() {
-    return getDialect();
+function db(runtime) {
+    return runtime?.db ?? getDbExec();
+}
+function dialect(runtime) {
+    return (runtime?.dialect ?? getDialect());
+}
+function isPostgresRuntime(runtime) {
+    return dialect(runtime) === "postgres";
 }
 // ---------------------------------------------------------------------------
 // Notify the UI after a real mutation so polling refetches.
 // ---------------------------------------------------------------------------
-async function notifyDbAdminChange() {
+async function notifyDbAdminChange(runtime) {
+    if (runtime?.notifyChange) {
+        await runtime.notifyChange();
+        return;
+    }
     // The UI keys on useChangeVersions(["db-admin","action"]). notifyActionChange
     // records a "db-admin" change AND a marker; the action route layer's generic
     // "action" source is covered by passing the db-admin action name through the
@@ -45,11 +56,11 @@ async function notifyDbAdminChange() {
 // ---------------------------------------------------------------------------
 // listTables
 // ---------------------------------------------------------------------------
-export async function listTables() {
-    const db = getDbExec();
+export async function listTables(runtime) {
+    const client = db(runtime);
     const summaries = [];
-    if (isPostgres()) {
-        const res = await db.execute(`SELECT table_name AS name, table_type AS type
+    if (isPostgresRuntime(runtime)) {
+        const res = await client.execute(`SELECT table_name AS name, table_type AS type
        FROM information_schema.tables
        WHERE table_schema = 'public'
          AND table_type IN ('BASE TABLE', 'VIEW')
@@ -60,12 +71,12 @@ export async function listTables() {
             summaries.push({
                 name,
                 type,
-                rowCount: type === "view" ? null : await safeRowCount(name),
+                rowCount: type === "view" ? null : await safeRowCount(name, runtime),
             });
         }
     }
     else {
-        const res = await db.execute(`SELECT name, type FROM sqlite_master
+        const res = await client.execute(`SELECT name, type FROM sqlite_master
        WHERE type IN ('table', 'view')
          AND name NOT LIKE 'sqlite_%'
        ORDER BY name`);
@@ -75,16 +86,16 @@ export async function listTables() {
             summaries.push({
                 name,
                 type,
-                rowCount: type === "view" ? null : await safeRowCount(name),
+                rowCount: type === "view" ? null : await safeRowCount(name, runtime),
             });
         }
     }
-    return { dialect: dialect(), tables: summaries };
+    return { dialect: dialect(runtime), tables: summaries };
 }
-async function safeRowCount(table) {
+async function safeRowCount(table, runtime) {
     try {
-        const db = getDbExec();
-        const res = await db.execute(`SELECT COUNT(*) AS c FROM ${quoteIdent(table)}`);
+        const client = db(runtime);
+        const res = await client.execute(`SELECT COUNT(*) AS c FROM ${quoteIdent(table)}`);
         const c = res.rows[0]?.c;
         const n = Number(c);
         return Number.isFinite(n) ? n : null;
@@ -96,21 +107,21 @@ async function safeRowCount(table) {
 // ---------------------------------------------------------------------------
 // getTableSchema
 // ---------------------------------------------------------------------------
-export async function getTableSchema(table) {
+export async function getTableSchema(table, runtime) {
     assertIdent(table, "table name");
-    return isPostgres()
-        ? getTableSchemaPostgres(table)
-        : getTableSchemaSqlite(table);
+    return isPostgresRuntime(runtime)
+        ? getTableSchemaPostgres(table, runtime)
+        : getTableSchemaSqlite(table, runtime);
 }
-async function getTableSchemaPostgres(table) {
-    const db = getDbExec();
-    const typeRes = await db.execute({
+async function getTableSchemaPostgres(table, runtime) {
+    const client = db(runtime);
+    const typeRes = await client.execute({
         sql: `SELECT table_type AS type FROM information_schema.tables
           WHERE table_schema = 'public' AND table_name = ?`,
         args: [table],
     });
     const type = typeRes.rows[0]?.type === "VIEW" ? "view" : "table";
-    const colRes = await db.execute({
+    const colRes = await client.execute({
         sql: `SELECT
             column_name AS name,
             data_type AS type,
@@ -121,7 +132,7 @@ async function getTableSchemaPostgres(table) {
           ORDER BY ordinal_position`,
         args: [table],
     });
-    const pkRes = await db.execute({
+    const pkRes = await client.execute({
         sql: `SELECT kcu.column_name AS col
           FROM information_schema.table_constraints tc
           JOIN information_schema.key_column_usage kcu
@@ -135,7 +146,7 @@ async function getTableSchemaPostgres(table) {
     });
     const primaryKey = pkRes.rows.map((r) => String(r.col));
     const pkSet = new Set(primaryKey);
-    const fkRes = await db.execute({
+    const fkRes = await client.execute({
         sql: `SELECT
             kcu.column_name AS col,
             ccu.table_name AS ref_table,
@@ -157,7 +168,7 @@ async function getTableSchemaPostgres(table) {
         refTable: String(r.ref_table),
         refColumn: String(r.ref_col),
     }));
-    const idxRes = await db.execute({
+    const idxRes = await client.execute({
         sql: `SELECT indexname AS name, indexdef AS def
           FROM pg_indexes
           WHERE schemaname = 'public' AND tablename = ?`,
@@ -200,17 +211,17 @@ async function getTableSchemaPostgres(table) {
         primaryKey,
         foreignKeys,
         indexes,
-        rowCount: type === "view" ? null : await safeRowCount(table),
+        rowCount: type === "view" ? null : await safeRowCount(table, runtime),
     };
 }
-async function getTableSchemaSqlite(table) {
-    const db = getDbExec();
-    const typeRes = await db.execute({
+async function getTableSchemaSqlite(table, runtime) {
+    const client = db(runtime);
+    const typeRes = await client.execute({
         sql: `SELECT type FROM sqlite_master WHERE name = ? AND type IN ('table','view')`,
         args: [table],
     });
     const type = typeRes.rows[0]?.type === "view" ? "view" : "table";
-    const colRes = await db.execute(`PRAGMA table_info(${quoteIdent(table)})`);
+    const colRes = await client.execute(`PRAGMA table_info(${quoteIdent(table)})`);
     const columns = colRes.rows.map((r) => {
         const name = String(r.name);
         const dflt = r.dflt_value;
@@ -234,19 +245,19 @@ async function getTableSchemaSqlite(table) {
             pkCol.autoIncrement = true;
         }
     }
-    const fkRes = await db.execute(`PRAGMA foreign_key_list(${quoteIdent(table)})`);
+    const fkRes = await client.execute(`PRAGMA foreign_key_list(${quoteIdent(table)})`);
     const foreignKeys = fkRes.rows.map((r) => ({
         column: String(r.from),
         refTable: String(r.table),
         refColumn: String(r.to),
     }));
-    const idxListRes = await db.execute(`PRAGMA index_list(${quoteIdent(table)})`);
+    const idxListRes = await client.execute(`PRAGMA index_list(${quoteIdent(table)})`);
     const indexes = [];
     for (const idx of idxListRes.rows) {
         const idxName = String(idx.name);
         if (idxName.startsWith("sqlite_"))
             continue;
-        const infoRes = await db.execute(`PRAGMA index_info(${quoteIdent(idxName)})`);
+        const infoRes = await client.execute(`PRAGMA index_info(${quoteIdent(idxName)})`);
         indexes.push({
             name: idxName,
             unique: Number(idx.unique) === 1,
@@ -262,7 +273,7 @@ async function getTableSchemaSqlite(table) {
         primaryKey,
         foreignKeys,
         indexes,
-        rowCount: type === "view" ? null : await safeRowCount(table),
+        rowCount: type === "view" ? null : await safeRowCount(table, runtime),
     };
 }
 // ---------------------------------------------------------------------------
@@ -291,7 +302,7 @@ const OP_SQL = {
     like: "LIKE",
 };
 /** Build a parameterized WHERE clause + args from filters. */
-function buildWhere(filters) {
+function buildWhere(filters, runtime) {
     if (!filters || filters.length === 0)
         return { clause: "", args: [] };
     const parts = [];
@@ -322,7 +333,7 @@ function buildWhere(filters) {
             case "ilike": {
                 // SQLite LIKE is case-insensitive for ASCII by default; Postgres has
                 // a dedicated ILIKE operator.
-                if (isPostgres()) {
+                if (isPostgresRuntime(runtime)) {
                     parts.push(`${col} ILIKE ?`);
                 }
                 else {
@@ -349,22 +360,22 @@ function buildOrderBy(sort) {
     });
     return ` ORDER BY ${parts.join(", ")}`;
 }
-export async function getRows(table, req) {
+export async function getRows(table, req, runtime) {
     assertIdent(table, "table name");
-    const db = getDbExec();
-    const schema = await getTableSchema(table);
+    const client = db(runtime);
+    const schema = await getTableSchema(table, runtime);
     const page = Math.max(1, Math.floor(req.page) || 1);
     const pageSize = Math.min(1000, Math.max(1, Math.floor(req.pageSize) || 50));
     const offset = (page - 1) * pageSize;
-    const where = buildWhere(req.filters);
+    const where = buildWhere(req.filters, runtime);
     const orderBy = buildOrderBy(req.sort);
     const quoted = quoteIdent(table);
-    const countRes = await db.execute({
+    const countRes = await client.execute({
         sql: `SELECT COUNT(*) AS c FROM ${quoted}${where.clause}`,
         args: where.args,
     });
     const total = Number(countRes.rows[0]?.c ?? 0) || 0;
-    const rowsRes = await db.execute({
+    const rowsRes = await client.execute({
         sql: `SELECT * FROM ${quoted}${where.clause}${orderBy} LIMIT ? OFFSET ?`,
         args: [...where.args, pageSize, offset],
     });
@@ -418,7 +429,7 @@ function buildDelete(table, where) {
     const sql = `DELETE FROM ${quoteIdent(table)} WHERE ${whereSql}`;
     return { sql, args: whereCols.map((c) => where[c]) };
 }
-export async function applyMutations(table, m) {
+export async function applyMutations(table, m, runtime) {
     assertIdent(table, "table name");
     const statements = [];
     for (const row of m.inserts ?? [])
@@ -443,12 +454,12 @@ export async function applyMutations(table, m) {
     // sequentially. A failure mid-batch surfaces as a thrown error with the
     // counts accumulated so far; callers should treat a partial batch as a
     // failure and re-run with a corrected payload.
-    const db = getDbExec();
+    const client = db(runtime);
     const insertCount = m.inserts?.length ?? 0;
     const updateCount = m.updates?.length ?? 0;
     let executed = 0;
     for (const stmt of statements) {
-        const res = await db.execute({ sql: stmt.sql, args: stmt.args });
+        const res = await client.execute({ sql: stmt.sql, args: stmt.args });
         if (executed < insertCount) {
             result.inserted += 1;
         }
@@ -461,7 +472,7 @@ export async function applyMutations(table, m) {
         executed += 1;
     }
     if (statements.length > 0)
-        await notifyDbAdminChange();
+        await notifyDbAdminChange(runtime);
     return result;
 }
 // ---------------------------------------------------------------------------
@@ -508,7 +519,7 @@ function isBareSelectWithoutLimit(sql) {
         return false;
     return true;
 }
-export async function runSql(sql, params, opts = {}) {
+export async function runSql(sql, params, opts = {}, runtime) {
     if (typeof sql !== "string" || !sql.trim()) {
         throw new Error("SQL is required");
     }
@@ -521,16 +532,16 @@ export async function runSql(sql, params, opts = {}) {
     if (isBareSelectWithoutLimit(finalSql)) {
         finalSql = `${finalSql} LIMIT 100`;
     }
-    const db = getDbExec();
+    const client = db(runtime);
     const started = Date.now();
-    const res = await db.execute(params && params.length > 0 ? { sql: finalSql, args: params } : finalSql);
+    const res = await client.execute(params && params.length > 0 ? { sql: finalSql, args: params } : finalSql);
     const durationMs = Date.now() - started;
     const rows = (res.rows ?? []);
     const columns = rows.length > 0 && rows[0] && typeof rows[0] === "object"
         ? Object.keys(rows[0])
         : [];
     if (isMutatingSql(finalSql))
-        await notifyDbAdminChange();
+        await notifyDbAdminChange(runtime);
     return {
         columns,
         rows,

package/dist/db-admin/operations.js.map

@@ -1 +1 @@
-{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/db-admin/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAgBhE,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C,2EAA2E;AAC3E,SAAS,WAAW,CAAC,IAAY,EAAE,IAAI,GAAG,YAAY;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;AAClC,CAAC;AAED,SAAS,OAAO;IACd,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E,KAAK,UAAU,mBAAmB;IAChC,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,+CAA+C;IAC/C,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU;IAI9B,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAE5C,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B;;;;2BAIqB,CACtB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI;gBACJ,IAAI;gBACJ,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B;;;qBAGe,CAChB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI;gBACJ,IAAI;gBACJ,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B,6BAA6B,UAAU,CAAC,KAAK,CAAC,EAAE,CACjD,CAAC;QACF,MAAM,CAAC,GAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa;IAEb,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjC,OAAO,UAAU,EAAE;QACjB,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC;QAC/B,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAAa;IAEb,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE;2DACkD;QACvD,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE;;;;;;;oCAO2B;QAChC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC7B,GAAG,EAAE;;;;;;;;wCAQ+B;QACpC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC7B,GAAG,EAAE;;;;;;;;;;;;;mDAa0C;QAC/C,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,WAAW,GAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAE,CAAS,CAAC,GAAG,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,SAAS,CAAC;QACtC,SAAS,EAAE,MAAM,CAAE,CAAS,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE;;wDAE+C;QACpD,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAmB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,CAAE,CAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBAC1C,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,OAAO;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAI,CAAS,CAAC,IAAI,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,IAAI,KAAK,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3C,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,YAAY;YACZ,+DAA+D;YAC/D,aAAa,EACX,YAAY,IAAI,IAAI;gBACpB,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,OAAO;QACP,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAa;IAEb,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAI,CAAS,CAAC,UAAU,CAAC;QACnC,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK;YAC/C,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,OAAO,CAAC,KAAK,CAAC;YAC1C,EAAE,EAAE,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,CAAC;YAC7B,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAC5B,2BAA2B,UAAU,CAAC,KAAK,CAAC,GAAG,CAChD,CAAC;IACF,MAAM,WAAW,GAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,KAAK,CAAC;QAClC,SAAS,EAAE,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC;KACjC,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CACjC,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;IACF,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAC9B,qBAAqB,UAAU,CAAC,OAAO,CAAC,GAAG,CAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM,CAAE,GAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YACzC,OAAO,EAAE,OAAO,CAAC,IAAI;iBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAS,CAAC,IAAI,CAAC;iBAC3B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,OAAO;QACP,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,OAAO;IACP,IAAI;IACJ,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,MAAM,GAA2B;IACrC,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,8DAA8D;AAC9D,SAAS,UAAU,CAAC,OAAoC;IAItD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,SAAS;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,IAAI,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxB,4DAA4D;oBAC5D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,MAAM;gBACR,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBACrB,MAAM;YACR,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,qEAAqE;gBACrE,8BAA8B;gBAC9B,IAAI,UAAU,EAAE,EAAE,CAAC;oBACjB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;gBAC9B,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM;YACR,CAAC;YACD,SAAS,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,IAAgC;IACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9C,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAa,EACb,GAAuB;IAEvB,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAErC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAChC,GAAG,EAAE,6BAA6B,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,iBAAiB,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,mBAAmB;QACxE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,OAAO,CAAC,IAAiC;QAC/C,KAAK;QACL,IAAI;QACJ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,WAAW,CAClB,KAAa,EACb,GAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI;SAClD,GAAG,CAAC,UAAU,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC5D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,GAA4B,EAC5B,KAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACtD,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,UAAU,UAAU,CAAC,KAAK,CAAC,QAAQ,MAAM,UAAU,QAAQ,EAAE,CAAC;IAC1E,OAAO;QACL,GAAG;QACH,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,KAA8B;IAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,eAAe,UAAU,CAAC,KAAK,CAAC,UAAU,QAAQ,EAAE,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,CAAkB;IAElB,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEjC,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjC,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;KACX,CAAC;IAEF,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,oDAAoD;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IAE3C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,QAAQ,GAAG,WAAW,GAAG,WAAW,EAAE,CAAC;YAChD,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,mBAAmB,EAAE,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,YAAY,GAAG,IAAI,CAAC;IAC7B,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,qEAAqE;AACrE,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,OAAO,mFAAmF,CAAC,IAAI,CAC7F,IAAI,CACL,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,wBAAwB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAW,EACX,MAA6B,EAC7B,IAAI,GAAqC,EAAE;IAE3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,IAAI,2BAA2B,CACnC,+HAA+H,CAChI,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,gDAAgD;IAChD,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,QAAQ,GAAG,GAAG,QAAQ,YAAY,CAAC;IACrC,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAC1B,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CACzE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAExC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA8B,CAAC;IAC3D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QACvD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,MAAM,mBAAmB,EAAE,CAAC;IAEzD,OAAO;QACL,OAAO;QACP,IAAI;QACJ,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC;QACnC,UAAU;KACX,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Dev-mode database admin operations.\n *\n * Pure, dialect-agnostic, RAW/UNSCOPED helpers backing the Supabase-Studio-like\n * DB admin. These run the FULL database with no per-user `accessFilter`\n * scoping — they are a developer tool, gated to dev + localhost at the route\n * and agent-tool layers. Do NOT call these from any production-reachable\n * surface.\n *\n * All access goes through the unified `getDbExec()` client, which uses `?`\n * placeholders (auto-converted to `$1,$2,…` for Postgres) and returns rows\n * keyed by column name. Identifiers are validated against a strict pattern and\n * always double-quoted; values are ALWAYS parameterized — never interpolated.\n */\nimport { getDbExec, getDialect, isPostgres } from \"../db/client.js\";\nimport { notifyActionChange } from \"../server/action-change.js\";\nimport type {\n  DbAdminColumn,\n  DbAdminDialect,\n  DbAdminFilter,\n  DbAdminForeignKey,\n  DbAdminIndex,\n  DbAdminMutation,\n  DbAdminMutationResult,\n  DbAdminQueryResult,\n  DbAdminRowsRequest,\n  DbAdminRowsResult,\n  DbAdminTableSchema,\n  DbAdminTableSummary,\n} from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Identifier validation + quoting\n// ---------------------------------------------------------------------------\n\nconst IDENT_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\n/** Throw on any identifier that isn't a plain `[A-Za-z_][A-Za-z0-9_]*`. */\nfunction assertIdent(name: string, kind = \"identifier\"): string {\n  if (typeof name !== \"string\" || !IDENT_RE.test(name)) {\n    throw new Error(`Invalid ${kind}: ${JSON.stringify(name)}`);\n  }\n  return name;\n}\n\n/** Double-quote an already-validated identifier (valid in PG and SQLite). */\nfunction quoteIdent(name: string): string {\n  return `\"${assertIdent(name)}\"`;\n}\n\nfunction dialect(): DbAdminDialect {\n  return getDialect();\n}\n\n// ---------------------------------------------------------------------------\n// Notify the UI after a real mutation so polling refetches.\n// ---------------------------------------------------------------------------\n\nasync function notifyDbAdminChange(): Promise<void> {\n  // The UI keys on useChangeVersions([\"db-admin\",\"action\"]). notifyActionChange\n  // records a \"db-admin\" change AND a marker; the action route layer's generic\n  // \"action\" source is covered by passing the db-admin action name through the\n  // same primitive that the action surface uses.\n  await notifyActionChange({ actionName: \"db-admin\" }).catch(() => {});\n}\n\n// ---------------------------------------------------------------------------\n// listTables\n// ---------------------------------------------------------------------------\n\nexport async function listTables(): Promise<{\n  dialect: DbAdminDialect;\n  tables: DbAdminTableSummary[];\n}> {\n  const db = getDbExec();\n  const summaries: DbAdminTableSummary[] = [];\n\n  if (isPostgres()) {\n    const res = await db.execute(\n      `SELECT table_name AS name, table_type AS type\n       FROM information_schema.tables\n       WHERE table_schema = 'public'\n         AND table_type IN ('BASE TABLE', 'VIEW')\n       ORDER BY table_name`,\n    );\n    for (const row of res.rows) {\n      const name = String((row as any).name);\n      const type = (row as any).type === \"VIEW\" ? \"view\" : \"table\";\n      summaries.push({\n        name,\n        type,\n        rowCount: type === \"view\" ? null : await safeRowCount(name),\n      });\n    }\n  } else {\n    const res = await db.execute(\n      `SELECT name, type FROM sqlite_master\n       WHERE type IN ('table', 'view')\n         AND name NOT LIKE 'sqlite_%'\n       ORDER BY name`,\n    );\n    for (const row of res.rows) {\n      const name = String((row as any).name);\n      const type = (row as any).type === \"view\" ? \"view\" : \"table\";\n      summaries.push({\n        name,\n        type,\n        rowCount: type === \"view\" ? null : await safeRowCount(name),\n      });\n    }\n  }\n\n  return { dialect: dialect(), tables: summaries };\n}\n\nasync function safeRowCount(table: string): Promise<number | null> {\n  try {\n    const db = getDbExec();\n    const res = await db.execute(\n      `SELECT COUNT(*) AS c FROM ${quoteIdent(table)}`,\n    );\n    const c = (res.rows[0] as any)?.c;\n    const n = Number(c);\n    return Number.isFinite(n) ? n : null;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// getTableSchema\n// ---------------------------------------------------------------------------\n\nexport async function getTableSchema(\n  table: string,\n): Promise<DbAdminTableSchema> {\n  assertIdent(table, \"table name\");\n  return isPostgres()\n    ? getTableSchemaPostgres(table)\n    : getTableSchemaSqlite(table);\n}\n\nasync function getTableSchemaPostgres(\n  table: string,\n): Promise<DbAdminTableSchema> {\n  const db = getDbExec();\n\n  const typeRes = await db.execute({\n    sql: `SELECT table_type AS type FROM information_schema.tables\n          WHERE table_schema = 'public' AND table_name = ?`,\n    args: [table],\n  });\n  const type = (typeRes.rows[0] as any)?.type === \"VIEW\" ? \"view\" : \"table\";\n\n  const colRes = await db.execute({\n    sql: `SELECT\n            column_name AS name,\n            data_type AS type,\n            CASE WHEN is_nullable = 'NO' THEN 0 ELSE 1 END AS nullable,\n            column_default AS dflt\n          FROM information_schema.columns\n          WHERE table_schema = 'public' AND table_name = ?\n          ORDER BY ordinal_position`,\n    args: [table],\n  });\n\n  const pkRes = await db.execute({\n    sql: `SELECT kcu.column_name AS col\n          FROM information_schema.table_constraints tc\n          JOIN information_schema.key_column_usage kcu\n            ON tc.constraint_name = kcu.constraint_name\n            AND tc.table_schema = kcu.table_schema\n          WHERE tc.table_name = ?\n            AND tc.table_schema = 'public'\n            AND tc.constraint_type = 'PRIMARY KEY'\n          ORDER BY kcu.ordinal_position`,\n    args: [table],\n  });\n  const primaryKey = pkRes.rows.map((r) => String((r as any).col));\n  const pkSet = new Set(primaryKey);\n\n  const fkRes = await db.execute({\n    sql: `SELECT\n            kcu.column_name AS col,\n            ccu.table_name AS ref_table,\n            ccu.column_name AS ref_col\n          FROM information_schema.table_constraints tc\n          JOIN information_schema.key_column_usage kcu\n            ON tc.constraint_name = kcu.constraint_name\n            AND tc.table_schema = kcu.table_schema\n          JOIN information_schema.constraint_column_usage ccu\n            ON tc.constraint_name = ccu.constraint_name\n            AND tc.table_schema = ccu.table_schema\n          WHERE tc.table_name = ?\n            AND tc.table_schema = 'public'\n            AND tc.constraint_type = 'FOREIGN KEY'`,\n    args: [table],\n  });\n  const foreignKeys: DbAdminForeignKey[] = fkRes.rows.map((r) => ({\n    column: String((r as any).col),\n    refTable: String((r as any).ref_table),\n    refColumn: String((r as any).ref_col),\n  }));\n\n  const idxRes = await db.execute({\n    sql: `SELECT indexname AS name, indexdef AS def\n          FROM pg_indexes\n          WHERE schemaname = 'public' AND tablename = ?`,\n    args: [table],\n  });\n  const indexes: DbAdminIndex[] = idxRes.rows.map((r) => {\n    const def = String((r as any).def ?? \"\");\n    const colMatch = def.match(/\\(([^)]+)\\)/);\n    const columns = colMatch\n      ? colMatch[1]\n          .split(\",\")\n          .map((c) => c.trim().replace(/^\"|\"$/g, \"\"))\n          .filter(Boolean)\n      : [];\n    return {\n      name: String((r as any).name),\n      unique: /\\bUNIQUE\\b/i.test(def),\n      columns,\n    };\n  });\n\n  const columns: DbAdminColumn[] = colRes.rows.map((r) => {\n    const name = String((r as any).name);\n    const dflt = (r as any).dflt;\n    const defaultValue = dflt == null ? null : String(dflt);\n    return {\n      name,\n      type: String((r as any).type ?? \"ANY\"),\n      nullable: Number((r as any).nullable) === 1,\n      pk: pkSet.has(name),\n      defaultValue,\n      // Postgres serial/identity columns default to a sequence call.\n      autoIncrement:\n        defaultValue != null &&\n        (/nextval\\(/i.test(defaultValue) || /identity/i.test(defaultValue)),\n    };\n  });\n\n  return {\n    name: table,\n    type,\n    columns,\n    primaryKey,\n    foreignKeys,\n    indexes,\n    rowCount: type === \"view\" ? null : await safeRowCount(table),\n  };\n}\n\nasync function getTableSchemaSqlite(\n  table: string,\n): Promise<DbAdminTableSchema> {\n  const db = getDbExec();\n\n  const typeRes = await db.execute({\n    sql: `SELECT type FROM sqlite_master WHERE name = ? AND type IN ('table','view')`,\n    args: [table],\n  });\n  const type = (typeRes.rows[0] as any)?.type === \"view\" ? \"view\" : \"table\";\n\n  const colRes = await db.execute(`PRAGMA table_info(${quoteIdent(table)})`);\n  const columns: DbAdminColumn[] = colRes.rows.map((r) => {\n    const name = String((r as any).name);\n    const dflt = (r as any).dflt_value;\n    return {\n      name,\n      type: String((r as any).type ?? \"ANY\") || \"ANY\",\n      nullable: Number((r as any).notnull) === 0,\n      pk: Number((r as any).pk) > 0,\n      defaultValue: dflt == null ? null : String(dflt),\n    };\n  });\n\n  // PK order follows the pk index from table_info (1-based, 0 = not pk).\n  const primaryKey = colRes.rows\n    .filter((r) => Number((r as any).pk) > 0)\n    .sort((a, b) => Number((a as any).pk) - Number((b as any).pk))\n    .map((r) => String((r as any).name));\n\n  // INTEGER PRIMARY KEY in SQLite is an alias for the rowid (autoincrementing).\n  if (primaryKey.length === 1) {\n    const pkCol = columns.find((c) => c.name === primaryKey[0]);\n    if (pkCol && /^integer$/i.test(pkCol.type)) {\n      pkCol.autoIncrement = true;\n    }\n  }\n\n  const fkRes = await db.execute(\n    `PRAGMA foreign_key_list(${quoteIdent(table)})`,\n  );\n  const foreignKeys: DbAdminForeignKey[] = fkRes.rows.map((r) => ({\n    column: String((r as any).from),\n    refTable: String((r as any).table),\n    refColumn: String((r as any).to),\n  }));\n\n  const idxListRes = await db.execute(\n    `PRAGMA index_list(${quoteIdent(table)})`,\n  );\n  const indexes: DbAdminIndex[] = [];\n  for (const idx of idxListRes.rows) {\n    const idxName = String((idx as any).name);\n    if (idxName.startsWith(\"sqlite_\")) continue;\n    const infoRes = await db.execute(\n      `PRAGMA index_info(${quoteIdent(idxName)})`,\n    );\n    indexes.push({\n      name: idxName,\n      unique: Number((idx as any).unique) === 1,\n      columns: infoRes.rows\n        .map((c) => (c as any).name)\n        .filter((n): n is string => typeof n === \"string\"),\n    });\n  }\n\n  return {\n    name: table,\n    type,\n    columns,\n    primaryKey,\n    foreignKeys,\n    indexes,\n    rowCount: type === \"view\" ? null : await safeRowCount(table),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// getRows\n// ---------------------------------------------------------------------------\n\nconst SAFE_OPS = new Set([\n  \"eq\",\n  \"neq\",\n  \"lt\",\n  \"lte\",\n  \"gt\",\n  \"gte\",\n  \"like\",\n  \"ilike\",\n  \"in\",\n  \"is_null\",\n  \"not_null\",\n]);\n\nconst OP_SQL: Record<string, string> = {\n  eq: \"=\",\n  neq: \"<>\",\n  lt: \"<\",\n  lte: \"<=\",\n  gt: \">\",\n  gte: \">=\",\n  like: \"LIKE\",\n};\n\n/** Build a parameterized WHERE clause + args from filters. */\nfunction buildWhere(filters: DbAdminFilter[] | undefined): {\n  clause: string;\n  args: unknown[];\n} {\n  if (!filters || filters.length === 0) return { clause: \"\", args: [] };\n  const parts: string[] = [];\n  const args: unknown[] = [];\n  for (const f of filters) {\n    const col = quoteIdent(f.column);\n    if (!SAFE_OPS.has(f.op)) {\n      throw new Error(`Invalid filter op: ${JSON.stringify(f.op)}`);\n    }\n    switch (f.op) {\n      case \"is_null\":\n        parts.push(`${col} IS NULL`);\n        break;\n      case \"not_null\":\n        parts.push(`${col} IS NOT NULL`);\n        break;\n      case \"in\": {\n        const values = Array.isArray(f.value) ? f.value : [f.value];\n        if (values.length === 0) {\n          // `col IN ()` is invalid SQL; an empty set matches nothing.\n          parts.push(`1 = 0`);\n          break;\n        }\n        parts.push(`${col} IN (${values.map(() => \"?\").join(\", \")})`);\n        args.push(...values);\n        break;\n      }\n      case \"ilike\": {\n        // SQLite LIKE is case-insensitive for ASCII by default; Postgres has\n        // a dedicated ILIKE operator.\n        if (isPostgres()) {\n          parts.push(`${col} ILIKE ?`);\n        } else {\n          parts.push(`${col} LIKE ?`);\n        }\n        args.push(f.value);\n        break;\n      }\n      default: {\n        parts.push(`${col} ${OP_SQL[f.op]} ?`);\n        args.push(f.value);\n        break;\n      }\n    }\n  }\n  return { clause: parts.length ? ` WHERE ${parts.join(\" AND \")}` : \"\", args };\n}\n\nfunction buildOrderBy(sort: DbAdminRowsRequest[\"sort\"]): string {\n  if (!sort || sort.length === 0) return \"\";\n  const parts = sort.map((s) => {\n    const dir = s.dir === \"desc\" ? \"DESC\" : \"ASC\";\n    return `${quoteIdent(s.column)} ${dir}`;\n  });\n  return ` ORDER BY ${parts.join(\", \")}`;\n}\n\nexport async function getRows(\n  table: string,\n  req: DbAdminRowsRequest,\n): Promise<DbAdminRowsResult> {\n  assertIdent(table, \"table name\");\n  const db = getDbExec();\n  const schema = await getTableSchema(table);\n\n  const page = Math.max(1, Math.floor(req.page) || 1);\n  const pageSize = Math.min(1000, Math.max(1, Math.floor(req.pageSize) || 50));\n  const offset = (page - 1) * pageSize;\n\n  const where = buildWhere(req.filters);\n  const orderBy = buildOrderBy(req.sort);\n  const quoted = quoteIdent(table);\n\n  const countRes = await db.execute({\n    sql: `SELECT COUNT(*) AS c FROM ${quoted}${where.clause}`,\n    args: where.args,\n  });\n  const total = Number((countRes.rows[0] as any)?.c ?? 0) || 0;\n\n  const rowsRes = await db.execute({\n    sql: `SELECT * FROM ${quoted}${where.clause}${orderBy} LIMIT ? OFFSET ?`,\n    args: [...where.args, pageSize, offset],\n  });\n\n  return {\n    columns: schema.columns,\n    rows: rowsRes.rows as Record<string, unknown>[],\n    total,\n    page,\n    pageSize,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// applyMutations\n// ---------------------------------------------------------------------------\n\nfunction buildInsert(\n  table: string,\n  row: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const cols = Object.keys(row);\n  if (cols.length === 0) {\n    throw new Error(\"Cannot insert an empty row\");\n  }\n  cols.forEach((c) => assertIdent(c, \"column name\"));\n  const sql = `INSERT INTO ${quoteIdent(table)} (${cols\n    .map(quoteIdent)\n    .join(\", \")}) VALUES (${cols.map(() => \"?\").join(\", \")})`;\n  return { sql, args: cols.map((c) => row[c]) };\n}\n\nfunction buildUpdate(\n  table: string,\n  set: Record<string, unknown>,\n  where: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const setCols = Object.keys(set);\n  const whereCols = Object.keys(where);\n  if (setCols.length === 0) throw new Error(\"Update requires a non-empty set\");\n  if (whereCols.length === 0) {\n    throw new Error(\"Update requires a non-empty where clause\");\n  }\n  setCols.forEach((c) => assertIdent(c, \"column name\"));\n  whereCols.forEach((c) => assertIdent(c, \"column name\"));\n  const setSql = setCols.map((c) => `${quoteIdent(c)} = ?`).join(\", \");\n  const whereSql = whereCols.map((c) => `${quoteIdent(c)} = ?`).join(\" AND \");\n  const sql = `UPDATE ${quoteIdent(table)} SET ${setSql} WHERE ${whereSql}`;\n  return {\n    sql,\n    args: [...setCols.map((c) => set[c]), ...whereCols.map((c) => where[c])],\n  };\n}\n\nfunction buildDelete(\n  table: string,\n  where: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const whereCols = Object.keys(where);\n  if (whereCols.length === 0) {\n    throw new Error(\"Delete requires a non-empty where clause\");\n  }\n  whereCols.forEach((c) => assertIdent(c, \"column name\"));\n  const whereSql = whereCols.map((c) => `${quoteIdent(c)} = ?`).join(\" AND \");\n  const sql = `DELETE FROM ${quoteIdent(table)} WHERE ${whereSql}`;\n  return { sql, args: whereCols.map((c) => where[c]) };\n}\n\nexport async function applyMutations(\n  table: string,\n  m: DbAdminMutation,\n): Promise<DbAdminMutationResult> {\n  assertIdent(table, \"table name\");\n\n  const statements: { sql: string; args: unknown[] }[] = [];\n  for (const row of m.inserts ?? []) statements.push(buildInsert(table, row));\n  for (const u of m.updates ?? []) {\n    statements.push(buildUpdate(table, u.set, u.where));\n  }\n  for (const where of m.deletes ?? []) {\n    statements.push(buildDelete(table, where));\n  }\n\n  const result: DbAdminMutationResult = {\n    sql: statements.map((s) => s.sql),\n    inserted: 0,\n    updated: 0,\n    deleted: 0,\n  };\n\n  if (m.dryRun) {\n    // dryRun returns the SQL strings WITHOUT executing.\n    return result;\n  }\n\n  // getDbExec() does not expose a transaction handle, so statements run\n  // sequentially. A failure mid-batch surfaces as a thrown error with the\n  // counts accumulated so far; callers should treat a partial batch as a\n  // failure and re-run with a corrected payload.\n  const db = getDbExec();\n  const insertCount = m.inserts?.length ?? 0;\n  const updateCount = m.updates?.length ?? 0;\n\n  let executed = 0;\n  for (const stmt of statements) {\n    const res = await db.execute({ sql: stmt.sql, args: stmt.args });\n    if (executed < insertCount) {\n      result.inserted += 1;\n    } else if (executed < insertCount + updateCount) {\n      result.updated += res.rowsAffected || 0;\n    } else {\n      result.deleted += res.rowsAffected || 0;\n    }\n    executed += 1;\n  }\n\n  if (statements.length > 0) await notifyDbAdminChange();\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// runSql\n// ---------------------------------------------------------------------------\n\n/** Error thrown when a destructive statement is run without confirmation. */\nexport class DbAdminConfirmRequiredError extends Error {\n  readonly needsConfirm = true;\n  constructor(message: string) {\n    super(message);\n    this.name = \"DbAdminConfirmRequiredError\";\n  }\n}\n\n/** Strip `--` line comments and `/* *\\/` block comments from SQL. */\nfunction stripComments(sql: string): string {\n  return sql.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \").replace(/--[^\\n\\r]*/g, \" \");\n}\n\nfunction isMutatingSql(sql: string): boolean {\n  const head = stripComments(sql).trim().toLowerCase();\n  return /^(insert|update|delete|replace|create|alter|drop|truncate|merge|pragma\\s+\\w+\\s*=)/.test(\n    head,\n  );\n}\n\n/** Detect destructive ops on comment-stripped SQL. */\nfunction isDestructiveSql(sql: string): boolean {\n  const cleaned = stripComments(sql).trim();\n  const lower = cleaned.toLowerCase();\n  if (/^drop\\b/.test(lower)) return true;\n  if (/^truncate\\b/.test(lower)) return true;\n  if (/^delete\\b/.test(lower) && !/\\bwhere\\b/.test(lower)) return true;\n  if (/^update\\b/.test(lower) && !/\\bwhere\\b/.test(lower)) return true;\n  return false;\n}\n\n/** A leading SELECT (or CTE that ends in SELECT) with no LIMIT clause. */\nfunction isBareSelectWithoutLimit(sql: string): boolean {\n  const cleaned = stripComments(sql).trim();\n  const lower = cleaned.toLowerCase();\n  const isSelect = /^(select|with)\\b/.test(lower);\n  if (!isSelect) return false;\n  if (/\\blimit\\b/.test(lower)) return false;\n  return true;\n}\n\nexport async function runSql(\n  sql: string,\n  params: unknown[] | undefined,\n  opts: { confirmDestructive?: boolean } = {},\n): Promise<DbAdminQueryResult> {\n  if (typeof sql !== \"string\" || !sql.trim()) {\n    throw new Error(\"SQL is required\");\n  }\n\n  if (isDestructiveSql(sql) && !opts.confirmDestructive) {\n    throw new DbAdminConfirmRequiredError(\n      \"This statement is destructive (DROP / TRUNCATE / unscoped DELETE or UPDATE). Re-run with confirmDestructive: true to proceed.\",\n    );\n  }\n\n  // Guardrail: auto-append LIMIT 100 to a bare SELECT so an accidental\n  // full-table scan can't dump a huge result set.\n  let finalSql = sql.trim().replace(/;\\s*$/, \"\");\n  if (isBareSelectWithoutLimit(finalSql)) {\n    finalSql = `${finalSql} LIMIT 100`;\n  }\n\n  const db = getDbExec();\n  const started = Date.now();\n  const res = await db.execute(\n    params && params.length > 0 ? { sql: finalSql, args: params } : finalSql,\n  );\n  const durationMs = Date.now() - started;\n\n  const rows = (res.rows ?? []) as Record<string, unknown>[];\n  const columns =\n    rows.length > 0 && rows[0] && typeof rows[0] === \"object\"\n      ? Object.keys(rows[0])\n      : [];\n\n  if (isMutatingSql(finalSql)) await notifyDbAdminChange();\n\n  return {\n    columns,\n    rows,\n    rowsAffected: res.rowsAffected ?? 0,\n    durationMs,\n  };\n}\n"]}
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/db-admin/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,SAAS,EACT,UAAU,GAGX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAgBhE,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAQ5C,2EAA2E;AAC3E,SAAS,WAAW,CAAC,IAAY,EAAE,IAAI,GAAG,YAAY;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;AAClC,CAAC;AAED,SAAS,EAAE,CAAC,OAAwB;IAClC,OAAO,OAAO,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,OAAwB;IACvC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,CAAmB,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E,KAAK,UAAU,mBAAmB,CAAC,OAAwB;IACzD,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,+CAA+C;IAC/C,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAwB;IAIvD,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,SAAS,GAA0B,EAAE,CAAC;IAE5C,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B;;;;2BAIqB,CACtB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI;gBACJ,IAAI;gBACJ,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B;;;qBAGe,CAChB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI;gBACJ,IAAI;gBACJ,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAa,EACb,OAAwB;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B,6BAA6B,UAAU,CAAC,KAAK,CAAC,EAAE,CACjD,CAAC;QACF,MAAM,CAAC,GAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,OAAwB;IAExB,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjC,OAAO,iBAAiB,CAAC,OAAO,CAAC;QAC/B,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC;QACxC,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAAa,EACb,OAAwB;IAExB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,GAAG,EAAE;2DACkD;QACvD,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;;oCAO2B;QAChC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACjC,GAAG,EAAE;;;;;;;;wCAQ+B;QACpC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACjC,GAAG,EAAE;;;;;;;;;;;;;mDAa0C;QAC/C,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,WAAW,GAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAE,CAAS,CAAC,GAAG,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,SAAS,CAAC;QACtC,SAAS,EAAE,MAAM,CAAE,CAAS,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;wDAE+C;QACpD,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,OAAO,GAAmB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,CAAE,CAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBAC1C,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,OAAO;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAI,CAAS,CAAC,IAAI,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,IAAI,KAAK,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3C,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,YAAY;YACZ,+DAA+D;YAC/D,aAAa,EACX,YAAY,IAAI,IAAI;gBACpB,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,OAAO;QACP,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAa,EACb,OAAwB;IAExB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;IACF,MAAM,OAAO,GAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAI,CAAS,CAAC,UAAU,CAAC;QACnC,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK;YAC/C,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,OAAO,CAAC,KAAK,CAAC;YAC1C,EAAE,EAAE,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,CAAC;YAC7B,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,GAAG,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,2BAA2B,UAAU,CAAC,KAAK,CAAC,GAAG,CAChD,CAAC;IACF,MAAM,WAAW,GAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAE,CAAS,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAE,CAAS,CAAC,KAAK,CAAC;QAClC,SAAS,EAAE,MAAM,CAAE,CAAS,CAAC,EAAE,CAAC;KACjC,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CACrC,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;IACF,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAClC,qBAAqB,UAAU,CAAC,OAAO,CAAC,GAAG,CAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM,CAAE,GAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YACzC,OAAO,EAAE,OAAO,CAAC,IAAI;iBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAS,CAAC,IAAI,CAAC;iBAC3B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,OAAO;QACP,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,OAAO;IACP,IAAI;IACJ,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,MAAM,GAA2B;IACrC,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,8DAA8D;AAC9D,SAAS,UAAU,CACjB,OAAoC,EACpC,OAAwB;IAKxB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,SAAS;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,IAAI,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxB,4DAA4D;oBAC5D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,MAAM;gBACR,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBACrB,MAAM;YACR,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,qEAAqE;gBACrE,8BAA8B;gBAC9B,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;gBAC9B,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM;YACR,CAAC;YACD,SAAS,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,IAAgC;IACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9C,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAa,EACb,GAAuB,EACvB,OAAwB;IAExB,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAErC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,6BAA6B,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,GAAG,EAAE,iBAAiB,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,mBAAmB;QACxE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,OAAO,CAAC,IAAiC;QAC/C,KAAK;QACL,IAAI;QACJ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,WAAW,CAClB,KAAa,EACb,GAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI;SAClD,GAAG,CAAC,UAAU,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC5D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,GAA4B,EAC5B,KAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACtD,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,UAAU,UAAU,CAAC,KAAK,CAAC,QAAQ,MAAM,UAAU,QAAQ,EAAE,CAAC;IAC1E,OAAO;QACL,GAAG;QACH,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,KAA8B;IAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,eAAe,UAAU,CAAC,KAAK,CAAC,UAAU,QAAQ,EAAE,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,CAAkB,EAClB,OAAwB;IAExB,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEjC,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjC,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;KACX,CAAC;IAEF,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,oDAAoD;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IAE3C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,QAAQ,GAAG,WAAW,GAAG,WAAW,EAAE,CAAC;YAChD,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,YAAY,GAAG,IAAI,CAAC;IAC7B,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,qEAAqE;AACrE,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,OAAO,mFAAmF,CAAC,IAAI,CAC7F,IAAI,CACL,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,wBAAwB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAW,EACX,MAA6B,EAC7B,IAAI,GAAqC,EAAE,EAC3C,OAAwB;IAExB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,IAAI,2BAA2B,CACnC,+HAA+H,CAChI,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,gDAAgD;IAChD,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,QAAQ,GAAG,GAAG,QAAQ,YAAY,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC9B,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CACzE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAExC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA8B,CAAC;IAC3D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QACvD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEhE,OAAO;QACL,OAAO;QACP,IAAI;QACJ,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC;QACnC,UAAU;KACX,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Database admin operations.\n *\n * Pure, dialect-agnostic, RAW/UNSCOPED helpers backing the Supabase-Studio-like\n * DB admin. These run the FULL database with no per-user `accessFilter`\n * scoping. Callers MUST gate access before invoking them. The built-in core\n * route gates this to dev + localhost; production-reachable surfaces must pass\n * an explicit runtime for the target database and enforce their own admin-only\n * checks before reading or mutating.\n *\n * All access goes through the unified `getDbExec()` client, which uses `?`\n * placeholders (auto-converted to `$1,$2,…` for Postgres) and returns rows\n * keyed by column name. Identifiers are validated against a strict pattern and\n * always double-quoted; values are ALWAYS parameterized — never interpolated.\n */\nimport {\n  getDbExec,\n  getDialect,\n  type DbExec,\n  type Dialect,\n} from \"../db/client.js\";\nimport { notifyActionChange } from \"../server/action-change.js\";\nimport type {\n  DbAdminColumn,\n  DbAdminDialect,\n  DbAdminFilter,\n  DbAdminForeignKey,\n  DbAdminIndex,\n  DbAdminMutation,\n  DbAdminMutationResult,\n  DbAdminQueryResult,\n  DbAdminRowsRequest,\n  DbAdminRowsResult,\n  DbAdminTableSchema,\n  DbAdminTableSummary,\n} from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Identifier validation + quoting\n// ---------------------------------------------------------------------------\n\nconst IDENT_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nexport interface DbAdminRuntime {\n  db?: DbExec;\n  dialect?: Dialect;\n  notifyChange?: () => Promise<void>;\n}\n\n/** Throw on any identifier that isn't a plain `[A-Za-z_][A-Za-z0-9_]*`. */\nfunction assertIdent(name: string, kind = \"identifier\"): string {\n  if (typeof name !== \"string\" || !IDENT_RE.test(name)) {\n    throw new Error(`Invalid ${kind}: ${JSON.stringify(name)}`);\n  }\n  return name;\n}\n\n/** Double-quote an already-validated identifier (valid in PG and SQLite). */\nfunction quoteIdent(name: string): string {\n  return `\"${assertIdent(name)}\"`;\n}\n\nfunction db(runtime?: DbAdminRuntime): DbExec {\n  return runtime?.db ?? getDbExec();\n}\n\nfunction dialect(runtime?: DbAdminRuntime): DbAdminDialect {\n  return (runtime?.dialect ?? getDialect()) as DbAdminDialect;\n}\n\nfunction isPostgresRuntime(runtime?: DbAdminRuntime): boolean {\n  return dialect(runtime) === \"postgres\";\n}\n\n// ---------------------------------------------------------------------------\n// Notify the UI after a real mutation so polling refetches.\n// ---------------------------------------------------------------------------\n\nasync function notifyDbAdminChange(runtime?: DbAdminRuntime): Promise<void> {\n  if (runtime?.notifyChange) {\n    await runtime.notifyChange();\n    return;\n  }\n  // The UI keys on useChangeVersions([\"db-admin\",\"action\"]). notifyActionChange\n  // records a \"db-admin\" change AND a marker; the action route layer's generic\n  // \"action\" source is covered by passing the db-admin action name through the\n  // same primitive that the action surface uses.\n  await notifyActionChange({ actionName: \"db-admin\" }).catch(() => {});\n}\n\n// ---------------------------------------------------------------------------\n// listTables\n// ---------------------------------------------------------------------------\n\nexport async function listTables(runtime?: DbAdminRuntime): Promise<{\n  dialect: DbAdminDialect;\n  tables: DbAdminTableSummary[];\n}> {\n  const client = db(runtime);\n  const summaries: DbAdminTableSummary[] = [];\n\n  if (isPostgresRuntime(runtime)) {\n    const res = await client.execute(\n      `SELECT table_name AS name, table_type AS type\n       FROM information_schema.tables\n       WHERE table_schema = 'public'\n         AND table_type IN ('BASE TABLE', 'VIEW')\n       ORDER BY table_name`,\n    );\n    for (const row of res.rows) {\n      const name = String((row as any).name);\n      const type = (row as any).type === \"VIEW\" ? \"view\" : \"table\";\n      summaries.push({\n        name,\n        type,\n        rowCount: type === \"view\" ? null : await safeRowCount(name, runtime),\n      });\n    }\n  } else {\n    const res = await client.execute(\n      `SELECT name, type FROM sqlite_master\n       WHERE type IN ('table', 'view')\n         AND name NOT LIKE 'sqlite_%'\n       ORDER BY name`,\n    );\n    for (const row of res.rows) {\n      const name = String((row as any).name);\n      const type = (row as any).type === \"view\" ? \"view\" : \"table\";\n      summaries.push({\n        name,\n        type,\n        rowCount: type === \"view\" ? null : await safeRowCount(name, runtime),\n      });\n    }\n  }\n\n  return { dialect: dialect(runtime), tables: summaries };\n}\n\nasync function safeRowCount(\n  table: string,\n  runtime?: DbAdminRuntime,\n): Promise<number | null> {\n  try {\n    const client = db(runtime);\n    const res = await client.execute(\n      `SELECT COUNT(*) AS c FROM ${quoteIdent(table)}`,\n    );\n    const c = (res.rows[0] as any)?.c;\n    const n = Number(c);\n    return Number.isFinite(n) ? n : null;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// getTableSchema\n// ---------------------------------------------------------------------------\n\nexport async function getTableSchema(\n  table: string,\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminTableSchema> {\n  assertIdent(table, \"table name\");\n  return isPostgresRuntime(runtime)\n    ? getTableSchemaPostgres(table, runtime)\n    : getTableSchemaSqlite(table, runtime);\n}\n\nasync function getTableSchemaPostgres(\n  table: string,\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminTableSchema> {\n  const client = db(runtime);\n\n  const typeRes = await client.execute({\n    sql: `SELECT table_type AS type FROM information_schema.tables\n          WHERE table_schema = 'public' AND table_name = ?`,\n    args: [table],\n  });\n  const type = (typeRes.rows[0] as any)?.type === \"VIEW\" ? \"view\" : \"table\";\n\n  const colRes = await client.execute({\n    sql: `SELECT\n            column_name AS name,\n            data_type AS type,\n            CASE WHEN is_nullable = 'NO' THEN 0 ELSE 1 END AS nullable,\n            column_default AS dflt\n          FROM information_schema.columns\n          WHERE table_schema = 'public' AND table_name = ?\n          ORDER BY ordinal_position`,\n    args: [table],\n  });\n\n  const pkRes = await client.execute({\n    sql: `SELECT kcu.column_name AS col\n          FROM information_schema.table_constraints tc\n          JOIN information_schema.key_column_usage kcu\n            ON tc.constraint_name = kcu.constraint_name\n            AND tc.table_schema = kcu.table_schema\n          WHERE tc.table_name = ?\n            AND tc.table_schema = 'public'\n            AND tc.constraint_type = 'PRIMARY KEY'\n          ORDER BY kcu.ordinal_position`,\n    args: [table],\n  });\n  const primaryKey = pkRes.rows.map((r) => String((r as any).col));\n  const pkSet = new Set(primaryKey);\n\n  const fkRes = await client.execute({\n    sql: `SELECT\n            kcu.column_name AS col,\n            ccu.table_name AS ref_table,\n            ccu.column_name AS ref_col\n          FROM information_schema.table_constraints tc\n          JOIN information_schema.key_column_usage kcu\n            ON tc.constraint_name = kcu.constraint_name\n            AND tc.table_schema = kcu.table_schema\n          JOIN information_schema.constraint_column_usage ccu\n            ON tc.constraint_name = ccu.constraint_name\n            AND tc.table_schema = ccu.table_schema\n          WHERE tc.table_name = ?\n            AND tc.table_schema = 'public'\n            AND tc.constraint_type = 'FOREIGN KEY'`,\n    args: [table],\n  });\n  const foreignKeys: DbAdminForeignKey[] = fkRes.rows.map((r) => ({\n    column: String((r as any).col),\n    refTable: String((r as any).ref_table),\n    refColumn: String((r as any).ref_col),\n  }));\n\n  const idxRes = await client.execute({\n    sql: `SELECT indexname AS name, indexdef AS def\n          FROM pg_indexes\n          WHERE schemaname = 'public' AND tablename = ?`,\n    args: [table],\n  });\n  const indexes: DbAdminIndex[] = idxRes.rows.map((r) => {\n    const def = String((r as any).def ?? \"\");\n    const colMatch = def.match(/\\(([^)]+)\\)/);\n    const columns = colMatch\n      ? colMatch[1]\n          .split(\",\")\n          .map((c) => c.trim().replace(/^\"|\"$/g, \"\"))\n          .filter(Boolean)\n      : [];\n    return {\n      name: String((r as any).name),\n      unique: /\\bUNIQUE\\b/i.test(def),\n      columns,\n    };\n  });\n\n  const columns: DbAdminColumn[] = colRes.rows.map((r) => {\n    const name = String((r as any).name);\n    const dflt = (r as any).dflt;\n    const defaultValue = dflt == null ? null : String(dflt);\n    return {\n      name,\n      type: String((r as any).type ?? \"ANY\"),\n      nullable: Number((r as any).nullable) === 1,\n      pk: pkSet.has(name),\n      defaultValue,\n      // Postgres serial/identity columns default to a sequence call.\n      autoIncrement:\n        defaultValue != null &&\n        (/nextval\\(/i.test(defaultValue) || /identity/i.test(defaultValue)),\n    };\n  });\n\n  return {\n    name: table,\n    type,\n    columns,\n    primaryKey,\n    foreignKeys,\n    indexes,\n    rowCount: type === \"view\" ? null : await safeRowCount(table, runtime),\n  };\n}\n\nasync function getTableSchemaSqlite(\n  table: string,\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminTableSchema> {\n  const client = db(runtime);\n\n  const typeRes = await client.execute({\n    sql: `SELECT type FROM sqlite_master WHERE name = ? AND type IN ('table','view')`,\n    args: [table],\n  });\n  const type = (typeRes.rows[0] as any)?.type === \"view\" ? \"view\" : \"table\";\n\n  const colRes = await client.execute(\n    `PRAGMA table_info(${quoteIdent(table)})`,\n  );\n  const columns: DbAdminColumn[] = colRes.rows.map((r) => {\n    const name = String((r as any).name);\n    const dflt = (r as any).dflt_value;\n    return {\n      name,\n      type: String((r as any).type ?? \"ANY\") || \"ANY\",\n      nullable: Number((r as any).notnull) === 0,\n      pk: Number((r as any).pk) > 0,\n      defaultValue: dflt == null ? null : String(dflt),\n    };\n  });\n\n  // PK order follows the pk index from table_info (1-based, 0 = not pk).\n  const primaryKey = colRes.rows\n    .filter((r) => Number((r as any).pk) > 0)\n    .sort((a, b) => Number((a as any).pk) - Number((b as any).pk))\n    .map((r) => String((r as any).name));\n\n  // INTEGER PRIMARY KEY in SQLite is an alias for the rowid (autoincrementing).\n  if (primaryKey.length === 1) {\n    const pkCol = columns.find((c) => c.name === primaryKey[0]);\n    if (pkCol && /^integer$/i.test(pkCol.type)) {\n      pkCol.autoIncrement = true;\n    }\n  }\n\n  const fkRes = await client.execute(\n    `PRAGMA foreign_key_list(${quoteIdent(table)})`,\n  );\n  const foreignKeys: DbAdminForeignKey[] = fkRes.rows.map((r) => ({\n    column: String((r as any).from),\n    refTable: String((r as any).table),\n    refColumn: String((r as any).to),\n  }));\n\n  const idxListRes = await client.execute(\n    `PRAGMA index_list(${quoteIdent(table)})`,\n  );\n  const indexes: DbAdminIndex[] = [];\n  for (const idx of idxListRes.rows) {\n    const idxName = String((idx as any).name);\n    if (idxName.startsWith(\"sqlite_\")) continue;\n    const infoRes = await client.execute(\n      `PRAGMA index_info(${quoteIdent(idxName)})`,\n    );\n    indexes.push({\n      name: idxName,\n      unique: Number((idx as any).unique) === 1,\n      columns: infoRes.rows\n        .map((c) => (c as any).name)\n        .filter((n): n is string => typeof n === \"string\"),\n    });\n  }\n\n  return {\n    name: table,\n    type,\n    columns,\n    primaryKey,\n    foreignKeys,\n    indexes,\n    rowCount: type === \"view\" ? null : await safeRowCount(table, runtime),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// getRows\n// ---------------------------------------------------------------------------\n\nconst SAFE_OPS = new Set([\n  \"eq\",\n  \"neq\",\n  \"lt\",\n  \"lte\",\n  \"gt\",\n  \"gte\",\n  \"like\",\n  \"ilike\",\n  \"in\",\n  \"is_null\",\n  \"not_null\",\n]);\n\nconst OP_SQL: Record<string, string> = {\n  eq: \"=\",\n  neq: \"<>\",\n  lt: \"<\",\n  lte: \"<=\",\n  gt: \">\",\n  gte: \">=\",\n  like: \"LIKE\",\n};\n\n/** Build a parameterized WHERE clause + args from filters. */\nfunction buildWhere(\n  filters: DbAdminFilter[] | undefined,\n  runtime?: DbAdminRuntime,\n): {\n  clause: string;\n  args: unknown[];\n} {\n  if (!filters || filters.length === 0) return { clause: \"\", args: [] };\n  const parts: string[] = [];\n  const args: unknown[] = [];\n  for (const f of filters) {\n    const col = quoteIdent(f.column);\n    if (!SAFE_OPS.has(f.op)) {\n      throw new Error(`Invalid filter op: ${JSON.stringify(f.op)}`);\n    }\n    switch (f.op) {\n      case \"is_null\":\n        parts.push(`${col} IS NULL`);\n        break;\n      case \"not_null\":\n        parts.push(`${col} IS NOT NULL`);\n        break;\n      case \"in\": {\n        const values = Array.isArray(f.value) ? f.value : [f.value];\n        if (values.length === 0) {\n          // `col IN ()` is invalid SQL; an empty set matches nothing.\n          parts.push(`1 = 0`);\n          break;\n        }\n        parts.push(`${col} IN (${values.map(() => \"?\").join(\", \")})`);\n        args.push(...values);\n        break;\n      }\n      case \"ilike\": {\n        // SQLite LIKE is case-insensitive for ASCII by default; Postgres has\n        // a dedicated ILIKE operator.\n        if (isPostgresRuntime(runtime)) {\n          parts.push(`${col} ILIKE ?`);\n        } else {\n          parts.push(`${col} LIKE ?`);\n        }\n        args.push(f.value);\n        break;\n      }\n      default: {\n        parts.push(`${col} ${OP_SQL[f.op]} ?`);\n        args.push(f.value);\n        break;\n      }\n    }\n  }\n  return { clause: parts.length ? ` WHERE ${parts.join(\" AND \")}` : \"\", args };\n}\n\nfunction buildOrderBy(sort: DbAdminRowsRequest[\"sort\"]): string {\n  if (!sort || sort.length === 0) return \"\";\n  const parts = sort.map((s) => {\n    const dir = s.dir === \"desc\" ? \"DESC\" : \"ASC\";\n    return `${quoteIdent(s.column)} ${dir}`;\n  });\n  return ` ORDER BY ${parts.join(\", \")}`;\n}\n\nexport async function getRows(\n  table: string,\n  req: DbAdminRowsRequest,\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminRowsResult> {\n  assertIdent(table, \"table name\");\n  const client = db(runtime);\n  const schema = await getTableSchema(table, runtime);\n\n  const page = Math.max(1, Math.floor(req.page) || 1);\n  const pageSize = Math.min(1000, Math.max(1, Math.floor(req.pageSize) || 50));\n  const offset = (page - 1) * pageSize;\n\n  const where = buildWhere(req.filters, runtime);\n  const orderBy = buildOrderBy(req.sort);\n  const quoted = quoteIdent(table);\n\n  const countRes = await client.execute({\n    sql: `SELECT COUNT(*) AS c FROM ${quoted}${where.clause}`,\n    args: where.args,\n  });\n  const total = Number((countRes.rows[0] as any)?.c ?? 0) || 0;\n\n  const rowsRes = await client.execute({\n    sql: `SELECT * FROM ${quoted}${where.clause}${orderBy} LIMIT ? OFFSET ?`,\n    args: [...where.args, pageSize, offset],\n  });\n\n  return {\n    columns: schema.columns,\n    rows: rowsRes.rows as Record<string, unknown>[],\n    total,\n    page,\n    pageSize,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// applyMutations\n// ---------------------------------------------------------------------------\n\nfunction buildInsert(\n  table: string,\n  row: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const cols = Object.keys(row);\n  if (cols.length === 0) {\n    throw new Error(\"Cannot insert an empty row\");\n  }\n  cols.forEach((c) => assertIdent(c, \"column name\"));\n  const sql = `INSERT INTO ${quoteIdent(table)} (${cols\n    .map(quoteIdent)\n    .join(\", \")}) VALUES (${cols.map(() => \"?\").join(\", \")})`;\n  return { sql, args: cols.map((c) => row[c]) };\n}\n\nfunction buildUpdate(\n  table: string,\n  set: Record<string, unknown>,\n  where: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const setCols = Object.keys(set);\n  const whereCols = Object.keys(where);\n  if (setCols.length === 0) throw new Error(\"Update requires a non-empty set\");\n  if (whereCols.length === 0) {\n    throw new Error(\"Update requires a non-empty where clause\");\n  }\n  setCols.forEach((c) => assertIdent(c, \"column name\"));\n  whereCols.forEach((c) => assertIdent(c, \"column name\"));\n  const setSql = setCols.map((c) => `${quoteIdent(c)} = ?`).join(\", \");\n  const whereSql = whereCols.map((c) => `${quoteIdent(c)} = ?`).join(\" AND \");\n  const sql = `UPDATE ${quoteIdent(table)} SET ${setSql} WHERE ${whereSql}`;\n  return {\n    sql,\n    args: [...setCols.map((c) => set[c]), ...whereCols.map((c) => where[c])],\n  };\n}\n\nfunction buildDelete(\n  table: string,\n  where: Record<string, unknown>,\n): { sql: string; args: unknown[] } {\n  const whereCols = Object.keys(where);\n  if (whereCols.length === 0) {\n    throw new Error(\"Delete requires a non-empty where clause\");\n  }\n  whereCols.forEach((c) => assertIdent(c, \"column name\"));\n  const whereSql = whereCols.map((c) => `${quoteIdent(c)} = ?`).join(\" AND \");\n  const sql = `DELETE FROM ${quoteIdent(table)} WHERE ${whereSql}`;\n  return { sql, args: whereCols.map((c) => where[c]) };\n}\n\nexport async function applyMutations(\n  table: string,\n  m: DbAdminMutation,\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminMutationResult> {\n  assertIdent(table, \"table name\");\n\n  const statements: { sql: string; args: unknown[] }[] = [];\n  for (const row of m.inserts ?? []) statements.push(buildInsert(table, row));\n  for (const u of m.updates ?? []) {\n    statements.push(buildUpdate(table, u.set, u.where));\n  }\n  for (const where of m.deletes ?? []) {\n    statements.push(buildDelete(table, where));\n  }\n\n  const result: DbAdminMutationResult = {\n    sql: statements.map((s) => s.sql),\n    inserted: 0,\n    updated: 0,\n    deleted: 0,\n  };\n\n  if (m.dryRun) {\n    // dryRun returns the SQL strings WITHOUT executing.\n    return result;\n  }\n\n  // getDbExec() does not expose a transaction handle, so statements run\n  // sequentially. A failure mid-batch surfaces as a thrown error with the\n  // counts accumulated so far; callers should treat a partial batch as a\n  // failure and re-run with a corrected payload.\n  const client = db(runtime);\n  const insertCount = m.inserts?.length ?? 0;\n  const updateCount = m.updates?.length ?? 0;\n\n  let executed = 0;\n  for (const stmt of statements) {\n    const res = await client.execute({ sql: stmt.sql, args: stmt.args });\n    if (executed < insertCount) {\n      result.inserted += 1;\n    } else if (executed < insertCount + updateCount) {\n      result.updated += res.rowsAffected || 0;\n    } else {\n      result.deleted += res.rowsAffected || 0;\n    }\n    executed += 1;\n  }\n\n  if (statements.length > 0) await notifyDbAdminChange(runtime);\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// runSql\n// ---------------------------------------------------------------------------\n\n/** Error thrown when a destructive statement is run without confirmation. */\nexport class DbAdminConfirmRequiredError extends Error {\n  readonly needsConfirm = true;\n  constructor(message: string) {\n    super(message);\n    this.name = \"DbAdminConfirmRequiredError\";\n  }\n}\n\n/** Strip `--` line comments and `/* *\\/` block comments from SQL. */\nfunction stripComments(sql: string): string {\n  return sql.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \" \").replace(/--[^\\n\\r]*/g, \" \");\n}\n\nfunction isMutatingSql(sql: string): boolean {\n  const head = stripComments(sql).trim().toLowerCase();\n  return /^(insert|update|delete|replace|create|alter|drop|truncate|merge|pragma\\s+\\w+\\s*=)/.test(\n    head,\n  );\n}\n\n/** Detect destructive ops on comment-stripped SQL. */\nfunction isDestructiveSql(sql: string): boolean {\n  const cleaned = stripComments(sql).trim();\n  const lower = cleaned.toLowerCase();\n  if (/^drop\\b/.test(lower)) return true;\n  if (/^truncate\\b/.test(lower)) return true;\n  if (/^delete\\b/.test(lower) && !/\\bwhere\\b/.test(lower)) return true;\n  if (/^update\\b/.test(lower) && !/\\bwhere\\b/.test(lower)) return true;\n  return false;\n}\n\n/** A leading SELECT (or CTE that ends in SELECT) with no LIMIT clause. */\nfunction isBareSelectWithoutLimit(sql: string): boolean {\n  const cleaned = stripComments(sql).trim();\n  const lower = cleaned.toLowerCase();\n  const isSelect = /^(select|with)\\b/.test(lower);\n  if (!isSelect) return false;\n  if (/\\blimit\\b/.test(lower)) return false;\n  return true;\n}\n\nexport async function runSql(\n  sql: string,\n  params: unknown[] | undefined,\n  opts: { confirmDestructive?: boolean } = {},\n  runtime?: DbAdminRuntime,\n): Promise<DbAdminQueryResult> {\n  if (typeof sql !== \"string\" || !sql.trim()) {\n    throw new Error(\"SQL is required\");\n  }\n\n  if (isDestructiveSql(sql) && !opts.confirmDestructive) {\n    throw new DbAdminConfirmRequiredError(\n      \"This statement is destructive (DROP / TRUNCATE / unscoped DELETE or UPDATE). Re-run with confirmDestructive: true to proceed.\",\n    );\n  }\n\n  // Guardrail: auto-append LIMIT 100 to a bare SELECT so an accidental\n  // full-table scan can't dump a huge result set.\n  let finalSql = sql.trim().replace(/;\\s*$/, \"\");\n  if (isBareSelectWithoutLimit(finalSql)) {\n    finalSql = `${finalSql} LIMIT 100`;\n  }\n\n  const client = db(runtime);\n  const started = Date.now();\n  const res = await client.execute(\n    params && params.length > 0 ? { sql: finalSql, args: params } : finalSql,\n  );\n  const durationMs = Date.now() - started;\n\n  const rows = (res.rows ?? []) as Record<string, unknown>[];\n  const columns =\n    rows.length > 0 && rows[0] && typeof rows[0] === \"object\"\n      ? Object.keys(rows[0])\n      : [];\n\n  if (isMutatingSql(finalSql)) await notifyDbAdminChange(runtime);\n\n  return {\n    columns,\n    rows,\n    rowsAffected: res.rowsAffected ?? 0,\n    durationMs,\n  };\n}\n"]}

package/dist/jobs/scheduler.js

@@ -353,13 +353,12 @@ async function executeJob(resource, meta, body, deps, now) {
             const softTimeoutMs = resolveRunSoftTimeoutMs(undefined, {
                 useHostedDefault: true,
             });
-            // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout
-            // will fire first; locally this is the only guard.
-            const hardAbortTimer = setTimeout(() => {
-                // startRun's abort controller handles this below, but we still need
-                // the handle to clear it in the finally block.
-            }, 5 * 60 * 1000);
             let jobError = null;
+            // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout
+            // will fire first; locally this is the only guard. Cleared when the
+            // run completes so finished jobs don't leave a live timer keeping the
+            // process/event loop alive for the remainder of the window.
+            let hardAbortTimer = null;
             await new Promise((resolve, reject) => {
                 const activeRun = startRun(runId, thread.id, async (send, signal) => {
                     try {
@@ -381,6 +380,10 @@ async function executeJob(resource, meta, body, deps, now) {
                 }, 
                 // onComplete: run finished (completed or aborted)
                 async (run) => {
+                    if (hardAbortTimer) {
+                        clearTimeout(hardAbortTimer);
+                        hardAbortTimer = null;
+                    }
                     if (run.status === "completed") {
                         resolve();
                     }
@@ -391,10 +394,10 @@ async function executeJob(resource, meta, body, deps, now) {
                     softTimeoutMs,
                     // turnId defaults to runId — fine for single-turn jobs
                 });
-                // Hard-abort backstop: abort the run-manager's own controller after
-                // 5 minutes if it hasn't finished naturally.
-                clearTimeout(hardAbortTimer);
-                setTimeout(() => {
+                // Abort the run-manager's own controller after 5 minutes if the
+                // run hasn't finished naturally.
+                hardAbortTimer = setTimeout(() => {
+                    hardAbortTimer = null;
                     if (activeRun.status === "running") {
                         activeRun.abort.abort("job_hard_timeout");
                         reject(new Error("Job timed out after 5 minutes"));
@@ -403,6 +406,10 @@ async function executeJob(resource, meta, body, deps, now) {
             }).catch((err) => {
                 jobError = err;
             });
+            if (hardAbortTimer) {
+                clearTimeout(hardAbortTimer);
+                hardAbortTimer = null;
+            }
             if (jobError)
                 throw jobError;
             // Success — update status. Compute the next run from completion time,