@contember/cli 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/production/src/lib/tenant/stdin.cjs

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const readStdinText = async () => {
+  const stream = process.stdin;
+  const decoder = new TextDecoder();
+  let text = "";
+  for await (const chunk of stream) {
+    text += typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true });
+  }
+  return text + decoder.decode();
+};
+exports.readStdinText = readStdinText;
+//# sourceMappingURL=stdin.cjs.map

package/dist/production/src/lib/tenant/stdin.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdin.cjs","sources":["../../../../../../packages/cli/src/lib/tenant/stdin.ts"],"sourcesContent":["/** Reads the whole stdin. Injected into the commands so a test never has to touch the real stream. */\nexport type StdinReader = () => Promise<string>\n\n/**\n * Reads stdin to the end, verbatim. Only ever reached behind an explicit `--*-stdin` flag, so a normal\n * run never blocks on it — a command that reads stdin \"just in case\" hangs every non-TTY caller.\n */\nexport const readStdinText: StdinReader = async () => {\n\tconst stream: AsyncIterable<string | Uint8Array> = process.stdin\n\tconst decoder = new TextDecoder()\n\tlet text = ''\n\tfor await (const chunk of stream) {\n\t\ttext += typeof chunk === 'string' ? chunk : decoder.decode(chunk, { stream: true })\n\t}\n\treturn text + decoder.decode()\n}\n"],"names":[],"mappings":";;AAOO,MAAM,gBAA6B,YAAY;AACrD,QAAM,SAA6C,QAAQ;AAC3D,QAAM,UAAU,IAAI,YAAA;AACpB,MAAI,OAAO;AACX,mBAAiB,SAAS,QAAQ;AACjC,YAAQ,OAAO,UAAU,WAAW,QAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,MAAM;AAAA,EACnF;AACA,SAAO,OAAO,QAAQ,OAAA;AACvB;;"}

package/dist/production/src/lib/tenant/stdin.js

@@ -0,0 +1,13 @@
+const readStdinText = async () => {
+  const stream = process.stdin;
+  const decoder = new TextDecoder();
+  let text = "";
+  for await (const chunk of stream) {
+    text += typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true });
+  }
+  return text + decoder.decode();
+};
+export {
+  readStdinText
+};
+//# sourceMappingURL=stdin.js.map

package/dist/production/src/lib/tenant/stdin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdin.js","sources":["../../../../../../packages/cli/src/lib/tenant/stdin.ts"],"sourcesContent":["/** Reads the whole stdin. Injected into the commands so a test never has to touch the real stream. */\nexport type StdinReader = () => Promise<string>\n\n/**\n * Reads stdin to the end, verbatim. Only ever reached behind an explicit `--*-stdin` flag, so a normal\n * run never blocks on it — a command that reads stdin \"just in case\" hangs every non-TTY caller.\n */\nexport const readStdinText: StdinReader = async () => {\n\tconst stream: AsyncIterable<string | Uint8Array> = process.stdin\n\tconst decoder = new TextDecoder()\n\tlet text = ''\n\tfor await (const chunk of stream) {\n\t\ttext += typeof chunk === 'string' ? chunk : decoder.decode(chunk, { stream: true })\n\t}\n\treturn text + decoder.decode()\n}\n"],"names":[],"mappings":"AAOO,MAAM,gBAA6B,YAAY;AACrD,QAAM,SAA6C,QAAQ;AAC3D,QAAM,UAAU,IAAI,YAAA;AACpB,MAAI,OAAO;AACX,mBAAiB,SAAS,QAAQ;AACjC,YAAQ,OAAO,UAAU,WAAW,QAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,MAAM;AAAA,EACnF;AACA,SAAO,OAAO,QAAQ,OAAA;AACvB;"}

package/dist/production/src/lib/tenant/tenantConfig.cjs

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const defineTenantConfig = (config) => config;
+exports.defineTenantConfig = defineTenantConfig;
+//# sourceMappingURL=tenantConfig.cjs.map

package/dist/production/src/lib/tenant/tenantConfig.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantConfig.cjs","sources":["../../../../../../packages/cli/src/lib/tenant/tenantConfig.ts"],"sourcesContent":["import type {\n\tAuthPolicyInput,\n\tConfigCaptchaInput,\n\tConfigInput,\n\tConfigLoginInput,\n\tConfigPasswordInput,\n\tConfigPasswordlessInput,\n\tConfigRateLimitsInput,\n\tConfigRateLimitWindowInput,\n\tIDPOptions,\n\tMailTemplate,\n\tMailType,\n} from '@contember/graphql-client-tenant'\n\n// These aliases keep tenant config authoring aligned with the GraphQL schema.\n// The generator preserves nullable input fields, including explicit `null`.\nexport type { AuthPolicyScope, CaptchaProvider, ConfigPolicy, MailType } from '@contember/graphql-client-tenant'\n\n/**\n * ISO 8601 duration string, e.g. `\"P1D\"` (1 day) or `\"PT5M\"` (5 minutes).\n */\nexport type Interval = string\n\nexport type TenantPasswordConfig = ConfigPasswordInput\n\nexport type TenantLoginConfig = ConfigLoginInput\n\nexport type TenantPasswordlessConfig = ConfigPasswordlessInput\n\n/**\n * `provider: null` disables captcha verification.\n * `secret` is write-only: `null`/omitted leaves the stored value unchanged, `''` clears it.\n */\nexport type TenantCaptchaConfig = ConfigCaptchaInput\n\nexport type TenantRateLimitWindow = ConfigRateLimitWindowInput\n\nexport type TenantRateLimitsConfig = ConfigRateLimitsInput\n\n/** Maps to the tenant `configure(config: ConfigInput!)` mutation. */\nexport type TenantGlobalConfig = ConfigInput\n\nexport type TenantIdpOptions = IDPOptions\n\n/**\n * A single identity provider. The record key is used as the provider slug.\n * `type` is the handler key registered on the server (built-in: `oidc`,\n * `facebook`, `apple`).\n *\n * This is a CLI-specific composite — the `addIDP`/`updateIDP` mutations take\n * `type`/`configuration`/`options` as separate arguments, not a single input.\n */\nexport interface TenantIdpConfig {\n\ttype: string\n\tconfiguration: Record<string, unknown>\n\toptions?: TenantIdpOptions\n\t/** When `true`, the provider is disabled (kept, but not usable for sign-in). */\n\tdisabled?: boolean\n}\n\n/** Maps to the `addMailTemplate(template: MailTemplate!)` mutation. */\nexport type TenantMailTemplate = MailTemplate\n\n/**\n * A per-role MFA / session policy. `project` is a project slug, required for\n * `scope: 'project'` and rejected for `scope: 'global'` (validated server-side).\n *\n * Unlike identity providers there is no server-side slug, so entries are matched\n * against existing rows by `scope` + `project` + the `roles` **set** (order does\n * not matter). Editing `roles` therefore reads as a different policy: a new row\n * is created and the old one is left in place — see `TenantConfigApplier`.\n */\nexport type TenantAuthPolicy = AuthPolicyInput\n\nexport interface TenantCustomRoleRoleConstraint {\n\t/** Exhaustive: every role observed at the constrained position must appear here. Not a filter, and there is no `denied` counterpart. */\n\treadonly allowed: readonly string[]\n}\n\nexport interface TenantCustomRoleTarget {\n\treadonly globalRoles: TenantCustomRoleRoleConstraint\n\treadonly projectMemberships: 'none' | 'any'\n}\n\nexport interface TenantCustomRoleRoleInputConfig {\n\treadonly roles: TenantCustomRoleRoleConstraint\n}\n\nexport interface TenantCustomRoleTargetConfig {\n\treadonly target: TenantCustomRoleTarget\n}\n\nexport interface TenantCustomRoleMutationConfig extends TenantCustomRoleRoleInputConfig, TenantCustomRoleTargetConfig {\n\treadonly allowSelf: boolean\n}\n\nexport interface TenantCustomRoleGlobalApiKeyConfig extends TenantCustomRoleRoleInputConfig {\n\t/** Custom roles may not create keys trusted to forward client info. */\n\treadonly allowTrustForwardedClientInfo: false\n}\n\nexport interface TenantCustomRoleChangeProfileConfig extends TenantCustomRoleTargetConfig {\n\treadonly fields: {\n\t\treadonly allowed: readonly ('name' | 'email')[]\n\t}\n}\n\nexport interface TenantCustomRoleCreateSessionTokenConfig extends TenantCustomRoleTargetConfig {\n\treadonly session: {\n\t\treadonly maxExpirationMinutes: number\n\t\treadonly allowTrustForwardedClientInfo: boolean\n\t}\n}\n\nexport interface TenantCustomRoleMailTemplateConfig {\n\treadonly global: boolean\n\treadonly projects: readonly string[]\n\treadonly types: readonly MailType[]\n}\n\nexport type TenantCustomRoleConfigFreePermission =\n\t| 'system:configure'\n\t| 'system:viewConfig'\n\t| 'system:viewAuthLog'\n\t| 'person:view'\n\t| 'person:list'\n\t| 'entrypoint:deployEntrypoint'\n\t| 'apiKey:list'\n\t| 'idp:disable'\n\t| 'idp:enable'\n\t| 'idp:list'\n\t| 'customRole:view'\n\t| 'identity:viewPermissions'\n\nexport type TenantCustomRoleTargetPermission =\n\t| 'person:disable'\n\t| 'person:forceSignOut'\n\t| 'person:resetMfa'\n\t| 'person:viewSessions'\n\t| 'person:viewIdp'\n\t| 'person:changePassword'\n\nexport type TenantCustomRoleMutationPermission =\n\t| 'identity:addGlobalRoles'\n\t| 'identity:removeGlobalRoles'\n\nexport type TenantCustomRoleMailTemplatePermission =\n\t| 'mailTemplate:add'\n\t| 'mailTemplate:remove'\n\t| 'mailTemplate:list'\n\n/**\n * A custom-role grant discriminated by `permission`. Configured permissions\n * require their exact action-specific config; config-free permissions reject it.\n */\nexport type TenantCustomRoleGrant =\n\t| {\n\t\treadonly permission: TenantCustomRoleConfigFreePermission\n\t\treadonly config?: never\n\t}\n\t| {\n\t\treadonly permission: 'person:signUp'\n\t\treadonly config: TenantCustomRoleRoleInputConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleTargetPermission\n\t\treadonly config: TenantCustomRoleTargetConfig\n\t}\n\t| {\n\t\treadonly permission: 'person:changeProfile'\n\t\treadonly config: TenantCustomRoleChangeProfileConfig\n\t}\n\t| {\n\t\treadonly permission: 'person:createSessionToken'\n\t\treadonly config: TenantCustomRoleCreateSessionTokenConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleMutationPermission\n\t\treadonly config: TenantCustomRoleMutationConfig\n\t}\n\t| {\n\t\treadonly permission: 'apiKey:createGlobal'\n\t\treadonly config: TenantCustomRoleGlobalApiKeyConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleMailTemplatePermission\n\t\treadonly config: TenantCustomRoleMailTemplateConfig\n\t}\n\nexport interface TenantCustomRoleConfig {\n\treadonly description?: string | null\n\treadonly grants: readonly TenantCustomRoleGrant[]\n}\n\n/**\n * Declarative tenant configuration. Applied idempotently by\n * `contember tenant:apply`.\n */\nexport interface TenantConfig {\n\tconfig?: TenantGlobalConfig\n\t/** Identity providers keyed by slug. */\n\tidentityProviders?: Record<string, TenantIdpConfig>\n\tmailTemplates?: TenantMailTemplate[]\n\tauthPolicies?: TenantAuthPolicy[]\n\t/** Custom roles keyed by slug. Missing roles are created; existing roles are replaced. */\n\tcustomRoles?: Record<string, TenantCustomRoleConfig>\n}\n\n/**\n * Type-safe helper for authoring a `tenant.config.ts`. Returns the config\n * unchanged — it exists only to provide editor autocompletion and type\n * checking.\n *\n * ```ts\n * import { defineTenantConfig } from '@contember/cli'\n *\n * export default defineTenantConfig({\n *   config: { password: { minLength: 8 } },\n * })\n * ```\n */\nexport const defineTenantConfig = (config: TenantConfig): TenantConfig => config\n"],"names":[],"mappings":";;AA6NO,MAAM,qBAAqB,CAAC,WAAuC;;"}

package/dist/production/src/lib/tenant/tenantConfig.js

@@ -0,0 +1,5 @@
+const defineTenantConfig = (config) => config;
+export {
+  defineTenantConfig
+};
+//# sourceMappingURL=tenantConfig.js.map

package/dist/production/src/lib/tenant/tenantConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantConfig.js","sources":["../../../../../../packages/cli/src/lib/tenant/tenantConfig.ts"],"sourcesContent":["import type {\n\tAuthPolicyInput,\n\tConfigCaptchaInput,\n\tConfigInput,\n\tConfigLoginInput,\n\tConfigPasswordInput,\n\tConfigPasswordlessInput,\n\tConfigRateLimitsInput,\n\tConfigRateLimitWindowInput,\n\tIDPOptions,\n\tMailTemplate,\n\tMailType,\n} from '@contember/graphql-client-tenant'\n\n// These aliases keep tenant config authoring aligned with the GraphQL schema.\n// The generator preserves nullable input fields, including explicit `null`.\nexport type { AuthPolicyScope, CaptchaProvider, ConfigPolicy, MailType } from '@contember/graphql-client-tenant'\n\n/**\n * ISO 8601 duration string, e.g. `\"P1D\"` (1 day) or `\"PT5M\"` (5 minutes).\n */\nexport type Interval = string\n\nexport type TenantPasswordConfig = ConfigPasswordInput\n\nexport type TenantLoginConfig = ConfigLoginInput\n\nexport type TenantPasswordlessConfig = ConfigPasswordlessInput\n\n/**\n * `provider: null` disables captcha verification.\n * `secret` is write-only: `null`/omitted leaves the stored value unchanged, `''` clears it.\n */\nexport type TenantCaptchaConfig = ConfigCaptchaInput\n\nexport type TenantRateLimitWindow = ConfigRateLimitWindowInput\n\nexport type TenantRateLimitsConfig = ConfigRateLimitsInput\n\n/** Maps to the tenant `configure(config: ConfigInput!)` mutation. */\nexport type TenantGlobalConfig = ConfigInput\n\nexport type TenantIdpOptions = IDPOptions\n\n/**\n * A single identity provider. The record key is used as the provider slug.\n * `type` is the handler key registered on the server (built-in: `oidc`,\n * `facebook`, `apple`).\n *\n * This is a CLI-specific composite — the `addIDP`/`updateIDP` mutations take\n * `type`/`configuration`/`options` as separate arguments, not a single input.\n */\nexport interface TenantIdpConfig {\n\ttype: string\n\tconfiguration: Record<string, unknown>\n\toptions?: TenantIdpOptions\n\t/** When `true`, the provider is disabled (kept, but not usable for sign-in). */\n\tdisabled?: boolean\n}\n\n/** Maps to the `addMailTemplate(template: MailTemplate!)` mutation. */\nexport type TenantMailTemplate = MailTemplate\n\n/**\n * A per-role MFA / session policy. `project` is a project slug, required for\n * `scope: 'project'` and rejected for `scope: 'global'` (validated server-side).\n *\n * Unlike identity providers there is no server-side slug, so entries are matched\n * against existing rows by `scope` + `project` + the `roles` **set** (order does\n * not matter). Editing `roles` therefore reads as a different policy: a new row\n * is created and the old one is left in place — see `TenantConfigApplier`.\n */\nexport type TenantAuthPolicy = AuthPolicyInput\n\nexport interface TenantCustomRoleRoleConstraint {\n\t/** Exhaustive: every role observed at the constrained position must appear here. Not a filter, and there is no `denied` counterpart. */\n\treadonly allowed: readonly string[]\n}\n\nexport interface TenantCustomRoleTarget {\n\treadonly globalRoles: TenantCustomRoleRoleConstraint\n\treadonly projectMemberships: 'none' | 'any'\n}\n\nexport interface TenantCustomRoleRoleInputConfig {\n\treadonly roles: TenantCustomRoleRoleConstraint\n}\n\nexport interface TenantCustomRoleTargetConfig {\n\treadonly target: TenantCustomRoleTarget\n}\n\nexport interface TenantCustomRoleMutationConfig extends TenantCustomRoleRoleInputConfig, TenantCustomRoleTargetConfig {\n\treadonly allowSelf: boolean\n}\n\nexport interface TenantCustomRoleGlobalApiKeyConfig extends TenantCustomRoleRoleInputConfig {\n\t/** Custom roles may not create keys trusted to forward client info. */\n\treadonly allowTrustForwardedClientInfo: false\n}\n\nexport interface TenantCustomRoleChangeProfileConfig extends TenantCustomRoleTargetConfig {\n\treadonly fields: {\n\t\treadonly allowed: readonly ('name' | 'email')[]\n\t}\n}\n\nexport interface TenantCustomRoleCreateSessionTokenConfig extends TenantCustomRoleTargetConfig {\n\treadonly session: {\n\t\treadonly maxExpirationMinutes: number\n\t\treadonly allowTrustForwardedClientInfo: boolean\n\t}\n}\n\nexport interface TenantCustomRoleMailTemplateConfig {\n\treadonly global: boolean\n\treadonly projects: readonly string[]\n\treadonly types: readonly MailType[]\n}\n\nexport type TenantCustomRoleConfigFreePermission =\n\t| 'system:configure'\n\t| 'system:viewConfig'\n\t| 'system:viewAuthLog'\n\t| 'person:view'\n\t| 'person:list'\n\t| 'entrypoint:deployEntrypoint'\n\t| 'apiKey:list'\n\t| 'idp:disable'\n\t| 'idp:enable'\n\t| 'idp:list'\n\t| 'customRole:view'\n\t| 'identity:viewPermissions'\n\nexport type TenantCustomRoleTargetPermission =\n\t| 'person:disable'\n\t| 'person:forceSignOut'\n\t| 'person:resetMfa'\n\t| 'person:viewSessions'\n\t| 'person:viewIdp'\n\t| 'person:changePassword'\n\nexport type TenantCustomRoleMutationPermission =\n\t| 'identity:addGlobalRoles'\n\t| 'identity:removeGlobalRoles'\n\nexport type TenantCustomRoleMailTemplatePermission =\n\t| 'mailTemplate:add'\n\t| 'mailTemplate:remove'\n\t| 'mailTemplate:list'\n\n/**\n * A custom-role grant discriminated by `permission`. Configured permissions\n * require their exact action-specific config; config-free permissions reject it.\n */\nexport type TenantCustomRoleGrant =\n\t| {\n\t\treadonly permission: TenantCustomRoleConfigFreePermission\n\t\treadonly config?: never\n\t}\n\t| {\n\t\treadonly permission: 'person:signUp'\n\t\treadonly config: TenantCustomRoleRoleInputConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleTargetPermission\n\t\treadonly config: TenantCustomRoleTargetConfig\n\t}\n\t| {\n\t\treadonly permission: 'person:changeProfile'\n\t\treadonly config: TenantCustomRoleChangeProfileConfig\n\t}\n\t| {\n\t\treadonly permission: 'person:createSessionToken'\n\t\treadonly config: TenantCustomRoleCreateSessionTokenConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleMutationPermission\n\t\treadonly config: TenantCustomRoleMutationConfig\n\t}\n\t| {\n\t\treadonly permission: 'apiKey:createGlobal'\n\t\treadonly config: TenantCustomRoleGlobalApiKeyConfig\n\t}\n\t| {\n\t\treadonly permission: TenantCustomRoleMailTemplatePermission\n\t\treadonly config: TenantCustomRoleMailTemplateConfig\n\t}\n\nexport interface TenantCustomRoleConfig {\n\treadonly description?: string | null\n\treadonly grants: readonly TenantCustomRoleGrant[]\n}\n\n/**\n * Declarative tenant configuration. Applied idempotently by\n * `contember tenant:apply`.\n */\nexport interface TenantConfig {\n\tconfig?: TenantGlobalConfig\n\t/** Identity providers keyed by slug. */\n\tidentityProviders?: Record<string, TenantIdpConfig>\n\tmailTemplates?: TenantMailTemplate[]\n\tauthPolicies?: TenantAuthPolicy[]\n\t/** Custom roles keyed by slug. Missing roles are created; existing roles are replaced. */\n\tcustomRoles?: Record<string, TenantCustomRoleConfig>\n}\n\n/**\n * Type-safe helper for authoring a `tenant.config.ts`. Returns the config\n * unchanged — it exists only to provide editor autocompletion and type\n * checking.\n *\n * ```ts\n * import { defineTenantConfig } from '@contember/cli'\n *\n * export default defineTenantConfig({\n *   config: { password: { minLength: 8 } },\n * })\n * ```\n */\nexport const defineTenantConfig = (config: TenantConfig): TenantConfig => config\n"],"names":[],"mappings":"AA6NO,MAAM,qBAAqB,CAAC,WAAuC;"}

package/dist/production/src/lib/transfer/DataTransferClient.cjs

@@ -1,11 +1,183 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
 const stream = require("../stream.cjs");
 const node_stream = require("node:stream");
+const promises = require("node:stream/promises");
 const node_zlib = require("node:zlib");
+const TransportError = require("../errors/TransportError.cjs");
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+const transferContext = (action, endpoint) => ({
+  service: `Data ${action.toLowerCase()}`,
+  codePrefix: `TRANSFER_${action.toUpperCase()}`,
+  url: `${endpoint}/${action.toLowerCase()}`
+});
+const transferStreamError = (action, cause) => new cliCommon.CliError(`${action} stream failed`, {
+  code: `TRANSFER_${action.toUpperCase()}_STREAM_FAILED`,
+  exitCode: cliCommon.ExitCode.InputError,
+  details: { operation: action.toLowerCase() },
+  cause
+});
+const transferCommandNames = /* @__PURE__ */ new Set([
+  "importSystemSchemaBegin",
+  "importContentSchemaBegin",
+  "importSequence",
+  "insertBegin",
+  "insertRow",
+  "insertEnd"
+]);
+const isTransferCommandName = (value) => transferCommandNames.has(value);
+const parseTransferEvent = (line) => {
+  const value = JSON.parse(line);
+  if (!Array.isArray(value) || typeof value[0] !== "string") {
+    throw invalidTransferCommand("TRANSFER_IMPORT_INVALID_COMMAND");
+  }
+  if (!isTransferCommandName(value[0])) {
+    throw invalidTransferCommand("TRANSFER_IMPORT_UNKNOWN_COMMAND");
+  }
+  const payload = value[1];
+  return {
+    name: value[0],
+    ...typeof payload === "object" && payload !== null && !Array.isArray(payload) ? { payload } : {}
+  };
+};
+const invalidTransferCommand = (code) => new cliCommon.CliError("Import stream contains an unsupported command", {
+  code,
+  exitCode: cliCommon.ExitCode.InputError,
+  details: { operation: "import" }
+});
+const normalizeImportStreamError = (cause) => {
+  if (cause instanceof cliCommon.CliError && (cause.code === "TRANSFER_IMPORT_INVALID_COMMAND" || cause.code === "TRANSFER_IMPORT_UNKNOWN_COMMAND")) {
+    return cause;
+  }
+  return transferStreamError("Import", cause);
+};
+const requireEventPayload = (event) => {
+  if (event.payload === void 0) {
+    throw new Error(`Transfer event ${event.name} has no payload`);
+  }
+  return event.payload;
+};
+const toBytes = (chunk) => {
+  if (typeof chunk === "string") {
+    return Buffer.from(chunk);
+  }
+  if (chunk instanceof Uint8Array) {
+    return chunk;
+  }
+  throw transferStreamError("Import", new Error("Unsupported stream chunk"));
+};
+const toUploadStream = (stream2) => {
+  const iterator = stream2[Symbol.asyncIterator]();
+  return new ReadableStream({
+    async pull(controller) {
+      try {
+        const next = await iterator.next();
+        if (next.done) {
+          controller.close();
+        } else {
+          controller.enqueue(toBytes(next.value));
+        }
+      } catch (cause) {
+        controller.error(transferStreamError("Import", cause));
+      }
+    },
+    async cancel() {
+      stream2.destroy();
+      try {
+        await iterator.return?.();
+      } catch {
+      }
+    }
+  });
+};
+class WebResponseReadable extends node_stream.Readable {
+  constructor(stream2) {
+    super();
+    __publicField(this, "reader");
+    __publicField(this, "reading", false);
+    __publicField(this, "released", false);
+    this.reader = stream2.getReader();
+  }
+  _read() {
+    if (this.reading || this.destroyed) {
+      return;
+    }
+    this.reading = true;
+    void this.readNext();
+  }
+  _destroy(error, callback) {
+    this.cancelReader().then(
+      () => callback(error),
+      () => callback(error)
+    );
+  }
+  async readNext() {
+    try {
+      const next = await this.reader.read();
+      if (this.destroyed) {
+        return;
+      }
+      if (next.done) {
+        this.releaseReader();
+        this.push(null);
+        return;
+      }
+      this.reading = false;
+      if (this.push(next.value)) {
+        this._read();
+      }
+    } catch (cause) {
+      this.destroy(cause instanceof Error ? cause : new Error("Export response stream failed"));
+    }
+  }
+  async cancelReader() {
+    if (this.released) {
+      return;
+    }
+    try {
+      await this.reader.cancel();
+    } catch {
+    } finally {
+      this.releaseReader();
+    }
+  }
+  releaseReader() {
+    if (!this.released) {
+      this.released = true;
+      this.reader.releaseLock();
+    }
+  }
+}
+const cancelResponseBody = async (response) => {
+  try {
+    await response.body?.cancel();
+  } catch {
+  }
+};
+const assertImportResult = async (response) => {
+  let body;
+  try {
+    body = await response.json();
+  } catch (cause) {
+    throw new cliCommon.CliError("Import returned an invalid response", {
+      code: "TRANSFER_IMPORT_INVALID_RESPONSE",
+      exitCode: cliCommon.ExitCode.InternalError,
+      details: { operation: "import" },
+      cause
+    });
+  }
+  if (typeof body === "object" && body !== null && "ok" in body && body.ok === true) {
+    return;
+  }
+  throw new cliCommon.CliError("Import failed", {
+    code: "IMPORT_FAILED",
+    exitCode: cliCommon.ExitCode.InputError,
+    details: { operation: "import" }
+  });
+};
 class DataTransferClient {
   constructor() {
     __publicField(this, "dataImport", async ({ printProgress, stream: stream$1, project, gzip }) => {
@@ -14,76 +186,140 @@ class DataTransferClient {
       let rowTotal = 0;
       let transferred = 0;
       let start = Date.now();
-      const inputStream = stream$1.pipe(
-        new stream.LineTransform((line) => {
-          transferred += line.length + 1;
-          if (line === "") {
-            return "";
-          }
-          const data = JSON.parse(line);
-          switch (data[0]) {
-            case "importSystemSchemaBegin":
-              return JSON.stringify([data[0], { ...data[1], project: project.name }]);
-            case "importContentSchemaBegin":
-              return JSON.stringify([data[0], { ...data[1], project: project.name }]);
-            case "insertBegin":
-              table = data[1].table;
-              rowCount = 0;
-              break;
-            case "insertRow":
-              rowCount++;
-              rowTotal++;
-              break;
-          }
-          if (rowCount % 1e3 === 0 || data[0] !== "insertRow") {
-            const mbs = Math.floor(transferred / 1024 / 1024).toString();
-            const durationS = Math.floor((Date.now() - start) / 1e3);
-            printProgress(`transferred ${mbs} MiB; inserted ${rowCount} ${table} rows, ${rowTotal} total; ${durationS} seconds`);
-          }
-          return line;
-        })
-      );
-      inputStream.on("error", (err) => {
-        throw new Error(`Input stream error: ${err}`);
+      const transformedStream = new stream.LineTransform((line) => {
+        transferred += line.length + 1;
+        if (line === "") {
+          return "";
+        }
+        const event = parseTransferEvent(line);
+        switch (event.name) {
+          case "importSystemSchemaBegin":
+            return JSON.stringify([event.name, { ...requireEventPayload(event), project: project.name }]);
+          case "importContentSchemaBegin":
+            return JSON.stringify([event.name, { ...requireEventPayload(event), project: project.name }]);
+          case "importSequence":
+            break;
+          case "insertBegin":
+            if (typeof event.payload?.table !== "string") {
+              throw new Error("Insert event has no table");
+            }
+            table = event.payload.table;
+            rowCount = 0;
+            break;
+          case "insertRow":
+            rowCount++;
+            rowTotal++;
+            break;
+        }
+        if (rowCount % 1e3 === 0 || event.name !== "insertRow") {
+          const mbs = Math.floor(transferred / 1024 / 1024).toString();
+          const durationS = Math.floor((Date.now() - start) / 1e3);
+          printProgress(`transferred ${mbs} MiB; inserted ${rowCount} ${table} rows, ${rowTotal} total; ${durationS} seconds`);
+        }
+        return line;
       });
-      const bodyStream = node_stream.Readable.toWeb(gzip ? inputStream.pipe(node_zlib.createGzip()) : inputStream);
-      const response = await fetch(`${project.endpoint}/import`, {
+      const uploadStream = new node_stream.PassThrough();
+      const abortController = new AbortController();
+      const rawPump = gzip ? promises.pipeline(stream$1, transformedStream, node_zlib.createGzip(), uploadStream) : promises.pipeline(stream$1, transformedStream, uploadStream);
+      const context = transferContext("Import", project.endpoint);
+      const requestInit = {
         headers: {
           "Authorization": `Bearer ${project.token}`,
           "Content-type": "application/x-ndjson",
           ...gzip ? { "Content-Encoding": "gzip" } : {}
         },
         method: "POST",
-        body: bodyStream,
-        ...{ duplex: "half" }
-      });
+        body: toUploadStream(uploadStream),
+        duplex: "half",
+        signal: abortController.signal
+      };
+      const rawRequest = fetch(`${project.endpoint}/import`, requestInit);
+      const pump = rawPump.then(
+        () => ({ type: "pump-complete" }),
+        (cause) => {
+          abortController.abort();
+          return { type: "pump-error", error: normalizeImportStreamError(cause) };
+        }
+      );
+      const request = rawRequest.then(
+        (response2) => ({ type: "response", response: response2 }),
+        (error) => ({ type: "request-error", error: TransportError.toTransportError(error, context) })
+      );
+      const first = await Promise.race([request, pump]);
+      if (first.type === "pump-error") {
+        abortController.abort();
+        uploadStream.destroy();
+        await request;
+        throw first.error;
+      }
+      if (first.type === "request-error") {
+        abortController.abort();
+        uploadStream.destroy();
+        await pump;
+        throw first.error;
+      }
+      const requestResult = first.type === "response" ? first : await request;
+      if (requestResult.type === "request-error") {
+        throw requestResult.error;
+      }
+      const response = requestResult.response;
       if (!response.ok) {
-        const responseBody = await response.text();
-        throw new Error(`Invalid response: ${response.statusText}
-${responseBody}`);
+        abortController.abort();
+        uploadStream.destroy();
+        await pump;
+        await cancelResponseBody(response);
+        throw TransportError.toHttpTransportError(
+          { status: response.status, retryAfter: response.headers.get("retry-after") },
+          context
+        );
       }
-      return response;
+      const pumpResult = await pump;
+      if (pumpResult.type === "pump-error") {
+        throw pumpResult.error;
+      }
+      await assertImportResult(response);
     });
     __publicField(this, "dataExport", async ({ project: { name: project, token, endpoint: baseUrl }, gzip, includeSystem, excludeTables }) => {
-      const response = await fetch(`${baseUrl}/export`, {
-        headers: {
-          "Authorization": `Bearer ${token}`,
-          "Accept-Encoding": gzip ? "gzip" : "identity",
-          "Content-type": "application/json"
-        },
-        method: "POST",
-        body: JSON.stringify({
-          projects: [{ slug: project, system: includeSystem, excludeTables }]
-        })
-      });
+      const context = transferContext("Export", baseUrl);
+      let response;
+      try {
+        response = await fetch(`${baseUrl}/export`, {
+          headers: {
+            "Authorization": `Bearer ${token}`,
+            "Accept-Encoding": gzip ? "gzip" : "identity",
+            "Content-type": "application/json"
+          },
+          method: "POST",
+          body: JSON.stringify({
+            projects: [{ slug: project, system: includeSystem, excludeTables }]
+          })
+        });
+      } catch (error) {
+        throw TransportError.toTransportError(error, context);
+      }
       if (!response.ok) {
-        const responseBody = await response.text();
-        throw new Error(`Invalid response: ${response.statusText}
-${responseBody}`);
+        await cancelResponseBody(response);
+        throw TransportError.toHttpTransportError(
+          { status: response.status, retryAfter: response.headers.get("retry-after") },
+          context
+        );
       }
       return response;
     });
   }
 }
+const toDataExportStream = (response) => {
+  if (!response.body) {
+    throw new cliCommon.CliError("Export response does not contain a readable stream", {
+      code: "TRANSFER_EXPORT_INVALID_RESPONSE",
+      exitCode: cliCommon.ExitCode.InternalError,
+      details: { operation: "export" }
+    });
+  }
+  return response.body instanceof node_stream.Readable ? response.body : new WebResponseReadable(response.body);
+};
+const toDataTransferStreamError = (operation, cause) => transferStreamError(operation, cause);
 exports.DataTransferClient = DataTransferClient;
+exports.toDataExportStream = toDataExportStream;
+exports.toDataTransferStreamError = toDataTransferStreamError;
 //# sourceMappingURL=DataTransferClient.cjs.map

package/dist/production/src/lib/transfer/DataTransferClient.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"DataTransferClient.cjs","sources":["../../../../../../packages/cli/src/lib/transfer/DataTransferClient.ts"],"sourcesContent":["import { LineTransform } from '../stream'\nimport { Readable } from 'node:stream'\nimport { createGzip } from 'node:zlib'\nimport { RemoteProject } from '../project/RemoteProject'\n\nexport class DataTransferClient {\n\tdataImport = async ({ printProgress, stream, project, gzip }: {\n\t\tstream: Readable\n\t\tproject: RemoteProject\n\t\tprintProgress: (message: string) => void\n\t\tgzip: boolean\n\t}) => {\n\t\tlet table = ''\n\t\tlet rowCount = 0\n\t\tlet rowTotal = 0\n\t\tlet transferred = 0\n\t\tlet start = Date.now()\n\t\tconst inputStream = stream.pipe(\n\t\t\tnew LineTransform(line => {\n\t\t\t\ttransferred += line.length + 1\n\t\t\t\tif (line === '') {\n\t\t\t\t\treturn ''\n\t\t\t\t}\n\t\t\t\tconst data = JSON.parse(line)\n\t\t\t\tswitch (data[0]) {\n\t\t\t\t\tcase 'importSystemSchemaBegin':\n\t\t\t\t\t\treturn JSON.stringify([data[0], { ...data[1], project: project.name }])\n\t\t\t\t\tcase 'importContentSchemaBegin':\n\t\t\t\t\t\treturn JSON.stringify([data[0], { ...data[1], project: project.name }])\n\t\t\t\t\tcase 'insertBegin':\n\t\t\t\t\t\ttable = data[1].table\n\t\t\t\t\t\trowCount = 0\n\t\t\t\t\t\tbreak\n\t\t\t\t\tcase 'insertRow':\n\t\t\t\t\t\trowCount++\n\t\t\t\t\t\trowTotal++\n\t\t\t\t\t\tbreak\n\t\t\t\t\tcase 'insertEnd':\n\t\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tif ((rowCount % 1000) === 0 || data[0] !== 'insertRow') {\n\t\t\t\t\tconst mbs = Math.floor(transferred / 1024 / 1024).toString()\n\t\t\t\t\tconst durationS = Math.floor((Date.now() - start) / 1000)\n\t\t\t\t\tprintProgress(`transferred ${mbs} MiB; inserted ${rowCount} ${table} rows, ${rowTotal} total; ${durationS} seconds`)\n\t\t\t\t}\n\t\t\t\treturn line\n\t\t\t}),\n\t\t)\n\t\tinputStream.on('error', err => {\n\t\t\tthrow new Error(`Input stream error: ${err}`)\n\t\t})\n\n\t\tconst bodyStream = Readable.toWeb(gzip ? inputStream.pipe(createGzip()) : inputStream) as unknown as BodyInit\n\n\t\tconst response = await fetch(`${project.endpoint}/import`, {\n\t\t\theaders: {\n\t\t\t\t'Authorization': `Bearer ${project.token}`,\n\t\t\t\t'Content-type': 'application/x-ndjson',\n\t\t\t\t...(gzip ? { 'Content-Encoding': 'gzip' } : {}),\n\t\t\t},\n\t\t\tmethod: 'POST',\n\t\t\tbody: bodyStream,\n\t\t\t...{ duplex: 'half' },\n\t\t})\n\t\tif (!response.ok) {\n\t\t\tconst responseBody = await response.text()\n\t\t\tthrow new Error(`Invalid response: ${response.statusText}\\n${responseBody}`)\n\t\t}\n\t\treturn response\n\t}\n\n\tdataExport = async ({ project: { name: project, token, endpoint: baseUrl }, gzip, includeSystem, excludeTables }: {\n\t\tproject: RemoteProject\n\t\texcludeTables?: string[]\n\t\tincludeSystem: boolean\n\t\tgzip: boolean\n\t}) => {\n\t\tconst response = await fetch(`${baseUrl}/export`, {\n\t\t\theaders: {\n\t\t\t\t'Authorization': `Bearer ${token}`,\n\t\t\t\t'Accept-Encoding': gzip ? 'gzip' : 'identity',\n\t\t\t\t'Content-type': 'application/json',\n\t\t\t},\n\t\t\tmethod: 'POST',\n\t\t\tbody: JSON.stringify({\n\t\t\t\tprojects: [{ slug: project, system: includeSystem, excludeTables }],\n\t\t\t}),\n\t\t})\n\t\tif (!response.ok) {\n\t\t\tconst responseBody = await response.text()\n\t\t\tthrow new Error(`Invalid response: ${response.statusText}\\n${responseBody}`)\n\t\t}\n\t\treturn response\n\t}\n}\n"],"names":["stream","LineTransform","Readable","createGzip"],"mappings":";;;;;;;;AAKO,MAAM,mBAAmB;AAAA,EAAzB,cAAA;AACN,kBAAA,MAAA,cAAa,OAAO,EAAE,eAAA,QAAeA,UAAQ,SAAS,WAKhD;AACL,UAAI,QAAQ;AACZ,UAAI,WAAW;AACf,UAAI,WAAW;AACf,UAAI,cAAc;AAClB,UAAI,QAAQ,KAAK,IAAA;AACjB,YAAM,cAAcA,SAAO;AAAA,QAC1B,IAAIC,OAAAA,cAAc,CAAA,SAAQ;AACzB,yBAAe,KAAK,SAAS;AAC7B,cAAI,SAAS,IAAI;AAChB,mBAAO;AAAA,UACR;AACA,gBAAM,OAAO,KAAK,MAAM,IAAI;AAC5B,kBAAQ,KAAK,CAAC,GAAA;AAAA,YACb,KAAK;AACJ,qBAAO,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,SAAS,QAAQ,KAAA,CAAM,CAAC;AAAA,YACvE,KAAK;AACJ,qBAAO,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,SAAS,QAAQ,KAAA,CAAM,CAAC;AAAA,YACvE,KAAK;AACJ,sBAAQ,KAAK,CAAC,EAAE;AAChB,yBAAW;AACX;AAAA,YACD,KAAK;AACJ;AACA;AACA;AAAA,UAEA;AAEF,cAAK,WAAW,QAAU,KAAK,KAAK,CAAC,MAAM,aAAa;AACvD,kBAAM,MAAM,KAAK,MAAM,cAAc,OAAO,IAAI,EAAE,SAAA;AAClD,kBAAM,YAAY,KAAK,OAAO,KAAK,IAAA,IAAQ,SAAS,GAAI;AACxD,0BAAc,eAAe,GAAG,kBAAkB,QAAQ,IAAI,KAAK,UAAU,QAAQ,WAAW,SAAS,UAAU;AAAA,UACpH;AACA,iBAAO;AAAA,QACR,CAAC;AAAA,MAAA;AAEF,kBAAY,GAAG,SAAS,CAAA,QAAO;AAC9B,cAAM,IAAI,MAAM,uBAAuB,GAAG,EAAE;AAAA,MAC7C,CAAC;AAED,YAAM,aAAaC,qBAAS,MAAM,OAAO,YAAY,KAAKC,UAAAA,YAAY,IAAI,WAAW;AAErF,YAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,QAAQ,WAAW;AAAA,QAC1D,SAAS;AAAA,UACR,iBAAiB,UAAU,QAAQ,KAAK;AAAA,UACxC,gBAAgB;AAAA,UAChB,GAAI,OAAO,EAAE,oBAAoB,WAAW,CAAA;AAAA,QAAC;AAAA,QAE9C,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,GAAG,EAAE,QAAQ,OAAA;AAAA,MAAO,CACpB;AACD,UAAI,CAAC,SAAS,IAAI;AACjB,cAAM,eAAe,MAAM,SAAS,KAAA;AACpC,cAAM,IAAI,MAAM,qBAAqB,SAAS,UAAU;AAAA,EAAK,YAAY,EAAE;AAAA,MAC5E;AACA,aAAO;AAAA,IACR,CAAA;AAEA,kBAAA,MAAA,cAAa,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,OAAO,UAAU,QAAA,GAAW,MAAM,eAAe,oBAK3F;AACL,YAAM,WAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,QACjD,SAAS;AAAA,UACR,iBAAiB,UAAU,KAAK;AAAA,UAChC,mBAAmB,OAAO,SAAS;AAAA,UACnC,gBAAgB;AAAA,QAAA;AAAA,QAEjB,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU;AAAA,UACpB,UAAU,CAAC,EAAE,MAAM,SAAS,QAAQ,eAAe,eAAe;AAAA,QAAA,CAClE;AAAA,MAAA,CACD;AACD,UAAI,CAAC,SAAS,IAAI;AACjB,cAAM,eAAe,MAAM,SAAS,KAAA;AACpC,cAAM,IAAI,MAAM,qBAAqB,SAAS,UAAU;AAAA,EAAK,YAAY,EAAE;AAAA,MAC5E;AACA,aAAO;AAAA,IACR,CAAA;AAAA,EAAA;AACD;;"}
+{"version":3,"file":"DataTransferClient.cjs","sources":["../../../../../../packages/cli/src/lib/transfer/DataTransferClient.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { LineTransform } from '../stream.js'\nimport { PassThrough, Readable } from 'node:stream'\nimport { pipeline } from 'node:stream/promises'\nimport { createGzip } from 'node:zlib'\nimport { RemoteProject } from '../project/RemoteProject.js'\nimport { toHttpTransportError, toTransportError } from '../errors/TransportError.js'\n\nconst transferContext = (action: 'Import' | 'Export', endpoint: string) => ({\n\tservice: `Data ${action.toLowerCase()}`,\n\tcodePrefix: `TRANSFER_${action.toUpperCase()}`,\n\turl: `${endpoint}/${action.toLowerCase()}`,\n})\n\nconst transferStreamError = (action: 'Import' | 'Export', cause: unknown): CliError =>\n\tnew CliError(`${action} stream failed`, {\n\t\tcode: `TRANSFER_${action.toUpperCase()}_STREAM_FAILED`,\n\t\texitCode: ExitCode.InputError,\n\t\tdetails: { operation: action.toLowerCase() },\n\t\tcause,\n\t})\n\ntype TransferCommandName =\n\t| 'importSystemSchemaBegin'\n\t| 'importContentSchemaBegin'\n\t| 'importSequence'\n\t| 'insertBegin'\n\t| 'insertRow'\n\t| 'insertEnd'\n\nconst transferCommandNames: ReadonlySet<string> = new Set<TransferCommandName>([\n\t'importSystemSchemaBegin',\n\t'importContentSchemaBegin',\n\t'importSequence',\n\t'insertBegin',\n\t'insertRow',\n\t'insertEnd',\n])\n\nconst isTransferCommandName = (value: string): value is TransferCommandName => transferCommandNames.has(value)\n\ninterface TransferEvent {\n\treadonly name: TransferCommandName\n\treadonly payload?: Record<string, unknown>\n}\n\nconst parseTransferEvent = (line: string): TransferEvent => {\n\tconst value: unknown = JSON.parse(line)\n\tif (!Array.isArray(value) || typeof value[0] !== 'string') {\n\t\tthrow invalidTransferCommand('TRANSFER_IMPORT_INVALID_COMMAND')\n\t}\n\tif (!isTransferCommandName(value[0])) {\n\t\tthrow invalidTransferCommand('TRANSFER_IMPORT_UNKNOWN_COMMAND')\n\t}\n\tconst payload = value[1]\n\treturn {\n\t\tname: value[0],\n\t\t...(typeof payload === 'object' && payload !== null && !Array.isArray(payload) ? { payload } : {}),\n\t}\n}\n\nconst invalidTransferCommand = (code: 'TRANSFER_IMPORT_INVALID_COMMAND' | 'TRANSFER_IMPORT_UNKNOWN_COMMAND'): CliError =>\n\tnew CliError('Import stream contains an unsupported command', {\n\t\tcode,\n\t\texitCode: ExitCode.InputError,\n\t\tdetails: { operation: 'import' },\n\t})\n\nconst normalizeImportStreamError = (cause: unknown): CliError => {\n\tif (\n\t\tcause instanceof CliError\n\t\t&& (cause.code === 'TRANSFER_IMPORT_INVALID_COMMAND' || cause.code === 'TRANSFER_IMPORT_UNKNOWN_COMMAND')\n\t) {\n\t\treturn cause\n\t}\n\treturn transferStreamError('Import', cause)\n}\n\nconst requireEventPayload = (event: TransferEvent): Record<string, unknown> => {\n\tif (event.payload === undefined) {\n\t\tthrow new Error(`Transfer event ${event.name} has no payload`)\n\t}\n\treturn event.payload\n}\n\nconst toBytes = (chunk: unknown): Uint8Array => {\n\tif (typeof chunk === 'string') {\n\t\treturn Buffer.from(chunk)\n\t}\n\tif (chunk instanceof Uint8Array) {\n\t\treturn chunk\n\t}\n\tthrow transferStreamError('Import', new Error('Unsupported stream chunk'))\n}\n\nconst toUploadStream = (stream: Readable): ReadableStream<Uint8Array> => {\n\tconst iterator: AsyncIterator<unknown> = stream[Symbol.asyncIterator]()\n\treturn new ReadableStream<Uint8Array>({\n\t\tasync pull(controller) {\n\t\t\ttry {\n\t\t\t\tconst next = await iterator.next()\n\t\t\t\tif (next.done) {\n\t\t\t\t\tcontroller.close()\n\t\t\t\t} else {\n\t\t\t\t\tcontroller.enqueue(toBytes(next.value))\n\t\t\t\t}\n\t\t\t} catch (cause) {\n\t\t\t\tcontroller.error(transferStreamError('Import', cause))\n\t\t\t}\n\t\t},\n\t\tasync cancel() {\n\t\t\tstream.destroy()\n\t\t\ttry {\n\t\t\t\tawait iterator.return?.()\n\t\t\t} catch {\n\t\t\t\t// Stream cleanup must not replace the primary transfer error.\n\t\t\t}\n\t\t},\n\t})\n}\n\nclass WebResponseReadable extends Readable {\n\tprivate readonly reader: ReadableStreamDefaultReader<Uint8Array>\n\tprivate reading = false\n\tprivate released = false\n\n\tconstructor(stream: ReadableStream<Uint8Array>) {\n\t\tsuper()\n\t\tthis.reader = stream.getReader()\n\t}\n\n\tpublic override _read(): void {\n\t\tif (this.reading || this.destroyed) {\n\t\t\treturn\n\t\t}\n\t\tthis.reading = true\n\t\tvoid this.readNext()\n\t}\n\n\tpublic override _destroy(error: Error | null, callback: (error?: Error | null) => void): void {\n\t\tthis.cancelReader().then(\n\t\t\t() => callback(error),\n\t\t\t() => callback(error),\n\t\t)\n\t}\n\n\tprivate async readNext(): Promise<void> {\n\t\ttry {\n\t\t\tconst next = await this.reader.read()\n\t\t\tif (this.destroyed) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (next.done) {\n\t\t\t\tthis.releaseReader()\n\t\t\t\tthis.push(null)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthis.reading = false\n\t\t\tif (this.push(next.value)) {\n\t\t\t\tthis._read()\n\t\t\t}\n\t\t} catch (cause) {\n\t\t\tthis.destroy(cause instanceof Error ? cause : new Error('Export response stream failed'))\n\t\t}\n\t}\n\n\tprivate async cancelReader(): Promise<void> {\n\t\tif (this.released) {\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tawait this.reader.cancel()\n\t\t} catch {\n\t\t\t// Stream cleanup must not replace the primary transfer error.\n\t\t} finally {\n\t\t\tthis.releaseReader()\n\t\t}\n\t}\n\n\tprivate releaseReader(): void {\n\t\tif (!this.released) {\n\t\t\tthis.released = true\n\t\t\tthis.reader.releaseLock()\n\t\t}\n\t}\n}\n\nconst cancelResponseBody = async (response: Response): Promise<void> => {\n\ttry {\n\t\tawait response.body?.cancel()\n\t} catch {\n\t\t// The HTTP classification is the primary error.\n\t}\n}\n\nconst assertImportResult = async (response: Response): Promise<void> => {\n\tlet body: unknown\n\ttry {\n\t\tbody = await response.json()\n\t} catch (cause) {\n\t\tthrow new CliError('Import returned an invalid response', {\n\t\t\tcode: 'TRANSFER_IMPORT_INVALID_RESPONSE',\n\t\t\texitCode: ExitCode.InternalError,\n\t\t\tdetails: { operation: 'import' },\n\t\t\tcause,\n\t\t})\n\t}\n\tif (typeof body === 'object' && body !== null && 'ok' in body && body.ok === true) {\n\t\treturn\n\t}\n\tthrow new CliError('Import failed', {\n\t\tcode: 'IMPORT_FAILED',\n\t\texitCode: ExitCode.InputError,\n\t\tdetails: { operation: 'import' },\n\t})\n}\n\nexport interface DataExportResponse {\n\treadonly body: ReadableStream<Uint8Array> | Readable | null\n}\n\ntype ImportRequestOutcome =\n\t| { readonly type: 'response'; readonly response: Response }\n\t| { readonly type: 'request-error'; readonly error: CliError }\n\ntype ImportPumpOutcome =\n\t| { readonly type: 'pump-complete' }\n\t| { readonly type: 'pump-error'; readonly error: CliError }\n\ninterface StreamingRequestInit extends RequestInit {\n\treadonly duplex: 'half'\n}\n\nexport class DataTransferClient {\n\tdataImport = async ({ printProgress, stream, project, gzip }: {\n\t\tstream: Readable\n\t\tproject: RemoteProject\n\t\tprintProgress: (message: string) => void\n\t\tgzip: boolean\n\t}): Promise<void> => {\n\t\tlet table = ''\n\t\tlet rowCount = 0\n\t\tlet rowTotal = 0\n\t\tlet transferred = 0\n\t\tlet start = Date.now()\n\t\tconst transformedStream = new LineTransform(line => {\n\t\t\ttransferred += line.length + 1\n\t\t\tif (line === '') {\n\t\t\t\treturn ''\n\t\t\t}\n\t\t\tconst event = parseTransferEvent(line)\n\t\t\tswitch (event.name) {\n\t\t\t\tcase 'importSystemSchemaBegin':\n\t\t\t\t\treturn JSON.stringify([event.name, { ...requireEventPayload(event), project: project.name }])\n\t\t\t\tcase 'importContentSchemaBegin':\n\t\t\t\t\treturn JSON.stringify([event.name, { ...requireEventPayload(event), project: project.name }])\n\t\t\t\tcase 'importSequence':\n\t\t\t\t\tbreak\n\t\t\t\tcase 'insertBegin':\n\t\t\t\t\tif (typeof event.payload?.table !== 'string') {\n\t\t\t\t\t\tthrow new Error('Insert event has no table')\n\t\t\t\t\t}\n\t\t\t\t\ttable = event.payload.table\n\t\t\t\t\trowCount = 0\n\t\t\t\t\tbreak\n\t\t\t\tcase 'insertRow':\n\t\t\t\t\trowCount++\n\t\t\t\t\trowTotal++\n\t\t\t\t\tbreak\n\t\t\t\tcase 'insertEnd':\n\t\t\t\t\tbreak\n\t\t\t}\n\t\t\tif ((rowCount % 1000) === 0 || event.name !== 'insertRow') {\n\t\t\t\tconst mbs = Math.floor(transferred / 1024 / 1024).toString()\n\t\t\t\tconst durationS = Math.floor((Date.now() - start) / 1000)\n\t\t\t\tprintProgress(`transferred ${mbs} MiB; inserted ${rowCount} ${table} rows, ${rowTotal} total; ${durationS} seconds`)\n\t\t\t}\n\t\t\treturn line\n\t\t})\n\t\tconst uploadStream = new PassThrough()\n\t\tconst abortController = new AbortController()\n\t\tconst rawPump = gzip\n\t\t\t? pipeline(stream, transformedStream, createGzip(), uploadStream)\n\t\t\t: pipeline(stream, transformedStream, uploadStream)\n\t\tconst context = transferContext('Import', project.endpoint)\n\t\tconst requestInit: StreamingRequestInit = {\n\t\t\theaders: {\n\t\t\t\t'Authorization': `Bearer ${project.token}`,\n\t\t\t\t'Content-type': 'application/x-ndjson',\n\t\t\t\t...(gzip ? { 'Content-Encoding': 'gzip' } : {}),\n\t\t\t},\n\t\t\tmethod: 'POST',\n\t\t\tbody: toUploadStream(uploadStream),\n\t\t\tduplex: 'half',\n\t\t\tsignal: abortController.signal,\n\t\t}\n\t\tconst rawRequest = fetch(`${project.endpoint}/import`, requestInit)\n\t\tconst pump: Promise<ImportPumpOutcome> = rawPump.then(\n\t\t\t() => ({ type: 'pump-complete' }),\n\t\t\tcause => {\n\t\t\t\tabortController.abort()\n\t\t\t\treturn { type: 'pump-error', error: normalizeImportStreamError(cause) }\n\t\t\t},\n\t\t)\n\t\tconst request: Promise<ImportRequestOutcome> = rawRequest.then(\n\t\t\tresponse => ({ type: 'response', response }),\n\t\t\terror => ({ type: 'request-error', error: toTransportError(error, context) }),\n\t\t)\n\n\t\tconst first = await Promise.race([request, pump])\n\t\tif (first.type === 'pump-error') {\n\t\t\tabortController.abort()\n\t\t\tuploadStream.destroy()\n\t\t\tawait request\n\t\t\tthrow first.error\n\t\t}\n\t\tif (first.type === 'request-error') {\n\t\t\tabortController.abort()\n\t\t\tuploadStream.destroy()\n\t\t\tawait pump\n\t\t\tthrow first.error\n\t\t}\n\t\tconst requestResult = first.type === 'response' ? first : await request\n\t\tif (requestResult.type === 'request-error') {\n\t\t\tthrow requestResult.error\n\t\t}\n\t\tconst response = requestResult.response\n\t\tif (!response.ok) {\n\t\t\tabortController.abort()\n\t\t\tuploadStream.destroy()\n\t\t\tawait pump\n\t\t\tawait cancelResponseBody(response)\n\t\t\tthrow toHttpTransportError(\n\t\t\t\t{ status: response.status, retryAfter: response.headers.get('retry-after') },\n\t\t\t\tcontext,\n\t\t\t)\n\t\t}\n\t\tconst pumpResult = await pump\n\t\tif (pumpResult.type === 'pump-error') {\n\t\t\tthrow pumpResult.error\n\t\t}\n\t\tawait assertImportResult(response)\n\t}\n\n\tdataExport = async ({ project: { name: project, token, endpoint: baseUrl }, gzip, includeSystem, excludeTables }: {\n\t\tproject: RemoteProject\n\t\texcludeTables?: string[]\n\t\tincludeSystem: boolean\n\t\tgzip: boolean\n\t}): Promise<DataExportResponse> => {\n\t\tconst context = transferContext('Export', baseUrl)\n\t\tlet response: Response\n\t\ttry {\n\t\t\tresponse = await fetch(`${baseUrl}/export`, {\n\t\t\t\theaders: {\n\t\t\t\t\t'Authorization': `Bearer ${token}`,\n\t\t\t\t\t'Accept-Encoding': gzip ? 'gzip' : 'identity',\n\t\t\t\t\t'Content-type': 'application/json',\n\t\t\t\t},\n\t\t\t\tmethod: 'POST',\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\tprojects: [{ slug: project, system: includeSystem, excludeTables }],\n\t\t\t\t}),\n\t\t\t})\n\t\t} catch (error) {\n\t\t\tthrow toTransportError(error, context)\n\t\t}\n\t\tif (!response.ok) {\n\t\t\tawait cancelResponseBody(response)\n\t\t\tthrow toHttpTransportError(\n\t\t\t\t{ status: response.status, retryAfter: response.headers.get('retry-after') },\n\t\t\t\tcontext,\n\t\t\t)\n\t\t}\n\t\treturn response\n\t}\n}\n\nexport const toDataExportStream = (response: DataExportResponse): Readable => {\n\tif (!response.body) {\n\t\tthrow new CliError('Export response does not contain a readable stream', {\n\t\t\tcode: 'TRANSFER_EXPORT_INVALID_RESPONSE',\n\t\t\texitCode: ExitCode.InternalError,\n\t\t\tdetails: { operation: 'export' },\n\t\t})\n\t}\n\treturn response.body instanceof Readable ? response.body : new WebResponseReadable(response.body)\n}\n\nexport const toDataTransferStreamError = (operation: 'Import' | 'Export', cause: unknown): CliError => transferStreamError(operation, cause)\n"],"names":["CliError","ExitCode","stream","Readable","LineTransform","PassThrough","pipeline","createGzip","response","toTransportError","toHttpTransportError"],"mappings":";;;;;;;;;;;AAQA,MAAM,kBAAkB,CAAC,QAA6B,cAAsB;AAAA,EAC3E,SAAS,QAAQ,OAAO,YAAA,CAAa;AAAA,EACrC,YAAY,YAAY,OAAO,YAAA,CAAa;AAAA,EAC5C,KAAK,GAAG,QAAQ,IAAI,OAAO,aAAa;AACzC;AAEA,MAAM,sBAAsB,CAAC,QAA6B,UACzD,IAAIA,UAAAA,SAAS,GAAG,MAAM,kBAAkB;AAAA,EACvC,MAAM,YAAY,OAAO,YAAA,CAAa;AAAA,EACtC,UAAUC,UAAAA,SAAS;AAAA,EACnB,SAAS,EAAE,WAAW,OAAO,cAAY;AAAA,EACzC;AACD,CAAC;AAUF,MAAM,2CAAgD,IAAyB;AAAA,EAC9E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,CAAC;AAED,MAAM,wBAAwB,CAAC,UAAgD,qBAAqB,IAAI,KAAK;AAO7G,MAAM,qBAAqB,CAAC,SAAgC;AAC3D,QAAM,QAAiB,KAAK,MAAM,IAAI;AACtC,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,OAAO,MAAM,CAAC,MAAM,UAAU;AAC1D,UAAM,uBAAuB,iCAAiC;AAAA,EAC/D;AACA,MAAI,CAAC,sBAAsB,MAAM,CAAC,CAAC,GAAG;AACrC,UAAM,uBAAuB,iCAAiC;AAAA,EAC/D;AACA,QAAM,UAAU,MAAM,CAAC;AACvB,SAAO;AAAA,IACN,MAAM,MAAM,CAAC;AAAA,IACb,GAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,MAAM,QAAQ,OAAO,IAAI,EAAE,QAAA,IAAY,CAAA;AAAA,EAAC;AAElG;AAEA,MAAM,yBAAyB,CAAC,SAC/B,IAAID,UAAAA,SAAS,iDAAiD;AAAA,EAC7D;AAAA,EACA,UAAUC,UAAAA,SAAS;AAAA,EACnB,SAAS,EAAE,WAAW,SAAA;AACvB,CAAC;AAEF,MAAM,6BAA6B,CAAC,UAA6B;AAChE,MACC,iBAAiBD,UAAAA,aACb,MAAM,SAAS,qCAAqC,MAAM,SAAS,oCACtE;AACD,WAAO;AAAA,EACR;AACA,SAAO,oBAAoB,UAAU,KAAK;AAC3C;AAEA,MAAM,sBAAsB,CAAC,UAAkD;AAC9E,MAAI,MAAM,YAAY,QAAW;AAChC,UAAM,IAAI,MAAM,kBAAkB,MAAM,IAAI,iBAAiB;AAAA,EAC9D;AACA,SAAO,MAAM;AACd;AAEA,MAAM,UAAU,CAAC,UAA+B;AAC/C,MAAI,OAAO,UAAU,UAAU;AAC9B,WAAO,OAAO,KAAK,KAAK;AAAA,EACzB;AACA,MAAI,iBAAiB,YAAY;AAChC,WAAO;AAAA,EACR;AACA,QAAM,oBAAoB,UAAU,IAAI,MAAM,0BAA0B,CAAC;AAC1E;AAEA,MAAM,iBAAiB,CAACE,YAAiD;AACxE,QAAM,WAAmCA,QAAO,OAAO,aAAa,EAAA;AACpE,SAAO,IAAI,eAA2B;AAAA,IACrC,MAAM,KAAK,YAAY;AACtB,UAAI;AACH,cAAM,OAAO,MAAM,SAAS,KAAA;AAC5B,YAAI,KAAK,MAAM;AACd,qBAAW,MAAA;AAAA,QACZ,OAAO;AACN,qBAAW,QAAQ,QAAQ,KAAK,KAAK,CAAC;AAAA,QACvC;AAAA,MACD,SAAS,OAAO;AACf,mBAAW,MAAM,oBAAoB,UAAU,KAAK,CAAC;AAAA,MACtD;AAAA,IACD;AAAA,IACA,MAAM,SAAS;AACd,MAAAA,QAAO,QAAA;AACP,UAAI;AACH,cAAM,SAAS,SAAA;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACD;AAAA,EAAA,CACA;AACF;AAEA,MAAM,4BAA4BC,YAAAA,SAAS;AAAA,EAK1C,YAAYD,SAAoC;AAC/C,UAAA;AALD,kBAAA,MAAiB,QAAA;AACjB,kBAAA,MAAQ,WAAU,KAAA;AAClB,kBAAA,MAAQ,YAAW,KAAA;AAIlB,SAAK,SAASA,QAAO,UAAA;AAAA,EACtB;AAAA,EAEgB,QAAc;AAC7B,QAAI,KAAK,WAAW,KAAK,WAAW;AACnC;AAAA,IACD;AACA,SAAK,UAAU;AACf,SAAK,KAAK,SAAA;AAAA,EACX;AAAA,EAEgB,SAAS,OAAqB,UAAgD;AAC7F,SAAK,eAAe;AAAA,MACnB,MAAM,SAAS,KAAK;AAAA,MACpB,MAAM,SAAS,KAAK;AAAA,IAAA;AAAA,EAEtB;AAAA,EAEA,MAAc,WAA0B;AACvC,QAAI;AACH,YAAM,OAAO,MAAM,KAAK,OAAO,KAAA;AAC/B,UAAI,KAAK,WAAW;AACnB;AAAA,MACD;AACA,UAAI,KAAK,MAAM;AACd,aAAK,cAAA;AACL,aAAK,KAAK,IAAI;AACd;AAAA,MACD;AACA,WAAK,UAAU;AACf,UAAI,KAAK,KAAK,KAAK,KAAK,GAAG;AAC1B,aAAK,MAAA;AAAA,MACN;AAAA,IACD,SAAS,OAAO;AACf,WAAK,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,+BAA+B,CAAC;AAAA,IACzF;AAAA,EACD;AAAA,EAEA,MAAc,eAA8B;AAC3C,QAAI,KAAK,UAAU;AAClB;AAAA,IACD;AACA,QAAI;AACH,YAAM,KAAK,OAAO,OAAA;AAAA,IACnB,QAAQ;AAAA,IAER,UAAA;AACC,WAAK,cAAA;AAAA,IACN;AAAA,EACD;AAAA,EAEQ,gBAAsB;AAC7B,QAAI,CAAC,KAAK,UAAU;AACnB,WAAK,WAAW;AAChB,WAAK,OAAO,YAAA;AAAA,IACb;AAAA,EACD;AACD;AAEA,MAAM,qBAAqB,OAAO,aAAsC;AACvE,MAAI;AACH,UAAM,SAAS,MAAM,OAAA;AAAA,EACtB,QAAQ;AAAA,EAER;AACD;AAEA,MAAM,qBAAqB,OAAO,aAAsC;AACvE,MAAI;AACJ,MAAI;AACH,WAAO,MAAM,SAAS,KAAA;AAAA,EACvB,SAAS,OAAO;AACf,UAAM,IAAIF,UAAAA,SAAS,uCAAuC;AAAA,MACzD,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,MACnB,SAAS,EAAE,WAAW,SAAA;AAAA,MACtB;AAAA,IAAA,CACA;AAAA,EACF;AACA,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,QAAQ,QAAQ,KAAK,OAAO,MAAM;AAClF;AAAA,EACD;AACA,QAAM,IAAID,UAAAA,SAAS,iBAAiB;AAAA,IACnC,MAAM;AAAA,IACN,UAAUC,UAAAA,SAAS;AAAA,IACnB,SAAS,EAAE,WAAW,SAAA;AAAA,EAAS,CAC/B;AACF;AAkBO,MAAM,mBAAmB;AAAA,EAAzB,cAAA;AACN,kBAAA,MAAA,cAAa,OAAO,EAAE,eAAA,QAAeC,UAAQ,SAAS,WAKjC;AACpB,UAAI,QAAQ;AACZ,UAAI,WAAW;AACf,UAAI,WAAW;AACf,UAAI,cAAc;AAClB,UAAI,QAAQ,KAAK,IAAA;AACjB,YAAM,oBAAoB,IAAIE,qBAAc,CAAA,SAAQ;AACnD,uBAAe,KAAK,SAAS;AAC7B,YAAI,SAAS,IAAI;AAChB,iBAAO;AAAA,QACR;AACA,cAAM,QAAQ,mBAAmB,IAAI;AACrC,gBAAQ,MAAM,MAAA;AAAA,UACb,KAAK;AACJ,mBAAO,KAAK,UAAU,CAAC,MAAM,MAAM,EAAE,GAAG,oBAAoB,KAAK,GAAG,SAAS,QAAQ,KAAA,CAAM,CAAC;AAAA,UAC7F,KAAK;AACJ,mBAAO,KAAK,UAAU,CAAC,MAAM,MAAM,EAAE,GAAG,oBAAoB,KAAK,GAAG,SAAS,QAAQ,KAAA,CAAM,CAAC;AAAA,UAC7F,KAAK;AACJ;AAAA,UACD,KAAK;AACJ,gBAAI,OAAO,MAAM,SAAS,UAAU,UAAU;AAC7C,oBAAM,IAAI,MAAM,2BAA2B;AAAA,YAC5C;AACA,oBAAQ,MAAM,QAAQ;AACtB,uBAAW;AACX;AAAA,UACD,KAAK;AACJ;AACA;AACA;AAAA,QAEA;AAEF,YAAK,WAAW,QAAU,KAAK,MAAM,SAAS,aAAa;AAC1D,gBAAM,MAAM,KAAK,MAAM,cAAc,OAAO,IAAI,EAAE,SAAA;AAClD,gBAAM,YAAY,KAAK,OAAO,KAAK,IAAA,IAAQ,SAAS,GAAI;AACxD,wBAAc,eAAe,GAAG,kBAAkB,QAAQ,IAAI,KAAK,UAAU,QAAQ,WAAW,SAAS,UAAU;AAAA,QACpH;AACA,eAAO;AAAA,MACR,CAAC;AACD,YAAM,eAAe,IAAIC,wBAAA;AACzB,YAAM,kBAAkB,IAAI,gBAAA;AAC5B,YAAM,UAAU,OACbC,kBAASJ,UAAQ,mBAAmBK,UAAAA,cAAc,YAAY,IAC9DD,SAAAA,SAASJ,UAAQ,mBAAmB,YAAY;AACnD,YAAM,UAAU,gBAAgB,UAAU,QAAQ,QAAQ;AAC1D,YAAM,cAAoC;AAAA,QACzC,SAAS;AAAA,UACR,iBAAiB,UAAU,QAAQ,KAAK;AAAA,UACxC,gBAAgB;AAAA,UAChB,GAAI,OAAO,EAAE,oBAAoB,WAAW,CAAA;AAAA,QAAC;AAAA,QAE9C,QAAQ;AAAA,QACR,MAAM,eAAe,YAAY;AAAA,QACjC,QAAQ;AAAA,QACR,QAAQ,gBAAgB;AAAA,MAAA;AAEzB,YAAM,aAAa,MAAM,GAAG,QAAQ,QAAQ,WAAW,WAAW;AAClE,YAAM,OAAmC,QAAQ;AAAA,QAChD,OAAO,EAAE,MAAM;QACf,CAAA,UAAS;AACR,0BAAgB,MAAA;AAChB,iBAAO,EAAE,MAAM,cAAc,OAAO,2BAA2B,KAAK,EAAA;AAAA,QACrE;AAAA,MAAA;AAED,YAAM,UAAyC,WAAW;AAAA,QACzD,CAAAM,eAAa,EAAE,MAAM,YAAY,UAAAA,UAAAA;AAAAA,QACjC,CAAA,WAAU,EAAE,MAAM,iBAAiB,OAAOC,gCAAiB,OAAO,OAAO,EAAA;AAAA,MAAE;AAG5E,YAAM,QAAQ,MAAM,QAAQ,KAAK,CAAC,SAAS,IAAI,CAAC;AAChD,UAAI,MAAM,SAAS,cAAc;AAChC,wBAAgB,MAAA;AAChB,qBAAa,QAAA;AACb,cAAM;AACN,cAAM,MAAM;AAAA,MACb;AACA,UAAI,MAAM,SAAS,iBAAiB;AACnC,wBAAgB,MAAA;AAChB,qBAAa,QAAA;AACb,cAAM;AACN,cAAM,MAAM;AAAA,MACb;AACA,YAAM,gBAAgB,MAAM,SAAS,aAAa,QAAQ,MAAM;AAChE,UAAI,cAAc,SAAS,iBAAiB;AAC3C,cAAM,cAAc;AAAA,MACrB;AACA,YAAM,WAAW,cAAc;AAC/B,UAAI,CAAC,SAAS,IAAI;AACjB,wBAAgB,MAAA;AAChB,qBAAa,QAAA;AACb,cAAM;AACN,cAAM,mBAAmB,QAAQ;AACjC,cAAMC,eAAAA;AAAAA,UACL,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,QAAQ,IAAI,aAAa,EAAA;AAAA,UACzE;AAAA,QAAA;AAAA,MAEF;AACA,YAAM,aAAa,MAAM;AACzB,UAAI,WAAW,SAAS,cAAc;AACrC,cAAM,WAAW;AAAA,MAClB;AACA,YAAM,mBAAmB,QAAQ;AAAA,IAClC,CAAA;AAEA,kBAAA,MAAA,cAAa,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,OAAO,UAAU,QAAA,GAAW,MAAM,eAAe,oBAK9D;AAClC,YAAM,UAAU,gBAAgB,UAAU,OAAO;AACjD,UAAI;AACJ,UAAI;AACH,mBAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,UAC3C,SAAS;AAAA,YACR,iBAAiB,UAAU,KAAK;AAAA,YAChC,mBAAmB,OAAO,SAAS;AAAA,YACnC,gBAAgB;AAAA,UAAA;AAAA,UAEjB,QAAQ;AAAA,UACR,MAAM,KAAK,UAAU;AAAA,YACpB,UAAU,CAAC,EAAE,MAAM,SAAS,QAAQ,eAAe,eAAe;AAAA,UAAA,CAClE;AAAA,QAAA,CACD;AAAA,MACF,SAAS,OAAO;AACf,cAAMD,eAAAA,iBAAiB,OAAO,OAAO;AAAA,MACtC;AACA,UAAI,CAAC,SAAS,IAAI;AACjB,cAAM,mBAAmB,QAAQ;AACjC,cAAMC,eAAAA;AAAAA,UACL,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,QAAQ,IAAI,aAAa,EAAA;AAAA,UACzE;AAAA,QAAA;AAAA,MAEF;AACA,aAAO;AAAA,IACR,CAAA;AAAA,EAAA;AACD;AAEO,MAAM,qBAAqB,CAAC,aAA2C;AAC7E,MAAI,CAAC,SAAS,MAAM;AACnB,UAAM,IAAIV,UAAAA,SAAS,sDAAsD;AAAA,MACxE,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,MACnB,SAAS,EAAE,WAAW,SAAA;AAAA,IAAS,CAC/B;AAAA,EACF;AACA,SAAO,SAAS,gBAAgBE,uBAAW,SAAS,OAAO,IAAI,oBAAoB,SAAS,IAAI;AACjG;AAEO,MAAM,4BAA4B,CAAC,WAAgC,UAA6B,oBAAoB,WAAW,KAAK;;;;"}