@happyvertical/smrt-core 0.30.0

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sources":["../src/errors.ts"],"sourcesContent":["/**\n * Comprehensive error handling system for SMRT framework\n *\n * Provides specialized error types for different failure scenarios\n * with proper error codes, messages, and debugging information.\n */\n\n/**\n * Abstract base class for all SMRT framework errors.\n *\n * Adds a structured `code` (machine-readable string constant), a `category`\n * (coarse error domain), optional structured `details`, and an optional\n * causal `Error` chain on top of the standard `Error` class.\n *\n * Never throw `SmrtError` directly — use one of the concrete subclasses\n * (`DatabaseError`, `AIError`, `ValidationError`, etc.) or their static\n * factory methods for consistent error codes and messages.\n *\n * @example\n * ```typescript\n * try {\n *   await product.save();\n * } catch (err) {\n *   if (err instanceof ValidationError) {\n *     console.error(err.code, err.details); // 'VALIDATION_REQUIRED_FIELD', { fieldName, objectType }\n *   }\n *   if (err instanceof SmrtError) {\n *     logger.error(ErrorUtils.sanitizeError(err));\n *   }\n * }\n * ```\n */\n\nimport { createLogger } from '@happyvertical/logger';\n\nconst logger = createLogger({ level: 'info' });\n\nexport abstract class SmrtError extends Error {\n  public readonly code: string;\n  public readonly category:\n    | 'database'\n    | 'ai'\n    | 'filesystem'\n    | 'validation'\n    | 'network'\n    | 'configuration'\n    | 'runtime';\n  public readonly details?: Record<string, any>;\n  public readonly cause?: Error;\n\n  constructor(\n    message: string,\n    code: string,\n    category: SmrtError['category'],\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message);\n    this.name = this.constructor.name;\n    this.code = code;\n    this.category = category;\n    this.details = details;\n    this.cause = cause;\n\n    // Maintain proper stack trace for V8\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  /**\n   * Converts error to a serializable object for logging/debugging\n   */\n  toJSON() {\n    return {\n      name: this.name,\n      message: this.message,\n      code: this.code,\n      category: this.category,\n      details: this.details,\n      stack: this.stack,\n      cause: this.cause\n        ? {\n            name: this.cause.name,\n            message: this.cause.message,\n            stack: this.cause.stack,\n          }\n        : undefined,\n    };\n  }\n}\n\ntype ErrorLikeWithContext = Error & {\n  cause?: unknown;\n  context?: {\n    originalError?: unknown;\n  };\n};\n\nfunction collectErrorMessages(\n  value: unknown,\n  messages: string[],\n  visited: Set<unknown>,\n  depth = 0,\n): void {\n  if (!value || visited.has(value) || depth > 10) {\n    return;\n  }\n\n  visited.add(value);\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed) {\n      messages.push(trimmed);\n    }\n    return;\n  }\n\n  if (!(value instanceof Error)) {\n    return;\n  }\n\n  const message = value.message?.trim();\n  if (message) {\n    messages.push(message);\n  }\n\n  const errorWithContext = value as ErrorLikeWithContext;\n  collectErrorMessages(\n    errorWithContext.context?.originalError,\n    messages,\n    visited,\n    depth + 1,\n  );\n  collectErrorMessages(errorWithContext.cause, messages, visited, depth + 1);\n}\n\nfunction getPrimaryCauseMessage(cause?: Error): {\n  message?: string;\n  messages?: string[];\n} {\n  if (!cause) {\n    return {};\n  }\n\n  const collected: string[] = [];\n  collectErrorMessages(cause, collected, new Set<unknown>());\n\n  const uniqueMessages = [...new Set(collected.filter(Boolean))];\n  if (uniqueMessages.length === 0) {\n    return {};\n  }\n\n  return {\n    message: uniqueMessages[uniqueMessages.length - 1],\n    messages: uniqueMessages,\n  };\n}\n\n/**\n * Errors originating from database operations.\n *\n * Use the static factory methods rather than the constructor directly:\n * - `DatabaseError.connectionFailed(url, cause)` — DB connection failure\n * - `DatabaseError.queryFailed(query, cause)` — SQL execution error\n * - `DatabaseError.schemaError(table, op, cause)` — DDL/migration error\n * - `DatabaseError.constraintViolation(constraint, value, cause)` — FK/CHECK/UNIQUE\n * - `DatabaseError.corruptedData(field, class, cause)` — unparse-able column data\n * - `DatabaseError.missingDiscriminator(class, rowId)` — STI row missing `_meta_type`\n * - `DatabaseError.stiDiscriminatorConflict(...)` — legacy STI discriminator collides during qualification\n * - `DatabaseError.schemaMissing(table, class)` — table not yet migrated\n *\n * All errors have `category: 'database'` and codes prefixed with `DB_`.\n */\nexport class DatabaseError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'database', details, cause);\n  }\n\n  static connectionFailed(dbUrl: string, cause?: Error): DatabaseError {\n    return new DatabaseError(\n      `Failed to connect to database: ${dbUrl}`,\n      'DB_CONNECTION_FAILED',\n      { dbUrl },\n      cause,\n    );\n  }\n\n  static queryFailed(query: string, cause?: Error): DatabaseError {\n    // Include the deepest actionable cause message for better debugging.\n    const causeInfo = getPrimaryCauseMessage(cause);\n    const causeMsg = causeInfo.message ? `\\nCause: ${causeInfo.message}` : '';\n    return new DatabaseError(\n      `Database query failed: ${query.substring(0, 100)}${query.length > 100 ? '...' : ''}${causeMsg}`,\n      'DB_QUERY_FAILED',\n      {\n        query,\n        causeMessage: causeInfo.message,\n        causeMessages: causeInfo.messages,\n      },\n      cause,\n    );\n  }\n\n  static schemaError(\n    tableName: string,\n    operation: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Schema operation failed for table '${tableName}': ${operation}`,\n      'DB_SCHEMA_ERROR',\n      { tableName, operation },\n      cause,\n    );\n  }\n\n  static constraintViolation(\n    constraint: string,\n    value: any,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Database constraint violation: ${constraint}`,\n      'DB_CONSTRAINT_VIOLATION',\n      { constraint, value },\n      cause,\n    );\n  }\n\n  static corruptedData(\n    fieldName: string,\n    className: string,\n    cause?: Error,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Corrupted data in field '${fieldName}' for ${className}. ` +\n        `The data cannot be parsed or is malformed. ` +\n        `This may indicate database corruption or incompatible schema changes.`,\n      'DB_CORRUPTED_DATA',\n      { fieldName, className },\n      cause,\n    );\n  }\n\n  static missingDiscriminator(\n    className: string,\n    rowId?: string,\n  ): DatabaseError {\n    return new DatabaseError(\n      `Missing discriminator (_meta_type) for STI class ${className}${rowId ? ` (row id: ${rowId})` : ''}. ` +\n        `STI classes require a discriminator column to determine the correct subclass. ` +\n        `This may indicate a schema mismatch or manual database modification.`,\n      'DB_MISSING_DISCRIMINATOR',\n      { className, rowId },\n    );\n  }\n\n  static stiDiscriminatorConflict(details: {\n    className: string;\n    tableName: string;\n    id: string;\n    slug: string;\n    context: string;\n    conflictIdentity: Record<string, any>;\n    legacyMetaType: string;\n    qualifiedMetaType: string;\n    duplicateId: string;\n  }): DatabaseError {\n    const identityText = Object.entries(details.conflictIdentity)\n      .map(([key, value]) => `${key} '${String(value)}'`)\n      .join(', ');\n\n    return new DatabaseError(\n      `Legacy STI discriminator collision for ${details.className} (${details.tableName}). ` +\n        `Row '${details.id}' would upgrade _meta_type from '${details.legacyMetaType}' to '${details.qualifiedMetaType}', ` +\n        `but row '${details.duplicateId}' already uses the qualified discriminator for ${identityText || 'the same conflict identity'}. ` +\n        `Merge or remove the duplicate legacy/qualified rows before saving.`,\n      'DB_STI_DISCRIMINATOR_CONFLICT',\n      details,\n    );\n  }\n\n  static schemaMissing(tableName: string, className: string): DatabaseError {\n    return new DatabaseError(\n      `Table '${tableName}' does not exist for class '${className}'. ` +\n        `Run 'smrt db:migrate' to create database schema.`,\n      'DB_SCHEMA_MISSING',\n      { tableName, className },\n    );\n  }\n}\n\n/**\n * Errors from AI provider integrations.\n *\n * Use the static factory methods:\n * - `AIError.providerError(provider, operation, cause)` — generic provider failure\n * - `AIError.rateLimitExceeded(provider, retryAfter)` — rate limit hit\n * - `AIError.invalidResponse(provider, response)` — unexpected response shape\n * - `AIError.authenticationFailed(provider)` — bad API key / credentials\n *\n * All errors have `category: 'ai'` and codes prefixed with `AI_`.\n * AI errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class AIError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'ai', details, cause);\n  }\n\n  static providerError(\n    provider: string,\n    operation: string,\n    cause?: Error,\n  ): AIError {\n    return new AIError(\n      `AI provider '${provider}' failed during ${operation}`,\n      'AI_PROVIDER_ERROR',\n      { provider, operation },\n      cause,\n    );\n  }\n\n  static rateLimitExceeded(provider: string, retryAfter?: number): AIError {\n    return new AIError(\n      `AI provider '${provider}' rate limit exceeded`,\n      'AI_RATE_LIMIT',\n      { provider, retryAfter },\n    );\n  }\n\n  static invalidResponse(provider: string, response: any): AIError {\n    return new AIError(\n      `AI provider '${provider}' returned invalid response`,\n      'AI_INVALID_RESPONSE',\n      { provider, response },\n    );\n  }\n\n  static authenticationFailed(provider: string): AIError {\n    return new AIError(\n      `AI provider '${provider}' authentication failed`,\n      'AI_AUTH_FAILED',\n      { provider },\n    );\n  }\n}\n\n/**\n * Errors from filesystem operations.\n *\n * Use the static factory methods:\n * - `FilesystemError.fileNotFound(path)` — file does not exist\n * - `FilesystemError.permissionDenied(path, operation)` — access denied\n * - `FilesystemError.diskSpaceExceeded(path, requiredBytes)` — insufficient space\n *\n * All errors have `category: 'filesystem'` and codes prefixed with `FS_`.\n */\nexport class FilesystemError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'filesystem', details, cause);\n  }\n\n  static fileNotFound(path: string): FilesystemError {\n    return new FilesystemError(`File not found: ${path}`, 'FS_FILE_NOT_FOUND', {\n      path,\n    });\n  }\n\n  static permissionDenied(path: string, operation: string): FilesystemError {\n    return new FilesystemError(\n      `Permission denied for ${operation} on: ${path}`,\n      'FS_PERMISSION_DENIED',\n      { path, operation },\n    );\n  }\n\n  static diskSpaceExceeded(\n    path: string,\n    requiredBytes: number,\n  ): FilesystemError {\n    return new FilesystemError(\n      `Insufficient disk space for operation on: ${path}`,\n      'FS_DISK_SPACE_EXCEEDED',\n      { path, requiredBytes },\n    );\n  }\n}\n\n/**\n * Input/data validation errors thrown before or during a database operation.\n *\n * `save()` throws `ValidationError` when field validation fails. The collection's\n * `convertWhereKeys()` throws it for invalid WHERE clause operators or field names.\n * `ValidationError` is **not** retried by `ErrorUtils.withRetry()`.\n *\n * Use the static factory methods:\n * - `ValidationError.requiredField(field, objectType)` — missing required field\n * - `ValidationError.invalidValue(field, value, expected)` — wrong type/format\n * - `ValidationError.uniqueConstraint(field, value)` — duplicate unique value\n * - `ValidationError.rangeError(field, value, min?, max?)` — out of allowed range\n *\n * All errors have `category: 'validation'` and codes prefixed with `VALIDATION_`.\n */\nexport class ValidationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'validation', details, cause);\n  }\n\n  static requiredField(fieldName: string, objectType: string): ValidationError {\n    return new ValidationError(\n      `Required field '${fieldName}' is missing for ${objectType}`,\n      'VALIDATION_REQUIRED_FIELD',\n      { fieldName, objectType },\n    );\n  }\n\n  static invalidValue(\n    fieldName: string,\n    value: any,\n    expectedType: string,\n  ): ValidationError {\n    return new ValidationError(\n      `Invalid value for field '${fieldName}': expected ${expectedType}, got ${typeof value}`,\n      'VALIDATION_INVALID_VALUE',\n      { fieldName, value, expectedType },\n    );\n  }\n\n  static uniqueConstraint(fieldName: string, value: any): ValidationError {\n    return new ValidationError(\n      `Unique constraint violation for field '${fieldName}' with value: ${value}`,\n      'VALIDATION_UNIQUE_CONSTRAINT',\n      { fieldName, value },\n    );\n  }\n\n  static rangeError(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError {\n    const range =\n      min !== undefined && max !== undefined\n        ? `between ${min} and ${max}`\n        : min !== undefined\n          ? `>= ${min}`\n          : `<= ${max}`;\n\n    return new ValidationError(\n      `Value for field '${fieldName}' must be ${range}, got: ${value}`,\n      'VALIDATION_RANGE_ERROR',\n      { fieldName, value, min, max },\n    );\n  }\n}\n\n/**\n * Errors from HTTP and external network operations.\n *\n * Use the static factory methods:\n * - `NetworkError.requestFailed(url, status?, body?)` — non-2xx response or connection failure\n * - `NetworkError.timeout(url, timeoutMs)` — request exceeded timeout\n * - `NetworkError.serviceUnavailable(service, reason?)` — external service down\n *\n * All errors have `category: 'network'` and codes prefixed with `NETWORK_`.\n * Network errors are considered retryable by `ErrorUtils.isRetryable()`.\n */\nexport class NetworkError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'network', details, cause);\n  }\n\n  static requestFailed(\n    url: string,\n    status?: number,\n    responseBody?: string | Error,\n  ): NetworkError {\n    const cause = responseBody instanceof Error ? responseBody : undefined;\n    const body = typeof responseBody === 'string' ? responseBody : undefined;\n    return new NetworkError(\n      `Network request failed: ${url}${status ? ` (Status: ${status})` : ''}${body ? ` - ${body.substring(0, 200)}` : ''}`,\n      'NETWORK_REQUEST_FAILED',\n      { url, status, responseBody: body },\n      cause,\n    );\n  }\n\n  static timeout(url: string, timeoutMs: number): NetworkError {\n    return new NetworkError(\n      `Network request timed out after ${timeoutMs}ms: ${url}`,\n      'NETWORK_TIMEOUT',\n      { url, timeoutMs },\n    );\n  }\n\n  static serviceUnavailable(service: string, reason?: string): NetworkError {\n    return new NetworkError(\n      reason\n        ? `External service unavailable: ${service} - ${reason}`\n        : `External service unavailable: ${service}`,\n      'NETWORK_SERVICE_UNAVAILABLE',\n      { service, reason },\n    );\n  }\n}\n\n/**\n * Errors from misconfigured or incompatible class/framework setup.\n *\n * These are typically thrown during class registration (i.e. at module load time),\n * not during normal request handling.\n *\n * Use the static factory methods:\n * - `ConfigurationError.missingConfiguration(key, context?)` — missing required config\n * - `ConfigurationError.invalidConfiguration(key, value, expected)` — wrong config type/value\n * - `ConfigurationError.initializationFailed(component, cause?)` — component failed to start\n * - `ConfigurationError.circularInheritance(class, chain)` — circular class inheritance\n * - `ConfigurationError.incompatibleStrategy(class, strategy, parent, parentStrategy)` — STI mismatch\n * - `ConfigurationError.unregisteredBaseClass(child, base)` — STI base not yet registered\n *\n * All errors have `category: 'configuration'` and codes prefixed with `CONFIG_`.\n * Configuration errors are **not** retried by `ErrorUtils.withRetry()`.\n */\nexport class ConfigurationError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'configuration', details, cause);\n  }\n\n  static missingConfiguration(\n    configKey: string,\n    context?: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Missing required configuration: ${configKey}${context ? ` in ${context}` : ''}`,\n      'CONFIG_MISSING',\n      { configKey, context },\n    );\n  }\n\n  static invalidConfiguration(\n    configKey: string,\n    value: any,\n    expected: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Invalid configuration for ${configKey}: expected ${expected}, got ${typeof value}`,\n      'CONFIG_INVALID',\n      { configKey, value, expected },\n    );\n  }\n\n  static initializationFailed(\n    component: string,\n    cause?: Error,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Failed to initialize component: ${component}`,\n      'CONFIG_INIT_FAILED',\n      { component },\n      cause,\n    );\n  }\n\n  static circularInheritance(\n    className: string,\n    inheritanceChain: string[],\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Circular inheritance detected for class '${className}'. ` +\n        `Inheritance chain: ${inheritanceChain.join(' → ')} → ${className}. ` +\n        `Classes cannot inherit from themselves directly or indirectly.`,\n      'CONFIG_CIRCULAR_INHERITANCE',\n      { className, inheritanceChain },\n    );\n  }\n\n  static incompatibleStrategy(\n    className: string,\n    classStrategy: string,\n    parentClass: string,\n    parentStrategy: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `Incompatible table strategy for class '${className}' (${classStrategy}). ` +\n        `Parent class '${parentClass}' uses ${parentStrategy} strategy. ` +\n        `Child classes must use the same table strategy as their parent. ` +\n        `Either change ${className} to use ${parentStrategy}, or remove the inheritance.`,\n      'CONFIG_INCOMPATIBLE_STRATEGY',\n      { className, classStrategy, parentClass, parentStrategy },\n    );\n  }\n\n  static unregisteredBaseClass(\n    childClass: string,\n    baseClass: string,\n  ): ConfigurationError {\n    return new ConfigurationError(\n      `STI base class '${baseClass}' is not registered for child class '${childClass}'. ` +\n        `When using Single Table Inheritance, the base class must be registered before any child classes. ` +\n        `Ensure ${baseClass} is decorated with @smrt({ tableStrategy: 'sti' }) and imported before ${childClass}.`,\n      'CONFIG_UNREGISTERED_BASE',\n      { childClass, baseClass },\n    );\n  }\n}\n\n/**\n * Errors representing unexpected runtime failures not covered by other categories.\n *\n * `RuntimeError` is the catch-all for internal framework errors — invalid object\n * state, exhausted resources, or failures in operations like `save()` and `loadFromId()`\n * that propagate from an unknown cause.\n *\n * Use the static factory methods:\n * - `RuntimeError.operationFailed(operation, context?, cause?)` — generic operation failure\n * - `RuntimeError.invalidState(message, context?)` — unexpected object/system state\n * - `RuntimeError.resourceExhausted(resource, limit)` — limit exceeded (e.g. connections)\n *\n * All errors have `category: 'runtime'` and codes prefixed with `RUNTIME_`.\n */\nexport class RuntimeError extends SmrtError {\n  constructor(\n    message: string,\n    code: string,\n    details?: Record<string, any>,\n    cause?: Error,\n  ) {\n    super(message, code, 'runtime', details, cause);\n  }\n\n  static operationFailed(\n    operation: string,\n    context?: string,\n    cause?: Error,\n  ): RuntimeError {\n    return new RuntimeError(\n      `Operation failed: ${operation}${context ? ` in ${context}` : ''}`,\n      'RUNTIME_OPERATION_FAILED',\n      { operation, context },\n      cause,\n    );\n  }\n\n  static invalidState(\n    message: string,\n    context?: Record<string, any>,\n  ): RuntimeError {\n    return new RuntimeError(message, 'RUNTIME_INVALID_STATE', context);\n  }\n\n  static resourceExhausted(resource: string, limit: number): RuntimeError {\n    return new RuntimeError(\n      `Resource exhausted: ${resource} exceeded limit of ${limit}`,\n      'RUNTIME_RESOURCE_EXHAUSTED',\n      { resource, limit },\n    );\n  }\n}\n\n/**\n * Error thrown when a tenant isolation boundary is crossed while resolving a\n * relationship.\n *\n * Raised by {@link SmrtObject.loadRelated} / {@link SmrtObject.loadRelatedMany}\n * (and {@link SmrtObject.getRelated}, which delegates to them) when a\n * tenant-scoped object resolves a relationship to an object belonging to a\n * *different*, non-null tenant — the genuine cross-tenant data leak. The guard\n * is a no-op when either side has a `null` tenant (global / non-tenant-scoped\n * models) and when both sides share the same tenant, so it only fires on real\n * leaks. Pass `{ allowCrossTenant: true }` to the loader to deliberately opt out.\n *\n * The `code` is always `'TENANT_ISOLATION_VIOLATION'` and the category is\n * `'validation'`. It is never retried — `ErrorUtils.withRetry()` rethrows it\n * immediately and `ErrorUtils.isRetryable()` returns `false` — because a tenant\n * boundary violation is deterministic. `tenantId` is the owning object's tenant\n * and `attemptedTenantId` is the tenant of the object that was reached.\n *\n * This shares its stable `code`, `name`, `tenantId`, and `attemptedTenantId`\n * shape with the interceptor-level `TenantIsolationError` in\n * `@happyvertical/smrt-tenancy`, so cross-cutting handlers can match either via\n * `err.code === 'TENANT_ISOLATION_VIOLATION'`. They are intentionally distinct\n * classes because `@happyvertical/smrt-core` cannot depend on the tenancy\n * package (the dependency runs the other way).\n *\n * @example\n * ```typescript\n * try {\n *   await order.loadRelated('customerId');\n * } catch (err) {\n *   if (err instanceof TenantIsolationError) {\n *     // err.tenantId          — the order's tenant\n *     // err.attemptedTenantId — the customer's tenant\n *   }\n * }\n * ```\n *\n * @see SmrtObject.loadRelated\n * @see SmrtObject.loadRelatedMany\n */\nexport class TenantIsolationError extends SmrtError {\n  /** The tenant ID of the object that owns the relationship. */\n  public readonly tenantId?: string;\n  /** The tenant ID of the related object that was reached (and rejected). */\n  public readonly attemptedTenantId?: string;\n\n  constructor(\n    message: string,\n    details?: {\n      tenantId?: string;\n      attemptedTenantId?: string;\n      [key: string]: any;\n    },\n    cause?: Error,\n  ) {\n    super(message, 'TENANT_ISOLATION_VIOLATION', 'validation', details, cause);\n    this.tenantId = details?.tenantId;\n    this.attemptedTenantId = details?.attemptedTenantId;\n  }\n\n  /**\n   * Builds a {@link TenantIsolationError} for a blocked cross-tenant\n   * relationship resolution, with a descriptive message and structured details.\n   */\n  static crossTenantReference(details: {\n    sourceClass: string;\n    fieldName: string;\n    sourceTenantId: string;\n    targetClass?: string;\n    targetTenantId: string;\n  }): TenantIsolationError {\n    const target = details.targetClass\n      ? `${details.targetClass} (tenant '${details.targetTenantId}')`\n      : `tenant '${details.targetTenantId}'`;\n    return new TenantIsolationError(\n      `Cross-tenant relationship access blocked on ${details.sourceClass}.${details.fieldName}: ` +\n        `owning tenant '${details.sourceTenantId}' does not match ${target}. ` +\n        `Pass { allowCrossTenant: true } to loadRelated()/loadRelatedMany()/getRelated() to override.`,\n      {\n        tenantId: details.sourceTenantId,\n        attemptedTenantId: details.targetTenantId,\n        sourceClass: details.sourceClass,\n        fieldName: details.fieldName,\n        targetClass: details.targetClass,\n      },\n    );\n  }\n}\n\n/**\n * Utility functions for error handling\n */\nexport class ErrorUtils {\n  /**\n   * Wraps a function with error handling and automatic retry logic\n   */\n  static async withRetry<T>(\n    operation: () => Promise<T>,\n    maxRetries = 3,\n    delay = 1000,\n    backoffMultiplier = 2,\n  ): Promise<T> {\n    let lastError: Error = new Error('Operation failed without error details');\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      try {\n        return await operation();\n      } catch (error) {\n        lastError = error instanceof Error ? error : new Error(String(error));\n\n        if (attempt === maxRetries) {\n          throw lastError;\n        }\n\n        // Skip retry for certain error types. A tenant isolation violation is\n        // deterministic — retrying re-fetches the same cross-tenant target — and\n        // is a security boundary, so it must never be retried.\n        if (\n          error instanceof ValidationError ||\n          error instanceof ConfigurationError ||\n          error instanceof TenantIsolationError\n        ) {\n          throw error;\n        }\n\n        // Wait before retrying with exponential backoff\n        // Wrap in try-catch to handle any potential timer errors\n        try {\n          await new Promise<void>((resolve) => {\n            setTimeout(() => resolve(), delay * backoffMultiplier ** attempt);\n          });\n        } catch (timerError) {\n          // Log timer error but don't fail the retry\n          logger.error('Timer error during retry', { error: timerError });\n        }\n      }\n    }\n\n    throw lastError;\n  }\n\n  /**\n   * Checks if an error is retryable\n   */\n  static isRetryable(error: Error): boolean {\n    if (error instanceof SmrtError) {\n      return error.category === 'network' || error.category === 'ai';\n    }\n\n    // Check for common retryable error patterns\n    const retryablePatterns = [\n      /ECONNRESET/,\n      /ETIMEDOUT/,\n      /ENOTFOUND/,\n      /rate.?limit/i,\n      /timeout/i,\n      /503/,\n      /502/,\n      /500/,\n    ];\n\n    return retryablePatterns.some((pattern) => pattern.test(error.message));\n  }\n\n  /**\n   * Sanitizes an error for safe logging (removes sensitive information)\n   */\n  static sanitizeError(error: Error): Record<string, any> {\n    const sanitized: Record<string, any> = {\n      name: error.name,\n      message: error.message,\n      stack: error.stack,\n    };\n\n    if (error instanceof SmrtError) {\n      sanitized.code = error.code;\n      sanitized.category = error.category;\n\n      // Sanitize details to remove potential sensitive information\n      if (error.details) {\n        sanitized.details = { ...error.details };\n\n        // Remove common sensitive fields\n        const sensitiveFields = [\n          'password',\n          'token',\n          'key',\n          'secret',\n          'apiKey',\n        ];\n        for (const field of sensitiveFields) {\n          if (sanitized.details[field]) {\n            sanitized.details[field] = '[REDACTED]';\n          }\n        }\n      }\n    }\n\n    return sanitized;\n  }\n}\n\n/**\n * Validation report that collects multiple validation errors\n *\n * Useful for validating an entire object and reporting all errors\n * at once rather than stopping at the first error.\n *\n * @example\n * ```typescript\n * const report = new ValidationReport('Product');\n * report.addError(ValidationError.requiredField('name', 'Product'));\n * report.addError(ValidationError.rangeError('price', -10, 0));\n *\n * if (report.hasErrors()) {\n *   console.error(report.toString());\n *   // Output:\n *   // Validation failed for Product with 2 errors:\n *   // - name: Required field 'name' is missing for Product\n *   // - price: Value -10 for field 'price' is outside allowed range [0, undefined]\n * }\n * ```\n */\nexport class ValidationReport {\n  private errors: ValidationError[] = [];\n  private objectType: string;\n\n  constructor(objectType: string) {\n    this.objectType = objectType;\n  }\n\n  /**\n   * Add a validation error to the report\n   */\n  addError(error: ValidationError): void {\n    this.errors.push(error);\n  }\n\n  /**\n   * Check if there are any validation errors\n   */\n  hasErrors(): boolean {\n    return this.errors.length > 0;\n  }\n\n  /**\n   * Get all validation errors\n   */\n  getErrors(): ValidationError[] {\n    return [...this.errors];\n  }\n\n  /**\n   * Get the number of validation errors\n   */\n  getErrorCount(): number {\n    return this.errors.length;\n  }\n\n  /**\n   * Convert to a human-readable string\n   */\n  toString(): string {\n    if (this.errors.length === 0) {\n      return `Validation passed for ${this.objectType}`;\n    }\n\n    const errorList = this.errors\n      .map((err, idx) => `  ${idx + 1}. ${err.message}`)\n      .join('\\n');\n\n    return `Validation failed for ${this.objectType} with ${this.errors.length} error(s):\\n${errorList}`;\n  }\n\n  /**\n   * Convert to JSON format\n   */\n  toJSON(): object {\n    return {\n      objectType: this.objectType,\n      errorCount: this.errors.length,\n      errors: this.errors.map((err) => err.toJSON()),\n    };\n  }\n\n  /**\n   * Throw the first error if there are any errors\n   */\n  throwIfErrors(): void {\n    if (this.errors.length > 0) {\n      throw this.errors[0];\n    }\n  }\n\n  /**\n   * Clear all errors\n   */\n  clear(): void {\n    this.errors = [];\n  }\n}\n\n/**\n * Validation utility functions\n */\nexport class ValidationUtils {\n  /**\n   * Validate a single field value\n   *\n   * @param fieldName - Name of the field\n   * @param value - Value to validate\n   * @param options - Validation options (required, min, max, etc.)\n   * @returns ValidationError if validation fails, null otherwise\n   */\n  static async validateField(\n    fieldName: string,\n    value: any,\n    options: {\n      required?: boolean;\n      min?: number;\n      max?: number;\n      minLength?: number;\n      maxLength?: number;\n      pattern?: string | RegExp;\n      type?: string;\n      customValidator?: (value: any) => boolean | Promise<boolean>;\n      customMessage?: string;\n    },\n    objectType: string = 'Object',\n  ): Promise<ValidationError | null> {\n    // Required check\n    if (\n      options.required &&\n      (value === null || value === undefined || value === '')\n    ) {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n\n    // Skip further validation if value is null/undefined and not required\n    if (value === null || value === undefined) {\n      return null;\n    }\n\n    // Numeric range validation\n    if (typeof value === 'number') {\n      if (options.min !== undefined && value < options.min) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n      if (options.max !== undefined && value > options.max) {\n        return ValidationError.rangeError(\n          fieldName,\n          value,\n          options.min,\n          options.max,\n        );\n      }\n    }\n\n    // String length validation\n    if (typeof value === 'string') {\n      if (options.minLength !== undefined && value.length < options.minLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with minimum length ${options.minLength}`,\n        );\n      }\n      if (options.maxLength !== undefined && value.length > options.maxLength) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `string with maximum length ${options.maxLength}`,\n        );\n      }\n\n      // Pattern validation\n      if (options.pattern) {\n        const regex =\n          typeof options.pattern === 'string'\n            ? new RegExp(options.pattern)\n            : options.pattern;\n        if (!regex.test(value)) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            `string matching pattern ${options.pattern}`,\n          );\n        }\n      }\n    }\n\n    // Custom validator\n    if (options.customValidator) {\n      try {\n        const isValid = await options.customValidator(value);\n        if (!isValid) {\n          return ValidationError.invalidValue(\n            fieldName,\n            value,\n            options.customMessage || 'custom validation failed',\n          );\n        }\n      } catch (error) {\n        return ValidationError.invalidValue(\n          fieldName,\n          value,\n          `custom validation error: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    return null;\n  }\n\n  /**\n   * Validate required field\n   */\n  static validateRequired(\n    fieldName: string,\n    value: any,\n    objectType: string = 'Object',\n  ): ValidationError | null {\n    if (value === null || value === undefined || value === '') {\n      return ValidationError.requiredField(fieldName, objectType);\n    }\n    return null;\n  }\n\n  /**\n   * Validate numeric range\n   */\n  static validateRange(\n    fieldName: string,\n    value: number,\n    min?: number,\n    max?: number,\n  ): ValidationError | null {\n    if (min !== undefined && value < min) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    if (max !== undefined && value > max) {\n      return ValidationError.rangeError(fieldName, value, min, max);\n    }\n    return null;\n  }\n\n  /**\n   * Validate string length\n   */\n  static validateLength(\n    fieldName: string,\n    value: string,\n    minLength?: number,\n    maxLength?: number,\n  ): ValidationError | null {\n    if (minLength !== undefined && value.length < minLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with minimum length ${minLength}`,\n      );\n    }\n    if (maxLength !== undefined && value.length > maxLength) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string with maximum length ${maxLength}`,\n      );\n    }\n    return null;\n  }\n\n  /**\n   * Validate string pattern\n   */\n  static validatePattern(\n    fieldName: string,\n    value: string,\n    pattern: string | RegExp,\n  ): ValidationError | null {\n    const regex = typeof pattern === 'string' ? new RegExp(pattern) : pattern;\n    if (!regex.test(value)) {\n      return ValidationError.invalidValue(\n        fieldName,\n        value,\n        `string matching pattern ${pattern}`,\n      );\n    }\n    return null;\n  }\n}\n"],"names":[],"mappings":";AAmCA,MAAM,SAAS,aAAa,EAAE,OAAO,QAAQ;AAEtC,MAAe,kBAAkB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAQA;AAAA,EACA;AAAA,EAEhB,YACE,SACA,MACA,UACA,SACA,OACA;AACA,UAAM,OAAO;AACb,SAAK,OAAO,KAAK,YAAY;AAC7B,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,UAAU;AACf,SAAK,QAAQ;AAGb,QAAI,MAAM,mBAAmB;AAC3B,YAAM,kBAAkB,MAAM,KAAK,WAAW;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS;AACP,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,UAAU,KAAK;AAAA,MACf,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK,QACR;AAAA,QACE,MAAM,KAAK,MAAM;AAAA,QACjB,SAAS,KAAK,MAAM;AAAA,QACpB,OAAO,KAAK,MAAM;AAAA,MAAA,IAEpB;AAAA,IAAA;AAAA,EAER;AACF;AASA,SAAS,qBACP,OACA,UACA,SACA,QAAQ,GACF;AACN,MAAI,CAAC,SAAS,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAAI;AAC9C;AAAA,EACF;AAEA,UAAQ,IAAI,KAAK;AAEjB,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAA;AACtB,QAAI,SAAS;AACX,eAAS,KAAK,OAAO;AAAA,IACvB;AACA;AAAA,EACF;AAEA,MAAI,EAAE,iBAAiB,QAAQ;AAC7B;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,SAAS,KAAA;AAC/B,MAAI,SAAS;AACX,aAAS,KAAK,OAAO;AAAA,EACvB;AAEA,QAAM,mBAAmB;AACzB;AAAA,IACE,iBAAiB,SAAS;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EAAA;AAEV,uBAAqB,iBAAiB,OAAO,UAAU,SAAS,QAAQ,CAAC;AAC3E;AAEA,SAAS,uBAAuB,OAG9B;AACA,MAAI,CAAC,OAAO;AACV,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,YAAsB,CAAA;AAC5B,uBAAqB,OAAO,WAAW,oBAAI,IAAA,CAAc;AAEzD,QAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,UAAU,OAAO,OAAO,CAAC,CAAC;AAC7D,MAAI,eAAe,WAAW,GAAG;AAC/B,WAAO,CAAA;AAAA,EACT;AAEA,SAAO;AAAA,IACL,SAAS,eAAe,eAAe,SAAS,CAAC;AAAA,IACjD,UAAU;AAAA,EAAA;AAEd;AAiBO,MAAM,sBAAsB,UAAU;AAAA,EAC3C,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,YAAY,SAAS,KAAK;AAAA,EACjD;AAAA,EAEA,OAAO,iBAAiB,OAAe,OAA8B;AACnE,WAAO,IAAI;AAAA,MACT,kCAAkC,KAAK;AAAA,MACvC;AAAA,MACA,EAAE,MAAA;AAAA,MACF;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,YAAY,OAAe,OAA8B;AAE9D,UAAM,YAAY,uBAAuB,KAAK;AAC9C,UAAM,WAAW,UAAU,UAAU;AAAA,SAAY,UAAU,OAAO,KAAK;AACvE,WAAO,IAAI;AAAA,MACT,0BAA0B,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,MAAM,SAAS,MAAM,QAAQ,EAAE,GAAG,QAAQ;AAAA,MAC9F;AAAA,MACA;AAAA,QACE;AAAA,QACA,cAAc,UAAU;AAAA,QACxB,eAAe,UAAU;AAAA,MAAA;AAAA,MAE3B;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,YACL,WACA,WACA,OACe;AACf,WAAO,IAAI;AAAA,MACT,sCAAsC,SAAS,MAAM,SAAS;AAAA,MAC9D;AAAA,MACA,EAAE,WAAW,UAAA;AAAA,MACb;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,oBACL,YACA,OACA,OACe;AACf,WAAO,IAAI;AAAA,MACT,kCAAkC,UAAU;AAAA,MAC5C;AAAA,MACA,EAAE,YAAY,MAAA;AAAA,MACd;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,cACL,WACA,WACA,OACe;AACf,WAAO,IAAI;AAAA,MACT,4BAA4B,SAAS,SAAS,SAAS;AAAA,MAGvD;AAAA,MACA,EAAE,WAAW,UAAA;AAAA,MACb;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,qBACL,WACA,OACe;AACf,WAAO,IAAI;AAAA,MACT,oDAAoD,SAAS,GAAG,QAAQ,aAAa,KAAK,MAAM,EAAE;AAAA,MAGlG;AAAA,MACA,EAAE,WAAW,MAAA;AAAA,IAAM;AAAA,EAEvB;AAAA,EAEA,OAAO,yBAAyB,SAUd;AAChB,UAAM,eAAe,OAAO,QAAQ,QAAQ,gBAAgB,EACzD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,OAAO,KAAK,CAAC,GAAG,EACjD,KAAK,IAAI;AAEZ,WAAO,IAAI;AAAA,MACT,0CAA0C,QAAQ,SAAS,KAAK,QAAQ,SAAS,WACvE,QAAQ,EAAE,oCAAoC,QAAQ,cAAc,SAAS,QAAQ,iBAAiB,eAClG,QAAQ,WAAW,kDAAkD,gBAAgB,4BAA4B;AAAA,MAE/H;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,cAAc,WAAmB,WAAkC;AACxE,WAAO,IAAI;AAAA,MACT,UAAU,SAAS,+BAA+B,SAAS;AAAA,MAE3D;AAAA,MACA,EAAE,WAAW,UAAA;AAAA,IAAU;AAAA,EAE3B;AACF;AAcO,MAAM,gBAAgB,UAAU;AAAA,EACrC,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,MAAM,SAAS,KAAK;AAAA,EAC3C;AAAA,EAEA,OAAO,cACL,UACA,WACA,OACS;AACT,WAAO,IAAI;AAAA,MACT,gBAAgB,QAAQ,mBAAmB,SAAS;AAAA,MACpD;AAAA,MACA,EAAE,UAAU,UAAA;AAAA,MACZ;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,kBAAkB,UAAkB,YAA8B;AACvE,WAAO,IAAI;AAAA,MACT,gBAAgB,QAAQ;AAAA,MACxB;AAAA,MACA,EAAE,UAAU,WAAA;AAAA,IAAW;AAAA,EAE3B;AAAA,EAEA,OAAO,gBAAgB,UAAkB,UAAwB;AAC/D,WAAO,IAAI;AAAA,MACT,gBAAgB,QAAQ;AAAA,MACxB;AAAA,MACA,EAAE,UAAU,SAAA;AAAA,IAAS;AAAA,EAEzB;AAAA,EAEA,OAAO,qBAAqB,UAA2B;AACrD,WAAO,IAAI;AAAA,MACT,gBAAgB,QAAQ;AAAA,MACxB;AAAA,MACA,EAAE,SAAA;AAAA,IAAS;AAAA,EAEf;AACF;AAYO,MAAM,wBAAwB,UAAU;AAAA,EAC7C,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,cAAc,SAAS,KAAK;AAAA,EACnD;AAAA,EAEA,OAAO,aAAa,MAA+B;AACjD,WAAO,IAAI,gBAAgB,mBAAmB,IAAI,IAAI,qBAAqB;AAAA,MACzE;AAAA,IAAA,CACD;AAAA,EACH;AAAA,EAEA,OAAO,iBAAiB,MAAc,WAAoC;AACxE,WAAO,IAAI;AAAA,MACT,yBAAyB,SAAS,QAAQ,IAAI;AAAA,MAC9C;AAAA,MACA,EAAE,MAAM,UAAA;AAAA,IAAU;AAAA,EAEtB;AAAA,EAEA,OAAO,kBACL,MACA,eACiB;AACjB,WAAO,IAAI;AAAA,MACT,6CAA6C,IAAI;AAAA,MACjD;AAAA,MACA,EAAE,MAAM,cAAA;AAAA,IAAc;AAAA,EAE1B;AACF;AAiBO,MAAM,wBAAwB,UAAU;AAAA,EAC7C,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,cAAc,SAAS,KAAK;AAAA,EACnD;AAAA,EAEA,OAAO,cAAc,WAAmB,YAAqC;AAC3E,WAAO,IAAI;AAAA,MACT,mBAAmB,SAAS,oBAAoB,UAAU;AAAA,MAC1D;AAAA,MACA,EAAE,WAAW,WAAA;AAAA,IAAW;AAAA,EAE5B;AAAA,EAEA,OAAO,aACL,WACA,OACA,cACiB;AACjB,WAAO,IAAI;AAAA,MACT,4BAA4B,SAAS,eAAe,YAAY,SAAS,OAAO,KAAK;AAAA,MACrF;AAAA,MACA,EAAE,WAAW,OAAO,aAAA;AAAA,IAAa;AAAA,EAErC;AAAA,EAEA,OAAO,iBAAiB,WAAmB,OAA6B;AACtE,WAAO,IAAI;AAAA,MACT,0CAA0C,SAAS,iBAAiB,KAAK;AAAA,MACzE;AAAA,MACA,EAAE,WAAW,MAAA;AAAA,IAAM;AAAA,EAEvB;AAAA,EAEA,OAAO,WACL,WACA,OACA,KACA,KACiB;AACjB,UAAM,QACJ,QAAQ,UAAa,QAAQ,SACzB,WAAW,GAAG,QAAQ,GAAG,KACzB,QAAQ,SACN,MAAM,GAAG,KACT,MAAM,GAAG;AAEjB,WAAO,IAAI;AAAA,MACT,oBAAoB,SAAS,aAAa,KAAK,UAAU,KAAK;AAAA,MAC9D;AAAA,MACA,EAAE,WAAW,OAAO,KAAK,IAAA;AAAA,IAAI;AAAA,EAEjC;AACF;AAaO,MAAM,qBAAqB,UAAU;AAAA,EAC1C,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,WAAW,SAAS,KAAK;AAAA,EAChD;AAAA,EAEA,OAAO,cACL,KACA,QACA,cACc;AACd,UAAM,QAAQ,wBAAwB,QAAQ,eAAe;AAC7D,UAAM,OAAO,OAAO,iBAAiB,WAAW,eAAe;AAC/D,WAAO,IAAI;AAAA,MACT,2BAA2B,GAAG,GAAG,SAAS,aAAa,MAAM,MAAM,EAAE,GAAG,OAAO,MAAM,KAAK,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE;AAAA,MAClH;AAAA,MACA,EAAE,KAAK,QAAQ,cAAc,KAAA;AAAA,MAC7B;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,QAAQ,KAAa,WAAiC;AAC3D,WAAO,IAAI;AAAA,MACT,mCAAmC,SAAS,OAAO,GAAG;AAAA,MACtD;AAAA,MACA,EAAE,KAAK,UAAA;AAAA,IAAU;AAAA,EAErB;AAAA,EAEA,OAAO,mBAAmB,SAAiB,QAA+B;AACxE,WAAO,IAAI;AAAA,MACT,SACI,iCAAiC,OAAO,MAAM,MAAM,KACpD,iCAAiC,OAAO;AAAA,MAC5C;AAAA,MACA,EAAE,SAAS,OAAA;AAAA,IAAO;AAAA,EAEtB;AACF;AAmBO,MAAM,2BAA2B,UAAU;AAAA,EAChD,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,iBAAiB,SAAS,KAAK;AAAA,EACtD;AAAA,EAEA,OAAO,qBACL,WACA,SACoB;AACpB,WAAO,IAAI;AAAA,MACT,mCAAmC,SAAS,GAAG,UAAU,OAAO,OAAO,KAAK,EAAE;AAAA,MAC9E;AAAA,MACA,EAAE,WAAW,QAAA;AAAA,IAAQ;AAAA,EAEzB;AAAA,EAEA,OAAO,qBACL,WACA,OACA,UACoB;AACpB,WAAO,IAAI;AAAA,MACT,6BAA6B,SAAS,cAAc,QAAQ,SAAS,OAAO,KAAK;AAAA,MACjF;AAAA,MACA,EAAE,WAAW,OAAO,SAAA;AAAA,IAAS;AAAA,EAEjC;AAAA,EAEA,OAAO,qBACL,WACA,OACoB;AACpB,WAAO,IAAI;AAAA,MACT,mCAAmC,SAAS;AAAA,MAC5C;AAAA,MACA,EAAE,UAAA;AAAA,MACF;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,oBACL,WACA,kBACoB;AACpB,WAAO,IAAI;AAAA,MACT,4CAA4C,SAAS,yBAC7B,iBAAiB,KAAK,KAAK,CAAC,MAAM,SAAS;AAAA,MAEnE;AAAA,MACA,EAAE,WAAW,iBAAA;AAAA,IAAiB;AAAA,EAElC;AAAA,EAEA,OAAO,qBACL,WACA,eACA,aACA,gBACoB;AACpB,WAAO,IAAI;AAAA,MACT,0CAA0C,SAAS,MAAM,aAAa,oBACnD,WAAW,UAAU,cAAc,4FAEnC,SAAS,WAAW,cAAc;AAAA,MACrD;AAAA,MACA,EAAE,WAAW,eAAe,aAAa,eAAA;AAAA,IAAe;AAAA,EAE5D;AAAA,EAEA,OAAO,sBACL,YACA,WACoB;AACpB,WAAO,IAAI;AAAA,MACT,mBAAmB,SAAS,wCAAwC,UAAU,8GAElE,SAAS,0EAA0E,UAAU;AAAA,MACzG;AAAA,MACA,EAAE,YAAY,UAAA;AAAA,IAAU;AAAA,EAE5B;AACF;AAgBO,MAAM,qBAAqB,UAAU;AAAA,EAC1C,YACE,SACA,MACA,SACA,OACA;AACA,UAAM,SAAS,MAAM,WAAW,SAAS,KAAK;AAAA,EAChD;AAAA,EAEA,OAAO,gBACL,WACA,SACA,OACc;AACd,WAAO,IAAI;AAAA,MACT,qBAAqB,SAAS,GAAG,UAAU,OAAO,OAAO,KAAK,EAAE;AAAA,MAChE;AAAA,MACA,EAAE,WAAW,QAAA;AAAA,MACb;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,OAAO,aACL,SACA,SACc;AACd,WAAO,IAAI,aAAa,SAAS,yBAAyB,OAAO;AAAA,EACnE;AAAA,EAEA,OAAO,kBAAkB,UAAkB,OAA6B;AACtE,WAAO,IAAI;AAAA,MACT,uBAAuB,QAAQ,sBAAsB,KAAK;AAAA,MAC1D;AAAA,MACA,EAAE,UAAU,MAAA;AAAA,IAAM;AAAA,EAEtB;AACF;AA0CO,MAAM,6BAA6B,UAAU;AAAA;AAAA,EAElC;AAAA;AAAA,EAEA;AAAA,EAEhB,YACE,SACA,SAKA,OACA;AACA,UAAM,SAAS,8BAA8B,cAAc,SAAS,KAAK;AACzE,SAAK,WAAW,SAAS;AACzB,SAAK,oBAAoB,SAAS;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,qBAAqB,SAMH;AACvB,UAAM,SAAS,QAAQ,cACnB,GAAG,QAAQ,WAAW,aAAa,QAAQ,cAAc,OACzD,WAAW,QAAQ,cAAc;AACrC,WAAO,IAAI;AAAA,MACT,+CAA+C,QAAQ,WAAW,IAAI,QAAQ,SAAS,oBACnE,QAAQ,cAAc,oBAAoB,MAAM;AAAA,MAEpE;AAAA,QACE,UAAU,QAAQ;AAAA,QAClB,mBAAmB,QAAQ;AAAA,QAC3B,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,MAAA;AAAA,IACvB;AAAA,EAEJ;AACF;AAKO,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA,EAItB,aAAa,UACX,WACA,aAAa,GACb,QAAQ,KACR,oBAAoB,GACR;AACZ,QAAI,YAAmB,IAAI,MAAM,wCAAwC;AAEzE,aAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,UAAI;AACF,eAAO,MAAM,UAAA;AAAA,MACf,SAAS,OAAO;AACd,oBAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAEpE,YAAI,YAAY,YAAY;AAC1B,gBAAM;AAAA,QACR;AAKA,YACE,iBAAiB,mBACjB,iBAAiB,sBACjB,iBAAiB,sBACjB;AACA,gBAAM;AAAA,QACR;AAIA,YAAI;AACF,gBAAM,IAAI,QAAc,CAAC,YAAY;AACnC,uBAAW,MAAM,QAAA,GAAW,QAAQ,qBAAqB,OAAO;AAAA,UAClE,CAAC;AAAA,QACH,SAAS,YAAY;AAEnB,iBAAO,MAAM,4BAA4B,EAAE,OAAO,YAAY;AAAA,QAChE;AAAA,MACF;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,YAAY,OAAuB;AACxC,QAAI,iBAAiB,WAAW;AAC9B,aAAO,MAAM,aAAa,aAAa,MAAM,aAAa;AAAA,IAC5D;AAGA,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAGF,WAAO,kBAAkB,KAAK,CAAC,YAAY,QAAQ,KAAK,MAAM,OAAO,CAAC;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,cAAc,OAAmC;AACtD,UAAM,YAAiC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,IAAA;AAGf,QAAI,iBAAiB,WAAW;AAC9B,gBAAU,OAAO,MAAM;AACvB,gBAAU,WAAW,MAAM;AAG3B,UAAI,MAAM,SAAS;AACjB,kBAAU,UAAU,EAAE,GAAG,MAAM,QAAA;AAG/B,cAAM,kBAAkB;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QAAA;AAEF,mBAAW,SAAS,iBAAiB;AACnC,cAAI,UAAU,QAAQ,KAAK,GAAG;AAC5B,sBAAU,QAAQ,KAAK,IAAI;AAAA,UAC7B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;AAuBO,MAAM,iBAAiB;AAAA,EACpB,SAA4B,CAAA;AAAA,EAC5B;AAAA,EAER,YAAY,YAAoB;AAC9B,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,OAA8B;AACrC,SAAK,OAAO,KAAK,KAAK;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,YAAqB;AACnB,WAAO,KAAK,OAAO,SAAS;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,YAA+B;AAC7B,WAAO,CAAC,GAAG,KAAK,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAwB;AACtB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,WAAmB;AACjB,QAAI,KAAK,OAAO,WAAW,GAAG;AAC5B,aAAO,yBAAyB,KAAK,UAAU;AAAA,IACjD;AAEA,UAAM,YAAY,KAAK,OACpB,IAAI,CAAC,KAAK,QAAQ,KAAK,MAAM,CAAC,KAAK,IAAI,OAAO,EAAE,EAChD,KAAK,IAAI;AAEZ,WAAO,yBAAyB,KAAK,UAAU,SAAS,KAAK,OAAO,MAAM;AAAA,EAAe,SAAS;AAAA,EACpG;AAAA;AAAA;AAAA;AAAA,EAKA,SAAiB;AACf,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK,OAAO;AAAA,MACxB,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,QAAQ;AAAA,IAAA;AAAA,EAEjD;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAsB;AACpB,QAAI,KAAK,OAAO,SAAS,GAAG;AAC1B,YAAM,KAAK,OAAO,CAAC;AAAA,IACrB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,SAAS,CAAA;AAAA,EAChB;AACF;AAKO,MAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS3B,aAAa,cACX,WACA,OACA,SAWA,aAAqB,UACY;AAEjC,QACE,QAAQ,aACP,UAAU,QAAQ,UAAU,UAAa,UAAU,KACpD;AACA,aAAO,gBAAgB,cAAc,WAAW,UAAU;AAAA,IAC5D;AAGA,QAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,aAAO;AAAA,IACT;AAGA,QAAI,OAAO,UAAU,UAAU;AAC7B,UAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,UACR,QAAQ;AAAA,QAAA;AAAA,MAEZ;AACA,UAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,UACR,QAAQ;AAAA,QAAA;AAAA,MAEZ;AAAA,IACF;AAGA,QAAI,OAAO,UAAU,UAAU;AAC7B,UAAI,QAAQ,cAAc,UAAa,MAAM,SAAS,QAAQ,WAAW;AACvE,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA;AAAA,UACA,8BAA8B,QAAQ,SAAS;AAAA,QAAA;AAAA,MAEnD;AACA,UAAI,QAAQ,cAAc,UAAa,MAAM,SAAS,QAAQ,WAAW;AACvE,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA;AAAA,UACA,8BAA8B,QAAQ,SAAS;AAAA,QAAA;AAAA,MAEnD;AAGA,UAAI,QAAQ,SAAS;AACnB,cAAM,QACJ,OAAO,QAAQ,YAAY,WACvB,IAAI,OAAO,QAAQ,OAAO,IAC1B,QAAQ;AACd,YAAI,CAAC,MAAM,KAAK,KAAK,GAAG;AACtB,iBAAO,gBAAgB;AAAA,YACrB;AAAA,YACA;AAAA,YACA,2BAA2B,QAAQ,OAAO;AAAA,UAAA;AAAA,QAE9C;AAAA,MACF;AAAA,IACF;AAGA,QAAI,QAAQ,iBAAiB;AAC3B,UAAI;AACF,cAAM,UAAU,MAAM,QAAQ,gBAAgB,KAAK;AACnD,YAAI,CAAC,SAAS;AACZ,iBAAO,gBAAgB;AAAA,YACrB;AAAA,YACA;AAAA,YACA,QAAQ,iBAAiB;AAAA,UAAA;AAAA,QAE7B;AAAA,MACF,SAAS,OAAO;AACd,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA;AAAA,UACA,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QAAA;AAAA,MAEtF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,iBACL,WACA,OACA,aAAqB,UACG;AACxB,QAAI,UAAU,QAAQ,UAAU,UAAa,UAAU,IAAI;AACzD,aAAO,gBAAgB,cAAc,WAAW,UAAU;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,cACL,WACA,OACA,KACA,KACwB;AACxB,QAAI,QAAQ,UAAa,QAAQ,KAAK;AACpC,aAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;AAAA,IAC9D;AACA,QAAI,QAAQ,UAAa,QAAQ,KAAK;AACpC,aAAO,gBAAgB,WAAW,WAAW,OAAO,KAAK,GAAG;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,eACL,WACA,OACA,WACA,WACwB;AACxB,QAAI,cAAc,UAAa,MAAM,SAAS,WAAW;AACvD,aAAO,gBAAgB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,8BAA8B,SAAS;AAAA,MAAA;AAAA,IAE3C;AACA,QAAI,cAAc,UAAa,MAAM,SAAS,WAAW;AACvD,aAAO,gBAAgB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,8BAA8B,SAAS;AAAA,MAAA;AAAA,IAE3C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,gBACL,WACA,OACA,SACwB;AACxB,UAAM,QAAQ,OAAO,YAAY,WAAW,IAAI,OAAO,OAAO,IAAI;AAClE,QAAI,CAAC,MAAM,KAAK,KAAK,GAAG;AACtB,aAAO,gBAAgB;AAAA,QACrB;AAAA,QACA;AAAA,QACA,2BAA2B,OAAO;AAAA,MAAA;AAAA,IAEtC;AACA,WAAO;AAAA,EACT;AACF;"}

package/dist/generators/cli.d.ts

@@ -0,0 +1,162 @@
+/**
+ * CLI command generator for smrt objects
+ *
+ * Exposes registered `@smrt()` objects as a runnable admin CLI: each object gets
+ * `list`/`get`/`create`/`update`/`delete` commands plus its public custom
+ * methods, dispatched as `objectname:action`.
+ *
+ * Security parity with the REST/MCP generators (#1540, #1547, #1554, #1556):
+ * - **Mass-assignment guard** — create/update bodies are filtered through the
+ *   `@smrt({ api: { writable: [...] } })` allowlist, dropping server-managed and
+ *   `@field({ readonly })` fields ({@link CLIGenerator.applyWritablePolicy}).
+ * - **Exhaustive include** — an `include` list is the COMPLETE allowlist for the
+ *   surface; custom methods are gated on `isPublic`.
+ * - **Sensitive redaction** — command *output* is serialized through
+ *   {@link CLIGenerator.toPublicData} so `@field({ sensitive })` values never
+ *   print (input bodies are guarded by the writable allowlist above).
+ * - **Fail-closed tenant context** — tenant-scoped reads/writes run inside the
+ *   tenancy gate; without `--tenant <id>` / `--all-tenants` (and with tenancy
+ *   enabled) the command throws rather than ranging across all tenants.
+ */
+/**
+ * Configuration for a generated CLI.
+ */
+export interface CLIConfig {
+    /** CLI program name (used in help output). */
+    name?: string;
+    /** CLI version. */
+    version?: string;
+    /** CLI description. */
+    description?: string;
+}
+/**
+ * Per-invocation context for a generated CLI.
+ */
+export interface CLIContext {
+    /** Database handle passed to collections. */
+    db?: any;
+    /** AI provider passed to collections. */
+    ai?: any;
+    /** Authenticated operator, when the host establishes one. */
+    user?: {
+        id: string;
+        roles?: string[];
+    };
+    /**
+     * Default tenant for tenant-scoped commands when no `--tenant` flag is given.
+     * Hosts that authenticate an operator may set this from the principal.
+     */
+    tenantId?: string;
+    /**
+     * Default cross-tenant opt-in when no `--all-tenants` flag is given. Hosts
+     * may set this for trusted operator/admin shells.
+     */
+    allowCrossTenant?: boolean;
+}
+/**
+ * Generate and run an admin CLI for the registered `@smrt()` objects.
+ */
+export declare class CLIGenerator {
+    private config;
+    private context;
+    constructor(config?: CLIConfig, context?: CLIContext);
+    /** CLI program name. */
+    get name(): string | undefined;
+    /** CLI version. */
+    get version(): string | undefined;
+    /**
+     * Return the argv handler invoked by the generated `setupCLI()` wrapper.
+     *
+     * @returns An async function accepting the post-`node script` argv slice.
+     */
+    generateHandler(): (args: string[]) => Promise<void>;
+    /**
+     * Parse and execute a single CLI invocation.
+     *
+     * @param args - argv slice (command + flags).
+     */
+    run(args: string[]): Promise<void>;
+    /**
+     * Parse argv into a command + flags. Supports `name:action` and
+     * `name action` command forms, `--key value`, `--key=value`, and bare
+     * `--flag` booleans.
+     */
+    private parseArgs;
+    /**
+     * Resolve a registered class by simple name (case-insensitive), mirroring the
+     * MCP generator's lookup.
+     */
+    private resolveClass;
+    /**
+     * Throw if `action` is not exposed for `objectName` under its `@smrt({ cli })`
+     * config. `cli: false` disables the object entirely; an `include` list is the
+     * complete allowlist; custom methods must be `isPublic`.
+     */
+    private assertCommandExposed;
+    /**
+     * Get the collection for an object via the registry factory. Uses
+     * `ObjectRegistry.getCollection`, which caches, initializes, and — for plain
+     * `@smrt()` models without a hand-written collection class — auto-creates the
+     * default collection. (A bare `collectionConstructor` check would wrongly
+     * throw for those models even though CRUD is advertised.)
+     */
+    private getCollection;
+    /**
+     * Execute a parsed command against a collection.
+     */
+    private executeAction;
+    /**
+     * Execute a custom method on an instance (when an id is given) or on the
+     * collection (singleton actions). Mirrors the MCP custom-action path.
+     */
+    private executeCustomAction;
+    /**
+     * Resolve the create/update payload: `--from-file <path>` (JSON) takes
+     * precedence; otherwise non-reserved `--field value` flags form the body.
+     * Reading from a file also keeps secrets off the process argv (#1556).
+     */
+    private readPayload;
+    /** Collect non-reserved flags as custom-action options. */
+    private customOptions;
+    /**
+     * Mass-assignment guard (#1540/#1556): strip framework/server-managed and
+     * `@field({ readonly })` fields, and — when an `@smrt({ api: { writable } })`
+     * allowlist is set — intersect with it. Identical policy to the REST/MCP
+     * generators so a CLI create/update cannot set fields the API forbids.
+     */
+    private applyWritablePolicy;
+    /**
+     * Serialize command output, excluding `@field({ sensitive })` fields (#1540).
+     * Recurses arrays/plain objects so a SmrtObject nested in a custom-action
+     * result is stripped too; a cycle guard prevents infinite loops.
+     */
+    private toPublicData;
+    /** List the runnable commands grouped by object, for help output. */
+    listCommands(): Promise<string[]>;
+    private helpText;
+    private toNumber;
+    private flagString;
+    /** Coerce a flag value to a JSON scalar/object where it parses cleanly. */
+    private coerceValue;
+}
+/**
+ * Convenience runner used by the generated `setupCLI()` wrapper.
+ *
+ * @param config - CLI configuration.
+ * @param context - Per-invocation context.
+ * @returns A `{ run, generator }` pair; `run(argv)` strips the leading
+ *   `node script` entries before dispatching.
+ */
+export declare function setupCLI(config?: CLIConfig, context?: CLIContext): {
+    run: (argv: string[]) => Promise<void>;
+    generator: CLIGenerator;
+};
+/**
+ * Get a bare argv handler for a generated CLI.
+ *
+ * @param config - CLI configuration.
+ * @param context - Per-invocation context.
+ * @returns An async argv-slice handler.
+ */
+export declare function getCLIHandler(config?: CLIConfig, context?: CLIContext): (args: string[]) => Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/generators/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/generators/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,EAAE,CAAC,EAAE,GAAG,CAAC;IACT,yCAAyC;IACzC,EAAE,CAAC,EAAE,GAAG,CAAC;IACT,6DAA6D;IAC7D,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAoCD;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAa;gBAEhB,MAAM,GAAE,SAAc,EAAE,OAAO,GAAE,UAAe;IAU5D,wBAAwB;IACxB,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED,mBAAmB;IACnB,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;;;OAIG;IACH,eAAe,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC;IAMpD;;;;OAIG;IACG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4CxC;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAkDjB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAWpB;;;;OAIG;YACW,oBAAoB;IA+ClC;;;;;;OAMG;YACW,aAAa;IAS3B;;OAEG;YACW,aAAa;IA0E3B;;;OAGG;YACW,mBAAmB;IA0BjC;;;;OAIG;YACW,WAAW;IAsBzB,2DAA2D;IAC3D,OAAO,CAAC,aAAa;IAWrB;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IA+C3B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAmBpB,qEAAqE;IAC/D,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAmCzB,QAAQ;IAoBtB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,UAAU;IAIlB,2EAA2E;IAC3E,OAAO,CAAC,WAAW;CAiBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,MAAM,GAAE,SAAc,EAAE,OAAO,GAAE,UAAe;gBAGnD,MAAM,EAAE;;EAM7B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,GAAE,SAAc,EACtB,OAAO,GAAE,UAAe,UArhBE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAyhBrD"}