@digimuza/saas-core 0.0.2

package/dist/db/migrate.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Migrations ship with the package (`files: ["drizzle"]`), so an application can
+ * apply core migrations without vendoring the SQL. Resolved relative to this
+ * module so it works from both `src/` and `dist/`.
+ */
+export declare const coreMigrationsFolder: string;
+export interface RunMigrationsOptions {
+    /** Connection string. Falls back to the `database` configuration section. */
+    url?: string;
+    /** Override the migrations directory. Defaults to the core migrations. */
+    migrationsFolder?: string;
+}
+/**
+ * Apply core migrations, then close the connection.
+ *
+ * Uses a dedicated single connection rather than the shared pool: migrations
+ * take advisory locks and must not compete with application traffic, and the
+ * process running them is usually short-lived.
+ */
+export declare function runMigrations(options?: RunMigrationsOptions): Promise<void>;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAA2D,CAAC;AAE7F,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrF"}

package/dist/db/migrate.js

@@ -0,0 +1,28 @@
+import { fileURLToPath } from "node:url";
+import { migrate } from "drizzle-orm/postgres-js/migrator";
+import { createDatabase } from "./client.js";
+/**
+ * Migrations ship with the package (`files: ["drizzle"]`), so an application can
+ * apply core migrations without vendoring the SQL. Resolved relative to this
+ * module so it works from both `src/` and `dist/`.
+ */
+export const coreMigrationsFolder = fileURLToPath(new URL("../../drizzle", import.meta.url));
+/**
+ * Apply core migrations, then close the connection.
+ *
+ * Uses a dedicated single connection rather than the shared pool: migrations
+ * take advisory locks and must not compete with application traffic, and the
+ * process running them is usually short-lived.
+ */
+export async function runMigrations(options = {}) {
+    const url = options.url ?? (await import("../config/index.js")).config.database.url;
+    const migrationsFolder = options.migrationsFolder ?? coreMigrationsFolder;
+    const handle = createDatabase({ url, maxConnections: 1 });
+    try {
+        await migrate(handle.db, { migrationsFolder });
+    }
+    finally {
+        await handle.close();
+    }
+}
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAS7F;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAyB,EAAE;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;IAE1E,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/db/schema/_shared.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared column conventions for every core-owned table.
+ *
+ * Conventions this package follows, and that product applications should follow
+ * for their own tables so the two halves of the schema stay coherent:
+ *
+ * - Table and column names are `snake_case` and written **explicitly**. Nothing
+ *   relies on Drizzle's `casing` inference, so a rename is always a visible diff.
+ * - Primary keys are UUIDs generated by PostgreSQL (`gen_random_uuid()`), not
+ *   sequential integers: identifiers appear in URLs and API payloads, and
+ *   sequential ids leak volume and allow enumeration across tenants.
+ * - Timestamps are `timestamptz`. Never store naive local time.
+ * - Every tenant-scoped table carries `workspace_id` and enforces isolation with
+ *   a foreign key; tenancy is never inferred from a join path alone.
+ */
+/** Standard UUID primary key, generated by PostgreSQL. */
+export declare const primaryId: () => import("drizzle-orm").IsPrimaryKey<import("drizzle-orm").NotNull<import("drizzle-orm").HasDefault<import("drizzle-orm/pg-core").PgUUIDBuilderInitial<"id">>>>;
+/**
+ * `created_at` / `updated_at` pair.
+ *
+ * `updated_at` is maintained by Drizzle on update. It is intentionally *not* a
+ * database trigger: writes that bypass the application (manual SQL, data
+ * repairs) should be visible as a stale timestamp rather than silently
+ * rewritten.
+ */
+export declare const timestamps: {
+    createdAt: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm/pg-core").PgTimestampBuilderInitial<"created_at">>>;
+    updatedAt: import("drizzle-orm").HasDefault<import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm/pg-core").PgTimestampBuilderInitial<"updated_at">>>>;
+};
+//# sourceMappingURL=_shared.d.ts.map

package/dist/db/schema/_shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../../src/db/schema/_shared.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,SAAS,qKAAgD,CAAC;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU;IACrB,SAAS;IAGT,SAAS;CAIV,CAAC"}

package/dist/db/schema/_shared.js

@@ -0,0 +1,36 @@
+import { timestamp, uuid } from "drizzle-orm/pg-core";
+/**
+ * Shared column conventions for every core-owned table.
+ *
+ * Conventions this package follows, and that product applications should follow
+ * for their own tables so the two halves of the schema stay coherent:
+ *
+ * - Table and column names are `snake_case` and written **explicitly**. Nothing
+ *   relies on Drizzle's `casing` inference, so a rename is always a visible diff.
+ * - Primary keys are UUIDs generated by PostgreSQL (`gen_random_uuid()`), not
+ *   sequential integers: identifiers appear in URLs and API payloads, and
+ *   sequential ids leak volume and allow enumeration across tenants.
+ * - Timestamps are `timestamptz`. Never store naive local time.
+ * - Every tenant-scoped table carries `workspace_id` and enforces isolation with
+ *   a foreign key; tenancy is never inferred from a join path alone.
+ */
+/** Standard UUID primary key, generated by PostgreSQL. */
+export const primaryId = () => uuid("id").defaultRandom().primaryKey();
+/**
+ * `created_at` / `updated_at` pair.
+ *
+ * `updated_at` is maintained by Drizzle on update. It is intentionally *not* a
+ * database trigger: writes that bypass the application (manual SQL, data
+ * repairs) should be visible as a stale timestamp rather than silently
+ * rewritten.
+ */
+export const timestamps = {
+    createdAt: timestamp("created_at", { withTimezone: true, mode: "date" })
+        .notNull()
+        .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, mode: "date" })
+        .notNull()
+        .defaultNow()
+        .$onUpdate(() => new Date()),
+};
+//# sourceMappingURL=_shared.js.map

package/dist/db/schema/_shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_shared.js","sourceRoot":"","sources":["../../../src/db/schema/_shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;;;;;;;;;GAcG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACrE,OAAO,EAAE;SACT,UAAU,EAAE;IACf,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACrE,OAAO,EAAE;SACT,UAAU,EAAE;SACZ,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC/B,CAAC"}

package/dist/db/schema/apikeys.d.ts

@@ -0,0 +1,263 @@
+/**
+ * A workspace-scoped API key.
+ *
+ * ## How a key is stored
+ *
+ * A presented key looks like `dgk_<keyId>_<secret>`. Only `key_id` is stored in
+ * the clear; `key_hash` is a SHA-256 digest of the secret half.
+ *
+ * The split exists so validation is a single indexed lookup. Hashing the whole key
+ * would mean either scanning every row's hash or storing a searchable copy — the
+ * first is O(n) on every API request, the second defeats the point of hashing.
+ *
+ * ## Why SHA-256 and not bcrypt
+ *
+ * The secret is 256 bits of CSPRNG output, so there is no dictionary to attack and
+ * no need for a slow KDF. bcrypt or Argon2 exist to make *low-entropy* human
+ * passwords expensive to guess; applying one here would add tens of milliseconds
+ * to every authenticated request and buy nothing.
+ */
+export declare const apiKeys: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "api_keys";
+    schema: undefined;
+    columns: {
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "api_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "api_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "workspace_id";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: "name";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        keyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "key_id";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        keyHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "key_hash";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        scopes: import("drizzle-orm/pg-core").PgColumn<{
+            name: "scopes";
+            tableName: "api_keys";
+            dataType: "array";
+            columnType: "PgArray";
+            data: string[];
+            driverParam: string | string[];
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: import("drizzle-orm").Column<{
+                name: "scopes";
+                tableName: "api_keys";
+                dataType: "string";
+                columnType: "PgText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            baseBuilder: import("drizzle-orm/pg-core").PgColumnBuilder<{
+                name: "scopes";
+                dataType: 'string';
+                columnType: 'PgText';
+                data: string;
+                enumValues: [string, ...string[]];
+                driverParam: string;
+            }, {}, {}, import("drizzle-orm").ColumnBuilderExtraConfig>;
+            size: undefined;
+        }>;
+        createdByUserId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by_user_id";
+            tableName: "api_keys";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastUsedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_used_at";
+            tableName: "api_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "api_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        revokedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "revoked_at";
+            tableName: "api_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
+export declare const apiKeysRelations: import("drizzle-orm").Relations<"api_keys", {
+    workspace: import("drizzle-orm").One<"workspaces", true>;
+    createdBy: import("drizzle-orm").One<"users", false>;
+}>;
+export type ApiKey = typeof apiKeys.$inferSelect;
+export type NewApiKey = typeof apiKeys.$inferInsert;
+//# sourceMappingURL=apikeys.d.ts.map

package/dist/db/schema/apikeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikeys.d.ts","sourceRoot":"","sources":["../../../src/db/schema/apikeys.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoDnB,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;EAG1B,CAAC;AAEJ,MAAM,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AACjD,MAAM,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC"}

package/dist/db/schema/apikeys.js

@@ -0,0 +1,70 @@
+import { relations, sql } from "drizzle-orm";
+import { index, pgTable, text, timestamp, uuid } from "drizzle-orm/pg-core";
+import { primaryId, timestamps } from "./_shared.js";
+import { users } from "./users.js";
+import { workspaces } from "./workspaces.js";
+/**
+ * A workspace-scoped API key.
+ *
+ * ## How a key is stored
+ *
+ * A presented key looks like `dgk_<keyId>_<secret>`. Only `key_id` is stored in
+ * the clear; `key_hash` is a SHA-256 digest of the secret half.
+ *
+ * The split exists so validation is a single indexed lookup. Hashing the whole key
+ * would mean either scanning every row's hash or storing a searchable copy — the
+ * first is O(n) on every API request, the second defeats the point of hashing.
+ *
+ * ## Why SHA-256 and not bcrypt
+ *
+ * The secret is 256 bits of CSPRNG output, so there is no dictionary to attack and
+ * no need for a slow KDF. bcrypt or Argon2 exist to make *low-entropy* human
+ * passwords expensive to guess; applying one here would add tens of milliseconds
+ * to every authenticated request and buy nothing.
+ */
+export const apiKeys = pgTable("api_keys", {
+    id: primaryId(),
+    workspaceId: uuid("workspace_id")
+        .notNull()
+        .references(() => workspaces.id, { onDelete: "cascade" }),
+    /** Human label, shown in the key list. */
+    name: text("name").notNull(),
+    /**
+     * Public half of the key. Unique, indexed, and safe to display — it is what
+     * lets an operator match a key in a log line to a row in the table.
+     */
+    keyId: text("key_id").notNull().unique(),
+    /** SHA-256 of the secret half. Never the secret. */
+    keyHash: text("key_hash").notNull(),
+    /**
+     * What the key may do. Application-defined, like permissions — but separate
+     * from them: a key is not a user and holds no roles.
+     */
+    scopes: text("scopes").array().notNull().default(sql `'{}'::text[]`),
+    /**
+     * Who created it. Set null on user deletion so the key survives, but see
+     * `apiKeys.resolveContext` — a key can be made to stop working when its
+     * creator loses access.
+     */
+    createdByUserId: uuid("created_by_user_id").references(() => users.id, {
+        onDelete: "set null",
+    }),
+    /**
+     * Last successful validation, updated at most once a minute.
+     *
+     * Writing on every request would turn a read path into a write path; a
+     * minute's resolution is enough to answer "is this key still in use?".
+     */
+    lastUsedAt: timestamp("last_used_at", { withTimezone: true, mode: "date" }),
+    /** Null for a key that never expires. */
+    expiresAt: timestamp("expires_at", { withTimezone: true, mode: "date" }),
+    revokedAt: timestamp("revoked_at", { withTimezone: true, mode: "date" }),
+    ...timestamps,
+}, (table) => [
+    index("api_keys_workspace_idx").on(table.workspaceId, table.createdAt.desc()),
+]);
+export const apiKeysRelations = relations(apiKeys, ({ one }) => ({
+    workspace: one(workspaces, { fields: [apiKeys.workspaceId], references: [workspaces.id] }),
+    createdBy: one(users, { fields: [apiKeys.createdByUserId], references: [users.id] }),
+}));
+//# sourceMappingURL=apikeys.js.map

package/dist/db/schema/apikeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikeys.js","sourceRoot":"","sources":["../../../src/db/schema/apikeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAC5B,UAAU,EACV;IACE,EAAE,EAAE,SAAS,EAAE;IACf,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAE3D,0CAA0C;IAC1C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAE5B;;;OAGG;IACH,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAExC,oDAAoD;IACpD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IAEnC;;;OAGG;IACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,cAAc,CAAC;IAEnE;;;;OAIG;IACH,eAAe,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;QACrE,QAAQ,EAAE,UAAU;KACrB,CAAC;IAEF;;;;;OAKG;IACH,UAAU,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE3E,yCAAyC;IACzC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAExE,GAAG,UAAU;CACd,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;CAC9E,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1F,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC,CAAC"}