@portaidentity/cli 1.7.3 → 1.8.0

package/CHANGELOG.md

@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.8.0] - 2026-09-23
+
+### Changed
+- Version bump to 1.8.0
+
 ## [1.7.3] - 2026-08-26
 
 ### Changed

package/README.md

@@ -4,9 +4,9 @@ The official command-line interface for the [Porta Identity Platform](https://gi
 
 ## Features
 
-- **26 command modules** — Full admin coverage: orgs, apps, clients, users, roles, permissions, claims, secrets, sessions, audit, and more
+- **28 command modules** — Full admin coverage: orgs, apps, clients, users, roles, permissions, claims, secrets, sessions, audit, and more
 - **OIDC authentication** — Secure login via Authorization Code + PKCE (opens your browser, no passwords stored)
-- **Declarative provisioning** — Set up entire environments from a single YAML/JSON file
+- **Selective portability** — Export and import strict JSON manifests with preview-first application
 - **Built on `@portaidentity/sdk`** — Type-safe API calls with automatic error handling
 - **JSON output mode** — Machine-readable output for scripting and CI/CD (`--json`)
 - **Shell completions** — Tab completion for Bash, Zsh, and Fish
@@ -60,36 +60,36 @@ Every command supports these flags:
 
 ### Authentication
 
-| Command        | Description                                              |
-| -------------- | -------------------------------------------------------- |
-| `porta login`  | Authenticate via OIDC (Auth Code + PKCE) — opens browser |
-| `porta logout` | Clear stored credentials                                 |
-| `porta whoami` | Display current identity (no network call)               |
+| Command        | Description                                                     |
+| -------------- | --------------------------------------------------------------- |
+| `porta login`  | Authenticate via OIDC (Auth Code + PKCE) — opens browser        |
+| `porta logout` | Clear stored credentials                                        |
+| `porta whoami` | Display current identity (no network call)                      |
+| `porta admin`  | Open the interactive organization and user administration shell |
 
 ### Organizations
 
-| Command                    | Description                                               |
-| -------------------------- | --------------------------------------------------------- |
-| `porta org list`           | List all organizations                                    |
-| `porta org create`         | Create a new organization                                 |
-| `porta org show <id>`      | Show organization details                                 |
-| `porta org update <id>`    | Update organization properties                            |
-| `porta org activate <id>`  | Activate an organization                                  |
-| `porta org suspend <id>`   | Suspend an organization                                   |
-| `porta org archive <id>`   | Archive an organization                                   |
-| `porta org destroy <slug>` | Permanently delete an organization and all child entities |
+| Command                   | Description                                           |
+| ------------------------- | ----------------------------------------------------- |
+| `porta org list`          | List all organizations                                |
+| `porta org create`        | Create a new organization                             |
+| `porta org show <id>`     | Show organization details                             |
+| `porta org update <id>`   | Update organization properties                        |
+| `porta org activate <id>` | Activate an organization                              |
+| `porta org suspend <id>`  | Suspend an organization                               |
+| `porta org delete <id>`   | Permanently delete an organization and its owned data |
 
 ### Applications
 
-| Command                   | Description                   |
-| ------------------------- | ----------------------------- |
-| `porta app list`          | List applications             |
-| `porta app create`        | Create a new application      |
-| `porta app show <id>`     | Show application details      |
-| `porta app update <id>`   | Update application properties |
-| `porta app activate <id>` | Activate an application       |
-| `porta app suspend <id>`  | Suspend an application        |
-| `porta app archive <id>`  | Archive an application        |
+| Command                   | Description                                          |
+| ------------------------- | ---------------------------------------------------- |
+| `porta app list`          | List applications                                    |
+| `porta app create`        | Create a new application                             |
+| `porta app show <id>`     | Show application details                             |
+| `porta app update <id>`   | Update application properties                        |
+| `porta app activate <id>` | Activate an application                              |
+| `porta app suspend <id>`  | Suspend an application                               |
+| `porta app delete <id>`   | Permanently delete an application and its owned data |
 
 **Nested: Roles** (`porta app role ...`)
 
@@ -99,51 +99,57 @@ Every command supports these flags:
 | `porta app role list <app-id>`                            | List roles                  |
 | `porta app role show <app-id> <role-id>`                  | Show role details           |
 | `porta app role update <app-id> <role-id>`                | Update a role               |
-| `porta app role archive <app-id> <role-id>`               | Archive a role              |
+| `porta app role delete <app-id> <role-id>`                | Permanently delete a role   |
 | `porta app role assign-perm <app-id> <role-id> <perm-id>` | Assign permission to role   |
 | `porta app role remove-perm <app-id> <role-id> <perm-id>` | Remove permission from role |
 
 **Nested: Permissions** (`porta app permission ...`)
 
-| Command                                           | Description             |
-| ------------------------------------------------- | ----------------------- |
-| `porta app permission create <app-id>`            | Create a permission     |
-| `porta app permission list <app-id>`              | List permissions        |
-| `porta app permission show <app-id> <perm-id>`    | Show permission details |
-| `porta app permission archive <app-id> <perm-id>` | Archive a permission    |
+| Command                                          | Description                     |
+| ------------------------------------------------ | ------------------------------- |
+| `porta app permission create <app-id>`           | Create a permission             |
+| `porta app permission list <app-id>`             | List permissions                |
+| `porta app permission show <app-id> <perm-id>`   | Show permission details         |
+| `porta app permission delete <app-id> <perm-id>` | Permanently delete a permission |
 
 **Nested: Claims** (`porta app claim ...`)
 
-| Command                                       | Description                |
-| --------------------------------------------- | -------------------------- |
-| `porta app claim create <app-id>`             | Create a claim definition  |
-| `porta app claim list <app-id>`               | List claim definitions     |
-| `porta app claim show <app-id> <claim-id>`    | Show claim details         |
-| `porta app claim update <app-id> <claim-id>`  | Update a claim definition  |
-| `porta app claim archive <app-id> <claim-id>` | Archive a claim definition |
+| Command                                      | Description                           |
+| -------------------------------------------- | ------------------------------------- |
+| `porta app claim create <app-id>`            | Create a claim definition             |
+| `porta app claim list <app-id>`              | List claim definitions                |
+| `porta app claim show <app-id> <claim-id>`   | Show claim details                    |
+| `porta app claim update <app-id> <claim-id>` | Update a claim definition             |
+| `porta app claim delete <app-id> <claim-id>` | Permanently delete a claim definition |
 
 **Nested: Modules** (`porta app module ...`)
 
-| Command                             | Description              |
-| ----------------------------------- | ------------------------ |
-| `porta app module list <app-id>`    | List application modules |
-| `porta app module enable <app-id>`  | Enable a module          |
-| `porta app module disable <app-id>` | Disable a module         |
+| Command                                        | Description                                     |
+| ---------------------------------------------- | ----------------------------------------------- |
+| `porta app module list <app-id>`               | List application modules                        |
+| `porta app module enable <app-id>`             | Enable a module                                 |
+| `porta app module disable <app-id>`            | Disable a module                                |
+| `porta app module delete <app-id> <module-id>` | Permanently delete a module and its permissions |
 
 ### Clients
 
-| Command                      | Description              |
-| ---------------------------- | ------------------------ |
-| `porta client list`          | List clients             |
-| `porta client create`        | Create a new client      |
-| `porta client show <id>`     | Show client details      |
-| `porta client update <id>`   | Update client properties |
-| `porta client activate <id>` | Activate a client        |
-| `porta client suspend <id>`  | Suspend a client         |
-| `porta client archive <id>`  | Archive a client         |
+| Command                        | Description                     |
+| ------------------------------ | ------------------------------- |
+| `porta client list`            | List clients                    |
+| `porta client create`          | Create a new client             |
+| `porta client show <id>`       | Show client details             |
+| `porta client update <id>`     | Update client properties        |
+| `porta client activate <id>`   | Activate a client               |
+| `porta client deactivate <id>` | Temporarily deactivate a client |
+| `porta client delete <id>`     | Permanently delete a client     |
 
 **Nested: Secrets** (`porta client secret ...`)
 
+The interactive `porta admin` client workspace uses focused Overview, Authentication, Protocol,
+Login experience, Credentials, and Lifecycle sections. Multi-field editors fill the Admin surface;
+secret generation supports 3, 6, 12, and 24 month presets, a custom calendar date, or Never. Secret
+plaintext is shown once and is never retained in the workspace.
+
 | Command                                              | Description                  |
 | ---------------------------------------------------- | ---------------------------- |
 | `porta client secret create <client-id>`             | Generate a new client secret |
@@ -152,16 +158,16 @@ Every command supports these flags:
 
 ### Users
 
-| Command                                  | Description                   |
-| ---------------------------------------- | ----------------------------- |
-| `porta user list <org-id>`               | List users in an organization |
-| `porta user create <org-id>`             | Create a new user             |
-| `porta user show <org-id> <user-id>`     | Show user details             |
-| `porta user update <org-id> <user-id>`   | Update user properties        |
-| `porta user invite <org-id>`             | Send a user invitation        |
-| `porta user activate <org-id> <user-id>` | Activate a user               |
-| `porta user suspend <org-id> <user-id>`  | Suspend a user                |
-| `porta user archive <org-id> <user-id>`  | Archive a user                |
+| Command                                    | Description                   |
+| ------------------------------------------ | ----------------------------- |
+| `porta user list <org-id>`                 | List users in an organization |
+| `porta user create <org-id>`               | Create a new user             |
+| `porta user show <org-id> <user-id>`       | Show user details             |
+| `porta user update <org-id> <user-id>`     | Update user properties        |
+| `porta user invite <org-id>`               | Send a user invitation        |
+| `porta user deactivate <org-id> <user-id>` | Deactivate a user             |
+| `porta user activate <org-id> <user-id>`   | Activate a user               |
+| `porta user delete <org-id> <user-id>`     | Permanently delete a user     |
 
 **Nested: Roles** (`porta user role ...`)
 
@@ -196,15 +202,18 @@ Every command supports these flags:
 | `porta health`                                | Check server connectivity (no auth required)   |
 | `porta bulk <action>`                         | Bulk status operations on orgs/users           |
 | `porta exports download --entity-type <type>` | Export bounded allowlisted data as CSV or JSON |
+| `porta export manifest ...`                   | Export a selective portability manifest        |
+| `porta import manifest <path> --mode <mode>`  | Preview and import a portability manifest      |
 
-### Provisioning
+### Environment Portability
 
-| Command                         | Description                                    |
-| ------------------------------- | ---------------------------------------------- |
-| `porta provision --file <path>` | Apply a declarative YAML/JSON environment file |
+| Command                                      | Description                                      |
+| -------------------------------------------- | ------------------------------------------------ |
+| `porta export manifest`                      | Export selected categories to a strict JSON file |
+| `porta import manifest <path> --mode <mode>` | Preview, confirm, and apply a strict JSON file   |
 
-Supports `--mode merge|overwrite`, `--dry-run`, and `--json` flags. Provisioning files cannot
-contain passwords or other authentication material.
+Import modes are `keep-existing` and `update-existing`. Both flows support `--json`; `--yes`
+skips only the relevant file-replacement or apply confirmation.
 
 ### Utilities
 
@@ -233,46 +242,57 @@ porta login --server https://porta.example.com
 porta login --server https://porta.example.com --no-browser
 ```
 
-## Declarative Provisioning
-
-Set up entire environments from a single YAML file:
-
-```yaml
-# provision.yaml
-organizations:
-  - name: Acme Corp
-    slug: acme
-    status: active
-    applications:
-      - name: Web Portal
-        slug: web-portal
-        clients:
-          - name: web-app
-            grant_types: [authorization_code]
-            redirect_uris: [https://app.acme.com/callback]
-        roles:
-          - name: Admin
-            permissions: [read, write, delete]
-          - name: Viewer
-            permissions: [read]
-    users:
-      - email: admin@acme.com
-        given_name: Admin
-        family_name: User
-        roles: [Admin]
-```
+## Interactive Administration Shell
+
+`porta admin` opens the terminal administration shell for a Porta server.
 
 ```bash
-# Preview changes without applying
-porta provision --file provision.yaml --dry-run
+porta admin --server https://identity.example.com
+```
+
+The command requires interactive stdin and stdout. It rejects `--json` and `--force`. Login uses
+the same OIDC Authorization Code with PKCE flow as `porta login`: the CLI opens a browser when
+available and offers the manual authorization URL/callback flow when it cannot.
+
+After verification, the organization chooser opens automatically without selecting an organization
+for you. Use the Organizations menu to switch context or create an organization from its name,
+optional slug, and optional default locale. Creation selects the returned organization immediately.
+The selected context is held only for the running shell and does not change authentication or grant
+permissions.
 
-# Apply with merge mode (default)
-porta provision --file provision.yaml
+When no verified session is available, the admin UI immediately opens an **Authentication
+required** dialog. Choose **Authenticate** (focused by default, so Enter works) to start the existing
+browser/manual OIDC flow, or choose **Quit**. The dialog returns after cancellation or a failed
+attempt, so the shell never leaves you on an unusable disabled screen.
 
-# Full overwrite mode
-porta provision --file provision.yaml --mode overwrite
+Press `F10` to open the hamburger menu containing `Who am I…`, `Reauthenticate`, and `Quit`.
+`Who am I…` shows the server-bound verified identity. After selecting an organization, the Users
+menu supports browse, search, status filters, create, invite, detail, history, profile, credentials,
+and lifecycle actions according to the verified permissions. Use `Ctrl-R` to reauthenticate;
+replacing credentials for a different server requires explicit confirmation.
+
+Use `--insecure` only for deliberate local testing. The shell displays a persistent warning because
+that flag disables TLS certificate validation.
+
+## Environment Portability
+
+Export selected data to a strict JSON manifest:
+
+```console
+porta export manifest \
+  --organization acme \
+  --category organizations \
+  --category applications_authorization \
+  --all-applications \
+  --output acme-porta.json
+
+porta import manifest acme-porta.json --mode keep-existing
 ```
 
+Import always previews and validates before confirmation and apply. Existing client secrets,
+passwords, signing keys, sessions, recovery material, and control-plane records are never carried
+by the manifest. Newly created confidential clients return a generated secret once after commit.
+
 ## JSON Output
 
 All commands support `--json` for machine-readable output, making it easy to integrate with scripts and CI pipelines:
@@ -305,7 +325,7 @@ porta completion > ~/.config/fish/completions/porta.fish
 
 - [CLI Overview](https://blendsdk.github.io/porta-identity/cli/overview) — Architecture, installation, and authentication
 - [CLI Commands Reference](https://blendsdk.github.io/porta-identity/cli/organizations) — Detailed command documentation
-- [Provisioning Guide](https://blendsdk.github.io/porta-identity/cli/provisioning) — Declarative environment setup
+- [Environment Portability](https://blendsdk.github.io/porta-identity/cli/provisioning) — Selective manifest export and import
 - [Bootstrap Guide](https://blendsdk.github.io/porta-identity/cli/bootstrap) — Initial server setup with `porta init`
 
 ## Related Packages

package/dist/admin/admin-date-time.d.ts

@@ -0,0 +1,6 @@
+/** Shared human-readable formatting for timestamps on administrative surfaces. */
+/** Formats one timestamp in a concise, stable UTC representation. */
+export declare function formatAdminDateTime(value: string): string;
+/** Formats an optional timestamp or returns its context-specific empty label. */
+export declare function formatOptionalAdminDateTime(value: string | null, fallback: string): string;
+//# sourceMappingURL=admin-date-time.d.ts.map

package/dist/admin/admin-date-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-date-time.d.ts","sourceRoot":"","sources":["../../src/admin/admin-date-time.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAiBlF,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUzD;AAED,iFAAiF;AACjF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1F"}

package/dist/admin/admin-date-time.js

@@ -0,0 +1,33 @@
+/** Shared human-readable formatting for timestamps on administrative surfaces. */
+const MONTHS = [
+    'Jan',
+    'Feb',
+    'Mar',
+    'Apr',
+    'May',
+    'Jun',
+    'Jul',
+    'Aug',
+    'Sep',
+    'Oct',
+    'Nov',
+    'Dec',
+];
+/** Formats one timestamp in a concise, stable UTC representation. */
+export function formatAdminDateTime(value) {
+    const timestamp = Date.parse(value);
+    if (!Number.isFinite(timestamp))
+        return 'Unknown';
+    const date = new Date(timestamp);
+    const day = String(date.getUTCDate()).padStart(2, '0');
+    const month = MONTHS[date.getUTCMonth()] ?? 'Unknown';
+    const year = date.getUTCFullYear();
+    const hours = String(date.getUTCHours()).padStart(2, '0');
+    const minutes = String(date.getUTCMinutes()).padStart(2, '0');
+    return `${day} ${month} ${year}, ${hours}:${minutes} UTC`;
+}
+/** Formats an optional timestamp or returns its context-specific empty label. */
+export function formatOptionalAdminDateTime(value, fallback) {
+    return value === null ? fallback : formatAdminDateTime(value);
+}
+//# sourceMappingURL=admin-date-time.js.map

package/dist/admin/admin-date-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-date-time.js","sourceRoot":"","sources":["../../src/admin/admin-date-time.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,MAAM,MAAM,GAAG;IACb,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAC;AAEX,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,SAAS,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC;AAC5D,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CAAC,KAAoB,EAAE,QAAgB;IAChF,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/admin/application-client-features.d.ts

@@ -0,0 +1,38 @@
+/** Shell composition for the global application and selected-organization client workspaces. */
+import type { View } from '@jsvision/ui';
+import type { AdminDialogSurface } from './application-runtime.js';
+import type { AdminApplicationSession } from './application.js';
+import type { AdminConnectionState } from './state.js';
+/** Dependencies supplied by the existing administration shell. */
+export interface AdminApplicationClientFeaturesOptions {
+    /** Shared modal surface owned by the administration application. */
+    readonly dialogs: AdminDialogSurface;
+    /** Reads the current verified shell state. */
+    readonly readState: () => AdminConnectionState;
+    /** Reads the current server-bound operation set. */
+    readonly readSession: () => AdminApplicationSession | undefined;
+    /** Replaces the single main workspace. */
+    readonly mountWorkspace: (workspace: View | null) => void;
+    /** Focuses one known focusable workspace child. */
+    readonly focusView: (view: View) => void;
+    /** Reports whether a feature dialog currently owns terminal input. */
+    readonly setDialogBusy: (busy: boolean) => void;
+    /** Re-enters authentication after a final session failure. */
+    readonly requestAuthentication: () => void;
+}
+/** Feature lifecycle used by the shell without exposing controller internals. */
+export interface AdminApplicationClientFeatures {
+    /** Applies authentication and selected-organization changes. */
+    readonly syncContext: (state: AdminConnectionState, sessionEpoch: number) => void;
+    /** Routes one explicit application or client shell command. */
+    readonly handleCommand: (command: string) => void;
+    /** Cancels the current dialog or feature operation. */
+    readonly cancelActiveOperation: () => void;
+    /** Clears unsafe ownership when the terminal enters resize recovery. */
+    readonly handleRecoverableGeometry: (recoverable: boolean) => void;
+    /** Releases both feature owners exactly once. */
+    readonly dispose: () => void;
+}
+/** Creates the small feature-specific composition used by the existing shell. */
+export declare function createAdminApplicationClientFeatures(options: AdminApplicationClientFeaturesOptions): AdminApplicationClientFeatures;
+//# sourceMappingURL=application-client-features.d.ts.map

package/dist/admin/application-client-features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-client-features.d.ts","sourceRoot":"","sources":["../../src/admin/application-client-features.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAEhG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAwCzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,kEAAkE;AAClE,MAAM,WAAW,qCAAqC;IACpD,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,oBAAoB,CAAC;IAC/C,oDAAoD;IACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,uBAAuB,GAAG,SAAS,CAAC;IAChE,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAC1D,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACzC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,8DAA8D;IAC9D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,IAAI,CAAC;CAC5C;AAED,iFAAiF;AACjF,MAAM,WAAW,8BAA8B;IAC7C,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IAClF,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,uDAAuD;IACvD,QAAQ,CAAC,qBAAqB,EAAE,MAAM,IAAI,CAAC;IAC3C,wEAAwE;IACxE,QAAQ,CAAC,yBAAyB,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;IACnE,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,qCAAqC,GAC7C,8BAA8B,CAqlBhC"}