@kywi-software/core 0.1.0 → 0.2.0

package/dist/admin/registry.js

@@ -0,0 +1,456 @@
+/** Runtime-checkable list of every area, in declaration order. */
+export const ADMIN_AREAS = [
+    'dashboard',
+    'contentTree',
+    'content',
+    'approvals',
+    'changesets',
+    'search',
+    'media',
+    'users',
+    'forms',
+    'taxonomy',
+    'trash',
+    'comments',
+    'translations',
+    'feeds',
+    'audiences',
+    'experiments',
+    'layouts',
+    'extensions',
+    'plugins',
+    'webServices',
+    'settings',
+    'contentTypes',
+];
+// ─── Nav groups ─────────────────────────────────────────────────────────────────
+export const ADMIN_NAV_GROUPS = [
+    { id: 'media', label: 'Media', href: '/admin/media', icon: 'image', order: 6 },
+    { id: 'users', label: 'Users', href: '/admin/users', icon: 'users', order: 7 },
+    { id: 'forms', label: 'Forms', href: '/admin/forms', icon: 'clipboard', order: 8 },
+    { id: 'audiences', label: 'Audiences', href: '/admin/audiences', icon: 'target', order: 15 },
+    { id: 'extensions', label: 'Extensions', href: '/admin/extensions', icon: 'blocks', order: 18 },
+    { id: 'webServices', label: 'Web Services', href: '/admin/web-services', icon: 'globe', order: 20 },
+    { id: 'settings', label: 'Settings', href: '/admin/settings', icon: 'settings', order: 21 },
+];
+// ─── Surfaces ───────────────────────────────────────────────────────────────────
+// Sourced by cross-referencing packages/core/src/admin/nav.ts (nav-visible set)
+// against apps/reference/app/admin/**/page.tsx (full route set incl. detail routes).
+// `login` and the `/admin` index redirect are intentionally NOT surfaces (login is
+// handled outside chrome/registry; the index resolves to `dashboard.index`).
+export const ADMIN_SURFACES = [
+    // dashboard
+    {
+        id: 'dashboard.index',
+        area: 'dashboard',
+        pattern: 'dashboard',
+        label: 'Dashboard',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'layout-dashboard', order: 1 },
+        load: () => import('./surfaces/dashboard/dashboard-index.js'),
+    },
+    // contentTree
+    {
+        id: 'contentTree.index',
+        area: 'contentTree',
+        pattern: 'content-tree',
+        label: 'Site Tree',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'git-branch', order: 2 },
+        load: () => import('./surfaces/contentTree/content-tree.js'),
+    },
+    // content (not nav-visible — there is no top-level Content nav item)
+    { id: 'content.index', area: 'content', pattern: 'content', label: 'Content', minRole: 'editor', load: () => import('./surfaces/content/content-index.js') },
+    { id: 'content.list', area: 'content', pattern: 'content/:type', label: 'Content List', minRole: 'editor', load: () => import('./surfaces/content/content-list.js') },
+    { id: 'content.new', area: 'content', pattern: 'content/:type/new', label: 'New Content', minRole: 'editor', load: () => import('./surfaces/content/content-new.js') },
+    { id: 'content.edit', area: 'content', pattern: 'content/:type/:id', label: 'Edit Content', minRole: 'editor', load: () => import('./surfaces/content/content-edit.js') },
+    // approvals
+    {
+        id: 'approvals.index',
+        area: 'approvals',
+        pattern: 'approvals',
+        label: 'Approvals',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'check-circle', order: 3 },
+        load: () => import('./surfaces/approvals/approvals-index.js'),
+    },
+    // changesets
+    {
+        id: 'changesets.index',
+        area: 'changesets',
+        pattern: 'changesets',
+        label: 'Changesets',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'layers', order: 4 },
+        load: () => import('./surfaces/changesets/changesets-index.js'),
+    },
+    {
+        id: 'changesets.detail',
+        area: 'changesets',
+        pattern: 'changesets/:id',
+        label: 'Changeset',
+        minRole: 'editor',
+        load: () => import('./surfaces/changesets/changesets-detail.js'),
+    },
+    // search
+    {
+        id: 'search.index',
+        area: 'search',
+        pattern: 'search',
+        label: 'Search',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'search', order: 5 },
+        load: () => import('./surfaces/search/search-index.js'),
+    },
+    // media (group)
+    {
+        id: 'media.library',
+        area: 'media',
+        pattern: 'media',
+        label: 'Library',
+        minRole: 'editor',
+        nav: { section: 'media', order: 1, parentId: 'media' },
+        load: () => import('./surfaces/media/library.js'),
+    },
+    {
+        id: 'media.upload',
+        area: 'media',
+        pattern: 'media/upload',
+        label: 'Upload',
+        minRole: 'editor',
+        nav: { section: 'media', order: 2, parentId: 'media' },
+        load: () => import('./surfaces/media/upload.js'),
+    },
+    // users (group) — every user-management endpoint is siteAdmin-gated
+    // (user-routes.ts: list/create/update/delete; group-routes.ts: all).
+    {
+        id: 'users.list',
+        area: 'users',
+        pattern: 'users',
+        label: 'All Users',
+        minRole: 'siteAdmin',
+        nav: { section: 'users', order: 1, parentId: 'users' },
+        load: () => import('./surfaces/users/users-list.js'),
+    },
+    {
+        id: 'users.groups',
+        area: 'users',
+        pattern: 'users/groups',
+        label: 'Groups',
+        minRole: 'siteAdmin',
+        nav: { section: 'users', order: 2, parentId: 'users' },
+        load: () => import('./surfaces/users/users-groups.js'),
+    },
+    {
+        id: 'users.permissions',
+        area: 'users',
+        pattern: 'users/permissions',
+        label: 'Permissions',
+        minRole: 'siteAdmin',
+        nav: { section: 'users', order: 3, parentId: 'users' },
+        load: () => import('./surfaces/users/users-permissions.js'),
+    },
+    { id: 'users.new', area: 'users', pattern: 'users/new', label: 'New User', minRole: 'siteAdmin', load: () => import('./surfaces/users/users-new.js') },
+    { id: 'users.detail', area: 'users', pattern: 'users/:id', label: 'User', minRole: 'siteAdmin', load: () => import('./surfaces/users/users-detail.js') },
+    // forms (group)
+    {
+        id: 'forms.list',
+        area: 'forms',
+        pattern: 'forms',
+        label: 'All Forms',
+        minRole: 'editor',
+        nav: { section: 'forms', order: 1, parentId: 'forms' },
+        load: () => import('./surfaces/forms/forms-list.js'),
+    },
+    {
+        id: 'forms.submissions',
+        area: 'forms',
+        pattern: 'forms/submissions',
+        label: 'Submissions',
+        minRole: 'editor',
+        nav: { section: 'forms', order: 2, parentId: 'forms' },
+        load: () => import('./surfaces/forms/forms-submissions.js'),
+    },
+    { id: 'forms.new', area: 'forms', pattern: 'forms/new', label: 'New Form', minRole: 'editor', load: () => import('./surfaces/forms/forms-new.js') },
+    { id: 'forms.edit', area: 'forms', pattern: 'forms/:id', label: 'Edit Form', minRole: 'editor', load: () => import('./surfaces/forms/forms-edit.js') },
+    // taxonomy (two top-level leaves)
+    {
+        id: 'taxonomy.categories',
+        area: 'taxonomy',
+        pattern: 'categories',
+        label: 'Categories',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'folder-tree', order: 9 },
+        load: () => import('./surfaces/taxonomy/categories.js'),
+    },
+    {
+        id: 'taxonomy.tags',
+        area: 'taxonomy',
+        pattern: 'tags',
+        label: 'Tags',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'tag', order: 10 },
+        load: () => import('./surfaces/taxonomy/tags.js'),
+    },
+    // trash
+    {
+        id: 'trash.index',
+        area: 'trash',
+        pattern: 'trash',
+        label: 'Trash',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'trash-2', order: 11 },
+        load: () => import('./surfaces/trash/trash-index.js'),
+    },
+    // comments
+    {
+        id: 'comments.index',
+        area: 'comments',
+        pattern: 'comments',
+        label: 'Comments',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'message-square', order: 12 },
+        load: () => import('./surfaces/comments/comments-index.js'),
+    },
+    // translations
+    {
+        id: 'translations.index',
+        area: 'translations',
+        pattern: 'translations',
+        label: 'Translations',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'languages', order: 13 },
+        load: () => import('./surfaces/translations/translations-index.js'),
+    },
+    // feeds
+    {
+        id: 'feeds.list',
+        area: 'feeds',
+        pattern: 'feeds',
+        label: 'Feeds',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'rss', order: 14 },
+        load: () => import('./surfaces/feeds/feeds-list.js'),
+    },
+    { id: 'feeds.new', area: 'feeds', pattern: 'feeds/new', label: 'New Feed', minRole: 'editor', load: () => import('./surfaces/feeds/feeds-new.js') },
+    { id: 'feeds.detail', area: 'feeds', pattern: 'feeds/:slug', label: 'Feed', minRole: 'editor', load: () => import('./surfaces/feeds/feeds-detail.js') },
+    // audiences (group)
+    {
+        id: 'audiences.list',
+        area: 'audiences',
+        pattern: 'audiences',
+        label: 'All Audiences',
+        minRole: 'editor',
+        nav: { section: 'audiences', order: 1, parentId: 'audiences' },
+        load: () => import('./surfaces/audiences/audiences-list.js'),
+    },
+    {
+        id: 'audiences.fields',
+        area: 'audiences',
+        pattern: 'audiences/fields',
+        label: 'Self-ID Fields',
+        minRole: 'editor',
+        nav: { section: 'audiences', order: 2, parentId: 'audiences' },
+        load: () => import('./surfaces/audiences/audiences-fields.js'),
+    },
+    {
+        id: 'audiences.selfIdWidget',
+        area: 'audiences',
+        pattern: 'audiences/self-id-widget',
+        label: 'Self-ID Widget',
+        minRole: 'editor',
+        nav: { section: 'audiences', order: 3, parentId: 'audiences' },
+        load: () => import('./surfaces/audiences/audiences-selfid-widget.js'),
+    },
+    {
+        id: 'audiences.previewTokens',
+        area: 'audiences',
+        pattern: 'audiences/preview-tokens',
+        label: 'Preview Tokens',
+        minRole: 'editor',
+        nav: { section: 'audiences', order: 4, parentId: 'audiences' },
+        load: () => import('./surfaces/audiences/audiences-preview-tokens.js'),
+    },
+    { id: 'audiences.new', area: 'audiences', pattern: 'audiences/new', label: 'New Audience', minRole: 'editor', load: () => import('./surfaces/audiences/audiences-new.js') },
+    { id: 'audiences.detail', area: 'audiences', pattern: 'audiences/:id', label: 'Audience', minRole: 'editor', load: () => import('./surfaces/audiences/audiences-detail.js') },
+    { id: 'audiences.edit', area: 'audiences', pattern: 'audiences/:id/edit', label: 'Edit Audience', minRole: 'editor', load: () => import('./surfaces/audiences/audiences-edit.js') },
+    { id: 'audiences.test', area: 'audiences', pattern: 'audiences/:id/test', label: 'Test Audience', minRole: 'editor', load: () => import('./surfaces/audiences/audiences-test.js') },
+    // experiments
+    {
+        id: 'experiments.list',
+        area: 'experiments',
+        pattern: 'experiments',
+        label: 'Experiments',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'flask-conical', order: 16 },
+        load: () => import('./surfaces/experiments/experiments-list.js'),
+    },
+    { id: 'experiments.new', area: 'experiments', pattern: 'experiments/new', label: 'New Experiment', minRole: 'editor', load: () => import('./surfaces/experiments/experiments-new.js') },
+    { id: 'experiments.detail', area: 'experiments', pattern: 'experiments/:id', label: 'Experiment', minRole: 'editor', load: () => import('./surfaces/experiments/experiments-detail.js') },
+    // layouts
+    {
+        id: 'layouts.list',
+        area: 'layouts',
+        pattern: 'layouts',
+        label: 'Layouts',
+        minRole: 'editor',
+        nav: { section: 'primary', icon: 'layout', order: 17 },
+        load: () => import('./surfaces/layouts/layouts-list.js'),
+    },
+    { id: 'layouts.new', area: 'layouts', pattern: 'layouts/new', label: 'New Layout', minRole: 'editor', load: () => import('./surfaces/layouts/layouts-new.js') },
+    { id: 'layouts.detail', area: 'layouts', pattern: 'layouts/:id', label: 'Layout', minRole: 'editor', load: () => import('./surfaces/layouts/layouts-detail.js') },
+    // extensions (group) — the extensions ADMIN surface manages subtypes/sets/
+    // attributes and import/export, all siteAdmin-gated (extension-routes.ts). The
+    // editor-gated `/extensions/for-content|/data` endpoints belong to the content
+    // editor (content.edit), not this admin surface.
+    {
+        id: 'extensions.list',
+        area: 'extensions',
+        pattern: 'extensions',
+        label: 'All Extensions',
+        minRole: 'siteAdmin',
+        nav: { section: 'extensions', order: 1, parentId: 'extensions' },
+        load: () => import('./surfaces/extensions/extensions-list.js'),
+    },
+    {
+        id: 'extensions.importExport',
+        area: 'extensions',
+        pattern: 'extensions/import-export',
+        label: 'Import / Export',
+        minRole: 'siteAdmin',
+        nav: { section: 'extensions', order: 2, parentId: 'extensions' },
+        load: () => import('./surfaces/extensions/extensions-import-export.js'),
+    },
+    // plugins
+    {
+        id: 'plugins.index',
+        area: 'plugins',
+        pattern: 'plugins',
+        label: 'Plugins',
+        minRole: 'siteAdmin',
+        nav: { section: 'primary', icon: 'puzzle', order: 19 },
+        load: () => import('./surfaces/plugins/plugins-index.js'),
+    },
+    // webServices (group)
+    {
+        // OAuth client management is siteAdmin-gated (oauth-routes.ts).
+        id: 'webServices.oauth',
+        area: 'webServices',
+        pattern: 'web-services/oauth',
+        label: 'OAuth Clients',
+        minRole: 'siteAdmin',
+        nav: { section: 'webServices', order: 1, parentId: 'webServices' },
+        load: () => import('./surfaces/webServices/oauth.js'),
+    },
+    {
+        // API keys are PER-USER and the routes (api-key-routes.ts) require only
+        // authentication — no siteAdmin gate — so an editor can manage their own
+        // keys without a 403. minRole is the editor floor to match the actual gate
+        // (siteAdmin would over-restrict). Consequence: an editor sees a Web Services
+        // group containing only "API Keys".
+        id: 'webServices.apiKeys',
+        area: 'webServices',
+        pattern: 'web-services/api-keys',
+        label: 'API Keys',
+        minRole: 'editor',
+        nav: { section: 'webServices', order: 2, parentId: 'webServices' },
+        load: () => import('./surfaces/webServices/api-keys.js'),
+    },
+    // settings (group)
+    {
+        id: 'settings.general',
+        area: 'settings',
+        pattern: 'settings',
+        label: 'General',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 1, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-general.js'),
+    },
+    {
+        id: 'settings.site',
+        area: 'settings',
+        pattern: 'settings/site',
+        label: 'Site Settings',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 2, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-site.js'),
+    },
+    {
+        id: 'settings.sites',
+        area: 'settings',
+        pattern: 'settings/sites',
+        label: 'Sites',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 3, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-sites.js'),
+    },
+    {
+        id: 'settings.cache',
+        area: 'settings',
+        pattern: 'settings/cache',
+        label: 'Cache',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 4, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-cache.js'),
+    },
+    {
+        id: 'settings.email',
+        area: 'settings',
+        pattern: 'settings/email',
+        label: 'Email',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 5, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-email.js'),
+    },
+    {
+        id: 'settings.ax',
+        area: 'settings',
+        pattern: 'settings/ax',
+        label: 'Agent Experience',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 6, parentId: 'settings' },
+        load: () => import('./surfaces/settings/settings-ax.js'),
+    },
+    // The T16 runtime feature-flag management surface. superAdmin-only. Its id is
+    // the canonical `ADMIN_FEATURES_SURFACE_ID` ('settings.adminFeatures') from
+    // `config/types.ts` — kept as a string literal here to avoid a registry↔config
+    // import cycle (config/types imports `AdminArea` from this module). It is the
+    // self-lockout escape hatch: the surface-matcher exempts it from the
+    // area/surface config denylist AND runtime flags so a superAdmin can always
+    // reach it to re-enable things (see `isSurfaceVisible` / `resolveSurface`).
+    // Nav order 8 places it after Content Types (7) within the Settings group.
+    {
+        id: 'settings.adminFeatures',
+        area: 'settings',
+        pattern: 'settings/admin-features',
+        label: 'Admin Features',
+        minRole: 'superAdmin',
+        nav: { section: 'settings', order: 8, parentId: 'settings' },
+        load: () => import('./surfaces/settings/admin-features.js'),
+    },
+    // contentTypes (nav-nested under the Settings group, but its own area)
+    {
+        id: 'contentTypes.list',
+        area: 'contentTypes',
+        pattern: 'content-types',
+        label: 'Content Types',
+        minRole: 'siteAdmin',
+        nav: { section: 'settings', order: 7, parentId: 'settings' },
+        load: () => import('./surfaces/contentTypes/content-types-list.js'),
+    },
+    {
+        id: 'contentTypes.designer',
+        area: 'contentTypes',
+        pattern: 'content-types/:type',
+        label: 'Content Type Designer',
+        minRole: 'siteAdmin',
+        load: () => import('./surfaces/contentTypes/content-types-designer.js'),
+    },
+];
+/**
+ * Surface id that the bare `/admin` index (empty path segments) resolves to.
+ * The generated catch-all redirects `/admin` → `/admin/dashboard`; the matcher
+ * mirrors that by resolving `[]` to this surface.
+ */
+export const ADMIN_INDEX_SURFACE_ID = 'dashboard.index';
+//# sourceMappingURL=registry.js.map

package/dist/admin/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/admin/registry.ts"],"names":[],"mappings":"AA4CA,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,WAAW;IACX,aAAa;IACb,SAAS;IACT,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,OAAO;IACP,UAAU;IACV,cAAc;IACd,OAAO;IACP,WAAW;IACX,aAAa;IACb,SAAS;IACT,YAAY;IACZ,SAAS;IACT,aAAa;IACb,UAAU;IACV,cAAc;CACN,CAAA;AA8GV,mFAAmF;AAEnF,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9E,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9E,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE;IAClF,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;IAC5F,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;IAC/F,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;IACnG,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE;CACnF,CAAA;AAEV,mFAAmF;AACnF,gFAAgF;AAChF,qFAAqF;AACrF,mFAAmF;AACnF,6EAA6E;AAE7E,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,YAAY;IACZ;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE;QAC/D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC;KAC9D;IAED,cAAc;IACd;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE;QACzD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC;KAC7D;IAED,qEAAqE;IACrE,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qCAAqC,CAAC,EAAE;IAC5J,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,EAAE;IACrK,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC,EAAE;IACtK,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,EAAE;IAEzK,YAAY;IACZ;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE;QAC3D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC;KAC9D;IAED,aAAa;IACb;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE;QACrD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC;KAChE;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC;KACjE;IAED,SAAS;IACT;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE;QACrD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC;KACxD;IAED,gBAAgB;IAChB;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6BAA6B,CAAC;KAClD;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC;KACjD;IAED,oEAAoE;IACpE,qEAAqE;IACrE;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC;KACrD;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kCAAkC,CAAC;KACvD;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IACD,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;IACtJ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kCAAkC,CAAC,EAAE;IAExJ,gBAAgB;IAChB;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC;KACrD;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IACD,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;IACnJ,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC,EAAE;IAEtJ,kCAAkC;IAClC;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QAC1D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC;KACxD;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACnD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6BAA6B,CAAC;KAClD;IAED,QAAQ;IACR;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QACvD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC;KACtD;IAED,WAAW;IACX;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IAED,eAAe;IACf;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;QACzD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+CAA+C,CAAC;KACpE;IAED,QAAQ;IACR;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACnD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC;KACrD;IACD,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;IACnJ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kCAAkC,CAAC,EAAE;IAEvJ,oBAAoB;IACpB;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC;KAC7D;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC;KAC/D;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iDAAiD,CAAC;KACtE;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kDAAkD,CAAC;KACvE;IACD,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,EAAE;IAC3K,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC,EAAE;IAC7K,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC,EAAE;IACnL,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC,EAAE;IAEnL,cAAc;IACd;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC;KACjE;IACD,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,EAAE;IACvL,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,8CAA8C,CAAC,EAAE;IAEzL,UAAU;IACV;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC;KACzD;IACD,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC,EAAE;IAC/J,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE;IAEjK,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,iDAAiD;IACjD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE;QAChE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC;KAC/D;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE;QAChE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mDAAmD,CAAC;KACxE;IAED,UAAU;IACV;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;QACtD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qCAAqC,CAAC;KAC1D;IAED,sBAAsB;IACtB;QACE,gEAAgE;QAChE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,oBAAoB;QAC7B,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE;QAClE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC;KACtD;IACD;QACE,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,8EAA8E;QAC9E,oCAAoC;QACpC,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE;QAClE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC;KACzD;IAED,mBAAmB;IACnB;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC;KAC9D;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC;KAC3D;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC;KACzD;IACD,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,qEAAqE;IACrE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,YAAY;QACrB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;KAC5D;IAED,uEAAuE;IACvE;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+CAA+C,CAAC;KACpE;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mDAAmD,CAAC;KACxE;CACO,CAAA;AAEV;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAA"}

package/dist/admin/server.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Server-only helpers for the configurable admin app (design
+ * `docs/orchestration/plans/admin-app-configurable.md` §1.1, §3).
+ *
+ * `toAdminRuntimeConfig` is what the generated catch-all page
+ * (`app/admin/[[...admin]]/page.tsx`, T14) calls to turn a full, server-side
+ * `KywiConfig` (secrets and all — db url, auth secret, SMTP/S3 credentials,
+ * content-type hooks/access functions) into the small, JSON-serializable,
+ * SECRET-FREE `AdminRuntimeConfig` that is safe to pass as a prop into the
+ * client component tree. This is the fix for the current fragile pattern
+ * (`AdminShell` takes the full `KywiConfig` as a client prop, verified in
+ * `apps/reference/lib/config.ts` + `components/admin-shell-wrapper.tsx`) —
+ * the projection below is the *only* shape that may ever cross that boundary.
+ *
+ * Import via `@kywi-software/core/admin/server` (see `packages/core/package.json`
+ * `exports["./admin/server"]`) — a separate entry point from `@kywi-software/core/admin`
+ * (the client-component barrel, `admin/index.ts`) so a server module never
+ * accidentally pulls in React admin components, and vice versa.
+ *
+ * ── Security invariant ────────────────────────────────────────────────────────
+ * Every field is a CURATED, per-field-vetted copy of a known-safe, display-only
+ * scalar/struct. The projection NEVER copies: db url/connection string, auth
+ * secret, S3 access/secret keys or endpoint, cache (redis) connection string,
+ * SMTP/sendgrid credentials, per-site free-form `settings`, or any server
+ * function (content-type/plugin hooks, access-control predicates, field-level
+ * ACLs, JSON-LD transforms). Enforced structurally by the copy-only-known-fields
+ * shape below and asserted by the deep-scan leak test in
+ * `admin/__tests__/server.test.ts` (key scan + value scan + no-functions scan).
+ */
+import type { DeploymentMode, KywiConfig, FieldType, FieldValidation, DbProvider, AuthProvider, CacheProvider } from '../config/types.js';
+import { ADMIN_FEATURES_SURFACE_ID, type ResolvedAdminConfig } from '../config/types.js';
+import type { ImageSizeConfig, MediaConfig } from '../media/types.js';
+/**
+ * Client-safe subset of a `FieldDefinition` — the data-only members the admin
+ * list/edit forms and the content-type reference read. Recurses `fields` for
+ * `group` fields.
+ *
+ * OMITS `access` (`FieldAccessConfig`): it is FUNCTION-valued (read/write
+ * predicates) so it can never serialize, and no admin surface reads it (the
+ * server enforces field ACLs regardless — exposing the rule set is both unsafe
+ * to serialize and unnecessary). `source` IS included: it is a harmless
+ * `'config' | 'admin'` provenance flag the designer UI uses to distinguish
+ * config-defined from runtime-added fields. `validation` is declarative
+ * (`min`/`max`/length/`pattern`) — no functions, safe to serialize.
+ */
+export interface AdminRuntimeField {
+    name: string;
+    type: FieldType;
+    label: string;
+    required?: boolean;
+    /** For `select` / `multiSelect`. */
+    options?: string[];
+    /** For `relationship`. */
+    relatedType?: string;
+    /** Field's default value (declarative config data; already rendered client-side into forms). */
+    defaultValue?: unknown;
+    /** Declarative value-level validation (min/max/length/pattern) — no functions. */
+    validation?: FieldValidation;
+    /** Provenance flag ('config' = kywi.config.ts, 'admin' = runtime designer). */
+    source?: 'config' | 'admin';
+    /** Sub-fields when `type` is `group`. */
+    fields?: AdminRuntimeField[];
+}
+/** Client-safe subset of `ContentTypeConfig` — labels/names/icons + the data-only `fields`. No hooks, no access functions, no field validators-as-functions. */
+export interface AdminRuntimeContentType {
+    name: string;
+    label: string;
+    pluralLabel?: string;
+    baseType: KywiConfig['contentTypes'][number]['baseType'];
+    icon?: string;
+    /** The client-safe projection of this type's fields (see `AdminRuntimeField`). */
+    fields?: AdminRuntimeField[];
+}
+/**
+ * Client-safe subset of `SiteConfig` — id/name/domain/locales + the display
+ * metadata (`defaultLocale`, `theme`) the settings reference renders. STILL NO
+ * `settings` object (free-form, may hold secrets — kept excluded as T2
+ * documented) and no pool-sharing wiring. `slug` is deliberately absent: it is
+ * not a `SiteConfig` member at all — it is a per-site runtime DB identifier
+ * surfaced via `GET /api/v1/sites`, so there is no config-as-code source to
+ * project it from.
+ */
+export interface AdminRuntimeSite {
+    id: string;
+    name: string;
+    domain: string;
+    locales?: string[];
+    /** Default locale (display metadata). */
+    defaultLocale: string;
+    /** Configured theme name (display metadata). */
+    theme: string;
+}
+/** A theme, projected to its display-safe identity: name + region names. Tokens are omitted (no surface reads them; add here if one ever does — they are display data). */
+export interface AdminRuntimeTheme {
+    name: string;
+    regions: Array<{
+        name: string;
+    }>;
+}
+/**
+ * Display-only overview of the resolved platform configuration for the
+ * `settings.site` reference surface. Provider NAMES and non-sensitive display
+ * knobs only — NEVER connection strings, keys, or secrets.
+ */
+export interface AdminRuntimeOverview {
+    /** DB provider NAME only (e.g. `'postgresql'`). NEVER `db.url`. */
+    db: {
+        provider: DbProvider;
+    };
+    /** Auth provider NAMES only (e.g. `['credentials','google']`). NEVER `auth.secret` or client secrets. */
+    auth: {
+        providers: AuthProvider[];
+    };
+    /** Media provider + non-sensitive display knobs. NEVER S3 bucket/region/keys/endpoint or `localPath`. */
+    media: {
+        provider: MediaConfig['provider'];
+        maxUploadSizeMb?: number;
+        imageSizes?: Record<string, ImageSizeConfig>;
+    };
+    /** Cache provider NAME + default TTL. NEVER the redis connection string. */
+    cache: {
+        provider: CacheProvider;
+        defaultTtl?: number;
+    };
+    /** Configured themes (names + region names). */
+    themes: AdminRuntimeTheme[];
+}
+/**
+ * The projection passed from the server-rendered catch-all page into
+ * `KywiAdminApp` (T14). Every field here is safe to serialize into the client
+ * bundle: no `db`.url, no `auth`.secret, no `email`/SMTP/S3 credentials, no
+ * cache connection string, no server functions (hooks, access control,
+ * validators). Enforced by `toAdminRuntimeConfig`'s shape (only ever copies
+ * known-safe scalar fields) and asserted by the deep-scan test in
+ * `admin/__tests__/server.test.ts`.
+ */
+export interface AdminRuntimeConfig {
+    mode: DeploymentMode;
+    admin: ResolvedAdminConfig;
+    contentTypes: AdminRuntimeContentType[];
+    sites: AdminRuntimeSite[];
+    /** Display-only overview of platform config (provider names, no secrets). */
+    overview: AdminRuntimeOverview;
+}
+/**
+ * Build the secret-free `AdminRuntimeConfig` from a full `KywiConfig`. Calls
+ * `resolveAdminConfig` itself (rather than trusting `config.admin` to already
+ * be resolved) so this stays correct even if a caller hand-builds a
+ * `KywiConfig` object literal instead of going through `defineKywiConfig`.
+ */
+export declare function toAdminRuntimeConfig(config: KywiConfig): AdminRuntimeConfig;
+export { ADMIN_FEATURES_SURFACE_ID };
+export { resolveSurface, type SurfaceMatch } from './surface-matcher.js';
+//# sourceMappingURL=server.d.ts.map

package/dist/admin/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/admin/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EAEV,SAAS,EACT,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACd,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAGrE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gGAAgG;IAChG,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,kFAAkF;IAClF,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAA;IAC3B,yCAAyC;IACzC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAC7B;AAED,gKAAgK;AAChK,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAA;IACxD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,yCAAyC;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;CACd;AAED,2KAA2K;AAC3K,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,EAAE,EAAE;QAAE,QAAQ,EAAE,UAAU,CAAA;KAAE,CAAA;IAC5B,yGAAyG;IACzG,IAAI,EAAE;QAAE,SAAS,EAAE,YAAY,EAAE,CAAA;KAAE,CAAA;IACnC,yGAAyG;IACzG,KAAK,EAAE;QACL,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;QACjC,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;KAC7C,CAAA;IACD,4EAA4E;IAC5E,KAAK,EAAE;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACvD,gDAAgD;IAChD,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,mBAAmB,CAAA;IAC1B,YAAY,EAAE,uBAAuB,EAAE,CAAA;IACvC,KAAK,EAAE,gBAAgB,EAAE,CAAA;IACzB,6EAA6E;IAC7E,QAAQ,EAAE,oBAAoB,CAAA;CAC/B;AA4CD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,kBAAkB,CAwC3E;AAMD,OAAO,EAAE,yBAAyB,EAAE,CAAA;AAUpC,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAA"}