@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.1

package/dist/db/apply-schema.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Single-tenant schema apply engine shared by `pxbaas db push <file>` and
+ * `pxbaas app db-init <name>`.
+ *
+ * Safety contract (agreed design):
+ *   - The plan (every statement) is shown BEFORE anything runs.
+ *   - Execution requires explicit authorization: an interactive confirm, or
+ *     `--yes` for non-interactive use. `--dry-run` only previews.
+ *   - Statements run sequentially and STOP ON THE FIRST ERROR.
+ *   - No automatic rollback — already-applied statements stay applied.
+ *   - Multi-tenant profiles are rejected: tenant DDL is out of scope (it needs
+ *     the global service_role key via POST /pg/query with tenant_<id>.<table>).
+ */
+import { MetaDriver } from "@polardbx/pxbaas-client";
+export interface ApplyOptions {
+    /** Target schema the `__SCHEMA__` placeholder resolves to (single-tenant: public). */
+    schema: string;
+    /** Preview only; never execute. */
+    dryRun: boolean;
+    /** Non-interactive authorization; skips the confirm prompt. */
+    assumeYes: boolean;
+    /** Emit a structured result instead of human text (caller prints JSON). */
+    json: boolean;
+}
+export interface StatementResult {
+    index: number;
+    sql: string;
+    status: "pending" | "ok" | "failed" | "skipped";
+    error?: string;
+}
+export interface ApplyResult {
+    source: string;
+    schema: string;
+    total: number;
+    executed: number;
+    failed: number;
+    dryRun: boolean;
+    authorized: boolean;
+    statements: StatementResult[];
+}
+/** A minimal SQL executor so this module stays unit-testable without MetaDriver. */
+export type SqlExecutor = (sql: string) => Promise<unknown>;
+/**
+ * Resolve the active profile into a single-tenant MetaDriver.
+ * @throws when there is no profile, no credentials, or the profile is multi-tenant.
+ */
+export declare function getSingleTenantMetaDriver(role?: "anon" | "service_role"): Promise<{
+    driver: MetaDriver;
+    useServiceRole: boolean;
+    profileName: string;
+}>;
+/**
+ * Show the plan, obtain authorization, then apply statements sequentially with
+ * stop-on-first-error semantics. Never rolls back.
+ */
+export declare function applySqlStatements(rawSql: string, source: string, opts: ApplyOptions, executor: SqlExecutor): Promise<ApplyResult>;
+//# sourceMappingURL=apply-schema.d.ts.map

package/dist/db/apply-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-schema.d.ts","sourceRoot":"","sources":["../../src/db/apply-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAUrD,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,oFAAoF;AACpF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE5D;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,GAAE,MAAM,GAAG,cAA+B,GAC7C,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B/E;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,WAAW,CAAC,CAyItB"}

package/dist/db/apply-schema.js

@@ -0,0 +1,192 @@
+/**
+ * Single-tenant schema apply engine shared by `pxbaas db push <file>` and
+ * `pxbaas app db-init <name>`.
+ *
+ * Safety contract (agreed design):
+ *   - The plan (every statement) is shown BEFORE anything runs.
+ *   - Execution requires explicit authorization: an interactive confirm, or
+ *     `--yes` for non-interactive use. `--dry-run` only previews.
+ *   - Statements run sequentially and STOP ON THE FIRST ERROR.
+ *   - No automatic rollback — already-applied statements stay applied.
+ *   - Multi-tenant profiles are rejected: tenant DDL is out of scope (it needs
+ *     the global service_role key via POST /pg/query with tenant_<id>.<table>).
+ */
+import inquirer from "inquirer";
+import { MetaDriver } from "@polardbx/pxbaas-client";
+import { CredentialStore, ProfileManager, formatError, formatSuccess, formatWarning, } from "../credentials/index.js";
+import { buildStatementPlan, SCHEMA_PLACEHOLDER } from "./sql-file.js";
+/**
+ * Resolve the active profile into a single-tenant MetaDriver.
+ * @throws when there is no profile, no credentials, or the profile is multi-tenant.
+ */
+export async function getSingleTenantMetaDriver(role = "service_role") {
+    const profileManager = new ProfileManager();
+    const profile = await profileManager.getCurrentProfile();
+    if (!profile) {
+        throw new Error('No active profile. Use "pxbaas login" to authenticate first.');
+    }
+    if (profile.mode === "multi-tenant") {
+        throw new Error("Multi-tenant DDL is not supported by this command. In multi-tenant mode run DDL " +
+            "via POST {endpoint}/pg/query using the GLOBAL service_role key with fully-qualified " +
+            "tenant_<id>.<table> names (per-tenant keys are rejected 401 on /pg/query).");
+    }
+    const credentials = await new CredentialStore().getCredentials(profile.name);
+    if (!credentials) {
+        throw new Error(`No credentials found for profile: ${profile.name}. Use "pxbaas login" to authenticate.`);
+    }
+    const driver = new MetaDriver({
+        endpoint: profile.endpoint,
+        anonKey: credentials.anonKey,
+        serviceRoleKey: credentials.serviceRoleKey,
+        tenantId: profile.tenantId,
+    });
+    return { driver, useServiceRole: role === "service_role", profileName: profile.name };
+}
+/**
+ * Show the plan, obtain authorization, then apply statements sequentially with
+ * stop-on-first-error semantics. Never rolls back.
+ */
+export async function applySqlStatements(rawSql, source, opts, executor) {
+    const { statements, substituted } = buildStatementPlan(rawSql, opts.schema);
+    if (statements.length === 0) {
+        if (!opts.json) {
+            console.log(formatWarning(`No executable statements found in ${source}.`));
+        }
+        return {
+            source,
+            schema: opts.schema,
+            total: 0,
+            executed: 0,
+            failed: 0,
+            dryRun: opts.dryRun,
+            authorized: false,
+            statements: [],
+        };
+    }
+    // 1) Show the plan (text mode). JSON callers receive the structured result.
+    if (!opts.json) {
+        console.log(formatSuccess(`Plan for ${source} (schema: ${opts.schema})`));
+        if (!substituted) {
+            console.log(formatWarning(`Script contains no ${SCHEMA_PLACEHOLDER} placeholder; --schema has no effect.`));
+        }
+        statements.forEach((sql, i) => {
+            console.log(`\n[${i + 1}/${statements.length}] ${sql}`);
+        });
+        console.log("");
+    }
+    // 2) Dry run: preview only.
+    if (opts.dryRun) {
+        if (!opts.json) {
+            console.log(formatWarning(`Dry run: 0 of ${statements.length} statement(s) executed.`));
+        }
+        return {
+            source,
+            schema: opts.schema,
+            total: statements.length,
+            executed: 0,
+            failed: 0,
+            dryRun: true,
+            authorized: false,
+            statements: statements.map((sql, i) => ({
+                index: i + 1,
+                sql,
+                status: "skipped",
+            })),
+        };
+    }
+    // 3) Authorization gate.
+    const authorized = await authorize(statements.length, opts);
+    if (!authorized) {
+        if (!opts.json) {
+            console.log(formatWarning("Aborted by operator; nothing was executed."));
+        }
+        return {
+            source,
+            schema: opts.schema,
+            total: statements.length,
+            executed: 0,
+            failed: 0,
+            dryRun: false,
+            authorized: false,
+            statements: statements.map((sql, i) => ({
+                index: i + 1,
+                sql,
+                status: "skipped",
+            })),
+        };
+    }
+    // 4) Execute sequentially; stop on the first error; no rollback.
+    const results = [];
+    let executed = 0;
+    let failed = 0;
+    for (let i = 0; i < statements.length; i++) {
+        const sql = statements[i];
+        const r = { index: i + 1, sql, status: "pending" };
+        results.push(r);
+        try {
+            await executor(sql);
+            r.status = "ok";
+            executed++;
+            if (!opts.json)
+                console.log(formatSuccess(`[${i + 1}/${statements.length}] ok`));
+        }
+        catch (e) {
+            r.status = "failed";
+            r.error = e instanceof Error ? e.message : String(e);
+            failed++;
+            if (!opts.json) {
+                console.error(formatError(`[${i + 1}/${statements.length}] failed: ${r.error}`));
+            }
+            for (let j = i + 1; j < statements.length; j++) {
+                results.push({ index: j + 1, sql: statements[j], status: "skipped" });
+            }
+            break;
+        }
+    }
+    if (!opts.json) {
+        console.log("");
+        if (failed === 0) {
+            console.log(formatSuccess(`Applied ${executed}/${statements.length} statement(s) to schema '${opts.schema}'.`));
+        }
+        else {
+            console.log(formatError(`Stopped after failure: ${executed} ok, ${failed} failed, ` +
+                `${statements.length - executed - failed} skipped. No rollback performed.`));
+        }
+    }
+    return {
+        source,
+        schema: opts.schema,
+        total: statements.length,
+        executed,
+        failed,
+        dryRun: false,
+        authorized: true,
+        statements: results,
+    };
+}
+/**
+ * Decide whether execution is authorized. `--yes` authorizes outright; JSON mode
+ * and non-TTY sessions cannot prompt, so they require `--yes` explicitly.
+ */
+async function authorize(count, opts) {
+    if (opts.assumeYes)
+        return true;
+    if (opts.json) {
+        throw new Error("Refusing to run DDL in --json mode without explicit authorization. " +
+            "Re-run with --yes to apply, or --dry-run to preview only.");
+    }
+    if (!process.stdin.isTTY) {
+        throw new Error("Refusing to run DDL without explicit authorization: pass --yes for " +
+            "non-interactive use, or run in a TTY to confirm.");
+    }
+    const { ok } = await inquirer.prompt([
+        {
+            type: "confirm",
+            name: "ok",
+            message: `Execute ${count} statement(s) against schema '${opts.schema}'? (no automatic rollback)`,
+            default: false,
+        },
+    ]);
+    return ok;
+}
+//# sourceMappingURL=apply-schema.js.map

package/dist/db/apply-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-schema.js","sourceRoot":"","sources":["../../src/db/apply-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAkCvE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgC,cAAc;IAE9C,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,sFAAsF;YACtF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,IAAI,eAAe,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,qCAAqC,OAAO,CAAC,IAAI,uCAAuC,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,cAAc,EAAE,WAAW,CAAC,cAAc;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,KAAK,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAAc,EACd,IAAkB,EAClB,QAAqB;IAErB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;YACL,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,MAAM,aAAa,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,aAAa,CACX,sBAAsB,kBAAkB,uCAAuC,CAChF,CACF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,4BAA4B;IAC5B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,aAAa,CAAC,iBAAiB,UAAU,CAAC,MAAM,yBAAyB,CAAC,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,KAAK,EAAE,CAAC,GAAG,CAAC;gBACZ,GAAG;gBACH,MAAM,EAAE,SAAkB;aAC3B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,4CAA4C,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;YACL,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,KAAK,EAAE,CAAC,GAAG,CAAC;gBACZ,GAAG;gBACH,MAAM,EAAE,SAAkB;aAC3B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAoB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;YAChB,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;YACpB,CAAC,CAAC,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAClE,CAAC;YACJ,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,aAAa,CACX,WAAW,QAAQ,IAAI,UAAU,CAAC,MAAM,4BAA4B,IAAI,CAAC,MAAM,IAAI,CACpF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,WAAW,CACT,0BAA0B,QAAQ,QAAQ,MAAM,WAAW;gBACzD,GAAG,UAAU,CAAC,MAAM,GAAG,QAAQ,GAAG,MAAM,kCAAkC,CAC7E,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,OAAO;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,IAAkB;IACxD,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;QACpD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,WAAW,KAAK,iCAAiC,IAAI,CAAC,MAAM,4BAA4B;YACjG,OAAO,EAAE,KAAK;SACf;KACF,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/db/sql-file.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Pure SQL-file helpers for single-tenant DDL apply (`pxbaas db push` and
+ * `pxbaas app db-init`).
+ *
+ * These functions do NO I/O and NO network — they only transform the text of a
+ * schema.sql script so they can be unit-tested in isolation:
+ *   - substituteSchema: fill the `__SCHEMA__` placeholder templates ship with.
+ *   - splitSqlStatements: cut a script into individual statements on top-level
+ *     `;`, correctly ignoring separators that appear inside strings, quoted
+ *     identifiers, or comments.
+ */
+/** Placeholder that every webapp template's db/schema.sql uses for the target schema. */
+export declare const SCHEMA_PLACEHOLDER = "__SCHEMA__";
+/** True when the script still contains the `__SCHEMA__` placeholder. */
+export declare function hasSchemaPlaceholder(sql: string): boolean;
+/**
+ * Replace every `__SCHEMA__` occurrence with the target schema name.
+ * Single-tenant instances use `public`; the value is inserted verbatim because
+ * it is a database identifier the operator chose (not user free-text).
+ */
+export declare function substituteSchema(sql: string, schema: string): string;
+/**
+ * Split a SQL script into individual statements on top-level `;`.
+ *
+ * Semicolons are ignored when they appear inside:
+ *   - single-quoted strings (`''` is an escaped literal quote)
+ *   - double-quoted strings (`""` is an escaped literal quote)
+ *   - backtick-quoted identifiers
+ *   - `--` / `#` line comments
+ *   - `/* *\/` block comments
+ *
+ * Comments are stripped from the returned statements (replaced by a single
+ * space) so the plan we show the operator is clean and each element is exactly
+ * one executable statement. Empty / comment-only fragments are dropped.
+ *
+ * This is intentionally a scanner, not a SQL parser: it only needs to find
+ * statement boundaries safely for the idempotent scripts our templates ship.
+ */
+export declare function splitSqlStatements(sql: string): string[];
+/**
+ * Convenience: substitute the schema placeholder then split into statements.
+ * Returns the statements plus whether any placeholder was actually present
+ * (so callers can warn when a schema was supplied but the script ignores it).
+ */
+export declare function buildStatementPlan(rawSql: string, schema: string): {
+    statements: string[];
+    substituted: boolean;
+};
+//# sourceMappingURL=sql-file.d.ts.map

package/dist/db/sql-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-file.d.ts","sourceRoot":"","sources":["../../src/db/sql-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAE/C,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAmHxD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAIhD"}

package/dist/db/sql-file.js

@@ -0,0 +1,167 @@
+/**
+ * Pure SQL-file helpers for single-tenant DDL apply (`pxbaas db push` and
+ * `pxbaas app db-init`).
+ *
+ * These functions do NO I/O and NO network — they only transform the text of a
+ * schema.sql script so they can be unit-tested in isolation:
+ *   - substituteSchema: fill the `__SCHEMA__` placeholder templates ship with.
+ *   - splitSqlStatements: cut a script into individual statements on top-level
+ *     `;`, correctly ignoring separators that appear inside strings, quoted
+ *     identifiers, or comments.
+ */
+/** Placeholder that every webapp template's db/schema.sql uses for the target schema. */
+export const SCHEMA_PLACEHOLDER = "__SCHEMA__";
+/** True when the script still contains the `__SCHEMA__` placeholder. */
+export function hasSchemaPlaceholder(sql) {
+    return sql.includes(SCHEMA_PLACEHOLDER);
+}
+/**
+ * Replace every `__SCHEMA__` occurrence with the target schema name.
+ * Single-tenant instances use `public`; the value is inserted verbatim because
+ * it is a database identifier the operator chose (not user free-text).
+ */
+export function substituteSchema(sql, schema) {
+    return sql.split(SCHEMA_PLACEHOLDER).join(schema);
+}
+/**
+ * Split a SQL script into individual statements on top-level `;`.
+ *
+ * Semicolons are ignored when they appear inside:
+ *   - single-quoted strings (`''` is an escaped literal quote)
+ *   - double-quoted strings (`""` is an escaped literal quote)
+ *   - backtick-quoted identifiers
+ *   - `--` / `#` line comments
+ *   - `/* *\/` block comments
+ *
+ * Comments are stripped from the returned statements (replaced by a single
+ * space) so the plan we show the operator is clean and each element is exactly
+ * one executable statement. Empty / comment-only fragments are dropped.
+ *
+ * This is intentionally a scanner, not a SQL parser: it only needs to find
+ * statement boundaries safely for the idempotent scripts our templates ship.
+ */
+export function splitSqlStatements(sql) {
+    const statements = [];
+    let current = "";
+    let i = 0;
+    const n = sql.length;
+    let inSingle = false;
+    let inDouble = false;
+    let inBacktick = false;
+    let inLineComment = false;
+    let inBlockComment = false;
+    while (i < n) {
+        const c = sql[i];
+        const next = i + 1 < n ? sql[i + 1] : "";
+        // --- comment states: consume without appending -------------------------
+        if (inLineComment) {
+            if (c === "\n") {
+                inLineComment = false;
+                current += " ";
+            }
+            i++;
+            continue;
+        }
+        if (inBlockComment) {
+            if (c === "*" && next === "/") {
+                inBlockComment = false;
+                current += " ";
+                i += 2;
+                continue;
+            }
+            i++;
+            continue;
+        }
+        // --- quoted states: append verbatim, track escapes ----------------------
+        if (inSingle) {
+            if (c === "'" && next === "'") {
+                current += "''";
+                i += 2;
+                continue;
+            }
+            if (c === "'")
+                inSingle = false;
+            current += c;
+            i++;
+            continue;
+        }
+        if (inDouble) {
+            if (c === '"' && next === '"') {
+                current += '""';
+                i += 2;
+                continue;
+            }
+            if (c === '"')
+                inDouble = false;
+            current += c;
+            i++;
+            continue;
+        }
+        if (inBacktick) {
+            if (c === "`")
+                inBacktick = false;
+            current += c;
+            i++;
+            continue;
+        }
+        // --- neutral state: detect transitions and the statement separator -------
+        if (c === "-" && next === "-") {
+            inLineComment = true;
+            i += 2;
+            continue;
+        }
+        if (c === "#") {
+            inLineComment = true;
+            i++;
+            continue;
+        }
+        if (c === "/" && next === "*") {
+            inBlockComment = true;
+            i += 2;
+            continue;
+        }
+        if (c === "'") {
+            inSingle = true;
+            current += c;
+            i++;
+            continue;
+        }
+        if (c === '"') {
+            inDouble = true;
+            current += c;
+            i++;
+            continue;
+        }
+        if (c === "`") {
+            inBacktick = true;
+            current += c;
+            i++;
+            continue;
+        }
+        if (c === ";") {
+            const stmt = current.trim();
+            if (stmt)
+                statements.push(stmt);
+            current = "";
+            i++;
+            continue;
+        }
+        current += c;
+        i++;
+    }
+    const tail = current.trim();
+    if (tail)
+        statements.push(tail);
+    return statements;
+}
+/**
+ * Convenience: substitute the schema placeholder then split into statements.
+ * Returns the statements plus whether any placeholder was actually present
+ * (so callers can warn when a schema was supplied but the script ignores it).
+ */
+export function buildStatementPlan(rawSql, schema) {
+    const substituted = hasSchemaPlaceholder(rawSql);
+    const sql = substituted ? substituteSchema(rawSql, schema) : rawSql;
+    return { statements: splitSqlStatements(sql), substituted };
+}
+//# sourceMappingURL=sql-file.js.map

package/dist/db/sql-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-file.js","sourceRoot":"","sources":["../../src/db/sql-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE/C,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAc;IAC1D,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IAErB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzC,0EAA0E;QAC1E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,aAAa,GAAG,KAAK,CAAC;gBACtB,OAAO,IAAI,GAAG,CAAC;YACjB,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,cAAc,GAAG,KAAK,CAAC;gBACvB,OAAO,IAAI,GAAG,CAAC;gBACf,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,2EAA2E;QAC3E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,OAAO,IAAI,IAAI,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAChC,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,OAAO,IAAI,IAAI,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAChC,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG;gBAAE,UAAU,GAAG,KAAK,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,aAAa,GAAG,IAAI,CAAC;YACrB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,aAAa,GAAG,IAAI,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,cAAc,GAAG,IAAI,CAAC;YACtB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,IAAI,CAAC,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,OAAO,IAAI,CAAC,CAAC;QACb,CAAC,EAAE,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,MAAc;IAEd,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC"}

package/dist/instance/provision.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Provisioning core logic — claim a Zero PXBaas instance and bind it to a baas
+ * profile. Kept separate from the commander wiring and driven by narrow
+ * interfaces so it is unit-testable with fakes (no keytar / no network).
+ *
+ * Security model: Zero returns plaintext keys over TLS; this module ingests them
+ * into the credential sink (keyring) and NEVER returns plaintext — only
+ * fingerprints. Agents can run this without a human TTY login.
+ */
+import type { BaasProfile } from '../credentials/profile.js';
+import type { StoredCredentials } from '../credentials/credential-store.js';
+import { type ZeroClaimResponse, type ZeroInstance } from '@polardbx/pxbaas-client';
+import type { ZeroStore } from './zero-store.js';
+/** Narrow deps so tests can inject fakes. */
+export interface ZeroApi {
+    claim(whitelistIp?: string): Promise<ZeroClaimResponse>;
+    list(token: string): Promise<ZeroInstance[]>;
+    release(id: string, token: string): Promise<void>;
+}
+export interface ProfileSink {
+    setProfile(p: BaasProfile): Promise<void>;
+    useProfile(name: string): Promise<void>;
+    getCurrentProfile(): Promise<BaasProfile | null>;
+    getProfile(name: string): Promise<BaasProfile | null>;
+    removeProfile(name: string): Promise<boolean>;
+}
+export interface CredSink {
+    setCredentials(name: string, c: StoredCredentials): Promise<void>;
+    getCredentials(name: string): Promise<StoredCredentials | null>;
+    deleteCredentials(name: string): Promise<boolean>;
+}
+export interface ProvisionDeps {
+    zero: ZeroApi;
+    profiles: ProfileSink;
+    creds: CredSink;
+    store: ZeroStore;
+}
+export interface ProvisionOptions {
+    name?: string;
+    whitelistIp?: string;
+    /** Switch current profile to the new instance (default true). */
+    switchProfile?: boolean;
+    /** Overwrite an existing profile of the same name. */
+    force?: boolean;
+    /** Reuse an existing active Zero instance instead of claiming a new one. */
+    reuse?: boolean;
+}
+export interface ProvisionResult {
+    reused: boolean;
+    profileName: string;
+    switchedFrom: string | null;
+    instance: {
+        id: string;
+        endpoint: string;
+        appEndpoint?: string;
+        dashboardUrl?: string;
+        region?: string;
+        whitelistIp?: string;
+        expiresAt?: string;
+        mode: 'single-tenant';
+    };
+    keys: {
+        anon: {
+            fingerprint: string;
+            role: 'anon';
+        };
+        serviceRole: {
+            fingerprint: string;
+            role: 'service_role';
+        };
+    };
+    dashboard: {
+        username: 'supabase';
+        passwordRevealed: boolean;
+    };
+}
+/** Claim (or reuse) a Zero instance and bind it to a profile + credentials. */
+export declare function provisionInstance(deps: ProvisionDeps, options?: ProvisionOptions): Promise<ProvisionResult>;
+export interface ReleaseResult {
+    id: string;
+    released: boolean;
+    profileRemoved: string | null;
+    wasCurrent: boolean;
+}
+/** Release a Zero instance and unbind/remove its local profile. */
+export declare function releaseInstance(deps: ProvisionDeps, id: string, opts?: {
+    removeProfile?: boolean;
+}): Promise<ReleaseResult>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/instance/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/instance/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAc,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,iBAAiB,CAAC;AAErE,6CAA6C;AAC7C,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AACD,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,iBAAiB,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACjD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/C;AACD,MAAM,WAAW,QAAQ;IACvB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAChE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,eAAe,CAAC;KACvB,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,WAAW,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,cAAc,CAAA;SAAE,CAAC;KAC5D,CAAC;IACF,SAAS,EAAE;QAAE,QAAQ,EAAE,UAAU,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;CAChE;AAQD,+EAA+E;AAC/E,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CA2G1B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,mEAAmE;AACnE,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,aAAa,CAAC,CAqBxB"}