@aglyn/plugins-data 1.0.0-beta.221 → 1.0.0-beta.222

package/README.md

@@ -28,11 +28,15 @@ The plugin is console-only and declares one registrar, `registerDataConsole` (th
 - The organization datasets card, `HostDatasetsCard`, as a widget in the `orgData` slot.
 - Datasets as a repeat source (`DATASET_REPEAT_SOURCE`), which is what offers "Repeat over dataset" on an element in Besigner and draws a repeat's copies from real rows on the canvas.
 
+It also keeps the `datasetSchema` installable artifact type (`artifactTypes` in `plugins.config.json`, registered from `registerDataConsoleServerDeclarations`): a dataset's schema published to a marketplace, installed as a new, empty dataset, and updated in place. The installer asks this plugin through `@aglyn/aglyn/plugin-manager/plugin-artifact-types` and never reads the datasets collection; the schema's model (`sanitizeDatasetSchema`, `resolveInstalledDatasetSchema`, `summarizeSchemaChange`) is `@aglyn/plugins-data/artifact/dataset-schema`.
+
+On the server, `registerDataServerDeclarations()` also registers the two automation steps that write a dataset record, `datasetAppend` and `updateDataset` (`server/dataset-steps.server.ts`). The Workflows engine runs them through the platform's server-step seam (`registerServerStepExecutor`), and `plugins.config.json` declares them under `serverSteps`. A record a step writes refreshes the live pages that repeat over its dataset (`server/dataset-live-pages.ts`).
+
 ### Entry points
 
 | import | contents |
 | -- | -- |
-| `@aglyn/plugins-data` | `BUNDLE_ID`, `registerDataConsole`, `HostDatasetsCard`, and the import/export model: `parseImportRows`, `mapImportColumns`, the dataset CSV/JSON writers (`datasetRecordsToCsv`, `datasetCsvHeader`, `datasetCsvRow`, `datasetRecordToJson`, `serializeDatasetValue`), and the platform's CSV helpers re-exported from the core (`parseCsv`, `countCsvDataRows`, `exportShortfall`) |
+| `@aglyn/plugins-data` | `BUNDLE_ID`, `registerDataConsole`, `HostDatasetsCard`, and the transfer resource a dataset's records move as: `DATASET_TRANSFER_RESOURCE` (`data.dataset`) and `datasetTransferResourceKey(datasetId)` |
 | `@aglyn/plugins-data/*` | any module under `src/lib/`, for example `@aglyn/plugins-data/model/dataset-record-view` (`datasetRecordFields`, `describeDatasetValue`) |
 
 ## Usage
@@ -44,14 +48,13 @@ import { registerDataConsole } from '@aglyn/plugins-data'
 registerDataConsole()
 ```
 
-The import helpers are pure functions:
+Import and export run on the platform's transfer framework (AGL-3530). The plugin declares `data.dataset` under `transferResources` with `instances`, so each dataset is its own resource, `data.dataset:<datasetId>`; it registers the server half from `registerDataConsoleServerDeclarations` (`transfer/dataset-transfer.server.ts`: the field catalog, match keys, the export's pages and count, the dry run held to the dataset's model, the writes and their undo) and the client half from `registerDataConsole`. The Data card opens the wizard and the export dialog through the console's launcher:
 
 ```ts
-import { parseImportRows } from '@aglyn/plugins-data'
+import { useTransferLauncher } from '@aglyn/aglyn'
+import { datasetTransferResourceKey } from '@aglyn/plugins-data'
 
-// A JSON array of objects, or CSV with a header row.
-// Returns string maps keyed by source column name, or null.
-const rows = parseImportRows('name,city\nAda,London')
+useTransferLauncher()?.openImport({ resource: datasetTransferResourceKey(datasetId), scope: 'org' })
 ```
 
 ## How it fits

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-data",
-  "version": "1.0.0-beta.221",
+  "version": "1.0.0-beta.222",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,15 +25,15 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.221",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.221",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.221",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.221",
-    "@aglyn/shared-util-http": "1.0.0-beta.221",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.221",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.221",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.221",
-    "@aglyn/tenant-runtime": "1.0.0-beta.221",
+    "@aglyn/aglyn": "1.0.0-beta.222",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.222",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.222",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.222",
+    "@aglyn/shared-util-http": "1.0.0-beta.222",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.222",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.222",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.222",
+    "@aglyn/tenant-runtime": "1.0.0-beta.222",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/index.d.ts

@@ -16,4 +16,4 @@
  */
 export * from './lib/constants/bundle-common';
 export * from './lib/plugin';
-export * from './lib/model';
+export * from './lib/transfer/dataset-transfer-key';

package/src/index.js

@@ -15,6 +15,6 @@
  * limitations under the License.
  */ export * from "./lib/constants/bundle-common.js";
 export * from "./lib/plugin.js";
-export * from "./lib/model/index.js";
+export * from "./lib/transfer/dataset-transfer-key.js";
 
 //# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../libs/plugins/data/src/index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/constants/bundle-common'\nexport * from './lib/plugin'\nexport * from './lib/model'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,mCAA+B;AAC7C,cAAc,kBAAc;AAC5B,cAAc,uBAAa"}
+{"version":3,"sources":["../../../../../libs/plugins/data/src/index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './lib/constants/bundle-common'\nexport * from './lib/plugin'\nexport * from './lib/transfer/dataset-transfer-key'\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,cAAc,mCAA+B;AAC7C,cAAc,kBAAc;AAC5B,cAAc,yCAAqC"}

package/src/lib/artifact/dataset-schema-artifact.server.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ArtifactInstallRequest, ArtifactLocateRequest, ArtifactRefusal, ArtifactSnapshot, ArtifactSnapshotRequest, ArtifactWorkspace, InstalledArtifactCopy, PluginArtifactOwner, PreparedArtifactInstall } from '@aglyn/aglyn/plugin-manager/plugin-artifact-types';
+/**
+ * PUBLISHING: an org dataset's SCHEMA, reduced to what travels.
+ *
+ * Datasets live at `orgs/{orgId}/datasets/{id}` and are org-shared (AGL-237),
+ * so the source is named by the publishing org and the dataset's id.
+ *
+ * Records NEVER travel: `sanitizeDatasetSchema` reads the model, and nothing
+ * here touches the `records` subcollection. A dataset's rows are the org's
+ * customer data; only the shape is publishable.
+ */
+export declare function snapshotDatasetSchema(request: ArtifactSnapshotRequest): Promise<ArtifactSnapshot | ArtifactRefusal>;
+/** INSTALLING, before the listing is read: datasets are a plan feature. */
+export declare function admitsDatasetSchema(workspace: ArtifactWorkspace): Promise<ArtifactRefusal | null>;
+/**
+ * INSTALLING: a NEW, EMPTY dataset made from the published model.
+ *
+ * Installing never merges into an existing dataset, because a schema change
+ * on a dataset that already holds rows would silently reinterpret live data.
+ * Re-installing makes another dataset rather than replacing one, for the same
+ * reason.
+ *
+ * Nothing is written until `commit`, which the installer calls once it has
+ * recorded the provenance of exactly the content prepared here.
+ */
+export declare function prepareDatasetSchemaInstall(request: ArtifactInstallRequest): Promise<PreparedArtifactInstall | ArtifactRefusal>;
+/**
+ * UPDATING: the dataset a listing installed in the site's organization, and
+ * what taking the version on offer would do to its records (AGL-1018).
+ *
+ * The incoming schema is relinked onto THIS org's datasets exactly as install
+ * does. The base holds the relinked shape, so diffing the published one would
+ * report every reference field as a user edit.
+ *
+ * A dataset's update is a merge or nothing. Its "new copy" would be a whole
+ * new dataset, which consumes org quota and lands empty: exactly what the
+ * install already does, with the quota check an update does not have.
+ */
+export declare function locateInstalledDatasetSchema(request: ArtifactLocateRequest): Promise<InstalledArtifactCopy | ArtifactRefusal>;
+/** The four answers, as the owner registers them. */
+export declare const datasetSchemaArtifactOwner: PluginArtifactOwner;

package/src/lib/artifact/dataset-schema-artifact.server.js

@@ -0,0 +1,308 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { checkDatasetQuota, checkEntitlement, createResourceUid, defaultScopeForNewResource, newResourceScopeFields, scopeCovers } from "@aglyn/aglyn/server";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { resolveInstalledDatasetSchema, sanitizeDatasetSchema, summarizeSchemaChange } from "./dataset-schema.js";
+/**
+ * A dataset's schema as an installable artifact (AGL-657), answered by the
+ * plugin that keeps datasets (AGL-3080).
+ *
+ * The installer (the marketplace) owns the listing, who may act on it, the
+ * purchase, the provenance stamp and the tally, and asks these four answers
+ * for everything that touches `orgs/{orgId}/datasets`, which it never reads.
+ * Registered from `declarations.console-server.ts` and loaded with the first
+ * publish, install or update.
+ */ const refuse = (status, error)=>({
+        ok: false,
+        status,
+        error
+    });
+const datasetsOf = (orgId)=>firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection('datasets');
+const overDatasetQuota = (limit)=>refuse(403, `Dataset limit reached (${limit}) — see Billing to upgrade.`);
+/**
+ * PUBLISHING: an org dataset's SCHEMA, reduced to what travels.
+ *
+ * Datasets live at `orgs/{orgId}/datasets/{id}` and are org-shared (AGL-237),
+ * so the source is named by the publishing org and the dataset's id.
+ *
+ * Records NEVER travel: `sanitizeDatasetSchema` reads the model, and nothing
+ * here touches the `records` subcollection. A dataset's rows are the org's
+ * customer data; only the shape is publishable.
+ */ export async function snapshotDatasetSchema(request) {
+    var _dataset_model;
+    const datasets = datasetsOf(request.orgId);
+    const datasetSnapshot = await datasets.doc(request.sourceId).get();
+    const dataset = datasetSnapshot.data();
+    if (!datasetSnapshot.exists || (dataset == null ? void 0 : dataset.deletedAt)) {
+        return refuse(404, 'Unknown dataset');
+    }
+    // v1 datasets carry a flat `fields: string[]` with no model; publish the
+    // derived shape so unmigrated datasets are publishable too (AGL-102 shim,
+    // inlined rather than importing core's deriveModelFromFields to keep the
+    // sanitizer's input one plain shape).
+    const model = (dataset == null ? void 0 : (_dataset_model = dataset.model) == null ? void 0 : _dataset_model.fields) ? dataset.model : {
+        fields: Object.fromEntries((Array.isArray(dataset == null ? void 0 : dataset.fields) ? dataset.fields : []).map((name)=>[
+                String(name),
+                {
+                    name: String(name),
+                    type: 'text'
+                }
+            ])),
+        order: (Array.isArray(dataset == null ? void 0 : dataset.fields) ? dataset.fields : []).map(String)
+    };
+    const sanitized = sanitizeDatasetSchema(model);
+    if (sanitized.ok === false) return refuse(422, sanitized.error);
+    // Reference fields name a dataset id that means nothing outside this org,
+    // so resolve each target's display name now: the installer relinks by that
+    // label (see resolveInstalledDatasetSchema).
+    const referenced = new Set(Object.values(sanitized.schema.fields).map((field)=>{
+        var _field_reference;
+        return (_field_reference = field.reference) == null ? void 0 : _field_reference.datasetId;
+    }).filter((id)=>Boolean(id)));
+    if (referenced.size) {
+        const labels = new Map();
+        await Promise.all([
+            ...referenced
+        ].map(async (id)=>{
+            const snapshot = await datasets.doc(id).get();
+            const label = snapshot.get('displayName');
+            if (label) labels.set(id, String(label));
+        }));
+        for (const field of Object.values(sanitized.schema.fields)){
+            var _field_reference;
+            const target = (_field_reference = field.reference) == null ? void 0 : _field_reference.datasetId;
+            if (target && labels.has(target)) {
+                field.reference = _extends({}, field.reference, {
+                    datasetLabel: labels.get(target)
+                });
+            }
+        }
+    }
+    return {
+        ok: true,
+        content: sanitized.schema,
+        facts: {
+            fieldCount: sanitized.schema.order.length
+        }
+    };
+}
+/** INSTALLING, before the listing is read: datasets are a plan feature. */ export async function admitsDatasetSchema(workspace) {
+    if (!checkEntitlement(workspace.org, 'dataStore')) {
+        return refuse(403, 'Datasets require a Starter plan or higher');
+    }
+    return null;
+}
+/**
+ * INSTALLING: a NEW, EMPTY dataset made from the published model.
+ *
+ * Installing never merges into an existing dataset, because a schema change
+ * on a dataset that already holds rows would silently reinterpret live data.
+ * Re-installing makes another dataset rather than replacing one, for the same
+ * reason.
+ *
+ * Nothing is written until `commit`, which the installer calls once it has
+ * recorded the provenance of exactly the content prepared here.
+ */ export async function prepareDatasetSchemaInstall(request) {
+    var _published_order;
+    const published = request.published;
+    if (!(published == null ? void 0 : (_published_order = published.order) == null ? void 0 : _published_order.length)) {
+        return refuse(500, 'Dataset schema version missing');
+    }
+    const org = request.org;
+    const datasetsRef = datasetsOf(request.orgId);
+    // Creating a dataset consumes org quota exactly like the console's own
+    // create path (AGL-473): installing must not be a way around it.
+    // Deliberately counts EVERY dataset the org owns, not the visible ones
+    // (AGL-1046). Scoping decides who can see a dataset, never who pays for
+    // it: the org owns all of them. Counting per scope would also make a
+    // collaborator's remaining quota disagree with the admin's.
+    //
+    // This is the early answer, so a workspace already at its cap is refused
+    // before the installer records any provenance. The one that holds is in
+    // `commit`, below.
+    const datasets = await datasetsRef.get();
+    const quota = checkDatasetQuota(org, datasets.size);
+    if (!quota.allowed) return overDatasetQuota(quota.limit);
+    /**
+   * Who the new dataset is shared with. Decided before relinking, because
+   * it also decides what a reference field may point at.
+   *
+   * A dataset schema installs at ORGANIZATION scope and nowhere else
+   * (`INSTALL_TARGETS.datasetSchema`), from the organization Marketplace, the
+   * one surface that installs anything. The site that surface acts THROUGH
+   * only finds the org: the org's first site, not a site anyone is working
+   * in, and it never reaches here. So no site is in context, and the dataset
+   * starts where a create on an organization page starts: All sites, whatever
+   * the org's Default sharing says. Honoring the acting site instead would
+   * hide the dataset from every other site, under an install dialog that
+   * says it lands on "the whole organization — every site" (AGL-2891).
+   */ const visibleTo = defaultScopeForNewResource({
+        defaultResourceScope: org == null ? void 0 : org.defaultResourceScope,
+        hostId: null
+    });
+    // Relink reference fields onto this org's datasets by display name; what
+    // can't be relinked degrades to text and is reported to the installer.
+    // A candidate has to be visible everywhere the new dataset is, which is
+    // the rule every reference answers to (`scopeCovers`, AGL-1044): one
+    // pointing at a dataset some of those sites cannot see resolves to nothing
+    // there, and nothing says why. That is also what keeps an install from
+    // binding its reference fields to an agency's internal dataset of the same
+    // name (AGL-1046): the display-name collision AGL-1039 fixed on the render
+    // path, arriving here instead.
+    const byLabel = {};
+    for (const entry of datasets.docs){
+        var _entry_get;
+        if (!scopeCovers(entry.get('visibleTo'), visibleTo)) continue;
+        const label = String((_entry_get = entry.get('displayName')) != null ? _entry_get : '').toLowerCase();
+        if (label && !byLabel[label]) byLabel[label] = entry.id;
+    }
+    const { schema, degradedFieldIds } = resolveInstalledDatasetSchema(published, byLabel);
+    const datasetId = createResourceUid();
+    const { listing } = request;
+    return {
+        ok: true,
+        // The RELINKED schema, not the published one, is what the base snapshot
+        // records (AGL-1015): relinking rewrites reference fields onto this org's
+        // datasets, so a base holding the publisher's ids would report every
+        // relinked field as a user edit the moment anything is diffed.
+        content: schema,
+        /**
+     * THE ENFORCEMENT POINT (AGL-3454, the AGL-2371 treatment): the count,
+     * the decision and the create in ONE transaction.
+     *
+     * The count above is taken before the installer awaits the provenance
+     * write, and every await is a yield: N installs in flight each read the
+     * same pre-count, each find room, and each land, and nothing re-counts
+     * afterwards. `tx.get` on the aggregate takes a pessimistic lock on the
+     * documents the query matched, so the loser of a race retries, re-reads
+     * the higher count and is refused, having written nothing.
+     *
+     * The org document is read outside, as the console's create path reads
+     * it: the plan and the purchased add-ons are not client-writable, so
+     * locking it would buy contention rather than correctness.
+     */ commit: async (stamp)=>{
+            const refused = await firebaseAdmin.app().firestore().runTransaction(async (tx)=>{
+                var _listing_displayName;
+                const live = (await tx.get(datasetsRef.count())).data().count;
+                const authoritative = checkDatasetQuota(org, live);
+                if (!authoritative.allowed) return overDatasetQuota(authoritative.limit);
+                tx.create(datasetsRef.doc(datasetId), _extends({
+                    displayName: String((_listing_displayName = listing.displayName) != null ? _listing_displayName : 'Dataset').slice(0, 120)
+                }, listing.description ? {
+                    description: listing.description
+                } : {}, {
+                    // `fields` is the v1 flat list the older editor still reads; keep it
+                    // in step with the model so both readers agree (AGL-102).
+                    fields: schema.order,
+                    model: schema,
+                    source: stamp.source,
+                    installedFrom: stamp.installedFrom
+                }, newResourceScopeFields(visibleTo), {
+                    createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp()
+                }));
+                return null;
+            });
+            if (refused) return refused;
+            return {
+                ok: true,
+                report: {
+                    datasetId,
+                    fields: schema.order.length,
+                    degradedFieldIds
+                }
+            };
+        }
+    };
+}
+/**
+ * UPDATING: the dataset a listing installed in the site's organization, and
+ * what taking the version on offer would do to its records (AGL-1018).
+ *
+ * The incoming schema is relinked onto THIS org's datasets exactly as install
+ * does. The base holds the relinked shape, so diffing the published one would
+ * report every reference field as a user edit.
+ *
+ * A dataset's update is a merge or nothing. Its "new copy" would be a whole
+ * new dataset, which consumes org quota and lands empty: exactly what the
+ * install already does, with the quota check an update does not have.
+ */ export async function locateInstalledDatasetSchema(request) {
+    var _doc_get, _doc_get1, _ref, _ref1, _doc_get2, _doc_get3;
+    if (!request.orgId) return refuse(404, 'Site has no owning organization');
+    const datasets = await datasetsOf(request.orgId).get();
+    const doc = datasets.docs.find((entry)=>entry.get('source.listingId') === request.listingId && !entry.get('deletedAt'));
+    if (!doc) return refuse(404, 'Not installed in this organization');
+    const byLabel = {};
+    for (const entry of datasets.docs){
+        var _entry_get;
+        const label = String((_entry_get = entry.get('displayName')) != null ? _entry_get : '').toLowerCase();
+        if (label && !byLabel[label]) byLabel[label] = entry.id;
+    }
+    const { schema } = resolveInstalledDatasetSchema(request.published, byLabel);
+    const current = (_doc_get = doc.get('model')) != null ? _doc_get : {
+        order: (_doc_get1 = doc.get('fields')) != null ? _doc_get1 : [],
+        fields: {}
+    };
+    const summary = summarizeSchemaChange(current, schema);
+    // The count is read for the preview, not estimated: "3 fields will be
+    // removed" means nothing without "from 1,240 records".
+    const records = await doc.ref.collection('records').count().get().catch(()=>null);
+    const recordCount = (_ref = records == null ? void 0 : records.data().count) != null ? _ref : 0;
+    return {
+        ok: true,
+        current,
+        incoming: schema,
+        installedVersion: String((_ref1 = (_doc_get2 = doc.get('installedFrom.version')) != null ? _doc_get2 : doc.get('source.version')) != null ? _ref1 : '') || null,
+        baseSha: (_doc_get3 = doc.get('installedFrom.sha256')) != null ? _doc_get3 : null,
+        // A schema change that removes or retypes a field reinterprets rows that
+        // already exist. It is applicable, but never without the caller having
+        // been told the count and said yes to it specifically.
+        impact: {
+            preview: {
+                schema: {
+                    added: summary.added,
+                    removed: summary.removed,
+                    retyped: summary.retyped,
+                    additiveOnly: summary.additiveOnly,
+                    recordCount
+                }
+            },
+            destructive: !summary.additiveOnly,
+            refusal: `This update removes or retypes ${summary.removed.length + summary.retyped.length} field(s) on a dataset holding ${recordCount} record(s).`
+        },
+        apply: async ({ content, stamp })=>{
+            var _ref;
+            await doc.ref.set({
+                model: content,
+                // The v1 flat list the older editor still reads, kept in step.
+                fields: (_ref = content == null ? void 0 : content.order) != null ? _ref : [],
+                installedFrom: stamp.installedFrom,
+                source: stamp.source,
+                updatedAt: firebaseAdmin.firestore.FieldValue.serverTimestamp()
+            }, {
+                merge: true
+            });
+        }
+    };
+}
+/** The four answers, as the owner registers them. */ export const datasetSchemaArtifactOwner = {
+    snapshot: snapshotDatasetSchema,
+    admits: admitsDatasetSchema,
+    prepare: prepareDatasetSchemaInstall,
+    locate: locateInstalledDatasetSchema
+};
+
+//# sourceMappingURL=dataset-schema-artifact.server.js.map

package/src/lib/artifact/dataset-schema-artifact.server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/data/src/lib/artifact/dataset-schema-artifact.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  checkDatasetQuota,\n  checkEntitlement,\n  createResourceUid,\n  defaultScopeForNewResource,\n  newResourceScopeFields,\n  scopeCovers,\n} from '@aglyn/aglyn/server'\nimport type {\n  ArtifactInstallRequest,\n  ArtifactLocateRequest,\n  ArtifactRefusal,\n  ArtifactSnapshot,\n  ArtifactSnapshotRequest,\n  ArtifactWorkspace,\n  InstalledArtifactCopy,\n  PluginArtifactOwner,\n  PreparedArtifactInstall,\n} from '@aglyn/aglyn/plugin-manager/plugin-artifact-types'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  resolveInstalledDatasetSchema,\n  sanitizeDatasetSchema,\n  summarizeSchemaChange,\n  type PublishedDatasetSchema,\n} from './dataset-schema'\n\n/**\n * A dataset's schema as an installable artifact (AGL-657), answered by the\n * plugin that keeps datasets (AGL-3080).\n *\n * The installer (the marketplace) owns the listing, who may act on it, the\n * purchase, the provenance stamp and the tally, and asks these four answers\n * for everything that touches `orgs/{orgId}/datasets`, which it never reads.\n * Registered from `declarations.console-server.ts` and loaded with the first\n * publish, install or update.\n */\n\nconst refuse = (status: number, error: string): ArtifactRefusal => ({\n  ok: false,\n  status,\n  error,\n})\n\nconst datasetsOf = (orgId: string) =>\n  firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection('datasets')\n\nconst overDatasetQuota = (limit: number): ArtifactRefusal =>\n  refuse(403, `Dataset limit reached (${limit}) — see Billing to upgrade.`)\n\n/**\n * PUBLISHING: an org dataset's SCHEMA, reduced to what travels.\n *\n * Datasets live at `orgs/{orgId}/datasets/{id}` and are org-shared (AGL-237),\n * so the source is named by the publishing org and the dataset's id.\n *\n * Records NEVER travel: `sanitizeDatasetSchema` reads the model, and nothing\n * here touches the `records` subcollection. A dataset's rows are the org's\n * customer data; only the shape is publishable.\n */\nexport async function snapshotDatasetSchema(\n  request: ArtifactSnapshotRequest,\n): Promise<ArtifactSnapshot | ArtifactRefusal> {\n  const datasets = datasetsOf(request.orgId)\n  const datasetSnapshot = await datasets.doc(request.sourceId).get()\n  const dataset = datasetSnapshot.data() as any\n  if (!datasetSnapshot.exists || dataset?.deletedAt) {\n    return refuse(404, 'Unknown dataset')\n  }\n  // v1 datasets carry a flat `fields: string[]` with no model; publish the\n  // derived shape so unmigrated datasets are publishable too (AGL-102 shim,\n  // inlined rather than importing core's deriveModelFromFields to keep the\n  // sanitizer's input one plain shape).\n  const model = dataset?.model?.fields\n    ? dataset.model\n    : {\n        fields: Object.fromEntries(\n          (Array.isArray(dataset?.fields) ? dataset.fields : []).map(\n            (name: unknown) => [String(name), { name: String(name), type: 'text' }],\n          ),\n        ),\n        order: (Array.isArray(dataset?.fields) ? dataset.fields : []).map(String),\n      }\n\n  const sanitized = sanitizeDatasetSchema(model)\n  if (sanitized.ok === false) return refuse(422, sanitized.error)\n\n  // Reference fields name a dataset id that means nothing outside this org,\n  // so resolve each target's display name now: the installer relinks by that\n  // label (see resolveInstalledDatasetSchema).\n  const referenced = new Set(\n    Object.values(sanitized.schema.fields)\n      .map((field) => field.reference?.datasetId)\n      .filter((id): id is string => Boolean(id)),\n  )\n  if (referenced.size) {\n    const labels = new Map<string, string>()\n    await Promise.all(\n      [...referenced].map(async (id) => {\n        const snapshot = await datasets.doc(id).get()\n        const label = snapshot.get('displayName')\n        if (label) labels.set(id, String(label))\n      }),\n    )\n    for (const field of Object.values(sanitized.schema.fields)) {\n      const target = field.reference?.datasetId\n      if (target && labels.has(target)) {\n        field.reference = {\n          ...field.reference,\n          datasetLabel: labels.get(target),\n        }\n      }\n    }\n  }\n  return {\n    ok: true,\n    content: sanitized.schema,\n    facts: { fieldCount: sanitized.schema.order.length },\n  }\n}\n\n/** INSTALLING, before the listing is read: datasets are a plan feature. */\nexport async function admitsDatasetSchema(\n  workspace: ArtifactWorkspace,\n): Promise<ArtifactRefusal | null> {\n  if (!checkEntitlement(workspace.org as any, 'dataStore')) {\n    return refuse(403, 'Datasets require a Starter plan or higher')\n  }\n  return null\n}\n\n/**\n * INSTALLING: a NEW, EMPTY dataset made from the published model.\n *\n * Installing never merges into an existing dataset, because a schema change\n * on a dataset that already holds rows would silently reinterpret live data.\n * Re-installing makes another dataset rather than replacing one, for the same\n * reason.\n *\n * Nothing is written until `commit`, which the installer calls once it has\n * recorded the provenance of exactly the content prepared here.\n */\nexport async function prepareDatasetSchemaInstall(\n  request: ArtifactInstallRequest,\n): Promise<PreparedArtifactInstall | ArtifactRefusal> {\n  const published = request.published as PublishedDatasetSchema | undefined\n  if (!published?.order?.length) {\n    return refuse(500, 'Dataset schema version missing')\n  }\n  const org = request.org as any\n  const datasetsRef = datasetsOf(request.orgId)\n\n  // Creating a dataset consumes org quota exactly like the console's own\n  // create path (AGL-473): installing must not be a way around it.\n  // Deliberately counts EVERY dataset the org owns, not the visible ones\n  // (AGL-1046). Scoping decides who can see a dataset, never who pays for\n  // it: the org owns all of them. Counting per scope would also make a\n  // collaborator's remaining quota disagree with the admin's.\n  //\n  // This is the early answer, so a workspace already at its cap is refused\n  // before the installer records any provenance. The one that holds is in\n  // `commit`, below.\n  const datasets = await datasetsRef.get()\n  const quota = checkDatasetQuota(org, datasets.size)\n  if (!quota.allowed) return overDatasetQuota(quota.limit)\n\n  /**\n   * Who the new dataset is shared with. Decided before relinking, because\n   * it also decides what a reference field may point at.\n   *\n   * A dataset schema installs at ORGANIZATION scope and nowhere else\n   * (`INSTALL_TARGETS.datasetSchema`), from the organization Marketplace, the\n   * one surface that installs anything. The site that surface acts THROUGH\n   * only finds the org: the org's first site, not a site anyone is working\n   * in, and it never reaches here. So no site is in context, and the dataset\n   * starts where a create on an organization page starts: All sites, whatever\n   * the org's Default sharing says. Honoring the acting site instead would\n   * hide the dataset from every other site, under an install dialog that\n   * says it lands on \"the whole organization — every site\" (AGL-2891).\n   */\n  const visibleTo = defaultScopeForNewResource({\n    defaultResourceScope: org?.defaultResourceScope,\n    hostId: null,\n  })\n\n  // Relink reference fields onto this org's datasets by display name; what\n  // can't be relinked degrades to text and is reported to the installer.\n  // A candidate has to be visible everywhere the new dataset is, which is\n  // the rule every reference answers to (`scopeCovers`, AGL-1044): one\n  // pointing at a dataset some of those sites cannot see resolves to nothing\n  // there, and nothing says why. That is also what keeps an install from\n  // binding its reference fields to an agency's internal dataset of the same\n  // name (AGL-1046): the display-name collision AGL-1039 fixed on the render\n  // path, arriving here instead.\n  const byLabel: Record<string, string> = {}\n  for (const entry of datasets.docs) {\n    if (!scopeCovers(entry.get('visibleTo'), visibleTo)) continue\n    const label = String(entry.get('displayName') ?? '').toLowerCase()\n    if (label && !byLabel[label]) byLabel[label] = entry.id\n  }\n  const { schema, degradedFieldIds } = resolveInstalledDatasetSchema(\n    published,\n    byLabel,\n  )\n  const datasetId = createResourceUid()\n  const { listing } = request\n\n  return {\n    ok: true,\n    // The RELINKED schema, not the published one, is what the base snapshot\n    // records (AGL-1015): relinking rewrites reference fields onto this org's\n    // datasets, so a base holding the publisher's ids would report every\n    // relinked field as a user edit the moment anything is diffed.\n    content: schema,\n    /**\n     * THE ENFORCEMENT POINT (AGL-3454, the AGL-2371 treatment): the count,\n     * the decision and the create in ONE transaction.\n     *\n     * The count above is taken before the installer awaits the provenance\n     * write, and every await is a yield: N installs in flight each read the\n     * same pre-count, each find room, and each land, and nothing re-counts\n     * afterwards. `tx.get` on the aggregate takes a pessimistic lock on the\n     * documents the query matched, so the loser of a race retries, re-reads\n     * the higher count and is refused, having written nothing.\n     *\n     * The org document is read outside, as the console's create path reads\n     * it: the plan and the purchased add-ons are not client-writable, so\n     * locking it would buy contention rather than correctness.\n     */\n    commit: async (stamp) => {\n      const refused = await firebaseAdmin\n        .app()\n        .firestore()\n        .runTransaction<ArtifactRefusal | null>(async (tx) => {\n          const live = (await tx.get(datasetsRef.count())).data().count\n          const authoritative = checkDatasetQuota(org, live)\n          if (!authoritative.allowed) return overDatasetQuota(authoritative.limit)\n          tx.create(datasetsRef.doc(datasetId), {\n            displayName: String(listing.displayName ?? 'Dataset').slice(0, 120),\n            ...(listing.description ? { description: listing.description } : {}),\n            // `fields` is the v1 flat list the older editor still reads; keep it\n            // in step with the model so both readers agree (AGL-102).\n            fields: schema.order,\n            model: schema,\n            source: stamp.source,\n            installedFrom: stamp.installedFrom,\n            // The scope decided above. Stamping it is not optional: a dataset\n            // with no `visibleTo` matches no scoped read and would render on no\n            // site at all.\n            //\n            // Through the AGL-1478 gate since AGL-1484, so \"every other dataset\n            // creator\" is a fact about the type rather than about four object\n            // literals that happen to agree today.\n            ...newResourceScopeFields(visibleTo),\n            createdAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n          })\n          return null\n        })\n      if (refused) return refused\n      return {\n        ok: true,\n        report: { datasetId, fields: schema.order.length, degradedFieldIds },\n      }\n    },\n  }\n}\n\n/**\n * UPDATING: the dataset a listing installed in the site's organization, and\n * what taking the version on offer would do to its records (AGL-1018).\n *\n * The incoming schema is relinked onto THIS org's datasets exactly as install\n * does. The base holds the relinked shape, so diffing the published one would\n * report every reference field as a user edit.\n *\n * A dataset's update is a merge or nothing. Its \"new copy\" would be a whole\n * new dataset, which consumes org quota and lands empty: exactly what the\n * install already does, with the quota check an update does not have.\n */\nexport async function locateInstalledDatasetSchema(\n  request: ArtifactLocateRequest,\n): Promise<InstalledArtifactCopy | ArtifactRefusal> {\n  if (!request.orgId) return refuse(404, 'Site has no owning organization')\n  const datasets = await datasetsOf(request.orgId).get()\n  const doc = datasets.docs.find(\n    (entry) =>\n      entry.get('source.listingId') === request.listingId && !entry.get('deletedAt'),\n  )\n  if (!doc) return refuse(404, 'Not installed in this organization')\n  const byLabel: Record<string, string> = {}\n  for (const entry of datasets.docs) {\n    const label = String(entry.get('displayName') ?? '').toLowerCase()\n    if (label && !byLabel[label]) byLabel[label] = entry.id\n  }\n  const { schema } = resolveInstalledDatasetSchema(\n    request.published as PublishedDatasetSchema,\n    byLabel,\n  )\n  const current = doc.get('model') ?? { order: doc.get('fields') ?? [], fields: {} }\n  const summary = summarizeSchemaChange(current as any, schema as any)\n  // The count is read for the preview, not estimated: \"3 fields will be\n  // removed\" means nothing without \"from 1,240 records\".\n  const records = await doc.ref\n    .collection('records')\n    .count()\n    .get()\n    .catch(() => null)\n  const recordCount = records?.data().count ?? 0\n  return {\n    ok: true,\n    current,\n    incoming: schema,\n    installedVersion:\n      String(doc.get('installedFrom.version') ?? doc.get('source.version') ?? '') || null,\n    baseSha: doc.get('installedFrom.sha256') ?? null,\n    // A schema change that removes or retypes a field reinterprets rows that\n    // already exist. It is applicable, but never without the caller having\n    // been told the count and said yes to it specifically.\n    impact: {\n      preview: {\n        schema: {\n          added: summary.added,\n          removed: summary.removed,\n          retyped: summary.retyped,\n          additiveOnly: summary.additiveOnly,\n          recordCount,\n        },\n      },\n      destructive: !summary.additiveOnly,\n      refusal:\n        `This update removes or retypes ${\n          summary.removed.length + summary.retyped.length\n        } field(s) on a dataset holding ${recordCount} record(s).`,\n    },\n    apply: async ({ content, stamp }) => {\n      await doc.ref.set(\n        {\n          model: content,\n          // The v1 flat list the older editor still reads, kept in step.\n          fields: (content as PublishedDatasetSchema | undefined)?.order ?? [],\n          installedFrom: stamp.installedFrom,\n          source: stamp.source,\n          updatedAt: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n        },\n        { merge: true },\n      )\n    },\n  }\n}\n\n/** The four answers, as the owner registers them. */\nexport const datasetSchemaArtifactOwner: PluginArtifactOwner = {\n  snapshot: snapshotDatasetSchema,\n  admits: admitsDatasetSchema,\n  prepare: prepareDatasetSchemaInstall,\n  locate: locateInstalledDatasetSchema,\n}\n"],"names":["checkDatasetQuota","checkEntitlement","createResourceUid","defaultScopeForNewResource","newResourceScopeFields","scopeCovers","firebaseAdmin","resolveInstalledDatasetSchema","sanitizeDatasetSchema","summarizeSchemaChange","refuse","status","error","ok","datasetsOf","orgId","app","firestore","collection","doc","overDatasetQuota","limit","snapshotDatasetSchema","request","dataset","datasets","datasetSnapshot","sourceId","get","data","exists","deletedAt","model","fields","Object","fromEntries","Array","isArray","map","name","String","type","order","sanitized","referenced","Set","values","schema","field","reference","datasetId","filter","id","Boolean","size","labels","Map","Promise","all","snapshot","label","set","target","has","datasetLabel","content","facts","fieldCount","length","admitsDatasetSchema","workspace","org","prepareDatasetSchemaInstall","published","datasetsRef","quota","allowed","visibleTo","defaultResourceScope","hostId","byLabel","entry","docs","toLowerCase","degradedFieldIds","listing","commit","stamp","refused","runTransaction","tx","live","count","authoritative","create","displayName","slice","description","source","installedFrom","createdAt","FieldValue","serverTimestamp","report","locateInstalledDatasetSchema","find","listingId","current","summary","records","ref","catch","recordCount","incoming","installedVersion","baseSha","impact","preview","added","removed","retyped","additiveOnly","destructive","refusal","apply","updatedAt","merge","datasetSchemaArtifactOwner","admits","prepare","locate"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,iBAAiB,EACjBC,gBAAgB,EAChBC,iBAAiB,EACjBC,0BAA0B,EAC1BC,sBAAsB,EACtBC,WAAW,QACN,sBAAqB;AAY5B,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SACEC,6BAA6B,EAC7BC,qBAAqB,EACrBC,qBAAqB,QAEhB,sBAAkB;AAEzB;;;;;;;;;CASC,GAED,MAAMC,SAAS,CAACC,QAAgBC,QAAoC,CAAA;QAClEC,IAAI;QACJF;QACAC;IACF,CAAA;AAEA,MAAME,aAAa,CAACC,QAClBT,cAAcU,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC,QAAQC,GAAG,CAACJ,OAAOG,UAAU,CAAC;AAE3E,MAAME,mBAAmB,CAACC,QACxBX,OAAO,KAAK,CAAC,uBAAuB,EAAEW,MAAM,2BAA2B,CAAC;AAE1E;;;;;;;;;CASC,GACD,OAAO,eAAeC,sBACpBC,OAAgC;QAYlBC;IAVd,MAAMC,WAAWX,WAAWS,QAAQR,KAAK;IACzC,MAAMW,kBAAkB,MAAMD,SAASN,GAAG,CAACI,QAAQI,QAAQ,EAAEC,GAAG;IAChE,MAAMJ,UAAUE,gBAAgBG,IAAI;IACpC,IAAI,CAACH,gBAAgBI,MAAM,KAAIN,2BAAAA,QAASO,SAAS,GAAE;QACjD,OAAOrB,OAAO,KAAK;IACrB;IACA,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,sCAAsC;IACtC,MAAMsB,QAAQR,CAAAA,4BAAAA,iBAAAA,QAASQ,KAAK,qBAAdR,eAAgBS,MAAM,IAChCT,QAAQQ,KAAK,GACb;QACEC,QAAQC,OAAOC,WAAW,CACxB,AAACC,CAAAA,MAAMC,OAAO,CAACb,2BAAAA,QAASS,MAAM,IAAIT,QAAQS,MAAM,GAAG,EAAE,AAAD,EAAGK,GAAG,CACxD,CAACC,OAAkB;gBAACC,OAAOD;gBAAO;oBAAEA,MAAMC,OAAOD;oBAAOE,MAAM;gBAAO;aAAE;QAG3EC,OAAO,AAACN,CAAAA,MAAMC,OAAO,CAACb,2BAAAA,QAASS,MAAM,IAAIT,QAAQS,MAAM,GAAG,EAAE,AAAD,EAAGK,GAAG,CAACE;IACpE;IAEJ,MAAMG,YAAYnC,sBAAsBwB;IACxC,IAAIW,UAAU9B,EAAE,KAAK,OAAO,OAAOH,OAAO,KAAKiC,UAAU/B,KAAK;IAE9D,0EAA0E;IAC1E,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAMgC,aAAa,IAAIC,IACrBX,OAAOY,MAAM,CAACH,UAAUI,MAAM,CAACd,MAAM,EAClCK,GAAG,CAAC,CAACU;YAAUA;gBAAAA,mBAAAA,MAAMC,SAAS,qBAAfD,iBAAiBE,SAAS;OACzCC,MAAM,CAAC,CAACC,KAAqBC,QAAQD;IAE1C,IAAIR,WAAWU,IAAI,EAAE;QACnB,MAAMC,SAAS,IAAIC;QACnB,MAAMC,QAAQC,GAAG,CACf;eAAId;SAAW,CAACN,GAAG,CAAC,OAAOc;YACzB,MAAMO,WAAW,MAAMlC,SAASN,GAAG,CAACiC,IAAIxB,GAAG;YAC3C,MAAMgC,QAAQD,SAAS/B,GAAG,CAAC;YAC3B,IAAIgC,OAAOL,OAAOM,GAAG,CAACT,IAAIZ,OAAOoB;QACnC;QAEF,KAAK,MAAMZ,SAASd,OAAOY,MAAM,CAACH,UAAUI,MAAM,CAACd,MAAM,EAAG;gBAC3Ce;YAAf,MAAMc,UAASd,mBAAAA,MAAMC,SAAS,qBAAfD,iBAAiBE,SAAS;YACzC,IAAIY,UAAUP,OAAOQ,GAAG,CAACD,SAAS;gBAChCd,MAAMC,SAAS,GAAG,aACbD,MAAMC,SAAS;oBAClBe,cAAcT,OAAO3B,GAAG,CAACkC;;YAE7B;QACF;IACF;IACA,OAAO;QACLjD,IAAI;QACJoD,SAAStB,UAAUI,MAAM;QACzBmB,OAAO;YAAEC,YAAYxB,UAAUI,MAAM,CAACL,KAAK,CAAC0B,MAAM;QAAC;IACrD;AACF;AAEA,yEAAyE,GACzE,OAAO,eAAeC,oBACpBC,SAA4B;IAE5B,IAAI,CAACrE,iBAAiBqE,UAAUC,GAAG,EAAS,cAAc;QACxD,OAAO7D,OAAO,KAAK;IACrB;IACA,OAAO;AACT;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAe8D,4BACpBjD,OAA+B;QAG1BkD;IADL,MAAMA,YAAYlD,QAAQkD,SAAS;IACnC,IAAI,EAACA,8BAAAA,mBAAAA,UAAW/B,KAAK,qBAAhB+B,iBAAkBL,MAAM,GAAE;QAC7B,OAAO1D,OAAO,KAAK;IACrB;IACA,MAAM6D,MAAMhD,QAAQgD,GAAG;IACvB,MAAMG,cAAc5D,WAAWS,QAAQR,KAAK;IAE5C,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,4DAA4D;IAC5D,EAAE;IACF,yEAAyE;IACzE,wEAAwE;IACxE,mBAAmB;IACnB,MAAMU,WAAW,MAAMiD,YAAY9C,GAAG;IACtC,MAAM+C,QAAQ3E,kBAAkBuE,KAAK9C,SAAS6B,IAAI;IAClD,IAAI,CAACqB,MAAMC,OAAO,EAAE,OAAOxD,iBAAiBuD,MAAMtD,KAAK;IAEvD;;;;;;;;;;;;;GAaC,GACD,MAAMwD,YAAY1E,2BAA2B;QAC3C2E,oBAAoB,EAAEP,uBAAAA,IAAKO,oBAAoB;QAC/CC,QAAQ;IACV;IAEA,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,+BAA+B;IAC/B,MAAMC,UAAkC,CAAC;IACzC,KAAK,MAAMC,SAASxD,SAASyD,IAAI,CAAE;YAEZD;QADrB,IAAI,CAAC5E,YAAY4E,MAAMrD,GAAG,CAAC,cAAciD,YAAY;QACrD,MAAMjB,QAAQpB,QAAOyC,aAAAA,MAAMrD,GAAG,CAAC,0BAAVqD,aAA4B,IAAIE,WAAW;QAChE,IAAIvB,SAAS,CAACoB,OAAO,CAACpB,MAAM,EAAEoB,OAAO,CAACpB,MAAM,GAAGqB,MAAM7B,EAAE;IACzD;IACA,MAAM,EAAEL,MAAM,EAAEqC,gBAAgB,EAAE,GAAG7E,8BACnCkE,WACAO;IAEF,MAAM9B,YAAYhD;IAClB,MAAM,EAAEmF,OAAO,EAAE,GAAG9D;IAEpB,OAAO;QACLV,IAAI;QACJ,wEAAwE;QACxE,0EAA0E;QAC1E,qEAAqE;QACrE,+DAA+D;QAC/DoD,SAASlB;QACT;;;;;;;;;;;;;;KAcC,GACDuC,QAAQ,OAAOC;YACb,MAAMC,UAAU,MAAMlF,cACnBU,GAAG,GACHC,SAAS,GACTwE,cAAc,CAAyB,OAAOC;oBAKvBL;gBAJtB,MAAMM,OAAO,AAAC,CAAA,MAAMD,GAAG9D,GAAG,CAAC8C,YAAYkB,KAAK,GAAE,EAAG/D,IAAI,GAAG+D,KAAK;gBAC7D,MAAMC,gBAAgB7F,kBAAkBuE,KAAKoB;gBAC7C,IAAI,CAACE,cAAcjB,OAAO,EAAE,OAAOxD,iBAAiByE,cAAcxE,KAAK;gBACvEqE,GAAGI,MAAM,CAACpB,YAAYvD,GAAG,CAAC+B,YAAY;oBACpC6C,aAAavD,QAAO6C,uBAAAA,QAAQU,WAAW,YAAnBV,uBAAuB,WAAWW,KAAK,CAAC,GAAG;mBAC3DX,QAAQY,WAAW,GAAG;oBAAEA,aAAaZ,QAAQY,WAAW;gBAAC,IAAI,CAAC;oBAClE,qEAAqE;oBACrE,0DAA0D;oBAC1DhE,QAAQc,OAAOL,KAAK;oBACpBV,OAAOe;oBACPmD,QAAQX,MAAMW,MAAM;oBACpBC,eAAeZ,MAAMY,aAAa;mBAQ/B/F,uBAAuByE;oBAC1BuB,WAAW9F,cAAcW,SAAS,CAACoF,UAAU,CAACC,eAAe;;gBAE/D,OAAO;YACT;YACF,IAAId,SAAS,OAAOA;YACpB,OAAO;gBACL3E,IAAI;gBACJ0F,QAAQ;oBAAErD;oBAAWjB,QAAQc,OAAOL,KAAK,CAAC0B,MAAM;oBAAEgB;gBAAiB;YACrE;QACF;IACF;AACF;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,eAAeoB,6BACpBjF,OAA8B;QAkBdJ,UAA6BA,iBAelCA,OAAAA,WACAA;IAhCX,IAAI,CAACI,QAAQR,KAAK,EAAE,OAAOL,OAAO,KAAK;IACvC,MAAMe,WAAW,MAAMX,WAAWS,QAAQR,KAAK,EAAEa,GAAG;IACpD,MAAMT,MAAMM,SAASyD,IAAI,CAACuB,IAAI,CAC5B,CAACxB,QACCA,MAAMrD,GAAG,CAAC,wBAAwBL,QAAQmF,SAAS,IAAI,CAACzB,MAAMrD,GAAG,CAAC;IAEtE,IAAI,CAACT,KAAK,OAAOT,OAAO,KAAK;IAC7B,MAAMsE,UAAkC,CAAC;IACzC,KAAK,MAAMC,SAASxD,SAASyD,IAAI,CAAE;YACZD;QAArB,MAAMrB,QAAQpB,QAAOyC,aAAAA,MAAMrD,GAAG,CAAC,0BAAVqD,aAA4B,IAAIE,WAAW;QAChE,IAAIvB,SAAS,CAACoB,OAAO,CAACpB,MAAM,EAAEoB,OAAO,CAACpB,MAAM,GAAGqB,MAAM7B,EAAE;IACzD;IACA,MAAM,EAAEL,MAAM,EAAE,GAAGxC,8BACjBgB,QAAQkD,SAAS,EACjBO;IAEF,MAAM2B,WAAUxF,WAAAA,IAAIS,GAAG,CAAC,oBAART,WAAoB;QAAEuB,KAAK,GAAEvB,YAAAA,IAAIS,GAAG,CAAC,qBAART,YAAqB,EAAE;QAAEc,QAAQ,CAAC;IAAE;IACjF,MAAM2E,UAAUnG,sBAAsBkG,SAAgB5D;IACtD,sEAAsE;IACtE,uDAAuD;IACvD,MAAM8D,UAAU,MAAM1F,IAAI2F,GAAG,CAC1B5F,UAAU,CAAC,WACX0E,KAAK,GACLhE,GAAG,GACHmF,KAAK,CAAC,IAAM;IACf,MAAMC,sBAAcH,2BAAAA,QAAShF,IAAI,GAAG+D,KAAK,mBAAI;IAC7C,OAAO;QACL/E,IAAI;QACJ8F;QACAM,UAAUlE;QACVmE,kBACE1E,QAAOrB,SAAAA,YAAAA,IAAIS,GAAG,CAAC,oCAART,YAAoCA,IAAIS,GAAG,CAAC,6BAA5CT,QAAiE,OAAO;QACjFgG,OAAO,GAAEhG,YAAAA,IAAIS,GAAG,CAAC,mCAART,YAAmC;QAC5C,yEAAyE;QACzE,uEAAuE;QACvE,uDAAuD;QACvDiG,QAAQ;YACNC,SAAS;gBACPtE,QAAQ;oBACNuE,OAAOV,QAAQU,KAAK;oBACpBC,SAASX,QAAQW,OAAO;oBACxBC,SAASZ,QAAQY,OAAO;oBACxBC,cAAcb,QAAQa,YAAY;oBAClCT;gBACF;YACF;YACAU,aAAa,CAACd,QAAQa,YAAY;YAClCE,SACE,CAAC,+BAA+B,EAC9Bf,QAAQW,OAAO,CAACnD,MAAM,GAAGwC,QAAQY,OAAO,CAACpD,MAAM,CAChD,+BAA+B,EAAE4C,YAAY,WAAW,CAAC;QAC9D;QACAY,OAAO,OAAO,EAAE3D,OAAO,EAAEsB,KAAK,EAAE;;YAC9B,MAAMpE,IAAI2F,GAAG,CAACjD,GAAG,CACf;gBACE7B,OAAOiC;gBACP,+DAA+D;gBAC/DhC,MAAM,UAAGgC,2BAAD,AAACA,QAAgDvB,KAAK,mBAAI,EAAE;gBACpEyD,eAAeZ,MAAMY,aAAa;gBAClCD,QAAQX,MAAMW,MAAM;gBACpB2B,WAAWvH,cAAcW,SAAS,CAACoF,UAAU,CAACC,eAAe;YAC/D,GACA;gBAAEwB,OAAO;YAAK;QAElB;IACF;AACF;AAEA,mDAAmD,GACnD,OAAO,MAAMC,6BAAkD;IAC7DpE,UAAUrC;IACV0G,QAAQ3D;IACR4D,SAASzD;IACT0D,QAAQ1B;AACV,EAAC"}