@portaidentity/cli 1.7.3 → 1.8.0

package/dist/admin/state.d.ts

@@ -0,0 +1,301 @@
+/** Immutable state displayed by the embedded administration shell. */
+import type { VerifiedIdentity } from '../auth/types.js';
+/** Organization actions granted by a freshly verified administration session. */
+export interface AdminCapabilities {
+    /** Whether deployment-global operational policy may be inspected. */
+    readonly canReadConfig: boolean;
+    /** Whether deployment-global operational policy may be updated. */
+    readonly canUpdateConfig: boolean;
+    /** Whether portability manifests may be exported. */
+    readonly canExportData: boolean;
+    /** Whether portability manifests may be previewed and imported. */
+    readonly canImportData: boolean;
+    /** Whether claim definitions and user claim values may be inspected. */
+    readonly canReadClaims: boolean;
+    /** Whether claim definitions and user claim values may be created. */
+    readonly canCreateClaims: boolean;
+    /** Whether claim definitions and user claim values may be updated. */
+    readonly canUpdateClaims: boolean;
+    /** Whether the live identity has the exact control-plane super-admin role. */
+    readonly isSuperAdmin: boolean;
+    /** Whether organization listing and switching may be offered. */
+    readonly canReadOrganizations: boolean;
+    /** Whether organization creation may be offered. */
+    readonly canCreateOrganizations: boolean;
+    /** Whether organization settings and branding may be updated. */
+    readonly canUpdateOrganizations: boolean;
+    /** Whether organization lifecycle transitions may be performed. */
+    readonly canSuspendOrganizations: boolean;
+    /** Whether users in the selected organization may be listed and inspected. */
+    readonly canReadUsers: boolean;
+    /** Whether a user may be created in the selected organization. */
+    readonly canCreateUsers: boolean;
+    /** Whether an invitation may be sent in the selected organization. */
+    readonly canInviteUsers: boolean;
+    /** Whether user profiles and credentials may be updated. */
+    readonly canUpdateUsers: boolean;
+    /** Whether user lifecycle transitions may be performed. */
+    readonly canManageUserLifecycle: boolean;
+    /** Whether an organization may be permanently deleted. */
+    readonly canDeleteOrganizations: boolean;
+    /** Whether a user may be permanently deleted. */
+    readonly canDeleteUsers: boolean;
+    /** Whether global applications and modules may be inspected. */
+    readonly canReadApplications: boolean;
+    /** Whether a global application may be created. */
+    readonly canCreateApplications: boolean;
+    /** Whether applications, modules, and application lifecycle may be updated. */
+    readonly canUpdateApplications: boolean;
+    /** Whether a global application may be permanently deleted. */
+    readonly canDeleteApplications: boolean;
+    /** Whether an application module may be permanently deleted. */
+    readonly canDeleteModules: boolean;
+    /** Whether application roles may be listed and inspected. */
+    readonly canReadRoles: boolean;
+    /** Whether an application role may be created. */
+    readonly canCreateRoles: boolean;
+    /** Whether role metadata and direct permission mappings may be updated. */
+    readonly canUpdateRoles: boolean;
+    /** Whether an application role may be permanently deleted. */
+    readonly canDeleteRoles: boolean;
+    /** Whether application permissions may be listed and inspected. */
+    readonly canReadPermissions: boolean;
+    /** Whether an application permission may be created. */
+    readonly canCreatePermissions: boolean;
+    /** Whether mutable permission metadata may be updated. */
+    readonly canUpdatePermissions: boolean;
+    /** Whether an application permission may be permanently deleted. */
+    readonly canDeletePermissions: boolean;
+    /** Whether application roles may be assigned to or removed from users. */
+    readonly canAssignRoles: boolean;
+    /** Whether organization clients and secret metadata may be inspected. */
+    readonly canReadClients: boolean;
+    /** Whether a client may be created when application read is also granted. */
+    readonly canCreateClients: boolean;
+    /** Whether client configuration, lifecycle, and secrets may be updated. */
+    readonly canUpdateClients: boolean;
+    /** Whether clients may be permanently deleted. */
+    readonly canDeleteClients: boolean;
+    /** Whether nested client secrets may be permanently deleted. */
+    readonly canRevokeClientSecrets: boolean;
+}
+/** Login methods that an organization may offer as client-inheritable defaults. */
+export type AdminOrganizationLoginMethod = 'password' | 'magic_link';
+/** Organization-wide second-factor policies supported after password authentication. */
+export type AdminOrganizationTwoFactorPolicy = 'optional' | 'required_email' | 'required_totp' | 'required_any';
+/** Branding image slots managed by the organization workspace. */
+export type AdminOrganizationAssetType = 'logo' | 'favicon';
+/** Validated media types accepted for stored organization branding images. */
+export type AdminOrganizationAssetContentType = 'image/png' | 'image/jpeg' | 'image/webp' | 'image/x-icon' | 'image/vnd.microsoft.icon' | 'image/svg+xml';
+/** Complete organization settings retained by the focused management workspace. */
+export interface AdminOrganizationSettings extends AdminOrganizationContext {
+    /** Whether this is the protected control-plane organization. */
+    readonly isSuperAdmin: boolean;
+    /** Existing locale value, including a valid value not offered by this Admin UI. */
+    readonly defaultLocale: string;
+    /** Non-empty login methods inherited by eligible OIDC clients. */
+    readonly defaultLoginMethods: readonly AdminOrganizationLoginMethod[];
+    /** Second-factor policy applied only after password authentication. */
+    readonly twoFactorPolicy: AdminOrganizationTwoFactorPolicy;
+    /** Optional company name shown by authentication templates. */
+    readonly brandingCompanyName: string | null;
+    /** Optional six-digit hexadecimal brand color. */
+    readonly brandingPrimaryColor: string | null;
+    /** Optional external logo used when no uploaded logo exists. */
+    readonly brandingLogoUrl: string | null;
+    /** Optional external favicon used when no uploaded favicon exists. */
+    readonly brandingFaviconUrl: string | null;
+    /** Creation timestamp displayed through the shared UTC formatter. */
+    readonly createdAt: string;
+    /** Most recent update timestamp displayed through the shared UTC formatter. */
+    readonly updatedAt: string;
+}
+/** Validated metadata for one stored organization branding image. */
+export interface AdminOrganizationAsset {
+    /** Branding slot occupied by this image. */
+    readonly assetType: AdminOrganizationAssetType;
+    /** Media type confirmed by server validation. */
+    readonly contentType: AdminOrganizationAssetContentType;
+    /** Number of decoded bytes stored by the server. */
+    readonly size: number;
+    /** Most recent replacement timestamp. */
+    readonly updatedAt: string;
+}
+/** Editable Overview fields sent without an ETag precondition. */
+export interface AdminOrganizationOverviewInput {
+    /** Changed organization name. */
+    readonly name?: string;
+    /** Changed default locale. */
+    readonly defaultLocale?: string;
+}
+/** Tabs whose operation controls have independent pending ownership. */
+export type AdminOrganizationWorkspaceTab = 'overview' | 'authentication' | 'branding';
+/** Closed set of user actions emitted by the organization workspace. */
+export type AdminOrganizationIntent = {
+    readonly kind: 'save-overview';
+    readonly input: AdminOrganizationOverviewInput;
+} | {
+    readonly kind: 'activate' | 'suspend';
+} | {
+    readonly kind: 'save-authentication';
+    readonly loginMethods: readonly AdminOrganizationLoginMethod[];
+    readonly twoFactorPolicy: AdminOrganizationTwoFactorPolicy;
+} | {
+    readonly kind: 'save-branding';
+    readonly input: {
+        readonly companyName?: string | null;
+        readonly primaryColor?: string | null;
+        readonly logoUrl?: string | null;
+        readonly faviconUrl?: string | null;
+    };
+} | {
+    readonly kind: 'upload-asset' | 'remove-asset';
+    readonly assetType: AdminOrganizationAssetType;
+};
+/** Fixed workspace failure categories that are safe to render. */
+export type AdminOrganizationWorkspaceFailureKind = AdminOrganizationFailureKind | 'file-type' | 'file-size' | 'file-read';
+/** Sanitized read result returned by organization workspace operations. */
+export type AdminOrganizationWorkspaceReadResult<T> = {
+    readonly kind: 'success';
+    readonly value: T;
+} | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminOrganizationWorkspaceFailureKind;
+};
+/** Sanitized mutation result that distinguishes an unknown network outcome. */
+export type AdminOrganizationWorkspaceMutationResult = {
+    readonly kind: 'success';
+} | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'cancelled';
+} | {
+    readonly kind: 'outcome-unknown';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminOrganizationWorkspaceFailureKind;
+};
+/** Authoritative organization data retained beneath transient workspace states. */
+export interface AdminOrganizationWorkspaceProjection {
+    /** Complete validated organization settings. */
+    readonly organization: AdminOrganizationSettings;
+    /** Complete validated logo and favicon metadata collection. */
+    readonly assets: readonly AdminOrganizationAsset[];
+}
+/** Complete state rendered by the selected-organization management workspace. */
+export type AdminOrganizationWorkspaceState = {
+    readonly kind: 'closed';
+} | {
+    readonly kind: 'loading';
+    readonly previous?: AdminOrganizationWorkspaceProjection;
+} | ({
+    readonly kind: 'ready';
+    readonly pendingTabs?: readonly AdminOrganizationWorkspaceTab[];
+    /** Tab whose last completed mutation succeeded after authoritative reload. */
+    readonly savedTab?: AdminOrganizationWorkspaceTab;
+    /** Tab that owns the current fixed failure feedback. */
+    readonly feedbackTab?: AdminOrganizationWorkspaceTab;
+    readonly failure?: AdminOrganizationWorkspaceFailureKind;
+    readonly reloadedAfterFailure?: boolean;
+} & AdminOrganizationWorkspaceProjection) | ({
+    readonly kind: 'failure';
+    readonly failure: AdminOrganizationWorkspaceFailureKind;
+} & Partial<AdminOrganizationWorkspaceProjection>);
+/** The bounded organization projection retained by the terminal application. */
+export interface AdminOrganizationContext {
+    /** Stable organization UUID. */
+    readonly id: string;
+    /** Control-free organization display name. */
+    readonly name: string;
+    /** Canonical organization slug. */
+    readonly slug: string;
+    /** Current organization lifecycle state. */
+    readonly status: 'active' | 'suspended';
+    /** Whether this is the undeletable control-plane organization. */
+    readonly isSuperAdmin?: boolean;
+}
+/** Fixed organization failure categories safe to expose in the terminal. */
+export type AdminOrganizationFailureKind = 'validation' | 'unauthorized' | 'conflict' | 'unavailable' | 'invalid-response';
+/** Sanitized result returned by organization list and create operations. */
+export type AdminOrganizationResult<T> = {
+    /** Successful-result discriminator. */
+    readonly kind: 'success';
+    /** Sanitized operation value. */
+    readonly value: T;
+} | {
+    /** Indicates that the verified session must be re-established. */
+    readonly kind: 'session-invalid';
+} | {
+    /** Fixed-failure discriminator. */
+    readonly kind: 'failure';
+    /** Safe category suitable for terminal presentation. */
+    readonly failure: AdminOrganizationFailureKind;
+};
+/** Sanitized outcome of refreshing a previously selected organization. */
+export type AdminOrganizationReconciliation = {
+    /** Valid-match discriminator. */
+    readonly kind: 'match';
+    /** Refreshed organization projection. */
+    readonly organization: AdminOrganizationContext;
+} | {
+    /** Indicates that the selected UUID is no longer present. */
+    readonly kind: 'absent';
+} | {
+    /** Indicates that the selected row exists but is malformed. */
+    readonly kind: 'matching-invalid';
+} | {
+    /** Indicates that the verified session must be re-established. */
+    readonly kind: 'session-invalid';
+} | {
+    /** Fixed-failure discriminator. */
+    readonly kind: 'failure';
+    /** Safe category suitable for terminal presentation. */
+    readonly failure: AdminOrganizationFailureKind;
+};
+/** Failure categories safe to expose inside a terminal frame. */
+export type AdminFailureKind = 'unavailable' | 'unauthenticated' | 'unauthorized' | 'configuration-failure' | 'storage-failure';
+/** A bounded failure value that never carries remote or internal detail. */
+export interface AdminPublicFailure {
+    /** Safe category used to choose a fixed user-facing message. */
+    readonly kind: AdminFailureKind;
+}
+/** Complete connection state for one administration application. */
+export type AdminConnectionState = {
+    readonly kind: 'selecting-server';
+} | {
+    readonly kind: 'unauthenticated';
+    readonly server: URL;
+    readonly reason?: AdminFailureKind;
+} | {
+    readonly kind: 'authenticating';
+    readonly server: URL;
+    readonly canCancel: true;
+} | {
+    readonly kind: 'verifying';
+    readonly server: URL;
+    readonly canCancel: true;
+} | {
+    readonly kind: 'authenticated';
+    readonly server: URL;
+    readonly identity: VerifiedIdentity;
+    /** Organization actions derived from the current live UserInfo response. */
+    readonly capabilities: AdminCapabilities;
+    /** Organization currently selected for administration, when one has been chosen. */
+    readonly organization?: AdminOrganizationContext;
+    /** Most recent fixed organization-operation failure, when presentation is required. */
+    readonly organizationFailure?: AdminOrganizationFailureKind;
+} | {
+    readonly kind: 'unauthorized';
+    readonly server: URL;
+    readonly identity: VerifiedIdentity;
+} | {
+    readonly kind: 'fatal';
+    readonly failure: AdminPublicFailure;
+};
+/** Returns true only when Retry can safely repeat a transient operation. */
+export declare function canRetryAdminState(state: AdminConnectionState): boolean;
+/** Returns the normalized server carried by a connection state, if present. */
+export declare function adminStateServer(state: AdminConnectionState): URL | undefined;
+//# sourceMappingURL=state.d.ts.map

package/dist/admin/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/admin/state.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,sEAAsE;IACtE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,oDAAoD;IACpD,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,iEAAiE;IACjE,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,mEAAmE;IACnE,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,iDAAiD;IACjD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,mDAAmD;IACnD,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,mEAAmE;IACnE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,wDAAwD;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,0DAA0D;IAC1D,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,MAAM,4BAA4B,GAAG,UAAU,GAAG,YAAY,CAAC;AAErE,wFAAwF;AACxF,MAAM,MAAM,gCAAgC,GAC1C,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;AAEnE,kEAAkE;AAClE,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,MAAM,iCAAiC,GACzC,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,0BAA0B,GAC1B,eAAe,CAAC;AAEpB,mFAAmF;AACnF,MAAM,WAAW,yBAA0B,SAAQ,wBAAwB;IACzE,gEAAgE;IAChE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,mBAAmB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACtE,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,gCAAgC,CAAC;IAC3D,+DAA+D;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,kDAAkD;IAClD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,sEAAsE;IACtE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,iCAAiC,CAAC;IACxD,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,kEAAkE;AAClE,MAAM,WAAW,8BAA8B;IAC7C,iCAAiC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wEAAwE;AACxE,MAAM,MAAM,6BAA6B,GAAG,UAAU,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAEvF,wEAAwE;AACxE,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,gCAAgC,CAAC;CAC5D,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACrC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD,CAAC;AAEN,kEAAkE;AAClE,MAAM,MAAM,qCAAqC,GAC/C,4BAA4B,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzE,2EAA2E;AAC3E,MAAM,MAAM,oCAAoC,CAAC,CAAC,IAC9C;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qCAAqC,CAAA;CAAE,CAAC;AAE1F,+EAA+E;AAC/E,MAAM,MAAM,wCAAwC,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qCAAqC,CAAA;CAAE,CAAC;AAE1F,mFAAmF;AACnF,MAAM,WAAW,oCAAoC;IACnD,gDAAgD;IAChD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACpD;AAED,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,oCAAoC,CAAA;CAAE,GACtF,CAAC;IACC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAChE,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,6BAA6B,CAAC;IAClD,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,6BAA6B,CAAC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,qCAAqC,CAAC;IACzD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC,GAAG,oCAAoC,CAAC,GACzC,CAAC;IACC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,qCAAqC,CAAC;CACzD,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;AAEvD,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACvC,gCAAgC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IACxC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,4EAA4E;AAC5E,MAAM,MAAM,4BAA4B,GACtC,YAAY,GAAG,cAAc,GAAG,UAAU,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAElF,4EAA4E;AAC5E,MAAM,MAAM,uBAAuB,CAAC,CAAC,IACjC;IACE,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;CACnB,GACD;IACE,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC,GACD;IACE,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEN,0EAA0E;AAC1E,MAAM,MAAM,+BAA+B,GACvC;IACE,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,yCAAyC;IACzC,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;CACjD,GACD;IACE,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB,GACD;IACE,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;CACnC,GACD;IACE,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC,GACD;IACE,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEN,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GAC1B,aAAa,GAAG,iBAAiB,GAAG,cAAc,GAAG,uBAAuB,GAAG,iBAAiB,CAAC;AAEnG,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC;AAED,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC9E;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACjD,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CAC7D,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAErE,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAEvE;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,GAAG,GAAG,GAAG,SAAS,CAE7E"}

package/dist/admin/state.js

@@ -0,0 +1,10 @@
+/** Immutable state displayed by the embedded administration shell. */
+/** Returns true only when Retry can safely repeat a transient operation. */
+export function canRetryAdminState(state) {
+    return state.kind === 'unauthenticated' && state.reason === 'unavailable';
+}
+/** Returns the normalized server carried by a connection state, if present. */
+export function adminStateServer(state) {
+    return 'server' in state ? state.server : undefined;
+}
+//# sourceMappingURL=state.js.map

package/dist/admin/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/admin/state.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAgUtE,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,OAAO,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC;AAC5E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,KAA2B;IAC1D,OAAO,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/admin/system-config-controller.d.ts

@@ -0,0 +1,58 @@
+import type { EventLoop, ModalDialogHost, View } from '@jsvision/ui';
+import type { AdminConnectionState } from './state.js';
+import type { AdminSystemConfigOperations } from './system-config-service.js';
+import type { AdminSystemConfigIntent } from './system-config-state.js';
+/** Stable top-level configuration command shared with presentation. */
+export declare const SYSTEM_CONFIG_COMMAND = "system-config";
+/** Existing application host with direct focus restoration. */
+export interface AdminSystemConfigControllerHost extends ModalDialogHost {
+    /** Focus operations supplied by the existing terminal event loop. */
+    readonly loop: ModalDialogHost['loop'] & Pick<EventLoop, 'focusView' | 'getFocused'>;
+}
+/** Focused dependencies; no shared form framework or mutation retries. */
+export interface AdminSystemConfigControllerOptions {
+    /** Existing modal and focus host. */
+    readonly host: AdminSystemConfigControllerHost;
+    /** Reads the currently verified session. */
+    readonly readState: () => AdminConnectionState;
+    /** Reads session-bound configuration operations. */
+    readonly readOperations: () => AdminSystemConfigOperations | undefined;
+    /** Mounts or removes only this feature's window. */
+    readonly mountWorkspace: (content: View | null) => void;
+    /** Re-enters authentication after the server rejects the current session. */
+    readonly requestAuthentication?: () => void;
+    /** Refreshes command availability when the window opens. */
+    readonly onWorkspaceOpened?: () => void;
+    /** Refreshes command availability when the window closes. */
+    readonly onWorkspaceClosed?: () => void;
+    /** Existing confirmation boundary, injectable for deterministic external interaction. */
+    readonly dialogs?: {
+        readonly confirmDiscard: () => Promise<boolean>;
+    };
+}
+/** Application-owned configuration lifecycle. */
+export interface AdminSystemConfigController {
+    /** Applies the verified-session ownership epoch. */
+    readonly syncContext: (state: AdminConnectionState, epoch: number) => void;
+    /** Opens the workspace for the stable command. */
+    readonly handleCommand: (command: string) => boolean;
+    /** Handles one closed draft/save/close intent. */
+    readonly handleIntent: (intent: AdminSystemConfigIntent) => void;
+    /** Reports whether this controller owns a window. */
+    readonly isOpen: () => boolean;
+    /** Requests ordinary clean/dirty closure. */
+    readonly close: () => void;
+    /** Releases local ownership after logout, shutdown or session replacement. */
+    readonly cancelActiveOperation: () => void;
+    /** Permanently releases this controller and any mounted window. */
+    readonly dispose: () => void;
+}
+/**
+ * Creates a direct controller that ignores late results after session ownership is released.
+ * Releasing a local result does not claim that a server mutation was cancelled.
+ * @param options - Existing host, verified session, operations and workspace mounting boundary.
+ * @returns Reusable configuration controller.
+ * @example createAdminSystemConfigController({ host, readState, readOperations, mountWorkspace });
+ */
+export declare function createAdminSystemConfigController(options: AdminSystemConfigControllerOptions): AdminSystemConfigController;
+//# sourceMappingURL=system-config-controller.d.ts.map

package/dist/admin/system-config-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-controller.d.ts","sourceRoot":"","sources":["../../src/admin/system-config-controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAE9E,OAAO,KAAK,EACV,uBAAuB,EAExB,MAAM,0BAA0B,CAAC;AAIlC,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,+DAA+D;AAC/D,MAAM,WAAW,+BAAgC,SAAQ,eAAe;IACtE,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY,CAAC,CAAC;CACtF;AACD,0EAA0E;AAC1E,MAAM,WAAW,kCAAkC;IACjD,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,oBAAoB,CAAC;IAC/C,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,2BAA2B,GAAG,SAAS,CAAC;IACvE,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IACxD,6EAA6E;IAC7E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5C,4DAA4D;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IACxC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CACxE;AACD,iDAAiD;AACjD,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3E,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrD,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACjE,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,qBAAqB,EAAE,MAAM,IAAI,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,2BAA2B,CA2L7B"}

package/dist/admin/system-config-controller.js

@@ -0,0 +1,218 @@
+/** Direct operation ownership for the terminal configuration workspace. */
+import { confirm } from '@jsvision/ui';
+import { projectAdminConfigDrafts, setAdminConfigDraft } from './system-config-state.js';
+import { createAdminSystemConfigWorkspace } from './system-config-workspace.js';
+/** Stable top-level configuration command shared with presentation. */
+export const SYSTEM_CONFIG_COMMAND = 'system-config';
+/**
+ * Creates a direct controller that ignores late results after session ownership is released.
+ * Releasing a local result does not claim that a server mutation was cancelled.
+ * @param options - Existing host, verified session, operations and workspace mounting boundary.
+ * @returns Reusable configuration controller.
+ * @example createAdminSystemConfigController({ host, readState, readOperations, mountWorkspace });
+ */
+export function createAdminSystemConfigController(options) {
+    let workspace;
+    let state = { kind: 'closed' };
+    let context;
+    let generation = 0;
+    let disposed = false;
+    let previousFocus = null;
+    /** Publishes one immutable projection without changing editor identity. */
+    const publish = (next) => {
+        state = next;
+        workspace?.setState(next);
+    };
+    /** Releases ownership so delayed remote results cannot remount protected content. */
+    const release = () => {
+        generation++;
+        if (!workspace)
+            return;
+        workspace.clear();
+        workspace = undefined;
+        state = { kind: 'closed' };
+        options.mountWorkspace(null);
+        if (previousFocus?.mounted)
+            options.host.loop.focusView(previousFocus);
+        previousFocus = null;
+        options.onWorkspaceClosed?.();
+    };
+    /** Only a live readable session may operate this global feature. */
+    const authority = () => {
+        const current = options.readState();
+        return current.kind === 'authenticated' &&
+            'canReadConfig' in current.capabilities &&
+            current.capabilities.canReadConfig === true
+            ? current
+            : undefined;
+    };
+    /** Converts an unexpected external throw to fixed safe feedback, never exception text. */
+    const load = async (owner) => {
+        try {
+            const result = await options.readOperations()?.listConfig();
+            if (disposed || owner !== generation || !workspace)
+                return;
+            if (result?.kind === 'session-invalid') {
+                release();
+                options.requestAuthentication?.();
+            }
+            else if (result?.kind === 'success') {
+                publish({ kind: 'ready', entries: result.value });
+                workspace?.focusCurrent();
+            }
+            else
+                publish({
+                    kind: 'failure',
+                    failure: result?.kind === 'failure' ? result.failure : 'unavailable',
+                });
+        }
+        catch {
+            if (!disposed && owner === generation && workspace)
+                publish({ kind: 'failure', failure: 'unavailable' });
+        }
+    };
+    /** Saves one batch and reloads once, preserving drafts whenever the outcome is uncertain. */
+    const save = async () => {
+        const current = authority();
+        const operations = options.readOperations();
+        if (!current || !operations || state.kind !== 'ready')
+            return;
+        const projection = projectAdminConfigDrafts(state, 'canUpdateConfig' in current.capabilities && current.capabilities.canUpdateConfig === true);
+        if (!projection.canSave)
+            return;
+        const original = state;
+        const owner = generation;
+        publish({ ...original, busy: true });
+        try {
+            const result = await operations.setConfigMany(projection.values);
+            if (disposed || owner !== generation || !workspace)
+                return;
+            if (result.kind === 'session-invalid') {
+                release();
+                options.requestAuthentication?.();
+                return;
+            }
+            if (result.kind === 'failure') {
+                publish({ ...original, busy: false, message: 'Could not save configuration.' });
+                return;
+            }
+            const reloaded = await operations.listConfig();
+            if (disposed || owner !== generation || !workspace)
+                return;
+            if (reloaded.kind === 'session-invalid') {
+                release();
+                options.requestAuthentication?.();
+                return;
+            }
+            if (result.kind === 'success' && reloaded.kind === 'success') {
+                publish({
+                    kind: 'ready',
+                    entries: reloaded.value,
+                    restartRequired: result.restartRequired,
+                    message: result.restartRequired
+                        ? 'Saved. Restart every Porta server instance to apply these changes.'
+                        : 'Configuration saved.',
+                });
+            }
+            else {
+                publish({
+                    ...original,
+                    ...(reloaded.kind === 'success' ? { entries: reloaded.value } : {}),
+                    busy: false,
+                    message: 'Could not confirm the saved configuration. Review the displayed values.',
+                });
+            }
+        }
+        catch {
+            if (!disposed && owner === generation && workspace)
+                publish({ ...original, busy: false, message: 'Could not save configuration.' });
+        }
+    };
+    /** Dirty closure asks once; busy operations block duplicate close requests. */
+    const requestClose = async () => {
+        if (!workspace || (state.kind === 'ready' && state.busy))
+            return;
+        if (state.kind !== 'ready' || !projectAdminConfigDrafts(state, false).dirtyKeys.length) {
+            release();
+            return;
+        }
+        const original = state;
+        const owner = generation;
+        publish({ ...original, busy: true });
+        try {
+            const discard = await (options.dialogs?.confirmDiscard() ??
+                confirm(options.host, 'Discard unsaved changes?'));
+            if (disposed || owner !== generation || !workspace)
+                return;
+            if (discard)
+                release();
+            else {
+                publish(original);
+                workspace.focusCurrent();
+            }
+        }
+        catch {
+            if (!disposed && owner === generation && workspace)
+                publish(original);
+        }
+    };
+    const handleIntent = (intent) => {
+        if (disposed || !workspace)
+            return;
+        if (intent.kind === 'close')
+            void requestClose();
+        else if (intent.kind === 'save')
+            void save();
+        else if (intent.kind === 'set-draft' && state.kind === 'ready')
+            publish(setAdminConfigDraft(state, intent.key, intent.text));
+    };
+    return {
+        syncContext(current, epoch) {
+            const next = current.kind === 'authenticated' &&
+                'canReadConfig' in current.capabilities &&
+                current.capabilities.canReadConfig === true
+                ? `${epoch}:${current.identity.sub}`
+                : undefined;
+            if (next !== context) {
+                release();
+                context = next;
+            }
+        },
+        handleCommand(command) {
+            if (command !== SYSTEM_CONFIG_COMMAND || disposed)
+                return false;
+            const current = authority();
+            if (!current || !options.readOperations())
+                return true;
+            if (workspace) {
+                workspace.focusCurrent();
+                return true;
+            }
+            previousFocus = options.host.loop.getFocused();
+            workspace = createAdminSystemConfigWorkspace({
+                capabilities: {
+                    canReadConfig: true,
+                    canUpdateConfig: 'canUpdateConfig' in current.capabilities &&
+                        current.capabilities.canUpdateConfig === true,
+                },
+                onIntent: handleIntent,
+                focusView: (view) => options.host.loop.focusView(view),
+                onClose: () => void requestClose(),
+            });
+            options.onWorkspaceOpened?.();
+            publish({ kind: 'loading' });
+            options.mountWorkspace(workspace.content);
+            void load(generation);
+            return true;
+        },
+        handleIntent,
+        isOpen: () => !!workspace,
+        close: () => void requestClose(),
+        cancelActiveOperation: release,
+        dispose() {
+            disposed = true;
+            release();
+        },
+    };
+}
+//# sourceMappingURL=system-config-controller.js.map

package/dist/admin/system-config-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-controller.js","sourceRoot":"","sources":["../../src/admin/system-config-controller.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAIvC,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAKzF,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAGhF,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AA4CrD;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA2C;IAE3C,IAAI,SAAiD,CAAC;IACtD,IAAI,KAAK,GAAoC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChE,IAAI,OAA2B,CAAC;IAChC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,aAAa,GAAgB,IAAI,CAAC;IAEtC,2EAA2E;IAC3E,MAAM,OAAO,GAAG,CAAC,IAAqC,EAAQ,EAAE;QAC9D,KAAK,GAAG,IAAI,CAAC;QACb,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,qFAAqF;IACrF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,UAAU,EAAE,CAAC;QACb,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,GAAG,SAAS,CAAC;QACtB,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,aAAa,EAAE,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACvE,aAAa,GAAG,IAAI,CAAC;QACrB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,oEAAoE;IACpE,MAAM,SAAS,GAAG,GAAyE,EAAE;QAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,IAAI,KAAK,eAAe;YACrC,eAAe,IAAI,OAAO,CAAC,YAAY;YACvC,OAAO,CAAC,YAAY,CAAC,aAAa,KAAK,IAAI;YAC3C,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;IACF,0FAA0F;IAC1F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,CAAC;YAC5D,IAAI,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC3D,IAAI,MAAM,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;YACpC,CAAC;iBAAM,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClD,SAAS,EAAE,YAAY,EAAE,CAAC;YAC5B,CAAC;;gBACC,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;iBACrE,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,SAAS;gBAChD,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IACF,6FAA6F;IAC7F,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAC9D,MAAM,UAAU,GAAG,wBAAwB,CACzC,KAAK,EACL,iBAAiB,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,eAAe,KAAK,IAAI,CAC3F,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;YAC/C,IAAI,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACxC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,CAAC;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,QAAQ,CAAC,KAAK;oBACvB,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,OAAO,EAAE,MAAM,CAAC,eAAe;wBAC7B,CAAC,CAAC,oEAAoE;wBACtE,CAAC,CAAC,sBAAsB;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC;oBACN,GAAG,QAAQ;oBACX,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,yEAAyE;iBACnF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,SAAS;gBAChD,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC;IACF,+EAA+E;IAC/E,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;QAC7C,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QACjE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACvF,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE;gBACtD,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACrD,IAAI,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,SAAS;gBAAE,OAAO;YAC3D,IAAI,OAAO;gBAAE,OAAO,EAAE,CAAC;iBAClB,CAAC;gBACJ,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClB,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,SAAS;gBAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,MAA+B,EAAQ,EAAE;QAC7D,IAAI,QAAQ,IAAI,CAAC,SAAS;YAAE,OAAO;QACnC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,KAAK,YAAY,EAAE,CAAC;aAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,IAAI,EAAE,CAAC;aACxC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAC5D,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,OAAO;QACL,WAAW,CAAC,OAAO,EAAE,KAAK;YACxB,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,eAAe;gBAChC,eAAe,IAAI,OAAO,CAAC,YAAY;gBACvC,OAAO,CAAC,YAAY,CAAC,aAAa,KAAK,IAAI;gBACzC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACpC,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,OAAO,EAAE,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,aAAa,CAAC,OAAO;YACnB,IAAI,OAAO,KAAK,qBAAqB,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAChE,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvD,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,YAAY,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,SAAS,GAAG,gCAAgC,CAAC;gBAC3C,YAAY,EAAE;oBACZ,aAAa,EAAE,IAAI;oBACnB,eAAe,EACb,iBAAiB,IAAI,OAAO,CAAC,YAAY;wBACzC,OAAO,CAAC,YAAY,CAAC,eAAe,KAAK,IAAI;iBAChD;gBACD,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBACtD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,YAAY,EAAE;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC9B,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7B,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY;QACZ,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,YAAY,EAAE;QAChC,qBAAqB,EAAE,OAAO;QAC9B,OAAO;YACL,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;AACJ,CAAC"}