@mulmoclaude/core 0.23.1 → 0.25.0

package/dist/server-DLRz-U7F.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-DLRz-U7F.cjs","names":[],"sources":["../src/collection/core/queryZ.ts","../src/collection/server/csvQuery.ts","../src/collection/server/csvStore.ts","../src/collection/server/store.ts","../src/collection/server/jsonlQuery.ts","../src/collection/core/recordZ.ts","../src/collection/server/validate.ts","../src/collection/server/mutate.ts","../src/collection/server/ontology.ts","../src/collection/server/derive.ts","../src/collection/server/dynamicIcon.ts","../src/collection/server/util.ts","../src/collection/server/spawn.ts","../src/collection/server/delete.ts","../src/collection/server/views.ts","../src/workspace-setup/slug.ts","../src/collection/server/manageTool.ts"],"sourcesContent":["// The aggregation-query DSL for `dataSource` collections (v2 of\n// plans/done/feat-collection-csv-duckdb-source.md). A structured JSON query —\n// NEVER raw SQL — because SQL-the-language isn't scoped to the data file\n// (`read_csv`/`read_text`/`COPY TO` reach the whole filesystem) and the\n// query authors (custom views, the agent) are influenceable by untrusted\n// content. The DSL is safe by construction: column names / aliases become\n// quoted identifiers, every VALUE rides as a prepared-statement parameter,\n// and the shape can't express file access at all. Compiled to SQL\n// server-side (`collection/server/csvQuery.ts`).\n//\n// Isomorphic: custom views build these objects in the browser; the server\n// validates with the same zod schema before compiling.\n\nimport { z } from \"zod\";\n\n/** Result-column aliases double as SQL identifiers and JSON keys — keep\n *  them to a conservative identifier charset so neither side needs\n *  escaping gymnastics. */\nconst SAFE_ALIAS_PATTERN = /^[A-Za-z_]\\w{0,63}$/;\n\n/** Hard ceiling on returned rows; `limit` clamps below it. A group-by on\n *  a near-unique column would otherwise return one row per source row —\n *  the exact materialization the aggregate path exists to avoid. */\nexport const MAX_QUERY_ROWS = 10000;\n/** Default row cap when the query declares no `limit`. */\nexport const DEFAULT_QUERY_ROWS = 1000;\n/** Cap on aggregate expressions per query — a record shape has no\n *  intrinsic size limit, and thousands of expressions would make one\n *  full-file scan arbitrarily wide. */\nexport const MAX_QUERY_AGGREGATES = 32;\n\n/** One aggregate column: `count` (rows; `column` optional to count\n *  non-null cells) or `sum`/`avg`/`min`/`max` over a named CSV column. */\nexport const QueryAggregateZ = z\n  .object({\n    op: z.enum([\"count\", \"sum\", \"avg\", \"min\", \"max\"]),\n    column: z.string().min(1).optional(),\n  })\n  .refine((aggregate) => aggregate.op === \"count\" || aggregate.column !== undefined, {\n    message: \"`column` is required for every aggregate op except `count`\",\n    path: [\"column\"],\n  });\n\n/** One filter condition. Same op vocabulary as the schema-level `where`\n *  (`core/where.ts`) so authors learn one set; values may be typed\n *  (number / boolean) since CSV columns are. `in` requires an array\n *  value, every other op a scalar. */\nexport const QueryWhereZ = z\n  .object({\n    field: z.string().min(1),\n    op: z.enum([\"eq\", \"ne\", \"in\", \"gt\", \"gte\", \"lt\", \"lte\", \"contains\"]),\n    value: z.union([\n      z.string(),\n      z.number(),\n      z.boolean(),\n      z\n        .array(z.union([z.string(), z.number(), z.boolean()]))\n        .min(1)\n        .max(100),\n    ]),\n  })\n  .refine((cond) => (cond.op === \"in\") === Array.isArray(cond.value), {\n    message: \"`in` requires an array value (the allowed set); every other op requires a scalar value\",\n    path: [\"value\"],\n  });\n\nexport const QueryOrderZ = z.object({\n  /** A `groupBy` column or an aggregate alias — membership enforced by\n   *  the whole-query refine below. */\n  field: z.string().min(1),\n  dir: z.enum([\"asc\", \"desc\"]).optional(),\n});\n\n/** The whole query. At least one of `groupBy` / `aggregates` must be\n *  present: bare `groupBy` is a DISTINCT listing, bare `aggregates` a\n *  whole-file scalar row, together a grouped aggregation. */\nexport const CollectionQueryZ = z\n  .object({\n    // Case-insensitively unique: DuckDB treats `category` and `Category`\n    // as the SAME identifier, groups once, and auto-renames the duplicate\n    // SELECT column (`Category_1`) — silently breaking the result-key\n    // contract. Same rule as the alias refine below.\n    groupBy: z\n      .array(z.string().min(1))\n      .max(8)\n      .refine((columns) => new Set(columns.map((column) => column.toLowerCase())).size === columns.length, {\n        message: \"`groupBy` columns must be unique (case-insensitively — SQL identifiers ignore case)\",\n      })\n      .optional(),\n    aggregates: z\n      .record(z.string().regex(SAFE_ALIAS_PATTERN, \"aggregate aliases must be simple identifiers (letters/digits/underscore)\"), QueryAggregateZ)\n      .optional(),\n    where: z.array(QueryWhereZ).max(16).optional(),\n    orderBy: z.array(QueryOrderZ).max(4).optional(),\n    limit: z.number().int().min(1).max(MAX_QUERY_ROWS).optional(),\n  })\n  .refine((query) => (query.groupBy?.length ?? 0) > 0 || Object.keys(query.aggregates ?? {}).length > 0, {\n    message: \"declare at least one of `groupBy` (columns to bucket by) or `aggregates` (values to compute)\",\n    path: [\"groupBy\"],\n  })\n  .refine((query) => Object.keys(query.aggregates ?? {}).length <= MAX_QUERY_AGGREGATES, {\n    message: `\\`aggregates\\` supports at most ${MAX_QUERY_AGGREGATES} entries`,\n    path: [\"aggregates\"],\n  })\n  // An alias shadowing a groupBy column would make the SELECT list (and\n  // the result object) ambiguous. CASE-INSENSITIVE: DuckDB treats\n  // identifiers that differ only by case as the same name (quoting does\n  // not opt out), so `Total` vs `total` collide there even though they\n  // are distinct JSON keys here — reject both same-case and cross-case\n  // collisions, including between two aliases.\n  .refine(\n    (query) => {\n      const groupLower = new Set((query.groupBy ?? []).map((column) => column.toLowerCase()));\n      const seen = new Set<string>();\n      return Object.keys(query.aggregates ?? {}).every((alias) => {\n        const lower = alias.toLowerCase();\n        if (groupLower.has(lower) || seen.has(lower)) return false;\n        seen.add(lower);\n        return true;\n      });\n    },\n    {\n      message: \"aggregate aliases must be unique and must not collide with `groupBy` column names (case-insensitively — SQL identifiers ignore case)\",\n      path: [\"aggregates\"],\n    },\n  )\n  // `orderBy` can only sort what the result actually contains.\n  .refine(\n    (query) => {\n      const sortable = new Set([...(query.groupBy ?? []), ...Object.keys(query.aggregates ?? {})]);\n      return (query.orderBy ?? []).every((order) => sortable.has(order.field));\n    },\n    {\n      message: \"every `orderBy.field` must be a `groupBy` column or an aggregate alias\",\n      path: [\"orderBy\"],\n    },\n  );\n\nexport type CollectionQueryAggregate = z.infer<typeof QueryAggregateZ>;\nexport type CollectionQueryWhere = z.infer<typeof QueryWhereZ>;\nexport type CollectionQueryOrder = z.infer<typeof QueryOrderZ>;\nexport type CollectionQuery = z.infer<typeof CollectionQueryZ>;\n","// Compile a validated CollectionQuery (the structured aggregation DSL,\n// `core/queryZ.ts`) into DuckDB SQL over `read_csv`. Safety model:\n//   - column names / aliases → double-quoted identifiers (quoteIdent);\n//   - every comparison VALUE → a prepared-statement parameter;\n//   - the file path is bound by the EXECUTOR as the first parameter;\n//   - the DSL itself can't name a table function, so no query can reach\n//     any file other than the one the executor binds.\n// Pure + exported for unit tests — no filesystem, no DuckDB here.\n\nimport type { CollectionQuery, CollectionQueryAggregate, CollectionQueryWhere } from \"../core/queryZ\";\nimport { DEFAULT_QUERY_ROWS } from \"../core/queryZ\";\n\n/** Double-quote a SQL identifier (CSV column name / result alias). */\nexport function quoteIdent(name: string): string {\n  return `\"${name.replaceAll('\"', '\"\"')}\"`;\n}\n\n/** Single-quote a SQL string literal (a `types={...}` struct key). */\nexport function quoteLiteral(value: string): string {\n  return `'${value.replaceAll(\"'\", \"''\")}'`;\n}\n\n/** The `read_csv` argument list shared by every CSV query: the (prepared)\n *  path plus a `types` pin forcing the key column to VARCHAR — without it\n *  DuckDB's sniffer turns `001` into BIGINT 1, so leading zeros vanish\n *  and distinct keys collapse. */\nexport function readCsvArgs(primaryKey: string): string {\n  return `?, types={${quoteLiteral(primaryKey)}: 'VARCHAR'}`;\n}\n\n/** One aggregate's SQL expression. `sum`/`avg` TRY_CAST to DOUBLE so a\n *  column the sniffer kept as VARCHAR (mixed values) aggregates over its\n *  numeric cells instead of erroring; non-numeric cells become NULL and\n *  are skipped — standard BI tolerance. `min`/`max` stay native (they are\n *  meaningful on strings and dates too). */\nfunction aggregateExpr(aggregate: CollectionQueryAggregate): string {\n  const { op, column } = aggregate;\n  if (op === \"count\") return column === undefined ? \"count(*)\" : `count(${quoteIdent(column)})`;\n  if (op === \"sum\" || op === \"avg\") return `${op}(TRY_CAST(${quoteIdent(column ?? \"\")} AS DOUBLE))`;\n  return `${op}(${quoteIdent(column ?? \"\")})`;\n}\n\n/** One where condition → SQL fragment + its bound parameters. String\n *  equality compares against `CAST(col AS VARCHAR)` so a sniffer-typed\n *  column still matches its textual value; numeric/boolean values compare\n *  natively (DuckDB coerces the column side). */\nfunction whereFragment(cond: CollectionQueryWhere): { sql: string; params: unknown[] } {\n  const column = quoteIdent(cond.field);\n  const asText = `CAST(${column} AS VARCHAR)`;\n  if (cond.op === \"in\") {\n    const values = cond.value as (string | number | boolean)[];\n    const textual = values.every((value) => typeof value === \"string\");\n    const lhs = textual ? asText : column;\n    return { sql: `${lhs} IN (${values.map(() => \"?\").join(\", \")})`, params: values };\n  }\n  if (cond.op === \"contains\") return { sql: `contains(${asText}, ?)`, params: [String(cond.value)] };\n  const operator = { eq: \"=\", ne: \"<>\", gt: \">\", gte: \">=\", lt: \"<\", lte: \"<=\" }[cond.op];\n  const lhs = typeof cond.value === \"string\" && (cond.op === \"eq\" || cond.op === \"ne\") ? asText : column;\n  return { sql: `${lhs} ${operator} ?`, params: [cond.value] };\n}\n\n/** Compile a validated query against `fromSql` (a table-function call\n *  whose FIRST placeholder is the source path — the executor binds it).\n *  Returns the SQL and the where-value parameters that follow the path.\n *  Callers MUST have run `CollectionQueryZ` first; this function trusts\n *  the shape (aliases already charset-checked, orderBy membership already\n *  enforced). */\nfunction compileQuery(query: CollectionQuery, fromSql: string): { sql: string; params: unknown[] } {\n  const groupBy = query.groupBy ?? [];\n  const aggregates = Object.entries(query.aggregates ?? {});\n  const selectList = [...groupBy.map(quoteIdent), ...aggregates.map(([alias, aggregate]) => `${aggregateExpr(aggregate)} AS ${quoteIdent(alias)}`)];\n  const where = (query.where ?? []).map(whereFragment);\n  const clauses = [`SELECT ${selectList.join(\", \")}`, `FROM ${fromSql}`];\n  if (where.length > 0) clauses.push(`WHERE ${where.map((fragment) => fragment.sql).join(\" AND \")}`);\n  if (groupBy.length > 0) clauses.push(`GROUP BY ${groupBy.map(quoteIdent).join(\", \")}`);\n  const orderBy = (query.orderBy ?? []).map((order) => quoteIdent(order.field) + (order.dir === \"desc\" ? \" DESC\" : \" ASC\"));\n  if (orderBy.length > 0) clauses.push(`ORDER BY ${orderBy.join(\", \")}`);\n  clauses.push(`LIMIT ${query.limit ?? DEFAULT_QUERY_ROWS}`);\n  return { sql: clauses.join(\" \"), params: where.flatMap((fragment) => fragment.params) };\n}\n\n/** Compile against a CSV file (the dataSource store's engine). */\nexport function compileCsvQuery(query: CollectionQuery, primaryKey: string): { sql: string; params: unknown[] } {\n  return compileQuery(query, `read_csv(${readCsvArgs(primaryKey)})`);\n}\n\n/** Compile against a JSONL file of ENRICHED records — the file-backed\n *  collections' engine (see `jsonlQuery.ts`). No VARCHAR key pin needed:\n *  enriched record ids are already strings. `sample_size=-1` makes the\n *  schema inference scan EVERY line — with the default sample, a sparse\n *  optional/derived field first appearing past the sample would not be\n *  inferred as a column and the query would binder-error on it (Codex P2\n *  on #2165). The full scan costs nothing extra here: aggregation reads\n *  the whole file anyway. */\nexport function compileJsonlQuery(query: CollectionQuery): { sql: string; params: unknown[] } {\n  return compileQuery(query, `read_json(?, format='newline_delimited', sample_size=-1)`);\n}\n","// DuckDB-backed read-only store over an external CSV file (schema\n// `dataSource`, v1). The user's file is the source of truth and is NEVER\n// modified: non-UTF-8 files (Shift_JIS rosters are the primary use case)\n// are decoded to a content-addressed UTF-8 cache copy under os.tmpdir()\n// and DuckDB reads that copy.\n//\n// Row → record contract:\n//   - the schema's `primaryKey` names the CSV column whose value becomes\n//     the record id; CSV columns map to fields by NAME;\n//   - a key value that isn't a safe record id (Japanese, spaces, …) is\n//     hex-encoded (`id0x…`) so detail URLs / remote-view addressing keep\n//     working — `displayField` covers presentation;\n//   - duplicate key values: LAST row wins (a warn is logged); rows with an\n//     empty/missing key are skipped (warn);\n//   - `list()` is capped at MAX_CSV_ROWS — the whole existing UI\n//     materializes every record, so an uncapped 2M-row file would be a\n//     memory bomb. v2 replaces the cap with paging + native aggregation.\n//\n// SQL safety: the row-value comparison is a prepared-statement parameter,\n// never string concatenation; the key column is identifier-quoted. The\n// file path itself is host-resolved (workspace containment in discovery)\n// and also bound as a parameter.\n//\n// DuckDB is a native module; `import()` failures (unsupported platform,\n// broken install) degrade to a thrown, clearly-worded error so ONLY\n// dataSource collections break — see\n// packages/core/assets/helps/error-recovery.md.\n\nimport { lstat, mkdir, open, readdir, readFile, rename, stat, unlink, writeFile } from \"node:fs/promises\";\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport iconv from \"iconv-lite\";\nimport type { CollectionItem } from \"../core/schema\";\nimport type { CollectionQuery } from \"../core/queryZ\";\nimport { compileCsvQuery, quoteIdent, readCsvArgs } from \"./csvQuery\";\nimport { getWorkspaceRoot, log } from \"./host\";\nimport { isContainedInRoot, safeRecordId } from \"./paths\";\n\n/** `list()` row cap. Over-cap files are truncated with a warn — the v1\n *  contract is \"browse + per-record views\", not full-table analytics. */\nexport const MAX_CSV_ROWS = 5000;\n\n/** Record ids minted from non-safe key values: `id0x` + utf-8 hex. Raw key\n *  values that themselves match this pattern are ALSO encoded, so the\n *  encoded namespace never collides with a raw value (injective mapping). */\nconst ENCODED_ID_PATTERN = /^id0x([0-9a-f]+)$/;\n\n/** A CSV key value → the record id it's addressed by. Safe values pass\n *  through untouched; everything else (and anything shaped like an encoded\n *  id) becomes `id0x<hex>`. Pure + exported for unit tests. */\nexport function encodeCsvRecordId(rawKey: string): string {\n  if (safeRecordId(rawKey) === rawKey && !ENCODED_ID_PATTERN.test(rawKey)) return rawKey;\n  return `id0x${Buffer.from(rawKey, \"utf-8\").toString(\"hex\")}`;\n}\n\n/** A record id → the CSV key value to look up. Inverse of\n *  `encodeCsvRecordId` for encoded ids; anything else is already the raw\n *  value. Pure + exported for unit tests. */\nexport function decodeCsvRecordId(itemId: string): string {\n  const match = ENCODED_ID_PATTERN.exec(itemId);\n  if (!match) return itemId;\n  return Buffer.from(match[1], \"hex\").toString(\"utf-8\");\n}\n\n/** Normalize one DuckDB JS value into a JSON-safe record value: BigInt →\n *  number (string beyond the safe range), DATE/TIMESTAMP → ISO string\n *  (date-only when the clock is exactly UTC midnight, matching the `date`\n *  field contract), exotic DuckDB values → their string form. Pure +\n *  exported for unit tests. */\nexport function normalizeCsvValue(value: unknown): unknown {\n  if (typeof value === \"bigint\") {\n    return value <= BigInt(Number.MAX_SAFE_INTEGER) && value >= BigInt(-Number.MAX_SAFE_INTEGER) ? Number(value) : value.toString();\n  }\n  if (value instanceof Date) {\n    const iso = value.toISOString();\n    return iso.endsWith(\"T00:00:00.000Z\") ? iso.slice(0, 10) : iso;\n  }\n  if (value !== null && typeof value === \"object\") return String(value);\n  return value;\n}\n\n/** One raw DuckDB row → a CollectionItem, or null when the key cell is\n *  missing/empty (the row can't be addressed). The primaryKey field is\n *  OVERWRITTEN with the (possibly encoded) record id so `item[primaryKey]`\n *  and the record's address never drift — same invariant the file store's\n *  write path enforces. Pure + exported for unit tests. */\nexport function csvRowToItem(row: Record<string, unknown>, primaryKey: string): CollectionItem | null {\n  const normalized = Object.fromEntries(Object.entries(row).map(([key, value]) => [key, normalizeCsvValue(value)]));\n  const rawKey = normalized[primaryKey];\n  if (rawKey === null || rawKey === undefined || String(rawKey) === \"\") return null;\n  return { ...normalized, [primaryKey]: encodeCsvRecordId(String(rawKey)) };\n}\n\n/** Dedupe by record id, LAST row wins (matches `csvRead`'s last-match\n *  pick). Returns the surviving items in first-seen order. Pure +\n *  exported for unit tests. */\nexport function dedupeByRecordId(items: CollectionItem[], primaryKey: string): { items: CollectionItem[]; duplicates: number } {\n  const byId = new Map<string, CollectionItem>();\n  for (const item of items) byId.set(String(item[primaryKey]), item);\n  return { items: [...byId.values()], duplicates: items.length - byId.size };\n}\n\n/** True when a thrown DuckDB error is the `types` pin naming a column the\n *  CSV doesn't have — the schema/file-mismatch case the caller downgrades\n *  to \"empty collection + warn\" instead of a 500. */\nfunction isMissingKeyColumnError(err: unknown): boolean {\n  return String(err).includes(\"do not exist in the CSV\");\n}\n\n// ---------------------------------------------------------------------------\n// Encoding: never touch the user's file — decode to a tmpdir cache copy\n// ---------------------------------------------------------------------------\n\n/** Bytes sniffed for UTF-8 validity. The trailing 3 bytes of the sample\n *  are dropped so a multibyte char split at the boundary can't produce a\n *  false negative on a valid file. */\nconst SNIFF_BYTES = 1024 * 1024;\n\nfunction isValidUtf8(buf: Buffer): boolean {\n  try {\n    new TextDecoder(\"utf-8\", { fatal: true }).decode(buf);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Detect the (best-effort) encoding of a non-UTF-8 buffer. BOMs decide\n *  UTF-16; otherwise cp932 (the Shift_JIS superset — Excel-exported\n *  Japanese CSVs are the primary non-UTF-8 case this feature serves). */\nfunction fallbackEncoding(buf: Buffer): string {\n  if (buf.length >= 2 && buf[0] === 0xff && buf[1] === 0xfe) return \"utf-16le\";\n  if (buf.length >= 2 && buf[0] === 0xfe && buf[1] === 0xff) return \"utf-16be\";\n  return \"cp932\";\n}\n\nexport function cacheDir(): string {\n  return path.join(tmpdir(), \"mulmoclaude-csv-utf8\");\n}\n\n/** Read only the first `bytes` of a file — the encoding sniff must not\n *  pull a multi-hundred-MB CSV into memory on the (common) UTF-8 path. */\nasync function readHead(absPath: string, bytes: number): Promise<Buffer> {\n  const handle = await open(absPath, \"r\");\n  try {\n    const { size } = await handle.stat();\n    const buf = Buffer.alloc(Math.min(bytes, size));\n    await handle.read(buf, 0, buf.length, 0);\n    return buf;\n  } finally {\n    await handle.close();\n  }\n}\n\n/** Decode the whole file into a UTF-8 cache copy and return its path.\n *  Cache key = (path, mtime, size), so a replaced CSV re-decodes and an\n *  unchanged one never does. */\nasync function pathExists(target: string): Promise<boolean> {\n  try {\n    await stat(target);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Best-effort removal of older decode-cache entries for the same source\n *  path — a frequently-replaced large CSV would otherwise accumulate one\n *  full copy per (mtime, size) forever. Runs AFTER the current copy is\n *  published; a concurrent reader holding an old fd is unaffected\n *  (unlink-while-open is safe on POSIX). */\nasync function evictSupersededCache(key: string, keepBasename: string): Promise<void> {\n  try {\n    const entries = await readdir(cacheDir());\n    await Promise.all(\n      entries.filter((name) => name.startsWith(`${key}-`) && name !== keepBasename).map((name) => unlink(path.join(cacheDir(), name)).catch(() => undefined)),\n    );\n  } catch {\n    // cache dir missing / unreadable — nothing to evict\n  }\n}\n\n/** Decode the whole file into a UTF-8 cache copy and return its path.\n *  Cache key = (path, mtime, size), so a replaced CSV re-decodes and an\n *  unchanged one never does; superseded copies are evicted. The cache\n *  lives in the SHARED OS tmpdir, so the dir is 0700 and files 0600 —\n *  decoded rows must not be readable by other local users. */\nasync function decodeToCache(absPath: string, info: { mtimeMs: number; size: number }): Promise<string> {\n  const key = createHash(\"sha256\").update(absPath).digest(\"hex\").slice(0, 16);\n  const cached = path.join(cacheDir(), `${key}-${Math.trunc(info.mtimeMs)}-${info.size}.csv`);\n  if (!(await pathExists(cached))) {\n    const whole = await readFile(absPath);\n    const encoding = fallbackEncoding(whole);\n    const text = iconv.decode(whole, encoding);\n    await mkdir(cacheDir(), { recursive: true, mode: 0o700 });\n    // Unique tmp name + rename in the SAME dir — atomic publish, and a\n    // concurrent decode of the same file just wins/loses the rename cleanly.\n    const tmp = `${cached}.${randomBytes(4).toString(\"hex\")}.tmp`;\n    await writeFile(tmp, text, { encoding: \"utf-8\", mode: 0o600 });\n    await rename(tmp, cached);\n    log.info(\"collections\", \"decoded non-UTF-8 dataSource file to cache\", { path: absPath, encoding });\n    await evictSupersededCache(key, path.basename(cached));\n  }\n  return cached;\n}\n\n/** Re-validate the dataSource file at READ time, mirroring the JSON\n *  store's per-read defenses: realpath containment (a symlink swapped in\n *  after discovery must not walk out of the workspace) and an lstat\n *  regular-file check (a symlink leaf is refused outright, even one\n *  pointing inside the workspace — same rule as `isRegularFile` on\n *  record files). Returns the stat info, or null for \"no readable file\"\n *  (ENOENT / refused), which callers render as an empty collection. */\nasync function safeCsvStat(absPath: string, workspaceRoot: string): Promise<{ mtimeMs: number; size: number } | null> {\n  if (!isContainedInRoot(absPath, workspaceRoot)) {\n    log.warn(\"collections\", \"dataSource read refused: path escapes workspace\", { path: absPath });\n    return null;\n  }\n  let info;\n  try {\n    info = await lstat(absPath);\n  } catch (err) {\n    if ((err as { code?: string }).code === \"ENOENT\") return null;\n    throw err;\n  }\n  if (!info.isFile()) {\n    log.warn(\"collections\", \"dataSource read refused: not a regular file (symlink?)\", { path: absPath });\n    return null;\n  }\n  return info;\n}\n\n/** Return a path DuckDB can read as UTF-8: the original file when it\n *  already is UTF-8 (the cheap, common case — only the head is sniffed),\n *  else a decoded cache copy (see `decodeToCache`). Returns null when\n *  there is no readable file (missing, symlink, or containment-refused —\n *  see `safeCsvStat`), which callers render as an empty collection. */\nasync function ensureUtf8CsvPath(absPath: string, workspaceRoot: string): Promise<string | null> {\n  const info = await safeCsvStat(absPath, workspaceRoot);\n  if (info === null) return null;\n  const head = await readHead(absPath, SNIFF_BYTES);\n  // Drop the tail bytes of a full-length sample so a multibyte char split\n  // at the boundary can't read as invalid UTF-8.\n  const sample = head.length === SNIFF_BYTES ? head.subarray(0, SNIFF_BYTES - 3) : head;\n  const hasUtf16Bom = head.length >= 2 && ((head[0] === 0xff && head[1] === 0xfe) || (head[0] === 0xfe && head[1] === 0xff));\n  if (!hasUtf16Bom && isValidUtf8(sample)) return absPath;\n  return decodeToCache(absPath, info);\n}\n\n// ---------------------------------------------------------------------------\n// DuckDB plumbing\n// ---------------------------------------------------------------------------\n\ninterface DuckDbModule {\n  DuckDBInstance: {\n    create: (dbPath?: string) => Promise<{\n      connect: () => Promise<{\n        runAndReadAll: (sql: string, values?: unknown[]) => Promise<{ getRowObjectsJS: () => Record<string, unknown>[] }>;\n        disconnectSync: () => void;\n      }>;\n    }>;\n  };\n}\n\nlet instancePromise: ReturnType<DuckDbModule[\"DuckDBInstance\"][\"create\"]> | null = null;\n\n/** Lazily create one shared in-memory DuckDB instance. The dynamic import\n *  keeps the native module OUT of core's load path — a platform where the\n *  prebuilt binding is missing degrades to a per-query error on dataSource\n *  collections only, never a broken core. A failed init is retried on the\n *  next call (the promise is reset). */\nasync function duckDbInstance(): ReturnType<DuckDbModule[\"DuckDBInstance\"][\"create\"]> {\n  if (instancePromise === null) {\n    instancePromise = import(\"@duckdb/node-api\").then((mod) => (mod as unknown as DuckDbModule).DuckDBInstance.create(\":memory:\"));\n  }\n  try {\n    return await instancePromise;\n  } catch (err) {\n    instancePromise = null;\n    throw new Error(`DuckDB is unavailable on this host (@duckdb/node-api failed to load: ${String(err)}) — dataSource collections cannot be read`);\n  }\n}\n\nexport async function queryCsv(sql: string, params: unknown[]): Promise<Record<string, unknown>[]> {\n  const instance = await duckDbInstance();\n  const connection = await instance.connect();\n  try {\n    const reader = await connection.runAndReadAll(sql, params);\n    return reader.getRowObjectsJS();\n  } finally {\n    connection.disconnectSync();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// The store operations (consumed by storeFor in ./store)\n// ---------------------------------------------------------------------------\n\n/** Every row of the CSV as records — capped, deduped, id-encoded. The\n *  key column is pinned to VARCHAR (see `readCsvArgs`). `workspaceRoot`\n *  drives the per-read containment check; omitted, the configured host\n *  root is used. */\nexport async function csvList(absPath: string, primaryKey: string, workspaceRoot?: string): Promise<CollectionItem[]> {\n  const utf8Path = await ensureUtf8CsvPath(absPath, workspaceRoot ?? getWorkspaceRoot());\n  if (utf8Path === null) return [];\n  let rows: Record<string, unknown>[];\n  try {\n    rows = await queryCsv(`SELECT * FROM read_csv(${readCsvArgs(primaryKey)}) LIMIT ${MAX_CSV_ROWS + 1}`, [utf8Path]);\n  } catch (err) {\n    // The VARCHAR pin names a column the CSV doesn't have — a schema/file\n    // mismatch, rendered as an empty collection with a warn (same outcome\n    // the pre-pin `primaryKey in row` check produced), not a 500.\n    if (!isMissingKeyColumnError(err)) throw err;\n    log.warn(\"collections\", \"dataSource CSV has no primaryKey column — every row is skipped\", { path: absPath, primaryKey });\n    return [];\n  }\n  if (rows.length > MAX_CSV_ROWS) {\n    log.warn(\"collections\", \"dataSource CSV truncated to row cap\", { path: absPath, cap: MAX_CSV_ROWS });\n    rows.length = MAX_CSV_ROWS;\n  }\n  const items = rows.map((row) => csvRowToItem(row, primaryKey)).filter((item): item is CollectionItem => item !== null);\n  const skipped = rows.length - items.length;\n  if (skipped > 0) log.warn(\"collections\", \"dataSource CSV rows skipped (empty key cell)\", { path: absPath, skipped });\n  const deduped = dedupeByRecordId(items, primaryKey);\n  if (deduped.duplicates > 0)\n    log.warn(\"collections\", \"dataSource CSV has duplicate key values (last row wins)\", { path: absPath, duplicates: deduped.duplicates });\n  return deduped.items;\n}\n\n/** The scan-order ordinal column the last-match read adds. Underscore\n *  prefix keeps it out of any plausible CSV header namespace; it is\n *  stripped from the returned record either way. */\nconst ROW_ORDINAL = \"__mc_row\";\n\n/** One record by id. The comparison value rides as a prepared-statement\n *  parameter, and the LAST matching row is selected IN DuckDB (scan-order\n *  ordinal + LIMIT 1) — a CSV with thousands of duplicate keys must not\n *  materialize them all for one detail read. Consistent with csvList's\n *  last-wins dedupe. */\nexport async function csvRead(absPath: string, primaryKey: string, itemId: string, workspaceRoot?: string): Promise<CollectionItem | null> {\n  const utf8Path = await ensureUtf8CsvPath(absPath, workspaceRoot ?? getWorkspaceRoot());\n  if (utf8Path === null) return null;\n  const rawKey = decodeCsvRecordId(itemId);\n  // Errors (missing key column, malformed CSV, DuckDB unavailable)\n  // propagate — a clear 500 with the DuckDB message beats a silent 404.\n  const sql =\n    `SELECT * FROM (SELECT *, row_number() OVER () AS ${quoteIdent(ROW_ORDINAL)} FROM read_csv(${readCsvArgs(primaryKey)})) ` +\n    `WHERE CAST(${quoteIdent(primaryKey)} AS VARCHAR) = ? ORDER BY ${quoteIdent(ROW_ORDINAL)} DESC LIMIT 1`;\n  const rows = await queryCsv(sql, [utf8Path, rawKey]);\n  const last = rows.at(0);\n  if (last === undefined) return null;\n  const { [ROW_ORDINAL]: __ordinal, ...record } = last;\n  return csvRowToItem(record, primaryKey);\n}\n\n/** Run a validated aggregation query (the structured DSL — see\n *  `core/queryZ.ts`) over the WHOLE file: no row cap on the scan (a\n *  capped aggregate would be a wrong number), only the result-row LIMIT\n *  the compiler emits. Values are normalized like list/read rows so a\n *  chart consumer gets plain JSON scalars. */\nexport async function csvRunQuery(absPath: string, primaryKey: string, query: CollectionQuery, workspaceRoot?: string): Promise<Record<string, unknown>[]> {\n  const utf8Path = await ensureUtf8CsvPath(absPath, workspaceRoot ?? getWorkspaceRoot());\n  if (utf8Path === null) return [];\n  const { sql, params } = compileCsvQuery(query, primaryKey);\n  const rows = await queryCsv(sql, [utf8Path, ...params]);\n  return rows.map((row) => Object.fromEntries(Object.entries(row).map(([key, value]) => [key, normalizeCsvValue(value)])));\n}\n","// Storage abstraction over a collection's records — the one seam where\n// \"where do the rows come from\" is decided. Two implementations:\n//\n//   - file store: the classic `<dataDir>/<itemId>.json` records (io.ts),\n//     writable through the governed write paths;\n//   - CSV store (csvStore.ts): the rows of an external `dataSource` file,\n//     queried through DuckDB — READ-ONLY by definition.\n//\n// Callers that only need to read records go through `storeFor(...)`;\n// write paths keep calling `writeItem`/`deleteItem` directly but MUST\n// refuse read-only collections first (`collectionWritable`) — the store\n// deliberately exposes no write methods, so a \"write through the store\"\n// can't be authored by accident.\n\nimport type { CollectionItem } from \"../core/schema\";\nimport type { CollectionQuery } from \"../core/queryZ\";\nimport { isReadOnlySchema } from \"../core/schema\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport { listItems, readItem, type IoOptions } from \"./io\";\nimport { csvList, csvRead, csvRunQuery } from \"./csvStore\";\n\nexport interface CollectionStoreCapabilities {\n  readonly writable: boolean;\n}\n\nexport interface CollectionStore {\n  readonly capabilities: CollectionStoreCapabilities;\n  /** Every record. CSV store: capped at `MAX_CSV_ROWS` (see csvStore.ts). */\n  list: () => Promise<CollectionItem[]>;\n  /** One record by id, or null when missing/invalid. */\n  read: (itemId: string) => Promise<CollectionItem | null>;\n  /** Aggregation over the WHOLE data set (the structured DSL,\n   *  `core/queryZ.ts`) — present only on stores with a native query\n   *  engine (the CSV store). Absent ⇒ the collection doesn't support\n   *  queries yet; callers surface a clear error, never emulate. */\n  query?: (query: CollectionQuery) => Promise<Record<string, unknown>[]>;\n}\n\n/** True when the collection accepts UI/tool writes. A `dataSource`\n *  collection is read-only: updates happen by editing/replacing the\n *  data file itself. Every write entry point checks this BEFORE calling\n *  `writeItem`/`deleteItem` — server-enforced, not just UI-hidden. */\nexport function collectionWritable(collection: Pick<LoadedCollection, \"schema\">): boolean {\n  return !isReadOnlySchema(collection.schema);\n}\n\n/** The one-line refusal write paths surface (HTTP 405 / MCP error text). */\nexport function readOnlyRefusal(slug: string): string {\n  return `collection '${slug}' is read-only (backed by an external dataSource) — update the data file itself instead`;\n}\n\n/** Pick the store implementation for a discovered collection. A\n *  `dataSource` schema whose `dataSourceFile` failed to resolve yields a\n *  read-only EMPTY store rather than falling back to the (writable) file\n *  store — a half-loaded read-only collection must never become writable. */\nexport function storeFor(collection: LoadedCollection, opts: IoOptions = {}): CollectionStore {\n  if (isReadOnlySchema(collection.schema)) {\n    const file = collection.dataSourceFile;\n    const key = collection.schema.primaryKey;\n    return {\n      capabilities: { writable: false },\n      list: () => (file === undefined ? Promise.resolve([]) : csvList(file, key, opts.workspaceRoot)),\n      read: (itemId: string) => (file === undefined ? Promise.resolve(null) : csvRead(file, key, itemId, opts.workspaceRoot)),\n      query: (query: CollectionQuery) => (file === undefined ? Promise.resolve([]) : csvRunQuery(file, key, query, opts.workspaceRoot)),\n    };\n  }\n  return {\n    capabilities: { writable: true },\n    list: () => listItems(collection.dataDir, opts),\n    read: (itemId: string) => readItem(collection.dataDir, itemId, opts),\n  };\n}\n","// Aggregation-query executor for FILE-BACKED collections: the same DSL\n// (`core/queryZ.ts`) and the same DuckDB engine as the CSV store, run\n// over a temp JSONL of the collection's rows. Deliberately takes\n// ALREADY-LOADED rows rather than pointing DuckDB at the record files,\n// for two correctness reasons:\n//\n//   1. **Computed fields.** Stored record files never contain `derived` /\n//      `rollup` / `toggle` values — the caller passes ENRICHED rows\n//      (`listItems` → `enrichItems`), so \"sum of invoice totals\" works\n//      even when `total` is a formula.\n//   2. **The symlink defense.** A `read_json('<dataDir>/*.json')` glob\n//      would follow a symlinked record file (the exact file-disclosure\n//      hole `listItems`' lstat check closes) — DuckDB only ever sees\n//      content that already passed the guarded reader.\n//\n// The temp JSONL lives in the same 0700 cache dir as CSV decode copies,\n// is written 0600 (shared OS tmpdir), and is unlinked when the query\n// finishes. Caller wiring lives in `manageTool.ts` (NOT `store.ts` —\n// enrichment lives in `derive.ts`, which itself consumes `storeFor`, so\n// wiring it into the store would create an import cycle).\n\nimport { mkdir, open, unlink } from \"node:fs/promises\";\nimport { randomBytes } from \"node:crypto\";\nimport path from \"node:path\";\nimport type { CollectionItem } from \"../core/schema\";\nimport type { CollectionQuery, CollectionQueryAggregate } from \"../core/queryZ\";\nimport { compileJsonlQuery } from \"./csvQuery\";\nimport { cacheDir, normalizeCsvValue, queryCsv } from \"./csvStore\";\nimport { log } from \"./host\";\n\n/** SQL semantics for an aggregate-only query over ZERO rows: one scalar\n *  row (`count` = 0, everything else NULL) — the same shape the CSV path\n *  produces for a header-only file, so callers reading `rows[0]` never\n *  break on storage kind or emptiness. A grouped query over zero rows is\n *  zero groups (`[]`), also matching SQL. Synthesized here because DuckDB\n *  has no empty file to infer a schema from. */\nfunction emptyCollectionResult(query: CollectionQuery): Record<string, unknown>[] {\n  if ((query.groupBy?.length ?? 0) > 0) return [];\n  const aggregates = Object.entries(query.aggregates ?? {});\n  return [Object.fromEntries(aggregates.map(([alias, aggregate]: [string, CollectionQueryAggregate]) => [alias, aggregate.op === \"count\" ? 0 : null]))];\n}\n\n/** The SOURCE columns a query reads: groupBy columns, aggregate input\n *  columns, and where fields. (orderBy resolves to groupBy columns or\n *  aggregate ALIASES — never to a new source column — so it adds none.) */\nfunction referencedSourceColumns(query: CollectionQuery): string[] {\n  const columns = new Set<string>(query.groupBy ?? []);\n  for (const aggregate of Object.values(query.aggregates ?? {})) {\n    if (aggregate.column !== undefined) columns.add(aggregate.column);\n  }\n  for (const cond of query.where ?? []) columns.add(cond.field);\n  return [...columns];\n}\n\n/** Referenced columns that appear in NO row — a freshly-added optional\n *  field, or a derived field whose inputs no record has yet. DuckDB only\n *  infers columns from keys that occur in the JSONL, so without help a\n *  valid query on such a field binder-errors here while the CSV path\n *  (whose header always declares the column) returns NULLs. Padding the\n *  FIRST line with `col: null` makes the column exist (full-scan\n *  inference unions keys across lines) with matching NULL semantics. */\nfunction absentReferencedColumns(rows: CollectionItem[], query: CollectionQuery): string[] {\n  const present = new Set<string>();\n  for (const row of rows) for (const key of Object.keys(row)) present.add(key);\n  return referencedSourceColumns(query).filter((column) => !present.has(column));\n}\n\n/** Run a validated query over enriched collection rows. */\nexport async function runQueryOverRows(rows: CollectionItem[], query: CollectionQuery): Promise<Record<string, unknown>[]> {\n  if (rows.length === 0) return emptyCollectionResult(query);\n  await mkdir(cacheDir(), { recursive: true, mode: 0o700 });\n  const jsonlPath = path.join(cacheDir(), `q-${randomBytes(8).toString(\"hex\")}.jsonl`);\n  try {\n    // Stream row-by-row — a map+join would duplicate an uncapped\n    // collection as one giant string before writing it. The first line\n    // carries null placeholders for referenced-but-absent columns (see\n    // `absentReferencedColumns`); a row's own values always win.\n    const nullPads = Object.fromEntries(absentReferencedColumns(rows, query).map((column) => [column, null]));\n    const handle = await open(jsonlPath, \"wx\", 0o600);\n    try {\n      let first = true;\n      for (const row of rows) {\n        await handle.write(`${JSON.stringify(first ? { ...nullPads, ...row } : row)}\\n`);\n        first = false;\n      }\n    } finally {\n      await handle.close();\n    }\n    const { sql, params } = compileJsonlQuery(query);\n    const result = await queryCsv(sql, [jsonlPath, ...params]);\n    return result.map((row) => Object.fromEntries(Object.entries(row).map(([key, value]) => [key, normalizeCsvValue(value)])));\n  } finally {\n    // The finally covers the WRITE too — a partially-written file from a\n    // rejected write must not linger in the shared tmpdir. A failed unlink\n    // (other than \"never created\") is only logged: throwing here would\n    // mask the query's own error.\n    await unlink(jsonlPath).catch((err: unknown) => {\n      if ((err as { code?: string }).code !== \"ENOENT\") log.warn(\"collections\", \"temp JSONL cleanup failed\", { path: jsonlPath, error: String(err) });\n    });\n  }\n}\n","// Compiled per-collection zod RECORD validators (plan step ⓪ Phase B of\n// plans/done/collection-ontology.md): `compileRecordZ(schema, tier)` turns a\n// CollectionSchema's `fields` into a zod object validator for the stored\n// record JSON, so every consumer of record validation — the putItems write\n// gate, the post-hoc file scan, and (future) `mutate` action `params` forms —\n// derives its checks from the same compiler instead of growing parallel\n// hand-rolled loops.\n//\n// Two tiers, per the lint-not-lock principle:\n//\n// - `\"enforced\"` — the write-gate tier. Reproduces EXACTLY the historical\n//   three checks (required fields non-empty, enum values in the closed set;\n//   the primaryKey↔filename identity check stays in `validateRecordObject`,\n//   which owns the id). Message strings are part of the contract: they are\n//   the `problem` feedback the authoring LLM acts on, and the file scan and\n//   the write gate must report enforced-tier violations IDENTICALLY.\n// - `\"strict\"` — the report-only tier: enforced plus per-type checks\n//   (number/money hold numerics, booleans are booleans, dates parse, table\n//   rows conform to their sub-schema). Consumed by `validateCollectionRecords`\n//   (the scan surfaced through presentCollection / the detail response) so\n//   legacy records written under the loose rules get REPORTED, never\n//   rejected. Promote a strict check into the enforced tier only once the\n//   lint runs clean across real workspaces.\n//\n// Isomorphic (zod + pure logic, no node built-ins) but — like `./schemaZ` —\n// deliberately NOT exported through the browser barrel; the server surface\n// re-exports it via `../server/validate`.\n\nimport { z } from \"zod\";\nimport { coerceNumeric } from \"./backlinks\";\nimport { parseIsoDate, parseIsoDateTime } from \"./calendarGrid\";\nimport { COMPUTED_TYPES } from \"./schema\";\nimport type { CollectionFieldSpec, CollectionItem, CollectionSchema, CollectionSubFieldSpec } from \"./schema\";\n\n// COMPUTED_TYPES moved to `./schema` (zod-free, so `./draft` can share\n// it); re-exported here for the existing server-surface importers.\nexport { COMPUTED_TYPES };\n\nexport type RecordCheckTier = \"enforced\" | \"strict\";\n\ntype AnyFieldSpec = CollectionFieldSpec | CollectionSubFieldSpec;\n\n/** The emptiness rule shared by `required` and the \"only check present\n *  values\" gate. NOT a truthiness check — `0` and `false` are filled. */\nconst isEmptyValue = (value: unknown): boolean => value === undefined || value === null || value === \"\";\n\n/** The historical write-gate checks, verbatim: required non-empty, enum\n *  membership (compared as strings, so a numeric `5` satisfies `\"5\"`). */\nfunction enforcedProblem(key: string, spec: AnyFieldSpec, value: unknown): string | null {\n  const empty = isEmptyValue(value);\n  if (spec.required && empty) return `missing required field '${key}'`;\n  if (!empty && spec.type === \"enum\" && !spec.values.includes(String(value))) {\n    return `'${key}' = '${String(value)}' is not one of [${spec.values.join(\", \")}]`;\n  }\n  return null;\n}\n\n// Numeric coercion for the strict `number`/`money` check — moved to\n// `./backlinks` so rollup sums share the same definition of \"numeric\".\n\n/** Report-only per-type checks on a PRESENT value. Date / datetime reuse the\n *  calendar's STRICT civil parsers (`parseIsoDate` / `parseIsoDateTime`), so\n *  the lint flags exactly the values the calendar / trigger / spawn code\n *  would silently drop — impossible days like `2026-02-30`, and datetimes\n *  outside the canonical `YYYY-MM-DDTHH:MM[:SS]` shape (e.g. a `Z` suffix,\n *  which the day view can't place). `string`-backed types accept anything\n *  stringifiable; `ref` existence is out of scope. */\nfunction strictTypeProblem(key: string, spec: AnyFieldSpec, value: unknown): string | null {\n  switch (spec.type) {\n    case \"number\":\n    case \"money\":\n      return Number.isFinite(coerceNumeric(value)) ? null : `'${key}' = '${String(value)}' is not numeric (a '${spec.type}' field stores a plain number)`;\n    case \"boolean\":\n      return value === true || value === false ? null : `'${key}' = '${String(value)}' is not a boolean (store true or false, unquoted)`;\n    case \"date\":\n      return parseIsoDate(value) !== null ? null : `'${key}' = '${String(value)}' is not a real YYYY-MM-DD date`;\n    case \"datetime\":\n      return parseIsoDateTime(value) !== null\n        ? null\n        : `'${key}' = '${String(value)}' is not a YYYY-MM-DDTHH:MM datetime (seconds optional, no timezone suffix — the shape the calendar parses)`;\n    default:\n      return null;\n  }\n}\n\n/** Strict check for a PRESENT `table` value: an array of row objects, each\n *  row conforming to the sub-schema (required / enum / typed sub-values).\n *  First row problem wins, prefixed with the row number so the fix is\n *  locatable. */\nfunction strictTableProblem(key: string, spec: Extract<CollectionFieldSpec, { type: \"table\" }>, value: unknown): string | null {\n  if (!Array.isArray(value)) return `'${key}' = '${String(value)}' is not an array of rows (a 'table' field stores an array of row objects)`;\n  for (let index = 0; index < value.length; index++) {\n    const row: unknown = value[index];\n    if (!row || typeof row !== \"object\" || Array.isArray(row)) return `'${key}' row ${index + 1} is not an object`;\n    for (const [subKey, subSpec] of Object.entries(spec.of)) {\n      const subValue = (row as Record<string, unknown>)[subKey];\n      // Typed checks apply to PRESENT sub-values only — an empty optional\n      // cell is fine, mirroring the top-level gate in `recordFieldProblem`.\n      const problem = enforcedProblem(subKey, subSpec, subValue) ?? (isEmptyValue(subValue) ? null : strictTypeProblem(subKey, subSpec, subValue));\n      if (problem) return `'${key}' row ${index + 1}: ${problem}`;\n    }\n  }\n  return null;\n}\n\n/** First problem for one field's stored value under `tier`, or null.\n *  Enforced checks always run (and their messages never vary by tier — the\n *  scan and the write gate must agree on them); strict adds the per-type\n *  layer on present values only. */\nexport function recordFieldProblem(key: string, spec: AnyFieldSpec, value: unknown, tier: RecordCheckTier): string | null {\n  const enforced = enforcedProblem(key, spec, value);\n  if (enforced || tier === \"enforced\") return enforced;\n  if (isEmptyValue(value)) return null;\n  if (spec.type === \"table\") return strictTableProblem(key, spec, value);\n  return strictTypeProblem(key, spec, value);\n}\n\n// Compiled validators cached per schema OBJECT (a putItems batch validates\n// many rows against the same LoadedCollection.schema instance; a re-loaded\n// collection gets a fresh schema object and naturally re-compiles).\nconst compiled = new WeakMap<CollectionSchema, Partial<Record<RecordCheckTier, z.ZodType>>>();\n\n/** Compile `schema.fields` into a zod validator for a stored record.\n *  Loose object: unknown keys are allowed and any declared key may be\n *  absent (records are user files, not parse-and-rewrite targets —\n *  callers validate, they never persist the parse output). The checks run\n *  as ONE object-level refine iterating fields in declaration order —\n *  per-key shape schemas can't express \"key may be absent BUT its absence\n *  must still reach the required check\", and the single loop keeps the\n *  first reported issue identical to the historical first-problem-wins\n *  contract. */\nexport function compileRecordZ(schema: CollectionSchema, tier: RecordCheckTier): z.ZodType {\n  const cached = compiled.get(schema)?.[tier];\n  if (cached) return cached;\n  const stored = Object.entries(schema.fields).filter(([, spec]) => !COMPUTED_TYPES.has(spec.type));\n  const validator = z.looseObject({}).superRefine((record, ctx) => {\n    for (const [key, spec] of stored) {\n      const problem = recordFieldProblem(key, spec, record[key], tier);\n      if (problem) ctx.addIssue({ code: \"custom\", message: problem, path: [key] });\n    }\n  });\n  const entry = compiled.get(schema) ?? {};\n  entry[tier] = validator;\n  compiled.set(schema, entry);\n  return validator;\n}\n\n/** First schema problem on an in-memory record under `tier`, or null. One\n *  issue per record keeps the report short and the fix obvious (the\n *  historical contract of `validateRecordObject`). */\nexport function firstRecordProblem(record: CollectionItem, schema: CollectionSchema, tier: RecordCheckTier): string | null {\n  const result = compileRecordZ(schema, tier).safeParse(record);\n  if (result.success) return null;\n  return result.error.issues[0]?.message ?? \"record failed schema validation\";\n}\n","// Validate a collection's record files and report problems back to the\n// authoring LLM. The host SILENTLY skips unparseable records at read time\n// (see `listItems`), so without this a single malformed file looks like\n// \"records vanished.\" `presentCollection` — which the LLM is told to call\n// after every write — runs this and surfaces the problems in its result,\n// closing the loop so the model fixes the file instead of a human noticing\n// missing rows much later.\n\nimport { readdir, readFile, lstat } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { getWorkspaceRoot, log } from \"./host\";\nimport { isContainedInRoot } from \"./paths\";\nimport { firstRecordProblem, type RecordCheckTier } from \"../core/recordZ\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport type { CollectionItem, CollectionSchema } from \"../core/schema\";\n\n// The compiled record validators (and COMPUTED_TYPES, which moved next to\n// them) live in the isomorphic ../core/recordZ; re-exported here so the\n// existing `collection/server` importers resolve unchanged and future\n// consumers (the reserved `mutate` action's `params` form) share the\n// same compiler.\nexport { COMPUTED_TYPES, compileRecordZ, recordFieldProblem, type RecordCheckTier } from \"../core/recordZ\";\n\nexport interface RecordIssue {\n  /** Record filename, e.g. `lesson-003.json`. */\n  file: string;\n  /** Human-readable problem, written to be actionable by the LLM. */\n  problem: string;\n}\n\n// Don't flood the result; the first batch is enough to act on.\nconst MAX_ISSUES = 25;\n\n/** Read every `<id>.json` under the collection's dataDir and report the\n *  ones that won't load or violate the schema. An empty list means every\n *  record is fine. */\n/** List entries under the data dir, guarding realpath containment (against a\n *  symlinked dir swapped in after discovery, like `listItems`) and treating a\n *  missing dir as empty while surfacing real I/O faults. */\nasync function listRecordFilenames(dataDir: string, workspaceRoot: string): Promise<string[]> {\n  if (!isContainedInRoot(dataDir, workspaceRoot)) {\n    log.warn(\"collections\", \"validate refused: dataDir escapes workspace via symlink\", { dataDir });\n    return [];\n  }\n  try {\n    return await readdir(dataDir);\n  } catch (err) {\n    const error = err as { code?: string };\n    if (error.code === \"ENOENT\") return []; // no dir yet = no records\n    throw err; // surface permission / I/O faults instead of silently passing\n  }\n}\n\nexport async function validateCollectionRecords(collection: LoadedCollection, opts: { workspaceRoot?: string } = {}): Promise<RecordIssue[]> {\n  // A `dataSource` collection has no record FILES to validate — its rows\n  // come from the external data file (type mismatches there surface as\n  // raw values in the views, not as repairable record files).\n  if (collection.schema.dataSource !== undefined) return [];\n  const workspaceRoot = opts.workspaceRoot ?? getWorkspaceRoot();\n  const entries = await listRecordFilenames(collection.dataDir, workspaceRoot);\n  const issues: RecordIssue[] = [];\n  for (const name of entries.sort()) {\n    if (!name.endsWith(\".json\") || name.startsWith(\".\")) continue;\n    if (issues.length >= MAX_ISSUES) break;\n    const issue = await inspectRecord(path.join(collection.dataDir, name), name, collection.schema);\n    if (issue) issues.push(issue);\n  }\n  return issues;\n}\n\n// Read a record file's text, or classify why it can't be read (missing /\n// symlink / unreadable). Split out to keep `inspectRecord` under the line limit.\nasync function readRecordText(fullPath: string, name: string): Promise<{ raw: string } | RecordIssue> {\n  try {\n    const stat = await lstat(fullPath);\n    if (!stat.isFile()) return { file: name, problem: \"not a regular file (symlink?) — skipped, won't appear\" };\n    return { raw: await readFile(fullPath, \"utf-8\") };\n  } catch {\n    return { file: name, problem: \"could not be read — skipped, won't appear\" };\n  }\n}\n\n/** Classify a single record file: unreadable / unparseable / non-object /\n *  schema violation, or null when it's fine. */\nasync function inspectRecord(fullPath: string, name: string, schema: CollectionSchema): Promise<RecordIssue | null> {\n  const read = await readRecordText(fullPath, name);\n  if (\"problem\" in read) return read;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(read.raw);\n  } catch (err) {\n    const reason = err instanceof Error ? err.message : String(err);\n    return {\n      file: name,\n      problem: `invalid JSON (${reason}) — SKIPPED, won't appear. Usual cause: an unescaped \" inside a string value; use 「」/『』 or write \\\\\" instead.`,\n    };\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    return { file: name, problem: \"not a JSON object — skipped, won't appear\" };\n  }\n  // \"strict\" tier: the file scan is REPORT-ONLY (surfaced through\n  // presentCollection / the detail response), so it lints the per-type\n  // rules the write gate does not yet enforce — legacy records written\n  // under the loose rules get reported here, never rejected on write.\n  const problem = validateRecordObject(parsed as CollectionItem, name.replace(/\\.json$/, \"\"), schema, \"strict\");\n  return problem ? { file: name, problem } : null;\n}\n\n/** First schema problem on an in-memory record (primaryKey↔id mismatch,\n *  then the compiled per-field checks — see `../core/recordZ` for the two\n *  tiers), or null when it's fine. One issue per record keeps the report\n *  short and the fix obvious. Pure + exported so write paths\n *  (manageCollection putItems) can gate on the SAME enforced rules the\n *  post-hoc file scan reports — `itemId` is the id the record is (or\n *  would be) stored under. The default `\"enforced\"` tier keeps every\n *  write gate on the historical three checks; only pass `\"strict\"` from\n *  report-only surfaces. */\nexport function validateRecordObject(record: CollectionItem, itemId: string, schema: CollectionSchema, tier: RecordCheckTier = \"enforced\"): string | null {\n  const idValue = record[schema.primaryKey];\n  if (typeof idValue !== \"string\" || idValue !== itemId) {\n    return `'${schema.primaryKey}' is '${String(idValue ?? \"\")}' but must equal the filename ('${itemId}'), or the record can't be opened`;\n  }\n  return firstRecordProblem(record, schema, tier);\n}\n","// Execute a `kind: \"mutate\"` action (plan step ④ of\n// plans/done/collection-ontology.md): the HOST applies a declarative,\n// merge-semantics write to one record — no LLM, no tokens. The pipeline\n// deliberately reuses the governed write path's pieces, never a third\n// mechanism:\n//\n//   1. params  — the mini-form is validated per spec by the SAME\n//      compiled record checks `putItems` uses (`recordFieldProblem`,\n//      strict tier: required/enum plus typed values, since a form\n//      rejects rather than lints);\n//   2. merge   — the resolved `set` merges over the stored record with\n//      computed keys stripped (healing stale copies, exactly like\n//      manageCollection's `mode: \"merge\"`);\n//   3. gate    — `validateRecordObject`, the same write gate every\n//      governed path runs;\n//   4. write   — `writeItem` (atomic, change-publishing).\n//\n// The `require` state gate is enforced HERE, against the exact snapshot\n// the merge runs on — the route's earlier `actionVisible` pre-check is a\n// fast 409 on a stale button, but a concurrent write between the route's\n// read and ours could otherwise slip a mutation past a gate that no\n// longer holds (Codex on PR #2105). Visibility is the authorization\n// rule, shared with the chat/agent kinds.\n\nimport { actionVisible } from \"../core/actionVisible\";\nimport { COMPUTED_TYPES, recordFieldProblem } from \"../core/recordZ\";\nimport { resolveMutateSet } from \"../core/mutateAction\";\nimport { readItem, writeItem, type IoOptions } from \"./io\";\nimport { validateRecordObject } from \"./validate\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport type { CollectionItem, CollectionMutateAction } from \"../core/schema\";\n\nexport type MutateActionOutcome =\n  | { ok: true; item: CollectionItem }\n  /** `status` picks the HTTP mapping: bad params / a write-gate reject are\n   *  the caller's 400s, a missing record its 404, an unmet `require` its\n   *  409, a refused write its 500. */\n  | { ok: false; status: \"invalid-params\" | \"invalid-record\" | \"not-found\" | \"require-unmet\" | \"write-refused\"; problem: string };\n\n/** First problem with the submitted params, or null. Every declared param\n *  is checked by the shared record-field validator; keys the action never\n *  declared are rejected outright — a stray key would otherwise ride the\n *  resolved `set` semantics silently. */\nexport function firstMutateParamProblem(action: CollectionMutateAction, params: Record<string, unknown>): string | null {\n  const declared = action.params ?? {};\n  for (const key of Object.keys(params)) {\n    if (declared[key] === undefined) return `unknown param '${key}' — not declared by action '${action.id}'`;\n  }\n  for (const [key, spec] of Object.entries(declared)) {\n    const problem = recordFieldProblem(key, spec, params[key], \"strict\");\n    if (problem) return problem;\n  }\n  return null;\n}\n\n/** Apply one mutate action to one record. Never throws for data-shaped\n *  failures — the outcome's `problem` doubles as agent feedback when an\n *  LLM (not the user) pressed the button. */\nexport async function applyMutateAction(\n  collection: LoadedCollection,\n  action: CollectionMutateAction,\n  itemId: string,\n  params: Record<string, unknown>,\n  opts: IoOptions = {},\n): Promise<MutateActionOutcome> {\n  const paramProblem = firstMutateParamProblem(action, params);\n  if (paramProblem) return { ok: false, status: \"invalid-params\", problem: paramProblem };\n\n  const existing = await readItem(collection.dataDir, itemId, opts);\n  if (!existing) return { ok: false, status: \"not-found\", problem: `item '${itemId}' not found` };\n\n  // Re-check `require` against THIS read — the snapshot the merge below\n  // actually uses — so a write that landed after the route's pre-check\n  // can't let the mutation run with its gate no longer satisfied.\n  if (!actionVisible(action, existing)) {\n    return { ok: false, status: \"require-unmet\", problem: `action '${action.id}' is not available for item '${itemId}' in its current state` };\n  }\n\n  // Merge over the stored record with computed keys stripped — a legacy /\n  // raw-written record can carry a stale derived/embed value, and\n  // re-writing it would perpetuate a forged host-computed value.\n  const stored = Object.entries(existing).filter(([key]) => {\n    const spec = collection.schema.fields[key];\n    return !spec || !COMPUTED_TYPES.has(spec.type);\n  });\n  const merged: CollectionItem = { ...Object.fromEntries(stored), ...resolveMutateSet(action.set, params) };\n\n  const invalid = validateRecordObject(merged, itemId, collection.schema);\n  if (invalid) return { ok: false, status: \"invalid-record\", problem: invalid };\n\n  const result = await writeItem(collection.dataDir, itemId, merged, { workspaceRoot: opts.workspaceRoot, slug: collection.slug });\n  if (result.kind !== \"ok\") return { ok: false, status: \"write-refused\", problem: `write refused (${result.kind})` };\n  return { ok: true, item: merged };\n}\n","// The machine-readable workspace ontology (plan step ① of\n// plans/done/collection-ontology.md): one entry per discovered collection with\n// the identity + relationship facts an agent needs to reason ACROSS\n// collections — which slugs exist, how they point at each other, how big\n// they are — without re-reading every schema.json. Derived on demand from\n// the schemas (no authoring, no storage), so it can never go stale.\n// Deliberately NOT a unified schema: collections stay bounded contexts;\n// semantic joining happens at read time in the caller.\n\nimport { readdir } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { discoverCollections, type DiscoveryOptions } from \"./discovery\";\nimport { collectionWritable, storeFor } from \"./store\";\nimport { isRegularFile } from \"./io\";\nimport { isContainedInRoot } from \"./paths\";\nimport { getWorkspaceRoot } from \"./host\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport type { CollectionSchema } from \"../core/schema\";\n\n/** One relationship a schema declares: a `ref` (the record stores the\n *  target's primaryKey slug) or `embed` (display-only pull) pointing at\n *  collection `to`, or `backlinks` (display-only REVERSE refs — `to` is\n *  the backlink's source collection, i.e. its `from`). A `ref` column\n *  inside a `table` field is reported with a dotted path\n *  (`lines.clientId`). Whether `to` exists is NOT checked — resolution\n *  is fail-soft at render, and the caller holds the full slug list to\n *  compare against anyway. */\nexport interface OntologyRelation {\n  field: string;\n  kind: \"ref\" | \"embed\" | \"backlinks\" | \"rollup\";\n  to: string;\n}\n\nexport interface CollectionOntologyEntry {\n  slug: string;\n  title: string;\n  icon: string;\n  primaryKey: string;\n  /** The effective display field: the schema's `displayField`, falling\n   *  back to the primaryKey exactly as render-time labelling does. */\n  displayField: string;\n  recordCount: number;\n  relations: OntologyRelation[];\n}\n\n/** Extract the relations a schema declares, in field declaration order:\n *  top-level `ref` / `embed` / `backlinks` fields plus `ref` sub-fields\n *  inside `table` columns. Pure — exported so the phase-2 graph panel\n *  can reuse it on already-loaded schemas. */\nexport function schemaRelations(schema: CollectionSchema): OntologyRelation[] {\n  const relations: OntologyRelation[] = [];\n  for (const [key, spec] of Object.entries(schema.fields)) {\n    if (spec.type === \"ref\" || spec.type === \"embed\") relations.push({ field: key, kind: spec.type, to: spec.to });\n    if (spec.type === \"backlinks\" || spec.type === \"rollup\") relations.push({ field: key, kind: spec.type, to: spec.from });\n    if (spec.type !== \"table\") continue;\n    for (const [subKey, subSpec] of Object.entries(spec.of)) {\n      if (subSpec.type === \"ref\") relations.push({ field: `${key}.${subKey}`, kind: \"ref\", to: subSpec.to });\n    }\n  }\n  return relations;\n}\n\n/** Count the record files in a collection's data dir — the same\n *  `<id>.json` entries `listItems` considers, WITHOUT parsing them (the\n *  ontology is a summary; a malformed record is still a record). Each\n *  candidate is classified by the SHARED `isRegularFile` lstat helper —\n *  the exact file-disclosure defense `listItems` applies — so a\n *  symlinked record never counts and the count can't diverge from the\n *  readable set on any filesystem (Codex review on PR #2099, twice).\n *  Fail-soft: a missing dir or a dataDir escaping the workspace via\n *  symlink counts 0. */\nasync function countRecordFiles(dataDir: string, workspaceRoot: string): Promise<number> {\n  if (!isContainedInRoot(dataDir, workspaceRoot)) return 0;\n  try {\n    const names = (await readdir(dataDir)).filter((name) => name.endsWith(\".json\") && !name.startsWith(\".\"));\n    const checks = await Promise.all(names.map((name) => isRegularFile(path.join(dataDir, name))));\n    return checks.filter(Boolean).length;\n  } catch {\n    return 0;\n  }\n}\n\n/** A collection's record count for the ontology. File-backed: the cheap\n *  readdir count. `dataSource`-backed: the row count via the CSV store\n *  (subject to its row cap) — the dataDir is a phantom there, so the\n *  readdir count would always misreport 0. Fail-soft to 0 like\n *  `countRecordFiles` (an unreadable file / missing DuckDB must not\n *  break the whole ontology). */\nasync function countRecords(collection: LoadedCollection, workspaceRoot: string): Promise<number> {\n  if (!collectionWritable(collection)) {\n    try {\n      return (await storeFor(collection, { workspaceRoot }).list()).length;\n    } catch {\n      return 0;\n    }\n  }\n  return countRecordFiles(collection.dataDir, workspaceRoot);\n}\n\nasync function toOntologyEntry(collection: LoadedCollection, workspaceRoot: string): Promise<CollectionOntologyEntry> {\n  const { schema } = collection;\n  return {\n    slug: collection.slug,\n    title: schema.title,\n    icon: schema.icon,\n    primaryKey: schema.primaryKey,\n    displayField: schema.displayField ?? schema.primaryKey,\n    recordCount: await countRecords(collection, workspaceRoot),\n    relations: schemaRelations(schema),\n  };\n}\n\n/** Build the workspace ontology: every discovered collection (slug-sorted,\n *  discovery's order), each with its outbound relations and a\n *  readdir-cheap record count — fine to call on demand. */\nexport async function buildWorkspaceOntology(opts: DiscoveryOptions = {}): Promise<CollectionOntologyEntry[]> {\n  const workspaceRoot = opts.workspaceRoot ?? getWorkspaceRoot();\n  const collections = await discoverCollections(opts);\n  return Promise.all(collections.map((collection) => toOntologyEntry(collection, workspaceRoot)));\n}\n","// Server-side computed-field enrichment for collection records: the\n// host evaluates `derived` formulas (via the SHARED saturation loop in\n// src/utils/collections/deriveAll.ts — never a server reimplementation),\n// projects `toggle` fields off their enum, and resolves `embed` fields\n// to their fixed target record. The client does the same at render\n// time; this module gives server consumers (manageCollection getItems)\n// the same numbers the user sees on screen.\n\nimport { backlinkRows, projectBacklinkRow, rollupValue } from \"../core/backlinks\";\nimport { deriveAll, type DeriveRefRecords } from \"../core/deriveAll\";\nimport { loadCollection, type DiscoveryOptions } from \"./discovery\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport { storeFor } from \"./store\";\nimport { embedTargetId } from \"../core/schema\";\nimport type { CollectionFieldSpec, CollectionItem, CollectionSchema } from \"../core/schema\";\n\n/** Slugs of every collection referenced by a `ref` field — top-level\n *  and one level into `table` sub-fields (nested tables are\n *  schema-rejected). Mirrors the client's `uniqueRefTargets`. */\nfunction uniqueRefTargets(schema: CollectionSchema): string[] {\n  const targets = new Set<string>();\n  const walk = (fields: Record<string, CollectionFieldSpec>): void => {\n    for (const field of Object.values(fields)) {\n      if (field.type === \"ref\" && typeof field.to === \"string\" && field.to.length > 0) targets.add(field.to);\n      if (field.type === \"table\" && field.of) walk(field.of);\n    }\n  };\n  walk(schema.fields);\n  return [...targets];\n}\n\n/** Slugs of every collection referenced by an `embed` field (top-level\n *  only, like the client). */\nfunction uniqueEmbedTargets(schema: CollectionSchema): string[] {\n  const targets = new Set<string>();\n  for (const field of Object.values(schema.fields)) {\n    if (field.type === \"embed\" && typeof field.to === \"string\" && field.to.length > 0) targets.add(field.to);\n  }\n  return [...targets];\n}\n\n/** Slugs of every SOURCE collection a `backlinks` or `rollup` field\n *  reverses over — loaded exactly like ref/embed targets (whole\n *  collection, once; the two field kinds share one load). */\nfunction uniqueBacklinkSources(schema: CollectionSchema): string[] {\n  const sources = new Set<string>();\n  for (const field of Object.values(schema.fields)) {\n    if ((field.type === \"backlinks\" || field.type === \"rollup\") && field.from.length > 0) sources.add(field.from);\n  }\n  return [...sources];\n}\n\ninterface LinkedTarget {\n  schema: CollectionSchema;\n  /** primary-key slug → record (ref targets store the DERIVED record,\n   *  mirroring the client's `buildRefRecordMap`, so a formula deref\n   *  like `ticker.price` can read the target's own derived columns). */\n  byId: Record<string, CollectionItem>;\n}\n\nasync function loadTarget(slug: string, opts: DiscoveryOptions): Promise<LinkedTarget | null> {\n  const target = await loadCollection(slug, opts);\n  if (!target) return null;\n  const items = await storeFor(target, { workspaceRoot: opts.workspaceRoot }).list();\n  const byId: Record<string, CollectionItem> = {};\n  for (const item of items) {\n    const itemId = item[target.schema.primaryKey];\n    if (typeof itemId === \"string\" && itemId.length > 0) byId[itemId] = deriveAll(target.schema, item, {});\n  }\n  return { schema: target.schema, byId };\n}\n\n/** Load every ref/embed target and backlink source collection once.\n *  Unknown / unloadable targets are simply absent — downstream derefs\n *  resolve to null (em-dash) and backlinks to an empty row set, the\n *  same fail-soft the UI renders. */\nasync function loadLinkedTargets(schema: CollectionSchema, opts: DiscoveryOptions): Promise<Record<string, LinkedTarget>> {\n  const slugs = [...new Set([...uniqueRefTargets(schema), ...uniqueEmbedTargets(schema), ...uniqueBacklinkSources(schema)])];\n  const loaded: Record<string, LinkedTarget> = {};\n  for (const slug of slugs) {\n    const target = await loadTarget(slug, opts);\n    if (target) loaded[slug] = target;\n  }\n  return loaded;\n}\n\nfunction toRefRecords(linked: Record<string, LinkedTarget>): DeriveRefRecords {\n  return Object.fromEntries(Object.entries(linked).map(([slug, target]) => [slug, target.byId]));\n}\n\n/** The matching source rows for one `backlinks` field, projected to the\n *  source primaryKey + `display` columns — so getItems on a\n *  heavily-referenced record stays a summary, not a dump of the source\n *  collection. Missing source ⇒ [] (fail-soft). The rows come from the\n *  DERIVED source records (`byId`), so `display`/`filter` on a derived\n *  source column (an invoice `total`) works. */\nfunction projectBacklinks(\n  field: Extract<CollectionFieldSpec, { type: \"backlinks\" }>,\n  schema: CollectionSchema,\n  enriched: CollectionItem,\n  linked: Record<string, LinkedTarget>,\n): CollectionItem[] {\n  const source = linked[field.from];\n  if (!source) return [];\n  const selfId = String(enriched[schema.primaryKey] ?? \"\");\n  return backlinkRows(field, selfId, Object.values(source.byId)).map((row) => projectBacklinkRow(row, field.display, source.schema.primaryKey));\n}\n\n/** Project the computed (never-stored) field kinds onto one derived\n *  record: `toggle` → boolean off its enum, `embed` → the target record\n *  (fixed `id` or per-record `idField`), or null when missing,\n *  `backlinks` → the matching source rows (see `projectBacklinks`). */\nfunction projectComputed(schema: CollectionSchema, enriched: CollectionItem, linked: Record<string, LinkedTarget>): CollectionItem {\n  for (const [key, field] of Object.entries(schema.fields)) {\n    if (field.type === \"toggle\" && field.field) {\n      enriched[key] = String(enriched[field.field] ?? \"\") === field.onValue;\n    }\n    if (field.type === \"embed\" && field.to) {\n      const targetId = embedTargetId(field, enriched);\n      enriched[key] = (targetId && linked[field.to]?.byId[targetId]) || null;\n    }\n    if (field.type === \"backlinks\") {\n      enriched[key] = projectBacklinks(field, schema, enriched, linked);\n    }\n  }\n  return enriched;\n}\n\n/** Resolve every rollup field onto a COPY of the record, BEFORE the\n *  formula pass — a `derived` formula may reference rollup values as\n *  plain identifiers (`played = homePlayed + awayPlayed`). Same reverse\n *  machinery as backlinks, collapsed to a number: an unresolvable source\n *  is null (a formula reading it fails soft to em-dash); an empty match\n *  set is a real 0. Returns `record` unchanged when the schema declares\n *  no rollups. */\nfunction projectRollups(schema: CollectionSchema, record: CollectionItem, linked: Record<string, LinkedTarget>): CollectionItem {\n  let out = record;\n  for (const [key, field] of Object.entries(schema.fields)) {\n    if (field.type !== \"rollup\") continue;\n    if (out === record) out = { ...record };\n    const source = linked[field.from];\n    const selfId = String(record[schema.primaryKey] ?? \"\");\n    out[key] = source ? rollupValue(field, selfId, Object.values(source.byId)) : null;\n  }\n  return out;\n}\n\n/** Enrich records with every host-computed field: derived formulas\n *  evaluated (cross-collection derefs included), toggles projected,\n *  embeds resolved. Loads each linked collection ONCE per call. Input\n *  records are not mutated. */\nexport async function enrichItems(collection: LoadedCollection, items: CollectionItem[], opts: DiscoveryOptions = {}): Promise<CollectionItem[]> {\n  const { schema } = collection;\n  const linked = await loadLinkedTargets(schema, opts);\n  const refRecords = toRefRecords(linked);\n  // Rollups FIRST (formulas may read them), then the formula pass, then\n  // the remaining projections — the client mirrors this order exactly\n  // (`deriveRecord` / `evaluateDerived` in collection-plugin).\n  return items.map((item) => projectComputed(schema, deriveAll(schema, projectRollups(schema, item, linked), refRecords), linked));\n}\n","// Server-side compute for a collection's dynamic launcher-shortcut icon\n// (see `CollectionSchema.dynamicIcon`). Wraps the pure resolver in\n// `../core/dynamicIcon` with the one bit of I/O it needs: loading the\n// source collection's raw stored records.\n\nimport { firstDateField, resolveIcon, selectDynamicRecord } from \"../core/dynamicIcon\";\nimport { loadCollection, type DiscoveryOptions } from \"./discovery\";\nimport { storeFor } from \"./store\";\nimport { log } from \"./host\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport type { CollectionItem } from \"../core/schema\";\n\n/** Index `items` by their `primaryKey` value — the `recordsById` map a\n *  `valueFrom` reference (e.g. `_config.defaultCity`) resolves against.\n *  Items whose primary key isn't a string (shouldn't happen for a valid\n *  schema, but records are untyped storage) are skipped rather than\n *  coerced, so a broken key never silently shadows a real one. */\nfunction buildRecordsById(items: CollectionItem[], primaryKey: string): Record<string, CollectionItem> {\n  const entries = items.filter((item) => typeof item[primaryKey] === \"string\").map((item): [string, CollectionItem] => [String(item[primaryKey]), item]);\n  return Object.fromEntries(entries);\n}\n\n/** Order records by their `primaryKey` so record selection is deterministic:\n *  `listItems` returns filesystem `readdir` order (arbitrary across machines),\n *  which would let `from: \"first\"`, the no-`orderBy` `latest`, and `orderBy`\n *  ties pick a different record — and thus a different icon — between\n *  reconciles. A stable id sort pins one answer. */\nfunction sortByPrimaryKey(items: CollectionItem[], primaryKey: string): CollectionItem[] {\n  return [...items].sort((left, right) => String(left[primaryKey] ?? \"\").localeCompare(String(right[primaryKey] ?? \"\")));\n}\n\n/** Compute the effective launcher icon for `collection`: its static\n *  `schema.icon` when it declares no `dynamicIcon`, else the icon\n *  resolved from `dynamicIcon.source`'s RAW stored records (no\n *  derive/enrich — the icon rules match against stored values) via the\n *  pure resolver. Fails soft on any read/discovery error (missing source\n *  collection, filesystem error): falls back to `dynamicIcon.fallback ??\n *  schema.icon` rather than surfacing to the collections list. */\nexport async function computeCollectionIcon(collection: LoadedCollection, opts: DiscoveryOptions = {}): Promise<string> {\n  const { schema } = collection;\n  const spec = schema.dynamicIcon;\n  if (!spec) return schema.icon;\n  try {\n    const source = await loadCollection(spec.source.collection, opts);\n    if (!source) return spec.fallback ?? schema.icon;\n    const items = await storeFor(source, { workspaceRoot: opts.workspaceRoot }).list();\n    const ordered = sortByPrimaryKey(items, source.schema.primaryKey);\n    const orderBy = spec.source.orderBy ?? firstDateField(source.schema);\n    const recordsById = buildRecordsById(ordered, source.schema.primaryKey);\n    const record = selectDynamicRecord(ordered, spec.source, orderBy, recordsById);\n    return resolveIcon(record, spec, schema.icon, recordsById);\n  } catch (err) {\n    log.warn(\"collections\", \"dynamic icon compute failed, falling back\", {\n      slug: collection.slug,\n      source: spec.source.collection,\n      error: String(err),\n    });\n    return spec.fallback ?? schema.icon;\n  }\n}\n","// Tiny self-contained helpers ported from the host (server/utils/errors.ts,\n// server/utils/time.ts) so the engine carries no dependency on host utils.\n\n/** Human-readable message from an unknown thrown value. */\nexport function errorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\nexport const ONE_SECOND_MS = 1_000;\nexport const ONE_DAY_MS = 24 * 60 * 60 * 1000;\n","// Host-driven recurrence for schema-driven collections.\n//\n// When a record satisfies its schema's `spawn.when` predicate (default:\n// the item is \"done\" per completionField/completionDoneValues), the host\n// creates the NEXT record with a forward-advanced `triggerField` date.\n//\n// The mechanism is CONVERGENT, not event-driven: we reconcile on a\n// predicate (\"matches `when` AND its successor doesn't exist yet\"), and\n// the successor's id + contents are a pure function of (source record,\n// rule). Creation is create-if-absent (`writeItem`'s `refuseOverwrite`),\n// so observing the predicate N times writes the successor exactly once —\n// the successor record's own existence is the \"already spawned?\" flag.\n// No stored side-state, so fs.watch coalescing / boot re-reads / the\n// wall-clock tick can all re-run this freely.\n//\n// All date math operates on the civil (year, month, day) triple — never\n// by adding milliseconds — so month lengths and leap years are handled\n// correctly. The day-of-month anchor is read from the RULE, never\n// re-derived from the prior concrete date, so \"31st of every month\"\n// never drifts (it clamps per-month at compute time, not stored\n// clamped). See `advanceTriggerDate`.\n\nimport { log } from \"./host\";\nimport { errorMessage, ONE_DAY_MS } from \"./util\";\nimport { writeItem, type IoOptions } from \"./io\";\nimport { isFieldDrivenEvery } from \"../core/schema\";\nimport { itemIsDone } from \"../core/completion\";\nimport type { CollectionEvery, CollectionItem, CollectionSchema, CollectionSpawnEvery, CollectionWhen } from \"../core/schema\";\n\n/** A timezone-free calendar date. `m` is 1-12. */\nexport interface CivilDate {\n  y: number;\n  m: number;\n  d: number;\n}\n\nconst YMD_PATTERN = /^(\\d{4})-(\\d{2})-(\\d{2})$/;\n\nfunction pad2(value: number): string {\n  return String(value).padStart(2, \"0\");\n}\n\nfunction pad4(value: number): string {\n  return String(value).padStart(4, \"0\");\n}\n\n/** Days in `month` (1-12) of `year`, leap-year-aware. `new Date(y, m, 0)`\n *  is day 0 of the *next* month = the last day of `month`; `.getDate()`\n *  reads the civil day regardless of timezone. */\nexport function daysInMonth(year: number, month: number): number {\n  return new Date(year, month, 0).getDate();\n}\n\n/** Parse a `YYYY-MM-DD` string into a CivilDate, or null when the value\n *  isn't a well-formed in-range calendar date. */\nexport function parseCivil(raw: unknown): CivilDate | null {\n  if (typeof raw !== \"string\") return null;\n  const match = YMD_PATTERN.exec(raw.trim());\n  if (!match) return null;\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  if (month < 1 || month > 12) return null;\n  if (day < 1 || day > daysInMonth(year, month)) return null;\n  return { y: year, m: month, d: day };\n}\n\n/** `YYYY-MM-DD` for storage in a `date` field. */\nexport function formatCivil(date: CivilDate): string {\n  return `${pad4(date.y)}-${pad2(date.m)}-${pad2(date.d)}`;\n}\n\n/** A monotonic integer key for a civil date (YYYYMMDD), for ordering /\n *  equality without timezone concerns. */\nfunction ordinal(date: CivilDate): number {\n  return date.y * 10000 + date.m * 100 + date.d;\n}\n\n/** Add `n` whole days to a civil date. Uses UTC epoch arithmetic so it\n *  is DST-immune (we only ever read back the civil Y/M/D). */\nfunction addDays(date: CivilDate, days: number): CivilDate {\n  const shifted = new Date(Date.UTC(date.y, date.m - 1, date.d) + days * ONE_DAY_MS);\n  return { y: shifted.getUTCFullYear(), m: shifted.getUTCMonth() + 1, d: shifted.getUTCDate() };\n}\n\n/** Advance a civil date by one `every` step. Month/year units preserve\n *  the rule's day-of-month anchor, clamped to the target month's length\n *  (no drift); day/week units do civil day arithmetic. */\nexport function advanceTriggerDate(source: CivilDate, every: CollectionEvery): CivilDate {\n  const { unit, interval } = every;\n  if (unit === \"day\") return addDays(source, interval);\n  if (unit === \"week\") return addDays(source, interval * 7);\n  // month / year\n  const monthsToAdd = interval * (unit === \"year\" ? 12 : 1);\n  const total = source.y * 12 + (source.m - 1) + monthsToAdd;\n  const nextYear = Math.floor(total / 12);\n  const nextMonth = (total % 12) + 1;\n  const dim = daysInMonth(nextYear, nextMonth);\n  const anchor = every.dayOfMonth === \"last\" ? dim : (every.dayOfMonth ?? source.d);\n  return { y: nextYear, m: nextMonth, d: Math.min(anchor, dim) };\n}\n\n/** True iff `now`'s civil date (local timezone) has reached the fire date\n *  for `triggerRaw` — i.e. the trigger date minus `leadDays` (so a 10-day\n *  lead fires 10 days early). Returns null when `triggerRaw` isn't a\n *  parseable date — callers treat that as \"don't fire\" and warn. */\nexport function isTriggerDue(triggerRaw: unknown, now: Date, leadDays = 0): boolean | null {\n  const due = parseCivil(triggerRaw);\n  if (due === null) return null;\n  const fireDate = leadDays > 0 ? addDays(due, -leadDays) : due;\n  const today: CivilDate = { y: now.getFullYear(), m: now.getMonth() + 1, d: now.getDate() };\n  return ordinal(today) >= ordinal(fireDate);\n}\n\nconst DATE_SUFFIX_PATTERN = /-\\d{8}$/;\n\n/** Deterministic successor id: `<stem>-<YYYYMMDD>`, where `<stem>` is the\n *  source id with a trailing `-YYYYMMDD` stripped if present. So a chain\n *  shares one stem and each instance is dated:\n *    `rent`           → `rent-20260610`\n *    `rent-20260610`  → `rent-20260710`\n *  Slug-safe (alphanumeric + hyphen) and a pure function of the inputs,\n *  which is what makes create-if-absent idempotent. */\nexport function successorId(sourceId: string, next: CivilDate): string {\n  const stem = sourceId.replace(DATE_SUFFIX_PATTERN, \"\");\n  return `${stem}-${pad4(next.y)}${pad2(next.m)}${pad2(next.d)}`;\n}\n\n/** True iff `item` satisfies the spawn predicate. With an explicit\n *  `when`, matches `String(item[when.field]) ∈ when.in`. Without one,\n *  defaults to the completion-done condition — the shared, flag-aware\n *  `itemIsDone` (core/completion; downhill import, so the module graph\n *  stays acyclic). */\nfunction matchesWhen(when: CollectionWhen | undefined, schema: CollectionSchema, item: CollectionItem): boolean {\n  if (when) {\n    const raw = item[when.field];\n    return raw !== undefined && raw !== null && when.in.includes(String(raw));\n  }\n  return itemIsDone(schema, item);\n}\n\n/** Resolve the literal `every` that applies to `sourceItem`. Literal-arm\n *  `spawn.every` passes through unchanged. Field-driven `spawn.every` reads\n *  `sourceItem[fromField]` and looks it up in `map`; an empty field or a\n *  value with no map entry yields null (caller skips + logs — see plan §5).\n *  Discovery rejects a map that doesn't cover the enum's values, so null\n *  here means a record that predates a map/enum edit. */\nexport function resolveEvery(every: CollectionSpawnEvery, sourceItem: CollectionItem): CollectionEvery | null {\n  if (!isFieldDrivenEvery(every)) return every;\n  const raw = sourceItem[every.fromField];\n  if (raw === undefined || raw === null || raw === \"\") return null;\n  return every.map[String(raw)] ?? null;\n}\n\nexport interface ComputedSuccessor {\n  id: string;\n  record: CollectionItem;\n}\n\n/** Build the successor record purely from (schema, source record, source\n *  id). Returns null when the schema has no spawn/triggerField or the\n *  source's trigger date is unparseable. */\nexport function computeSuccessor(schema: CollectionSchema, sourceItem: CollectionItem, sourceId: string): ComputedSuccessor | null {\n  const { spawn, triggerField } = schema;\n  if (!spawn || !triggerField) return null;\n  const srcDate = parseCivil(sourceItem[triggerField]);\n  if (srcDate === null) return null;\n  const every = resolveEvery(spawn.every, sourceItem);\n  if (every === null) return null;\n  const next = advanceTriggerDate(srcDate, every);\n  const nextId = successorId(sourceId, next);\n  const record: CollectionItem = {};\n  for (const field of spawn.carry ?? []) {\n    if (Object.prototype.hasOwnProperty.call(sourceItem, field)) record[field] = sourceItem[field];\n  }\n  Object.assign(record, spawn.set ?? {});\n  record[triggerField] = formatCivil(next);\n  record[schema.primaryKey] = nextId;\n  return { id: nextId, record };\n}\n\n/** Warn precisely about which of `computeSuccessor`'s two null causes fired\n *  (plan §5): an unparseable source trigger date (the original cause), or a\n *  field-driven `every` whose record value has no `map` entry (a record that\n *  predates a map/enum edit — discovery rejects this statically otherwise). */\nfunction logSpawnSkip(slug: string, triggerField: string, every: CollectionSpawnEvery, sourceItem: CollectionItem, sourceId: string): void {\n  if (parseCivil(sourceItem[triggerField]) === null) {\n    log.warn(\"collections\", \"spawn skipped: source trigger date unparseable\", { slug, sourceId, triggerField });\n    return;\n  }\n  const fromField = isFieldDrivenEvery(every) ? every.fromField : undefined;\n  log.warn(\"collections\", \"spawn skipped: no `every` mapping for frequency value\", {\n    slug,\n    sourceId,\n    fromField,\n    value: fromField === undefined ? undefined : sourceItem[fromField],\n  });\n}\n\n/** Idempotently create the successor for `sourceItem` when it matches the\n *  spawn predicate. No-op when the schema declares no spawn, the\n *  predicate doesn't match, the trigger date is unparseable, or the\n *  successor already exists (create-if-absent). Never overwrites an\n *  existing successor — protects any edits the user made to it. */\nexport async function maybeSpawnSuccessor(\n  slug: string,\n  schema: CollectionSchema,\n  dataDir: string,\n  sourceItem: CollectionItem,\n  sourceId: string,\n  ioOpts: IoOptions = {},\n): Promise<void> {\n  const { spawn } = schema;\n  if (!spawn || !schema.triggerField) return;\n  if (!matchesWhen(spawn.when, schema, sourceItem)) return;\n  const computed = computeSuccessor(schema, sourceItem, sourceId);\n  if (computed === null) {\n    logSpawnSkip(slug, schema.triggerField, spawn.every, sourceItem, sourceId);\n    return;\n  }\n  // Runaway guard: a successor born already matching its own `when` would\n  // re-spawn on its first reconcile (and so on) — an unbounded chain. A\n  // well-formed schema sets the successor to a non-matching state (e.g.\n  // `set: { status: \"pending\" }`); refuse + warn if it doesn't. Discovery\n  // also rejects this statically, so this is belt-and-suspenders.\n  if (matchesWhen(spawn.when, schema, computed.record)) {\n    log.warn(\"collections\", \"spawn skipped: successor would be born matching its own predicate (unbounded respawn)\", {\n      slug,\n      sourceId,\n      successorId: computed.id,\n    });\n    return;\n  }\n  try {\n    const result = await writeItem(dataDir, computed.id, computed.record, { ...ioOpts, refuseOverwrite: true, slug });\n    if (result.kind === \"ok\") {\n      log.info(\"collections\", \"spawned successor\", { slug, sourceId, successorId: computed.id });\n    } else if (result.kind !== \"conflict\") {\n      // \"conflict\" = successor already exists = idempotent no-op (expected).\n      log.warn(\"collections\", \"spawn write failed\", { slug, sourceId, successorId: computed.id, kind: result.kind });\n    }\n  } catch (err) {\n    log.warn(\"collections\", \"spawn write threw\", { slug, sourceId, successorId: computed.id, error: errorMessage(err) });\n  }\n}\n","// Delete a user-authored collection, archiving a full restorable copy\n// first. A collection spans three on-disk locations (see\n// docs/papers/collections-architecture.md \"Deleting a collection\"):\n//\n//   1. data/skills/<slug>/    staging — the canonical skill source\n//   2. .claude/skills/<slug>/ active mirror — what discovery scans\n//   3. <schema.dataPath>/     the records (one <id>.json per record)\n//\n// Locations 1 and 2 are a source→mirror pair maintained by the\n// skill-bridge hook, but that hook only fires on the agent's own tool\n// calls — a server-side delete must remove BOTH explicitly. Before\n// anything is removed we write a single skill copy (from the canonical\n// staging dir), the records, and an LLM-runnable RESTORE.md to\n// `archive/<date>-<uuid>/`.\n//\n// Only project-scope, non-preset collections are deletable: user-scope\n// skills (`~/.claude/skills/`) are read-only from MulmoClaude, and a\n// preset (`mc-*`) re-seeds on next boot so deleting it is futile.\n\nimport { cp, mkdir, rm, rmdir, stat, writeFile } from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport path from \"node:path\";\nimport { log, getWorkspaceRoot, isPresetSlug, skillsStagingDir, archiveDir as archiveRelDir } from \"./host\";\nimport { isContainedInRoot } from \"./paths\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\n\nexport type DeleteCollectionResult =\n  | { kind: \"ok\"; slug: string; archivePath: string }\n  | { kind: \"user-scope\"; slug: string }\n  | { kind: \"preset\"; slug: string }\n  | { kind: \"unsafe-data-path\"; slug: string }\n  | { kind: \"path-escape\"; slug: string };\n\ntype DeleteRefusal = Exclude<DeleteCollectionResult, { kind: \"ok\" }>;\n\n/** Human-readable reason for a non-`ok` delete result. Exported so the\n *  route maps `kind` → message without inlining the switch (keeps the\n *  handler short and the mapping unit-testable). The `Record` is\n *  exhaustive — a new refusal kind won't compile until it's added. */\nexport function deleteCollectionRefusalMessage(result: DeleteRefusal): string {\n  const { slug } = result;\n  const messages: Record<DeleteRefusal[\"kind\"], string> = {\n    \"user-scope\": `collection '${slug}' is user-scope (~/.claude/skills/) and is read-only from MulmoClaude`,\n    preset: `collection '${slug}' is a preset (mc-*) and re-seeds on restart; unstar it from the catalog instead`,\n    \"unsafe-data-path\": `collection '${slug}' declares a dataPath outside its own data/${slug}/ subtree; refusing to delete`,\n    \"path-escape\": `a directory for collection '${slug}' escapes the workspace`,\n  };\n  return messages[result.kind];\n}\n\nexport interface DeleteCollectionOptions {\n  /** Override the workspace root for containment checks + archive\n   *  placement. Default: the live `workspacePath`. Tests point this at\n   *  a `mkdtempSync` tree (same pattern as the IO helpers). */\n  workspaceRoot?: string;\n  /** Override the `<date>` half of the archive folder name. Tests pass\n   *  a fixed stamp so the asserted path is deterministic; production\n   *  leaves it unset and the current UTC date (YYYY-MM-DD) is used. */\n  dateStamp?: string;\n}\n\n/** The canonical staging dir for a slug: `data/skills/<slug>`. */\nfunction stagingSkillDir(workspaceRoot: string, slug: string): string {\n  return path.join(skillsStagingDir(workspaceRoot), slug);\n}\n\nasync function pathExists(target: string): Promise<boolean> {\n  try {\n    await stat(target);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** UTC `YYYY-MM-DD` — keeps the archive folder human-sortable. */\nfunction todayStamp(): string {\n  return new Date().toISOString().slice(0, 10);\n}\n\n/** Every directory the delete will touch must resolve under the\n *  workspace root — guards against a symlinked ancestor escaping it. */\nfunction deleteTargets(collection: LoadedCollection, workspaceRoot: string): string[] {\n  return [stagingSkillDir(workspaceRoot, collection.slug), collection.skillDir, collection.dataDir];\n}\n\n/** The records directory the delete recursively archives + removes\n *  (`collection.dataDir`) must live in this collection's OWN per-slug\n *  subtree. `dataDir` is normally derived from `schema.dataPath`, but\n *  `deleteCollection` accepts a `LoadedCollection` whose fields could be\n *  inconsistent — so we validate the RESOLVED target the destructive ops\n *  actually touch, not the schema string. A shared root like `data` or\n *  `data/skills` would otherwise turn the recursive removal into a\n *  workspace-wide wipe whose archive captures only this collection.\n *  `path.resolve` collapses any `..` before the prefix test (symlink\n *  escapes are caught separately by the realpath containment check in\n *  `deleteTargets`).\n *\n *  TWO acceptable per-slug subtrees:\n *    - `data/<slug>/...` — the convention authored collections default to.\n *    - `data/collections/<slug>/...` — what `normalizedDataPath` in the\n *      registry-import path stamps onto every imported schema (so imported\n *      collections never collide with `data/<slug>/`-shaped authored ones).\n *  Both are equally per-collection and equally safe; a delete that targets\n *  anything else (e.g. raw `data/`, `data/wiki/`, a sibling slug) is\n *  refused. */\nfunction isDataDirSafe(dataDir: string, slug: string, workspaceRoot: string): boolean {\n  const acceptableRoots = [path.resolve(workspaceRoot, \"data\", slug), path.resolve(workspaceRoot, \"data\", \"collections\", slug)];\n  const resolved = path.resolve(dataDir);\n  return acceptableRoots.some((root) => resolved === root || resolved.startsWith(root + path.sep));\n}\n\n/** Step 2 of the restore doc — how to bring the records back. A\n *  `dataSource` collection has no record files to copy (its rows live in\n *  the external data file, which the delete never touches). */\nfunction restoreRecordsStep(schema: LoadedCollection[\"schema\"]): string {\n  if (schema.dataPath === undefined) {\n    return `2. Records: nothing to copy. This is a \\`dataSource\\` collection —\n   its records are the rows of \\`${schema.dataSource?.path}\\`, which the\n   delete never touched.`;\n  }\n  return `2. Copy the item data: \\`cp\\` every file under \\`records/\\` into\n   \\`${schema.dataPath}/\\`. The records are part of the collection and\n   must be restored. They are plain data files (NOT bridged), so use\n   \\`cp\\` — the Write-tool rule in step 1 applies ONLY to the skill\n   files, not to these records (there may be many; copy them, do not\n   Write them one by one).`;\n}\n\nfunction buildRestoreDoc(collection: LoadedCollection): string {\n  const { slug, schema } = collection;\n  return `# Restore \"${schema.title}\" (collection \\`${slug}\\`)\n\nThis folder is an automatic backup made when the collection was deleted.\nFollow these steps to restore it.\n\n1. Recreate the skill files in \\`data/skills/${slug}/\\` using the **Write\n   tool**: read each file under \\`skill/\\` and Write it to the matching\n   path — \\`SKILL.md\\`, \\`schema.json\\`, and any \\`templates/*\\`.\n\n   IMPORTANT — use the Write tool, NOT \\`cp\\` / \\`mv\\` / a shell redirect.\n   The skill-bridge hook mirrors \\`data/skills/${slug}/\\` into\n   \\`.claude/skills/${slug}/\\`, and that mirror is what actually registers\n   the collection. The hook only fires on Write/Edit tool calls, so a\n   \\`cp\\` would leave the files in staging with no \\`.claude/skills/\\`\n   mirror — the collection would stay invisible. (Writing\n   \\`.claude/skills/\\` directly is not an option either: that path is\n   permission-gated.)\n\n${restoreRecordsStep(schema)}\n\n3. Confirm the collection reappears at \\`/collections/${slug}\\`.\n\n- slug: \\`${slug}\\`\n- title: ${schema.title}\n- dataPath: \\`${schema.dataPath ?? `(dataSource) ${schema.dataSource?.path}`}\\`\n`;\n}\n\n/** Copy one skill copy + the records + RESTORE.md into `archiveDir`. */\nasync function writeArchive(collection: LoadedCollection, archiveDir: string, workspaceRoot: string): Promise<void> {\n  // Prefer the canonical staging dir; fall back to the active mirror\n  // for a project collection that was created without the bridge.\n  const staging = stagingSkillDir(workspaceRoot, collection.slug);\n  const skillSrc = (await pathExists(staging)) ? staging : collection.skillDir;\n  await cp(skillSrc, path.join(archiveDir, \"skill\"), { recursive: true });\n  if (await pathExists(collection.dataDir)) {\n    await cp(collection.dataDir, path.join(archiveDir, \"records\"), { recursive: true });\n  }\n  await writeFile(path.join(archiveDir, \"RESTORE.md\"), buildRestoreDoc(collection), \"utf-8\");\n}\n\n/** Remove all three locations. `rm -rf`-style (force) so a missing dir\n *  is a no-op; the now-empty data parent (`data/<slug>/` after its\n *  `items/` is gone) is swept too, but only when empty. */\nasync function removeLocations(collection: LoadedCollection, workspaceRoot: string): Promise<void> {\n  await rm(stagingSkillDir(workspaceRoot, collection.slug), { recursive: true, force: true });\n  await rm(collection.skillDir, { recursive: true, force: true });\n  await rm(collection.dataDir, { recursive: true, force: true });\n  await rmdir(path.dirname(collection.dataDir)).catch(() => undefined);\n}\n\nexport async function deleteCollection(collection: LoadedCollection, opts: DeleteCollectionOptions = {}): Promise<DeleteCollectionResult> {\n  const { slug } = collection;\n  const workspaceRoot = opts.workspaceRoot ?? getWorkspaceRoot();\n  if (collection.source === \"user\") return { kind: \"user-scope\", slug };\n  if (isPresetSlug(slug)) return { kind: \"preset\", slug };\n  if (!isDataDirSafe(collection.dataDir, slug, workspaceRoot)) {\n    log.warn(\"collections\", \"deleteCollection refused: dataDir is not under the per-collection root\", { slug, dataDir: collection.dataDir });\n    return { kind: \"unsafe-data-path\", slug };\n  }\n  if (deleteTargets(collection, workspaceRoot).some((target) => !isContainedInRoot(target, workspaceRoot))) {\n    log.warn(\"collections\", \"deleteCollection refused: a target escapes the workspace\", { slug });\n    return { kind: \"path-escape\", slug };\n  }\n  const archiveRel = path.join(archiveRelDir(), `${opts.dateStamp ?? todayStamp()}-${randomUUID()}`);\n  const archiveDir = path.join(workspaceRoot, archiveRel);\n  await mkdir(archiveDir, { recursive: true });\n  await writeArchive(collection, archiveDir, workspaceRoot);\n  await removeLocations(collection, workspaceRoot);\n  log.info(\"collections\", \"collection deleted + archived\", { slug, archive: archiveRel });\n  return { kind: \"ok\", slug, archivePath: archiveRel };\n}\n","// Server-side custom-view management: removing a collection's custom view.\n//\n// A custom view spans two on-disk facts that must be removed together:\n//   1. an entry in the collection's schema.json `views[]` array\n//   2. its HTML file at `<base>/views/<file>` (the entry's `file` field)\n//\n// The base dir is source-aware, mirroring `readCustomViewHtml`. A PROJECT\n// collection authored in-place keeps schema + view HTML in the staging tree\n// (`data/skills/<slug>/`) AND mirrors schema into the active dir\n// (`.claude/skills/<slug>/`, i.e. `collection.skillDir`). A PROJECT collection\n// IMPORTED via the discover panel (rename-on-conflict) lives entirely under\n// the active dir — no staging mirror is created. We pick the canonical base\n// (and the schema-write set) by *what's actually on disk*, so both layouts\n// delete cleanly without ENOENT. The skill-bridge hook that normally keeps\n// staging+active in sync only fires on the agent's own tool calls, never from\n// an API route — exactly as `deleteCollection` reasons. A FEED / USER\n// collection is a single tree at `collection.skillDir`.\n//\n// Custom-view HTML is staging-only for project collections (never mirrored —\n// rendering is host-side), so only the canonical base's copy is unlinked.\n\nimport { readFile, stat, unlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { writeFileAtomic } from \"./atomic\";\nimport { getWorkspaceRoot, isPresetSlug, skillsStagingDir } from \"./host\";\nimport { resolveTemplatePath, safeSlugName, SCHEMA_FILE } from \"./paths\";\nimport type { IoOptions } from \"./io\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\n\nexport type DeleteViewResult =\n  | { kind: \"ok\"; viewId: string }\n  | { kind: \"not-found\"; viewId: string }\n  | { kind: \"user-scope\" }\n  | { kind: \"preset\" }\n  | { kind: \"unsafe-path\"; viewId: string };\n\nasync function fileExists(target: string): Promise<boolean> {\n  try {\n    await stat(target);\n    return true;\n  } catch (err) {\n    const { code } = err as { code?: string };\n    if (code === \"ENOENT\" || code === \"ENOTDIR\") return false;\n    throw err;\n  }\n}\n\n/** The authoritative base dir for a collection's schema.json + view HTML.\n *  For a project collection, prefer the staging tree when its schema.json is\n *  present (authoring layout); otherwise fall back to the active skill dir\n *  (imported layout — staging never materialised). For feed / user, it's\n *  always the discovered skillDir. Matches `readCustomViewHtml` so reads and\n *  deletes agree on both layouts. */\nasync function canonicalBase(collection: Pick<LoadedCollection, \"source\" | \"skillDir\">, workspaceRoot: string, safeSlug: string): Promise<string> {\n  if (collection.source !== \"project\") return collection.skillDir;\n  const staging = path.join(skillsStagingDir(workspaceRoot), safeSlug);\n  if (await fileExists(path.join(staging, SCHEMA_FILE))) return staging;\n  return collection.skillDir;\n}\n\n/** Every on-disk schema.json that must reflect the removal. The active\n *  `<skillDir>/schema.json` is the discovery anchor and is always present.\n *  The staging copy is included only when it actually exists, so an imported\n *  project collection (no staging mirror) doesn't have an empty staging tree\n *  materialised by a side effect of the delete. */\nasync function schemaWriteTargets(collection: Pick<LoadedCollection, \"source\" | \"skillDir\">, workspaceRoot: string, safeSlug: string): Promise<string[]> {\n  const active = path.join(collection.skillDir, SCHEMA_FILE);\n  if (collection.source !== \"project\") return [active];\n  const stagingSchema = path.join(skillsStagingDir(workspaceRoot), safeSlug, SCHEMA_FILE);\n  const targets: string[] = [];\n  if (await fileExists(stagingSchema)) targets.push(stagingSchema);\n  targets.push(active);\n  return targets;\n}\n\n/** Idempotent unlink — a missing file is fine (the schema entry still gets\n *  cleaned), but a real error (permissions, etc.) propagates. */\nasync function unlinkIfPresent(target: string): Promise<void> {\n  try {\n    await unlink(target);\n  } catch (err) {\n    if ((err as { code?: string }).code !== \"ENOENT\") throw err;\n  }\n}\n\n/** Re-read the canonical schema.json, drop the `views[]` entry, and write the\n *  result back to every on-disk copy so staging + active stay identical. Reads\n *  raw (not `collection.schema`) so fields the typed schema doesn't model are\n *  preserved verbatim. */\nasync function removeViewFromSchemas(collection: LoadedCollection, viewId: string, workspaceRoot: string, safeSlug: string): Promise<void> {\n  const base = await canonicalBase(collection, workspaceRoot, safeSlug);\n  const canonical = path.join(base, SCHEMA_FILE);\n  const parsed = JSON.parse(await readFile(canonical, \"utf-8\")) as { views?: { id?: unknown }[] };\n  if (Array.isArray(parsed.views)) parsed.views = parsed.views.filter((entry) => entry?.id !== viewId);\n  const serialized = `${JSON.stringify(parsed, null, 2)}\\n`;\n  for (const target of await schemaWriteTargets(collection, workspaceRoot, safeSlug)) {\n    await writeFileAtomic(target, serialized);\n  }\n}\n\n/** Delete one custom view from `collection`: unlink its HTML file and drop it\n *  from every schema.json copy. User-scope and preset (mc-*) collections are\n *  refused (read-only / re-seeded on boot), consistent with `deleteCollection`. */\nexport async function deleteCustomView(collection: LoadedCollection, viewId: string, opts: IoOptions = {}): Promise<DeleteViewResult> {\n  if (collection.source === \"user\") return { kind: \"user-scope\" };\n  if (isPresetSlug(collection.slug)) return { kind: \"preset\" };\n  const safeSlug = safeSlugName(collection.slug);\n  if (safeSlug === null) return { kind: \"unsafe-path\", viewId };\n  const views = collection.schema.views ?? [];\n  const view = views.find((entry) => entry.id === viewId);\n  if (!view) return { kind: \"not-found\", viewId };\n  const workspaceRoot = opts.workspaceRoot ?? getWorkspaceRoot();\n  const htmlPath = resolveTemplatePath(await canonicalBase(collection, workspaceRoot, safeSlug), view.file);\n  if (htmlPath === null) return { kind: \"unsafe-path\", viewId };\n  // Rewrite the schema BEFORE unlinking: if the write fails the request errors\n  // out, but the HTML stays put and the still-registered view keeps working —\n  // an orphaned `views[]` entry pointing at a deleted file would 404 forever.\n  await removeViewFromSchemas(collection, viewId, workspaceRoot, safeSlug);\n  // Distinct ids may point at the same `file` (unique ids are enforced, unique\n  // files are not), so only unlink when no remaining view still references it.\n  const stillReferenced = views.some((entry) => entry.id !== viewId && entry.file === view.file);\n  if (!stillReferenced) await unlinkIfPresent(htmlPath);\n  return { kind: \"ok\", viewId };\n}\n","// Preset-skill namespace — the ONE definition of \"is this a launcher-managed preset\n// skill\". Browser-safe (no node imports) so the Vue UI can import it via the package's\n// `./slug` entry while the server-only sync logic (`.` entry, uses node:fs) imports it\n// here too. Shared by MulmoClaude and MulmoTerminal so the `mc-` convention can't drift.\n\n/** Launcher preset namespace. Preset skills (and only those) are `mc-*`. */\nexport const PRESET_SLUG_PREFIX = \"mc-\";\n\n/** True for a launcher-managed preset slug (`mc-<something>`). The sync logic uses\n *  this to bound which active skills it may refresh/prune, so user-authored skills are\n *  never touched. */\nexport function isPresetSlug(slug: string): boolean {\n  return slug.startsWith(PRESET_SLUG_PREFIX) && slug.length > PRESET_SLUG_PREFIX.length;\n}\n","// `manageCollection` is the agent's data plane for schema-driven\n// collections — the paved road over the same record files that raw\n// Read/Write/Edit reach (the workspace stays the database; this tool is\n// a convenience + gate, not a second store):\n//\n//   - getItems: records WITH the host-computed fields the stored JSON\n//     never contains — `derived` formulas evaluated (cross-collection\n//     derefs included), `toggle` projected, `embed` resolved — i.e. the\n//     same numbers the user sees rendered. One call instead of N file\n//     Reads plus a mental join.\n//   - putItems: rows validated against the schema BEFORE the write\n//     (primaryKey↔id, required fields, enum membership, no computed\n//     keys), written atomically, with per-row accept/reject results the\n//     model can fix and retry — instead of writing a broken file and\n//     meeting it later in the presentCollection repair loop.\n//   - getOntology: the machine-readable workspace ontology — every\n//     collection with its record count and outbound ref/embed relations,\n//     so a cross-collection question starts from the map instead of\n//     re-reading every schema.\n//\n// It is also the paved road for a collection's STRUCTURE — so an edit\n// gets the same authoring reference + validation a create does:\n//\n//   - schemaDocs: the collection-authoring reference (`collection-skills.md`)\n//     delivered as a method, so the agent never needs to know the help\n//     file's path or that it exists — the gap that made schema EDITS fail\n//     (create-time prompts point at the doc; edit-time had no pointer).\n//   - getSchema / putSchema: read the raw schema.json, and validate it\n//     against `CollectionSchemaZ` BEFORE writing the canonical staging\n//     copy + mirroring it active (an internal write skips the skill-bridge\n//     hook, so the mirror is explicit). Edit-only; creation stays the\n//     normal \"write SKILL.md + schema.json under data/skills/\" flow.\n//\n// Shared by both hosts (MulmoClaude's mcp-tools shim + MulmoTerminal):\n// everything host-specific rides in `ManageCollectionDeps` — the\n// workspace root falls back to the configured collection host\n// (`getWorkspaceRoot`), the post-putSchema UI refresh and the\n// evaluation-only validation ablation are injected, and tests point the\n// whole tool at a tmpdir workspace via the same deps.\n\nimport { readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { COMPUTED_TYPES } from \"../core/schema\";\nimport type { CollectionItem, CollectionSchema } from \"../core/schema\";\nimport { CollectionSchemaZ } from \"../core/schemaZ\";\nimport { CollectionQueryZ } from \"../core/queryZ\";\nimport { defangForPrompt } from \"../core/promptSafety\";\nimport { loadCollection, type DiscoveryOptions } from \"./discovery\";\nimport type { LoadedCollection } from \"./discoveredCollection\";\nimport { readItem, resolveCreateItemId, writeItem } from \"./io\";\nimport { collectionWritable, readOnlyRefusal, storeFor } from \"./store\";\nimport { runQueryOverRows } from \"./jsonlQuery\";\nimport { enrichItems } from \"./derive\";\nimport { validateCollectionRecords, validateRecordObject } from \"./validate\";\nimport { buildWorkspaceOntology } from \"./ontology\";\nimport { resolveDataDir } from \"./paths\";\nimport { getWorkspaceRoot } from \"./host\";\nimport { writeFileAtomic } from \"./atomic\";\nimport { dataSkillDir, mirrorSkillWrite } from \"../../skill-bridge/index.js\";\n// NOTE: only the browser-safe `slug` module — workspace-setup's assets.ts uses\n// `import.meta.url` and is ESM-only (build pass 2), while this entry builds\n// dual ESM+CJS. The bundled-docs dir is injected instead (`bundledHelpsDir`).\nimport { isPresetSlug } from \"../../workspace-setup/slug\";\n\n/** Refuse an unselective getItems beyond this many records — a silent\n *  truncation would read as \"covered everything\", and an unbounded dump\n *  of a large collection is a token bomb. `ids` or `fields` lifts it. */\nexport const MAX_UNSELECTIVE_ITEMS = 200;\n\n/** schema.json basename under a skill dir (canonical staging + active mirror). */\nconst SCHEMA_FILE = \"schema.json\";\n/** The collection-authoring reference, served by the `schemaDocs` action. */\nconst SCHEMA_DOCS_FILE = \"collection-skills.md\";\n/** Cap the rejected-schema issue list so a deeply-broken schema can't flood the result. */\nexport const MAX_SCHEMA_ISSUES = 20;\n/** The workspace help-docs dir both hosts seed (`@mulmoclaude/core/workspace-setup`\n *  syncs the bundled assets here) — the user-editable copy schemaDocs prefers. */\nconst HELPS_DIR = \"config/helps\";\n\n/** Workspace-targeting overrides, threaded to every collections call.\n *  Production: `{}` (the configured collection host's workspace).\n *  Tests: a tmpdir + empty user skills dir. `refreshAfterWrite` is the\n *  best-effort UI-refresh fired after a `putSchema` write — hosts with\n *  schema-driven side state (MulmoClaude's scheduled skills / user\n *  tasks) inject their refreshers; omitted, no refresh runs (discovery\n *  re-reads schema.json on every call, so only a live UI update is\n *  delayed, never the data). */\nexport type ManageCollectionDeps = DiscoveryOptions & {\n  refreshAfterWrite?: () => Promise<void>;\n  /** Evaluation-only: skip pre-write record validation in putItems and\n   *  the getItems record-issue scan. MulmoClaude's production singleton\n   *  binds this from its ablation env; leave unset everywhere else. */\n  ablateValidation?: boolean;\n  /** The host's bundled help-docs dir (workspace-setup's `helpsAssetDir()`)\n   *  — the `schemaDocs` fallback when the workspace has no `config/helps`\n   *  copy. Injected because that module is ESM-only (`import.meta.url`)\n   *  while this entry builds dual ESM+CJS. Omitted, only the workspace\n   *  copy is tried. */\n  bundledHelpsDir?: () => string;\n};\n\n/** Resolve the workspace root the same way every collections call does:\n *  the injected override (tests) or the configured collection host. */\nfunction resolveBase(deps: ManageCollectionDeps): string {\n  return deps.workspaceRoot ?? getWorkspaceRoot();\n}\n\n/** Shared \"unknown collection\" message — its schema.json is missing or\n *  failed validation, so discovery skipped it. */\nfunction unknownCollection(slug: string): string {\n  return `manageCollection: unknown collection '${defangForPrompt(slug)}' — its schema.json is missing or failed validation.`;\n}\n\ninterface GetItemsArgs {\n  slug: string;\n  ids?: string[];\n  fields?: string[];\n}\n\ntype PutMode = \"upsert\" | \"create\" | \"merge\";\n\ninterface PutItemsArgs {\n  slug: string;\n  items: CollectionItem[];\n  mode: PutMode;\n}\n\nfunction optionalStringArray(value: unknown, name: string): { ok: true; value?: string[] } | { ok: false; error: string } {\n  if (value === undefined) return { ok: true };\n  if (!Array.isArray(value) || !value.every((entry) => typeof entry === \"string\" && entry.length > 0)) {\n    return { ok: false, error: `manageCollection: \\`${name}\\` must be an array of non-empty strings when present.` };\n  }\n  return { ok: true, value: value as string[] };\n}\n\n/** Project a record down to the requested fields. The primary key is\n *  always kept so every returned record stays addressable for a\n *  follow-up getItems/putItems. */\nfunction projectFields(record: CollectionItem, fields: string[], primaryKey: string): CollectionItem {\n  const keys = fields.includes(primaryKey) ? fields : [primaryKey, ...fields];\n  return Object.fromEntries(keys.filter((key) => key in record).map((key) => [key, record[key]]));\n}\n\n/** The validation warning appended to a getItems result when stored\n *  record files are malformed (they're silently skipped at read time,\n *  so without this they'd just look missing). Issue strings quote\n *  record-controlled text → defanged, mirroring the presentCollection\n *  dispatch. The record VALUES in `items` ride verbatim, like a raw\n *  file Read — only host-composed report strings are defanged. */\nasync function recordIssuesWarning(collection: LoadedCollection, deps: ManageCollectionDeps): Promise<string | undefined> {\n  if (deps.ablateValidation) return undefined;\n  const issues = await validateCollectionRecords(collection, { workspaceRoot: deps.workspaceRoot });\n  if (issues.length === 0) return undefined;\n  const lines = issues.map((issue) => `- ${defangForPrompt(issue.file)}: ${defangForPrompt(issue.problem)}`).join(\"\\n\");\n  return `${issues.length} record file(s) have data problems and are missing from this result. Fix each (Read → correct → Write):\\n${lines}`;\n}\n\nasync function loadRequestedItems(\n  collection: LoadedCollection,\n  ids: string[] | undefined,\n  deps: ManageCollectionDeps,\n): Promise<{ items: CollectionItem[]; missing: string[] }> {\n  const store = storeFor(collection, { workspaceRoot: deps.workspaceRoot });\n  if (!ids) return { items: await store.list(), missing: [] };\n  const items: CollectionItem[] = [];\n  const missing: string[] = [];\n  for (const recordId of ids) {\n    // The file store's read THROWS on a malformed record file (only ENOENT\n    // is null) — for the tool that's a `missing` entry, not a failed call:\n    // the warning scan that runs whenever something is missing then names\n    // the broken file and how to fix it.\n    const item = await store.read(recordId).catch(() => null);\n    if (item) items.push(item);\n    else missing.push(recordId);\n  }\n  return { items, missing };\n}\n\nasync function handleGetItems(collection: LoadedCollection, args: GetItemsArgs, deps: ManageCollectionDeps): Promise<string> {\n  const { items, missing } = await loadRequestedItems(collection, args.ids, deps);\n  if (!args.ids && !args.fields && items.length > MAX_UNSELECTIVE_ITEMS) {\n    return `manageCollection: refused — '${collection.slug}' has ${items.length} records, over the unselective limit of ${MAX_UNSELECTIVE_ITEMS}. Pass \\`ids\\` for specific records or \\`fields\\` to project only the columns you need.`;\n  }\n  const enriched = await enrichItems(collection, items, deps);\n  const projected = args.fields ? enriched.map((item) => projectFields(item, args.fields as string[], collection.schema.primaryKey)) : enriched;\n  // The warning scan reads every record file, so don't pay it on a\n  // selective read that found everything it asked for — only a full\n  // listing (where a malformed file silently looks absent) or a missing\n  // requested id (where the scan explains WHY it's missing) needs it.\n  const warning = !args.ids || missing.length > 0 ? await recordIssuesWarning(collection, deps) : undefined;\n  return JSON.stringify({\n    collection: collection.slug,\n    count: projected.length,\n    items: projected,\n    ...(missing.length > 0 ? { missing: missing.map((recordId) => defangForPrompt(recordId)) } : {}),\n    ...(warning ? { warning } : {}),\n  });\n}\n\n/** Reject writes that set host-computed keys, with a pointer at the\n *  writable source of truth (the toggle's enum) where one exists. */\nfunction computedKeyProblem(record: CollectionItem, schema: CollectionSchema): string | null {\n  for (const key of Object.keys(record)) {\n    const spec = schema.fields[key];\n    if (!spec || !COMPUTED_TYPES.has(spec.type)) continue;\n    if (spec.type === \"toggle\" && spec.field) return `'${key}' is a toggle projection — write the enum field '${spec.field}' instead`;\n    const kindLabel: Record<string, string> = { derived: \"derived\", embed: \"an embed\", backlinks: \"a backlinks view\", rollup: \"a rollup\" };\n    return `'${key}' is ${kindLabel[spec.type] ?? \"computed\"} — computed by the host, remove it from the record`;\n  }\n  return null;\n}\n\ninterface RejectedRow {\n  id: string;\n  problem: string;\n}\n\n/** `mode: \"merge\"` resolves the row against the EXISTING record —\n *  a partial row updates just the fields it carries, instead of a\n *  whole-record upsert silently erasing the optional fields it omits\n *  (an upsert of `{id, status}` would pass validation yet drop\n *  `notes`/`lesson`/…). Merge is a partial UPDATE by definition, so a\n *  missing record is a reject, not an implicit create — a merged-over-\n *  nothing partial record is exactly the data shape this mode exists\n *  to prevent.\n *\n *  Computed keys found in the STORED record are stripped before the\n *  merge: the caller's own row was already computed-key-rejected, but a\n *  raw-written / legacy record can carry a stale `derived`/`embed`/\n *  `toggle` value, and re-writing it would perpetuate a forged\n *  host-computed value. A merge heals the record instead.\n *\n *  readItem THROWS on a malformed stored file (only ENOENT is null) —\n *  downgraded to a per-row rejection here, like loadRequestedItems'\n *  `missing`, so one broken file can't abort the whole putItems batch. */\nasync function mergeWithExisting(\n  collection: LoadedCollection,\n  record: CollectionItem,\n  itemId: string,\n  deps: ManageCollectionDeps,\n): Promise<CollectionItem | string> {\n  let existing: CollectionItem | null;\n  try {\n    existing = await readItem(collection.dataDir, itemId, { workspaceRoot: deps.workspaceRoot });\n  } catch {\n    return `'${itemId}' has a malformed stored file — mode \"merge\" needs to read it; fix the file (Read → correct → Write) or replace it whole with \"upsert\"`;\n  }\n  if (!existing) return `'${itemId}' not found — mode \"merge\" updates an existing record; use \"upsert\" or \"create\" to add it`;\n  const stored = Object.entries(existing).filter(([key]) => {\n    const spec = collection.schema.fields[key];\n    return !spec || !COMPUTED_TYPES.has(spec.type);\n  });\n  return { ...Object.fromEntries(stored), ...record };\n}\n\nasync function putOneItem(\n  collection: LoadedCollection,\n  record: CollectionItem,\n  mode: PutMode,\n  deps: ManageCollectionDeps,\n): Promise<{ written?: string; rejected?: RejectedRow }> {\n  const { schema } = collection;\n  const itemId = resolveCreateItemId(schema, record);\n  const reject = (about: string, problem: string): { rejected: RejectedRow } => ({\n    rejected: { id: defangForPrompt(about), problem: defangForPrompt(problem) },\n  });\n  if (itemId === null) return reject(\"(no id)\", `record has no '${schema.primaryKey}' value — set it (it doubles as the filename)`);\n  const computed = computedKeyProblem(record, schema);\n  if (computed) return reject(itemId, computed);\n  let toWrite = record;\n  if (mode === \"merge\") {\n    const merged = await mergeWithExisting(collection, record, itemId, deps);\n    if (typeof merged === \"string\") return reject(itemId, merged);\n    toWrite = merged;\n  }\n  if (!deps.ablateValidation) {\n    const invalid = validateRecordObject(toWrite, itemId, schema);\n    if (invalid) return reject(itemId, invalid);\n  }\n  const result = await writeItem(collection.dataDir, itemId, toWrite, {\n    refuseOverwrite: mode === \"create\",\n    workspaceRoot: deps.workspaceRoot,\n    slug: collection.slug,\n  });\n  if (result.kind === \"ok\") return { written: result.itemId };\n  if (result.kind === \"invalid-id\")\n    return reject(itemId, `'${itemId}' is not a valid record id (letters/digits at the ends; -, _, or . inside; no '..' or path characters)`);\n  if (result.kind === \"conflict\") return reject(itemId, `'${itemId}' already exists — mode \"create\" refuses overwrite; use \"upsert\" to update it`);\n  return reject(itemId, \"write refused: the collection's data dir escapes the workspace\");\n}\n\n/** Aggregation over a collection via the structured query DSL\n *  (`core/queryZ.ts`) — the paved road for counts / sums / group-bys\n *  that a row listing can't answer honestly. Two engines behind one\n *  shape: a dataSource collection queries its CSV natively through the\n *  store (`store.query`, uncapped whole-file scan); a file-backed\n *  collection aggregates its ENRICHED records (computed fields —\n *  `derived` / `rollup` / `toggle` — are real columns) through the same\n *  compiled SQL over a temp JSONL (`runQueryOverRows`). */\nasync function handleQueryItems(collection: LoadedCollection, queryArg: unknown, deps: ManageCollectionDeps): Promise<string> {\n  const parsed = CollectionQueryZ.safeParse(queryArg);\n  if (!parsed.success) {\n    const lines = parsed.error.issues\n      .slice(0, MAX_SCHEMA_ISSUES)\n      .map((issue) => `- ${issue.path.map(String).join(\".\") || \"(root)\"}: ${defangForPrompt(issue.message)}`);\n    return `manageCollection: \\`query\\` rejected — fix and retry:\\n${lines.join(\"\\n\")}`;\n  }\n  const store = storeFor(collection, { workspaceRoot: deps.workspaceRoot });\n  if (store.query) {\n    const rows = await store.query(parsed.data);\n    return JSON.stringify({ collection: collection.slug, count: rows.length, rows });\n  }\n  // File-backed: load through the guarded reader (symlink defenses) and\n  // enrich BEFORE DuckDB sees anything — a raw read_json over the record\n  // files would both follow symlinks and miss every computed field.\n  const enriched = await enrichItems(collection, await store.list(), deps);\n  const rows = await runQueryOverRows(enriched, parsed.data);\n  return JSON.stringify({ collection: collection.slug, count: rows.length, rows });\n}\n\nasync function handlePutItems(collection: LoadedCollection, args: PutItemsArgs, deps: ManageCollectionDeps): Promise<string> {\n  // Server-enforced read-only: a `dataSource` collection's rows live in\n  // the external data file — point the agent at the real update path\n  // instead of writing phantom record files.\n  if (!collectionWritable(collection)) {\n    return `manageCollection: ${readOnlyRefusal(collection.slug)} (its records are the rows of '${collection.schema.dataSource?.path}'; edit that file to change the data).`;\n  }\n  const written: string[] = [];\n  const rejected: RejectedRow[] = [];\n  for (const record of args.items) {\n    const outcome = await putOneItem(collection, record, args.mode, deps);\n    if (outcome.written) written.push(outcome.written);\n    if (outcome.rejected) rejected.push(outcome.rejected);\n  }\n  return JSON.stringify({ collection: collection.slug, written, rejected });\n}\n\nfunction parsePutItems(args: Record<string, unknown>, slug: string): PutItemsArgs | string {\n  const { items, mode } = args;\n  const validItems = Array.isArray(items) && items.length > 0 && items.every((entry) => Boolean(entry) && typeof entry === \"object\" && !Array.isArray(entry));\n  if (!validItems) return \"manageCollection: `items` is required for putItems — a non-empty array of record objects.\";\n  if (mode !== undefined && mode !== \"upsert\" && mode !== \"create\" && mode !== \"merge\") {\n    return 'manageCollection: `mode` must be \"upsert\" (default), \"create\", or \"merge\".';\n  }\n  return { slug, items: items as CollectionItem[], mode: (mode as PutItemsArgs[\"mode\"] | undefined) ?? \"upsert\" };\n}\n\n/** The machine-readable workspace ontology: every collection with its\n *  identity, record count, and outbound `ref`/`embed` relations. Slugs\n *  are discovery-sanitized; titles/labels are workspace-authored schema\n *  text and ride verbatim — the same trust class as the record values\n *  getItems returns. */\nasync function handleGetOntology(deps: ManageCollectionDeps): Promise<string> {\n  const collections = await buildWorkspaceOntology(deps);\n  return JSON.stringify({ count: collections.length, collections });\n}\n\n/** Return the collection-authoring reference (`collection-skills.md`).\n *  Workspace copy first (reflects user edits), bundled asset as the\n *  always-present fallback. Both reads guarded; if neither resolves the\n *  agent still gets an actionable message instead of a thrown call. */\nasync function handleSchemaDocs(deps: ManageCollectionDeps): Promise<string> {\n  const candidates = [\n    path.join(resolveBase(deps), HELPS_DIR, SCHEMA_DOCS_FILE),\n    ...(deps.bundledHelpsDir ? [path.join(deps.bundledHelpsDir(), SCHEMA_DOCS_FILE)] : []),\n  ];\n  for (const candidate of candidates) {\n    try {\n      return await readFile(candidate, \"utf-8\");\n    } catch {\n      // try the next source\n    }\n  }\n  return `manageCollection: could not read the collection-authoring reference (${SCHEMA_DOCS_FILE}).`;\n}\n\n/** Return the raw schema.json of an existing collection, for editing.\n *  Staging (the canonical writable copy) first, the active mirror as a\n *  fallback for user-scope skills that have no staging copy. Raw text —\n *  not the parsed schema — so the agent edits the true on-disk source. */\nasync function handleGetSchema(slug: string, deps: ManageCollectionDeps): Promise<string> {\n  const collection = await loadCollection(slug, deps);\n  if (!collection) return unknownCollection(slug);\n  // Path from the discovered (sanitized) slug, never the raw arg.\n  const candidates = [path.join(dataSkillDir(resolveBase(deps), collection.slug), SCHEMA_FILE), path.join(collection.skillDir, SCHEMA_FILE)];\n  for (const candidate of candidates) {\n    try {\n      return await readFile(candidate, \"utf-8\");\n    } catch {\n      // fall through to the next location\n    }\n  }\n  return `manageCollection: '${defangForPrompt(slug)}' has no readable ${SCHEMA_FILE}.`;\n}\n\n/** Refuse a schema edit the host can't honour: user-scope/feed collections\n *  are read-only, and presets (mc-*) re-seed on restart so an edit is lost. */\nfunction schemaEditRefusal(collection: LoadedCollection, slug: string): string | null {\n  if (collection.source !== \"project\") {\n    return `manageCollection: '${defangForPrompt(slug)}' is ${collection.source}-scope and read-only here — only project collections (data/skills/) can be edited.`;\n  }\n  if (isPresetSlug(slug)) {\n    return `manageCollection: '${defangForPrompt(slug)}' is a preset (mc-*) and re-seeds on restart — copy it under a different slug to customise.`;\n  }\n  return null;\n}\n\n/** Turn a CollectionSchemaZ failure into a short, actionable list the\n *  agent can fix, pointing back at the field reference. */\nfunction formatSchemaIssues(issues: readonly { path: PropertyKey[]; message: string }[]): string {\n  const shown = issues.slice(0, MAX_SCHEMA_ISSUES);\n  const lines = shown.map((issue) => `- ${issue.path.map(String).join(\".\") || \"(root)\"}: ${defangForPrompt(issue.message)}`).join(\"\\n\");\n  const omitted = issues.length - shown.length;\n  const more = omitted > 0 ? `\\n- …and ${omitted} more issue(s); fix these first and retry.` : \"\";\n  return `manageCollection: schema rejected — fix and retry (call schemaDocs for the field reference):\\n${lines}${more}`;\n}\n\n/** Write the validated schema to the canonical staging copy, then mirror\n *  it into the active `.claude/skills/` tree discovery reads — an internal\n *  write doesn't fire the skill-bridge hook, so we mirror explicitly. */\nasync function writeAndMirrorSchema(slug: string, schema: unknown, deps: ManageCollectionDeps): Promise<void> {\n  const base = resolveBase(deps);\n  await writeFileAtomic(path.join(dataSkillDir(base, slug), SCHEMA_FILE), `${JSON.stringify(schema, null, 2)}\\n`);\n  mirrorSkillWrite(base, { slug, relSegments: [SCHEMA_FILE] });\n  try {\n    await deps.refreshAfterWrite?.();\n  } catch {\n    // best-effort — see ManageCollectionDeps.refreshAfterWrite\n  }\n}\n\n/** The post-Zod acceptance gates discovery applies before a parsed schema\n *  becomes a live collection. Mirrors discovery's checks (`loadOneCollection`)\n *  so a write can't pass here yet be silently skipped on the next load.\n *  putSchema only runs for project-scope collections, so the feed-`ingest`\n *  gate doesn't apply. Returns a one-line reason, or null when the schema\n *  would be accepted. */\nfunction schemaDiscoveryGate(schema: CollectionSchema, base: string): string | null {\n  const primaryField = schema.fields[schema.primaryKey];\n  if (!primaryField) return `primaryKey '${schema.primaryKey}' is not one of the declared fields`;\n  if (primaryField.primary !== true) return `the primaryKey field '${schema.primaryKey}' must be flagged \\`primary: true\\``;\n  if (schema.dataPath !== undefined && resolveDataDir(schema.dataPath, base) === null) return `dataPath '${schema.dataPath}' escapes the workspace`;\n  if (schema.dataSource !== undefined && resolveDataDir(schema.dataSource.path, base) === null) {\n    return `dataSource.path '${schema.dataSource.path}' escapes the workspace`;\n  }\n  return null;\n}\n\n/** Validate a schema against CollectionSchemaZ and, on success, persist it.\n *  Edit-only: a new collection is created by writing SKILL.md + schema.json\n *  under data/skills/<slug>/ (the normal create flow), not through here. */\nasync function handlePutSchema(slug: string, schemaArg: unknown, deps: ManageCollectionDeps): Promise<string> {\n  if (!schemaArg || typeof schemaArg !== \"object\" || Array.isArray(schemaArg)) {\n    return \"manageCollection: `schema` is required for putSchema — the full collection schema object.\";\n  }\n  const collection = await loadCollection(slug, deps);\n  if (!collection) {\n    return `manageCollection: unknown collection '${defangForPrompt(slug)}' — create it by writing SKILL.md + ${SCHEMA_FILE} under data/skills/${defangForPrompt(slug)}/, then edit it here.`;\n  }\n  const refusal = schemaEditRefusal(collection, slug);\n  if (refusal) return refusal;\n  const parsed = CollectionSchemaZ.safeParse(schemaArg);\n  if (!parsed.success) return formatSchemaIssues(parsed.error.issues);\n  // Run the SAME post-Zod gates discovery applies, so a write can't pass\n  // here yet be silently skipped on the next load (hiding the collection).\n  const gate = schemaDiscoveryGate(parsed.data, resolveBase(deps));\n  if (gate) {\n    return `manageCollection: schema rejected — ${gate} (call schemaDocs for the field reference). It passes basic validation but discovery would skip it, hiding the collection.`;\n  }\n  // Path from the discovered (sanitized) slug, never the raw arg.\n  await writeAndMirrorSchema(collection.slug, parsed.data, deps);\n  return JSON.stringify({ collection: collection.slug, written: true });\n}\n\nconst MANAGE_COLLECTION_PROMPT =\n  \"Use `manageCollection` instead of raw Read/Write/Edit when working with a collection's records OR its schema (raw file I/O stays available as the escape hatch). \" +\n  \"Before authoring or changing a collection's `schema.json`, call `schemaDocs` to load the field/DSL reference, then read with `getSchema` and write with `putSchema` — `putSchema` validates the whole schema before writing and returns actionable errors instead of silently failing discovery's validation. \" +\n  \"`getItems` is the only way to see computed values — `derived` fields (e.g. a portfolio's value), `toggle` projections, and `embed` records are host-computed and never present in the stored JSON files. On large collections pass `ids` and/or `fields` to keep the result small. \" +\n  'For a question that spans collections (\"which clients have unpaid invoices?\"), start with `getOntology`: it lists every collection with its primaryKey, record count, and outbound `ref`/`embed` relations, so you know which collections to join before reading any records. ' +\n  \"`putItems` validates every row against the schema before writing (required fields, enum values, primaryKey = record id) and returns `{ written, rejected }`; fix each rejected row using its `problem` text and retry just those rows. Never include computed fields in a row you write. \" +\n  'To update a few fields of an existing record, use `mode: \"merge\"` with a partial row ({ id, <changed fields> }) — the default upsert replaces the WHOLE record, so a partial upsert would silently erase every optional field it omits. ' +\n  \"Answer aggregation questions (counts, sums, averages, group-bys) with `queryItems` on ANY collection — on a dataSource (CSV) collection it scans the whole file (getItems is row-capped, so aggregates computed from its output can be silently wrong on large files); on a file-backed collection it aggregates the enriched records, so computed fields (derived/rollup/toggle) are queryable columns.\";\n\n/** Validate getItems' optional `ids`/`fields` args, then delegate. */\nasync function dispatchGetItems(collection: LoadedCollection, args: Record<string, unknown>, deps: ManageCollectionDeps): Promise<string> {\n  const ids = optionalStringArray(args.ids, \"ids\");\n  if (!ids.ok) return ids.error;\n  const fields = optionalStringArray(args.fields, \"fields\");\n  if (!fields.ok) return fields.error;\n  return handleGetItems(collection, { slug: collection.slug, ids: ids.value, fields: fields.value }, deps);\n}\n\n// The tool's action dispatch. Extracted from the factory's returned object so\n// `makeManageCollectionTool` stays under the max-lines threshold; each branch\n// already delegates to a handler.\nasync function manageCollectionHandler(deps: ManageCollectionDeps, args: Record<string, unknown>): Promise<string> {\n  const action = typeof args.action === \"string\" ? args.action : \"\";\n  if (action === \"schemaDocs\") return handleSchemaDocs(deps);\n  if (action === \"getOntology\") return handleGetOntology(deps);\n  const slug = typeof args.slug === \"string\" ? args.slug.trim() : \"\";\n  if (!slug) return \"manageCollection: `slug` is required (the collection's slug).\";\n  if (action === \"getSchema\") return handleGetSchema(slug, deps);\n  if (action === \"putSchema\") return handlePutSchema(slug, args.schema, deps);\n  if (action !== \"getItems\" && action !== \"putItems\" && action !== \"queryItems\") {\n    return 'manageCollection: `action` must be \"getItems\", \"putItems\", \"queryItems\", \"getOntology\", \"schemaDocs\", \"getSchema\", or \"putSchema\".';\n  }\n  const collection = await loadCollection(slug, deps);\n  if (!collection) return unknownCollection(slug);\n  if (action === \"getItems\") return dispatchGetItems(collection, args, deps);\n  if (action === \"queryItems\") return handleQueryItems(collection, args.query, deps);\n  const parsed = parsePutItems(args, slug);\n  if (typeof parsed === \"string\") return parsed;\n  return handlePutItems(collection, parsed, deps);\n}\n\n// Static tool definition, hoisted out of the factory so the function body\n// stays within the line budget (the schema only ever grows).\nconst MANAGE_COLLECTION_DEFINITION = {\n  name: \"manageCollection\",\n  description:\n    \"Read and write a schema-driven collection through the host — both its records and its structure. getItems returns records WITH computed values (derived formulas, toggles, embeds) the stored JSON files don't contain; putItems validates each row against the schema before writing. getOntology maps the whole workspace: every collection with its record count and outbound ref/embed relations — call it first for cross-collection questions. schemaDocs returns the collection-authoring reference; getSchema/putSchema read and validate-then-write the collection's schema.json. Prefer it over raw file I/O on collections.\",\n  inputSchema: {\n    type: \"object\",\n    properties: {\n      action: {\n        type: \"string\",\n        enum: [\"getItems\", \"putItems\", \"queryItems\", \"getOntology\", \"schemaDocs\", \"getSchema\", \"putSchema\"],\n        description: \"What to do.\",\n      },\n      slug: {\n        type: \"string\",\n        description: \"The collection's slug (its directory name, e.g. `stock-quotes`). Required for everything except schemaDocs and getOntology.\",\n      },\n      ids: {\n        type: \"array\",\n        items: { type: \"string\" },\n        description: \"getItems: only these record ids (primary-key values). Omit for all records.\",\n      },\n      fields: {\n        type: \"array\",\n        items: { type: \"string\" },\n        description: \"getItems: only these fields per record (the primary key is always included). Omit for all fields. Use on large collections.\",\n      },\n      items: {\n        type: \"array\",\n        items: { type: \"object\" },\n        description: \"putItems: the record objects to store. Each must carry the schema's primaryKey value (it doubles as the filename).\",\n      },\n      mode: {\n        type: \"string\",\n        enum: [\"upsert\", \"create\", \"merge\"],\n        description:\n          'putItems: \"upsert\" (default) replaces existing records WHOLE; \"create\" rejects rows whose id already exists; \"merge\" updates only the fields a row carries, keeping the rest of the existing record (rejects unknown ids). Use \"merge\" when changing a few fields.',\n      },\n      schema: {\n        type: \"object\",\n        description:\n          \"putSchema: the full collection schema object (same shape as schema.json — title, icon, dataPath, primaryKey, fields, …). Call getSchema first for the current one, and schemaDocs for the field DSL.\",\n      },\n      query: {\n        type: \"object\",\n        description:\n          'queryItems: a structured aggregation query — `{ groupBy?: [\"col\"], aggregates?: { alias: { op: \"count\"|\"sum\"|\"avg\"|\"min\"|\"max\", column? } }, where?: [{ field, op, value }], orderBy?: [{ field, dir? }], limit? }`. At least one of groupBy/aggregates. On a dataSource (CSV) collection it scans the WHOLE file uncapped (unlike getItems); on a file-backed collection it aggregates the ENRICHED records, so computed fields (derived/rollup/toggle) are queryable columns. Use it for counts / sums / averages / group-bys instead of arithmetic over getItems output.',\n      },\n    },\n    required: [\"action\"],\n  },\n};\n\nexport function makeManageCollectionTool(deps: ManageCollectionDeps = {}) {\n  return {\n    definition: MANAGE_COLLECTION_DEFINITION,\n\n    // Collections are workspace data every role can already reach via\n    // raw Read/Write/Edit — gating the SAFER path per-role would only\n    // push unlisted roles back onto unvalidated file I/O.\n    alwaysActive: true,\n\n    prompt: MANAGE_COLLECTION_PROMPT,\n\n    handler: (args: Record<string, unknown>): Promise<string> => manageCollectionHandler(deps, args),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,IAAM,qBAAqB;;;;AAK3B,IAAa,iBAAiB;;AAE9B,IAAa,qBAAqB;;;AAQlC,IAAa,kBAAkB,IAAA,EAC5B,OAAO;CACN,IAAI,IAAA,EAAE,KAAK;EAAC;EAAS;EAAO;EAAO;EAAO;CAAK,CAAC;CAChD,QAAQ,IAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AACrC,CAAC,CAAC,CACD,QAAQ,cAAc,UAAU,OAAO,WAAW,UAAU,WAAW,KAAA,GAAW;CACjF,SAAS;CACT,MAAM,CAAC,QAAQ;AACjB,CAAC;;;;;AAMH,IAAa,cAAc,IAAA,EACxB,OAAO;CACN,OAAO,IAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,IAAI,IAAA,EAAE,KAAK;EAAC;EAAM;EAAM;EAAM;EAAM;EAAO;EAAM;EAAO;CAAU,CAAC;CACnE,OAAO,IAAA,EAAE,MAAM;EACb,IAAA,EAAE,OAAO;EACT,IAAA,EAAE,OAAO;EACT,IAAA,EAAE,QAAQ;EACV,IAAA,EACG,MAAM,IAAA,EAAE,MAAM;GAAC,IAAA,EAAE,OAAO;GAAG,IAAA,EAAE,OAAO;GAAG,IAAA,EAAE,QAAQ;EAAC,CAAC,CAAC,CAAC,CACrD,IAAI,CAAC,CAAC,CACN,IAAI,GAAG;CACZ,CAAC;AACH,CAAC,CAAC,CACD,QAAQ,SAAU,KAAK,OAAO,SAAU,MAAM,QAAQ,KAAK,KAAK,GAAG;CAClE,SAAS;CACT,MAAM,CAAC,OAAO;AAChB,CAAC;AAEH,IAAa,cAAc,IAAA,EAAE,OAAO;;;CAGlC,OAAO,IAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,KAAK,IAAA,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC;;;;AAKD,IAAa,mBAAmB,IAAA,EAC7B,OAAO;CAKN,SAAS,IAAA,EACN,MAAM,IAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CACxB,IAAI,CAAC,CAAC,CACN,QAAQ,YAAY,IAAI,IAAI,QAAQ,KAAK,WAAW,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,QAAQ,EACnG,SAAS,sFACX,CAAC,CAAC,CACD,SAAS;CACZ,YAAY,IAAA,EACT,OAAO,IAAA,EAAE,OAAO,CAAC,CAAC,MAAM,oBAAoB,0EAA0E,GAAG,eAAe,CAAC,CACzI,SAAS;CACZ,OAAO,IAAA,EAAE,MAAM,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS;CAC7C,SAAS,IAAA,EAAE,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC9C,OAAO,IAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,SAAS;AAC9D,CAAC,CAAC,CACD,QAAQ,WAAW,MAAM,SAAS,UAAU,KAAK,KAAK,OAAO,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG;CACrG,SAAS;CACT,MAAM,CAAC,SAAS;AAClB,CAAC,CAAC,CACD,QAAQ,UAAU,OAAO,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,UAAA,IAAgC;CACrF,SAAS;CACT,MAAM,CAAC,YAAY;AACrB,CAAC,CAAC,CAOD,QACE,UAAU;CACT,MAAM,aAAa,IAAI,KAAK,MAAM,WAAW,CAAC,EAAA,CAAG,KAAK,WAAW,OAAO,YAAY,CAAC,CAAC;CACtF,MAAM,uBAAO,IAAI,IAAY;CAC7B,OAAO,OAAO,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,UAAU;EAC1D,MAAM,QAAQ,MAAM,YAAY;EAChC,IAAI,WAAW,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,GAAG,OAAO;EACrD,KAAK,IAAI,KAAK;EACd,OAAO;CACT,CAAC;AACH,GACA;CACE,SAAS;CACT,MAAM,CAAC,YAAY;AACrB,CACF,CAAC,CAEA,QACE,UAAU;CACT,MAAM,2BAAW,IAAI,IAAI,CAAC,GAAI,MAAM,WAAW,CAAC,GAAI,GAAG,OAAO,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;CAC3F,QAAQ,MAAM,WAAW,CAAC,EAAA,CAAG,OAAO,UAAU,SAAS,IAAI,MAAM,KAAK,CAAC;AACzE,GACA;CACE,SAAS;CACT,MAAM,CAAC,SAAS;AAClB,CACF;;;;AC3HF,SAAgB,WAAW,MAAsB;CAC/C,OAAO,IAAI,KAAK,WAAW,MAAK,MAAI,EAAE;AACxC;;AAGA,SAAgB,aAAa,OAAuB;CAClD,OAAO,IAAI,MAAM,WAAW,KAAK,IAAI,EAAE;AACzC;;;;;AAMA,SAAgB,YAAY,YAA4B;CACtD,OAAO,aAAa,aAAa,UAAU,EAAE;AAC/C;;;;;;AAOA,SAAS,cAAc,WAA6C;CAClE,MAAM,EAAE,IAAI,WAAW;CACvB,IAAI,OAAO,SAAS,OAAO,WAAW,KAAA,IAAY,aAAa,SAAS,WAAW,MAAM,EAAE;CAC3F,IAAI,OAAO,SAAS,OAAO,OAAO,OAAO,GAAG,GAAG,YAAY,WAAW,UAAU,EAAE,EAAE;CACpF,OAAO,GAAG,GAAG,GAAG,WAAW,UAAU,EAAE,EAAE;AAC3C;;;;;AAMA,SAAS,cAAc,MAAgE;CACrF,MAAM,SAAS,WAAW,KAAK,KAAK;CACpC,MAAM,SAAS,QAAQ,OAAO;CAC9B,IAAI,KAAK,OAAO,MAAM;EACpB,MAAM,SAAS,KAAK;EAGpB,OAAO;GAAE,KAAK,GAFE,OAAO,OAAO,UAAU,OAAO,UAAU,QAC7C,IAAU,SAAS,OACV,OAAO,OAAO,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;GAAI,QAAQ;EAAO;CAClF;CACA,IAAI,KAAK,OAAO,YAAY,OAAO;EAAE,KAAK,YAAY,OAAO;EAAO,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC;CAAE;CACjG,MAAM,WAAW;EAAE,IAAI;EAAK,IAAI;EAAM,IAAI;EAAK,KAAK;EAAM,IAAI;EAAK,KAAK;CAAK,EAAE,KAAK;CAEpF,OAAO;EAAE,KAAK,GADF,OAAO,KAAK,UAAU,aAAa,KAAK,OAAO,QAAQ,KAAK,OAAO,QAAQ,SAAS,OAC3E,GAAG,SAAS;EAAK,QAAQ,CAAC,KAAK,KAAK;CAAE;AAC7D;;;;;;;AAQA,SAAS,aAAa,OAAwB,SAAqD;CACjG,MAAM,UAAU,MAAM,WAAW,CAAC;CAClC,MAAM,aAAa,OAAO,QAAQ,MAAM,cAAc,CAAC,CAAC;CACxD,MAAM,aAAa,CAAC,GAAG,QAAQ,IAAI,UAAU,GAAG,GAAG,WAAW,KAAK,CAAC,OAAO,eAAe,GAAG,cAAc,SAAS,EAAE,MAAM,WAAW,KAAK,GAAG,CAAC;CAChJ,MAAM,SAAS,MAAM,SAAS,CAAC,EAAA,CAAG,IAAI,aAAa;CACnD,MAAM,UAAU,CAAC,UAAU,WAAW,KAAK,IAAI,KAAK,QAAQ,SAAS;CACrE,IAAI,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,MAAM,KAAK,aAAa,SAAS,GAAG,CAAC,CAAC,KAAK,OAAO,GAAG;CACjG,IAAI,QAAQ,SAAS,GAAG,QAAQ,KAAK,YAAY,QAAQ,IAAI,UAAU,CAAC,CAAC,KAAK,IAAI,GAAG;CACrF,MAAM,WAAW,MAAM,WAAW,CAAC,EAAA,CAAG,KAAK,UAAU,WAAW,MAAM,KAAK,KAAK,MAAM,QAAQ,SAAS,UAAU,OAAO;CACxH,IAAI,QAAQ,SAAS,GAAG,QAAQ,KAAK,YAAY,QAAQ,KAAK,IAAI,GAAG;CACrE,QAAQ,KAAK,SAAS,MAAM,SAAA,KAA6B;CACzD,OAAO;EAAE,KAAK,QAAQ,KAAK,GAAG;EAAG,QAAQ,MAAM,SAAS,aAAa,SAAS,MAAM;CAAE;AACxF;;AAGA,SAAgB,gBAAgB,OAAwB,YAAwD;CAC9G,OAAO,aAAa,OAAO,YAAY,YAAY,UAAU,EAAE,EAAE;AACnE;;;;;;;;;AAUA,SAAgB,kBAAkB,OAA4D;CAC5F,OAAO,aAAa,OAAO,0DAA0D;AACvF;;;;;ACvDA,IAAa,eAAe;;;;AAK5B,IAAM,qBAAqB;;;;AAK3B,SAAgB,kBAAkB,QAAwB;CACxD,IAAI,kBAAA,aAAa,MAAM,MAAM,UAAU,CAAC,mBAAmB,KAAK,MAAM,GAAG,OAAO;CAChF,OAAO,OAAO,OAAO,KAAK,QAAQ,OAAO,CAAC,CAAC,SAAS,KAAK;AAC3D;;;;AAKA,SAAgB,kBAAkB,QAAwB;CACxD,MAAM,QAAQ,mBAAmB,KAAK,MAAM;CAC5C,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,SAAS,OAAO;AACtD;;;;;;AAOA,SAAgB,kBAAkB,OAAyB;CACzD,IAAI,OAAO,UAAU,UACnB,OAAO,SAAS,OAAO,OAAO,gBAAgB,KAAK,SAAS,OAAO,CAAC,OAAO,gBAAgB,IAAI,OAAO,KAAK,IAAI,MAAM,SAAS;CAEhI,IAAI,iBAAiB,MAAM;EACzB,MAAM,MAAM,MAAM,YAAY;EAC9B,OAAO,IAAI,SAAS,gBAAgB,IAAI,IAAI,MAAM,GAAG,EAAE,IAAI;CAC7D;CACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO,OAAO,KAAK;CACpE,OAAO;AACT;;;;;;AAOA,SAAgB,aAAa,KAA8B,YAA2C;CACpG,MAAM,aAAa,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC;CAChH,MAAM,SAAS,WAAW;CAC1B,IAAI,WAAW,QAAQ,WAAW,KAAA,KAAa,OAAO,MAAM,MAAM,IAAI,OAAO;CAC7E,OAAO;EAAE,GAAG;GAAa,aAAa,kBAAkB,OAAO,MAAM,CAAC;CAAE;AAC1E;;;;AAKA,SAAgB,iBAAiB,OAAyB,YAAqE;CAC7H,MAAM,uBAAO,IAAI,IAA4B;CAC7C,KAAK,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,WAAW,GAAG,IAAI;CACjE,OAAO;EAAE,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC;EAAG,YAAY,MAAM,SAAS,KAAK;CAAK;AAC3E;;;;AAKA,SAAS,wBAAwB,KAAuB;CACtD,OAAO,OAAO,GAAG,CAAC,CAAC,SAAS,yBAAyB;AACvD;;;;AASA,IAAM,cAAc,OAAO;AAE3B,SAAS,YAAY,KAAsB;CACzC,IAAI;EACF,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG;EACpD,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;AAKA,SAAS,iBAAiB,KAAqB;CAC7C,IAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,KAAM,OAAO;CAClE,IAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,KAAM,OAAO;CAClE,OAAO;AACT;AAEA,SAAgB,WAAmB;CACjC,OAAO,UAAA,QAAK,MAAA,GAAA,QAAA,OAAA,CAAY,GAAG,sBAAsB;AACnD;;;AAIA,eAAe,SAAS,SAAiB,OAAgC;CACvE,MAAM,SAAS,OAAA,GAAA,iBAAA,KAAA,CAAW,SAAS,GAAG;CACtC,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK;EACnC,MAAM,MAAM,OAAO,MAAM,KAAK,IAAI,OAAO,IAAI,CAAC;EAC9C,MAAM,OAAO,KAAK,KAAK,GAAG,IAAI,QAAQ,CAAC;EACvC,OAAO;CACT,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;;;;AAKA,eAAe,aAAW,QAAkC;CAC1D,IAAI;EACF,OAAA,GAAA,iBAAA,KAAA,CAAW,MAAM;EACjB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,eAAe,qBAAqB,KAAa,cAAqC;CACpF,IAAI;EACF,MAAM,UAAU,OAAA,GAAA,iBAAA,QAAA,CAAc,SAAS,CAAC;EACxC,MAAM,QAAQ,IACZ,QAAQ,QAAQ,SAAS,KAAK,WAAW,GAAG,IAAI,EAAE,KAAK,SAAS,YAAY,CAAC,CAAC,KAAK,UAAA,GAAA,iBAAA,OAAA,CAAgB,UAAA,QAAK,KAAK,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS,CAAC,CACxJ;CACF,QAAQ,CAER;AACF;;;;;;AAOA,eAAe,cAAc,SAAiB,MAA0D;CACtG,MAAM,OAAA,GAAA,YAAA,WAAA,CAAiB,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;CAC1E,MAAM,SAAS,UAAA,QAAK,KAAK,SAAS,GAAG,GAAG,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,EAAE,GAAG,KAAK,KAAK,KAAK;CAC1F,IAAI,CAAE,MAAM,aAAW,MAAM,GAAI;EAC/B,MAAM,QAAQ,OAAA,GAAA,iBAAA,SAAA,CAAe,OAAO;EACpC,MAAM,WAAW,iBAAiB,KAAK;EACvC,MAAM,OAAO,WAAA,QAAM,OAAO,OAAO,QAAQ;EACzC,OAAA,GAAA,iBAAA,MAAA,CAAY,SAAS,GAAG;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAGxD,MAAM,MAAM,GAAG,OAAO,IAAA,GAAA,YAAA,YAAA,CAAe,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE;EACxD,OAAA,GAAA,iBAAA,UAAA,CAAgB,KAAK,MAAM;GAAE,UAAU;GAAS,MAAM;EAAM,CAAC;EAC7D,OAAA,GAAA,iBAAA,OAAA,CAAa,KAAK,MAAM;EACxB,kBAAA,IAAI,KAAK,eAAe,8CAA8C;GAAE,MAAM;GAAS;EAAS,CAAC;EACjG,MAAM,qBAAqB,KAAK,UAAA,QAAK,SAAS,MAAM,CAAC;CACvD;CACA,OAAO;AACT;;;;;;;;AASA,eAAe,YAAY,SAAiB,eAA0E;CACpH,IAAI,CAAC,kBAAA,kBAAkB,SAAS,aAAa,GAAG;EAC9C,kBAAA,IAAI,KAAK,eAAe,mDAAmD,EAAE,MAAM,QAAQ,CAAC;EAC5F,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,OAAO,OAAA,GAAA,iBAAA,MAAA,CAAY,OAAO;CAC5B,SAAS,KAAK;EACZ,IAAK,IAA0B,SAAS,UAAU,OAAO;EACzD,MAAM;CACR;CACA,IAAI,CAAC,KAAK,OAAO,GAAG;EAClB,kBAAA,IAAI,KAAK,eAAe,0DAA0D,EAAE,MAAM,QAAQ,CAAC;EACnG,OAAO;CACT;CACA,OAAO;AACT;;;;;;AAOA,eAAe,kBAAkB,SAAiB,eAA+C;CAC/F,MAAM,OAAO,MAAM,YAAY,SAAS,aAAa;CACrD,IAAI,SAAS,MAAM,OAAO;CAC1B,MAAM,OAAO,MAAM,SAAS,SAAS,WAAW;CAGhD,MAAM,SAAS,KAAK,WAAW,cAAc,KAAK,SAAS,GAAG,cAAc,CAAC,IAAI;CAEjF,IAAI,EADgB,KAAK,UAAU,MAAO,KAAK,OAAO,OAAQ,KAAK,OAAO,OAAU,KAAK,OAAO,OAAQ,KAAK,OAAO,SAChG,YAAY,MAAM,GAAG,OAAO;CAChD,OAAO,cAAc,SAAS,IAAI;AACpC;AAiBA,IAAI,kBAA+E;;;;;;AAOnF,eAAe,iBAAuE;CACpF,IAAI,oBAAoB,MACtB,kBAAkB,OAAO,mBAAmB,CAAC,MAAM,QAAS,IAAgC,eAAe,OAAO,UAAU,CAAC;CAE/H,IAAI;EACF,OAAO,MAAM;CACf,SAAS,KAAK;EACZ,kBAAkB;EAClB,MAAM,IAAI,MAAM,wEAAwE,OAAO,GAAG,EAAE,0CAA0C;CAChJ;AACF;AAEA,eAAsB,SAAS,KAAa,QAAuD;CAEjG,MAAM,aAAa,OAAM,MADF,eAAe,EAAA,CACJ,QAAQ;CAC1C,IAAI;EAEF,QAAO,MADc,WAAW,cAAc,KAAK,MAAM,EAAA,CAC3C,gBAAgB;CAChC,UAAU;EACR,WAAW,eAAe;CAC5B;AACF;;;;;AAUA,eAAsB,QAAQ,SAAiB,YAAoB,eAAmD;CACpH,MAAM,WAAW,MAAM,kBAAkB,SAAS,iBAAiB,kBAAA,iBAAiB,CAAC;CACrF,IAAI,aAAa,MAAM,OAAO,CAAC;CAC/B,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,SAAS,0BAA0B,YAAY,UAAU,EAAE,eAA8B,CAAC,QAAQ,CAAC;CAClH,SAAS,KAAK;EAIZ,IAAI,CAAC,wBAAwB,GAAG,GAAG,MAAM;EACzC,kBAAA,IAAI,KAAK,eAAe,kEAAkE;GAAE,MAAM;GAAS;EAAW,CAAC;EACvH,OAAO,CAAC;CACV;CACA,IAAI,KAAK,SAAA,KAAuB;EAC9B,kBAAA,IAAI,KAAK,eAAe,uCAAuC;GAAE,MAAM;GAAS,KAAK;EAAa,CAAC;EACnG,KAAK,SAAS;CAChB;CACA,MAAM,QAAQ,KAAK,KAAK,QAAQ,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,SAAiC,SAAS,IAAI;CACrH,MAAM,UAAU,KAAK,SAAS,MAAM;CACpC,IAAI,UAAU,GAAG,kBAAA,IAAI,KAAK,eAAe,gDAAgD;EAAE,MAAM;EAAS;CAAQ,CAAC;CACnH,MAAM,UAAU,iBAAiB,OAAO,UAAU;CAClD,IAAI,QAAQ,aAAa,GACvB,kBAAA,IAAI,KAAK,eAAe,2DAA2D;EAAE,MAAM;EAAS,YAAY,QAAQ;CAAW,CAAC;CACtI,OAAO,QAAQ;AACjB;;;;AAKA,IAAM,cAAc;;;;;;AAOpB,eAAsB,QAAQ,SAAiB,YAAoB,QAAgB,eAAwD;CACzI,MAAM,WAAW,MAAM,kBAAkB,SAAS,iBAAiB,kBAAA,iBAAiB,CAAC;CACrF,IAAI,aAAa,MAAM,OAAO;CAC9B,MAAM,SAAS,kBAAkB,MAAM;CAOvC,MAAM,QAAO,MADM,SAAS,oDAF0B,WAAW,WAAW,EAAE,iBAAiB,YAAY,UAAU,EAAE,gBACvG,WAAW,UAAU,EAAE,4BAA4B,WAAW,WAAW,EAAE,gBAC1D,CAAC,UAAU,MAAM,CAAC,EAAA,CACjC,GAAG,CAAC;CACtB,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,GAAG,cAAc,WAAW,GAAG,WAAW;CAChD,OAAO,aAAa,QAAQ,UAAU;AACxC;;;;;;AAOA,eAAsB,YAAY,SAAiB,YAAoB,OAAwB,eAA4D;CACzJ,MAAM,WAAW,MAAM,kBAAkB,SAAS,iBAAiB,kBAAA,iBAAiB,CAAC;CACrF,IAAI,aAAa,MAAM,OAAO,CAAC;CAC/B,MAAM,EAAE,KAAK,WAAW,gBAAgB,OAAO,UAAU;CAEzD,QAAO,MADY,SAAS,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,EAAA,CAC1C,KAAK,QAAQ,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC;AACzH;;;;;;;ACrUA,SAAgB,mBAAmB,YAAuD;CACxF,OAAO,CAAC,YAAA,iBAAiB,WAAW,MAAM;AAC5C;;AAGA,SAAgB,gBAAgB,MAAsB;CACpD,OAAO,eAAe,KAAK;AAC7B;;;;;AAMA,SAAgB,SAAS,YAA8B,OAAkB,CAAC,GAAoB;CAC5F,IAAI,YAAA,iBAAiB,WAAW,MAAM,GAAG;EACvC,MAAM,OAAO,WAAW;EACxB,MAAM,MAAM,WAAW,OAAO;EAC9B,OAAO;GACL,cAAc,EAAE,UAAU,MAAM;GAChC,YAAa,SAAS,KAAA,IAAY,QAAQ,QAAQ,CAAC,CAAC,IAAI,QAAQ,MAAM,KAAK,KAAK,aAAa;GAC7F,OAAO,WAAoB,SAAS,KAAA,IAAY,QAAQ,QAAQ,IAAI,IAAI,QAAQ,MAAM,KAAK,QAAQ,KAAK,aAAa;GACrH,QAAQ,UAA4B,SAAS,KAAA,IAAY,QAAQ,QAAQ,CAAC,CAAC,IAAI,YAAY,MAAM,KAAK,OAAO,KAAK,aAAa;EACjI;CACF;CACA,OAAO;EACL,cAAc,EAAE,UAAU,KAAK;EAC/B,YAAY,kBAAA,UAAU,WAAW,SAAS,IAAI;EAC9C,OAAO,WAAmB,kBAAA,SAAS,WAAW,SAAS,QAAQ,IAAI;CACrE;AACF;;;;;;;;;ACnCA,SAAS,sBAAsB,OAAmD;CAChF,KAAK,MAAM,SAAS,UAAU,KAAK,GAAG,OAAO,CAAC;CAC9C,MAAM,aAAa,OAAO,QAAQ,MAAM,cAAc,CAAC,CAAC;CACxD,OAAO,CAAC,OAAO,YAAY,WAAW,KAAK,CAAC,OAAO,eAAmD,CAAC,OAAO,UAAU,OAAO,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;AACtJ;;;;AAKA,SAAS,wBAAwB,OAAkC;CACjE,MAAM,UAAU,IAAI,IAAY,MAAM,WAAW,CAAC,CAAC;CACnD,KAAK,MAAM,aAAa,OAAO,OAAO,MAAM,cAAc,CAAC,CAAC,GAC1D,IAAI,UAAU,WAAW,KAAA,GAAW,QAAQ,IAAI,UAAU,MAAM;CAElE,KAAK,MAAM,QAAQ,MAAM,SAAS,CAAC,GAAG,QAAQ,IAAI,KAAK,KAAK;CAC5D,OAAO,CAAC,GAAG,OAAO;AACpB;;;;;;;;AASA,SAAS,wBAAwB,MAAwB,OAAkC;CACzF,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,OAAO,MAAM,KAAK,MAAM,OAAO,OAAO,KAAK,GAAG,GAAG,QAAQ,IAAI,GAAG;CAC3E,OAAO,wBAAwB,KAAK,CAAC,CAAC,QAAQ,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC;AAC/E;;AAGA,eAAsB,iBAAiB,MAAwB,OAA4D;CACzH,IAAI,KAAK,WAAW,GAAG,OAAO,sBAAsB,KAAK;CACzD,OAAA,GAAA,iBAAA,MAAA,CAAY,SAAS,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACxD,MAAM,YAAY,UAAA,QAAK,KAAK,SAAS,GAAG,MAAA,GAAA,YAAA,YAAA,CAAiB,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,OAAO;CACnF,IAAI;EAKF,MAAM,WAAW,OAAO,YAAY,wBAAwB,MAAM,KAAK,CAAC,CAAC,KAAK,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;EACxG,MAAM,SAAS,OAAA,GAAA,iBAAA,KAAA,CAAW,WAAW,MAAM,GAAK;EAChD,IAAI;GACF,IAAI,QAAQ;GACZ,KAAK,MAAM,OAAO,MAAM;IACtB,MAAM,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ;KAAE,GAAG;KAAU,GAAG;IAAI,IAAI,GAAG,EAAE,GAAG;IAC/E,QAAQ;GACV;EACF,UAAU;GACR,MAAM,OAAO,MAAM;EACrB;EACA,MAAM,EAAE,KAAK,WAAW,kBAAkB,KAAK;EAE/C,QAAO,MADc,SAAS,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,EAAA,CAC3C,KAAK,QAAQ,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC;CAC3H,UAAU;EAKR,OAAA,GAAA,iBAAA,OAAA,CAAa,SAAS,CAAC,CAAC,OAAO,QAAiB;GAC9C,IAAK,IAA0B,SAAS,UAAU,kBAAA,IAAI,KAAK,eAAe,6BAA6B;IAAE,MAAM;IAAW,OAAO,OAAO,GAAG;GAAE,CAAC;EAChJ,CAAC;CACH;AACF;;;;;ACxDA,IAAM,gBAAgB,UAA4B,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU;;;AAIrG,SAAS,gBAAgB,KAAa,MAAoB,OAA+B;CACvF,MAAM,QAAQ,aAAa,KAAK;CAChC,IAAI,KAAK,YAAY,OAAO,OAAO,2BAA2B,IAAI;CAClE,IAAI,CAAC,SAAS,KAAK,SAAS,UAAU,CAAC,KAAK,OAAO,SAAS,OAAO,KAAK,CAAC,GACvE,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE,mBAAmB,KAAK,OAAO,KAAK,IAAI,EAAE;CAEhF,OAAO;AACT;;;;;;;;AAYA,SAAS,kBAAkB,KAAa,MAAoB,OAA+B;CACzF,QAAQ,KAAK,MAAb;EACE,KAAK;EACL,KAAK,SACH,OAAO,OAAO,SAAS,qBAAA,cAAc,KAAK,CAAC,IAAI,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE,uBAAuB,KAAK,KAAK;EACtH,KAAK,WACH,OAAO,UAAU,QAAQ,UAAU,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;EACjF,KAAK,QACH,OAAO,qBAAA,aAAa,KAAK,MAAM,OAAO,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;EAC5E,KAAK,YACH,OAAO,qBAAA,iBAAiB,KAAK,MAAM,OAC/B,OACA,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;EACnC,SACE,OAAO;CACX;AACF;;;;;AAMA,SAAS,mBAAmB,KAAa,MAAuD,OAA+B;CAC7H,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,IAAI,IAAI,OAAO,OAAO,KAAK,EAAE;CAC/D,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;EACjD,MAAM,MAAe,MAAM;EAC3B,IAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,IAAI,QAAQ,QAAQ,EAAE;EAC5F,KAAK,MAAM,CAAC,QAAQ,YAAY,OAAO,QAAQ,KAAK,EAAE,GAAG;GACvD,MAAM,WAAY,IAAgC;GAGlD,MAAM,UAAU,gBAAgB,QAAQ,SAAS,QAAQ,MAAM,aAAa,QAAQ,IAAI,OAAO,kBAAkB,QAAQ,SAAS,QAAQ;GAC1I,IAAI,SAAS,OAAO,IAAI,IAAI,QAAQ,QAAQ,EAAE,IAAI;EACpD;CACF;CACA,OAAO;AACT;;;;;AAMA,SAAgB,mBAAmB,KAAa,MAAoB,OAAgB,MAAsC;CACxH,MAAM,WAAW,gBAAgB,KAAK,MAAM,KAAK;CACjD,IAAI,YAAY,SAAS,YAAY,OAAO;CAC5C,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,KAAK,SAAS,SAAS,OAAO,mBAAmB,KAAK,MAAM,KAAK;CACrE,OAAO,kBAAkB,KAAK,MAAM,KAAK;AAC3C;AAKA,IAAM,2BAAW,IAAI,QAAuE;;;;;;;;;;AAW5F,SAAgB,eAAe,QAA0B,MAAkC;CACzF,MAAM,SAAS,SAAS,IAAI,MAAM,CAAC,GAAG;CACtC,IAAI,QAAQ,OAAO;CACnB,MAAM,SAAS,OAAO,QAAQ,OAAO,MAAM,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,YAAA,eAAe,IAAI,KAAK,IAAI,CAAC;CAChG,MAAM,YAAY,IAAA,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,QAAQ,QAAQ;EAC/D,KAAK,MAAM,CAAC,KAAK,SAAS,QAAQ;GAChC,MAAM,UAAU,mBAAmB,KAAK,MAAM,OAAO,MAAM,IAAI;GAC/D,IAAI,SAAS,IAAI,SAAS;IAAE,MAAM;IAAU,SAAS;IAAS,MAAM,CAAC,GAAG;GAAE,CAAC;EAC7E;CACF,CAAC;CACD,MAAM,QAAQ,SAAS,IAAI,MAAM,KAAK,CAAC;CACvC,MAAM,QAAQ;CACd,SAAS,IAAI,QAAQ,KAAK;CAC1B,OAAO;AACT;;;;AAKA,SAAgB,mBAAmB,QAAwB,QAA0B,MAAsC;CACzH,MAAM,SAAS,eAAe,QAAQ,IAAI,CAAC,CAAC,UAAU,MAAM;CAC5D,IAAI,OAAO,SAAS,OAAO;CAC3B,OAAO,OAAO,MAAM,OAAO,EAAE,EAAE,WAAW;AAC5C;;;AC3HA,IAAM,aAAa;;;;;;;AAQnB,eAAe,oBAAoB,SAAiB,eAA0C;CAC5F,IAAI,CAAC,kBAAA,kBAAkB,SAAS,aAAa,GAAG;EAC9C,kBAAA,IAAI,KAAK,eAAe,2DAA2D,EAAE,QAAQ,CAAC;EAC9F,OAAO,CAAC;CACV;CACA,IAAI;EACF,OAAO,OAAA,GAAA,iBAAA,QAAA,CAAc,OAAO;CAC9B,SAAS,KAAK;EAEZ,IAAI,IAAM,SAAS,UAAU,OAAO,CAAC;EACrC,MAAM;CACR;AACF;AAEA,eAAsB,0BAA0B,YAA8B,OAAmC,CAAC,GAA2B;CAI3I,IAAI,WAAW,OAAO,eAAe,KAAA,GAAW,OAAO,CAAC;CACxD,MAAM,gBAAgB,KAAK,iBAAiB,kBAAA,iBAAiB;CAC7D,MAAM,UAAU,MAAM,oBAAoB,WAAW,SAAS,aAAa;CAC3E,MAAM,SAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,QAAQ,KAAK,GAAG;EACjC,IAAI,CAAC,KAAK,SAAS,OAAO,KAAK,KAAK,WAAW,GAAG,GAAG;EACrD,IAAI,OAAO,UAAU,YAAY;EACjC,MAAM,QAAQ,MAAM,cAAc,UAAA,QAAK,KAAK,WAAW,SAAS,IAAI,GAAG,MAAM,WAAW,MAAM;EAC9F,IAAI,OAAO,OAAO,KAAK,KAAK;CAC9B;CACA,OAAO;AACT;AAIA,eAAe,eAAe,UAAkB,MAAsD;CACpG,IAAI;EAEF,IAAI,EAAC,OAAA,GAAA,iBAAA,MAAA,CADoB,QAAQ,EAAA,CACvB,OAAO,GAAG,OAAO;GAAE,MAAM;GAAM,SAAS;EAAwD;EAC1G,OAAO,EAAE,KAAK,OAAA,GAAA,iBAAA,SAAA,CAAe,UAAU,OAAO,EAAE;CAClD,QAAQ;EACN,OAAO;GAAE,MAAM;GAAM,SAAS;EAA4C;CAC5E;AACF;;;AAIA,eAAe,cAAc,UAAkB,MAAc,QAAuD;CAClH,MAAM,OAAO,MAAM,eAAe,UAAU,IAAI;CAChD,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,KAAK,GAAG;CAC9B,SAAS,KAAK;EAEZ,OAAO;GACL,MAAM;GACN,SAAS,iBAHI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAG3B;EACnC;CACF;CACA,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAC/D,OAAO;EAAE,MAAM;EAAM,SAAS;CAA4C;CAM5E,MAAM,UAAU,qBAAqB,QAA0B,KAAK,QAAQ,WAAW,EAAE,GAAG,QAAQ,QAAQ;CAC5G,OAAO,UAAU;EAAE,MAAM;EAAM;CAAQ,IAAI;AAC7C;;;;;;;;;;AAWA,SAAgB,qBAAqB,QAAwB,QAAgB,QAA0B,OAAwB,YAA2B;CACxJ,MAAM,UAAU,OAAO,OAAO;CAC9B,IAAI,OAAO,YAAY,YAAY,YAAY,QAC7C,OAAO,IAAI,OAAO,WAAW,QAAQ,OAAO,WAAW,EAAE,EAAE,kCAAkC,OAAO;CAEtG,OAAO,mBAAmB,QAAQ,QAAQ,IAAI;AAChD;;;;;;;AChFA,SAAgB,wBAAwB,QAAgC,QAAgD;CACtH,MAAM,WAAW,OAAO,UAAU,CAAC;CACnC,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAClC,IAAI,SAAS,SAAS,KAAA,GAAW,OAAO,kBAAkB,IAAI,8BAA8B,OAAO,GAAG;CAExG,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,QAAQ,GAAG;EAClD,MAAM,UAAU,mBAAmB,KAAK,MAAM,OAAO,MAAM,QAAQ;EACnE,IAAI,SAAS,OAAO;CACtB;CACA,OAAO;AACT;;;;AAKA,eAAsB,kBACpB,YACA,QACA,QACA,QACA,OAAkB,CAAC,GACW;CAC9B,MAAM,eAAe,wBAAwB,QAAQ,MAAM;CAC3D,IAAI,cAAc,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkB,SAAS;CAAa;CAEtF,MAAM,WAAW,MAAM,kBAAA,SAAS,WAAW,SAAS,QAAQ,IAAI;CAChE,IAAI,CAAC,UAAU,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAa,SAAS,SAAS,OAAO;CAAa;CAK9F,IAAI,CAAC,qBAAA,cAAc,QAAQ,QAAQ,GACjC,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAiB,SAAS,WAAW,OAAO,GAAG,+BAA+B,OAAO;CAAwB;CAM3I,MAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS;EACxD,MAAM,OAAO,WAAW,OAAO,OAAO;EACtC,OAAO,CAAC,QAAQ,CAAC,YAAA,eAAe,IAAI,KAAK,IAAI;CAC/C,CAAC;CACD,MAAM,SAAyB;EAAE,GAAG,OAAO,YAAY,MAAM;EAAG,GAAG,kBAAA,iBAAiB,OAAO,KAAK,MAAM;CAAE;CAExG,MAAM,UAAU,qBAAqB,QAAQ,QAAQ,WAAW,MAAM;CACtE,IAAI,SAAS,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkB,SAAS;CAAQ;CAE5E,MAAM,SAAS,MAAM,kBAAA,UAAU,WAAW,SAAS,QAAQ,QAAQ;EAAE,eAAe,KAAK;EAAe,MAAM,WAAW;CAAK,CAAC;CAC/H,IAAI,OAAO,SAAS,MAAM,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAiB,SAAS,kBAAkB,OAAO,KAAK;CAAG;CACjH,OAAO;EAAE,IAAI;EAAM,MAAM;CAAO;AAClC;;;;;;;AC5CA,SAAgB,gBAAgB,QAA8C;CAC5E,MAAM,YAAgC,CAAC;CACvC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,OAAO,MAAM,GAAG;EACvD,IAAI,KAAK,SAAS,SAAS,KAAK,SAAS,SAAS,UAAU,KAAK;GAAE,OAAO;GAAK,MAAM,KAAK;GAAM,IAAI,KAAK;EAAG,CAAC;EAC7G,IAAI,KAAK,SAAS,eAAe,KAAK,SAAS,UAAU,UAAU,KAAK;GAAE,OAAO;GAAK,MAAM,KAAK;GAAM,IAAI,KAAK;EAAK,CAAC;EACtH,IAAI,KAAK,SAAS,SAAS;EAC3B,KAAK,MAAM,CAAC,QAAQ,YAAY,OAAO,QAAQ,KAAK,EAAE,GACpD,IAAI,QAAQ,SAAS,OAAO,UAAU,KAAK;GAAE,OAAO,GAAG,IAAI,GAAG;GAAU,MAAM;GAAO,IAAI,QAAQ;EAAG,CAAC;CAEzG;CACA,OAAO;AACT;;;;;;;;;;AAWA,eAAe,iBAAiB,SAAiB,eAAwC;CACvF,IAAI,CAAC,kBAAA,kBAAkB,SAAS,aAAa,GAAG,OAAO;CACvD,IAAI;EACF,MAAM,SAAS,OAAA,GAAA,iBAAA,QAAA,CAAc,OAAO,EAAA,CAAG,QAAQ,SAAS,KAAK,SAAS,OAAO,KAAK,CAAC,KAAK,WAAW,GAAG,CAAC;EAEvG,QAAO,MADc,QAAQ,IAAI,MAAM,KAAK,SAAS,kBAAA,cAAc,UAAA,QAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,EAAA,CAC/E,OAAO,OAAO,CAAC,CAAC;CAChC,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;AAQA,eAAe,aAAa,YAA8B,eAAwC;CAChG,IAAI,CAAC,mBAAmB,UAAU,GAChC,IAAI;EACF,QAAQ,MAAM,SAAS,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,EAAA,CAAG;CAChE,QAAQ;EACN,OAAO;CACT;CAEF,OAAO,iBAAiB,WAAW,SAAS,aAAa;AAC3D;AAEA,eAAe,gBAAgB,YAA8B,eAAyD;CACpH,MAAM,EAAE,WAAW;CACnB,OAAO;EACL,MAAM,WAAW;EACjB,OAAO,OAAO;EACd,MAAM,OAAO;EACb,YAAY,OAAO;EACnB,cAAc,OAAO,gBAAgB,OAAO;EAC5C,aAAa,MAAM,aAAa,YAAY,aAAa;EACzD,WAAW,gBAAgB,MAAM;CACnC;AACF;;;;AAKA,eAAsB,uBAAuB,OAAyB,CAAC,GAAuC;CAC5G,MAAM,gBAAgB,KAAK,iBAAiB,kBAAA,iBAAiB;CAC7D,MAAM,cAAc,MAAM,kBAAA,oBAAoB,IAAI;CAClD,OAAO,QAAQ,IAAI,YAAY,KAAK,eAAe,gBAAgB,YAAY,aAAa,CAAC,CAAC;AAChG;;;;;;ACpGA,SAAS,iBAAiB,QAAoC;CAC5D,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,QAAQ,WAAsD;EAClE,KAAK,MAAM,SAAS,OAAO,OAAO,MAAM,GAAG;GACzC,IAAI,MAAM,SAAS,SAAS,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,GAAG,QAAQ,IAAI,MAAM,EAAE;GACrG,IAAI,MAAM,SAAS,WAAW,MAAM,IAAI,KAAK,MAAM,EAAE;EACvD;CACF;CACA,KAAK,OAAO,MAAM;CAClB,OAAO,CAAC,GAAG,OAAO;AACpB;;;AAIA,SAAS,mBAAmB,QAAoC;CAC9D,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,GAC7C,IAAI,MAAM,SAAS,WAAW,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,GAAG,QAAQ,IAAI,MAAM,EAAE;CAEzG,OAAO,CAAC,GAAG,OAAO;AACpB;;;;AAKA,SAAS,sBAAsB,QAAoC;CACjE,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,SAAS,OAAO,OAAO,OAAO,MAAM,GAC7C,KAAK,MAAM,SAAS,eAAe,MAAM,SAAS,aAAa,MAAM,KAAK,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI;CAE9G,OAAO,CAAC,GAAG,OAAO;AACpB;AAUA,eAAe,WAAW,MAAc,MAAsD;CAC5F,MAAM,SAAS,MAAM,kBAAA,eAAe,MAAM,IAAI;CAC9C,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,QAAQ,MAAM,SAAS,QAAQ,EAAE,eAAe,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK;CACjF,MAAM,OAAuC,CAAC;CAC9C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SAAS,KAAK,OAAO,OAAO;EAClC,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG,KAAK,UAAU,qBAAA,UAAU,OAAO,QAAQ,MAAM,CAAC,CAAC;CACvG;CACA,OAAO;EAAE,QAAQ,OAAO;EAAQ;CAAK;AACvC;;;;;AAMA,eAAe,kBAAkB,QAA0B,MAA+D;CACxH,MAAM,QAAQ,CAAC,mBAAG,IAAI,IAAI;EAAC,GAAG,iBAAiB,MAAM;EAAG,GAAG,mBAAmB,MAAM;EAAG,GAAG,sBAAsB,MAAM;CAAC,CAAC,CAAC;CACzH,MAAM,SAAuC,CAAC;CAC9C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SAAS,MAAM,WAAW,MAAM,IAAI;EAC1C,IAAI,QAAQ,OAAO,QAAQ;CAC7B;CACA,OAAO;AACT;AAEA,SAAS,aAAa,QAAwD;CAC5E,OAAO,OAAO,YAAY,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;AAC/F;;;;;;;AAQA,SAAS,iBACP,OACA,QACA,UACA,QACkB;CAClB,MAAM,SAAS,OAAO,MAAM;CAC5B,IAAI,CAAC,QAAQ,OAAO,CAAC;CAErB,OAAO,qBAAA,aAAa,OADL,OAAO,SAAS,OAAO,eAAe,EAC1B,GAAQ,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,qBAAA,mBAAmB,KAAK,MAAM,SAAS,OAAO,OAAO,UAAU,CAAC;AAC9I;;;;;AAMA,SAAS,gBAAgB,QAA0B,UAA0B,QAAsD;CACjI,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,MAAM,GAAG;EACxD,IAAI,MAAM,SAAS,YAAY,MAAM,OACnC,SAAS,OAAO,OAAO,SAAS,MAAM,UAAU,EAAE,MAAM,MAAM;EAEhE,IAAI,MAAM,SAAS,WAAW,MAAM,IAAI;GACtC,MAAM,WAAW,YAAA,cAAc,OAAO,QAAQ;GAC9C,SAAS,OAAQ,YAAY,OAAO,MAAM,GAAG,EAAE,KAAK,aAAc;EACpE;EACA,IAAI,MAAM,SAAS,aACjB,SAAS,OAAO,iBAAiB,OAAO,QAAQ,UAAU,MAAM;CAEpE;CACA,OAAO;AACT;;;;;;;;AASA,SAAS,eAAe,QAA0B,QAAwB,QAAsD;CAC9H,IAAI,MAAM;CACV,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,MAAM,GAAG;EACxD,IAAI,MAAM,SAAS,UAAU;EAC7B,IAAI,QAAQ,QAAQ,MAAM,EAAE,GAAG,OAAO;EACtC,MAAM,SAAS,OAAO,MAAM;EAC5B,MAAM,SAAS,OAAO,OAAO,OAAO,eAAe,EAAE;EACrD,IAAI,OAAO,SAAS,qBAAA,YAAY,OAAO,QAAQ,OAAO,OAAO,OAAO,IAAI,CAAC,IAAI;CAC/E;CACA,OAAO;AACT;;;;;AAMA,eAAsB,YAAY,YAA8B,OAAyB,OAAyB,CAAC,GAA8B;CAC/I,MAAM,EAAE,WAAW;CACnB,MAAM,SAAS,MAAM,kBAAkB,QAAQ,IAAI;CACnD,MAAM,aAAa,aAAa,MAAM;CAItC,OAAO,MAAM,KAAK,SAAS,gBAAgB,QAAQ,qBAAA,UAAU,QAAQ,eAAe,QAAQ,MAAM,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;AACjI;;;;;;;;AC9IA,SAAS,iBAAiB,OAAyB,YAAoD;CACrG,MAAM,UAAU,MAAM,QAAQ,SAAS,OAAO,KAAK,gBAAgB,QAAQ,CAAC,CAAC,KAAK,SAAmC,CAAC,OAAO,KAAK,WAAW,GAAG,IAAI,CAAC;CACrJ,OAAO,OAAO,YAAY,OAAO;AACnC;;;;;;AAOA,SAAS,iBAAiB,OAAyB,YAAsC;CACvF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,MAAM,UAAU,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,cAAc,OAAO,MAAM,eAAe,EAAE,CAAC,CAAC;AACvH;;;;;;;;AASA,eAAsB,sBAAsB,YAA8B,OAAyB,CAAC,GAAoB;CACtH,MAAM,EAAE,WAAW;CACnB,MAAM,OAAO,OAAO;CACpB,IAAI,CAAC,MAAM,OAAO,OAAO;CACzB,IAAI;EACF,MAAM,SAAS,MAAM,kBAAA,eAAe,KAAK,OAAO,YAAY,IAAI;EAChE,IAAI,CAAC,QAAQ,OAAO,KAAK,YAAY,OAAO;EAE5C,MAAM,UAAU,iBAAiB,MADb,SAAS,QAAQ,EAAE,eAAe,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,GACzC,OAAO,OAAO,UAAU;EAChE,MAAM,UAAU,KAAK,OAAO,WAAW,qBAAA,eAAe,OAAO,MAAM;EACnE,MAAM,cAAc,iBAAiB,SAAS,OAAO,OAAO,UAAU;EAEtE,OAAO,qBAAA,YADQ,qBAAA,oBAAoB,SAAS,KAAK,QAAQ,SAAS,WAC/C,GAAQ,MAAM,OAAO,MAAM,WAAW;CAC3D,SAAS,KAAK;EACZ,kBAAA,IAAI,KAAK,eAAe,6CAA6C;GACnE,MAAM,WAAW;GACjB,QAAQ,KAAK,OAAO;GACpB,OAAO,OAAO,GAAG;EACnB,CAAC;EACD,OAAO,KAAK,YAAY,OAAO;CACjC;AACF;;;;ACvDA,SAAgB,aAAa,KAAsB;CACjD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,IAAa,gBAAgB;AAC7B,IAAa,aAAa,OAAU,KAAK;;;AC2BzC,IAAM,cAAc;AAEpB,SAAS,KAAK,OAAuB;CACnC,OAAO,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;AACtC;AAEA,SAAS,KAAK,OAAuB;CACnC,OAAO,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;AACtC;;;;AAKA,SAAgB,YAAY,MAAc,OAAuB;CAC/D,OAAO,IAAI,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC,QAAQ;AAC1C;;;AAIA,SAAgB,WAAW,KAAgC;CACzD,IAAI,OAAO,QAAQ,UAAU,OAAO;CACpC,MAAM,QAAQ,YAAY,KAAK,IAAI,KAAK,CAAC;CACzC,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,OAAO,OAAO,MAAM,EAAE;CAC5B,MAAM,QAAQ,OAAO,MAAM,EAAE;CAC7B,MAAM,MAAM,OAAO,MAAM,EAAE;CAC3B,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO;CACpC,IAAI,MAAM,KAAK,MAAM,YAAY,MAAM,KAAK,GAAG,OAAO;CACtD,OAAO;EAAE,GAAG;EAAM,GAAG;EAAO,GAAG;CAAI;AACrC;;AAGA,SAAgB,YAAY,MAAyB;CACnD,OAAO,GAAG,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,KAAK,CAAC;AACvD;;;AAIA,SAAS,QAAQ,MAAyB;CACxC,OAAO,KAAK,IAAI,MAAQ,KAAK,IAAI,MAAM,KAAK;AAC9C;;;AAIA,SAAS,QAAQ,MAAiB,MAAyB;CACzD,MAAM,UAAU,IAAI,KAAK,KAAK,IAAI,KAAK,GAAG,KAAK,IAAI,GAAG,KAAK,CAAC,IAAI,OAAO,UAAU;CACjF,OAAO;EAAE,GAAG,QAAQ,eAAe;EAAG,GAAG,QAAQ,YAAY,IAAI;EAAG,GAAG,QAAQ,WAAW;CAAE;AAC9F;;;;AAKA,SAAgB,mBAAmB,QAAmB,OAAmC;CACvF,MAAM,EAAE,MAAM,aAAa;CAC3B,IAAI,SAAS,OAAO,OAAO,QAAQ,QAAQ,QAAQ;CACnD,IAAI,SAAS,QAAQ,OAAO,QAAQ,QAAQ,WAAW,CAAC;CAExD,MAAM,cAAc,YAAY,SAAS,SAAS,KAAK;CACvD,MAAM,QAAQ,OAAO,IAAI,MAAM,OAAO,IAAI,KAAK;CAC/C,MAAM,WAAW,KAAK,MAAM,QAAQ,EAAE;CACtC,MAAM,YAAa,QAAQ,KAAM;CACjC,MAAM,MAAM,YAAY,UAAU,SAAS;CAC3C,MAAM,SAAS,MAAM,eAAe,SAAS,MAAO,MAAM,cAAc,OAAO;CAC/E,OAAO;EAAE,GAAG;EAAU,GAAG;EAAW,GAAG,KAAK,IAAI,QAAQ,GAAG;CAAE;AAC/D;;;;;AAMA,SAAgB,aAAa,YAAqB,KAAW,WAAW,GAAmB;CACzF,MAAM,MAAM,WAAW,UAAU;CACjC,IAAI,QAAQ,MAAM,OAAO;CACzB,MAAM,WAAW,WAAW,IAAI,QAAQ,KAAK,CAAC,QAAQ,IAAI;CAE1D,OAAO,QAAQ;EADY,GAAG,IAAI,YAAY;EAAG,GAAG,IAAI,SAAS,IAAI;EAAG,GAAG,IAAI,QAAQ;CACxE,CAAK,KAAK,QAAQ,QAAQ;AAC3C;AAEA,IAAM,sBAAsB;;;;;;;;AAS5B,SAAgB,YAAY,UAAkB,MAAyB;CAErE,OAAO,GADM,SAAS,QAAQ,qBAAqB,EACzC,EAAK,GAAG,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;AAC7D;;;;;;AAOA,SAAS,YAAY,MAAkC,QAA0B,MAA+B;CAC9G,IAAI,MAAM;EACR,MAAM,MAAM,KAAK,KAAK;EACtB,OAAO,QAAQ,KAAA,KAAa,QAAQ,QAAQ,KAAK,GAAG,SAAS,OAAO,GAAG,CAAC;CAC1E;CACA,OAAO,qBAAA,WAAW,QAAQ,IAAI;AAChC;;;;;;;AAQA,SAAgB,aAAa,OAA6B,YAAoD;CAC5G,IAAI,CAAC,YAAA,mBAAmB,KAAK,GAAG,OAAO;CACvC,MAAM,MAAM,WAAW,MAAM;CAC7B,IAAI,QAAQ,KAAA,KAAa,QAAQ,QAAQ,QAAQ,IAAI,OAAO;CAC5D,OAAO,MAAM,IAAI,OAAO,GAAG,MAAM;AACnC;;;;AAUA,SAAgB,iBAAiB,QAA0B,YAA4B,UAA4C;CACjI,MAAM,EAAE,OAAO,iBAAiB;CAChC,IAAI,CAAC,SAAS,CAAC,cAAc,OAAO;CACpC,MAAM,UAAU,WAAW,WAAW,aAAa;CACnD,IAAI,YAAY,MAAM,OAAO;CAC7B,MAAM,QAAQ,aAAa,MAAM,OAAO,UAAU;CAClD,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,OAAO,mBAAmB,SAAS,KAAK;CAC9C,MAAM,SAAS,YAAY,UAAU,IAAI;CACzC,MAAM,SAAyB,CAAC;CAChC,KAAK,MAAM,SAAS,MAAM,SAAS,CAAC,GAClC,IAAI,OAAO,UAAU,eAAe,KAAK,YAAY,KAAK,GAAG,OAAO,SAAS,WAAW;CAE1F,OAAO,OAAO,QAAQ,MAAM,OAAO,CAAC,CAAC;CACrC,OAAO,gBAAgB,YAAY,IAAI;CACvC,OAAO,OAAO,cAAc;CAC5B,OAAO;EAAE,IAAI;EAAQ;CAAO;AAC9B;;;;;AAMA,SAAS,aAAa,MAAc,cAAsB,OAA6B,YAA4B,UAAwB;CACzI,IAAI,WAAW,WAAW,aAAa,MAAM,MAAM;EACjD,kBAAA,IAAI,KAAK,eAAe,kDAAkD;GAAE;GAAM;GAAU;EAAa,CAAC;EAC1G;CACF;CACA,MAAM,YAAY,YAAA,mBAAmB,KAAK,IAAI,MAAM,YAAY,KAAA;CAChE,kBAAA,IAAI,KAAK,eAAe,yDAAyD;EAC/E;EACA;EACA;EACA,OAAO,cAAc,KAAA,IAAY,KAAA,IAAY,WAAW;CAC1D,CAAC;AACH;;;;;;AAOA,eAAsB,oBACpB,MACA,QACA,SACA,YACA,UACA,SAAoB,CAAC,GACN;CACf,MAAM,EAAE,UAAU;CAClB,IAAI,CAAC,SAAS,CAAC,OAAO,cAAc;CACpC,IAAI,CAAC,YAAY,MAAM,MAAM,QAAQ,UAAU,GAAG;CAClD,MAAM,WAAW,iBAAiB,QAAQ,YAAY,QAAQ;CAC9D,IAAI,aAAa,MAAM;EACrB,aAAa,MAAM,OAAO,cAAc,MAAM,OAAO,YAAY,QAAQ;EACzE;CACF;CAMA,IAAI,YAAY,MAAM,MAAM,QAAQ,SAAS,MAAM,GAAG;EACpD,kBAAA,IAAI,KAAK,eAAe,yFAAyF;GAC/G;GACA;GACA,aAAa,SAAS;EACxB,CAAC;EACD;CACF;CACA,IAAI;EACF,MAAM,SAAS,MAAM,kBAAA,UAAU,SAAS,SAAS,IAAI,SAAS,QAAQ;GAAE,GAAG;GAAQ,iBAAiB;GAAM;EAAK,CAAC;EAChH,IAAI,OAAO,SAAS,MAClB,kBAAA,IAAI,KAAK,eAAe,qBAAqB;GAAE;GAAM;GAAU,aAAa,SAAS;EAAG,CAAC;OACpF,IAAI,OAAO,SAAS,YAEzB,kBAAA,IAAI,KAAK,eAAe,sBAAsB;GAAE;GAAM;GAAU,aAAa,SAAS;GAAI,MAAM,OAAO;EAAK,CAAC;CAEjH,SAAS,KAAK;EACZ,kBAAA,IAAI,KAAK,eAAe,qBAAqB;GAAE;GAAM;GAAU,aAAa,SAAS;GAAI,OAAO,aAAa,GAAG;EAAE,CAAC;CACrH;AACF;;;;;;;AC7MA,SAAgB,+BAA+B,QAA+B;CAC5E,MAAM,EAAE,SAAS;CAOjB,OAAO;EALL,cAAc,eAAe,KAAK;EAClC,QAAQ,eAAe,KAAK;EAC5B,oBAAoB,eAAe,KAAK,6CAA6C,KAAK;EAC1F,eAAe,+BAA+B,KAAK;CAE9C,EAAS,OAAO;AACzB;;AAcA,SAAS,gBAAgB,eAAuB,MAAsB;CACpE,OAAO,UAAA,QAAK,KAAK,kBAAA,iBAAiB,aAAa,GAAG,IAAI;AACxD;AAEA,eAAe,WAAW,QAAkC;CAC1D,IAAI;EACF,OAAA,GAAA,iBAAA,KAAA,CAAW,MAAM;EACjB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,aAAqB;CAC5B,wBAAO,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE;AAC7C;;;AAIA,SAAS,cAAc,YAA8B,eAAiC;CACpF,OAAO;EAAC,gBAAgB,eAAe,WAAW,IAAI;EAAG,WAAW;EAAU,WAAW;CAAO;AAClG;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAS,cAAc,SAAiB,MAAc,eAAgC;CACpF,MAAM,kBAAkB,CAAC,UAAA,QAAK,QAAQ,eAAe,QAAQ,IAAI,GAAG,UAAA,QAAK,QAAQ,eAAe,QAAQ,eAAe,IAAI,CAAC;CAC5H,MAAM,WAAW,UAAA,QAAK,QAAQ,OAAO;CACrC,OAAO,gBAAgB,MAAM,SAAS,aAAa,QAAQ,SAAS,WAAW,OAAO,UAAA,QAAK,GAAG,CAAC;AACjG;;;;AAKA,SAAS,mBAAmB,QAA4C;CACtE,IAAI,OAAO,aAAa,KAAA,GACtB,OAAO;mCACwB,OAAO,YAAY,KAAK;;CAGzD,OAAO;OACF,OAAO,SAAS;;;;;AAKvB;AAEA,SAAS,gBAAgB,YAAsC;CAC7D,MAAM,EAAE,MAAM,WAAW;CACzB,OAAO,cAAc,OAAO,MAAM,kBAAkB,KAAK;;;;;+CAKZ,KAAK;;;;;iDAKH,KAAK;sBAChC,KAAK;;;;;;;EAOzB,mBAAmB,MAAM,EAAE;;wDAE2B,KAAK;;YAEjD,KAAK;WACN,OAAO,MAAM;gBACR,OAAO,YAAY,gBAAgB,OAAO,YAAY,OAAO;;AAE7E;;AAGA,eAAe,aAAa,YAA8B,YAAoB,eAAsC;CAGlH,MAAM,UAAU,gBAAgB,eAAe,WAAW,IAAI;CAE9D,OAAA,GAAA,iBAAA,GAAA,CADkB,MAAM,WAAW,OAAO,IAAK,UAAU,WAAW,UACjD,UAAA,QAAK,KAAK,YAAY,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;CACtE,IAAI,MAAM,WAAW,WAAW,OAAO,GACrC,OAAA,GAAA,iBAAA,GAAA,CAAS,WAAW,SAAS,UAAA,QAAK,KAAK,YAAY,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;CAEpF,OAAA,GAAA,iBAAA,UAAA,CAAgB,UAAA,QAAK,KAAK,YAAY,YAAY,GAAG,gBAAgB,UAAU,GAAG,OAAO;AAC3F;;;;AAKA,eAAe,gBAAgB,YAA8B,eAAsC;CACjG,OAAA,GAAA,iBAAA,GAAA,CAAS,gBAAgB,eAAe,WAAW,IAAI,GAAG;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC1F,OAAA,GAAA,iBAAA,GAAA,CAAS,WAAW,UAAU;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC9D,OAAA,GAAA,iBAAA,GAAA,CAAS,WAAW,SAAS;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC7D,OAAA,GAAA,iBAAA,MAAA,CAAY,UAAA,QAAK,QAAQ,WAAW,OAAO,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;AACrE;AAEA,eAAsB,iBAAiB,YAA8B,OAAgC,CAAC,GAAoC;CACxI,MAAM,EAAE,SAAS;CACjB,MAAM,gBAAgB,KAAK,iBAAiB,kBAAA,iBAAiB;CAC7D,IAAI,WAAW,WAAW,QAAQ,OAAO;EAAE,MAAM;EAAc;CAAK;CACpE,IAAI,kBAAA,aAAa,IAAI,GAAG,OAAO;EAAE,MAAM;EAAU;CAAK;CACtD,IAAI,CAAC,cAAc,WAAW,SAAS,MAAM,aAAa,GAAG;EAC3D,kBAAA,IAAI,KAAK,eAAe,0EAA0E;GAAE;GAAM,SAAS,WAAW;EAAQ,CAAC;EACvI,OAAO;GAAE,MAAM;GAAoB;EAAK;CAC1C;CACA,IAAI,cAAc,YAAY,aAAa,CAAC,CAAC,MAAM,WAAW,CAAC,kBAAA,kBAAkB,QAAQ,aAAa,CAAC,GAAG;EACxG,kBAAA,IAAI,KAAK,eAAe,4DAA4D,EAAE,KAAK,CAAC;EAC5F,OAAO;GAAE,MAAM;GAAe;EAAK;CACrC;CACA,MAAM,aAAa,UAAA,QAAK,KAAK,kBAAA,WAAc,GAAG,GAAG,KAAK,aAAa,WAAW,EAAE,IAAA,GAAA,YAAA,WAAA,CAAc,GAAG;CACjG,MAAM,eAAa,UAAA,QAAK,KAAK,eAAe,UAAU;CACtD,OAAA,GAAA,iBAAA,MAAA,CAAY,cAAY,EAAE,WAAW,KAAK,CAAC;CAC3C,MAAM,aAAa,YAAY,cAAY,aAAa;CACxD,MAAM,gBAAgB,YAAY,aAAa;CAC/C,kBAAA,IAAI,KAAK,eAAe,iCAAiC;EAAE;EAAM,SAAS;CAAW,CAAC;CACtF,OAAO;EAAE,MAAM;EAAM;EAAM,aAAa;CAAW;AACrD;;;ACtKA,eAAe,WAAW,QAAkC;CAC1D,IAAI;EACF,OAAA,GAAA,iBAAA,KAAA,CAAW,MAAM;EACjB,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,EAAE,SAAS;EACjB,IAAI,SAAS,YAAY,SAAS,WAAW,OAAO;EACpD,MAAM;CACR;AACF;;;;;;;AAQA,eAAe,cAAc,YAA2D,eAAuB,UAAmC;CAChJ,IAAI,WAAW,WAAW,WAAW,OAAO,WAAW;CACvD,MAAM,UAAU,UAAA,QAAK,KAAK,kBAAA,iBAAiB,aAAa,GAAG,QAAQ;CACnE,IAAI,MAAM,WAAW,UAAA,QAAK,KAAK,SAAA,aAAoB,CAAC,GAAG,OAAO;CAC9D,OAAO,WAAW;AACpB;;;;;;AAOA,eAAe,mBAAmB,YAA2D,eAAuB,UAAqC;CACvJ,MAAM,SAAS,UAAA,QAAK,KAAK,WAAW,UAAU,kBAAA,WAAW;CACzD,IAAI,WAAW,WAAW,WAAW,OAAO,CAAC,MAAM;CACnD,MAAM,gBAAgB,UAAA,QAAK,KAAK,kBAAA,iBAAiB,aAAa,GAAG,UAAU,kBAAA,WAAW;CACtF,MAAM,UAAoB,CAAC;CAC3B,IAAI,MAAM,WAAW,aAAa,GAAG,QAAQ,KAAK,aAAa;CAC/D,QAAQ,KAAK,MAAM;CACnB,OAAO;AACT;;;AAIA,eAAe,gBAAgB,QAA+B;CAC5D,IAAI;EACF,OAAA,GAAA,iBAAA,OAAA,CAAa,MAAM;CACrB,SAAS,KAAK;EACZ,IAAK,IAA0B,SAAS,UAAU,MAAM;CAC1D;AACF;;;;;AAMA,eAAe,sBAAsB,YAA8B,QAAgB,eAAuB,UAAiC;CACzI,MAAM,OAAO,MAAM,cAAc,YAAY,eAAe,QAAQ;CACpE,MAAM,YAAY,UAAA,QAAK,KAAK,MAAM,kBAAA,WAAW;CAC7C,MAAM,SAAS,KAAK,MAAM,OAAA,GAAA,iBAAA,SAAA,CAAe,WAAW,OAAO,CAAC;CAC5D,IAAI,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,QAAQ,OAAO,MAAM,QAAQ,UAAU,OAAO,OAAO,MAAM;CACnG,MAAM,aAAa,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE;CACtD,KAAK,MAAM,UAAU,MAAM,mBAAmB,YAAY,eAAe,QAAQ,GAC/E,MAAM,kBAAA,gBAAgB,QAAQ,UAAU;AAE5C;;;;AAKA,eAAsB,iBAAiB,YAA8B,QAAgB,OAAkB,CAAC,GAA8B;CACpI,IAAI,WAAW,WAAW,QAAQ,OAAO,EAAE,MAAM,aAAa;CAC9D,IAAI,kBAAA,aAAa,WAAW,IAAI,GAAG,OAAO,EAAE,MAAM,SAAS;CAC3D,MAAM,WAAW,kBAAA,aAAa,WAAW,IAAI;CAC7C,IAAI,aAAa,MAAM,OAAO;EAAE,MAAM;EAAe;CAAO;CAC5D,MAAM,QAAQ,WAAW,OAAO,SAAS,CAAC;CAC1C,MAAM,OAAO,MAAM,MAAM,UAAU,MAAM,OAAO,MAAM;CACtD,IAAI,CAAC,MAAM,OAAO;EAAE,MAAM;EAAa;CAAO;CAC9C,MAAM,gBAAgB,KAAK,iBAAiB,kBAAA,iBAAiB;CAC7D,MAAM,WAAW,kBAAA,oBAAoB,MAAM,cAAc,YAAY,eAAe,QAAQ,GAAG,KAAK,IAAI;CACxG,IAAI,aAAa,MAAM,OAAO;EAAE,MAAM;EAAe;CAAO;CAI5D,MAAM,sBAAsB,YAAY,QAAQ,eAAe,QAAQ;CAIvE,IAAI,CADoB,MAAM,MAAM,UAAU,MAAM,OAAO,UAAU,MAAM,SAAS,KAAK,IACpF,GAAiB,MAAM,gBAAgB,QAAQ;CACpD,OAAO;EAAE,MAAM;EAAM;CAAO;AAC9B;;;;AChHA,SAAgB,aAAa,MAAuB;CAClD,OAAO,KAAK,WAAA,KAA6B,KAAK,KAAK,SAAS;AAC9D;;;;;;ACsDA,IAAa,wBAAwB;;AAGrC,IAAM,cAAc;;AAEpB,IAAM,mBAAmB;;AAEzB,IAAa,oBAAoB;;;AAGjC,IAAM,YAAY;;;AA0BlB,SAAS,YAAY,MAAoC;CACvD,OAAO,KAAK,iBAAiB,kBAAA,iBAAiB;AAChD;;;AAIA,SAAS,kBAAkB,MAAsB;CAC/C,OAAO,yCAAyC,qBAAA,gBAAgB,IAAI,EAAE;AACxE;AAgBA,SAAS,oBAAoB,OAAgB,MAA6E;CACxH,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,IAAI,KAAK;CAC3C,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,MAAM,OAAO,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,GAChG,OAAO;EAAE,IAAI;EAAO,OAAO,uBAAuB,KAAK;CAAwD;CAEjH,OAAO;EAAE,IAAI;EAAa;CAAkB;AAC9C;;;;AAKA,SAAS,cAAc,QAAwB,QAAkB,YAAoC;CACnG,MAAM,OAAO,OAAO,SAAS,UAAU,IAAI,SAAS,CAAC,YAAY,GAAG,MAAM;CAC1E,OAAO,OAAO,YAAY,KAAK,QAAQ,QAAQ,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;AAChG;;;;;;;AAQA,eAAe,oBAAoB,YAA8B,MAAyD;CACxH,IAAI,KAAK,kBAAkB,OAAO,KAAA;CAClC,MAAM,SAAS,MAAM,0BAA0B,YAAY,EAAE,eAAe,KAAK,cAAc,CAAC;CAChG,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO,KAAK,UAAU,KAAK,qBAAA,gBAAgB,MAAM,IAAI,EAAE,IAAI,qBAAA,gBAAgB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI;CACpH,OAAO,GAAG,OAAO,OAAO,2GAA2G;AACrI;AAEA,eAAe,mBACb,YACA,KACA,MACyD;CACzD,MAAM,QAAQ,SAAS,YAAY,EAAE,eAAe,KAAK,cAAc,CAAC;CACxE,IAAI,CAAC,KAAK,OAAO;EAAE,OAAO,MAAM,MAAM,KAAK;EAAG,SAAS,CAAC;CAAE;CAC1D,MAAM,QAA0B,CAAC;CACjC,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,YAAY,KAAK;EAK1B,MAAM,OAAO,MAAM,MAAM,KAAK,QAAQ,CAAC,CAAC,YAAY,IAAI;EACxD,IAAI,MAAM,MAAM,KAAK,IAAI;OACpB,QAAQ,KAAK,QAAQ;CAC5B;CACA,OAAO;EAAE;EAAO;CAAQ;AAC1B;AAEA,eAAe,eAAe,YAA8B,MAAoB,MAA6C;CAC3H,MAAM,EAAE,OAAO,YAAY,MAAM,mBAAmB,YAAY,KAAK,KAAK,IAAI;CAC9E,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,UAAU,MAAM,SAAA,KACrC,OAAO,gCAAgC,WAAW,KAAK,QAAQ,MAAM,OAAO;CAE9E,MAAM,WAAW,MAAM,YAAY,YAAY,OAAO,IAAI;CAC1D,MAAM,YAAY,KAAK,SAAS,SAAS,KAAK,SAAS,cAAc,MAAM,KAAK,QAAoB,WAAW,OAAO,UAAU,CAAC,IAAI;CAKrI,MAAM,UAAU,CAAC,KAAK,OAAO,QAAQ,SAAS,IAAI,MAAM,oBAAoB,YAAY,IAAI,IAAI,KAAA;CAChG,OAAO,KAAK,UAAU;EACpB,YAAY,WAAW;EACvB,OAAO,UAAU;EACjB,OAAO;EACP,GAAI,QAAQ,SAAS,IAAI,EAAE,SAAS,QAAQ,KAAK,aAAa,qBAAA,gBAAgB,QAAQ,CAAC,EAAE,IAAI,CAAC;EAC9F,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;CAC/B,CAAC;AACH;;;AAIA,SAAS,mBAAmB,QAAwB,QAAyC;CAC3F,KAAK,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG;EACrC,MAAM,OAAO,OAAO,OAAO;EAC3B,IAAI,CAAC,QAAQ,CAAC,YAAA,eAAe,IAAI,KAAK,IAAI,GAAG;EAC7C,IAAI,KAAK,SAAS,YAAY,KAAK,OAAO,OAAO,IAAI,IAAI,mDAAmD,KAAK,MAAM;EAEvH,OAAO,IAAI,IAAI,OAAO;GADsB,SAAS;GAAW,OAAO;GAAY,WAAW;GAAoB,QAAQ;EACpG,EAAU,KAAK,SAAS,WAAW;CAC3D;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;AAyBA,eAAe,kBACb,YACA,QACA,QACA,MACkC;CAClC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,kBAAA,SAAS,WAAW,SAAS,QAAQ,EAAE,eAAe,KAAK,cAAc,CAAC;CAC7F,QAAQ;EACN,OAAO,IAAI,OAAO;CACpB;CACA,IAAI,CAAC,UAAU,OAAO,IAAI,OAAO;CACjC,MAAM,SAAS,OAAO,QAAQ,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS;EACxD,MAAM,OAAO,WAAW,OAAO,OAAO;EACtC,OAAO,CAAC,QAAQ,CAAC,YAAA,eAAe,IAAI,KAAK,IAAI;CAC/C,CAAC;CACD,OAAO;EAAE,GAAG,OAAO,YAAY,MAAM;EAAG,GAAG;CAAO;AACpD;AAEA,eAAe,WACb,YACA,QACA,MACA,MACuD;CACvD,MAAM,EAAE,WAAW;CACnB,MAAM,SAAS,kBAAA,oBAAoB,QAAQ,MAAM;CACjD,MAAM,UAAU,OAAe,aAAgD,EAC7E,UAAU;EAAE,IAAI,qBAAA,gBAAgB,KAAK;EAAG,SAAS,qBAAA,gBAAgB,OAAO;CAAE,EAC5E;CACA,IAAI,WAAW,MAAM,OAAO,OAAO,WAAW,kBAAkB,OAAO,WAAW,8CAA8C;CAChI,MAAM,WAAW,mBAAmB,QAAQ,MAAM;CAClD,IAAI,UAAU,OAAO,OAAO,QAAQ,QAAQ;CAC5C,IAAI,UAAU;CACd,IAAI,SAAS,SAAS;EACpB,MAAM,SAAS,MAAM,kBAAkB,YAAY,QAAQ,QAAQ,IAAI;EACvE,IAAI,OAAO,WAAW,UAAU,OAAO,OAAO,QAAQ,MAAM;EAC5D,UAAU;CACZ;CACA,IAAI,CAAC,KAAK,kBAAkB;EAC1B,MAAM,UAAU,qBAAqB,SAAS,QAAQ,MAAM;EAC5D,IAAI,SAAS,OAAO,OAAO,QAAQ,OAAO;CAC5C;CACA,MAAM,SAAS,MAAM,kBAAA,UAAU,WAAW,SAAS,QAAQ,SAAS;EAClE,iBAAiB,SAAS;EAC1B,eAAe,KAAK;EACpB,MAAM,WAAW;CACnB,CAAC;CACD,IAAI,OAAO,SAAS,MAAM,OAAO,EAAE,SAAS,OAAO,OAAO;CAC1D,IAAI,OAAO,SAAS,cAClB,OAAO,OAAO,QAAQ,IAAI,OAAO,uGAAuG;CAC1I,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,QAAQ,IAAI,OAAO,8EAA8E;CAC/I,OAAO,OAAO,QAAQ,gEAAgE;AACxF;;;;;;;;;AAUA,eAAe,iBAAiB,YAA8B,UAAmB,MAA6C;CAC5H,MAAM,SAAS,iBAAiB,UAAU,QAAQ;CAClD,IAAI,CAAC,OAAO,SAIV,OAAO,0DAHO,OAAO,MAAM,OACxB,MAAM,GAAA,EAAoB,CAAC,CAC3B,KAAK,UAAU,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG,KAAK,SAAS,IAAI,qBAAA,gBAAgB,MAAM,OAAO,GACpC,CAAA,CAAM,KAAK,IAAI;CAElF,MAAM,QAAQ,SAAS,YAAY,EAAE,eAAe,KAAK,cAAc,CAAC;CACxE,IAAI,MAAM,OAAO;EACf,MAAM,OAAO,MAAM,MAAM,MAAM,OAAO,IAAI;EAC1C,OAAO,KAAK,UAAU;GAAE,YAAY,WAAW;GAAM,OAAO,KAAK;GAAQ;EAAK,CAAC;CACjF;CAKA,MAAM,OAAO,MAAM,iBAAiB,MADb,YAAY,YAAY,MAAM,MAAM,KAAK,GAAG,IAAI,GACzB,OAAO,IAAI;CACzD,OAAO,KAAK,UAAU;EAAE,YAAY,WAAW;EAAM,OAAO,KAAK;EAAQ;CAAK,CAAC;AACjF;AAEA,eAAe,eAAe,YAA8B,MAAoB,MAA6C;CAI3H,IAAI,CAAC,mBAAmB,UAAU,GAChC,OAAO,qBAAqB,gBAAgB,WAAW,IAAI,EAAE,iCAAiC,WAAW,OAAO,YAAY,KAAK;CAEnI,MAAM,UAAoB,CAAC;CAC3B,MAAM,WAA0B,CAAC;CACjC,KAAK,MAAM,UAAU,KAAK,OAAO;EAC/B,MAAM,UAAU,MAAM,WAAW,YAAY,QAAQ,KAAK,MAAM,IAAI;EACpE,IAAI,QAAQ,SAAS,QAAQ,KAAK,QAAQ,OAAO;EACjD,IAAI,QAAQ,UAAU,SAAS,KAAK,QAAQ,QAAQ;CACtD;CACA,OAAO,KAAK,UAAU;EAAE,YAAY,WAAW;EAAM;EAAS;CAAS,CAAC;AAC1E;AAEA,SAAS,cAAc,MAA+B,MAAqC;CACzF,MAAM,EAAE,OAAO,SAAS;CAExB,IAAI,EADe,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,OAAO,UAAU,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,CAAC,IACzI,OAAO;CACxB,IAAI,SAAS,KAAA,KAAa,SAAS,YAAY,SAAS,YAAY,SAAS,SAC3E,OAAO;CAET,OAAO;EAAE;EAAa;EAA2B,MAAO,QAA6C;CAAS;AAChH;;;;;;AAOA,eAAe,kBAAkB,MAA6C;CAC5E,MAAM,cAAc,MAAM,uBAAuB,IAAI;CACrD,OAAO,KAAK,UAAU;EAAE,OAAO,YAAY;EAAQ;CAAY,CAAC;AAClE;;;;;AAMA,eAAe,iBAAiB,MAA6C;CAC3E,MAAM,aAAa,CACjB,UAAA,QAAK,KAAK,YAAY,IAAI,GAAG,WAAW,gBAAgB,GACxD,GAAI,KAAK,kBAAkB,CAAC,UAAA,QAAK,KAAK,KAAK,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CACtF;CACA,KAAK,MAAM,aAAa,YACtB,IAAI;EACF,OAAO,OAAA,GAAA,iBAAA,SAAA,CAAe,WAAW,OAAO;CAC1C,QAAQ,CAER;CAEF,OAAO,wEAAwE,iBAAiB;AAClG;;;;;AAMA,eAAe,gBAAgB,MAAc,MAA6C;CACxF,MAAM,aAAa,MAAM,kBAAA,eAAe,MAAM,IAAI;CAClD,IAAI,CAAC,YAAY,OAAO,kBAAkB,IAAI;CAE9C,MAAM,aAAa,CAAC,UAAA,QAAK,KAAK,2BAAA,aAAa,YAAY,IAAI,GAAG,WAAW,IAAI,GAAG,WAAW,GAAG,UAAA,QAAK,KAAK,WAAW,UAAU,WAAW,CAAC;CACzI,KAAK,MAAM,aAAa,YACtB,IAAI;EACF,OAAO,OAAA,GAAA,iBAAA,SAAA,CAAe,WAAW,OAAO;CAC1C,QAAQ,CAER;CAEF,OAAO,sBAAsB,qBAAA,gBAAgB,IAAI,EAAE,oBAAoB,YAAY;AACrF;;;AAIA,SAAS,kBAAkB,YAA8B,MAA6B;CACpF,IAAI,WAAW,WAAW,WACxB,OAAO,sBAAsB,qBAAA,gBAAgB,IAAI,EAAE,OAAO,WAAW,OAAO;CAE9E,IAAI,aAAa,IAAI,GACnB,OAAO,sBAAsB,qBAAA,gBAAgB,IAAI,EAAE;CAErD,OAAO;AACT;;;AAIA,SAAS,mBAAmB,QAAqE;CAC/F,MAAM,QAAQ,OAAO,MAAM,GAAA,EAAoB;CAC/C,MAAM,QAAQ,MAAM,KAAK,UAAU,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG,KAAK,SAAS,IAAI,qBAAA,gBAAgB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI;CACpI,MAAM,UAAU,OAAO,SAAS,MAAM;CAEtC,OAAO,iGAAiG,QAD3F,UAAU,IAAI,YAAY,QAAQ,8CAA8C;AAE/F;;;;AAKA,eAAe,qBAAqB,MAAc,QAAiB,MAA2C;CAC5G,MAAM,OAAO,YAAY,IAAI;CAC7B,MAAM,kBAAA,gBAAgB,UAAA,QAAK,KAAK,2BAAA,aAAa,MAAM,IAAI,GAAG,WAAW,GAAG,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GAAG;CAC9G,2BAAA,iBAAiB,MAAM;EAAE;EAAM,aAAa,CAAC,WAAW;CAAE,CAAC;CAC3D,IAAI;EACF,MAAM,KAAK,oBAAoB;CACjC,QAAQ,CAER;AACF;;;;;;;AAQA,SAAS,oBAAoB,QAA0B,MAA6B;CAClF,MAAM,eAAe,OAAO,OAAO,OAAO;CAC1C,IAAI,CAAC,cAAc,OAAO,eAAe,OAAO,WAAW;CAC3D,IAAI,aAAa,YAAY,MAAM,OAAO,yBAAyB,OAAO,WAAW;CACrF,IAAI,OAAO,aAAa,KAAA,KAAa,kBAAA,eAAe,OAAO,UAAU,IAAI,MAAM,MAAM,OAAO,aAAa,OAAO,SAAS;CACzH,IAAI,OAAO,eAAe,KAAA,KAAa,kBAAA,eAAe,OAAO,WAAW,MAAM,IAAI,MAAM,MACtF,OAAO,oBAAoB,OAAO,WAAW,KAAK;CAEpD,OAAO;AACT;;;;AAKA,eAAe,gBAAgB,MAAc,WAAoB,MAA6C;CAC5G,IAAI,CAAC,aAAa,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,GACxE,OAAO;CAET,MAAM,aAAa,MAAM,kBAAA,eAAe,MAAM,IAAI;CAClD,IAAI,CAAC,YACH,OAAO,yCAAyC,qBAAA,gBAAgB,IAAI,EAAE,sCAAsC,YAAY,qBAAqB,qBAAA,gBAAgB,IAAI,EAAE;CAErK,MAAM,UAAU,kBAAkB,YAAY,IAAI;CAClD,IAAI,SAAS,OAAO;CACpB,MAAM,SAAS,kBAAA,kBAAkB,UAAU,SAAS;CACpD,IAAI,CAAC,OAAO,SAAS,OAAO,mBAAmB,OAAO,MAAM,MAAM;CAGlE,MAAM,OAAO,oBAAoB,OAAO,MAAM,YAAY,IAAI,CAAC;CAC/D,IAAI,MACF,OAAO,uCAAuC,KAAK;CAGrD,MAAM,qBAAqB,WAAW,MAAM,OAAO,MAAM,IAAI;CAC7D,OAAO,KAAK,UAAU;EAAE,YAAY,WAAW;EAAM,SAAS;CAAK,CAAC;AACtE;AAEA,IAAM,2BACJ;;AASF,eAAe,iBAAiB,YAA8B,MAA+B,MAA6C;CACxI,MAAM,MAAM,oBAAoB,KAAK,KAAK,KAAK;CAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI;CACxB,MAAM,SAAS,oBAAoB,KAAK,QAAQ,QAAQ;CACxD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO;CAC9B,OAAO,eAAe,YAAY;EAAE,MAAM,WAAW;EAAM,KAAK,IAAI;EAAO,QAAQ,OAAO;CAAM,GAAG,IAAI;AACzG;AAKA,eAAe,wBAAwB,MAA4B,MAAgD;CACjH,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;CAC/D,IAAI,WAAW,cAAc,OAAO,iBAAiB,IAAI;CACzD,IAAI,WAAW,eAAe,OAAO,kBAAkB,IAAI;CAC3D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,KAAK,IAAI;CAChE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,WAAW,aAAa,OAAO,gBAAgB,MAAM,IAAI;CAC7D,IAAI,WAAW,aAAa,OAAO,gBAAgB,MAAM,KAAK,QAAQ,IAAI;CAC1E,IAAI,WAAW,cAAc,WAAW,cAAc,WAAW,cAC/D,OAAO;CAET,MAAM,aAAa,MAAM,kBAAA,eAAe,MAAM,IAAI;CAClD,IAAI,CAAC,YAAY,OAAO,kBAAkB,IAAI;CAC9C,IAAI,WAAW,YAAY,OAAO,iBAAiB,YAAY,MAAM,IAAI;CACzE,IAAI,WAAW,cAAc,OAAO,iBAAiB,YAAY,KAAK,OAAO,IAAI;CACjF,MAAM,SAAS,cAAc,MAAM,IAAI;CACvC,IAAI,OAAO,WAAW,UAAU,OAAO;CACvC,OAAO,eAAe,YAAY,QAAQ,IAAI;AAChD;AAIA,IAAM,+BAA+B;CACnC,MAAM;CACN,aACE;CACF,aAAa;EACX,MAAM;EACN,YAAY;GACV,QAAQ;IACN,MAAM;IACN,MAAM;KAAC;KAAY;KAAY;KAAc;KAAe;KAAc;KAAa;IAAW;IAClG,aAAa;GACf;GACA,MAAM;IACJ,MAAM;IACN,aAAa;GACf;GACA,KAAK;IACH,MAAM;IACN,OAAO,EAAE,MAAM,SAAS;IACxB,aAAa;GACf;GACA,QAAQ;IACN,MAAM;IACN,OAAO,EAAE,MAAM,SAAS;IACxB,aAAa;GACf;GACA,OAAO;IACL,MAAM;IACN,OAAO,EAAE,MAAM,SAAS;IACxB,aAAa;GACf;GACA,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAU;KAAU;IAAO;IAClC,aACE;GACJ;GACA,QAAQ;IACN,MAAM;IACN,aACE;GACJ;GACA,OAAO;IACL,MAAM;IACN,aACE;GACJ;EACF;EACA,UAAU,CAAC,QAAQ;CACrB;AACF;AAEA,SAAgB,yBAAyB,OAA6B,CAAC,GAAG;CACxE,OAAO;EACL,YAAY;EAKZ,cAAc;EAEd,QAAQ;EAER,UAAU,SAAmD,wBAAwB,MAAM,IAAI;CACjG;AACF"}