@elytracms/studio 0.0.76 → 0.0.78

package/dist/lib/auth/route-guard.d.ts

@@ -22,12 +22,33 @@ export type RouteGuardDecision =
     readonly kind: 'redirect-to-sign-in';
     readonly redirect: string;
 }
-/** Authenticated user on the sign-in screen → send them home (or back). */
+/**
+ * Authenticated user on the sign-in screen → send them to the validated
+ * still-pending `?redirect` target, falling back home (EC-451). Carrying
+ * the target IN the decision is what makes the post-sign-in navigation
+ * order-independent: whichever navigation wins the race — `SignInView`'s
+ * own `postSignInTarget` navigate or this gate bounce (dev auto-login, a
+ * fast real sign-in) — both compute the same validated target.
+ */
  | {
     readonly kind: 'redirect-home';
+    readonly target: string;
 };
-export declare function resolveRouteGuard(pathname: string, status: AuthStatus): RouteGuardDecision;
-/** Where to navigate after a successful sign-in. Rejects external targets. */
+export declare function resolveRouteGuard(pathname: string, status: AuthStatus, redirect?: string): RouteGuardDecision;
+/**
+ * Where to navigate after a successful sign-in. The ONE validator for the
+ * `?redirect` search param — an attacker-suppliable input — shared by
+ * `SignInView`'s post-sign-in navigate and the `AuthGate`'s signed-in bounce
+ * (EC-451). Rejects everything but a same-origin relative path:
+ *
+ * - no leading `/` → absolute URLs (`https://evil.example`), `javascript:` …;
+ * - `//…` → protocol-relative external URLs;
+ * - any `\` → browsers normalize `\`→`/` when resolving a URL, so
+ *   `/\evil.example` would become `//evil.example` (EC-304 B-3 precedent);
+ * - any tab/CR/LF → the WHATWG URL parser strips them, so `/\t\/evil.example`
+ *   would collapse to `//evil.example`;
+ * - the sign-in screen itself → circular.
+ */
 export declare function postSignInTarget(redirect: string | undefined): string;
 /** Map a session onto the operations-layer {@link Principal}. */
 export declare function sessionPrincipal(session: AuthSession): Principal;

package/dist/lib/auth/route-guard.js

@@ -13,7 +13,7 @@ const PUBLIC_PATHS = new Set([SIGN_IN_PATH, '/styleguide']);
 export function isPublicPath(pathname) {
     return PUBLIC_PATHS.has(normalize(pathname));
 }
-export function resolveRouteGuard(pathname, status) {
+export function resolveRouteGuard(pathname, status, redirect) {
     const path = normalize(pathname);
     if (status === 'loading') {
         // Public paths render immediately; protected ones wait for the session.
@@ -26,15 +26,36 @@ export function resolveRouteGuard(pathname, status) {
     }
     // signed-in
     if (path === SIGN_IN_PATH)
-        return { kind: 'redirect-home' };
+        return { kind: 'redirect-home', target: postSignInTarget(redirect) };
     return { kind: 'allow' };
 }
-/** Where to navigate after a successful sign-in. Rejects external targets. */
+/**
+ * Where to navigate after a successful sign-in. The ONE validator for the
+ * `?redirect` search param — an attacker-suppliable input — shared by
+ * `SignInView`'s post-sign-in navigate and the `AuthGate`'s signed-in bounce
+ * (EC-451). Rejects everything but a same-origin relative path:
+ *
+ * - no leading `/` → absolute URLs (`https://evil.example`), `javascript:` …;
+ * - `//…` → protocol-relative external URLs;
+ * - any `\` → browsers normalize `\`→`/` when resolving a URL, so
+ *   `/\evil.example` would become `//evil.example` (EC-304 B-3 precedent);
+ * - any tab/CR/LF → the WHATWG URL parser strips them, so `/\t\/evil.example`
+ *   would collapse to `//evil.example`;
+ * - the sign-in screen itself → circular.
+ */
 export function postSignInTarget(redirect) {
-    if (!redirect || !redirect.startsWith('/') || redirect.startsWith('//'))
+    if (!redirect || !isSameOriginPath(redirect))
         return '/';
     return normalize(redirect) === SIGN_IN_PATH ? '/' : redirect;
 }
+/** Same-origin relative-path check for {@link postSignInTarget}. */
+function isSameOriginPath(target) {
+    if (!target.startsWith('/') || target.startsWith('//'))
+        return false;
+    // No legitimate studio path contains a backslash or a strippable control
+    // character — reject outright instead of normalizing (fallback is home).
+    return !/[\\\t\r\n]/.test(target);
+}
 /** Map a session onto the operations-layer {@link Principal}. */
 export function sessionPrincipal(session) {
     return {

package/dist/lib/auth/route-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-guard.js","sourceRoot":"","sources":["../../../src/lib/auth/route-guard.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAA;AAEtC;;;;GAIG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAA;AAEhF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9C,CAAC;AAcD,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAkB;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,wEAAwE;QACxE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrE,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAChD,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACxD,CAAC;IACD,YAAY;IACZ,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAA;IACnF,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/E,OAAO,QAAQ,CAAA;AACjB,CAAC","sourcesContent":["import type { Principal } from '@elytracms/core/operations'\nimport type { AuthSession } from './auth-adapter'\n\n/**\n * Pure route-guard + principal-mapping logic (EC-150), kept free of React and\n * router types so it is unit-testable and deterministic. The `__root` layout\n * applies {@link resolveRouteGuard} on every location change.\n */\n\nexport const SIGN_IN_PATH = '/sign-in'\n\n/**\n * Paths reachable without a session: the sign-in screen itself and the\n * component styleguide (a static internal reference, not a project surface).\n * Everything else — project surfaces, the launcher — requires a session.\n */\nconst PUBLIC_PATHS: ReadonlySet<string> = new Set([SIGN_IN_PATH, '/styleguide'])\n\nexport function isPublicPath(pathname: string): boolean {\n  return PUBLIC_PATHS.has(normalize(pathname))\n}\n\nexport type AuthStatus = 'loading' | 'signed-in' | 'signed-out'\n\nexport type RouteGuardDecision =\n  /** Render the route. */\n  | { readonly kind: 'allow' }\n  /** Session still resolving — render the deterministic checking state. */\n  | { readonly kind: 'pending' }\n  /** Unauthenticated on a protected path → sign-in, preserving the target. */\n  | { readonly kind: 'redirect-to-sign-in'; readonly redirect: string }\n  /** Authenticated user on the sign-in screen → send them home (or back). */\n  | { readonly kind: 'redirect-home' }\n\nexport function resolveRouteGuard(pathname: string, status: AuthStatus): RouteGuardDecision {\n  const path = normalize(pathname)\n  if (status === 'loading') {\n    // Public paths render immediately; protected ones wait for the session.\n    return isPublicPath(path) ? { kind: 'allow' } : { kind: 'pending' }\n  }\n  if (status === 'signed-out') {\n    if (isPublicPath(path)) return { kind: 'allow' }\n    return { kind: 'redirect-to-sign-in', redirect: path }\n  }\n  // signed-in\n  if (path === SIGN_IN_PATH) return { kind: 'redirect-home' }\n  return { kind: 'allow' }\n}\n\n/** Where to navigate after a successful sign-in. Rejects external targets. */\nexport function postSignInTarget(redirect: string | undefined): string {\n  if (!redirect || !redirect.startsWith('/') || redirect.startsWith('//')) return '/'\n  return normalize(redirect) === SIGN_IN_PATH ? '/' : redirect\n}\n\n/** Map a session onto the operations-layer {@link Principal}. */\nexport function sessionPrincipal(session: AuthSession): Principal {\n  return {\n    id: session.user.id,\n    ...(session.user.name ? { name: session.user.name } : {}),\n    ...(session.user.globalFlags ? { roles: session.user.globalFlags } : {}),\n  }\n}\n\nfunction normalize(pathname: string): string {\n  if (pathname.length > 1 && pathname.endsWith('/')) return pathname.slice(0, -1)\n  return pathname\n}\n"]}
+{"version":3,"file":"route-guard.js","sourceRoot":"","sources":["../../../src/lib/auth/route-guard.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAA;AAEtC;;;;GAIG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAA;AAEhF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9C,CAAC;AAqBD,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAkB,EAClB,QAAiB;IAEjB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,wEAAwE;QACxE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACrE,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAChD,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACxD,CAAC;IACD,YAAY;IACZ,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC/F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAA;IACxD,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9D,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACnC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/E,OAAO,QAAQ,CAAA;AACjB,CAAC","sourcesContent":["import type { Principal } from '@elytracms/core/operations'\nimport type { AuthSession } from './auth-adapter'\n\n/**\n * Pure route-guard + principal-mapping logic (EC-150), kept free of React and\n * router types so it is unit-testable and deterministic. The `__root` layout\n * applies {@link resolveRouteGuard} on every location change.\n */\n\nexport const SIGN_IN_PATH = '/sign-in'\n\n/**\n * Paths reachable without a session: the sign-in screen itself and the\n * component styleguide (a static internal reference, not a project surface).\n * Everything else — project surfaces, the launcher — requires a session.\n */\nconst PUBLIC_PATHS: ReadonlySet<string> = new Set([SIGN_IN_PATH, '/styleguide'])\n\nexport function isPublicPath(pathname: string): boolean {\n  return PUBLIC_PATHS.has(normalize(pathname))\n}\n\nexport type AuthStatus = 'loading' | 'signed-in' | 'signed-out'\n\nexport type RouteGuardDecision =\n  /** Render the route. */\n  | { readonly kind: 'allow' }\n  /** Session still resolving — render the deterministic checking state. */\n  | { readonly kind: 'pending' }\n  /** Unauthenticated on a protected path → sign-in, preserving the target. */\n  | { readonly kind: 'redirect-to-sign-in'; readonly redirect: string }\n  /**\n   * Authenticated user on the sign-in screen → send them to the validated\n   * still-pending `?redirect` target, falling back home (EC-451). Carrying\n   * the target IN the decision is what makes the post-sign-in navigation\n   * order-independent: whichever navigation wins the race — `SignInView`'s\n   * own `postSignInTarget` navigate or this gate bounce (dev auto-login, a\n   * fast real sign-in) — both compute the same validated target.\n   */\n  | { readonly kind: 'redirect-home'; readonly target: string }\n\nexport function resolveRouteGuard(\n  pathname: string,\n  status: AuthStatus,\n  redirect?: string,\n): RouteGuardDecision {\n  const path = normalize(pathname)\n  if (status === 'loading') {\n    // Public paths render immediately; protected ones wait for the session.\n    return isPublicPath(path) ? { kind: 'allow' } : { kind: 'pending' }\n  }\n  if (status === 'signed-out') {\n    if (isPublicPath(path)) return { kind: 'allow' }\n    return { kind: 'redirect-to-sign-in', redirect: path }\n  }\n  // signed-in\n  if (path === SIGN_IN_PATH) return { kind: 'redirect-home', target: postSignInTarget(redirect) }\n  return { kind: 'allow' }\n}\n\n/**\n * Where to navigate after a successful sign-in. The ONE validator for the\n * `?redirect` search param — an attacker-suppliable input — shared by\n * `SignInView`'s post-sign-in navigate and the `AuthGate`'s signed-in bounce\n * (EC-451). Rejects everything but a same-origin relative path:\n *\n * - no leading `/` → absolute URLs (`https://evil.example`), `javascript:` …;\n * - `//…` → protocol-relative external URLs;\n * - any `\\` → browsers normalize `\\`→`/` when resolving a URL, so\n *   `/\\evil.example` would become `//evil.example` (EC-304 B-3 precedent);\n * - any tab/CR/LF → the WHATWG URL parser strips them, so `/\\t\\/evil.example`\n *   would collapse to `//evil.example`;\n * - the sign-in screen itself → circular.\n */\nexport function postSignInTarget(redirect: string | undefined): string {\n  if (!redirect || !isSameOriginPath(redirect)) return '/'\n  return normalize(redirect) === SIGN_IN_PATH ? '/' : redirect\n}\n\n/** Same-origin relative-path check for {@link postSignInTarget}. */\nfunction isSameOriginPath(target: string): boolean {\n  if (!target.startsWith('/') || target.startsWith('//')) return false\n  // No legitimate studio path contains a backslash or a strippable control\n  // character — reject outright instead of normalizing (fallback is home).\n  return !/[\\\\\\t\\r\\n]/.test(target)\n}\n\n/** Map a session onto the operations-layer {@link Principal}. */\nexport function sessionPrincipal(session: AuthSession): Principal {\n  return {\n    id: session.user.id,\n    ...(session.user.name ? { name: session.user.name } : {}),\n    ...(session.user.globalFlags ? { roles: session.user.globalFlags } : {}),\n  }\n}\n\nfunction normalize(pathname: string): string {\n  if (pathname.length > 1 && pathname.endsWith('/')) return pathname.slice(0, -1)\n  return pathname\n}\n"]}

package/dist/lib/persistence/convex-adapter.js

@@ -284,7 +284,7 @@ class ConvexAssetRepository {
         }));
         return doc ? assetRecordFromDoc(doc) : undefined;
     }
-    async listAssets(projectId) {
+    async listAssets(_projectId) {
         const docs = (await this.client.query(queryRef('assets:list'), {}));
         return docs.map(assetRecordFromDoc);
     }
@@ -392,7 +392,7 @@ class ConvexReferenceIndexRepository {
         }));
         return sortedReferenceRecords(docs);
     }
-    async getBuildMarker(projectId) {
+    async getBuildMarker(_projectId) {
         return (await this.client.query(queryRef('references:buildMarker'), {}));
     }
     async setBuildMarker(projectId, marker) {
@@ -400,7 +400,7 @@ class ConvexReferenceIndexRepository {
             entryCount: marker.entryCount,
         });
     }
-    async clearProject(projectId) {
+    async clearProject(_projectId) {
         await this.client.mutation(mutationRef('references:clearProject'), {});
     }
 }

package/dist/lib/persistence/convex-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex-adapter.js","sourceRoot":"","sources":["../../../src/lib/persistence/convex-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAEtE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AA2CpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAIzD,MAAM,SAAS,GAAU,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAEvD,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,IAAI,GACR,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,KAAK,UAAU;QACjD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QAChC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACjE,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,0BAA0B,CAAA;AAa1D,SAAS,gBAAgB,CAAC,GAAgB;IACxC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,iFAAiF;QACjF,6EAA6E;QAC7E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,GAAG,CAAC,GAAG,CAAC,qBAAqB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAWD,sFAAsF;AACtF,SAAS,oBAAoB,CAAC,GAAe,EAAE,SAAiB;IAC9D,OAAO;QACL,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB;IAOJ;IACA;IACA;IARnB;;;;OAIG;IACH,YACmB,MAAwB,EACxB,cAAwC,EAAE,EAC1C,QAAe,SAAS;QAFxB,WAAM,GAAN,MAAM,CAAkB;QACxB,gBAAW,GAAX,WAAW,CAA+B;QAC1C,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,UAAU,CACd,UAAkB,EAClB,YAAsC;QAEtC,mEAAmE;QACnE,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,IAAI,0BAA0B,CAClC,0FAA0F,EAC1F;YACE;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EACL,iFAAiF;gBACnF,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,KAAK;aACd;SACF,CACF,CAAA;IACH,CAAC;IAED,kFAAkF;IAC1E,YAAY,CAAC,SAAiB;QACpC,OAAO;YACL,SAAS;YACT,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,uBAAuB;SACnC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,QAAqB;QAC3D,8EAA8E;QAC9E,sFAAsF;QACtF,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;YACzE,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,EAAE;YACnB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAgB;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3F,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,GAAgB;QACpD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,UAAmB;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;YACnE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAkB,CAAA;QACpB,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,IAAI;aACR,GAAG,CAAC,gBAAgB,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB,EAAE,UAAmB;QACjE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE;YACjF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAkB,CAAA;QACpB,wEAAwE;QACxE,OAAO,SAAS;aACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,GAAgB;QACtD,0EAA0E;QAC1E,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;YAC5D,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,QAAqB,EACrB,UAAsC,EAAE;QAExC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,yBAAyB,CAAC,EAAE;YAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;YACvB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAe,CAAA;QACjB,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,GAAgB;QAEhB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE;YAC1E,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAiB,CAAA;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACnC,QAAQ,CAAC,6BAA6B,CAAC,EACvC,EAAE,CACH,CAAiB,CAAA;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,GAAgB,EAChB,OAAe;QAEf,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO;SACR,CAAC,CAAsB,CAAA;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,GAAG,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,CACtD,CAAA;QACH,CAAC;QACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,GAAgB,EAChB,OAAe;QAEf,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtC,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QACtD,6EAA6E;QAC7E,+EAA+E;QAC/E,4CAA4C;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE;YACjF,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO;YACP,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,GAAG;SACjB,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAgB;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACvD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,sCAAsC,EAAE;gBAC3E;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,0DAA0D;oBACnE,MAAM,EAAE,KAAK;iBACd;aACF,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE;YAC5E,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;SACxB,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;CACF;AA2BD,8FAA8F;AAC9F,SAAS,kBAAkB,CAAC,GAAa;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED,MAAM,qBAAqB;IAEN;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAoB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE;YACpE,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,4EAA4E;YAC5E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,EAAE,EAAE;YACpD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAa,CAAA;QACf,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAU;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,EAAU;QAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;YAC3D,OAAO,EAAE,EAAE;SACZ,CAAC,CAAoB,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAe,CAAA;QACjF,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC7C,wEAAwE;QACxE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAsB;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAA;QAC1C,KAAK,MAAM,KAAK,IAAI,GAAG;YAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAC7E,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAgBD,SAAS,sBAAsB,CAAC,GAAsB;IACpD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;QAClD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;QAClD,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAA;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,sBAAsB,CAAC,IAAyB;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,8BAA8B;IACL;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,OAAyB,EACzB,MAAuB,EACvB,UAAwC;QAExC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,6BAA6B,CAAC,EAAE;YACrE,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;SACJ,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,OAAyB,EACzB,WAA2C,EAC3C,OAAkC;QAElC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kCAAkC,CAAC,EAAE;YAC1E,OAAO;YACP,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;SACJ,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,MAAuB,EACvB,OAA0B;QAE1B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE;YACpE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,MAAuB,EACvB,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;YACrE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,MAAuB,EACvB,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE;YACpE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAAmC,EACnC,UAAkC,EAAE;QAEpC,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;YAC1E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAA0B,CAAA;QAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAA0B;QAE1B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YACjE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAE/D,CAAA;IACV,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,MAAiC;QACvE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE;YACnE,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC;CACF;AAWD;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,GAAc,EAAE,SAAiB;IAC5D,OAAO;QACL,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED,MAAM,uBAAuB;IAER;IAEA;IACA;IAJnB,YACmB,MAAwB;IACzC,wEAAwE;IACvD,cAAsB,EACtB,QAAe,SAAS;QAHxB,WAAM,GAAN,MAAM,CAAkB;QAExB,mBAAc,GAAd,cAAc,CAAQ;QACtB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,MAAc,EACd,IAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAc,CAAA;QAChB,OAAO,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAc;QAChD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC5D,MAAM;SACP,CAAC,CAAqB,CAAA;QACvB,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAgB,CAAA;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,8EAA8E;QAC9E,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAqB,CAAA;QACvF,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5F,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,MAAc;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAgBD,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,GAAY,EAAE,SAAiB;IACxD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS;QACT,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,4EAA4E;QAC5E,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAwB;IAC7C,4EAA4E;IAC5E,kFAAkF;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,oBAAoB;IAEL;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAc,CAAA;QAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAU;QAC1C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAmB,CAAA;QAC9F,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,EAAU;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QACvE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,4EAA4E;QAC5E,8EAA8E;QAC9E,gFAAgF;QAChF,oCAAoC;QACpC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAmB,CAAA;QACtF,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,KAAoB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;YACrD,MAAM,EAAE,KAAK,CAAC,EAAE;YAChB,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAA;QACF,uEAAuE;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,EAAU;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;YAC7D,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAaD,SAAS,mBAAmB,CAAC,GAAc;IACzC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,sBAAsB;IAEP;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAgB,CAAA;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,KAAa;QAC/C,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,KAAsB;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;YACrE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAc,CAAA;QAChB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,KAAa;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;gBACxD,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC;aACnC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAE,GAAG,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACxF,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAYD,SAAS,qBAAqB,CAAC,GAAgB;IAC7C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAA;AACH,CAAC;AAED,MAAM,wBAAwB;IAET;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,KAAuB;QACvC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;YACvE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;SACxB,CAAC,CAAgB,CAAA;QAClB,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAkB,CAAA;QACvF,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;gBACvE,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;aACxB,CAAC,CAAgB,CAAA;YAClB,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YACrD,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;YACjE,SAAS;SACV,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC;CACF;AAeD,SAAS,oBAAoB,CAAC,GAAgB,EAAE,SAAiB;IAC/D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,UAAU;QAClB,SAAS;QACT,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB;IAET;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,KAAwB;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;YACrE,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAgB,CAAA;QAClB,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QAC3E,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,EAAU;QAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;YAC9D,UAAU,EAAE,EAAE;SACf,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAkB,CAAA;QACvF,OAAO,IAAI;aACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,EAAU;QAChD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA,CAAC,2CAA2C;QACjF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;IACjF,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,wBAAwB;IACC;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD,KAAK,CAAC,SAAS;QACb,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAC7B,QAAQ,CAAC,yBAAyB,CAAC,EACnC,EAAE,CACH,CAAyB,CAAA;IAC5B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAmChB;IAlCV,GAAG,CAAe;IAClB,MAAM,CAAiB;IAChC,6EAA6E;IACpE,UAAU,CAA0B;IAC7C,6CAA6C;IACpC,OAAO,CAAmB;IAC1B,OAAO,CAAkB;IAClC,iFAAiF;IACxE,KAAK,CAAgB;IAC9B,wEAAwE;IAC/D,SAAS,CAAoB;IACtC,yDAAyD;IAChD,SAAS,CAAoB;IACtC,oEAAoE;IAC3D,KAAK,CAAoB;IAClC,6EAA6E;IACpE,QAAQ,CAAoB;IACrC;;;;;OAKG;IACM,uBAAuB,GAAG,IAAI,CAAA;IAEvC;;;;;;;OAOG;IACH,YACmB,MAAwB,EACzC,SAAiB,EACjB,cAAwC,EAAE;QAFzB,WAAM,GAAN,MAAM,CAAkB;QAIzC,IAAI,CAAC,GAAG,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,8BAA8B,CAAC,MAAM,CAAC,CAAA;QAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,+EAA+E;YAC/E,uEAAuE;YACvE,6EAA6E;YAC7E,0EAA0E;YAC1E,sCAAsC;YACtC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;YACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,4EAA4E;YAC5E,4EAA4E;YAC5E,mFAAmF;YACnF,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC/E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QACxD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAA6B;QACpC,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;CACF","sourcesContent":["import type { ConvexHttpClient } from 'convex/browser'\nimport { documentKey, documentSchema } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef, DocumentRef } from '@elytracms/core/cms-core'\nimport {\n  RecordNotFoundError,\n  PersistenceValidationError,\n  compareReferenceEntries,\n  highestRole,\n  isKnownRole,\n  validateForPersistence,\n} from '@elytracms/core/persistence'\nimport type {\n  AssetRecord,\n  AssetRepository,\n  BackendStatus,\n  BackendValidationInput,\n  BackendValidationResult,\n  BlobStorageAdapter,\n  CliTokenRecord,\n  CliTokenRepository,\n  CmsRepository,\n  DeliveryConfigStatus,\n  DeliveryRepository,\n  CmsSchemaRecord,\n  CmsDocumentRecord,\n  DocumentVersionRecord,\n  SaveDocumentVersionOptions,\n  MembersRepository,\n  NewAssetInput,\n  NewCliTokenInput,\n  PersistenceAdapter,\n  OutboundReference,\n  ProjectMemberRecord,\n  ProjectRole,\n  ReferenceEntry,\n  ReferenceEntryRecord,\n  ReferenceIndexBuildMarker,\n  ReferenceIndexRepository,\n  ReferenceLookupOptions,\n  ReferenceSource,\n  ReferenceSourceType,\n  ReferenceTarget,\n  ReferenceVariant,\n  RedirectEntry,\n  RedirectRepository,\n  SaveRedirectInput,\n  SaveUserInput,\n  UserRecord,\n  UserRepository,\n  InviteRecord,\n  InviteRepository,\n  SaveInviteInput,\n} from '@elytracms/core/persistence'\nimport { normalizeInviteEmail } from '@elytracms/core/persistence'\nimport { queryRef, mutationRef } from './convex-client'\nimport { ConvexBlobStorage } from './convex-blob-storage'\n\n/** Wall-clock for runtime writes (deterministic seeds use a fixed clock instead). */\ntype Clock = () => string\nconst realClock: Clock = () => new Date().toISOString()\n\nfunction newId(prefix: string): string {\n  const rand =\n    typeof globalThis.crypto?.randomUUID === 'function'\n      ? globalThis.crypto.randomUUID()\n      : Math.abs(Date.parse(new Date().toISOString())).toString(36)\n  return `${prefix}_${rand}`\n}\n\n// --- CMS, Assets ----------------------------------------------------------\n\n/**\n * Deterministic, config-owned schema timestamps (EC-183). CMS collections live\n * in `elytra.config.ts`, not the backend, so the synthesized `CmsSchemaRecord`\n * carries a stable placeholder rather than DB-row timestamps.\n */\nconst CONFIG_SCHEMA_TIMESTAMP = '2026-01-01T00:00:00.000Z'\n\ninterface DocumentDoc {\n  projectId: string\n  document: CmsDocument\n  publishedVersion?: number\n  /** EC-447: the first-publish instant (set-once on publish, cleared on unpublish). */\n  publishedAt?: string\n  /** EC-449: the materialized \"draft differs from the pinned published snapshot\" flag. */\n  hasUnpublishedChanges?: boolean\n  createdAt: string\n  updatedAt: string\n}\nfunction docRecordFromDoc(doc: DocumentDoc): CmsDocumentRecord {\n  return {\n    projectId: doc.projectId,\n    document: doc.document,\n    ...(doc.publishedVersion !== undefined ? { publishedVersion: doc.publishedVersion } : {}),\n    // EC-447: carry the materialized publish instant onto the contract record so the\n    // studio's $publishedAt column + its reconcile read the authoritative value.\n    ...(doc.publishedAt !== undefined ? { publishedAt: doc.publishedAt } : {}),\n    // EC-449: carry the materialized changed flag so hydration + the store's\n    // save/publish/unpublish reconciles read the authoritative verdict.\n    ...(doc.hasUnpublishedChanges !== undefined\n      ? { hasUnpublishedChanges: doc.hasUnpublishedChanges }\n      : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\ninterface VersionDoc {\n  collection: string\n  docId: string\n  version: number\n  snapshot: CmsDocument\n  label?: string\n  origin?: string\n  createdAt: string\n}\n/** The backend row carries no `projectId` (single-tenant); stamp it from the call. */\nfunction versionRecordFromDoc(doc: VersionDoc, projectId: string): DocumentVersionRecord {\n  return {\n    projectId,\n    collection: doc.collection,\n    docId: doc.docId,\n    version: doc.version,\n    snapshot: doc.snapshot,\n    createdAt: doc.createdAt,\n    ...(doc.label ? { label: doc.label } : {}),\n    ...(doc.origin ? { origin: doc.origin } : {}),\n  }\n}\n\nclass ConvexCmsRepository implements CmsRepository {\n  /**\n   * @param collections the active project's config-owned CMS collections\n   *   (EC-183, AD-11), injected from `elytra.config.ts`. The Convex backend has\n   *   no `cmsSchemas` table — `findSchema`/`getSchema` serve these instead.\n   */\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly collections: readonly CollectionDef[] = [],\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async saveSchema(\n    _projectId: string,\n    _collections: readonly CollectionDef[],\n  ): Promise<CmsSchemaRecord> {\n    // Read-only (EC-183, AD-11): the CMS collection schema is owned by\n    // `elytra.config.ts`; the backend stores documents only. A write here is a\n    // visible, structured error rather than a silent no-op (the studio's CMS\n    // schema surfaces are read-only; legitimate writers were removed in EC-183).\n    throw new PersistenceValidationError(\n      'CMS collection schema is owned by elytra.config.ts and cannot be written to the backend.',\n      [\n        {\n          code: 'schema-config-owned',\n          message:\n            'Edit elytra.config.ts to change collections; the backend stores documents only.',\n          path: [],\n          domain: 'cms',\n        },\n      ],\n    )\n  }\n\n  /** Config-owned schema (EC-183): the active project's collections from config. */\n  private configSchema(projectId: string): CmsSchemaRecord {\n    return {\n      projectId,\n      collections: [...this.collections],\n      createdAt: CONFIG_SCHEMA_TIMESTAMP,\n      updatedAt: CONFIG_SCHEMA_TIMESTAMP,\n    }\n  }\n\n  async getSchema(projectId: string): Promise<CmsSchemaRecord> {\n    return this.configSchema(projectId)\n  }\n\n  async findSchema(projectId: string): Promise<CmsSchemaRecord | undefined> {\n    return this.configSchema(projectId)\n  }\n\n  async upsertDocument(projectId: string, document: CmsDocument): Promise<CmsDocumentRecord> {\n    // The backend is a pure document store (EC-183, AD-11): collection-membership\n    // validation lives in `@elytracms/core/cms-core` `validateDocument`, which the studio\n    // runs pre-dispatch (cell edits, imports). We still parse the canonical\n    // document shape so malformed blobs never reach storage.\n    const parsedDoc = documentSchema.parse(document)\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('cms:upsertDocument'), {\n      collection: parsedDoc.collection,\n      docId: parsedDoc.id,\n      document: parsedDoc,\n      createdAt: now,\n      updatedAt: now,\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n\n  async getDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord> {\n    const found = await this.findDocument(projectId, ref)\n    if (!found)\n      throw new RecordNotFoundError('cms-document', `${projectId}/${ref.collection}:${ref.id}`)\n    return found\n  }\n\n  async findDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord | undefined> {\n    const doc = (await this.client.query(queryRef('cms:getDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })) as DocumentDoc | null\n    return doc ? docRecordFromDoc(doc) : undefined\n  }\n\n  async listDocuments(projectId: string, collection?: string): Promise<CmsDocumentRecord[]> {\n    const docs = (await this.client.query(queryRef('cms:listDocuments'), {\n      ...(collection ? { collection } : {}),\n    })) as DocumentDoc[]\n    // EC-153 parity: deterministic document-key ordering (Convex index order\n    // within a project is insertion order, so we sort client-side).\n    return docs\n      .map(docRecordFromDoc)\n      .sort((a, b) => (documentKey(a.document) < documentKey(b.document) ? -1 : 1))\n  }\n\n  async listPublishedDocuments(projectId: string, collection?: string): Promise<CmsDocument[]> {\n    // EC-307: one bulk read for the published pool (collapses the per-document\n    // `listVersions` fan-out). The handler resolves each pin to its snapshot.\n    const snapshots = (await this.client.query(queryRef('cms:listPublishedDocuments'), {\n      ...(collection ? { collection } : {}),\n    })) as CmsDocument[]\n    // Deterministic document-key order (parity with the in-memory adapter).\n    return snapshots\n      .map((doc) => documentSchema.parse(doc))\n      .sort((a, b) => (documentKey(a) < documentKey(b) ? -1 : 1))\n  }\n\n  async deleteDocument(projectId: string, ref: DocumentRef): Promise<void> {\n    // EC-153 parity: deleting a missing document is not-found, never a no-op.\n    await this.getDocument(projectId, ref)\n    await this.client.mutation(mutationRef('cms:deleteDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })\n  }\n\n  async saveDocumentVersion(\n    projectId: string,\n    snapshot: CmsDocument,\n    options: SaveDocumentVersionOptions = {},\n  ): Promise<DocumentVersionRecord> {\n    const parsed = documentSchema.parse(snapshot)\n    const doc = (await this.client.mutation(mutationRef('cms:saveDocumentVersion'), {\n      collection: parsed.collection,\n      docId: parsed.id,\n      snapshot: parsed,\n      createdAt: this.clock(),\n      ...(options.label ? { label: options.label } : {}),\n      ...(options.origin ? { origin: options.origin } : {}),\n    })) as VersionDoc\n    return versionRecordFromDoc(doc, projectId)\n  }\n\n  async listDocumentVersions(\n    projectId: string,\n    ref: DocumentRef,\n  ): Promise<DocumentVersionRecord[]> {\n    const docs = (await this.client.query(queryRef('cms:listDocumentVersions'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })) as VersionDoc[]\n    return docs.map((doc) => versionRecordFromDoc(doc, projectId))\n  }\n\n  async listAllDocumentVersions(projectId: string): Promise<DocumentVersionRecord[]> {\n    const docs = (await this.client.query(\n      queryRef('cms:listAllDocumentVersions'),\n      {},\n    )) as VersionDoc[]\n    return docs.map((doc) => versionRecordFromDoc(doc, projectId))\n  }\n\n  async getDocumentVersion(\n    projectId: string,\n    ref: DocumentRef,\n    version: number,\n  ): Promise<DocumentVersionRecord> {\n    const doc = (await this.client.query(queryRef('cms:getDocumentVersion'), {\n      collection: ref.collection,\n      docId: ref.id,\n      version,\n    })) as VersionDoc | null\n    if (!doc) {\n      throw new RecordNotFoundError(\n        'cms-document-version',\n        `${projectId}/${ref.collection}:${ref.id}#${version}`,\n      )\n    }\n    return versionRecordFromDoc(doc, projectId)\n  }\n\n  async publishDocumentVersion(\n    projectId: string,\n    ref: DocumentRef,\n    version: number,\n  ): Promise<CmsDocumentRecord> {\n    // Taxonomy enforced adapter-side (the handler is lenient): the document and\n    // the pinned version must both exist (each throws RecordNotFoundError).\n    await this.getDocument(projectId, ref)\n    await this.getDocumentVersion(projectId, ref, version)\n    // EC-447: pass a fresh publish-action instant as the SET-ONCE candidate (the\n    // handler writes it only when the row has no `publishedAt` yet). One `now` for\n    // both stamps — this IS the publish moment.\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('cms:publishDocumentVersion'), {\n      collection: ref.collection,\n      docId: ref.id,\n      version,\n      updatedAt: now,\n      publishedAt: now,\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n\n  async unpublishDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord> {\n    const existing = await this.getDocument(projectId, ref)\n    if (existing.publishedVersion === undefined) {\n      throw new PersistenceValidationError('Document is not currently published.', [\n        {\n          code: 'invalid-transition',\n          message: 'Cannot unpublish: the document has no published version.',\n          domain: 'cms',\n        },\n      ])\n    }\n    const doc = (await this.client.mutation(mutationRef('cms:unpublishDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n      updatedAt: this.clock(),\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n}\n\ninterface AssetDoc {\n  projectId: string\n  assetId: string\n  filename: string\n  contentType: string\n  byteSize: number\n  width?: number\n  height?: number\n  alt?: string\n  /** Editable display title (EC-152). */\n  title?: string\n  storageKey: string\n  url?: string\n  /** Normalized image focal point `{ x, y }` in 0–1 (EC-230). */\n  focalPoint?: { x: number; y: number }\n  /** Downscaled editorial preview variant (EC-400). */\n  thumb?: { storageKey: string; url: string; width: number; height: number }\n  /** Delivery LQIP blur-placeholder data URI (EC-420). */\n  lqip?: string\n  /** Schema-driven asset metadata bag (EC-301). */\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** Map a Convex asset doc onto the contract record (assetId → id, drop _id/_creationTime). */\nfunction assetRecordFromDoc(doc: AssetDoc): AssetRecord {\n  return {\n    id: doc.assetId,\n    projectId: doc.projectId,\n    filename: doc.filename,\n    contentType: doc.contentType,\n    byteSize: doc.byteSize,\n    ...(doc.width !== undefined ? { width: doc.width } : {}),\n    ...(doc.height !== undefined ? { height: doc.height } : {}),\n    ...(doc.alt !== undefined ? { alt: doc.alt } : {}),\n    ...(doc.title !== undefined ? { title: doc.title } : {}),\n    ...(doc.url !== undefined ? { url: doc.url } : {}),\n    ...(doc.focalPoint !== undefined ? { focalPoint: doc.focalPoint } : {}),\n    ...(doc.thumb !== undefined ? { thumb: doc.thumb } : {}),\n    ...(doc.lqip !== undefined ? { lqip: doc.lqip } : {}),\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    storageKey: doc.storageKey,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\nclass ConvexAssetRepository implements AssetRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async upsertAsset(projectId: string, input: NewAssetInput): Promise<AssetRecord> {\n    const now = this.clock()\n    const id = input.id ?? newId('asset')\n    const doc = (await this.client.mutation(mutationRef('assets:upsert'), {\n      assetId: id,\n      filename: input.filename,\n      contentType: input.contentType,\n      byteSize: input.byteSize,\n      ...(input.width !== undefined ? { width: input.width } : {}),\n      ...(input.height !== undefined ? { height: input.height } : {}),\n      ...(input.alt !== undefined ? { alt: input.alt } : {}),\n      // EC-153 parity: `title` (EC-152 metadata) must persist, not silently drop.\n      ...(input.title !== undefined ? { title: input.title } : {}),\n      ...(input.url !== undefined ? { url: input.url } : {}),\n      ...(input.focalPoint !== undefined ? { focalPoint: input.focalPoint } : {}),\n      ...(input.thumb !== undefined ? { thumb: input.thumb } : {}),\n      ...(input.lqip !== undefined ? { lqip: input.lqip } : {}),\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      storageKey: input.storageKey ?? `${projectId}/${id}`,\n      createdAt: now,\n      updatedAt: now,\n    })) as AssetDoc\n    return assetRecordFromDoc(doc)\n  }\n\n  async getAsset(projectId: string, id: string): Promise<AssetRecord> {\n    const found = await this.findAsset(projectId, id)\n    if (!found) throw new RecordNotFoundError('asset', `${projectId}/${id}`)\n    return found\n  }\n\n  async findAsset(projectId: string, id: string): Promise<AssetRecord | undefined> {\n    const doc = (await this.client.query(queryRef('assets:get'), {\n      assetId: id,\n    })) as AssetDoc | null\n    return doc ? assetRecordFromDoc(doc) : undefined\n  }\n\n  async listAssets(projectId: string): Promise<AssetRecord[]> {\n    const docs = (await this.client.query(queryRef('assets:list'), {})) as AssetDoc[]\n    return docs.map(assetRecordFromDoc)\n  }\n\n  async removeAsset(projectId: string, id: string): Promise<void> {\n    // EC-153 parity: removing an unknown asset is not-found, never a no-op.\n    await this.getAsset(projectId, id)\n    await this.client.mutation(mutationRef('assets:remove'), { assetId: id })\n  }\n\n  async resolveMany(projectId: string, ids: readonly string[]): Promise<Map<string, AssetRecord>> {\n    const all = await this.listAssets(projectId)\n    const out = new Map<string, AssetRecord>()\n    for (const asset of all) if (ids.includes(asset.id)) out.set(asset.id, asset)\n    return out\n  }\n}\n\n// --- Reference index (EC-155) ------------------------------------------------\n\n/** A Convex reference-entry doc (flattened source/target for index-backed lookups). */\ninterface ReferenceEntryDoc {\n  projectId: string\n  variant: ReferenceVariant\n  sourceType: ReferenceSourceType\n  sourceId: string\n  path: string\n  targetType: ReferenceTarget['type']\n  targetId: string\n  kind: ReferenceEntryRecord['kind']\n}\n\nfunction referenceRecordFromDoc(doc: ReferenceEntryDoc): ReferenceEntryRecord {\n  return {\n    projectId: doc.projectId,\n    variant: doc.variant,\n    source: { type: doc.sourceType, id: doc.sourceId },\n    path: doc.path,\n    target: { type: doc.targetType, id: doc.targetId },\n    kind: doc.kind,\n  }\n}\n\n/** Deterministic ordering is a repository contract; Convex docs sort client-side. */\nfunction sortedReferenceRecords(docs: ReferenceEntryDoc[]): ReferenceEntryRecord[] {\n  return docs.map(referenceRecordFromDoc).sort(compareReferenceEntries)\n}\n\nclass ConvexReferenceIndexRepository implements ReferenceIndexRepository {\n  constructor(private readonly client: ConvexHttpClient) {}\n\n  async replaceForSource(\n    projectId: string,\n    variant: ReferenceVariant,\n    source: ReferenceSource,\n    references: readonly OutboundReference[],\n  ): Promise<ReferenceEntryRecord[]> {\n    await this.client.mutation(mutationRef('references:replaceForSource'), {\n      variant,\n      sourceType: source.type,\n      sourceId: source.id,\n      references: references.map((r) => ({\n        path: r.path,\n        targetType: r.target.type,\n        targetId: r.target.id,\n        kind: r.kind,\n      })),\n    })\n    return this.outbound(projectId, source, { variant })\n  }\n\n  async replaceForSourceTypes(\n    projectId: string,\n    variant: ReferenceVariant,\n    sourceTypes: readonly ReferenceSourceType[],\n    entries: readonly ReferenceEntry[],\n  ): Promise<ReferenceEntryRecord[]> {\n    await this.client.mutation(mutationRef('references:replaceForSourceTypes'), {\n      variant,\n      sourceTypes: [...sourceTypes],\n      entries: entries.map((e) => ({\n        sourceType: e.source.type,\n        sourceId: e.source.id,\n        path: e.path,\n        targetType: e.target.type,\n        targetId: e.target.id,\n        kind: e.kind,\n      })),\n    })\n    const all = await this.listEntries(projectId, variant)\n    const types = new Set(sourceTypes)\n    return all.filter((record) => types.has(record.source.type))\n  }\n\n  async removeForSource(\n    projectId: string,\n    source: ReferenceSource,\n    variant?: ReferenceVariant,\n  ): Promise<void> {\n    await this.client.mutation(mutationRef('references:removeForSource'), {\n      sourceType: source.type,\n      sourceId: source.id,\n      ...(variant ? { variant } : {}),\n    })\n  }\n\n  async outbound(\n    projectId: string,\n    source: ReferenceSource,\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:outbound'), {\n      sourceType: source.type,\n      sourceId: source.id,\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async inbound(\n    projectId: string,\n    target: ReferenceTarget,\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:inbound'), {\n      targetType: target.type,\n      targetId: target.id,\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async inboundMany(\n    projectId: string,\n    targets: readonly ReferenceTarget[],\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[][]> {\n    // EC-308: one round-trip for all targets (the handler loops the by_target\n    // index server-side), replacing the client's per-target inbound fan-out.\n    if (targets.length === 0) return []\n    const groups = (await this.client.query(queryRef('references:inboundMany'), {\n      targets: targets.map((target) => ({ targetType: target.type, targetId: target.id })),\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[][]\n    return groups.map((docs) => sortedReferenceRecords(docs))\n  }\n\n  async listEntries(\n    projectId: string,\n    variant?: ReferenceVariant,\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:list'), {\n      ...(variant ? { variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async getBuildMarker(projectId: string): Promise<ReferenceIndexBuildMarker | null> {\n    return (await this.client.query(queryRef('references:buildMarker'), {})) as\n      | ReferenceIndexBuildMarker\n      | null\n  }\n\n  async setBuildMarker(projectId: string, marker: ReferenceIndexBuildMarker): Promise<void> {\n    await this.client.mutation(mutationRef('references:setBuildMarker'), {\n      entryCount: marker.entryCount,\n    })\n  }\n\n  async clearProject(projectId: string): Promise<void> {\n    await this.client.mutation(mutationRef('references:clearProject'), {})\n  }\n}\n\n// --- Members + CLI tokens (EC-150) -------------------------------------------\n\ninterface MemberDoc {\n  userId: string\n  role: ProjectRole\n  createdAt: string\n  updatedAt: string\n}\n\n/**\n * Single-tenant (EC-179): membership is deployment-scoped, so the backend rows\n * carry no `projectId`. The contract record still does — this adapter is bound\n * to its deployment's project, so it stamps that slug onto every record.\n */\nfunction memberRecordFromDoc(doc: MemberDoc, projectId: string): ProjectMemberRecord {\n  return {\n    projectId,\n    userId: doc.userId,\n    role: doc.role,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\nclass ConvexMembersRepository implements MembersRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    /** The slug of this deployment's one project — stamped onto records. */\n    private readonly boundProjectId: string,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async setMember(\n    projectId: string,\n    userId: string,\n    role: ProjectRole,\n  ): Promise<ProjectMemberRecord> {\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('members:set'), {\n      userId,\n      role,\n      createdAt: now,\n      updatedAt: now,\n    })) as MemberDoc\n    return memberRecordFromDoc(doc, projectId)\n  }\n\n  async findMember(projectId: string, userId: string): Promise<ProjectMemberRecord | undefined> {\n    const doc = (await this.client.query(queryRef('members:get'), {\n      userId,\n    })) as MemberDoc | null\n    return doc ? memberRecordFromDoc(doc, projectId) : undefined\n  }\n\n  async listMembers(projectId: string): Promise<ProjectMemberRecord[]> {\n    const docs = (await this.client.query(queryRef('members:list'), {})) as MemberDoc[]\n    return docs.map((d) => memberRecordFromDoc(d, projectId))\n  }\n\n  async listMembershipsForUser(userId: string): Promise<ProjectMemberRecord[]> {\n    // `members:mine` is caller-scoped server-side and returns the caller's single\n    // deployment membership (or null). The studio only ever asks about the\n    // session user; records are stamped with this deployment's bound project.\n    const doc = (await this.client.query(queryRef('members:mine'), {})) as MemberDoc | null\n    return doc && doc.userId === userId ? [memberRecordFromDoc(doc, this.boundProjectId)] : []\n  }\n\n  async removeMember(projectId: string, userId: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('members:remove'), { userId })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('project-member', `${projectId}/${userId}`)\n      }\n      throw error\n    }\n  }\n}\n\n// --- Users rail (EC-240, 240a) -----------------------------------------------\n\n/** The wire shape returned by the `users:list`/`users:get` join handlers. */\ninterface UserDoc {\n  id: string\n  email: string\n  name?: string\n  avatar?: string\n  role: ProjectRole\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** Map a joined user doc onto the contract record; stamp the bound project. */\nfunction userRecordFromDoc(doc: UserDoc, projectId: string): UserRecord {\n  return {\n    id: doc.id,\n    projectId,\n    email: doc.email,\n    ...(doc.name !== undefined ? { name: doc.name } : {}),\n    ...(doc.avatar !== undefined ? { avatar: doc.avatar } : {}),\n    // 240a bridge: the single `members.role` column ⇒ the 240c-ready `roles[]`.\n    roles: [doc.role],\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Collapse the 240c-ready `roles[]` to the single `members.role` column by\n * applying the strongest role (the 240a→240c enforcement bridge). Unknown\n * strings are ignored; an empty/unknown set floors to `viewer`.\n */\nfunction strongestRole(roles: readonly string[]): ProjectRole {\n  // Validate against the active role policy (EC-240c) rather than a hardcoded\n  // enum, then take the canonical rank max; floor an empty/unknown set to `viewer`.\n  const valid = roles.filter((r) => isKnownRole(r))\n  return highestRole(valid) ?? 'viewer'\n}\n\n/**\n * Convex-backed {@link UserRepository} (EC-240, 240a). Reads are the admin-gated\n * `users:*` **join** handlers (members row + auth identity); the role write\n * reuses the member write path (`members:set`, extended with the `meta` bag) so\n * there is one source for role writes — 240c collapses enforcement onto it.\n */\nclass ConvexUserRepository implements UserRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async listUsers(projectId: string): Promise<UserRecord[]> {\n    const docs = (await this.client.query(queryRef('users:list'), {})) as UserDoc[]\n    return docs.map((doc) => userRecordFromDoc(doc, projectId))\n  }\n\n  async findUser(projectId: string, id: string): Promise<UserRecord | undefined> {\n    const doc = (await this.client.query(queryRef('users:get'), { userId: id })) as UserDoc | null\n    return doc ? userRecordFromDoc(doc, projectId) : undefined\n  }\n\n  async getUser(projectId: string, id: string): Promise<UserRecord> {\n    const found = await this.findUser(projectId, id)\n    if (!found) throw new RecordNotFoundError('user', `${projectId}/${id}`)\n    return found\n  }\n\n  async getSelf(projectId: string): Promise<UserRecord | null> {\n    // Self-permitted (EC-240 H-tail item 1): `users:getSelf` derives the caller\n    // from the JWT server-side and returns ONLY their own join — never widened to\n    // the admin-only `users:get`. The `selfId` the contract passes is ignored here;\n    // the trust boundary is the server.\n    const doc = (await this.client.query(queryRef('users:getSelf'), {})) as UserDoc | null\n    return doc ? userRecordFromDoc(doc, projectId) : null\n  }\n\n  async saveUser(projectId: string, input: SaveUserInput): Promise<UserRecord> {\n    const now = this.clock()\n    await this.client.mutation(mutationRef('members:set'), {\n      userId: input.id,\n      role: strongestRole(input.roles),\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })\n    // Return the full joined projection (identity + role + custom fields).\n    return this.getUser(projectId, input.id)\n  }\n\n  async removeUser(projectId: string, id: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('members:remove'), { userId: id })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('user', `${projectId}/${id}`)\n      }\n      throw error\n    }\n  }\n}\n\n// --- Invite allowlist rail (EC-324) ------------------------------------------\n\n/** The wire shape returned by the `invites:*` handlers. */\ninterface InviteDoc {\n  email: string\n  role: string\n  invitedBy?: string\n  createdAt: string\n  updatedAt: string\n}\n\nfunction inviteRecordFromDoc(doc: InviteDoc): InviteRecord {\n  return {\n    email: doc.email,\n    role: doc.role,\n    ...(doc.invitedBy !== undefined ? { invitedBy: doc.invitedBy } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Convex-backed {@link InviteRepository} (EC-324). Admin-gated `invites:*`\n * handlers; the repo supplies timestamps (mirroring `ConvexUserRepository`). The\n * Convex auth boundary reads the same table in `beforeSessionCreation` to gate\n * open sign-up + grant the invited role.\n */\nclass ConvexInviteRepository implements InviteRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async listInvites(_projectId: string): Promise<InviteRecord[]> {\n    const docs = (await this.client.query(queryRef('invites:list'), {})) as InviteDoc[]\n    return docs.map(inviteRecordFromDoc)\n  }\n\n  async findInvite(projectId: string, email: string): Promise<InviteRecord | undefined> {\n    const key = normalizeInviteEmail(email)\n    const all = await this.listInvites(projectId)\n    return all.find((invite) => invite.email === key)\n  }\n\n  async saveInvite(_projectId: string, input: SaveInviteInput): Promise<InviteRecord> {\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('invites:create'), {\n      email: normalizeInviteEmail(input.email),\n      role: input.role,\n      ...(input.invitedBy !== undefined ? { invitedBy: input.invitedBy } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })) as InviteDoc\n    return inviteRecordFromDoc(doc)\n  }\n\n  async removeInvite(projectId: string, email: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('invites:revoke'), {\n        email: normalizeInviteEmail(email),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('invite', `${projectId}/${normalizeInviteEmail(email)}`)\n      }\n      throw error\n    }\n  }\n}\n\ninterface CliTokenDoc {\n  /** Retired (EC-182): optional only because live rows may still carry it until the migration clears it. */\n  projectId?: string\n  tokenId: string\n  label: string\n  tokenHash: string\n  createdAt: string\n  revokedAt?: string\n}\n\nfunction cliTokenRecordFromDoc(doc: CliTokenDoc): CliTokenRecord {\n  return {\n    id: doc.tokenId,\n    label: doc.label,\n    tokenHash: doc.tokenHash,\n    createdAt: doc.createdAt,\n    ...(doc.revokedAt ? { revokedAt: doc.revokedAt } : {}),\n  }\n}\n\nclass ConvexCliTokenRepository implements CliTokenRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async createToken(input: NewCliTokenInput): Promise<CliTokenRecord> {\n    const doc = (await this.client.mutation(mutationRef('cliTokens:create'), {\n      tokenId: newId('tok'),\n      label: input.label,\n      tokenHash: input.tokenHash,\n      createdAt: this.clock(),\n    })) as CliTokenDoc\n    return cliTokenRecordFromDoc(doc)\n  }\n\n  async listTokens(): Promise<CliTokenRecord[]> {\n    const docs = (await this.client.query(queryRef('cliTokens:list'), {})) as CliTokenDoc[]\n    return docs.map(cliTokenRecordFromDoc)\n  }\n\n  async revokeToken(tokenId: string): Promise<CliTokenRecord> {\n    try {\n      const doc = (await this.client.mutation(mutationRef('cliTokens:revoke'), {\n        tokenId,\n        revokedAt: this.clock(),\n      })) as CliTokenDoc\n      return cliTokenRecordFromDoc(doc)\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('cli-token', tokenId)\n      }\n      throw error\n    }\n  }\n\n  async findByHash(tokenHash: string): Promise<CliTokenRecord | undefined> {\n    const doc = (await this.client.query(queryRef('cliTokens:byHash'), {\n      tokenHash,\n    })) as CliTokenDoc | null\n    return doc ? cliTokenRecordFromDoc(doc) : undefined\n  }\n}\n\n/** The `redirects` table row shape (EC-303). Single-tenant: no `projectId` column. */\ninterface RedirectDoc {\n  redirectId: string\n  from: string\n  to: string\n  permanent: boolean\n  enabled: boolean\n  /** Schema-driven additive-field bag (EC-311 Tier 2). */\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\nfunction redirectEntryFromDoc(doc: RedirectDoc, projectId: string): RedirectEntry {\n  return {\n    id: doc.redirectId,\n    projectId,\n    from: doc.from,\n    to: doc.to,\n    permanent: doc.permanent,\n    enabled: doc.enabled,\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Convex-backed {@link RedirectRepository} (EC-303) — editorial redirects as data\n * (not config). Content-gated CRUD over the `redirects` table; the studio's\n * editorial surface + the delivery snapshot both read through here. The editorial\n * surface sends a full record on save, so create-defaults (permanent/enabled) also\n * cover edits.\n */\nclass ConvexRedirectRepository implements RedirectRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async saveRedirect(projectId: string, input: SaveRedirectInput): Promise<RedirectEntry> {\n    const now = this.clock()\n    const id = input.id ?? newId('redirect')\n    const doc = (await this.client.mutation(mutationRef('redirects:save'), {\n      redirectId: id,\n      from: input.from,\n      to: input.to,\n      permanent: input.permanent ?? true,\n      enabled: input.enabled ?? true,\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })) as RedirectDoc\n    return redirectEntryFromDoc(doc, projectId)\n  }\n\n  async getRedirect(projectId: string, id: string): Promise<RedirectEntry> {\n    const found = await this.findRedirect(projectId, id)\n    if (!found) throw new RecordNotFoundError('redirect', `${projectId}/${id}`)\n    return found\n  }\n\n  async findRedirect(projectId: string, id: string): Promise<RedirectEntry | undefined> {\n    const doc = (await this.client.query(queryRef('redirects:get'), {\n      redirectId: id,\n    })) as RedirectDoc | null\n    return doc ? redirectEntryFromDoc(doc, projectId) : undefined\n  }\n\n  async listRedirects(projectId: string): Promise<RedirectEntry[]> {\n    const docs = (await this.client.query(queryRef('redirects:list'), {})) as RedirectDoc[]\n    return docs\n      .map((doc) => redirectEntryFromDoc(doc, projectId))\n      .sort((a, b) => (a.from < b.from ? -1 : a.from > b.from ? 1 : 0))\n  }\n\n  async removeRedirect(projectId: string, id: string): Promise<void> {\n    await this.getRedirect(projectId, id) // not-found parity with the in-memory rail\n    await this.client.mutation(mutationRef('redirects:remove'), { redirectId: id })\n  }\n}\n\n/**\n * Convex-backed {@link DeliveryRepository} (EC-268/EC-329) — reads the\n * deployment's actual instant-publish env var status via the guarded\n * `delivery:deliveryConfig` query. Replaces the studio's former direct\n * `getConvexClient(...).query('delivery:deliveryConfig')` call in\n * `delivery-health-banner.tsx`, the only place that used to bypass both the\n * operations chokepoint and the shared `useOperationQuery` cache (AD-17).\n */\nclass ConvexDeliveryRepository implements DeliveryRepository {\n  constructor(private readonly client: ConvexHttpClient) {}\n\n  async getConfig(): Promise<DeliveryConfigStatus> {\n    return (await this.client.query(\n      queryRef('delivery:deliveryConfig'),\n      {},\n    )) as DeliveryConfigStatus\n  }\n}\n\n/**\n * Convex-backed {@link PersistenceAdapter} (brief §10, EC-039). Every repository\n * is implemented against the Convex functions in `apps/builder/convex/*`, mapping\n * results and failures onto the provider-neutral contracts + error taxonomies.\n */\nexport class ConvexPersistenceAdapter implements PersistenceAdapter {\n  readonly cms: CmsRepository\n  readonly assets: AssetRepository\n  /** Reference index — outbound/inbound entries per variant (EC-155, AD-6). */\n  readonly references: ReferenceIndexRepository\n  /** Per-project membership roles (EC-150). */\n  readonly members: MembersRepository\n  readonly invites: InviteRepository\n  /** Studio users rail — role + custom fields joined to auth identity (EC-240). */\n  readonly users: UserRepository\n  /** Editorial redirects rail — data-backed 301/302 forwards (EC-303). */\n  readonly redirects: RedirectRepository\n  /** Revocable CLI sync tokens, stored hashed (EC-150). */\n  readonly cliTokens: CliTokenRepository\n  /** Convex file storage behind the EC-133 blob boundary (EC-151). */\n  readonly blobs: BlobStorageAdapter\n  /** Delivery-pipeline (instant-publish) health, read-only (EC-268/EC-329). */\n  readonly delivery: DeliveryRepository\n  /**\n   * EC-277: the Convex mutations maintain the reference index in-transaction\n   * (`convex/referenceMaintenance.ts`), so every writer — studio, CLI, webhook,\n   * raw `convex run` — is caught at the source. The studio bootstrap therefore does\n   * NOT attach the client-side `attachReferenceIndex` subscriber for this provider.\n   */\n  readonly maintainsReferenceIndex = true\n\n  /**\n   * @param client      the Convex client bound to this deployment (one project).\n   * @param projectId   the slug of this deployment's one project (EC-179). Used to\n   *   stamp deployment-scoped member records onto the still-project-keyed contract.\n   * @param collections the active project's config-owned CMS collections (EC-183,\n   *   AD-11), from `elytra.config.ts`. The backend has no `cmsSchemas` table, so\n   *   the CMS repository serves the schema from these.\n   */\n  constructor(\n    private readonly client: ConvexHttpClient,\n    projectId: string,\n    collections: readonly CollectionDef[] = [],\n  ) {\n    this.cms = new ConvexCmsRepository(client, collections)\n    this.assets = new ConvexAssetRepository(client)\n    this.references = new ConvexReferenceIndexRepository(client)\n    this.members = new ConvexMembersRepository(client, projectId)\n    this.users = new ConvexUserRepository(client)\n    this.invites = new ConvexInviteRepository(client)\n    this.redirects = new ConvexRedirectRepository(client)\n    this.cliTokens = new ConvexCliTokenRepository(client)\n    this.blobs = new ConvexBlobStorage(client)\n    this.delivery = new ConvexDeliveryRepository(client)\n  }\n\n  async status(): Promise<BackendStatus> {\n    try {\n      // Lightweight connectivity probe (EC-182: no `projects` table). `members:mine`\n      // takes no args and is soft-guarded (EC-279): it answers `null` for an\n      // unauthenticated caller rather than throwing, so the pre-sign-in boot probe\n      // resolves cleanly — backend answered ⇒ `available: true` — with no scary\n      // `Uncaught Error` in the Convex log.\n      await this.client.query(queryRef('members:mine'), {})\n      return { backend: 'convex', available: true }\n    } catch (error) {\n      const detail = error instanceof Error ? error.message : String(error)\n      // EC-153: an `unauthorized` rejection *is* a healthy backend — the\n      // deployment answered and enforced auth. Now that `members:mine` is\n      // soft-guarded this branch is a defensive fallback (a protected probe could\n      // still throw); only transport/server failures count as unavailable, so the\n      // DeploymentSetupGate surfaces those visibly instead of falling back to in-memory.\n      if (/unauthorized/i.test(detail)) return { backend: 'convex', available: true }\n      return { backend: 'convex', available: false, detail }\n    }\n  }\n\n  validate(input: BackendValidationInput): BackendValidationResult {\n    return validateForPersistence(input)\n  }\n}\n"]}
+{"version":3,"file":"convex-adapter.js","sourceRoot":"","sources":["../../../src/lib/persistence/convex-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAEtE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,WAAW,EACX,WAAW,EACX,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AA2CpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAIzD,MAAM,SAAS,GAAU,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAEvD,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,IAAI,GACR,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,KAAK,UAAU;QACjD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QAChC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACjE,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,0BAA0B,CAAA;AAa1D,SAAS,gBAAgB,CAAC,GAAgB;IACxC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,iFAAiF;QACjF,6EAA6E;QAC7E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,GAAG,CAAC,GAAG,CAAC,qBAAqB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAWD,sFAAsF;AACtF,SAAS,oBAAoB,CAAC,GAAe,EAAE,SAAiB;IAC9D,OAAO;QACL,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB;IAOJ;IACA;IACA;IARnB;;;;OAIG;IACH,YACmB,MAAwB,EACxB,cAAwC,EAAE,EAC1C,QAAe,SAAS;QAFxB,WAAM,GAAN,MAAM,CAAkB;QACxB,gBAAW,GAAX,WAAW,CAA+B;QAC1C,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,UAAU,CACd,UAAkB,EAClB,YAAsC;QAEtC,mEAAmE;QACnE,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,IAAI,0BAA0B,CAClC,0FAA0F,EAC1F;YACE;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EACL,iFAAiF;gBACnF,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,KAAK;aACd;SACF,CACF,CAAA;IACH,CAAC;IAED,kFAAkF;IAC1E,YAAY,CAAC,SAAiB;QACpC,OAAO;YACL,SAAS;YACT,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,uBAAuB;SACnC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,QAAqB;QAC3D,8EAA8E;QAC9E,sFAAsF;QACtF,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;YACzE,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,EAAE;YACnB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAgB;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3F,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,GAAgB;QACpD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,UAAmB;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;YACnE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAkB,CAAA;QACpB,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,IAAI;aACR,GAAG,CAAC,gBAAgB,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB,EAAE,UAAmB;QACjE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE;YACjF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAkB,CAAA;QACpB,wEAAwE;QACxE,OAAO,SAAS;aACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,GAAgB;QACtD,0EAA0E;QAC1E,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;YAC5D,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,QAAqB,EACrB,UAAsC,EAAE;QAExC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,yBAAyB,CAAC,EAAE;YAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;YACvB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAe,CAAA;QACjB,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,GAAgB;QAEhB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE;YAC1E,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;SACd,CAAC,CAAiB,CAAA;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACnC,QAAQ,CAAC,6BAA6B,CAAC,EACvC,EAAE,CACH,CAAiB,CAAA;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,GAAgB,EAChB,OAAe;QAEf,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO;SACR,CAAC,CAAsB,CAAA;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,GAAG,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,CACtD,CAAA;QACH,CAAC;QACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,GAAgB,EAChB,OAAe;QAEf,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtC,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QACtD,6EAA6E;QAC7E,+EAA+E;QAC/E,4CAA4C;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE;YACjF,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO;YACP,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,GAAG;SACjB,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAgB;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACvD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,sCAAsC,EAAE;gBAC3E;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,0DAA0D;oBACnE,MAAM,EAAE,KAAK;iBACd;aACF,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE;YAC5E,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;SACxB,CAAC,CAAgB,CAAA;QAClB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;CACF;AA2BD,8FAA8F;AAC9F,SAAS,kBAAkB,CAAC,GAAa;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED,MAAM,qBAAqB;IAEN;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAoB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE;YACpE,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,4EAA4E;YAC5E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,EAAE,EAAE;YACpD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAa,CAAA;QACf,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAU;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,EAAU;QAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;YAC3D,OAAO,EAAE,EAAE;SACZ,CAAC,CAAoB,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAe,CAAA;QACjF,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC7C,wEAAwE;QACxE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAsB;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAA;QAC1C,KAAK,MAAM,KAAK,IAAI,GAAG;YAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAC7E,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAgBD,SAAS,sBAAsB,CAAC,GAAsB;IACpD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;QAClD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;QAClD,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAA;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,sBAAsB,CAAC,IAAyB;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,8BAA8B;IACL;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,OAAyB,EACzB,MAAuB,EACvB,UAAwC;QAExC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,6BAA6B,CAAC,EAAE;YACrE,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;SACJ,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,OAAyB,EACzB,WAA2C,EAC3C,OAAkC;QAElC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kCAAkC,CAAC,EAAE;YAC1E,OAAO;YACP,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;SACJ,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,MAAuB,EACvB,OAA0B;QAE1B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE;YACpE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,MAAuB,EACvB,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;YACrE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,MAAuB,EACvB,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE;YACpE,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAAmC,EACnC,UAAkC,EAAE;QAEpC,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;YAC1E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAA0B,CAAA;QAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAA0B;QAE1B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YACjE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAwB,CAAA;QAC1B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAE/D,CAAA;IACV,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,MAAiC;QACvE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE;YACnE,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAA;IACxE,CAAC;CACF;AAWD;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,GAAc,EAAE,SAAiB;IAC5D,OAAO;QACL,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED,MAAM,uBAAuB;IAER;IAEA;IACA;IAJnB,YACmB,MAAwB;IACzC,wEAAwE;IACvD,cAAsB,EACtB,QAAe,SAAS;QAHxB,WAAM,GAAN,MAAM,CAAkB;QAExB,mBAAc,GAAd,cAAc,CAAQ;QACtB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,MAAc,EACd,IAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAc,CAAA;QAChB,OAAO,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAc;QAChD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC5D,MAAM;SACP,CAAC,CAAqB,CAAA;QACvB,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAgB,CAAA;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,8EAA8E;QAC9E,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAqB,CAAA;QACvF,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5F,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,MAAc;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAgBD,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,GAAY,EAAE,SAAiB;IACxD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS;QACT,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,4EAA4E;QAC5E,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAwB;IAC7C,4EAA4E;IAC5E,kFAAkF;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,oBAAoB;IAEL;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAc,CAAA;QAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAU;QAC1C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAmB,CAAA;QAC9F,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,EAAU;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QACvE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,4EAA4E;QAC5E,8EAA8E;QAC9E,gFAAgF;QAChF,oCAAoC;QACpC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAmB,CAAA;QACtF,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,KAAoB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;YACrD,MAAM,EAAE,KAAK,CAAC,EAAE;YAChB,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAA;QACF,uEAAuE;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,EAAU;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;YAC7D,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAaD,SAAS,mBAAmB,CAAC,GAAc;IACzC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,sBAAsB;IAEP;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAgB,CAAA;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,KAAa;QAC/C,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,KAAsB;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;YACrE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAc,CAAA;QAChB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,KAAa;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;gBACxD,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC;aACnC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAE,GAAG,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACxF,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;CACF;AAYD,SAAS,qBAAqB,CAAC,GAAgB;IAC7C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,OAAO;QACf,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAA;AACH,CAAC;AAED,MAAM,wBAAwB;IAET;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,KAAuB;QACvC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;YACvE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;SACxB,CAAC,CAAgB,CAAA;QAClB,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAkB,CAAA;QACvF,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;gBACvE,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;aACxB,CAAC,CAAgB,CAAA;YAClB,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YACrD,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;YACjE,SAAS;SACV,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC;CACF;AAeD,SAAS,oBAAoB,CAAC,GAAgB,EAAE,SAAiB;IAC/D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,UAAU;QAClB,SAAS;QACT,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB;IAET;IACA;IAFnB,YACmB,MAAwB,EACxB,QAAe,SAAS;QADxB,WAAM,GAAN,MAAM,CAAkB;QACxB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,KAAwB;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;YACrE,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAgB,CAAA;QAClB,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,EAAU;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAE,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAA;QAC3E,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,EAAU;QAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;YAC9D,UAAU,EAAE,EAAE;SACf,CAAC,CAAuB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAkB,CAAA;QACvF,OAAO,IAAI;aACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,EAAU;QAChD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA,CAAC,2CAA2C;QACjF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;IACjF,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,wBAAwB;IACC;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD,KAAK,CAAC,SAAS;QACb,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAC7B,QAAQ,CAAC,yBAAyB,CAAC,EACnC,EAAE,CACH,CAAyB,CAAA;IAC5B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAmChB;IAlCV,GAAG,CAAe;IAClB,MAAM,CAAiB;IAChC,6EAA6E;IACpE,UAAU,CAA0B;IAC7C,6CAA6C;IACpC,OAAO,CAAmB;IAC1B,OAAO,CAAkB;IAClC,iFAAiF;IACxE,KAAK,CAAgB;IAC9B,wEAAwE;IAC/D,SAAS,CAAoB;IACtC,yDAAyD;IAChD,SAAS,CAAoB;IACtC,oEAAoE;IAC3D,KAAK,CAAoB;IAClC,6EAA6E;IACpE,QAAQ,CAAoB;IACrC;;;;;OAKG;IACM,uBAAuB,GAAG,IAAI,CAAA;IAEvC;;;;;;;OAOG;IACH,YACmB,MAAwB,EACzC,SAAiB,EACjB,cAAwC,EAAE;QAFzB,WAAM,GAAN,MAAM,CAAkB;QAIzC,IAAI,CAAC,GAAG,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,8BAA8B,CAAC,MAAM,CAAC,CAAA;QAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,+EAA+E;YAC/E,uEAAuE;YACvE,6EAA6E;YAC7E,0EAA0E;YAC1E,sCAAsC;YACtC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;YACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,4EAA4E;YAC5E,4EAA4E;YAC5E,mFAAmF;YACnF,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC/E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QACxD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAA6B;QACpC,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;CACF","sourcesContent":["import type { ConvexHttpClient } from 'convex/browser'\nimport { documentKey, documentSchema } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef, DocumentRef } from '@elytracms/core/cms-core'\nimport {\n  RecordNotFoundError,\n  PersistenceValidationError,\n  compareReferenceEntries,\n  highestRole,\n  isKnownRole,\n  validateForPersistence,\n} from '@elytracms/core/persistence'\nimport type {\n  AssetRecord,\n  AssetRepository,\n  BackendStatus,\n  BackendValidationInput,\n  BackendValidationResult,\n  BlobStorageAdapter,\n  CliTokenRecord,\n  CliTokenRepository,\n  CmsRepository,\n  DeliveryConfigStatus,\n  DeliveryRepository,\n  CmsSchemaRecord,\n  CmsDocumentRecord,\n  DocumentVersionRecord,\n  SaveDocumentVersionOptions,\n  MembersRepository,\n  NewAssetInput,\n  NewCliTokenInput,\n  PersistenceAdapter,\n  OutboundReference,\n  ProjectMemberRecord,\n  ProjectRole,\n  ReferenceEntry,\n  ReferenceEntryRecord,\n  ReferenceIndexBuildMarker,\n  ReferenceIndexRepository,\n  ReferenceLookupOptions,\n  ReferenceSource,\n  ReferenceSourceType,\n  ReferenceTarget,\n  ReferenceVariant,\n  RedirectEntry,\n  RedirectRepository,\n  SaveRedirectInput,\n  SaveUserInput,\n  UserRecord,\n  UserRepository,\n  InviteRecord,\n  InviteRepository,\n  SaveInviteInput,\n} from '@elytracms/core/persistence'\nimport { normalizeInviteEmail } from '@elytracms/core/persistence'\nimport { queryRef, mutationRef } from './convex-client'\nimport { ConvexBlobStorage } from './convex-blob-storage'\n\n/** Wall-clock for runtime writes (deterministic seeds use a fixed clock instead). */\ntype Clock = () => string\nconst realClock: Clock = () => new Date().toISOString()\n\nfunction newId(prefix: string): string {\n  const rand =\n    typeof globalThis.crypto?.randomUUID === 'function'\n      ? globalThis.crypto.randomUUID()\n      : Math.abs(Date.parse(new Date().toISOString())).toString(36)\n  return `${prefix}_${rand}`\n}\n\n// --- CMS, Assets ----------------------------------------------------------\n\n/**\n * Deterministic, config-owned schema timestamps (EC-183). CMS collections live\n * in `elytra.config.ts`, not the backend, so the synthesized `CmsSchemaRecord`\n * carries a stable placeholder rather than DB-row timestamps.\n */\nconst CONFIG_SCHEMA_TIMESTAMP = '2026-01-01T00:00:00.000Z'\n\ninterface DocumentDoc {\n  projectId: string\n  document: CmsDocument\n  publishedVersion?: number\n  /** EC-447: the first-publish instant (set-once on publish, cleared on unpublish). */\n  publishedAt?: string\n  /** EC-449: the materialized \"draft differs from the pinned published snapshot\" flag. */\n  hasUnpublishedChanges?: boolean\n  createdAt: string\n  updatedAt: string\n}\nfunction docRecordFromDoc(doc: DocumentDoc): CmsDocumentRecord {\n  return {\n    projectId: doc.projectId,\n    document: doc.document,\n    ...(doc.publishedVersion !== undefined ? { publishedVersion: doc.publishedVersion } : {}),\n    // EC-447: carry the materialized publish instant onto the contract record so the\n    // studio's $publishedAt column + its reconcile read the authoritative value.\n    ...(doc.publishedAt !== undefined ? { publishedAt: doc.publishedAt } : {}),\n    // EC-449: carry the materialized changed flag so hydration + the store's\n    // save/publish/unpublish reconciles read the authoritative verdict.\n    ...(doc.hasUnpublishedChanges !== undefined\n      ? { hasUnpublishedChanges: doc.hasUnpublishedChanges }\n      : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\ninterface VersionDoc {\n  collection: string\n  docId: string\n  version: number\n  snapshot: CmsDocument\n  label?: string\n  origin?: string\n  createdAt: string\n}\n/** The backend row carries no `projectId` (single-tenant); stamp it from the call. */\nfunction versionRecordFromDoc(doc: VersionDoc, projectId: string): DocumentVersionRecord {\n  return {\n    projectId,\n    collection: doc.collection,\n    docId: doc.docId,\n    version: doc.version,\n    snapshot: doc.snapshot,\n    createdAt: doc.createdAt,\n    ...(doc.label ? { label: doc.label } : {}),\n    ...(doc.origin ? { origin: doc.origin } : {}),\n  }\n}\n\nclass ConvexCmsRepository implements CmsRepository {\n  /**\n   * @param collections the active project's config-owned CMS collections\n   *   (EC-183, AD-11), injected from `elytra.config.ts`. The Convex backend has\n   *   no `cmsSchemas` table — `findSchema`/`getSchema` serve these instead.\n   */\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly collections: readonly CollectionDef[] = [],\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async saveSchema(\n    _projectId: string,\n    _collections: readonly CollectionDef[],\n  ): Promise<CmsSchemaRecord> {\n    // Read-only (EC-183, AD-11): the CMS collection schema is owned by\n    // `elytra.config.ts`; the backend stores documents only. A write here is a\n    // visible, structured error rather than a silent no-op (the studio's CMS\n    // schema surfaces are read-only; legitimate writers were removed in EC-183).\n    throw new PersistenceValidationError(\n      'CMS collection schema is owned by elytra.config.ts and cannot be written to the backend.',\n      [\n        {\n          code: 'schema-config-owned',\n          message:\n            'Edit elytra.config.ts to change collections; the backend stores documents only.',\n          path: [],\n          domain: 'cms',\n        },\n      ],\n    )\n  }\n\n  /** Config-owned schema (EC-183): the active project's collections from config. */\n  private configSchema(projectId: string): CmsSchemaRecord {\n    return {\n      projectId,\n      collections: [...this.collections],\n      createdAt: CONFIG_SCHEMA_TIMESTAMP,\n      updatedAt: CONFIG_SCHEMA_TIMESTAMP,\n    }\n  }\n\n  async getSchema(projectId: string): Promise<CmsSchemaRecord> {\n    return this.configSchema(projectId)\n  }\n\n  async findSchema(projectId: string): Promise<CmsSchemaRecord | undefined> {\n    return this.configSchema(projectId)\n  }\n\n  async upsertDocument(projectId: string, document: CmsDocument): Promise<CmsDocumentRecord> {\n    // The backend is a pure document store (EC-183, AD-11): collection-membership\n    // validation lives in `@elytracms/core/cms-core` `validateDocument`, which the studio\n    // runs pre-dispatch (cell edits, imports). We still parse the canonical\n    // document shape so malformed blobs never reach storage.\n    const parsedDoc = documentSchema.parse(document)\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('cms:upsertDocument'), {\n      collection: parsedDoc.collection,\n      docId: parsedDoc.id,\n      document: parsedDoc,\n      createdAt: now,\n      updatedAt: now,\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n\n  async getDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord> {\n    const found = await this.findDocument(projectId, ref)\n    if (!found)\n      throw new RecordNotFoundError('cms-document', `${projectId}/${ref.collection}:${ref.id}`)\n    return found\n  }\n\n  async findDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord | undefined> {\n    const doc = (await this.client.query(queryRef('cms:getDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })) as DocumentDoc | null\n    return doc ? docRecordFromDoc(doc) : undefined\n  }\n\n  async listDocuments(projectId: string, collection?: string): Promise<CmsDocumentRecord[]> {\n    const docs = (await this.client.query(queryRef('cms:listDocuments'), {\n      ...(collection ? { collection } : {}),\n    })) as DocumentDoc[]\n    // EC-153 parity: deterministic document-key ordering (Convex index order\n    // within a project is insertion order, so we sort client-side).\n    return docs\n      .map(docRecordFromDoc)\n      .sort((a, b) => (documentKey(a.document) < documentKey(b.document) ? -1 : 1))\n  }\n\n  async listPublishedDocuments(projectId: string, collection?: string): Promise<CmsDocument[]> {\n    // EC-307: one bulk read for the published pool (collapses the per-document\n    // `listVersions` fan-out). The handler resolves each pin to its snapshot.\n    const snapshots = (await this.client.query(queryRef('cms:listPublishedDocuments'), {\n      ...(collection ? { collection } : {}),\n    })) as CmsDocument[]\n    // Deterministic document-key order (parity with the in-memory adapter).\n    return snapshots\n      .map((doc) => documentSchema.parse(doc))\n      .sort((a, b) => (documentKey(a) < documentKey(b) ? -1 : 1))\n  }\n\n  async deleteDocument(projectId: string, ref: DocumentRef): Promise<void> {\n    // EC-153 parity: deleting a missing document is not-found, never a no-op.\n    await this.getDocument(projectId, ref)\n    await this.client.mutation(mutationRef('cms:deleteDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })\n  }\n\n  async saveDocumentVersion(\n    projectId: string,\n    snapshot: CmsDocument,\n    options: SaveDocumentVersionOptions = {},\n  ): Promise<DocumentVersionRecord> {\n    const parsed = documentSchema.parse(snapshot)\n    const doc = (await this.client.mutation(mutationRef('cms:saveDocumentVersion'), {\n      collection: parsed.collection,\n      docId: parsed.id,\n      snapshot: parsed,\n      createdAt: this.clock(),\n      ...(options.label ? { label: options.label } : {}),\n      ...(options.origin ? { origin: options.origin } : {}),\n    })) as VersionDoc\n    return versionRecordFromDoc(doc, projectId)\n  }\n\n  async listDocumentVersions(\n    projectId: string,\n    ref: DocumentRef,\n  ): Promise<DocumentVersionRecord[]> {\n    const docs = (await this.client.query(queryRef('cms:listDocumentVersions'), {\n      collection: ref.collection,\n      docId: ref.id,\n    })) as VersionDoc[]\n    return docs.map((doc) => versionRecordFromDoc(doc, projectId))\n  }\n\n  async listAllDocumentVersions(projectId: string): Promise<DocumentVersionRecord[]> {\n    const docs = (await this.client.query(\n      queryRef('cms:listAllDocumentVersions'),\n      {},\n    )) as VersionDoc[]\n    return docs.map((doc) => versionRecordFromDoc(doc, projectId))\n  }\n\n  async getDocumentVersion(\n    projectId: string,\n    ref: DocumentRef,\n    version: number,\n  ): Promise<DocumentVersionRecord> {\n    const doc = (await this.client.query(queryRef('cms:getDocumentVersion'), {\n      collection: ref.collection,\n      docId: ref.id,\n      version,\n    })) as VersionDoc | null\n    if (!doc) {\n      throw new RecordNotFoundError(\n        'cms-document-version',\n        `${projectId}/${ref.collection}:${ref.id}#${version}`,\n      )\n    }\n    return versionRecordFromDoc(doc, projectId)\n  }\n\n  async publishDocumentVersion(\n    projectId: string,\n    ref: DocumentRef,\n    version: number,\n  ): Promise<CmsDocumentRecord> {\n    // Taxonomy enforced adapter-side (the handler is lenient): the document and\n    // the pinned version must both exist (each throws RecordNotFoundError).\n    await this.getDocument(projectId, ref)\n    await this.getDocumentVersion(projectId, ref, version)\n    // EC-447: pass a fresh publish-action instant as the SET-ONCE candidate (the\n    // handler writes it only when the row has no `publishedAt` yet). One `now` for\n    // both stamps — this IS the publish moment.\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('cms:publishDocumentVersion'), {\n      collection: ref.collection,\n      docId: ref.id,\n      version,\n      updatedAt: now,\n      publishedAt: now,\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n\n  async unpublishDocument(projectId: string, ref: DocumentRef): Promise<CmsDocumentRecord> {\n    const existing = await this.getDocument(projectId, ref)\n    if (existing.publishedVersion === undefined) {\n      throw new PersistenceValidationError('Document is not currently published.', [\n        {\n          code: 'invalid-transition',\n          message: 'Cannot unpublish: the document has no published version.',\n          domain: 'cms',\n        },\n      ])\n    }\n    const doc = (await this.client.mutation(mutationRef('cms:unpublishDocument'), {\n      collection: ref.collection,\n      docId: ref.id,\n      updatedAt: this.clock(),\n    })) as DocumentDoc\n    return docRecordFromDoc(doc)\n  }\n}\n\ninterface AssetDoc {\n  projectId: string\n  assetId: string\n  filename: string\n  contentType: string\n  byteSize: number\n  width?: number\n  height?: number\n  alt?: string\n  /** Editable display title (EC-152). */\n  title?: string\n  storageKey: string\n  url?: string\n  /** Normalized image focal point `{ x, y }` in 0–1 (EC-230). */\n  focalPoint?: { x: number; y: number }\n  /** Downscaled editorial preview variant (EC-400). */\n  thumb?: { storageKey: string; url: string; width: number; height: number }\n  /** Delivery LQIP blur-placeholder data URI (EC-420). */\n  lqip?: string\n  /** Schema-driven asset metadata bag (EC-301). */\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** Map a Convex asset doc onto the contract record (assetId → id, drop _id/_creationTime). */\nfunction assetRecordFromDoc(doc: AssetDoc): AssetRecord {\n  return {\n    id: doc.assetId,\n    projectId: doc.projectId,\n    filename: doc.filename,\n    contentType: doc.contentType,\n    byteSize: doc.byteSize,\n    ...(doc.width !== undefined ? { width: doc.width } : {}),\n    ...(doc.height !== undefined ? { height: doc.height } : {}),\n    ...(doc.alt !== undefined ? { alt: doc.alt } : {}),\n    ...(doc.title !== undefined ? { title: doc.title } : {}),\n    ...(doc.url !== undefined ? { url: doc.url } : {}),\n    ...(doc.focalPoint !== undefined ? { focalPoint: doc.focalPoint } : {}),\n    ...(doc.thumb !== undefined ? { thumb: doc.thumb } : {}),\n    ...(doc.lqip !== undefined ? { lqip: doc.lqip } : {}),\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    storageKey: doc.storageKey,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\nclass ConvexAssetRepository implements AssetRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async upsertAsset(projectId: string, input: NewAssetInput): Promise<AssetRecord> {\n    const now = this.clock()\n    const id = input.id ?? newId('asset')\n    const doc = (await this.client.mutation(mutationRef('assets:upsert'), {\n      assetId: id,\n      filename: input.filename,\n      contentType: input.contentType,\n      byteSize: input.byteSize,\n      ...(input.width !== undefined ? { width: input.width } : {}),\n      ...(input.height !== undefined ? { height: input.height } : {}),\n      ...(input.alt !== undefined ? { alt: input.alt } : {}),\n      // EC-153 parity: `title` (EC-152 metadata) must persist, not silently drop.\n      ...(input.title !== undefined ? { title: input.title } : {}),\n      ...(input.url !== undefined ? { url: input.url } : {}),\n      ...(input.focalPoint !== undefined ? { focalPoint: input.focalPoint } : {}),\n      ...(input.thumb !== undefined ? { thumb: input.thumb } : {}),\n      ...(input.lqip !== undefined ? { lqip: input.lqip } : {}),\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      storageKey: input.storageKey ?? `${projectId}/${id}`,\n      createdAt: now,\n      updatedAt: now,\n    })) as AssetDoc\n    return assetRecordFromDoc(doc)\n  }\n\n  async getAsset(projectId: string, id: string): Promise<AssetRecord> {\n    const found = await this.findAsset(projectId, id)\n    if (!found) throw new RecordNotFoundError('asset', `${projectId}/${id}`)\n    return found\n  }\n\n  async findAsset(projectId: string, id: string): Promise<AssetRecord | undefined> {\n    const doc = (await this.client.query(queryRef('assets:get'), {\n      assetId: id,\n    })) as AssetDoc | null\n    return doc ? assetRecordFromDoc(doc) : undefined\n  }\n\n  async listAssets(_projectId: string): Promise<AssetRecord[]> {\n    const docs = (await this.client.query(queryRef('assets:list'), {})) as AssetDoc[]\n    return docs.map(assetRecordFromDoc)\n  }\n\n  async removeAsset(projectId: string, id: string): Promise<void> {\n    // EC-153 parity: removing an unknown asset is not-found, never a no-op.\n    await this.getAsset(projectId, id)\n    await this.client.mutation(mutationRef('assets:remove'), { assetId: id })\n  }\n\n  async resolveMany(projectId: string, ids: readonly string[]): Promise<Map<string, AssetRecord>> {\n    const all = await this.listAssets(projectId)\n    const out = new Map<string, AssetRecord>()\n    for (const asset of all) if (ids.includes(asset.id)) out.set(asset.id, asset)\n    return out\n  }\n}\n\n// --- Reference index (EC-155) ------------------------------------------------\n\n/** A Convex reference-entry doc (flattened source/target for index-backed lookups). */\ninterface ReferenceEntryDoc {\n  projectId: string\n  variant: ReferenceVariant\n  sourceType: ReferenceSourceType\n  sourceId: string\n  path: string\n  targetType: ReferenceTarget['type']\n  targetId: string\n  kind: ReferenceEntryRecord['kind']\n}\n\nfunction referenceRecordFromDoc(doc: ReferenceEntryDoc): ReferenceEntryRecord {\n  return {\n    projectId: doc.projectId,\n    variant: doc.variant,\n    source: { type: doc.sourceType, id: doc.sourceId },\n    path: doc.path,\n    target: { type: doc.targetType, id: doc.targetId },\n    kind: doc.kind,\n  }\n}\n\n/** Deterministic ordering is a repository contract; Convex docs sort client-side. */\nfunction sortedReferenceRecords(docs: ReferenceEntryDoc[]): ReferenceEntryRecord[] {\n  return docs.map(referenceRecordFromDoc).sort(compareReferenceEntries)\n}\n\nclass ConvexReferenceIndexRepository implements ReferenceIndexRepository {\n  constructor(private readonly client: ConvexHttpClient) {}\n\n  async replaceForSource(\n    projectId: string,\n    variant: ReferenceVariant,\n    source: ReferenceSource,\n    references: readonly OutboundReference[],\n  ): Promise<ReferenceEntryRecord[]> {\n    await this.client.mutation(mutationRef('references:replaceForSource'), {\n      variant,\n      sourceType: source.type,\n      sourceId: source.id,\n      references: references.map((r) => ({\n        path: r.path,\n        targetType: r.target.type,\n        targetId: r.target.id,\n        kind: r.kind,\n      })),\n    })\n    return this.outbound(projectId, source, { variant })\n  }\n\n  async replaceForSourceTypes(\n    projectId: string,\n    variant: ReferenceVariant,\n    sourceTypes: readonly ReferenceSourceType[],\n    entries: readonly ReferenceEntry[],\n  ): Promise<ReferenceEntryRecord[]> {\n    await this.client.mutation(mutationRef('references:replaceForSourceTypes'), {\n      variant,\n      sourceTypes: [...sourceTypes],\n      entries: entries.map((e) => ({\n        sourceType: e.source.type,\n        sourceId: e.source.id,\n        path: e.path,\n        targetType: e.target.type,\n        targetId: e.target.id,\n        kind: e.kind,\n      })),\n    })\n    const all = await this.listEntries(projectId, variant)\n    const types = new Set(sourceTypes)\n    return all.filter((record) => types.has(record.source.type))\n  }\n\n  async removeForSource(\n    projectId: string,\n    source: ReferenceSource,\n    variant?: ReferenceVariant,\n  ): Promise<void> {\n    await this.client.mutation(mutationRef('references:removeForSource'), {\n      sourceType: source.type,\n      sourceId: source.id,\n      ...(variant ? { variant } : {}),\n    })\n  }\n\n  async outbound(\n    projectId: string,\n    source: ReferenceSource,\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:outbound'), {\n      sourceType: source.type,\n      sourceId: source.id,\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async inbound(\n    projectId: string,\n    target: ReferenceTarget,\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:inbound'), {\n      targetType: target.type,\n      targetId: target.id,\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async inboundMany(\n    projectId: string,\n    targets: readonly ReferenceTarget[],\n    options: ReferenceLookupOptions = {},\n  ): Promise<ReferenceEntryRecord[][]> {\n    // EC-308: one round-trip for all targets (the handler loops the by_target\n    // index server-side), replacing the client's per-target inbound fan-out.\n    if (targets.length === 0) return []\n    const groups = (await this.client.query(queryRef('references:inboundMany'), {\n      targets: targets.map((target) => ({ targetType: target.type, targetId: target.id })),\n      ...(options.variant ? { variant: options.variant } : {}),\n    })) as ReferenceEntryDoc[][]\n    return groups.map((docs) => sortedReferenceRecords(docs))\n  }\n\n  async listEntries(\n    projectId: string,\n    variant?: ReferenceVariant,\n  ): Promise<ReferenceEntryRecord[]> {\n    const docs = (await this.client.query(queryRef('references:list'), {\n      ...(variant ? { variant } : {}),\n    })) as ReferenceEntryDoc[]\n    return sortedReferenceRecords(docs)\n  }\n\n  async getBuildMarker(_projectId: string): Promise<ReferenceIndexBuildMarker | null> {\n    return (await this.client.query(queryRef('references:buildMarker'), {})) as\n      | ReferenceIndexBuildMarker\n      | null\n  }\n\n  async setBuildMarker(projectId: string, marker: ReferenceIndexBuildMarker): Promise<void> {\n    await this.client.mutation(mutationRef('references:setBuildMarker'), {\n      entryCount: marker.entryCount,\n    })\n  }\n\n  async clearProject(_projectId: string): Promise<void> {\n    await this.client.mutation(mutationRef('references:clearProject'), {})\n  }\n}\n\n// --- Members + CLI tokens (EC-150) -------------------------------------------\n\ninterface MemberDoc {\n  userId: string\n  role: ProjectRole\n  createdAt: string\n  updatedAt: string\n}\n\n/**\n * Single-tenant (EC-179): membership is deployment-scoped, so the backend rows\n * carry no `projectId`. The contract record still does — this adapter is bound\n * to its deployment's project, so it stamps that slug onto every record.\n */\nfunction memberRecordFromDoc(doc: MemberDoc, projectId: string): ProjectMemberRecord {\n  return {\n    projectId,\n    userId: doc.userId,\n    role: doc.role,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\nclass ConvexMembersRepository implements MembersRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    /** The slug of this deployment's one project — stamped onto records. */\n    private readonly boundProjectId: string,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async setMember(\n    projectId: string,\n    userId: string,\n    role: ProjectRole,\n  ): Promise<ProjectMemberRecord> {\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('members:set'), {\n      userId,\n      role,\n      createdAt: now,\n      updatedAt: now,\n    })) as MemberDoc\n    return memberRecordFromDoc(doc, projectId)\n  }\n\n  async findMember(projectId: string, userId: string): Promise<ProjectMemberRecord | undefined> {\n    const doc = (await this.client.query(queryRef('members:get'), {\n      userId,\n    })) as MemberDoc | null\n    return doc ? memberRecordFromDoc(doc, projectId) : undefined\n  }\n\n  async listMembers(projectId: string): Promise<ProjectMemberRecord[]> {\n    const docs = (await this.client.query(queryRef('members:list'), {})) as MemberDoc[]\n    return docs.map((d) => memberRecordFromDoc(d, projectId))\n  }\n\n  async listMembershipsForUser(userId: string): Promise<ProjectMemberRecord[]> {\n    // `members:mine` is caller-scoped server-side and returns the caller's single\n    // deployment membership (or null). The studio only ever asks about the\n    // session user; records are stamped with this deployment's bound project.\n    const doc = (await this.client.query(queryRef('members:mine'), {})) as MemberDoc | null\n    return doc && doc.userId === userId ? [memberRecordFromDoc(doc, this.boundProjectId)] : []\n  }\n\n  async removeMember(projectId: string, userId: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('members:remove'), { userId })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('project-member', `${projectId}/${userId}`)\n      }\n      throw error\n    }\n  }\n}\n\n// --- Users rail (EC-240, 240a) -----------------------------------------------\n\n/** The wire shape returned by the `users:list`/`users:get` join handlers. */\ninterface UserDoc {\n  id: string\n  email: string\n  name?: string\n  avatar?: string\n  role: ProjectRole\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\n/** Map a joined user doc onto the contract record; stamp the bound project. */\nfunction userRecordFromDoc(doc: UserDoc, projectId: string): UserRecord {\n  return {\n    id: doc.id,\n    projectId,\n    email: doc.email,\n    ...(doc.name !== undefined ? { name: doc.name } : {}),\n    ...(doc.avatar !== undefined ? { avatar: doc.avatar } : {}),\n    // 240a bridge: the single `members.role` column ⇒ the 240c-ready `roles[]`.\n    roles: [doc.role],\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Collapse the 240c-ready `roles[]` to the single `members.role` column by\n * applying the strongest role (the 240a→240c enforcement bridge). Unknown\n * strings are ignored; an empty/unknown set floors to `viewer`.\n */\nfunction strongestRole(roles: readonly string[]): ProjectRole {\n  // Validate against the active role policy (EC-240c) rather than a hardcoded\n  // enum, then take the canonical rank max; floor an empty/unknown set to `viewer`.\n  const valid = roles.filter((r) => isKnownRole(r))\n  return highestRole(valid) ?? 'viewer'\n}\n\n/**\n * Convex-backed {@link UserRepository} (EC-240, 240a). Reads are the admin-gated\n * `users:*` **join** handlers (members row + auth identity); the role write\n * reuses the member write path (`members:set`, extended with the `meta` bag) so\n * there is one source for role writes — 240c collapses enforcement onto it.\n */\nclass ConvexUserRepository implements UserRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async listUsers(projectId: string): Promise<UserRecord[]> {\n    const docs = (await this.client.query(queryRef('users:list'), {})) as UserDoc[]\n    return docs.map((doc) => userRecordFromDoc(doc, projectId))\n  }\n\n  async findUser(projectId: string, id: string): Promise<UserRecord | undefined> {\n    const doc = (await this.client.query(queryRef('users:get'), { userId: id })) as UserDoc | null\n    return doc ? userRecordFromDoc(doc, projectId) : undefined\n  }\n\n  async getUser(projectId: string, id: string): Promise<UserRecord> {\n    const found = await this.findUser(projectId, id)\n    if (!found) throw new RecordNotFoundError('user', `${projectId}/${id}`)\n    return found\n  }\n\n  async getSelf(projectId: string): Promise<UserRecord | null> {\n    // Self-permitted (EC-240 H-tail item 1): `users:getSelf` derives the caller\n    // from the JWT server-side and returns ONLY their own join — never widened to\n    // the admin-only `users:get`. The `selfId` the contract passes is ignored here;\n    // the trust boundary is the server.\n    const doc = (await this.client.query(queryRef('users:getSelf'), {})) as UserDoc | null\n    return doc ? userRecordFromDoc(doc, projectId) : null\n  }\n\n  async saveUser(projectId: string, input: SaveUserInput): Promise<UserRecord> {\n    const now = this.clock()\n    await this.client.mutation(mutationRef('members:set'), {\n      userId: input.id,\n      role: strongestRole(input.roles),\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })\n    // Return the full joined projection (identity + role + custom fields).\n    return this.getUser(projectId, input.id)\n  }\n\n  async removeUser(projectId: string, id: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('members:remove'), { userId: id })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('user', `${projectId}/${id}`)\n      }\n      throw error\n    }\n  }\n}\n\n// --- Invite allowlist rail (EC-324) ------------------------------------------\n\n/** The wire shape returned by the `invites:*` handlers. */\ninterface InviteDoc {\n  email: string\n  role: string\n  invitedBy?: string\n  createdAt: string\n  updatedAt: string\n}\n\nfunction inviteRecordFromDoc(doc: InviteDoc): InviteRecord {\n  return {\n    email: doc.email,\n    role: doc.role,\n    ...(doc.invitedBy !== undefined ? { invitedBy: doc.invitedBy } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Convex-backed {@link InviteRepository} (EC-324). Admin-gated `invites:*`\n * handlers; the repo supplies timestamps (mirroring `ConvexUserRepository`). The\n * Convex auth boundary reads the same table in `beforeSessionCreation` to gate\n * open sign-up + grant the invited role.\n */\nclass ConvexInviteRepository implements InviteRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async listInvites(_projectId: string): Promise<InviteRecord[]> {\n    const docs = (await this.client.query(queryRef('invites:list'), {})) as InviteDoc[]\n    return docs.map(inviteRecordFromDoc)\n  }\n\n  async findInvite(projectId: string, email: string): Promise<InviteRecord | undefined> {\n    const key = normalizeInviteEmail(email)\n    const all = await this.listInvites(projectId)\n    return all.find((invite) => invite.email === key)\n  }\n\n  async saveInvite(_projectId: string, input: SaveInviteInput): Promise<InviteRecord> {\n    const now = this.clock()\n    const doc = (await this.client.mutation(mutationRef('invites:create'), {\n      email: normalizeInviteEmail(input.email),\n      role: input.role,\n      ...(input.invitedBy !== undefined ? { invitedBy: input.invitedBy } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })) as InviteDoc\n    return inviteRecordFromDoc(doc)\n  }\n\n  async removeInvite(projectId: string, email: string): Promise<void> {\n    try {\n      await this.client.mutation(mutationRef('invites:revoke'), {\n        email: normalizeInviteEmail(email),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('invite', `${projectId}/${normalizeInviteEmail(email)}`)\n      }\n      throw error\n    }\n  }\n}\n\ninterface CliTokenDoc {\n  /** Retired (EC-182): optional only because live rows may still carry it until the migration clears it. */\n  projectId?: string\n  tokenId: string\n  label: string\n  tokenHash: string\n  createdAt: string\n  revokedAt?: string\n}\n\nfunction cliTokenRecordFromDoc(doc: CliTokenDoc): CliTokenRecord {\n  return {\n    id: doc.tokenId,\n    label: doc.label,\n    tokenHash: doc.tokenHash,\n    createdAt: doc.createdAt,\n    ...(doc.revokedAt ? { revokedAt: doc.revokedAt } : {}),\n  }\n}\n\nclass ConvexCliTokenRepository implements CliTokenRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async createToken(input: NewCliTokenInput): Promise<CliTokenRecord> {\n    const doc = (await this.client.mutation(mutationRef('cliTokens:create'), {\n      tokenId: newId('tok'),\n      label: input.label,\n      tokenHash: input.tokenHash,\n      createdAt: this.clock(),\n    })) as CliTokenDoc\n    return cliTokenRecordFromDoc(doc)\n  }\n\n  async listTokens(): Promise<CliTokenRecord[]> {\n    const docs = (await this.client.query(queryRef('cliTokens:list'), {})) as CliTokenDoc[]\n    return docs.map(cliTokenRecordFromDoc)\n  }\n\n  async revokeToken(tokenId: string): Promise<CliTokenRecord> {\n    try {\n      const doc = (await this.client.mutation(mutationRef('cliTokens:revoke'), {\n        tokenId,\n        revokedAt: this.clock(),\n      })) as CliTokenDoc\n      return cliTokenRecordFromDoc(doc)\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      if (/not-found/i.test(message)) {\n        throw new RecordNotFoundError('cli-token', tokenId)\n      }\n      throw error\n    }\n  }\n\n  async findByHash(tokenHash: string): Promise<CliTokenRecord | undefined> {\n    const doc = (await this.client.query(queryRef('cliTokens:byHash'), {\n      tokenHash,\n    })) as CliTokenDoc | null\n    return doc ? cliTokenRecordFromDoc(doc) : undefined\n  }\n}\n\n/** The `redirects` table row shape (EC-303). Single-tenant: no `projectId` column. */\ninterface RedirectDoc {\n  redirectId: string\n  from: string\n  to: string\n  permanent: boolean\n  enabled: boolean\n  /** Schema-driven additive-field bag (EC-311 Tier 2). */\n  meta?: Record<string, unknown>\n  createdAt: string\n  updatedAt: string\n}\n\nfunction redirectEntryFromDoc(doc: RedirectDoc, projectId: string): RedirectEntry {\n  return {\n    id: doc.redirectId,\n    projectId,\n    from: doc.from,\n    to: doc.to,\n    permanent: doc.permanent,\n    enabled: doc.enabled,\n    ...(doc.meta !== undefined ? { meta: doc.meta } : {}),\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  }\n}\n\n/**\n * Convex-backed {@link RedirectRepository} (EC-303) — editorial redirects as data\n * (not config). Content-gated CRUD over the `redirects` table; the studio's\n * editorial surface + the delivery snapshot both read through here. The editorial\n * surface sends a full record on save, so create-defaults (permanent/enabled) also\n * cover edits.\n */\nclass ConvexRedirectRepository implements RedirectRepository {\n  constructor(\n    private readonly client: ConvexHttpClient,\n    private readonly clock: Clock = realClock,\n  ) {}\n\n  async saveRedirect(projectId: string, input: SaveRedirectInput): Promise<RedirectEntry> {\n    const now = this.clock()\n    const id = input.id ?? newId('redirect')\n    const doc = (await this.client.mutation(mutationRef('redirects:save'), {\n      redirectId: id,\n      from: input.from,\n      to: input.to,\n      permanent: input.permanent ?? true,\n      enabled: input.enabled ?? true,\n      ...(input.meta !== undefined ? { meta: input.meta } : {}),\n      createdAt: now,\n      updatedAt: now,\n    })) as RedirectDoc\n    return redirectEntryFromDoc(doc, projectId)\n  }\n\n  async getRedirect(projectId: string, id: string): Promise<RedirectEntry> {\n    const found = await this.findRedirect(projectId, id)\n    if (!found) throw new RecordNotFoundError('redirect', `${projectId}/${id}`)\n    return found\n  }\n\n  async findRedirect(projectId: string, id: string): Promise<RedirectEntry | undefined> {\n    const doc = (await this.client.query(queryRef('redirects:get'), {\n      redirectId: id,\n    })) as RedirectDoc | null\n    return doc ? redirectEntryFromDoc(doc, projectId) : undefined\n  }\n\n  async listRedirects(projectId: string): Promise<RedirectEntry[]> {\n    const docs = (await this.client.query(queryRef('redirects:list'), {})) as RedirectDoc[]\n    return docs\n      .map((doc) => redirectEntryFromDoc(doc, projectId))\n      .sort((a, b) => (a.from < b.from ? -1 : a.from > b.from ? 1 : 0))\n  }\n\n  async removeRedirect(projectId: string, id: string): Promise<void> {\n    await this.getRedirect(projectId, id) // not-found parity with the in-memory rail\n    await this.client.mutation(mutationRef('redirects:remove'), { redirectId: id })\n  }\n}\n\n/**\n * Convex-backed {@link DeliveryRepository} (EC-268/EC-329) — reads the\n * deployment's actual instant-publish env var status via the guarded\n * `delivery:deliveryConfig` query. Replaces the studio's former direct\n * `getConvexClient(...).query('delivery:deliveryConfig')` call in\n * `delivery-health-banner.tsx`, the only place that used to bypass both the\n * operations chokepoint and the shared `useOperationQuery` cache (AD-17).\n */\nclass ConvexDeliveryRepository implements DeliveryRepository {\n  constructor(private readonly client: ConvexHttpClient) {}\n\n  async getConfig(): Promise<DeliveryConfigStatus> {\n    return (await this.client.query(\n      queryRef('delivery:deliveryConfig'),\n      {},\n    )) as DeliveryConfigStatus\n  }\n}\n\n/**\n * Convex-backed {@link PersistenceAdapter} (brief §10, EC-039). Every repository\n * is implemented against the Convex functions in `apps/builder/convex/*`, mapping\n * results and failures onto the provider-neutral contracts + error taxonomies.\n */\nexport class ConvexPersistenceAdapter implements PersistenceAdapter {\n  readonly cms: CmsRepository\n  readonly assets: AssetRepository\n  /** Reference index — outbound/inbound entries per variant (EC-155, AD-6). */\n  readonly references: ReferenceIndexRepository\n  /** Per-project membership roles (EC-150). */\n  readonly members: MembersRepository\n  readonly invites: InviteRepository\n  /** Studio users rail — role + custom fields joined to auth identity (EC-240). */\n  readonly users: UserRepository\n  /** Editorial redirects rail — data-backed 301/302 forwards (EC-303). */\n  readonly redirects: RedirectRepository\n  /** Revocable CLI sync tokens, stored hashed (EC-150). */\n  readonly cliTokens: CliTokenRepository\n  /** Convex file storage behind the EC-133 blob boundary (EC-151). */\n  readonly blobs: BlobStorageAdapter\n  /** Delivery-pipeline (instant-publish) health, read-only (EC-268/EC-329). */\n  readonly delivery: DeliveryRepository\n  /**\n   * EC-277: the Convex mutations maintain the reference index in-transaction\n   * (`convex/referenceMaintenance.ts`), so every writer — studio, CLI, webhook,\n   * raw `convex run` — is caught at the source. The studio bootstrap therefore does\n   * NOT attach the client-side `attachReferenceIndex` subscriber for this provider.\n   */\n  readonly maintainsReferenceIndex = true\n\n  /**\n   * @param client      the Convex client bound to this deployment (one project).\n   * @param projectId   the slug of this deployment's one project (EC-179). Used to\n   *   stamp deployment-scoped member records onto the still-project-keyed contract.\n   * @param collections the active project's config-owned CMS collections (EC-183,\n   *   AD-11), from `elytra.config.ts`. The backend has no `cmsSchemas` table, so\n   *   the CMS repository serves the schema from these.\n   */\n  constructor(\n    private readonly client: ConvexHttpClient,\n    projectId: string,\n    collections: readonly CollectionDef[] = [],\n  ) {\n    this.cms = new ConvexCmsRepository(client, collections)\n    this.assets = new ConvexAssetRepository(client)\n    this.references = new ConvexReferenceIndexRepository(client)\n    this.members = new ConvexMembersRepository(client, projectId)\n    this.users = new ConvexUserRepository(client)\n    this.invites = new ConvexInviteRepository(client)\n    this.redirects = new ConvexRedirectRepository(client)\n    this.cliTokens = new ConvexCliTokenRepository(client)\n    this.blobs = new ConvexBlobStorage(client)\n    this.delivery = new ConvexDeliveryRepository(client)\n  }\n\n  async status(): Promise<BackendStatus> {\n    try {\n      // Lightweight connectivity probe (EC-182: no `projects` table). `members:mine`\n      // takes no args and is soft-guarded (EC-279): it answers `null` for an\n      // unauthenticated caller rather than throwing, so the pre-sign-in boot probe\n      // resolves cleanly — backend answered ⇒ `available: true` — with no scary\n      // `Uncaught Error` in the Convex log.\n      await this.client.query(queryRef('members:mine'), {})\n      return { backend: 'convex', available: true }\n    } catch (error) {\n      const detail = error instanceof Error ? error.message : String(error)\n      // EC-153: an `unauthorized` rejection *is* a healthy backend — the\n      // deployment answered and enforced auth. Now that `members:mine` is\n      // soft-guarded this branch is a defensive fallback (a protected probe could\n      // still throw); only transport/server failures count as unavailable, so the\n      // DeploymentSetupGate surfaces those visibly instead of falling back to in-memory.\n      if (/unauthorized/i.test(detail)) return { backend: 'convex', available: true }\n      return { backend: 'convex', available: false, detail }\n    }\n  }\n\n  validate(input: BackendValidationInput): BackendValidationResult {\n    return validateForPersistence(input)\n  }\n}\n"]}

package/dist/router/root.js

@@ -53,8 +53,18 @@ export function createStudioRootRoute(options) {
  */
 function AuthGate({ children }) {
     const { status } = useAuth();
-    const { pathname } = useLocation();
-    const decision = resolveRouteGuard(pathname, status);
+    const location = useLocation();
+    // EC-451: feed the still-pending `?redirect` search param into the decision.
+    // Dev auto-login (or any fast real sign-in — SSO return, password-manager
+    // autofill) can flip the session to signed-in while the location is still
+    // `/sign-in?redirect=…`, BEFORE `SignInView`'s own post-sign-in navigation
+    // runs; the gate's bounce then fires first and must consume the target
+    // instead of dropping it on an unconditional `/`. The target is validated
+    // by `postSignInTarget` inside `resolveRouteGuard` (same-origin relative
+    // paths only — redirect is an attacker-suppliable search param).
+    const rawRedirect = location.search.redirect;
+    const redirect = typeof rawRedirect === 'string' ? rawRedirect : undefined;
+    const decision = resolveRouteGuard(location.pathname, status, redirect);
     if (decision.kind === 'pending')
         return _jsx(SessionLoading, {});
     if (decision.kind === 'redirect-to-sign-in') {
@@ -64,7 +74,7 @@ function AuthGate({ children }) {
         return _jsx(NavigateOnce, { to: SIGN_IN_PATH, search: { redirect: decision.redirect }, replace: true });
     }
     if (decision.kind === 'redirect-home')
-        return _jsx(NavigateOnce, { to: "/", replace: true });
+        return _jsx(NavigateOnce, { to: decision.target, replace: true });
     return children;
 }
 /** Deterministic session-restore state (also the SSR output for protected paths). */

package/dist/router/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/router/root.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,eAAe,EACf,WAAW,EACX,MAAM,EACN,OAAO,EACP,WAAW,GACZ,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAA;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAmD/D,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAElG,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAEzB,SAAS,aAAa;QACpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,8EAA8E;QAC9E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,UAAU,GAAG,qBAAqB,CACtC,QAAQ,CAAC,QAAQ,EAChB,QAAQ,CAAC,MAAgC,CAAC,QAAQ,CACpD,CAAA;QACD,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAEhC,OAAO,CACL,KAAC,YAAY,IAAC,QAAQ,EAAE,QAAQ,YAC9B,KAAC,aAAa,cAOZ,KAAC,mBAAmB,cAClB,KAAC,YAAY,cACX,KAAC,QAAQ,cACP,MAAC,cAAc,eACZ,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAC,MAAM,KAAG,CAAC,CAAC,CAAC,CAAC,KAAC,MAAM,KAAG,EAK/C,KAAC,qBAAqB,KAAG,IACV,GACR,IAVM,UAAU,IAAI,cAAc,CAWhC,GACK,GACR,GACH,CAChB,CAAA;IACH,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,IAAI,EAAE;gBACJ,EAAE,OAAO,EAAE,OAAO,EAAE;gBACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACpE,EAAE,KAAK,EAAE;gBACT,GAAG,IAAI;aACR;YACD,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC;SAC1D,CAAC;QACF,SAAS,EAAE,aAAa;KACzB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAE,QAAQ,EAA2B;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;IAC5B,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;IAClC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAEpD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAC,cAAc,KAAG,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,SAAG,CAAA;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAC,YAAY,IAAC,EAAE,EAAC,GAAG,EAAC,OAAO,SAAG,CAAA;IAC7E,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,cAAK,SAAS,EAAC,iDAAiD,YAC9D,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,CAAC,CAAC,2BAA2B,CAAC,GAC1B,GACH,CACP,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA6C;IACrF,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,kFAAkF;IAClF,OAAO,CACL,gBAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAC,MAAM,EAAC,wBAAwB,mBAC7D,2BACE,KAAC,WAAW,KAAG,EACf,iBAAQ,uBAAuB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAI,IAC7D,EACP,gBAAM,SAAS,EAAC,kEAAkE,aAC/E,QAAQ,EACT,KAAC,OAAO,KAAG,IACN,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport {\n  createRootRoute,\n  HeadContent,\n  Outlet,\n  Scripts,\n  useLocation,\n} from '@tanstack/react-router'\nimport { NavigateOnce } from './navigate-once'\nimport { AuthProvider, useAuth } from '@elytracms/studio/components/auth-context'\nimport { DeploymentSetupGate } from '@elytracms/studio/components/deployment-setup-gate'\nimport { SessionExpiredOverlay } from '@elytracms/studio/components/session-expired-overlay'\nimport { StudioProvider } from '@elytracms/studio/components/studio-context'\nimport { ThemeProvider } from '@elytracms/studio/components/theme-context'\nimport { Text } from '@elytracms/studio/ui'\nimport { SIGN_IN_PATH, resolveRouteGuard } from '@elytracms/studio/lib/auth'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { setStudioBaseTitle } from '@elytracms/studio/lib/tab-title'\nimport { activeSlugForLocation, setActiveProjectSlug } from '@elytracms/studio/lib/workspace'\nimport { THEME_INIT_SCRIPT } from '@elytracms/studio/lib/theme'\n\n/**\n * Studio root-route boot factory (EC-375; consolidated from the copy-pasted\n * consumer `__root.tsx` by EC-369 finding #7). It assembles the ONE canonical\n * provider/gate stack — ThemeProvider → DeploymentSetupGate → AuthProvider(keyed)\n * → AuthGate → StudioProvider → Outlet — plus the `RootDocument` shell\n * (html/head with the pre-hydration theme script + the chrome stylesheet).\n *\n * Its whole purpose is to make the NEXT required-gate addition automatic on\n * package upgrade: when EC-258 added `DeploymentSetupGate`, every hand-copied\n * `__root.tsx` had to be manually re-synced, and Konditorei's silently missed\n * it for five releases (EC-367). Owning the composition here means a consumer's\n * `__root.tsx` shrinks to a thin shell and picks up new gates for free.\n *\n * The consumer re-exports the returned route as `Route` (the generated route\n * tree imports `Route` from `./routes/__root`):\n *\n * ```tsx\n * import { createStudioRootRoute } from '@elytracms/studio/router/root'\n * import appCss from '../styles/app.css?url'\n * export const Route = createStudioRootRoute({ appCssUrl: appCss })\n * ```\n */\nexport interface StudioRootRouteOptions {\n  /**\n   * URL of the studio chrome stylesheet, from the consumer's Vite `?url` import\n   * (`import appCss from '../styles/app.css?url'`). The one option every consumer\n   * must pass — the sheet is project-owned (it carries the delivery theme).\n   */\n  appCssUrl: string\n  /** Document `<title>`. Default: `'Elytra'`. */\n  title?: string\n  /** `<html lang>`. Default: `'en'`. */\n  htmlLang?: string\n  /**\n   * Extra `<head>` meta entries appended after the defaults (charset, viewport,\n   * title). Same shape TanStack Router's `head().meta` takes.\n   */\n  meta?: Array<Record<string, string>>\n  /** Extra `<head>` link entries appended after the app stylesheet. */\n  links?: Array<Record<string, string>>\n  /**\n   * Escape hatch: wrap additional project-specific providers around the routed\n   * subtree. Rendered INSIDE `StudioProvider` and around `<Outlet />`, so nested\n   * providers see the full studio/auth/theme context and remount with the active\n   * project. Return the passed `children` wrapped in your providers.\n   */\n  providers?: (children: ReactNode) => ReactNode\n}\n\nexport function createStudioRootRoute(options: StudioRootRouteOptions) {\n  const { appCssUrl, title = 'Elytra', htmlLang = 'en', meta = [], links = [], providers } = options\n\n  // EC-402: register the base title for the shell's per-view tab-title effect\n  // (`StudioTabTitle` composes `deepest crumb · view · project · <this title>`\n  // and restores exactly this value when leaving a project view). Module-holder\n  // seam — same pattern as `setActiveProjectSlug` — so the shell never has to\n  // capture `document.title` and race the router's own head effect.\n  setStudioBaseTitle(title)\n\n  function RootComponent() {\n    const location = useLocation()\n    // EC-179: the active project selects its Convex backend. Resolve it from the\n    // URL (or the sign-in redirect target) and bind it *before* the auth and\n    // persistence adapters are selected, so the initial sign-in authenticates\n    // against the project the user is heading for. Keying the auth/studio subtree\n    // by the active project remounts it on a project switch, so the adapters\n    // re-select against the new backend and the session is restored per-backend.\n    const activeSlug = activeSlugForLocation(\n      location.pathname,\n      (location.search as { redirect?: string }).redirect,\n    )\n    setActiveProjectSlug(activeSlug)\n\n    return (\n      <RootDocument htmlLang={htmlLang}>\n        <ThemeProvider>\n          {/* EC-258: one deployment-setup gate runs before auth — a misconfigured or\n              unreachable backend, an invalid workspace config, or any failing readiness\n              precondition (missing auth signing key, required collections, …) is a\n              single visible boot screen with copy-pasteable fixes, never a silent\n              in-memory fallback or a misleading downstream error. All checks passing\n              renders children as before. */}\n          <DeploymentSetupGate>\n            <AuthProvider key={activeSlug ?? '__launcher__'}>\n              <AuthGate>\n                <StudioProvider>\n                  {providers ? providers(<Outlet />) : <Outlet />}\n                  {/* EC-403: the blocking in-place re-auth overlay — mounted over\n                      every route, INSIDE StudioProvider (it invalidates the studio\n                      query cache on re-auth) and inside AuthProvider (it reads the\n                      sessionExpired state). Renders null unless the session died. */}\n                  <SessionExpiredOverlay />\n                </StudioProvider>\n              </AuthGate>\n            </AuthProvider>\n          </DeploymentSetupGate>\n        </ThemeProvider>\n      </RootDocument>\n    )\n  }\n\n  return createRootRoute({\n    head: () => ({\n      meta: [\n        { charSet: 'utf-8' },\n        { name: 'viewport', content: 'width=device-width, initial-scale=1' },\n        { title },\n        ...meta,\n      ],\n      links: [{ rel: 'stylesheet', href: appCssUrl }, ...links],\n    }),\n    component: RootComponent,\n  })\n}\n\n/**\n * Route guard (EC-150): one chokepoint in the root layout. Unauthenticated\n * visitors on protected paths are redirected to the sign-in screen (with the\n * intended target preserved); signed-in users never see the sign-in screen.\n * The decision logic is the pure, unit-tested `resolveRouteGuard`.\n */\nfunction AuthGate({ children }: { children: ReactNode }) {\n  const { status } = useAuth()\n  const { pathname } = useLocation()\n  const decision = resolveRouteGuard(pathname, status)\n\n  if (decision.kind === 'pending') return <SessionLoading />\n  if (decision.kind === 'redirect-to-sign-in') {\n    // EC-441: `NavigateOnce`, not `<Navigate>` — the gate stays mounted while\n    // the sign-in transition is pending, and a per-render re-navigate spirals\n    // into the router's update-depth rejection.\n    return <NavigateOnce to={SIGN_IN_PATH} search={{ redirect: decision.redirect }} replace />\n  }\n  if (decision.kind === 'redirect-home') return <NavigateOnce to=\"/\" replace />\n  return children\n}\n\n/** Deterministic session-restore state (also the SSR output for protected paths). */\nfunction SessionLoading() {\n  const t = useT()\n  return (\n    <div className=\"grid min-h-dvh place-items-center bg-background\">\n      <Text size=\"sm\" tone=\"muted\">\n        {t('auth.boot.checkingSession')}\n      </Text>\n    </div>\n  )\n}\n\nfunction RootDocument({ children, htmlLang }: { children: ReactNode; htmlLang: string }) {\n  // Dark-first SSR baseline; THEME_INIT_SCRIPT flips the class pre-hydration\n  // from the stored preference, and ThemeProvider keeps it reactive thereafter.\n  // suppressHydrationWarning: the script intentionally mutates the class before\n  // React hydrates, so a className mismatch on <html> is expected, not a bug.\n  // The app stylesheet is emitted via head().links and rendered by <HeadContent />.\n  return (\n    <html lang={htmlLang} className=\"dark\" suppressHydrationWarning>\n      <head>\n        <HeadContent />\n        <script dangerouslySetInnerHTML={{ __html: THEME_INIT_SCRIPT }} />\n      </head>\n      <body className=\"min-h-screen bg-background font-sans text-foreground antialiased\">\n        {children}\n        <Scripts />\n      </body>\n    </html>\n  )\n}\n"]}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/router/root.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,eAAe,EACf,WAAW,EACX,MAAM,EACN,OAAO,EACP,WAAW,GACZ,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAA;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAmD/D,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAElG,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAEzB,SAAS,aAAa;QACpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,8EAA8E;QAC9E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,UAAU,GAAG,qBAAqB,CACtC,QAAQ,CAAC,QAAQ,EAChB,QAAQ,CAAC,MAAgC,CAAC,QAAQ,CACpD,CAAA;QACD,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAEhC,OAAO,CACL,KAAC,YAAY,IAAC,QAAQ,EAAE,QAAQ,YAC9B,KAAC,aAAa,cAOZ,KAAC,mBAAmB,cAClB,KAAC,YAAY,cACX,KAAC,QAAQ,cACP,MAAC,cAAc,eACZ,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAC,MAAM,KAAG,CAAC,CAAC,CAAC,CAAC,KAAC,MAAM,KAAG,EAK/C,KAAC,qBAAqB,KAAG,IACV,GACR,IAVM,UAAU,IAAI,cAAc,CAWhC,GACK,GACR,GACH,CAChB,CAAA;IACH,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,IAAI,EAAE;gBACJ,EAAE,OAAO,EAAE,OAAO,EAAE;gBACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACpE,EAAE,KAAK,EAAE;gBACT,GAAG,IAAI;aACR;YACD,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC;SAC1D,CAAC;QACF,SAAS,EAAE,aAAa;KACzB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAE,QAAQ,EAA2B;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,WAAW,GAAI,QAAQ,CAAC,MAAiC,CAAC,QAAQ,CAAA;IACxE,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEvE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAC,cAAc,KAAG,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,SAAG,CAAA;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,SAAG,CAAA;IAC3F,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,cAAK,SAAS,EAAC,iDAAiD,YAC9D,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,CAAC,CAAC,2BAA2B,CAAC,GAC1B,GACH,CACP,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA6C;IACrF,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,kFAAkF;IAClF,OAAO,CACL,gBAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAC,MAAM,EAAC,wBAAwB,mBAC7D,2BACE,KAAC,WAAW,KAAG,EACf,iBAAQ,uBAAuB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAI,IAC7D,EACP,gBAAM,SAAS,EAAC,kEAAkE,aAC/E,QAAQ,EACT,KAAC,OAAO,KAAG,IACN,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport {\n  createRootRoute,\n  HeadContent,\n  Outlet,\n  Scripts,\n  useLocation,\n} from '@tanstack/react-router'\nimport { NavigateOnce } from './navigate-once'\nimport { AuthProvider, useAuth } from '@elytracms/studio/components/auth-context'\nimport { DeploymentSetupGate } from '@elytracms/studio/components/deployment-setup-gate'\nimport { SessionExpiredOverlay } from '@elytracms/studio/components/session-expired-overlay'\nimport { StudioProvider } from '@elytracms/studio/components/studio-context'\nimport { ThemeProvider } from '@elytracms/studio/components/theme-context'\nimport { Text } from '@elytracms/studio/ui'\nimport { SIGN_IN_PATH, resolveRouteGuard } from '@elytracms/studio/lib/auth'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { setStudioBaseTitle } from '@elytracms/studio/lib/tab-title'\nimport { activeSlugForLocation, setActiveProjectSlug } from '@elytracms/studio/lib/workspace'\nimport { THEME_INIT_SCRIPT } from '@elytracms/studio/lib/theme'\n\n/**\n * Studio root-route boot factory (EC-375; consolidated from the copy-pasted\n * consumer `__root.tsx` by EC-369 finding #7). It assembles the ONE canonical\n * provider/gate stack — ThemeProvider → DeploymentSetupGate → AuthProvider(keyed)\n * → AuthGate → StudioProvider → Outlet — plus the `RootDocument` shell\n * (html/head with the pre-hydration theme script + the chrome stylesheet).\n *\n * Its whole purpose is to make the NEXT required-gate addition automatic on\n * package upgrade: when EC-258 added `DeploymentSetupGate`, every hand-copied\n * `__root.tsx` had to be manually re-synced, and Konditorei's silently missed\n * it for five releases (EC-367). Owning the composition here means a consumer's\n * `__root.tsx` shrinks to a thin shell and picks up new gates for free.\n *\n * The consumer re-exports the returned route as `Route` (the generated route\n * tree imports `Route` from `./routes/__root`):\n *\n * ```tsx\n * import { createStudioRootRoute } from '@elytracms/studio/router/root'\n * import appCss from '../styles/app.css?url'\n * export const Route = createStudioRootRoute({ appCssUrl: appCss })\n * ```\n */\nexport interface StudioRootRouteOptions {\n  /**\n   * URL of the studio chrome stylesheet, from the consumer's Vite `?url` import\n   * (`import appCss from '../styles/app.css?url'`). The one option every consumer\n   * must pass — the sheet is project-owned (it carries the delivery theme).\n   */\n  appCssUrl: string\n  /** Document `<title>`. Default: `'Elytra'`. */\n  title?: string\n  /** `<html lang>`. Default: `'en'`. */\n  htmlLang?: string\n  /**\n   * Extra `<head>` meta entries appended after the defaults (charset, viewport,\n   * title). Same shape TanStack Router's `head().meta` takes.\n   */\n  meta?: Array<Record<string, string>>\n  /** Extra `<head>` link entries appended after the app stylesheet. */\n  links?: Array<Record<string, string>>\n  /**\n   * Escape hatch: wrap additional project-specific providers around the routed\n   * subtree. Rendered INSIDE `StudioProvider` and around `<Outlet />`, so nested\n   * providers see the full studio/auth/theme context and remount with the active\n   * project. Return the passed `children` wrapped in your providers.\n   */\n  providers?: (children: ReactNode) => ReactNode\n}\n\nexport function createStudioRootRoute(options: StudioRootRouteOptions) {\n  const { appCssUrl, title = 'Elytra', htmlLang = 'en', meta = [], links = [], providers } = options\n\n  // EC-402: register the base title for the shell's per-view tab-title effect\n  // (`StudioTabTitle` composes `deepest crumb · view · project · <this title>`\n  // and restores exactly this value when leaving a project view). Module-holder\n  // seam — same pattern as `setActiveProjectSlug` — so the shell never has to\n  // capture `document.title` and race the router's own head effect.\n  setStudioBaseTitle(title)\n\n  function RootComponent() {\n    const location = useLocation()\n    // EC-179: the active project selects its Convex backend. Resolve it from the\n    // URL (or the sign-in redirect target) and bind it *before* the auth and\n    // persistence adapters are selected, so the initial sign-in authenticates\n    // against the project the user is heading for. Keying the auth/studio subtree\n    // by the active project remounts it on a project switch, so the adapters\n    // re-select against the new backend and the session is restored per-backend.\n    const activeSlug = activeSlugForLocation(\n      location.pathname,\n      (location.search as { redirect?: string }).redirect,\n    )\n    setActiveProjectSlug(activeSlug)\n\n    return (\n      <RootDocument htmlLang={htmlLang}>\n        <ThemeProvider>\n          {/* EC-258: one deployment-setup gate runs before auth — a misconfigured or\n              unreachable backend, an invalid workspace config, or any failing readiness\n              precondition (missing auth signing key, required collections, …) is a\n              single visible boot screen with copy-pasteable fixes, never a silent\n              in-memory fallback or a misleading downstream error. All checks passing\n              renders children as before. */}\n          <DeploymentSetupGate>\n            <AuthProvider key={activeSlug ?? '__launcher__'}>\n              <AuthGate>\n                <StudioProvider>\n                  {providers ? providers(<Outlet />) : <Outlet />}\n                  {/* EC-403: the blocking in-place re-auth overlay — mounted over\n                      every route, INSIDE StudioProvider (it invalidates the studio\n                      query cache on re-auth) and inside AuthProvider (it reads the\n                      sessionExpired state). Renders null unless the session died. */}\n                  <SessionExpiredOverlay />\n                </StudioProvider>\n              </AuthGate>\n            </AuthProvider>\n          </DeploymentSetupGate>\n        </ThemeProvider>\n      </RootDocument>\n    )\n  }\n\n  return createRootRoute({\n    head: () => ({\n      meta: [\n        { charSet: 'utf-8' },\n        { name: 'viewport', content: 'width=device-width, initial-scale=1' },\n        { title },\n        ...meta,\n      ],\n      links: [{ rel: 'stylesheet', href: appCssUrl }, ...links],\n    }),\n    component: RootComponent,\n  })\n}\n\n/**\n * Route guard (EC-150): one chokepoint in the root layout. Unauthenticated\n * visitors on protected paths are redirected to the sign-in screen (with the\n * intended target preserved); signed-in users never see the sign-in screen.\n * The decision logic is the pure, unit-tested `resolveRouteGuard`.\n */\nfunction AuthGate({ children }: { children: ReactNode }) {\n  const { status } = useAuth()\n  const location = useLocation()\n  // EC-451: feed the still-pending `?redirect` search param into the decision.\n  // Dev auto-login (or any fast real sign-in — SSO return, password-manager\n  // autofill) can flip the session to signed-in while the location is still\n  // `/sign-in?redirect=…`, BEFORE `SignInView`'s own post-sign-in navigation\n  // runs; the gate's bounce then fires first and must consume the target\n  // instead of dropping it on an unconditional `/`. The target is validated\n  // by `postSignInTarget` inside `resolveRouteGuard` (same-origin relative\n  // paths only — redirect is an attacker-suppliable search param).\n  const rawRedirect = (location.search as { redirect?: unknown }).redirect\n  const redirect = typeof rawRedirect === 'string' ? rawRedirect : undefined\n  const decision = resolveRouteGuard(location.pathname, status, redirect)\n\n  if (decision.kind === 'pending') return <SessionLoading />\n  if (decision.kind === 'redirect-to-sign-in') {\n    // EC-441: `NavigateOnce`, not `<Navigate>` — the gate stays mounted while\n    // the sign-in transition is pending, and a per-render re-navigate spirals\n    // into the router's update-depth rejection.\n    return <NavigateOnce to={SIGN_IN_PATH} search={{ redirect: decision.redirect }} replace />\n  }\n  if (decision.kind === 'redirect-home') return <NavigateOnce to={decision.target} replace />\n  return children\n}\n\n/** Deterministic session-restore state (also the SSR output for protected paths). */\nfunction SessionLoading() {\n  const t = useT()\n  return (\n    <div className=\"grid min-h-dvh place-items-center bg-background\">\n      <Text size=\"sm\" tone=\"muted\">\n        {t('auth.boot.checkingSession')}\n      </Text>\n    </div>\n  )\n}\n\nfunction RootDocument({ children, htmlLang }: { children: ReactNode; htmlLang: string }) {\n  // Dark-first SSR baseline; THEME_INIT_SCRIPT flips the class pre-hydration\n  // from the stored preference, and ThemeProvider keeps it reactive thereafter.\n  // suppressHydrationWarning: the script intentionally mutates the class before\n  // React hydrates, so a className mismatch on <html> is expected, not a bug.\n  // The app stylesheet is emitted via head().links and rendered by <HeadContent />.\n  return (\n    <html lang={htmlLang} className=\"dark\" suppressHydrationWarning>\n      <head>\n        <HeadContent />\n        <script dangerouslySetInnerHTML={{ __html: THEME_INIT_SCRIPT }} />\n      </head>\n      <body className=\"min-h-screen bg-background font-sans text-foreground antialiased\">\n        {children}\n        <Scripts />\n      </body>\n    </html>\n  )\n}\n"]}