@rebasepro/server 0.23.0 → 0.24.0

package/dist/ast-schema-editor-CWqS_sLJ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-schema-editor-CWqS_sLJ.js","names":[],"sources":["../src/api/ast-schema-editor.ts"],"sourcesContent":["import { Project, SyntaxKind, Node, ObjectLiteralExpression, ObjectLiteralElementLike, PropertyAssignment, SourceFile, IndentationText } from \"ts-morph\";\nimport {\n    collectionPatchProblems,\n    nestAdminCollectionKeys,\n    nestAdminPropertyKeys,\n    nestCollectionPatchPaths,\n    runtimeOnlyKeyIn,\n    type CollectionPatch,\n    type CollectionPatchOp\n} from \"@rebasepro/types\";\nimport * as path from \"path\";\nimport * as fs from \"fs\";\n\n/**\n * The helpers a collection file may be wrapped in.\n *\n * `rebase init` scaffolds every collection as\n * `const postsCollection = defineCollection({ … })` — a call expression, not the\n * bare object literal `rebase introspect` emits. An editor that only understood\n * the bare form found nothing to patch in any stock project, and then rewrote the\n * file from the panel's JSON: no wrapper, no imports, no relation thunks.\n */\nconst COLLECTION_FACTORIES = new Set([\"defineCollection\"]);\n\n/**\n * The only relation-target expression this editor will write through verbatim.\n *\n * A relation's `target` is emitted as SOURCE, not as a string literal, because\n * it has to be `() => otherCollection`. The test for \"is this already a thunk?\"\n * used to be \"does it contain an arrow\", which `() => { require(\"child_process\")\n * .execSync(\"…\") }` also satisfies — and `rebase dev` re-imports the file the\n * moment it changes, so the payload ran without anyone deploying anything.\n *\n * An arrow returning a single identifier is the whole grammar. Anything else is\n * read as a collection name and turned into a thunk by `targetThunk`, which\n * resolves it against the collections directory and refuses a name with no file.\n */\nconst ARROW_TO_IDENTIFIER = /^\\(\\s*\\)\\s*=>\\s*[A-Za-z_$][A-Za-z0-9_$]*$/;\n\n/**\n * A value that must be emitted as source code rather than as JSON.\n *\n * Everything reaching the writer has been through `JSON.stringify` on the wire,\n * so a function-valued key arrives either missing or as a string. A relation's\n * `target` is a thunk in the file and a slug in the payload; this is how the\n * thunk gets written back.\n */\nclass RawExpression {\n    constructor(public readonly text: string) {\n    }\n}\n\n/**\n * Move presentation keys into the `admin` block.\n *\n * The rule itself lives in `@rebasepro/types`, next to `ADMIN_COLLECTION_KEYS`,\n * because `@rebasepro/cms-types` has to apply the identical one on the panel's\n * side and this package cannot import that one. Two copies used to exist and\n * they disagreed about precedence, which decided whether a presentation edit was\n * saved or silently reverted to the value the user had just changed away from.\n */\nexport function nestAdminKeys(collectionData: Record<string, unknown>): Record<string, unknown> {\n    return nestAdminCollectionKeys(collectionData);\n}\n\n/**\n * {@link nestAdminKeys} for a whole collection — its properties included.\n *\n * `nestAdminKeys` only ever moved the COLLECTION's presentation keys. A\n * property's — `markdown`, `multiline`, `previewAsTag` — went to disk exactly as\n * the panel sent them, at the top level of the property, which the boot\n * validator treats as fatal. `saveProperty` nests them; `saveCollection` did\n * not, and *creating* a collection is a `saveCollection`.\n *\n * So a collection created from a template wrote a file that could not boot, and\n * took the whole project down with it — the loader imports every collection in\n * the directory, so one bad file stops `rebase dev` from starting at all. The\n * panel reported success.\n */\nexport function nestAdminKeysDeep(collectionData: Record<string, unknown>): Record<string, unknown> {\n    const nested = nestAdminKeys(collectionData);\n    const properties = nested.properties;\n    if (properties && typeof properties === \"object\" && !Array.isArray(properties)) {\n        nested.properties = Object.fromEntries(\n            Object.entries(properties as Record<string, unknown>).map(([key, property]) => [\n                key,\n                property && typeof property === \"object\" && !Array.isArray(property)\n                    ? nestAdminPropertyKeys(property as Record<string, unknown>)\n                    : property\n            ])\n        );\n    }\n    return nested;\n}\n\nexport class AstSchemaEditor {\n    private project: Project;\n    private collectionsDir: string;\n\n    constructor(collectionsDir: string) {\n        this.project = new Project({\n            manipulationSettings: {\n                indentationText: IndentationText.FourSpaces\n            }\n        });\n        if (fs.existsSync(collectionsDir)) {\n            this.project.addSourceFilesAtPaths(`${collectionsDir}/**/*.ts`);\n        }\n        this.collectionsDir = path.resolve(collectionsDir);\n    }\n\n    /**\n     * Sanitize collectionId to prevent path traversal attacks.\n     * Only allows alphanumeric characters, underscores, and hyphens.\n     */\n    /**\n     * The variable name the generated file binds the collection to.\n     *\n     * `sanitizeCollectionId` guards the FILENAME, and permits hyphens and a\n     * leading digit — both legal in a filename and neither legal in a\n     * JavaScript identifier. So a collection created from the admin panel as\n     * `my-notes` (the documented slug shape) or `2024 Archive` (auto-slugged to\n     * `2024_archive`) wrote:\n     *\n     *     const my-notesCollection: CollectionConfig = …      \"',' expected\"\n     *     const 2024_archiveCollection: CollectionConfig = …  \"Numeric separators\n     *                                                          are not allowed here\"\n     *\n     * The panel reported success, and the next boot failed for EVERY collection\n     * in the directory — the loader imports all of them — while the editor could\n     * no longer parse the file it had just written, so it could not fix itself.\n     *\n     * Separators camel-case rather than vanish, so `my-notes` and `my_notes`\n     * stay distinct; a leading digit is prefixed rather than stripped, so\n     * `2024_archive` stays distinct from `archive`. Byte-identical for every\n     * slug that already produced a valid identifier.\n     */\n    private static collectionVarName(safeId: string): string {\n        const camel = safeId.replace(/[-_]+([a-zA-Z0-9])/g, (_, char: string) => char.toUpperCase());\n        const identifier = /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(camel) ? camel : `c${camel.replace(/^[0-9]/, (d) => d)}`;\n        return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(identifier) ? identifier : `c${identifier.replace(/[^A-Za-z0-9_$]/g, \"\")}`;\n    }\n\n    private sanitizeCollectionId(collectionId: string): string {\n        const sanitized = collectionId.replace(/[^a-zA-Z0-9_-]/g, \"\");\n        if (!sanitized || sanitized !== collectionId) {\n            throw new Error(`Invalid collection ID: \"${collectionId}\". Only alphanumeric characters, underscores, and hyphens are allowed.`);\n        }\n        return sanitized;\n    }\n\n    /**\n     * Resolve a file path and ensure it falls within the collectionsDir.\n     */\n    private safePath(filename: string): string {\n        const resolved = path.resolve(this.collectionsDir, filename);\n        if (!resolved.startsWith(this.collectionsDir + path.sep) && resolved !== this.collectionsDir) {\n            throw new Error(\"Path traversal detected: resolved path is outside the collections directory.\");\n        }\n        return resolved;\n    }\n\n    /**\n     * Bring the in-memory project back in line with the disk.\n     *\n     * The source-only editor builds ONE of these at boot and serves every\n     * request with it, and ts-morph reads a file once and then trusts its\n     * copy. `project.save()` writes that copy back whole, so anything that\n     * reached the disk in between — the live editor's committed change (it\n     * builds a fresh editor per request), or the developer's own edit in the\n     * IDE — was overwritten by the boot-time copy plus this edit. In `rebase\n     * dev` the tsx-watch restart usually closed the window; outside watch mode\n     * the loss was permanent.\n     *\n     * Called at the top of every public method, so each edit applies to what\n     * is on disk now.\n     */\n    private syncWithDisk(): void {\n        for (const file of this.project.getSourceFiles()) {\n            if (!fs.existsSync(file.getFilePath())) {\n                this.project.removeSourceFile(file);\n            } else {\n                file.refreshFromFileSystemSync();\n            }\n        }\n        if (fs.existsSync(this.collectionsDir)) {\n            this.project.addSourceFilesAtPaths(`${this.collectionsDir}/**/*.ts`);\n        }\n    }\n\n    private getCollectionFile(collectionId: string) {\n        const safeId = this.sanitizeCollectionId(collectionId);\n        const filePath = this.safePath(`${safeId}.ts`);\n        let file = this.project.getSourceFile(filePath);\n        if (!file && fs.existsSync(filePath)) {\n            this.project.addSourceFilesAtPaths(`${this.collectionsDir}/**/*.ts`);\n            file = this.project.getSourceFile(filePath);\n        }\n        return file;\n    }\n\n    /**\n     * Find the object literal a collection is declared with, through whatever\n     * wraps it.\n     *\n     * `defineCollection({ … })` is the shape `rebase init` writes and the one the\n     * docs recommend; `satisfies` / `as` / parentheses are the other ways an\n     * author can dress the same literal. Returning `null` for any of them meant\n     * the three callers below each failed differently, and the worst of them\n     * overwrote the file.\n     */\n    private unwrapCollectionObject(node: Node | undefined): ObjectLiteralExpression | null {\n        if (!node) return null;\n        if (Node.isObjectLiteralExpression(node)) return node;\n        if (Node.isParenthesizedExpression(node) ||\n            Node.isAsExpression(node) ||\n            Node.isSatisfiesExpression(node) ||\n            Node.isTypeAssertion(node) ||\n            Node.isNonNullExpression(node)) {\n            return this.unwrapCollectionObject(node.getExpression());\n        }\n        if (Node.isCallExpression(node)) {\n            // `defineCollection`, `admin.defineCollection`, `defineCollection<Post>`\n            const callee = node.getExpression().getText().split(\".\").pop();\n            if (callee && COLLECTION_FACTORIES.has(callee)) {\n                return this.unwrapCollectionObject(node.getArguments()[0]);\n            }\n        }\n        return null;\n    }\n\n    private getCollectionObject(collectionId: string): ObjectLiteralExpression | null {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) return null;\n\n        const defaultExport = file.getDefaultExportSymbol();\n        if (defaultExport) {\n            const declaration = defaultExport.getDeclarations()[0];\n            if (declaration && declaration.getKind() === SyntaxKind.ExportAssignment) {\n                const expr = declaration.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n                if (expr && expr.getKind() === SyntaxKind.Identifier) {\n                    const varName = expr.getText();\n                    const varDecl = file.getVariableDeclaration(varName);\n                    const unwrapped = this.unwrapCollectionObject(varDecl?.getInitializer());\n                    if (unwrapped) return unwrapped;\n                } else {\n                    // `export default defineCollection({ … })`\n                    const unwrapped = this.unwrapCollectionObject(expr);\n                    if (unwrapped) return unwrapped;\n                }\n            }\n        }\n        // Fallback: the first VariableDeclaration that holds a collection literal\n        for (const varDecl of file.getVariableDeclarations()) {\n            const init = this.unwrapCollectionObject(varDecl.getInitializer());\n            if (init) return init;\n        }\n        return null;\n    }\n\n    /**\n     * The collection's object literal, or a refusal that says what to do.\n     *\n     * Every caller needs this to be all-or-nothing: a missing object literal used\n     * to mean \"throw\", \"report success and do nothing\" and \"recreate the file\n     * from scratch\" depending on which method you called.\n     */\n    private requireCollectionObject(collectionId: string): ObjectLiteralExpression {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) {\n            throw new Error(`Collection \"${collectionId}\" has no file at ${path.join(this.collectionsDir, `${collectionId}.ts`)}.`);\n        }\n        const collectionObj = this.getCollectionObject(collectionId);\n        if (!collectionObj) {\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n        return collectionObj;\n    }\n\n    private unreadableFileMessage(collectionId: string, file: SourceFile): string {\n        return `Could not find the collection object in ${file.getFilePath()}. ` +\n            \"The schema editor can only edit a collection declared as `const x = defineCollection({ … })` \" +\n            \"or `const x: CollectionConfig = { … }` and exported as the file's default. \" +\n            `Edit \"${collectionId}\" in code instead.`;\n    }\n\n    /** Look a key up on an object literal, quoted or not. */\n    private findProperty(obj: ObjectLiteralExpression, name: string): ObjectLiteralElementLike | undefined {\n        return obj.getProperty((p: ObjectLiteralElementLike) =>\n            \"getName\" in p &&\n            typeof (p as PropertyAssignment).getName === \"function\" &&\n            ((p as PropertyAssignment).getName() === name ||\n                (p as PropertyAssignment).getName() === `\"${name}\"` ||\n                (p as PropertyAssignment).getName() === `'${name}'`));\n    }\n\n    private static quoteKey(key: string): string {\n        return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);\n    }\n\n    private static isPlainObject(value: unknown): value is Record<string, unknown> {\n        return typeof value === \"object\" && value !== null && !Array.isArray(value) && !(value instanceof RawExpression);\n    }\n\n    /**\n     * The field that identifies each element of an array of objects, so an\n     * old element can be found again in the new array.\n     *\n     * Arrays travel whole (see `collection_patch.ts`), and an element's\n     * position is not its identity — adding an entity action at the front\n     * shifts every other one. `key`, `id`, `relationName`, `name`: the first\n     * one every new element carries, distinct, wins.\n     */\n    private static identityField(items: unknown[]): string | undefined {\n        for (const field of [\"key\", \"id\", \"relationName\", \"name\", \"slug\"]) {\n            const values = items.map(item => AstSchemaEditor.isPlainObject(item) ? item[field] : undefined);\n            if (values.every(value => typeof value === \"string\" || typeof value === \"number\") &&\n                new Set(values).size === values.length) {\n                return field;\n            }\n        }\n        return undefined;\n    }\n\n    /** The old array's object elements, keyed by `field`'s literal value. */\n    private oldElementsBy(oldArray: Node, field: string): Map<string, ObjectLiteralExpression> {\n        const byKey = new Map<string, ObjectLiteralExpression>();\n        const array = oldArray.asKind(SyntaxKind.ArrayLiteralExpression);\n        for (const element of array?.getElements() ?? []) {\n            const object = element.asKind(SyntaxKind.ObjectLiteralExpression);\n            const value = object ? this.initializerOf(object, field) : undefined;\n            const literal = value?.asKind(SyntaxKind.StringLiteral)?.getLiteralValue()\n                ?? value?.asKind(SyntaxKind.NoSubstitutionTemplateLiteral)?.getLiteralValue()\n                ?? value?.asKind(SyntaxKind.NumericLiteral)?.getText();\n            if (object && literal !== undefined) byKey.set(String(literal), object);\n        }\n        return byKey;\n    }\n\n    private convertJsonToAstString(obj: unknown, indentLevel = 0, oldAstNode?: Node): string {\n        // Base TS-morph parses arrays as 2 levels deep from the property key:\n        // PropertiesObject = level 1, PropertyConfig = level 2.\n        // We calibrate the spacing multiples to keep the items flush with standard TS format.\n        const indentStr = \"    \";\n        const indent = indentStr.repeat(indentLevel);\n        const innerIndent = indentStr.repeat(indentLevel + 1);\n\n        if (obj instanceof RawExpression) {\n            return obj.text;\n        }\n        if (obj === null || obj === undefined) {\n            return \"undefined\";\n        }\n        if (typeof obj === \"string\") {\n            return JSON.stringify(obj);\n        }\n        if (typeof obj === \"number\" || typeof obj === \"boolean\") {\n            return String(obj);\n        }\n        if (Array.isArray(obj)) {\n            if (obj.length === 0) return \"[]\";\n            // Each element written over its old self, so what JSON dropped\n            // from it — an action's `onClick`, a field's `value` — is kept.\n            const field = oldAstNode ? AstSchemaEditor.identityField(obj) : undefined;\n            const old = oldAstNode && field ? this.oldElementsBy(oldAstNode, field) : undefined;\n            const items = obj.map(item => this.convertJsonToAstString(\n                item,\n                indentLevel + 1,\n                old && field && AstSchemaEditor.isPlainObject(item) ? old.get(String(item[field])) : undefined\n            ));\n            return `[\\n${innerIndent}${items.join(`,\\n${innerIndent}`)}\\n${indent}]`;\n        }\n        if (typeof obj === \"object\") {\n            const record = obj as Record<string, unknown>;\n            const keys = Object.keys(record);\n            const oldObject = oldAstNode?.asKind(SyntaxKind.ObjectLiteralExpression);\n\n            // Collect preserved AST properties\n            const preservedProps: string[] = [];\n            if (oldObject) {\n                const oldProps = oldObject.getProperties();\n                for (const oldProp of oldProps) {\n                    if (oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        const nameNode = oldProp.getNameNode();\n                        let name = nameNode.getText();\n                        if (name.startsWith('\"') && name.endsWith('\"')) name = name.slice(1, -1);\n                        if (name.startsWith(\"'\") && name.endsWith(\"'\")) name = name.slice(1, -1);\n\n                        // If the JSON object doesn't have this key, check if we should preserve it\n                        if (!(name in record)) {\n                            const init = oldProp.getInitializer();\n                            if (init) {\n                                const kind = init.getKind();\n                                const isCode = kind === SyntaxKind.ArrowFunction ||\n                                    kind === SyntaxKind.FunctionExpression ||\n                                    kind === SyntaxKind.Identifier ||\n                                    kind === SyntaxKind.CallExpression ||\n                                    kind === SyntaxKind.JsxElement;\n\n                                if (isCode || name === \"target\" || name === \"callbacks\" || name === \"browserCallbacks\" || name === \"permissions\" || name === \"securityRules\") {\n                                    // Preserve this property exactly as it was\n                                    preservedProps.push(`${AstSchemaEditor.quoteKey(name)}: ${init.getText()}`);\n                                }\n                            }\n                        }\n                    }\n                }\n            }\n\n            if (keys.length === 0 && preservedProps.length === 0) return \"{}\";\n\n            const props = keys.map(key => {\n                const keyStr = AstSchemaEditor.quoteKey(key);\n\n                // If the value is an object or an array, pass the old AST node\n                // to recurse\n                let childAstNode: Node | undefined;\n                if (oldObject && (AstSchemaEditor.isPlainObject(record[key]) || Array.isArray(record[key]))) {\n                    const oldProp = this.findProperty(oldObject, key);\n                    if (oldProp && oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        childAstNode = oldProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression)\n                            ?? oldProp.getInitializerIfKind(SyntaxKind.ArrayLiteralExpression);\n                    }\n                }\n\n                return `${keyStr}: ${this.convertJsonToAstString(record[key], indentLevel + 1, childAstNode)}`;\n            });\n\n            const allProps = [...props, ...preservedProps];\n            return `{\\n${innerIndent}${allProps.join(`,\\n${innerIndent}`)}\\n${indent}}`;\n        }\n        return \"undefined\";\n    }\n\n    /**\n     * Write only the keys the patch names, leaving every sibling alone.\n     *\n     * A patch says what changed, not what the collection is. The panel sends one\n     * — `{ propertiesOrder }` is what adding a column posts — and rewriting the\n     * `admin` block from it deleted the collection's icon, group, list columns\n     * and kanban config in the same write.\n     */\n    private mergeIntoObjectLiteral(target: ObjectLiteralExpression, data: Record<string, unknown>, indentLevel: number): void {\n        for (const [key, value] of Object.entries(data)) {\n            const existing = this.findProperty(target, key);\n            const existingObj = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n                ? existing.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression)\n                : undefined;\n\n            if (existingObj && AstSchemaEditor.isPlainObject(value)) {\n                this.mergeIntoObjectLiteral(existingObj, value, indentLevel + 1);\n                continue;\n            }\n\n            const initializer = this.convertJsonToAstString(value, indentLevel, existingObj);\n            if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n                existing.setInitializer(initializer);\n            } else {\n                target.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(key),\n                    initializer\n                });\n            }\n        }\n    }\n\n    /**\n     * Drop whatever a refused edit left in memory.\n     *\n     * One editor serves every request, and `project.save()` writes every file\n     * with unsaved changes. So an edit refused halfway through — a relation with\n     * no target, found after the name was already rewritten and an import\n     * added — reached the disk with the next save of some other collection, and\n     * a file refused as it was being created appeared anyway.\n     */\n    private forgetUnsaved(collectionId: string): void {\n        const file = this.project.getSourceFile(path.resolve(this.collectionsDir, `${collectionId}.ts`));\n        if (!file || file.isSaved()) return;\n        if (fs.existsSync(file.getFilePath())) {\n            file.refreshFromFileSystemSync();\n        } else {\n            this.project.removeSourceFile(file);\n        }\n    }\n\n    public async saveProperty(collectionId: string, propertyKey: string, propertyConfig: Record<string, unknown>) {\n        this.syncWithDisk();\n        try {\n            await this.writeProperty(collectionId, propertyKey, propertyConfig);\n        } catch (err) {\n            this.forgetUnsaved(collectionId);\n            throw err;\n        }\n    }\n\n    private async writeProperty(collectionId: string, propertyKey: string, propertyConfig: Record<string, unknown>) {\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        // The panel's property forms bind to the flat names — `readOnly`,\n        // `hideFromCollection` — while on disk they belong inside the property's\n        // own `admin` block. Written flat they are not merely ignored: the boot\n        // validator treats a moved key as fatal.\n        const nestedConfig = nestAdminPropertyKeys(propertyConfig);\n\n        let propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (!propertiesProp) {\n            propertiesProp = collectionObj.addPropertyAssignment({\n                name: \"properties\",\n                initializer: \"{}\"\n            });\n        }\n\n        const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n        if (propsObj) {\n            const existingProp = this.findProperty(propsObj, propertyKey);\n\n            let oldPropAstNode: ObjectLiteralExpression | undefined;\n            if (existingProp && existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                oldPropAstNode = existingProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            }\n\n            const withTargets = this.relationTargetsAsSource(\n                collectionId,\n                this.getCollectionFile(collectionId)!,\n                { [propertyKey]: nestedConfig },\n                propsObj\n            )[propertyKey];\n            const newInitializer = this.convertJsonToAstString(withTargets, 2, oldPropAstNode);\n\n            if (existingProp) {\n                if (existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                    existingProp.setInitializer(newInitializer);\n                }\n            } else {\n                propsObj.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(propertyKey),\n                    initializer: newInitializer\n                });\n            }\n\n            const file = this.getCollectionFile(collectionId);\n            if (file) {\n                file.formatText();\n            }\n            await this.project.save();\n        }\n    }\n\n    public async deleteProperty(collectionId: string, propertyKey: string) {\n        this.syncWithDisk();\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        const propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (propertiesProp) {\n            const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            if (propsObj) {\n                const existingProp = this.findProperty(propsObj, propertyKey);\n                if (existingProp) {\n                    existingProp.remove();\n                    const file = this.getCollectionFile(collectionId);\n                    if (file) {\n                        file.formatText();\n                    }\n                    await this.project.save();\n                }\n            }\n        }\n    }\n\n    /**\n     * Write a collection back to its file.\n     *\n     * `partial` is the difference between \"this is the collection\" and \"this is\n     * what changed about it\". The panel sends both — a full save from the editor\n     * dialog, and a one-key patch whenever a property is added, deleted or\n     * reordered — and they cannot be told apart by looking at the payload. Read\n     * as a full save, a patch deletes everything it does not mention, including\n     * `securityRules`; the loader then hands the collection the directory\n     * default, which in the scaffold is `access: \"public\"`.\n     */\n    public async saveCollection(collectionId: string, collectionData: Record<string, unknown>, options: { partial?: boolean } = {}) {\n        this.syncWithDisk();\n        // The registry's resolved form of a relation, written into a file,\n        // stops it type-checking. A collection that carries one is the view\n        // the panel renders, not one somebody authored.\n        const runtimeOnly = runtimeOnlyKeyIn(collectionData);\n        if (runtimeOnly) {\n            throw new Error(\n                `Refusing to write \"${collectionId}\": it holds \"${runtimeOnly}\", which the runtime adds to a ` +\n                \"collection it has loaded and a collection file must not hold. Save what changed instead.\"\n            );\n        }\n        try {\n            await this.writeCollection(collectionId, collectionData, options);\n        } catch (err) {\n            this.forgetUnsaved(collectionId);\n            throw err;\n        }\n    }\n\n    /**\n     * Write what changed about a collection, and nothing else.\n     *\n     * The patch is the difference between the collection the panel loaded and\n     * the one it is saving (`diffCollections` in `@rebasepro/types`), so it\n     * names only keys the person changed. Each is written where it is; every\n     * other byte of the file — imports, comments, formatting, handlers,\n     * properties shared from another module — is left as it was.\n     *\n     * A key whose value in the file is code — `status: statusProperty`,\n     * `enum: LOCALE_ENUM`, a spread — is not overwritten with the JSON the\n     * panel saw of it, which is what the whole-collection save did. The edit\n     * is refused, naming the code, so it can be made where that code lives.\n     *\n     * All or nothing: a refused operation leaves the file as it was, including\n     * the operations before it.\n     */\n    public async applyPatch(collectionId: string, patch: CollectionPatch) {\n        this.syncWithDisk();\n        const problems = collectionPatchProblems(patch);\n        if (problems.length > 0) {\n            throw new Error(`Refusing to edit \"${collectionId}\": ${problems.join(\" \")}`);\n        }\n        try {\n            await this.writePatch(collectionId, nestCollectionPatchPaths(patch));\n        } catch (err) {\n            this.forgetUnsaved(collectionId);\n            throw err;\n        }\n    }\n\n    private async writePatch(collectionId: string, patch: CollectionPatch) {\n        this.requireCollectionObject(collectionId);\n        const file = this.getCollectionFile(collectionId)!;\n        for (const op of patch) {\n            // From the root each time: formatting an edited node can forget\n            // the nodes around it.\n            this.applyPatchOp(collectionId, file, this.requireCollectionObject(collectionId), op);\n        }\n        await this.project.save();\n    }\n\n    private applyPatchOp(collectionId: string, file: SourceFile, collectionObj: ObjectLiteralExpression, op: CollectionPatchOp): void {\n        const { path: keys } = op;\n        const dotted = (end: number) => keys.slice(0, end).join(\".\");\n\n        let target = collectionObj;\n        for (let depth = 0; depth < keys.length - 1; depth++) {\n            const key = keys[depth];\n            const member = this.findMember(target, key);\n            if (!member) {\n                const spread = this.spreadIn(target);\n                if (spread) throw this.codeRefusal(collectionId, file, dotted(depth + 1), spread, \"comes from\");\n                // Nothing there to remove.\n                if (op.op === \"remove\") return;\n                target = target.addPropertyAssignment({ name: AstSchemaEditor.quoteKey(key), initializer: \"{}\" })\n                    .getInitializerIfKindOrThrow(SyntaxKind.ObjectLiteralExpression);\n                continue;\n            }\n            const value = member.isKind(SyntaxKind.PropertyAssignment)\n                ? AstSchemaEditor.unwrapExpression(member.getInitializer())\n                : undefined;\n            const next = value?.asKind(SyntaxKind.ObjectLiteralExpression);\n            if (!next) throw this.codeRefusal(collectionId, file, dotted(depth + 1), value ?? member, \"is\");\n            target = next;\n        }\n\n        const key = keys[keys.length - 1];\n        const member = this.findMember(target, key);\n\n        if (op.op === \"remove\") {\n            if (member) {\n                member.remove();\n                return;\n            }\n            const spread = this.spreadIn(target);\n            if (spread) throw this.codeRefusal(collectionId, file, dotted(keys.length), spread, \"comes from\");\n            return;\n        }\n\n        // The collection's own `relations` pair each entry with its old self\n        // by name, to keep the targets JSON cannot carry.\n        if (keys.length === 1 && key === \"relations\") {\n            this.writeRelations(collectionId, file, collectionObj, op.value);\n            this.findMember(collectionObj, \"relations\")?.formatText();\n            return;\n        }\n\n        const old = member?.isKind(SyntaxKind.PropertyAssignment) ? member.getInitializer() : undefined;\n        if (member && (!old || !AstSchemaEditor.isLiteralValue(old))) {\n            throw this.codeRefusal(collectionId, file, dotted(keys.length), old ?? member, \"is\");\n        }\n        if (old?.isKind(SyntaxKind.ArrayLiteralExpression)) {\n            const code = old.getElements().find(element => !AstSchemaEditor.isLiteralValue(element));\n            if (code) throw this.codeRefusal(collectionId, file, dotted(keys.length), code, \"holds\");\n        }\n\n        const value = this.patchValueAsSource(collectionId, file, keys, op.value, old);\n        const text = this.convertJsonToAstString(value, 0, old);\n        const written = member?.isKind(SyntaxKind.PropertyAssignment)\n            ? member.setInitializer(text)\n            : target.addPropertyAssignment({ name: AstSchemaEditor.quoteKey(key), initializer: text });\n        // This node only: the rest of the file keeps its own formatting.\n        written.formatText();\n    }\n\n    /**\n     * A patched value with every relation target it carries turned back into\n     * source — `() => xCollection` plus its import — according to where the\n     * path lands: a relation's `target`, a relation, a property, or a map of\n     * properties.\n     */\n    private patchValueAsSource(collectionId: string, file: SourceFile, keys: string[], value: unknown, old: Node | undefined): unknown {\n        // Where the path lands, walked the way `collection_patch.ts` walks it.\n        let position: \"collection\" | \"properties\" | \"property\" | \"relation\" | \"oneOf\" | \"other\" = \"collection\";\n        for (const key of keys) {\n            switch (position) {\n                case \"collection\": position = key === \"properties\" ? \"properties\" : \"other\"; break;\n                case \"properties\": position = \"property\"; break;\n                case \"property\":\n                    position = key === \"properties\" ? \"properties\"\n                        : key === \"of\" ? \"property\"\n                            : key === \"oneOf\" ? \"oneOf\"\n                                : key === \"relation\" ? \"relation\"\n                                    : \"other\";\n                    break;\n                case \"oneOf\": position = key === \"properties\" ? \"properties\" : \"other\"; break;\n                case \"relation\":\n                    if (key === \"target\" && typeof value === \"string\" && value.trim().length > 0) {\n                        const trimmed = value.trim();\n                        return new RawExpression(ARROW_TO_IDENTIFIER.test(trimmed) ? trimmed : this.targetThunk(file, trimmed));\n                    }\n                    position = \"other\";\n                    break;\n                default: position = \"other\";\n            }\n        }\n        const oldObject = old?.asKind(SyntaxKind.ObjectLiteralExpression);\n        const where = keys.join(\".\");\n        if (position === \"property\") {\n            return this.propertyRelationTargetsAsSource(collectionId, file, value, oldObject, where);\n        }\n        if (position === \"properties\") {\n            return this.relationTargetsAsSource(collectionId, file, value, oldObject, where);\n        }\n        if (position === \"relation\" && AstSchemaEditor.isPlainObject(value)) {\n            // A relation on its own: wrap it as the property it belongs to.\n            const wrapped = this.propertyRelationTargetsAsSource(\n                collectionId, file, { type: \"relation\", relation: value },\n                oldObject ? undefined : undefined, where);\n            const relation = AstSchemaEditor.isPlainObject(wrapped) ? wrapped.relation : value;\n            if (AstSchemaEditor.isPlainObject(relation) && !(\"target\" in relation) &&\n                !(oldObject && this.findProperty(oldObject, \"target\"))) {\n                throw new Error(`Relation \"${where}\" on collection \"${collectionId}\" has no target collection. Pick one before saving.`);\n            }\n            return relation;\n        }\n        return value;\n    }\n\n    /** A member of an object literal by name: an assignment, a shorthand, a method. */\n    private findMember(obj: ObjectLiteralExpression, name: string): ObjectLiteralElementLike | undefined {\n        return obj.getProperties().find(member => {\n            if (member.isKind(SyntaxKind.SpreadAssignment)) return false;\n            const memberName = (member as PropertyAssignment).getName();\n            return memberName === name || memberName === JSON.stringify(name) || memberName === `'${name}'`;\n        });\n    }\n\n    private spreadIn(obj: ObjectLiteralExpression): Node | undefined {\n        return obj.getProperties().find(member => member.isKind(SyntaxKind.SpreadAssignment));\n    }\n\n    /** `x as const`, `x satisfies T`, `(x)` — the value inside. */\n    private static unwrapExpression(node: Node | undefined): Node | undefined {\n        if (!node) return undefined;\n        if (Node.isAsExpression(node) || Node.isSatisfiesExpression(node) || Node.isParenthesizedExpression(node)) {\n            return AstSchemaEditor.unwrapExpression(node.getExpression());\n        }\n        return node;\n    }\n\n    /**\n     * Whether a value in the file is data the panel's JSON fully describes —\n     * a literal — rather than code it saw only the result of.\n     */\n    private static isLiteralValue(node: Node): boolean {\n        const value = AstSchemaEditor.unwrapExpression(node);\n        if (!value) return false;\n        switch (value.getKind()) {\n            case SyntaxKind.ObjectLiteralExpression:\n            case SyntaxKind.ArrayLiteralExpression:\n            case SyntaxKind.StringLiteral:\n            case SyntaxKind.NoSubstitutionTemplateLiteral:\n            case SyntaxKind.NumericLiteral:\n            case SyntaxKind.TrueKeyword:\n            case SyntaxKind.FalseKeyword:\n            case SyntaxKind.NullKeyword:\n                return true;\n            case SyntaxKind.PrefixUnaryExpression:\n                return value.asKindOrThrow(SyntaxKind.PrefixUnaryExpression).getOperand().isKind(SyntaxKind.NumericLiteral);\n            case SyntaxKind.Identifier:\n                return value.getText() === \"undefined\";\n            default:\n                return false;\n        }\n    }\n\n    /** \"`properties.status` is `statusProperty` in posts.ts…\" */\n    private codeRefusal(collectionId: string, file: SourceFile, where: string, code: Node, verb: \"is\" | \"holds\" | \"comes from\"): Error {\n        const text = code.getText();\n        const shown = text.length > 60 ? `${text.slice(0, 57)}…` : text;\n        return new Error(\n            `\\`${where}\\` ${verb} \\`${shown}\\` in ${path.basename(file.getFilePath())}, which is code the ` +\n            `editor cannot change without losing what it does. Change \"${collectionId}\" there instead.`\n        );\n    }\n\n    private async writeCollection(collectionId: string, collectionData: Record<string, unknown>, options: { partial?: boolean }) {\n        const partial = options.partial === true;\n        let file = this.getCollectionFile(collectionId);\n        const collectionObj = file ? this.getCollectionObject(collectionId) : null;\n\n        if (file && !collectionObj) {\n            // The file is there and we could not read it. Recreating it from the\n            // panel's JSON would drop the imports, the callbacks and the relation\n            // thunks that JSON cannot carry.\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n\n        if (!file || !collectionObj) {\n            if (partial) {\n                throw new Error(`Cannot apply a partial update to \"${collectionId}\": it has no collection file yet.`);\n            }\n            // Create a new file\n            const safeId = this.sanitizeCollectionId(collectionId);\n            const newFilePath = this.safePath(`${safeId}.ts`);\n            if (fs.existsSync(newFilePath)) {\n                throw new Error(`Refusing to overwrite ${newFilePath}: a file for \"${collectionId}\" already exists but could not be parsed.`);\n            }\n            const varName = `${AstSchemaEditor.collectionVarName(safeId)}Collection`;\n            // Created empty and filled in after: a relation's target becomes an\n            // import, and an import needs a file to be added to.\n            file = this.project.createSourceFile(newFilePath, `import { CollectionConfig } from \"@rebasepro/types\";\\n\\nconst ${varName}: CollectionConfig = {};\\n\\nexport default ${varName};\\n`);\n            const { relations, ...rest } = nestAdminKeysDeep(collectionData);\n            const data = \"properties\" in rest\n                ? { ...rest, properties: this.relationTargetsAsSource(collectionId, file, rest.properties, undefined) }\n                : rest;\n            file.getVariableDeclarationOrThrow(varName).setInitializer(this.convertJsonToAstString(data));\n            if (relations !== undefined) {\n                this.writeRelations(collectionId, file, this.requireCollectionObject(collectionId), relations);\n            }\n        } else {\n            // Update root level properties gracefully\n\n            if (!partial) {\n                // Force delete securityRules if empty or undefined to handle Formex / serialization stripping\n                if (!(\"securityRules\" in collectionData) || collectionData.securityRules === undefined || (Array.isArray(collectionData.securityRules) && collectionData.securityRules.length === 0)) {\n                    const srProp = collectionObj.getProperty(\"securityRules\");\n                    if (srProp) {\n                        srProp.remove();\n                    }\n\n                    // If it was in collectionData as an empty array, delete it so the loop below doesn't add it back as \"[]\"\n                    // Actually, if it's \"[]\", omitting it entirely from the TS file achieves the same logical effect (no RLS rules)\n                    // and correctly triggers \"unmapped policies\" if the DB still has them.\n                    delete collectionData[\"securityRules\"];\n                }\n            }\n\n            // The panel works with a flat view model — presentation merged onto the\n            // collection — so what arrives here has `icon` and `listProperties` at\n            // the top level. On disk they belong inside `admin`. Writing them flat\n            // would produce a file the backend loads and ignores and the panel\n            // never reads back, which looks exactly like the edit not saving. A\n            // property's presentation keys are worse than ignored: they are fatal\n            // at the next boot, which is why this goes all the way down.\n            collectionData = nestAdminKeysDeep(collectionData);\n\n            for (const key of Object.keys(collectionData)) {\n                if (key === \"relations\") {\n                    this.writeRelations(collectionId, file, collectionObj, collectionData[key]);\n                    continue;\n                }\n\n                const prop = collectionObj.getProperty(key) as PropertyAssignment;\n\n                let oldAstNode: ObjectLiteralExpression | undefined;\n                if (prop && prop.isKind(SyntaxKind.PropertyAssignment)) {\n                    oldAstNode = prop.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n                }\n\n                if (key === \"properties\") {\n                    collectionData[key] = this.relationTargetsAsSource(collectionId, file, collectionData[key], oldAstNode);\n                }\n\n                if (partial && oldAstNode && AstSchemaEditor.isPlainObject(collectionData[key])) {\n                    this.mergeIntoObjectLiteral(oldAstNode, collectionData[key] as Record<string, unknown>, 2);\n                    continue;\n                }\n\n                const newInit = this.convertJsonToAstString(collectionData[key], 1, oldAstNode);\n                if (prop) {\n                    prop.setInitializer(newInit);\n                } else {\n                    collectionObj.addPropertyAssignment({\n                        // `quoteKey`, like every other site that emits a key.\n                        // This one did not, and ts-morph writes a property name\n                        // out verbatim — so a top-level key of\n                        // `injected: (() => { … })(), tail` closed the property\n                        // and opened an expression, which `rebase dev` then\n                        // re-imported and ran. The rest of this file has always\n                        // quoted; this was the one that did not.\n                        name: AstSchemaEditor.quoteKey(key),\n                        initializer: newInit\n                    });\n                }\n            }\n        }\n        if (file) {\n            file.formatText();\n        }\n        await this.project.save();\n    }\n\n    /**\n     * Every property relation's `target`, as source.\n     *\n     * The collection-level `relations` array has {@link writeRelations}. A\n     * relation declared on a property went through `convertJsonToAstString`\n     * like any other value, so a target the property form had picked — a slug,\n     * which is all JSON can carry — was written as the string literal\n     * `target: \"authors\"`, and the next boot threw in `resolveRelation` for every\n     * collection in the directory. The same rule applies here as there: a slug\n     * becomes `() => xCollection` plus its import, an arrow returning one\n     * identifier is written through, and a relation sent without a target keeps\n     * the one already in the file — or is refused, when there is none.\n     *\n     * Walks into `map` properties, an array's `of` and a block's `oneOf`, which\n     * the registry resolves relations in too. `oldProperties` is the same\n     * properties object in the file, when there is one.\n     */\n    private relationTargetsAsSource(\n        collectionId: string,\n        file: SourceFile,\n        properties: unknown,\n        oldProperties: ObjectLiteralExpression | undefined,\n        path = \"properties\"\n    ): Record<string, unknown> {\n        if (!AstSchemaEditor.isPlainObject(properties)) return {};\n        return Object.fromEntries(Object.entries(properties).map(([key, property]) => [\n            key,\n            this.propertyRelationTargetsAsSource(\n                collectionId,\n                file,\n                property,\n                oldProperties ? this.objectAt(oldProperties, key) : undefined,\n                `${path}.${key}`\n            )\n        ]));\n    }\n\n    private propertyRelationTargetsAsSource(\n        collectionId: string,\n        file: SourceFile,\n        property: unknown,\n        oldProperty: ObjectLiteralExpression | undefined,\n        path: string\n    ): unknown {\n        if (!AstSchemaEditor.isPlainObject(property)) return property;\n        const next: Record<string, unknown> = { ...property };\n\n        if (property.type === \"relation\" && AstSchemaEditor.isPlainObject(property.relation)) {\n            const relation: Record<string, unknown> = { ...property.relation };\n            const rawTarget = relation.target;\n            if (typeof rawTarget === \"string\" && rawTarget.trim().length > 0) {\n                const trimmed = rawTarget.trim();\n                // See `writeRelations` for why the arrow is matched this narrowly.\n                relation.target = new RawExpression(ARROW_TO_IDENTIFIER.test(trimmed)\n                    ? trimmed\n                    : this.targetThunk(file, trimmed));\n            } else {\n                const oldRelation = oldProperty ? this.objectAt(oldProperty, \"relation\") : undefined;\n                if (!oldRelation || !this.findProperty(oldRelation, \"target\")) {\n                    throw new Error(`Relation property \"${path}\" on collection \"${collectionId}\" has no target collection. Pick one before saving.`);\n                }\n                // Absent, so `convertJsonToAstString` keeps the thunk in the file.\n                delete relation.target;\n            }\n            next.relation = relation;\n        }\n\n        if (AstSchemaEditor.isPlainObject(property.properties)) {\n            next.properties = this.relationTargetsAsSource(\n                collectionId, file, property.properties,\n                oldProperty ? this.objectAt(oldProperty, \"properties\") : undefined, path);\n        }\n        if (Array.isArray(property.of)) {\n            const oldOf = oldProperty ? this.initializerOf(oldProperty, \"of\")?.asKind(SyntaxKind.ArrayLiteralExpression) : undefined;\n            next.of = property.of.map((item, index) => this.propertyRelationTargetsAsSource(\n                collectionId, file, item,\n                oldOf?.getElements()[index]?.asKind(SyntaxKind.ObjectLiteralExpression), `${path}.of[${index}]`));\n        } else if (AstSchemaEditor.isPlainObject(property.of)) {\n            next.of = this.propertyRelationTargetsAsSource(\n                collectionId, file, property.of,\n                oldProperty ? this.objectAt(oldProperty, \"of\") : undefined, `${path}.of`);\n        }\n        if (AstSchemaEditor.isPlainObject(property.oneOf) && AstSchemaEditor.isPlainObject(property.oneOf.properties)) {\n            const oldOneOf = oldProperty ? this.objectAt(oldProperty, \"oneOf\") : undefined;\n            next.oneOf = {\n                ...property.oneOf,\n                properties: this.relationTargetsAsSource(\n                    collectionId, file, property.oneOf.properties,\n                    oldOneOf ? this.objectAt(oldOneOf, \"properties\") : undefined, `${path}.oneOf`)\n            };\n        }\n        return next;\n    }\n\n    /** The initializer of `obj[key]` in the file, when it is written as a property assignment. */\n    private initializerOf(obj: ObjectLiteralExpression, key: string): Node | undefined {\n        const prop = this.findProperty(obj, key);\n        return prop && prop.isKind(SyntaxKind.PropertyAssignment) ? prop.getInitializer() : undefined;\n    }\n\n    /** `obj[key]` in the file, when it is an object literal. */\n    private objectAt(obj: ObjectLiteralExpression, key: string): ObjectLiteralExpression | undefined {\n        return this.initializerOf(obj, key)?.asKind(SyntaxKind.ObjectLiteralExpression);\n    }\n\n    /**\n     * Write the collection-level `relations` array.\n     *\n     * Relations are the one key whose values are not all data: `target` is a\n     * thunk in the file, and the panel sends the target collection's slug (or,\n     * for a relation it did not touch, nothing at all — `JSON.stringify` drops\n     * the function). So each entry's target is resolved in that order: a slug\n     * becomes `() => xCollection` plus the import it needs, and anything else\n     * falls back to the thunk already in the file.\n     *\n     * This used to be a `continue` with a comment saying relations were handled\n     * elsewhere. Nothing handled them; every edit in the Relations tab was\n     * dropped without a word.\n     */\n    private writeRelations(collectionId: string, file: SourceFile, collectionObj: ObjectLiteralExpression, value: unknown): void {\n        if (!Array.isArray(value)) return;\n\n        const existing = this.findProperty(collectionObj, \"relations\");\n        const oldArray = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n            ? existing.getInitializerIfKind(SyntaxKind.ArrayLiteralExpression)\n            : undefined;\n\n        const oldElements = oldArray?.getElements() ?? [];\n        const oldTargetsByName = new Map<string, string>();\n        // Only for entries the file left unnamed — `relationName` is optional, and\n        // those cannot be matched any other way. Positional matching is off the\n        // moment the array's length changes, because then a position no longer\n        // means the same relation.\n        const anonymousTargetsByIndex: (string | undefined)[] = [];\n        oldElements.forEach((element, index) => {\n            const elementObj = element.asKind(SyntaxKind.ObjectLiteralExpression);\n            if (!elementObj) return;\n            const targetProp = this.findProperty(elementObj, \"target\");\n            const targetInit = targetProp && targetProp.isKind(SyntaxKind.PropertyAssignment)\n                ? targetProp.getInitializer()\n                : undefined;\n            if (!targetInit) return;\n\n            const nameProp = this.findProperty(elementObj, \"relationName\");\n            const nameInit = nameProp && nameProp.isKind(SyntaxKind.PropertyAssignment)\n                ? nameProp.getInitializerIfKind(SyntaxKind.StringLiteral)\n                : undefined;\n            if (nameInit) oldTargetsByName.set(nameInit.getLiteralValue(), targetInit.getText());\n            else anonymousTargetsByIndex[index] = targetInit.getText();\n        });\n\n        const items = value.map((entry, index) => {\n            if (!AstSchemaEditor.isPlainObject(entry)) return entry;\n            const relation: Record<string, unknown> = { ...entry };\n            const relationName = typeof relation.relationName === \"string\" ? relation.relationName : undefined;\n            const rawTarget = relation.target;\n\n            let targetText: string | undefined;\n            if (typeof rawTarget === \"string\" && rawTarget.trim().length > 0) {\n                const trimmed = rawTarget.trim();\n                // A target that already looks like a thunk is written into the\n                // file as source, so \"contains an arrow\" is not a good enough\n                // reason to trust it: `() => { require(\"child_process\")… }` also\n                // contains one. Only the exact shape this emits is accepted —\n                // an arrow returning one identifier — and anything else is\n                // treated as a collection NAME and turned into a thunk here,\n                // which is the path that was always safe.\n                targetText = ARROW_TO_IDENTIFIER.test(trimmed)\n                    ? trimmed\n                    : this.targetThunk(file, trimmed);\n            } else if (relationName && oldTargetsByName.has(relationName)) {\n                targetText = oldTargetsByName.get(relationName);\n            } else if (value.length === oldElements.length) {\n                targetText = anonymousTargetsByIndex[index];\n            }\n\n            if (!targetText) {\n                throw new Error(`Relation \"${relationName ?? `#${index}`}\" on collection \"${collectionId}\" has no target collection. Pick one before saving.`);\n            }\n\n            relation.target = new RawExpression(targetText);\n            return relation;\n        });\n\n        const initializer = this.convertJsonToAstString(items, 1);\n        if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n            existing.setInitializer(initializer);\n        } else {\n            collectionObj.addPropertyAssignment({ name: \"relations\", initializer });\n        }\n    }\n\n    /**\n     * `() => targetCollection` for a target named by its slug, importing it if\n     * the file does not already.\n     */\n    private targetThunk(file: SourceFile, targetSlug: string): string {\n        const targetFile = this.getCollectionFile(targetSlug);\n        if (!targetFile) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": no file for it in ${this.collectionsDir}.`);\n        }\n\n        const identifier = this.getDefaultExportName(targetFile);\n        if (!identifier) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": ${targetFile.getFilePath()} has no default export to import.`);\n        }\n\n        if (targetFile.getFilePath() !== file.getFilePath() && !this.hasDefaultImport(file, identifier)) {\n            const relative = path.relative(path.dirname(file.getFilePath()), targetFile.getFilePath())\n                .split(path.sep)\n                .join(\"/\")\n                .replace(/\\.tsx?$/, \".js\");\n            file.addImportDeclaration({\n                defaultImport: identifier,\n                moduleSpecifier: relative.startsWith(\".\") ? relative : `./${relative}`\n            });\n        }\n\n        return `() => ${identifier}`;\n    }\n\n    private hasDefaultImport(file: SourceFile, identifier: string): boolean {\n        return file.getImportDeclarations().some(decl => decl.getDefaultImport()?.getText() === identifier);\n    }\n\n    private getDefaultExportName(file: SourceFile): string | undefined {\n        const declaration = file.getDefaultExportSymbol()?.getDeclarations()[0];\n        const expr = declaration?.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n        if (expr && expr.getKind() === SyntaxKind.Identifier) return expr.getText();\n\n        for (const varDecl of file.getVariableDeclarations()) {\n            if (this.unwrapCollectionObject(varDecl.getInitializer())) return varDecl.getName();\n        }\n        return undefined;\n    }\n\n    /**\n     * Delete a collection's file, and take it out of `index.ts`.\n     *\n     * This used to unlink `<slug>.ts` and stop. Every scaffold's `index.ts`\n     * imports every collection, so the next boot failed for the whole project\n     * (\"Cannot find module …/tags\"), and a collection another one linked to\n     * took that one down with it. Now:\n     *\n     * - a file any other module imports is refused, naming the importers — a\n     *   relation to it has to go first, and that is a change the person makes;\n     * - `index.ts`'s import of it is removed, and so is each place it is listed\n     *   in an array; any other use there is refused, naming the line;\n     * - the file is deleted.\n     *\n     * Only the source. The table and its rows are not touched.\n     *\n     * Returns what changed, as absolute paths, so the caller can commit it.\n     */\n    public async deleteCollection(collectionId: string): Promise<{ deleted: string; changed: string[] }> {\n        this.syncWithDisk();\n        const target = this.getCollectionFile(collectionId);\n        if (!target) {\n            throw new Error(`Collection \"${collectionId}\" has no file at ${path.join(this.collectionsDir, `${collectionId}.ts`)}.`);\n        }\n        const targetPath = target.getFilePath();\n        const indexPath = path.join(this.collectionsDir, \"index.ts\");\n\n        const importers = this.project.getSourceFiles().filter(file =>\n            file !== target && this.declarationsOf(file, targetPath).length > 0);\n        const others = importers.filter(file => file.getFilePath() !== indexPath);\n        if (others.length > 0) {\n            throw new Error(\n                `Cannot delete \"${collectionId}\": ${others.map(file => path.basename(file.getFilePath())).join(\", \")} ` +\n                `${others.length === 1 ? \"imports\" : \"import\"} it — a relation to it, most likely. Remove that first; ` +\n                \"deleting the file would stop every collection from loading.\"\n            );\n        }\n\n        const changed: string[] = [];\n        const index = importers.find(file => file.getFilePath() === indexPath);\n        try {\n            if (index) {\n                for (const declaration of this.declarationsOf(index, targetPath)) {\n                    const names = declaration.isKind(SyntaxKind.ImportDeclaration)\n                        ? [\n                            declaration.getDefaultImport()?.getText(),\n                            ...declaration.getNamedImports().map(named => (named.getAliasNode() ?? named.getNameNode()).getText())\n                        ].filter((name): name is string => Boolean(name))\n                        : [];\n                    for (const name of names) {\n                        const uses = index.getDescendantsOfKind(SyntaxKind.Identifier).filter(identifier =>\n                            identifier.getText() === name &&\n                            !identifier.getFirstAncestorByKind(SyntaxKind.ImportDeclaration));\n                        for (const use of uses) {\n                            const array = use.getParentIfKind(SyntaxKind.ArrayLiteralExpression);\n                            if (!array) {\n                                throw new Error(\n                                    `Cannot delete \"${collectionId}\": index.ts uses \\`${name}\\` at line ` +\n                                    `${use.getStartLineNumber()} in a way the editor cannot remove. Remove it there first.`\n                                );\n                            }\n                            array.removeElement(use);\n                        }\n                    }\n                    declaration.remove();\n                }\n                changed.push(index.getFilePath());\n            }\n            target.delete();\n            await this.project.save();\n        } catch (err) {\n            if (index && !index.isSaved()) index.refreshFromFileSystemSync();\n            this.syncWithDisk();\n            throw err;\n        }\n        return { deleted: targetPath, changed };\n    }\n\n    /** The import and export declarations in `file` whose relative specifier resolves to `targetPath`. */\n    private declarationsOf(file: SourceFile, targetPath: string) {\n        const stem = (absolute: string) => absolute.replace(/\\.(ts|tsx|js|mjs|cjs)$/, \"\");\n        const target = stem(targetPath);\n        return [...file.getImportDeclarations(), ...file.getExportDeclarations()].filter(declaration => {\n            const specifier = declaration.getModuleSpecifierValue();\n            if (!specifier || !specifier.startsWith(\".\")) return false;\n            return stem(path.resolve(path.dirname(file.getFilePath()), specifier)) === target;\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAsBA,IAAM,uCAAuB,IAAI,IAAI,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;AAezD,IAAM,sBAAsB;;;;;;;;;AAU5B,IAAM,gBAAN,MAAoB;CACY;CAA5B,YAAY,MAA8B;EAAd,KAAA,OAAA;CAC5B;AACJ;;;;;;;;;;AAWA,SAAgB,cAAc,gBAAkE;CAC5F,OAAO,wBAAwB,cAAc;AACjD;;;;;;;;;;;;;;;AAgBA,SAAgB,kBAAkB,gBAAkE;CAChG,MAAM,SAAS,cAAc,cAAc;CAC3C,MAAM,aAAa,OAAO;CAC1B,IAAI,cAAc,OAAO,eAAe,YAAY,CAAC,MAAM,QAAQ,UAAU,GACzE,OAAO,aAAa,OAAO,YACvB,OAAO,QAAQ,UAAqC,CAAC,CAAC,KAAK,CAAC,KAAK,cAAc,CAC3E,KACA,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAC7D,sBAAsB,QAAmC,IACzD,QACV,CAAC,CACL;CAEJ,OAAO;AACX;AAEA,IAAa,kBAAb,MAAa,gBAAgB;CACzB;CACA;CAEA,YAAY,gBAAwB;EAChC,KAAK,UAAU,IAAI,QAAQ,EACvB,sBAAsB,EAClB,iBAAiB,gBAAgB,WACrC,EACJ,CAAC;EACD,IAAI,KAAG,WAAW,cAAc,GAC5B,KAAK,QAAQ,sBAAsB,GAAG,eAAe,SAAS;EAElE,KAAK,iBAAiB,OAAK,QAAQ,cAAc;CACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BA,OAAe,kBAAkB,QAAwB;EACrD,MAAM,QAAQ,OAAO,QAAQ,wBAAwB,GAAG,SAAiB,KAAK,YAAY,CAAC;EAC3F,MAAM,aAAa,6BAA6B,KAAK,KAAK,IAAI,QAAQ,IAAI,MAAM,QAAQ,WAAW,MAAM,CAAC;EAC1G,OAAO,6BAA6B,KAAK,UAAU,IAAI,aAAa,IAAI,WAAW,QAAQ,mBAAmB,EAAE;CACpH;CAEA,qBAA6B,cAA8B;EACvD,MAAM,YAAY,aAAa,QAAQ,mBAAmB,EAAE;EAC5D,IAAI,CAAC,aAAa,cAAc,cAC5B,MAAM,IAAI,MAAM,2BAA2B,aAAa,uEAAuE;EAEnI,OAAO;CACX;;;;CAKA,SAAiB,UAA0B;EACvC,MAAM,WAAW,OAAK,QAAQ,KAAK,gBAAgB,QAAQ;EAC3D,IAAI,CAAC,SAAS,WAAW,KAAK,iBAAiB,OAAK,GAAG,KAAK,aAAa,KAAK,gBAC1E,MAAM,IAAI,MAAM,8EAA8E;EAElG,OAAO;CACX;;;;;;;;;;;;;;;;CAiBA,eAA6B;EACzB,KAAK,MAAM,QAAQ,KAAK,QAAQ,eAAe,GAC3C,IAAI,CAAC,KAAG,WAAW,KAAK,YAAY,CAAC,GACjC,KAAK,QAAQ,iBAAiB,IAAI;OAElC,KAAK,0BAA0B;EAGvC,IAAI,KAAG,WAAW,KAAK,cAAc,GACjC,KAAK,QAAQ,sBAAsB,GAAG,KAAK,eAAe,SAAS;CAE3E;CAEA,kBAA0B,cAAsB;EAC5C,MAAM,SAAS,KAAK,qBAAqB,YAAY;EACrD,MAAM,WAAW,KAAK,SAAS,GAAG,OAAO,IAAI;EAC7C,IAAI,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C,IAAI,CAAC,QAAQ,KAAG,WAAW,QAAQ,GAAG;GAClC,KAAK,QAAQ,sBAAsB,GAAG,KAAK,eAAe,SAAS;GACnE,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C;EACA,OAAO;CACX;;;;;;;;;;;CAYA,uBAA+B,MAAwD;EACnF,IAAI,CAAC,MAAM,OAAO;EAClB,IAAI,KAAK,0BAA0B,IAAI,GAAG,OAAO;EACjD,IAAI,KAAK,0BAA0B,IAAI,KACnC,KAAK,eAAe,IAAI,KACxB,KAAK,sBAAsB,IAAI,KAC/B,KAAK,gBAAgB,IAAI,KACzB,KAAK,oBAAoB,IAAI,GAC7B,OAAO,KAAK,uBAAuB,KAAK,cAAc,CAAC;EAE3D,IAAI,KAAK,iBAAiB,IAAI,GAAG;GAE7B,MAAM,SAAS,KAAK,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;GAC7D,IAAI,UAAU,qBAAqB,IAAI,MAAM,GACzC,OAAO,KAAK,uBAAuB,KAAK,aAAa,CAAC,CAAC,EAAE;EAEjE;EACA,OAAO;CACX;CAEA,oBAA4B,cAAsD;EAC9E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MAAM,OAAO;EAElB,MAAM,gBAAgB,KAAK,uBAAuB;EAClD,IAAI,eAAe;GACf,MAAM,cAAc,cAAc,gBAAgB,CAAC,CAAC;GACpD,IAAI,eAAe,YAAY,QAAQ,MAAM,WAAW,kBAAkB;IACtE,MAAM,OAAO,YAAY,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;IAC5E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY;KAClD,MAAM,UAAU,KAAK,QAAQ;KAC7B,MAAM,UAAU,KAAK,uBAAuB,OAAO;KACnD,MAAM,YAAY,KAAK,uBAAuB,SAAS,eAAe,CAAC;KACvE,IAAI,WAAW,OAAO;IAC1B,OAAO;KAEH,MAAM,YAAY,KAAK,uBAAuB,IAAI;KAClD,IAAI,WAAW,OAAO;IAC1B;GACJ;EACJ;EAEA,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAAG;GAClD,MAAM,OAAO,KAAK,uBAAuB,QAAQ,eAAe,CAAC;GACjE,IAAI,MAAM,OAAO;EACrB;EACA,OAAO;CACX;;;;;;;;CASA,wBAAgC,cAA+C;EAC3E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MACD,MAAM,IAAI,MAAM,eAAe,aAAa,mBAAmB,OAAK,KAAK,KAAK,gBAAgB,GAAG,aAAa,IAAI,EAAE,EAAE;EAE1H,MAAM,gBAAgB,KAAK,oBAAoB,YAAY;EAC3D,IAAI,CAAC,eACD,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAElE,OAAO;CACX;CAEA,sBAA8B,cAAsB,MAA0B;EAC1E,OAAO,2CAA2C,KAAK,YAAY,EAAE,sLAGxD,aAAa;CAC9B;;CAGA,aAAqB,KAA8B,MAAoD;EACnG,OAAO,IAAI,aAAa,MACpB,aAAa,KACb,OAAQ,EAAyB,YAAY,eAC3C,EAAyB,QAAQ,MAAM,QACpC,EAAyB,QAAQ,MAAM,IAAI,KAAK,MAChD,EAAyB,QAAQ,MAAM,IAAI,KAAK,GAAG;CAChE;CAEA,OAAe,SAAS,KAAqB;EACzC,OAAO,6BAA6B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;CAC5E;CAEA,OAAe,cAAc,OAAkD;EAC3E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,EAAE,iBAAiB;CACtG;;;;;;;;;;CAWA,OAAe,cAAc,OAAsC;EAC/D,KAAK,MAAM,SAAS;GAAC;GAAO;GAAM;GAAgB;GAAQ;EAAM,GAAG;GAC/D,MAAM,SAAS,MAAM,KAAI,SAAQ,gBAAgB,cAAc,IAAI,IAAI,KAAK,SAAS,KAAA,CAAS;GAC9F,IAAI,OAAO,OAAM,UAAS,OAAO,UAAU,YAAY,OAAO,UAAU,QAAQ,KAC5E,IAAI,IAAI,MAAM,CAAC,CAAC,SAAS,OAAO,QAChC,OAAO;EAEf;CAEJ;;CAGA,cAAsB,UAAgB,OAAqD;EACvF,MAAM,wBAAQ,IAAI,IAAqC;EACvD,MAAM,QAAQ,SAAS,OAAO,WAAW,sBAAsB;EAC/D,KAAK,MAAM,WAAW,OAAO,YAAY,KAAK,CAAC,GAAG;GAC9C,MAAM,SAAS,QAAQ,OAAO,WAAW,uBAAuB;GAChE,MAAM,QAAQ,SAAS,KAAK,cAAc,QAAQ,KAAK,IAAI,KAAA;GAC3D,MAAM,UAAU,OAAO,OAAO,WAAW,aAAa,CAAC,EAAE,gBAAgB,KAClE,OAAO,OAAO,WAAW,6BAA6B,CAAC,EAAE,gBAAgB,KACzE,OAAO,OAAO,WAAW,cAAc,CAAC,EAAE,QAAQ;GACzD,IAAI,UAAU,YAAY,KAAA,GAAW,MAAM,IAAI,OAAO,OAAO,GAAG,MAAM;EAC1E;EACA,OAAO;CACX;CAEA,uBAA+B,KAAc,cAAc,GAAG,YAA2B;EAIrF,MAAM,YAAY;EAClB,MAAM,SAAS,UAAU,OAAO,WAAW;EAC3C,MAAM,cAAc,UAAU,OAAO,cAAc,CAAC;EAEpD,IAAI,eAAe,eACf,OAAO,IAAI;EAEf,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GACxB,OAAO;EAEX,IAAI,OAAO,QAAQ,UACf,OAAO,KAAK,UAAU,GAAG;EAE7B,IAAI,OAAO,QAAQ,YAAY,OAAO,QAAQ,WAC1C,OAAO,OAAO,GAAG;EAErB,IAAI,MAAM,QAAQ,GAAG,GAAG;GACpB,IAAI,IAAI,WAAW,GAAG,OAAO;GAG7B,MAAM,QAAQ,aAAa,gBAAgB,cAAc,GAAG,IAAI,KAAA;GAChE,MAAM,MAAM,cAAc,QAAQ,KAAK,cAAc,YAAY,KAAK,IAAI,KAAA;GAM1E,OAAO,MAAM,cALC,IAAI,KAAI,SAAQ,KAAK,uBAC/B,MACA,cAAc,GACd,OAAO,SAAS,gBAAgB,cAAc,IAAI,IAAI,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI,KAAA,CACzF,CAC2B,CAAA,CAAM,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC1E;EACA,IAAI,OAAO,QAAQ,UAAU;GACzB,MAAM,SAAS;GACf,MAAM,OAAO,OAAO,KAAK,MAAM;GAC/B,MAAM,YAAY,YAAY,OAAO,WAAW,uBAAuB;GAGvE,MAAM,iBAA2B,CAAC;GAClC,IAAI,WAAW;IACX,MAAM,WAAW,UAAU,cAAc;IACzC,KAAK,MAAM,WAAW,UAClB,IAAI,QAAQ,OAAO,WAAW,kBAAkB,GAAG;KAE/C,IAAI,OADa,QAAQ,YACd,CAAA,CAAS,QAAQ;KAC5B,IAAI,KAAK,WAAW,IAAG,KAAK,KAAK,SAAS,IAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KACvE,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KAGvE,IAAI,EAAE,QAAQ,SAAS;MACnB,MAAM,OAAO,QAAQ,eAAe;MACpC,IAAI,MAAM;OACN,MAAM,OAAO,KAAK,QAAQ;OAO1B,IANe,SAAS,WAAW,iBAC/B,SAAS,WAAW,sBACpB,SAAS,WAAW,cACpB,SAAS,WAAW,kBACpB,SAAS,WAAW,cAEV,SAAS,YAAY,SAAS,eAAe,SAAS,sBAAsB,SAAS,iBAAiB,SAAS,iBAEzH,eAAe,KAAK,GAAG,gBAAgB,SAAS,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG;MAElF;KACJ;IACJ;GAER;GAEA,IAAI,KAAK,WAAW,KAAK,eAAe,WAAW,GAAG,OAAO;GAoB7D,OAAO,MAAM,cAAc,CADT,GAjBJ,KAAK,KAAI,QAAO;IAC1B,MAAM,SAAS,gBAAgB,SAAS,GAAG;IAI3C,IAAI;IACJ,IAAI,cAAc,gBAAgB,cAAc,OAAO,IAAI,KAAK,MAAM,QAAQ,OAAO,IAAI,IAAI;KACzF,MAAM,UAAU,KAAK,aAAa,WAAW,GAAG;KAChD,IAAI,WAAW,QAAQ,OAAO,WAAW,kBAAkB,GACvD,eAAe,QAAQ,qBAAqB,WAAW,uBAAuB,KACvE,QAAQ,qBAAqB,WAAW,sBAAsB;IAE7E;IAEA,OAAO,GAAG,OAAO,IAAI,KAAK,uBAAuB,OAAO,MAAM,cAAc,GAAG,YAAY;GAC/F,CAEqB,GAAO,GAAG,cACJ,CAAA,CAAS,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC7E;EACA,OAAO;CACX;;;;;;;;;CAUA,uBAA+B,QAAiC,MAA+B,aAA2B;EACtH,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;GAC7C,MAAM,WAAW,KAAK,aAAa,QAAQ,GAAG;GAC9C,MAAM,cAAc,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACvE,SAAS,qBAAqB,WAAW,uBAAuB,IAChE,KAAA;GAEN,IAAI,eAAe,gBAAgB,cAAc,KAAK,GAAG;IACrD,KAAK,uBAAuB,aAAa,OAAO,cAAc,CAAC;IAC/D;GACJ;GAEA,MAAM,cAAc,KAAK,uBAAuB,OAAO,aAAa,WAAW;GAC/E,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;QAEnC,OAAO,sBAAsB;IACzB,MAAM,gBAAgB,SAAS,GAAG;IAClC;GACJ,CAAC;EAET;CACJ;;;;;;;;;;CAWA,cAAsB,cAA4B;EAC9C,MAAM,OAAO,KAAK,QAAQ,cAAc,OAAK,QAAQ,KAAK,gBAAgB,GAAG,aAAa,IAAI,CAAC;EAC/F,IAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;EAC7B,IAAI,KAAG,WAAW,KAAK,YAAY,CAAC,GAChC,KAAK,0BAA0B;OAE/B,KAAK,QAAQ,iBAAiB,IAAI;CAE1C;CAEA,MAAa,aAAa,cAAsB,aAAqB,gBAAyC;EAC1G,KAAK,aAAa;EAClB,IAAI;GACA,MAAM,KAAK,cAAc,cAAc,aAAa,cAAc;EACtE,SAAS,KAAK;GACV,KAAK,cAAc,YAAY;GAC/B,MAAM;EACV;CACJ;CAEA,MAAc,cAAc,cAAsB,aAAqB,gBAAyC;EAC5G,MAAM,gBAAgB,KAAK,wBAAwB,YAAY;EAM/D,MAAM,eAAe,sBAAsB,cAAc;EAEzD,IAAI,iBAAiB,cAAc,YAAY,YAAY;EAC3D,IAAI,CAAC,gBACD,iBAAiB,cAAc,sBAAsB;GACjD,MAAM;GACN,aAAa;EACjB,CAAC;EAGL,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;EACvF,IAAI,UAAU;GACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;GAE5D,IAAI;GACJ,IAAI,gBAAgB,aAAa,OAAO,WAAW,kBAAkB,GACjE,iBAAiB,aAAa,qBAAqB,WAAW,uBAAuB;GAGzF,MAAM,cAAc,KAAK,wBACrB,cACA,KAAK,kBAAkB,YAAY,GACnC,GAAG,cAAc,aAAa,GAC9B,QACJ,CAAC,CAAC;GACF,MAAM,iBAAiB,KAAK,uBAAuB,aAAa,GAAG,cAAc;GAEjF,IAAI;QACI,aAAa,OAAO,WAAW,kBAAkB,GACjD,aAAa,eAAe,cAAc;GAAA,OAG9C,SAAS,sBAAsB;IAC3B,MAAM,gBAAgB,SAAS,WAAW;IAC1C,aAAa;GACjB,CAAC;GAGL,MAAM,OAAO,KAAK,kBAAkB,YAAY;GAChD,IAAI,MACA,KAAK,WAAW;GAEpB,MAAM,KAAK,QAAQ,KAAK;EAC5B;CACJ;CAEA,MAAa,eAAe,cAAsB,aAAqB;EACnE,KAAK,aAAa;EAGlB,MAAM,iBAFgB,KAAK,wBAAwB,YAE5B,CAAA,CAAc,YAAY,YAAY;EAC7D,IAAI,gBAAgB;GAChB,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;GACvF,IAAI,UAAU;IACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;IAC5D,IAAI,cAAc;KACd,aAAa,OAAO;KACpB,MAAM,OAAO,KAAK,kBAAkB,YAAY;KAChD,IAAI,MACA,KAAK,WAAW;KAEpB,MAAM,KAAK,QAAQ,KAAK;IAC5B;GACJ;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAa,eAAe,cAAsB,gBAAyC,UAAiC,CAAC,GAAG;EAC5H,KAAK,aAAa;EAIlB,MAAM,cAAc,iBAAiB,cAAc;EACnD,IAAI,aACA,MAAM,IAAI,MACN,sBAAsB,aAAa,eAAe,YAAY,wHAElE;EAEJ,IAAI;GACA,MAAM,KAAK,gBAAgB,cAAc,gBAAgB,OAAO;EACpE,SAAS,KAAK;GACV,KAAK,cAAc,YAAY;GAC/B,MAAM;EACV;CACJ;;;;;;;;;;;;;;;;;;CAmBA,MAAa,WAAW,cAAsB,OAAwB;EAClE,KAAK,aAAa;EAClB,MAAM,WAAW,wBAAwB,KAAK;EAC9C,IAAI,SAAS,SAAS,GAClB,MAAM,IAAI,MAAM,qBAAqB,aAAa,KAAK,SAAS,KAAK,GAAG,GAAG;EAE/E,IAAI;GACA,MAAM,KAAK,WAAW,cAAc,yBAAyB,KAAK,CAAC;EACvE,SAAS,KAAK;GACV,KAAK,cAAc,YAAY;GAC/B,MAAM;EACV;CACJ;CAEA,MAAc,WAAW,cAAsB,OAAwB;EACnE,KAAK,wBAAwB,YAAY;EACzC,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,KAAK,MAAM,MAAM,OAGb,KAAK,aAAa,cAAc,MAAM,KAAK,wBAAwB,YAAY,GAAG,EAAE;EAExF,MAAM,KAAK,QAAQ,KAAK;CAC5B;CAEA,aAAqB,cAAsB,MAAkB,eAAwC,IAA6B;EAC9H,MAAM,EAAE,MAAM,SAAS;EACvB,MAAM,UAAU,QAAgB,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;EAE3D,IAAI,SAAS;EACb,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,SAAS,GAAG,SAAS;GAClD,MAAM,MAAM,KAAK;GACjB,MAAM,SAAS,KAAK,WAAW,QAAQ,GAAG;GAC1C,IAAI,CAAC,QAAQ;IACT,MAAM,SAAS,KAAK,SAAS,MAAM;IACnC,IAAI,QAAQ,MAAM,KAAK,YAAY,cAAc,MAAM,OAAO,QAAQ,CAAC,GAAG,QAAQ,YAAY;IAE9F,IAAI,GAAG,OAAO,UAAU;IACxB,SAAS,OAAO,sBAAsB;KAAE,MAAM,gBAAgB,SAAS,GAAG;KAAG,aAAa;IAAK,CAAC,CAAC,CAC5F,4BAA4B,WAAW,uBAAuB;IACnE;GACJ;GACA,MAAM,QAAQ,OAAO,OAAO,WAAW,kBAAkB,IACnD,gBAAgB,iBAAiB,OAAO,eAAe,CAAC,IACxD,KAAA;GACN,MAAM,OAAO,OAAO,OAAO,WAAW,uBAAuB;GAC7D,IAAI,CAAC,MAAM,MAAM,KAAK,YAAY,cAAc,MAAM,OAAO,QAAQ,CAAC,GAAG,SAAS,QAAQ,IAAI;GAC9F,SAAS;EACb;EAEA,MAAM,MAAM,KAAK,KAAK,SAAS;EAC/B,MAAM,SAAS,KAAK,WAAW,QAAQ,GAAG;EAE1C,IAAI,GAAG,OAAO,UAAU;GACpB,IAAI,QAAQ;IACR,OAAO,OAAO;IACd;GACJ;GACA,MAAM,SAAS,KAAK,SAAS,MAAM;GACnC,IAAI,QAAQ,MAAM,KAAK,YAAY,cAAc,MAAM,OAAO,KAAK,MAAM,GAAG,QAAQ,YAAY;GAChG;EACJ;EAIA,IAAI,KAAK,WAAW,KAAK,QAAQ,aAAa;GAC1C,KAAK,eAAe,cAAc,MAAM,eAAe,GAAG,KAAK;GAC/D,KAAK,WAAW,eAAe,WAAW,CAAC,EAAE,WAAW;GACxD;EACJ;EAEA,MAAM,MAAM,QAAQ,OAAO,WAAW,kBAAkB,IAAI,OAAO,eAAe,IAAI,KAAA;EACtF,IAAI,WAAW,CAAC,OAAO,CAAC,gBAAgB,eAAe,GAAG,IACtD,MAAM,KAAK,YAAY,cAAc,MAAM,OAAO,KAAK,MAAM,GAAG,OAAO,QAAQ,IAAI;EAEvF,IAAI,KAAK,OAAO,WAAW,sBAAsB,GAAG;GAChD,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,MAAK,YAAW,CAAC,gBAAgB,eAAe,OAAO,CAAC;GACvF,IAAI,MAAM,MAAM,KAAK,YAAY,cAAc,MAAM,OAAO,KAAK,MAAM,GAAG,MAAM,OAAO;EAC3F;EAEA,MAAM,QAAQ,KAAK,mBAAmB,cAAc,MAAM,MAAM,GAAG,OAAO,GAAG;EAC7E,MAAM,OAAO,KAAK,uBAAuB,OAAO,GAAG,GAAG;EAKtD,CAJgB,QAAQ,OAAO,WAAW,kBAAkB,IACtD,OAAO,eAAe,IAAI,IAC1B,OAAO,sBAAsB;GAAE,MAAM,gBAAgB,SAAS,GAAG;GAAG,aAAa;EAAK,CAAC,EAAA,CAErF,WAAW;CACvB;;;;;;;CAQA,mBAA2B,cAAsB,MAAkB,MAAgB,OAAgB,KAAgC;EAE/H,IAAI,WAAsF;EAC1F,KAAK,MAAM,OAAO,MACd,QAAQ,UAAR;GACI,KAAK;IAAc,WAAW,QAAQ,eAAe,eAAe;IAAS;GAC7E,KAAK;IAAc,WAAW;IAAY;GAC1C,KAAK;IACD,WAAW,QAAQ,eAAe,eAC5B,QAAQ,OAAO,aACX,QAAQ,UAAU,UACd,QAAQ,aAAa,aACjB;IAClB;GACJ,KAAK;IAAS,WAAW,QAAQ,eAAe,eAAe;IAAS;GACxE,KAAK;IACD,IAAI,QAAQ,YAAY,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG;KAC1E,MAAM,UAAU,MAAM,KAAK;KAC3B,OAAO,IAAI,cAAc,oBAAoB,KAAK,OAAO,IAAI,UAAU,KAAK,YAAY,MAAM,OAAO,CAAC;IAC1G;IACA,WAAW;IACX;GACJ,SAAS,WAAW;EACxB;EAEJ,MAAM,YAAY,KAAK,OAAO,WAAW,uBAAuB;EAChE,MAAM,QAAQ,KAAK,KAAK,GAAG;EAC3B,IAAI,aAAa,YACb,OAAO,KAAK,gCAAgC,cAAc,MAAM,OAAO,WAAW,KAAK;EAE3F,IAAI,aAAa,cACb,OAAO,KAAK,wBAAwB,cAAc,MAAM,OAAO,WAAW,KAAK;EAEnF,IAAI,aAAa,cAAc,gBAAgB,cAAc,KAAK,GAAG;GAEjE,MAAM,UAAU,KAAK,gCACjB,cAAc,MAAM;IAAE,MAAM;IAAY,UAAU;GAAM,GACxD,YAAY,KAAA,IAAY,KAAA,GAAW,KAAK;GAC5C,MAAM,WAAW,gBAAgB,cAAc,OAAO,IAAI,QAAQ,WAAW;GAC7E,IAAI,gBAAgB,cAAc,QAAQ,KAAK,EAAE,YAAY,aACzD,EAAE,aAAa,KAAK,aAAa,WAAW,QAAQ,IACpD,MAAM,IAAI,MAAM,aAAa,MAAM,mBAAmB,aAAa,oDAAoD;GAE3H,OAAO;EACX;EACA,OAAO;CACX;;CAGA,WAAmB,KAA8B,MAAoD;EACjG,OAAO,IAAI,cAAc,CAAC,CAAC,MAAK,WAAU;GACtC,IAAI,OAAO,OAAO,WAAW,gBAAgB,GAAG,OAAO;GACvD,MAAM,aAAc,OAA8B,QAAQ;GAC1D,OAAO,eAAe,QAAQ,eAAe,KAAK,UAAU,IAAI,KAAK,eAAe,IAAI,KAAK;EACjG,CAAC;CACL;CAEA,SAAiB,KAAgD;EAC7D,OAAO,IAAI,cAAc,CAAC,CAAC,MAAK,WAAU,OAAO,OAAO,WAAW,gBAAgB,CAAC;CACxF;;CAGA,OAAe,iBAAiB,MAA0C;EACtE,IAAI,CAAC,MAAM,OAAO,KAAA;EAClB,IAAI,KAAK,eAAe,IAAI,KAAK,KAAK,sBAAsB,IAAI,KAAK,KAAK,0BAA0B,IAAI,GACpG,OAAO,gBAAgB,iBAAiB,KAAK,cAAc,CAAC;EAEhE,OAAO;CACX;;;;;CAMA,OAAe,eAAe,MAAqB;EAC/C,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI;EACnD,IAAI,CAAC,OAAO,OAAO;EACnB,QAAQ,MAAM,QAAQ,GAAtB;GACI,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW,aACZ,OAAO;GACX,KAAK,WAAW,uBACZ,OAAO,MAAM,cAAc,WAAW,qBAAqB,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,WAAW,cAAc;GAC9G,KAAK,WAAW,YACZ,OAAO,MAAM,QAAQ,MAAM;GAC/B,SACI,OAAO;EACf;CACJ;;CAGA,YAAoB,cAAsB,MAAkB,OAAe,MAAY,MAA4C;EAC/H,MAAM,OAAO,KAAK,QAAQ;EAC1B,MAAM,QAAQ,KAAK,SAAS,KAAK,GAAG,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK;EAC3D,uBAAO,IAAI,MACP,KAAK,MAAM,KAAK,KAAK,KAAK,MAAM,QAAQ,OAAK,SAAS,KAAK,YAAY,CAAC,EAAE,gFACb,aAAa,iBAC9E;CACJ;CAEA,MAAc,gBAAgB,cAAsB,gBAAyC,SAAgC;EACzH,MAAM,UAAU,QAAQ,YAAY;EACpC,IAAI,OAAO,KAAK,kBAAkB,YAAY;EAC9C,MAAM,gBAAgB,OAAO,KAAK,oBAAoB,YAAY,IAAI;EAEtE,IAAI,QAAQ,CAAC,eAIT,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAGlE,IAAI,CAAC,QAAQ,CAAC,eAAe;GACzB,IAAI,SACA,MAAM,IAAI,MAAM,qCAAqC,aAAa,kCAAkC;GAGxG,MAAM,SAAS,KAAK,qBAAqB,YAAY;GACrD,MAAM,cAAc,KAAK,SAAS,GAAG,OAAO,IAAI;GAChD,IAAI,KAAG,WAAW,WAAW,GACzB,MAAM,IAAI,MAAM,yBAAyB,YAAY,gBAAgB,aAAa,0CAA0C;GAEhI,MAAM,UAAU,GAAG,gBAAgB,kBAAkB,MAAM,EAAE;GAG7D,OAAO,KAAK,QAAQ,iBAAiB,aAAa,iEAAiE,QAAQ,6CAA6C,QAAQ,IAAI;GACpL,MAAM,EAAE,WAAW,GAAG,SAAS,kBAAkB,cAAc;GAC/D,MAAM,OAAO,gBAAgB,OACvB;IAAE,GAAG;IAAM,YAAY,KAAK,wBAAwB,cAAc,MAAM,KAAK,YAAY,KAAA,CAAS;GAAE,IACpG;GACN,KAAK,8BAA8B,OAAO,CAAC,CAAC,eAAe,KAAK,uBAAuB,IAAI,CAAC;GAC5F,IAAI,cAAc,KAAA,GACd,KAAK,eAAe,cAAc,MAAM,KAAK,wBAAwB,YAAY,GAAG,SAAS;EAErG,OAAO;GAGH,IAAI,CAAC;QAEG,EAAE,mBAAmB,mBAAmB,eAAe,kBAAkB,KAAA,KAAc,MAAM,QAAQ,eAAe,aAAa,KAAK,eAAe,cAAc,WAAW,GAAI;KAClL,MAAM,SAAS,cAAc,YAAY,eAAe;KACxD,IAAI,QACA,OAAO,OAAO;KAMlB,OAAO,eAAe;IAC1B;;GAUJ,iBAAiB,kBAAkB,cAAc;GAEjD,KAAK,MAAM,OAAO,OAAO,KAAK,cAAc,GAAG;IAC3C,IAAI,QAAQ,aAAa;KACrB,KAAK,eAAe,cAAc,MAAM,eAAe,eAAe,IAAI;KAC1E;IACJ;IAEA,MAAM,OAAO,cAAc,YAAY,GAAG;IAE1C,IAAI;IACJ,IAAI,QAAQ,KAAK,OAAO,WAAW,kBAAkB,GACjD,aAAa,KAAK,qBAAqB,WAAW,uBAAuB;IAG7E,IAAI,QAAQ,cACR,eAAe,OAAO,KAAK,wBAAwB,cAAc,MAAM,eAAe,MAAM,UAAU;IAG1G,IAAI,WAAW,cAAc,gBAAgB,cAAc,eAAe,IAAI,GAAG;KAC7E,KAAK,uBAAuB,YAAY,eAAe,MAAiC,CAAC;KACzF;IACJ;IAEA,MAAM,UAAU,KAAK,uBAAuB,eAAe,MAAM,GAAG,UAAU;IAC9E,IAAI,MACA,KAAK,eAAe,OAAO;SAE3B,cAAc,sBAAsB;KAQhC,MAAM,gBAAgB,SAAS,GAAG;KAClC,aAAa;IACjB,CAAC;GAET;EACJ;EACA,IAAI,MACA,KAAK,WAAW;EAEpB,MAAM,KAAK,QAAQ,KAAK;CAC5B;;;;;;;;;;;;;;;;;;CAmBA,wBACI,cACA,MACA,YACA,eACA,OAAO,cACgB;EACvB,IAAI,CAAC,gBAAgB,cAAc,UAAU,GAAG,OAAO,CAAC;EACxD,OAAO,OAAO,YAAY,OAAO,QAAQ,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,cAAc,CAC1E,KACA,KAAK,gCACD,cACA,MACA,UACA,gBAAgB,KAAK,SAAS,eAAe,GAAG,IAAI,KAAA,GACpD,GAAG,KAAK,GAAG,KACf,CACJ,CAAC,CAAC;CACN;CAEA,gCACI,cACA,MACA,UACA,aACA,MACO;EACP,IAAI,CAAC,gBAAgB,cAAc,QAAQ,GAAG,OAAO;EACrD,MAAM,OAAgC,EAAE,GAAG,SAAS;EAEpD,IAAI,SAAS,SAAS,cAAc,gBAAgB,cAAc,SAAS,QAAQ,GAAG;GAClF,MAAM,WAAoC,EAAE,GAAG,SAAS,SAAS;GACjE,MAAM,YAAY,SAAS;GAC3B,IAAI,OAAO,cAAc,YAAY,UAAU,KAAK,CAAC,CAAC,SAAS,GAAG;IAC9D,MAAM,UAAU,UAAU,KAAK;IAE/B,SAAS,SAAS,IAAI,cAAc,oBAAoB,KAAK,OAAO,IAC9D,UACA,KAAK,YAAY,MAAM,OAAO,CAAC;GACzC,OAAO;IACH,MAAM,cAAc,cAAc,KAAK,SAAS,aAAa,UAAU,IAAI,KAAA;IAC3E,IAAI,CAAC,eAAe,CAAC,KAAK,aAAa,aAAa,QAAQ,GACxD,MAAM,IAAI,MAAM,sBAAsB,KAAK,mBAAmB,aAAa,oDAAoD;IAGnI,OAAO,SAAS;GACpB;GACA,KAAK,WAAW;EACpB;EAEA,IAAI,gBAAgB,cAAc,SAAS,UAAU,GACjD,KAAK,aAAa,KAAK,wBACnB,cAAc,MAAM,SAAS,YAC7B,cAAc,KAAK,SAAS,aAAa,YAAY,IAAI,KAAA,GAAW,IAAI;EAEhF,IAAI,MAAM,QAAQ,SAAS,EAAE,GAAG;GAC5B,MAAM,QAAQ,cAAc,KAAK,cAAc,aAAa,IAAI,CAAC,EAAE,OAAO,WAAW,sBAAsB,IAAI,KAAA;GAC/G,KAAK,KAAK,SAAS,GAAG,KAAK,MAAM,UAAU,KAAK,gCAC5C,cAAc,MAAM,MACpB,OAAO,YAAY,CAAC,CAAC,MAAM,EAAE,OAAO,WAAW,uBAAuB,GAAG,GAAG,KAAK,MAAM,MAAM,EAAE,CAAC;EACxG,OAAO,IAAI,gBAAgB,cAAc,SAAS,EAAE,GAChD,KAAK,KAAK,KAAK,gCACX,cAAc,MAAM,SAAS,IAC7B,cAAc,KAAK,SAAS,aAAa,IAAI,IAAI,KAAA,GAAW,GAAG,KAAK,IAAI;EAEhF,IAAI,gBAAgB,cAAc,SAAS,KAAK,KAAK,gBAAgB,cAAc,SAAS,MAAM,UAAU,GAAG;GAC3G,MAAM,WAAW,cAAc,KAAK,SAAS,aAAa,OAAO,IAAI,KAAA;GACrE,KAAK,QAAQ;IACT,GAAG,SAAS;IACZ,YAAY,KAAK,wBACb,cAAc,MAAM,SAAS,MAAM,YACnC,WAAW,KAAK,SAAS,UAAU,YAAY,IAAI,KAAA,GAAW,GAAG,KAAK,OAAO;GACrF;EACJ;EACA,OAAO;CACX;;CAGA,cAAsB,KAA8B,KAA+B;EAC/E,MAAM,OAAO,KAAK,aAAa,KAAK,GAAG;EACvC,OAAO,QAAQ,KAAK,OAAO,WAAW,kBAAkB,IAAI,KAAK,eAAe,IAAI,KAAA;CACxF;;CAGA,SAAiB,KAA8B,KAAkD;EAC7F,OAAO,KAAK,cAAc,KAAK,GAAG,CAAC,EAAE,OAAO,WAAW,uBAAuB;CAClF;;;;;;;;;;;;;;;CAgBA,eAAuB,cAAsB,MAAkB,eAAwC,OAAsB;EACzH,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAE3B,MAAM,WAAW,KAAK,aAAa,eAAe,WAAW;EAK7D,MAAM,eAJW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,sBAAsB,IAC/D,KAAA,EAAA,EAEwB,YAAY,KAAK,CAAC;EAChD,MAAM,mCAAmB,IAAI,IAAoB;EAKjD,MAAM,0BAAkD,CAAC;EACzD,YAAY,SAAS,SAAS,UAAU;GACpC,MAAM,aAAa,QAAQ,OAAO,WAAW,uBAAuB;GACpE,IAAI,CAAC,YAAY;GACjB,MAAM,aAAa,KAAK,aAAa,YAAY,QAAQ;GACzD,MAAM,aAAa,cAAc,WAAW,OAAO,WAAW,kBAAkB,IAC1E,WAAW,eAAe,IAC1B,KAAA;GACN,IAAI,CAAC,YAAY;GAEjB,MAAM,WAAW,KAAK,aAAa,YAAY,cAAc;GAC7D,MAAM,WAAW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,aAAa,IACtD,KAAA;GACN,IAAI,UAAU,iBAAiB,IAAI,SAAS,gBAAgB,GAAG,WAAW,QAAQ,CAAC;QAC9E,wBAAwB,SAAS,WAAW,QAAQ;EAC7D,CAAC;EAED,MAAM,QAAQ,MAAM,KAAK,OAAO,UAAU;GACtC,IAAI,CAAC,gBAAgB,cAAc,KAAK,GAAG,OAAO;GAClD,MAAM,WAAoC,EAAE,GAAG,MAAM;GACrD,MAAM,eAAe,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe,KAAA;GACzF,MAAM,YAAY,SAAS;GAE3B,IAAI;GACJ,IAAI,OAAO,cAAc,YAAY,UAAU,KAAK,CAAC,CAAC,SAAS,GAAG;IAC9D,MAAM,UAAU,UAAU,KAAK;IAQ/B,aAAa,oBAAoB,KAAK,OAAO,IACvC,UACA,KAAK,YAAY,MAAM,OAAO;GACxC,OAAO,IAAI,gBAAgB,iBAAiB,IAAI,YAAY,GACxD,aAAa,iBAAiB,IAAI,YAAY;QAC3C,IAAI,MAAM,WAAW,YAAY,QACpC,aAAa,wBAAwB;GAGzC,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,aAAa,gBAAgB,IAAI,QAAQ,mBAAmB,aAAa,oDAAoD;GAGjJ,SAAS,SAAS,IAAI,cAAc,UAAU;GAC9C,OAAO;EACX,CAAC;EAED,MAAM,cAAc,KAAK,uBAAuB,OAAO,CAAC;EACxD,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;OAEnC,cAAc,sBAAsB;GAAE,MAAM;GAAa;EAAY,CAAC;CAE9E;;;;;CAMA,YAAoB,MAAkB,YAA4B;EAC9D,MAAM,aAAa,KAAK,kBAAkB,UAAU;EACpD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,uBAAuB,KAAK,eAAe,EAAE;EAG1G,MAAM,aAAa,KAAK,qBAAqB,UAAU;EACvD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,KAAK,WAAW,YAAY,EAAE,kCAAkC;EAG7H,IAAI,WAAW,YAAY,MAAM,KAAK,YAAY,KAAK,CAAC,KAAK,iBAAiB,MAAM,UAAU,GAAG;GAC7F,MAAM,WAAW,OAAK,SAAS,OAAK,QAAQ,KAAK,YAAY,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC,CACrF,MAAM,OAAK,GAAG,CAAC,CACf,KAAK,GAAG,CAAC,CACT,QAAQ,WAAW,KAAK;GAC7B,KAAK,qBAAqB;IACtB,eAAe;IACf,iBAAiB,SAAS,WAAW,GAAG,IAAI,WAAW,KAAK;GAChE,CAAC;EACL;EAEA,OAAO,SAAS;CACpB;CAEA,iBAAyB,MAAkB,YAA6B;EACpE,OAAO,KAAK,sBAAsB,CAAC,CAAC,MAAK,SAAQ,KAAK,iBAAiB,CAAC,EAAE,QAAQ,MAAM,UAAU;CACtG;CAEA,qBAA6B,MAAsC;EAE/D,MAAM,QADc,KAAK,uBAAuB,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAA,EAC3C,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;EAC7E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY,OAAO,KAAK,QAAQ;EAE1E,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAC/C,IAAI,KAAK,uBAAuB,QAAQ,eAAe,CAAC,GAAG,OAAO,QAAQ,QAAQ;CAG1F;;;;;;;;;;;;;;;;;;;CAoBA,MAAa,iBAAiB,cAAuE;EACjG,KAAK,aAAa;EAClB,MAAM,SAAS,KAAK,kBAAkB,YAAY;EAClD,IAAI,CAAC,QACD,MAAM,IAAI,MAAM,eAAe,aAAa,mBAAmB,OAAK,KAAK,KAAK,gBAAgB,GAAG,aAAa,IAAI,EAAE,EAAE;EAE1H,MAAM,aAAa,OAAO,YAAY;EACtC,MAAM,YAAY,OAAK,KAAK,KAAK,gBAAgB,UAAU;EAE3D,MAAM,YAAY,KAAK,QAAQ,eAAe,CAAC,CAAC,QAAO,SACnD,SAAS,UAAU,KAAK,eAAe,MAAM,UAAU,CAAC,CAAC,SAAS,CAAC;EACvE,MAAM,SAAS,UAAU,QAAO,SAAQ,KAAK,YAAY,MAAM,SAAS;EACxE,IAAI,OAAO,SAAS,GAChB,MAAM,IAAI,MACN,kBAAkB,aAAa,KAAK,OAAO,KAAI,SAAQ,OAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,GAClG,OAAO,WAAW,IAAI,YAAY,SAAS,oHAElD;EAGJ,MAAM,UAAoB,CAAC;EAC3B,MAAM,QAAQ,UAAU,MAAK,SAAQ,KAAK,YAAY,MAAM,SAAS;EACrE,IAAI;GACA,IAAI,OAAO;IACP,KAAK,MAAM,eAAe,KAAK,eAAe,OAAO,UAAU,GAAG;KAC9D,MAAM,QAAQ,YAAY,OAAO,WAAW,iBAAiB,IACvD,CACE,YAAY,iBAAiB,CAAC,EAAE,QAAQ,GACxC,GAAG,YAAY,gBAAgB,CAAC,CAAC,KAAI,WAAU,MAAM,aAAa,KAAK,MAAM,YAAY,EAAA,CAAG,QAAQ,CAAC,CACzG,CAAC,CAAC,QAAQ,SAAyB,QAAQ,IAAI,CAAC,IAC9C,CAAC;KACP,KAAK,MAAM,QAAQ,OAAO;MACtB,MAAM,OAAO,MAAM,qBAAqB,WAAW,UAAU,CAAC,CAAC,QAAO,eAClE,WAAW,QAAQ,MAAM,QACzB,CAAC,WAAW,uBAAuB,WAAW,iBAAiB,CAAC;MACpE,KAAK,MAAM,OAAO,MAAM;OACpB,MAAM,QAAQ,IAAI,gBAAgB,WAAW,sBAAsB;OACnE,IAAI,CAAC,OACD,MAAM,IAAI,MACN,kBAAkB,aAAa,qBAAqB,KAAK,aACtD,IAAI,mBAAmB,EAAE,2DAChC;OAEJ,MAAM,cAAc,GAAG;MAC3B;KACJ;KACA,YAAY,OAAO;IACvB;IACA,QAAQ,KAAK,MAAM,YAAY,CAAC;GACpC;GACA,OAAO,OAAO;GACd,MAAM,KAAK,QAAQ,KAAK;EAC5B,SAAS,KAAK;GACV,IAAI,SAAS,CAAC,MAAM,QAAQ,GAAG,MAAM,0BAA0B;GAC/D,KAAK,aAAa;GAClB,MAAM;EACV;EACA,OAAO;GAAE,SAAS;GAAY;EAAQ;CAC1C;;CAGA,eAAuB,MAAkB,YAAoB;EACzD,MAAM,QAAQ,aAAqB,SAAS,QAAQ,0BAA0B,EAAE;EAChF,MAAM,SAAS,KAAK,UAAU;EAC9B,OAAO,CAAC,GAAG,KAAK,sBAAsB,GAAG,GAAG,KAAK,sBAAsB,CAAC,CAAC,CAAC,QAAO,gBAAe;GAC5F,MAAM,YAAY,YAAY,wBAAwB;GACtD,IAAI,CAAC,aAAa,CAAC,UAAU,WAAW,GAAG,GAAG,OAAO;GACrD,OAAO,KAAK,OAAK,QAAQ,OAAK,QAAQ,KAAK,YAAY,CAAC,GAAG,SAAS,CAAC,MAAM;EAC/E,CAAC;CACL;AACJ"}

package/dist/auth/access.d.ts

@@ -0,0 +1,105 @@
+/**
+ * The access model this backend serves, and the one gate every scope check
+ * goes through.
+ *
+ * The model — the app's declared roles and scopes beside the built-in ones —
+ * comes from the users collection's `auth` block and is configured once at
+ * boot, like the JWT keys. A process serves one backend's auth, so one model.
+ *
+ * Who holds what:
+ *
+ * - A credential that narrows its person — an API key, an MCP token — puts
+ *   its scopes in the request context (`c.set("scopes", …)`) when it is
+ *   verified. That list is the whole answer for it.
+ * - Anyone else is a person (or the service key, which is the `admin` role),
+ *   and holds what their roles hold: `scopesForRoles`.
+ *
+ * @module
+ */
+import type { Context, MiddlewareHandler } from "hono";
+import { type AccessModel, type CollectionConfig } from "@rebasepro/types";
+import type { HonoEnv } from "../api/types.js";
+import { ApiError } from "../api/errors.js";
+/** The account a personal key acts as, as it is now. Null when it no longer exists. */
+export type KeyOwnerResolver = (uid: string) => Promise<{
+    roles: string[];
+} | null>;
+/** The access model the running backend serves. Built-ins only until boot configures it. */
+export declare function getAccessModel(): AccessModel;
+/**
+ * How a personal key finds its owner, or undefined when personal keys are
+ * off — in which case every personal key, however valid, is refused.
+ */
+export declare function getKeyOwnerResolver(): KeyOwnerResolver | undefined;
+/**
+ * Install the access model, and — when the app enables `auth.personalKeys`
+ * and has an account store to read owners from — how personal keys find
+ * their owner. Called once by `initializeRebaseBackend`.
+ */
+export declare function configureAccess(options: {
+    model: AccessModel;
+    resolveKeyOwner?: KeyOwnerResolver;
+}): void;
+/** A declaration the access model cannot be built from. Fails the boot. */
+export declare class AccessModelError extends Error {
+    constructor(message: string);
+}
+/**
+ * Build the access model from the users collection's `auth` block, refusing
+ * anything that would read as a grant it is not.
+ *
+ * - `admin` may not be declared: it is built in and holds everything, and a
+ *   declaration would either repeat that or quietly narrow it.
+ * - An app scope may not reuse a built-in resource name (`logs:export`): the
+ *   built-in resources are Rebase's, and a reader of `logs:*` should not have
+ *   to know which half is whose.
+ * - A role may not list a data-plane scope: a person's data access is the
+ *   collection's `securityRules`, so `data:write` on a role would grant nothing
+ *   and look like it granted something.
+ */
+export declare function accessModelFromCollections(collections: readonly CollectionConfig[]): AccessModel;
+/**
+ * Everything the caller of this request may do. Empty for a request with no
+ * caller.
+ */
+export declare function callerScopes(c: Context<HonoEnv>): string[];
+/** Does this request's caller hold `scope`, on `target` when one is given? */
+export declare function hasScope(c: Context<HonoEnv>, scope: string, target?: string): boolean;
+/**
+ * The refusal for a missing scope, worded for whoever is holding the
+ * credential. `details.requiredScope` names it for clients that branch.
+ */
+export declare function scopeMissing(c: Context<HonoEnv>, scope: string, target?: string): ApiError;
+/**
+ * Refuse a request whose caller does not hold `scope`.
+ *
+ * `target` narrows the check to one collection, bucket, function or app
+ * resource, and may be read from the request. Mount after authentication: a
+ * request with no caller is refused as unauthenticated, not as unscoped.
+ *
+ * @example
+ * ```ts
+ * app.post("/deploy/:project", requireScope("project:deploy", c => c.req.param("project")), handler);
+ * ```
+ */
+export declare function requireScope(scope: string, target?: string | ((c: Context<HonoEnv>) => string | undefined)): MiddlewareHandler<HonoEnv>;
+/**
+ * Refuse a request unless its caller holds the scope for its HTTP method:
+ * `read` for GET and HEAD, `write` for everything else. For an admin surface
+ * whose reads and writes split exactly along the method.
+ */
+export declare function requireScopeByMethod(scopes: {
+    read: string;
+    write: string;
+}): MiddlewareHandler<HonoEnv>;
+/**
+ * Refuse to let the caller act on an account — edit it, reset its password,
+ * delete it — when that account holds anything the caller does not.
+ *
+ * `users:write` is the scope that lets a support role manage accounts, and
+ * without this it would also let that role reset an administrator's password
+ * and sign in as them.
+ */
+export declare function assertMayManageAccount(c: Context<HonoEnv>, targetRoles: readonly string[]): void;
+/** Refuse to let the caller grant roles that hold anything the caller does not. */
+export declare function assertMayGrantRoles(c: Context<HonoEnv>, roles: readonly string[]): void;

package/dist/auth/adapter-middleware.d.ts

@@ -11,7 +11,8 @@
  * 3. Scopes the DataDriver via `withAuth()` for RLS
  * 4. Rejects a presented-but-unverifiable token with 401, whatever
  *    `requireAuth` says
- * 5. Enforces auth (401) when `requireAuth` is true and no user is found
+ * 5. Honours or refuses `x-rebase-impersonate` (`applyImpersonation`)
+ * 6. Enforces auth (401) when `requireAuth` is true and no user is found
  *
  * The behavior is identical to `createAuthMiddleware()` — only the
  * token verification strategy is pluggable.

package/dist/auth/address-ownership.d.ts

@@ -50,4 +50,19 @@ export declare function identityVouchesForAddress(identity: UserIdentityData, em
  * on it is the takeover itself, and leaving the account unverified while
  * signing the owner in would share the account all the same.
  */
-export declare function confirmAddressOwnership(authRepo: AuthRepository, user: Pick<UserData, "id" | "email" | "passwordHash">, passwordHash: string | null): Promise<void>;
+export declare function confirmAddressOwnership(authRepo: AuthRepository, user: Pick<UserData, "id" | "email" | "passwordHash">, passwordHash: string | null, options?: {
+    /**
+     * Whoever proved the address also holds a live session of this very
+     * account, so nothing on it is a stranger's: it was all put there by
+     * the person now holding the inbox. Nothing is removed and no session
+     * ends; the account is only marked verified. See `GET /auth/verify-email`.
+     */
+    everythingProven?: boolean;
+}): Promise<AddressProofOutcome>;
+/** What a first proof of address took off the account. */
+export interface AddressProofOutcome {
+    /** A password was on the account, nobody proved it, and it is gone. */
+    removedPassword: boolean;
+    /** The providers whose identities were detached for not vouching for the address. */
+    removedProviders: string[];
+}

package/dist/auth/admin-roles-route.d.ts

@@ -1,7 +1,9 @@
 /**
- * Admin endpoint for listing all roles.
+ * Admin endpoint for listing roles.
  *
- * Mounts: GET /roles
+ * Mounts: GET /roles — the built-in `admin` role and the roles the app
+ * declares under `auth.roles` on the users collection, with the scopes each
+ * holds. Requires `users:read`.
  */
 import { Hono } from "hono";
 import type { AuthRepository } from "./interfaces.js";

package/dist/auth/admin-roles.d.ts

@@ -1,24 +1,21 @@
 /**
- * Which role names carry administrative privilege.
+ * The admin role and scope matching, for code that may not import
+ * `@rebasepro/types`.
  *
- * One definition, because there used to be several and they disagreed.
- * `requireAdmin` accepted `admin` **or** `schema-admin`; the guard that refuses
- * a dangerous `defaultRole` compared against `admin` alone. So
- * `AUTH_DEFAULT_ROLE=schema-admin` passed the guard and made every public
- * registrant an administrator — and, since a `schema-admin` may edit users, one
- * of them could then grant themselves real `admin` and keep it.
+ * The custom-functions surface (`@rebasepro/server/functions`) must bundle for
+ * a runtime with no Node built-ins and imports nothing but `hono`, so its
+ * guards cannot reach the canonical definitions in `@rebasepro/types`
+ * (`ADMIN_ROLE`, `hasAdminRole`, `scopeGrants`). These are the same rules,
+ * restated, and `test/admin-roles.test.ts` holds them equal.
  *
- * The guard and the check have to read the same list or the gap comes back, so
- * neither of them owns it.
- *
- * `schema-admin` is here deliberately: it can reach the schema editor and the
- * SQL surfaces, which is administrative by any definition that matters. If a
- * genuinely lesser role is added later, it does not belong in this list — it
- * belongs in a capability check of its own.
+ * Everything else imports the `@rebasepro/types` versions.
+ */
+/** The one built-in role. It holds every scope. */
+export declare const ADMIN_ROLE_NAME = "admin";
+/** Does this list of roles include the admin role? */
+export declare function holdsAdminRole(roles: readonly string[] | null | undefined): boolean;
+/**
+ * Does a set of held scopes grant `scope`, optionally on one `target`? The
+ * unqualified grant covers every target; `scope:target` covers its own.
  */
-export declare const ADMINISTRATIVE_ROLES: readonly ["admin", "schema-admin"];
-export type AdministrativeRole = (typeof ADMINISTRATIVE_ROLES)[number];
-/** Does this single role name carry administrative privilege? */
-export declare function isAdministrativeRole(role: string): role is AdministrativeRole;
-/** Does any role in this list carry administrative privilege? */
-export declare function hasAdministrativeRole(roles: readonly string[] | null | undefined): boolean;
+export declare function heldScopesGrant(held: readonly string[], scope: string, target?: string): boolean;

package/dist/auth/admin-users-route.d.ts

@@ -7,6 +7,7 @@
  *   POST /users
  *   PUT /users/:uid
  *   DELETE /users/:uid
+ *   DELETE /users/:uid/mfa
  *   POST /bootstrap
  */
 import { Hono } from "hono";

package/dist/auth/api-keys/api-key-middleware.d.ts

@@ -1,34 +1,48 @@
 /**
- * Hono middleware for authenticating requests via Service API Keys.
+ * Authenticating requests that present an API key (`rk_`).
  *
- * This middleware is integrated into `createAuthMiddleware()` and
- * activates only when the bearer token starts with `rk_`. It:
+ * {@link resolveApiKey} turns a presented key into the identity it acts as and
+ * the scopes it holds; the HTTP middlewares, the realtime socket and `/mcp`
+ * all call it, so a key means the same thing on every surface.
  *
- * 1. Hashes the token with SHA-256
- * 2. Looks up the hash in the `rebase.api_keys` table
- * 3. Validates the key is not revoked and not expired
- * 4. Sets `c.set("user", ...)` and `c.set("apiKey", ...)` for downstream use
- * 5. Scopes the DataDriver via `withAuth()` using the API key's service identity
+ * - A **service key** acts as `api-key:<id>`, with the RLS roles `service`
+ *   plus whatever it was given, and holds exactly its scopes.
+ * - A **personal key** acts as its owner — their uid and their roles as they
+ *   are *now*, read on every use — and holds its scopes narrowed to what the
+ *   owner's roles still hold. Demote the owner and the key shrinks with them;
+ *   delete the account and the key stops.
  *
- * Authorization is double-gated for API keys: the key's own permission list
- * (checked by the REST generator) is one ceiling, and Postgres RLS is another,
- * independent one — `withAuth()` runs API-key requests as the restricted
- * `rebase_user` role like any other caller. An `admin` key passes RLS via the
- * injected `default_admin` policies; a non-admin key (roles `["service"]`,
- * uid `api-key:<id>`) only sees rows that a policy explicitly grants to the
- * `service` role or to the public. Owner-style policies
- * (`owner_id = rebase.uid()`) never match an API key's synthetic uid.
+ * A key never bypasses RLS: the request's driver is scoped to the identity
+ * like any other caller's, so the scopes are one ceiling and the database's
+ * policies another, independent one.
  *
  * @module
  */
 import type { Context, MiddlewareHandler } from "hono";
-import type { DataDriver } from "@rebasepro/types";
+import { type DataDriver } from "@rebasepro/types";
 import type { HonoEnv } from "../../api/types.js";
 import type { ApiKeyStore } from "./api-key-store.js";
+import type { ApiKeyMasked } from "./api-key-types.js";
 /**
  * Check whether a token looks like a Rebase API key.
  */
 export declare function isApiKeyToken(token: string): boolean;
+/** Who a verified key acts as, and what it may do. */
+export interface ApiKeyIdentity {
+    uid: string;
+    roles: string[];
+    scopes: string[];
+    apiKey: ApiKeyMasked;
+}
+/** A presented key that does not authenticate, and why. */
+export interface ApiKeyRefusal {
+    message: string;
+}
+/**
+ * Verify a presented key: it exists, is live, and — for a personal key —
+ * personal keys are on and its owner still exists. Records the use.
+ */
+export declare function resolveApiKey(store: ApiKeyStore, token: string): Promise<ApiKeyIdentity | ApiKeyRefusal>;
 /**
  * Options for the API key authentication handler.
  */
@@ -37,59 +51,46 @@ export interface ApiKeyAuthOptions {
     driver: DataDriver;
 }
 /**
- * Validate an API key token and populate the Hono context.
- *
- * Returns `true` if the key is valid and context has been populated,
- * or returns an error Response if the key is invalid.
+ * Validate an API key token and populate the Hono context: `user`, `apiKey`,
+ * `scopes` and the RLS-scoped `driver`.
  *
- * This is NOT a standalone middleware — it's called from within
- * `createAuthMiddleware()` when a `rk_` prefixed token is detected.
+ * Returns `true` when the context is populated, or the error Response.
  */
 export declare function validateApiKey(c: Context<HonoEnv>, token: string, options: ApiKeyAuthOptions): Promise<Response | true>;
 /**
- * Permission guard for API-key requests to the storage router.
- *
- * Storage previously did not accept API keys at all (`rk_` tokens were
- * misparsed as JWTs and 401'd). Now that the pre-auth middleware
- * authenticates them, this guard decides what they may do: the key needs a
- * `"storage"` permission entry (or the global `"*"` wildcard) covering the
- * operation derived from the HTTP method. Requests not authenticated via an
- * API key pass through to the storage router's own auth gates.
- *
- * TUS resumable-upload routes (`/tus`, `/tus/:id`) are classified as `write`
- * for EVERY method: the protocol's offset check is a GET and its cancel is a
- * DELETE, but both are steps of an upload — a write-scoped key must be able
- * to complete (and abort) its own resumable upload without also holding
- * `read`/`delete` on stored objects.
+ * The 403 for a credential that lacks a data-plane scope outside the REST
+ * generator (storage and functions). Names the scope that would grant it.
  */
-export declare function createStorageApiKeyGuard(): MiddlewareHandler<HonoEnv>;
+export declare function forbidScope(c: Context<HonoEnv>, scope: string, target?: string): Response;
 /**
- * Permission guard for API-key requests to the custom-functions router.
+ * Scope guard for the resumable-upload routes (`/tus/:id`).
  *
- * The collection permission guard lives in the REST generator and never sees
- * function routes, so before this middleware existed ANY valid API key —
- * however narrowly scoped — could invoke every custom function. This guard
- * closes that: API-key requests must hold a `"functions"`/`"functions/<name>"`
- * permission entry (or the global `"*"` wildcard) for the derived operation.
+ * Every step of an upload — the offset check (HEAD), the chunks (PATCH), the
+ * cancel (DELETE) — is part of writing it, so all of them need
+ * `storage:write`. Which source the upload writes to was checked when it was
+ * created; these steps only reach an upload the same caller owns.
+ */
+export declare function createTusScopeGuard(): MiddlewareHandler<HonoEnv>;
+/**
+ * Scope guard for the custom-functions router: a narrowed credential needs
+ * `functions:invoke` on the function it calls. The functions index — the
+ * listing at the mount point itself — needs the unqualified scope.
  *
- * Non-API-key requests (JWT, service key, anonymous) pass through untouched —
- * functions decide their own auth for those, as before.
+ * People pass: what a person may do inside a function is the function's own
+ * business, as it always was.
  *
  * @param mountPrefix - The path the functions router is mounted at
  *                      (e.g. `/api/functions`), used to extract the function
  *                      name from the request path.
  */
-export declare function createFunctionApiKeyGuard(mountPrefix: string): MiddlewareHandler<HonoEnv>;
+export declare function createFunctionScopeGuard(mountPrefix: string): MiddlewareHandler<HonoEnv>;
 /**
- * Standalone pre-auth middleware for `rk_` bearer tokens.
+ * Pre-auth middleware for `rk_` bearer tokens.
  *
- * Routers whose auth gate is JWT-based (`requireAuth` / `createRequireAuth` —
- * the admin surfaces: admin users/roles, api-keys management, cron, backups,
- * logs, schema editor) don't know about API keys. Mounting this middleware in
- * front of them authenticates `rk_` tokens and populates the request context;
- * the downstream gates then see the already-resolved user and apply their
- * role checks (`requireAdmin`) as usual — so an `admin: true` key passes and
- * a non-admin key is rejected with 403.
+ * Routers whose auth gate is JWT-based (`createRequireAuth` — the admin
+ * surfaces, the key routes) don't know about API keys. Mounted in front of
+ * them, this authenticates `rk_` tokens and populates the request context; the
+ * downstream gates then see the already-resolved caller and check its scopes.
  *
  * Requests without an `rk_` bearer token pass through untouched. An invalid,
  * revoked, or expired `rk_` token is rejected here (401) rather than falling