@portaidentity/cli 1.7.3 → 1.8.0

package/dist/admin/system-config-service.d.ts

@@ -0,0 +1,54 @@
+import type { ConfigEntry, ConfigKey, ConfigValue, ConfigDomain } from '@portaidentity/sdk';
+/** Exact public identifiers; display policy and bounds remain server metadata. */
+export declare const ADMIN_CONFIG_KEYS: readonly ConfigKey[];
+/** Fixed categories that never render remote error details. */
+export type AdminConfigFailure = 'validation' | 'unauthorized' | 'unavailable' | 'invalid-response';
+/** Sanitized authoritative read result. */
+export type AdminConfigReadResult = {
+    readonly kind: 'success';
+    readonly value: readonly ConfigEntry[];
+} | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminConfigFailure;
+};
+/** A mutation distinguishes confirmed rejection from an unknown network outcome. */
+export type AdminConfigMutationResult = {
+    readonly kind: 'success';
+    readonly restartRequired: boolean;
+} | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'outcome-unknown';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminConfigFailure;
+};
+/** Two direct session-bound operations used by the configuration controller. */
+export interface AdminSystemConfigOperations {
+    /** Reads the complete validated public catalog. */
+    readonly listConfig: () => Promise<AdminConfigReadResult>;
+    /** Sends one atomic changed-key batch without retrying. */
+    readonly setConfigMany: (values: Readonly<Partial<Record<ConfigKey, ConfigValue>>>) => Promise<AdminConfigMutationResult>;
+}
+/** Narrows one public identifier without permitting arbitrary runtime keys. */
+export declare function isAdminConfigKey(value: unknown): value is ConfigKey;
+/** Validates the native scalar using authoritative metadata, with no coercion. */
+export declare function isAdminConfigValue(entry: ConfigEntry, value: unknown): value is ConfigValue;
+/**
+ * Validates a complete response and returns an immutable catalog-ordered projection.
+ * @param value - Untrusted SDK response.
+ * @returns Safe entries, or undefined when any entry is missing, duplicate or invalid.
+ * @example validateAdminConfigEntries(await client.config.list());
+ */
+export declare function validateAdminConfigEntries(value: unknown): readonly ConfigEntry[] | undefined;
+/**
+ * Creates direct operations over the verified session's existing configuration domain.
+ * Invalid mutation readback is an unknown outcome, never a reason to replay the batch.
+ * @param domain - Lazy session-bound SDK domain.
+ * @returns Sanitized list and batch operations.
+ * @example createAdminSystemConfigOperations(() => client.config);
+ */
+export declare function createAdminSystemConfigOperations(domain: () => Pick<ConfigDomain, 'list' | 'setMany'>): AdminSystemConfigOperations;
+//# sourceMappingURL=system-config-service.d.ts.map

package/dist/admin/system-config-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-service.d.ts","sourceRoot":"","sources":["../../src/admin/system-config-service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5F,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,EAAE,SAAS,SAAS,EAmBhD,CAAC;AAEH,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,cAAc,GAAG,aAAa,GAAG,kBAAkB,CAAC;AACpG,2CAA2C;AAC3C,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC;AACvE,oFAAoF;AACpF,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC;AACvE,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,CACtB,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KACtD,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACzC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAEnE;AAYD,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAU3F;AAmDD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,WAAW,EAAE,GAAG,SAAS,CAgB7F;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC,GACnD,2BAA2B,CAkE7B"}

package/dist/admin/system-config-service.js

@@ -0,0 +1,180 @@
+/** Validated, non-retrying operational configuration calls for terminal administration. */
+import { PortaAuthenticationError, PortaForbiddenError, PortaValidationError, } from '@portaidentity/sdk';
+/** Exact public identifiers; display policy and bounds remain server metadata. */
+export const ADMIN_CONFIG_KEYS = Object.freeze([
+    'access_token_ttl',
+    'id_token_ttl',
+    'refresh_token_ttl',
+    'authorization_code_ttl',
+    'session_ttl',
+    'magic_link_ttl',
+    'password_reset_ttl',
+    'invitation_ttl',
+    'rate_limit_login_max',
+    'rate_limit_login_window',
+    'rate_limit_magic_link_max',
+    'rate_limit_magic_link_window',
+    'rate_limit_password_reset_max',
+    'rate_limit_password_reset_window',
+    'max_failed_logins',
+    'lockout_duration_seconds',
+    'audit_retention_days',
+    'default_locale',
+]);
+/** Narrows one public identifier without permitting arbitrary runtime keys. */
+export function isAdminConfigKey(value) {
+    return typeof value === 'string' && ADMIN_CONFIG_KEYS.some((key) => key === value);
+}
+/** Bounds text and rejects terminal controls before it reaches widgets. */
+function safeText(value, maximum) {
+    if (typeof value !== 'string' || !value.length || value.length > maximum)
+        return false;
+    for (const character of value) {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f))
+            return false;
+    }
+    return true;
+}
+/** Validates the native scalar using authoritative metadata, with no coercion. */
+export function isAdminConfigValue(entry, value) {
+    return entry.valueType === 'integer'
+        ? typeof value === 'number' &&
+            Number.isSafeInteger(value) &&
+            typeof entry.minimum === 'number' &&
+            typeof entry.maximum === 'number' &&
+            value >= entry.minimum &&
+            value <= entry.maximum
+        : typeof value === 'string' &&
+            entry.allowedValues?.some((allowed) => allowed === value) === true;
+}
+/** Rejects incomplete metadata rather than rendering a partially trusted form. */
+function isEntry(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const candidate = value;
+    if (!isAdminConfigKey(candidate.key) ||
+        !safeText(candidate.label, 80) ||
+        !safeText(candidate.description, 512) ||
+        typeof candidate.group !== 'string' ||
+        !['lifetimes', 'rate-limits', 'lockout', 'general'].includes(candidate.group) ||
+        typeof candidate.applicationMode !== 'string' ||
+        !['runtime', 'restart-required'].includes(candidate.applicationMode) ||
+        !safeText(candidate.updatedAt, 40) ||
+        !/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d{1,9})?Z$/.test(candidate.updatedAt) ||
+        !Number.isFinite(Date.parse(candidate.updatedAt)))
+        return false;
+    if (candidate.valueType === 'integer') {
+        return (candidate.key !== 'default_locale' &&
+            typeof candidate.unit === 'string' &&
+            ['seconds', 'attempts', 'days'].includes(candidate.unit) &&
+            typeof candidate.minimum === 'number' &&
+            Number.isSafeInteger(candidate.minimum) &&
+            typeof candidate.maximum === 'number' &&
+            Number.isSafeInteger(candidate.maximum) &&
+            candidate.minimum <= candidate.maximum &&
+            typeof candidate.value === 'number' &&
+            Number.isSafeInteger(candidate.value) &&
+            candidate.value >= candidate.minimum &&
+            candidate.value <= candidate.maximum &&
+            typeof candidate.defaultValue === 'number' &&
+            Number.isSafeInteger(candidate.defaultValue) &&
+            candidate.defaultValue >= candidate.minimum &&
+            candidate.defaultValue <= candidate.maximum);
+    }
+    return (candidate.key === 'default_locale' &&
+        candidate.valueType === 'string' &&
+        candidate.unit === 'locale' &&
+        Array.isArray(candidate.allowedValues) &&
+        candidate.allowedValues.length === 1 &&
+        candidate.allowedValues[0] === 'en' &&
+        candidate.value === 'en' &&
+        candidate.defaultValue === 'en');
+}
+/**
+ * Validates a complete response and returns an immutable catalog-ordered projection.
+ * @param value - Untrusted SDK response.
+ * @returns Safe entries, or undefined when any entry is missing, duplicate or invalid.
+ * @example validateAdminConfigEntries(await client.config.list());
+ */
+export function validateAdminConfigEntries(value) {
+    if (!Array.isArray(value) || value.length !== ADMIN_CONFIG_KEYS.length || !value.every(isEntry))
+        return undefined;
+    const entries = [];
+    for (const key of ADMIN_CONFIG_KEYS) {
+        const matches = value.filter((entry) => entry.key === key);
+        if (matches.length !== 1 || !matches[0])
+            return undefined;
+        const entry = matches[0];
+        entries.push(Object.freeze({
+            ...entry,
+            ...(entry.allowedValues ? { allowedValues: Object.freeze([...entry.allowedValues]) } : {}),
+        }));
+    }
+    return Object.freeze(entries);
+}
+/**
+ * Creates direct operations over the verified session's existing configuration domain.
+ * Invalid mutation readback is an unknown outcome, never a reason to replay the batch.
+ * @param domain - Lazy session-bound SDK domain.
+ * @returns Sanitized list and batch operations.
+ * @example createAdminSystemConfigOperations(() => client.config);
+ */
+export function createAdminSystemConfigOperations(domain) {
+    return {
+        async listConfig() {
+            try {
+                const entries = validateAdminConfigEntries(await domain().list());
+                return entries
+                    ? { kind: 'success', value: entries }
+                    : { kind: 'failure', failure: 'invalid-response' };
+            }
+            catch (error) {
+                if (error instanceof PortaAuthenticationError)
+                    return { kind: 'session-invalid' };
+                return {
+                    kind: 'failure',
+                    failure: error instanceof PortaForbiddenError ? 'unauthorized' : 'unavailable',
+                };
+            }
+        },
+        async setConfigMany(values) {
+            const keys = Object.keys(values);
+            if (!keys.length ||
+                !keys.every(isAdminConfigKey) ||
+                Object.values(values).some((value) => !(typeof value === 'string' ||
+                    (typeof value === 'number' && Number.isSafeInteger(value))))) {
+                return { kind: 'failure', failure: 'validation' };
+            }
+            try {
+                const result = await domain().setMany(values);
+                if (!result ||
+                    typeof result !== 'object' ||
+                    !('data' in result) ||
+                    !('restartRequired' in result) ||
+                    typeof result.restartRequired !== 'boolean' ||
+                    !Array.isArray(result.data) ||
+                    result.data.length !== keys.length ||
+                    !result.data.every(isEntry)) {
+                    return { kind: 'outcome-unknown' };
+                }
+                const entries = result.data;
+                if (keys.some((key) => entries.filter((entry) => entry.key === key && entry.value === values[entry.key])
+                    .length !== 1)) {
+                    return { kind: 'outcome-unknown' };
+                }
+                return { kind: 'success', restartRequired: result.restartRequired };
+            }
+            catch (error) {
+                if (error instanceof PortaAuthenticationError)
+                    return { kind: 'session-invalid' };
+                if (error instanceof PortaForbiddenError)
+                    return { kind: 'failure', failure: 'unauthorized' };
+                if (error instanceof PortaValidationError)
+                    return { kind: 'failure', failure: 'validation' };
+                return { kind: 'outcome-unknown' };
+            }
+        },
+    };
+}
+//# sourceMappingURL=system-config-service.js.map

package/dist/admin/system-config-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-service.js","sourceRoot":"","sources":["../../src/admin/system-config-service.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAyB,MAAM,CAAC,MAAM,CAAC;IACnE,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,wBAAwB;IACxB,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,sBAAsB;IACtB,yBAAyB;IACzB,2BAA2B;IAC3B,8BAA8B;IAC9B,+BAA+B;IAC/B,kCAAkC;IAClC,mBAAmB;IACnB,0BAA0B;IAC1B,sBAAsB;IACtB,gBAAgB;CACjB,CAAC,CAAC;AAyBH,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,KAAK,CAAC;IACvF,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,KAAc;IACnE,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;QAClC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACvB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC3B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,KAAK,IAAI,KAAK,CAAC,OAAO;YACtB,KAAK,IAAI,KAAK,CAAC,OAAO;QAC1B,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACvB,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IACE,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC;QAChC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC;QACrC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;QACnC,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAC7E,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;QAC7C,CAAC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC;QACpE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QAClC,CAAC,iDAAiD,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAC5E,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjD,OAAO,KAAK,CAAC;IACf,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CACL,SAAS,CAAC,GAAG,KAAK,gBAAgB;YAClC,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;YACxD,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO;YACtC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;YACnC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC;YACrC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO;YACpC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO;YACpC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;YAC1C,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC;YAC5C,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,OAAO;YAC3C,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,OAAO,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,CACL,SAAS,CAAC,GAAG,KAAK,gBAAgB;QAClC,SAAS,CAAC,SAAS,KAAK,QAAQ;QAChC,SAAS,CAAC,IAAI,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC;QACtC,SAAS,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QACpC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI;QACnC,SAAS,CAAC,KAAK,KAAK,IAAI;QACxB,SAAS,CAAC,YAAY,KAAK,IAAI,CAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;YACZ,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAAoD;IAEpD,OAAO;QACL,KAAK,CAAC,UAAU;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO,OAAO;oBACZ,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;oBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,wBAAwB;oBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBAClF,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,KAAK,YAAY,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;iBAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,IACE,CAAC,IAAI,CAAC,MAAM;gBACZ,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,CACC,OAAO,KAAK,KAAK,QAAQ;oBACzB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAC3D,CACJ,EACD,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvD,IACE,CAAC,MAAM;oBACP,OAAO,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;oBACnB,CAAC,CAAC,iBAAiB,IAAI,MAAM,CAAC;oBAC9B,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS;oBAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAClC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAC3B,CAAC;oBACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBACrC,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC5B,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CACN,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;qBAC9E,MAAM,KAAK,CAAC,CAClB,EACD,CAAC;oBACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBACrC,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,wBAAwB;oBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBAClF,IAAI,KAAK,YAAY,mBAAmB;oBACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;gBACtD,IAAI,KAAK,YAAY,oBAAoB;oBACvC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/admin/system-config-state.d.ts

@@ -0,0 +1,77 @@
+/** Immutable native-value drafts and duration presentation for global policy editing. */
+import type { ConfigEntry, ConfigKey, ConfigValue } from '@portaidentity/sdk';
+import type { AdminConfigFailure } from './system-config-service.js';
+/** Closed actions emitted by the direct configuration form. */
+export type AdminSystemConfigIntent = {
+    readonly kind: 'set-draft';
+    readonly key: ConfigKey;
+    readonly text: string;
+} | {
+    readonly kind: 'save' | 'close';
+};
+/** Current authoritative catalog plus raw edits retained across tabs and transient failures. */
+export interface AdminSystemConfigReadyState {
+    /** Ready projection discriminator. */
+    readonly kind: 'ready';
+    /** Complete validated entries in catalog order. */
+    readonly entries: readonly ConfigEntry[];
+    /** Raw input overrides; absent keys use the authoritative value. */
+    readonly drafts?: Readonly<Partial<Record<ConfigKey, string>>>;
+    /** Whether one remote operation or discard confirmation is active. */
+    readonly busy?: boolean;
+    /** Fixed safe status after save or failure. */
+    readonly message?: string;
+    /** Confirmed startup-policy update awaiting operator restart. */
+    readonly restartRequired?: boolean;
+}
+/** Complete states rendered by the configuration workspace. */
+export type AdminSystemConfigWorkspaceState = {
+    readonly kind: 'closed' | 'loading';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminConfigFailure;
+} | AdminSystemConfigReadyState;
+/** Derived dirty and valid batch values; invalid raw drafts never enter the payload. */
+export interface AdminSystemConfigDraftProjection {
+    /** Changed identifiers, including incomplete or invalid drafts. */
+    readonly dirtyKeys: readonly ConfigKey[];
+    /** Valid changed native values only. */
+    readonly values: Readonly<Partial<Record<ConfigKey, ConfigValue>>>;
+    /** Whether every changed draft satisfies its metadata. */
+    readonly valid: boolean;
+    /** Whether authority, validity, dirty state and operation ownership allow submission. */
+    readonly canSave: boolean;
+}
+/**
+ * Parses one raw editor value without coercing blanks, fractions or unsafe integers.
+ * @param entry - Authoritative metadata for the field.
+ * @param text - Raw single-line text, possibly an incomplete edit.
+ * @returns Valid native scalar, or undefined.
+ * @example parseAdminConfigDraft(entry, '7200');
+ */
+export declare function parseAdminConfigDraft(entry: ConfigEntry, text: string): ConfigValue | undefined;
+/**
+ * Derives an atomic batch without losing incomplete drafts or treating equivalent numbers as dirty.
+ * @param state - Loaded catalog and raw edits.
+ * @param canUpdate - Verified update capability, never inferred from form contents.
+ * @returns Immutable dirty keys, validated values and Save eligibility.
+ * @example projectAdminConfigDrafts(state, capabilities.canUpdateConfig);
+ */
+export declare function projectAdminConfigDrafts(state: AdminSystemConfigReadyState, canUpdate: boolean): AdminSystemConfigDraftProjection;
+/**
+ * Replaces one raw draft while preserving all other tabs' edits.
+ * @param state - Current loaded projection.
+ * @param key - Known loaded field identifier.
+ * @param text - Raw editor contents.
+ * @returns Immutable replacement; busy or unknown-field actions do not change state.
+ * @example setAdminConfigDraft(state, 'magic_link_ttl', '1200');
+ */
+export declare function setAdminConfigDraft(state: AdminSystemConfigReadyState, key: ConfigKey, text: string): AdminSystemConfigReadyState;
+/**
+ * Shows the largest exact whole duration unit while leaving storage and editor values in seconds.
+ * @param seconds - Native positive integer seconds.
+ * @returns Singular or plural whole-unit text.
+ * @example formatAdminConfigDuration(900); // '15 minutes'
+ */
+export declare function formatAdminConfigDuration(seconds: number): string;
+//# sourceMappingURL=system-config-state.d.ts.map

package/dist/admin/system-config-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-state.d.ts","sourceRoot":"","sources":["../../src/admin/system-config-state.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,+DAA+D;AAC/D,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAExC,gGAAgG;AAChG,MAAM,WAAW,2BAA2B;IAC1C,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,+DAA+D;AAC/D,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GAClE,2BAA2B,CAAC;AAEhC,wFAAwF;AACxF,MAAM,WAAW,gCAAgC;IAC/C,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,SAAS,EAAE,CAAC;IACzC,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACnE,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAK/F;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,2BAA2B,EAClC,SAAS,EAAE,OAAO,GACjB,gCAAgC,CAkBlC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,2BAA2B,EAClC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,GACX,2BAA2B,CAG7B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAYjE"}

package/dist/admin/system-config-state.js

@@ -0,0 +1,78 @@
+import { isAdminConfigValue } from './system-config-service.js';
+/**
+ * Parses one raw editor value without coercing blanks, fractions or unsafe integers.
+ * @param entry - Authoritative metadata for the field.
+ * @param text - Raw single-line text, possibly an incomplete edit.
+ * @returns Valid native scalar, or undefined.
+ * @example parseAdminConfigDraft(entry, '7200');
+ */
+export function parseAdminConfigDraft(entry, text) {
+    if (entry.valueType === 'string')
+        return isAdminConfigValue(entry, text) ? text : undefined;
+    if (!/^[+-]?\d+$/.test(text))
+        return undefined;
+    const value = Number(text);
+    return isAdminConfigValue(entry, value) ? value : undefined;
+}
+/**
+ * Derives an atomic batch without losing incomplete drafts or treating equivalent numbers as dirty.
+ * @param state - Loaded catalog and raw edits.
+ * @param canUpdate - Verified update capability, never inferred from form contents.
+ * @returns Immutable dirty keys, validated values and Save eligibility.
+ * @example projectAdminConfigDrafts(state, capabilities.canUpdateConfig);
+ */
+export function projectAdminConfigDrafts(state, canUpdate) {
+    const dirtyKeys = [];
+    const values = {};
+    let valid = true;
+    for (const entry of state.entries) {
+        const raw = state.drafts?.[entry.key] ?? String(entry.value);
+        const value = parseAdminConfigDraft(entry, raw);
+        if (value === entry.value)
+            continue;
+        dirtyKeys.push(entry.key);
+        if (value === undefined)
+            valid = false;
+        else
+            values[entry.key] = value;
+    }
+    return Object.freeze({
+        dirtyKeys: Object.freeze(dirtyKeys),
+        values: Object.freeze(values),
+        valid,
+        canSave: canUpdate && dirtyKeys.length > 0 && valid && !state.busy,
+    });
+}
+/**
+ * Replaces one raw draft while preserving all other tabs' edits.
+ * @param state - Current loaded projection.
+ * @param key - Known loaded field identifier.
+ * @param text - Raw editor contents.
+ * @returns Immutable replacement; busy or unknown-field actions do not change state.
+ * @example setAdminConfigDraft(state, 'magic_link_ttl', '1200');
+ */
+export function setAdminConfigDraft(state, key, text) {
+    if (state.busy || !state.entries.some((entry) => entry.key === key))
+        return state;
+    return Object.freeze({ ...state, drafts: Object.freeze({ ...state.drafts, [key]: text }) });
+}
+/**
+ * Shows the largest exact whole duration unit while leaving storage and editor values in seconds.
+ * @param seconds - Native positive integer seconds.
+ * @returns Singular or plural whole-unit text.
+ * @example formatAdminConfigDuration(900); // '15 minutes'
+ */
+export function formatAdminConfigDuration(seconds) {
+    for (const [divisor, unit] of [
+        [86400, 'day'],
+        [3600, 'hour'],
+        [60, 'minute'],
+    ]) {
+        if (seconds > 0 && seconds % divisor === 0) {
+            const amount = seconds / divisor;
+            return `${amount} ${unit}${amount === 1 ? '' : 's'}`;
+        }
+    }
+    return `${seconds} second${seconds === 1 ? '' : 's'}`;
+}
+//# sourceMappingURL=system-config-state.js.map

package/dist/admin/system-config-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-state.js","sourceRoot":"","sources":["../../src/admin/system-config-state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AA0ChE;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,IAAY;IACpE,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAkC,EAClC,SAAkB;IAElB,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,SAAS;QACpC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,GAAG,KAAK,CAAC;;YAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,KAAK;QACL,OAAO,EAAE,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI;KACnE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAkC,EAClC,GAAc,EACd,IAAY;IAEZ,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI;QAC5B,CAAC,KAAK,EAAE,KAAK,CAAC;QACd,CAAC,IAAI,EAAE,MAAM,CAAC;QACd,CAAC,EAAE,EAAE,QAAQ,CAAC;KACN,EAAE,CAAC;QACX,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,OAAO,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;YACjC,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACxD,CAAC"}

package/dist/admin/system-config-workspace.d.ts

@@ -0,0 +1,47 @@
+/** Direct four-tab Layout DSL editor for authoritative operational policy. */
+import { Dialog } from '@jsvision/ui';
+import type { View } from '@jsvision/ui';
+import type { AdminSystemConfigIntent, AdminSystemConfigWorkspaceState } from './system-config-state.js';
+/** Fitting viewport includes page padding, tab/window borders and menu/status chrome. */
+export declare const SYSTEM_CONFIG_MINIMUM_SIZE: Readonly<{
+    width: number;
+    height: number;
+}>;
+/** Verified authority needed by this feature only. */
+export interface AdminSystemConfigCapabilities {
+    /** Whether catalog values may be read. */
+    readonly canReadConfig: boolean;
+    /** Whether valid dirty values may be saved. */
+    readonly canUpdateConfig: boolean;
+}
+/** Construction boundaries for one focused workspace. */
+export interface AdminSystemConfigWorkspaceOptions {
+    /** Verified session capabilities. */
+    readonly capabilities: AdminSystemConfigCapabilities;
+    /** Sends closed user actions to the owning controller. */
+    readonly onIntent: (intent: AdminSystemConfigIntent) => void;
+    /** Focuses one mounted control through the application loop. */
+    readonly focusView?: (view: View) => void;
+    /** Delegates frame closure to the controller's discard handling. */
+    readonly onClose?: () => void;
+}
+/** Mounted full-page editor controlled through immutable projections. */
+export interface AdminSystemConfigWorkspace {
+    /** Maximized, non-restorable modeless dialog. */
+    readonly content: Dialog;
+    /** Publishes authoritative entries, drafts and operation state. */
+    readonly setState: (state: AdminSystemConfigWorkspaceState) => void;
+    /** Focuses a reachable control on the active tab. */
+    readonly focusCurrent: () => void;
+    /** Releases retained data and bindings. */
+    readonly clear: () => void;
+}
+/**
+ * Creates one direct DSL form with retained raw edits and a persistent footer.
+ * Compact geometry removes editable controls but retains immutable drafts and active-tab identity.
+ * @param options - Verified capabilities, intent sink and application focus boundary.
+ * @returns The modeless window and its state/lifecycle operations.
+ * @example createAdminSystemConfigWorkspace({ capabilities, onIntent });
+ */
+export declare function createAdminSystemConfigWorkspace(options: AdminSystemConfigWorkspaceOptions): AdminSystemConfigWorkspace;
+//# sourceMappingURL=system-config-workspace.d.ts.map

package/dist/admin/system-config-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-config-workspace.d.ts","sourceRoot":"","sources":["../../src/admin/system-config-workspace.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAKL,MAAM,EAWP,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAe,IAAI,EAAE,MAAM,cAAc,CAAC;AAQtD,OAAO,KAAK,EACV,uBAAuB,EACvB,+BAA+B,EAChC,MAAM,0BAA0B,CAAC;AAQlC,yFAAyF;AACzF,eAAO,MAAM,0BAA0B;;;EAGrC,CAAC;AAEH,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AACD,yDAAyD;AACzD,MAAM,WAAW,iCAAiC;IAChD,qCAAqC;IACrC,QAAQ,CAAC,YAAY,EAAE,6BAA6B,CAAC;IACrD,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAC7D,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IAC1C,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CAC/B;AACD,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,CAAC;IACpE,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;IAClC,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAqDD;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CAuM5B"}