@portaidentity/cli 1.7.3 → 1.9.0

package/dist/admin/organization-controller.js

@@ -0,0 +1,472 @@
+/** Operation ownership for the selected-organization management workspace. */
+import { readFile as readBinaryFile } from 'node:fs/promises';
+import { openFile as openNativeFile } from '@jsvision/files';
+import { Button, col, Commands, cover, Dialog, fixed, row, spacer, Text, } from '@jsvision/ui';
+/** Command value shared with the Organizations menu. */
+export const MANAGE_ORGANIZATION_COMMAND = 'manage-organization';
+/** Returns a stable identity for one authenticated organization context. */
+function contextKey(state, sessionEpoch) {
+    return state.kind === 'authenticated' && state.organization
+        ? `${sessionEpoch}:${state.organization.id}`
+        : undefined;
+}
+/** Returns a fixed failure for a completed non-success mutation. */
+function mutationFailure(result) {
+    return result.kind === 'failure' ? result.failure : 'unavailable';
+}
+/** Supported image suffixes and the media type declared to the server. */
+const IMAGE_CONTENT_TYPES = [
+    ['.png', 'image/png'],
+    ['.jpg', 'image/jpeg'],
+    ['.jpeg', 'image/jpeg'],
+    ['.webp', 'image/webp'],
+    ['.ico', 'image/x-icon'],
+    ['.svg', 'image/svg+xml'],
+];
+/** Maximum decoded byte size for each stored branding image slot. */
+const ASSET_LIMITS = {
+    logo: 2 * 1024 * 1024,
+    favicon: 512 * 1024,
+};
+/** Resolves an approved media type from a user-selected filename. */
+function imageContentType(path) {
+    const normalized = path.toLowerCase();
+    return IMAGE_CONTENT_TYPES.find(([suffix]) => normalized.endsWith(suffix))?.[1];
+}
+/** Opens one focused Keep/confirm dialog and always removes it. */
+async function confirmAction(host, title, message, action) {
+    const dialog = new Dialog({ title, width: 46, height: 9, centered: true });
+    const keep = new Button('Keep', { command: Commands.cancel, default: true });
+    const confirm = new Button(action, { command: Commands.ok });
+    dialog.add(cover(col({ padding: 1, gap: 1 }, fixed(new Text(message), 1), spacer(), fixed(row({ gap: 1, justify: 'end' }, keep, confirm), 2))));
+    host.desktop.addWindow(dialog);
+    host.loop.focusView(keep);
+    try {
+        return (await host.loop.execView(dialog)) === Commands.ok;
+    }
+    finally {
+        host.desktop.removeWindow(dialog);
+    }
+}
+/** Creates the small controller for one active organization at a time. */
+export function createAdminOrganizationController(options) {
+    let key;
+    let organizationId;
+    let generation = 0;
+    let workspace;
+    let mounted = false;
+    let projection;
+    const pendingTabs = new Set();
+    let disposed = false;
+    /** Publishes state only to the current workspace owner. */
+    const publish = (state) => {
+        if (!disposed)
+            workspace?.setState(state);
+    };
+    /** Mounts the workspace only after its first authoritative load has settled. */
+    const mount = () => {
+        if (!mounted && workspace) {
+            options.mountWorkspace(workspace.content);
+            mounted = true;
+        }
+    };
+    /** Publishes authoritative data with current per-tab pending ownership. */
+    const publishReady = (feedback = {}) => {
+        if (!projection)
+            return;
+        publish({
+            kind: 'ready',
+            ...projection,
+            ...(pendingTabs.size > 0 ? { pendingTabs: [...pendingTabs] } : {}),
+            ...feedback,
+        });
+    };
+    /** Closes the current workspace and invalidates every late continuation. */
+    const close = () => {
+        generation += 1;
+        pendingTabs.clear();
+        projection = undefined;
+        workspace?.clear?.();
+        workspace = undefined;
+        mounted = false;
+        options.mountWorkspace(null);
+    };
+    /** Returns true only for a continuation that still owns the selected context. */
+    const owns = (capturedGeneration, capturedId) => !disposed && generation === capturedGeneration && organizationId === capturedId;
+    /** Returns true when the latest verified session may update the captured organization. */
+    const hasCapability = (owner, capability) => {
+        const state = options.readState();
+        return (owns(owner.generation, owner.organizationId) &&
+            state.kind === 'authenticated' &&
+            state.organization?.id === owner.organizationId &&
+            (capability === 'update'
+                ? state.capabilities.canUpdateOrganizations
+                : state.capabilities.canSuspendOrganizations));
+    };
+    /** Ends the stale workspace and delegates authentication to the existing coordinator. */
+    const sessionInvalid = () => {
+        close();
+        options.requestAuthentication();
+    };
+    /** Loads the complete organization and asset metadata into one authoritative projection. */
+    const load = async (owner) => {
+        const operations = options.readOperations();
+        const selectedId = owner?.organizationId ?? organizationId;
+        const capturedGeneration = owner?.generation ?? generation;
+        if (!selectedId || !owns(capturedGeneration, selectedId)) {
+            return { kind: 'stale' };
+        }
+        if (!operations)
+            return { kind: 'failure', failure: 'unavailable' };
+        if (projection)
+            publish({ kind: 'loading', previous: projection });
+        const organizationResult = await operations.get(selectedId, new AbortController().signal);
+        if (!owns(capturedGeneration, selectedId))
+            return { kind: 'stale' };
+        if (organizationResult.kind === 'session-invalid') {
+            sessionInvalid();
+            return { kind: 'stale' };
+        }
+        if (organizationResult.kind === 'failure') {
+            if (!projection) {
+                mount();
+                publish({ kind: 'failure', failure: organizationResult.failure });
+            }
+            return organizationResult;
+        }
+        const assetResult = await operations.listAssets(selectedId, new AbortController().signal);
+        if (!owns(capturedGeneration, selectedId))
+            return { kind: 'stale' };
+        if (assetResult.kind === 'session-invalid') {
+            sessionInvalid();
+            return { kind: 'stale' };
+        }
+        if (assetResult.kind === 'failure') {
+            if (!projection) {
+                mount();
+                publish({
+                    kind: 'failure',
+                    failure: assetResult.failure,
+                    organization: organizationResult.value,
+                });
+            }
+            return assetResult;
+        }
+        projection = { organization: organizationResult.value, assets: assetResult.value };
+        options.onOrganizationChange?.(organizationResult.value);
+        mount();
+        publishReady();
+        if (!owner)
+            workspace?.focusCurrent();
+        return { kind: 'success' };
+    };
+    /** Runs one tab-owned mutation and reconciles its authoritative resources. */
+    const mutate = async (tab, invoke, reload = load, capturedOwner, requiredCapability = 'update') => {
+        const operations = options.readOperations();
+        const selectedId = capturedOwner?.organizationId ?? organizationId;
+        const capturedGeneration = capturedOwner?.generation ?? generation;
+        const owner = selectedId
+            ? { generation: capturedGeneration, organizationId: selectedId }
+            : undefined;
+        if (!operations || !owner || !hasCapability(owner, requiredCapability) || pendingTabs.has(tab)) {
+            return;
+        }
+        pendingTabs.add(tab);
+        publishReady();
+        const result = await invoke(operations, owner.organizationId);
+        if (!owns(capturedGeneration, owner.organizationId))
+            return;
+        if (result.kind === 'session-invalid')
+            return sessionInvalid();
+        if (result.kind === 'cancelled') {
+            pendingTabs.delete(tab);
+            publishReady();
+            return;
+        }
+        if (result.kind === 'success') {
+            const reloadResult = await reload(owner);
+            if (!owns(capturedGeneration, owner.organizationId) || reloadResult.kind === 'stale')
+                return;
+            pendingTabs.delete(tab);
+            if (reloadResult.kind === 'success')
+                publishReady({ savedTab: tab });
+            else
+                publishReady({ failure: reloadResult.failure, feedbackTab: tab });
+            workspace?.focusCurrent();
+            return;
+        }
+        const reloadResult = await reload(owner);
+        if (!owns(capturedGeneration, owner.organizationId) || reloadResult.kind === 'stale')
+            return;
+        pendingTabs.delete(tab);
+        if (reloadResult.kind === 'success') {
+            publishReady({
+                failure: mutationFailure(result),
+                feedbackTab: tab,
+                reloadedAfterFailure: true,
+            });
+        }
+        else {
+            publishReady({ failure: reloadResult.failure, feedbackTab: tab });
+        }
+        workspace?.focusCurrent();
+    };
+    /** Reloads both authentication resources once after a save outcome. */
+    const reloadAuthentication = async (owner) => {
+        const operations = options.readOperations();
+        const selectedId = owner.organizationId;
+        const current = projection;
+        if (!owns(owner.generation, selectedId))
+            return { kind: 'stale' };
+        if (!operations || !current)
+            return { kind: 'failure', failure: 'unavailable' };
+        const methods = await operations.getLoginMethods(selectedId, new AbortController().signal);
+        if (!owns(owner.generation, selectedId))
+            return { kind: 'stale' };
+        if (methods.kind === 'session-invalid') {
+            sessionInvalid();
+            return { kind: 'stale' };
+        }
+        const policy = await operations.getTwoFactorPolicy(selectedId, new AbortController().signal);
+        if (!owns(owner.generation, selectedId))
+            return { kind: 'stale' };
+        if (policy.kind === 'session-invalid') {
+            sessionInvalid();
+            return { kind: 'stale' };
+        }
+        if (methods.kind === 'success' && policy.kind === 'success') {
+            projection = {
+                ...current,
+                organization: {
+                    ...current.organization,
+                    defaultLoginMethods: methods.value,
+                    twoFactorPolicy: policy.value,
+                },
+            };
+            return { kind: 'success' };
+        }
+        if (methods.kind === 'failure')
+            return methods;
+        if (policy.kind === 'failure')
+            return policy;
+        return { kind: 'stale' };
+    };
+    /** Reloads only uploaded image metadata after one immediate asset action. */
+    const reloadAssets = async (owner) => {
+        const operations = options.readOperations();
+        const selectedId = owner.organizationId;
+        const current = projection;
+        if (!owns(owner.generation, selectedId))
+            return { kind: 'stale' };
+        if (!operations || !current)
+            return { kind: 'failure', failure: 'unavailable' };
+        const result = await operations.listAssets(selectedId, new AbortController().signal);
+        if (!owns(owner.generation, selectedId))
+            return { kind: 'stale' };
+        if (result.kind === 'session-invalid') {
+            sessionInvalid();
+            return { kind: 'stale' };
+        }
+        if (result.kind === 'failure')
+            return result;
+        projection = { ...current, assets: result.value };
+        return { kind: 'success' };
+    };
+    /** Selects, validates, and immediately uploads one local branding image. */
+    const uploadAsset = async (assetType, owner) => {
+        if (!projection || !hasCapability(owner, 'update') || pendingTabs.has('branding'))
+            return;
+        const pick = options.openFile ?? ((pickerOptions) => openNativeFile(options.host, pickerOptions));
+        let path;
+        try {
+            path = await pick({
+                title: 'Select image (PNG, JPEG, WebP, ICO, SVG)',
+                wildcard: '*.*',
+                filter: (entry) => entry.kind === 'dir' ||
+                    (entry.kind === 'file' && imageContentType(entry.name) !== undefined),
+            });
+        }
+        catch {
+            if (owns(owner.generation, owner.organizationId)) {
+                publishReady({ failure: 'file-read', feedbackTab: 'branding' });
+                workspace?.focusCurrent();
+            }
+            return;
+        }
+        if (!owns(owner.generation, owner.organizationId))
+            return;
+        if (!path) {
+            workspace?.focusCurrent();
+            return;
+        }
+        const contentType = imageContentType(path);
+        if (!contentType) {
+            publishReady({ failure: 'file-type', feedbackTab: 'branding' });
+            workspace?.focusCurrent();
+            return;
+        }
+        let bytes;
+        try {
+            bytes = await (options.readFile ?? readBinaryFile)(path);
+        }
+        catch {
+            if (owns(owner.generation, owner.organizationId)) {
+                publishReady({ failure: 'file-read', feedbackTab: 'branding' });
+                workspace?.focusCurrent();
+            }
+            return;
+        }
+        if (!owns(owner.generation, owner.organizationId))
+            return;
+        if (bytes.length === 0 || bytes.length > ASSET_LIMITS[assetType]) {
+            publishReady({ failure: 'file-size', feedbackTab: 'branding' });
+            workspace?.focusCurrent();
+            return;
+        }
+        await mutate('branding', (operations, id) => operations.uploadAsset(id, assetType, { contentType, data: Buffer.from(bytes).toString('base64') }, new AbortController().signal), reloadAssets, owner);
+    };
+    /** Confirms and immediately removes one stored branding image. */
+    const removeAsset = async (assetType, owner) => {
+        if (!projection || !hasCapability(owner, 'update') || pendingTabs.has('branding'))
+            return;
+        const label = assetType === 'logo' ? 'logo' : 'favicon';
+        const confirmed = await confirmAction(options.host, `Remove ${label}`, `Remove the uploaded ${label}?`, 'Remove');
+        if (!owns(owner.generation, owner.organizationId))
+            return;
+        if (!confirmed) {
+            workspace?.focusCurrent();
+            return;
+        }
+        await mutate('branding', (operations, id) => operations.deleteAsset(id, assetType, new AbortController().signal), reloadAssets, owner);
+    };
+    /** Applies only changed authentication resources in a fixed sequential order. */
+    const saveAuthentication = async (intent, owner) => {
+        const current = projection?.organization;
+        if (!current || !hasCapability(owner, 'update'))
+            return;
+        const methodsChanged = intent.loginMethods.length !== current.defaultLoginMethods.length ||
+            intent.loginMethods.some((method) => !current.defaultLoginMethods.includes(method));
+        const policyChanged = intent.twoFactorPolicy !== current.twoFactorPolicy;
+        if (!methodsChanged && !policyChanged)
+            return;
+        await mutate('authentication', async (operations, id) => {
+            if (methodsChanged) {
+                const result = await operations.updateLoginMethods(id, intent.loginMethods);
+                if (result.kind !== 'success')
+                    return result;
+                if (!owns(owner.generation, owner.organizationId))
+                    return { kind: 'cancelled' };
+            }
+            return policyChanged
+                ? operations.updateTwoFactorPolicy(id, intent.twoFactorPolicy)
+                : { kind: 'success' };
+        }, reloadAuthentication, owner);
+    };
+    /** Handles one focused lifecycle action. */
+    const lifecycle = async (action, owner) => {
+        const current = projection?.organization;
+        if (!current || !hasCapability(owner, 'suspend') || pendingTabs.has('overview'))
+            return;
+        if (action === 'suspend') {
+            if (current.isSuperAdmin)
+                return;
+            const confirmed = await confirmAction(options.host, 'Suspend organization', `Suspend ${current.name}?`, 'Suspend');
+            if (!owns(owner.generation, owner.organizationId))
+                return;
+            if (!confirmed) {
+                workspace?.focusCurrent();
+                return;
+            }
+        }
+        await mutate('overview', (operations, id) => operations[action](id), load, owner, 'suspend');
+    };
+    /** Dispatches one workspace intent only while its opening context still owns the controller. */
+    const dispatchIntent = (intent, owner) => {
+        if (!owns(owner.generation, owner.organizationId))
+            return;
+        switch (intent.kind) {
+            case 'save-overview':
+                if (!hasCapability(owner, 'update'))
+                    return;
+                void mutate('overview', (operations, id) => operations.update(id, intent.input), load, owner);
+                return;
+            case 'activate':
+            case 'suspend':
+                void lifecycle(intent.kind, owner);
+                return;
+            case 'save-authentication':
+                if (!hasCapability(owner, 'update'))
+                    return;
+                void saveAuthentication(intent, owner);
+                return;
+            case 'save-branding':
+                if (!hasCapability(owner, 'update'))
+                    return;
+                void mutate('branding', (operations, id) => operations.updateBranding(id, intent.input), load, owner);
+                return;
+            case 'upload-asset':
+                if (!hasCapability(owner, 'update'))
+                    return;
+                void uploadAsset(intent.assetType, owner);
+                return;
+            case 'remove-asset':
+                if (!hasCapability(owner, 'update'))
+                    return;
+                void removeAsset(intent.assetType, owner);
+                return;
+        }
+    };
+    /** Handles a direct controller intent in the current selected-organization context. */
+    const handleIntent = (intent) => {
+        const selectedId = organizationId;
+        if (!selectedId)
+            return;
+        dispatchIntent(intent, { generation, organizationId: selectedId });
+    };
+    return {
+        syncContext(state, sessionEpoch) {
+            const nextKey = contextKey(state, sessionEpoch);
+            if (nextKey === key)
+                return;
+            if (workspace || key !== undefined)
+                close();
+            key = nextKey;
+            organizationId = state.kind === 'authenticated' ? state.organization?.id : undefined;
+        },
+        handleCommand(command) {
+            if (command !== MANAGE_ORGANIZATION_COMMAND)
+                return false;
+            const state = options.readState();
+            if (disposed ||
+                workspace ||
+                state.kind !== 'authenticated' ||
+                !state.organization ||
+                !state.capabilities.canReadOrganizations) {
+                return true;
+            }
+            organizationId = state.organization.id;
+            const workspaceOwner = { generation, organizationId: state.organization.id };
+            workspace = options.workspaceFactory({
+                capabilities: state.capabilities,
+                onIntent: (intent) => dispatchIntent(intent, workspaceOwner),
+                focusView: (view) => options.host.loop.focusView(view),
+                onClose: () => {
+                    close();
+                    options.onWorkspaceClosed?.();
+                },
+            });
+            void load();
+            return true;
+        },
+        handleIntent,
+        isOpen: () => workspace !== undefined,
+        close,
+        dispose() {
+            if (disposed)
+                return;
+            close();
+            disposed = true;
+        },
+    };
+}
+//# sourceMappingURL=organization-controller.js.map

package/dist/admin/organization-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-controller.js","sourceRoot":"","sources":["../../src/admin/organization-controller.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,EACL,MAAM,EACN,GAAG,EACH,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,GAAG,EACH,MAAM,EACN,IAAI,GACL,MAAM,cAAc,CAAC;AAgBtB,wDAAwD;AACxD,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAoGjE,4EAA4E;AAC5E,SAAS,UAAU,CAAC,KAA2B,EAAE,YAAoB;IACnE,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,YAAY;QACzD,CAAC,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE;QAC5C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,MAAsB;IAC7C,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,MAAM,mBAAmB,GAErB;IACF,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,MAAM,EAAE,eAAe,CAAC;CAC1B,CAAC;AAEF,qEAAqE;AACrE,MAAM,YAAY,GAAyD;IACzE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACrB,OAAO,EAAE,GAAG,GAAG,IAAI;CACpB,CAAC;AAEF,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,aAAa,CAC1B,IAAqC,EACrC,KAAa,EACb,OAAe,EACf,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CACR,KAAK,CACH,GAAG,CACD,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EACtB,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAC3B,MAAM,EAAE,EACR,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CACzD,CACF,CACF,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAS,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;IACpE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iCAAiC,CAC/C,OAA2C;IAE3C,IAAI,GAAuB,CAAC;IAC5B,IAAI,cAAkC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAiD,CAAC;IACtD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAA4D,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC7D,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,2DAA2D;IAC3D,MAAM,OAAO,GAAG,CAAC,KAAsC,EAAQ,EAAE;QAC/D,IAAI,CAAC,QAAQ;YAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,gFAAgF;IAChF,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,2EAA2E;IAC3E,MAAM,YAAY,GAAG,CAAC,QAAQ,GAAkB,EAAE,EAAQ,EAAE;QAC1D,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,OAAO,CAAC;YACN,IAAI,EAAE,OAAO;YACb,GAAG,UAAU;YACb,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,UAAU,IAAI,CAAC,CAAC;QAChB,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,UAAU,GAAG,SAAS,CAAC;QACvB,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACrB,SAAS,GAAG,SAAS,CAAC;QACtB,OAAO,GAAG,KAAK,CAAC;QAChB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,iFAAiF;IACjF,MAAM,IAAI,GAAG,CAAC,kBAA0B,EAAE,UAAkB,EAAW,EAAE,CACvE,CAAC,QAAQ,IAAI,UAAU,KAAK,kBAAkB,IAAI,cAAc,KAAK,UAAU,CAAC;IAElF,0FAA0F;IAC1F,MAAM,aAAa,GAAG,CACpB,KAAiC,EACjC,UAA0C,EACjC,EAAE;QACX,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAC5C,KAAK,CAAC,IAAI,KAAK,eAAe;YAC9B,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC,cAAc;YAC/C,CAAC,UAAU,KAAK,QAAQ;gBACtB,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,sBAAsB;gBAC3C,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC;IAEF,yFAAyF;IACzF,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAClC,CAAC,CAAC;IAEF,4FAA4F;IAC5F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAkC,EAAyB,EAAE;QAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,EAAE,cAAc,IAAI,cAAc,CAAC;QAC3D,MAAM,kBAAkB,GAAG,KAAK,EAAE,UAAU,IAAI,UAAU,CAAC;QAC3D,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACpE,IAAI,UAAU;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,MAAM,kBAAkB,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpE,IAAI,kBAAkB,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAClD,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,EAAE,CAAC;gBACR,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpE,IAAI,WAAW,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC3C,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,EAAE,CAAC;gBACR,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,YAAY,EAAE,kBAAkB,CAAC,KAAK;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,UAAU,GAAG,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;QACnF,OAAO,CAAC,oBAAoB,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzD,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,CAAC;QACf,IAAI,CAAC,KAAK;YAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,8EAA8E;IAC9E,MAAM,MAAM,GAAG,KAAK,EAClB,GAAkC,EAClC,MAAiG,EACjG,MAAM,GAAiE,IAAI,EAC3E,aAA0C,EAC1C,kBAAkB,GAAmC,QAAQ,EAC9C,EAAE;QACjB,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,EAAE,cAAc,IAAI,cAAc,CAAC;QACnE,MAAM,kBAAkB,GAAG,aAAa,EAAE,UAAU,IAAI,UAAU,CAAC;QACnE,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE;YAChE,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,YAAY,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,cAAc,EAAE,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,YAAY,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO;YAC7F,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS;gBAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;;gBAChE,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAC7F,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,YAAY,CAAC;gBACX,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;gBAChC,WAAW,EAAE,GAAG;gBAChB,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,SAAS,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,uEAAuE;IACvE,MAAM,oBAAoB,GAAG,KAAK,EAAE,KAAiC,EAAyB,EAAE;QAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClE,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvC,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5D,UAAU,GAAG;gBACX,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,OAAO,CAAC,YAAY;oBACvB,mBAAmB,EAAE,OAAO,CAAC,KAAK;oBAClC,eAAe,EAAE,MAAM,CAAC,KAAK;iBAC9B;aACF,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,6EAA6E;IAC7E,MAAM,YAAY,GAAG,KAAK,EAAE,KAAiC,EAAyB,EAAE;QACtF,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClE,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC7C,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,WAAW,GAAG,KAAK,EACvB,SAAqC,EACrC,KAAiC,EAClB,EAAE;QACjB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAClG,IAAI,IAA+B,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC;gBAChB,KAAK,EAAE,0CAA0C;gBACjD,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACxE,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;gBAChE,SAAS,EAAE,YAAY,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YAChE,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;gBAChE,SAAS,EAAE,YAAY,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YAChE,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,MAAM,CACV,UAAU,EACV,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CACjB,UAAU,CAAC,WAAW,CACpB,EAAE,EACF,SAAS,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAC5D,IAAI,eAAe,EAAE,CAAC,MAAM,CAC7B,EACH,YAAY,EACZ,KAAK,CACN,CAAC;IACJ,CAAC,CAAC;IAEF,kEAAkE;IAClE,MAAM,WAAW,GAAG,KAAK,EACvB,SAAqC,EACrC,KAAiC,EAClB,EAAE;QACjB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAC1F,MAAM,KAAK,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,OAAO,CAAC,IAAI,EACZ,UAAU,KAAK,EAAE,EACjB,uBAAuB,KAAK,GAAG,EAC/B,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,EAAE,YAAY,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,MAAM,CACV,UAAU,EACV,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CACjB,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,EACrE,YAAY,EACZ,KAAK,CACN,CAAC;IACJ,CAAC,CAAC;IAEF,iFAAiF;IACjF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,MAAkF,EAClF,KAAiC,EAClB,EAAE;QACjB,MAAM,OAAO,GAAG,UAAU,EAAE,YAAY,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO;QACxD,MAAM,cAAc,GAClB,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,MAAM;YACjE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC;QACzE,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa;YAAE,OAAO;QAC9C,MAAM,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;YACtD,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAClF,CAAC;YACD,OAAO,aAAa;gBAClB,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC;gBAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1B,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,4CAA4C;IAC5C,MAAM,SAAS,GAAG,KAAK,EACrB,MAA8B,EAC9B,KAAiC,EAClB,EAAE;QACjB,MAAM,OAAO,GAAG,UAAU,EAAE,YAAY,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QACxF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,YAAY;gBAAE,OAAO;YACjC,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,OAAO,CAAC,IAAI,EACZ,sBAAsB,EACtB,WAAW,OAAO,CAAC,IAAI,GAAG,EAC1B,SAAS,CACV,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,EAAE,YAAY,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/F,CAAC,CAAC;IAEF,gGAAgG;IAChG,MAAM,cAAc,GAAG,CACrB,MAA+B,EAC/B,KAAiC,EAC3B,EAAE;QACR,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAC1D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,eAAe;gBAClB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC5C,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC9F,OAAO;YACT,KAAK,UAAU,CAAC;YAChB,KAAK,SAAS;gBACZ,KAAK,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACnC,OAAO;YACT,KAAK,qBAAqB;gBACxB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC5C,KAAK,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,KAAK,eAAe;gBAClB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC5C,KAAK,MAAM,CACT,UAAU,EACV,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAC/D,IAAI,EACJ,KAAK,CACN,CAAC;gBACF,OAAO;YACT,KAAK,cAAc;gBACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC5C,KAAK,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC1C,OAAO;YACT,KAAK,cAAc;gBACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,OAAO;gBAC5C,KAAK,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC1C,OAAO;QACX,CAAC;IACH,CAAC,CAAC;IAEF,uFAAuF;IACvF,MAAM,YAAY,GAAG,CAAC,MAA+B,EAAQ,EAAE;QAC7D,MAAM,UAAU,GAAG,cAAc,CAAC;QAClC,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,cAAc,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,CAAC,KAAK,EAAE,YAAY;YAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,GAAG;gBAAE,OAAO;YAC5B,IAAI,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,KAAK,EAAE,CAAC;YAC5C,GAAG,GAAG,OAAO,CAAC;YACd,cAAc,GAAG,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,CAAC;QACD,aAAa,CAAC,OAAO;YACnB,IAAI,OAAO,KAAK,2BAA2B;gBAAE,OAAO,KAAK,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YAClC,IACE,QAAQ;gBACR,SAAS;gBACT,KAAK,CAAC,IAAI,KAAK,eAAe;gBAC9B,CAAC,KAAK,CAAC,YAAY;gBACnB,CAAC,KAAK,CAAC,YAAY,CAAC,oBAAoB,EACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,cAAc,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,cAAc,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YAC7E,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;gBACnC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC5D,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBACtD,OAAO,EAAE,GAAG,EAAE;oBACZ,KAAK,EAAE,CAAC;oBACR,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAChC,CAAC;aACF,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY;QACZ,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,KAAK,SAAS;QACrC,KAAK;QACL,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,KAAK,EAAE,CAAC;YACR,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/admin/organization-dialogs.d.ts

@@ -0,0 +1,63 @@
+/** Organization and identity dialogs for the embedded administration application. */
+import type { CreateOrganizationInput } from '@portaidentity/sdk';
+import type { EventLoop, ModalDialogHost } from '@jsvision/ui';
+import type { AdminCapabilities, AdminConnectionState, AdminOrganizationFailureKind, AdminOrganizationContext, AdminOrganizationResult } from './state.js';
+/** Authenticated state accepted by the read-only identity dialog. */
+export type AuthenticatedAdminState = Extract<AdminConnectionState, {
+    readonly kind: 'authenticated';
+}>;
+/** Inputs supplied by the application-owned organization listing operation. */
+export interface OrganizationChooserOptions {
+    /** Capabilities from the current live verified session. */
+    readonly capabilities: AdminCapabilities;
+    /** Current list operation, omitted when listing is not allowed. */
+    readonly organizations?: Promise<AdminOrganizationResult<readonly AdminOrganizationContext[]>>;
+    /** Fixed failure retained while an authoritative organization list is reloaded. */
+    readonly failure?: AdminOrganizationFailureKind;
+}
+/** User choice returned by the organization chooser. */
+export type OrganizationChoiceResult = {
+    readonly kind: 'switch';
+    readonly organization: AdminOrganizationContext;
+} | {
+    readonly kind: 'delete';
+    readonly organization: AdminOrganizationContext;
+} | {
+    readonly kind: 'create';
+} | {
+    readonly kind: 'reauthenticate';
+} | {
+    readonly kind: 'cancel';
+};
+/** User choice returned by the create-organization form. */
+export type CreateOrganizationDialogResult = {
+    readonly kind: 'create';
+    readonly input: CreateOrganizationInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result of the irreversible organization-deletion dialog. */
+export type DeleteOrganizationDialogResult = {
+    readonly kind: 'delete';
+    readonly organizationId: string;
+} | {
+    readonly kind: 'cancel';
+};
+/** Modal host needed for abort-driven organization deletion confirmation. */
+export interface AdminOrganizationDeleteDialogHost extends ModalDialogHost {
+    /** Event loop that can close an owned modal when its operation is cancelled. */
+    readonly loop: ModalDialogHost['loop'] & Pick<EventLoop, 'endModal' | 'focusView'>;
+}
+/** Explicit choice returned by the blocking unauthenticated gate. */
+export type AuthenticationGateChoice = 'authenticate' | 'quit';
+/** Shows the mandatory authentication gate and returns one explicit user choice. */
+export declare function showAuthenticationGate(host: ModalDialogHost): Promise<AuthenticationGateChoice>;
+/** Shows trusted identity details and restores the previously focused control on close. */
+export declare function showWhoAmIDialog(host: ModalDialogHost, state: AuthenticatedAdminState, insecure: boolean): Promise<void>;
+/** Shows the organization list and returns only an explicit typed choice. */
+export declare function showOrganizationChooser(host: ModalDialogHost, options: OrganizationChooserOptions): Promise<OrganizationChoiceResult>;
+/** Shows the bounded create form and omits blank optional fields from its result. */
+export declare function showCreateOrganizationDialog(host: ModalDialogHost): Promise<CreateOrganizationDialogResult>;
+/** Shows the tenant-owned cascade before permanently deleting an organization. */
+export declare function showDeleteOrganizationDialog(host: AdminOrganizationDeleteDialogHost, operationSignal: AbortSignal, organization: AdminOrganizationContext): Promise<DeleteOrganizationDialogResult>;
+//# sourceMappingURL=organization-dialogs.d.ts.map

package/dist/admin/organization-dialogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-dialogs.d.ts","sourceRoot":"","sources":["../../src/admin/organization-dialogs.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAkBlE,OAAO,KAAK,EAAiB,SAAS,EAAE,eAAe,EAAqB,MAAM,cAAc,CAAC;AAKjG,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAEpB,qEAAqE;AACrE,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC3C,oBAAoB,EACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CACnC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC/F,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC;CACjD;AAED,wDAAwD;AACxD,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,4DAA4D;AAC5D,MAAM,MAAM,8BAA8B,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,+DAA+D;AAC/D,MAAM,MAAM,8BAA8B,GACxC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE7F,6EAA6E;AAC7E,MAAM,WAAW,iCAAkC,SAAQ,eAAe;IACxE,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC;CACpF;AAED,qEAAqE;AACrE,MAAM,MAAM,wBAAwB,GAAG,cAAc,GAAG,MAAM,CAAC;AA4H/D,oFAAoF;AACpF,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,wBAAwB,CAAC,CA4BnC;AA2DD,2FAA2F;AAC3F,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,wBAAwB,CAAC,CA8EnC;AAWD,qFAAqF;AACrF,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,8BAA8B,CAAC,CA6CzC;AAED,kFAAkF;AAClF,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,iCAAiC,EACvC,eAAe,EAAE,WAAW,EAC5B,YAAY,EAAE,wBAAwB,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAoBzC"}