@bobbykim/manguito-cms-api 0.4.0 → 0.4.2

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/paths.ts","../src/app.ts","../src/middleware/cors.ts","../src/middleware/security-headers.ts","../src/middleware/error.ts","../src/middleware/auth.ts","../src/auth/jwt.ts","../src/middleware/must-change-password.ts","../src/middleware/permission.ts","../src/middleware/hierarchy.ts","../src/middleware/rate-limit.ts","../src/auth/registry.ts","../src/programmatic/resolve.ts","../src/routes/query-params.ts","../src/routes/content.ts","../src/routes/media.ts","../src/routes/admin/content.ts","../src/media-references.ts","../src/routes/admin/media.ts","../src/routes/admin/auth.ts","../src/auth/password.ts","../src/routes/admin/users.ts","../src/routes/admin/config.ts","../src/routes/admin/schema.ts","../src/repositories/content.ts","../src/repositories/media.ts","../src/server/node.ts","../src/index.ts"],"sourcesContent":["// ─── Public route path construction ───────────────────────────────────────────\n//\n// The single place public route paths are built. Registrators must not hardcode\n// '/api/...': the prefix is configurable (api.prefix) and Stage 2 inserts a\n// version segment here.\n\nexport function normalizePrefix(prefix: string | undefined): string {\n  if (prefix === undefined) return '/api'\n  const withSlash = prefix.startsWith('/') ? prefix : `/${prefix}`\n  const trimmed = withSlash.replace(/\\/+$/, '')\n  return trimmed === '' ? '/api' : trimmed\n}\n\nexport type PublicPaths = {\n  collection(basePath: string): string\n  item(basePath: string): string\n  taxonomyCollection(typeName: string): string\n  taxonomyItem(typeName: string): string\n  mediaCollection(): string\n  mediaItem(): string\n  openapi(): string\n}\n\nexport function createPublicPaths(prefix: string): PublicPaths {\n  return {\n    collection: (basePath) => `${prefix}/${basePath}`,\n    item: (basePath) => `${prefix}/${basePath}/:slug`,\n    taxonomyCollection: (typeName) => `${prefix}/taxonomy/${typeName}`,\n    taxonomyItem: (typeName) => `${prefix}/taxonomy/${typeName}/:id`,\n    mediaCollection: () => `${prefix}/media`,\n    mediaItem: () => `${prefix}/media/:id`,\n    openapi: () => `${prefix}/openapi.json`,\n  }\n}\n","import { Hono } from 'hono'\nimport type { Handler } from 'hono'\nimport { sql } from 'drizzle-orm'\nimport type { StorageAdapter, SchemaRegistry, ParsedContentType, ParsedTaxonomyType, ResolvedRateLimitConfig, CorsConfig, ResolvedGraphQLConfig } from '@bobbykim/manguito-cms-core'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { createCorsMiddleware } from './middleware/cors.js'\nimport { createSecurityHeadersMiddleware } from './middleware/security-headers.js'\nimport { errorHandler } from './middleware/error.js'\nimport { createAuthMiddleware } from './middleware/auth.js'\nimport { mustChangePasswordCheck } from './middleware/must-change-password.js'\nimport { createPermissionMiddleware } from './middleware/permission.js'\nimport { createHierarchyMiddleware } from './middleware/hierarchy.js'\nimport { resolveListRateLimit } from './middleware/rate-limit.js'\nimport { buildRolesRegistry } from './auth/registry.js'\nimport { createProgrammaticResolver, validateResolverBindings, type ResolverMap } from './programmatic/resolve.js'\nimport { registerPublicContentRoutes } from './routes/content.js'\nimport { registerPublicMediaRoutes } from './routes/media.js'\nimport { registerAdminContentRoutes } from './routes/admin/content.js'\nimport { registerAdminMediaRoutes } from './routes/admin/media.js'\nimport { registerAuthRoutes } from './routes/admin/auth.js'\nimport { registerUserRoutes } from './routes/admin/users.js'\nimport { registerConfigRoute } from './routes/admin/config.js'\nimport { registerSchemaRoute } from './routes/admin/schema.js'\nimport { createDrizzleContentRepository } from './repositories/content.js'\nimport { buildRelationsMap } from './relations.js'\nimport { createMediaRepository } from './repositories/media.js'\nimport { createFieldKeyMap, type FieldKeyMap } from './field-keys.js'\nimport { normalizePrefix, createPublicPaths } from './paths.js'\n\nexport type CreateCmsAppOptions = {\n  /** CMS display name shown in GET /admin/api/config. Defaults to 'Manguito CMS'. */\n  name?: string\n  prefix?: string\n  storage: StorageAdapter\n  registry: SchemaRegistry\n  db: DrizzlePostgresInstance\n  media?: {\n    /** Optional upload size cap in bytes. Returned by GET /admin/api/config for client-side UX validation. */\n    max_file_size?: number\n  }\n  rateLimit?: ResolvedRateLimitConfig\n  cors?: CorsConfig\n  /** Programmatic field resolvers, keyed `${schema}::${field}`. */\n  resolvers?: ResolverMap\n  /** GraphQL module config (resolved). When enabled, mounts POST /graphql. */\n  graphql?: ResolvedGraphQLConfig\n}\n\nexport interface ManguitoCmsAPIAdapter {\n  readonly prefix: string\n  readonly app: Hono\n}\n\nconst MISSING_STORAGE_ERROR = `✗ api.storage is required but not configured.\n  Add a storage adapter to your manguito.config.ts:\n\n  api: createAPIAdapter({\n    storage: createLocalAdapter(),   // dev\n    // storage: createS3Adapter({ bucket: '...', region: '...' })  // production\n  })\n\nExiting.`\n\nexport function createCmsApp(options: CreateCmsAppOptions): ManguitoCmsAPIAdapter {\n  if (!options.storage) {\n    throw new Error(MISSING_STORAGE_ERROR)\n  }\n\n  const prefix = normalizePrefix(options.prefix)\n  const publicPaths = createPublicPaths(prefix)\n  const { storage, registry, db, rateLimit, media, cors } = options\n  const cmsName = options.name ?? 'Manguito CMS'\n  const maxFileSize = media?.max_file_size\n\n  // Build roles registry — throws immediately if roles are missing or invalid.\n  // The server must not start with a broken registry.\n  const rolesRegistry = buildRolesRegistry(registry.roles.roles)\n\n  // Validate programmatic-field bindings at startup (throws on mismatch, like\n  // the storage/roles checks above). Undefined resolvers ⇒ empty map.\n  const resolverMap = options.resolvers ?? new Map()\n  validateResolverBindings(registry, resolverMap)\n  const programmaticResolver = createProgrammaticResolver(resolverMap)\n\n  const app = new Hono()\n\n  // Security headers for all routes — registered before CORS so normal and\n  // CORS-handled responses carry the conservative defaults. Responses produced\n  // by app.onError (thrown errors) bypass this middleware's post-next step;\n  // those are JSON error envelopes with no clickjacking/XSS surface. CSP\n  // connect-src is derived from the storage adapter: presigned uploads go\n  // browser→storage directly, so that host must be allowlisted.\n  // The GraphiQL explorer (dev-only by default) boots from a CDN bundle plus\n  // inline scripts, which the strict script-src blocks — so when it is enabled\n  // the /graphql path alone gets a relaxed CSP (ADR api/0010).\n  const uploadOrigins = storage.getUploadOrigins?.() ?? []\n  const graphiqlEnabled = options.graphql?.enabled === true && options.graphql.graphiql === true\n  app.use(\n    '*',\n    createSecurityHeadersMiddleware({\n      connectSrc: uploadOrigins,\n      ...(graphiqlEnabled && { graphiqlPath: '/graphql' }),\n    }),\n  )\n\n  // CORS for all routes\n  app.use('*', createCorsMiddleware(cors ?? { origin: '*', enabled: true }))\n  app.onError(errorHandler)\n\n  // Rate limiter for public list endpoints — threaded into route registrators,\n  // applied only to paginated collection routes (not single-item lookups).\n  // `undefined` when disabled via rateLimit.findAll === '*'.\n  const listRateLimit = resolveListRateLimit(rateLimit)\n\n  // ── Middleware factories — all close over rolesRegistry built once at startup ──\n\n  const authMiddleware = createAuthMiddleware(db)\n  const requirePermission = createPermissionMiddleware(rolesRegistry)\n\n  const getUserRole = async (userId: string): Promise<string | null> => {\n    const result = await db.execute(\n      sql`SELECT r.name AS role\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${userId}\n          LIMIT 1`\n    )\n    return (result.rows[0] as { role: string } | undefined)?.role ?? null\n  }\n\n  const requireHierarchy = createHierarchyMiddleware(rolesRegistry, getUserRole)\n\n  // ── Repositories ──────────────────────────────────────────────────────────────\n\n  const contentRepos = Object.fromEntries(\n    Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name),\n    ])\n  )\n  const taxonomyRepos = Object.fromEntries(\n    Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name),\n    ])\n  )\n  const repos = { ...contentRepos, ...taxonomyRepos }\n  const mediaRepo = createMediaRepository(db)\n\n  // ── Public-only repos ───────────────────────────────────────────────────────\n  //\n  // Relation resolution (?include=, always-resolved media) is wired only for\n  // the public read API. Admin routes reuse `repos` above and must keep\n  // receiving raw foreign-key IDs back from findOne/update — the edit forms\n  // (e.g. MediaUpload.vue) expect a plain ID string, not a resolved object.\n  const publicContentRepos = Object.fromEntries(\n    Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name, {\n        relations: buildRelationsMap((ct as ParsedContentType).fields, registry),\n        publishedRelations: true,\n      }),\n    ])\n  )\n  const publicTaxonomyRepos = Object.fromEntries(\n    Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name, {\n        relations: buildRelationsMap((tt as ParsedTaxonomyType).fields, registry),\n        publishedRelations: true,\n      }),\n    ])\n  )\n  const publicRepos = { ...publicContentRepos, ...publicTaxonomyRepos }\n\n  // ── GraphQL repos ───────────────────────────────────────────────────────────\n  //\n  // GraphQL resolves relations lazily, per selected field, through its own\n  // request-scoped dataloaders — so its repos must NOT resolve relations\n  // eagerly. Reusing `publicRepos` here is actively wrong: their eager pass\n  // overwrites a media field's column (the FK column and the field share a\n  // name) with the resolved media object, and the dataloader then reads that\n  // object back where a UUID is expected. It also pays for resolving every\n  // relation on every query, including the ones the client never selected.\n  //\n  // These are still public reads: every GraphQL resolver passes\n  // `published_only: true`, and the dataloaders filter relation targets by\n  // published (ADR api/0002). Built separately from the admin `repos` so a\n  // future change there can never silently widen the public surface.\n  const graphqlRepos = Object.fromEntries([\n    ...Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name),\n    ]),\n    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name),\n    ]),\n  ])\n\n  // ── Auth routes registered directly on app BEFORE the blanket use() calls ───────\n  //\n  // registerAuthRoutes uses full paths (/admin/api/auth/login etc.). Mounting via\n  // app.route('/admin/api/auth', subRouter) would strip that prefix and make the\n  // routes unreachable, so we register directly on app.\n  //\n  // In Hono, handlers registered before a use() call are reached first. A route\n  // handler that returns a Response does not call next(), so the blanket\n  // authMiddleware registered below never runs for matched auth paths.\n  registerAuthRoutes(app, db)\n\n  // ── Blanket middleware for all /admin/api/* (registered after auth routes) ─────\n  app.use('/admin/api/*', authMiddleware)\n  app.use('/admin/api/*', mustChangePasswordCheck)\n\n  // ── OpenAPI spec endpoints ────────────────────────────────────────────────────\n\n  app.get(publicPaths.openapi(), (c) => {\n    const paths: Record<string, unknown> = {}\n\n    for (const ct of Object.values(registry.content_types) as ParsedContentType[]) {\n      const base = ct.default_base_path\n      if (ct.only_one) {\n        paths[publicPaths.collection(base)] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } }\n      } else {\n        paths[publicPaths.collection(base)] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } }\n        paths[publicPaths.item(base).replace(':slug', '{slug}')] = {\n          get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] },\n        }\n      }\n    }\n\n    for (const tt of Object.values(registry.taxonomy_types) as ParsedTaxonomyType[]) {\n      paths[publicPaths.taxonomyCollection(tt.name)] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } }\n      paths[publicPaths.taxonomyItem(tt.name).replace(':id', '{id}')] = {\n        get: { summary: `Get ${tt.label} by id`, tags: [tt.label] },\n      }\n    }\n\n    paths[publicPaths.mediaCollection()] = { get: { summary: 'List media items', tags: ['Media'] } }\n    paths[publicPaths.mediaItem().replace(':id', '{id}')] = { get: { summary: 'Get media item by id', tags: ['Media'] } }\n\n    return c.json({\n      openapi: '3.0.3',\n      info: { title: 'Manguito CMS Public API', version: '1.0.0' },\n      paths,\n    })\n  })\n  // Admin spec — auth covered by the blanket use() above\n  app.get('/admin/api/openapi.json', (c) =>\n    c.json({\n      openapi: '3.0.3',\n      info: { title: 'Manguito CMS Admin API', version: '1.0.0' },\n      paths: {},\n    })\n  )\n\n  // ── Field key maps ──────────────────────────────────────────────────────────\n  //\n  // One per content/taxonomy type, built once at startup. Throws on a label /\n  // column collision — the server must not boot with an ambiguous mapping.\n  const fieldKeyMaps: Record<string, FieldKeyMap> = Object.fromEntries([\n    ...Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createFieldKeyMap((ct as ParsedContentType).fields),\n    ]),\n    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createFieldKeyMap((tt as ParsedTaxonomyType).fields),\n    ]),\n  ])\n\n  // ── Public routes ─────────────────────────────────────────────────────────────\n\n  registerPublicContentRoutes(app, registry, publicRepos, fieldKeyMaps, publicPaths, listRateLimit, programmaticResolver)\n  registerPublicMediaRoutes(app, mediaRepo, publicPaths, listRateLimit)\n\n  // ── GraphQL (opt-in) ──────────────────────────────────────────────────────────\n  //\n  // Loaded via a DYNAMIC import so `graphql`/`graphql-yoga` never load unless a\n  // consumer opts in — the `.` entry (this file) must stay free of a static\n  // dependency on the graphql/ subpath (ADR api/0006). The import kicks off\n  // immediately (schema-building and Armor-plugin setup are synchronous once the\n  // module is loaded; only the `import()` itself is async), and any request that\n  // lands on /graphql before it resolves awaits the same in-flight promise —\n  // there's a single shared `ready` promise, never a re-import per request.\n  // Unauthenticated by design: it sits alongside /api/*, not behind the\n  // /admin/api/* auth middleware registered above, and only ever reads through\n  // `publicRepos` (published-only, same as the REST public routes).\n  //\n  // `buildGraphQLSchema` can throw synchronously (e.g. a GraphQL type-name\n  // collision between a content type and a taxonomy type) — since that throw\n  // happens inside a `.then()` callback, it rejects `ready`. A `.catch` is\n  // attached below so that rejection is HANDLED: an unhandled rejection here\n  // would otherwise crash the entire Node process at startup, taking down all\n  // REST routes with it, regardless of whether any client ever hits /graphql.\n  // Init failure is instead contained to a 500 on /graphql itself.\n  if (options.graphql?.enabled) {\n    const gqlOptions = options.graphql\n    let gqlHandler: Handler | null = null\n    let initError: unknown = null\n    const ready = import('./graphql/handler.js')\n      .then(({ createGraphQLHandler }) => {\n        gqlHandler = createGraphQLHandler(registry, graphqlRepos, fieldKeyMaps, programmaticResolver, db, gqlOptions)\n      })\n      .catch((err: unknown) => {\n        initError = err\n        const message = err instanceof Error ? err.message : String(err)\n        process.stderr.write(`✗ GraphQL schema failed to initialize; /graphql will return 500. ${message}\\n`)\n      })\n    const invokeGraphQL: Handler = async (c) => {\n      if (!gqlHandler && !initError) await ready\n      if (!gqlHandler) {\n        return c.json(\n          { ok: false, error: { code: 'GRAPHQL_INIT_FAILED', message: 'GraphQL schema failed to initialize' } },\n          500\n        )\n      }\n      return gqlHandler(c, async () => {})\n    }\n    if (listRateLimit) {\n      app.all('/graphql', listRateLimit, invokeGraphQL)\n    } else {\n      app.all('/graphql', invokeGraphQL)\n    }\n  }\n\n  // ── Admin routes — all registered AFTER the blanket use() so auth middleware\n  //    runs before every handler. registerConfigRoute is called first so its\n  //    GET /admin/api/config handler wins over the stale stub in content.ts.\n  registerConfigRoute(\n    app,\n    {\n      name: cmsName,\n      ...(maxFileSize !== undefined && { maxFileSize }),\n      // Cloud storage (s3/cloudinary) issues real presigned URLs, so the admin\n      // uploads straight to it — never routing the file through the server\n      // (which breaks on serverless). Local storage has no presigned receiver,\n      // so it uses the direct upload endpoint.\n      presignedUploads: storage.type !== 'local',\n    },\n    rolesRegistry,\n    db,\n  )\n  registerSchemaRoute(app, registry, db)\n  registerUserRoutes(app, db, requirePermission, requireHierarchy)\n\n  registerAdminContentRoutes(app, registry, repos, fieldKeyMaps, mediaRepo, requirePermission, db)\n  registerAdminMediaRoutes(app, mediaRepo, storage, requirePermission, maxFileSize)\n\n  return { prefix, app }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { CorsConfig } from '@bobbykim/manguito-cms-core'\n\nexport function createCorsMiddleware(corsConfig: CorsConfig): MiddlewareHandler {\n  const allowList = Array.isArray(corsConfig.origin)\n    ? corsConfig.origin\n    : [corsConfig.origin]\n  const wildcard = allowList.includes('*')\n  const methods = corsConfig.methods?.join(',') ?? 'GET,POST,PATCH,DELETE,OPTIONS'\n\n  return async function corsMiddleware(c, next) {\n    if (corsConfig.enabled === false) {\n      return next()\n    }\n\n    const requestOrigin = c.req.header('origin')\n\n    if (wildcard) {\n      // Wildcard cannot be combined with credentials per the CORS spec.\n      c.res.headers.set('Access-Control-Allow-Origin', '*')\n    } else if (requestOrigin && allowList.includes(requestOrigin)) {\n      c.res.headers.set('Access-Control-Allow-Origin', requestOrigin)\n      c.res.headers.set('Vary', 'Origin')\n      if (corsConfig.credentials === true) {\n        c.res.headers.set('Access-Control-Allow-Credentials', 'true')\n      }\n    }\n    // Non-matching origins: emit no Allow-Origin (browser blocks the read).\n\n    c.res.headers.set('Access-Control-Allow-Methods', methods)\n    c.res.headers.set('Access-Control-Allow-Headers', 'Content-Type, Authorization')\n\n    if (c.req.method === 'OPTIONS') {\n      return c.newResponse(null, 204)\n    }\n    return next()\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\n\nexport type SecurityHeadersOptions = {\n  /** Extra origins allowed for connect-src (e.g. the storage upload host). */\n  connectSrc?: string[]\n  /**\n   * Path of the GraphiQL explorer (e.g. `/graphql`), set ONLY when GraphiQL is\n   * enabled. That one path gets a relaxed CSP so the explorer can boot; every\n   * other route keeps the strict policy. Leave undefined to disable entirely.\n   */\n  graphiqlPath?: string\n}\n\n/** CDN origin Yoga's GraphiQL loads its UI bundle and stylesheet from. */\nconst GRAPHIQL_CDN = 'https://unpkg.com'\n\n/**\n * Conservative security headers. CSP allows same-origin scripts/styles/fonts\n * for the admin SPA (served same-origin) and blocks framing. connect-src is\n * 'self' plus any storage upload origins passed in — presigned uploads go\n * browser→storage directly (ADR api/0004), so that host must be allowlisted.\n *\n * The GraphiQL explorer is the one documented exception: its UI is a CDN bundle\n * booted by inline scripts, which the strict policy blocks. When `graphiqlPath`\n * is set (i.e. GraphiQL is enabled — off in production by default), requests to\n * exactly that path get `'unsafe-inline'` + the CDN origin for script/style.\n * The relaxation is scoped to that single path and never applies to the admin\n * SPA, the REST API, or GraphQL POST queries from other origins.\n */\nexport function createSecurityHeadersMiddleware(\n  options: SecurityHeadersOptions = {},\n): MiddlewareHandler {\n  const connectSrc = [\"'self'\", ...(options.connectSrc ?? [])].join(' ')\n\n  type CspParts = {\n    scriptSrc: string\n    styleSrc: string\n    connectSrc: string\n    /** Emitted only for GraphiQL, which runs Monaco editor workers off blob: URLs. */\n    workerSrc?: string\n  }\n\n  function buildCsp(parts: CspParts): string {\n    return [\n      \"default-src 'self'\",\n      \"img-src 'self' data: https:\",\n      \"media-src 'self' https:\",\n      `style-src ${parts.styleSrc}`,\n      `script-src ${parts.scriptSrc}`,\n      \"font-src 'self' data:\",\n      `connect-src ${parts.connectSrc}`,\n      ...(parts.workerSrc ? [`worker-src ${parts.workerSrc}`] : []),\n      \"frame-ancestors 'none'\",\n      \"base-uri 'self'\",\n      \"form-action 'self'\",\n    ].join('; ')\n  }\n\n  const csp = buildCsp({\n    scriptSrc: \"'self'\",\n    styleSrc: \"'self' 'unsafe-inline'\",\n    connectSrc,\n  })\n\n  // GraphiQL needs four exceptions, all confined to its own path: the CDN for\n  // the UI bundle + stylesheet, 'unsafe-inline' for its bootstrap scripts,\n  // connect-src for the Monaco worker bundles it fetches from that CDN, and\n  // worker-src blob: because it spawns those workers from Blob URLs.\n  const graphiqlCsp = buildCsp({\n    scriptSrc: `'self' 'unsafe-inline' ${GRAPHIQL_CDN}`,\n    styleSrc: `'self' 'unsafe-inline' ${GRAPHIQL_CDN}`,\n    connectSrc: `${connectSrc} ${GRAPHIQL_CDN}`,\n    workerSrc: \"'self' blob:\",\n  })\n  const graphiqlPath = options.graphiqlPath\n\n  return async function securityHeaders(c, next) {\n    await next()\n    c.res.headers.set('X-Content-Type-Options', 'nosniff')\n    c.res.headers.set('X-Frame-Options', 'DENY')\n    c.res.headers.set('Referrer-Policy', 'no-referrer')\n    const isGraphiql = graphiqlPath !== undefined && c.req.path === graphiqlPath\n    c.res.headers.set('Content-Security-Policy', isGraphiql ? graphiqlCsp : csp)\n  }\n}\n","import type { ErrorHandler } from 'hono'\nimport type { ErrorCode } from '@bobbykim/manguito-cms-core'\n\nconst ERROR_STATUS_MAP: Partial<Record<ErrorCode, number>> = {\n  NOT_FOUND: 404,\n  SLUG_NOT_FOUND: 404,\n  METHOD_NOT_ALLOWED: 405,\n  VALIDATION_ERROR: 422,\n  INVALID_SLUG_FORMAT: 422,\n  SLUG_CONFLICT: 409,\n  PUBLISH_VALIDATION_ERROR: 422,\n  SINGLETON_ALREADY_EXISTS: 409,\n  UNAUTHORIZED: 401,\n  TOKEN_EXPIRED: 401,\n  TOKEN_INVALID: 401,\n  INSUFFICIENT_PERMISSION: 403,\n  INSUFFICIENT_PRIVILEGE: 403,\n  INVALID_FILTER_FIELD: 400,\n  INVALID_FILTER_OPERATOR: 400,\n  INVALID_SORT_FIELD: 400,\n  INVALID_PAGINATION: 400,\n  INVALID_INCLUDE_FIELD: 400,\n  UNSUPPORTED_MIME_TYPE: 415,\n  STORAGE_ERROR: 502,\n  MEDIA_IN_USE: 409,\n  PRESIGNED_URL_EXPIRED: 410,\n  RATE_LIMITED: 429,\n  INTERNAL_ERROR: 500,\n}\n\ntype ApiError = Error & { code?: ErrorCode }\n\nexport const errorHandler: ErrorHandler = (err, c) => {\n  console.error(err.stack ?? err.message)\n\n  const apiErr = err as ApiError\n  const code: ErrorCode = apiErr.code ?? 'INTERNAL_ERROR'\n  const status = ERROR_STATUS_MAP[code] ?? 500\n\n  return c.json({ ok: false, error: { code, message: err.message } }, status as Parameters<typeof c.json>[1])\n}\n","import type { MiddlewareHandler } from 'hono'\nimport { getCookie } from 'hono/cookie'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport {\n  verifyToken,\n  signToken,\n  setAuthCookie,\n  AUTH_TOKEN_TTL,\n  PROACTIVE_REFRESH_THRESHOLD,\n} from '../auth/jwt.js'\n\ntype UserRow = {\n  token_version: number\n  must_change_password: boolean\n}\n\nexport function createAuthMiddleware(db: DrizzlePostgresInstance): MiddlewareHandler {\n  return async (c, next) => {\n    const token = getCookie(c, 'auth_token')\n    if (!token) {\n      return c.json(\n        { ok: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required' } },\n        401,\n      )\n    }\n\n    let payload\n    try {\n      payload = await verifyToken(token)\n    } catch (err) {\n      const code = (err as { code?: string }).code\n      if (code === 'TOKEN_EXPIRED') {\n        return c.json(\n          { ok: false, error: { code: 'TOKEN_EXPIRED', message: 'Token has expired' } },\n          401,\n        )\n      }\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid' } },\n        401,\n      )\n    }\n\n    const result = await db.execute(\n      sql`SELECT token_version, must_change_password FROM users WHERE id = ${payload.user_id} LIMIT 1`,\n    )\n    const row = result.rows[0] as UserRow | undefined\n\n    if (!row) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid' } },\n        401,\n      )\n    }\n\n    if (payload.token_version !== row.token_version) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token has been invalidated' } },\n        401,\n      )\n    }\n\n    c.set('user', {\n      id: payload.user_id,\n      role: payload.role,\n      must_change_password: row.must_change_password,\n    })\n\n    const now = Math.floor(Date.now() / 1000)\n    if (payload.expires_at < now + PROACTIVE_REFRESH_THRESHOLD) {\n      const newToken = await signToken(\n        {\n          user_id: payload.user_id,\n          role: payload.role,\n          token_version: payload.token_version,\n        },\n        AUTH_TOKEN_TTL,\n      )\n      setAuthCookie(c, 'auth_token', newToken, {})\n    }\n\n    await next()\n  }\n}\n","import type { Context } from 'hono'\nimport { sign, verify as jwtVerify } from 'hono/jwt'\nimport { setCookie, deleteCookie } from 'hono/cookie'\nimport type { JWTPayload, ErrorCode } from '@bobbykim/manguito-cms-core'\n\ntype CookieOptions = NonNullable<Parameters<typeof setCookie>[3]>\n\n// ─── Token lifetimes ──────────────────────────────────────────────────────────\n\nexport const AUTH_TOKEN_TTL = 2 * 60 * 60\nexport const REFRESH_TOKEN_TTL = 7 * 24 * 60 * 60\nexport const PROACTIVE_REFRESH_THRESHOLD = 30 * 60\n\n// ─── JWT helpers ──────────────────────────────────────────────────────────────\n\nexport async function signToken(\n  payload: Omit<JWTPayload, 'expires_at'>,\n  expiresInSeconds: number,\n): Promise<string> {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  const fullPayload: JWTPayload = {\n    ...payload,\n    expires_at: Math.floor(Date.now() / 1000) + expiresInSeconds,\n  }\n  return sign(fullPayload as Record<string, unknown>, secret)\n}\n\nexport async function verifyToken(token: string): Promise<JWTPayload> {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  let raw: Record<string, unknown>\n  try {\n    raw = (await jwtVerify(token, secret, 'HS256')) as Record<string, unknown>\n  } catch {\n    throw Object.assign(new Error('Token signature is invalid'), {\n      code: 'TOKEN_INVALID' as ErrorCode,\n    })\n  }\n  const payload = raw as JWTPayload\n  if (payload.expires_at < Math.floor(Date.now() / 1000)) {\n    throw Object.assign(new Error('Token has expired'), {\n      code: 'TOKEN_EXPIRED' as ErrorCode,\n    })\n  }\n  return payload\n}\n\n// ─── Cookie helpers ───────────────────────────────────────────────────────────\n\nexport function setAuthCookie(\n  c: Context,\n  name: string,\n  token: string,\n  options: CookieOptions,\n): void {\n  setCookie(c, name, token, {\n    ...options,\n    httpOnly: true,\n    secure: true,\n    sameSite: 'Strict',\n  })\n}\n\nexport function clearAuthCookie(c: Context, name: string, path?: string): void {\n  deleteCookie(c, name, path !== undefined ? { path } : undefined)\n}\n","import type { MiddlewareHandler } from 'hono'\n\nexport const mustChangePasswordCheck: MiddlewareHandler = async (c, next) => {\n  const user = c.get('user') as { must_change_password: boolean } | undefined\n\n  if (\n    user?.must_change_password === true &&\n    c.req.path !== '/admin/api/users/change-password'\n  ) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'PASSWORD_CHANGE_REQUIRED',\n          message: 'You must change your password before continuing.',\n        },\n      },\n      403,\n    )\n  }\n\n  await next()\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { Permission } from '@bobbykim/manguito-cms-core'\nimport type { RolesRegistry } from '../auth/registry.js'\n\ntype AuthUser = { role: string }\n\nexport function createPermissionMiddleware(registry: RolesRegistry) {\n  return function requirePermission(permission: Permission): MiddlewareHandler {\n    return async (c, next) => {\n      const user = c.get('user') as AuthUser | undefined\n      const role = user ? registry[user.role] : undefined\n\n      if (!role || !role.permissions.includes(permission)) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PERMISSION', message: 'Insufficient permission' },\n          },\n          403,\n        )\n      }\n\n      await next()\n    }\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { RolesRegistry } from '../auth/registry.js'\n\ntype AuthUser = { role: string }\n\nexport function createHierarchyMiddleware(\n  registry: RolesRegistry,\n  getUserRole: (id: string) => Promise<string | null>,\n) {\n  return function requireHierarchy(): MiddlewareHandler {\n    return async (c, next) => {\n      const user = c.get('user') as AuthUser | undefined\n      const actingRole = user ? registry[user.role] : undefined\n\n      if (!actingRole) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'Insufficient privilege' },\n          },\n          403,\n        )\n      }\n\n      const method = c.req.method\n      const targetId = c.req.param('id') as string | undefined\n\n      let targetRoleName: string | null = null\n\n      if (method === 'POST' && !targetId) {\n        // POST /admin/api/users — create; role must be in request body\n        let body: { role?: unknown } = {}\n        try {\n          body = await c.req.json<{ role?: unknown }>()\n        } catch {\n          // malformed body — role is absent, treated as INVALID_ROLE below\n        }\n        targetRoleName = typeof body.role === 'string' ? body.role : null\n        if (!targetRoleName) {\n          return c.json(\n            {\n              ok: false,\n              error: { code: 'INVALID_ROLE', message: 'Request body must include a valid role' },\n            },\n            400,\n          )\n        }\n      } else if (method === 'PATCH' && targetId) {\n        // PATCH /admin/api/users/:id — update; role from body if present, else from DB\n        let bodyRole: string | undefined\n        try {\n          const body = await c.req.json<{ role?: unknown }>()\n          if (typeof body.role === 'string') bodyRole = body.role\n        } catch {\n          // no JSON body — fall through to DB lookup\n        }\n        targetRoleName = bodyRole ?? (await getUserRole(targetId))\n      } else if (targetId) {\n        // DELETE /admin/api/users/:id or POST /admin/api/users/:id/reset-password\n        targetRoleName = await getUserRole(targetId)\n      }\n\n      // Target user not found — let the route handler return 404\n      if (targetRoleName === null) {\n        return next()\n      }\n\n      const targetRole = registry[targetRoleName]\n      if (!targetRole) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INVALID_ROLE', message: `Role \"${targetRoleName}\" is not valid` },\n          },\n          400,\n        )\n      }\n\n      if (actingRole.hierarchy_level >= targetRole.hierarchy_level) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'Insufficient privilege' },\n          },\n          403,\n        )\n      }\n\n      await next()\n    }\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { ResolvedRateLimitConfig } from '@bobbykim/manguito-cms-core'\n\n// Defaults for the public list-endpoint limiter. Single source of truth —\n// createCmsApp resolves its limiter through resolveListRateLimit below.\nconst DEFAULT_WINDOW_MS = 60_000\nconst DEFAULT_MAX_PER_IP = 30\nconst DEFAULT_MAX_GLOBAL = 500\n\nexport type RateLimitOptions = {\n  windowMs: number\n  maxPerIp: number\n  maxGlobal: number\n}\n\nexport function createRateLimitMiddleware(options: RateLimitOptions): MiddlewareHandler {\n  const { windowMs, maxPerIp, maxGlobal } = options\n  const ipRequests = new Map<string, number[]>()\n  const globalRequests: number[] = []\n\n  return async function rateLimitMiddleware(c, next) {\n    const authToken = c.req.raw.headers.get('cookie')\n      ?.split(';')\n      .map((s) => s.trim())\n      .find((s) => s.startsWith('auth_token='))\n\n    if (authToken) {\n      return next()\n    }\n\n    const now = Date.now()\n    const cutoff = now - windowMs\n\n    // purge stale global entries\n    let gi = 0\n    while (gi < globalRequests.length && globalRequests[gi]! < cutoff) gi++\n    globalRequests.splice(0, gi)\n\n    // get client IP\n    const forwarded = c.req.header('x-forwarded-for')\n    const ip = forwarded ? forwarded.split(',')[0]!.trim() : (c.env?.incoming?.socket?.remoteAddress ?? 'unknown')\n\n    // purge stale IP entries\n    const ipTimes = ipRequests.get(ip) ?? []\n    let ii = 0\n    while (ii < ipTimes.length && ipTimes[ii]! < cutoff) ii++\n    ipTimes.splice(0, ii)\n    ipRequests.set(ip, ipTimes)\n\n    const retryAfterFromGlobal =\n      globalRequests.length > 0\n        ? Math.ceil((globalRequests[0]! + windowMs - now) / 1000)\n        : 0\n    const retryAfterFromIp =\n      ipTimes.length > 0 ? Math.ceil((ipTimes[0]! + windowMs - now) / 1000) : 0\n\n    if (globalRequests.length >= maxGlobal) {\n      const retryAfter = Math.max(retryAfterFromGlobal, 1)\n      const reset = Math.floor((now + retryAfter * 1000) / 1000)\n      return c.json(\n        { ok: false, error: { code: 'RATE_LIMITED', message: `Too many requests. Please retry after ${retryAfter} seconds.` } },\n        429,\n        {\n          'Retry-After': String(retryAfter),\n          'X-RateLimit-Limit': String(maxGlobal),\n          'X-RateLimit-Remaining': '0',\n          'X-RateLimit-Reset': String(reset),\n        }\n      )\n    }\n\n    if (ipTimes.length >= maxPerIp) {\n      const retryAfter = Math.max(retryAfterFromIp, 1)\n      const reset = Math.floor((now + retryAfter * 1000) / 1000)\n      return c.json(\n        { ok: false, error: { code: 'RATE_LIMITED', message: `Too many requests. Please retry after ${retryAfter} seconds.` } },\n        429,\n        {\n          'Retry-After': String(retryAfter),\n          'X-RateLimit-Limit': String(maxPerIp),\n          'X-RateLimit-Remaining': '0',\n          'X-RateLimit-Reset': String(reset),\n        }\n      )\n    }\n\n    globalRequests.push(now)\n    ipTimes.push(now)\n\n    return next()\n  }\n}\n\n/**\n * Resolves the public list-endpoint config into a middleware, or `undefined`\n * when the limiter is disabled via the `findAll: '*'` wildcard. Route\n * registrators skip registration when this is `undefined`, so a disabled\n * limiter has zero request-path overhead.\n */\nexport function resolveListRateLimit(\n  rateLimit?: ResolvedRateLimitConfig,\n): MiddlewareHandler | undefined {\n  const findAll = rateLimit?.findAll\n  if (findAll === '*') {\n    return undefined\n  }\n  return createRateLimitMiddleware({\n    windowMs: findAll?.windowMs ?? DEFAULT_WINDOW_MS,\n    maxPerIp: findAll?.maxPerIp ?? DEFAULT_MAX_PER_IP,\n    maxGlobal: findAll?.maxGlobal ?? DEFAULT_MAX_GLOBAL,\n  })\n}\n","import type { ParsedRole } from '@bobbykim/manguito-cms-core'\n\nexport type RolesRegistry = Record<string, ParsedRole>\n\nconst SYSTEM_ROLES = ['admin', 'manager', 'editor', 'writer', 'viewer'] as const\n\nfunction validateRoles(roles: ParsedRole[]): void {\n  if (roles.length === 0) {\n    throw new Error(\n      'Fatal: roles registry failed to build — roles array is empty. Run `manguito validate` to check your roles schema.',\n    )\n  }\n\n  const nameSet = new Set(roles.map((r) => r.name))\n  for (const systemRole of SYSTEM_ROLES) {\n    if (!nameSet.has(systemRole)) {\n      throw new Error(\n        `Fatal: roles registry failed to build — missing system role \"${systemRole}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n  }\n\n  const levelsSeen = new Map<number, string>()\n  for (const role of roles) {\n    const existing = levelsSeen.get(role.hierarchy_level)\n    if (existing !== undefined) {\n      throw new Error(\n        `Fatal: roles registry failed to build — duplicate hierarchy_level ${role.hierarchy_level} on roles \"${existing}\" and \"${role.name}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n    levelsSeen.set(role.hierarchy_level, role.name)\n  }\n\n  const namesSeen = new Set<string>()\n  for (const role of roles) {\n    if (namesSeen.has(role.name)) {\n      throw new Error(\n        `Fatal: roles registry failed to build — duplicate role name \"${role.name}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n    namesSeen.add(role.name)\n  }\n}\n\nexport function buildRolesRegistry(roles: ParsedRole[]): RolesRegistry {\n  validateRoles(roles)\n  return Object.fromEntries(roles.map((r) => [r.name, r]))\n}\n","import type {\n  ProgrammaticFieldDefinition,\n  ResolverContext,\n  SchemaRegistry,\n  ParsedContentType,\n  ParsedTaxonomyType,\n} from '@bobbykim/manguito-cms-core'\n\nexport type ResolverMap = Map<string, ProgrammaticFieldDefinition>\n\nconst DEFAULT_TIMEOUT_MS = 5000\nconst LIST_CONCURRENCY = 10\n\nexport function resolverKey(schema: string, field: string): string {\n  return `${schema}::${field}`\n}\n\n// ─── Boot-time binding validation ─────────────────────────────────────────────\n\n// Startup guard (throws, like createCmsApp's storage/roles checks): every\n// programmatic field must have exactly one resolver, and every resolver must\n// target an existing programmatic field.\nexport function validateResolverBindings(\n  registry: SchemaRegistry,\n  resolvers: ResolverMap,\n): void {\n  const declared = new Set<string>()\n  const schemas: Array<ParsedContentType | ParsedTaxonomyType> = [\n    ...(Object.values(registry.content_types) as ParsedContentType[]),\n    ...(Object.values(registry.taxonomy_types) as ParsedTaxonomyType[]),\n  ]\n  for (const schema of schemas) {\n    for (const field of schema.fields) {\n      if (field.field_type === 'programmatic') {\n        declared.add(resolverKey(schema.name, field.name))\n      }\n    }\n  }\n\n  const missing: string[] = []\n  for (const key of declared) if (!resolvers.has(key)) missing.push(key)\n\n  const orphans: string[] = []\n  for (const key of resolvers.keys()) if (!declared.has(key)) orphans.push(key)\n\n  if (missing.length === 0 && orphans.length === 0) return\n\n  const lines: string[] = ['✗ Programmatic field resolver bindings are invalid.']\n  if (missing.length > 0) {\n    lines.push('', '  Declared as `type: \"programmatic\"` but no resolver found:')\n    for (const k of missing) lines.push(`    - ${k}  (add a programmaticField in src/programmatic)`)\n  }\n  if (orphans.length > 0) {\n    lines.push('', '  Resolver has no matching programmatic field in the schema:')\n    for (const k of orphans) lines.push(`    - ${k}`)\n  }\n  lines.push('', 'Exiting.')\n  throw new Error(lines.join('\\n'))\n}\n\n// ─── Runtime resolution ───────────────────────────────────────────────────────\n\nfunction buildContext(row: Record<string, unknown>): ResolverContext {\n  return {\n    get: (name) => row[name],\n    record: row,\n  }\n}\n\nasync function withTimeout<T>(p: Promise<T>, ms: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout>\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('resolver timeout')), ms)\n  })\n  try {\n    return await Promise.race([p, timeout])\n  } finally {\n    clearTimeout(timer!)\n  }\n}\n\n// Runs one resolver against one row; never throws. Failure/timeout → fallback.\nasync function runOne(\n  def: ProgrammaticFieldDefinition,\n  row: Record<string, unknown>,\n  onError: (message: string) => void,\n): Promise<{ value: unknown; failed: boolean }> {\n  const fallback = def.fallback ?? null\n  try {\n    const result = await withTimeout(\n      Promise.resolve(def.resolve(buildContext(row))),\n      def.timeout ?? DEFAULT_TIMEOUT_MS,\n    )\n    return { value: result === undefined ? null : result, failed: false }\n  } catch (err) {\n    onError(\n      `⚠ programmatic field ${resolverKey(def.schema, def.field)} failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { value: fallback, failed: true }\n  }\n}\n\n// Fixed-size worker pool.\nasync function runPool<T>(items: T[], limit: number, fn: (item: T) => Promise<void>): Promise<void> {\n  let i = 0\n  async function worker(): Promise<void> {\n    while (i < items.length) {\n      const idx = i++\n      await fn(items[idx]!)\n    }\n  }\n  const workers = Array.from({ length: Math.min(limit, items.length) }, worker)\n  await Promise.all(workers)\n}\n\nexport function createProgrammaticResolver(\n  resolvers: ResolverMap,\n  options?: { onError?: (message: string) => void },\n) {\n  const onError =\n    options?.onError ??\n    ((message: string) => {\n      process.stderr.write(message + '\\n')\n    })\n\n  // Group definitions by schema once.\n  const bySchema = new Map<string, ProgrammaticFieldDefinition[]>()\n  for (const def of resolvers.values()) {\n    const arr = bySchema.get(def.schema) ?? []\n    arr.push(def)\n    bySchema.set(def.schema, arr)\n  }\n\n  // Per-process cache. Key = schema::field::itemId.\n  const cache = new Map<string, { value: unknown; expires: number }>()\n\n  async function resolveField(\n    def: ProgrammaticFieldDefinition,\n    row: Record<string, unknown>,\n  ): Promise<unknown> {\n    const itemId = row['id'] !== undefined ? String(row['id']) : ''\n    if (def.cache && itemId) {\n      const key = `${resolverKey(def.schema, def.field)}::${itemId}`\n      const now = Date.now()\n      const hit = cache.get(key)\n      if (hit && hit.expires > now) return hit.value\n      const { value, failed } = await runOne(def, row, onError)\n      if (!failed) cache.set(key, { value, expires: now + def.cache.ttl * 1000 })\n      return value\n    }\n    const { value } = await runOne(def, row, onError)\n    return value\n  }\n\n  async function resolveItem(\n    schema: string,\n    row: Record<string, unknown>,\n  ): Promise<Record<string, unknown>> {\n    const defs = bySchema.get(schema)\n    if (!defs || defs.length === 0) return { ...row }\n    const out: Record<string, unknown> = { ...row }\n    await Promise.all(\n      defs.map(async (def) => {\n        out[def.field] = await resolveField(def, row)\n      }),\n    )\n    return out\n  }\n\n  async function resolveList(\n    schema: string,\n    rows: Record<string, unknown>[],\n  ): Promise<Record<string, unknown>[]> {\n    const defs = (bySchema.get(schema) ?? []).filter((d) => d.on_list === true)\n    if (defs.length === 0) return rows.map((r) => ({ ...r }))\n    const out = rows.map((r) => ({ ...r }))\n    const tasks: Array<{ rowIndex: number; def: ProgrammaticFieldDefinition }> = []\n    for (let i = 0; i < rows.length; i++) {\n      for (const def of defs) tasks.push({ rowIndex: i, def })\n    }\n    await runPool(tasks, LIST_CONCURRENCY, async ({ rowIndex, def }) => {\n      out[rowIndex]![def.field] = await resolveField(def, rows[rowIndex]!)\n    })\n    return out\n  }\n\n  function hasSchema(schema: string): boolean {\n    return bySchema.has(schema)\n  }\n\n  return { resolveItem, resolveList, hasSchema }\n}\n\nexport type ProgrammaticResolver = ReturnType<typeof createProgrammaticResolver>\n","import type { FilterValue, FilterOperator } from '@bobbykim/manguito-cms-core'\n\n// Query-param parsing shared by the public and admin content/taxonomy list routes.\n\n// Only indexed system fields are sortable.\nexport const SORTABLE_FIELDS = new Set<string>(['title', 'created_at', 'updated_at'])\n\n// Field types whose values are relations rather than plain columns.\nexport const RELATION_FIELD_TYPES = new Set([\n  'paragraph',\n  'reference',\n  'image',\n  'video',\n  'file',\n])\n\nexport function parsePagination(\n  pageStr: string | undefined,\n  perPageStr: string | undefined\n): { ok: true; page: number; per_page: number } | { ok: false } {\n  const page = pageStr !== undefined ? Number(pageStr) : 1\n  const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n  if (!Number.isInteger(page) || page < 1) return { ok: false }\n  if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false }\n  return { ok: true, page, per_page }\n}\n\nexport function parseInclude(includeParam: string | undefined): string[] {\n  if (!includeParam) return []\n  return includeParam\n    .split(',')\n    .map((s) => s.trim())\n    .filter(Boolean)\n}\n\nexport function parseFilters(\n  url: string,\n  validFields: Set<string>,\n  columnFor?: (label: string) => string | undefined\n): { ok: true; filters: Record<string, FilterValue> } | { ok: false; invalidField: string } {\n  const { searchParams } = new URL(url)\n  const filters: Record<string, FilterValue> = {}\n\n  // Filters are validated against LABELS (what the client sends) and emitted as\n  // storage keys (what the repository queries). Without a mapper the two are\n  // the same, which is the pre-versioning behavior.\n  const toKey = (label: string): string => columnFor?.(label) ?? label\n\n  for (const [key, value] of searchParams.entries()) {\n    const simpleMatch = /^filter\\[([^\\]]+)\\]$/.exec(key)\n    const opMatch = /^filter\\[([^\\]]+)\\]\\[([^\\]]+)\\]$/.exec(key)\n\n    if (simpleMatch) {\n      const field = simpleMatch[1]!\n      if (!validFields.has(field)) return { ok: false, invalidField: field }\n      const storageKey = toKey(field)\n      const existing = filters[storageKey]\n      if (existing !== undefined) {\n        filters[storageKey] = Array.isArray(existing)\n          ? [...existing, value]\n          : [existing as string | number | boolean, value]\n      } else {\n        filters[storageKey] = value\n      }\n    } else if (opMatch) {\n      const field = opMatch[1]!\n      const operator = opMatch[2]!\n      if (!validFields.has(field)) return { ok: false, invalidField: field }\n      if (!['gt', 'gte', 'lt', 'lte'].includes(operator)) continue\n      const storageKey = toKey(field)\n      const existing = (filters[storageKey] as FilterOperator | undefined) ?? {}\n      filters[storageKey] = { ...(existing as FilterOperator), [operator]: value }\n    }\n  }\n\n  return { ok: true, filters }\n}\n","import type { Hono, Handler, MiddlewareHandler } from 'hono'\nimport type {\n  SchemaRegistry,\n  ContentRepository,\n} from '@bobbykim/manguito-cms-core'\nimport type { ProgrammaticResolver } from '../programmatic/resolve.js'\nimport type { FieldKeyMap } from '../field-keys.js'\nimport type { PublicPaths } from '../paths.js'\nimport {\n  SORTABLE_FIELDS,\n  RELATION_FIELD_TYPES,\n  parsePagination,\n  parseInclude,\n  parseFilters,\n} from './query-params.js'\n\nexport type ContentRepos = Record<string, ContentRepository<unknown>>\n\n// ─── Response projection order ────────────────────────────────────────────────\n//\n// Every read response maps storage keys → labels exactly ONCE, and that mapping\n// runs BEFORE the programmatic resolver. Two reasons it sits there rather than\n// after:\n//   - a programmatic resolver reads its record through `ctx.get(fieldName)`,\n//     documented (docs/programmatic-fields.md) as the schema field name — the\n//     LABEL — so the row handed to it must already speak labels;\n//   - programmatic fields are not column-backed, so their output keys are labels\n//     already; mapping afterwards would be a no-op on them.\n// Relations are resolved inside the repository, upstream of both, so the mapping\n// still lands strictly after relation resolution.\n\nfunction isPublished(item: unknown): boolean {\n  return (item as Record<string, unknown>)['published'] === true\n}\n\nexport function registerPublicContentRoutes(\n  app: Hono,\n  registry: SchemaRegistry,\n  repos: ContentRepos,\n  fieldKeyMaps: Record<string, FieldKeyMap>,\n  paths: PublicPaths,\n  listRateLimit?: MiddlewareHandler,\n  resolver?: ProgrammaticResolver\n): void {\n  // ── Meta-endpoints: list available schema types ───────────────────────────\n  // Registered before the dynamic per-type routes to avoid path conflicts.\n\n  function registerListRoute(path: string, handler: Handler): void {\n    if (listRateLimit) {\n      app.get(path, listRateLimit, handler)\n    } else {\n      app.get(path, handler)\n    }\n  }\n\n  registerListRoute(paths.collection('content'), (c) => {\n    const data = Object.values(registry.content_types).map((ct) => ({\n      name: ct.name,\n      label: ct.label,\n      only_one: ct.only_one,\n    }))\n    return c.json({ ok: true, data })\n  })\n\n  registerListRoute(paths.collection('taxonomy'), (c) => {\n    const data = Object.values(registry.taxonomy_types).map((tt) => ({\n      name: tt.name,\n      label: tt.label,\n    }))\n    return c.json({ ok: true, data })\n  })\n\n  // ── Per-type content routes ───────────────────────────────────────────────\n\n  for (const [typeName, contentType] of Object.entries(registry.content_types)) {\n    const basePath = contentType.default_base_path\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const relationFieldNames = new Set<string>(\n      contentType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    // Programmatic fields have no db column — filtering one would be a SQL\n    // error, so they're excluded from the filterable set.\n    const filterableFieldNames = new Set<string>([\n      ...contentType.fields.filter((f) => f.field_type !== 'programmatic').map((f) => f.name),\n      ...contentType.system_fields.map((f) => f.name),\n    ])\n\n    if (contentType.only_one) {\n      app.get(paths.collection(basePath), async (c) => {\n        const result = await repo.findMany({ published_only: true, page: 1, per_page: 1 })\n        if (result.data.length === 0) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n        // Outbound boundary (see \"Response projection order\" above).\n        let data = fieldKeyMaps[typeName]!.toLabels(result.data[0] as Record<string, unknown>)\n        if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n        return c.json({ ok: true, data })\n      })\n    } else {\n      registerListRoute(paths.collection(basePath), async (c) => {\n        // Inbound boundary: query params speak labels; filters query storage keys.\n        const fieldKeys = fieldKeyMaps[typeName]!\n        const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n        if (!pagination.ok) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_PAGINATION',\n                message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n              },\n            },\n            400\n          )\n        }\n\n        const sortBy = c.req.query('sort_by') ?? 'created_at'\n        if (!SORTABLE_FIELDS.has(sortBy)) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_SORT_FIELD',\n                message: `'${sortBy}' is not sortable. Allowed: title, created_at, updated_at`,\n              },\n            },\n            400\n          )\n        }\n\n        const sortOrder = c.req.query('sort_order') ?? 'asc'\n        if (sortOrder !== 'asc' && sortOrder !== 'desc') {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_SORT_FIELD',\n                message: `sort_order must be 'asc' or 'desc'`,\n              },\n            },\n            400\n          )\n        }\n\n        const filtersResult = parseFilters(c.req.url, filterableFieldNames, fieldKeys.columnFor)\n        if (!filtersResult.ok) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_FILTER_FIELD',\n                message: `Filter field '${filtersResult.invalidField}' does not exist on this content type`,\n              },\n            },\n            400\n          )\n        }\n\n        const include = parseInclude(c.req.query('include'))\n        for (const field of include) {\n          if (!relationFieldNames.has(field)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_INCLUDE_FIELD',\n                  message: `'${field}' is not a valid relation field`,\n                },\n              },\n              400\n            )\n          }\n        }\n\n        const result = await repo.findMany({\n          published_only: true,\n          page: pagination.page,\n          per_page: pagination.per_page,\n          sort_by: sortBy as 'title' | 'created_at' | 'updated_at',\n          sort_order: sortOrder as 'asc' | 'desc',\n          filters: filtersResult.filters,\n          include,\n        })\n\n        // Outbound boundary (see \"Response projection order\" above).\n        const labeled = (result.data as Record<string, unknown>[]).map((row) =>\n          fieldKeys.toLabels(row)\n        )\n        const data = resolver?.hasSchema(typeName)\n          ? await resolver.resolveList(typeName, labeled)\n          : labeled\n        return c.json({ ...result, data })\n      })\n\n      app.get(paths.item(basePath), async (c) => {\n        // paths.item() always appends a literal ':slug' segment, but its return\n        // type is the widened `string` from PublicPaths — not a template literal\n        // type — so Hono can no longer statically prove the param is present.\n        const slug = c.req.param('slug')!\n\n        const include = parseInclude(c.req.query('include'))\n        for (const field of include) {\n          if (!relationFieldNames.has(field)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_INCLUDE_FIELD',\n                  message: `'${field}' is not a valid relation field`,\n                },\n              },\n              400\n            )\n          }\n        }\n\n        const item = await repo.findBySlug(slug, include)\n\n        if (!item || !isPublished(item)) {\n          return c.json(\n            {\n              ok: false,\n              error: { code: 'SLUG_NOT_FOUND', message: `No item found with slug '${slug}'` },\n            },\n            404\n          )\n        }\n\n        // Outbound boundary (see \"Response projection order\" above).\n        let data = fieldKeyMaps[typeName]!.toLabels(item as Record<string, unknown>)\n        if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n        return c.json({ ok: true, data })\n      })\n    }\n  }\n\n  for (const [typeName] of Object.entries(registry.taxonomy_types)) {\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    registerListRoute(paths.taxonomyCollection(typeName), async (c) => {\n      const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n      if (!pagination.ok) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INVALID_PAGINATION',\n              message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n            },\n          },\n          400\n        )\n      }\n\n      const result = await repo.findMany({\n        published_only: true,\n        page: pagination.page,\n        per_page: pagination.per_page,\n      })\n\n      // Outbound boundary (see \"Response projection order\" above).\n      const fieldKeys = fieldKeyMaps[typeName]!\n      const labeled = (result.data as Record<string, unknown>[]).map((row) =>\n        fieldKeys.toLabels(row)\n      )\n      const data = resolver?.hasSchema(typeName)\n        ? await resolver.resolveList(typeName, labeled)\n        : labeled\n      return c.json({ ...result, data })\n    })\n\n    app.get(paths.taxonomyItem(typeName), async (c) => {\n      // See the ':slug' comment above — same widened-string-return caveat applies.\n      const id = c.req.param('id')!\n      const item = await repo.findOne(id)\n\n      if (!item || !isPublished(item)) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' },\n          },\n          404\n        )\n      }\n\n      // Outbound boundary (see \"Response projection order\" above).\n      let data = fieldKeyMaps[typeName]!.toLabels(item as Record<string, unknown>)\n      if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n      return c.json({ ok: true, data })\n    })\n  }\n}\n","import type { Hono, Handler, MiddlewareHandler } from 'hono'\nimport type { MediaRepository } from '@bobbykim/manguito-cms-core'\nimport type { PublicPaths } from '../paths.js'\n\nconst VALID_MEDIA_TYPES = new Set(['image', 'video', 'file'])\n\nfunction parsePagination(\n  pageStr: string | undefined,\n  perPageStr: string | undefined\n): { ok: true; page: number; per_page: number } | { ok: false } {\n  const page = pageStr !== undefined ? Number(pageStr) : 1\n  const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n  if (!Number.isInteger(page) || page < 1) return { ok: false }\n  if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false }\n  return { ok: true, page, per_page }\n}\n\nexport function registerPublicMediaRoutes(\n  app: Hono,\n  mediaRepo: MediaRepository,\n  paths: PublicPaths,\n  listRateLimit?: MiddlewareHandler\n): void {\n  const mediaListHandler: Handler = async (c) => {\n    const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n    if (!pagination.ok) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'INVALID_PAGINATION',\n            message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n          },\n        },\n        400\n      )\n    }\n\n    const typeParam = c.req.query('type')\n    if (typeParam !== undefined && !VALID_MEDIA_TYPES.has(typeParam)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: `type must be one of: image, video, file`,\n          },\n        },\n        422\n      )\n    }\n\n    const opts: Parameters<typeof mediaRepo.findMany>[0] = {\n      page: pagination.page,\n      per_page: pagination.per_page,\n    }\n    if (typeParam !== undefined) {\n      opts.type = typeParam as 'image' | 'video' | 'file'\n    }\n\n    const result = await mediaRepo.findMany(opts)\n    return c.json(result)\n  }\n\n  if (listRateLimit) {\n    app.get(paths.mediaCollection(), listRateLimit, mediaListHandler)\n  } else {\n    app.get(paths.mediaCollection(), mediaListHandler)\n  }\n\n  app.get(paths.mediaItem(), async (c) => {\n    // paths.mediaItem() always appends a literal ':id' segment, but its return\n    // type is the widened `string` from PublicPaths, so Hono can't statically\n    // prove the param is present.\n    const id = c.req.param('id')!\n    const item = await mediaRepo.findOne(id)\n\n    if (!item) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n        404\n      )\n    }\n\n    return c.json({ ok: true, data: item })\n  })\n}\n","import { sql } from 'drizzle-orm'\nimport type { Context, Hono } from 'hono'\nimport type {\n  SchemaRegistry,\n  MediaRepository,\n  FilterValue,\n  ParsedField,\n  ParsedParagraphType,\n} from '@bobbykim/manguito-cms-core'\nimport {\n  SORTABLE_FIELDS,\n  RELATION_FIELD_TYPES,\n  parsePagination,\n  parseInclude,\n  parseFilters,\n} from '../query-params.js'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport {\n  topLevelMediaDelta,\n  mergeMediaDeltas,\n  applyMediaReferenceDelta,\n  type MediaDelta,\n} from '../../media-references.js'\nimport {\n  persistParagraphField,\n  deleteParagraphField,\n  persistJunctionField,\n} from '../../relations.js'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\nimport type { ContentRepos } from '../content.js'\nimport { isColumnBacked, type FieldKeyMap } from '../../field-keys.js'\n\n// ─── SQL helpers ─────────────────────────────────────────────────────────────\n\nfunction quoteIdent(name: string): string {\n  if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`)\n  return `\"${name}\"`\n}\n\n// Loads the paragraph rows for one field of one parent, descending into the one\n// level of nested paragraph fields ADR core/0005 permits. Scoped by parent_id AND\n// parent_field so two paragraph fields sharing a paragraph type never mix — the\n// reason this read is not delegated to resolveRelationField.\nasync function loadParagraphRows(\n  db: DrizzlePostgresInstance,\n  registry: SchemaRegistry,\n  pType: ParsedParagraphType,\n  parentId: string,\n  fieldName: string\n): Promise<Record<string, unknown>[]> {\n  const result = await db.execute(\n    sql`SELECT * FROM ${sql.raw(quoteIdent(pType.db.table_name))} WHERE parent_id = ${parentId} AND parent_field = ${fieldName} ORDER BY \"order\" ASC`\n  )\n  const rows = result.rows as Record<string, unknown>[]\n\n  for (const nf of pType.fields) {\n    if (nf.db_column !== null) continue\n    const comp = nf.ui_component as { component: string; ref?: string }\n    if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n    const nType = registry.paragraph_types[comp.ref]\n    if (!nType) continue\n    for (const row of rows) {\n      row[nf.name] = await loadParagraphRows(db, registry, nType, row['id'] as string, nf.name)\n    }\n  }\n\n  return rows\n}\n\nasync function lookupBasePathId(db: DrizzlePostgresInstance, pathOrName: string): Promise<string | null> {\n  const r = await db.execute(\n    sql`SELECT id FROM base_paths WHERE path = ${pathOrName} OR name = ${pathOrName} LIMIT 1`\n  )\n  return (r.rows[0] as { id: string } | undefined)?.id ?? null\n}\n\n// ─── Shared query-param helpers ───────────────────────────────────────────────\n\nconst SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/\n\n// ─── Validation helpers ───────────────────────────────────────────────────────\n\nfunction isEmpty(value: unknown): boolean {\n  if (value === null || value === undefined) return true\n  if (typeof value === 'string' && value.trim() === '') return true\n  if (Array.isArray(value) && value.length === 0) return true\n  return false\n}\n\nfunction checkRequiredFields(\n  fields: ParsedField[],\n  data: Record<string, unknown>\n): { field: string; message: string }[] {\n  return fields\n    .filter((f) => f.required && isEmpty(data[f.name]))\n    .map((f) => ({ field: f.name, message: `${f.label} is required` }))\n}\n\n// Extract IDs from already-resolved media field values ({ id: string } objects).\n// Admin repos are created without relation resolution (see app.ts) so edit forms get\n// plain foreign-key id strings back — media fields here are raw ids, not resolved\n// { id, url, ... } objects.\n// ─── List query helpers (shared between content and taxonomy list routes) ─────\n\ntype ListQueryResult =\n  | {\n      ok: true\n      pagination: { page: number; per_page: number }\n      sortBy: string\n      sortOrder: string\n      filters: Record<string, FilterValue>\n      include: string[]\n      search: string\n    }\n  | { ok: false; response: { code: string; message: string }; status: 400 }\n\n// `columnFor` maps a validated label to its storage column. Filters are\n// validated against labels (what the client sends) and emitted as columns (what\n// the repository queries) — without it a renamed field would be filtered on a\n// column that does not exist.\nfunction parseListQuery(\n  url: string,\n  schemaFieldNames: Set<string>,\n  relationFieldNames: Set<string>,\n  columnFor: (label: string) => string | undefined\n): ListQueryResult {\n  const searchParams = new URL(url).searchParams\n\n  const pagination = parsePagination(\n    searchParams.get('page') ?? undefined,\n    searchParams.get('per_page') ?? undefined\n  )\n  if (!pagination.ok) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_PAGINATION',\n        message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n      },\n      status: 400,\n    }\n  }\n\n  const sortBy = searchParams.get('sort_by') ?? 'created_at'\n  if (!SORTABLE_FIELDS.has(sortBy)) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_SORT_FIELD',\n        message: `'${sortBy}' is not sortable. Allowed: title, created_at, updated_at`,\n      },\n      status: 400,\n    }\n  }\n\n  const sortOrder = searchParams.get('sort_order') ?? 'asc'\n  if (sortOrder !== 'asc' && sortOrder !== 'desc') {\n    return {\n      ok: false,\n      response: { code: 'INVALID_SORT_FIELD', message: `sort_order must be 'asc' or 'desc'` },\n      status: 400,\n    }\n  }\n\n  const filtersResult = parseFilters(url, schemaFieldNames, columnFor)\n  if (!filtersResult.ok) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_FILTER_FIELD',\n        message: `Filter field '${filtersResult.invalidField}' does not exist on this schema`,\n      },\n      status: 400,\n    }\n  }\n\n  const include = parseInclude(searchParams.get('include') ?? undefined)\n  for (const field of include) {\n    if (!relationFieldNames.has(field)) {\n      return {\n        ok: false,\n        response: { code: 'INVALID_INCLUDE_FIELD', message: `'${field}' is not a valid relation field` },\n        status: 400,\n      }\n    }\n  }\n\n  const search = (searchParams.get('search') ?? '').trim()\n\n  return {\n    ok: true,\n    pagination,\n    sortBy,\n    sortOrder,\n    filters: filtersResult.filters,\n    include,\n    search,\n  }\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAdminContentRoutes(\n  app: Hono,\n  registry: SchemaRegistry,\n  repos: ContentRepos,\n  fieldKeyMaps: Record<string, FieldKeyMap>,\n  mediaRepo: MediaRepository,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  db?: DrizzlePostgresInstance,\n): void {\n  // ── Content type routes ───────────────────────────────────────────────────\n\n  for (const [typeName, contentType] of Object.entries(registry.content_types)) {\n    const basePath = `content/${typeName}`\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const schemaFieldNames = new Set<string>([\n      ...contentType.fields.map((f) => f.name),\n      ...contentType.system_fields.map((f) => f.name),\n    ])\n\n    const relationFieldNames = new Set<string>(\n      contentType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    const fieldKeys = fieldKeyMaps[typeName]!\n\n    const requiredFields = contentType.fields.filter((f) => f.required)\n\n    const mediaFields = contentType.fields.filter(\n      (f) => f.field_type === 'image' || f.field_type === 'video' || f.field_type === 'file'\n    )\n\n    const paragraphFieldDefs = contentType.fields.filter((f) => f.db_column === null)\n\n    // Free-text search target — text/plain fields (mirrors the \"first text field is\n    // the title\" convention the admin frontend already uses) plus slug, when present.\n    // Singleton (only_one) content types have no slug column at all.\n    const searchableColumns = [\n      ...contentType.fields\n        .filter((f) => f.field_type === 'text/plain' && f.db_column !== null)\n        .map((f) => f.db_column!.column_name),\n      ...(contentType.system_fields.some((f) => f.name === 'slug') ? ['slug'] : []),\n    ]\n\n    // GET /admin/api/{base_path}\n    app.get(\n      `/admin/api/${basePath}`,\n      requirePermission('content:read'),\n      async (c) => {\n        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor)\n        if (!parsed.ok) {\n          return c.json({ ok: false, error: parsed.response }, parsed.status)\n        }\n\n        const publishedParam = c.req.query('published')\n        const extraFilters: Record<string, FilterValue> = {}\n        if (publishedParam === 'false') extraFilters['published'] = false\n\n        const findOpts: Parameters<typeof repo.findMany>[0] = {\n          page: parsed.pagination.page,\n          per_page: parsed.pagination.per_page,\n          sort_by: parsed.sortBy as 'title' | 'created_at' | 'updated_at',\n          sort_order: parsed.sortOrder as 'asc' | 'desc',\n          filters: { ...parsed.filters, ...extraFilters },\n          include: parsed.include,\n        }\n        if (publishedParam === 'true') findOpts.published_only = true\n        if (parsed.search !== '' && searchableColumns.length > 0) {\n          findOpts.search = { term: parsed.search, columns: searchableColumns }\n        }\n\n        const result = await repo.findMany(findOpts)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = result.data.map((row) => fieldKeys.toLabels(row as Record<string, unknown>))\n\n        return c.json({ ...result, data })\n      }\n    )\n\n    // GET /admin/api/{base_path}/:id\n    app.get(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:read'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // Resolve paragraph and junction fields so the edit form loads real data.\n        // This deliberately does NOT reuse the relation module's resolvers: the\n        // edit read scopes paragraph rows by parent_id AND parent_field, whereas\n        // resolveRelationField scopes by parent_id only. Two paragraph fields of\n        // the same paragraph type would be mixed by the resolver — so the more\n        // precise per-field read stays here on purpose.\n        if (db) {\n          const row = item as Record<string, unknown>\n          for (const f of contentType.fields) {\n            if (f.db_column === null) {\n              const comp = f.ui_component as { component: string; ref?: string }\n              if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n              const pType = registry.paragraph_types[comp.ref]\n              if (!pType) continue\n              row[f.name] = await loadParagraphRows(db, registry, pType, id, f.name)\n            } else if (f.db_column.junction) {\n              const j = f.db_column.junction\n              const r = await db.execute(\n                sql`SELECT ${sql.raw(quoteIdent(j.right_column))} FROM ${sql.raw(quoteIdent(j.table_name))} WHERE ${sql.raw(quoteIdent(j.left_column))} = ${id}`\n              )\n              row[f.name] = r.rows.map(\n                (row) => (row as Record<string, unknown>)[j.right_column] as string\n              )\n            }\n          }\n        }\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        // Mapped after the paragraph/junction population above so those\n        // label-keyed additions survive.\n        const data = fieldKeys.toLabels(item as Record<string, unknown>)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // POST /admin/api/{base_path}\n    app.post(\n      `/admin/api/${basePath}`,\n      requirePermission('content:create'),\n      async (c) => {\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        if (contentType.only_one) {\n          const existing = await repo.findMany({ page: 1, per_page: 1 })\n          if (existing.meta.total > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SINGLETON_ALREADY_EXISTS',\n                  message: `Only one instance of '${contentType.label}' is allowed`,\n                },\n              },\n              409\n            )\n          }\n        } else {\n          const slug = body['slug']\n          if (typeof slug !== 'string' || slug.trim() === '') {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'VALIDATION_ERROR',\n                  message: 'Required fields are missing',\n                  details: [{ field: 'slug', message: 'Slug is required' }],\n                },\n              },\n              422\n            )\n          }\n\n          if (!SLUG_PATTERN.test(slug)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_SLUG_FORMAT',\n                  message:\n                    'Slug must be lowercase alphanumeric with hyphens only — no leading or trailing hyphens',\n                },\n              },\n              422\n            )\n          }\n\n          const conflict = await repo.findBySlug(slug)\n          if (conflict) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SLUG_CONFLICT',\n                  message: `Slug '${slug}' already exists for this content type`,\n                },\n              },\n              409\n            )\n          }\n        }\n\n        return writeNewItem(c, body)\n      }\n    )\n\n    // Shared write paths. POST, PATCH and the singleton PUT all funnel through\n    // these two functions so the verbs cannot drift apart — the verb-specific\n    // pre-checks (slug rules, singleton existence, 404s) stay in the routes.\n\n    const writeNewItem = async (c: Context, body: Record<string, unknown>) => {\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const fieldErrors = checkRequiredFields(requiredFields, body)\n        if (fieldErrors.length > 0) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'VALIDATION_ERROR',\n                message: 'Required fields are missing',\n                details: fieldErrors,\n              },\n            },\n            422\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n        }\n\n        // Classify fields\n        const paragraphFields = contentType.fields.filter((f) => f.db_column === null)\n        const junctionFields = contentType.fields.filter(\n          (f) => f.db_column !== null && f.db_column.junction !== undefined\n        )\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const columnBackedFields = contentType.fields.filter(isColumnBacked)\n        const columnData: Record<string, unknown> = {\n          published: body['published'] ?? false,\n        }\n        if (contentType.only_one) {\n          columnData['slug'] = typeName\n        } else {\n          columnData['slug'] = body['slug']\n        }\n        for (const f of columnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          columnData[key] = storageBody[key]\n        }\n\n        // Resolve base_path_id (seeded from routes.json at startup)\n        if (db) {\n          const basePathId = await lookupBasePathId(db, contentType.default_base_path)\n          if (!basePathId) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'BASE_PATH_NOT_FOUND',\n                  message: `Base path '${contentType.default_base_path}' not found — run manguito migrate`,\n                },\n              },\n              500\n            )\n          }\n          columnData['base_path_id'] = basePathId\n        }\n\n        const item = await repo.create(columnData as Parameters<typeof repo.create>[0])\n        const itemId = (item as Record<string, unknown>)['id'] as string\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [topLevelMediaDelta(mediaFields, null, storageBody)]\n\n        // Save paragraph and junction rows\n        if (db) {\n          for (const f of paragraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, itemId, contentType.db.table_name, f.name, pType, items, registry))\n          }\n          for (const f of junctionFields) {\n            const junction = f.db_column!.junction!\n            const relatedIds = Array.isArray(body[f.name])\n              ? (body[f.name] as unknown[]).filter((v): v is string => typeof v === 'string')\n              : []\n            await persistJunctionField(db, itemId, junction, relatedIds)\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = fieldKeys.toLabels(item as Record<string, unknown>)\n\n        return c.json({ ok: true, data }, 201)\n    }\n\n    // PATCH /admin/api/{base_path}/:id\n    app.patch(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:edit'),\n      async (c) => {\n        const id = c.req.param('id')\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        const existing = await repo.findOne(id)\n        if (!existing) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        if (!contentType.only_one && 'slug' in body) {\n          const slug = body['slug']\n          if (typeof slug !== 'string' || slug.trim() === '') {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'VALIDATION_ERROR',\n                  message: 'Required fields are missing',\n                  details: [{ field: 'slug', message: 'Slug cannot be empty' }],\n                },\n              },\n              422\n            )\n          }\n\n          if (!SLUG_PATTERN.test(slug)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_SLUG_FORMAT',\n                  message:\n                    'Slug must be lowercase alphanumeric with hyphens only — no leading or trailing hyphens',\n                },\n              },\n              422\n            )\n          }\n\n          const conflict = await repo.findBySlug(slug)\n          if (conflict && (conflict as Record<string, unknown>)['id'] !== id) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SLUG_CONFLICT',\n                  message: `Slug '${slug}' already exists for this content type`,\n                },\n              },\n              409\n            )\n          }\n        }\n\n        return writeExistingItem(c, id, existing as Record<string, unknown>, body)\n      }\n    )\n\n    const writeExistingItem = async (\n      c: Context,\n      id: string,\n      existing: Record<string, unknown>,\n      body: Record<string, unknown>,\n    ) => {\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n\n          // `existing` is a raw SELECT * row (storage-keyed) but\n          // checkRequiredFields reads labels, as does `body` — project the row\n          // to labels first so a renamed field's stored value is actually seen.\n          const merged = { ...fieldKeys.toLabels(existing as Record<string, unknown>), ...body }\n          const fieldErrors = checkRequiredFields(requiredFields, merged)\n          if (fieldErrors.length > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'PUBLISH_VALIDATION_ERROR',\n                  message: 'Cannot publish — required fields are missing',\n                  details: fieldErrors,\n                },\n              },\n              422\n            )\n          }\n        }\n\n        // Classify fields\n        const patchParagraphFields = contentType.fields.filter((f) => f.db_column === null)\n        const patchJunctionFields = contentType.fields.filter(\n          (f) => f.db_column !== null && f.db_column.junction !== undefined\n        )\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const patchColumnBackedFields = contentType.fields.filter(isColumnBacked)\n        const patchData: Record<string, unknown> = {}\n        if (!contentType.only_one && 'slug' in body) patchData['slug'] = body['slug']\n        if ('published' in body) patchData['published'] = body['published']\n        for (const f of patchColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          patchData[key] = storageBody[key]\n        }\n\n        const updated = await repo.update(id, patchData as Parameters<typeof repo.update>[1])\n        if (!updated) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, existing as Record<string, unknown>, storageBody),\n        ]\n\n        // Delete+reinsert paragraph and junction rows\n        if (db) {\n          for (const f of patchParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, id, contentType.db.table_name, f.name, pType, items, registry))\n          }\n          for (const f of patchJunctionFields) {\n            const junction = f.db_column!.junction!\n            const relatedIds = Array.isArray(body[f.name])\n              ? (body[f.name] as unknown[]).filter((v): v is string => typeof v === 'string')\n              : []\n            await persistJunctionField(db, id, junction, relatedIds)\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = fieldKeys.toLabels(updated as Record<string, unknown>)\n\n        return c.json({ ok: true, data })\n    }\n\n    // PUT /admin/api/{base_path} — singleton upsert.\n    //\n    // A singleton has no id in its admin route, so it cannot be addressed by the\n    // `/:id` PATCH. The parser declares `http_methods: ['GET','PUT','PATCH']` for\n    // `only_one` types and the admin form posts here, so this is the verb that\n    // completes that contract: create the row on first save, update it after.\n    // Registered only for singletons — collections keep POST/PATCH.\n    if (contentType.only_one) {\n      app.put(\n        `/admin/api/${basePath}`,\n        requirePermission('content:edit'),\n        async (c) => {\n          const body = (await c.req.json()) as Record<string, unknown>\n\n          const existingResult = await repo.findMany({ page: 1, per_page: 1 })\n          const existing = existingResult.data[0] as Record<string, unknown> | undefined\n\n          if (!existing) {\n            // First save materialises the row, which is a create — gate it on\n            // content:create in addition to the route's content:edit.\n            const createDeny = await requirePermission('content:create')(c, async () => {})\n            if (createDeny) return createDeny\n            return writeNewItem(c, body)\n          }\n\n          return writeExistingItem(c, existing['id'] as string, existing, body)\n        }\n      )\n    }\n\n    // DELETE /admin/api/{base_path}/:id\n    app.delete(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:delete'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // A delete removes every media reference the item held (top-level + paragraphs).\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, item as Record<string, unknown>, null),\n        ]\n\n        // Paragraph rows have no FK/cascade back to their parent — clean them up\n        // explicitly so they don't leak, and collect their media for decrementing.\n        if (db) {\n          for (const f of paragraphFieldDefs) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        await repo.delete(id)\n        return c.json({ ok: true })\n      }\n    )\n  }\n\n  // ── Taxonomy type routes ──────────────────────────────────────────────────\n\n  for (const [typeName, taxonomyType] of Object.entries(registry.taxonomy_types)) {\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const schemaFieldNames = new Set<string>([\n      ...taxonomyType.fields.map((f) => f.name),\n      ...taxonomyType.system_fields.map((f) => f.name),\n    ])\n\n    const relationFieldNames = new Set<string>(\n      taxonomyType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    const fieldKeys = fieldKeyMaps[typeName]!\n\n    const requiredFields = taxonomyType.fields.filter((f) => f.required)\n\n    const mediaFields = taxonomyType.fields.filter(\n      (f) => f.field_type === 'image' || f.field_type === 'video' || f.field_type === 'file'\n    )\n\n    const paragraphFieldDefs = taxonomyType.fields.filter((f) => f.db_column === null)\n\n    const searchableColumns = [\n      ...taxonomyType.fields\n        .filter((f) => f.field_type === 'text/plain' && f.db_column !== null)\n        .map((f) => f.db_column!.column_name),\n      ...(taxonomyType.system_fields.some((f) => f.name === 'slug') ? ['slug'] : []),\n    ]\n\n    // GET /admin/api/taxonomy/{type}\n    app.get(\n      `/admin/api/taxonomy/${typeName}`,\n      requirePermission('content:read'),\n      async (c) => {\n        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor)\n        if (!parsed.ok) {\n          return c.json({ ok: false, error: parsed.response }, parsed.status)\n        }\n\n        const publishedParam = c.req.query('published')\n        const extraFilters: Record<string, FilterValue> = {}\n        if (publishedParam === 'false') extraFilters['published'] = false\n\n        const findOpts: Parameters<typeof repo.findMany>[0] = {\n          page: parsed.pagination.page,\n          per_page: parsed.pagination.per_page,\n          sort_by: parsed.sortBy as 'title' | 'created_at' | 'updated_at',\n          sort_order: parsed.sortOrder as 'asc' | 'desc',\n          filters: { ...parsed.filters, ...extraFilters },\n          include: parsed.include,\n        }\n        if (publishedParam === 'true') findOpts.published_only = true\n        if (parsed.search !== '' && searchableColumns.length > 0) {\n          findOpts.search = { term: parsed.search, columns: searchableColumns }\n        }\n\n        const result = await repo.findMany(findOpts)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = result.data.map((row) => fieldKeys.toLabels(row as Record<string, unknown>))\n\n        return c.json({ ...result, data })\n      }\n    )\n\n    // GET /admin/api/taxonomy/{type}/:id\n    app.get(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:read'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = fieldKeys.toLabels(item as Record<string, unknown>)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // POST /admin/api/taxonomy/{type}\n    app.post(\n      `/admin/api/taxonomy/${typeName}`,\n      requirePermission('content:create'),\n      async (c) => {\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const fieldErrors = checkRequiredFields(requiredFields, body)\n        if (fieldErrors.length > 0) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'VALIDATION_ERROR',\n                message: 'Required fields are missing',\n                details: fieldErrors,\n              },\n            },\n            422\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n        }\n\n        // Filter to column-only fields\n        const taxParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null)\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const taxColumnBackedFields = taxonomyType.fields.filter(isColumnBacked)\n        const taxColumnData: Record<string, unknown> = {\n          published: body['published'] ?? false,\n        }\n        for (const f of taxColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          taxColumnData[key] = storageBody[key]\n        }\n\n        const item = await repo.create(taxColumnData as Parameters<typeof repo.create>[0])\n        const taxItemId = (item as Record<string, unknown>)['id'] as string\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [topLevelMediaDelta(mediaFields, null, storageBody)]\n\n        if (db) {\n          for (const f of taxParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, taxItemId, taxonomyType.db.table_name, f.name, pType, items, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = fieldKeys.toLabels(item as Record<string, unknown>)\n\n        return c.json({ ok: true, data }, 201)\n      }\n    )\n\n    // PATCH /admin/api/taxonomy/{type}/:id\n    app.patch(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:edit'),\n      async (c) => {\n        const id = c.req.param('id')\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const existing = await repo.findOne(id)\n        if (!existing) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n\n          // `existing` is a raw SELECT * row (storage-keyed) but\n          // checkRequiredFields reads labels, as does `body` — project the row\n          // to labels first so a renamed field's stored value is actually seen.\n          const merged = { ...fieldKeys.toLabels(existing as Record<string, unknown>), ...body }\n          const fieldErrors = checkRequiredFields(requiredFields, merged)\n          if (fieldErrors.length > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'PUBLISH_VALIDATION_ERROR',\n                  message: 'Cannot publish — required fields are missing',\n                  details: fieldErrors,\n                },\n              },\n              422\n            )\n          }\n        }\n\n        // Filter to column-only fields\n        const taxPatchParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null)\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked)\n        const taxPatchData: Record<string, unknown> = {}\n        if ('published' in body) taxPatchData['published'] = body['published']\n        for (const f of taxPatchColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          taxPatchData[key] = storageBody[key]\n        }\n\n        const updated = await repo.update(id, taxPatchData as Parameters<typeof repo.update>[1])\n        if (!updated) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, existing as Record<string, unknown>, storageBody),\n        ]\n\n        if (db) {\n          for (const f of taxPatchParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, id, taxonomyType.db.table_name, f.name, pType, items, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = fieldKeys.toLabels(updated as Record<string, unknown>)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // DELETE /admin/api/taxonomy/{type}/:id\n    app.delete(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:delete'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // A delete removes every media reference the item held (top-level + paragraphs).\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, item as Record<string, unknown>, null),\n        ]\n\n        if (db) {\n          for (const f of paragraphFieldDefs) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        await repo.delete(id)\n        return c.json({ ok: true })\n      }\n    )\n  }\n\n  // ── Config endpoint ───────────────────────────────────────────────────────\n\n  app.get('/admin/api/config', (c) => {\n    return c.json({\n      ok: true,\n      data: {\n        content_types: Object.values(registry.content_types).map((ct) => ({\n          name: ct.name,\n          label: ct.label,\n          only_one: ct.only_one,\n          default_base_path: ct.default_base_path,\n          fields: ct.fields,\n          system_fields: ct.system_fields,\n        })),\n        taxonomy_types: Object.values(registry.taxonomy_types).map((tt) => ({\n          name: tt.name,\n          label: tt.label,\n          fields: tt.fields,\n          system_fields: tt.system_fields,\n        })),\n        enum_types: Object.values(registry.enum_types).map((et) => ({\n          name: et.name,\n          label: et.label,\n          values: et.values,\n        })),\n      },\n    })\n  })\n}\n","import type { MediaRepository, ParsedField } from '@bobbykim/manguito-cms-core'\n\n// ─── Media reference tracking ─────────────────────────────────────────────────\n//\n// Reconciles media.reference_count on a content write. reference_count counts\n// *content items* that reference a media row (see CONTEXT.md \"Orphaned media\"\n// and docs/adr/api/0007), not reference slots — so a media id used by several\n// fields/paragraphs of one item counts once, and an id moved between slots in\n// one write is a no-op.\n//\n// A write produces a MediaDelta of the ids it gains and loses. Top-level field\n// deltas are computed here (pure); paragraph deltas are produced by the paragraph\n// persistence path and merged in. The merged delta is applied once.\n\nexport type MediaDelta = {\n  added: string[]\n  removed: string[]\n}\n\n// A media field holds a raw id string (not a resolved { id, url } object) on the\n// content/paragraph row. Empty string and non-strings mean \"no media\".\nfunction extractMediaId(value: unknown): string | null {\n  return typeof value === 'string' && value !== '' ? value : null\n}\n\n// Media ids gained and lost between two content states for the top-level media\n// fields. BOTH `before` and `after` are STORAGE-KEYED (column names), never\n// label-keyed — callers normalize a request body with FieldKeyMap.toStorage\n// before calling. Unifies all three writes:\n//   create — before = null            (no prior ids; set fields are added)\n//   update — before/after are rows     (a field absent from `after` is untouched)\n//   delete — after = null              (every current id is removed)\nexport function topLevelMediaDelta(\n  mediaFields: ParsedField[],\n  before: Record<string, unknown> | null,\n  after: Record<string, unknown> | null\n): MediaDelta {\n  const added: string[] = []\n  const removed: string[] = []\n\n  for (const f of mediaFields) {\n    // Media fields are always column-backed, so the storage key always exists.\n    const key = f.db_column?.column_name\n    if (key === undefined || key === '') continue\n\n    // On a partial update, a media field not present in the patch is untouched.\n    // (after === null is a delete — every field is in scope.)\n    if (after !== null && !(key in after)) continue\n\n    const oldId = before ? extractMediaId(before[key]) : null\n    const newId = after ? extractMediaId(after[key]) : null\n    if (newId === oldId) continue\n    if (oldId) removed.push(oldId)\n    if (newId) added.push(newId)\n  }\n\n  return { added, removed }\n}\n\n// Combine the top-level delta with each paragraph field's delta into one delta.\nexport function mergeMediaDeltas(...deltas: MediaDelta[]): MediaDelta {\n  return {\n    added: deltas.flatMap((d) => d.added),\n    removed: deltas.flatMap((d) => d.removed),\n  }\n}\n\n// Apply a delta to reference counts, per content item:\n//   - dedup each side (an id referenced by many slots counts once)\n//   - cancel ids that are both added and removed (moved between slots → no-op)\n//   - skip the repo call when a side is empty\nexport async function applyMediaReferenceDelta(\n  delta: MediaDelta,\n  mediaRepo: MediaRepository\n): Promise<void> {\n  const added = new Set(delta.added)\n  const removed = new Set(delta.removed)\n\n  const netAdd = [...added].filter((id) => !removed.has(id))\n  const netRemove = [...removed].filter((id) => !added.has(id))\n\n  if (netAdd.length > 0) await mediaRepo.incrementReferenceCount(netAdd)\n  if (netRemove.length > 0) await mediaRepo.decrementReferenceCount(netRemove)\n}\n","// Admin media routes — upload, presigned URL, update, delete\nimport type { Context, Hono } from 'hono'\nimport type { MediaRepository, StorageAdapter } from '@bobbykim/manguito-cms-core'\nimport { sign, verify } from 'hono/jwt'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\n\n// ─── Accepted MIME types ──────────────────────────────────────────────────────\n\nconst IMAGE_MIME_TYPES = new Set([\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n])\n\nconst VIDEO_MIME_TYPES = new Set(['video/mp4', 'video/webm', 'video/quicktime'])\n\nconst FILE_MIME_TYPES = new Set(['application/pdf'])\n\n// ─── Pending upload token ─────────────────────────────────────────────────────\n// The presigned-url request and the confirm request can land on different\n// serverless instances, so pending-upload state cannot live in memory. Encode it\n// in a short-lived token signed with AUTH_SECRET — stateless and tamper-proof —\n// and hand it to the client as media_id; confirm verifies it.\n\ntype PendingUpload = {\n  key: string\n  folder: 'image' | 'video' | 'file'\n  mime_type: string\n}\n\nfunction authSecret(): string {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  return secret\n}\n\nasync function signPendingUpload(data: PendingUpload, expiresAt: number): Promise<string> {\n  return sign({ ...data, exp: expiresAt }, authSecret())\n}\n\nasync function verifyPendingUpload(token: string): Promise<PendingUpload | null> {\n  try {\n    const p = await verify(token, authSecret(), 'HS256') as {\n      key: string\n      folder: 'image' | 'video' | 'file'\n      mime_type: string\n    }\n    return { key: p.key, folder: p.folder, mime_type: p.mime_type }\n  } catch {\n    return null\n  }\n}\n\n\nasync function handleDirectUpload(\n  folder: 'image' | 'video' | 'file',\n  acceptedTypes: Set<string>,\n  mediaRepo: MediaRepository,\n  storage: StorageAdapter,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  c: Context<any, any, any>,\n  altRequired: boolean,\n  maxFileSize: number | undefined\n): Promise<Response> {\n  // Direct uploads buffer the whole file in the CMS server's memory (unlike the\n  // presigned flow, which uploads straight to storage). Reject oversized bodies\n  // up front via Content-Length so we never buffer them — and keep max_file_size\n  // under the platform payload limit on serverless (Lambda ~6 MB).\n  if (maxFileSize !== undefined) {\n    const contentLength = Number(c.req.header('content-length'))\n    if (Number.isFinite(contentLength) && contentLength > maxFileSize) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'FILE_TOO_LARGE',\n            message: `Upload exceeds the maximum size of ${maxFileSize} bytes`,\n          },\n        },\n        413\n      )\n    }\n  }\n\n  let formData: FormData\n  try {\n    formData = await c.req.formData()\n  } catch {\n    return c.json(\n      { ok: false, error: { code: 'VALIDATION_ERROR', message: 'Expected multipart/form-data' } },\n      422\n    )\n  }\n\n  const fileField = formData.get('file')\n  if (!(fileField instanceof File)) {\n    return c.json(\n      { ok: false, error: { code: 'VALIDATION_ERROR', message: 'file field is required' } },\n      422\n    )\n  }\n\n  // Defensive second check: Content-Length may be absent (chunked) or count\n  // multipart overhead, so also reject on the actual decoded file size.\n  if (maxFileSize !== undefined && fileField.size > maxFileSize) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'FILE_TOO_LARGE',\n          message: `File exceeds the maximum size of ${maxFileSize} bytes`,\n        },\n      },\n      413\n    )\n  }\n\n  const mimeType = fileField.type\n  if (!acceptedTypes.has(mimeType)) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'UNSUPPORTED_MIME_TYPE',\n          message: `MIME type '${mimeType}' is not accepted by this endpoint`,\n        },\n      },\n      415\n    )\n  }\n\n  const altValue = formData.get('alt')\n  const alt = typeof altValue === 'string' && altValue.trim() !== '' ? altValue.trim() : undefined\n\n  if (altRequired && !alt) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'VALIDATION_ERROR',\n          message: 'alt is required for this media type',\n          details: [{ field: 'alt', message: 'alt is required' }],\n        },\n      },\n      422\n    )\n  }\n\n  let presigned: Awaited<ReturnType<StorageAdapter['getPresignedUploadUrl']>>\n  try {\n    presigned = await storage.getPresignedUploadUrl({\n      folder,\n      filename: fileField.name,\n      mime_type: mimeType,\n    })\n  } catch {\n    return c.json(\n      { ok: false, error: { code: 'STORAGE_ERROR', message: 'Failed to generate upload URL' } },\n      502\n    )\n  }\n\n  if (storage.upload) {\n    try {\n      const bytes = new Uint8Array(await fileField.arrayBuffer())\n      await storage.upload(presigned.key, bytes, mimeType)\n    } catch (err) {\n      console.error('[media] storage.upload error:', err)\n      return c.json(\n        { ok: false, error: { code: 'STORAGE_ERROR', message: 'Storage upload failed' } },\n        502\n      )\n    }\n  }\n\n  const url = storage.getUrl(presigned.key)\n  const fileSize = fileField.size\n\n  const item = await mediaRepo.create({\n    type: folder,\n    url,\n    mime_type: mimeType,\n    ...(alt !== undefined && { alt }),\n    file_size: fileSize,\n  })\n\n  return c.json({ ok: true, data: item }, 201)\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAdminMediaRoutes(\n  app: Hono,\n  mediaRepo: MediaRepository,\n  storage: StorageAdapter,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  maxFileSize: number | undefined,\n): void {\n  // POST /admin/api/media/image\n  app.post(\n    '/admin/api/media/image',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('image', IMAGE_MIME_TYPES, mediaRepo, storage, c, false, maxFileSize)\n    }\n  )\n\n  // POST /admin/api/media/video\n  app.post(\n    '/admin/api/media/video',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('video', VIDEO_MIME_TYPES, mediaRepo, storage, c, true, maxFileSize)\n    }\n  )\n\n  // POST /admin/api/media/file\n  app.post(\n    '/admin/api/media/file',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('file', FILE_MIME_TYPES, mediaRepo, storage, c, true, maxFileSize)\n    }\n  )\n\n  // GET /admin/api/media/presigned-url\n  app.get('/admin/api/media/presigned-url', requirePermission('media:create'), async (c) => {\n    const type = c.req.query('type') as 'image' | 'video' | 'file' | undefined\n    const filename = c.req.query('filename')\n    const mimeType = c.req.query('mime_type')\n\n    if (!type || !['image', 'video', 'file'].includes(type)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'type must be one of: image, video, file',\n            details: [{ field: 'type', message: 'type is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    if (!filename || filename.trim() === '') {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'filename is required',\n            details: [{ field: 'filename', message: 'filename is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    if (!mimeType || mimeType.trim() === '') {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'mime_type is required',\n            details: [{ field: 'mime_type', message: 'mime_type is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    const accepted =\n      type === 'image' ? IMAGE_MIME_TYPES : type === 'video' ? VIDEO_MIME_TYPES : FILE_MIME_TYPES\n\n    if (!accepted.has(mimeType)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'UNSUPPORTED_MIME_TYPE',\n            message: `MIME type '${mimeType}' is not accepted for ${type} uploads`,\n          },\n        },\n        415\n      )\n    }\n\n    let presigned: Awaited<ReturnType<StorageAdapter['getPresignedUploadUrl']>>\n    try {\n      presigned = await storage.getPresignedUploadUrl({\n        folder: type,\n        filename,\n        mime_type: mimeType,\n      })\n    } catch {\n      return c.json(\n        { ok: false, error: { code: 'STORAGE_ERROR', message: 'Failed to generate upload URL' } },\n        502\n      )\n    }\n\n    const media_id = await signPendingUpload(\n      { key: presigned.key, folder: type, mime_type: mimeType },\n      presigned.expires_at,\n    )\n\n    return c.json({\n      ok: true,\n      data: {\n        upload_url: presigned.upload_url,\n        // Signed, self-contained token the client posts back to /confirm/:id.\n        media_id,\n        expires_at: presigned.expires_at,\n        // Present for storages that need a multipart POST with signed fields\n        // (Cloudinary); absent for a raw PUT (S3).\n        ...(presigned.method && { method: presigned.method }),\n        ...(presigned.fields && { fields: presigned.fields }),\n      },\n    })\n  })\n\n  // POST /admin/api/media/confirm/:id\n  app.post('/admin/api/media/confirm/:id', requirePermission('media:create'), async (c) => {\n    const id = c.req.param('id')\n\n    const pending = await verifyPendingUpload(id)\n    if (!pending) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'PRESIGNED_URL_EXPIRED',\n            message: 'Presigned upload not found or has expired',\n          },\n        },\n        410\n      )\n    }\n\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>\n    const altValue = typeof body['alt'] === 'string' ? body['alt'].trim() : undefined\n\n    const altRequired = pending.folder === 'video' || pending.folder === 'file'\n    if (altRequired && !altValue) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'alt is required for video and file uploads',\n            details: [{ field: 'alt', message: 'alt is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    // Validate the actual uploaded object where the adapter supports it.\n    let fileSize = 0\n    if (storage.stat) {\n      const meta = await storage.stat(pending.key)\n      if (!meta) {\n        return c.json(\n          { ok: false, error: { code: 'STORAGE_ERROR', message: 'Uploaded object not found' } },\n          502,\n        )\n      }\n      const accepted =\n        pending.folder === 'image' ? IMAGE_MIME_TYPES\n        : pending.folder === 'video' ? VIDEO_MIME_TYPES\n        : FILE_MIME_TYPES\n      if (meta.content_type && !accepted.has(meta.content_type)) {\n        await storage.delete(pending.key)\n        return c.json(\n          { ok: false, error: { code: 'UNSUPPORTED_MIME_TYPE', message: `Stored object type '${meta.content_type}' is not accepted` } },\n          415,\n        )\n      }\n      if (maxFileSize !== undefined && meta.size > maxFileSize) {\n        await storage.delete(pending.key)\n        return c.json(\n          { ok: false, error: { code: 'FILE_TOO_LARGE', message: `Uploaded file exceeds the ${maxFileSize} byte limit` } },\n          413,\n        )\n      }\n      fileSize = meta.size\n    }\n\n    const url = storage.getUrl(pending.key)\n\n    const item = await mediaRepo.create({\n      type: pending.folder,\n      url,\n      mime_type: pending.mime_type,\n      ...(altValue !== undefined && { alt: altValue }),\n      file_size: fileSize,\n    })\n\n    return c.json({ ok: true, data: item }, 201)\n  })\n\n  // PATCH /admin/api/media/:id\n  app.patch(\n    '/admin/api/media/:id',\n    requirePermission('media:edit'),\n    async (c) => {\n      const id = c.req.param('id')\n      const existing = await mediaRepo.findOne(id)\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      const body = (await c.req.json()) as Record<string, unknown>\n      const alt = typeof body['alt'] === 'string' ? body['alt'].trim() : undefined\n\n      const updateData: Parameters<typeof mediaRepo.update>[1] = {}\n      if (alt !== undefined) updateData.alt = alt\n\n      const updated = await mediaRepo.update(id, updateData)\n      if (!updated) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      return c.json({ ok: true, data: updated })\n    }\n  )\n\n  // DELETE /admin/api/media/:id\n  app.delete(\n    '/admin/api/media/:id',\n    requirePermission('media:delete'),\n    async (c) => {\n      const id = c.req.param('id')\n      const item = await mediaRepo.findOne(id)\n\n      if (!item) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      if (item.reference_count > 0) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'MEDIA_IN_USE',\n              message: 'Cannot delete media that is referenced by content items',\n            },\n          },\n          409\n        )\n      }\n\n      // Derive storage key from URL.\n      // Cloudinary delivery URLs: https://res.cloudinary.com/{cloud}/{type}/upload/{public_id}\n      // Local delivery URLs:      http://localhost/uploads/{key}\n      // For Cloudinary, the adapter key is the public_id — everything after \"/upload/\".\n      // For local (and S3), the adapter key is the full path after the host.\n      const pathname = new URL(item.url).pathname\n      const uploadIdx = pathname.indexOf('/upload/')\n      const key = uploadIdx >= 0\n        ? pathname.slice(uploadIdx + '/upload/'.length)\n        : pathname.replace(/^\\//, '')\n\n      try {\n        await storage.delete(key)\n      } catch (err) {\n        console.error('[media] storage.delete error:', err)\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'STORAGE_ERROR', message: 'Failed to delete file from storage' },\n          },\n          502\n        )\n      }\n\n      await mediaRepo.delete(id)\n\n      return c.json({ ok: true })\n    }\n  )\n\n  // GET /admin/api/media\n  app.get('/admin/api/media', requirePermission('media:read'), async (c) => {\n    const pageStr = c.req.query('page')\n    const perPageStr = c.req.query('per_page')\n    const page = pageStr !== undefined ? Number(pageStr) : 1\n    const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n    if (\n      !Number.isInteger(page) ||\n      page < 1 ||\n      !Number.isInteger(per_page) ||\n      per_page < 1 ||\n      per_page > 100\n    ) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'INVALID_PAGINATION',\n            message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n          },\n        },\n        400\n      )\n    }\n\n    const typeParam = c.req.query('type')\n    if (typeParam !== undefined && !['image', 'video', 'file'].includes(typeParam)) {\n      return c.json(\n        {\n          ok: false,\n          error: { code: 'VALIDATION_ERROR', message: 'type must be one of: image, video, file' },\n        },\n        422\n      )\n    }\n\n    const orphanedParam = c.req.query('orphaned')\n    const orphaned =\n      orphanedParam === 'true' ? true : orphanedParam === 'false' ? false : undefined\n\n    const opts: Parameters<typeof mediaRepo.findMany>[0] = { page, per_page }\n    if (typeParam !== undefined) opts.type = typeParam as 'image' | 'video' | 'file'\n    if (orphaned !== undefined) opts.orphaned = orphaned\n\n    const result = await mediaRepo.findMany(opts)\n\n    return c.json(result)\n  })\n\n  // GET /admin/api/media/:id\n  app.get('/admin/api/media/:id', requirePermission('media:read'), async (c) => {\n    const id = c.req.param('id')\n    const item = await mediaRepo.findOne(id)\n\n    if (!item) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n        404\n      )\n    }\n\n    return c.json({ ok: true, data: item })\n  })\n\n}\n","import type { Hono } from 'hono'\nimport { getCookie } from 'hono/cookie'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { verifyPassword } from '../../auth/password.js'\nimport {\n  signToken,\n  verifyToken,\n  setAuthCookie,\n  clearAuthCookie,\n  AUTH_TOKEN_TTL,\n  REFRESH_TOKEN_TTL,\n} from '../../auth/jwt.js'\nimport { createAuthMiddleware } from '../../middleware/auth.js'\n\n// ─── Rate limiting ────────────────────────────────────────────────────────────\n\nconst loginAttempts = new Map<string, number[]>()\nconst globalLoginAttempts: number[] = []\n\nconst RATE_LIMIT_MAX = 10\nconst RATE_LIMIT_WINDOW_MS = 15 * 60 * 1000\n// Global backstop across all IPs/emails — blunts distributed spraying without\n// per-account lockout (ADR api/0005). Sized well above legitimate concurrent\n// login volume for a self-hosted CMS.\nconst GLOBAL_LOGIN_MAX = 100\n\n// A valid cost-12 bcrypt hash used only to equalize timing on the\n// user-not-found path, so login response time cannot enumerate accounts.\nconst DUMMY_PASSWORD_HASH =\n  '$2a$12$y.MZw/Q4Ceg3x1y3xrRaeuTaM09zSDx1nn78guO3bqc9vgOqGda42'\n\nfunction checkRateLimit(key: string): { allowed: boolean; retryAfterSeconds: number } {\n  const now = Date.now()\n  const windowStart = now - RATE_LIMIT_WINDOW_MS\n\n  // Global ceiling first — purge, then evaluate before recording the per-key hit.\n  while (globalLoginAttempts.length > 0 && globalLoginAttempts[0]! <= windowStart) {\n    globalLoginAttempts.shift()\n  }\n  if (globalLoginAttempts.length >= GLOBAL_LOGIN_MAX) {\n    const retryAfterSeconds = Math.ceil((globalLoginAttempts[0]! + RATE_LIMIT_WINDOW_MS - now) / 1000)\n    return { allowed: false, retryAfterSeconds }\n  }\n\n  const attempts = (loginAttempts.get(key) ?? []).filter((t) => t > windowStart)\n  attempts.push(now)\n  loginAttempts.set(key, attempts)\n  globalLoginAttempts.push(now)\n\n  if (attempts.length > RATE_LIMIT_MAX) {\n    const oldestInWindow = attempts[0]!\n    const retryAfterSeconds = Math.ceil((oldestInWindow + RATE_LIMIT_WINDOW_MS - now) / 1000)\n    return { allowed: false, retryAfterSeconds }\n  }\n\n  return { allowed: true, retryAfterSeconds: 0 }\n}\n\n/** Test-only: clears in-process login rate-limit state. Not part of the public API. */\nexport function __resetLoginRateLimitStateForTests(): void {\n  loginAttempts.clear()\n  globalLoginAttempts.length = 0\n}\n\n// ─── DB row types ─────────────────────────────────────────────────────────────\n\ntype LoginUserRow = {\n  id: string\n  email: string\n  password_hash: string\n  role_id: string\n  token_version: number\n}\n\ntype RefreshRow = {\n  token_version: number\n  role: string\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAuthRoutes(app: Hono, db: DrizzlePostgresInstance): void {\n  const invalidCredentials = {\n    ok: false,\n    error: { code: 'INVALID_CREDENTIALS', message: 'Invalid email or password.' },\n  } as const\n\n  // POST /admin/api/auth/login\n  app.post('/admin/api/auth/login', async (c) => {\n    let body: { email?: unknown; password?: unknown }\n    try {\n      body = (await c.req.json()) as { email?: unknown; password?: unknown }\n    } catch {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const email =\n      typeof body.email === 'string' ? body.email.trim().toLowerCase() : null\n    const password = typeof body.password === 'string' ? body.password : null\n\n    if (!email || !password) {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const ip =\n      c.req.header('x-forwarded-for')?.split(',')[0]?.trim() ?? 'unknown'\n    const rateCheck = checkRateLimit(`${ip}:${email}`)\n    if (!rateCheck.allowed) {\n      c.header('Retry-After', String(rateCheck.retryAfterSeconds))\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'RATE_LIMITED',\n            message: 'Too many login attempts. Please try again later.',\n          },\n        },\n        429,\n      )\n    }\n\n    const userResult = await db.execute(\n      sql`SELECT id, email, password_hash, role_id, token_version\n          FROM users WHERE email = ${email} LIMIT 1`,\n    )\n    const user = userResult.rows[0] as LoginUserRow | undefined\n\n    if (!user) {\n      // Run a dummy comparison so this path pays the same bcrypt cost as a\n      // real user, closing the user-enumeration timing side-channel.\n      await verifyPassword(password, DUMMY_PASSWORD_HASH)\n      return c.json(invalidCredentials, 401)\n    }\n\n    const passwordValid = await verifyPassword(password, user.password_hash)\n    if (!passwordValid) {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const roleResult = await db.execute(\n      sql`SELECT r.name AS name, u.must_change_password\n          FROM roles r\n          JOIN users u ON u.role_id = r.id\n          WHERE r.id = ${user.role_id} AND u.id = ${user.id}\n          LIMIT 1`,\n    )\n    const roleRow = roleResult.rows[0] as { name: string; must_change_password: boolean } | undefined\n\n    if (!roleRow) {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_ROLE', message: 'User role not found.' } },\n        500,\n      )\n    }\n\n    const [authToken, refreshToken] = await Promise.all([\n      signToken(\n        { user_id: user.id, role: roleRow.name, token_version: user.token_version },\n        AUTH_TOKEN_TTL,\n      ),\n      signToken(\n        { user_id: user.id, role: roleRow.name, token_version: user.token_version },\n        REFRESH_TOKEN_TTL,\n      ),\n    ])\n\n    setAuthCookie(c, 'auth_token', authToken, { path: '/' })\n    setAuthCookie(c, 'refresh_token', refreshToken, { path: '/admin/api/auth' })\n\n    return c.json({\n      ok: true,\n      data: {\n        id: user.id,\n        email: user.email,\n        role: roleRow.name,\n        must_change_password: roleRow.must_change_password,\n      },\n    })\n  })\n\n  // POST /admin/api/auth/refresh\n  app.post('/admin/api/auth/refresh', async (c) => {\n    const token = getCookie(c, 'refresh_token')\n    if (!token) {\n      return c.json(\n        { ok: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required.' } },\n        401,\n      )\n    }\n\n    let payload\n    try {\n      payload = await verifyToken(token)\n    } catch (err) {\n      const code = (err as { code?: string }).code\n      if (code === 'TOKEN_EXPIRED') {\n        return c.json(\n          { ok: false, error: { code: 'TOKEN_EXPIRED', message: 'Token has expired.' } },\n          401,\n        )\n      }\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid.' } },\n        401,\n      )\n    }\n\n    const rowResult = await db.execute(\n      sql`SELECT u.token_version, r.name AS role\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${payload.user_id}\n          LIMIT 1`,\n    )\n    const row = rowResult.rows[0] as RefreshRow | undefined\n\n    if (!row || payload.token_version !== row.token_version) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token has been invalidated.' } },\n        401,\n      )\n    }\n\n    const newAuthToken = await signToken(\n      { user_id: payload.user_id, role: row.role, token_version: row.token_version },\n      AUTH_TOKEN_TTL,\n    )\n    setAuthCookie(c, 'auth_token', newAuthToken, { path: '/' })\n\n    return c.json({ ok: true })\n  })\n\n  // POST /admin/api/auth/logout\n  const authMiddleware = createAuthMiddleware(db)\n  app.post('/admin/api/auth/logout', authMiddleware, async (c) => {\n    const user = (c as unknown as { get(k: 'user'): { id: string; role: string } }).get('user')\n\n    await db.execute(\n      sql`UPDATE users SET token_version = token_version + 1 WHERE id = ${user.id}`,\n    )\n\n    clearAuthCookie(c, 'auth_token')\n    clearAuthCookie(c, 'refresh_token', '/admin/api/auth')\n\n    return c.json({ ok: true })\n  })\n}\n","export { hashPassword, verifyPassword } from '@bobbykim/manguito-cms-core'\n","import type { Hono } from 'hono'\nimport { sql } from 'drizzle-orm'\nimport { randomBytes } from 'node:crypto'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { hashPassword, verifyPassword } from '../../auth/password.js'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\nimport type { createHierarchyMiddleware } from '../../middleware/hierarchy.js'\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\ntype ActingUser = { id: string; role: string }\n\ntype UserRow = {\n  id: string\n  email: string\n  role: string\n  must_change_password: boolean\n  created_at: string\n  updated_at: string\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\n\nfunction getActingUser(c: unknown): ActingUser {\n  return (c as { get(k: 'user'): ActingUser }).get('user')\n}\n\nfunction generateTempPassword(): string {\n  return randomBytes(8).toString('base64url')\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerUserRoutes(\n  app: Hono,\n  db: DrizzlePostgresInstance,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  requireHierarchy: ReturnType<typeof createHierarchyMiddleware>,\n): void {\n  // POST /admin/api/users/change-password\n  // Registered first — exempt from mustChangePasswordCheck (enforced by path check in that middleware).\n  // No requirePermission — available to any authenticated user.\n  app.post('/admin/api/users/change-password', async (c) => {\n    const actingUser = getActingUser(c)\n\n    let body: { current_password?: unknown; new_password?: unknown }\n    try {\n      body = (await c.req.json()) as { current_password?: unknown; new_password?: unknown }\n    } catch {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_CREDENTIALS', message: 'Invalid credentials.' } },\n        401,\n      )\n    }\n\n    const currentPassword =\n      typeof body.current_password === 'string' ? body.current_password : null\n    const newPassword = typeof body.new_password === 'string' ? body.new_password : null\n\n    if (!currentPassword || !newPassword) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'current_password and new_password are required.',\n          },\n        },\n        422,\n      )\n    }\n\n    const hashResult = await db.execute(\n      sql`SELECT password_hash FROM users WHERE id = ${actingUser.id} LIMIT 1`,\n    )\n    const hashRow = hashResult.rows[0] as { password_hash: string } | undefined\n\n    if (!hashRow || !(await verifyPassword(currentPassword, hashRow.password_hash))) {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_CREDENTIALS', message: 'Invalid credentials.' } },\n        401,\n      )\n    }\n\n    const newHash = await hashPassword(newPassword)\n\n    await db.execute(\n      sql`UPDATE users\n          SET password_hash       = ${newHash},\n              must_change_password = false,\n              token_version        = token_version + 1,\n              updated_at           = NOW()\n          WHERE id = ${actingUser.id}`,\n    )\n\n    return c.json({ ok: true })\n  })\n\n  // GET /admin/api/users\n  app.get('/admin/api/users', requirePermission('users:read'), async (c) => {\n    const result = await db.execute(\n      sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                 u.created_at, u.updated_at\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          ORDER BY u.created_at ASC`,\n    )\n\n    return c.json({ ok: true, data: result.rows as UserRow[] })\n  })\n\n  // GET /admin/api/users/:id\n  app.get('/admin/api/users/:id', requirePermission('users:read'), async (c) => {\n    const id = c.req.param('id')\n\n    const result = await db.execute(\n      sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                 u.created_at, u.updated_at\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${id}\n          LIMIT 1`,\n    )\n    const row = result.rows[0] as UserRow | undefined\n\n    if (!row) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n        404,\n      )\n    }\n\n    return c.json({ ok: true, data: row })\n  })\n\n  // POST /admin/api/users\n  app.post(\n    '/admin/api/users',\n    requirePermission('users:create'),\n    requireHierarchy(),\n    async (c) => {\n      let body: { email?: unknown; role?: unknown }\n      try {\n        body = (await c.req.json()) as { email?: unknown; role?: unknown }\n      } catch {\n        return c.json(\n          { ok: false, error: { code: 'VALIDATION_ERROR', message: 'Request body is required.' } },\n          422,\n        )\n      }\n\n      const email =\n        typeof body.email === 'string' ? body.email.trim().toLowerCase() : null\n      const roleName = typeof body.role === 'string' ? body.role : null\n\n      if (!email) {\n        return c.json(\n          { ok: false, error: { code: 'VALIDATION_ERROR', message: 'email is required.' } },\n          422,\n        )\n      }\n      if (!roleName) {\n        return c.json(\n          { ok: false, error: { code: 'INVALID_ROLE', message: 'role is required.' } },\n          400,\n        )\n      }\n\n      const roleResult = await db.execute(\n        sql`SELECT id FROM roles WHERE name = ${roleName} LIMIT 1`,\n      )\n      const roleRow = roleResult.rows[0] as { id: string } | undefined\n\n      if (!roleRow) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INVALID_ROLE', message: `Role \"${roleName}\" does not exist.` },\n          },\n          400,\n        )\n      }\n\n      const tempPassword = generateTempPassword()\n      const passwordHash = await hashPassword(tempPassword)\n\n      const insertResult = await db.execute(\n        sql`INSERT INTO users\n              (id, email, password_hash, role_id, must_change_password, token_version,\n               created_at, updated_at)\n            VALUES\n              (gen_random_uuid(), ${email}, ${passwordHash}, ${roleRow.id},\n               true, 0, NOW(), NOW())\n            RETURNING id, email, must_change_password, created_at, updated_at`,\n      )\n      const newUser = insertResult.rows[0] as\n        | {\n            id: string\n            email: string\n            must_change_password: boolean\n            created_at: string\n            updated_at: string\n          }\n        | undefined\n\n      if (!newUser) {\n        return c.json(\n          { ok: false, error: { code: 'INTERNAL_ERROR', message: 'Failed to create user.' } },\n          500,\n        )\n      }\n\n      return c.json(\n        {\n          ok: true,\n          data: {\n            id: newUser.id,\n            email: newUser.email,\n            role: roleName,\n            must_change_password: newUser.must_change_password,\n            temporary_password: tempPassword,\n            created_at: newUser.created_at,\n            updated_at: newUser.updated_at,\n          },\n        },\n        201,\n      )\n    },\n  )\n\n  // PATCH /admin/api/users/:id\n  app.patch(\n    '/admin/api/users/:id',\n    requirePermission('users:edit'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      let body: { email?: unknown; role?: unknown }\n      try {\n        body = (await c.req.json()) as { email?: unknown; role?: unknown }\n      } catch {\n        body = {}\n      }\n\n      // Self role change is never permitted\n      if (actingUser.id === id && body.role !== undefined) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'You cannot change your own role.' },\n          },\n          403,\n        )\n      }\n\n      const existingResult = await db.execute(\n        sql`SELECT id, email, role_id FROM users WHERE id = ${id} LIMIT 1`,\n      )\n      const existing = existingResult.rows[0] as\n        | { id: string; email: string; role_id: string }\n        | undefined\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      const newEmail =\n        typeof body.email === 'string' ? body.email.trim().toLowerCase() : existing.email\n\n      let newRoleId = existing.role_id\n      let changeRole = false\n\n      if (typeof body.role === 'string' && body.role) {\n        const roleResult = await db.execute(\n          sql`SELECT id FROM roles WHERE name = ${body.role} LIMIT 1`,\n        )\n        const roleRow = roleResult.rows[0] as { id: string } | undefined\n\n        if (!roleRow) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_ROLE',\n                message: `Role \"${body.role}\" does not exist.`,\n              },\n            },\n            400,\n          )\n        }\n\n        newRoleId = roleRow.id\n        changeRole = true\n      }\n\n      if (changeRole) {\n        await db.execute(\n          sql`UPDATE users\n              SET email         = ${newEmail},\n                  role_id       = ${newRoleId},\n                  token_version = token_version + 1,\n                  updated_at    = NOW()\n              WHERE id = ${id}`,\n        )\n      } else {\n        await db.execute(\n          sql`UPDATE users\n              SET email      = ${newEmail},\n                  role_id    = ${newRoleId},\n                  updated_at = NOW()\n              WHERE id = ${id}`,\n        )\n      }\n\n      const updatedResult = await db.execute(\n        sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                   u.created_at, u.updated_at\n            FROM users u\n            JOIN roles r ON r.id = u.role_id\n            WHERE u.id = ${id}\n            LIMIT 1`,\n      )\n      const updated = updatedResult.rows[0] as UserRow | undefined\n\n      if (!updated) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      return c.json({ ok: true, data: updated })\n    },\n  )\n\n  // DELETE /admin/api/users/:id\n  app.delete(\n    '/admin/api/users/:id',\n    requirePermission('users:delete'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      if (actingUser.id === id) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INSUFFICIENT_PRIVILEGE',\n              message: 'You cannot delete your own account.',\n            },\n          },\n          403,\n        )\n      }\n\n      const result = await db.execute(\n        sql`DELETE FROM users WHERE id = ${id} RETURNING id`,\n      )\n\n      if ((result.rows as unknown[]).length === 0) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      return c.json({ ok: true })\n    },\n  )\n\n  // POST /admin/api/users/:id/reset-password\n  app.post(\n    '/admin/api/users/:id/reset-password',\n    requirePermission('users:edit'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      if (actingUser.id === id) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INSUFFICIENT_PRIVILEGE',\n              message: 'You cannot reset your own password via this endpoint.',\n            },\n          },\n          403,\n        )\n      }\n\n      const existingResult = await db.execute(\n        sql`SELECT id FROM users WHERE id = ${id} LIMIT 1`,\n      )\n      const existing = existingResult.rows[0] as { id: string } | undefined\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      const tempPassword = generateTempPassword()\n      const passwordHash = await hashPassword(tempPassword)\n\n      await db.execute(\n        sql`UPDATE users\n            SET password_hash        = ${passwordHash},\n                must_change_password = true,\n                token_version        = token_version + 1,\n                updated_at           = NOW()\n            WHERE id = ${id}`,\n      )\n\n      return c.json({ ok: true, data: { temporary_password: tempPassword } })\n    },\n  )\n}\n","import { sql } from 'drizzle-orm'\nimport type { Hono } from 'hono'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type { RolesRegistry } from '../../auth/registry.js'\n\n// ─── Version — injected by tsup at build time; falls back in test/dev ─────────\n\ndeclare const __API_VERSION__: string\n\nconst API_VERSION: string = (() => {\n  try { return __API_VERSION__ } catch { return '0.0.0' }\n})()\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\ntype ActingUser = { id: string; role: string }\n\ntype ConfigOptions = {\n  name: string\n  maxFileSize?: number\n  presignedUploads?: boolean\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerConfigRoute(\n  app: Hono,\n  config: ConfigOptions,\n  registry: RolesRegistry,\n  db: DrizzlePostgresInstance,\n): void {\n  app.get('/admin/api/config', async (c) => {\n    const actingUser = (c as unknown as { get(k: 'user'): ActingUser }).get('user')\n    const actingRole = registry[actingUser.role]\n    const actingLevel = actingRole?.hierarchy_level ?? Infinity\n\n    // Subordinate roles only — used by user management forms for role assignment.\n    const roles = Object.values(registry)\n      .filter((r) => r.name !== 'admin' && r.hierarchy_level > actingLevel)\n      .sort((a, b) => a.hierarchy_level - b.hierarchy_level)\n      .map((r) => ({ name: r.name, label: r.label, hierarchy_level: r.hierarchy_level }))\n\n    // All roles with full data — used by the admin panel to resolve permissions.\n    const all_roles = Object.values(registry)\n      .sort((a, b) => a.hierarchy_level - b.hierarchy_level)\n      .map((r) => ({\n        name: r.name,\n        label: r.label,\n        hierarchy_level: r.hierarchy_level,\n        is_system: r.is_system,\n        permissions: r.permissions,\n      }))\n\n    const userResult = await db.execute(\n      sql`SELECT email, must_change_password FROM users WHERE id = ${actingUser.id} LIMIT 1`\n    )\n    const userRow = userResult.rows[0] as\n      | { email: string; must_change_password: boolean }\n      | undefined\n\n    return c.json({\n      ok: true,\n      data: {\n        cms_name: config.name ?? 'Manguito CMS',\n        version: API_VERSION,\n        roles,\n        all_roles,\n        user: {\n          id: actingUser.id,\n          email: userRow?.email ?? '',\n          role: actingUser.role,\n          must_change_password: userRow?.must_change_password ?? false,\n        },\n        media: {\n          max_file_size: config.maxFileSize ?? null,\n          presigned_uploads: config.presignedUploads ?? false,\n        },\n      },\n    })\n  })\n}\n","import { sql } from 'drizzle-orm'\nimport type { Hono } from 'hono'\nimport type { SchemaRegistry } from '@bobbykim/manguito-cms-core'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerSchemaRoute(\n  app: Hono,\n  registry: SchemaRegistry,\n  db: DrizzlePostgresInstance,\n): void {\n  // Full schema — used by the admin panel for form rendering, validation, and navigation.\n  // Returns complete ParsedField objects (validation, ui_component) so the admin\n  // forms can render inputs and run client-side validation without extra round-trips.\n  app.get('/admin/api/schema', (c) => {\n    const content_types = Object.values(registry.content_types).map((ct) => ({\n      name: ct.name,\n      label: ct.label,\n      only_one: ct.only_one,\n      ui: ct.ui,\n      system_fields: ct.system_fields,\n      fields: ct.fields,\n    }))\n\n    const taxonomy_types = Object.values(registry.taxonomy_types).map((tt) => ({\n      name: tt.name,\n      label: tt.label,\n      system_fields: tt.system_fields,\n      fields: tt.fields,\n    }))\n\n    const paragraph_types = Object.values(registry.paragraph_types).map((pt) => ({\n      name: pt.name,\n      label: pt.label,\n      system_fields: pt.system_fields,\n      fields: pt.fields,\n    }))\n\n    const enum_types = Object.values(registry.enum_types).map((et) => ({\n      name: et.name,\n      label: et.label,\n      values: et.values,\n    }))\n\n    return c.json({\n      ok: true,\n      data: { content_types, taxonomy_types, paragraph_types, enum_types },\n    })\n  })\n\n  // Navigation meta-endpoints — list types with item counts for admin sidebar\n  app.get('/admin/api/content', async (c) => {\n    const data = await Promise.all(\n      Object.values(registry.content_types).map(async (ct) => {\n        const result = await db.execute(\n          sql`SELECT COUNT(*)::int AS count FROM ${sql.raw(`\"${ct.db.table_name}\"`)}`\n        )\n        const count = Number((result.rows[0] as { count: string | number }).count)\n        return { name: ct.name, label: ct.label, only_one: ct.only_one, count }\n      })\n    )\n    return c.json({ ok: true, data })\n  })\n\n  app.get('/admin/api/taxonomy', async (c) => {\n    const data = await Promise.all(\n      Object.values(registry.taxonomy_types).map(async (tt) => {\n        const result = await db.execute(\n          sql`SELECT COUNT(*)::int AS count FROM ${sql.raw(`\"${tt.db.table_name}\"`)}`\n        )\n        const count = Number((result.rows[0] as { count: string | number }).count)\n        return { name: tt.name, label: tt.label, count }\n      })\n    )\n    return c.json({ ok: true, data })\n  })\n}\n","import crypto from 'node:crypto'\nimport { sql, type SQL } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type {\n  ContentRepository,\n  PaginatedResult,\n  FindManyOptions,\n  FindAllOptions,\n  CreateInput,\n  UpdateInput,\n  FilterOperator,\n  FilterValue,\n} from '@bobbykim/manguito-cms-core'\nimport {\n  resolveRelationField,\n  resolveRelationBareIds,\n  type RelationDef,\n} from '../relations.js'\n\n// ─── Repository options ───────────────────────────────────────────────────────\n\nexport type ContentRepositoryOptions = {\n  relations?: Record<string, RelationDef>\n  /** When true, relation targets (reference/junction) are filtered to published\n   * rows only. Set by the public repos in app.ts; admin repos leave this false\n   * so drafts remain visible to admin. */\n  publishedRelations?: boolean\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\n\nconst SORTABLE_FIELDS = new Set(['title', 'created_at', 'updated_at'])\n\nfunction codeError(code: string, message: string): Error {\n  const err = new Error(message)\n  ;(err as Error & { code: string }).code = code\n  return err\n}\n\n// Only allow table/column identifiers that are developer-controlled.\n// Table names can include hyphens (e.g. content--blog_post).\nfunction quoteIdent(name: string): string {\n  if (!/^[a-z][a-z0-9_-]*$/.test(name)) {\n    throw new Error(`Unsafe SQL identifier: ${name}`)\n  }\n  return `\"${name.replace(/\"/g, '\"\"')}\"`\n}\n\n// User-supplied filter field names — strict, no hyphens.\nfunction quoteField(name: string): string {\n  if (!/^[a-z][a-z0-9_]*$/.test(name)) {\n    throw codeError('INVALID_FILTER_FIELD', `Invalid filter field name: ${name}`)\n  }\n  return `\"${name}\"`\n}\n\nfunction buildConditions(\n  published_only: boolean | undefined,\n  filters: Record<string, FilterValue> | undefined,\n  search: { term: string; columns: string[] } | undefined\n): SQL[] {\n  const conds: SQL[] = []\n\n  if (published_only) {\n    conds.push(sql`published = true`)\n  }\n\n  if (search && search.term.trim() !== '' && search.columns.length > 0) {\n    const pattern = `%${search.term.trim()}%`\n    const orConds = search.columns.map((col) => sql`${sql.raw(quoteField(col))} ILIKE ${pattern}`)\n    conds.push(sql`(${sql.join(orConds, sql` OR `)})`)\n  }\n\n  if (filters) {\n    for (const [field, value] of Object.entries(filters)) {\n      const col = sql.raw(quoteField(field))\n\n      if (Array.isArray(value)) {\n        if (value.length === 0) continue\n        const inList = sql.join(\n          value.map((v) => sql`${v}`),\n          sql`, `\n        )\n        conds.push(sql`${col} IN (${inList})`)\n      } else if (\n        typeof value === 'object' &&\n        value !== null\n      ) {\n        const op = value as FilterOperator\n        if (op.gt !== undefined) conds.push(sql`${col} > ${op.gt}`)\n        if (op.gte !== undefined) conds.push(sql`${col} >= ${op.gte}`)\n        if (op.lt !== undefined) conds.push(sql`${col} < ${op.lt}`)\n        if (op.lte !== undefined) conds.push(sql`${col} <= ${op.lte}`)\n      } else {\n        conds.push(sql`${col} = ${value}`)\n      }\n    }\n  }\n\n  return conds\n}\n\nfunction whereFragment(conds: SQL[]): SQL {\n  return conds.length > 0\n    ? sql` WHERE ${sql.join(conds, sql` AND `)}`\n    : sql``\n}\n\n// ─── Factory ──────────────────────────────────────────────────────────────────\n\nexport function createDrizzleContentRepository<T>(\n  db: DrizzlePostgresInstance,\n  tableName: string,\n  options: ContentRepositoryOptions = {}\n): ContentRepository<T> {\n  const { relations = {}, publishedRelations = false } = options\n\n  function tableRaw(): SQL {\n    return sql.raw(quoteIdent(tableName))\n  }\n\n  async function resolveRows(\n    rows: Record<string, unknown>[],\n    include: string[],\n    cache: Map<string, unknown>\n  ): Promise<Record<string, unknown>[]> {\n    if (rows.length === 0) return rows\n\n    // Validate include fields\n    for (const fieldName of include) {\n      if (!relations[fieldName]) {\n        throw codeError('INVALID_INCLUDE_FIELD', `'${fieldName}' is not a valid relation field`)\n      }\n    }\n\n    // Always resolve media fields; for all other relations not explicitly\n    // included, populate bare IDs so the field is never silently dropped.\n    for (const [fieldName, rel] of Object.entries(relations)) {\n      if (rel.type === 'media') {\n        await resolveRelationField(db, rows, fieldName, rel, cache, publishedRelations)\n      } else if (!include.includes(fieldName)) {\n        await resolveRelationBareIds(db, rows, fieldName, rel)\n      }\n    }\n\n    // Resolve explicitly included non-media fields\n    for (const fieldName of include) {\n      const rel = relations[fieldName]!\n      if (rel.type !== 'media') {\n        await resolveRelationField(db, rows, fieldName, rel, cache, publishedRelations)\n      }\n    }\n\n    return rows\n  }\n\n  return {\n    async findMany(opts: FindManyOptions): Promise<PaginatedResult<T>> {\n      const {\n        page = 1,\n        per_page = 10,\n        include = [],\n        published_only,\n        filters,\n        sort_by = 'created_at',\n        sort_order = 'asc',\n        search,\n      } = opts\n\n      if (!SORTABLE_FIELDS.has(sort_by as string)) {\n        throw codeError('INVALID_SORT_FIELD', `'${sort_by}' is not sortable. Allowed: title, created_at, updated_at`)\n      }\n\n      const offset = (page - 1) * per_page\n      const conds = buildConditions(published_only, filters, search)\n      const where = whereFragment(conds)\n      const sortCol = sql.raw(quoteIdent(sort_by))\n      const sortDir = sql.raw(sort_order === 'desc' ? 'DESC' : 'ASC')\n\n      const countResult = await db.execute(\n        sql`SELECT COUNT(*) AS total FROM ${tableRaw()}${where}`\n      )\n      const total = Number((countResult.rows[0] as Record<string, unknown>)?.['total'] ?? 0)\n\n      const dataResult = await db.execute(\n        sql`SELECT * FROM ${tableRaw()}${where} ORDER BY ${sortCol} ${sortDir} LIMIT ${per_page} OFFSET ${offset}`\n      )\n\n      const rows = dataResult.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n\n      const total_pages = Math.ceil(total / per_page)\n      return {\n        ok: true,\n        data: rows as T[],\n        meta: {\n          total,\n          page,\n          per_page,\n          total_pages,\n          has_next: page < total_pages,\n          has_prev: page > 1,\n        },\n      }\n    },\n\n    async findOne(id: string, include: string[] = []): Promise<T | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()} WHERE id = ${id} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows[0] as T\n    },\n\n    async findBySlug(slug: string, include: string[] = []): Promise<T | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()} WHERE slug = ${slug} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows[0] as T\n    },\n\n    async create(data: CreateInput<T>): Promise<T> {\n      const record: Record<string, unknown> = {\n        ...(data as Record<string, unknown>),\n        id: crypto.randomUUID(),\n        created_at: new Date(),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([, v]) => v !== undefined)\n      const colsSql = sql.join(entries.map(([k]) => sql.raw(quoteIdent(k))), sql`, `)\n      const valsSql = sql.join(entries.map(([, v]) => sql`${v}`), sql`, `)\n\n      const result = await db.execute(\n        sql`INSERT INTO ${tableRaw()} (${colsSql}) VALUES (${valsSql}) RETURNING *`\n      )\n      return result.rows[0] as T\n    },\n\n    async update(id: string, data: UpdateInput<T>): Promise<T | null> {\n      const record: Record<string, unknown> = {\n        ...(data as Record<string, unknown>),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([k, v]) => k !== 'id' && v !== undefined)\n      if (entries.length === 0) {\n        return this.findOne(id)\n      }\n\n      const setClauses = sql.join(\n        entries.map(([k, v]) => sql`${sql.raw(quoteIdent(k))} = ${v}`),\n        sql`, `\n      )\n\n      const result = await db.execute(\n        sql`UPDATE ${tableRaw()} SET ${setClauses} WHERE id = ${id} RETURNING *`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as T\n    },\n\n    async delete(id: string): Promise<void> {\n      await db.execute(sql`DELETE FROM ${tableRaw()} WHERE id = ${id}`)\n    },\n\n    async findAll(opts: FindAllOptions = {}): Promise<T[]> {\n      const { include = [], published_only } = opts\n      const conds = buildConditions(published_only, undefined, undefined)\n      const where = whereFragment(conds)\n\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()}${where} ORDER BY created_at ASC`\n      )\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows as T[]\n    },\n  }\n}\n","import crypto from 'node:crypto'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type {\n  MediaRepository,\n  MediaItem,\n  CreateMediaInput,\n  MediaFindManyOptions,\n  PaginatedResult,\n} from '@bobbykim/manguito-cms-core'\n\nexport function createMediaRepository(db: DrizzlePostgresInstance): MediaRepository {\n  const TABLE = sql.raw('\"media\"')\n\n  return {\n    async findMany(opts: MediaFindManyOptions = {}): Promise<PaginatedResult<MediaItem>> {\n      const { page = 1, per_page = 10, type, orphaned } = opts\n      const offset = (page - 1) * per_page\n\n      const conds = []\n      if (type) conds.push(sql`type = ${type}`)\n      if (orphaned) conds.push(sql`reference_count = 0`)\n\n      const where =\n        conds.length > 0 ? sql` WHERE ${sql.join(conds, sql` AND `)}` : sql``\n\n      const countResult = await db.execute(sql`SELECT COUNT(*) AS total FROM ${TABLE}${where}`)\n      const total = Number(\n        (countResult.rows[0] as Record<string, unknown>)?.['total'] ?? 0\n      )\n\n      const dataResult = await db.execute(\n        sql`SELECT * FROM ${TABLE}${where} ORDER BY created_at DESC LIMIT ${per_page} OFFSET ${offset}`\n      )\n\n      const total_pages = Math.ceil(total / per_page)\n      return {\n        ok: true,\n        data: dataResult.rows as MediaItem[],\n        meta: {\n          total,\n          page,\n          per_page,\n          total_pages,\n          has_next: page < total_pages,\n          has_prev: page > 1,\n        },\n      }\n    },\n\n    async findOne(id: string): Promise<MediaItem | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${TABLE} WHERE id = ${id} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as MediaItem\n    },\n\n    async create(data: CreateMediaInput): Promise<MediaItem> {\n      const record: Record<string, unknown> = {\n        ...data,\n        id: crypto.randomUUID(),\n        reference_count: 0,\n        created_at: new Date(),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([, v]) => v !== undefined)\n      const colsSql = sql.join(entries.map(([k]) => sql.raw(`\"${k}\"`)), sql`, `)\n      const valsSql = sql.join(entries.map(([, v]) => sql`${v}`), sql`, `)\n\n      const result = await db.execute(\n        sql`INSERT INTO ${TABLE} (${colsSql}) VALUES (${valsSql}) RETURNING *`\n      )\n      return result.rows[0] as MediaItem\n    },\n\n    async update(id: string, data: Partial<MediaItem>): Promise<MediaItem | null> {\n      const record: Record<string, unknown> = { ...data, updated_at: new Date() }\n      const entries = Object.entries(record).filter(\n        ([k, v]) => k !== 'id' && v !== undefined\n      )\n      if (entries.length === 0) return this.findOne(id)\n\n      const setClauses = sql.join(\n        entries.map(([k, v]) => sql`${sql.raw(`\"${k}\"`)} = ${v}`),\n        sql`, `\n      )\n\n      const result = await db.execute(\n        sql`UPDATE ${TABLE} SET ${setClauses} WHERE id = ${id} RETURNING *`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as MediaItem\n    },\n\n    async delete(id: string): Promise<void> {\n      await db.execute(sql`DELETE FROM ${TABLE} WHERE id = ${id}`)\n    },\n\n    async incrementReferenceCount(ids: string[]): Promise<void> {\n      if (ids.length === 0) return\n      const inList = sql.join(ids.map((id) => sql`${id}`), sql`, `)\n      await db.execute(\n        sql`UPDATE ${TABLE} SET reference_count = reference_count + 1, updated_at = NOW() WHERE id IN (${inList})`\n      )\n    },\n\n    async decrementReferenceCount(ids: string[]): Promise<void> {\n      if (ids.length === 0) return\n      const inList = sql.join(ids.map((id) => sql`${id}`), sql`, `)\n      await db.execute(\n        sql`UPDATE ${TABLE} SET reference_count = GREATEST(reference_count - 1, 0), updated_at = NOW() WHERE id IN (${inList})`\n      )\n    },\n  }\n}\n","import type { ServerAdapter, CorsConfig } from '@bobbykim/manguito-cms-core'\n\nexport type NodeServerOptions = {\n  port?: number\n  base_url?: string\n  cors?: Partial<CorsConfig>\n}\n\nexport function createServer(options: NodeServerOptions = {}): ServerAdapter {\n  const port = options.port ?? Number(process.env['PORT'] ?? 3000)\n  const _base_url = options.base_url ?? `http://localhost:${port}`\n\n  const cors: CorsConfig = {\n    origin: options.cors?.origin ?? (process.env['ALLOWED_ORIGIN'] ?? '*'),\n    methods: options.cors?.methods ?? [\n      'GET',\n      'POST',\n      'PUT',\n      'PATCH',\n      'DELETE',\n    ],\n    credentials: options.cors?.credentials ?? true,\n  }\n\n  return {\n    type: 'node',\n    cors,\n    getEntryPoint(): string {\n      return 'node'\n    },\n  }\n}\n","import type {\n  APIAdapter,\n  ResolvedRateLimitConfig,\n  GraphQLModuleConfig,\n  ResolvedGraphQLConfig,\n} from '@bobbykim/manguito-cms-core'\nimport { normalizePrefix } from './paths.js'\n\nexport { createCmsApp } from './app.js'\nexport type { CreateCmsAppOptions } from './app.js'\n\nexport { createServer } from './server/node.js'\nexport type { NodeServerOptions } from './server/node.js'\n\nexport { createProgrammaticResolver, validateResolverBindings, resolverKey } from './programmatic/resolve.js'\nexport type { ResolverMap, ProgrammaticResolver } from './programmatic/resolve.js'\n\n// ─── User-facing config factory ───────────────────────────────────────────────\n\nexport type APIAdapterOptions = {\n  prefix?: string\n  media?: {\n    max_file_size?: number\n  }\n  rateLimit?: ResolvedRateLimitConfig\n  graphql?: GraphQLModuleConfig\n}\n\nfunction resolveGraphQL(cfg: GraphQLModuleConfig): ResolvedGraphQLConfig {\n  const devDefault = process.env['NODE_ENV'] !== 'production'\n  return {\n    enabled: cfg.enabled ?? false,\n    maxDepth: cfg.maxDepth ?? 8,\n    maxComplexity: cfg.maxComplexity ?? 1000,\n    graphiql: cfg.graphiql ?? devDefault,\n    introspection: cfg.introspection ?? cfg.graphiql ?? devDefault,\n  }\n}\n\nexport function createAPIAdapter(options: APIAdapterOptions = {}): APIAdapter {\n  const prefix = normalizePrefix(options.prefix)\n  const media = options.media?.max_file_size !== undefined\n    ? { max_file_size: options.media.max_file_size }\n    : undefined\n\n  return {\n    prefix,\n    ...(media !== undefined && { media }),\n    ...(options.rateLimit !== undefined && { rateLimit: options.rateLimit }),\n    ...(options.graphql !== undefined && { graphql: resolveGraphQL(options.graphql) }),\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAMO,SAAS,gBAAgB,QAAoC;AAClE,MAAI,WAAW,OAAW,QAAO;AACjC,QAAM,YAAY,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AAC9D,QAAM,UAAU,UAAU,QAAQ,QAAQ,EAAE;AAC5C,SAAO,YAAY,KAAK,SAAS;AACnC;AAYO,SAAS,kBAAkB,QAA6B;AAC7D,SAAO;AAAA,IACL,YAAY,CAAC,aAAa,GAAG,MAAM,IAAI,QAAQ;AAAA,IAC/C,MAAM,CAAC,aAAa,GAAG,MAAM,IAAI,QAAQ;AAAA,IACzC,oBAAoB,CAAC,aAAa,GAAG,MAAM,aAAa,QAAQ;AAAA,IAChE,cAAc,CAAC,aAAa,GAAG,MAAM,aAAa,QAAQ;AAAA,IAC1D,iBAAiB,MAAM,GAAG,MAAM;AAAA,IAChC,WAAW,MAAM,GAAG,MAAM;AAAA,IAC1B,SAAS,MAAM,GAAG,MAAM;AAAA,EAC1B;AACF;;;ACjCA,SAAS,YAAY;AAErB,SAAS,OAAAA,YAAW;;;ACCb,SAAS,qBAAqB,YAA2C;AAC9E,QAAM,YAAY,MAAM,QAAQ,WAAW,MAAM,IAC7C,WAAW,SACX,CAAC,WAAW,MAAM;AACtB,QAAM,WAAW,UAAU,SAAS,GAAG;AACvC,QAAM,UAAU,WAAW,SAAS,KAAK,GAAG,KAAK;AAEjD,SAAO,eAAe,eAAe,GAAG,MAAM;AAC5C,QAAI,WAAW,YAAY,OAAO;AAChC,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,gBAAgB,EAAE,IAAI,OAAO,QAAQ;AAE3C,QAAI,UAAU;AAEZ,QAAE,IAAI,QAAQ,IAAI,+BAA+B,GAAG;AAAA,IACtD,WAAW,iBAAiB,UAAU,SAAS,aAAa,GAAG;AAC7D,QAAE,IAAI,QAAQ,IAAI,+BAA+B,aAAa;AAC9D,QAAE,IAAI,QAAQ,IAAI,QAAQ,QAAQ;AAClC,UAAI,WAAW,gBAAgB,MAAM;AACnC,UAAE,IAAI,QAAQ,IAAI,oCAAoC,MAAM;AAAA,MAC9D;AAAA,IACF;AAGA,MAAE,IAAI,QAAQ,IAAI,gCAAgC,OAAO;AACzD,MAAE,IAAI,QAAQ,IAAI,gCAAgC,6BAA6B;AAE/E,QAAI,EAAE,IAAI,WAAW,WAAW;AAC9B,aAAO,EAAE,YAAY,MAAM,GAAG;AAAA,IAChC;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACvBA,IAAM,eAAe;AAed,SAAS,gCACd,UAAkC,CAAC,GAChB;AACnB,QAAM,aAAa,CAAC,UAAU,GAAI,QAAQ,cAAc,CAAC,CAAE,EAAE,KAAK,GAAG;AAUrE,WAAS,SAAS,OAAyB;AACzC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,QAAQ;AAAA,MAC3B,cAAc,MAAM,SAAS;AAAA,MAC7B;AAAA,MACA,eAAe,MAAM,UAAU;AAAA,MAC/B,GAAI,MAAM,YAAY,CAAC,cAAc,MAAM,SAAS,EAAE,IAAI,CAAC;AAAA,MAC3D;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,QAAM,MAAM,SAAS;AAAA,IACnB,WAAW;AAAA,IACX,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAMD,QAAM,cAAc,SAAS;AAAA,IAC3B,WAAW,0BAA0B,YAAY;AAAA,IACjD,UAAU,0BAA0B,YAAY;AAAA,IAChD,YAAY,GAAG,UAAU,IAAI,YAAY;AAAA,IACzC,WAAW;AAAA,EACb,CAAC;AACD,QAAM,eAAe,QAAQ;AAE7B,SAAO,eAAe,gBAAgB,GAAG,MAAM;AAC7C,UAAM,KAAK;AACX,MAAE,IAAI,QAAQ,IAAI,0BAA0B,SAAS;AACrD,MAAE,IAAI,QAAQ,IAAI,mBAAmB,MAAM;AAC3C,MAAE,IAAI,QAAQ,IAAI,mBAAmB,aAAa;AAClD,UAAM,aAAa,iBAAiB,UAAa,EAAE,IAAI,SAAS;AAChE,MAAE,IAAI,QAAQ,IAAI,2BAA2B,aAAa,cAAc,GAAG;AAAA,EAC7E;AACF;;;ACjFA,IAAM,mBAAuD;AAAA,EAC3D,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,0BAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,cAAc;AAAA,EACd,eAAe;AAAA,EACf,eAAe;AAAA,EACf,yBAAyB;AAAA,EACzB,wBAAwB;AAAA,EACxB,sBAAsB;AAAA,EACtB,yBAAyB;AAAA,EACzB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,EACvB,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,cAAc;AAAA,EACd,gBAAgB;AAClB;AAIO,IAAM,eAA6B,CAAC,KAAK,MAAM;AACpD,UAAQ,MAAM,IAAI,SAAS,IAAI,OAAO;AAEtC,QAAM,SAAS;AACf,QAAM,OAAkB,OAAO,QAAQ;AACvC,QAAM,SAAS,iBAAiB,IAAI,KAAK;AAEzC,SAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,SAAS,IAAI,QAAQ,EAAE,GAAG,MAAsC;AAC5G;;;ACvCA,SAAS,iBAAiB;AAC1B,SAAS,WAAW;;;ACDpB,SAAS,MAAM,UAAU,iBAAiB;AAC1C,SAAS,WAAW,oBAAoB;AAOjC,IAAM,iBAAiB,IAAI,KAAK;AAChC,IAAM,oBAAoB,IAAI,KAAK,KAAK;AACxC,IAAM,8BAA8B,KAAK;AAIhD,eAAsB,UACpB,SACA,kBACiB;AACjB,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,QAAM,cAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;AAAA,EAC9C;AACA,SAAO,KAAK,aAAwC,MAAM;AAC5D;AAEA,eAAsB,YAAY,OAAoC;AACpE,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,MAAI;AACJ,MAAI;AACF,UAAO,MAAM,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC/C,QAAQ;AACN,UAAM,OAAO,OAAO,IAAI,MAAM,4BAA4B,GAAG;AAAA,MAC3D,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,QAAM,UAAU;AAChB,MAAI,QAAQ,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG;AACtD,UAAM,OAAO,OAAO,IAAI,MAAM,mBAAmB,GAAG;AAAA,MAClD,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAIO,SAAS,cACd,GACA,MACA,OACA,SACM;AACN,YAAU,GAAG,MAAM,OAAO;AAAA,IACxB,GAAG;AAAA,IACH,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,SAAS,gBAAgB,GAAY,MAAc,MAAqB;AAC7E,eAAa,GAAG,MAAM,SAAS,SAAY,EAAE,KAAK,IAAI,MAAS;AACjE;;;ADjDO,SAAS,qBAAqB,IAAgD;AACnF,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,QAAQ,UAAU,GAAG,YAAY;AACvC,QAAI,CAAC,OAAO;AACV,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,0BAA0B,EAAE;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,YAAY,KAAK;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA0B;AACxC,UAAI,SAAS,iBAAiB;AAC5B,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,oBAAoB,EAAE;AAAA,UAC5E;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB,uEAAuE,QAAQ,OAAO;AAAA,IACxF;AACA,UAAM,MAAM,OAAO,KAAK,CAAC;AAEzB,QAAI,CAAC,KAAK;AACR,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,kBAAkB,IAAI,eAAe;AAC/C,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,MAAE,IAAI,QAAQ;AAAA,MACZ,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,sBAAsB,IAAI;AAAA,IAC5B,CAAC;AAED,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAI,QAAQ,aAAa,MAAM,6BAA6B;AAC1D,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,UACE,SAAS,QAAQ;AAAA,UACjB,MAAM,QAAQ;AAAA,UACd,eAAe,QAAQ;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AACA,oBAAc,GAAG,cAAc,UAAU,CAAC,CAAC;AAAA,IAC7C;AAEA,UAAM,KAAK;AAAA,EACb;AACF;;;AElFO,IAAM,0BAA6C,OAAO,GAAG,SAAS;AAC3E,QAAM,OAAO,EAAE,IAAI,MAAM;AAEzB,MACE,MAAM,yBAAyB,QAC/B,EAAE,IAAI,SAAS,oCACf;AACA,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK;AACb;;;AChBO,SAAS,2BAA2B,UAAyB;AAClE,SAAO,SAAS,kBAAkB,YAA2C;AAC3E,WAAO,OAAO,GAAG,SAAS;AACxB,YAAM,OAAO,EAAE,IAAI,MAAM;AACzB,YAAM,OAAO,OAAO,SAAS,KAAK,IAAI,IAAI;AAE1C,UAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,SAAS,UAAU,GAAG;AACnD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,2BAA2B,SAAS,0BAA0B;AAAA,UAC/E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACF;;;ACpBO,SAAS,0BACd,UACA,aACA;AACA,SAAO,SAAS,mBAAsC;AACpD,WAAO,OAAO,GAAG,SAAS;AACxB,YAAM,OAAO,EAAE,IAAI,MAAM;AACzB,YAAM,aAAa,OAAO,SAAS,KAAK,IAAI,IAAI;AAEhD,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,yBAAyB;AAAA,UAC7E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,EAAE,IAAI;AACrB,YAAM,WAAW,EAAE,IAAI,MAAM,IAAI;AAEjC,UAAI,iBAAgC;AAEpC,UAAI,WAAW,UAAU,CAAC,UAAU;AAElC,YAAI,OAA2B,CAAC;AAChC,YAAI;AACF,iBAAO,MAAM,EAAE,IAAI,KAAyB;AAAA,QAC9C,QAAQ;AAAA,QAER;AACA,yBAAiB,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AAC7D,YAAI,CAAC,gBAAgB;AACnB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC;AAAA,YACnF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF,WAAW,WAAW,WAAW,UAAU;AAEzC,YAAI;AACJ,YAAI;AACF,gBAAM,OAAO,MAAM,EAAE,IAAI,KAAyB;AAClD,cAAI,OAAO,KAAK,SAAS,SAAU,YAAW,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,yBAAiB,YAAa,MAAM,YAAY,QAAQ;AAAA,MAC1D,WAAW,UAAU;AAEnB,yBAAiB,MAAM,YAAY,QAAQ;AAAA,MAC7C;AAGA,UAAI,mBAAmB,MAAM;AAC3B,eAAO,KAAK;AAAA,MACd;AAEA,YAAM,aAAa,SAAS,cAAc;AAC1C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,SAAS,cAAc,iBAAiB;AAAA,UAClF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI,WAAW,mBAAmB,WAAW,iBAAiB;AAC5D,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,yBAAyB;AAAA,UAC7E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACF;;;ACtFA,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAQpB,SAAS,0BAA0B,SAA8C;AACtF,QAAM,EAAE,UAAU,UAAU,UAAU,IAAI;AAC1C,QAAM,aAAa,oBAAI,IAAsB;AAC7C,QAAM,iBAA2B,CAAC;AAElC,SAAO,eAAe,oBAAoB,GAAG,MAAM;AACjD,UAAM,YAAY,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,GAC5C,MAAM,GAAG,EACV,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,KAAK,CAAC,MAAM,EAAE,WAAW,aAAa,CAAC;AAE1C,QAAI,WAAW;AACb,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,MAAM;AAGrB,QAAI,KAAK;AACT,WAAO,KAAK,eAAe,UAAU,eAAe,EAAE,IAAK,OAAQ;AACnE,mBAAe,OAAO,GAAG,EAAE;AAG3B,UAAM,YAAY,EAAE,IAAI,OAAO,iBAAiB;AAChD,UAAM,KAAK,YAAY,UAAU,MAAM,GAAG,EAAE,CAAC,EAAG,KAAK,IAAK,EAAE,KAAK,UAAU,QAAQ,iBAAiB;AAGpG,UAAM,UAAU,WAAW,IAAI,EAAE,KAAK,CAAC;AACvC,QAAI,KAAK;AACT,WAAO,KAAK,QAAQ,UAAU,QAAQ,EAAE,IAAK,OAAQ;AACrD,YAAQ,OAAO,GAAG,EAAE;AACpB,eAAW,IAAI,IAAI,OAAO;AAE1B,UAAM,uBACJ,eAAe,SAAS,IACpB,KAAK,MAAM,eAAe,CAAC,IAAK,WAAW,OAAO,GAAI,IACtD;AACN,UAAM,mBACJ,QAAQ,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAK,WAAW,OAAO,GAAI,IAAI;AAE1E,QAAI,eAAe,UAAU,WAAW;AACtC,YAAM,aAAa,KAAK,IAAI,sBAAsB,CAAC;AACnD,YAAM,QAAQ,KAAK,OAAO,MAAM,aAAa,OAAQ,GAAI;AACzD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC,UAAU,YAAY,EAAE;AAAA,QACtH;AAAA,QACA;AAAA,UACE,eAAe,OAAO,UAAU;AAAA,UAChC,qBAAqB,OAAO,SAAS;AAAA,UACrC,yBAAyB;AAAA,UACzB,qBAAqB,OAAO,KAAK;AAAA,QACnC;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU,UAAU;AAC9B,YAAM,aAAa,KAAK,IAAI,kBAAkB,CAAC;AAC/C,YAAM,QAAQ,KAAK,OAAO,MAAM,aAAa,OAAQ,GAAI;AACzD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC,UAAU,YAAY,EAAE;AAAA,QACtH;AAAA,QACA;AAAA,UACE,eAAe,OAAO,UAAU;AAAA,UAChC,qBAAqB,OAAO,QAAQ;AAAA,UACpC,yBAAyB;AAAA,UACzB,qBAAqB,OAAO,KAAK;AAAA,QACnC;AAAA,MACF;AAAA,IACF;AAEA,mBAAe,KAAK,GAAG;AACvB,YAAQ,KAAK,GAAG;AAEhB,WAAO,KAAK;AAAA,EACd;AACF;AAQO,SAAS,qBACd,WAC+B;AAC/B,QAAM,UAAU,WAAW;AAC3B,MAAI,YAAY,KAAK;AACnB,WAAO;AAAA,EACT;AACA,SAAO,0BAA0B;AAAA,IAC/B,UAAU,SAAS,YAAY;AAAA,IAC/B,UAAU,SAAS,YAAY;AAAA,IAC/B,WAAW,SAAS,aAAa;AAAA,EACnC,CAAC;AACH;;;AC3GA,IAAM,eAAe,CAAC,SAAS,WAAW,UAAU,UAAU,QAAQ;AAEtE,SAAS,cAAc,OAA2B;AAChD,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAChD,aAAW,cAAc,cAAc;AACrC,QAAI,CAAC,QAAQ,IAAI,UAAU,GAAG;AAC5B,YAAM,IAAI;AAAA,QACR,qEAAgE,UAAU;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,oBAAI,IAAoB;AAC3C,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,WAAW,IAAI,KAAK,eAAe;AACpD,QAAI,aAAa,QAAW;AAC1B,YAAM,IAAI;AAAA,QACR,0EAAqE,KAAK,eAAe,cAAc,QAAQ,UAAU,KAAK,IAAI;AAAA,MACpI;AAAA,IACF;AACA,eAAW,IAAI,KAAK,iBAAiB,KAAK,IAAI;AAAA,EAChD;AAEA,QAAM,YAAY,oBAAI,IAAY;AAClC,aAAW,QAAQ,OAAO;AACxB,QAAI,UAAU,IAAI,KAAK,IAAI,GAAG;AAC5B,YAAM,IAAI;AAAA,QACR,qEAAgE,KAAK,IAAI;AAAA,MAC3E;AAAA,IACF;AACA,cAAU,IAAI,KAAK,IAAI;AAAA,EACzB;AACF;AAEO,SAAS,mBAAmB,OAAoC;AACrE,gBAAc,KAAK;AACnB,SAAO,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD;;;ACrCA,IAAM,qBAAqB;AAC3B,IAAM,mBAAmB;AAElB,SAAS,YAAY,QAAgB,OAAuB;AACjE,SAAO,GAAG,MAAM,KAAK,KAAK;AAC5B;AAOO,SAAS,yBACd,UACA,WACM;AACN,QAAM,WAAW,oBAAI,IAAY;AACjC,QAAM,UAAyD;AAAA,IAC7D,GAAI,OAAO,OAAO,SAAS,aAAa;AAAA,IACxC,GAAI,OAAO,OAAO,SAAS,cAAc;AAAA,EAC3C;AACA,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,UAAI,MAAM,eAAe,gBAAgB;AACvC,iBAAS,IAAI,YAAY,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,SAAU,KAAI,CAAC,UAAU,IAAI,GAAG,EAAG,SAAQ,KAAK,GAAG;AAErE,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,UAAU,KAAK,EAAG,KAAI,CAAC,SAAS,IAAI,GAAG,EAAG,SAAQ,KAAK,GAAG;AAE5E,MAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,EAAG;AAElD,QAAM,QAAkB,CAAC,0DAAqD;AAC9E,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,6DAA6D;AAC5E,eAAW,KAAK,QAAS,OAAM,KAAK,SAAS,CAAC,iDAAiD;AAAA,EACjG;AACA,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,8DAA8D;AAC7E,eAAW,KAAK,QAAS,OAAM,KAAK,SAAS,CAAC,EAAE;AAAA,EAClD;AACA,QAAM,KAAK,IAAI,UAAU;AACzB,QAAM,IAAI,MAAM,MAAM,KAAK,IAAI,CAAC;AAClC;AAIA,SAAS,aAAa,KAA+C;AACnE,SAAO;AAAA,IACL,KAAK,CAAC,SAAS,IAAI,IAAI;AAAA,IACvB,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,YAAe,GAAe,IAAwB;AACnE,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,GAAG,WAAW;AAChD,YAAQ,WAAW,MAAM,OAAO,IAAI,MAAM,kBAAkB,CAAC,GAAG,EAAE;AAAA,EACpE,CAAC;AACD,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,GAAG,OAAO,CAAC;AAAA,EACxC,UAAE;AACA,iBAAa,KAAM;AAAA,EACrB;AACF;AAGA,eAAe,OACb,KACA,KACA,SAC8C;AAC9C,QAAM,WAAW,IAAI,YAAY;AACjC,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,QAAQ,QAAQ,IAAI,QAAQ,aAAa,GAAG,CAAC,CAAC;AAAA,MAC9C,IAAI,WAAW;AAAA,IACjB;AACA,WAAO,EAAE,OAAO,WAAW,SAAY,OAAO,QAAQ,QAAQ,MAAM;AAAA,EACtE,SAAS,KAAK;AACZ;AAAA,MACE,6BAAwB,YAAY,IAAI,QAAQ,IAAI,KAAK,CAAC,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACxH;AACA,WAAO,EAAE,OAAO,UAAU,QAAQ,KAAK;AAAA,EACzC;AACF;AAGA,eAAe,QAAW,OAAY,OAAe,IAA+C;AAClG,MAAI,IAAI;AACR,iBAAe,SAAwB;AACrC,WAAO,IAAI,MAAM,QAAQ;AACvB,YAAM,MAAM;AACZ,YAAM,GAAG,MAAM,GAAG,CAAE;AAAA,IACtB;AAAA,EACF;AACA,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,OAAO,MAAM,MAAM,EAAE,GAAG,MAAM;AAC5E,QAAM,QAAQ,IAAI,OAAO;AAC3B;AAEO,SAAS,2BACd,WACA,SACA;AACA,QAAM,UACJ,SAAS,YACR,CAAC,YAAoB;AACpB,YAAQ,OAAO,MAAM,UAAU,IAAI;AAAA,EACrC;AAGF,QAAM,WAAW,oBAAI,IAA2C;AAChE,aAAW,OAAO,UAAU,OAAO,GAAG;AACpC,UAAM,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,CAAC;AACzC,QAAI,KAAK,GAAG;AACZ,aAAS,IAAI,IAAI,QAAQ,GAAG;AAAA,EAC9B;AAGA,QAAM,QAAQ,oBAAI,IAAiD;AAEnE,iBAAe,aACb,KACA,KACkB;AAClB,UAAM,SAAS,IAAI,IAAI,MAAM,SAAY,OAAO,IAAI,IAAI,CAAC,IAAI;AAC7D,QAAI,IAAI,SAAS,QAAQ;AACvB,YAAM,MAAM,GAAG,YAAY,IAAI,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM;AAC5D,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,MAAM,MAAM,IAAI,GAAG;AACzB,UAAI,OAAO,IAAI,UAAU,IAAK,QAAO,IAAI;AACzC,YAAM,EAAE,OAAAC,QAAO,OAAO,IAAI,MAAM,OAAO,KAAK,KAAK,OAAO;AACxD,UAAI,CAAC,OAAQ,OAAM,IAAI,KAAK,EAAE,OAAAA,QAAO,SAAS,MAAM,IAAI,MAAM,MAAM,IAAK,CAAC;AAC1E,aAAOA;AAAA,IACT;AACA,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,KAAK,KAAK,OAAO;AAChD,WAAO;AAAA,EACT;AAEA,iBAAe,YACb,QACA,KACkC;AAClC,UAAM,OAAO,SAAS,IAAI,MAAM;AAChC,QAAI,CAAC,QAAQ,KAAK,WAAW,EAAG,QAAO,EAAE,GAAG,IAAI;AAChD,UAAM,MAA+B,EAAE,GAAG,IAAI;AAC9C,UAAM,QAAQ;AAAA,MACZ,KAAK,IAAI,OAAO,QAAQ;AACtB,YAAI,IAAI,KAAK,IAAI,MAAM,aAAa,KAAK,GAAG;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,YACb,QACA,MACoC;AACpC,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AAC1E,QAAI,KAAK,WAAW,EAAG,QAAO,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AACxD,UAAM,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AACtC,UAAM,QAAuE,CAAC;AAC9E,aAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,iBAAW,OAAO,KAAM,OAAM,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;AAAA,IACzD;AACA,UAAM,QAAQ,OAAO,kBAAkB,OAAO,EAAE,UAAU,IAAI,MAAM;AAClE,UAAI,QAAQ,EAAG,IAAI,KAAK,IAAI,MAAM,aAAa,KAAK,KAAK,QAAQ,CAAE;AAAA,IACrE,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,UAAU,QAAyB;AAC1C,WAAO,SAAS,IAAI,MAAM;AAAA,EAC5B;AAEA,SAAO,EAAE,aAAa,aAAa,UAAU;AAC/C;;;AC1LO,IAAM,kBAAkB,oBAAI,IAAY,CAAC,SAAS,cAAc,YAAY,CAAC;AAG7E,IAAM,uBAAuB,oBAAI,IAAI;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBACd,SACA,YAC8D;AAC9D,QAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,QAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5D,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,KAAK,WAAW,IAAK,QAAO,EAAE,IAAI,MAAM;AACtF,SAAO,EAAE,IAAI,MAAM,MAAM,SAAS;AACpC;AAEO,SAAS,aAAa,cAA4C;AACvE,MAAI,CAAC,aAAc,QAAO,CAAC;AAC3B,SAAO,aACJ,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACnB;AAEO,SAAS,aACd,KACA,aACA,WAC0F;AAC1F,QAAM,EAAE,aAAa,IAAI,IAAI,IAAI,GAAG;AACpC,QAAM,UAAuC,CAAC;AAK9C,QAAM,QAAQ,CAAC,UAA0B,YAAY,KAAK,KAAK;AAE/D,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;AACjD,UAAM,cAAc,uBAAuB,KAAK,GAAG;AACnD,UAAM,UAAU,mCAAmC,KAAK,GAAG;AAE3D,QAAI,aAAa;AACf,YAAM,QAAQ,YAAY,CAAC;AAC3B,UAAI,CAAC,YAAY,IAAI,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,cAAc,MAAM;AACrE,YAAM,aAAa,MAAM,KAAK;AAC9B,YAAM,WAAW,QAAQ,UAAU;AACnC,UAAI,aAAa,QAAW;AAC1B,gBAAQ,UAAU,IAAI,MAAM,QAAQ,QAAQ,IACxC,CAAC,GAAG,UAAU,KAAK,IACnB,CAAC,UAAuC,KAAK;AAAA,MACnD,OAAO;AACL,gBAAQ,UAAU,IAAI;AAAA,MACxB;AAAA,IACF,WAAW,SAAS;AAClB,YAAM,QAAQ,QAAQ,CAAC;AACvB,YAAM,WAAW,QAAQ,CAAC;AAC1B,UAAI,CAAC,YAAY,IAAI,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,cAAc,MAAM;AACrE,UAAI,CAAC,CAAC,MAAM,OAAO,MAAM,KAAK,EAAE,SAAS,QAAQ,EAAG;AACpD,YAAM,aAAa,MAAM,KAAK;AAC9B,YAAM,WAAY,QAAQ,UAAU,KAAoC,CAAC;AACzE,cAAQ,UAAU,IAAI,EAAE,GAAI,UAA6B,CAAC,QAAQ,GAAG,MAAM;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,QAAQ;AAC7B;;;AC9CA,SAAS,YAAY,MAAwB;AAC3C,SAAQ,KAAiC,WAAW,MAAM;AAC5D;AAEO,SAAS,4BACd,KACA,UACA,OACA,cACA,OACA,eACA,UACM;AAIN,WAAS,kBAAkB,MAAc,SAAwB;AAC/D,QAAI,eAAe;AACjB,UAAI,IAAI,MAAM,eAAe,OAAO;AAAA,IACtC,OAAO;AACL,UAAI,IAAI,MAAM,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,oBAAkB,MAAM,WAAW,SAAS,GAAG,CAAC,MAAM;AACpD,UAAM,OAAO,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC9D,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,IACf,EAAE;AACF,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAED,oBAAkB,MAAM,WAAW,UAAU,GAAG,CAAC,MAAM;AACrD,UAAM,OAAO,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC/D,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,IACZ,EAAE;AACF,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAID,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,SAAS,aAAa,GAAG;AAC5E,UAAM,WAAW,YAAY;AAC7B,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,qBAAqB,IAAI;AAAA,MAC7B,YAAY,OACT,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAIA,UAAM,uBAAuB,oBAAI,IAAY;AAAA,MAC3C,GAAG,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,eAAe,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACtF,GAAG,YAAY,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD,CAAC;AAED,QAAI,YAAY,UAAU;AACxB,UAAI,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO,MAAM;AAC/C,cAAM,SAAS,MAAM,KAAK,SAAS,EAAE,gBAAgB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AACjF,YAAI,OAAO,KAAK,WAAW,GAAG;AAC5B,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAEA,YAAI,OAAO,aAAa,QAAQ,EAAG,SAAS,OAAO,KAAK,CAAC,CAA4B;AACrF,YAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC,CAAC;AAAA,IACH,OAAO;AACL,wBAAkB,MAAM,WAAW,QAAQ,GAAG,OAAO,MAAM;AAEzD,cAAM,YAAY,aAAa,QAAQ;AACvC,cAAM,aAAa,gBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,YAAI,CAAC,WAAW,IAAI;AAClB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,SAAS,EAAE,IAAI,MAAM,SAAS,KAAK;AACzC,YAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAChC,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,IAAI,MAAM;AAAA,cACrB;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,YAAY,EAAE,IAAI,MAAM,YAAY,KAAK;AAC/C,YAAI,cAAc,SAAS,cAAc,QAAQ;AAC/C,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,gBAAgB,aAAa,EAAE,IAAI,KAAK,sBAAsB,UAAU,SAAS;AACvF,YAAI,CAAC,cAAc,IAAI;AACrB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,iBAAiB,cAAc,YAAY;AAAA,cACtD;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,UAAU,aAAa,EAAE,IAAI,MAAM,SAAS,CAAC;AACnD,mBAAW,SAAS,SAAS;AAC3B,cAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,IAAI,KAAK;AAAA,gBACpB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,KAAK,SAAS;AAAA,UACjC,gBAAgB;AAAA,UAChB,MAAM,WAAW;AAAA,UACjB,UAAU,WAAW;AAAA,UACrB,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,SAAS,cAAc;AAAA,UACvB;AAAA,QACF,CAAC;AAGD,cAAM,UAAW,OAAO,KAAmC;AAAA,UAAI,CAAC,QAC9D,UAAU,SAAS,GAAG;AAAA,QACxB;AACA,cAAM,OAAO,UAAU,UAAU,QAAQ,IACrC,MAAM,SAAS,YAAY,UAAU,OAAO,IAC5C;AACJ,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC,CAAC;AAED,UAAI,IAAI,MAAM,KAAK,QAAQ,GAAG,OAAO,MAAM;AAIzC,cAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAE/B,cAAM,UAAU,aAAa,EAAE,IAAI,MAAM,SAAS,CAAC;AACnD,mBAAW,SAAS,SAAS;AAC3B,cAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,IAAI,KAAK;AAAA,gBACpB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,OAAO,MAAM,KAAK,WAAW,MAAM,OAAO;AAEhD,YAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG;AAC/B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,MAAM,kBAAkB,SAAS,4BAA4B,IAAI,IAAI;AAAA,YAChF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAGA,YAAI,OAAO,aAAa,QAAQ,EAAG,SAAS,IAA+B;AAC3E,YAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,aAAW,CAAC,QAAQ,KAAK,OAAO,QAAQ,SAAS,cAAc,GAAG;AAChE,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,sBAAkB,MAAM,mBAAmB,QAAQ,GAAG,OAAO,MAAM;AACjE,YAAM,aAAa,gBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,UAAI,CAAC,WAAW,IAAI;AAClB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,KAAK,SAAS;AAAA,QACjC,gBAAgB;AAAA,QAChB,MAAM,WAAW;AAAA,QACjB,UAAU,WAAW;AAAA,MACvB,CAAC;AAGD,YAAM,YAAY,aAAa,QAAQ;AACvC,YAAM,UAAW,OAAO,KAAmC;AAAA,QAAI,CAAC,QAC9D,UAAU,SAAS,GAAG;AAAA,MACxB;AACA,YAAM,OAAO,UAAU,UAAU,QAAQ,IACrC,MAAM,SAAS,YAAY,UAAU,OAAO,IAC5C;AACJ,aAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,IACnC,CAAC;AAED,QAAI,IAAI,MAAM,aAAa,QAAQ,GAAG,OAAO,MAAM;AAEjD,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,UAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG;AAC/B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B;AAAA,UACjE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAGA,UAAI,OAAO,aAAa,QAAQ,EAAG,SAAS,IAA+B;AAC3E,UAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IAClC,CAAC;AAAA,EACH;AACF;;;ACzSA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,SAAS,SAAS,MAAM,CAAC;AAE5D,SAASC,iBACP,SACA,YAC8D;AAC9D,QAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,QAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5D,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,KAAK,WAAW,IAAK,QAAO,EAAE,IAAI,MAAM;AACtF,SAAO,EAAE,IAAI,MAAM,MAAM,SAAS;AACpC;AAEO,SAAS,0BACd,KACA,WACA,OACA,eACM;AACN,QAAM,mBAA4B,OAAO,MAAM;AAC7C,UAAM,aAAaA,iBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,QAAI,CAAC,WAAW,IAAI;AAClB,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,EAAE,IAAI,MAAM,MAAM;AACpC,QAAI,cAAc,UAAa,CAAC,kBAAkB,IAAI,SAAS,GAAG;AAChE,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAiD;AAAA,MACrD,MAAM,WAAW;AAAA,MACjB,UAAU,WAAW;AAAA,IACvB;AACA,QAAI,cAAc,QAAW;AAC3B,WAAK,OAAO;AAAA,IACd;AAEA,UAAM,SAAS,MAAM,UAAU,SAAS,IAAI;AAC5C,WAAO,EAAE,KAAK,MAAM;AAAA,EACtB;AAEA,MAAI,eAAe;AACjB,QAAI,IAAI,MAAM,gBAAgB,GAAG,eAAe,gBAAgB;AAAA,EAClE,OAAO;AACL,QAAI,IAAI,MAAM,gBAAgB,GAAG,gBAAgB;AAAA,EACnD;AAEA,MAAI,IAAI,MAAM,UAAU,GAAG,OAAO,MAAM;AAItC,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,UAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,QAAI,CAAC,MAAM;AACT,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACxC,CAAC;AACH;;;ACvFA,SAAS,OAAAC,YAAW;;;ACqBpB,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ;AAC7D;AASO,SAAS,mBACd,aACA,QACA,OACY;AACZ,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAoB,CAAC;AAE3B,aAAW,KAAK,aAAa;AAE3B,UAAM,MAAM,EAAE,WAAW;AACzB,QAAI,QAAQ,UAAa,QAAQ,GAAI;AAIrC,QAAI,UAAU,QAAQ,EAAE,OAAO,OAAQ;AAEvC,UAAM,QAAQ,SAAS,eAAe,OAAO,GAAG,CAAC,IAAI;AACrD,UAAM,QAAQ,QAAQ,eAAe,MAAM,GAAG,CAAC,IAAI;AACnD,QAAI,UAAU,MAAO;AACrB,QAAI,MAAO,SAAQ,KAAK,KAAK;AAC7B,QAAI,MAAO,OAAM,KAAK,KAAK;AAAA,EAC7B;AAEA,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAGO,SAAS,oBAAoB,QAAkC;AACpE,SAAO;AAAA,IACL,OAAO,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK;AAAA,IACpC,SAAS,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO;AAAA,EAC1C;AACF;AAMA,eAAsB,yBACpB,OACA,WACe;AACf,QAAM,QAAQ,IAAI,IAAI,MAAM,KAAK;AACjC,QAAM,UAAU,IAAI,IAAI,MAAM,OAAO;AAErC,QAAM,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;AACzD,QAAM,YAAY,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;AAE5D,MAAI,OAAO,SAAS,EAAG,OAAM,UAAU,wBAAwB,MAAM;AACrE,MAAI,UAAU,SAAS,EAAG,OAAM,UAAU,wBAAwB,SAAS;AAC7E;;;ADjDA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,qBAAqB,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,sBAAsB,IAAI,EAAE;AAClF,SAAO,IAAI,IAAI;AACjB;AAMA,eAAe,kBACb,IACA,UACA,OACA,UACA,WACoC;AACpC,QAAM,SAAS,MAAM,GAAG;AAAA,IACtBC,qBAAoBA,KAAI,IAAI,WAAW,MAAM,GAAG,UAAU,CAAC,CAAC,sBAAsB,QAAQ,uBAAuB,SAAS;AAAA,EAC5H;AACA,QAAM,OAAO,OAAO;AAEpB,aAAW,MAAM,MAAM,QAAQ;AAC7B,QAAI,GAAG,cAAc,KAAM;AAC3B,UAAM,OAAO,GAAG;AAChB,QAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,UAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,QAAI,CAAC,MAAO;AACZ,eAAW,OAAO,MAAM;AACtB,UAAI,GAAG,IAAI,IAAI,MAAM,kBAAkB,IAAI,UAAU,OAAO,IAAI,IAAI,GAAa,GAAG,IAAI;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,iBAAiB,IAA6B,YAA4C;AACvG,QAAM,IAAI,MAAM,GAAG;AAAA,IACjBA,8CAA6C,UAAU,cAAc,UAAU;AAAA,EACjF;AACA,SAAQ,EAAE,KAAK,CAAC,GAAkC,MAAM;AAC1D;AAIA,IAAM,eAAe;AAIrB,SAAS,QAAQ,OAAyB;AACxC,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,GAAI,QAAO;AAC7D,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO;AACvD,SAAO;AACT;AAEA,SAAS,oBACP,QACA,MACsC;AACtC,SAAO,OACJ,OAAO,CAAC,MAAM,EAAE,YAAY,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,EACjD,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,GAAG,EAAE,KAAK,eAAe,EAAE;AACtE;AAwBA,SAAS,eACP,KACA,kBACA,oBACA,WACiB;AACjB,QAAM,eAAe,IAAI,IAAI,GAAG,EAAE;AAElC,QAAM,aAAa;AAAA,IACjB,aAAa,IAAI,MAAM,KAAK;AAAA,IAC5B,aAAa,IAAI,UAAU,KAAK;AAAA,EAClC;AACA,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,IAAI,SAAS,KAAK;AAC9C,MAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAChC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS,IAAI,MAAM;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,YAAY,aAAa,IAAI,YAAY,KAAK;AACpD,MAAI,cAAc,SAAS,cAAc,QAAQ;AAC/C,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,EAAE,MAAM,sBAAsB,SAAS,qCAAqC;AAAA,MACtF,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,gBAAgB,aAAa,KAAK,kBAAkB,SAAS;AACnE,MAAI,CAAC,cAAc,IAAI;AACrB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS,iBAAiB,cAAc,YAAY;AAAA,MACtD;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,aAAa,IAAI,SAAS,KAAK,MAAS;AACrE,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU,EAAE,MAAM,yBAAyB,SAAS,IAAI,KAAK,kCAAkC;AAAA,QAC/F,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAEvD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,cAAc;AAAA,IACvB;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,2BACd,KACA,UACA,OACA,cACA,WACA,mBACA,IACM;AAGN,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,SAAS,aAAa,GAAG;AAC5E,UAAM,WAAW,WAAW,QAAQ;AACpC,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,mBAAmB,oBAAI,IAAY;AAAA,MACvC,GAAG,YAAY,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACvC,GAAG,YAAY,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD,CAAC;AAED,UAAM,qBAAqB,IAAI;AAAA,MAC7B,YAAY,OACT,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAEA,UAAM,YAAY,aAAa,QAAQ;AAEvC,UAAM,iBAAiB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ;AAElE,UAAM,cAAc,YAAY,OAAO;AAAA,MACrC,CAAC,MAAM,EAAE,eAAe,WAAW,EAAE,eAAe,WAAW,EAAE,eAAe;AAAA,IAClF;AAEA,UAAM,qBAAqB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAKhF,UAAM,oBAAoB;AAAA,MACxB,GAAG,YAAY,OACZ,OAAO,CAAC,MAAM,EAAE,eAAe,gBAAgB,EAAE,cAAc,IAAI,EACnE,IAAI,CAAC,MAAM,EAAE,UAAW,WAAW;AAAA,MACtC,GAAI,YAAY,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC;AAAA,IAC7E;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,SAAS,eAAe,EAAE,IAAI,KAAK,kBAAkB,oBAAoB,UAAU,SAAS;AAClG,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,GAAG,OAAO,MAAM;AAAA,QACpE;AAEA,cAAM,iBAAiB,EAAE,IAAI,MAAM,WAAW;AAC9C,cAAM,eAA4C,CAAC;AACnD,YAAI,mBAAmB,QAAS,cAAa,WAAW,IAAI;AAE5D,cAAM,WAAgD;AAAA,UACpD,MAAM,OAAO,WAAW;AAAA,UACxB,UAAU,OAAO,WAAW;AAAA,UAC5B,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB,SAAS,EAAE,GAAG,OAAO,SAAS,GAAG,aAAa;AAAA,UAC9C,SAAS,OAAO;AAAA,QAClB;AACA,YAAI,mBAAmB,OAAQ,UAAS,iBAAiB;AACzD,YAAI,OAAO,WAAW,MAAM,kBAAkB,SAAS,GAAG;AACxD,mBAAS,SAAS,EAAE,MAAM,OAAO,QAAQ,SAAS,kBAAkB;AAAA,QACtE;AAEA,cAAM,SAAS,MAAM,KAAK,SAAS,QAAQ;AAG3C,cAAM,OAAO,OAAO,KAAK,IAAI,CAAC,QAAQ,UAAU,SAAS,GAA8B,CAAC;AAExF,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAQA,YAAI,IAAI;AACN,gBAAM,MAAM;AACZ,qBAAW,KAAK,YAAY,QAAQ;AAClC,gBAAI,EAAE,cAAc,MAAM;AACxB,oBAAM,OAAO,EAAE;AACf,kBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,oBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,kBAAI,CAAC,MAAO;AACZ,kBAAI,EAAE,IAAI,IAAI,MAAM,kBAAkB,IAAI,UAAU,OAAO,IAAI,EAAE,IAAI;AAAA,YACvE,WAAW,EAAE,UAAU,UAAU;AAC/B,oBAAM,IAAI,EAAE,UAAU;AACtB,oBAAM,IAAI,MAAM,GAAG;AAAA,gBACjBA,cAAaA,KAAI,IAAI,WAAW,EAAE,YAAY,CAAC,CAAC,SAASA,KAAI,IAAI,WAAW,EAAE,UAAU,CAAC,CAAC,UAAUA,KAAI,IAAI,WAAW,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE;AAAA,cAChJ;AACA,kBAAI,EAAE,IAAI,IAAI,EAAE,KAAK;AAAA,gBACnB,CAACC,SAASA,KAAgC,EAAE,YAAY;AAAA,cAC1D;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAKA,cAAM,OAAO,UAAU,SAAS,IAA+B;AAE/D,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,YAAI,YAAY,UAAU;AACxB,gBAAM,WAAW,MAAM,KAAK,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;AAC7D,cAAI,SAAS,KAAK,QAAQ,GAAG;AAC3B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,yBAAyB,YAAY,KAAK;AAAA,gBACrD;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF,OAAO;AACL,gBAAM,OAAO,KAAK,MAAM;AACxB,cAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAAI;AAClD,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,gBAC1D;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,cAAI,CAAC,aAAa,KAAK,IAAI,GAAG;AAC5B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SACE;AAAA,gBACJ;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,gBAAM,WAAW,MAAM,KAAK,WAAW,IAAI;AAC3C,cAAI,UAAU;AACZ,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,SAAS,IAAI;AAAA,gBACxB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO,aAAa,GAAG,IAAI;AAAA,MAC7B;AAAA,IACF;AAMA,UAAM,eAAe,OAAO,GAAY,SAAkC;AAGtE,YAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,YAAM,cAAc,oBAAoB,gBAAgB,IAAI;AAC5D,UAAI,YAAY,SAAS,GAAG;AAC1B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,cACT,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,cAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,QAAC,CAAC;AAC7E,YAAI,YAAa,QAAO;AAAA,MAC1B;AAGA,YAAM,kBAAkB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAC7E,YAAM,iBAAiB,YAAY,OAAO;AAAA,QACxC,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,UAAU,aAAa;AAAA,MAC1D;AAIA,YAAM,qBAAqB,YAAY,OAAO,OAAO,cAAc;AACnE,YAAM,aAAsC;AAAA,QAC1C,WAAW,KAAK,WAAW,KAAK;AAAA,MAClC;AACA,UAAI,YAAY,UAAU;AACxB,mBAAW,MAAM,IAAI;AAAA,MACvB,OAAO;AACL,mBAAW,MAAM,IAAI,KAAK,MAAM;AAAA,MAClC;AACA,iBAAW,KAAK,oBAAoB;AAClC,cAAM,MAAM,EAAE,UAAU;AACxB,YAAI,EAAE,OAAO,aAAc;AAC3B,mBAAW,GAAG,IAAI,YAAY,GAAG;AAAA,MACnC;AAGA,UAAI,IAAI;AACN,cAAM,aAAa,MAAM,iBAAiB,IAAI,YAAY,iBAAiB;AAC3E,YAAI,CAAC,YAAY;AACf,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,cAAc,YAAY,iBAAiB;AAAA,cACtD;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,mBAAW,cAAc,IAAI;AAAA,MAC/B;AAEA,YAAM,OAAO,MAAM,KAAK,OAAO,UAA+C;AAC9E,YAAM,SAAU,KAAiC,IAAI;AAGrD,YAAM,cAA4B,CAAC,mBAAmB,aAAa,MAAM,WAAW,CAAC;AAGrF,UAAI,IAAI;AACN,mBAAW,KAAK,iBAAiB;AAC/B,gBAAM,OAAO,EAAE;AACf,cAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,gBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,cAAI,CAAC,MAAO;AACZ,gBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,sBAAY,KAAK,MAAM,sBAAsB,IAAI,QAAQ,YAAY,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,QACrH;AACA,mBAAW,KAAK,gBAAgB;AAC9B,gBAAM,WAAW,EAAE,UAAW;AAC9B,gBAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IACxC,KAAK,EAAE,IAAI,EAAgB,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAC5E,CAAC;AACL,gBAAM,qBAAqB,IAAI,QAAQ,UAAU,UAAU;AAAA,QAC7D;AAAA,MACF;AAEA,YAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,YAAM,OAAO,UAAU,SAAS,IAA+B;AAE/D,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,GAAG;AAAA,IACzC;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,cAAM,WAAW,MAAM,KAAK,QAAQ,EAAE;AACtC,YAAI,CAAC,UAAU;AACb,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAEA,YAAI,CAAC,YAAY,YAAY,UAAU,MAAM;AAC3C,gBAAM,OAAO,KAAK,MAAM;AACxB,cAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAAI;AAClD,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,gBAC9D;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,cAAI,CAAC,aAAa,KAAK,IAAI,GAAG;AAC5B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SACE;AAAA,gBACJ;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,gBAAM,WAAW,MAAM,KAAK,WAAW,IAAI;AAC3C,cAAI,YAAa,SAAqC,IAAI,MAAM,IAAI;AAClE,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,SAAS,IAAI;AAAA,gBACxB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO,kBAAkB,GAAG,IAAI,UAAqC,IAAI;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,oBAAoB,OACxB,GACA,IACA,UACA,SACG;AAGD,YAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,UAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,cAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,QAAC,CAAC;AAC7E,YAAI,YAAa,QAAO;AAKxB,cAAM,SAAS,EAAE,GAAG,UAAU,SAAS,QAAmC,GAAG,GAAG,KAAK;AACrF,cAAM,cAAc,oBAAoB,gBAAgB,MAAM;AAC9D,YAAI,YAAY,SAAS,GAAG;AAC1B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAGA,YAAM,uBAAuB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAClF,YAAM,sBAAsB,YAAY,OAAO;AAAA,QAC7C,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,UAAU,aAAa;AAAA,MAC1D;AAIA,YAAM,0BAA0B,YAAY,OAAO,OAAO,cAAc;AACxE,YAAM,YAAqC,CAAC;AAC5C,UAAI,CAAC,YAAY,YAAY,UAAU,KAAM,WAAU,MAAM,IAAI,KAAK,MAAM;AAC5E,UAAI,eAAe,KAAM,WAAU,WAAW,IAAI,KAAK,WAAW;AAClE,iBAAW,KAAK,yBAAyB;AACvC,cAAM,MAAM,EAAE,UAAU;AACxB,YAAI,EAAE,OAAO,aAAc;AAC3B,kBAAU,GAAG,IAAI,YAAY,GAAG;AAAA,MAClC;AAEA,YAAM,UAAU,MAAM,KAAK,OAAO,IAAI,SAA8C;AACpF,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,UAChE;AAAA,QACF;AAAA,MACF;AAGA,YAAM,cAA4B;AAAA,QAChC,mBAAmB,aAAa,UAAqC,WAAW;AAAA,MAClF;AAGA,UAAI,IAAI;AACN,mBAAW,KAAK,sBAAsB;AACpC,gBAAM,OAAO,EAAE;AACf,cAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,gBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,cAAI,CAAC,MAAO;AACZ,gBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,sBAAY,KAAK,MAAM,sBAAsB,IAAI,IAAI,YAAY,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,QACjH;AACA,mBAAW,KAAK,qBAAqB;AACnC,gBAAM,WAAW,EAAE,UAAW;AAC9B,gBAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IACxC,KAAK,EAAE,IAAI,EAAgB,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAC5E,CAAC;AACL,gBAAM,qBAAqB,IAAI,IAAI,UAAU,UAAU;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,YAAM,OAAO,UAAU,SAAS,OAAkC;AAElE,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IACpC;AASA,QAAI,YAAY,UAAU;AACxB,UAAI;AAAA,QACF,cAAc,QAAQ;AAAA,QACtB,kBAAkB,cAAc;AAAA,QAChC,OAAO,MAAM;AACX,gBAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,gBAAM,iBAAiB,MAAM,KAAK,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;AACnE,gBAAM,WAAW,eAAe,KAAK,CAAC;AAEtC,cAAI,CAAC,UAAU;AAGb,kBAAM,aAAa,MAAM,kBAAkB,gBAAgB,EAAE,GAAG,YAAY;AAAA,YAAC,CAAC;AAC9E,gBAAI,WAAY,QAAO;AACvB,mBAAO,aAAa,GAAG,IAAI;AAAA,UAC7B;AAEA,iBAAO,kBAAkB,GAAG,SAAS,IAAI,GAAa,UAAU,IAAI;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,MAAiC,IAAI;AAAA,QACvE;AAIA,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,wBAAY,KAAK,MAAM,qBAAqB,IAAI,IAAI,EAAE,MAAM,OAAO,QAAQ,CAAC;AAAA,UAC9E;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAE1E,cAAM,KAAK,OAAO,EAAE;AACpB,eAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAIA,aAAW,CAAC,UAAU,YAAY,KAAK,OAAO,QAAQ,SAAS,cAAc,GAAG;AAC9E,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,mBAAmB,oBAAI,IAAY;AAAA,MACvC,GAAG,aAAa,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACxC,GAAG,aAAa,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACjD,CAAC;AAED,UAAM,qBAAqB,IAAI;AAAA,MAC7B,aAAa,OACV,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAEA,UAAM,YAAY,aAAa,QAAQ;AAEvC,UAAM,iBAAiB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ;AAEnE,UAAM,cAAc,aAAa,OAAO;AAAA,MACtC,CAAC,MAAM,EAAE,eAAe,WAAW,EAAE,eAAe,WAAW,EAAE,eAAe;AAAA,IAClF;AAEA,UAAM,qBAAqB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAEjF,UAAM,oBAAoB;AAAA,MACxB,GAAG,aAAa,OACb,OAAO,CAAC,MAAM,EAAE,eAAe,gBAAgB,EAAE,cAAc,IAAI,EACnE,IAAI,CAAC,MAAM,EAAE,UAAW,WAAW;AAAA,MACtC,GAAI,aAAa,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC;AAAA,IAC9E;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,SAAS,eAAe,EAAE,IAAI,KAAK,kBAAkB,oBAAoB,UAAU,SAAS;AAClG,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,GAAG,OAAO,MAAM;AAAA,QACpE;AAEA,cAAM,iBAAiB,EAAE,IAAI,MAAM,WAAW;AAC9C,cAAM,eAA4C,CAAC;AACnD,YAAI,mBAAmB,QAAS,cAAa,WAAW,IAAI;AAE5D,cAAM,WAAgD;AAAA,UACpD,MAAM,OAAO,WAAW;AAAA,UACxB,UAAU,OAAO,WAAW;AAAA,UAC5B,SAAS,OAAO;AAAA,UAChB,YAAY,OAAO;AAAA,UACnB,SAAS,EAAE,GAAG,OAAO,SAAS,GAAG,aAAa;AAAA,UAC9C,SAAS,OAAO;AAAA,QAClB;AACA,YAAI,mBAAmB,OAAQ,UAAS,iBAAiB;AACzD,YAAI,OAAO,WAAW,MAAM,kBAAkB,SAAS,GAAG;AACxD,mBAAS,SAAS,EAAE,MAAM,OAAO,QAAQ,SAAS,kBAAkB;AAAA,QACtE;AAEA,cAAM,SAAS,MAAM,KAAK,SAAS,QAAQ;AAG3C,cAAM,OAAO,OAAO,KAAK,IAAI,CAAC,QAAQ,UAAU,SAAS,GAA8B,CAAC;AAExF,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,OAAO,UAAU,SAAS,IAA+B;AAE/D,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAI/B,cAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,cAAM,cAAc,oBAAoB,gBAAgB,IAAI;AAC5D,YAAI,YAAY,SAAS,GAAG;AAC1B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,gBAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,UAAC,CAAC;AAC7E,cAAI,YAAa,QAAO;AAAA,QAC1B;AAGA,cAAM,qBAAqB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAIjF,cAAM,wBAAwB,aAAa,OAAO,OAAO,cAAc;AACvE,cAAM,gBAAyC;AAAA,UAC7C,WAAW,KAAK,WAAW,KAAK;AAAA,QAClC;AACA,mBAAW,KAAK,uBAAuB;AACrC,gBAAM,MAAM,EAAE,UAAU;AACxB,cAAI,EAAE,OAAO,aAAc;AAC3B,wBAAc,GAAG,IAAI,YAAY,GAAG;AAAA,QACtC;AAEA,cAAM,OAAO,MAAM,KAAK,OAAO,aAAkD;AACjF,cAAM,YAAa,KAAiC,IAAI;AAGxD,cAAM,cAA4B,CAAC,mBAAmB,aAAa,MAAM,WAAW,CAAC;AAErF,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,kBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,wBAAY,KAAK,MAAM,sBAAsB,IAAI,WAAW,aAAa,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,UACzH;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,cAAM,OAAO,UAAU,SAAS,IAA+B;AAE/D,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,GAAG;AAAA,MACvC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAI/B,cAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,cAAM,WAAW,MAAM,KAAK,QAAQ,EAAE;AACtC,YAAI,CAAC,UAAU;AACb,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,gBAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,UAAC,CAAC;AAC7E,cAAI,YAAa,QAAO;AAKxB,gBAAM,SAAS,EAAE,GAAG,UAAU,SAAS,QAAmC,GAAG,GAAG,KAAK;AACrF,gBAAM,cAAc,oBAAoB,gBAAgB,MAAM;AAC9D,cAAI,YAAY,SAAS,GAAG;AAC1B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS;AAAA,gBACX;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAGA,cAAM,0BAA0B,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAItF,cAAM,6BAA6B,aAAa,OAAO,OAAO,cAAc;AAC5E,cAAM,eAAwC,CAAC;AAC/C,YAAI,eAAe,KAAM,cAAa,WAAW,IAAI,KAAK,WAAW;AACrE,mBAAW,KAAK,4BAA4B;AAC1C,gBAAM,MAAM,EAAE,UAAU;AACxB,cAAI,EAAE,OAAO,aAAc;AAC3B,uBAAa,GAAG,IAAI,YAAY,GAAG;AAAA,QACrC;AAEA,cAAM,UAAU,MAAM,KAAK,OAAO,IAAI,YAAiD;AACvF,YAAI,CAAC,SAAS;AACZ,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,UAAqC,WAAW;AAAA,QAClF;AAEA,YAAI,IAAI;AACN,qBAAW,KAAK,yBAAyB;AACvC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,kBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,wBAAY,KAAK,MAAM,sBAAsB,IAAI,IAAI,aAAa,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,UAClH;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,cAAM,OAAO,UAAU,SAAS,OAAkC;AAElE,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,MAAiC,IAAI;AAAA,QACvE;AAEA,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,wBAAY,KAAK,MAAM,qBAAqB,IAAI,IAAI,EAAE,MAAM,OAAO,QAAQ,CAAC;AAAA,UAC9E;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAE1E,cAAM,KAAK,OAAO,EAAE;AACpB,eAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAIA,MAAI,IAAI,qBAAqB,CAAC,MAAM;AAClC,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,eAAe,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,UAChE,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,UAAU,GAAG;AAAA,UACb,mBAAmB,GAAG;AAAA,UACtB,QAAQ,GAAG;AAAA,UACX,eAAe,GAAG;AAAA,QACpB,EAAE;AAAA,QACF,gBAAgB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,UAClE,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,QAAQ,GAAG;AAAA,UACX,eAAe,GAAG;AAAA,QACpB,EAAE;AAAA,QACF,YAAY,OAAO,OAAO,SAAS,UAAU,EAAE,IAAI,CAAC,QAAQ;AAAA,UAC1D,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,QAAQ,GAAG;AAAA,QACb,EAAE;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;;;AE9hCA,SAAS,QAAAC,OAAM,cAAc;AAK7B,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,mBAAmB,oBAAI,IAAI,CAAC,aAAa,cAAc,iBAAiB,CAAC;AAE/E,IAAM,kBAAkB,oBAAI,IAAI,CAAC,iBAAiB,CAAC;AAcnD,SAAS,aAAqB;AAC5B,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,SAAO;AACT;AAEA,eAAe,kBAAkB,MAAqB,WAAoC;AACxF,SAAOA,MAAK,EAAE,GAAG,MAAM,KAAK,UAAU,GAAG,WAAW,CAAC;AACvD;AAEA,eAAe,oBAAoB,OAA8C;AAC/E,MAAI;AACF,UAAM,IAAI,MAAM,OAAO,OAAO,WAAW,GAAG,OAAO;AAKnD,WAAO,EAAE,KAAK,EAAE,KAAK,QAAQ,EAAE,QAAQ,WAAW,EAAE,UAAU;AAAA,EAChE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAe,mBACb,QACA,eACA,WACA,SAEA,GACA,aACA,aACmB;AAKnB,MAAI,gBAAgB,QAAW;AAC7B,UAAM,gBAAgB,OAAO,EAAE,IAAI,OAAO,gBAAgB,CAAC;AAC3D,QAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,aAAa;AACjE,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,sCAAsC,WAAW;AAAA,UAC5D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,EAAE,IAAI,SAAS;AAAA,EAClC,QAAQ;AACN,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,+BAA+B,EAAE;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,SAAS,IAAI,MAAM;AACrC,MAAI,EAAE,qBAAqB,OAAO;AAChC,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,yBAAyB,EAAE;AAAA,MACpF;AAAA,IACF;AAAA,EACF;AAIA,MAAI,gBAAgB,UAAa,UAAU,OAAO,aAAa;AAC7D,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,oCAAoC,WAAW;AAAA,QAC1D;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,UAAU;AAC3B,MAAI,CAAC,cAAc,IAAI,QAAQ,GAAG;AAChC,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,cAAc,QAAQ;AAAA,QACjC;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,IAAI,KAAK;AACnC,QAAM,MAAM,OAAO,aAAa,YAAY,SAAS,KAAK,MAAM,KAAK,SAAS,KAAK,IAAI;AAEvF,MAAI,eAAe,CAAC,KAAK;AACvB,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,OAAO,OAAO,SAAS,kBAAkB,CAAC;AAAA,QACxD;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,QAAQ,sBAAsB;AAAA,MAC9C;AAAA,MACA,UAAU,UAAU;AAAA,MACpB,WAAW;AAAA,IACb,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,gCAAgC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,QAAQ;AAClB,QAAI;AACF,YAAM,QAAQ,IAAI,WAAW,MAAM,UAAU,YAAY,CAAC;AAC1D,YAAM,QAAQ,OAAO,UAAU,KAAK,OAAO,QAAQ;AAAA,IACrD,SAAS,KAAK;AACZ,cAAQ,MAAM,iCAAiC,GAAG;AAClD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,wBAAwB,EAAE;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,MAAM,QAAQ,OAAO,UAAU,GAAG;AACxC,QAAM,WAAW,UAAU;AAE3B,QAAM,OAAO,MAAM,UAAU,OAAO;AAAA,IAClC,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,IAC/B,WAAW;AAAA,EACb,CAAC;AAED,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,GAAG,GAAG;AAC7C;AAIO,SAAS,yBACd,KACA,WACA,SACA,mBACA,aACM;AAEN,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,SAAS,kBAAkB,WAAW,SAAS,GAAG,OAAO,WAAW;AAAA,IAChG;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,SAAS,kBAAkB,WAAW,SAAS,GAAG,MAAM,WAAW;AAAA,IAC/F;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,QAAQ,iBAAiB,WAAW,SAAS,GAAG,MAAM,WAAW;AAAA,IAC7F;AAAA,EACF;AAGA,MAAI,IAAI,kCAAkC,kBAAkB,cAAc,GAAG,OAAO,MAAM;AACxF,UAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,UAAM,WAAW,EAAE,IAAI,MAAM,UAAU;AACvC,UAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AAExC,QAAI,CAAC,QAAQ,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,SAAS,IAAI,GAAG;AACvD,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,UAC1D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,KAAK,MAAM,IAAI;AACvC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,YAAY,SAAS,uBAAuB,CAAC;AAAA,UAClE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,KAAK,MAAM,IAAI;AACvC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,aAAa,SAAS,wBAAwB,CAAC;AAAA,UACpE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WACJ,SAAS,UAAU,mBAAmB,SAAS,UAAU,mBAAmB;AAE9E,QAAI,CAAC,SAAS,IAAI,QAAQ,GAAG;AAC3B,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,cAAc,QAAQ,yBAAyB,IAAI;AAAA,UAC9D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,QAAQ,sBAAsB;AAAA,QAC9C,QAAQ;AAAA,QACR;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,gCAAgC,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,EAAE,KAAK,UAAU,KAAK,QAAQ,MAAM,WAAW,SAAS;AAAA,MACxD,UAAU;AAAA,IACZ;AAEA,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,YAAY,UAAU;AAAA;AAAA,QAEtB;AAAA,QACA,YAAY,UAAU;AAAA;AAAA;AAAA,QAGtB,GAAI,UAAU,UAAU,EAAE,QAAQ,UAAU,OAAO;AAAA,QACnD,GAAI,UAAU,UAAU,EAAE,QAAQ,UAAU,OAAO;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,KAAK,gCAAgC,kBAAkB,cAAc,GAAG,OAAO,MAAM;AACvF,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAE3B,UAAM,UAAU,MAAM,oBAAoB,EAAE;AAC5C,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,EAAE,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,WAAW,OAAO,KAAK,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE,KAAK,IAAI;AAExE,UAAM,cAAc,QAAQ,WAAW,WAAW,QAAQ,WAAW;AACrE,QAAI,eAAe,CAAC,UAAU;AAC5B,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,OAAO,SAAS,kBAAkB,CAAC;AAAA,UACxD;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,WAAW;AACf,QAAI,QAAQ,MAAM;AAChB,YAAM,OAAO,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAC3C,UAAI,CAAC,MAAM;AACT,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,4BAA4B,EAAE;AAAA,UACpF;AAAA,QACF;AAAA,MACF;AACA,YAAM,WACJ,QAAQ,WAAW,UAAU,mBAC3B,QAAQ,WAAW,UAAU,mBAC7B;AACJ,UAAI,KAAK,gBAAgB,CAAC,SAAS,IAAI,KAAK,YAAY,GAAG;AACzD,cAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,yBAAyB,SAAS,uBAAuB,KAAK,YAAY,oBAAoB,EAAE;AAAA,UAC5H;AAAA,QACF;AAAA,MACF;AACA,UAAI,gBAAgB,UAAa,KAAK,OAAO,aAAa;AACxD,cAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,6BAA6B,WAAW,cAAc,EAAE;AAAA,UAC/G;AAAA,QACF;AAAA,MACF;AACA,iBAAW,KAAK;AAAA,IAClB;AAEA,UAAM,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAEtC,UAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MAClC,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,GAAI,aAAa,UAAa,EAAE,KAAK,SAAS;AAAA,MAC9C,WAAW;AAAA,IACb,CAAC;AAED,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,GAAG,GAAG;AAAA,EAC7C,CAAC;AAGD,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,WAAW,MAAM,UAAU,QAAQ,EAAE;AAE3C,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAC/B,YAAM,MAAM,OAAO,KAAK,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE,KAAK,IAAI;AAEnE,YAAM,aAAqD,CAAC;AAC5D,UAAI,QAAQ,OAAW,YAAW,MAAM;AAExC,YAAM,UAAU,MAAM,UAAU,OAAO,IAAI,UAAU;AACrD,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,UAAI,KAAK,kBAAkB,GAAG;AAC5B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAOA,YAAM,WAAW,IAAI,IAAI,KAAK,GAAG,EAAE;AACnC,YAAM,YAAY,SAAS,QAAQ,UAAU;AAC7C,YAAM,MAAM,aAAa,IACrB,SAAS,MAAM,YAAY,WAAW,MAAM,IAC5C,SAAS,QAAQ,OAAO,EAAE;AAE9B,UAAI;AACF,cAAM,QAAQ,OAAO,GAAG;AAAA,MAC1B,SAAS,KAAK;AACZ,gBAAQ,MAAM,iCAAiC,GAAG;AAClD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,iBAAiB,SAAS,qCAAqC;AAAA,UAChF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU,OAAO,EAAE;AAEzB,aAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI,IAAI,oBAAoB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AACxE,UAAM,UAAU,EAAE,IAAI,MAAM,MAAM;AAClC,UAAM,aAAa,EAAE,IAAI,MAAM,UAAU;AACzC,UAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,UAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,QACE,CAAC,OAAO,UAAU,IAAI,KACtB,OAAO,KACP,CAAC,OAAO,UAAU,QAAQ,KAC1B,WAAW,KACX,WAAW,KACX;AACA,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,EAAE,IAAI,MAAM,MAAM;AACpC,QAAI,cAAc,UAAa,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,SAAS,SAAS,GAAG;AAC9E,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,MAAM,oBAAoB,SAAS,0CAA0C;AAAA,QACxF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,gBAAgB,EAAE,IAAI,MAAM,UAAU;AAC5C,UAAM,WACJ,kBAAkB,SAAS,OAAO,kBAAkB,UAAU,QAAQ;AAExE,UAAM,OAAiD,EAAE,MAAM,SAAS;AACxE,QAAI,cAAc,OAAW,MAAK,OAAO;AACzC,QAAI,aAAa,OAAW,MAAK,WAAW;AAE5C,UAAM,SAAS,MAAM,UAAU,SAAS,IAAI;AAE5C,WAAO,EAAE,KAAK,MAAM;AAAA,EACtB,CAAC;AAGD,MAAI,IAAI,wBAAwB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AAC5E,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,UAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,QAAI,CAAC,MAAM;AACT,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACxC,CAAC;AAEH;;;AC/iBA,SAAS,aAAAC,kBAAiB;AAC1B,SAAS,OAAAC,YAAW;;;ACFpB,SAAS,cAAc,sBAAsB;;;ADiB7C,IAAM,gBAAgB,oBAAI,IAAsB;AAChD,IAAM,sBAAgC,CAAC;AAEvC,IAAM,iBAAiB;AACvB,IAAM,uBAAuB,KAAK,KAAK;AAIvC,IAAM,mBAAmB;AAIzB,IAAM,sBACJ;AAEF,SAAS,eAAe,KAA8D;AACpF,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,cAAc,MAAM;AAG1B,SAAO,oBAAoB,SAAS,KAAK,oBAAoB,CAAC,KAAM,aAAa;AAC/E,wBAAoB,MAAM;AAAA,EAC5B;AACA,MAAI,oBAAoB,UAAU,kBAAkB;AAClD,UAAM,oBAAoB,KAAK,MAAM,oBAAoB,CAAC,IAAK,uBAAuB,OAAO,GAAI;AACjG,WAAO,EAAE,SAAS,OAAO,kBAAkB;AAAA,EAC7C;AAEA,QAAM,YAAY,cAAc,IAAI,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW;AAC7E,WAAS,KAAK,GAAG;AACjB,gBAAc,IAAI,KAAK,QAAQ;AAC/B,sBAAoB,KAAK,GAAG;AAE5B,MAAI,SAAS,SAAS,gBAAgB;AACpC,UAAM,iBAAiB,SAAS,CAAC;AACjC,UAAM,oBAAoB,KAAK,MAAM,iBAAiB,uBAAuB,OAAO,GAAI;AACxF,WAAO,EAAE,SAAS,OAAO,kBAAkB;AAAA,EAC7C;AAEA,SAAO,EAAE,SAAS,MAAM,mBAAmB,EAAE;AAC/C;AAyBO,SAAS,mBAAmB,KAAW,IAAmC;AAC/E,QAAM,qBAAqB;AAAA,IACzB,IAAI;AAAA,IACJ,OAAO,EAAE,MAAM,uBAAuB,SAAS,6BAA6B;AAAA,EAC9E;AAGA,MAAI,KAAK,yBAAyB,OAAO,MAAM;AAC7C,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,IAC3B,QAAQ;AACN,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,QACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI;AACrE,UAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAErE,QAAI,CAAC,SAAS,CAAC,UAAU;AACvB,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,KACJ,EAAE,IAAI,OAAO,iBAAiB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK;AAC5D,UAAM,YAAY,eAAe,GAAG,EAAE,IAAI,KAAK,EAAE;AACjD,QAAI,CAAC,UAAU,SAAS;AACtB,QAAE,OAAO,eAAe,OAAO,UAAU,iBAAiB,CAAC;AAC3D,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BC;AAAA,qCAC+B,KAAK;AAAA,IACtC;AACA,UAAM,OAAO,WAAW,KAAK,CAAC;AAE9B,QAAI,CAAC,MAAM;AAGT,YAAM,eAAe,UAAU,mBAAmB;AAClD,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,gBAAgB,MAAM,eAAe,UAAU,KAAK,aAAa;AACvE,QAAI,CAAC,eAAe;AAClB,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BA;AAAA;AAAA;AAAA,yBAGmB,KAAK,OAAO,eAAe,KAAK,EAAE;AAAA;AAAA,IAEvD;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,uBAAuB,EAAE;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAEA,UAAM,CAAC,WAAW,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,MAClD;AAAA,QACE,EAAE,SAAS,KAAK,IAAI,MAAM,QAAQ,MAAM,eAAe,KAAK,cAAc;AAAA,QAC1E;AAAA,MACF;AAAA,MACA;AAAA,QACE,EAAE,SAAS,KAAK,IAAI,MAAM,QAAQ,MAAM,eAAe,KAAK,cAAc;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,CAAC;AAED,kBAAc,GAAG,cAAc,WAAW,EAAE,MAAM,IAAI,CAAC;AACvD,kBAAc,GAAG,iBAAiB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE3E,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,IAAI,KAAK;AAAA,QACT,OAAO,KAAK;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,sBAAsB,QAAQ;AAAA,MAChC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,KAAK,2BAA2B,OAAO,MAAM;AAC/C,UAAM,QAAQC,WAAU,GAAG,eAAe;AAC1C,QAAI,CAAC,OAAO;AACV,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,2BAA2B,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,YAAY,KAAK;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA0B;AACxC,UAAI,SAAS,iBAAiB;AAC5B,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,qBAAqB,EAAE;AAAA,UAC7E;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,8BAA8B,EAAE;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,GAAG;AAAA,MACzBD;AAAA;AAAA;AAAA,yBAGmB,QAAQ,OAAO;AAAA;AAAA,IAEpC;AACA,UAAM,MAAM,UAAU,KAAK,CAAC;AAE5B,QAAI,CAAC,OAAO,QAAQ,kBAAkB,IAAI,eAAe;AACvD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,8BAA8B,EAAE;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AAAA,MACzB,EAAE,SAAS,QAAQ,SAAS,MAAM,IAAI,MAAM,eAAe,IAAI,cAAc;AAAA,MAC7E;AAAA,IACF;AACA,kBAAc,GAAG,cAAc,cAAc,EAAE,MAAM,IAAI,CAAC;AAE1D,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AAGD,QAAM,iBAAiB,qBAAqB,EAAE;AAC9C,MAAI,KAAK,0BAA0B,gBAAgB,OAAO,MAAM;AAC9D,UAAM,OAAQ,EAAkE,IAAI,MAAM;AAE1F,UAAM,GAAG;AAAA,MACPA,qEAAoE,KAAK,EAAE;AAAA,IAC7E;AAEA,oBAAgB,GAAG,YAAY;AAC/B,oBAAgB,GAAG,iBAAiB,iBAAiB;AAErD,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AACH;;;AEtPA,SAAS,OAAAE,YAAW;AACpB,SAAS,mBAAmB;AAqB5B,SAAS,cAAc,GAAwB;AAC7C,SAAQ,EAAqC,IAAI,MAAM;AACzD;AAEA,SAAS,uBAA+B;AACtC,SAAO,YAAY,CAAC,EAAE,SAAS,WAAW;AAC5C;AAIO,SAAS,mBACd,KACA,IACA,mBACA,kBACM;AAIN,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,aAAa,cAAc,CAAC;AAElC,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,IAC3B,QAAQ;AACN,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,uBAAuB,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,kBACJ,OAAO,KAAK,qBAAqB,WAAW,KAAK,mBAAmB;AACtE,UAAM,cAAc,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe;AAEhF,QAAI,CAAC,mBAAmB,CAAC,aAAa;AACpC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BC,kDAAiD,WAAW,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,QAAI,CAAC,WAAW,CAAE,MAAM,eAAe,iBAAiB,QAAQ,aAAa,GAAI;AAC/E,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,uBAAuB,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,MAAM,aAAa,WAAW;AAE9C,UAAM,GAAG;AAAA,MACPA;AAAA,sCACgC,OAAO;AAAA;AAAA;AAAA;AAAA,uBAItB,WAAW,EAAE;AAAA,IAChC;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AAGD,MAAI,IAAI,oBAAoB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AACxE,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,OAAO,KAAkB,CAAC;AAAA,EAC5D,CAAC;AAGD,MAAI,IAAI,wBAAwB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AAC5E,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAE3B,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBA;AAAA;AAAA;AAAA;AAAA,yBAImB,EAAE;AAAA;AAAA,IAEvB;AACA,UAAM,MAAM,OAAO,KAAK,CAAC;AAEzB,QAAI,CAAC,KAAK;AACR,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,IAAI,CAAC;AAAA,EACvC,CAAC;AAGD,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,MAC3B,QAAQ;AACN,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,4BAA4B,EAAE;AAAA,UACvF;AAAA,QACF;AAAA,MACF;AAEA,YAAM,QACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI;AACrE,YAAM,WAAW,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AAE7D,UAAI,CAAC,OAAO;AACV,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,qBAAqB,EAAE;AAAA,UAChF;AAAA,QACF;AAAA,MACF;AACA,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,oBAAoB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,yCAAwC,QAAQ;AAAA,MAClD;AACA,YAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,SAAS,QAAQ,oBAAoB;AAAA,UAC/E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,qBAAqB;AAC1C,YAAM,eAAe,MAAM,aAAa,YAAY;AAEpD,YAAM,eAAe,MAAM,GAAG;AAAA,QAC5BA;AAAA;AAAA;AAAA;AAAA,oCAI4B,KAAK,KAAK,YAAY,KAAK,QAAQ,EAAE;AAAA;AAAA;AAAA,MAGnE;AACA,YAAM,UAAU,aAAa,KAAK,CAAC;AAUnC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,yBAAyB,EAAE;AAAA,UAClF;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,YACJ,IAAI,QAAQ;AAAA,YACZ,OAAO,QAAQ;AAAA,YACf,MAAM;AAAA,YACN,sBAAsB,QAAQ;AAAA,YAC9B,oBAAoB;AAAA,YACpB,YAAY,QAAQ;AAAA,YACpB,YAAY,QAAQ;AAAA,UACtB;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,MAC3B,QAAQ;AACN,eAAO,CAAC;AAAA,MACV;AAGA,UAAI,WAAW,OAAO,MAAM,KAAK,SAAS,QAAW;AACnD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,mCAAmC;AAAA,UACvF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,iBAAiB,MAAM,GAAG;AAAA,QAC9BA,uDAAsD,EAAE;AAAA,MAC1D;AACA,YAAM,WAAW,eAAe,KAAK,CAAC;AAItC,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,WACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI,SAAS;AAE9E,UAAI,YAAY,SAAS;AACzB,UAAI,aAAa;AAEjB,UAAI,OAAO,KAAK,SAAS,YAAY,KAAK,MAAM;AAC9C,cAAM,aAAa,MAAM,GAAG;AAAA,UAC1BA,yCAAwC,KAAK,IAAI;AAAA,QACnD;AACA,cAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,YAAI,CAAC,SAAS;AACZ,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,SAAS,KAAK,IAAI;AAAA,cAC7B;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,oBAAY,QAAQ;AACpB,qBAAa;AAAA,MACf;AAEA,UAAI,YAAY;AACd,cAAM,GAAG;AAAA,UACPA;AAAA,oCAC0B,QAAQ;AAAA,oCACR,SAAS;AAAA;AAAA;AAAA,2BAGlB,EAAE;AAAA,QACrB;AAAA,MACF,OAAO;AACL,cAAM,GAAG;AAAA,UACPA;AAAA,iCACuB,QAAQ;AAAA,iCACR,SAAS;AAAA;AAAA,2BAEf,EAAE;AAAA,QACrB;AAAA,MACF;AAEA,YAAM,gBAAgB,MAAM,GAAG;AAAA,QAC7BA;AAAA;AAAA;AAAA;AAAA,2BAImB,EAAE;AAAA;AAAA,MAEvB;AACA,YAAM,UAAU,cAAc,KAAK,CAAC;AAEpC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI,WAAW,OAAO,IAAI;AACxB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,oCAAmC,EAAE;AAAA,MACvC;AAEA,UAAK,OAAO,KAAmB,WAAW,GAAG;AAC3C,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI,WAAW,OAAO,IAAI;AACxB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,iBAAiB,MAAM,GAAG;AAAA,QAC9BA,uCAAsC,EAAE;AAAA,MAC1C;AACA,YAAM,WAAW,eAAe,KAAK,CAAC;AAEtC,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,qBAAqB;AAC1C,YAAM,eAAe,MAAM,aAAa,YAAY;AAEpD,YAAM,GAAG;AAAA,QACPA;AAAA,yCACiC,YAAY;AAAA;AAAA;AAAA;AAAA,yBAI5B,EAAE;AAAA,MACrB;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,oBAAoB,aAAa,EAAE,CAAC;AAAA,IACxE;AAAA,EACF;AACF;;;AC1aA,SAAS,OAAAC,YAAW;AASpB,IAAM,eAAuB,MAAM;AACjC,MAAI;AAAE,WAAO;AAAA,EAAgB,QAAQ;AAAE,WAAO;AAAA,EAAQ;AACxD,GAAG;AAcI,SAAS,oBACd,KACA,QACA,UACA,IACM;AACN,MAAI,IAAI,qBAAqB,OAAO,MAAM;AACxC,UAAM,aAAc,EAAgD,IAAI,MAAM;AAC9E,UAAM,aAAa,SAAS,WAAW,IAAI;AAC3C,UAAM,cAAc,YAAY,mBAAmB;AAGnD,UAAM,QAAQ,OAAO,OAAO,QAAQ,EACjC,OAAO,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,kBAAkB,WAAW,EACnE,KAAK,CAAC,GAAG,MAAM,EAAE,kBAAkB,EAAE,eAAe,EACpD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,EAAE;AAGpF,UAAM,YAAY,OAAO,OAAO,QAAQ,EACrC,KAAK,CAAC,GAAG,MAAM,EAAE,kBAAkB,EAAE,eAAe,EACpD,IAAI,CAAC,OAAO;AAAA,MACX,MAAM,EAAE;AAAA,MACR,OAAO,EAAE;AAAA,MACT,iBAAiB,EAAE;AAAA,MACnB,WAAW,EAAE;AAAA,MACb,aAAa,EAAE;AAAA,IACjB,EAAE;AAEJ,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BA,gEAA+D,WAAW,EAAE;AAAA,IAC9E;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAIjC,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,UAAU,OAAO,QAAQ;AAAA,QACzB,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA,MAAM;AAAA,UACJ,IAAI,WAAW;AAAA,UACf,OAAO,SAAS,SAAS;AAAA,UACzB,MAAM,WAAW;AAAA,UACjB,sBAAsB,SAAS,wBAAwB;AAAA,QACzD;AAAA,QACA,OAAO;AAAA,UACL,eAAe,OAAO,eAAe;AAAA,UACrC,mBAAmB,OAAO,oBAAoB;AAAA,QAChD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;;;AChFA,SAAS,OAAAC,YAAW;AAOb,SAAS,oBACd,KACA,UACA,IACM;AAIN,MAAI,IAAI,qBAAqB,CAAC,MAAM;AAClC,UAAM,gBAAgB,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,MACvE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,MACb,IAAI,GAAG;AAAA,MACP,eAAe,GAAG;AAAA,MAClB,QAAQ,GAAG;AAAA,IACb,EAAE;AAEF,UAAM,iBAAiB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,MACzE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,eAAe,GAAG;AAAA,MAClB,QAAQ,GAAG;AAAA,IACb,EAAE;AAEF,UAAM,kBAAkB,OAAO,OAAO,SAAS,eAAe,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC3E,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,eAAe,GAAG;AAAA,MAClB,QAAQ,GAAG;AAAA,IACb,EAAE;AAEF,UAAM,aAAa,OAAO,OAAO,SAAS,UAAU,EAAE,IAAI,CAAC,QAAQ;AAAA,MACjE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,QAAQ,GAAG;AAAA,IACb,EAAE;AAEF,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM,EAAE,eAAe,gBAAgB,iBAAiB,WAAW;AAAA,IACrE,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,IAAI,sBAAsB,OAAO,MAAM;AACzC,UAAM,OAAO,MAAM,QAAQ;AAAA,MACzB,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,OAAO,OAAO;AACtD,cAAM,SAAS,MAAM,GAAG;AAAA,UACtBA,0CAAyCA,KAAI,IAAI,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC;AAAA,QAC3E;AACA,cAAM,QAAQ,OAAQ,OAAO,KAAK,CAAC,EAAiC,KAAK;AACzE,eAAO,EAAE,MAAM,GAAG,MAAM,OAAO,GAAG,OAAO,UAAU,GAAG,UAAU,MAAM;AAAA,MACxE,CAAC;AAAA,IACH;AACA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAED,MAAI,IAAI,uBAAuB,OAAO,MAAM;AAC1C,UAAM,OAAO,MAAM,QAAQ;AAAA,MACzB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,OAAO,OAAO;AACvD,cAAM,SAAS,MAAM,GAAG;AAAA,UACtBA,0CAAyCA,KAAI,IAAI,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC;AAAA,QAC3E;AACA,cAAM,QAAQ,OAAQ,OAAO,KAAK,CAAC,EAAiC,KAAK;AACzE,eAAO,EAAE,MAAM,GAAG,MAAM,OAAO,GAAG,OAAO,MAAM;AAAA,MACjD,CAAC;AAAA,IACH;AACA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AACH;;;AC7EA,OAAO,YAAY;AACnB,SAAS,OAAAC,YAAqB;AA8B9B,IAAMC,mBAAkB,oBAAI,IAAI,CAAC,SAAS,cAAc,YAAY,CAAC;AAErE,SAAS,UAAU,MAAc,SAAwB;AACvD,QAAM,MAAM,IAAI,MAAM,OAAO;AAC5B,EAAC,IAAiC,OAAO;AAC1C,SAAO;AACT;AAIA,SAASC,YAAW,MAAsB;AACxC,MAAI,CAAC,qBAAqB,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI,MAAM,0BAA0B,IAAI,EAAE;AAAA,EAClD;AACA,SAAO,IAAI,KAAK,QAAQ,MAAM,IAAI,CAAC;AACrC;AAGA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,oBAAoB,KAAK,IAAI,GAAG;AACnC,UAAM,UAAU,wBAAwB,8BAA8B,IAAI,EAAE;AAAA,EAC9E;AACA,SAAO,IAAI,IAAI;AACjB;AAEA,SAAS,gBACP,gBACA,SACA,QACO;AACP,QAAM,QAAe,CAAC;AAEtB,MAAI,gBAAgB;AAClB,UAAM,KAAKC,sBAAqB;AAAA,EAClC;AAEA,MAAI,UAAU,OAAO,KAAK,KAAK,MAAM,MAAM,OAAO,QAAQ,SAAS,GAAG;AACpE,UAAM,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC;AACtC,UAAM,UAAU,OAAO,QAAQ,IAAI,CAAC,QAAQA,OAAMA,KAAI,IAAI,WAAW,GAAG,CAAC,CAAC,UAAU,OAAO,EAAE;AAC7F,UAAM,KAAKA,QAAOA,KAAI,KAAK,SAASA,UAAS,CAAC,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS;AACX,eAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,YAAM,MAAMA,KAAI,IAAI,WAAW,KAAK,CAAC;AAErC,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAI,MAAM,WAAW,EAAG;AACxB,cAAM,SAASA,KAAI;AAAA,UACjB,MAAM,IAAI,CAAC,MAAMA,OAAM,CAAC,EAAE;AAAA,UAC1BA;AAAA,QACF;AACA,cAAM,KAAKA,OAAM,GAAG,QAAQ,MAAM,GAAG;AAAA,MACvC,WACE,OAAO,UAAU,YACjB,UAAU,MACV;AACA,cAAM,KAAK;AACX,YAAI,GAAG,OAAO,OAAW,OAAM,KAAKA,OAAM,GAAG,MAAM,GAAG,EAAE,EAAE;AAC1D,YAAI,GAAG,QAAQ,OAAW,OAAM,KAAKA,OAAM,GAAG,OAAO,GAAG,GAAG,EAAE;AAC7D,YAAI,GAAG,OAAO,OAAW,OAAM,KAAKA,OAAM,GAAG,MAAM,GAAG,EAAE,EAAE;AAC1D,YAAI,GAAG,QAAQ,OAAW,OAAM,KAAKA,OAAM,GAAG,OAAO,GAAG,GAAG,EAAE;AAAA,MAC/D,OAAO;AACL,cAAM,KAAKA,OAAM,GAAG,MAAM,KAAK,EAAE;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,OAAmB;AACxC,SAAO,MAAM,SAAS,IAClBA,cAAaA,KAAI,KAAK,OAAOA,WAAU,CAAC,KACxCA;AACN;AAIO,SAAS,+BACd,IACA,WACA,UAAoC,CAAC,GACf;AACtB,QAAM,EAAE,YAAY,CAAC,GAAG,qBAAqB,MAAM,IAAI;AAEvD,WAAS,WAAgB;AACvB,WAAOA,KAAI,IAAID,YAAW,SAAS,CAAC;AAAA,EACtC;AAEA,iBAAe,YACb,MACA,SACA,OACoC;AACpC,QAAI,KAAK,WAAW,EAAG,QAAO;AAG9B,eAAW,aAAa,SAAS;AAC/B,UAAI,CAAC,UAAU,SAAS,GAAG;AACzB,cAAM,UAAU,yBAAyB,IAAI,SAAS,iCAAiC;AAAA,MACzF;AAAA,IACF;AAIA,eAAW,CAAC,WAAW,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;AACxD,UAAI,IAAI,SAAS,SAAS;AACxB,cAAM,qBAAqB,IAAI,MAAM,WAAW,KAAK,OAAO,kBAAkB;AAAA,MAChF,WAAW,CAAC,QAAQ,SAAS,SAAS,GAAG;AACvC,cAAM,uBAAuB,IAAI,MAAM,WAAW,GAAG;AAAA,MACvD;AAAA,IACF;AAGA,eAAW,aAAa,SAAS;AAC/B,YAAM,MAAM,UAAU,SAAS;AAC/B,UAAI,IAAI,SAAS,SAAS;AACxB,cAAM,qBAAqB,IAAI,MAAM,WAAW,KAAK,OAAO,kBAAkB;AAAA,MAChF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,SAAS,MAAoD;AACjE,YAAM;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,UAAU,CAAC;AAAA,QACX;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,aAAa;AAAA,QACb;AAAA,MACF,IAAI;AAEJ,UAAI,CAACD,iBAAgB,IAAI,OAAiB,GAAG;AAC3C,cAAM,UAAU,sBAAsB,IAAI,OAAO,2DAA2D;AAAA,MAC9G;AAEA,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,QAAQ,gBAAgB,gBAAgB,SAAS,MAAM;AAC7D,YAAM,QAAQ,cAAc,KAAK;AACjC,YAAM,UAAUE,KAAI,IAAID,YAAW,OAAO,CAAC;AAC3C,YAAM,UAAUC,KAAI,IAAI,eAAe,SAAS,SAAS,KAAK;AAE9D,YAAM,cAAc,MAAM,GAAG;AAAA,QAC3BA,qCAAoC,SAAS,CAAC,GAAG,KAAK;AAAA,MACxD;AACA,YAAM,QAAQ,OAAQ,YAAY,KAAK,CAAC,IAAgC,OAAO,KAAK,CAAC;AAErF,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,qBAAoB,SAAS,CAAC,GAAG,KAAK,aAAa,OAAO,IAAI,OAAO,UAAU,QAAQ,WAAW,MAAM;AAAA,MAC1G;AAEA,YAAM,OAAO,WAAW;AACxB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AAEtC,YAAM,cAAc,KAAK,KAAK,QAAQ,QAAQ;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,IAAY,UAAoB,CAAC,GAAsB;AACnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,eAAe,EAAE;AAAA,MACjD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,IAEA,MAAM,WAAW,MAAc,UAAoB,CAAC,GAAsB;AACxE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,iBAAiB,IAAI;AAAA,MACrD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,IAEA,MAAM,OAAO,MAAkC;AAC7C,YAAM,SAAkC;AAAA,QACtC,GAAI;AAAA,QACJ,IAAI,OAAO,WAAW;AAAA,QACtB,YAAY,oBAAI,KAAK;AAAA,QACrB,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS;AACxE,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAMA,KAAI,IAAID,YAAW,CAAC,CAAC,CAAC,GAAGC,QAAO;AAC9E,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAMA,OAAM,CAAC,EAAE,GAAGA,QAAO;AAEnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,mBAAkB,SAAS,CAAC,KAAK,OAAO,aAAa,OAAO;AAAA,MAC9D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAAY,MAAyC;AAChE,YAAM,SAAkC;AAAA,QACtC,GAAI;AAAA,QACJ,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,QAAQ,MAAM,MAAS;AACvF,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO,KAAK,QAAQ,EAAE;AAAA,MACxB;AAEA,YAAM,aAAaA,KAAI;AAAA,QACrB,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAMA,OAAMA,KAAI,IAAID,YAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;AAAA,QAC7DC;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,cAAa,SAAS,CAAC,QAAQ,UAAU,eAAe,EAAE;AAAA,MAC5D;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAA2B;AACtC,YAAM,GAAG,QAAQA,mBAAkB,SAAS,CAAC,eAAe,EAAE,EAAE;AAAA,IAClE;AAAA,IAEA,MAAM,QAAQ,OAAuB,CAAC,GAAiB;AACrD,YAAM,EAAE,UAAU,CAAC,GAAG,eAAe,IAAI;AACzC,YAAM,QAAQ,gBAAgB,gBAAgB,QAAW,MAAS;AAClE,YAAM,QAAQ,cAAc,KAAK;AAEjC,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,GAAG,KAAK;AAAA,MACxC;AAEA,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;ACjSA,OAAOC,aAAY;AACnB,SAAS,OAAAC,YAAW;AAUb,SAAS,sBAAsB,IAA8C;AAClF,QAAM,QAAQA,KAAI,IAAI,SAAS;AAE/B,SAAO;AAAA,IACL,MAAM,SAAS,OAA6B,CAAC,GAAwC;AACnF,YAAM,EAAE,OAAO,GAAG,WAAW,IAAI,MAAM,SAAS,IAAI;AACpD,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,CAAC;AACf,UAAI,KAAM,OAAM,KAAKA,cAAa,IAAI,EAAE;AACxC,UAAI,SAAU,OAAM,KAAKA,yBAAwB;AAEjD,YAAM,QACJ,MAAM,SAAS,IAAIA,cAAaA,KAAI,KAAK,OAAOA,WAAU,CAAC,KAAKA;AAElE,YAAM,cAAc,MAAM,GAAG,QAAQA,qCAAoC,KAAK,GAAG,KAAK,EAAE;AACxF,YAAM,QAAQ;AAAA,QACX,YAAY,KAAK,CAAC,IAAgC,OAAO,KAAK;AAAA,MACjE;AAEA,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,qBAAoB,KAAK,GAAG,KAAK,mCAAmC,QAAQ,WAAW,MAAM;AAAA,MAC/F;AAEA,YAAM,cAAc,KAAK,KAAK,QAAQ,QAAQ;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM,WAAW;AAAA,QACjB,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,IAAuC;AACnD,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,KAAK,eAAe,EAAE;AAAA,MAC5C;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,MAA4C;AACvD,YAAM,SAAkC;AAAA,QACtC,GAAG;AAAA,QACH,IAAID,QAAO,WAAW;AAAA,QACtB,iBAAiB;AAAA,QACjB,YAAY,oBAAI,KAAK;AAAA,QACrB,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS;AACxE,YAAM,UAAUC,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAMA,KAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAGA,QAAO;AACzE,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAMA,OAAM,CAAC,EAAE,GAAGA,QAAO;AAEnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,mBAAkB,KAAK,KAAK,OAAO,aAAa,OAAO;AAAA,MACzD;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAAY,MAAqD;AAC5E,YAAM,SAAkC,EAAE,GAAG,MAAM,YAAY,oBAAI,KAAK,EAAE;AAC1E,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE;AAAA,QACrC,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,QAAQ,MAAM;AAAA,MAClC;AACA,UAAI,QAAQ,WAAW,EAAG,QAAO,KAAK,QAAQ,EAAE;AAEhD,YAAM,aAAaA,KAAI;AAAA,QACrB,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAMA,OAAMA,KAAI,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AAAA,QACxDA;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,cAAa,KAAK,QAAQ,UAAU,eAAe,EAAE;AAAA,MACvD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAA2B;AACtC,YAAM,GAAG,QAAQA,mBAAkB,KAAK,eAAe,EAAE,EAAE;AAAA,IAC7D;AAAA,IAEA,MAAM,wBAAwB,KAA8B;AAC1D,UAAI,IAAI,WAAW,EAAG;AACtB,YAAM,SAASA,KAAI,KAAK,IAAI,IAAI,CAAC,OAAOA,OAAM,EAAE,EAAE,GAAGA,QAAO;AAC5D,YAAM,GAAG;AAAA,QACPA,cAAa,KAAK,+EAA+E,MAAM;AAAA,MACzG;AAAA,IACF;AAAA,IAEA,MAAM,wBAAwB,KAA8B;AAC1D,UAAI,IAAI,WAAW,EAAG;AACtB,YAAM,SAASA,KAAI,KAAK,IAAI,IAAI,CAAC,OAAOA,OAAM,EAAE,EAAE,GAAGA,QAAO;AAC5D,YAAM,GAAG;AAAA,QACPA,cAAa,KAAK,4FAA4F,MAAM;AAAA,MACtH;AAAA,IACF;AAAA,EACF;AACF;;;AxB9DA,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUvB,SAAS,aAAa,SAAqD;AAChF,MAAI,CAAC,QAAQ,SAAS;AACpB,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,cAAc,kBAAkB,MAAM;AAC5C,QAAM,EAAE,SAAS,UAAU,IAAI,WAAW,OAAO,KAAK,IAAI;AAC1D,QAAM,UAAU,QAAQ,QAAQ;AAChC,QAAM,cAAc,OAAO;AAI3B,QAAM,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAI7D,QAAM,cAAc,QAAQ,aAAa,oBAAI,IAAI;AACjD,2BAAyB,UAAU,WAAW;AAC9C,QAAM,uBAAuB,2BAA2B,WAAW;AAEnE,QAAM,MAAM,IAAI,KAAK;AAWrB,QAAM,gBAAgB,QAAQ,mBAAmB,KAAK,CAAC;AACvD,QAAM,kBAAkB,QAAQ,SAAS,YAAY,QAAQ,QAAQ,QAAQ,aAAa;AAC1F,MAAI;AAAA,IACF;AAAA,IACA,gCAAgC;AAAA,MAC9B,YAAY;AAAA,MACZ,GAAI,mBAAmB,EAAE,cAAc,WAAW;AAAA,IACpD,CAAC;AAAA,EACH;AAGA,MAAI,IAAI,KAAK,qBAAqB,QAAQ,EAAE,QAAQ,KAAK,SAAS,KAAK,CAAC,CAAC;AACzE,MAAI,QAAQ,YAAY;AAKxB,QAAM,gBAAgB,qBAAqB,SAAS;AAIpD,QAAM,iBAAiB,qBAAqB,EAAE;AAC9C,QAAM,oBAAoB,2BAA2B,aAAa;AAElE,QAAM,cAAc,OAAO,WAA2C;AACpE,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBC;AAAA;AAAA;AAAA,yBAGmB,MAAM;AAAA;AAAA,IAE3B;AACA,WAAQ,OAAO,KAAK,CAAC,GAAoC,QAAQ;AAAA,EACnE;AAEA,QAAM,mBAAmB,0BAA0B,eAAe,WAAW;AAI7E,QAAM,eAAe,OAAO;AAAA,IAC1B,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC7D;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,UAAU;AAAA,IAC5E,CAAC;AAAA,EACH;AACA,QAAM,gBAAgB,OAAO;AAAA,IAC3B,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC9D;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,UAAU;AAAA,IAC7E,CAAC;AAAA,EACH;AACA,QAAM,QAAQ,EAAE,GAAG,cAAc,GAAG,cAAc;AAClD,QAAM,YAAY,sBAAsB,EAAE;AAQ1C,QAAM,qBAAqB,OAAO;AAAA,IAChC,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC7D;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,YAAY;AAAA,QAC1E,WAAW,kBAAmB,GAAyB,QAAQ,QAAQ;AAAA,QACvE,oBAAoB;AAAA,MACtB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,sBAAsB,OAAO;AAAA,IACjC,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC9D;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,YAAY;AAAA,QAC3E,WAAW,kBAAmB,GAA0B,QAAQ,QAAQ;AAAA,QACxE,oBAAoB;AAAA,MACtB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,cAAc,EAAE,GAAG,oBAAoB,GAAG,oBAAoB;AAgBpE,QAAM,eAAe,OAAO,YAAY;AAAA,IACtC,GAAG,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAChE;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,UAAU;AAAA,IAC5E,CAAC;AAAA,IACD,GAAG,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MACjE;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,UAAU;AAAA,IAC7E,CAAC;AAAA,EACH,CAAC;AAWD,qBAAmB,KAAK,EAAE;AAG1B,MAAI,IAAI,gBAAgB,cAAc;AACtC,MAAI,IAAI,gBAAgB,uBAAuB;AAI/C,MAAI,IAAI,YAAY,QAAQ,GAAG,CAAC,MAAM;AACpC,UAAM,QAAiC,CAAC;AAExC,eAAW,MAAM,OAAO,OAAO,SAAS,aAAa,GAA0B;AAC7E,YAAM,OAAO,GAAG;AAChB,UAAI,GAAG,UAAU;AACf,cAAM,YAAY,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AAAA,MAChG,OAAO;AACL,cAAM,YAAY,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,kBAAkB,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AACzG,cAAM,YAAY,KAAK,IAAI,EAAE,QAAQ,SAAS,QAAQ,CAAC,IAAI;AAAA,UACzD,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,KAAK,EAAE;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAEA,eAAW,MAAM,OAAO,OAAO,SAAS,cAAc,GAA2B;AAC/E,YAAM,YAAY,mBAAmB,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,kBAAkB,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AACpH,YAAM,YAAY,aAAa,GAAG,IAAI,EAAE,QAAQ,OAAO,MAAM,CAAC,IAAI;AAAA,QAChE,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,UAAU,MAAM,CAAC,GAAG,KAAK,EAAE;AAAA,MAC5D;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,oBAAoB,MAAM,CAAC,OAAO,EAAE,EAAE;AAC/F,UAAM,YAAY,UAAU,EAAE,QAAQ,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,wBAAwB,MAAM,CAAC,OAAO,EAAE,EAAE;AAEpH,WAAO,EAAE,KAAK;AAAA,MACZ,SAAS;AAAA,MACT,MAAM,EAAE,OAAO,2BAA2B,SAAS,QAAQ;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,MAAI;AAAA,IAAI;AAAA,IAA2B,CAAC,MAClC,EAAE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,MAAM,EAAE,OAAO,0BAA0B,SAAS,QAAQ;AAAA,MAC1D,OAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH;AAMA,QAAM,eAA4C,OAAO,YAAY;AAAA,IACnE,GAAG,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAChE;AAAA,MACA,kBAAmB,GAAyB,MAAM;AAAA,IACpD,CAAC;AAAA,IACD,GAAG,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MACjE;AAAA,MACA,kBAAmB,GAA0B,MAAM;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AAID,8BAA4B,KAAK,UAAU,aAAa,cAAc,aAAa,eAAe,oBAAoB;AACtH,4BAA0B,KAAK,WAAW,aAAa,aAAa;AAsBpE,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,aAAa,QAAQ;AAC3B,QAAI,aAA6B;AACjC,QAAI,YAAqB;AACzB,UAAM,QAAQ,OAAO,wBAAsB,EACxC,KAAK,CAAC,EAAE,qBAAqB,MAAM;AAClC,mBAAa,qBAAqB,UAAU,cAAc,cAAc,sBAAsB,IAAI,UAAU;AAAA,IAC9G,CAAC,EACA,MAAM,CAAC,QAAiB;AACvB,kBAAY;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,OAAO,MAAM,yEAAoE,OAAO;AAAA,CAAI;AAAA,IACtG,CAAC;AACH,UAAM,gBAAyB,OAAO,MAAM;AAC1C,UAAI,CAAC,cAAc,CAAC,UAAW,OAAM;AACrC,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,sCAAsC,EAAE;AAAA,UACpG;AAAA,QACF;AAAA,MACF;AACA,aAAO,WAAW,GAAG,YAAY;AAAA,MAAC,CAAC;AAAA,IACrC;AACA,QAAI,eAAe;AACjB,UAAI,IAAI,YAAY,eAAe,aAAa;AAAA,IAClD,OAAO;AACL,UAAI,IAAI,YAAY,aAAa;AAAA,IACnC;AAAA,EACF;AAKA;AAAA,IACE;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,GAAI,gBAAgB,UAAa,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,MAK/C,kBAAkB,QAAQ,SAAS;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,sBAAoB,KAAK,UAAU,EAAE;AACrC,qBAAmB,KAAK,IAAI,mBAAmB,gBAAgB;AAE/D,6BAA2B,KAAK,UAAU,OAAO,cAAc,WAAW,mBAAmB,EAAE;AAC/F,2BAAyB,KAAK,WAAW,SAAS,mBAAmB,WAAW;AAEhF,SAAO,EAAE,QAAQ,IAAI;AACvB;;;AyBvVO,SAAS,aAAa,UAA6B,CAAC,GAAkB;AAC3E,QAAM,OAAO,QAAQ,QAAQ,OAAO,QAAQ,IAAI,MAAM,KAAK,GAAI;AAC/D,QAAM,YAAY,QAAQ,YAAY,oBAAoB,IAAI;AAE9D,QAAM,OAAmB;AAAA,IACvB,QAAQ,QAAQ,MAAM,WAAW,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IAClE,SAAS,QAAQ,MAAM,WAAW;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,aAAa,QAAQ,MAAM,eAAe;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,gBAAwB;AACtB,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;ACHA,SAAS,eAAe,KAAiD;AACvE,QAAM,aAAa,QAAQ,IAAI,UAAU,MAAM;AAC/C,SAAO;AAAA,IACL,SAAS,IAAI,WAAW;AAAA,IACxB,UAAU,IAAI,YAAY;AAAA,IAC1B,eAAe,IAAI,iBAAiB;AAAA,IACpC,UAAU,IAAI,YAAY;AAAA,IAC1B,eAAe,IAAI,iBAAiB,IAAI,YAAY;AAAA,EACtD;AACF;AAEO,SAAS,iBAAiB,UAA6B,CAAC,GAAe;AAC5E,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,QAAQ,QAAQ,OAAO,kBAAkB,SAC3C,EAAE,eAAe,QAAQ,MAAM,cAAc,IAC7C;AAEJ,SAAO;AAAA,IACL;AAAA,IACA,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,IACnC,GAAI,QAAQ,cAAc,UAAa,EAAE,WAAW,QAAQ,UAAU;AAAA,IACtE,GAAI,QAAQ,YAAY,UAAa,EAAE,SAAS,eAAe,QAAQ,OAAO,EAAE;AAAA,EAClF;AACF;","names":["sql","value","parsePagination","sql","sql","row","sign","getCookie","sql","sql","getCookie","sql","sql","sql","sql","sql","SORTABLE_FIELDS","quoteIdent","sql","crypto","sql","sql"]}
+{"version":3,"sources":["../src/paths.ts","../src/app.ts","../src/middleware/cors.ts","../src/middleware/security-headers.ts","../src/middleware/error.ts","../src/middleware/auth.ts","../src/auth/jwt.ts","../src/middleware/must-change-password.ts","../src/middleware/permission.ts","../src/middleware/hierarchy.ts","../src/middleware/rate-limit.ts","../src/auth/registry.ts","../src/programmatic/resolve.ts","../src/projector.ts","../src/routes/query-params.ts","../src/routes/content.ts","../src/routes/media.ts","../src/routes/admin/content.ts","../src/media-references.ts","../src/routes/admin/media.ts","../src/routes/admin/auth.ts","../src/auth/password.ts","../src/routes/admin/users.ts","../src/routes/admin/config.ts","../src/routes/admin/schema.ts","../src/repositories/content.ts","../src/repositories/media.ts","../src/server/node.ts","../src/index.ts"],"sourcesContent":["// ─── Public route path construction ───────────────────────────────────────────\n//\n// The single place public route paths are built. Registrators must not hardcode\n// '/api/...': the prefix is configurable (api.prefix) and Stage 2 inserts a\n// version segment here.\n\nexport function normalizePrefix(prefix: string | undefined): string {\n  if (prefix === undefined) return '/api'\n  const withSlash = prefix.startsWith('/') ? prefix : `/${prefix}`\n  const trimmed = withSlash.replace(/\\/+$/, '')\n  return trimmed === '' ? '/api' : trimmed\n}\n\nexport type PublicPaths = {\n  collection(basePath: string): string\n  item(basePath: string): string\n  taxonomyCollection(typeName: string): string\n  taxonomyItem(typeName: string): string\n  mediaCollection(): string\n  mediaItem(): string\n  openapi(): string\n}\n\nexport function createPublicPaths(prefix: string): PublicPaths {\n  return {\n    collection: (basePath) => `${prefix}/${basePath}`,\n    item: (basePath) => `${prefix}/${basePath}/:slug`,\n    taxonomyCollection: (typeName) => `${prefix}/taxonomy/${typeName}`,\n    taxonomyItem: (typeName) => `${prefix}/taxonomy/${typeName}/:id`,\n    mediaCollection: () => `${prefix}/media`,\n    mediaItem: () => `${prefix}/media/:id`,\n    openapi: () => `${prefix}/openapi.json`,\n  }\n}\n","import { Hono } from 'hono'\nimport type { Handler } from 'hono'\nimport { sql } from 'drizzle-orm'\nimport type { StorageAdapter, SchemaRegistry, ParsedContentType, ParsedTaxonomyType, ParsedParagraphType, ResolvedRateLimitConfig, CorsConfig, ResolvedGraphQLConfig } from '@bobbykim/manguito-cms-core'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { createCorsMiddleware } from './middleware/cors.js'\nimport { createSecurityHeadersMiddleware } from './middleware/security-headers.js'\nimport { errorHandler } from './middleware/error.js'\nimport { createAuthMiddleware } from './middleware/auth.js'\nimport { mustChangePasswordCheck } from './middleware/must-change-password.js'\nimport { createPermissionMiddleware } from './middleware/permission.js'\nimport { createHierarchyMiddleware } from './middleware/hierarchy.js'\nimport { resolveListRateLimit } from './middleware/rate-limit.js'\nimport { buildRolesRegistry } from './auth/registry.js'\nimport { createProgrammaticResolver, validateResolverBindings, type ResolverMap } from './programmatic/resolve.js'\nimport { registerPublicContentRoutes } from './routes/content.js'\nimport { registerPublicMediaRoutes } from './routes/media.js'\nimport { registerAdminContentRoutes } from './routes/admin/content.js'\nimport { registerAdminMediaRoutes } from './routes/admin/media.js'\nimport { registerAuthRoutes } from './routes/admin/auth.js'\nimport { registerUserRoutes } from './routes/admin/users.js'\nimport { registerConfigRoute } from './routes/admin/config.js'\nimport { registerSchemaRoute } from './routes/admin/schema.js'\nimport { createDrizzleContentRepository } from './repositories/content.js'\nimport { buildRelationsMap } from './relations.js'\nimport { createMediaRepository } from './repositories/media.js'\nimport { createFieldKeyMap, type FieldKeyMap } from './field-keys.js'\nimport { SORTABLE_FIELDS } from './routes/query-params.js'\nimport { buildProjectors, type Projectors } from './projector.js'\nimport { normalizePrefix, createPublicPaths } from './paths.js'\n\nexport type CreateCmsAppOptions = {\n  /** CMS display name shown in GET /admin/api/config. Defaults to 'Manguito CMS'. */\n  name?: string\n  prefix?: string\n  storage: StorageAdapter\n  registry: SchemaRegistry\n  db: DrizzlePostgresInstance\n  media?: {\n    /** Optional upload size cap in bytes. Returned by GET /admin/api/config for client-side UX validation. */\n    max_file_size?: number\n  }\n  rateLimit?: ResolvedRateLimitConfig\n  cors?: CorsConfig\n  /** Programmatic field resolvers, keyed `${schema}::${field}`. */\n  resolvers?: ResolverMap\n  /** GraphQL module config (resolved). When enabled, mounts POST /graphql. */\n  graphql?: ResolvedGraphQLConfig\n}\n\nexport interface ManguitoCmsAPIAdapter {\n  readonly prefix: string\n  readonly app: Hono\n}\n\nconst MISSING_STORAGE_ERROR = `✗ api.storage is required but not configured.\n  Add a storage adapter to your manguito.config.ts:\n\n  api: createAPIAdapter({\n    storage: createLocalAdapter(),   // dev\n    // storage: createS3Adapter({ bucket: '...', region: '...' })  // production\n  })\n\nExiting.`\n\nexport function createCmsApp(options: CreateCmsAppOptions): ManguitoCmsAPIAdapter {\n  if (!options.storage) {\n    throw new Error(MISSING_STORAGE_ERROR)\n  }\n\n  const prefix = normalizePrefix(options.prefix)\n  const publicPaths = createPublicPaths(prefix)\n  const { storage, registry, db, rateLimit, media, cors } = options\n  const cmsName = options.name ?? 'Manguito CMS'\n  const maxFileSize = media?.max_file_size\n\n  // Build roles registry — throws immediately if roles are missing or invalid.\n  // The server must not start with a broken registry.\n  const rolesRegistry = buildRolesRegistry(registry.roles.roles)\n\n  // Validate programmatic-field bindings at startup (throws on mismatch, like\n  // the storage/roles checks above). Undefined resolvers ⇒ empty map.\n  const resolverMap = options.resolvers ?? new Map()\n  validateResolverBindings(registry, resolverMap)\n  const programmaticResolver = createProgrammaticResolver(resolverMap)\n\n  const app = new Hono()\n\n  // Security headers for all routes — registered before CORS so normal and\n  // CORS-handled responses carry the conservative defaults. Responses produced\n  // by app.onError (thrown errors) bypass this middleware's post-next step;\n  // those are JSON error envelopes with no clickjacking/XSS surface. CSP\n  // connect-src is derived from the storage adapter: presigned uploads go\n  // browser→storage directly, so that host must be allowlisted.\n  // The GraphiQL explorer (dev-only by default) boots from a CDN bundle plus\n  // inline scripts, which the strict script-src blocks — so when it is enabled\n  // the /graphql path alone gets a relaxed CSP (ADR api/0010).\n  const uploadOrigins = storage.getUploadOrigins?.() ?? []\n  const graphiqlEnabled = options.graphql?.enabled === true && options.graphql.graphiql === true\n  app.use(\n    '*',\n    createSecurityHeadersMiddleware({\n      connectSrc: uploadOrigins,\n      ...(graphiqlEnabled && { graphiqlPath: '/graphql' }),\n    }),\n  )\n\n  // CORS for all routes\n  app.use('*', createCorsMiddleware(cors ?? { origin: '*', enabled: true }))\n  app.onError(errorHandler)\n\n  // Rate limiter for public list endpoints — threaded into route registrators,\n  // applied only to paginated collection routes (not single-item lookups).\n  // `undefined` when disabled via rateLimit.findAll === '*'.\n  const listRateLimit = resolveListRateLimit(rateLimit)\n\n  // ── Middleware factories — all close over rolesRegistry built once at startup ──\n\n  const authMiddleware = createAuthMiddleware(db)\n  const requirePermission = createPermissionMiddleware(rolesRegistry)\n\n  const getUserRole = async (userId: string): Promise<string | null> => {\n    const result = await db.execute(\n      sql`SELECT r.name AS role\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${userId}\n          LIMIT 1`\n    )\n    return (result.rows[0] as { role: string } | undefined)?.role ?? null\n  }\n\n  const requireHierarchy = createHierarchyMiddleware(rolesRegistry, getUserRole)\n\n  // ── Field key maps ──────────────────────────────────────────────────────────\n  //\n  // One per content, taxonomy AND paragraph type, built once at startup, keyed\n  // by machine name. Throws on a label / column collision — the server must not\n  // boot with an ambiguous mapping.\n  //\n  // Paragraph types belong in the same object as the other two, not a sidecar:\n  // both consumers index it by machine name over a key space that includes\n  // them. `buildProjectors` walks `registry.paragraph_types` to project\n  // paragraph children, and `graphql/schema.ts`'s `buildObjectType` runs over\n  // paragraph types too — so a programmatic field on a paragraph type needs its\n  // map here to be handed a label-keyed record, exactly like one on a content\n  // type. Every other GraphQL field resolves per field by column and is\n  // indifferent to this map.\n  const fieldKeyMaps: Record<string, FieldKeyMap> = Object.fromEntries([\n    ...Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createFieldKeyMap((ct as ParsedContentType).fields),\n    ]),\n    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createFieldKeyMap((tt as ParsedTaxonomyType).fields),\n    ]),\n    ...Object.entries(registry.paragraph_types).map(([typeName, pt]) => [\n      typeName,\n      createFieldKeyMap((pt as ParsedParagraphType).fields),\n    ]),\n  ])\n\n  // Recursive outbound projection. Every read response is projected through\n  // this rather than through a bare toLabels.\n  const projectors: Projectors = buildProjectors(registry, fieldKeyMaps)\n\n  // Maps SORTABLE_FIELDS' labels to this type's storage columns, so the\n  // repository can validate sort_by against columns once the route has mapped\n  // it. Identity today for every schema the parser produces — diverges only\n  // once schema versioning lands and a label's column_name differs from it.\n  const sortableColumnsFor = (typeName: string): Set<string> =>\n    new Set(\n      [...SORTABLE_FIELDS].map((label) => fieldKeyMaps[typeName]!.columnFor(label) ?? label)\n    )\n\n  // ── Repositories ──────────────────────────────────────────────────────────────\n\n  const contentRepos = Object.fromEntries(\n    Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name, {\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ])\n  )\n  const taxonomyRepos = Object.fromEntries(\n    Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name, {\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ])\n  )\n  const repos = { ...contentRepos, ...taxonomyRepos }\n  const mediaRepo = createMediaRepository(db)\n\n  // ── Public-only repos ───────────────────────────────────────────────────────\n  //\n  // Relation resolution (?include=, always-resolved media) is wired only for\n  // the public read API. Admin routes reuse `repos` above and must keep\n  // receiving raw foreign-key IDs back from findOne/update — the edit forms\n  // (e.g. MediaUpload.vue) expect a plain ID string, not a resolved object.\n  const publicContentRepos = Object.fromEntries(\n    Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name, {\n        relations: buildRelationsMap((ct as ParsedContentType).fields, registry),\n        publishedRelations: true,\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ])\n  )\n  const publicTaxonomyRepos = Object.fromEntries(\n    Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name, {\n        relations: buildRelationsMap((tt as ParsedTaxonomyType).fields, registry),\n        publishedRelations: true,\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ])\n  )\n  const publicRepos = { ...publicContentRepos, ...publicTaxonomyRepos }\n\n  // ── GraphQL repos ───────────────────────────────────────────────────────────\n  //\n  // GraphQL resolves relations lazily, per selected field, through its own\n  // request-scoped dataloaders — so its repos must NOT resolve relations\n  // eagerly. Reusing `publicRepos` here is actively wrong: their eager pass\n  // overwrites a media field's column (the FK column and the field share a\n  // name) with the resolved media object, and the dataloader then reads that\n  // object back where a UUID is expected. It also pays for resolving every\n  // relation on every query, including the ones the client never selected.\n  //\n  // These are still public reads: every GraphQL resolver passes\n  // `published_only: true`, and the dataloaders filter relation targets by\n  // published (ADR api/0002). Built separately from the admin `repos` so a\n  // future change there can never silently widen the public surface.\n  //\n  // They do take `sortableColumns`, like every other repo here: the GraphQL\n  // sort enum's `title` value is a schema field's LABEL, which\n  // `collectionResolver` maps to a column before calling findMany.\n  const graphqlRepos = Object.fromEntries([\n    ...Object.entries(registry.content_types).map(([typeName, ct]) => [\n      typeName,\n      createDrizzleContentRepository(db, (ct as ParsedContentType).db.table_name, {\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ]),\n    ...Object.entries(registry.taxonomy_types).map(([typeName, tt]) => [\n      typeName,\n      createDrizzleContentRepository(db, (tt as ParsedTaxonomyType).db.table_name, {\n        sortableColumns: sortableColumnsFor(typeName),\n      }),\n    ]),\n  ])\n\n  // ── Auth routes registered directly on app BEFORE the blanket use() calls ───────\n  //\n  // registerAuthRoutes uses full paths (/admin/api/auth/login etc.). Mounting via\n  // app.route('/admin/api/auth', subRouter) would strip that prefix and make the\n  // routes unreachable, so we register directly on app.\n  //\n  // In Hono, handlers registered before a use() call are reached first. A route\n  // handler that returns a Response does not call next(), so the blanket\n  // authMiddleware registered below never runs for matched auth paths.\n  registerAuthRoutes(app, db)\n\n  // ── Blanket middleware for all /admin/api/* (registered after auth routes) ─────\n  app.use('/admin/api/*', authMiddleware)\n  app.use('/admin/api/*', mustChangePasswordCheck)\n\n  // ── OpenAPI spec endpoints ────────────────────────────────────────────────────\n\n  app.get(publicPaths.openapi(), (c) => {\n    const paths: Record<string, unknown> = {}\n\n    for (const ct of Object.values(registry.content_types) as ParsedContentType[]) {\n      const base = ct.default_base_path\n      if (ct.only_one) {\n        paths[publicPaths.collection(base)] = { get: { summary: `Get ${ct.label}`, tags: [ct.label] } }\n      } else {\n        paths[publicPaths.collection(base)] = { get: { summary: `List published ${ct.label}`, tags: [ct.label] } }\n        paths[publicPaths.item(base).replace(':slug', '{slug}')] = {\n          get: { summary: `Get ${ct.label} by slug`, tags: [ct.label] },\n        }\n      }\n    }\n\n    for (const tt of Object.values(registry.taxonomy_types) as ParsedTaxonomyType[]) {\n      paths[publicPaths.taxonomyCollection(tt.name)] = { get: { summary: `List published ${tt.label}`, tags: [tt.label] } }\n      paths[publicPaths.taxonomyItem(tt.name).replace(':id', '{id}')] = {\n        get: { summary: `Get ${tt.label} by id`, tags: [tt.label] },\n      }\n    }\n\n    paths[publicPaths.mediaCollection()] = { get: { summary: 'List media items', tags: ['Media'] } }\n    paths[publicPaths.mediaItem().replace(':id', '{id}')] = { get: { summary: 'Get media item by id', tags: ['Media'] } }\n\n    return c.json({\n      openapi: '3.0.3',\n      info: { title: 'Manguito CMS Public API', version: '1.0.0' },\n      paths,\n    })\n  })\n  // Admin spec — auth covered by the blanket use() above\n  app.get('/admin/api/openapi.json', (c) =>\n    c.json({\n      openapi: '3.0.3',\n      info: { title: 'Manguito CMS Admin API', version: '1.0.0' },\n      paths: {},\n    })\n  )\n\n  // ── Public routes ─────────────────────────────────────────────────────────────\n\n  registerPublicContentRoutes(app, registry, publicRepos, projectors, publicPaths, listRateLimit, programmaticResolver)\n  registerPublicMediaRoutes(app, mediaRepo, publicPaths, listRateLimit)\n\n  // ── GraphQL (opt-in) ──────────────────────────────────────────────────────────\n  //\n  // Loaded via a DYNAMIC import so `graphql`/`graphql-yoga` never load unless a\n  // consumer opts in — the `.` entry (this file) must stay free of a static\n  // dependency on the graphql/ subpath (ADR api/0006). The import kicks off\n  // immediately (schema-building and Armor-plugin setup are synchronous once the\n  // module is loaded; only the `import()` itself is async), and any request that\n  // lands on /graphql before it resolves awaits the same in-flight promise —\n  // there's a single shared `ready` promise, never a re-import per request.\n  // Unauthenticated by design: it sits alongside /api/*, not behind the\n  // /admin/api/* auth middleware registered above, and only ever reads through\n  // `publicRepos` (published-only, same as the REST public routes).\n  //\n  // `buildGraphQLSchema` can throw synchronously (e.g. a GraphQL type-name\n  // collision between a content type and a taxonomy type) — since that throw\n  // happens inside a `.then()` callback, it rejects `ready`. A `.catch` is\n  // attached below so that rejection is HANDLED: an unhandled rejection here\n  // would otherwise crash the entire Node process at startup, taking down all\n  // REST routes with it, regardless of whether any client ever hits /graphql.\n  // Init failure is instead contained to a 500 on /graphql itself.\n  if (options.graphql?.enabled) {\n    const gqlOptions = options.graphql\n    let gqlHandler: Handler | null = null\n    let initError: unknown = null\n    const ready = import('./graphql/handler.js')\n      .then(({ createGraphQLHandler }) => {\n        gqlHandler = createGraphQLHandler(registry, graphqlRepos, fieldKeyMaps, programmaticResolver, db, gqlOptions)\n      })\n      .catch((err: unknown) => {\n        initError = err\n        const message = err instanceof Error ? err.message : String(err)\n        process.stderr.write(`✗ GraphQL schema failed to initialize; /graphql will return 500. ${message}\\n`)\n      })\n    const invokeGraphQL: Handler = async (c) => {\n      if (!gqlHandler && !initError) await ready\n      if (!gqlHandler) {\n        return c.json(\n          { ok: false, error: { code: 'GRAPHQL_INIT_FAILED', message: 'GraphQL schema failed to initialize' } },\n          500\n        )\n      }\n      return gqlHandler(c, async () => {})\n    }\n    if (listRateLimit) {\n      app.all('/graphql', listRateLimit, invokeGraphQL)\n    } else {\n      app.all('/graphql', invokeGraphQL)\n    }\n  }\n\n  // ── Admin routes — all registered AFTER the blanket use() so auth middleware\n  //    runs before every handler. registerConfigRoute is called first so its\n  //    GET /admin/api/config handler wins over the stale stub in content.ts.\n  registerConfigRoute(\n    app,\n    {\n      name: cmsName,\n      ...(maxFileSize !== undefined && { maxFileSize }),\n      // Cloud storage (s3/cloudinary) issues real presigned URLs, so the admin\n      // uploads straight to it — never routing the file through the server\n      // (which breaks on serverless). Local storage has no presigned receiver,\n      // so it uses the direct upload endpoint.\n      presignedUploads: storage.type !== 'local',\n    },\n    rolesRegistry,\n    db,\n  )\n  registerSchemaRoute(app, registry, db)\n  registerUserRoutes(app, db, requirePermission, requireHierarchy)\n\n  registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo, requirePermission, db)\n  registerAdminMediaRoutes(app, mediaRepo, storage, requirePermission, maxFileSize)\n\n  return { prefix, app }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { CorsConfig } from '@bobbykim/manguito-cms-core'\n\nexport function createCorsMiddleware(corsConfig: CorsConfig): MiddlewareHandler {\n  const allowList = Array.isArray(corsConfig.origin)\n    ? corsConfig.origin\n    : [corsConfig.origin]\n  const wildcard = allowList.includes('*')\n  const methods = corsConfig.methods?.join(',') ?? 'GET,POST,PATCH,DELETE,OPTIONS'\n\n  return async function corsMiddleware(c, next) {\n    if (corsConfig.enabled === false) {\n      return next()\n    }\n\n    const requestOrigin = c.req.header('origin')\n\n    if (wildcard) {\n      // Wildcard cannot be combined with credentials per the CORS spec.\n      c.res.headers.set('Access-Control-Allow-Origin', '*')\n    } else if (requestOrigin && allowList.includes(requestOrigin)) {\n      c.res.headers.set('Access-Control-Allow-Origin', requestOrigin)\n      c.res.headers.set('Vary', 'Origin')\n      if (corsConfig.credentials === true) {\n        c.res.headers.set('Access-Control-Allow-Credentials', 'true')\n      }\n    }\n    // Non-matching origins: emit no Allow-Origin (browser blocks the read).\n\n    c.res.headers.set('Access-Control-Allow-Methods', methods)\n    c.res.headers.set('Access-Control-Allow-Headers', 'Content-Type, Authorization')\n\n    if (c.req.method === 'OPTIONS') {\n      return c.newResponse(null, 204)\n    }\n    return next()\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\n\nexport type SecurityHeadersOptions = {\n  /** Extra origins allowed for connect-src (e.g. the storage upload host). */\n  connectSrc?: string[]\n  /**\n   * Path of the GraphiQL explorer (e.g. `/graphql`), set ONLY when GraphiQL is\n   * enabled. That one path gets a relaxed CSP so the explorer can boot; every\n   * other route keeps the strict policy. Leave undefined to disable entirely.\n   */\n  graphiqlPath?: string\n}\n\n/** CDN origin Yoga's GraphiQL loads its UI bundle and stylesheet from. */\nconst GRAPHIQL_CDN = 'https://unpkg.com'\n\n/**\n * Conservative security headers. CSP allows same-origin scripts/styles/fonts\n * for the admin SPA (served same-origin) and blocks framing. connect-src is\n * 'self' plus any storage upload origins passed in — presigned uploads go\n * browser→storage directly (ADR api/0004), so that host must be allowlisted.\n *\n * The GraphiQL explorer is the one documented exception: its UI is a CDN bundle\n * booted by inline scripts, which the strict policy blocks. When `graphiqlPath`\n * is set (i.e. GraphiQL is enabled — off in production by default), requests to\n * exactly that path get `'unsafe-inline'` + the CDN origin for script/style.\n * The relaxation is scoped to that single path and never applies to the admin\n * SPA, the REST API, or GraphQL POST queries from other origins.\n */\nexport function createSecurityHeadersMiddleware(\n  options: SecurityHeadersOptions = {},\n): MiddlewareHandler {\n  const connectSrc = [\"'self'\", ...(options.connectSrc ?? [])].join(' ')\n\n  type CspParts = {\n    scriptSrc: string\n    styleSrc: string\n    connectSrc: string\n    /** Emitted only for GraphiQL, which runs Monaco editor workers off blob: URLs. */\n    workerSrc?: string\n  }\n\n  function buildCsp(parts: CspParts): string {\n    return [\n      \"default-src 'self'\",\n      \"img-src 'self' data: https:\",\n      \"media-src 'self' https:\",\n      `style-src ${parts.styleSrc}`,\n      `script-src ${parts.scriptSrc}`,\n      \"font-src 'self' data:\",\n      `connect-src ${parts.connectSrc}`,\n      ...(parts.workerSrc ? [`worker-src ${parts.workerSrc}`] : []),\n      \"frame-ancestors 'none'\",\n      \"base-uri 'self'\",\n      \"form-action 'self'\",\n    ].join('; ')\n  }\n\n  const csp = buildCsp({\n    scriptSrc: \"'self'\",\n    styleSrc: \"'self' 'unsafe-inline'\",\n    connectSrc,\n  })\n\n  // GraphiQL needs four exceptions, all confined to its own path: the CDN for\n  // the UI bundle + stylesheet, 'unsafe-inline' for its bootstrap scripts,\n  // connect-src for the Monaco worker bundles it fetches from that CDN, and\n  // worker-src blob: because it spawns those workers from Blob URLs.\n  const graphiqlCsp = buildCsp({\n    scriptSrc: `'self' 'unsafe-inline' ${GRAPHIQL_CDN}`,\n    styleSrc: `'self' 'unsafe-inline' ${GRAPHIQL_CDN}`,\n    connectSrc: `${connectSrc} ${GRAPHIQL_CDN}`,\n    workerSrc: \"'self' blob:\",\n  })\n  const graphiqlPath = options.graphiqlPath\n\n  return async function securityHeaders(c, next) {\n    await next()\n    c.res.headers.set('X-Content-Type-Options', 'nosniff')\n    c.res.headers.set('X-Frame-Options', 'DENY')\n    c.res.headers.set('Referrer-Policy', 'no-referrer')\n    const isGraphiql = graphiqlPath !== undefined && c.req.path === graphiqlPath\n    c.res.headers.set('Content-Security-Policy', isGraphiql ? graphiqlCsp : csp)\n  }\n}\n","import type { ErrorHandler } from 'hono'\nimport type { ErrorCode } from '@bobbykim/manguito-cms-core'\n\nconst ERROR_STATUS_MAP: Partial<Record<ErrorCode, number>> = {\n  NOT_FOUND: 404,\n  SLUG_NOT_FOUND: 404,\n  METHOD_NOT_ALLOWED: 405,\n  VALIDATION_ERROR: 422,\n  INVALID_SLUG_FORMAT: 422,\n  SLUG_CONFLICT: 409,\n  PUBLISH_VALIDATION_ERROR: 422,\n  SINGLETON_ALREADY_EXISTS: 409,\n  UNAUTHORIZED: 401,\n  TOKEN_EXPIRED: 401,\n  TOKEN_INVALID: 401,\n  INSUFFICIENT_PERMISSION: 403,\n  INSUFFICIENT_PRIVILEGE: 403,\n  INVALID_FILTER_FIELD: 400,\n  INVALID_FILTER_OPERATOR: 400,\n  INVALID_SORT_FIELD: 400,\n  INVALID_PAGINATION: 400,\n  INVALID_INCLUDE_FIELD: 400,\n  UNSUPPORTED_MIME_TYPE: 415,\n  STORAGE_ERROR: 502,\n  MEDIA_IN_USE: 409,\n  PRESIGNED_URL_EXPIRED: 410,\n  RATE_LIMITED: 429,\n  INTERNAL_ERROR: 500,\n}\n\ntype ApiError = Error & { code?: ErrorCode }\n\nexport const errorHandler: ErrorHandler = (err, c) => {\n  console.error(err.stack ?? err.message)\n\n  const apiErr = err as ApiError\n  const code: ErrorCode = apiErr.code ?? 'INTERNAL_ERROR'\n  const status = ERROR_STATUS_MAP[code] ?? 500\n\n  return c.json({ ok: false, error: { code, message: err.message } }, status as Parameters<typeof c.json>[1])\n}\n","import type { MiddlewareHandler } from 'hono'\nimport { getCookie } from 'hono/cookie'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport {\n  verifyToken,\n  signToken,\n  setAuthCookie,\n  AUTH_TOKEN_TTL,\n  PROACTIVE_REFRESH_THRESHOLD,\n} from '../auth/jwt.js'\n\ntype UserRow = {\n  token_version: number\n  must_change_password: boolean\n}\n\nexport function createAuthMiddleware(db: DrizzlePostgresInstance): MiddlewareHandler {\n  return async (c, next) => {\n    const token = getCookie(c, 'auth_token')\n    if (!token) {\n      return c.json(\n        { ok: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required' } },\n        401,\n      )\n    }\n\n    let payload\n    try {\n      payload = await verifyToken(token)\n    } catch (err) {\n      const code = (err as { code?: string }).code\n      if (code === 'TOKEN_EXPIRED') {\n        return c.json(\n          { ok: false, error: { code: 'TOKEN_EXPIRED', message: 'Token has expired' } },\n          401,\n        )\n      }\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid' } },\n        401,\n      )\n    }\n\n    const result = await db.execute(\n      sql`SELECT token_version, must_change_password FROM users WHERE id = ${payload.user_id} LIMIT 1`,\n    )\n    const row = result.rows[0] as UserRow | undefined\n\n    if (!row) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid' } },\n        401,\n      )\n    }\n\n    if (payload.token_version !== row.token_version) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token has been invalidated' } },\n        401,\n      )\n    }\n\n    c.set('user', {\n      id: payload.user_id,\n      role: payload.role,\n      must_change_password: row.must_change_password,\n    })\n\n    const now = Math.floor(Date.now() / 1000)\n    if (payload.expires_at < now + PROACTIVE_REFRESH_THRESHOLD) {\n      const newToken = await signToken(\n        {\n          user_id: payload.user_id,\n          role: payload.role,\n          token_version: payload.token_version,\n        },\n        AUTH_TOKEN_TTL,\n      )\n      setAuthCookie(c, 'auth_token', newToken, {})\n    }\n\n    await next()\n  }\n}\n","import type { Context } from 'hono'\nimport { sign, verify as jwtVerify } from 'hono/jwt'\nimport { setCookie, deleteCookie } from 'hono/cookie'\nimport type { JWTPayload, ErrorCode } from '@bobbykim/manguito-cms-core'\n\ntype CookieOptions = NonNullable<Parameters<typeof setCookie>[3]>\n\n// ─── Token lifetimes ──────────────────────────────────────────────────────────\n\nexport const AUTH_TOKEN_TTL = 2 * 60 * 60\nexport const REFRESH_TOKEN_TTL = 7 * 24 * 60 * 60\nexport const PROACTIVE_REFRESH_THRESHOLD = 30 * 60\n\n// ─── JWT helpers ──────────────────────────────────────────────────────────────\n\nexport async function signToken(\n  payload: Omit<JWTPayload, 'expires_at'>,\n  expiresInSeconds: number,\n): Promise<string> {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  const fullPayload: JWTPayload = {\n    ...payload,\n    expires_at: Math.floor(Date.now() / 1000) + expiresInSeconds,\n  }\n  return sign(fullPayload as Record<string, unknown>, secret)\n}\n\nexport async function verifyToken(token: string): Promise<JWTPayload> {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  let raw: Record<string, unknown>\n  try {\n    raw = (await jwtVerify(token, secret, 'HS256')) as Record<string, unknown>\n  } catch {\n    throw Object.assign(new Error('Token signature is invalid'), {\n      code: 'TOKEN_INVALID' as ErrorCode,\n    })\n  }\n  const payload = raw as JWTPayload\n  if (payload.expires_at < Math.floor(Date.now() / 1000)) {\n    throw Object.assign(new Error('Token has expired'), {\n      code: 'TOKEN_EXPIRED' as ErrorCode,\n    })\n  }\n  return payload\n}\n\n// ─── Cookie helpers ───────────────────────────────────────────────────────────\n\nexport function setAuthCookie(\n  c: Context,\n  name: string,\n  token: string,\n  options: CookieOptions,\n): void {\n  setCookie(c, name, token, {\n    ...options,\n    httpOnly: true,\n    secure: true,\n    sameSite: 'Strict',\n  })\n}\n\nexport function clearAuthCookie(c: Context, name: string, path?: string): void {\n  deleteCookie(c, name, path !== undefined ? { path } : undefined)\n}\n","import type { MiddlewareHandler } from 'hono'\n\nexport const mustChangePasswordCheck: MiddlewareHandler = async (c, next) => {\n  const user = c.get('user') as { must_change_password: boolean } | undefined\n\n  if (\n    user?.must_change_password === true &&\n    c.req.path !== '/admin/api/users/change-password'\n  ) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'PASSWORD_CHANGE_REQUIRED',\n          message: 'You must change your password before continuing.',\n        },\n      },\n      403,\n    )\n  }\n\n  await next()\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { Permission } from '@bobbykim/manguito-cms-core'\nimport type { RolesRegistry } from '../auth/registry.js'\n\ntype AuthUser = { role: string }\n\nexport function createPermissionMiddleware(registry: RolesRegistry) {\n  return function requirePermission(permission: Permission): MiddlewareHandler {\n    return async (c, next) => {\n      const user = c.get('user') as AuthUser | undefined\n      const role = user ? registry[user.role] : undefined\n\n      if (!role || !role.permissions.includes(permission)) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PERMISSION', message: 'Insufficient permission' },\n          },\n          403,\n        )\n      }\n\n      await next()\n    }\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { RolesRegistry } from '../auth/registry.js'\n\ntype AuthUser = { role: string }\n\nexport function createHierarchyMiddleware(\n  registry: RolesRegistry,\n  getUserRole: (id: string) => Promise<string | null>,\n) {\n  return function requireHierarchy(): MiddlewareHandler {\n    return async (c, next) => {\n      const user = c.get('user') as AuthUser | undefined\n      const actingRole = user ? registry[user.role] : undefined\n\n      if (!actingRole) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'Insufficient privilege' },\n          },\n          403,\n        )\n      }\n\n      const method = c.req.method\n      const targetId = c.req.param('id') as string | undefined\n\n      let targetRoleName: string | null = null\n\n      if (method === 'POST' && !targetId) {\n        // POST /admin/api/users — create; role must be in request body\n        let body: { role?: unknown } = {}\n        try {\n          body = await c.req.json<{ role?: unknown }>()\n        } catch {\n          // malformed body — role is absent, treated as INVALID_ROLE below\n        }\n        targetRoleName = typeof body.role === 'string' ? body.role : null\n        if (!targetRoleName) {\n          return c.json(\n            {\n              ok: false,\n              error: { code: 'INVALID_ROLE', message: 'Request body must include a valid role' },\n            },\n            400,\n          )\n        }\n      } else if (method === 'PATCH' && targetId) {\n        // PATCH /admin/api/users/:id — update; role from body if present, else from DB\n        let bodyRole: string | undefined\n        try {\n          const body = await c.req.json<{ role?: unknown }>()\n          if (typeof body.role === 'string') bodyRole = body.role\n        } catch {\n          // no JSON body — fall through to DB lookup\n        }\n        targetRoleName = bodyRole ?? (await getUserRole(targetId))\n      } else if (targetId) {\n        // DELETE /admin/api/users/:id or POST /admin/api/users/:id/reset-password\n        targetRoleName = await getUserRole(targetId)\n      }\n\n      // Target user not found — let the route handler return 404\n      if (targetRoleName === null) {\n        return next()\n      }\n\n      const targetRole = registry[targetRoleName]\n      if (!targetRole) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INVALID_ROLE', message: `Role \"${targetRoleName}\" is not valid` },\n          },\n          400,\n        )\n      }\n\n      if (actingRole.hierarchy_level >= targetRole.hierarchy_level) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'Insufficient privilege' },\n          },\n          403,\n        )\n      }\n\n      await next()\n    }\n  }\n}\n","import type { MiddlewareHandler } from 'hono'\nimport type { ResolvedRateLimitConfig } from '@bobbykim/manguito-cms-core'\n\n// Defaults for the public list-endpoint limiter. Single source of truth —\n// createCmsApp resolves its limiter through resolveListRateLimit below.\nconst DEFAULT_WINDOW_MS = 60_000\nconst DEFAULT_MAX_PER_IP = 30\nconst DEFAULT_MAX_GLOBAL = 500\n\nexport type RateLimitOptions = {\n  windowMs: number\n  maxPerIp: number\n  maxGlobal: number\n}\n\nexport function createRateLimitMiddleware(options: RateLimitOptions): MiddlewareHandler {\n  const { windowMs, maxPerIp, maxGlobal } = options\n  const ipRequests = new Map<string, number[]>()\n  const globalRequests: number[] = []\n\n  return async function rateLimitMiddleware(c, next) {\n    const authToken = c.req.raw.headers.get('cookie')\n      ?.split(';')\n      .map((s) => s.trim())\n      .find((s) => s.startsWith('auth_token='))\n\n    if (authToken) {\n      return next()\n    }\n\n    const now = Date.now()\n    const cutoff = now - windowMs\n\n    // purge stale global entries\n    let gi = 0\n    while (gi < globalRequests.length && globalRequests[gi]! < cutoff) gi++\n    globalRequests.splice(0, gi)\n\n    // get client IP\n    const forwarded = c.req.header('x-forwarded-for')\n    const ip = forwarded ? forwarded.split(',')[0]!.trim() : (c.env?.incoming?.socket?.remoteAddress ?? 'unknown')\n\n    // purge stale IP entries\n    const ipTimes = ipRequests.get(ip) ?? []\n    let ii = 0\n    while (ii < ipTimes.length && ipTimes[ii]! < cutoff) ii++\n    ipTimes.splice(0, ii)\n    ipRequests.set(ip, ipTimes)\n\n    const retryAfterFromGlobal =\n      globalRequests.length > 0\n        ? Math.ceil((globalRequests[0]! + windowMs - now) / 1000)\n        : 0\n    const retryAfterFromIp =\n      ipTimes.length > 0 ? Math.ceil((ipTimes[0]! + windowMs - now) / 1000) : 0\n\n    if (globalRequests.length >= maxGlobal) {\n      const retryAfter = Math.max(retryAfterFromGlobal, 1)\n      const reset = Math.floor((now + retryAfter * 1000) / 1000)\n      return c.json(\n        { ok: false, error: { code: 'RATE_LIMITED', message: `Too many requests. Please retry after ${retryAfter} seconds.` } },\n        429,\n        {\n          'Retry-After': String(retryAfter),\n          'X-RateLimit-Limit': String(maxGlobal),\n          'X-RateLimit-Remaining': '0',\n          'X-RateLimit-Reset': String(reset),\n        }\n      )\n    }\n\n    if (ipTimes.length >= maxPerIp) {\n      const retryAfter = Math.max(retryAfterFromIp, 1)\n      const reset = Math.floor((now + retryAfter * 1000) / 1000)\n      return c.json(\n        { ok: false, error: { code: 'RATE_LIMITED', message: `Too many requests. Please retry after ${retryAfter} seconds.` } },\n        429,\n        {\n          'Retry-After': String(retryAfter),\n          'X-RateLimit-Limit': String(maxPerIp),\n          'X-RateLimit-Remaining': '0',\n          'X-RateLimit-Reset': String(reset),\n        }\n      )\n    }\n\n    globalRequests.push(now)\n    ipTimes.push(now)\n\n    return next()\n  }\n}\n\n/**\n * Resolves the public list-endpoint config into a middleware, or `undefined`\n * when the limiter is disabled via the `findAll: '*'` wildcard. Route\n * registrators skip registration when this is `undefined`, so a disabled\n * limiter has zero request-path overhead.\n */\nexport function resolveListRateLimit(\n  rateLimit?: ResolvedRateLimitConfig,\n): MiddlewareHandler | undefined {\n  const findAll = rateLimit?.findAll\n  if (findAll === '*') {\n    return undefined\n  }\n  return createRateLimitMiddleware({\n    windowMs: findAll?.windowMs ?? DEFAULT_WINDOW_MS,\n    maxPerIp: findAll?.maxPerIp ?? DEFAULT_MAX_PER_IP,\n    maxGlobal: findAll?.maxGlobal ?? DEFAULT_MAX_GLOBAL,\n  })\n}\n","import type { ParsedRole } from '@bobbykim/manguito-cms-core'\n\nexport type RolesRegistry = Record<string, ParsedRole>\n\nconst SYSTEM_ROLES = ['admin', 'manager', 'editor', 'writer', 'viewer'] as const\n\nfunction validateRoles(roles: ParsedRole[]): void {\n  if (roles.length === 0) {\n    throw new Error(\n      'Fatal: roles registry failed to build — roles array is empty. Run `manguito validate` to check your roles schema.',\n    )\n  }\n\n  const nameSet = new Set(roles.map((r) => r.name))\n  for (const systemRole of SYSTEM_ROLES) {\n    if (!nameSet.has(systemRole)) {\n      throw new Error(\n        `Fatal: roles registry failed to build — missing system role \"${systemRole}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n  }\n\n  const levelsSeen = new Map<number, string>()\n  for (const role of roles) {\n    const existing = levelsSeen.get(role.hierarchy_level)\n    if (existing !== undefined) {\n      throw new Error(\n        `Fatal: roles registry failed to build — duplicate hierarchy_level ${role.hierarchy_level} on roles \"${existing}\" and \"${role.name}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n    levelsSeen.set(role.hierarchy_level, role.name)\n  }\n\n  const namesSeen = new Set<string>()\n  for (const role of roles) {\n    if (namesSeen.has(role.name)) {\n      throw new Error(\n        `Fatal: roles registry failed to build — duplicate role name \"${role.name}\". Run \\`manguito validate\\` to check your roles schema.`,\n      )\n    }\n    namesSeen.add(role.name)\n  }\n}\n\nexport function buildRolesRegistry(roles: ParsedRole[]): RolesRegistry {\n  validateRoles(roles)\n  return Object.fromEntries(roles.map((r) => [r.name, r]))\n}\n","import type {\n  ProgrammaticFieldDefinition,\n  ResolverContext,\n  SchemaRegistry,\n  ParsedContentType,\n  ParsedTaxonomyType,\n} from '@bobbykim/manguito-cms-core'\n\nexport type ResolverMap = Map<string, ProgrammaticFieldDefinition>\n\nconst DEFAULT_TIMEOUT_MS = 5000\nconst LIST_CONCURRENCY = 10\n\nexport function resolverKey(schema: string, field: string): string {\n  return `${schema}::${field}`\n}\n\n// ─── Boot-time binding validation ─────────────────────────────────────────────\n\n// Startup guard (throws, like createCmsApp's storage/roles checks): every\n// programmatic field must have exactly one resolver, and every resolver must\n// target an existing programmatic field.\nexport function validateResolverBindings(\n  registry: SchemaRegistry,\n  resolvers: ResolverMap,\n): void {\n  const declared = new Set<string>()\n  const schemas: Array<ParsedContentType | ParsedTaxonomyType> = [\n    ...(Object.values(registry.content_types) as ParsedContentType[]),\n    ...(Object.values(registry.taxonomy_types) as ParsedTaxonomyType[]),\n  ]\n  for (const schema of schemas) {\n    for (const field of schema.fields) {\n      if (field.field_type === 'programmatic') {\n        declared.add(resolverKey(schema.name, field.name))\n      }\n    }\n  }\n\n  const missing: string[] = []\n  for (const key of declared) if (!resolvers.has(key)) missing.push(key)\n\n  const orphans: string[] = []\n  for (const key of resolvers.keys()) if (!declared.has(key)) orphans.push(key)\n\n  if (missing.length === 0 && orphans.length === 0) return\n\n  const lines: string[] = ['✗ Programmatic field resolver bindings are invalid.']\n  if (missing.length > 0) {\n    lines.push('', '  Declared as `type: \"programmatic\"` but no resolver found:')\n    for (const k of missing) lines.push(`    - ${k}  (add a programmaticField in src/programmatic)`)\n  }\n  if (orphans.length > 0) {\n    lines.push('', '  Resolver has no matching programmatic field in the schema:')\n    for (const k of orphans) lines.push(`    - ${k}`)\n  }\n  lines.push('', 'Exiting.')\n  throw new Error(lines.join('\\n'))\n}\n\n// ─── Runtime resolution ───────────────────────────────────────────────────────\n\nfunction buildContext(row: Record<string, unknown>): ResolverContext {\n  return {\n    get: (name) => row[name],\n    record: row,\n  }\n}\n\nasync function withTimeout<T>(p: Promise<T>, ms: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout>\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('resolver timeout')), ms)\n  })\n  try {\n    return await Promise.race([p, timeout])\n  } finally {\n    clearTimeout(timer!)\n  }\n}\n\n// Runs one resolver against one row; never throws. Failure/timeout → fallback.\nasync function runOne(\n  def: ProgrammaticFieldDefinition,\n  row: Record<string, unknown>,\n  onError: (message: string) => void,\n): Promise<{ value: unknown; failed: boolean }> {\n  const fallback = def.fallback ?? null\n  try {\n    const result = await withTimeout(\n      Promise.resolve(def.resolve(buildContext(row))),\n      def.timeout ?? DEFAULT_TIMEOUT_MS,\n    )\n    return { value: result === undefined ? null : result, failed: false }\n  } catch (err) {\n    onError(\n      `⚠ programmatic field ${resolverKey(def.schema, def.field)} failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { value: fallback, failed: true }\n  }\n}\n\n// Fixed-size worker pool.\nasync function runPool<T>(items: T[], limit: number, fn: (item: T) => Promise<void>): Promise<void> {\n  let i = 0\n  async function worker(): Promise<void> {\n    while (i < items.length) {\n      const idx = i++\n      await fn(items[idx]!)\n    }\n  }\n  const workers = Array.from({ length: Math.min(limit, items.length) }, worker)\n  await Promise.all(workers)\n}\n\nexport function createProgrammaticResolver(\n  resolvers: ResolverMap,\n  options?: { onError?: (message: string) => void },\n) {\n  const onError =\n    options?.onError ??\n    ((message: string) => {\n      process.stderr.write(message + '\\n')\n    })\n\n  // Group definitions by schema once.\n  const bySchema = new Map<string, ProgrammaticFieldDefinition[]>()\n  for (const def of resolvers.values()) {\n    const arr = bySchema.get(def.schema) ?? []\n    arr.push(def)\n    bySchema.set(def.schema, arr)\n  }\n\n  // Per-process cache. Key = schema::field::itemId.\n  const cache = new Map<string, { value: unknown; expires: number }>()\n\n  async function resolveField(\n    def: ProgrammaticFieldDefinition,\n    row: Record<string, unknown>,\n  ): Promise<unknown> {\n    const itemId = row['id'] !== undefined ? String(row['id']) : ''\n    if (def.cache && itemId) {\n      const key = `${resolverKey(def.schema, def.field)}::${itemId}`\n      const now = Date.now()\n      const hit = cache.get(key)\n      if (hit && hit.expires > now) return hit.value\n      const { value, failed } = await runOne(def, row, onError)\n      if (!failed) cache.set(key, { value, expires: now + def.cache.ttl * 1000 })\n      return value\n    }\n    const { value } = await runOne(def, row, onError)\n    return value\n  }\n\n  async function resolveItem(\n    schema: string,\n    row: Record<string, unknown>,\n  ): Promise<Record<string, unknown>> {\n    const defs = bySchema.get(schema)\n    if (!defs || defs.length === 0) return { ...row }\n    const out: Record<string, unknown> = { ...row }\n    await Promise.all(\n      defs.map(async (def) => {\n        out[def.field] = await resolveField(def, row)\n      }),\n    )\n    return out\n  }\n\n  async function resolveList(\n    schema: string,\n    rows: Record<string, unknown>[],\n  ): Promise<Record<string, unknown>[]> {\n    const defs = (bySchema.get(schema) ?? []).filter((d) => d.on_list === true)\n    if (defs.length === 0) return rows.map((r) => ({ ...r }))\n    const out = rows.map((r) => ({ ...r }))\n    const tasks: Array<{ rowIndex: number; def: ProgrammaticFieldDefinition }> = []\n    for (let i = 0; i < rows.length; i++) {\n      for (const def of defs) tasks.push({ rowIndex: i, def })\n    }\n    await runPool(tasks, LIST_CONCURRENCY, async ({ rowIndex, def }) => {\n      out[rowIndex]![def.field] = await resolveField(def, rows[rowIndex]!)\n    })\n    return out\n  }\n\n  function hasSchema(schema: string): boolean {\n    return bySchema.has(schema)\n  }\n\n  return { resolveItem, resolveList, hasSchema }\n}\n\nexport type ProgrammaticResolver = ReturnType<typeof createProgrammaticResolver>\n","import type { ParsedField, SchemaRegistry } from '@bobbykim/manguito-cms-core'\nimport type { FieldKeyMap } from './field-keys.js'\n\n// ─── Recursive outbound projection ────────────────────────────────────────────\n//\n// Stage 1 mapped a response row's TOP-LEVEL keys from storage columns to public\n// labels. Nested rows — paragraph children, resolved reference and junction\n// targets — were attached straight from SELECT * and never mapped, so they\n// served column names. This walks them.\n//\n// Applied at exactly the points that called FieldKeyMap.toLabels before, which\n// is why it fixes both the public and admin paths without touching either\n// resolver: both already map at the right moment, after relation resolution.\n//\n// GraphQL does not use this. It resolves each field individually by column\n// through resolveFieldValue, so it is already correct at every depth.\n\n/**\n * Is this a resolved row worth recursing into? A relation that was not\n * `?include=`d holds a bare uuid string (or an array of them), and timestamps\n * arrive from the driver as Date instances — neither is a row.\n */\nexport function isPlainRow(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v) && !(v instanceof Date)\n}\n\nexport type TypeProjector = {\n  /** This type's own label↔column map. */\n  map: FieldKeyMap\n  /** Relation fields worth recursing into: the field's LABEL and its target type. */\n  nested: Array<{ label: string; target: string }>\n}\n\nexport type Projectors = Record<string, TypeProjector>\n\n// Media relations resolve to rows of the `media` system table — fixed columns,\n// no schema fields — so there is nothing to project and they stay out of `nested`.\nconst MEDIA_FIELD_TYPES = new Set(['image', 'video', 'file'])\n\nfunction nestedTargets(fields: ParsedField[]): Array<{ label: string; target: string }> {\n  const out: Array<{ label: string; target: string }> = []\n  for (const f of fields) {\n    if (MEDIA_FIELD_TYPES.has(f.field_type)) continue\n    if (f.field_type !== 'paragraph' && f.field_type !== 'reference') continue\n    // Both kinds name their target the same way.\n    const ref = (f.ui_component as { ref?: string }).ref\n    if (!ref) continue\n    out.push({ label: f.name, target: ref })\n  }\n  return out\n}\n\n/**\n * Built ONCE at startup, not per request. Covers content, taxonomy and\n * paragraph types, keyed by machine name — the same key space `fieldKeyMaps`\n * uses and the same one a field's `ui_component.ref` points into.\n */\nexport function buildProjectors(\n  registry: SchemaRegistry,\n  fieldKeyMaps: Record<string, FieldKeyMap>\n): Projectors {\n  const projectors: Projectors = {}\n  const sources: Array<Record<string, { fields: ParsedField[] }>> = [\n    registry.content_types,\n    registry.taxonomy_types,\n    registry.paragraph_types,\n  ]\n\n  for (const source of sources) {\n    for (const [typeName, type] of Object.entries(source)) {\n      const map = fieldKeyMaps[typeName]\n      if (!map) continue\n      projectors[typeName] = { map, nested: nestedTargets(type.fields) }\n    }\n  }\n\n  return projectors\n}\n\n/**\n * Storage-keyed row → label-keyed, recursively. Never mutates its input: the\n * relation cache hands the SAME nested object to several parents, so editing in\n * place would project a shared row twice and lose its values on the second pass.\n */\nexport function projectRow(\n  row: Record<string, unknown>,\n  typeName: string,\n  projectors: Projectors\n): Record<string, unknown> {\n  const p = projectors[typeName]\n  if (!p) return row\n\n  // Top level first: `nested` is keyed by label, so the keys must be labels\n  // before the loop below reads them. toLabels returns a fresh object.\n  const out = p.map.toLabels(row)\n\n  for (const { label, target } of p.nested) {\n    const v = out[label]\n    if (v === null || v === undefined) continue\n    if (Array.isArray(v)) {\n      out[label] = v.map((item) => (isPlainRow(item) ? projectRow(item, target, projectors) : item))\n    } else if (isPlainRow(v)) {\n      out[label] = projectRow(v, target, projectors)\n    }\n  }\n\n  return out\n}\n","import type { FilterValue, FilterOperator } from '@bobbykim/manguito-cms-core'\n\n// Query-param parsing shared by the public and admin content/taxonomy list routes.\n\n// The sortable set. NOT \"indexed system fields\", despite what this comment used\n// to say: db codegen generates no indexes at all, and `title` is an ordinary\n// schema field, not a system field — nothing guarantees a content type has one.\n// Sorting by a label a type lacks still reaches Postgres and 500s; widening this\n// set to any column-backed field is a separate design (see the Stage 1.5 spec).\nexport const SORTABLE_FIELDS = new Set<string>(['title', 'created_at', 'updated_at'])\n\n// Field types whose values are relations rather than plain columns.\nexport const RELATION_FIELD_TYPES = new Set([\n  'paragraph',\n  'reference',\n  'image',\n  'video',\n  'file',\n])\n\nexport function parsePagination(\n  pageStr: string | undefined,\n  perPageStr: string | undefined\n): { ok: true; page: number; per_page: number } | { ok: false } {\n  const page = pageStr !== undefined ? Number(pageStr) : 1\n  const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n  if (!Number.isInteger(page) || page < 1) return { ok: false }\n  if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false }\n  return { ok: true, page, per_page }\n}\n\nexport function parseInclude(includeParam: string | undefined): string[] {\n  if (!includeParam) return []\n  return includeParam\n    .split(',')\n    .map((s) => s.trim())\n    .filter(Boolean)\n}\n\nexport function parseFilters(\n  url: string,\n  validFields: Set<string>,\n  columnFor?: (label: string) => string | undefined\n): { ok: true; filters: Record<string, FilterValue> } | { ok: false; invalidField: string } {\n  const { searchParams } = new URL(url)\n  const filters: Record<string, FilterValue> = {}\n\n  // Filters are validated against LABELS (what the client sends) and emitted as\n  // storage keys (what the repository queries). Without a mapper the two are\n  // the same, which is the pre-versioning behavior.\n  const toKey = (label: string): string => columnFor?.(label) ?? label\n\n  for (const [key, value] of searchParams.entries()) {\n    const simpleMatch = /^filter\\[([^\\]]+)\\]$/.exec(key)\n    const opMatch = /^filter\\[([^\\]]+)\\]\\[([^\\]]+)\\]$/.exec(key)\n\n    if (simpleMatch) {\n      const field = simpleMatch[1]!\n      if (!validFields.has(field)) return { ok: false, invalidField: field }\n      const storageKey = toKey(field)\n      const existing = filters[storageKey]\n      if (existing !== undefined) {\n        filters[storageKey] = Array.isArray(existing)\n          ? [...existing, value]\n          : [existing as string | number | boolean, value]\n      } else {\n        filters[storageKey] = value\n      }\n    } else if (opMatch) {\n      const field = opMatch[1]!\n      const operator = opMatch[2]!\n      if (!validFields.has(field)) return { ok: false, invalidField: field }\n      if (!['gt', 'gte', 'lt', 'lte'].includes(operator)) continue\n      const storageKey = toKey(field)\n      const existing = (filters[storageKey] as FilterOperator | undefined) ?? {}\n      filters[storageKey] = { ...(existing as FilterOperator), [operator]: value }\n    }\n  }\n\n  return { ok: true, filters }\n}\n","import type { Hono, Handler, MiddlewareHandler } from 'hono'\nimport type {\n  SchemaRegistry,\n  ContentRepository,\n} from '@bobbykim/manguito-cms-core'\nimport type { ProgrammaticResolver } from '../programmatic/resolve.js'\nimport type { Projectors } from '../projector.js'\nimport { projectRow } from '../projector.js'\nimport type { PublicPaths } from '../paths.js'\nimport {\n  SORTABLE_FIELDS,\n  RELATION_FIELD_TYPES,\n  parsePagination,\n  parseInclude,\n  parseFilters,\n} from './query-params.js'\n\nexport type ContentRepos = Record<string, ContentRepository<unknown>>\n\n// ─── Response projection order ────────────────────────────────────────────────\n//\n// Every read response maps storage keys → labels exactly ONCE, and that mapping\n// runs BEFORE the programmatic resolver. Two reasons it sits there rather than\n// after:\n//   - a programmatic resolver reads its record through `ctx.get(fieldName)`,\n//     documented (docs/programmatic-fields.md) as the schema field name — the\n//     LABEL — so the row handed to it must already speak labels;\n//   - programmatic fields are not column-backed, so their output keys are labels\n//     already; mapping afterwards would be a no-op on them.\n// Relations are resolved inside the repository, upstream of both, so the mapping\n// still lands strictly after relation resolution.\n\nfunction isPublished(item: unknown): boolean {\n  return (item as Record<string, unknown>)['published'] === true\n}\n\nexport function registerPublicContentRoutes(\n  app: Hono,\n  registry: SchemaRegistry,\n  repos: ContentRepos,\n  projectors: Projectors,\n  paths: PublicPaths,\n  listRateLimit?: MiddlewareHandler,\n  resolver?: ProgrammaticResolver\n): void {\n  // ── Meta-endpoints: list available schema types ───────────────────────────\n  // Registered before the dynamic per-type routes to avoid path conflicts.\n\n  function registerListRoute(path: string, handler: Handler): void {\n    if (listRateLimit) {\n      app.get(path, listRateLimit, handler)\n    } else {\n      app.get(path, handler)\n    }\n  }\n\n  registerListRoute(paths.collection('content'), (c) => {\n    const data = Object.values(registry.content_types).map((ct) => ({\n      name: ct.name,\n      label: ct.label,\n      only_one: ct.only_one,\n    }))\n    return c.json({ ok: true, data })\n  })\n\n  registerListRoute(paths.collection('taxonomy'), (c) => {\n    const data = Object.values(registry.taxonomy_types).map((tt) => ({\n      name: tt.name,\n      label: tt.label,\n    }))\n    return c.json({ ok: true, data })\n  })\n\n  // ── Per-type content routes ───────────────────────────────────────────────\n\n  for (const [typeName, contentType] of Object.entries(registry.content_types)) {\n    const basePath = contentType.default_base_path\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const relationFieldNames = new Set<string>(\n      contentType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    // Programmatic fields have no db column — filtering one would be a SQL\n    // error, so they're excluded from the filterable set.\n    const filterableFieldNames = new Set<string>([\n      ...contentType.fields.filter((f) => f.field_type !== 'programmatic').map((f) => f.name),\n      ...contentType.system_fields.map((f) => f.name),\n    ])\n\n    if (contentType.only_one) {\n      app.get(paths.collection(basePath), async (c) => {\n        const result = await repo.findMany({ published_only: true, page: 1, per_page: 1 })\n        if (result.data.length === 0) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n        // Outbound boundary (see \"Response projection order\" above).\n        let data = projectRow(result.data[0] as Record<string, unknown>, typeName, projectors)\n        if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n        return c.json({ ok: true, data })\n      })\n    } else {\n      registerListRoute(paths.collection(basePath), async (c) => {\n        // Inbound boundary: query params speak labels; filters query storage keys.\n        const projector = projectors[typeName]!\n        const fieldKeys = projector.map\n        const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n        if (!pagination.ok) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_PAGINATION',\n                message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n              },\n            },\n            400\n          )\n        }\n\n        const sortBy = c.req.query('sort_by') ?? 'created_at'\n        if (!SORTABLE_FIELDS.has(sortBy)) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_SORT_FIELD',\n                message: `'${sortBy}' is not sortable. Allowed: title, created_at, updated_at`,\n              },\n            },\n            400\n          )\n        }\n\n        const sortOrder = c.req.query('sort_order') ?? 'asc'\n        if (sortOrder !== 'asc' && sortOrder !== 'desc') {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_SORT_FIELD',\n                message: `sort_order must be 'asc' or 'desc'`,\n              },\n            },\n            400\n          )\n        }\n\n        const filtersResult = parseFilters(c.req.url, filterableFieldNames, fieldKeys.columnFor)\n        if (!filtersResult.ok) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_FILTER_FIELD',\n                message: `Filter field '${filtersResult.invalidField}' does not exist on this content type`,\n              },\n            },\n            400\n          )\n        }\n\n        const include = parseInclude(c.req.query('include'))\n        for (const field of include) {\n          if (!relationFieldNames.has(field)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_INCLUDE_FIELD',\n                  message: `'${field}' is not a valid relation field`,\n                },\n              },\n              400\n            )\n          }\n        }\n\n        // sortBy is a validated label (checked above); map it to its storage\n        // column before it reaches the repository. The cast is a narrow lie —\n        // core types sort_by as the label union, but the repository\n        // immediately re-validates the mapped value against sortableColumns.\n        const sortColumn = fieldKeys.columnFor(sortBy) ?? sortBy\n\n        const result = await repo.findMany({\n          published_only: true,\n          page: pagination.page,\n          per_page: pagination.per_page,\n          sort_by: sortColumn as 'title' | 'created_at' | 'updated_at',\n          sort_order: sortOrder as 'asc' | 'desc',\n          filters: filtersResult.filters,\n          include,\n        })\n\n        // Outbound boundary (see \"Response projection order\" above).\n        const labeled = (result.data as Record<string, unknown>[]).map((row) =>\n          projectRow(row, typeName, projectors)\n        )\n        const data = resolver?.hasSchema(typeName)\n          ? await resolver.resolveList(typeName, labeled)\n          : labeled\n        return c.json({ ...result, data })\n      })\n\n      app.get(paths.item(basePath), async (c) => {\n        // paths.item() always appends a literal ':slug' segment, but its return\n        // type is the widened `string` from PublicPaths — not a template literal\n        // type — so Hono can no longer statically prove the param is present.\n        const slug = c.req.param('slug')!\n\n        const include = parseInclude(c.req.query('include'))\n        for (const field of include) {\n          if (!relationFieldNames.has(field)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_INCLUDE_FIELD',\n                  message: `'${field}' is not a valid relation field`,\n                },\n              },\n              400\n            )\n          }\n        }\n\n        const item = await repo.findBySlug(slug, include)\n\n        if (!item || !isPublished(item)) {\n          return c.json(\n            {\n              ok: false,\n              error: { code: 'SLUG_NOT_FOUND', message: `No item found with slug '${slug}'` },\n            },\n            404\n          )\n        }\n\n        // Outbound boundary (see \"Response projection order\" above).\n        let data = projectRow(item as Record<string, unknown>, typeName, projectors)\n        if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n        return c.json({ ok: true, data })\n      })\n    }\n  }\n\n  for (const [typeName] of Object.entries(registry.taxonomy_types)) {\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    registerListRoute(paths.taxonomyCollection(typeName), async (c) => {\n      const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n      if (!pagination.ok) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INVALID_PAGINATION',\n              message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n            },\n          },\n          400\n        )\n      }\n\n      const result = await repo.findMany({\n        published_only: true,\n        page: pagination.page,\n        per_page: pagination.per_page,\n      })\n\n      // Outbound boundary (see \"Response projection order\" above).\n      const labeled = (result.data as Record<string, unknown>[]).map((row) =>\n        projectRow(row, typeName, projectors)\n      )\n      const data = resolver?.hasSchema(typeName)\n        ? await resolver.resolveList(typeName, labeled)\n        : labeled\n      return c.json({ ...result, data })\n    })\n\n    app.get(paths.taxonomyItem(typeName), async (c) => {\n      // See the ':slug' comment above — same widened-string-return caveat applies.\n      const id = c.req.param('id')!\n      const item = await repo.findOne(id)\n\n      if (!item || !isPublished(item)) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' },\n          },\n          404\n        )\n      }\n\n      // Outbound boundary (see \"Response projection order\" above).\n      let data = projectRow(item as Record<string, unknown>, typeName, projectors)\n      if (resolver?.hasSchema(typeName)) data = await resolver.resolveItem(typeName, data)\n      return c.json({ ok: true, data })\n    })\n  }\n}\n","import type { Hono, Handler, MiddlewareHandler } from 'hono'\nimport type { MediaRepository } from '@bobbykim/manguito-cms-core'\nimport type { PublicPaths } from '../paths.js'\n\nconst VALID_MEDIA_TYPES = new Set(['image', 'video', 'file'])\n\nfunction parsePagination(\n  pageStr: string | undefined,\n  perPageStr: string | undefined\n): { ok: true; page: number; per_page: number } | { ok: false } {\n  const page = pageStr !== undefined ? Number(pageStr) : 1\n  const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n  if (!Number.isInteger(page) || page < 1) return { ok: false }\n  if (!Number.isInteger(per_page) || per_page < 1 || per_page > 100) return { ok: false }\n  return { ok: true, page, per_page }\n}\n\nexport function registerPublicMediaRoutes(\n  app: Hono,\n  mediaRepo: MediaRepository,\n  paths: PublicPaths,\n  listRateLimit?: MiddlewareHandler\n): void {\n  const mediaListHandler: Handler = async (c) => {\n    const pagination = parsePagination(c.req.query('page'), c.req.query('per_page'))\n    if (!pagination.ok) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'INVALID_PAGINATION',\n            message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n          },\n        },\n        400\n      )\n    }\n\n    const typeParam = c.req.query('type')\n    if (typeParam !== undefined && !VALID_MEDIA_TYPES.has(typeParam)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: `type must be one of: image, video, file`,\n          },\n        },\n        422\n      )\n    }\n\n    const opts: Parameters<typeof mediaRepo.findMany>[0] = {\n      page: pagination.page,\n      per_page: pagination.per_page,\n    }\n    if (typeParam !== undefined) {\n      opts.type = typeParam as 'image' | 'video' | 'file'\n    }\n\n    const result = await mediaRepo.findMany(opts)\n    return c.json(result)\n  }\n\n  if (listRateLimit) {\n    app.get(paths.mediaCollection(), listRateLimit, mediaListHandler)\n  } else {\n    app.get(paths.mediaCollection(), mediaListHandler)\n  }\n\n  app.get(paths.mediaItem(), async (c) => {\n    // paths.mediaItem() always appends a literal ':id' segment, but its return\n    // type is the widened `string` from PublicPaths, so Hono can't statically\n    // prove the param is present.\n    const id = c.req.param('id')!\n    const item = await mediaRepo.findOne(id)\n\n    if (!item) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n        404\n      )\n    }\n\n    return c.json({ ok: true, data: item })\n  })\n}\n","import { sql } from 'drizzle-orm'\nimport type { Context, Hono } from 'hono'\nimport type {\n  SchemaRegistry,\n  MediaRepository,\n  FilterValue,\n  ParsedField,\n  ParsedParagraphType,\n} from '@bobbykim/manguito-cms-core'\nimport {\n  SORTABLE_FIELDS,\n  RELATION_FIELD_TYPES,\n  parsePagination,\n  parseInclude,\n  parseFilters,\n} from '../query-params.js'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport {\n  topLevelMediaDelta,\n  mergeMediaDeltas,\n  applyMediaReferenceDelta,\n  type MediaDelta,\n} from '../../media-references.js'\nimport {\n  persistParagraphField,\n  deleteParagraphField,\n  persistJunctionField,\n} from '../../relations.js'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\nimport type { ContentRepos } from '../content.js'\nimport { isColumnBacked } from '../../field-keys.js'\nimport { projectRow, type Projectors } from '../../projector.js'\n\n// ─── SQL helpers ─────────────────────────────────────────────────────────────\n\nfunction quoteIdent(name: string): string {\n  if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`)\n  return `\"${name}\"`\n}\n\n// Loads the paragraph rows for one field of one parent, descending into the one\n// level of nested paragraph fields ADR core/0005 permits. Scoped by parent_id AND\n// parent_field so two paragraph fields sharing a paragraph type never mix — the\n// reason this read is not delegated to resolveRelationField.\nasync function loadParagraphRows(\n  db: DrizzlePostgresInstance,\n  registry: SchemaRegistry,\n  pType: ParsedParagraphType,\n  parentId: string,\n  fieldName: string\n): Promise<Record<string, unknown>[]> {\n  const result = await db.execute(\n    sql`SELECT * FROM ${sql.raw(quoteIdent(pType.db.table_name))} WHERE parent_id = ${parentId} AND parent_field = ${fieldName} ORDER BY \"order\" ASC`\n  )\n  const rows = result.rows as Record<string, unknown>[]\n\n  for (const nf of pType.fields) {\n    if (nf.db_column !== null) continue\n    const comp = nf.ui_component as { component: string; ref?: string }\n    if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n    const nType = registry.paragraph_types[comp.ref]\n    if (!nType) continue\n    for (const row of rows) {\n      row[nf.name] = await loadParagraphRows(db, registry, nType, row['id'] as string, nf.name)\n    }\n  }\n\n  return rows\n}\n\nasync function lookupBasePathId(db: DrizzlePostgresInstance, pathOrName: string): Promise<string | null> {\n  const r = await db.execute(\n    sql`SELECT id FROM base_paths WHERE path = ${pathOrName} OR name = ${pathOrName} LIMIT 1`\n  )\n  return (r.rows[0] as { id: string } | undefined)?.id ?? null\n}\n\n// ─── Shared query-param helpers ───────────────────────────────────────────────\n\nconst SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/\n\n// ─── Validation helpers ───────────────────────────────────────────────────────\n\nfunction isEmpty(value: unknown): boolean {\n  if (value === null || value === undefined) return true\n  if (typeof value === 'string' && value.trim() === '') return true\n  if (Array.isArray(value) && value.length === 0) return true\n  return false\n}\n\nfunction checkRequiredFields(\n  fields: ParsedField[],\n  data: Record<string, unknown>\n): { field: string; message: string }[] {\n  return fields\n    .filter((f) => f.required && isEmpty(data[f.name]))\n    .map((f) => ({ field: f.name, message: `${f.label} is required` }))\n}\n\n// Extract IDs from already-resolved media field values ({ id: string } objects).\n// Admin repos are created without relation resolution (see app.ts) so edit forms get\n// plain foreign-key id strings back — media fields here are raw ids, not resolved\n// { id, url, ... } objects.\n// ─── List query helpers (shared between content and taxonomy list routes) ─────\n\ntype ListQueryResult =\n  | {\n      ok: true\n      pagination: { page: number; per_page: number }\n      sortBy: string\n      sortOrder: string\n      filters: Record<string, FilterValue>\n      include: string[]\n      search: string\n    }\n  | { ok: false; response: { code: string; message: string }; status: 400 }\n\n// `columnFor` maps a validated label to its storage column. Filters are\n// validated against labels (what the client sends) and emitted as columns (what\n// the repository queries) — without it a renamed field would be filtered on a\n// column that does not exist.\nfunction parseListQuery(\n  url: string,\n  schemaFieldNames: Set<string>,\n  relationFieldNames: Set<string>,\n  columnFor: (label: string) => string | undefined\n): ListQueryResult {\n  const searchParams = new URL(url).searchParams\n\n  const pagination = parsePagination(\n    searchParams.get('page') ?? undefined,\n    searchParams.get('per_page') ?? undefined\n  )\n  if (!pagination.ok) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_PAGINATION',\n        message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n      },\n      status: 400,\n    }\n  }\n\n  const sortBy = searchParams.get('sort_by') ?? 'created_at'\n  if (!SORTABLE_FIELDS.has(sortBy)) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_SORT_FIELD',\n        message: `'${sortBy}' is not sortable. Allowed: title, created_at, updated_at`,\n      },\n      status: 400,\n    }\n  }\n\n  const sortOrder = searchParams.get('sort_order') ?? 'asc'\n  if (sortOrder !== 'asc' && sortOrder !== 'desc') {\n    return {\n      ok: false,\n      response: { code: 'INVALID_SORT_FIELD', message: `sort_order must be 'asc' or 'desc'` },\n      status: 400,\n    }\n  }\n\n  const filtersResult = parseFilters(url, schemaFieldNames, columnFor)\n  if (!filtersResult.ok) {\n    return {\n      ok: false,\n      response: {\n        code: 'INVALID_FILTER_FIELD',\n        message: `Filter field '${filtersResult.invalidField}' does not exist on this schema`,\n      },\n      status: 400,\n    }\n  }\n\n  const include = parseInclude(searchParams.get('include') ?? undefined)\n  for (const field of include) {\n    if (!relationFieldNames.has(field)) {\n      return {\n        ok: false,\n        response: { code: 'INVALID_INCLUDE_FIELD', message: `'${field}' is not a valid relation field` },\n        status: 400,\n      }\n    }\n  }\n\n  const search = (searchParams.get('search') ?? '').trim()\n\n  return {\n    ok: true,\n    pagination,\n    sortBy,\n    sortOrder,\n    filters: filtersResult.filters,\n    include,\n    search,\n  }\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAdminContentRoutes(\n  app: Hono,\n  registry: SchemaRegistry,\n  repos: ContentRepos,\n  projectors: Projectors,\n  mediaRepo: MediaRepository,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  db?: DrizzlePostgresInstance,\n): void {\n  // ── Content type routes ───────────────────────────────────────────────────\n\n  for (const [typeName, contentType] of Object.entries(registry.content_types)) {\n    const basePath = `content/${typeName}`\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const schemaFieldNames = new Set<string>([\n      ...contentType.fields.map((f) => f.name),\n      ...contentType.system_fields.map((f) => f.name),\n    ])\n\n    const relationFieldNames = new Set<string>(\n      contentType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    const projector = projectors[typeName]!\n    const fieldKeys = projector.map\n\n    const requiredFields = contentType.fields.filter((f) => f.required)\n\n    const mediaFields = contentType.fields.filter(\n      (f) => f.field_type === 'image' || f.field_type === 'video' || f.field_type === 'file'\n    )\n\n    const paragraphFieldDefs = contentType.fields.filter((f) => f.db_column === null)\n\n    // Free-text search target — text/plain fields (mirrors the \"first text field is\n    // the title\" convention the admin frontend already uses) plus slug, when present.\n    // Singleton (only_one) content types have no slug column at all.\n    const searchableColumns = [\n      ...contentType.fields\n        .filter((f) => f.field_type === 'text/plain' && f.db_column !== null)\n        .map((f) => f.db_column!.column_name),\n      ...(contentType.system_fields.some((f) => f.name === 'slug') ? ['slug'] : []),\n    ]\n\n    // GET /admin/api/{base_path}\n    app.get(\n      `/admin/api/${basePath}`,\n      requirePermission('content:read'),\n      async (c) => {\n        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor)\n        if (!parsed.ok) {\n          return c.json({ ok: false, error: parsed.response }, parsed.status)\n        }\n\n        const publishedParam = c.req.query('published')\n        const extraFilters: Record<string, FilterValue> = {}\n        if (publishedParam === 'false') extraFilters['published'] = false\n\n        // parsed.sortBy is a validated label; map it to its storage column\n        // before it reaches the repository. The cast is a narrow lie — core\n        // types sort_by as the label union, but the repository immediately\n        // re-validates the mapped value against sortableColumns.\n        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy\n\n        const findOpts: Parameters<typeof repo.findMany>[0] = {\n          page: parsed.pagination.page,\n          per_page: parsed.pagination.per_page,\n          sort_by: sortColumn as 'title' | 'created_at' | 'updated_at',\n          sort_order: parsed.sortOrder as 'asc' | 'desc',\n          filters: { ...parsed.filters, ...extraFilters },\n          include: parsed.include,\n        }\n        if (publishedParam === 'true') findOpts.published_only = true\n        if (parsed.search !== '' && searchableColumns.length > 0) {\n          findOpts.search = { term: parsed.search, columns: searchableColumns }\n        }\n\n        const result = await repo.findMany(findOpts)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = result.data.map((row) =>\n          projectRow(row as Record<string, unknown>, typeName, projectors)\n        )\n\n        return c.json({ ...result, data })\n      }\n    )\n\n    // GET /admin/api/{base_path}/:id\n    app.get(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:read'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // Resolve paragraph and junction fields so the edit form loads real data.\n        // This deliberately does NOT reuse the relation module's resolvers: the\n        // edit read scopes paragraph rows by parent_id AND parent_field, whereas\n        // resolveRelationField scopes by parent_id only. Two paragraph fields of\n        // the same paragraph type would be mixed by the resolver — so the more\n        // precise per-field read stays here on purpose.\n        if (db) {\n          const row = item as Record<string, unknown>\n          for (const f of contentType.fields) {\n            if (f.db_column === null) {\n              const comp = f.ui_component as { component: string; ref?: string }\n              if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n              const pType = registry.paragraph_types[comp.ref]\n              if (!pType) continue\n              row[f.name] = await loadParagraphRows(db, registry, pType, id, f.name)\n            } else if (f.db_column.junction) {\n              const j = f.db_column.junction\n              const r = await db.execute(\n                sql`SELECT ${sql.raw(quoteIdent(j.right_column))} FROM ${sql.raw(quoteIdent(j.table_name))} WHERE ${sql.raw(quoteIdent(j.left_column))} = ${id}`\n              )\n              row[f.name] = r.rows.map(\n                (row) => (row as Record<string, unknown>)[j.right_column] as string\n              )\n            }\n          }\n        }\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        // Mapped after the paragraph/junction population above so those\n        // label-keyed additions survive.\n        const data = projectRow(item as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // POST /admin/api/{base_path}\n    app.post(\n      `/admin/api/${basePath}`,\n      requirePermission('content:create'),\n      async (c) => {\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        if (contentType.only_one) {\n          const existing = await repo.findMany({ page: 1, per_page: 1 })\n          if (existing.meta.total > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SINGLETON_ALREADY_EXISTS',\n                  message: `Only one instance of '${contentType.label}' is allowed`,\n                },\n              },\n              409\n            )\n          }\n        } else {\n          const slug = body['slug']\n          if (typeof slug !== 'string' || slug.trim() === '') {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'VALIDATION_ERROR',\n                  message: 'Required fields are missing',\n                  details: [{ field: 'slug', message: 'Slug is required' }],\n                },\n              },\n              422\n            )\n          }\n\n          if (!SLUG_PATTERN.test(slug)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_SLUG_FORMAT',\n                  message:\n                    'Slug must be lowercase alphanumeric with hyphens only — no leading or trailing hyphens',\n                },\n              },\n              422\n            )\n          }\n\n          const conflict = await repo.findBySlug(slug)\n          if (conflict) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SLUG_CONFLICT',\n                  message: `Slug '${slug}' already exists for this content type`,\n                },\n              },\n              409\n            )\n          }\n        }\n\n        return writeNewItem(c, body)\n      }\n    )\n\n    // Shared write paths. POST, PATCH and the singleton PUT all funnel through\n    // these two functions so the verbs cannot drift apart — the verb-specific\n    // pre-checks (slug rules, singleton existence, 404s) stay in the routes.\n\n    const writeNewItem = async (c: Context, body: Record<string, unknown>) => {\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const fieldErrors = checkRequiredFields(requiredFields, body)\n        if (fieldErrors.length > 0) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'VALIDATION_ERROR',\n                message: 'Required fields are missing',\n                details: fieldErrors,\n              },\n            },\n            422\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n        }\n\n        // Classify fields\n        const paragraphFields = contentType.fields.filter((f) => f.db_column === null)\n        const junctionFields = contentType.fields.filter(\n          (f) => f.db_column !== null && f.db_column.junction !== undefined\n        )\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const columnBackedFields = contentType.fields.filter(isColumnBacked)\n        const columnData: Record<string, unknown> = {\n          published: body['published'] ?? false,\n        }\n        if (contentType.only_one) {\n          columnData['slug'] = typeName\n        } else {\n          columnData['slug'] = body['slug']\n        }\n        for (const f of columnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          columnData[key] = storageBody[key]\n        }\n\n        // Resolve base_path_id (seeded from routes.json at startup)\n        if (db) {\n          const basePathId = await lookupBasePathId(db, contentType.default_base_path)\n          if (!basePathId) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'BASE_PATH_NOT_FOUND',\n                  message: `Base path '${contentType.default_base_path}' not found — run manguito migrate`,\n                },\n              },\n              500\n            )\n          }\n          columnData['base_path_id'] = basePathId\n        }\n\n        const item = await repo.create(columnData as Parameters<typeof repo.create>[0])\n        const itemId = (item as Record<string, unknown>)['id'] as string\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [topLevelMediaDelta(mediaFields, null, storageBody)]\n\n        // Save paragraph and junction rows\n        if (db) {\n          for (const f of paragraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, itemId, contentType.db.table_name, f.name, pType, items, registry))\n          }\n          for (const f of junctionFields) {\n            const junction = f.db_column!.junction!\n            const relatedIds = Array.isArray(body[f.name])\n              ? (body[f.name] as unknown[]).filter((v): v is string => typeof v === 'string')\n              : []\n            await persistJunctionField(db, itemId, junction, relatedIds)\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = projectRow(item as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data }, 201)\n    }\n\n    // PATCH /admin/api/{base_path}/:id\n    app.patch(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:edit'),\n      async (c) => {\n        const id = c.req.param('id')\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        const existing = await repo.findOne(id)\n        if (!existing) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        if (!contentType.only_one && 'slug' in body) {\n          const slug = body['slug']\n          if (typeof slug !== 'string' || slug.trim() === '') {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'VALIDATION_ERROR',\n                  message: 'Required fields are missing',\n                  details: [{ field: 'slug', message: 'Slug cannot be empty' }],\n                },\n              },\n              422\n            )\n          }\n\n          if (!SLUG_PATTERN.test(slug)) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'INVALID_SLUG_FORMAT',\n                  message:\n                    'Slug must be lowercase alphanumeric with hyphens only — no leading or trailing hyphens',\n                },\n              },\n              422\n            )\n          }\n\n          const conflict = await repo.findBySlug(slug)\n          if (conflict && (conflict as Record<string, unknown>)['id'] !== id) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'SLUG_CONFLICT',\n                  message: `Slug '${slug}' already exists for this content type`,\n                },\n              },\n              409\n            )\n          }\n        }\n\n        return writeExistingItem(c, id, existing as Record<string, unknown>, body)\n      }\n    )\n\n    const writeExistingItem = async (\n      c: Context,\n      id: string,\n      existing: Record<string, unknown>,\n      body: Record<string, unknown>,\n    ) => {\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n\n          // `existing` is a raw SELECT * row (storage-keyed) but\n          // checkRequiredFields reads labels, as does `body` — project the row\n          // to labels first so a renamed field's stored value is actually seen.\n          const merged = { ...fieldKeys.toLabels(existing as Record<string, unknown>), ...body }\n          const fieldErrors = checkRequiredFields(requiredFields, merged)\n          if (fieldErrors.length > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'PUBLISH_VALIDATION_ERROR',\n                  message: 'Cannot publish — required fields are missing',\n                  details: fieldErrors,\n                },\n              },\n              422\n            )\n          }\n        }\n\n        // Classify fields\n        const patchParagraphFields = contentType.fields.filter((f) => f.db_column === null)\n        const patchJunctionFields = contentType.fields.filter(\n          (f) => f.db_column !== null && f.db_column.junction !== undefined\n        )\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const patchColumnBackedFields = contentType.fields.filter(isColumnBacked)\n        const patchData: Record<string, unknown> = {}\n        if (!contentType.only_one && 'slug' in body) patchData['slug'] = body['slug']\n        if ('published' in body) patchData['published'] = body['published']\n        for (const f of patchColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          patchData[key] = storageBody[key]\n        }\n\n        const updated = await repo.update(id, patchData as Parameters<typeof repo.update>[1])\n        if (!updated) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, existing as Record<string, unknown>, storageBody),\n        ]\n\n        // Delete+reinsert paragraph and junction rows\n        if (db) {\n          for (const f of patchParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, id, contentType.db.table_name, f.name, pType, items, registry))\n          }\n          for (const f of patchJunctionFields) {\n            const junction = f.db_column!.junction!\n            const relatedIds = Array.isArray(body[f.name])\n              ? (body[f.name] as unknown[]).filter((v): v is string => typeof v === 'string')\n              : []\n            await persistJunctionField(db, id, junction, relatedIds)\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = projectRow(updated as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data })\n    }\n\n    // PUT /admin/api/{base_path} — singleton upsert.\n    //\n    // A singleton has no id in its admin route, so it cannot be addressed by the\n    // `/:id` PATCH. The parser declares `http_methods: ['GET','PUT','PATCH']` for\n    // `only_one` types and the admin form posts here, so this is the verb that\n    // completes that contract: create the row on first save, update it after.\n    // Registered only for singletons — collections keep POST/PATCH.\n    if (contentType.only_one) {\n      app.put(\n        `/admin/api/${basePath}`,\n        requirePermission('content:edit'),\n        async (c) => {\n          const body = (await c.req.json()) as Record<string, unknown>\n\n          const existingResult = await repo.findMany({ page: 1, per_page: 1 })\n          const existing = existingResult.data[0] as Record<string, unknown> | undefined\n\n          if (!existing) {\n            // First save materialises the row, which is a create — gate it on\n            // content:create in addition to the route's content:edit.\n            const createDeny = await requirePermission('content:create')(c, async () => {})\n            if (createDeny) return createDeny\n            return writeNewItem(c, body)\n          }\n\n          return writeExistingItem(c, existing['id'] as string, existing, body)\n        }\n      )\n    }\n\n    // DELETE /admin/api/{base_path}/:id\n    app.delete(\n      `/admin/api/${basePath}/:id`,\n      requirePermission('content:delete'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Not found' } },\n            404\n          )\n        }\n\n        // A delete removes every media reference the item held (top-level + paragraphs).\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, item as Record<string, unknown>, null),\n        ]\n\n        // Paragraph rows have no FK/cascade back to their parent — clean them up\n        // explicitly so they don't leak, and collect their media for decrementing.\n        if (db) {\n          for (const f of paragraphFieldDefs) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        await repo.delete(id)\n        return c.json({ ok: true })\n      }\n    )\n  }\n\n  // ── Taxonomy type routes ──────────────────────────────────────────────────\n\n  for (const [typeName, taxonomyType] of Object.entries(registry.taxonomy_types)) {\n    const repo = repos[typeName]\n    if (!repo) continue\n\n    const schemaFieldNames = new Set<string>([\n      ...taxonomyType.fields.map((f) => f.name),\n      ...taxonomyType.system_fields.map((f) => f.name),\n    ])\n\n    const relationFieldNames = new Set<string>(\n      taxonomyType.fields\n        .filter((f) => RELATION_FIELD_TYPES.has(f.field_type))\n        .map((f) => f.name)\n    )\n\n    const projector = projectors[typeName]!\n    const fieldKeys = projector.map\n\n    const requiredFields = taxonomyType.fields.filter((f) => f.required)\n\n    const mediaFields = taxonomyType.fields.filter(\n      (f) => f.field_type === 'image' || f.field_type === 'video' || f.field_type === 'file'\n    )\n\n    const paragraphFieldDefs = taxonomyType.fields.filter((f) => f.db_column === null)\n\n    const searchableColumns = [\n      ...taxonomyType.fields\n        .filter((f) => f.field_type === 'text/plain' && f.db_column !== null)\n        .map((f) => f.db_column!.column_name),\n      ...(taxonomyType.system_fields.some((f) => f.name === 'slug') ? ['slug'] : []),\n    ]\n\n    // GET /admin/api/taxonomy/{type}\n    app.get(\n      `/admin/api/taxonomy/${typeName}`,\n      requirePermission('content:read'),\n      async (c) => {\n        const parsed = parseListQuery(c.req.url, schemaFieldNames, relationFieldNames, fieldKeys.columnFor)\n        if (!parsed.ok) {\n          return c.json({ ok: false, error: parsed.response }, parsed.status)\n        }\n\n        const publishedParam = c.req.query('published')\n        const extraFilters: Record<string, FilterValue> = {}\n        if (publishedParam === 'false') extraFilters['published'] = false\n\n        // parsed.sortBy is a validated label; map it to its storage column\n        // before it reaches the repository. The cast is a narrow lie — core\n        // types sort_by as the label union, but the repository immediately\n        // re-validates the mapped value against sortableColumns.\n        const sortColumn = fieldKeys.columnFor(parsed.sortBy) ?? parsed.sortBy\n\n        const findOpts: Parameters<typeof repo.findMany>[0] = {\n          page: parsed.pagination.page,\n          per_page: parsed.pagination.per_page,\n          sort_by: sortColumn as 'title' | 'created_at' | 'updated_at',\n          sort_order: parsed.sortOrder as 'asc' | 'desc',\n          filters: { ...parsed.filters, ...extraFilters },\n          include: parsed.include,\n        }\n        if (publishedParam === 'true') findOpts.published_only = true\n        if (parsed.search !== '' && searchableColumns.length > 0) {\n          findOpts.search = { term: parsed.search, columns: searchableColumns }\n        }\n\n        const result = await repo.findMany(findOpts)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = result.data.map((row) =>\n          projectRow(row as Record<string, unknown>, typeName, projectors)\n        )\n\n        return c.json({ ...result, data })\n      }\n    )\n\n    // GET /admin/api/taxonomy/{type}/:id\n    app.get(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:read'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = projectRow(item as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // POST /admin/api/taxonomy/{type}\n    app.post(\n      `/admin/api/taxonomy/${typeName}`,\n      requirePermission('content:create'),\n      async (c) => {\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const fieldErrors = checkRequiredFields(requiredFields, body)\n        if (fieldErrors.length > 0) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'VALIDATION_ERROR',\n                message: 'Required fields are missing',\n                details: fieldErrors,\n              },\n            },\n            422\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n        }\n\n        // Filter to column-only fields\n        const taxParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null)\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const taxColumnBackedFields = taxonomyType.fields.filter(isColumnBacked)\n        const taxColumnData: Record<string, unknown> = {\n          published: body['published'] ?? false,\n        }\n        for (const f of taxColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          taxColumnData[key] = storageBody[key]\n        }\n\n        const item = await repo.create(taxColumnData as Parameters<typeof repo.create>[0])\n        const taxItemId = (item as Record<string, unknown>)['id'] as string\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [topLevelMediaDelta(mediaFields, null, storageBody)]\n\n        if (db) {\n          for (const f of taxParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, taxItemId, taxonomyType.db.table_name, f.name, pType, items, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = projectRow(item as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data }, 201)\n      }\n    )\n\n    // PATCH /admin/api/taxonomy/{type}/:id\n    app.patch(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:edit'),\n      async (c) => {\n        const id = c.req.param('id')\n        const body = (await c.req.json()) as Record<string, unknown>\n\n        // Inbound boundary: the request body arrives label-keyed; everything\n        // downstream (insert data, media delta) works in storage keys.\n        const storageBody = fieldKeys.toStorage(body)\n\n        const existing = await repo.findOne(id)\n        if (!existing) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        if (body['published'] === true) {\n          const publishDeny = await requirePermission('content:edit')(c, async () => {})\n          if (publishDeny) return publishDeny\n\n          // `existing` is a raw SELECT * row (storage-keyed) but\n          // checkRequiredFields reads labels, as does `body` — project the row\n          // to labels first so a renamed field's stored value is actually seen.\n          const merged = { ...fieldKeys.toLabels(existing as Record<string, unknown>), ...body }\n          const fieldErrors = checkRequiredFields(requiredFields, merged)\n          if (fieldErrors.length > 0) {\n            return c.json(\n              {\n                ok: false,\n                error: {\n                  code: 'PUBLISH_VALIDATION_ERROR',\n                  message: 'Cannot publish — required fields are missing',\n                  details: fieldErrors,\n                },\n              },\n              422\n            )\n          }\n        }\n\n        // Filter to column-only fields\n        const taxPatchParagraphFields = taxonomyType.fields.filter((f) => f.db_column === null)\n\n        // Storage-keyed payload. `storageBody` was normalized at the inbound\n        // boundary, so each value is found under its column name.\n        const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked)\n        const taxPatchData: Record<string, unknown> = {}\n        if ('published' in body) taxPatchData['published'] = body['published']\n        for (const f of taxPatchColumnBackedFields) {\n          const key = f.db_column.column_name\n          if (!(key in storageBody)) continue\n          taxPatchData[key] = storageBody[key]\n        }\n\n        const updated = await repo.update(id, taxPatchData as Parameters<typeof repo.update>[1])\n        if (!updated) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // Reconcile media reference counts across top-level fields and paragraphs.\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, existing as Record<string, unknown>, storageBody),\n        ]\n\n        if (db) {\n          for (const f of taxPatchParagraphFields) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            const items = Array.isArray(body[f.name]) ? (body[f.name] as unknown[]) : []\n            mediaDeltas.push(await persistParagraphField(db, id, taxonomyType.db.table_name, f.name, pType, items, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        // Outbound boundary: rows are storage-keyed; responses speak labels.\n        const data = projectRow(updated as Record<string, unknown>, typeName, projectors)\n\n        return c.json({ ok: true, data })\n      }\n    )\n\n    // DELETE /admin/api/taxonomy/{type}/:id\n    app.delete(\n      `/admin/api/taxonomy/${typeName}/:id`,\n      requirePermission('content:delete'),\n      async (c) => {\n        const id = c.req.param('id')\n        const item = await repo.findOne(id)\n\n        if (!item) {\n          return c.json(\n            { ok: false, error: { code: 'NOT_FOUND', message: 'Taxonomy term not found' } },\n            404\n          )\n        }\n\n        // A delete removes every media reference the item held (top-level + paragraphs).\n        const mediaDeltas: MediaDelta[] = [\n          topLevelMediaDelta(mediaFields, item as Record<string, unknown>, null),\n        ]\n\n        if (db) {\n          for (const f of paragraphFieldDefs) {\n            const comp = f.ui_component as { component: string; ref?: string }\n            if (comp.component !== 'paragraph-embed' || !comp.ref) continue\n            const pType = registry.paragraph_types[comp.ref]\n            if (!pType) continue\n            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry))\n          }\n        }\n\n        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo)\n\n        await repo.delete(id)\n        return c.json({ ok: true })\n      }\n    )\n  }\n\n  // ── Config endpoint ───────────────────────────────────────────────────────\n\n  app.get('/admin/api/config', (c) => {\n    return c.json({\n      ok: true,\n      data: {\n        content_types: Object.values(registry.content_types).map((ct) => ({\n          name: ct.name,\n          label: ct.label,\n          only_one: ct.only_one,\n          default_base_path: ct.default_base_path,\n          fields: ct.fields,\n          system_fields: ct.system_fields,\n        })),\n        taxonomy_types: Object.values(registry.taxonomy_types).map((tt) => ({\n          name: tt.name,\n          label: tt.label,\n          fields: tt.fields,\n          system_fields: tt.system_fields,\n        })),\n        enum_types: Object.values(registry.enum_types).map((et) => ({\n          name: et.name,\n          label: et.label,\n          values: et.values,\n        })),\n      },\n    })\n  })\n}\n","import type { MediaRepository, ParsedField } from '@bobbykim/manguito-cms-core'\n\n// ─── Media reference tracking ─────────────────────────────────────────────────\n//\n// Reconciles media.reference_count on a content write. reference_count counts\n// *content items* that reference a media row (see CONTEXT.md \"Orphaned media\"\n// and docs/adr/api/0007), not reference slots — so a media id used by several\n// fields/paragraphs of one item counts once, and an id moved between slots in\n// one write is a no-op.\n//\n// A write produces a MediaDelta of the ids it gains and loses. Top-level field\n// deltas are computed here (pure); paragraph deltas are produced by the paragraph\n// persistence path and merged in. The merged delta is applied once.\n\nexport type MediaDelta = {\n  added: string[]\n  removed: string[]\n}\n\n// A media field holds a raw id string (not a resolved { id, url } object) on the\n// content/paragraph row. Empty string and non-strings mean \"no media\".\nfunction extractMediaId(value: unknown): string | null {\n  return typeof value === 'string' && value !== '' ? value : null\n}\n\n// Media ids gained and lost between two content states for the top-level media\n// fields. BOTH `before` and `after` are STORAGE-KEYED (column names), never\n// label-keyed — callers normalize a request body with FieldKeyMap.toStorage\n// before calling. Unifies all three writes:\n//   create — before = null            (no prior ids; set fields are added)\n//   update — before/after are rows     (a field absent from `after` is untouched)\n//   delete — after = null              (every current id is removed)\nexport function topLevelMediaDelta(\n  mediaFields: ParsedField[],\n  before: Record<string, unknown> | null,\n  after: Record<string, unknown> | null\n): MediaDelta {\n  const added: string[] = []\n  const removed: string[] = []\n\n  for (const f of mediaFields) {\n    // Media fields are always column-backed, so the storage key always exists.\n    const key = f.db_column?.column_name\n    if (key === undefined || key === '') continue\n\n    // On a partial update, a media field not present in the patch is untouched.\n    // (after === null is a delete — every field is in scope.)\n    if (after !== null && !(key in after)) continue\n\n    const oldId = before ? extractMediaId(before[key]) : null\n    const newId = after ? extractMediaId(after[key]) : null\n    if (newId === oldId) continue\n    if (oldId) removed.push(oldId)\n    if (newId) added.push(newId)\n  }\n\n  return { added, removed }\n}\n\n// Combine the top-level delta with each paragraph field's delta into one delta.\nexport function mergeMediaDeltas(...deltas: MediaDelta[]): MediaDelta {\n  return {\n    added: deltas.flatMap((d) => d.added),\n    removed: deltas.flatMap((d) => d.removed),\n  }\n}\n\n// Apply a delta to reference counts, per content item:\n//   - dedup each side (an id referenced by many slots counts once)\n//   - cancel ids that are both added and removed (moved between slots → no-op)\n//   - skip the repo call when a side is empty\nexport async function applyMediaReferenceDelta(\n  delta: MediaDelta,\n  mediaRepo: MediaRepository\n): Promise<void> {\n  const added = new Set(delta.added)\n  const removed = new Set(delta.removed)\n\n  const netAdd = [...added].filter((id) => !removed.has(id))\n  const netRemove = [...removed].filter((id) => !added.has(id))\n\n  if (netAdd.length > 0) await mediaRepo.incrementReferenceCount(netAdd)\n  if (netRemove.length > 0) await mediaRepo.decrementReferenceCount(netRemove)\n}\n","// Admin media routes — upload, presigned URL, update, delete\nimport type { Context, Hono } from 'hono'\nimport type { MediaRepository, StorageAdapter } from '@bobbykim/manguito-cms-core'\nimport { sign, verify } from 'hono/jwt'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\n\n// ─── Accepted MIME types ──────────────────────────────────────────────────────\n\nconst IMAGE_MIME_TYPES = new Set([\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n])\n\nconst VIDEO_MIME_TYPES = new Set(['video/mp4', 'video/webm', 'video/quicktime'])\n\nconst FILE_MIME_TYPES = new Set(['application/pdf'])\n\n// ─── Pending upload token ─────────────────────────────────────────────────────\n// The presigned-url request and the confirm request can land on different\n// serverless instances, so pending-upload state cannot live in memory. Encode it\n// in a short-lived token signed with AUTH_SECRET — stateless and tamper-proof —\n// and hand it to the client as media_id; confirm verifies it.\n\ntype PendingUpload = {\n  key: string\n  folder: 'image' | 'video' | 'file'\n  mime_type: string\n}\n\nfunction authSecret(): string {\n  const secret = process.env['AUTH_SECRET']\n  if (!secret) throw new Error('AUTH_SECRET environment variable is not set')\n  return secret\n}\n\nasync function signPendingUpload(data: PendingUpload, expiresAt: number): Promise<string> {\n  return sign({ ...data, exp: expiresAt }, authSecret())\n}\n\nasync function verifyPendingUpload(token: string): Promise<PendingUpload | null> {\n  try {\n    const p = await verify(token, authSecret(), 'HS256') as {\n      key: string\n      folder: 'image' | 'video' | 'file'\n      mime_type: string\n    }\n    return { key: p.key, folder: p.folder, mime_type: p.mime_type }\n  } catch {\n    return null\n  }\n}\n\n\nasync function handleDirectUpload(\n  folder: 'image' | 'video' | 'file',\n  acceptedTypes: Set<string>,\n  mediaRepo: MediaRepository,\n  storage: StorageAdapter,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  c: Context<any, any, any>,\n  altRequired: boolean,\n  maxFileSize: number | undefined\n): Promise<Response> {\n  // Direct uploads buffer the whole file in the CMS server's memory (unlike the\n  // presigned flow, which uploads straight to storage). Reject oversized bodies\n  // up front via Content-Length so we never buffer them — and keep max_file_size\n  // under the platform payload limit on serverless (Lambda ~6 MB).\n  if (maxFileSize !== undefined) {\n    const contentLength = Number(c.req.header('content-length'))\n    if (Number.isFinite(contentLength) && contentLength > maxFileSize) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'FILE_TOO_LARGE',\n            message: `Upload exceeds the maximum size of ${maxFileSize} bytes`,\n          },\n        },\n        413\n      )\n    }\n  }\n\n  let formData: FormData\n  try {\n    formData = await c.req.formData()\n  } catch {\n    return c.json(\n      { ok: false, error: { code: 'VALIDATION_ERROR', message: 'Expected multipart/form-data' } },\n      422\n    )\n  }\n\n  const fileField = formData.get('file')\n  if (!(fileField instanceof File)) {\n    return c.json(\n      { ok: false, error: { code: 'VALIDATION_ERROR', message: 'file field is required' } },\n      422\n    )\n  }\n\n  // Defensive second check: Content-Length may be absent (chunked) or count\n  // multipart overhead, so also reject on the actual decoded file size.\n  if (maxFileSize !== undefined && fileField.size > maxFileSize) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'FILE_TOO_LARGE',\n          message: `File exceeds the maximum size of ${maxFileSize} bytes`,\n        },\n      },\n      413\n    )\n  }\n\n  const mimeType = fileField.type\n  if (!acceptedTypes.has(mimeType)) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'UNSUPPORTED_MIME_TYPE',\n          message: `MIME type '${mimeType}' is not accepted by this endpoint`,\n        },\n      },\n      415\n    )\n  }\n\n  const altValue = formData.get('alt')\n  const alt = typeof altValue === 'string' && altValue.trim() !== '' ? altValue.trim() : undefined\n\n  if (altRequired && !alt) {\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'VALIDATION_ERROR',\n          message: 'alt is required for this media type',\n          details: [{ field: 'alt', message: 'alt is required' }],\n        },\n      },\n      422\n    )\n  }\n\n  let presigned: Awaited<ReturnType<StorageAdapter['getPresignedUploadUrl']>>\n  try {\n    presigned = await storage.getPresignedUploadUrl({\n      folder,\n      filename: fileField.name,\n      mime_type: mimeType,\n    })\n  } catch {\n    return c.json(\n      { ok: false, error: { code: 'STORAGE_ERROR', message: 'Failed to generate upload URL' } },\n      502\n    )\n  }\n\n  if (storage.upload) {\n    try {\n      const bytes = new Uint8Array(await fileField.arrayBuffer())\n      await storage.upload(presigned.key, bytes, mimeType)\n    } catch (err) {\n      console.error('[media] storage.upload error:', err)\n      return c.json(\n        { ok: false, error: { code: 'STORAGE_ERROR', message: 'Storage upload failed' } },\n        502\n      )\n    }\n  }\n\n  const url = storage.getUrl(presigned.key)\n  const fileSize = fileField.size\n\n  const item = await mediaRepo.create({\n    type: folder,\n    url,\n    mime_type: mimeType,\n    ...(alt !== undefined && { alt }),\n    file_size: fileSize,\n  })\n\n  return c.json({ ok: true, data: item }, 201)\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAdminMediaRoutes(\n  app: Hono,\n  mediaRepo: MediaRepository,\n  storage: StorageAdapter,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  maxFileSize: number | undefined,\n): void {\n  // POST /admin/api/media/image\n  app.post(\n    '/admin/api/media/image',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('image', IMAGE_MIME_TYPES, mediaRepo, storage, c, false, maxFileSize)\n    }\n  )\n\n  // POST /admin/api/media/video\n  app.post(\n    '/admin/api/media/video',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('video', VIDEO_MIME_TYPES, mediaRepo, storage, c, true, maxFileSize)\n    }\n  )\n\n  // POST /admin/api/media/file\n  app.post(\n    '/admin/api/media/file',\n    requirePermission('media:create'),\n    async (c) => {\n      return handleDirectUpload('file', FILE_MIME_TYPES, mediaRepo, storage, c, true, maxFileSize)\n    }\n  )\n\n  // GET /admin/api/media/presigned-url\n  app.get('/admin/api/media/presigned-url', requirePermission('media:create'), async (c) => {\n    const type = c.req.query('type') as 'image' | 'video' | 'file' | undefined\n    const filename = c.req.query('filename')\n    const mimeType = c.req.query('mime_type')\n\n    if (!type || !['image', 'video', 'file'].includes(type)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'type must be one of: image, video, file',\n            details: [{ field: 'type', message: 'type is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    if (!filename || filename.trim() === '') {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'filename is required',\n            details: [{ field: 'filename', message: 'filename is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    if (!mimeType || mimeType.trim() === '') {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'mime_type is required',\n            details: [{ field: 'mime_type', message: 'mime_type is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    const accepted =\n      type === 'image' ? IMAGE_MIME_TYPES : type === 'video' ? VIDEO_MIME_TYPES : FILE_MIME_TYPES\n\n    if (!accepted.has(mimeType)) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'UNSUPPORTED_MIME_TYPE',\n            message: `MIME type '${mimeType}' is not accepted for ${type} uploads`,\n          },\n        },\n        415\n      )\n    }\n\n    let presigned: Awaited<ReturnType<StorageAdapter['getPresignedUploadUrl']>>\n    try {\n      presigned = await storage.getPresignedUploadUrl({\n        folder: type,\n        filename,\n        mime_type: mimeType,\n      })\n    } catch {\n      return c.json(\n        { ok: false, error: { code: 'STORAGE_ERROR', message: 'Failed to generate upload URL' } },\n        502\n      )\n    }\n\n    const media_id = await signPendingUpload(\n      { key: presigned.key, folder: type, mime_type: mimeType },\n      presigned.expires_at,\n    )\n\n    return c.json({\n      ok: true,\n      data: {\n        upload_url: presigned.upload_url,\n        // Signed, self-contained token the client posts back to /confirm/:id.\n        media_id,\n        expires_at: presigned.expires_at,\n        // Present for storages that need a multipart POST with signed fields\n        // (Cloudinary); absent for a raw PUT (S3).\n        ...(presigned.method && { method: presigned.method }),\n        ...(presigned.fields && { fields: presigned.fields }),\n      },\n    })\n  })\n\n  // POST /admin/api/media/confirm/:id\n  app.post('/admin/api/media/confirm/:id', requirePermission('media:create'), async (c) => {\n    const id = c.req.param('id')\n\n    const pending = await verifyPendingUpload(id)\n    if (!pending) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'PRESIGNED_URL_EXPIRED',\n            message: 'Presigned upload not found or has expired',\n          },\n        },\n        410\n      )\n    }\n\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>\n    const altValue = typeof body['alt'] === 'string' ? body['alt'].trim() : undefined\n\n    const altRequired = pending.folder === 'video' || pending.folder === 'file'\n    if (altRequired && !altValue) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'alt is required for video and file uploads',\n            details: [{ field: 'alt', message: 'alt is required' }],\n          },\n        },\n        422\n      )\n    }\n\n    // Validate the actual uploaded object where the adapter supports it.\n    let fileSize = 0\n    if (storage.stat) {\n      const meta = await storage.stat(pending.key)\n      if (!meta) {\n        return c.json(\n          { ok: false, error: { code: 'STORAGE_ERROR', message: 'Uploaded object not found' } },\n          502,\n        )\n      }\n      const accepted =\n        pending.folder === 'image' ? IMAGE_MIME_TYPES\n        : pending.folder === 'video' ? VIDEO_MIME_TYPES\n        : FILE_MIME_TYPES\n      if (meta.content_type && !accepted.has(meta.content_type)) {\n        await storage.delete(pending.key)\n        return c.json(\n          { ok: false, error: { code: 'UNSUPPORTED_MIME_TYPE', message: `Stored object type '${meta.content_type}' is not accepted` } },\n          415,\n        )\n      }\n      if (maxFileSize !== undefined && meta.size > maxFileSize) {\n        await storage.delete(pending.key)\n        return c.json(\n          { ok: false, error: { code: 'FILE_TOO_LARGE', message: `Uploaded file exceeds the ${maxFileSize} byte limit` } },\n          413,\n        )\n      }\n      fileSize = meta.size\n    }\n\n    const url = storage.getUrl(pending.key)\n\n    const item = await mediaRepo.create({\n      type: pending.folder,\n      url,\n      mime_type: pending.mime_type,\n      ...(altValue !== undefined && { alt: altValue }),\n      file_size: fileSize,\n    })\n\n    return c.json({ ok: true, data: item }, 201)\n  })\n\n  // PATCH /admin/api/media/:id\n  app.patch(\n    '/admin/api/media/:id',\n    requirePermission('media:edit'),\n    async (c) => {\n      const id = c.req.param('id')\n      const existing = await mediaRepo.findOne(id)\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      const body = (await c.req.json()) as Record<string, unknown>\n      const alt = typeof body['alt'] === 'string' ? body['alt'].trim() : undefined\n\n      const updateData: Parameters<typeof mediaRepo.update>[1] = {}\n      if (alt !== undefined) updateData.alt = alt\n\n      const updated = await mediaRepo.update(id, updateData)\n      if (!updated) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      return c.json({ ok: true, data: updated })\n    }\n  )\n\n  // DELETE /admin/api/media/:id\n  app.delete(\n    '/admin/api/media/:id',\n    requirePermission('media:delete'),\n    async (c) => {\n      const id = c.req.param('id')\n      const item = await mediaRepo.findOne(id)\n\n      if (!item) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n          404\n        )\n      }\n\n      if (item.reference_count > 0) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'MEDIA_IN_USE',\n              message: 'Cannot delete media that is referenced by content items',\n            },\n          },\n          409\n        )\n      }\n\n      // Derive storage key from URL.\n      // Cloudinary delivery URLs: https://res.cloudinary.com/{cloud}/{type}/upload/{public_id}\n      // Local delivery URLs:      http://localhost/uploads/{key}\n      // For Cloudinary, the adapter key is the public_id — everything after \"/upload/\".\n      // For local (and S3), the adapter key is the full path after the host.\n      const pathname = new URL(item.url).pathname\n      const uploadIdx = pathname.indexOf('/upload/')\n      const key = uploadIdx >= 0\n        ? pathname.slice(uploadIdx + '/upload/'.length)\n        : pathname.replace(/^\\//, '')\n\n      try {\n        await storage.delete(key)\n      } catch (err) {\n        console.error('[media] storage.delete error:', err)\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'STORAGE_ERROR', message: 'Failed to delete file from storage' },\n          },\n          502\n        )\n      }\n\n      await mediaRepo.delete(id)\n\n      return c.json({ ok: true })\n    }\n  )\n\n  // GET /admin/api/media\n  app.get('/admin/api/media', requirePermission('media:read'), async (c) => {\n    const pageStr = c.req.query('page')\n    const perPageStr = c.req.query('per_page')\n    const page = pageStr !== undefined ? Number(pageStr) : 1\n    const per_page = perPageStr !== undefined ? Number(perPageStr) : 10\n\n    if (\n      !Number.isInteger(page) ||\n      page < 1 ||\n      !Number.isInteger(per_page) ||\n      per_page < 1 ||\n      per_page > 100\n    ) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'INVALID_PAGINATION',\n            message: 'page must be ≥ 1 and per_page must be between 1 and 100',\n          },\n        },\n        400\n      )\n    }\n\n    const typeParam = c.req.query('type')\n    if (typeParam !== undefined && !['image', 'video', 'file'].includes(typeParam)) {\n      return c.json(\n        {\n          ok: false,\n          error: { code: 'VALIDATION_ERROR', message: 'type must be one of: image, video, file' },\n        },\n        422\n      )\n    }\n\n    const orphanedParam = c.req.query('orphaned')\n    const orphaned =\n      orphanedParam === 'true' ? true : orphanedParam === 'false' ? false : undefined\n\n    const opts: Parameters<typeof mediaRepo.findMany>[0] = { page, per_page }\n    if (typeParam !== undefined) opts.type = typeParam as 'image' | 'video' | 'file'\n    if (orphaned !== undefined) opts.orphaned = orphaned\n\n    const result = await mediaRepo.findMany(opts)\n\n    return c.json(result)\n  })\n\n  // GET /admin/api/media/:id\n  app.get('/admin/api/media/:id', requirePermission('media:read'), async (c) => {\n    const id = c.req.param('id')\n    const item = await mediaRepo.findOne(id)\n\n    if (!item) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'Media item not found' } },\n        404\n      )\n    }\n\n    return c.json({ ok: true, data: item })\n  })\n\n}\n","import type { Hono } from 'hono'\nimport { getCookie } from 'hono/cookie'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { verifyPassword } from '../../auth/password.js'\nimport {\n  signToken,\n  verifyToken,\n  setAuthCookie,\n  clearAuthCookie,\n  AUTH_TOKEN_TTL,\n  REFRESH_TOKEN_TTL,\n} from '../../auth/jwt.js'\nimport { createAuthMiddleware } from '../../middleware/auth.js'\n\n// ─── Rate limiting ────────────────────────────────────────────────────────────\n\nconst loginAttempts = new Map<string, number[]>()\nconst globalLoginAttempts: number[] = []\n\nconst RATE_LIMIT_MAX = 10\nconst RATE_LIMIT_WINDOW_MS = 15 * 60 * 1000\n// Global backstop across all IPs/emails — blunts distributed spraying without\n// per-account lockout (ADR api/0005). Sized well above legitimate concurrent\n// login volume for a self-hosted CMS.\nconst GLOBAL_LOGIN_MAX = 100\n\n// A valid cost-12 bcrypt hash used only to equalize timing on the\n// user-not-found path, so login response time cannot enumerate accounts.\nconst DUMMY_PASSWORD_HASH =\n  '$2a$12$y.MZw/Q4Ceg3x1y3xrRaeuTaM09zSDx1nn78guO3bqc9vgOqGda42'\n\nfunction checkRateLimit(key: string): { allowed: boolean; retryAfterSeconds: number } {\n  const now = Date.now()\n  const windowStart = now - RATE_LIMIT_WINDOW_MS\n\n  // Global ceiling first — purge, then evaluate before recording the per-key hit.\n  while (globalLoginAttempts.length > 0 && globalLoginAttempts[0]! <= windowStart) {\n    globalLoginAttempts.shift()\n  }\n  if (globalLoginAttempts.length >= GLOBAL_LOGIN_MAX) {\n    const retryAfterSeconds = Math.ceil((globalLoginAttempts[0]! + RATE_LIMIT_WINDOW_MS - now) / 1000)\n    return { allowed: false, retryAfterSeconds }\n  }\n\n  const attempts = (loginAttempts.get(key) ?? []).filter((t) => t > windowStart)\n  attempts.push(now)\n  loginAttempts.set(key, attempts)\n  globalLoginAttempts.push(now)\n\n  if (attempts.length > RATE_LIMIT_MAX) {\n    const oldestInWindow = attempts[0]!\n    const retryAfterSeconds = Math.ceil((oldestInWindow + RATE_LIMIT_WINDOW_MS - now) / 1000)\n    return { allowed: false, retryAfterSeconds }\n  }\n\n  return { allowed: true, retryAfterSeconds: 0 }\n}\n\n/** Test-only: clears in-process login rate-limit state. Not part of the public API. */\nexport function __resetLoginRateLimitStateForTests(): void {\n  loginAttempts.clear()\n  globalLoginAttempts.length = 0\n}\n\n// ─── DB row types ─────────────────────────────────────────────────────────────\n\ntype LoginUserRow = {\n  id: string\n  email: string\n  password_hash: string\n  role_id: string\n  token_version: number\n}\n\ntype RefreshRow = {\n  token_version: number\n  role: string\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerAuthRoutes(app: Hono, db: DrizzlePostgresInstance): void {\n  const invalidCredentials = {\n    ok: false,\n    error: { code: 'INVALID_CREDENTIALS', message: 'Invalid email or password.' },\n  } as const\n\n  // POST /admin/api/auth/login\n  app.post('/admin/api/auth/login', async (c) => {\n    let body: { email?: unknown; password?: unknown }\n    try {\n      body = (await c.req.json()) as { email?: unknown; password?: unknown }\n    } catch {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const email =\n      typeof body.email === 'string' ? body.email.trim().toLowerCase() : null\n    const password = typeof body.password === 'string' ? body.password : null\n\n    if (!email || !password) {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const ip =\n      c.req.header('x-forwarded-for')?.split(',')[0]?.trim() ?? 'unknown'\n    const rateCheck = checkRateLimit(`${ip}:${email}`)\n    if (!rateCheck.allowed) {\n      c.header('Retry-After', String(rateCheck.retryAfterSeconds))\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'RATE_LIMITED',\n            message: 'Too many login attempts. Please try again later.',\n          },\n        },\n        429,\n      )\n    }\n\n    const userResult = await db.execute(\n      sql`SELECT id, email, password_hash, role_id, token_version\n          FROM users WHERE email = ${email} LIMIT 1`,\n    )\n    const user = userResult.rows[0] as LoginUserRow | undefined\n\n    if (!user) {\n      // Run a dummy comparison so this path pays the same bcrypt cost as a\n      // real user, closing the user-enumeration timing side-channel.\n      await verifyPassword(password, DUMMY_PASSWORD_HASH)\n      return c.json(invalidCredentials, 401)\n    }\n\n    const passwordValid = await verifyPassword(password, user.password_hash)\n    if (!passwordValid) {\n      return c.json(invalidCredentials, 401)\n    }\n\n    const roleResult = await db.execute(\n      sql`SELECT r.name AS name, u.must_change_password\n          FROM roles r\n          JOIN users u ON u.role_id = r.id\n          WHERE r.id = ${user.role_id} AND u.id = ${user.id}\n          LIMIT 1`,\n    )\n    const roleRow = roleResult.rows[0] as { name: string; must_change_password: boolean } | undefined\n\n    if (!roleRow) {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_ROLE', message: 'User role not found.' } },\n        500,\n      )\n    }\n\n    const [authToken, refreshToken] = await Promise.all([\n      signToken(\n        { user_id: user.id, role: roleRow.name, token_version: user.token_version },\n        AUTH_TOKEN_TTL,\n      ),\n      signToken(\n        { user_id: user.id, role: roleRow.name, token_version: user.token_version },\n        REFRESH_TOKEN_TTL,\n      ),\n    ])\n\n    setAuthCookie(c, 'auth_token', authToken, { path: '/' })\n    setAuthCookie(c, 'refresh_token', refreshToken, { path: '/admin/api/auth' })\n\n    return c.json({\n      ok: true,\n      data: {\n        id: user.id,\n        email: user.email,\n        role: roleRow.name,\n        must_change_password: roleRow.must_change_password,\n      },\n    })\n  })\n\n  // POST /admin/api/auth/refresh\n  app.post('/admin/api/auth/refresh', async (c) => {\n    const token = getCookie(c, 'refresh_token')\n    if (!token) {\n      return c.json(\n        { ok: false, error: { code: 'UNAUTHORIZED', message: 'Authentication required.' } },\n        401,\n      )\n    }\n\n    let payload\n    try {\n      payload = await verifyToken(token)\n    } catch (err) {\n      const code = (err as { code?: string }).code\n      if (code === 'TOKEN_EXPIRED') {\n        return c.json(\n          { ok: false, error: { code: 'TOKEN_EXPIRED', message: 'Token has expired.' } },\n          401,\n        )\n      }\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token signature is invalid.' } },\n        401,\n      )\n    }\n\n    const rowResult = await db.execute(\n      sql`SELECT u.token_version, r.name AS role\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${payload.user_id}\n          LIMIT 1`,\n    )\n    const row = rowResult.rows[0] as RefreshRow | undefined\n\n    if (!row || payload.token_version !== row.token_version) {\n      return c.json(\n        { ok: false, error: { code: 'TOKEN_INVALID', message: 'Token has been invalidated.' } },\n        401,\n      )\n    }\n\n    const newAuthToken = await signToken(\n      { user_id: payload.user_id, role: row.role, token_version: row.token_version },\n      AUTH_TOKEN_TTL,\n    )\n    setAuthCookie(c, 'auth_token', newAuthToken, { path: '/' })\n\n    return c.json({ ok: true })\n  })\n\n  // POST /admin/api/auth/logout\n  const authMiddleware = createAuthMiddleware(db)\n  app.post('/admin/api/auth/logout', authMiddleware, async (c) => {\n    const user = (c as unknown as { get(k: 'user'): { id: string; role: string } }).get('user')\n\n    await db.execute(\n      sql`UPDATE users SET token_version = token_version + 1 WHERE id = ${user.id}`,\n    )\n\n    clearAuthCookie(c, 'auth_token')\n    clearAuthCookie(c, 'refresh_token', '/admin/api/auth')\n\n    return c.json({ ok: true })\n  })\n}\n","export { hashPassword, verifyPassword } from '@bobbykim/manguito-cms-core'\n","import type { Hono } from 'hono'\nimport { sql } from 'drizzle-orm'\nimport { randomBytes } from 'node:crypto'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport { hashPassword, verifyPassword } from '../../auth/password.js'\nimport type { createPermissionMiddleware } from '../../middleware/permission.js'\nimport type { createHierarchyMiddleware } from '../../middleware/hierarchy.js'\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\ntype ActingUser = { id: string; role: string }\n\ntype UserRow = {\n  id: string\n  email: string\n  role: string\n  must_change_password: boolean\n  created_at: string\n  updated_at: string\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\n\nfunction getActingUser(c: unknown): ActingUser {\n  return (c as { get(k: 'user'): ActingUser }).get('user')\n}\n\nfunction generateTempPassword(): string {\n  return randomBytes(8).toString('base64url')\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerUserRoutes(\n  app: Hono,\n  db: DrizzlePostgresInstance,\n  requirePermission: ReturnType<typeof createPermissionMiddleware>,\n  requireHierarchy: ReturnType<typeof createHierarchyMiddleware>,\n): void {\n  // POST /admin/api/users/change-password\n  // Registered first — exempt from mustChangePasswordCheck (enforced by path check in that middleware).\n  // No requirePermission — available to any authenticated user.\n  app.post('/admin/api/users/change-password', async (c) => {\n    const actingUser = getActingUser(c)\n\n    let body: { current_password?: unknown; new_password?: unknown }\n    try {\n      body = (await c.req.json()) as { current_password?: unknown; new_password?: unknown }\n    } catch {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_CREDENTIALS', message: 'Invalid credentials.' } },\n        401,\n      )\n    }\n\n    const currentPassword =\n      typeof body.current_password === 'string' ? body.current_password : null\n    const newPassword = typeof body.new_password === 'string' ? body.new_password : null\n\n    if (!currentPassword || !newPassword) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'VALIDATION_ERROR',\n            message: 'current_password and new_password are required.',\n          },\n        },\n        422,\n      )\n    }\n\n    const hashResult = await db.execute(\n      sql`SELECT password_hash FROM users WHERE id = ${actingUser.id} LIMIT 1`,\n    )\n    const hashRow = hashResult.rows[0] as { password_hash: string } | undefined\n\n    if (!hashRow || !(await verifyPassword(currentPassword, hashRow.password_hash))) {\n      return c.json(\n        { ok: false, error: { code: 'INVALID_CREDENTIALS', message: 'Invalid credentials.' } },\n        401,\n      )\n    }\n\n    const newHash = await hashPassword(newPassword)\n\n    await db.execute(\n      sql`UPDATE users\n          SET password_hash       = ${newHash},\n              must_change_password = false,\n              token_version        = token_version + 1,\n              updated_at           = NOW()\n          WHERE id = ${actingUser.id}`,\n    )\n\n    return c.json({ ok: true })\n  })\n\n  // GET /admin/api/users\n  app.get('/admin/api/users', requirePermission('users:read'), async (c) => {\n    const result = await db.execute(\n      sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                 u.created_at, u.updated_at\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          ORDER BY u.created_at ASC`,\n    )\n\n    return c.json({ ok: true, data: result.rows as UserRow[] })\n  })\n\n  // GET /admin/api/users/:id\n  app.get('/admin/api/users/:id', requirePermission('users:read'), async (c) => {\n    const id = c.req.param('id')\n\n    const result = await db.execute(\n      sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                 u.created_at, u.updated_at\n          FROM users u\n          JOIN roles r ON r.id = u.role_id\n          WHERE u.id = ${id}\n          LIMIT 1`,\n    )\n    const row = result.rows[0] as UserRow | undefined\n\n    if (!row) {\n      return c.json(\n        { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n        404,\n      )\n    }\n\n    return c.json({ ok: true, data: row })\n  })\n\n  // POST /admin/api/users\n  app.post(\n    '/admin/api/users',\n    requirePermission('users:create'),\n    requireHierarchy(),\n    async (c) => {\n      let body: { email?: unknown; role?: unknown }\n      try {\n        body = (await c.req.json()) as { email?: unknown; role?: unknown }\n      } catch {\n        return c.json(\n          { ok: false, error: { code: 'VALIDATION_ERROR', message: 'Request body is required.' } },\n          422,\n        )\n      }\n\n      const email =\n        typeof body.email === 'string' ? body.email.trim().toLowerCase() : null\n      const roleName = typeof body.role === 'string' ? body.role : null\n\n      if (!email) {\n        return c.json(\n          { ok: false, error: { code: 'VALIDATION_ERROR', message: 'email is required.' } },\n          422,\n        )\n      }\n      if (!roleName) {\n        return c.json(\n          { ok: false, error: { code: 'INVALID_ROLE', message: 'role is required.' } },\n          400,\n        )\n      }\n\n      const roleResult = await db.execute(\n        sql`SELECT id FROM roles WHERE name = ${roleName} LIMIT 1`,\n      )\n      const roleRow = roleResult.rows[0] as { id: string } | undefined\n\n      if (!roleRow) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INVALID_ROLE', message: `Role \"${roleName}\" does not exist.` },\n          },\n          400,\n        )\n      }\n\n      const tempPassword = generateTempPassword()\n      const passwordHash = await hashPassword(tempPassword)\n\n      const insertResult = await db.execute(\n        sql`INSERT INTO users\n              (id, email, password_hash, role_id, must_change_password, token_version,\n               created_at, updated_at)\n            VALUES\n              (gen_random_uuid(), ${email}, ${passwordHash}, ${roleRow.id},\n               true, 0, NOW(), NOW())\n            RETURNING id, email, must_change_password, created_at, updated_at`,\n      )\n      const newUser = insertResult.rows[0] as\n        | {\n            id: string\n            email: string\n            must_change_password: boolean\n            created_at: string\n            updated_at: string\n          }\n        | undefined\n\n      if (!newUser) {\n        return c.json(\n          { ok: false, error: { code: 'INTERNAL_ERROR', message: 'Failed to create user.' } },\n          500,\n        )\n      }\n\n      return c.json(\n        {\n          ok: true,\n          data: {\n            id: newUser.id,\n            email: newUser.email,\n            role: roleName,\n            must_change_password: newUser.must_change_password,\n            temporary_password: tempPassword,\n            created_at: newUser.created_at,\n            updated_at: newUser.updated_at,\n          },\n        },\n        201,\n      )\n    },\n  )\n\n  // PATCH /admin/api/users/:id\n  app.patch(\n    '/admin/api/users/:id',\n    requirePermission('users:edit'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      let body: { email?: unknown; role?: unknown }\n      try {\n        body = (await c.req.json()) as { email?: unknown; role?: unknown }\n      } catch {\n        body = {}\n      }\n\n      // Self role change is never permitted\n      if (actingUser.id === id && body.role !== undefined) {\n        return c.json(\n          {\n            ok: false,\n            error: { code: 'INSUFFICIENT_PRIVILEGE', message: 'You cannot change your own role.' },\n          },\n          403,\n        )\n      }\n\n      const existingResult = await db.execute(\n        sql`SELECT id, email, role_id FROM users WHERE id = ${id} LIMIT 1`,\n      )\n      const existing = existingResult.rows[0] as\n        | { id: string; email: string; role_id: string }\n        | undefined\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      const newEmail =\n        typeof body.email === 'string' ? body.email.trim().toLowerCase() : existing.email\n\n      let newRoleId = existing.role_id\n      let changeRole = false\n\n      if (typeof body.role === 'string' && body.role) {\n        const roleResult = await db.execute(\n          sql`SELECT id FROM roles WHERE name = ${body.role} LIMIT 1`,\n        )\n        const roleRow = roleResult.rows[0] as { id: string } | undefined\n\n        if (!roleRow) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'INVALID_ROLE',\n                message: `Role \"${body.role}\" does not exist.`,\n              },\n            },\n            400,\n          )\n        }\n\n        newRoleId = roleRow.id\n        changeRole = true\n      }\n\n      if (changeRole) {\n        await db.execute(\n          sql`UPDATE users\n              SET email         = ${newEmail},\n                  role_id       = ${newRoleId},\n                  token_version = token_version + 1,\n                  updated_at    = NOW()\n              WHERE id = ${id}`,\n        )\n      } else {\n        await db.execute(\n          sql`UPDATE users\n              SET email      = ${newEmail},\n                  role_id    = ${newRoleId},\n                  updated_at = NOW()\n              WHERE id = ${id}`,\n        )\n      }\n\n      const updatedResult = await db.execute(\n        sql`SELECT u.id, u.email, r.name AS role, u.must_change_password,\n                   u.created_at, u.updated_at\n            FROM users u\n            JOIN roles r ON r.id = u.role_id\n            WHERE u.id = ${id}\n            LIMIT 1`,\n      )\n      const updated = updatedResult.rows[0] as UserRow | undefined\n\n      if (!updated) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      return c.json({ ok: true, data: updated })\n    },\n  )\n\n  // DELETE /admin/api/users/:id\n  app.delete(\n    '/admin/api/users/:id',\n    requirePermission('users:delete'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      if (actingUser.id === id) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INSUFFICIENT_PRIVILEGE',\n              message: 'You cannot delete your own account.',\n            },\n          },\n          403,\n        )\n      }\n\n      const result = await db.execute(\n        sql`DELETE FROM users WHERE id = ${id} RETURNING id`,\n      )\n\n      if ((result.rows as unknown[]).length === 0) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      return c.json({ ok: true })\n    },\n  )\n\n  // POST /admin/api/users/:id/reset-password\n  app.post(\n    '/admin/api/users/:id/reset-password',\n    requirePermission('users:edit'),\n    requireHierarchy(),\n    async (c) => {\n      const id = c.req.param('id')\n      const actingUser = getActingUser(c)\n\n      if (actingUser.id === id) {\n        return c.json(\n          {\n            ok: false,\n            error: {\n              code: 'INSUFFICIENT_PRIVILEGE',\n              message: 'You cannot reset your own password via this endpoint.',\n            },\n          },\n          403,\n        )\n      }\n\n      const existingResult = await db.execute(\n        sql`SELECT id FROM users WHERE id = ${id} LIMIT 1`,\n      )\n      const existing = existingResult.rows[0] as { id: string } | undefined\n\n      if (!existing) {\n        return c.json(\n          { ok: false, error: { code: 'NOT_FOUND', message: 'User not found.' } },\n          404,\n        )\n      }\n\n      const tempPassword = generateTempPassword()\n      const passwordHash = await hashPassword(tempPassword)\n\n      await db.execute(\n        sql`UPDATE users\n            SET password_hash        = ${passwordHash},\n                must_change_password = true,\n                token_version        = token_version + 1,\n                updated_at           = NOW()\n            WHERE id = ${id}`,\n      )\n\n      return c.json({ ok: true, data: { temporary_password: tempPassword } })\n    },\n  )\n}\n","import { sql } from 'drizzle-orm'\nimport type { Hono } from 'hono'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type { RolesRegistry } from '../../auth/registry.js'\n\n// ─── Version — injected by tsup at build time; falls back in test/dev ─────────\n\ndeclare const __API_VERSION__: string\n\nconst API_VERSION: string = (() => {\n  try { return __API_VERSION__ } catch { return '0.0.0' }\n})()\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\ntype ActingUser = { id: string; role: string }\n\ntype ConfigOptions = {\n  name: string\n  maxFileSize?: number\n  presignedUploads?: boolean\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerConfigRoute(\n  app: Hono,\n  config: ConfigOptions,\n  registry: RolesRegistry,\n  db: DrizzlePostgresInstance,\n): void {\n  app.get('/admin/api/config', async (c) => {\n    const actingUser = (c as unknown as { get(k: 'user'): ActingUser }).get('user')\n    const actingRole = registry[actingUser.role]\n    const actingLevel = actingRole?.hierarchy_level ?? Infinity\n\n    // Subordinate roles only — used by user management forms for role assignment.\n    const roles = Object.values(registry)\n      .filter((r) => r.name !== 'admin' && r.hierarchy_level > actingLevel)\n      .sort((a, b) => a.hierarchy_level - b.hierarchy_level)\n      .map((r) => ({ name: r.name, label: r.label, hierarchy_level: r.hierarchy_level }))\n\n    // All roles with full data — used by the admin panel to resolve permissions.\n    const all_roles = Object.values(registry)\n      .sort((a, b) => a.hierarchy_level - b.hierarchy_level)\n      .map((r) => ({\n        name: r.name,\n        label: r.label,\n        hierarchy_level: r.hierarchy_level,\n        is_system: r.is_system,\n        permissions: r.permissions,\n      }))\n\n    const userResult = await db.execute(\n      sql`SELECT email, must_change_password FROM users WHERE id = ${actingUser.id} LIMIT 1`\n    )\n    const userRow = userResult.rows[0] as\n      | { email: string; must_change_password: boolean }\n      | undefined\n\n    return c.json({\n      ok: true,\n      data: {\n        cms_name: config.name ?? 'Manguito CMS',\n        version: API_VERSION,\n        roles,\n        all_roles,\n        user: {\n          id: actingUser.id,\n          email: userRow?.email ?? '',\n          role: actingUser.role,\n          must_change_password: userRow?.must_change_password ?? false,\n        },\n        media: {\n          max_file_size: config.maxFileSize ?? null,\n          presigned_uploads: config.presignedUploads ?? false,\n        },\n      },\n    })\n  })\n}\n","import { sql } from 'drizzle-orm'\nimport type { Hono } from 'hono'\nimport type { ParsedField, SchemaRegistry } from '@bobbykim/manguito-cms-core'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\n\n// A tombstone (`removed: true`) keeps its column alive for older live\n// versions but must not be exposed by the CURRENT version — which is all\n// this endpoint ever serves. The admin panel has no other path to schema\n// data (packages/admin/src/stores/schema.ts's setFromApiSchema is the only\n// consumer), so filtering here is what keeps a dead column out of every\n// admin form and list view.\nfunction liveFields(fields: ParsedField[]): ParsedField[] {\n  return fields.filter((f) => f.removed !== true)\n}\n\n// ─── Register ─────────────────────────────────────────────────────────────────\n\nexport function registerSchemaRoute(\n  app: Hono,\n  registry: SchemaRegistry,\n  db: DrizzlePostgresInstance,\n): void {\n  // Full schema — used by the admin panel for form rendering, validation, and navigation.\n  // Returns complete ParsedField objects (validation, ui_component) so the admin\n  // forms can render inputs and run client-side validation without extra round-trips.\n  app.get('/admin/api/schema', (c) => {\n    const content_types = Object.values(registry.content_types).map((ct) => ({\n      name: ct.name,\n      label: ct.label,\n      only_one: ct.only_one,\n      ui: ct.ui,\n      system_fields: ct.system_fields,\n      fields: liveFields(ct.fields),\n    }))\n\n    const taxonomy_types = Object.values(registry.taxonomy_types).map((tt) => ({\n      name: tt.name,\n      label: tt.label,\n      system_fields: tt.system_fields,\n      fields: liveFields(tt.fields),\n    }))\n\n    const paragraph_types = Object.values(registry.paragraph_types).map((pt) => ({\n      name: pt.name,\n      label: pt.label,\n      system_fields: pt.system_fields,\n      fields: liveFields(pt.fields),\n    }))\n\n    const enum_types = Object.values(registry.enum_types).map((et) => ({\n      name: et.name,\n      label: et.label,\n      values: et.values,\n    }))\n\n    return c.json({\n      ok: true,\n      data: { content_types, taxonomy_types, paragraph_types, enum_types },\n    })\n  })\n\n  // Navigation meta-endpoints — list types with item counts for admin sidebar\n  app.get('/admin/api/content', async (c) => {\n    const data = await Promise.all(\n      Object.values(registry.content_types).map(async (ct) => {\n        const result = await db.execute(\n          sql`SELECT COUNT(*)::int AS count FROM ${sql.raw(`\"${ct.db.table_name}\"`)}`\n        )\n        const count = Number((result.rows[0] as { count: string | number }).count)\n        return { name: ct.name, label: ct.label, only_one: ct.only_one, count }\n      })\n    )\n    return c.json({ ok: true, data })\n  })\n\n  app.get('/admin/api/taxonomy', async (c) => {\n    const data = await Promise.all(\n      Object.values(registry.taxonomy_types).map(async (tt) => {\n        const result = await db.execute(\n          sql`SELECT COUNT(*)::int AS count FROM ${sql.raw(`\"${tt.db.table_name}\"`)}`\n        )\n        const count = Number((result.rows[0] as { count: string | number }).count)\n        return { name: tt.name, label: tt.label, count }\n      })\n    )\n    return c.json({ ok: true, data })\n  })\n}\n","import crypto from 'node:crypto'\nimport { sql, type SQL } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type {\n  ContentRepository,\n  PaginatedResult,\n  FindManyOptions,\n  FindAllOptions,\n  CreateInput,\n  UpdateInput,\n  FilterOperator,\n  FilterValue,\n} from '@bobbykim/manguito-cms-core'\nimport {\n  resolveRelationField,\n  resolveRelationBareIds,\n  type RelationDef,\n} from '../relations.js'\n\n// ─── Repository options ───────────────────────────────────────────────────────\n\nexport type ContentRepositoryOptions = {\n  relations?: Record<string, RelationDef>\n  /** When true, relation targets (reference/junction) are filtered to published\n   * rows only. Set by the public repos in app.ts; admin repos leave this false\n   * so drafts remain visible to admin. */\n  publishedRelations?: boolean\n  /** Storage columns valid for ORDER BY, supplied by the route once it has\n   * mapped a validated label to its column. Optional for backward\n   * compatibility: when absent, falls back to validating sort_by against\n   * SORTABLE_FIELDS (labels), the pre-versioning behavior. */\n  sortableColumns?: Set<string>\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\n\nconst SORTABLE_FIELDS = new Set(['title', 'created_at', 'updated_at'])\n\nfunction codeError(code: string, message: string): Error {\n  const err = new Error(message)\n  ;(err as Error & { code: string }).code = code\n  return err\n}\n\n// Only allow table/column identifiers that are developer-controlled.\n// Table names can include hyphens (e.g. content--blog_post).\nfunction quoteIdent(name: string): string {\n  if (!/^[a-z][a-z0-9_-]*$/.test(name)) {\n    throw new Error(`Unsafe SQL identifier: ${name}`)\n  }\n  return `\"${name.replace(/\"/g, '\"\"')}\"`\n}\n\n// User-supplied filter field names — strict, no hyphens.\nfunction quoteField(name: string): string {\n  if (!/^[a-z][a-z0-9_]*$/.test(name)) {\n    throw codeError('INVALID_FILTER_FIELD', `Invalid filter field name: ${name}`)\n  }\n  return `\"${name}\"`\n}\n\nfunction buildConditions(\n  published_only: boolean | undefined,\n  filters: Record<string, FilterValue> | undefined,\n  search: { term: string; columns: string[] } | undefined\n): SQL[] {\n  const conds: SQL[] = []\n\n  if (published_only) {\n    conds.push(sql`published = true`)\n  }\n\n  if (search && search.term.trim() !== '' && search.columns.length > 0) {\n    const pattern = `%${search.term.trim()}%`\n    const orConds = search.columns.map((col) => sql`${sql.raw(quoteField(col))} ILIKE ${pattern}`)\n    conds.push(sql`(${sql.join(orConds, sql` OR `)})`)\n  }\n\n  if (filters) {\n    for (const [field, value] of Object.entries(filters)) {\n      const col = sql.raw(quoteField(field))\n\n      if (Array.isArray(value)) {\n        if (value.length === 0) continue\n        const inList = sql.join(\n          value.map((v) => sql`${v}`),\n          sql`, `\n        )\n        conds.push(sql`${col} IN (${inList})`)\n      } else if (\n        typeof value === 'object' &&\n        value !== null\n      ) {\n        const op = value as FilterOperator\n        if (op.gt !== undefined) conds.push(sql`${col} > ${op.gt}`)\n        if (op.gte !== undefined) conds.push(sql`${col} >= ${op.gte}`)\n        if (op.lt !== undefined) conds.push(sql`${col} < ${op.lt}`)\n        if (op.lte !== undefined) conds.push(sql`${col} <= ${op.lte}`)\n      } else {\n        conds.push(sql`${col} = ${value}`)\n      }\n    }\n  }\n\n  return conds\n}\n\nfunction whereFragment(conds: SQL[]): SQL {\n  return conds.length > 0\n    ? sql` WHERE ${sql.join(conds, sql` AND `)}`\n    : sql``\n}\n\n// ─── Factory ──────────────────────────────────────────────────────────────────\n\nexport function createDrizzleContentRepository<T>(\n  db: DrizzlePostgresInstance,\n  tableName: string,\n  options: ContentRepositoryOptions = {}\n): ContentRepository<T> {\n  const { relations = {}, publishedRelations = false, sortableColumns } = options\n\n  function tableRaw(): SQL {\n    return sql.raw(quoteIdent(tableName))\n  }\n\n  async function resolveRows(\n    rows: Record<string, unknown>[],\n    include: string[],\n    cache: Map<string, unknown>\n  ): Promise<Record<string, unknown>[]> {\n    if (rows.length === 0) return rows\n\n    // Validate include fields\n    for (const fieldName of include) {\n      if (!relations[fieldName]) {\n        throw codeError('INVALID_INCLUDE_FIELD', `'${fieldName}' is not a valid relation field`)\n      }\n    }\n\n    // Always resolve media fields; for all other relations not explicitly\n    // included, populate bare IDs so the field is never silently dropped.\n    for (const [fieldName, rel] of Object.entries(relations)) {\n      if (rel.type === 'media') {\n        await resolveRelationField(db, rows, fieldName, rel, cache, publishedRelations)\n      } else if (!include.includes(fieldName)) {\n        await resolveRelationBareIds(db, rows, fieldName, rel)\n      }\n    }\n\n    // Resolve explicitly included non-media fields\n    for (const fieldName of include) {\n      const rel = relations[fieldName]!\n      if (rel.type !== 'media') {\n        await resolveRelationField(db, rows, fieldName, rel, cache, publishedRelations)\n      }\n    }\n\n    return rows\n  }\n\n  return {\n    async findMany(opts: FindManyOptions): Promise<PaginatedResult<T>> {\n      const {\n        page = 1,\n        per_page = 10,\n        include = [],\n        published_only,\n        filters,\n        sort_by = 'created_at',\n        sort_order = 'asc',\n        search,\n      } = opts\n\n      // Sorting is validated against COLUMNS when the caller supplies the set\n      // (the route has already validated the label and mapped it). Without one,\n      // fall back to the label allowlist — the pre-versioning behavior.\n      const allowed = sortableColumns ?? SORTABLE_FIELDS\n      if (!allowed.has(sort_by as string)) {\n        // Deliberately does NOT enumerate `allowed`: when the caller supplied\n        // `sortableColumns` that set holds STORAGE COLUMNS, which are private\n        // to the database and must never reach a client envelope. The REST\n        // routes validate the label before calling in and emit their own\n        // message naming the valid LABELS (routes/content.ts,\n        // routes/admin/content.ts); this guard is the backstop behind them.\n        throw codeError('INVALID_SORT_FIELD', `'${sort_by}' is not sortable.`)\n      }\n\n      const offset = (page - 1) * per_page\n      const conds = buildConditions(published_only, filters, search)\n      const where = whereFragment(conds)\n      const sortCol = sql.raw(quoteIdent(sort_by))\n      const sortDir = sql.raw(sort_order === 'desc' ? 'DESC' : 'ASC')\n\n      const countResult = await db.execute(\n        sql`SELECT COUNT(*) AS total FROM ${tableRaw()}${where}`\n      )\n      const total = Number((countResult.rows[0] as Record<string, unknown>)?.['total'] ?? 0)\n\n      const dataResult = await db.execute(\n        sql`SELECT * FROM ${tableRaw()}${where} ORDER BY ${sortCol} ${sortDir} LIMIT ${per_page} OFFSET ${offset}`\n      )\n\n      const rows = dataResult.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n\n      const total_pages = Math.ceil(total / per_page)\n      return {\n        ok: true,\n        data: rows as T[],\n        meta: {\n          total,\n          page,\n          per_page,\n          total_pages,\n          has_next: page < total_pages,\n          has_prev: page > 1,\n        },\n      }\n    },\n\n    async findOne(id: string, include: string[] = []): Promise<T | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()} WHERE id = ${id} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows[0] as T\n    },\n\n    async findBySlug(slug: string, include: string[] = []): Promise<T | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()} WHERE slug = ${slug} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows[0] as T\n    },\n\n    async create(data: CreateInput<T>): Promise<T> {\n      const record: Record<string, unknown> = {\n        ...(data as Record<string, unknown>),\n        id: crypto.randomUUID(),\n        created_at: new Date(),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([, v]) => v !== undefined)\n      const colsSql = sql.join(entries.map(([k]) => sql.raw(quoteIdent(k))), sql`, `)\n      const valsSql = sql.join(entries.map(([, v]) => sql`${v}`), sql`, `)\n\n      const result = await db.execute(\n        sql`INSERT INTO ${tableRaw()} (${colsSql}) VALUES (${valsSql}) RETURNING *`\n      )\n      return result.rows[0] as T\n    },\n\n    async update(id: string, data: UpdateInput<T>): Promise<T | null> {\n      const record: Record<string, unknown> = {\n        ...(data as Record<string, unknown>),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([k, v]) => k !== 'id' && v !== undefined)\n      if (entries.length === 0) {\n        return this.findOne(id)\n      }\n\n      const setClauses = sql.join(\n        entries.map(([k, v]) => sql`${sql.raw(quoteIdent(k))} = ${v}`),\n        sql`, `\n      )\n\n      const result = await db.execute(\n        sql`UPDATE ${tableRaw()} SET ${setClauses} WHERE id = ${id} RETURNING *`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as T\n    },\n\n    async delete(id: string): Promise<void> {\n      await db.execute(sql`DELETE FROM ${tableRaw()} WHERE id = ${id}`)\n    },\n\n    async findAll(opts: FindAllOptions = {}): Promise<T[]> {\n      const { include = [], published_only } = opts\n      const conds = buildConditions(published_only, undefined, undefined)\n      const where = whereFragment(conds)\n\n      const result = await db.execute(\n        sql`SELECT * FROM ${tableRaw()}${where} ORDER BY created_at ASC`\n      )\n\n      const rows = result.rows as Record<string, unknown>[]\n      const cache = new Map<string, unknown>()\n      await resolveRows(rows, include, cache)\n      return rows as T[]\n    },\n  }\n}\n","import crypto from 'node:crypto'\nimport { sql } from 'drizzle-orm'\nimport type { DrizzlePostgresInstance } from '@bobbykim/manguito-cms-db'\nimport type {\n  MediaRepository,\n  MediaItem,\n  CreateMediaInput,\n  MediaFindManyOptions,\n  PaginatedResult,\n} from '@bobbykim/manguito-cms-core'\n\nexport function createMediaRepository(db: DrizzlePostgresInstance): MediaRepository {\n  const TABLE = sql.raw('\"media\"')\n\n  return {\n    async findMany(opts: MediaFindManyOptions = {}): Promise<PaginatedResult<MediaItem>> {\n      const { page = 1, per_page = 10, type, orphaned } = opts\n      const offset = (page - 1) * per_page\n\n      const conds = []\n      if (type) conds.push(sql`type = ${type}`)\n      if (orphaned) conds.push(sql`reference_count = 0`)\n\n      const where =\n        conds.length > 0 ? sql` WHERE ${sql.join(conds, sql` AND `)}` : sql``\n\n      const countResult = await db.execute(sql`SELECT COUNT(*) AS total FROM ${TABLE}${where}`)\n      const total = Number(\n        (countResult.rows[0] as Record<string, unknown>)?.['total'] ?? 0\n      )\n\n      const dataResult = await db.execute(\n        sql`SELECT * FROM ${TABLE}${where} ORDER BY created_at DESC LIMIT ${per_page} OFFSET ${offset}`\n      )\n\n      const total_pages = Math.ceil(total / per_page)\n      return {\n        ok: true,\n        data: dataResult.rows as MediaItem[],\n        meta: {\n          total,\n          page,\n          per_page,\n          total_pages,\n          has_next: page < total_pages,\n          has_prev: page > 1,\n        },\n      }\n    },\n\n    async findOne(id: string): Promise<MediaItem | null> {\n      const result = await db.execute(\n        sql`SELECT * FROM ${TABLE} WHERE id = ${id} LIMIT 1`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as MediaItem\n    },\n\n    async create(data: CreateMediaInput): Promise<MediaItem> {\n      const record: Record<string, unknown> = {\n        ...data,\n        id: crypto.randomUUID(),\n        reference_count: 0,\n        created_at: new Date(),\n        updated_at: new Date(),\n      }\n      const entries = Object.entries(record).filter(([, v]) => v !== undefined)\n      const colsSql = sql.join(entries.map(([k]) => sql.raw(`\"${k}\"`)), sql`, `)\n      const valsSql = sql.join(entries.map(([, v]) => sql`${v}`), sql`, `)\n\n      const result = await db.execute(\n        sql`INSERT INTO ${TABLE} (${colsSql}) VALUES (${valsSql}) RETURNING *`\n      )\n      return result.rows[0] as MediaItem\n    },\n\n    async update(id: string, data: Partial<MediaItem>): Promise<MediaItem | null> {\n      const record: Record<string, unknown> = { ...data, updated_at: new Date() }\n      const entries = Object.entries(record).filter(\n        ([k, v]) => k !== 'id' && v !== undefined\n      )\n      if (entries.length === 0) return this.findOne(id)\n\n      const setClauses = sql.join(\n        entries.map(([k, v]) => sql`${sql.raw(`\"${k}\"`)} = ${v}`),\n        sql`, `\n      )\n\n      const result = await db.execute(\n        sql`UPDATE ${TABLE} SET ${setClauses} WHERE id = ${id} RETURNING *`\n      )\n      if (result.rows.length === 0) return null\n      return result.rows[0] as MediaItem\n    },\n\n    async delete(id: string): Promise<void> {\n      await db.execute(sql`DELETE FROM ${TABLE} WHERE id = ${id}`)\n    },\n\n    async incrementReferenceCount(ids: string[]): Promise<void> {\n      if (ids.length === 0) return\n      const inList = sql.join(ids.map((id) => sql`${id}`), sql`, `)\n      await db.execute(\n        sql`UPDATE ${TABLE} SET reference_count = reference_count + 1, updated_at = NOW() WHERE id IN (${inList})`\n      )\n    },\n\n    async decrementReferenceCount(ids: string[]): Promise<void> {\n      if (ids.length === 0) return\n      const inList = sql.join(ids.map((id) => sql`${id}`), sql`, `)\n      await db.execute(\n        sql`UPDATE ${TABLE} SET reference_count = GREATEST(reference_count - 1, 0), updated_at = NOW() WHERE id IN (${inList})`\n      )\n    },\n  }\n}\n","import type { ServerAdapter, CorsConfig } from '@bobbykim/manguito-cms-core'\n\nexport type NodeServerOptions = {\n  port?: number\n  base_url?: string\n  cors?: Partial<CorsConfig>\n}\n\nexport function createServer(options: NodeServerOptions = {}): ServerAdapter {\n  const port = options.port ?? Number(process.env['PORT'] ?? 3000)\n  const _base_url = options.base_url ?? `http://localhost:${port}`\n\n  const cors: CorsConfig = {\n    origin: options.cors?.origin ?? (process.env['ALLOWED_ORIGIN'] ?? '*'),\n    methods: options.cors?.methods ?? [\n      'GET',\n      'POST',\n      'PUT',\n      'PATCH',\n      'DELETE',\n    ],\n    credentials: options.cors?.credentials ?? true,\n  }\n\n  return {\n    type: 'node',\n    cors,\n    getEntryPoint(): string {\n      return 'node'\n    },\n  }\n}\n","import type {\n  APIAdapter,\n  ResolvedRateLimitConfig,\n  GraphQLModuleConfig,\n  ResolvedGraphQLConfig,\n} from '@bobbykim/manguito-cms-core'\nimport { normalizePrefix } from './paths.js'\n\nexport { createCmsApp } from './app.js'\nexport type { CreateCmsAppOptions } from './app.js'\n\nexport { createServer } from './server/node.js'\nexport type { NodeServerOptions } from './server/node.js'\n\nexport { createProgrammaticResolver, validateResolverBindings, resolverKey } from './programmatic/resolve.js'\nexport type { ResolverMap, ProgrammaticResolver } from './programmatic/resolve.js'\n\n// ─── User-facing config factory ───────────────────────────────────────────────\n\nexport type APIAdapterOptions = {\n  prefix?: string\n  media?: {\n    max_file_size?: number\n  }\n  rateLimit?: ResolvedRateLimitConfig\n  graphql?: GraphQLModuleConfig\n}\n\nfunction resolveGraphQL(cfg: GraphQLModuleConfig): ResolvedGraphQLConfig {\n  const devDefault = process.env['NODE_ENV'] !== 'production'\n  return {\n    enabled: cfg.enabled ?? false,\n    maxDepth: cfg.maxDepth ?? 8,\n    maxComplexity: cfg.maxComplexity ?? 1000,\n    graphiql: cfg.graphiql ?? devDefault,\n    introspection: cfg.introspection ?? cfg.graphiql ?? devDefault,\n  }\n}\n\nexport function createAPIAdapter(options: APIAdapterOptions = {}): APIAdapter {\n  const prefix = normalizePrefix(options.prefix)\n  const media = options.media?.max_file_size !== undefined\n    ? { max_file_size: options.media.max_file_size }\n    : undefined\n\n  return {\n    prefix,\n    ...(media !== undefined && { media }),\n    ...(options.rateLimit !== undefined && { rateLimit: options.rateLimit }),\n    ...(options.graphql !== undefined && { graphql: resolveGraphQL(options.graphql) }),\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAMO,SAAS,gBAAgB,QAAoC;AAClE,MAAI,WAAW,OAAW,QAAO;AACjC,QAAM,YAAY,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AAC9D,QAAM,UAAU,UAAU,QAAQ,QAAQ,EAAE;AAC5C,SAAO,YAAY,KAAK,SAAS;AACnC;AAYO,SAAS,kBAAkB,QAA6B;AAC7D,SAAO;AAAA,IACL,YAAY,CAAC,aAAa,GAAG,MAAM,IAAI,QAAQ;AAAA,IAC/C,MAAM,CAAC,aAAa,GAAG,MAAM,IAAI,QAAQ;AAAA,IACzC,oBAAoB,CAAC,aAAa,GAAG,MAAM,aAAa,QAAQ;AAAA,IAChE,cAAc,CAAC,aAAa,GAAG,MAAM,aAAa,QAAQ;AAAA,IAC1D,iBAAiB,MAAM,GAAG,MAAM;AAAA,IAChC,WAAW,MAAM,GAAG,MAAM;AAAA,IAC1B,SAAS,MAAM,GAAG,MAAM;AAAA,EAC1B;AACF;;;ACjCA,SAAS,YAAY;AAErB,SAAS,OAAAA,YAAW;;;ACCb,SAAS,qBAAqB,YAA2C;AAC9E,QAAM,YAAY,MAAM,QAAQ,WAAW,MAAM,IAC7C,WAAW,SACX,CAAC,WAAW,MAAM;AACtB,QAAM,WAAW,UAAU,SAAS,GAAG;AACvC,QAAM,UAAU,WAAW,SAAS,KAAK,GAAG,KAAK;AAEjD,SAAO,eAAe,eAAe,GAAG,MAAM;AAC5C,QAAI,WAAW,YAAY,OAAO;AAChC,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,gBAAgB,EAAE,IAAI,OAAO,QAAQ;AAE3C,QAAI,UAAU;AAEZ,QAAE,IAAI,QAAQ,IAAI,+BAA+B,GAAG;AAAA,IACtD,WAAW,iBAAiB,UAAU,SAAS,aAAa,GAAG;AAC7D,QAAE,IAAI,QAAQ,IAAI,+BAA+B,aAAa;AAC9D,QAAE,IAAI,QAAQ,IAAI,QAAQ,QAAQ;AAClC,UAAI,WAAW,gBAAgB,MAAM;AACnC,UAAE,IAAI,QAAQ,IAAI,oCAAoC,MAAM;AAAA,MAC9D;AAAA,IACF;AAGA,MAAE,IAAI,QAAQ,IAAI,gCAAgC,OAAO;AACzD,MAAE,IAAI,QAAQ,IAAI,gCAAgC,6BAA6B;AAE/E,QAAI,EAAE,IAAI,WAAW,WAAW;AAC9B,aAAO,EAAE,YAAY,MAAM,GAAG;AAAA,IAChC;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;ACvBA,IAAM,eAAe;AAed,SAAS,gCACd,UAAkC,CAAC,GAChB;AACnB,QAAM,aAAa,CAAC,UAAU,GAAI,QAAQ,cAAc,CAAC,CAAE,EAAE,KAAK,GAAG;AAUrE,WAAS,SAAS,OAAyB;AACzC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,QAAQ;AAAA,MAC3B,cAAc,MAAM,SAAS;AAAA,MAC7B;AAAA,MACA,eAAe,MAAM,UAAU;AAAA,MAC/B,GAAI,MAAM,YAAY,CAAC,cAAc,MAAM,SAAS,EAAE,IAAI,CAAC;AAAA,MAC3D;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AAEA,QAAM,MAAM,SAAS;AAAA,IACnB,WAAW;AAAA,IACX,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAMD,QAAM,cAAc,SAAS;AAAA,IAC3B,WAAW,0BAA0B,YAAY;AAAA,IACjD,UAAU,0BAA0B,YAAY;AAAA,IAChD,YAAY,GAAG,UAAU,IAAI,YAAY;AAAA,IACzC,WAAW;AAAA,EACb,CAAC;AACD,QAAM,eAAe,QAAQ;AAE7B,SAAO,eAAe,gBAAgB,GAAG,MAAM;AAC7C,UAAM,KAAK;AACX,MAAE,IAAI,QAAQ,IAAI,0BAA0B,SAAS;AACrD,MAAE,IAAI,QAAQ,IAAI,mBAAmB,MAAM;AAC3C,MAAE,IAAI,QAAQ,IAAI,mBAAmB,aAAa;AAClD,UAAM,aAAa,iBAAiB,UAAa,EAAE,IAAI,SAAS;AAChE,MAAE,IAAI,QAAQ,IAAI,2BAA2B,aAAa,cAAc,GAAG;AAAA,EAC7E;AACF;;;ACjFA,IAAM,mBAAuD;AAAA,EAC3D,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,0BAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,cAAc;AAAA,EACd,eAAe;AAAA,EACf,eAAe;AAAA,EACf,yBAAyB;AAAA,EACzB,wBAAwB;AAAA,EACxB,sBAAsB;AAAA,EACtB,yBAAyB;AAAA,EACzB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,uBAAuB;AAAA,EACvB,uBAAuB;AAAA,EACvB,eAAe;AAAA,EACf,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,cAAc;AAAA,EACd,gBAAgB;AAClB;AAIO,IAAM,eAA6B,CAAC,KAAK,MAAM;AACpD,UAAQ,MAAM,IAAI,SAAS,IAAI,OAAO;AAEtC,QAAM,SAAS;AACf,QAAM,OAAkB,OAAO,QAAQ;AACvC,QAAM,SAAS,iBAAiB,IAAI,KAAK;AAEzC,SAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,SAAS,IAAI,QAAQ,EAAE,GAAG,MAAsC;AAC5G;;;ACvCA,SAAS,iBAAiB;AAC1B,SAAS,WAAW;;;ACDpB,SAAS,MAAM,UAAU,iBAAiB;AAC1C,SAAS,WAAW,oBAAoB;AAOjC,IAAM,iBAAiB,IAAI,KAAK;AAChC,IAAM,oBAAoB,IAAI,KAAK,KAAK;AACxC,IAAM,8BAA8B,KAAK;AAIhD,eAAsB,UACpB,SACA,kBACiB;AACjB,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,QAAM,cAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;AAAA,EAC9C;AACA,SAAO,KAAK,aAAwC,MAAM;AAC5D;AAEA,eAAsB,YAAY,OAAoC;AACpE,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,MAAI;AACJ,MAAI;AACF,UAAO,MAAM,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC/C,QAAQ;AACN,UAAM,OAAO,OAAO,IAAI,MAAM,4BAA4B,GAAG;AAAA,MAC3D,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,QAAM,UAAU;AAChB,MAAI,QAAQ,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG;AACtD,UAAM,OAAO,OAAO,IAAI,MAAM,mBAAmB,GAAG;AAAA,MAClD,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAIO,SAAS,cACd,GACA,MACA,OACA,SACM;AACN,YAAU,GAAG,MAAM,OAAO;AAAA,IACxB,GAAG;AAAA,IACH,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,SAAS,gBAAgB,GAAY,MAAc,MAAqB;AAC7E,eAAa,GAAG,MAAM,SAAS,SAAY,EAAE,KAAK,IAAI,MAAS;AACjE;;;ADjDO,SAAS,qBAAqB,IAAgD;AACnF,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,QAAQ,UAAU,GAAG,YAAY;AACvC,QAAI,CAAC,OAAO;AACV,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,0BAA0B,EAAE;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,YAAY,KAAK;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA0B;AACxC,UAAI,SAAS,iBAAiB;AAC5B,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,oBAAoB,EAAE;AAAA,UAC5E;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB,uEAAuE,QAAQ,OAAO;AAAA,IACxF;AACA,UAAM,MAAM,OAAO,KAAK,CAAC;AAEzB,QAAI,CAAC,KAAK;AACR,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,kBAAkB,IAAI,eAAe;AAC/C,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,6BAA6B,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,MAAE,IAAI,QAAQ;AAAA,MACZ,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,sBAAsB,IAAI;AAAA,IAC5B,CAAC;AAED,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAI,QAAQ,aAAa,MAAM,6BAA6B;AAC1D,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,UACE,SAAS,QAAQ;AAAA,UACjB,MAAM,QAAQ;AAAA,UACd,eAAe,QAAQ;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AACA,oBAAc,GAAG,cAAc,UAAU,CAAC,CAAC;AAAA,IAC7C;AAEA,UAAM,KAAK;AAAA,EACb;AACF;;;AElFO,IAAM,0BAA6C,OAAO,GAAG,SAAS;AAC3E,QAAM,OAAO,EAAE,IAAI,MAAM;AAEzB,MACE,MAAM,yBAAyB,QAC/B,EAAE,IAAI,SAAS,oCACf;AACA,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK;AACb;;;AChBO,SAAS,2BAA2B,UAAyB;AAClE,SAAO,SAAS,kBAAkB,YAA2C;AAC3E,WAAO,OAAO,GAAG,SAAS;AACxB,YAAM,OAAO,EAAE,IAAI,MAAM;AACzB,YAAM,OAAO,OAAO,SAAS,KAAK,IAAI,IAAI;AAE1C,UAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,SAAS,UAAU,GAAG;AACnD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,2BAA2B,SAAS,0BAA0B;AAAA,UAC/E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACF;;;ACpBO,SAAS,0BACd,UACA,aACA;AACA,SAAO,SAAS,mBAAsC;AACpD,WAAO,OAAO,GAAG,SAAS;AACxB,YAAM,OAAO,EAAE,IAAI,MAAM;AACzB,YAAM,aAAa,OAAO,SAAS,KAAK,IAAI,IAAI;AAEhD,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,yBAAyB;AAAA,UAC7E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,EAAE,IAAI;AACrB,YAAM,WAAW,EAAE,IAAI,MAAM,IAAI;AAEjC,UAAI,iBAAgC;AAEpC,UAAI,WAAW,UAAU,CAAC,UAAU;AAElC,YAAI,OAA2B,CAAC;AAChC,YAAI;AACF,iBAAO,MAAM,EAAE,IAAI,KAAyB;AAAA,QAC9C,QAAQ;AAAA,QAER;AACA,yBAAiB,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AAC7D,YAAI,CAAC,gBAAgB;AACnB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC;AAAA,YACnF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF,WAAW,WAAW,WAAW,UAAU;AAEzC,YAAI;AACJ,YAAI;AACF,gBAAM,OAAO,MAAM,EAAE,IAAI,KAAyB;AAClD,cAAI,OAAO,KAAK,SAAS,SAAU,YAAW,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,yBAAiB,YAAa,MAAM,YAAY,QAAQ;AAAA,MAC1D,WAAW,UAAU;AAEnB,yBAAiB,MAAM,YAAY,QAAQ;AAAA,MAC7C;AAGA,UAAI,mBAAmB,MAAM;AAC3B,eAAO,KAAK;AAAA,MACd;AAEA,YAAM,aAAa,SAAS,cAAc;AAC1C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,SAAS,cAAc,iBAAiB;AAAA,UAClF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI,WAAW,mBAAmB,WAAW,iBAAiB;AAC5D,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,yBAAyB;AAAA,UAC7E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACF;;;ACtFA,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAQpB,SAAS,0BAA0B,SAA8C;AACtF,QAAM,EAAE,UAAU,UAAU,UAAU,IAAI;AAC1C,QAAM,aAAa,oBAAI,IAAsB;AAC7C,QAAM,iBAA2B,CAAC;AAElC,SAAO,eAAe,oBAAoB,GAAG,MAAM;AACjD,UAAM,YAAY,EAAE,IAAI,IAAI,QAAQ,IAAI,QAAQ,GAC5C,MAAM,GAAG,EACV,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,KAAK,CAAC,MAAM,EAAE,WAAW,aAAa,CAAC;AAE1C,QAAI,WAAW;AACb,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,MAAM;AAGrB,QAAI,KAAK;AACT,WAAO,KAAK,eAAe,UAAU,eAAe,EAAE,IAAK,OAAQ;AACnE,mBAAe,OAAO,GAAG,EAAE;AAG3B,UAAM,YAAY,EAAE,IAAI,OAAO,iBAAiB;AAChD,UAAM,KAAK,YAAY,UAAU,MAAM,GAAG,EAAE,CAAC,EAAG,KAAK,IAAK,EAAE,KAAK,UAAU,QAAQ,iBAAiB;AAGpG,UAAM,UAAU,WAAW,IAAI,EAAE,KAAK,CAAC;AACvC,QAAI,KAAK;AACT,WAAO,KAAK,QAAQ,UAAU,QAAQ,EAAE,IAAK,OAAQ;AACrD,YAAQ,OAAO,GAAG,EAAE;AACpB,eAAW,IAAI,IAAI,OAAO;AAE1B,UAAM,uBACJ,eAAe,SAAS,IACpB,KAAK,MAAM,eAAe,CAAC,IAAK,WAAW,OAAO,GAAI,IACtD;AACN,UAAM,mBACJ,QAAQ,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAK,WAAW,OAAO,GAAI,IAAI;AAE1E,QAAI,eAAe,UAAU,WAAW;AACtC,YAAM,aAAa,KAAK,IAAI,sBAAsB,CAAC;AACnD,YAAM,QAAQ,KAAK,OAAO,MAAM,aAAa,OAAQ,GAAI;AACzD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC,UAAU,YAAY,EAAE;AAAA,QACtH;AAAA,QACA;AAAA,UACE,eAAe,OAAO,UAAU;AAAA,UAChC,qBAAqB,OAAO,SAAS;AAAA,UACrC,yBAAyB;AAAA,UACzB,qBAAqB,OAAO,KAAK;AAAA,QACnC;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU,UAAU;AAC9B,YAAM,aAAa,KAAK,IAAI,kBAAkB,CAAC;AAC/C,YAAM,QAAQ,KAAK,OAAO,MAAM,aAAa,OAAQ,GAAI;AACzD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,yCAAyC,UAAU,YAAY,EAAE;AAAA,QACtH;AAAA,QACA;AAAA,UACE,eAAe,OAAO,UAAU;AAAA,UAChC,qBAAqB,OAAO,QAAQ;AAAA,UACpC,yBAAyB;AAAA,UACzB,qBAAqB,OAAO,KAAK;AAAA,QACnC;AAAA,MACF;AAAA,IACF;AAEA,mBAAe,KAAK,GAAG;AACvB,YAAQ,KAAK,GAAG;AAEhB,WAAO,KAAK;AAAA,EACd;AACF;AAQO,SAAS,qBACd,WAC+B;AAC/B,QAAM,UAAU,WAAW;AAC3B,MAAI,YAAY,KAAK;AACnB,WAAO;AAAA,EACT;AACA,SAAO,0BAA0B;AAAA,IAC/B,UAAU,SAAS,YAAY;AAAA,IAC/B,UAAU,SAAS,YAAY;AAAA,IAC/B,WAAW,SAAS,aAAa;AAAA,EACnC,CAAC;AACH;;;AC3GA,IAAM,eAAe,CAAC,SAAS,WAAW,UAAU,UAAU,QAAQ;AAEtE,SAAS,cAAc,OAA2B;AAChD,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAChD,aAAW,cAAc,cAAc;AACrC,QAAI,CAAC,QAAQ,IAAI,UAAU,GAAG;AAC5B,YAAM,IAAI;AAAA,QACR,qEAAgE,UAAU;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,oBAAI,IAAoB;AAC3C,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,WAAW,IAAI,KAAK,eAAe;AACpD,QAAI,aAAa,QAAW;AAC1B,YAAM,IAAI;AAAA,QACR,0EAAqE,KAAK,eAAe,cAAc,QAAQ,UAAU,KAAK,IAAI;AAAA,MACpI;AAAA,IACF;AACA,eAAW,IAAI,KAAK,iBAAiB,KAAK,IAAI;AAAA,EAChD;AAEA,QAAM,YAAY,oBAAI,IAAY;AAClC,aAAW,QAAQ,OAAO;AACxB,QAAI,UAAU,IAAI,KAAK,IAAI,GAAG;AAC5B,YAAM,IAAI;AAAA,QACR,qEAAgE,KAAK,IAAI;AAAA,MAC3E;AAAA,IACF;AACA,cAAU,IAAI,KAAK,IAAI;AAAA,EACzB;AACF;AAEO,SAAS,mBAAmB,OAAoC;AACrE,gBAAc,KAAK;AACnB,SAAO,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD;;;ACrCA,IAAM,qBAAqB;AAC3B,IAAM,mBAAmB;AAElB,SAAS,YAAY,QAAgB,OAAuB;AACjE,SAAO,GAAG,MAAM,KAAK,KAAK;AAC5B;AAOO,SAAS,yBACd,UACA,WACM;AACN,QAAM,WAAW,oBAAI,IAAY;AACjC,QAAM,UAAyD;AAAA,IAC7D,GAAI,OAAO,OAAO,SAAS,aAAa;AAAA,IACxC,GAAI,OAAO,OAAO,SAAS,cAAc;AAAA,EAC3C;AACA,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,UAAI,MAAM,eAAe,gBAAgB;AACvC,iBAAS,IAAI,YAAY,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,SAAU,KAAI,CAAC,UAAU,IAAI,GAAG,EAAG,SAAQ,KAAK,GAAG;AAErE,QAAM,UAAoB,CAAC;AAC3B,aAAW,OAAO,UAAU,KAAK,EAAG,KAAI,CAAC,SAAS,IAAI,GAAG,EAAG,SAAQ,KAAK,GAAG;AAE5E,MAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,EAAG;AAElD,QAAM,QAAkB,CAAC,0DAAqD;AAC9E,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,6DAA6D;AAC5E,eAAW,KAAK,QAAS,OAAM,KAAK,SAAS,CAAC,iDAAiD;AAAA,EACjG;AACA,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,IAAI,8DAA8D;AAC7E,eAAW,KAAK,QAAS,OAAM,KAAK,SAAS,CAAC,EAAE;AAAA,EAClD;AACA,QAAM,KAAK,IAAI,UAAU;AACzB,QAAM,IAAI,MAAM,MAAM,KAAK,IAAI,CAAC;AAClC;AAIA,SAAS,aAAa,KAA+C;AACnE,SAAO;AAAA,IACL,KAAK,CAAC,SAAS,IAAI,IAAI;AAAA,IACvB,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,YAAe,GAAe,IAAwB;AACnE,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,GAAG,WAAW;AAChD,YAAQ,WAAW,MAAM,OAAO,IAAI,MAAM,kBAAkB,CAAC,GAAG,EAAE;AAAA,EACpE,CAAC;AACD,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,GAAG,OAAO,CAAC;AAAA,EACxC,UAAE;AACA,iBAAa,KAAM;AAAA,EACrB;AACF;AAGA,eAAe,OACb,KACA,KACA,SAC8C;AAC9C,QAAM,WAAW,IAAI,YAAY;AACjC,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,QAAQ,QAAQ,IAAI,QAAQ,aAAa,GAAG,CAAC,CAAC;AAAA,MAC9C,IAAI,WAAW;AAAA,IACjB;AACA,WAAO,EAAE,OAAO,WAAW,SAAY,OAAO,QAAQ,QAAQ,MAAM;AAAA,EACtE,SAAS,KAAK;AACZ;AAAA,MACE,6BAAwB,YAAY,IAAI,QAAQ,IAAI,KAAK,CAAC,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACxH;AACA,WAAO,EAAE,OAAO,UAAU,QAAQ,KAAK;AAAA,EACzC;AACF;AAGA,eAAe,QAAW,OAAY,OAAe,IAA+C;AAClG,MAAI,IAAI;AACR,iBAAe,SAAwB;AACrC,WAAO,IAAI,MAAM,QAAQ;AACvB,YAAM,MAAM;AACZ,YAAM,GAAG,MAAM,GAAG,CAAE;AAAA,IACtB;AAAA,EACF;AACA,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,OAAO,MAAM,MAAM,EAAE,GAAG,MAAM;AAC5E,QAAM,QAAQ,IAAI,OAAO;AAC3B;AAEO,SAAS,2BACd,WACA,SACA;AACA,QAAM,UACJ,SAAS,YACR,CAAC,YAAoB;AACpB,YAAQ,OAAO,MAAM,UAAU,IAAI;AAAA,EACrC;AAGF,QAAM,WAAW,oBAAI,IAA2C;AAChE,aAAW,OAAO,UAAU,OAAO,GAAG;AACpC,UAAM,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,CAAC;AACzC,QAAI,KAAK,GAAG;AACZ,aAAS,IAAI,IAAI,QAAQ,GAAG;AAAA,EAC9B;AAGA,QAAM,QAAQ,oBAAI,IAAiD;AAEnE,iBAAe,aACb,KACA,KACkB;AAClB,UAAM,SAAS,IAAI,IAAI,MAAM,SAAY,OAAO,IAAI,IAAI,CAAC,IAAI;AAC7D,QAAI,IAAI,SAAS,QAAQ;AACvB,YAAM,MAAM,GAAG,YAAY,IAAI,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM;AAC5D,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,MAAM,MAAM,IAAI,GAAG;AACzB,UAAI,OAAO,IAAI,UAAU,IAAK,QAAO,IAAI;AACzC,YAAM,EAAE,OAAAC,QAAO,OAAO,IAAI,MAAM,OAAO,KAAK,KAAK,OAAO;AACxD,UAAI,CAAC,OAAQ,OAAM,IAAI,KAAK,EAAE,OAAAA,QAAO,SAAS,MAAM,IAAI,MAAM,MAAM,IAAK,CAAC;AAC1E,aAAOA;AAAA,IACT;AACA,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,KAAK,KAAK,OAAO;AAChD,WAAO;AAAA,EACT;AAEA,iBAAe,YACb,QACA,KACkC;AAClC,UAAM,OAAO,SAAS,IAAI,MAAM;AAChC,QAAI,CAAC,QAAQ,KAAK,WAAW,EAAG,QAAO,EAAE,GAAG,IAAI;AAChD,UAAM,MAA+B,EAAE,GAAG,IAAI;AAC9C,UAAM,QAAQ;AAAA,MACZ,KAAK,IAAI,OAAO,QAAQ;AACtB,YAAI,IAAI,KAAK,IAAI,MAAM,aAAa,KAAK,GAAG;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,YACb,QACA,MACoC;AACpC,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AAC1E,QAAI,KAAK,WAAW,EAAG,QAAO,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AACxD,UAAM,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AACtC,UAAM,QAAuE,CAAC;AAC9E,aAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,iBAAW,OAAO,KAAM,OAAM,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;AAAA,IACzD;AACA,UAAM,QAAQ,OAAO,kBAAkB,OAAO,EAAE,UAAU,IAAI,MAAM;AAClE,UAAI,QAAQ,EAAG,IAAI,KAAK,IAAI,MAAM,aAAa,KAAK,KAAK,QAAQ,CAAE;AAAA,IACrE,CAAC;AACD,WAAO;AAAA,EACT;AAEA,WAAS,UAAU,QAAyB;AAC1C,WAAO,SAAS,IAAI,MAAM;AAAA,EAC5B;AAEA,SAAO,EAAE,aAAa,aAAa,UAAU;AAC/C;;;ACzKO,SAAS,WAAW,GAA0C;AACnE,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,aAAa;AACpF;AAaA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,SAAS,SAAS,MAAM,CAAC;AAE5D,SAAS,cAAc,QAAiE;AACtF,QAAM,MAAgD,CAAC;AACvD,aAAW,KAAK,QAAQ;AACtB,QAAI,kBAAkB,IAAI,EAAE,UAAU,EAAG;AACzC,QAAI,EAAE,eAAe,eAAe,EAAE,eAAe,YAAa;AAElE,UAAM,MAAO,EAAE,aAAkC;AACjD,QAAI,CAAC,IAAK;AACV,QAAI,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,IAAI,CAAC;AAAA,EACzC;AACA,SAAO;AACT;AAOO,SAAS,gBACd,UACA,cACY;AACZ,QAAM,aAAyB,CAAC;AAChC,QAAM,UAA4D;AAAA,IAChE,SAAS;AAAA,IACT,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAEA,aAAW,UAAU,SAAS;AAC5B,eAAW,CAAC,UAAU,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG;AACrD,YAAM,MAAM,aAAa,QAAQ;AACjC,UAAI,CAAC,IAAK;AACV,iBAAW,QAAQ,IAAI,EAAE,KAAK,QAAQ,cAAc,KAAK,MAAM,EAAE;AAAA,IACnE;AAAA,EACF;AAEA,SAAO;AACT;AAOO,SAAS,WACd,KACA,UACA,YACyB;AACzB,QAAM,IAAI,WAAW,QAAQ;AAC7B,MAAI,CAAC,EAAG,QAAO;AAIf,QAAM,MAAM,EAAE,IAAI,SAAS,GAAG;AAE9B,aAAW,EAAE,OAAO,OAAO,KAAK,EAAE,QAAQ;AACxC,UAAM,IAAI,IAAI,KAAK;AACnB,QAAI,MAAM,QAAQ,MAAM,OAAW;AACnC,QAAI,MAAM,QAAQ,CAAC,GAAG;AACpB,UAAI,KAAK,IAAI,EAAE,IAAI,CAAC,SAAU,WAAW,IAAI,IAAI,WAAW,MAAM,QAAQ,UAAU,IAAI,IAAK;AAAA,IAC/F,WAAW,WAAW,CAAC,GAAG;AACxB,UAAI,KAAK,IAAI,WAAW,GAAG,QAAQ,UAAU;AAAA,IAC/C;AAAA,EACF;AAEA,SAAO;AACT;;;AClGO,IAAM,kBAAkB,oBAAI,IAAY,CAAC,SAAS,cAAc,YAAY,CAAC;AAG7E,IAAM,uBAAuB,oBAAI,IAAI;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBACd,SACA,YAC8D;AAC9D,QAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,QAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5D,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,KAAK,WAAW,IAAK,QAAO,EAAE,IAAI,MAAM;AACtF,SAAO,EAAE,IAAI,MAAM,MAAM,SAAS;AACpC;AAEO,SAAS,aAAa,cAA4C;AACvE,MAAI,CAAC,aAAc,QAAO,CAAC;AAC3B,SAAO,aACJ,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACnB;AAEO,SAAS,aACd,KACA,aACA,WAC0F;AAC1F,QAAM,EAAE,aAAa,IAAI,IAAI,IAAI,GAAG;AACpC,QAAM,UAAuC,CAAC;AAK9C,QAAM,QAAQ,CAAC,UAA0B,YAAY,KAAK,KAAK;AAE/D,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa,QAAQ,GAAG;AACjD,UAAM,cAAc,uBAAuB,KAAK,GAAG;AACnD,UAAM,UAAU,mCAAmC,KAAK,GAAG;AAE3D,QAAI,aAAa;AACf,YAAM,QAAQ,YAAY,CAAC;AAC3B,UAAI,CAAC,YAAY,IAAI,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,cAAc,MAAM;AACrE,YAAM,aAAa,MAAM,KAAK;AAC9B,YAAM,WAAW,QAAQ,UAAU;AACnC,UAAI,aAAa,QAAW;AAC1B,gBAAQ,UAAU,IAAI,MAAM,QAAQ,QAAQ,IACxC,CAAC,GAAG,UAAU,KAAK,IACnB,CAAC,UAAuC,KAAK;AAAA,MACnD,OAAO;AACL,gBAAQ,UAAU,IAAI;AAAA,MACxB;AAAA,IACF,WAAW,SAAS;AAClB,YAAM,QAAQ,QAAQ,CAAC;AACvB,YAAM,WAAW,QAAQ,CAAC;AAC1B,UAAI,CAAC,YAAY,IAAI,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,cAAc,MAAM;AACrE,UAAI,CAAC,CAAC,MAAM,OAAO,MAAM,KAAK,EAAE,SAAS,QAAQ,EAAG;AACpD,YAAM,aAAa,MAAM,KAAK;AAC9B,YAAM,WAAY,QAAQ,UAAU,KAAoC,CAAC;AACzE,cAAQ,UAAU,IAAI,EAAE,GAAI,UAA6B,CAAC,QAAQ,GAAG,MAAM;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,QAAQ;AAC7B;;;ACjDA,SAAS,YAAY,MAAwB;AAC3C,SAAQ,KAAiC,WAAW,MAAM;AAC5D;AAEO,SAAS,4BACd,KACA,UACA,OACA,YACA,OACA,eACA,UACM;AAIN,WAAS,kBAAkB,MAAc,SAAwB;AAC/D,QAAI,eAAe;AACjB,UAAI,IAAI,MAAM,eAAe,OAAO;AAAA,IACtC,OAAO;AACL,UAAI,IAAI,MAAM,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,oBAAkB,MAAM,WAAW,SAAS,GAAG,CAAC,MAAM;AACpD,UAAM,OAAO,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC9D,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,IACf,EAAE;AACF,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAED,oBAAkB,MAAM,WAAW,UAAU,GAAG,CAAC,MAAM;AACrD,UAAM,OAAO,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC/D,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,IACZ,EAAE;AACF,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAID,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,SAAS,aAAa,GAAG;AAC5E,UAAM,WAAW,YAAY;AAC7B,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,qBAAqB,IAAI;AAAA,MAC7B,YAAY,OACT,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAIA,UAAM,uBAAuB,oBAAI,IAAY;AAAA,MAC3C,GAAG,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,eAAe,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACtF,GAAG,YAAY,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD,CAAC;AAED,QAAI,YAAY,UAAU;AACxB,UAAI,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO,MAAM;AAC/C,cAAM,SAAS,MAAM,KAAK,SAAS,EAAE,gBAAgB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AACjF,YAAI,OAAO,KAAK,WAAW,GAAG;AAC5B,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAEA,YAAI,OAAO,WAAW,OAAO,KAAK,CAAC,GAA8B,UAAU,UAAU;AACrF,YAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC,CAAC;AAAA,IACH,OAAO;AACL,wBAAkB,MAAM,WAAW,QAAQ,GAAG,OAAO,MAAM;AAEzD,cAAM,YAAY,WAAW,QAAQ;AACrC,cAAM,YAAY,UAAU;AAC5B,cAAM,aAAa,gBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,YAAI,CAAC,WAAW,IAAI;AAClB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,SAAS,EAAE,IAAI,MAAM,SAAS,KAAK;AACzC,YAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAChC,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,IAAI,MAAM;AAAA,cACrB;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,YAAY,EAAE,IAAI,MAAM,YAAY,KAAK;AAC/C,YAAI,cAAc,SAAS,cAAc,QAAQ;AAC/C,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,gBAAgB,aAAa,EAAE,IAAI,KAAK,sBAAsB,UAAU,SAAS;AACvF,YAAI,CAAC,cAAc,IAAI;AACrB,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,iBAAiB,cAAc,YAAY;AAAA,cACtD;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,cAAM,UAAU,aAAa,EAAE,IAAI,MAAM,SAAS,CAAC;AACnD,mBAAW,SAAS,SAAS;AAC3B,cAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,IAAI,KAAK;AAAA,gBACpB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAMA,cAAM,aAAa,UAAU,UAAU,MAAM,KAAK;AAElD,cAAM,SAAS,MAAM,KAAK,SAAS;AAAA,UACjC,gBAAgB;AAAA,UAChB,MAAM,WAAW;AAAA,UACjB,UAAU,WAAW;AAAA,UACrB,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,SAAS,cAAc;AAAA,UACvB;AAAA,QACF,CAAC;AAGD,cAAM,UAAW,OAAO,KAAmC;AAAA,UAAI,CAAC,QAC9D,WAAW,KAAK,UAAU,UAAU;AAAA,QACtC;AACA,cAAM,OAAO,UAAU,UAAU,QAAQ,IACrC,MAAM,SAAS,YAAY,UAAU,OAAO,IAC5C;AACJ,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC,CAAC;AAED,UAAI,IAAI,MAAM,KAAK,QAAQ,GAAG,OAAO,MAAM;AAIzC,cAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAE/B,cAAM,UAAU,aAAa,EAAE,IAAI,MAAM,SAAS,CAAC;AACnD,mBAAW,SAAS,SAAS;AAC3B,cAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,IAAI,KAAK;AAAA,gBACpB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,OAAO,MAAM,KAAK,WAAW,MAAM,OAAO;AAEhD,YAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG;AAC/B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO,EAAE,MAAM,kBAAkB,SAAS,4BAA4B,IAAI,IAAI;AAAA,YAChF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAGA,YAAI,OAAO,WAAW,MAAiC,UAAU,UAAU;AAC3E,YAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,aAAW,CAAC,QAAQ,KAAK,OAAO,QAAQ,SAAS,cAAc,GAAG;AAChE,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,sBAAkB,MAAM,mBAAmB,QAAQ,GAAG,OAAO,MAAM;AACjE,YAAM,aAAa,gBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,UAAI,CAAC,WAAW,IAAI;AAClB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,KAAK,SAAS;AAAA,QACjC,gBAAgB;AAAA,QAChB,MAAM,WAAW;AAAA,QACjB,UAAU,WAAW;AAAA,MACvB,CAAC;AAGD,YAAM,UAAW,OAAO,KAAmC;AAAA,QAAI,CAAC,QAC9D,WAAW,KAAK,UAAU,UAAU;AAAA,MACtC;AACA,YAAM,OAAO,UAAU,UAAU,QAAQ,IACrC,MAAM,SAAS,YAAY,UAAU,OAAO,IAC5C;AACJ,aAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,IACnC,CAAC;AAED,QAAI,IAAI,MAAM,aAAa,QAAQ,GAAG,OAAO,MAAM;AAEjD,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,UAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG;AAC/B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B;AAAA,UACjE;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAGA,UAAI,OAAO,WAAW,MAAiC,UAAU,UAAU;AAC3E,UAAI,UAAU,UAAU,QAAQ,EAAG,QAAO,MAAM,SAAS,YAAY,UAAU,IAAI;AACnF,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IAClC,CAAC;AAAA,EACH;AACF;;;AChTA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,SAAS,SAAS,MAAM,CAAC;AAE5D,SAASC,iBACP,SACA,YAC8D;AAC9D,QAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,QAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5D,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,KAAK,WAAW,IAAK,QAAO,EAAE,IAAI,MAAM;AACtF,SAAO,EAAE,IAAI,MAAM,MAAM,SAAS;AACpC;AAEO,SAAS,0BACd,KACA,WACA,OACA,eACM;AACN,QAAM,mBAA4B,OAAO,MAAM;AAC7C,UAAM,aAAaA,iBAAgB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAC/E,QAAI,CAAC,WAAW,IAAI;AAClB,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,EAAE,IAAI,MAAM,MAAM;AACpC,QAAI,cAAc,UAAa,CAAC,kBAAkB,IAAI,SAAS,GAAG;AAChE,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAiD;AAAA,MACrD,MAAM,WAAW;AAAA,MACjB,UAAU,WAAW;AAAA,IACvB;AACA,QAAI,cAAc,QAAW;AAC3B,WAAK,OAAO;AAAA,IACd;AAEA,UAAM,SAAS,MAAM,UAAU,SAAS,IAAI;AAC5C,WAAO,EAAE,KAAK,MAAM;AAAA,EACtB;AAEA,MAAI,eAAe;AACjB,QAAI,IAAI,MAAM,gBAAgB,GAAG,eAAe,gBAAgB;AAAA,EAClE,OAAO;AACL,QAAI,IAAI,MAAM,gBAAgB,GAAG,gBAAgB;AAAA,EACnD;AAEA,MAAI,IAAI,MAAM,UAAU,GAAG,OAAO,MAAM;AAItC,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,UAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,QAAI,CAAC,MAAM;AACT,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACxC,CAAC;AACH;;;ACvFA,SAAS,OAAAC,YAAW;;;ACqBpB,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ;AAC7D;AASO,SAAS,mBACd,aACA,QACA,OACY;AACZ,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAoB,CAAC;AAE3B,aAAW,KAAK,aAAa;AAE3B,UAAM,MAAM,EAAE,WAAW;AACzB,QAAI,QAAQ,UAAa,QAAQ,GAAI;AAIrC,QAAI,UAAU,QAAQ,EAAE,OAAO,OAAQ;AAEvC,UAAM,QAAQ,SAAS,eAAe,OAAO,GAAG,CAAC,IAAI;AACrD,UAAM,QAAQ,QAAQ,eAAe,MAAM,GAAG,CAAC,IAAI;AACnD,QAAI,UAAU,MAAO;AACrB,QAAI,MAAO,SAAQ,KAAK,KAAK;AAC7B,QAAI,MAAO,OAAM,KAAK,KAAK;AAAA,EAC7B;AAEA,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAGO,SAAS,oBAAoB,QAAkC;AACpE,SAAO;AAAA,IACL,OAAO,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK;AAAA,IACpC,SAAS,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO;AAAA,EAC1C;AACF;AAMA,eAAsB,yBACpB,OACA,WACe;AACf,QAAM,QAAQ,IAAI,IAAI,MAAM,KAAK;AACjC,QAAM,UAAU,IAAI,IAAI,MAAM,OAAO;AAErC,QAAM,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;AACzD,QAAM,YAAY,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;AAE5D,MAAI,OAAO,SAAS,EAAG,OAAM,UAAU,wBAAwB,MAAM;AACrE,MAAI,UAAU,SAAS,EAAG,OAAM,UAAU,wBAAwB,SAAS;AAC7E;;;ADhDA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,qBAAqB,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,sBAAsB,IAAI,EAAE;AAClF,SAAO,IAAI,IAAI;AACjB;AAMA,eAAe,kBACb,IACA,UACA,OACA,UACA,WACoC;AACpC,QAAM,SAAS,MAAM,GAAG;AAAA,IACtBC,qBAAoBA,KAAI,IAAI,WAAW,MAAM,GAAG,UAAU,CAAC,CAAC,sBAAsB,QAAQ,uBAAuB,SAAS;AAAA,EAC5H;AACA,QAAM,OAAO,OAAO;AAEpB,aAAW,MAAM,MAAM,QAAQ;AAC7B,QAAI,GAAG,cAAc,KAAM;AAC3B,UAAM,OAAO,GAAG;AAChB,QAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,UAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,QAAI,CAAC,MAAO;AACZ,eAAW,OAAO,MAAM;AACtB,UAAI,GAAG,IAAI,IAAI,MAAM,kBAAkB,IAAI,UAAU,OAAO,IAAI,IAAI,GAAa,GAAG,IAAI;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,iBAAiB,IAA6B,YAA4C;AACvG,QAAM,IAAI,MAAM,GAAG;AAAA,IACjBA,8CAA6C,UAAU,cAAc,UAAU;AAAA,EACjF;AACA,SAAQ,EAAE,KAAK,CAAC,GAAkC,MAAM;AAC1D;AAIA,IAAM,eAAe;AAIrB,SAAS,QAAQ,OAAyB;AACxC,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,GAAI,QAAO;AAC7D,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO;AACvD,SAAO;AACT;AAEA,SAAS,oBACP,QACA,MACsC;AACtC,SAAO,OACJ,OAAO,CAAC,MAAM,EAAE,YAAY,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,EACjD,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,GAAG,EAAE,KAAK,eAAe,EAAE;AACtE;AAwBA,SAAS,eACP,KACA,kBACA,oBACA,WACiB;AACjB,QAAM,eAAe,IAAI,IAAI,GAAG,EAAE;AAElC,QAAM,aAAa;AAAA,IACjB,aAAa,IAAI,MAAM,KAAK;AAAA,IAC5B,aAAa,IAAI,UAAU,KAAK;AAAA,EAClC;AACA,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,IAAI,SAAS,KAAK;AAC9C,MAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAChC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS,IAAI,MAAM;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,YAAY,aAAa,IAAI,YAAY,KAAK;AACpD,MAAI,cAAc,SAAS,cAAc,QAAQ;AAC/C,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,EAAE,MAAM,sBAAsB,SAAS,qCAAqC;AAAA,MACtF,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,gBAAgB,aAAa,KAAK,kBAAkB,SAAS;AACnE,MAAI,CAAC,cAAc,IAAI;AACrB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS,iBAAiB,cAAc,YAAY;AAAA,MACtD;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,aAAa,IAAI,SAAS,KAAK,MAAS;AACrE,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,mBAAmB,IAAI,KAAK,GAAG;AAClC,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU,EAAE,MAAM,yBAAyB,SAAS,IAAI,KAAK,kCAAkC;AAAA,QAC/F,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAEvD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,cAAc;AAAA,IACvB;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,2BACd,KACA,UACA,OACA,YACA,WACA,mBACA,IACM;AAGN,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,SAAS,aAAa,GAAG;AAC5E,UAAM,WAAW,WAAW,QAAQ;AACpC,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,mBAAmB,oBAAI,IAAY;AAAA,MACvC,GAAG,YAAY,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACvC,GAAG,YAAY,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD,CAAC;AAED,UAAM,qBAAqB,IAAI;AAAA,MAC7B,YAAY,OACT,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAEA,UAAM,YAAY,WAAW,QAAQ;AACrC,UAAM,YAAY,UAAU;AAE5B,UAAM,iBAAiB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ;AAElE,UAAM,cAAc,YAAY,OAAO;AAAA,MACrC,CAAC,MAAM,EAAE,eAAe,WAAW,EAAE,eAAe,WAAW,EAAE,eAAe;AAAA,IAClF;AAEA,UAAM,qBAAqB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAKhF,UAAM,oBAAoB;AAAA,MACxB,GAAG,YAAY,OACZ,OAAO,CAAC,MAAM,EAAE,eAAe,gBAAgB,EAAE,cAAc,IAAI,EACnE,IAAI,CAAC,MAAM,EAAE,UAAW,WAAW;AAAA,MACtC,GAAI,YAAY,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC;AAAA,IAC7E;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,SAAS,eAAe,EAAE,IAAI,KAAK,kBAAkB,oBAAoB,UAAU,SAAS;AAClG,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,GAAG,OAAO,MAAM;AAAA,QACpE;AAEA,cAAM,iBAAiB,EAAE,IAAI,MAAM,WAAW;AAC9C,cAAM,eAA4C,CAAC;AACnD,YAAI,mBAAmB,QAAS,cAAa,WAAW,IAAI;AAM5D,cAAM,aAAa,UAAU,UAAU,OAAO,MAAM,KAAK,OAAO;AAEhE,cAAM,WAAgD;AAAA,UACpD,MAAM,OAAO,WAAW;AAAA,UACxB,UAAU,OAAO,WAAW;AAAA,UAC5B,SAAS;AAAA,UACT,YAAY,OAAO;AAAA,UACnB,SAAS,EAAE,GAAG,OAAO,SAAS,GAAG,aAAa;AAAA,UAC9C,SAAS,OAAO;AAAA,QAClB;AACA,YAAI,mBAAmB,OAAQ,UAAS,iBAAiB;AACzD,YAAI,OAAO,WAAW,MAAM,kBAAkB,SAAS,GAAG;AACxD,mBAAS,SAAS,EAAE,MAAM,OAAO,QAAQ,SAAS,kBAAkB;AAAA,QACtE;AAEA,cAAM,SAAS,MAAM,KAAK,SAAS,QAAQ;AAG3C,cAAM,OAAO,OAAO,KAAK;AAAA,UAAI,CAAC,QAC5B,WAAW,KAAgC,UAAU,UAAU;AAAA,QACjE;AAEA,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAQA,YAAI,IAAI;AACN,gBAAM,MAAM;AACZ,qBAAW,KAAK,YAAY,QAAQ;AAClC,gBAAI,EAAE,cAAc,MAAM;AACxB,oBAAM,OAAO,EAAE;AACf,kBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,oBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,kBAAI,CAAC,MAAO;AACZ,kBAAI,EAAE,IAAI,IAAI,MAAM,kBAAkB,IAAI,UAAU,OAAO,IAAI,EAAE,IAAI;AAAA,YACvE,WAAW,EAAE,UAAU,UAAU;AAC/B,oBAAM,IAAI,EAAE,UAAU;AACtB,oBAAM,IAAI,MAAM,GAAG;AAAA,gBACjBA,cAAaA,KAAI,IAAI,WAAW,EAAE,YAAY,CAAC,CAAC,SAASA,KAAI,IAAI,WAAW,EAAE,UAAU,CAAC,CAAC,UAAUA,KAAI,IAAI,WAAW,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE;AAAA,cAChJ;AACA,kBAAI,EAAE,IAAI,IAAI,EAAE,KAAK;AAAA,gBACnB,CAACC,SAASA,KAAgC,EAAE,YAAY;AAAA,cAC1D;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAKA,cAAM,OAAO,WAAW,MAAiC,UAAU,UAAU;AAE7E,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,YAAI,YAAY,UAAU;AACxB,gBAAM,WAAW,MAAM,KAAK,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;AAC7D,cAAI,SAAS,KAAK,QAAQ,GAAG;AAC3B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,yBAAyB,YAAY,KAAK;AAAA,gBACrD;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF,OAAO;AACL,gBAAM,OAAO,KAAK,MAAM;AACxB,cAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAAI;AAClD,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,gBAC1D;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,cAAI,CAAC,aAAa,KAAK,IAAI,GAAG;AAC5B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SACE;AAAA,gBACJ;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,gBAAM,WAAW,MAAM,KAAK,WAAW,IAAI;AAC3C,cAAI,UAAU;AACZ,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,SAAS,IAAI;AAAA,gBACxB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO,aAAa,GAAG,IAAI;AAAA,MAC7B;AAAA,IACF;AAMA,UAAM,eAAe,OAAO,GAAY,SAAkC;AAGtE,YAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,YAAM,cAAc,oBAAoB,gBAAgB,IAAI;AAC5D,UAAI,YAAY,SAAS,GAAG;AAC1B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,cACT,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,cAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,QAAC,CAAC;AAC7E,YAAI,YAAa,QAAO;AAAA,MAC1B;AAGA,YAAM,kBAAkB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAC7E,YAAM,iBAAiB,YAAY,OAAO;AAAA,QACxC,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,UAAU,aAAa;AAAA,MAC1D;AAIA,YAAM,qBAAqB,YAAY,OAAO,OAAO,cAAc;AACnE,YAAM,aAAsC;AAAA,QAC1C,WAAW,KAAK,WAAW,KAAK;AAAA,MAClC;AACA,UAAI,YAAY,UAAU;AACxB,mBAAW,MAAM,IAAI;AAAA,MACvB,OAAO;AACL,mBAAW,MAAM,IAAI,KAAK,MAAM;AAAA,MAClC;AACA,iBAAW,KAAK,oBAAoB;AAClC,cAAM,MAAM,EAAE,UAAU;AACxB,YAAI,EAAE,OAAO,aAAc;AAC3B,mBAAW,GAAG,IAAI,YAAY,GAAG;AAAA,MACnC;AAGA,UAAI,IAAI;AACN,cAAM,aAAa,MAAM,iBAAiB,IAAI,YAAY,iBAAiB;AAC3E,YAAI,CAAC,YAAY;AACf,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,cAAc,YAAY,iBAAiB;AAAA,cACtD;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,mBAAW,cAAc,IAAI;AAAA,MAC/B;AAEA,YAAM,OAAO,MAAM,KAAK,OAAO,UAA+C;AAC9E,YAAM,SAAU,KAAiC,IAAI;AAGrD,YAAM,cAA4B,CAAC,mBAAmB,aAAa,MAAM,WAAW,CAAC;AAGrF,UAAI,IAAI;AACN,mBAAW,KAAK,iBAAiB;AAC/B,gBAAM,OAAO,EAAE;AACf,cAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,gBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,cAAI,CAAC,MAAO;AACZ,gBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,sBAAY,KAAK,MAAM,sBAAsB,IAAI,QAAQ,YAAY,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,QACrH;AACA,mBAAW,KAAK,gBAAgB;AAC9B,gBAAM,WAAW,EAAE,UAAW;AAC9B,gBAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IACxC,KAAK,EAAE,IAAI,EAAgB,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAC5E,CAAC;AACL,gBAAM,qBAAqB,IAAI,QAAQ,UAAU,UAAU;AAAA,QAC7D;AAAA,MACF;AAEA,YAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,YAAM,OAAO,WAAW,MAAiC,UAAU,UAAU;AAE7E,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,GAAG;AAAA,IACzC;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,cAAM,WAAW,MAAM,KAAK,QAAQ,EAAE;AACtC,YAAI,CAAC,UAAU;AACb,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAEA,YAAI,CAAC,YAAY,YAAY,UAAU,MAAM;AAC3C,gBAAM,OAAO,KAAK,MAAM;AACxB,cAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAAI;AAClD,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,uBAAuB,CAAC;AAAA,gBAC9D;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,cAAI,CAAC,aAAa,KAAK,IAAI,GAAG;AAC5B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SACE;AAAA,gBACJ;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,gBAAM,WAAW,MAAM,KAAK,WAAW,IAAI;AAC3C,cAAI,YAAa,SAAqC,IAAI,MAAM,IAAI;AAClE,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS,SAAS,IAAI;AAAA,gBACxB;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO,kBAAkB,GAAG,IAAI,UAAqC,IAAI;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,oBAAoB,OACxB,GACA,IACA,UACA,SACG;AAGD,YAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,UAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,cAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,QAAC,CAAC;AAC7E,YAAI,YAAa,QAAO;AAKxB,cAAM,SAAS,EAAE,GAAG,UAAU,SAAS,QAAmC,GAAG,GAAG,KAAK;AACrF,cAAM,cAAc,oBAAoB,gBAAgB,MAAM;AAC9D,YAAI,YAAY,SAAS,GAAG;AAC1B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAGA,YAAM,uBAAuB,YAAY,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAClF,YAAM,sBAAsB,YAAY,OAAO;AAAA,QAC7C,CAAC,MAAM,EAAE,cAAc,QAAQ,EAAE,UAAU,aAAa;AAAA,MAC1D;AAIA,YAAM,0BAA0B,YAAY,OAAO,OAAO,cAAc;AACxE,YAAM,YAAqC,CAAC;AAC5C,UAAI,CAAC,YAAY,YAAY,UAAU,KAAM,WAAU,MAAM,IAAI,KAAK,MAAM;AAC5E,UAAI,eAAe,KAAM,WAAU,WAAW,IAAI,KAAK,WAAW;AAClE,iBAAW,KAAK,yBAAyB;AACvC,cAAM,MAAM,EAAE,UAAU;AACxB,YAAI,EAAE,OAAO,aAAc;AAC3B,kBAAU,GAAG,IAAI,YAAY,GAAG;AAAA,MAClC;AAEA,YAAM,UAAU,MAAM,KAAK,OAAO,IAAI,SAA8C;AACpF,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,UAChE;AAAA,QACF;AAAA,MACF;AAGA,YAAM,cAA4B;AAAA,QAChC,mBAAmB,aAAa,UAAqC,WAAW;AAAA,MAClF;AAGA,UAAI,IAAI;AACN,mBAAW,KAAK,sBAAsB;AACpC,gBAAM,OAAO,EAAE;AACf,cAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,gBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,cAAI,CAAC,MAAO;AACZ,gBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,sBAAY,KAAK,MAAM,sBAAsB,IAAI,IAAI,YAAY,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,QACjH;AACA,mBAAW,KAAK,qBAAqB;AACnC,gBAAM,WAAW,EAAE,UAAW;AAC9B,gBAAM,aAAa,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IACxC,KAAK,EAAE,IAAI,EAAgB,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAC5E,CAAC;AACL,gBAAM,qBAAqB,IAAI,IAAI,UAAU,UAAU;AAAA,QACzD;AAAA,MACF;AAEA,YAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,YAAM,OAAO,WAAW,SAAoC,UAAU,UAAU;AAEhF,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IACpC;AASA,QAAI,YAAY,UAAU;AACxB,UAAI;AAAA,QACF,cAAc,QAAQ;AAAA,QACtB,kBAAkB,cAAc;AAAA,QAChC,OAAO,MAAM;AACX,gBAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAE/B,gBAAM,iBAAiB,MAAM,KAAK,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;AACnE,gBAAM,WAAW,eAAe,KAAK,CAAC;AAEtC,cAAI,CAAC,UAAU;AAGb,kBAAM,aAAa,MAAM,kBAAkB,gBAAgB,EAAE,GAAG,YAAY;AAAA,YAAC,CAAC;AAC9E,gBAAI,WAAY,QAAO;AACvB,mBAAO,aAAa,GAAG,IAAI;AAAA,UAC7B;AAEA,iBAAO,kBAAkB,GAAG,SAAS,IAAI,GAAa,UAAU,IAAI;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AAAA,MACF,cAAc,QAAQ;AAAA,MACtB,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,YAAY,EAAE;AAAA,YAChE;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,MAAiC,IAAI;AAAA,QACvE;AAIA,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,wBAAY,KAAK,MAAM,qBAAqB,IAAI,IAAI,EAAE,MAAM,OAAO,QAAQ,CAAC;AAAA,UAC9E;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAE1E,cAAM,KAAK,OAAO,EAAE;AACpB,eAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAIA,aAAW,CAAC,UAAU,YAAY,KAAK,OAAO,QAAQ,SAAS,cAAc,GAAG;AAC9E,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,CAAC,KAAM;AAEX,UAAM,mBAAmB,oBAAI,IAAY;AAAA,MACvC,GAAG,aAAa,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACxC,GAAG,aAAa,cAAc,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACjD,CAAC;AAED,UAAM,qBAAqB,IAAI;AAAA,MAC7B,aAAa,OACV,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACtB;AAEA,UAAM,YAAY,WAAW,QAAQ;AACrC,UAAM,YAAY,UAAU;AAE5B,UAAM,iBAAiB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ;AAEnE,UAAM,cAAc,aAAa,OAAO;AAAA,MACtC,CAAC,MAAM,EAAE,eAAe,WAAW,EAAE,eAAe,WAAW,EAAE,eAAe;AAAA,IAClF;AAEA,UAAM,qBAAqB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAEjF,UAAM,oBAAoB;AAAA,MACxB,GAAG,aAAa,OACb,OAAO,CAAC,MAAM,EAAE,eAAe,gBAAgB,EAAE,cAAc,IAAI,EACnE,IAAI,CAAC,MAAM,EAAE,UAAW,WAAW;AAAA,MACtC,GAAI,aAAa,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC;AAAA,IAC9E;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,SAAS,eAAe,EAAE,IAAI,KAAK,kBAAkB,oBAAoB,UAAU,SAAS;AAClG,YAAI,CAAC,OAAO,IAAI;AACd,iBAAO,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,GAAG,OAAO,MAAM;AAAA,QACpE;AAEA,cAAM,iBAAiB,EAAE,IAAI,MAAM,WAAW;AAC9C,cAAM,eAA4C,CAAC;AACnD,YAAI,mBAAmB,QAAS,cAAa,WAAW,IAAI;AAM5D,cAAM,aAAa,UAAU,UAAU,OAAO,MAAM,KAAK,OAAO;AAEhE,cAAM,WAAgD;AAAA,UACpD,MAAM,OAAO,WAAW;AAAA,UACxB,UAAU,OAAO,WAAW;AAAA,UAC5B,SAAS;AAAA,UACT,YAAY,OAAO;AAAA,UACnB,SAAS,EAAE,GAAG,OAAO,SAAS,GAAG,aAAa;AAAA,UAC9C,SAAS,OAAO;AAAA,QAClB;AACA,YAAI,mBAAmB,OAAQ,UAAS,iBAAiB;AACzD,YAAI,OAAO,WAAW,MAAM,kBAAkB,SAAS,GAAG;AACxD,mBAAS,SAAS,EAAE,MAAM,OAAO,QAAQ,SAAS,kBAAkB;AAAA,QACtE;AAEA,cAAM,SAAS,MAAM,KAAK,SAAS,QAAQ;AAG3C,cAAM,OAAO,OAAO,KAAK;AAAA,UAAI,CAAC,QAC5B,WAAW,KAAgC,UAAU,UAAU;AAAA,QACjE;AAEA,eAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,CAAC;AAAA,MACnC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,OAAO,WAAW,MAAiC,UAAU,UAAU;AAE7E,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAI/B,cAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,cAAM,cAAc,oBAAoB,gBAAgB,IAAI;AAC5D,YAAI,YAAY,SAAS,GAAG;AAC1B,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS;AAAA,gBACT,SAAS;AAAA,cACX;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,gBAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,UAAC,CAAC;AAC7E,cAAI,YAAa,QAAO;AAAA,QAC1B;AAGA,cAAM,qBAAqB,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAIjF,cAAM,wBAAwB,aAAa,OAAO,OAAO,cAAc;AACvE,cAAM,gBAAyC;AAAA,UAC7C,WAAW,KAAK,WAAW,KAAK;AAAA,QAClC;AACA,mBAAW,KAAK,uBAAuB;AACrC,gBAAM,MAAM,EAAE,UAAU;AACxB,cAAI,EAAE,OAAO,aAAc;AAC3B,wBAAc,GAAG,IAAI,YAAY,GAAG;AAAA,QACtC;AAEA,cAAM,OAAO,MAAM,KAAK,OAAO,aAAkD;AACjF,cAAM,YAAa,KAAiC,IAAI;AAGxD,cAAM,cAA4B,CAAC,mBAAmB,aAAa,MAAM,WAAW,CAAC;AAErF,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,kBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,wBAAY,KAAK,MAAM,sBAAsB,IAAI,WAAW,aAAa,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,UACzH;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,cAAM,OAAO,WAAW,MAAiC,UAAU,UAAU;AAE7E,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,GAAG;AAAA,MACvC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,cAAc;AAAA,MAChC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAI/B,cAAM,cAAc,UAAU,UAAU,IAAI;AAE5C,cAAM,WAAW,MAAM,KAAK,QAAQ,EAAE;AACtC,YAAI,CAAC,UAAU;AACb,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAEA,YAAI,KAAK,WAAW,MAAM,MAAM;AAC9B,gBAAM,cAAc,MAAM,kBAAkB,cAAc,EAAE,GAAG,YAAY;AAAA,UAAC,CAAC;AAC7E,cAAI,YAAa,QAAO;AAKxB,gBAAM,SAAS,EAAE,GAAG,UAAU,SAAS,QAAmC,GAAG,GAAG,KAAK;AACrF,gBAAM,cAAc,oBAAoB,gBAAgB,MAAM;AAC9D,cAAI,YAAY,SAAS,GAAG;AAC1B,mBAAO,EAAE;AAAA,cACP;AAAA,gBACE,IAAI;AAAA,gBACJ,OAAO;AAAA,kBACL,MAAM;AAAA,kBACN,SAAS;AAAA,kBACT,SAAS;AAAA,gBACX;AAAA,cACF;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAGA,cAAM,0BAA0B,aAAa,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,IAAI;AAItF,cAAM,6BAA6B,aAAa,OAAO,OAAO,cAAc;AAC5E,cAAM,eAAwC,CAAC;AAC/C,YAAI,eAAe,KAAM,cAAa,WAAW,IAAI,KAAK,WAAW;AACrE,mBAAW,KAAK,4BAA4B;AAC1C,gBAAM,MAAM,EAAE,UAAU;AACxB,cAAI,EAAE,OAAO,aAAc;AAC3B,uBAAa,GAAG,IAAI,YAAY,GAAG;AAAA,QACrC;AAEA,cAAM,UAAU,MAAM,KAAK,OAAO,IAAI,YAAiD;AACvF,YAAI,CAAC,SAAS;AACZ,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,UAAqC,WAAW;AAAA,QAClF;AAEA,YAAI,IAAI;AACN,qBAAW,KAAK,yBAAyB;AACvC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,kBAAM,QAAQ,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,IAAK,KAAK,EAAE,IAAI,IAAkB,CAAC;AAC3E,wBAAY,KAAK,MAAM,sBAAsB,IAAI,IAAI,aAAa,GAAG,YAAY,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,UAClH;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAG1E,cAAM,OAAO,WAAW,SAAoC,UAAU,UAAU;AAEhF,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,MAClC;AAAA,IACF;AAGA,QAAI;AAAA,MACF,uBAAuB,QAAQ;AAAA,MAC/B,kBAAkB,gBAAgB;AAAA,MAClC,OAAO,MAAM;AACX,cAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,cAAM,OAAO,MAAM,KAAK,QAAQ,EAAE;AAElC,YAAI,CAAC,MAAM;AACT,iBAAO,EAAE;AAAA,YACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE;AAAA,YAC9E;AAAA,UACF;AAAA,QACF;AAGA,cAAM,cAA4B;AAAA,UAChC,mBAAmB,aAAa,MAAiC,IAAI;AAAA,QACvE;AAEA,YAAI,IAAI;AACN,qBAAW,KAAK,oBAAoB;AAClC,kBAAM,OAAO,EAAE;AACf,gBAAI,KAAK,cAAc,qBAAqB,CAAC,KAAK,IAAK;AACvD,kBAAM,QAAQ,SAAS,gBAAgB,KAAK,GAAG;AAC/C,gBAAI,CAAC,MAAO;AACZ,wBAAY,KAAK,MAAM,qBAAqB,IAAI,IAAI,EAAE,MAAM,OAAO,QAAQ,CAAC;AAAA,UAC9E;AAAA,QACF;AAEA,cAAM,yBAAyB,iBAAiB,GAAG,WAAW,GAAG,SAAS;AAE1E,cAAM,KAAK,OAAO,EAAE;AACpB,eAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAIA,MAAI,IAAI,qBAAqB,CAAC,MAAM;AAClC,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,eAAe,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,UAChE,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,UAAU,GAAG;AAAA,UACb,mBAAmB,GAAG;AAAA,UACtB,QAAQ,GAAG;AAAA,UACX,eAAe,GAAG;AAAA,QACpB,EAAE;AAAA,QACF,gBAAgB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,UAClE,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,QAAQ,GAAG;AAAA,UACX,eAAe,GAAG;AAAA,QACpB,EAAE;AAAA,QACF,YAAY,OAAO,OAAO,SAAS,UAAU,EAAE,IAAI,CAAC,QAAQ;AAAA,UAC1D,MAAM,GAAG;AAAA,UACT,OAAO,GAAG;AAAA,UACV,QAAQ,GAAG;AAAA,QACb,EAAE;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;;;AEjjCA,SAAS,QAAAC,OAAM,cAAc;AAK7B,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,mBAAmB,oBAAI,IAAI,CAAC,aAAa,cAAc,iBAAiB,CAAC;AAE/E,IAAM,kBAAkB,oBAAI,IAAI,CAAC,iBAAiB,CAAC;AAcnD,SAAS,aAAqB;AAC5B,QAAM,SAAS,QAAQ,IAAI,aAAa;AACxC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6CAA6C;AAC1E,SAAO;AACT;AAEA,eAAe,kBAAkB,MAAqB,WAAoC;AACxF,SAAOA,MAAK,EAAE,GAAG,MAAM,KAAK,UAAU,GAAG,WAAW,CAAC;AACvD;AAEA,eAAe,oBAAoB,OAA8C;AAC/E,MAAI;AACF,UAAM,IAAI,MAAM,OAAO,OAAO,WAAW,GAAG,OAAO;AAKnD,WAAO,EAAE,KAAK,EAAE,KAAK,QAAQ,EAAE,QAAQ,WAAW,EAAE,UAAU;AAAA,EAChE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAe,mBACb,QACA,eACA,WACA,SAEA,GACA,aACA,aACmB;AAKnB,MAAI,gBAAgB,QAAW;AAC7B,UAAM,gBAAgB,OAAO,EAAE,IAAI,OAAO,gBAAgB,CAAC;AAC3D,QAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,aAAa;AACjE,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,sCAAsC,WAAW;AAAA,UAC5D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,EAAE,IAAI,SAAS;AAAA,EAClC,QAAQ;AACN,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,+BAA+B,EAAE;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,SAAS,IAAI,MAAM;AACrC,MAAI,EAAE,qBAAqB,OAAO;AAChC,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,yBAAyB,EAAE;AAAA,MACpF;AAAA,IACF;AAAA,EACF;AAIA,MAAI,gBAAgB,UAAa,UAAU,OAAO,aAAa;AAC7D,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,oCAAoC,WAAW;AAAA,QAC1D;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,UAAU;AAC3B,MAAI,CAAC,cAAc,IAAI,QAAQ,GAAG;AAChC,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,cAAc,QAAQ;AAAA,QACjC;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,IAAI,KAAK;AACnC,QAAM,MAAM,OAAO,aAAa,YAAY,SAAS,KAAK,MAAM,KAAK,SAAS,KAAK,IAAI;AAEvF,MAAI,eAAe,CAAC,KAAK;AACvB,WAAO,EAAE;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,OAAO,OAAO,SAAS,kBAAkB,CAAC;AAAA,QACxD;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,QAAQ,sBAAsB;AAAA,MAC9C;AAAA,MACA,UAAU,UAAU;AAAA,MACpB,WAAW;AAAA,IACb,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE;AAAA,MACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,gCAAgC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,QAAQ;AAClB,QAAI;AACF,YAAM,QAAQ,IAAI,WAAW,MAAM,UAAU,YAAY,CAAC;AAC1D,YAAM,QAAQ,OAAO,UAAU,KAAK,OAAO,QAAQ;AAAA,IACrD,SAAS,KAAK;AACZ,cAAQ,MAAM,iCAAiC,GAAG;AAClD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,wBAAwB,EAAE;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,MAAM,QAAQ,OAAO,UAAU,GAAG;AACxC,QAAM,WAAW,UAAU;AAE3B,QAAM,OAAO,MAAM,UAAU,OAAO;AAAA,IAClC,MAAM;AAAA,IACN;AAAA,IACA,WAAW;AAAA,IACX,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,IAC/B,WAAW;AAAA,EACb,CAAC;AAED,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,GAAG,GAAG;AAC7C;AAIO,SAAS,yBACd,KACA,WACA,SACA,mBACA,aACM;AAEN,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,SAAS,kBAAkB,WAAW,SAAS,GAAG,OAAO,WAAW;AAAA,IAChG;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,SAAS,kBAAkB,WAAW,SAAS,GAAG,MAAM,WAAW;AAAA,IAC/F;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,aAAO,mBAAmB,QAAQ,iBAAiB,WAAW,SAAS,GAAG,MAAM,WAAW;AAAA,IAC7F;AAAA,EACF;AAGA,MAAI,IAAI,kCAAkC,kBAAkB,cAAc,GAAG,OAAO,MAAM;AACxF,UAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,UAAM,WAAW,EAAE,IAAI,MAAM,UAAU;AACvC,UAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AAExC,QAAI,CAAC,QAAQ,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,SAAS,IAAI,GAAG;AACvD,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,QAAQ,SAAS,mBAAmB,CAAC;AAAA,UAC1D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,KAAK,MAAM,IAAI;AACvC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,YAAY,SAAS,uBAAuB,CAAC;AAAA,UAClE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,YAAY,SAAS,KAAK,MAAM,IAAI;AACvC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,aAAa,SAAS,wBAAwB,CAAC;AAAA,UACpE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WACJ,SAAS,UAAU,mBAAmB,SAAS,UAAU,mBAAmB;AAE9E,QAAI,CAAC,SAAS,IAAI,QAAQ,GAAG;AAC3B,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,cAAc,QAAQ,yBAAyB,IAAI;AAAA,UAC9D;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,QAAQ,sBAAsB;AAAA,QAC9C,QAAQ;AAAA,QACR;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,gCAAgC,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM;AAAA,MACrB,EAAE,KAAK,UAAU,KAAK,QAAQ,MAAM,WAAW,SAAS;AAAA,MACxD,UAAU;AAAA,IACZ;AAEA,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,YAAY,UAAU;AAAA;AAAA,QAEtB;AAAA,QACA,YAAY,UAAU;AAAA;AAAA;AAAA,QAGtB,GAAI,UAAU,UAAU,EAAE,QAAQ,UAAU,OAAO;AAAA,QACnD,GAAI,UAAU,UAAU,EAAE,QAAQ,UAAU,OAAO;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,KAAK,gCAAgC,kBAAkB,cAAc,GAAG,OAAO,MAAM;AACvF,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAE3B,UAAM,UAAU,MAAM,oBAAoB,EAAE;AAC5C,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,EAAE,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,WAAW,OAAO,KAAK,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE,KAAK,IAAI;AAExE,UAAM,cAAc,QAAQ,WAAW,WAAW,QAAQ,WAAW;AACrE,QAAI,eAAe,CAAC,UAAU;AAC5B,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,YACT,SAAS,CAAC,EAAE,OAAO,OAAO,SAAS,kBAAkB,CAAC;AAAA,UACxD;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,WAAW;AACf,QAAI,QAAQ,MAAM;AAChB,YAAM,OAAO,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAC3C,UAAI,CAAC,MAAM;AACT,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,4BAA4B,EAAE;AAAA,UACpF;AAAA,QACF;AAAA,MACF;AACA,YAAM,WACJ,QAAQ,WAAW,UAAU,mBAC3B,QAAQ,WAAW,UAAU,mBAC7B;AACJ,UAAI,KAAK,gBAAgB,CAAC,SAAS,IAAI,KAAK,YAAY,GAAG;AACzD,cAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,yBAAyB,SAAS,uBAAuB,KAAK,YAAY,oBAAoB,EAAE;AAAA,UAC5H;AAAA,QACF;AAAA,MACF;AACA,UAAI,gBAAgB,UAAa,KAAK,OAAO,aAAa;AACxD,cAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,6BAA6B,WAAW,cAAc,EAAE;AAAA,UAC/G;AAAA,QACF;AAAA,MACF;AACA,iBAAW,KAAK;AAAA,IAClB;AAEA,UAAM,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAEtC,UAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MAClC,MAAM,QAAQ;AAAA,MACd;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,GAAI,aAAa,UAAa,EAAE,KAAK,SAAS;AAAA,MAC9C,WAAW;AAAA,IACb,CAAC;AAED,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,GAAG,GAAG;AAAA,EAC7C,CAAC;AAGD,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,WAAW,MAAM,UAAU,QAAQ,EAAE;AAE3C,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;AAC/B,YAAM,MAAM,OAAO,KAAK,KAAK,MAAM,WAAW,KAAK,KAAK,EAAE,KAAK,IAAI;AAEnE,YAAM,aAAqD,CAAC;AAC5D,UAAI,QAAQ,OAAW,YAAW,MAAM;AAExC,YAAM,UAAU,MAAM,UAAU,OAAO,IAAI,UAAU;AACrD,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,UAAI,CAAC,MAAM;AACT,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,UAAI,KAAK,kBAAkB,GAAG;AAC5B,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAOA,YAAM,WAAW,IAAI,IAAI,KAAK,GAAG,EAAE;AACnC,YAAM,YAAY,SAAS,QAAQ,UAAU;AAC7C,YAAM,MAAM,aAAa,IACrB,SAAS,MAAM,YAAY,WAAW,MAAM,IAC5C,SAAS,QAAQ,OAAO,EAAE;AAE9B,UAAI;AACF,cAAM,QAAQ,OAAO,GAAG;AAAA,MAC1B,SAAS,KAAK;AACZ,gBAAQ,MAAM,iCAAiC,GAAG;AAClD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,iBAAiB,SAAS,qCAAqC;AAAA,UAChF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU,OAAO,EAAE;AAEzB,aAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI,IAAI,oBAAoB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AACxE,UAAM,UAAU,EAAE,IAAI,MAAM,MAAM;AAClC,UAAM,aAAa,EAAE,IAAI,MAAM,UAAU;AACzC,UAAM,OAAO,YAAY,SAAY,OAAO,OAAO,IAAI;AACvD,UAAM,WAAW,eAAe,SAAY,OAAO,UAAU,IAAI;AAEjE,QACE,CAAC,OAAO,UAAU,IAAI,KACtB,OAAO,KACP,CAAC,OAAO,UAAU,QAAQ,KAC1B,WAAW,KACX,WAAW,KACX;AACA,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,EAAE,IAAI,MAAM,MAAM;AACpC,QAAI,cAAc,UAAa,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,SAAS,SAAS,GAAG;AAC9E,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,MAAM,oBAAoB,SAAS,0CAA0C;AAAA,QACxF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,gBAAgB,EAAE,IAAI,MAAM,UAAU;AAC5C,UAAM,WACJ,kBAAkB,SAAS,OAAO,kBAAkB,UAAU,QAAQ;AAExE,UAAM,OAAiD,EAAE,MAAM,SAAS;AACxE,QAAI,cAAc,OAAW,MAAK,OAAO;AACzC,QAAI,aAAa,OAAW,MAAK,WAAW;AAE5C,UAAM,SAAS,MAAM,UAAU,SAAS,IAAI;AAE5C,WAAO,EAAE,KAAK,MAAM;AAAA,EACtB,CAAC;AAGD,MAAI,IAAI,wBAAwB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AAC5E,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,UAAM,OAAO,MAAM,UAAU,QAAQ,EAAE;AAEvC,QAAI,CAAC,MAAM;AACT,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,EAAE;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,KAAK,CAAC;AAAA,EACxC,CAAC;AAEH;;;AC/iBA,SAAS,aAAAC,kBAAiB;AAC1B,SAAS,OAAAC,YAAW;;;ACFpB,SAAS,cAAc,sBAAsB;;;ADiB7C,IAAM,gBAAgB,oBAAI,IAAsB;AAChD,IAAM,sBAAgC,CAAC;AAEvC,IAAM,iBAAiB;AACvB,IAAM,uBAAuB,KAAK,KAAK;AAIvC,IAAM,mBAAmB;AAIzB,IAAM,sBACJ;AAEF,SAAS,eAAe,KAA8D;AACpF,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,cAAc,MAAM;AAG1B,SAAO,oBAAoB,SAAS,KAAK,oBAAoB,CAAC,KAAM,aAAa;AAC/E,wBAAoB,MAAM;AAAA,EAC5B;AACA,MAAI,oBAAoB,UAAU,kBAAkB;AAClD,UAAM,oBAAoB,KAAK,MAAM,oBAAoB,CAAC,IAAK,uBAAuB,OAAO,GAAI;AACjG,WAAO,EAAE,SAAS,OAAO,kBAAkB;AAAA,EAC7C;AAEA,QAAM,YAAY,cAAc,IAAI,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW;AAC7E,WAAS,KAAK,GAAG;AACjB,gBAAc,IAAI,KAAK,QAAQ;AAC/B,sBAAoB,KAAK,GAAG;AAE5B,MAAI,SAAS,SAAS,gBAAgB;AACpC,UAAM,iBAAiB,SAAS,CAAC;AACjC,UAAM,oBAAoB,KAAK,MAAM,iBAAiB,uBAAuB,OAAO,GAAI;AACxF,WAAO,EAAE,SAAS,OAAO,kBAAkB;AAAA,EAC7C;AAEA,SAAO,EAAE,SAAS,MAAM,mBAAmB,EAAE;AAC/C;AAyBO,SAAS,mBAAmB,KAAW,IAAmC;AAC/E,QAAM,qBAAqB;AAAA,IACzB,IAAI;AAAA,IACJ,OAAO,EAAE,MAAM,uBAAuB,SAAS,6BAA6B;AAAA,EAC9E;AAGA,MAAI,KAAK,yBAAyB,OAAO,MAAM;AAC7C,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,IAC3B,QAAQ;AACN,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,QACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI;AACrE,UAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAErE,QAAI,CAAC,SAAS,CAAC,UAAU;AACvB,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,KACJ,EAAE,IAAI,OAAO,iBAAiB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK;AAC5D,UAAM,YAAY,eAAe,GAAG,EAAE,IAAI,KAAK,EAAE;AACjD,QAAI,CAAC,UAAU,SAAS;AACtB,QAAE,OAAO,eAAe,OAAO,UAAU,iBAAiB,CAAC;AAC3D,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BC;AAAA,qCAC+B,KAAK;AAAA,IACtC;AACA,UAAM,OAAO,WAAW,KAAK,CAAC;AAE9B,QAAI,CAAC,MAAM;AAGT,YAAM,eAAe,UAAU,mBAAmB;AAClD,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,gBAAgB,MAAM,eAAe,UAAU,KAAK,aAAa;AACvE,QAAI,CAAC,eAAe;AAClB,aAAO,EAAE,KAAK,oBAAoB,GAAG;AAAA,IACvC;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BA;AAAA;AAAA;AAAA,yBAGmB,KAAK,OAAO,eAAe,KAAK,EAAE;AAAA;AAAA,IAEvD;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,uBAAuB,EAAE;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAEA,UAAM,CAAC,WAAW,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,MAClD;AAAA,QACE,EAAE,SAAS,KAAK,IAAI,MAAM,QAAQ,MAAM,eAAe,KAAK,cAAc;AAAA,QAC1E;AAAA,MACF;AAAA,MACA;AAAA,QACE,EAAE,SAAS,KAAK,IAAI,MAAM,QAAQ,MAAM,eAAe,KAAK,cAAc;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,CAAC;AAED,kBAAc,GAAG,cAAc,WAAW,EAAE,MAAM,IAAI,CAAC;AACvD,kBAAc,GAAG,iBAAiB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE3E,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,IAAI,KAAK;AAAA,QACT,OAAO,KAAK;AAAA,QACZ,MAAM,QAAQ;AAAA,QACd,sBAAsB,QAAQ;AAAA,MAChC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,KAAK,2BAA2B,OAAO,MAAM;AAC/C,UAAM,QAAQC,WAAU,GAAG,eAAe;AAC1C,QAAI,CAAC,OAAO;AACV,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,2BAA2B,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,YAAY,KAAK;AAAA,IACnC,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA0B;AACxC,UAAI,SAAS,iBAAiB;AAC5B,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,qBAAqB,EAAE;AAAA,UAC7E;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,8BAA8B,EAAE;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,GAAG;AAAA,MACzBD;AAAA;AAAA;AAAA,yBAGmB,QAAQ,OAAO;AAAA;AAAA,IAEpC;AACA,UAAM,MAAM,UAAU,KAAK,CAAC;AAE5B,QAAI,CAAC,OAAO,QAAQ,kBAAkB,IAAI,eAAe;AACvD,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,8BAA8B,EAAE;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AAAA,MACzB,EAAE,SAAS,QAAQ,SAAS,MAAM,IAAI,MAAM,eAAe,IAAI,cAAc;AAAA,MAC7E;AAAA,IACF;AACA,kBAAc,GAAG,cAAc,cAAc,EAAE,MAAM,IAAI,CAAC;AAE1D,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AAGD,QAAM,iBAAiB,qBAAqB,EAAE;AAC9C,MAAI,KAAK,0BAA0B,gBAAgB,OAAO,MAAM;AAC9D,UAAM,OAAQ,EAAkE,IAAI,MAAM;AAE1F,UAAM,GAAG;AAAA,MACPA,qEAAoE,KAAK,EAAE;AAAA,IAC7E;AAEA,oBAAgB,GAAG,YAAY;AAC/B,oBAAgB,GAAG,iBAAiB,iBAAiB;AAErD,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AACH;;;AEtPA,SAAS,OAAAE,YAAW;AACpB,SAAS,mBAAmB;AAqB5B,SAAS,cAAc,GAAwB;AAC7C,SAAQ,EAAqC,IAAI,MAAM;AACzD;AAEA,SAAS,uBAA+B;AACtC,SAAO,YAAY,CAAC,EAAE,SAAS,WAAW;AAC5C;AAIO,SAAS,mBACd,KACA,IACA,mBACA,kBACM;AAIN,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,aAAa,cAAc,CAAC;AAElC,QAAI;AACJ,QAAI;AACF,aAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,IAC3B,QAAQ;AACN,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,uBAAuB,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,kBACJ,OAAO,KAAK,qBAAqB,WAAW,KAAK,mBAAmB;AACtE,UAAM,cAAc,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe;AAEhF,QAAI,CAAC,mBAAmB,CAAC,aAAa;AACpC,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BC,kDAAiD,WAAW,EAAE;AAAA,IAChE;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,QAAI,CAAC,WAAW,CAAE,MAAM,eAAe,iBAAiB,QAAQ,aAAa,GAAI;AAC/E,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,uBAAuB,EAAE;AAAA,QACrF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,MAAM,aAAa,WAAW;AAE9C,UAAM,GAAG;AAAA,MACPA;AAAA,sCACgC,OAAO;AAAA;AAAA;AAAA;AAAA,uBAItB,WAAW,EAAE;AAAA,IAChC;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EAC5B,CAAC;AAGD,MAAI,IAAI,oBAAoB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AACxE,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,OAAO,KAAkB,CAAC;AAAA,EAC5D,CAAC;AAGD,MAAI,IAAI,wBAAwB,kBAAkB,YAAY,GAAG,OAAO,MAAM;AAC5E,UAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAE3B,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBA;AAAA;AAAA;AAAA;AAAA,yBAImB,EAAE;AAAA;AAAA,IAEvB;AACA,UAAM,MAAM,OAAO,KAAK,CAAC;AAEzB,QAAI,CAAC,KAAK;AACR,aAAO,EAAE;AAAA,QACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,IAAI,CAAC;AAAA,EACvC,CAAC;AAGD,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,MAC3B,QAAQ;AACN,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,4BAA4B,EAAE;AAAA,UACvF;AAAA,QACF;AAAA,MACF;AAEA,YAAM,QACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI;AACrE,YAAM,WAAW,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AAE7D,UAAI,CAAC,OAAO;AACV,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,qBAAqB,EAAE;AAAA,UAChF;AAAA,QACF;AAAA,MACF;AACA,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,gBAAgB,SAAS,oBAAoB,EAAE;AAAA,UAC3E;AAAA,QACF;AAAA,MACF;AAEA,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,yCAAwC,QAAQ;AAAA,MAClD;AACA,YAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,gBAAgB,SAAS,SAAS,QAAQ,oBAAoB;AAAA,UAC/E;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,qBAAqB;AAC1C,YAAM,eAAe,MAAM,aAAa,YAAY;AAEpD,YAAM,eAAe,MAAM,GAAG;AAAA,QAC5BA;AAAA;AAAA;AAAA;AAAA,oCAI4B,KAAK,KAAK,YAAY,KAAK,QAAQ,EAAE;AAAA;AAAA;AAAA,MAGnE;AACA,YAAM,UAAU,aAAa,KAAK,CAAC;AAUnC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,yBAAyB,EAAE;AAAA,UAClF;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE;AAAA,QACP;AAAA,UACE,IAAI;AAAA,UACJ,MAAM;AAAA,YACJ,IAAI,QAAQ;AAAA,YACZ,OAAO,QAAQ;AAAA,YACf,MAAM;AAAA,YACN,sBAAsB,QAAQ;AAAA,YAC9B,oBAAoB;AAAA,YACpB,YAAY,QAAQ;AAAA,YACpB,YAAY,QAAQ;AAAA,UACtB;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI;AACJ,UAAI;AACF,eAAQ,MAAM,EAAE,IAAI,KAAK;AAAA,MAC3B,QAAQ;AACN,eAAO,CAAC;AAAA,MACV;AAGA,UAAI,WAAW,OAAO,MAAM,KAAK,SAAS,QAAW;AACnD,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO,EAAE,MAAM,0BAA0B,SAAS,mCAAmC;AAAA,UACvF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,iBAAiB,MAAM,GAAG;AAAA,QAC9BA,uDAAsD,EAAE;AAAA,MAC1D;AACA,YAAM,WAAW,eAAe,KAAK,CAAC;AAItC,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,WACJ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,KAAK,EAAE,YAAY,IAAI,SAAS;AAE9E,UAAI,YAAY,SAAS;AACzB,UAAI,aAAa;AAEjB,UAAI,OAAO,KAAK,SAAS,YAAY,KAAK,MAAM;AAC9C,cAAM,aAAa,MAAM,GAAG;AAAA,UAC1BA,yCAAwC,KAAK,IAAI;AAAA,QACnD;AACA,cAAM,UAAU,WAAW,KAAK,CAAC;AAEjC,YAAI,CAAC,SAAS;AACZ,iBAAO,EAAE;AAAA,YACP;AAAA,cACE,IAAI;AAAA,cACJ,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN,SAAS,SAAS,KAAK,IAAI;AAAA,cAC7B;AAAA,YACF;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,oBAAY,QAAQ;AACpB,qBAAa;AAAA,MACf;AAEA,UAAI,YAAY;AACd,cAAM,GAAG;AAAA,UACPA;AAAA,oCAC0B,QAAQ;AAAA,oCACR,SAAS;AAAA;AAAA;AAAA,2BAGlB,EAAE;AAAA,QACrB;AAAA,MACF,OAAO;AACL,cAAM,GAAG;AAAA,UACPA;AAAA,iCACuB,QAAQ;AAAA,iCACR,SAAS;AAAA;AAAA,2BAEf,EAAE;AAAA,QACrB;AAAA,MACF;AAEA,YAAM,gBAAgB,MAAM,GAAG;AAAA,QAC7BA;AAAA;AAAA;AAAA;AAAA,2BAImB,EAAE;AAAA;AAAA,MAEvB;AACA,YAAM,UAAU,cAAc,KAAK,CAAC;AAEpC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3C;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,cAAc;AAAA,IAChC,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI,WAAW,OAAO,IAAI;AACxB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,oCAAmC,EAAE;AAAA,MACvC;AAEA,UAAK,OAAO,KAAmB,WAAW,GAAG;AAC3C,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF;AAGA,MAAI;AAAA,IACF;AAAA,IACA,kBAAkB,YAAY;AAAA,IAC9B,iBAAiB;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,KAAK,EAAE,IAAI,MAAM,IAAI;AAC3B,YAAM,aAAa,cAAc,CAAC;AAElC,UAAI,WAAW,OAAO,IAAI;AACxB,eAAO,EAAE;AAAA,UACP;AAAA,YACE,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,YACX;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,iBAAiB,MAAM,GAAG;AAAA,QAC9BA,uCAAsC,EAAE;AAAA,MAC1C;AACA,YAAM,WAAW,eAAe,KAAK,CAAC;AAEtC,UAAI,CAAC,UAAU;AACb,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,aAAa,SAAS,kBAAkB,EAAE;AAAA,UACtE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,qBAAqB;AAC1C,YAAM,eAAe,MAAM,aAAa,YAAY;AAEpD,YAAM,GAAG;AAAA,QACPA;AAAA,yCACiC,YAAY;AAAA;AAAA;AAAA;AAAA,yBAI5B,EAAE;AAAA,MACrB;AAEA,aAAO,EAAE,KAAK,EAAE,IAAI,MAAM,MAAM,EAAE,oBAAoB,aAAa,EAAE,CAAC;AAAA,IACxE;AAAA,EACF;AACF;;;AC1aA,SAAS,OAAAC,YAAW;AASpB,IAAM,eAAuB,MAAM;AACjC,MAAI;AAAE,WAAO;AAAA,EAAgB,QAAQ;AAAE,WAAO;AAAA,EAAQ;AACxD,GAAG;AAcI,SAAS,oBACd,KACA,QACA,UACA,IACM;AACN,MAAI,IAAI,qBAAqB,OAAO,MAAM;AACxC,UAAM,aAAc,EAAgD,IAAI,MAAM;AAC9E,UAAM,aAAa,SAAS,WAAW,IAAI;AAC3C,UAAM,cAAc,YAAY,mBAAmB;AAGnD,UAAM,QAAQ,OAAO,OAAO,QAAQ,EACjC,OAAO,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,kBAAkB,WAAW,EACnE,KAAK,CAAC,GAAG,MAAM,EAAE,kBAAkB,EAAE,eAAe,EACpD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,EAAE;AAGpF,UAAM,YAAY,OAAO,OAAO,QAAQ,EACrC,KAAK,CAAC,GAAG,MAAM,EAAE,kBAAkB,EAAE,eAAe,EACpD,IAAI,CAAC,OAAO;AAAA,MACX,MAAM,EAAE;AAAA,MACR,OAAO,EAAE;AAAA,MACT,iBAAiB,EAAE;AAAA,MACnB,WAAW,EAAE;AAAA,MACb,aAAa,EAAE;AAAA,IACjB,EAAE;AAEJ,UAAM,aAAa,MAAM,GAAG;AAAA,MAC1BA,gEAA+D,WAAW,EAAE;AAAA,IAC9E;AACA,UAAM,UAAU,WAAW,KAAK,CAAC;AAIjC,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ,UAAU,OAAO,QAAQ;AAAA,QACzB,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA,MAAM;AAAA,UACJ,IAAI,WAAW;AAAA,UACf,OAAO,SAAS,SAAS;AAAA,UACzB,MAAM,WAAW;AAAA,UACjB,sBAAsB,SAAS,wBAAwB;AAAA,QACzD;AAAA,QACA,OAAO;AAAA,UACL,eAAe,OAAO,eAAe;AAAA,UACrC,mBAAmB,OAAO,oBAAoB;AAAA,QAChD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;;;AChFA,SAAS,OAAAC,YAAW;AAWpB,SAAS,WAAW,QAAsC;AACxD,SAAO,OAAO,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AAChD;AAIO,SAAS,oBACd,KACA,UACA,IACM;AAIN,MAAI,IAAI,qBAAqB,CAAC,MAAM;AAClC,UAAM,gBAAgB,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,CAAC,QAAQ;AAAA,MACvE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,MACb,IAAI,GAAG;AAAA,MACP,eAAe,GAAG;AAAA,MAClB,QAAQ,WAAW,GAAG,MAAM;AAAA,IAC9B,EAAE;AAEF,UAAM,iBAAiB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,CAAC,QAAQ;AAAA,MACzE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,eAAe,GAAG;AAAA,MAClB,QAAQ,WAAW,GAAG,MAAM;AAAA,IAC9B,EAAE;AAEF,UAAM,kBAAkB,OAAO,OAAO,SAAS,eAAe,EAAE,IAAI,CAAC,QAAQ;AAAA,MAC3E,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,eAAe,GAAG;AAAA,MAClB,QAAQ,WAAW,GAAG,MAAM;AAAA,IAC9B,EAAE;AAEF,UAAM,aAAa,OAAO,OAAO,SAAS,UAAU,EAAE,IAAI,CAAC,QAAQ;AAAA,MACjE,MAAM,GAAG;AAAA,MACT,OAAO,GAAG;AAAA,MACV,QAAQ,GAAG;AAAA,IACb,EAAE;AAEF,WAAO,EAAE,KAAK;AAAA,MACZ,IAAI;AAAA,MACJ,MAAM,EAAE,eAAe,gBAAgB,iBAAiB,WAAW;AAAA,IACrE,CAAC;AAAA,EACH,CAAC;AAGD,MAAI,IAAI,sBAAsB,OAAO,MAAM;AACzC,UAAM,OAAO,MAAM,QAAQ;AAAA,MACzB,OAAO,OAAO,SAAS,aAAa,EAAE,IAAI,OAAO,OAAO;AACtD,cAAM,SAAS,MAAM,GAAG;AAAA,UACtBA,0CAAyCA,KAAI,IAAI,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC;AAAA,QAC3E;AACA,cAAM,QAAQ,OAAQ,OAAO,KAAK,CAAC,EAAiC,KAAK;AACzE,eAAO,EAAE,MAAM,GAAG,MAAM,OAAO,GAAG,OAAO,UAAU,GAAG,UAAU,MAAM;AAAA,MACxE,CAAC;AAAA,IACH;AACA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AAED,MAAI,IAAI,uBAAuB,OAAO,MAAM;AAC1C,UAAM,OAAO,MAAM,QAAQ;AAAA,MACzB,OAAO,OAAO,SAAS,cAAc,EAAE,IAAI,OAAO,OAAO;AACvD,cAAM,SAAS,MAAM,GAAG;AAAA,UACtBA,0CAAyCA,KAAI,IAAI,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC;AAAA,QAC3E;AACA,cAAM,QAAQ,OAAQ,OAAO,KAAK,CAAC,EAAiC,KAAK;AACzE,eAAO,EAAE,MAAM,GAAG,MAAM,OAAO,GAAG,OAAO,MAAM;AAAA,MACjD,CAAC;AAAA,IACH;AACA,WAAO,EAAE,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EAClC,CAAC;AACH;;;ACvFA,OAAO,YAAY;AACnB,SAAS,OAAAC,YAAqB;AAmC9B,IAAMC,mBAAkB,oBAAI,IAAI,CAAC,SAAS,cAAc,YAAY,CAAC;AAErE,SAAS,UAAU,MAAc,SAAwB;AACvD,QAAM,MAAM,IAAI,MAAM,OAAO;AAC5B,EAAC,IAAiC,OAAO;AAC1C,SAAO;AACT;AAIA,SAASC,YAAW,MAAsB;AACxC,MAAI,CAAC,qBAAqB,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI,MAAM,0BAA0B,IAAI,EAAE;AAAA,EAClD;AACA,SAAO,IAAI,KAAK,QAAQ,MAAM,IAAI,CAAC;AACrC;AAGA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,oBAAoB,KAAK,IAAI,GAAG;AACnC,UAAM,UAAU,wBAAwB,8BAA8B,IAAI,EAAE;AAAA,EAC9E;AACA,SAAO,IAAI,IAAI;AACjB;AAEA,SAAS,gBACP,gBACA,SACA,QACO;AACP,QAAM,QAAe,CAAC;AAEtB,MAAI,gBAAgB;AAClB,UAAM,KAAKC,sBAAqB;AAAA,EAClC;AAEA,MAAI,UAAU,OAAO,KAAK,KAAK,MAAM,MAAM,OAAO,QAAQ,SAAS,GAAG;AACpE,UAAM,UAAU,IAAI,OAAO,KAAK,KAAK,CAAC;AACtC,UAAM,UAAU,OAAO,QAAQ,IAAI,CAAC,QAAQA,OAAMA,KAAI,IAAI,WAAW,GAAG,CAAC,CAAC,UAAU,OAAO,EAAE;AAC7F,UAAM,KAAKA,QAAOA,KAAI,KAAK,SAASA,UAAS,CAAC,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS;AACX,eAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,YAAM,MAAMA,KAAI,IAAI,WAAW,KAAK,CAAC;AAErC,UAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAI,MAAM,WAAW,EAAG;AACxB,cAAM,SAASA,KAAI;AAAA,UACjB,MAAM,IAAI,CAAC,MAAMA,OAAM,CAAC,EAAE;AAAA,UAC1BA;AAAA,QACF;AACA,cAAM,KAAKA,OAAM,GAAG,QAAQ,MAAM,GAAG;AAAA,MACvC,WACE,OAAO,UAAU,YACjB,UAAU,MACV;AACA,cAAM,KAAK;AACX,YAAI,GAAG,OAAO,OAAW,OAAM,KAAKA,OAAM,GAAG,MAAM,GAAG,EAAE,EAAE;AAC1D,YAAI,GAAG,QAAQ,OAAW,OAAM,KAAKA,OAAM,GAAG,OAAO,GAAG,GAAG,EAAE;AAC7D,YAAI,GAAG,OAAO,OAAW,OAAM,KAAKA,OAAM,GAAG,MAAM,GAAG,EAAE,EAAE;AAC1D,YAAI,GAAG,QAAQ,OAAW,OAAM,KAAKA,OAAM,GAAG,OAAO,GAAG,GAAG,EAAE;AAAA,MAC/D,OAAO;AACL,cAAM,KAAKA,OAAM,GAAG,MAAM,KAAK,EAAE;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,OAAmB;AACxC,SAAO,MAAM,SAAS,IAClBA,cAAaA,KAAI,KAAK,OAAOA,WAAU,CAAC,KACxCA;AACN;AAIO,SAAS,+BACd,IACA,WACA,UAAoC,CAAC,GACf;AACtB,QAAM,EAAE,YAAY,CAAC,GAAG,qBAAqB,OAAO,gBAAgB,IAAI;AAExE,WAAS,WAAgB;AACvB,WAAOA,KAAI,IAAID,YAAW,SAAS,CAAC;AAAA,EACtC;AAEA,iBAAe,YACb,MACA,SACA,OACoC;AACpC,QAAI,KAAK,WAAW,EAAG,QAAO;AAG9B,eAAW,aAAa,SAAS;AAC/B,UAAI,CAAC,UAAU,SAAS,GAAG;AACzB,cAAM,UAAU,yBAAyB,IAAI,SAAS,iCAAiC;AAAA,MACzF;AAAA,IACF;AAIA,eAAW,CAAC,WAAW,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;AACxD,UAAI,IAAI,SAAS,SAAS;AACxB,cAAM,qBAAqB,IAAI,MAAM,WAAW,KAAK,OAAO,kBAAkB;AAAA,MAChF,WAAW,CAAC,QAAQ,SAAS,SAAS,GAAG;AACvC,cAAM,uBAAuB,IAAI,MAAM,WAAW,GAAG;AAAA,MACvD;AAAA,IACF;AAGA,eAAW,aAAa,SAAS;AAC/B,YAAM,MAAM,UAAU,SAAS;AAC/B,UAAI,IAAI,SAAS,SAAS;AACxB,cAAM,qBAAqB,IAAI,MAAM,WAAW,KAAK,OAAO,kBAAkB;AAAA,MAChF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,SAAS,MAAoD;AACjE,YAAM;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,UAAU,CAAC;AAAA,QACX;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,aAAa;AAAA,QACb;AAAA,MACF,IAAI;AAKJ,YAAM,UAAU,mBAAmBD;AACnC,UAAI,CAAC,QAAQ,IAAI,OAAiB,GAAG;AAOnC,cAAM,UAAU,sBAAsB,IAAI,OAAO,oBAAoB;AAAA,MACvE;AAEA,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,QAAQ,gBAAgB,gBAAgB,SAAS,MAAM;AAC7D,YAAM,QAAQ,cAAc,KAAK;AACjC,YAAM,UAAUE,KAAI,IAAID,YAAW,OAAO,CAAC;AAC3C,YAAM,UAAUC,KAAI,IAAI,eAAe,SAAS,SAAS,KAAK;AAE9D,YAAM,cAAc,MAAM,GAAG;AAAA,QAC3BA,qCAAoC,SAAS,CAAC,GAAG,KAAK;AAAA,MACxD;AACA,YAAM,QAAQ,OAAQ,YAAY,KAAK,CAAC,IAAgC,OAAO,KAAK,CAAC;AAErF,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,qBAAoB,SAAS,CAAC,GAAG,KAAK,aAAa,OAAO,IAAI,OAAO,UAAU,QAAQ,WAAW,MAAM;AAAA,MAC1G;AAEA,YAAM,OAAO,WAAW;AACxB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AAEtC,YAAM,cAAc,KAAK,KAAK,QAAQ,QAAQ;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,IAAY,UAAoB,CAAC,GAAsB;AACnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,eAAe,EAAE;AAAA,MACjD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,IAEA,MAAM,WAAW,MAAc,UAAoB,CAAC,GAAsB;AACxE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,iBAAiB,IAAI;AAAA,MACrD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,IAEA,MAAM,OAAO,MAAkC;AAC7C,YAAM,SAAkC;AAAA,QACtC,GAAI;AAAA,QACJ,IAAI,OAAO,WAAW;AAAA,QACtB,YAAY,oBAAI,KAAK;AAAA,QACrB,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS;AACxE,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAMA,KAAI,IAAID,YAAW,CAAC,CAAC,CAAC,GAAGC,QAAO;AAC9E,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAMA,OAAM,CAAC,EAAE,GAAGA,QAAO;AAEnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,mBAAkB,SAAS,CAAC,KAAK,OAAO,aAAa,OAAO;AAAA,MAC9D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAAY,MAAyC;AAChE,YAAM,SAAkC;AAAA,QACtC,GAAI;AAAA,QACJ,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,QAAQ,MAAM,MAAS;AACvF,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO,KAAK,QAAQ,EAAE;AAAA,MACxB;AAEA,YAAM,aAAaA,KAAI;AAAA,QACrB,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAMA,OAAMA,KAAI,IAAID,YAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;AAAA,QAC7DC;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,cAAa,SAAS,CAAC,QAAQ,UAAU,eAAe,EAAE;AAAA,MAC5D;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAA2B;AACtC,YAAM,GAAG,QAAQA,mBAAkB,SAAS,CAAC,eAAe,EAAE,EAAE;AAAA,IAClE;AAAA,IAEA,MAAM,QAAQ,OAAuB,CAAC,GAAiB;AACrD,YAAM,EAAE,UAAU,CAAC,GAAG,eAAe,IAAI;AACzC,YAAM,QAAQ,gBAAgB,gBAAgB,QAAW,MAAS;AAClE,YAAM,QAAQ,cAAc,KAAK;AAEjC,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,SAAS,CAAC,GAAG,KAAK;AAAA,MACxC;AAEA,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,oBAAI,IAAqB;AACvC,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AChTA,OAAOC,aAAY;AACnB,SAAS,OAAAC,YAAW;AAUb,SAAS,sBAAsB,IAA8C;AAClF,QAAM,QAAQA,KAAI,IAAI,SAAS;AAE/B,SAAO;AAAA,IACL,MAAM,SAAS,OAA6B,CAAC,GAAwC;AACnF,YAAM,EAAE,OAAO,GAAG,WAAW,IAAI,MAAM,SAAS,IAAI;AACpD,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,CAAC;AACf,UAAI,KAAM,OAAM,KAAKA,cAAa,IAAI,EAAE;AACxC,UAAI,SAAU,OAAM,KAAKA,yBAAwB;AAEjD,YAAM,QACJ,MAAM,SAAS,IAAIA,cAAaA,KAAI,KAAK,OAAOA,WAAU,CAAC,KAAKA;AAElE,YAAM,cAAc,MAAM,GAAG,QAAQA,qCAAoC,KAAK,GAAG,KAAK,EAAE;AACxF,YAAM,QAAQ;AAAA,QACX,YAAY,KAAK,CAAC,IAAgC,OAAO,KAAK;AAAA,MACjE;AAEA,YAAM,aAAa,MAAM,GAAG;AAAA,QAC1BA,qBAAoB,KAAK,GAAG,KAAK,mCAAmC,QAAQ,WAAW,MAAM;AAAA,MAC/F;AAEA,YAAM,cAAc,KAAK,KAAK,QAAQ,QAAQ;AAC9C,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,MAAM,WAAW;AAAA,QACjB,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,IAAuC;AACnD,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,qBAAoB,KAAK,eAAe,EAAE;AAAA,MAC5C;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,MAA4C;AACvD,YAAM,SAAkC;AAAA,QACtC,GAAG;AAAA,QACH,IAAID,QAAO,WAAW;AAAA,QACtB,iBAAiB;AAAA,QACjB,YAAY,oBAAI,KAAK;AAAA,QACrB,YAAY,oBAAI,KAAK;AAAA,MACvB;AACA,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS;AACxE,YAAM,UAAUC,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAMA,KAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAGA,QAAO;AACzE,YAAM,UAAUA,KAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAMA,OAAM,CAAC,EAAE,GAAGA,QAAO;AAEnE,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,mBAAkB,KAAK,KAAK,OAAO,aAAa,OAAO;AAAA,MACzD;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAAY,MAAqD;AAC5E,YAAM,SAAkC,EAAE,GAAG,MAAM,YAAY,oBAAI,KAAK,EAAE;AAC1E,YAAM,UAAU,OAAO,QAAQ,MAAM,EAAE;AAAA,QACrC,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,QAAQ,MAAM;AAAA,MAClC;AACA,UAAI,QAAQ,WAAW,EAAG,QAAO,KAAK,QAAQ,EAAE;AAEhD,YAAM,aAAaA,KAAI;AAAA,QACrB,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAMA,OAAMA,KAAI,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AAAA,QACxDA;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,GAAG;AAAA,QACtBA,cAAa,KAAK,QAAQ,UAAU,eAAe,EAAE;AAAA,MACvD;AACA,UAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AACrC,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB;AAAA,IAEA,MAAM,OAAO,IAA2B;AACtC,YAAM,GAAG,QAAQA,mBAAkB,KAAK,eAAe,EAAE,EAAE;AAAA,IAC7D;AAAA,IAEA,MAAM,wBAAwB,KAA8B;AAC1D,UAAI,IAAI,WAAW,EAAG;AACtB,YAAM,SAASA,KAAI,KAAK,IAAI,IAAI,CAAC,OAAOA,OAAM,EAAE,EAAE,GAAGA,QAAO;AAC5D,YAAM,GAAG;AAAA,QACPA,cAAa,KAAK,+EAA+E,MAAM;AAAA,MACzG;AAAA,IACF;AAAA,IAEA,MAAM,wBAAwB,KAA8B;AAC1D,UAAI,IAAI,WAAW,EAAG;AACtB,YAAM,SAASA,KAAI,KAAK,IAAI,IAAI,CAAC,OAAOA,OAAM,EAAE,EAAE,GAAGA,QAAO;AAC5D,YAAM,GAAG;AAAA,QACPA,cAAa,KAAK,4FAA4F,MAAM;AAAA,MACtH;AAAA,IACF;AAAA,EACF;AACF;;;AzB5DA,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUvB,SAAS,aAAa,SAAqD;AAChF,MAAI,CAAC,QAAQ,SAAS;AACpB,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,cAAc,kBAAkB,MAAM;AAC5C,QAAM,EAAE,SAAS,UAAU,IAAI,WAAW,OAAO,KAAK,IAAI;AAC1D,QAAM,UAAU,QAAQ,QAAQ;AAChC,QAAM,cAAc,OAAO;AAI3B,QAAM,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAI7D,QAAM,cAAc,QAAQ,aAAa,oBAAI,IAAI;AACjD,2BAAyB,UAAU,WAAW;AAC9C,QAAM,uBAAuB,2BAA2B,WAAW;AAEnE,QAAM,MAAM,IAAI,KAAK;AAWrB,QAAM,gBAAgB,QAAQ,mBAAmB,KAAK,CAAC;AACvD,QAAM,kBAAkB,QAAQ,SAAS,YAAY,QAAQ,QAAQ,QAAQ,aAAa;AAC1F,MAAI;AAAA,IACF;AAAA,IACA,gCAAgC;AAAA,MAC9B,YAAY;AAAA,MACZ,GAAI,mBAAmB,EAAE,cAAc,WAAW;AAAA,IACpD,CAAC;AAAA,EACH;AAGA,MAAI,IAAI,KAAK,qBAAqB,QAAQ,EAAE,QAAQ,KAAK,SAAS,KAAK,CAAC,CAAC;AACzE,MAAI,QAAQ,YAAY;AAKxB,QAAM,gBAAgB,qBAAqB,SAAS;AAIpD,QAAM,iBAAiB,qBAAqB,EAAE;AAC9C,QAAM,oBAAoB,2BAA2B,aAAa;AAElE,QAAM,cAAc,OAAO,WAA2C;AACpE,UAAM,SAAS,MAAM,GAAG;AAAA,MACtBC;AAAA;AAAA;AAAA,yBAGmB,MAAM;AAAA;AAAA,IAE3B;AACA,WAAQ,OAAO,KAAK,CAAC,GAAoC,QAAQ;AAAA,EACnE;AAEA,QAAM,mBAAmB,0BAA0B,eAAe,WAAW;AAgB7E,QAAM,eAA4C,OAAO,YAAY;AAAA,IACnE,GAAG,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAChE;AAAA,MACA,kBAAmB,GAAyB,MAAM;AAAA,IACpD,CAAC;AAAA,IACD,GAAG,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MACjE;AAAA,MACA,kBAAmB,GAA0B,MAAM;AAAA,IACrD,CAAC;AAAA,IACD,GAAG,OAAO,QAAQ,SAAS,eAAe,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAClE;AAAA,MACA,kBAAmB,GAA2B,MAAM;AAAA,IACtD,CAAC;AAAA,EACH,CAAC;AAID,QAAM,aAAyB,gBAAgB,UAAU,YAAY;AAMrE,QAAM,qBAAqB,CAAC,aAC1B,IAAI;AAAA,IACF,CAAC,GAAG,eAAe,EAAE,IAAI,CAAC,UAAU,aAAa,QAAQ,EAAG,UAAU,KAAK,KAAK,KAAK;AAAA,EACvF;AAIF,QAAM,eAAe,OAAO;AAAA,IAC1B,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC7D;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,YAAY;AAAA,QAC1E,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,gBAAgB,OAAO;AAAA,IAC3B,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC9D;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,YAAY;AAAA,QAC3E,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,QAAQ,EAAE,GAAG,cAAc,GAAG,cAAc;AAClD,QAAM,YAAY,sBAAsB,EAAE;AAQ1C,QAAM,qBAAqB,OAAO;AAAA,IAChC,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC7D;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,YAAY;AAAA,QAC1E,WAAW,kBAAmB,GAAyB,QAAQ,QAAQ;AAAA,QACvE,oBAAoB;AAAA,QACpB,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,sBAAsB,OAAO;AAAA,IACjC,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAC9D;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,YAAY;AAAA,QAC3E,WAAW,kBAAmB,GAA0B,QAAQ,QAAQ;AAAA,QACxE,oBAAoB;AAAA,QACpB,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,QAAM,cAAc,EAAE,GAAG,oBAAoB,GAAG,oBAAoB;AAoBpE,QAAM,eAAe,OAAO,YAAY;AAAA,IACtC,GAAG,OAAO,QAAQ,SAAS,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MAChE;AAAA,MACA,+BAA+B,IAAK,GAAyB,GAAG,YAAY;AAAA,QAC1E,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,IACD,GAAG,OAAO,QAAQ,SAAS,cAAc,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM;AAAA,MACjE;AAAA,MACA,+BAA+B,IAAK,GAA0B,GAAG,YAAY;AAAA,QAC3E,iBAAiB,mBAAmB,QAAQ;AAAA,MAC9C,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AAWD,qBAAmB,KAAK,EAAE;AAG1B,MAAI,IAAI,gBAAgB,cAAc;AACtC,MAAI,IAAI,gBAAgB,uBAAuB;AAI/C,MAAI,IAAI,YAAY,QAAQ,GAAG,CAAC,MAAM;AACpC,UAAM,QAAiC,CAAC;AAExC,eAAW,MAAM,OAAO,OAAO,SAAS,aAAa,GAA0B;AAC7E,YAAM,OAAO,GAAG;AAChB,UAAI,GAAG,UAAU;AACf,cAAM,YAAY,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AAAA,MAChG,OAAO;AACL,cAAM,YAAY,WAAW,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,kBAAkB,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AACzG,cAAM,YAAY,KAAK,IAAI,EAAE,QAAQ,SAAS,QAAQ,CAAC,IAAI;AAAA,UACzD,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,KAAK,EAAE;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAEA,eAAW,MAAM,OAAO,OAAO,SAAS,cAAc,GAA2B;AAC/E,YAAM,YAAY,mBAAmB,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,kBAAkB,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE;AACpH,YAAM,YAAY,aAAa,GAAG,IAAI,EAAE,QAAQ,OAAO,MAAM,CAAC,IAAI;AAAA,QAChE,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,UAAU,MAAM,CAAC,GAAG,KAAK,EAAE;AAAA,MAC5D;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,oBAAoB,MAAM,CAAC,OAAO,EAAE,EAAE;AAC/F,UAAM,YAAY,UAAU,EAAE,QAAQ,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,wBAAwB,MAAM,CAAC,OAAO,EAAE,EAAE;AAEpH,WAAO,EAAE,KAAK;AAAA,MACZ,SAAS;AAAA,MACT,MAAM,EAAE,OAAO,2BAA2B,SAAS,QAAQ;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,MAAI;AAAA,IAAI;AAAA,IAA2B,CAAC,MAClC,EAAE,KAAK;AAAA,MACL,SAAS;AAAA,MACT,MAAM,EAAE,OAAO,0BAA0B,SAAS,QAAQ;AAAA,MAC1D,OAAO,CAAC;AAAA,IACV,CAAC;AAAA,EACH;AAIA,8BAA4B,KAAK,UAAU,aAAa,YAAY,aAAa,eAAe,oBAAoB;AACpH,4BAA0B,KAAK,WAAW,aAAa,aAAa;AAsBpE,MAAI,QAAQ,SAAS,SAAS;AAC5B,UAAM,aAAa,QAAQ;AAC3B,QAAI,aAA6B;AACjC,QAAI,YAAqB;AACzB,UAAM,QAAQ,OAAO,wBAAsB,EACxC,KAAK,CAAC,EAAE,qBAAqB,MAAM;AAClC,mBAAa,qBAAqB,UAAU,cAAc,cAAc,sBAAsB,IAAI,UAAU;AAAA,IAC9G,CAAC,EACA,MAAM,CAAC,QAAiB;AACvB,kBAAY;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAQ,OAAO,MAAM,yEAAoE,OAAO;AAAA,CAAI;AAAA,IACtG,CAAC;AACH,UAAM,gBAAyB,OAAO,MAAM;AAC1C,UAAI,CAAC,cAAc,CAAC,UAAW,OAAM;AACrC,UAAI,CAAC,YAAY;AACf,eAAO,EAAE;AAAA,UACP,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,uBAAuB,SAAS,sCAAsC,EAAE;AAAA,UACpG;AAAA,QACF;AAAA,MACF;AACA,aAAO,WAAW,GAAG,YAAY;AAAA,MAAC,CAAC;AAAA,IACrC;AACA,QAAI,eAAe;AACjB,UAAI,IAAI,YAAY,eAAe,aAAa;AAAA,IAClD,OAAO;AACL,UAAI,IAAI,YAAY,aAAa;AAAA,IACnC;AAAA,EACF;AAKA;AAAA,IACE;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,GAAI,gBAAgB,UAAa,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,MAK/C,kBAAkB,QAAQ,SAAS;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,sBAAoB,KAAK,UAAU,EAAE;AACrC,qBAAmB,KAAK,IAAI,mBAAmB,gBAAgB;AAE/D,6BAA2B,KAAK,UAAU,OAAO,YAAY,WAAW,mBAAmB,EAAE;AAC7F,2BAAyB,KAAK,WAAW,SAAS,mBAAmB,WAAW;AAEhF,SAAO,EAAE,QAAQ,IAAI;AACvB;;;A0BlYO,SAAS,aAAa,UAA6B,CAAC,GAAkB;AAC3E,QAAM,OAAO,QAAQ,QAAQ,OAAO,QAAQ,IAAI,MAAM,KAAK,GAAI;AAC/D,QAAM,YAAY,QAAQ,YAAY,oBAAoB,IAAI;AAE9D,QAAM,OAAmB;AAAA,IACvB,QAAQ,QAAQ,MAAM,WAAW,QAAQ,IAAI,gBAAgB,KAAK;AAAA,IAClE,SAAS,QAAQ,MAAM,WAAW;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,aAAa,QAAQ,MAAM,eAAe;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,gBAAwB;AACtB,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;ACHA,SAAS,eAAe,KAAiD;AACvE,QAAM,aAAa,QAAQ,IAAI,UAAU,MAAM;AAC/C,SAAO;AAAA,IACL,SAAS,IAAI,WAAW;AAAA,IACxB,UAAU,IAAI,YAAY;AAAA,IAC1B,eAAe,IAAI,iBAAiB;AAAA,IACpC,UAAU,IAAI,YAAY;AAAA,IAC1B,eAAe,IAAI,iBAAiB,IAAI,YAAY;AAAA,EACtD;AACF;AAEO,SAAS,iBAAiB,UAA6B,CAAC,GAAe;AAC5E,QAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,QAAM,QAAQ,QAAQ,OAAO,kBAAkB,SAC3C,EAAE,eAAe,QAAQ,MAAM,cAAc,IAC7C;AAEJ,SAAO;AAAA,IACL;AAAA,IACA,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,IACnC,GAAI,QAAQ,cAAc,UAAa,EAAE,WAAW,QAAQ,UAAU;AAAA,IACtE,GAAI,QAAQ,YAAY,UAAa,EAAE,SAAS,eAAe,QAAQ,OAAO,EAAE;AAAA,EAClF;AACF;","names":["sql","value","parsePagination","sql","sql","row","sign","getCookie","sql","sql","getCookie","sql","sql","sql","sql","sql","SORTABLE_FIELDS","quoteIdent","sql","crypto","sql","sql"]}