@reddb-io/ui 0.3.4 → 0.3.5

package/dist/embed/index-C0FJgu3h.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-C0FJgu3h.js","sources":["../../src/lib/reddb/dev-console.ts","../../src/lib/build-info.ts","../../src/lib/reddb/server-capabilities.ts","../../src/lib/reddb/client.ts","../../src/lib/reddb/connection-provider.ts","../../src/lib/reddb/injected-client-provider.ts","../../src/lib/embed/index.ts"],"sourcesContent":["// Instrumented developer console (#128). A deliberately framework-agnostic,\n// rune-free observable store so the data layer (`RedClient`, transports) can\n// log every query and HTTP call *without* importing Svelte — the client seam\n// must not depend on the UI runtime. The Svelte panel bridges this store into\n// reactivity by subscribing and copying the snapshot into `$state`.\n//\n// Every entry is one round-trip the client made: the verb (HTTP method /\n// statement head), the target (path or endpoint), how long it took, how many\n// rows came back, and a *sanitized* payload — secrets are redacted before an\n// entry is ever stored, so a copy action can never leak a token.\n\n/** What kind of round-trip an entry records. */\nexport type ConsoleEntryKind = \"query\" | \"http\";\n\nexport interface ConsoleEntry {\n  /** Monotonic id, assigned on record. Stable for keying/dedup in the panel. */\n  id: number;\n  kind: ConsoleEntryKind;\n  /** HTTP method or statement head, e.g. `POST`, `GET`, `SELECT`. */\n  verb: string;\n  /** Endpoint path or logical target the call hit, e.g. `/query`. */\n  target: string;\n  /** Absolute wall-clock time the call started. */\n  startedAt: number;\n  /** Round-trip duration in milliseconds. */\n  durationMs: number;\n  /** True when the call succeeded (2xx / resolved). */\n  ok: boolean;\n  /** HTTP status code when one is known. */\n  status?: number;\n  /** Rows returned, when the response carries a row/record count. */\n  rowCount?: number;\n  /** Sanitized request payload or query text — copyable, never contains secrets. */\n  payload?: string;\n  /** Error text when the call failed. */\n  error?: string;\n}\n\n/** A record as handed to the store — the store owns `id`. */\nexport type ConsoleEntryInput = Omit<ConsoleEntry, \"id\">;\n\n/**\n * A per-entry tap on the console. Unlike `subscribe` (which observes the whole\n * snapshot for rendering), a sink receives each entry exactly once, as it is\n * recorded — the shape an embedding host wants for mirroring red-ui's traffic\n * into its own developer console.\n */\nexport type ConsoleSink = (entry: ConsoleEntry) => void;\n\ntype Listener = (entries: readonly ConsoleEntry[]) => void;\n\n/** Keys whose values are always masked, matched case-insensitively as substrings. */\nconst SENSITIVE_KEY_RE =\n  /pass(word)?|secret|token|api[-_]?key|authorization|auth|credential|cookie|session|bearer|private[-_]?key|mfa/i;\n\nconst REDACTED = \"«redacted»\";\n\n/**\n * Recursively redact sensitive values from an arbitrary structure, returning a\n * plain clone safe to stringify. A value under a sensitive key is replaced with\n * a marker rather than dropped, so the reader still sees *that* a field existed.\n * Depth- and breadth-bounded so a pathological payload can't blow the console.\n */\nexport function redactSecrets(value: unknown, depth = 0): unknown {\n  if (depth > 6) return \"«…»\";\n  if (Array.isArray(value)) {\n    return value.slice(0, 100).map((v) => redactSecrets(v, depth + 1));\n  }\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      out[k] = SENSITIVE_KEY_RE.test(k)\n        ? REDACTED\n        : redactSecrets(v, depth + 1);\n    }\n    return out;\n  }\n  return value;\n}\n\n/**\n * Turn a request body (a JSON string, an object, or anything else) into a\n * sanitized, human-readable string for the entry's copyable payload. Parses\n * JSON so keys can be redacted; falls back to a truncated raw string when the\n * body isn't JSON. Returns `undefined` for an absent body.\n */\nexport function sanitizePayload(body: unknown): string | undefined {\n  if (body === undefined || body === null) return undefined;\n  let parsed: unknown = body;\n  if (typeof body === \"string\") {\n    if (body.length === 0) return undefined;\n    try {\n      parsed = JSON.parse(body);\n    } catch {\n      return body.length > 2000 ? `${body.slice(0, 2000)}…` : body;\n    }\n  }\n  try {\n    const json = JSON.stringify(redactSecrets(parsed), null, 2);\n    return json.length > 4000 ? `${json.slice(0, 4000)}…` : json;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * The developer console log. A bounded ring of entries with a minimal\n * subscribe/emit surface — no framework, no runes. `record` is the single\n * write path the client seam calls; `subscribe` is how the panel observes.\n */\nexport class DevConsoleStore {\n  private entries: ConsoleEntry[] = [];\n  private readonly listeners = new Set<Listener>();\n  private readonly sinks = new Set<ConsoleSink>();\n  private nextId = 1;\n\n  /** Cap on retained entries; oldest are dropped past this. */\n  constructor(private readonly capacity = 500) {}\n\n  /** Append one round-trip. Assigns the id, trims to capacity, notifies. */\n  record(input: ConsoleEntryInput): ConsoleEntry {\n    const entry: ConsoleEntry = { ...input, id: this.nextId++ };\n    this.entries.push(entry);\n    if (this.entries.length > this.capacity) {\n      this.entries.splice(0, this.entries.length - this.capacity);\n    }\n    this.emit();\n    for (const sink of this.sinks) {\n      try {\n        sink(entry);\n      } catch {\n        // A host-owned sink must never be able to break the client seam.\n      }\n    }\n    return entry;\n  }\n\n  /**\n   * Tap every future entry. Entries recorded before the sink was added are\n   * not replayed — a host mirrors live traffic, it doesn't import history.\n   * Returns an unsubscribe.\n   */\n  addSink(sink: ConsoleSink): () => void {\n    this.sinks.add(sink);\n    return () => {\n      this.sinks.delete(sink);\n    };\n  }\n\n  /** A frozen, newest-last snapshot of the log. */\n  snapshot(): readonly ConsoleEntry[] {\n    return this.entries.slice();\n  }\n\n  /** Number of retained entries. */\n  get size(): number {\n    return this.entries.length;\n  }\n\n  /** Drop every entry and notify. */\n  clear(): void {\n    if (this.entries.length === 0) return;\n    this.entries = [];\n    this.emit();\n  }\n\n  /**\n   * Observe the log. The listener fires immediately with the current snapshot\n   * and again on every change. Returns an unsubscribe.\n   */\n  subscribe(listener: Listener): () => void {\n    this.listeners.add(listener);\n    listener(this.snapshot());\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  private emit(): void {\n    const snap = this.snapshot();\n    for (const listener of this.listeners) listener(snap);\n  }\n}\n\n/** The singleton the client seam records into and the panel observes. */\nexport const devConsole = new DevConsoleStore();\n","// Single source of truth for \"what version am I\" across the Web/PWA, the\n// Embeddable Lib, and the Tauri desktop webview (which all run this same\n// bundle). Mirrors ../red-skills/src/packages/build-info: the version is\n// injected at build time by Vite `define` (see vite.config.ts /\n// vite.embed.config.ts) from `packages/ui/package.json` — overridable by the\n// `RED_BUILD_VERSION` env the release CI sets from the git tag. Falls back to\n// `0.0.0-dev` for an un-stamped local dev build.\n\ndeclare const __RED_UI_VERSION__: string | undefined;\ndeclare const __RED_UI_GIT_SHA__: string | undefined;\ndeclare const __RED_UI_BUILD_TIME__: string | undefined;\n\nexport interface BuildInfo {\n  version: string;\n  gitSha: string;\n  buildTime: string;\n}\n\nfunction injected(read: () => string | undefined): string | undefined {\n  try {\n    const v = read();\n    return typeof v === \"string\" && v.length > 0 ? v : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction stripTagPrefix(v: string): string {\n  return v.startsWith(\"v\") ? v.slice(1) : v;\n}\n\nexport function readBuildInfo(): BuildInfo {\n  return {\n    version: stripTagPrefix(injected(() => __RED_UI_VERSION__) ?? \"0.0.0-dev\"),\n    gitSha: injected(() => __RED_UI_GIT_SHA__) ?? \"unknown\",\n    buildTime: injected(() => __RED_UI_BUILD_TIME__) ?? \"unknown\",\n  };\n}\n\n/** The resolved app version, e.g. `0.1.1` (or `0.0.0-dev` un-stamped). */\nexport const RED_UI_VERSION: string = readBuildInfo().version;\n","// Server-version capability negotiation (#22). One UI build talks to many\n// reddb server versions: rather than assume every endpoint exists, the UI\n// resolves a capability map for the active connection and HIDES controls the\n// server can't honour (absent, not greyed — the permission-aware rule).\n//\n// Resolution prefers a STABLE server signal (`GET /capabilities`) over\n// inferring from 404s, and FAILS SAFE — any uncertainty resolves to \"not\n// supported\" so a newer UI never assumes a capability a server lacks.\n\n/** The feature flags the UI gates controls on. Extend as features are added. */\nexport interface ServerCapabilities {\n  /** Version control (commits / diffs) — `/repo/commits`, `/collections/:n/vcs`. */\n  vcs: boolean\n  /** Cluster topology + status — `/cluster/status`. */\n  clusterStatus: boolean\n  /** Per-collection metadata route — `GET /collections/:name`. */\n  collectionMetadata: boolean\n  /** Server-sent change stream — `/changes/stream`. */\n  cdcStream: boolean\n}\n\n/** Fail-safe baseline: nothing is assumed present until proven. */\nexport const EMPTY_SERVER_CAPABILITIES: ServerCapabilities = Object.freeze({\n  vcs: false,\n  clusterStatus: false,\n  collectionMetadata: false,\n  cdcStream: false,\n})\n\n/** Shape of the optional stable `/capabilities` signal. */\nexport interface RawCapabilities {\n  ok?: boolean\n  /** Flat feature names, e.g. [\"vcs\",\"cluster_status\"]. */\n  features?: string[]\n  /** Or an explicit flag map, e.g. { vcs: true }. */\n  capabilities?: Record<string, boolean>\n}\n\n// Server feature names → our capability keys. Several aliases per key so we\n// tolerate naming drift across server versions without a UI release.\nconst FEATURE_ALIASES: Record<string, keyof ServerCapabilities> = {\n  vcs: 'vcs',\n  versioning: 'vcs',\n  version_control: 'vcs',\n  cluster: 'clusterStatus',\n  cluster_status: 'clusterStatus',\n  collection_metadata: 'collectionMetadata',\n  collections_metadata: 'collectionMetadata',\n  cdc: 'cdcStream',\n  changes_stream: 'cdcStream',\n  cdc_stream: 'cdcStream',\n}\n\n/**\n * Build a capability map from the stable `/capabilities` signal. Unknown\n * feature names are ignored (a server advertising features this UI version\n * doesn't model is harmless); known ones flip their flag on. The explicit\n * `capabilities` map, when present, takes precedence over the `features` list.\n */\nexport function capabilitiesFromSignal(raw: RawCapabilities): ServerCapabilities {\n  const out: ServerCapabilities = { ...EMPTY_SERVER_CAPABILITIES }\n  for (const name of raw.features ?? []) {\n    const key = FEATURE_ALIASES[name?.toLowerCase?.() ?? '']\n    if (key) out[key] = true\n  }\n  for (const [name, on] of Object.entries(raw.capabilities ?? {})) {\n    const key = FEATURE_ALIASES[name.toLowerCase()]\n    if (key) out[key] = on === true\n  }\n  return out\n}\n","// Real HTTP client for a running reddb instance.\n// Endpoints discovered from reddb/crates/reddb-server/src/server/routing.rs.\n\nimport {\n  capabilitiesFromSignal,\n  EMPTY_SERVER_CAPABILITIES,\n  type RawCapabilities,\n  type ServerCapabilities,\n} from \"./server-capabilities\";\nimport type {\n  PermissionCheck,\n  PermissionDecision,\n  PermissionResource,\n} from \"../permission-gate\";\nimport type { ClusterStatus, ReplicationStatus } from \"./cluster-status\";\nimport type { MetricDescriptor, PromResponse } from \"./analytics\";\nimport type { AskResponse, AskOptions } from \"./ask\";\nimport { devConsole, sanitizePayload } from \"./dev-console\";\n\nexport interface QueryRow {\n  values: Record<string, unknown>;\n  edges?: Record<string, unknown>;\n  nodes?: Record<string, unknown>;\n  paths?: unknown[];\n  vector_results?: Array<{\n    id?: number | string;\n    collection?: string;\n    distance?: number;\n    vector?: number[];\n    metadata?: Record<string, unknown>;\n    linked_node?: string;\n    linked_row?: [string, number];\n  }>;\n}\n\nexport interface QueryResult {\n  ok: boolean;\n  query: string;\n  capability?: string;\n  engine?: string;\n  mode?: string;\n  record_count: number;\n  result: { columns: string[]; records: QueryRow[] };\n  error?: string;\n  /** True when this result was assembled from the NDJSON streaming endpoint\n   *  (`POST /query/stream`) rather than the buffered `POST /query`. */\n  streamed?: boolean;\n  /** True when streaming stopped at `maxRows` and more rows remained on the\n   *  server (the cursor was cancelled). Surfaced so the UI never silently\n   *  drops rows. */\n  truncated?: boolean;\n}\n\n/** Result of collecting a read-only SELECT over the NDJSON streaming endpoint. */\nexport interface StreamedQueryResult {\n  columns: string[];\n  schemaFingerprint?: string;\n  rows: Array<Record<string, unknown>>;\n  rowCount: number;\n  /** Hit the `maxRows` cap with more rows still on the server. */\n  truncated: boolean;\n  /** Opaque resume token from the `cursor` frame, if one was emitted. */\n  cursor?: string;\n}\n\nexport interface CollectionMetadata {\n  ok?: boolean;\n  name: string;\n  kind?: string;\n  capability?: string;\n  capabilities?: string[];\n  schema?: Record<string, unknown>;\n  indexes?: Array<Record<string, unknown>>;\n  retention?: Record<string, unknown>;\n  tenant?: string;\n  actions?: Record<string, boolean | { allowed: boolean; reason?: string }>;\n}\n\nexport interface Stats {\n  active_connections: number;\n  idle_connections: number;\n  started_at_unix_ms: number;\n  store: {\n    collection_count: number;\n    cross_ref_count: number;\n    total_entities: number;\n    total_memory_bytes: number;\n  };\n  system: {\n    arch: string;\n    cpu_cores: number;\n    hostname: string;\n    os: string;\n    pid: number;\n    total_memory_bytes: number;\n    available_memory_bytes: number;\n  };\n  kv?: {\n    gets: number;\n    puts: number;\n    deletes: number;\n    cas_success: number;\n    cas_conflict: number;\n  };\n  /**\n   * Set by the server when the store is open read-only — e.g. an embedded file\n   * already held by an active writer (lock detection is owned by reddb). Absent\n   * when the server reports no read-only signal, in which case the UI shows no\n   * badge and behaves normally (#23). `read_only_reason` is an optional\n   * human-facing explanation for the badge tooltip.\n   */\n  read_only?: boolean;\n  read_only_reason?: string;\n}\n\nexport interface Whoami {\n  ok: boolean;\n  authenticated: boolean;\n  username: string;\n  role: string;\n  note?: string;\n}\n\nexport interface RedClientOptions {\n  headers?: HeadersInit;\n  fetch?: typeof fetch;\n}\n\nexport interface AuthUser {\n  username: string;\n  role?: string;\n  created_at?: number;\n  last_active?: number;\n  mfa?: boolean;\n}\n\nexport interface AuthTenant {\n  id?: string;\n  name?: string;\n  slug?: string;\n  role?: string;\n  grants?: string[];\n  created_at?: number;\n}\n\nexport interface AuthPolicy {\n  id?: string;\n  name?: string;\n  tenant?: string;\n  principal?: string;\n  resource?: string;\n  action?: string;\n  effect?: \"allow\" | \"deny\" | string;\n  description?: string;\n  created_at?: number;\n}\n\ninterface AuthCanResponse {\n  ok?: boolean;\n  results?: Array<Partial<PermissionDecision>>;\n  error?: string;\n}\n\nexport interface ChangeEvent {\n  lsn: number;\n  timestamp: number;\n  collection: string;\n  kind: string;\n  operation: \"insert\" | \"update\" | \"delete\" | \"refresh\";\n  rid?: number;\n}\n\nexport interface VcsEnvelope<T> {\n  ok: boolean;\n  result: T;\n  error?: string;\n}\n\nexport interface CollectionVcsState {\n  collection: string;\n  versioned: boolean;\n}\n\nexport interface VcsAuthor {\n  name: string;\n  email: string;\n}\n\nexport interface VcsCommit {\n  hash: string;\n  root_xid?: number;\n  parents: string[];\n  height?: number;\n  author?: VcsAuthor;\n  committer?: VcsAuthor;\n  message: string;\n  timestamp_ms: number;\n  signature?: string;\n}\n\nexport interface VcsDiffEntry {\n  collection: string;\n  entity_id: string;\n  change: \"added\" | \"removed\" | \"modified\" | string;\n  before?: unknown;\n  after?: unknown;\n}\n\nexport interface VcsDiff {\n  from: string;\n  to: string;\n  added: number;\n  removed: number;\n  modified: number;\n  entries: VcsDiffEntry[];\n}\n\nconst unsupportedCollectionMetadata = new Set<string>();\nconst collectionMetadataSupportProbe = new Map<string, Promise<boolean>>();\n\nfunction isUnsupportedCollectionMetadataRoute(e: unknown): boolean {\n  const message = e instanceof Error ? e.message : String(e);\n  return message.includes(\"route not found: GET /collections/\");\n}\n\n/**\n * Generalised \"the server doesn't have this route\" check (#22). `json()`\n * throws `<METHOD> <path> → <status> <body>`, so a 404 or a \"route not found\"\n * body both signal an unsupported route. Distinct from auth/5xx/network errors\n * — but capability negotiation treats *any* probe failure as unsupported\n * (fail safe), so this is only used to tell \"route absent\" from \"signal\n * present\" when reading the stable `/capabilities` endpoint.\n */\nfunction isUnsupportedRoute(e: unknown): boolean {\n  const message = e instanceof Error ? e.message : String(e);\n  return / → 404\\b/.test(message) || message.includes(\"route not found\");\n}\n\nfunction unsupportedCollectionMetadataError(baseUrl: string): Error {\n  return new Error(\n    `GET /collections/:name unsupported by this reddb server (${baseUrl})`\n  );\n}\n\nfunction isPermissionResource(value: unknown): value is PermissionResource {\n  if (!value || typeof value !== \"object\") return false;\n  const candidate = value as Partial<PermissionResource>;\n  return (\n    typeof candidate.kind === \"string\" &&\n    candidate.kind.length > 0 &&\n    typeof candidate.name === \"string\" &&\n    candidate.name.length > 0 &&\n    (candidate.tenant === undefined || typeof candidate.tenant === \"string\")\n  );\n}\n\n/** One NDJSON frame from `POST /query/stream`. Discriminated by its single key. */\ntype NdjsonFrame =\n  | {\n      descriptor: {\n        columns: Array<string | { name: string }>;\n        schema_fingerprint?: string;\n      };\n    }\n  | { cursor: { token: string; snapshot_lsn?: number; resumable?: boolean } }\n  | { row: Record<string, unknown> }\n  | { end: { row_count?: number } }\n  | { cancelled: Record<string, unknown> };\n\n/**\n * Parse a chunked `application/x-ndjson` body into one frame per line. Buffers\n * across chunk boundaries (a JSON object split over two TCP reads is emitted\n * exactly once, in order) and flushes a trailing newline-less line at EOF.\n */\nasync function* parseNdjsonFrames(\n  body: ReadableStream<Uint8Array>\n): AsyncGenerator<NdjsonFrame> {\n  const reader = body.getReader();\n  const decoder = new TextDecoder();\n  let buf = \"\";\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      buf += decoder.decode(value, { stream: true });\n      let nl: number;\n      while ((nl = buf.indexOf(\"\\n\")) !== -1) {\n        const line = buf.slice(0, nl).trim();\n        buf = buf.slice(nl + 1);\n        if (line) yield JSON.parse(line) as NdjsonFrame;\n      }\n    }\n    const tail = buf.trim();\n    if (tail) yield JSON.parse(tail) as NdjsonFrame;\n  } finally {\n    reader.releaseLock();\n  }\n}\n\nconst SELECT_RE = /^\\s*select\\b/i;\n\n/**\n * Pull a row count out of a parsed response for the developer console (#128).\n * Recognises the `/query` envelope (`record_count`, else the length of\n * `result.records`) and a bare array; returns `undefined` when the shape\n * carries no notion of rows. Purely structural — never throws.\n */\nexport function extractRowCount(data: unknown): number | undefined {\n  if (Array.isArray(data)) return data.length;\n  if (data && typeof data === \"object\") {\n    const d = data as {\n      record_count?: unknown;\n      result?: { records?: unknown };\n    };\n    if (typeof d.record_count === \"number\") return d.record_count;\n    if (Array.isArray(d.result?.records)) return d.result.records.length;\n  }\n  return undefined;\n}\n\n/**\n * Extract a human-readable message from any thrown value. Tauri's `invoke` and\n * the HTTP plugin reject with plain strings or bare objects (not `Error`), so\n * `(e as Error).message` is often `undefined` — this never returns that.\n */\nexport function errorText(e: unknown): string {\n  if (e instanceof Error) return e.message || String(e);\n  if (typeof e === \"string\") return e;\n  if (e && typeof e === \"object\") {\n    const m = (e as { message?: unknown }).message;\n    if (typeof m === \"string\" && m) return m;\n    try {\n      const s = JSON.stringify(e);\n      if (s && s !== \"{}\") return s;\n    } catch {\n      /* circular — fall through */\n    }\n  }\n  return String(e);\n}\n\n/**\n * Run a query, preferring the bounded-memory NDJSON stream for a plain SELECT\n * and falling back to the buffered `POST /query` for everything else — and for\n * any streaming failure (network, a non-SELECT 400, or an older server with no\n * `/query/stream` route returning 404). The fallback makes this strictly safe:\n * behaviour is identical to {@link RedClient.query} unless the server supports\n * streaming AND the statement is a SELECT, in which case the server streams\n * rows instead of buffering the whole result set.\n */\nexport async function runQueryPreferStream(\n  client: Pick<RedClient, \"query\" | \"queryStreamCollect\">,\n  sql: string,\n  opts: { maxRows?: number; signal?: AbortSignal } = {}\n): Promise<QueryResult> {\n  const queryOpts = opts.signal ? { signal: opts.signal } : undefined;\n  if (!SELECT_RE.test(sql))\n    return queryOpts ? client.query(sql, queryOpts) : client.query(sql);\n  try {\n    const s = await client.queryStreamCollect(sql, opts);\n    return {\n      ok: true,\n      query: sql,\n      record_count: s.rowCount,\n      result: {\n        columns: s.columns,\n        records: s.rows.map((row) =>\n          row.values &&\n          typeof row.values === \"object\" &&\n          (\"nodes\" in row ||\n            \"edges\" in row ||\n            \"paths\" in row ||\n            \"vector_results\" in row)\n            ? (row as unknown as QueryRow)\n            : { values: row }\n        ),\n      },\n      streamed: true,\n      truncated: s.truncated,\n    };\n  } catch (e) {\n    if (\n      opts.signal?.aborted ||\n      (e instanceof Error && e.name === \"AbortError\")\n    ) {\n      throw e;\n    }\n    return queryOpts ? client.query(sql, queryOpts) : client.query(sql);\n  }\n}\n\nexport class RedClient {\n  readonly baseUrl: string;\n  private readonly headers: HeadersInit | undefined;\n  private readonly fetcher: typeof fetch;\n\n  constructor(baseUrl: string, opts: RedClientOptions = {}) {\n    this.baseUrl = baseUrl.replace(/\\/$/, \"\");\n    this.headers = opts.headers;\n    this.fetcher = opts.fetch ?? fetch;\n  }\n\n  private async json<T>(path: string, init?: RequestInit): Promise<T> {\n    const url = `${this.baseUrl}${path}`;\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n    };\n    Object.assign(headers, this.headers as Record<string, string> | undefined);\n    Object.assign(headers, init?.headers as Record<string, string> | undefined);\n\n    // Developer console instrumentation (#128). Every HTTP call the client\n    // makes is timed and logged from this single seam, so every Surface is\n    // covered without touching each caller. The request body is sanitized\n    // before it lands in an entry — a copy action can never leak a secret.\n    const verb = init?.method ?? \"GET\";\n    const startedAt = Date.now();\n    const start = performance.now();\n    const payload = sanitizePayload(init?.body);\n    const elapsed = () => Math.round(performance.now() - start);\n\n    let res: Response;\n    try {\n      res = await this.fetcher(url, { ...init, headers });\n    } catch (e) {\n      devConsole.record({\n        kind: \"http\",\n        verb,\n        target: path,\n        startedAt,\n        durationMs: elapsed(),\n        ok: false,\n        payload,\n        error: errorText(e),\n      });\n      throw e;\n    }\n\n    if (!res.ok) {\n      const body = await res.text().catch(() => \"\");\n      const message = `${verb} ${path} → ${res.status} ${body.slice(0, 200)}`;\n      devConsole.record({\n        kind: \"http\",\n        verb,\n        target: path,\n        startedAt,\n        durationMs: elapsed(),\n        ok: false,\n        status: res.status,\n        payload,\n        error: message,\n      });\n      throw new Error(message);\n    }\n\n    const data = (await res.json()) as T;\n    const rowCount = extractRowCount(data);\n    devConsole.record({\n      // A response carrying a row count is a query round-trip; everything else\n      // is a plain HTTP call. This is how `/query` entries mark themselves.\n      kind: rowCount === undefined ? \"http\" : \"query\",\n      verb,\n      target: path,\n      startedAt,\n      durationMs: elapsed(),\n      ok: true,\n      status: res.status,\n      ...(rowCount === undefined ? {} : { rowCount }),\n      payload,\n    });\n    return data;\n  }\n\n  /** Exchange credentials for a session token. Neither value is persisted. */\n  async login(username: string, password: string): Promise<string> {\n    const endpoint = new URL(this.baseUrl);\n    if (\n      endpoint.username ||\n      endpoint.password ||\n      endpoint.search ||\n      endpoint.hash ||\n      (endpoint.protocol !== \"https:\" &&\n        !(\n          endpoint.protocol === \"http:\" &&\n          [\"localhost\", \"127.0.0.1\", \"[::1]\"].includes(endpoint.hostname)\n        ))\n    ) {\n      throw new Error(\"Use HTTPS to sign in to a remote database.\");\n    }\n    // Bypass query instrumentation: credentials and the session response must\n    // never enter the developer console, including an authentication failure.\n    const response = await this.fetcher(`${this.baseUrl}/auth/login`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      credentials: \"omit\",\n      redirect: \"error\",\n      body: JSON.stringify({ username, password }),\n    });\n    if (!response.ok)\n      throw new Error(\n        \"Database sign-in failed. Check your credentials and try again.\"\n      );\n    const session = await response.json();\n    if (\n      session.ok !== true ||\n      typeof session.token !== \"string\" ||\n      !session.token\n    ) {\n      throw new Error(\"The database did not return a session token.\");\n    }\n    return session.token;\n  }\n\n  async stats(): Promise<Stats> {\n    return this.json<Stats>(\"/stats\");\n  }\n\n  async clusterStatus(): Promise<ClusterStatus> {\n    return this.json<ClusterStatus>(\"/cluster/status\");\n  }\n\n  /**\n   * List registered metric descriptors from the typed `red.metrics`\n   * projection (reddb #747). One row per `CREATE METRIC`, carrying the\n   * `kind` (counter|gauge|histogram|ratio|derived) the UI uses to auto-select\n   * a chart. Returns `[]` when the server has no analytics surface.\n   */\n  async metricsCatalog(): Promise<MetricDescriptor[]> {\n    const r = await this.query(\n      \"SELECT path, kind, role, unit, supports_prometheus_query, created_at_ms FROM red.metrics\"\n    );\n    return r.result.records.map((rec) => {\n      const v = rec.values;\n      return {\n        path: String(v.path ?? \"\"),\n        kind: v.kind as MetricDescriptor[\"kind\"],\n        role: String(v.role ?? \"metric\"),\n        unit: (v.unit as string | null) ?? null,\n        supports_prometheus_query: v.supports_prometheus_query !== false,\n        created_at_ms:\n          typeof v.created_at_ms === \"number\" ? v.created_at_ms : undefined,\n      } satisfies MetricDescriptor;\n    });\n  }\n\n  /**\n   * Prometheus instant query (`GET /api/v1/query`). Returns the raw\n   * Prometheus-shaped envelope; callers normalise with `parsePromVector`.\n   */\n  async promQuery(query: string, time?: number): Promise<PromResponse> {\n    const qs = new URLSearchParams({ query });\n    if (time !== undefined) qs.set(\"time\", String(time));\n    return this.json<PromResponse>(`/api/v1/query?${qs}`);\n  }\n\n  /**\n   * Prometheus range query (`GET /api/v1/query_range`). `start`/`end` are unix\n   * seconds, `step` is the resolution in seconds. Normalise with\n   * `parsePromMatrix`.\n   */\n  async promQueryRange(\n    query: string,\n    start: number,\n    end: number,\n    step: number\n  ): Promise<PromResponse> {\n    const qs = new URLSearchParams({\n      query,\n      start: String(start),\n      end: String(end),\n      step: String(step),\n    });\n    return this.json<PromResponse>(`/api/v1/query_range?${qs}`);\n  }\n\n  async ping(): Promise<\n    { ok: true; rtt_ms: number } | { ok: false; error: string }\n  > {\n    const start = performance.now();\n    try {\n      await this.json(\"/stats\");\n      return { ok: true, rtt_ms: Math.round(performance.now() - start) };\n    } catch (e) {\n      return { ok: false, error: errorText(e) };\n    }\n  }\n\n  /**\n   * Resolve the server's capability map (#22). Prefers the stable\n   * `/capabilities` signal; when that route is absent (older server), infers\n   * from lightweight, side-effect-free GET probes. Any non-404 failure\n   * (network, auth, 5xx) fails safe to the empty map, so the UI hides controls\n   * rather than showing ones the server can't honour.\n   */\n  async capabilities(): Promise<ServerCapabilities> {\n    try {\n      const raw = await this.json<RawCapabilities>(\"/capabilities\");\n      return capabilitiesFromSignal(raw);\n    } catch (e) {\n      // Only an absent route falls through to inference; anything else (a\n      // flaky network, an auth wall, a 5xx) hides everything.\n      if (!isUnsupportedRoute(e)) return { ...EMPTY_SERVER_CAPABILITIES };\n    }\n    const [vcs, clusterStatus] = await Promise.all([\n      this.probeGet(\"/repo/commits?limit=1\"),\n      this.probeGet(\"/cluster/status\"),\n    ]);\n    return { ...EMPTY_SERVER_CAPABILITIES, vcs, clusterStatus };\n  }\n\n  /** True iff a GET to `path` succeeds; any failure (404/auth/5xx/network) is\n   *  treated as unsupported — the fail-safe-to-hide rule of #22. */\n  private async probeGet(path: string): Promise<boolean> {\n    try {\n      await this.json(path);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async collections(): Promise<string[]> {\n    const r = await this.json<{ collections: string[] }>(\"/collections\");\n    return r.collections;\n  }\n\n  async collection(name: string): Promise<CollectionMetadata> {\n    if (unsupportedCollectionMetadata.has(this.baseUrl)) {\n      throw unsupportedCollectionMetadataError(this.baseUrl);\n    }\n\n    const path = `/collections/${encodeURIComponent(name)}`;\n    const inFlightProbe = collectionMetadataSupportProbe.get(this.baseUrl);\n    if (inFlightProbe) {\n      const supported = await inFlightProbe;\n      if (!supported) throw unsupportedCollectionMetadataError(this.baseUrl);\n      return this.json<CollectionMetadata>(path);\n    }\n\n    let resolveProbe: (supported: boolean) => void;\n    const probe = new Promise<boolean>((resolve) => {\n      resolveProbe = resolve;\n    });\n    collectionMetadataSupportProbe.set(this.baseUrl, probe);\n\n    try {\n      const metadata = await this.json<CollectionMetadata>(path);\n      resolveProbe!(true);\n      return metadata;\n    } catch (e) {\n      if (isUnsupportedCollectionMetadataRoute(e)) {\n        unsupportedCollectionMetadata.add(this.baseUrl);\n        resolveProbe!(false);\n      } else {\n        resolveProbe!(true);\n      }\n      throw e;\n    } finally {\n      collectionMetadataSupportProbe.delete(this.baseUrl);\n    }\n  }\n\n  async createCollection(name: string): Promise<void> {\n    await this.json(\"/collections\", {\n      method: \"POST\",\n      body: JSON.stringify({ name }),\n    });\n  }\n\n  async insertDocument(\n    collection: string,\n    doc: Record<string, unknown>\n  ): Promise<{ id: number }> {\n    return this.json<{ id: number }>(\n      `/collections/${encodeURIComponent(collection)}/documents`,\n      {\n        method: \"POST\",\n        body: JSON.stringify(doc),\n      }\n    );\n  }\n\n  async query(\n    query: string,\n    opts: { signal?: AbortSignal } = {}\n  ): Promise<QueryResult> {\n    return this.json<QueryResult>(\"/query\", {\n      method: \"POST\",\n      body: JSON.stringify({ query }),\n      signal: opts.signal,\n    });\n  }\n\n  /**\n   * Stream a read-only SELECT through `POST /query/stream` (NDJSON, chunked).\n   * The server emits rows through a bounded-memory channel — it never buffers\n   * the whole result — and we collect up to `maxRows` (default 10 000) before\n   * cancelling the server cursor. The NDJSON frame order is fixed\n   * (`descriptor` → `cursor` → `row`* → `end`|`cancelled`), verified against\n   * ../reddb/docs/api/query-streaming.md.\n   *\n   * Throws for a non-SELECT (server `400 stream_unsupported_statement`) and for\n   * an absent route on an older server (`404`) — callers fall back to\n   * {@link query}. Browser-reachable: this is `fetch` + `ReadableStream`, not\n   * `EventSource` (the endpoint is POST-based).\n   */\n  async queryStreamCollect(\n    query: string,\n    opts: { maxRows?: number; signal?: AbortSignal } = {}\n  ): Promise<StreamedQueryResult> {\n    const maxRows = opts.maxRows ?? 10_000;\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      Accept: \"application/x-ndjson\",\n    };\n    Object.assign(headers, this.headers as Record<string, string> | undefined);\n\n    // Developer console instrumentation (#128). The streaming endpoint skips\n    // `json()`, so it logs its own query round-trip here (verb `POST`, target\n    // `/query/stream`) with the collected row count.\n    const startedAt = Date.now();\n    const start = performance.now();\n    const body = JSON.stringify({ query });\n    const payload = sanitizePayload(body);\n    const elapsed = () => Math.round(performance.now() - start);\n\n    let res: Response;\n    try {\n      res = await this.fetcher(`${this.baseUrl}/query/stream`, {\n        method: \"POST\",\n        headers,\n        body,\n        signal: opts.signal,\n      });\n    } catch (e) {\n      devConsole.record({\n        kind: \"query\",\n        verb: \"POST\",\n        target: \"/query/stream\",\n        startedAt,\n        durationMs: elapsed(),\n        ok: false,\n        payload,\n        error: errorText(e),\n      });\n      throw e;\n    }\n    if (!res.ok || !res.body) {\n      const errBody = res.body ? await res.text().catch(() => \"\") : \"\";\n      const message = `POST /query/stream → ${res.status} ${errBody.slice(0, 200)}`;\n      devConsole.record({\n        kind: \"query\",\n        verb: \"POST\",\n        target: \"/query/stream\",\n        startedAt,\n        durationMs: elapsed(),\n        ok: false,\n        status: res.status,\n        payload,\n        error: message,\n      });\n      throw new Error(message);\n    }\n\n    const out: StreamedQueryResult = {\n      columns: [],\n      rows: [],\n      rowCount: 0,\n      truncated: false,\n    };\n\n    for await (const frame of parseNdjsonFrames(res.body)) {\n      if (\"descriptor\" in frame) {\n        out.columns = (frame.descriptor.columns ?? []).map((column) =>\n          typeof column === \"string\" ? column : column.name\n        );\n        out.schemaFingerprint = frame.descriptor.schema_fingerprint;\n      } else if (\"cursor\" in frame) {\n        out.cursor = frame.cursor.token;\n      } else if (\"row\" in frame) {\n        if (out.rows.length >= maxRows) {\n          out.truncated = true;\n          break;\n        }\n        out.rows.push(frame.row);\n        out.rowCount = out.rows.length;\n      } else if (\"end\" in frame || \"cancelled\" in frame) {\n        break;\n      }\n    }\n\n    devConsole.record({\n      kind: \"query\",\n      verb: \"POST\",\n      target: \"/query/stream\",\n      startedAt,\n      durationMs: elapsed(),\n      ok: true,\n      status: res.status,\n      rowCount: out.rowCount,\n      payload,\n    });\n\n    // We stopped early with more rows on the server — release the pinned cursor.\n    if (out.truncated && out.cursor) {\n      await this.cancelQueryStream(out.cursor).catch(() => {\n        // best-effort: the cursor TTL reclaims it anyway.\n      });\n    }\n    return out;\n  }\n\n  /** Cancel a streaming-query cursor server-side (`POST /query/stream/cancel`). */\n  async cancelQueryStream(cursor: string): Promise<void> {\n    await this.json(\"/query/stream/cancel\", {\n      method: \"POST\",\n      body: JSON.stringify({ cursor }),\n    }).catch(() => undefined);\n  }\n\n  async collectionVcs(name: string): Promise<CollectionVcsState> {\n    const r = await this.json<VcsEnvelope<CollectionVcsState>>(\n      `/collections/${encodeURIComponent(name)}/vcs`\n    );\n    return r.result;\n  }\n\n  async setCollectionVcs(\n    name: string,\n    versioned: boolean\n  ): Promise<CollectionVcsState> {\n    const r = await this.json<VcsEnvelope<CollectionVcsState>>(\n      `/collections/${encodeURIComponent(name)}/vcs`,\n      {\n        method: \"PUT\",\n        body: JSON.stringify({ versioned }),\n      }\n    );\n    return r.result;\n  }\n\n  async commits(\n    opts: {\n      from?: string;\n      to?: string;\n      branch?: string;\n      limit?: number;\n      skip?: number;\n      noMerges?: boolean;\n    } = {}\n  ): Promise<VcsCommit[]> {\n    const qs = new URLSearchParams();\n    if (opts.from) qs.set(\"from\", opts.from);\n    if (opts.to) qs.set(\"to\", opts.to);\n    if (opts.branch) qs.set(\"branch\", opts.branch);\n    if (opts.limit !== undefined) qs.set(\"limit\", String(opts.limit));\n    if (opts.skip !== undefined) qs.set(\"skip\", String(opts.skip));\n    if (opts.noMerges !== undefined) qs.set(\"no_merges\", String(opts.noMerges));\n    const suffix = qs.toString() ? `?${qs}` : \"\";\n    const r = await this.json<VcsEnvelope<VcsCommit[]>>(\n      `/repo/commits${suffix}`\n    );\n    return r.result;\n  }\n\n  async commitDiff(\n    from: string,\n    to: string,\n    opts: { collection?: string; summary?: boolean } = {}\n  ): Promise<VcsDiff> {\n    const qs = new URLSearchParams();\n    if (opts.collection) qs.set(\"collection\", opts.collection);\n    if (opts.summary !== undefined) qs.set(\"summary\", String(opts.summary));\n    const suffix = qs.toString() ? `?${qs}` : \"\";\n    const r = await this.json<VcsEnvelope<VcsDiff>>(\n      `/repo/commits/${encodeURIComponent(from)}/diff/${encodeURIComponent(to)}${suffix}`\n    );\n    return r.result;\n  }\n\n  async replication(): Promise<ReplicationStatus> {\n    return this.json<ReplicationStatus>(\"/replication/status\").catch(() => ({\n      ok: false,\n      role: \"standalone\" as const,\n    }));\n  }\n\n  async whoami(): Promise<Whoami> {\n    return this.json<Whoami>(\"/auth/whoami\");\n  }\n\n  /**\n   * Grounded natural-language query (`POST /ai/ask`, ADR 0013). Returns the\n   * synthesised answer plus the `sources_flat` it was grounded on and the\n   * `[^N]` citations linking claims to sources. Requires the server's AI\n   * provider to be configured; an unconfigured server answers with an error\n   * status (surfaced by `json()`).\n   */\n  async ask(question: string, opts: AskOptions = {}): Promise<AskResponse> {\n    return this.json<AskResponse>(\"/ai/ask\", {\n      method: \"POST\",\n      body: JSON.stringify({ question, ...opts }),\n    });\n  }\n\n  async users(): Promise<AuthUser[]> {\n    const r = await this.json<{ ok: boolean; users: AuthUser[] }>(\n      \"/auth/users\"\n    );\n    return r.users;\n  }\n\n  async tenants(): Promise<AuthTenant[]> {\n    const r = await this.json<{ ok: boolean; tenants: AuthTenant[] }>(\n      \"/auth/tenants\"\n    );\n    return r.tenants ?? [];\n  }\n\n  async policies(): Promise<AuthPolicy[]> {\n    const r = await this.json<{ ok: boolean; policies: AuthPolicy[] }>(\n      \"/auth/policies\"\n    );\n    return r.policies ?? [];\n  }\n\n  async authCan(checks: PermissionCheck[]): Promise<PermissionDecision[]> {\n    const r = await this.json<AuthCanResponse>(\"/auth/can\", {\n      method: \"POST\",\n      body: JSON.stringify({ checks }),\n    });\n    if (!Array.isArray(r.results)) {\n      throw new Error(r.error ?? \"POST /auth/can returned no results\");\n    }\n    return checks.map((check, index) => {\n      const result = r.results?.[index] ?? {};\n      const resource = isPermissionResource(result.resource)\n        ? result.resource\n        : check.resource;\n      return {\n        action:\n          typeof result.action === \"string\" ? result.action : check.action,\n        resource,\n        current_tenant:\n          typeof result.current_tenant === \"string\"\n            ? result.current_tenant\n            : check.current_tenant,\n        allowed: result.allowed === true,\n        reason: typeof result.reason === \"string\" ? result.reason : undefined,\n      };\n    });\n  }\n\n  async changes(\n    sinceLsn?: number,\n    opts: { collection?: string; limit?: number } = {}\n  ): Promise<ChangeEvent[]> {\n    const qs = new URLSearchParams();\n    if (sinceLsn !== undefined) qs.set(\"since_lsn\", String(sinceLsn));\n    if (opts.limit !== undefined) qs.set(\"limit\", String(opts.limit));\n    const suffix = qs.toString() ? `?${qs}` : \"\";\n    const r = await this.json<{ events: ChangeEvent[] }>(\"/changes\" + suffix);\n    const events = r.events ?? [];\n    return opts.collection\n      ? events.filter((e) => e.collection === opts.collection)\n      : events;\n  }\n\n  // Convenience: turn a /query response into plain row objects.\n  async rows(query: string): Promise<Array<Record<string, unknown>>> {\n    const r = await this.query(query);\n    return r.result.records.map((rec) => rec.values);\n  }\n}\n","// ConnectionProvider — deep module: the UI's only seam for \"how do I\n// discover and select databases?\". Local OSS lives behind LocalUrlProvider;\n// cloud SSO (ReddbIoSsoProvider) will land in a separate slice without\n// touching the consumers.\n\nimport type { RedClient } from './client'\nimport type { Transport } from './types'\nimport type { BootParams } from './boot-params'\n\nexport type ConnectionRole = 'primary' | 'replica' | 'embedded'\n\nexport interface Connection {\n  id: string\n  label: string\n  url: string\n  role?: ConnectionRole\n  description?: string\n}\n\nexport interface Identity {\n  authenticated: boolean\n  username: string\n  role: string\n}\n\nexport interface ActiveConnection {\n  connection: Connection\n  client: RedClient\n  rtt_ms: number\n}\n\nexport interface ConnectionProvider {\n  list(): Promise<Connection[]>\n  connect(id: string): Promise<ActiveConnection>\n  whoami(): Promise<Identity>\n  /**\n   * The wire transports this provider can actually materialize on its Surface\n   * (#34, ADR-0003). The Connect UI offers only these, so the user never picks\n   * a transport that fails. Optional: a provider that omits it is treated as\n   * browser-reachable (http/https + coerced red://) by the consumer.\n   */\n  transports?(): Transport[]\n\n  /**\n   * Non-secret connection config seeded by the Surface (#36, ADR-0005) — the\n   * endpoint and initial view from the app URL. The Core reads it through this\n   * seam (not a special MCP branch) to connect without the Connect flow.\n   * Tokens never appear here. Returns null when nothing was seeded.\n   */\n  bootParams?(): BootParams | null\n}\n\nexport class UnknownConnectionError extends Error {\n  constructor(public readonly id: string) {\n    super(`Unknown connection: ${id}`)\n    this.name = 'UnknownConnectionError'\n  }\n}\n\nexport class NotConnectedError extends Error {\n  constructor() {\n    super('No active connection — call connect() first')\n    this.name = 'NotConnectedError'\n  }\n}\n\nexport class UnreachableConnectionError extends Error {\n  constructor(public readonly id: string, public readonly reason: string) {\n    super(`Connection ${id} unreachable: ${reason}`)\n    this.name = 'UnreachableConnectionError'\n  }\n}\n","// InjectedClientProvider — the embed-Surface implementation of\n// ConnectionProvider. The embedding host owns auth (ADR-0001 / ADR-0005): it\n// constructs and authenticates a RedClient, then hands it to the Core. The\n// Core stays agnostic — it acquires its client through the same\n// ConnectionProvider seam as the PWA/Desktop Surfaces, never knowing whether\n// the connection came from a Connect flow or from its host.\n//\n// Unlike LocalUrlProvider this is a *single-connection* provider: there is no\n// discovery, no history, no Connect flow. `list()` surfaces exactly one\n// connection and `connect()` returns the host-supplied client immediately. A\n// ping only measures RTT for the status bar — a failed probe does NOT block\n// the mount, because the host vouches for the client it injected.\n\nimport type { RedClient } from './client'\nimport {\n  NotConnectedError,\n  UnknownConnectionError,\n  type ActiveConnection,\n  type Connection,\n  type ConnectionProvider,\n  type Identity,\n} from './connection-provider'\n\nexport interface InjectedClientOptions {\n  /** The host-supplied, already-authenticated client. */\n  client: RedClient\n  /** UI metadata for the single connection this provider exposes. */\n  connection?: Partial<Connection>\n}\n\nexport class InjectedClientProvider implements ConnectionProvider {\n  private readonly client: RedClient\n  /** The sole connection this provider resolves. */\n  readonly connection: Connection\n  private connected = false\n\n  constructor(opts: InjectedClientOptions) {\n    this.client = opts.client\n    this.connection = {\n      id: opts.connection?.id ?? 'host',\n      label: opts.connection?.label ?? 'Host connection',\n      url: opts.connection?.url ?? '',\n      role: opts.connection?.role ?? 'primary',\n      description: opts.connection?.description ?? 'Injected by the embedding host.',\n    }\n  }\n\n  async list(): Promise<Connection[]> {\n    return [this.connection]\n  }\n\n  /**\n   * Resolve the single host connection. Any other id throws\n   * UnknownConnectionError — there is nothing else to connect to. The probe is\n   * best-effort: an unreachable host still yields an ActiveConnection (rtt 0)\n   * rather than rejecting, since the host owns the client's lifecycle.\n   */\n  async connect(id: string): Promise<ActiveConnection> {\n    if (id !== this.connection.id) throw new UnknownConnectionError(id)\n    let rtt_ms = 0\n    try {\n      const ping = await this.client.ping()\n      if (ping.ok) rtt_ms = ping.rtt_ms\n    } catch {\n      /* host vouches for the client — surface rtt 0, don't block the mount */\n    }\n    this.connected = true\n    return { connection: this.connection, client: this.client, rtt_ms }\n  }\n\n  async whoami(): Promise<Identity> {\n    if (!this.connected) throw new NotConnectedError()\n    const w = await this.client.whoami()\n    return { authenticated: w.authenticated, username: w.username, role: w.role }\n  }\n}\n","import appCss from \"../../app.css?inline\";\nimport type { Component } from \"svelte\";\nimport type { ConnectionProvider, ConsoleSink } from \"../reddb\";\nimport { devConsole } from \"../reddb/dev-console\";\nimport type { Theme } from \"../theme.svelte\";\nimport { RED_UI_VERSION, readBuildInfo } from \"../build-info\";\n\n/** Build version of the embeddable bundle, stamped at build time. */\nexport { RED_UI_VERSION, readBuildInfo };\n\ndeclare global {\n  interface Window {\n    __RED_UI_EMBED_SURFACE__?: boolean;\n  }\n}\n\nexport {\n  InjectedClientProvider,\n  RedClient,\n  type Connection,\n  type ConnectionProvider,\n  type ConsoleEntry,\n  type ConsoleEntryKind,\n  type ConsoleSink,\n  type InjectedClientOptions,\n  type RedClientOptions,\n} from \"../reddb\";\n\nexport interface RedUiEmbedOptions {\n  connectionProvider: ConnectionProvider;\n  initialRoute?: string;\n  theme?: Theme;\n  shadowRoot?: ShadowRootInit;\n  /**\n   * Host tap on red-ui's developer console. When set, every query/HTTP\n   * round-trip the embedded Core records — verb, target, duration, row count,\n   * sanitized payload — is also delivered to the host, so a host app (e.g.\n   * red-request) can mirror red-ui's RQL/SQL traffic into its own developer\n   * bar. Entries are already secret-redacted before they reach the sink.\n   */\n  consoleSink?: ConsoleSink;\n}\n\nexport interface RedUiEmbedHandle {\n  host: HTMLElement;\n  shadowRoot: ShadowRoot;\n  portalTarget: HTMLElement;\n  destroy(): void;\n}\n\nexport type RedUiElementTagName = `${string}-${string}`;\n\nconst shadowCss = `\n:host {\n  display: block;\n  min-height: 720px;\n  color-scheme: light dark;\n  contain: content;\n  font-family: var(--font-sans);\n}\n\n:host,\n:host([data-theme='light']) {\n  --color-bg-0: #ffffff;\n  --color-bg-1: #fafafa;\n  --color-bg-2: #f4f4f5;\n  --color-bg-3: #e7e7ea;\n  --color-fg-0: #0a0a0b;\n  --color-fg-1: #3f3f46;\n  --color-fg-2: #52525b;\n  --color-fg-3: #71717a;\n  --color-line-1: #ececef;\n  --color-line-2: #d4d4d8;\n  --color-line-3: #a1a1aa;\n  --color-accent: #e11d48;\n  --color-accent-soft: rgba(225, 29, 72, 0.10);\n  --color-accent-glow: rgba(225, 29, 72, 0.30);\n  --color-ok: #16a34a;\n  --color-warn: #b45309;\n  --color-danger: #dc2626;\n  --color-info: #2563eb;\n  --color-role-primary: #e11d48;\n  --color-role-replica: #2563eb;\n  --color-role-embedded: #16a34a;\n  --color-ambient-glow: rgba(225, 29, 72, 0.04);\n  --shadow-md: 0 4px 12px rgba(15, 23, 42, 0.08), 0 0 0 1px var(--color-line-2);\n  --shadow-lg: 0 16px 48px rgba(15, 23, 42, 0.14), 0 0 0 1px var(--color-line-2);\n}\n\n:host([data-theme='dark']) {\n  --color-bg-0: #050607;\n  --color-bg-1: #0d0f13;\n  --color-bg-2: #181b21;\n  --color-bg-3: #232730;\n  --color-fg-0: #f7f8fa;\n  --color-fg-1: #c8ccd4;\n  --color-fg-2: #9ca1a9;\n  --color-fg-3: #7a7f87;\n  --color-line-1: #181b21;\n  --color-line-2: #2a2e36;\n  --color-line-3: #3d424b;\n  --color-accent: #ff2056;\n  --color-accent-soft: rgba(255, 32, 86, 0.12);\n  --color-accent-glow: rgba(255, 32, 86, 0.45);\n  --color-ok: #4ade80;\n  --color-warn: #fbbf24;\n  --color-danger: #ff5470;\n  --color-info: #60a5fa;\n  --color-role-primary: #ff2056;\n  --color-role-replica: #60a5fa;\n  --color-role-embedded: #4ade80;\n  --color-ambient-glow: rgba(255, 32, 86, 0.06);\n  --shadow-md: 0 4px 12px rgba(0, 0, 0, 0.4), 0 0 0 1px var(--color-line-2);\n  --shadow-lg: 0 16px 48px rgba(0, 0, 0, 0.6), 0 0 0 1px var(--color-line-2);\n}\n\n:host * {\n  box-sizing: border-box;\n}\n\n.red-ui-shadow-mount {\n  min-height: 720px;\n  background: var(--color-bg-0);\n  color: var(--color-fg-0);\n  font-family: var(--font-sans);\n  font-size: 13px;\n  line-height: 1.5;\n  -webkit-font-smoothing: antialiased;\n  text-rendering: optimizeLegibility;\n}\n\n[data-red-ui-shadow-portal] {\n  position: relative;\n  z-index: 2147483647;\n}\n`;\n\nfunction markEmbedSurface() {\n  if (typeof window !== \"undefined\") window.__RED_UI_EMBED_SURFACE__ = true;\n}\n\nexport async function mountRedUi(\n  host: HTMLElement,\n  opts: RedUiEmbedOptions\n): Promise<RedUiEmbedHandle> {\n  markEmbedSurface();\n  host.dataset.theme = opts.theme ?? host.dataset.theme ?? \"dark\";\n\n  const shadowRoot =\n    host.shadowRoot ?? host.attachShadow(opts.shadowRoot ?? { mode: \"open\" });\n  shadowRoot.textContent = \"\";\n\n  const style = document.createElement(\"style\");\n  style.textContent = `${appCss}\\n${shadowCss}`;\n\n  const mountTarget = document.createElement(\"div\");\n  mountTarget.className = \"red-ui-shadow-mount\";\n\n  const portalTarget = document.createElement(\"div\");\n  portalTarget.setAttribute(\"data-red-ui-shadow-portal\", \"\");\n\n  shadowRoot.append(style, mountTarget, portalTarget);\n\n  const [{ mount, unmount }, root] = await Promise.all([\n    import(\"svelte\"),\n    import(\"./RedUiEmbedRoot.svelte\") as Promise<{\n      default: Component<Record<string, unknown>>;\n    }>,\n  ]);\n\n  const instance = mount(root.default, {\n    target: mountTarget,\n    props: {\n      connectionProvider: opts.connectionProvider,\n      portalTarget,\n      shadowHost: host,\n      initialRoute: opts.initialRoute,\n      initialTheme: opts.theme,\n    },\n  });\n\n  const removeSink = opts.consoleSink\n    ? devConsole.addSink(opts.consoleSink)\n    : undefined;\n\n  return {\n    host,\n    shadowRoot,\n    portalTarget,\n    destroy: () => {\n      removeSink?.();\n      void unmount(instance);\n      shadowRoot.textContent = \"\";\n    },\n  };\n}\n\nexport class RedUiElement extends HTMLElement {\n  #connectionProvider: ConnectionProvider | null = null;\n  #consoleSink: ConsoleSink | null = null;\n  initialRoute: string | undefined;\n  theme: Theme | undefined;\n  #handle: RedUiEmbedHandle | null = null;\n  #mounting: Promise<void> | null = null;\n\n  /** Build version of the embedded bundle (also reflected as a `version`\n   *  attribute on connect, so a host can read `el.getAttribute('version')`). */\n  static readonly version = RED_UI_VERSION;\n  get version(): string {\n    return RED_UI_VERSION;\n  }\n\n  get connectionProvider(): ConnectionProvider | null {\n    return this.#connectionProvider;\n  }\n\n  set connectionProvider(provider: ConnectionProvider | null) {\n    this.#connectionProvider = provider;\n    if (this.isConnected) this.#mounting = this.#mount();\n  }\n\n  get consoleSink(): ConsoleSink | null {\n    return this.#consoleSink;\n  }\n\n  /**\n   * Host tap on the embedded Core's developer console (see\n   * `RedUiEmbedOptions.consoleSink`). Setting it after mount remounts, like\n   * `connectionProvider` — hosts normally assign both before attach.\n   */\n  set consoleSink(sink: ConsoleSink | null) {\n    this.#consoleSink = sink;\n    if (this.isConnected) this.#mounting = this.#mount();\n  }\n\n  connectedCallback() {\n    if (!this.hasAttribute(\"version\"))\n      this.setAttribute(\"version\", RED_UI_VERSION);\n    this.#mounting ??= this.#mount();\n  }\n\n  disconnectedCallback() {\n    this.#handle?.destroy();\n    this.#handle = null;\n    this.#mounting = null;\n  }\n\n  async #mount() {\n    if (!this.#connectionProvider) return;\n    this.#handle?.destroy();\n    this.#handle = await mountRedUi(this, {\n      connectionProvider: this.#connectionProvider,\n      initialRoute: this.initialRoute,\n      theme: this.theme,\n      consoleSink: this.#consoleSink ?? undefined,\n    });\n  }\n}\n\nexport function registerRedUiElement(\n  tagName: RedUiElementTagName = \"red-ui-app\"\n): typeof RedUiElement {\n  markEmbedSurface();\n  if (!customElements.get(tagName))\n    customElements.define(tagName, RedUiElement);\n  return customElements.get(tagName) as typeof RedUiElement;\n}\n"],"names":["SENSITIVE_KEY_RE","REDACTED","redactSecrets","value","depth","v","out","k","sanitizePayload","body","parsed","json","DevConsoleStore","capacity","__publicField","input","entry","sink","listener","snap","devConsole","injected","read","stripTagPrefix","readBuildInfo","RED_UI_VERSION","EMPTY_SERVER_CAPABILITIES","FEATURE_ALIASES","capabilitiesFromSignal","raw","name","key","_a","on","unsupportedCollectionMetadata","collectionMetadataSupportProbe","isUnsupportedCollectionMetadataRoute","e","isUnsupportedRoute","message","unsupportedCollectionMetadataError","baseUrl","isPermissionResource","candidate","parseNdjsonFrames","reader","decoder","buf","done","nl","line","tail","SELECT_RE","extractRowCount","data","d","errorText","m","s","runQueryPreferStream","client","sql","opts","queryOpts","row","RedClient","path","init","url","headers","verb","startedAt","start","payload","elapsed","res","rowCount","username","password","endpoint","response","session","rec","query","time","qs","end","step","vcs","clusterStatus","inFlightProbe","resolveProbe","probe","resolve","metadata","collection","doc","maxRows","errBody","frame","column","cursor","versioned","suffix","from","to","question","checks","r","check","index","result","resource","sinceLsn","events","UnknownConnectionError","id","NotConnectedError","UnreachableConnectionError","reason","InjectedClientProvider","_b","_c","_d","_e","rtt_ms","ping","w","shadowCss","markEmbedSurface","mountRedUi","host","shadowRoot","style","appCss","mountTarget","portalTarget","mount","unmount","root","n","instance","removeSink","RedUiElement","__privateAdd","_RedUiElement_instances","_connectionProvider","_consoleSink","_handle","_mounting","__privateGet","provider","__privateSet","__privateMethod","mount_fn","registerRedUiElement","tagName"],"mappings":";;;;;;;yz7cAoDMA,IACJ,iHAEIC,IAAW;AAQV,SAASC,EAAcC,GAAgBC,IAAQ,GAAY;AAChE,MAAIA,IAAQ,EAAG,QAAO;AACtB,MAAI,MAAM,QAAQD,CAAK;AACrB,WAAOA,EAAM,MAAM,GAAG,GAAG,EAAE,IAAI,CAACE,MAAMH,EAAcG,GAAGD,IAAQ,CAAC,CAAC;AAEnE,MAAID,KAAS,OAAOA,KAAU,UAAU;AACtC,UAAMG,IAA+B,CAAA;AACrC,eAAW,CAACC,GAAGF,CAAC,KAAK,OAAO,QAAQF,CAAgC;AAClE,MAAAG,EAAIC,CAAC,IAAIP,EAAiB,KAAKO,CAAC,IAC5BN,IACAC,EAAcG,GAAGD,IAAQ,CAAC;AAEhC,WAAOE;AAAA,EACT;AACA,SAAOH;AACT;AAQO,SAASK,EAAgBC,GAAmC;AACjE,MAA0BA,KAAS,KAAM;AACzC,MAAIC,IAAkBD;AACtB,MAAI,OAAOA,KAAS,UAAU;AAC5B,QAAIA,EAAK,WAAW,EAAG;AACvB,QAAI;AACF,MAAAC,IAAS,KAAK,MAAMD,CAAI;AAAA,IAC1B,QAAQ;AACN,aAAOA,EAAK,SAAS,MAAO,GAAGA,EAAK,MAAM,GAAG,GAAI,CAAC,MAAMA;AAAA,IAC1D;AAAA,EACF;AACA,MAAI;AACF,UAAME,IAAO,KAAK,UAAUT,EAAcQ,CAAM,GAAG,MAAM,CAAC;AAC1D,WAAOC,EAAK,SAAS,MAAO,GAAGA,EAAK,MAAM,GAAG,GAAI,CAAC,MAAMA;AAAA,EAC1D,QAAQ;AACN;AAAA,EACF;AACF;AAOO,MAAMC,EAAgB;AAAA;AAAA,EAO3B,YAA6BC,IAAW,KAAK;AANrC,IAAAC,EAAA,iBAA0B,CAAA;AACjB,IAAAA,EAAA,uCAAgB,IAAA;AAChB,IAAAA,EAAA,mCAAY,IAAA;AACrB,IAAAA,EAAA,gBAAS;AAGY,SAAA,WAAAD;AAAA,EAAiB;AAAA;AAAA,EAG9C,OAAOE,GAAwC;AAC7C,UAAMC,IAAsB,EAAE,GAAGD,GAAO,IAAI,KAAK,SAAA;AACjD,SAAK,QAAQ,KAAKC,CAAK,GACnB,KAAK,QAAQ,SAAS,KAAK,YAC7B,KAAK,QAAQ,OAAO,GAAG,KAAK,QAAQ,SAAS,KAAK,QAAQ,GAE5D,KAAK,KAAA;AACL,eAAWC,KAAQ,KAAK;AACtB,UAAI;AACF,QAAAA,EAAKD,CAAK;AAAA,MACZ,QAAQ;AAAA,MAER;AAEF,WAAOA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAQC,GAA+B;AACrC,gBAAK,MAAM,IAAIA,CAAI,GACZ,MAAM;AACX,WAAK,MAAM,OAAOA,CAAI;AAAA,IACxB;AAAA,EACF;AAAA;AAAA,EAGA,WAAoC;AAClC,WAAO,KAAK,QAAQ,MAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,OAAe;AACjB,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA,EAGA,QAAc;AACZ,IAAI,KAAK,QAAQ,WAAW,MAC5B,KAAK,UAAU,CAAA,GACf,KAAK,KAAA;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAUC,GAAgC;AACxC,gBAAK,UAAU,IAAIA,CAAQ,GAC3BA,EAAS,KAAK,UAAU,GACjB,MAAM;AACX,WAAK,UAAU,OAAOA,CAAQ;AAAA,IAChC;AAAA,EACF;AAAA,EAEQ,OAAa;AACnB,UAAMC,IAAO,KAAK,SAAA;AAClB,eAAWD,KAAY,KAAK,UAAW,CAAAA,EAASC,CAAI;AAAA,EACtD;AACF;AAGO,MAAMC,IAAa,IAAIR,EAAA;ACvK9B,SAASS,EAASC,GAAoD;AACpE,MAAI;AACF,UAAMjB,IAAIiB,EAAA;AACV,WAAO,OAAOjB,KAAM,YAAYA,EAAE,SAAS,IAAIA,IAAI;AAAA,EACrD,QAAQ;AACN;AAAA,EACF;AACF;AAEA,SAASkB,EAAelB,GAAmB;AACzC,SAAOA,EAAE,WAAW,GAAG,IAAIA,EAAE,MAAM,CAAC,IAAIA;AAC1C;AAEO,SAASmB,IAA2B;AACzC,SAAO;AAAA,IACL,SAASD,EAAeF,EAAS,MAAM,OAAkB,KAAK,WAAW;AAAA,IACzE,QAAQA,EAAS,MAAM,SAAkB,KAAK;AAAA,IAC9C,WAAWA,EAAS,MAAM,SAAqB,KAAK;AAAA,EAAA;AAExD;AAGO,MAAMI,IAAyBD,IAAgB,SClBzCE,IAAgD,OAAO,OAAO;AAAA,EACzE,KAAK;AAAA,EACL,eAAe;AAAA,EACf,oBAAoB;AAAA,EACpB,WAAW;AACb,CAAC,GAaKC,IAA4D;AAAA,EAChE,KAAK;AAAA,EACL,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,YAAY;AACd;AAQO,SAASC,EAAuBC,GAA0C;;AAC/E,QAAMvB,IAA0B,EAAE,GAAGoB,EAAA;AACrC,aAAWI,KAAQD,EAAI,YAAY,CAAA,GAAI;AACrC,UAAME,IAAMJ,IAAgBK,IAAAF,KAAA,gBAAAA,EAAM,gBAAN,gBAAAE,EAAA,KAAAF,OAAyB,EAAE;AACvD,IAAIC,MAAKzB,EAAIyB,CAAG,IAAI;AAAA,EACtB;AACA,aAAW,CAACD,GAAMG,CAAE,KAAK,OAAO,QAAQJ,EAAI,gBAAgB,CAAA,CAAE,GAAG;AAC/D,UAAME,IAAMJ,EAAgBG,EAAK,YAAA,CAAa;AAC9C,IAAIC,MAAKzB,EAAIyB,CAAG,IAAIE,MAAO;AAAA,EAC7B;AACA,SAAO3B;AACT;ACmJA,MAAM4B,wBAAoC,IAAA,GACpCC,wBAAqC,IAAA;AAE3C,SAASC,EAAqCC,GAAqB;AAEjE,UADgBA,aAAa,QAAQA,EAAE,UAAU,OAAOA,CAAC,GAC1C,SAAS,oCAAoC;AAC9D;AAUA,SAASC,EAAmBD,GAAqB;AAC/C,QAAME,IAAUF,aAAa,QAAQA,EAAE,UAAU,OAAOA,CAAC;AACzD,SAAO,WAAW,KAAKE,CAAO,KAAKA,EAAQ,SAAS,iBAAiB;AACvE;AAEA,SAASC,EAAmCC,GAAwB;AAClE,SAAO,IAAI;AAAA,IACT,4DAA4DA,CAAO;AAAA,EAAA;AAEvE;AAEA,SAASC,EAAqBvC,GAA6C;AACzE,MAAI,CAACA,KAAS,OAAOA,KAAU,SAAU,QAAO;AAChD,QAAMwC,IAAYxC;AAClB,SACE,OAAOwC,EAAU,QAAS,YAC1BA,EAAU,KAAK,SAAS,KACxB,OAAOA,EAAU,QAAS,YAC1BA,EAAU,KAAK,SAAS,MACvBA,EAAU,WAAW,UAAa,OAAOA,EAAU,UAAW;AAEnE;AAoBA,gBAAgBC,EACdnC,GAC6B;AAC7B,QAAMoC,IAASpC,EAAK,UAAA,GACdqC,IAAU,IAAI,YAAA;AACpB,MAAIC,IAAM;AACV,MAAI;AACF,eAAS;AACP,YAAM,EAAE,MAAAC,GAAM,OAAA7C,EAAA,IAAU,MAAM0C,EAAO,KAAA;AACrC,UAAIG,EAAM;AACV,MAAAD,KAAOD,EAAQ,OAAO3C,GAAO,EAAE,QAAQ,IAAM;AAC7C,UAAI8C;AACJ,cAAQA,IAAKF,EAAI,QAAQ;AAAA,CAAI,OAAO,MAAI;AACtC,cAAMG,IAAOH,EAAI,MAAM,GAAGE,CAAE,EAAE,KAAA;AAC9B,QAAAF,IAAMA,EAAI,MAAME,IAAK,CAAC,GAClBC,MAAM,MAAM,KAAK,MAAMA,CAAI;AAAA,MACjC;AAAA,IACF;AACA,UAAMC,IAAOJ,EAAI,KAAA;AACjB,IAAII,MAAM,MAAM,KAAK,MAAMA,CAAI;AAAA,EACjC,UAAA;AACE,IAAAN,EAAO,YAAA;AAAA,EACT;AACF;AAEA,MAAMO,KAAY;AAQX,SAASC,GAAgBC,GAAmC;;AACjE,MAAI,MAAM,QAAQA,CAAI,UAAUA,EAAK;AACrC,MAAIA,KAAQ,OAAOA,KAAS,UAAU;AACpC,UAAMC,IAAID;AAIV,QAAI,OAAOC,EAAE,gBAAiB,iBAAiBA,EAAE;AACjD,QAAI,MAAM,SAAQvB,IAAAuB,EAAE,WAAF,gBAAAvB,EAAU,OAAO,EAAG,QAAOuB,EAAE,OAAO,QAAQ;AAAA,EAChE;AAEF;AAOO,SAASC,EAAUnB,GAAoB;AAC5C,MAAIA,aAAa,MAAO,QAAOA,EAAE,WAAW,OAAOA,CAAC;AACpD,MAAI,OAAOA,KAAM,SAAU,QAAOA;AAClC,MAAIA,KAAK,OAAOA,KAAM,UAAU;AAC9B,UAAMoB,IAAKpB,EAA4B;AACvC,QAAI,OAAOoB,KAAM,YAAYA,EAAG,QAAOA;AACvC,QAAI;AACF,YAAMC,IAAI,KAAK,UAAUrB,CAAC;AAC1B,UAAIqB,KAAKA,MAAM,KAAM,QAAOA;AAAA,IAC9B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,OAAOrB,CAAC;AACjB;AAWA,eAAsBsB,GACpBC,GACAC,GACAC,IAAmD,CAAA,GAC7B;;AACtB,QAAMC,IAAYD,EAAK,SAAS,EAAE,QAAQA,EAAK,WAAW;AAC1D,MAAI,CAACV,GAAU,KAAKS,CAAG;AACrB,WAAOE,IAAYH,EAAO,MAAMC,GAAKE,CAAS,IAAIH,EAAO,MAAMC,CAAG;AACpE,MAAI;AACF,UAAMH,IAAI,MAAME,EAAO,mBAAmBC,GAAKC,CAAI;AACnD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAOD;AAAA,MACP,cAAcH,EAAE;AAAA,MAChB,QAAQ;AAAA,QACN,SAASA,EAAE;AAAA,QACX,SAASA,EAAE,KAAK;AAAA,UAAI,CAACM,MACnBA,EAAI,UACJ,OAAOA,EAAI,UAAW,aACrB,WAAWA,KACV,WAAWA,KACX,WAAWA,KACX,oBAAoBA,KACjBA,IACD,EAAE,QAAQA,EAAA;AAAA,QAAI;AAAA,MACpB;AAAA,MAEF,UAAU;AAAA,MACV,WAAWN,EAAE;AAAA,IAAA;AAAA,EAEjB,SAAS,GAAG;AACV,SACE1B,IAAA8B,EAAK,WAAL,QAAA9B,EAAa,WACZ,aAAa,SAAS,EAAE,SAAS;AAElC,YAAM;AAER,WAAO+B,IAAYH,EAAO,MAAMC,GAAKE,CAAS,IAAIH,EAAO,MAAMC,CAAG;AAAA,EACpE;AACF;AAEO,MAAMI,GAAU;AAAA,EAKrB,YAAYxB,GAAiBqB,IAAyB,IAAI;AAJjD,IAAAhD,EAAA;AACQ,IAAAA,EAAA;AACA,IAAAA,EAAA;AAGf,SAAK,UAAU2B,EAAQ,QAAQ,OAAO,EAAE,GACxC,KAAK,UAAUqB,EAAK,SACpB,KAAK,UAAUA,EAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,MAAc,KAAQI,GAAcC,GAAgC;AAClE,UAAMC,IAAM,GAAG,KAAK,OAAO,GAAGF,CAAI,IAC5BG,IAAkC;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAElB,WAAO,OAAOA,GAAS,KAAK,OAA6C,GACzE,OAAO,OAAOA,GAASF,KAAA,gBAAAA,EAAM,OAA6C;AAM1E,UAAMG,KAAOH,KAAA,gBAAAA,EAAM,WAAU,OACvBI,IAAY,KAAK,IAAA,GACjBC,IAAQ,YAAY,IAAA,GACpBC,IAAUjE,EAAgB2D,KAAA,gBAAAA,EAAM,IAAI,GACpCO,IAAU,MAAM,KAAK,MAAM,YAAY,IAAA,IAAQF,CAAK;AAE1D,QAAIG;AACJ,QAAI;AACF,MAAAA,IAAM,MAAM,KAAK,QAAQP,GAAK,EAAE,GAAGD,GAAM,SAAAE,GAAS;AAAA,IACpD,SAAShC,GAAG;AACV,YAAAjB,EAAW,OAAO;AAAA,QAChB,MAAM;AAAA,QACN,MAAAkD;AAAA,QACA,QAAQJ;AAAA,QACR,WAAAK;AAAA,QACA,YAAYG,EAAA;AAAA,QACZ,IAAI;AAAA,QACJ,SAAAD;AAAA,QACA,OAAOjB,EAAUnB,CAAC;AAAA,MAAA,CACnB,GACKA;AAAA,IACR;AAEA,QAAI,CAACsC,EAAI,IAAI;AACX,YAAMlE,IAAO,MAAMkE,EAAI,OAAO,MAAM,MAAM,EAAE,GACtCpC,IAAU,GAAG+B,CAAI,IAAIJ,CAAI,MAAMS,EAAI,MAAM,IAAIlE,EAAK,MAAM,GAAG,GAAG,CAAC;AACrE,YAAAW,EAAW,OAAO;AAAA,QAChB,MAAM;AAAA,QACN,MAAAkD;AAAA,QACA,QAAQJ;AAAA,QACR,WAAAK;AAAA,QACA,YAAYG,EAAA;AAAA,QACZ,IAAI;AAAA,QACJ,QAAQC,EAAI;AAAA,QACZ,SAAAF;AAAA,QACA,OAAOlC;AAAA,MAAA,CACR,GACK,IAAI,MAAMA,CAAO;AAAA,IACzB;AAEA,UAAMe,IAAQ,MAAMqB,EAAI,KAAA,GAClBC,IAAWvB,GAAgBC,CAAI;AACrC,WAAAlC,EAAW,OAAO;AAAA;AAAA;AAAA,MAGhB,MAAMwD,MAAa,SAAY,SAAS;AAAA,MACxC,MAAAN;AAAA,MACA,QAAQJ;AAAA,MACR,WAAAK;AAAA,MACA,YAAYG,EAAA;AAAA,MACZ,IAAI;AAAA,MACJ,QAAQC,EAAI;AAAA,MACZ,GAAIC,MAAa,SAAY,CAAA,IAAK,EAAE,UAAAA,EAAA;AAAA,MACpC,SAAAH;AAAA,IAAA,CACD,GACMnB;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,MAAMuB,GAAkBC,GAAmC;AAC/D,UAAMC,IAAW,IAAI,IAAI,KAAK,OAAO;AACrC,QACEA,EAAS,YACTA,EAAS,YACTA,EAAS,UACTA,EAAS,QACRA,EAAS,aAAa,YACrB,EACEA,EAAS,aAAa,WACtB,CAAC,aAAa,aAAa,OAAO,EAAE,SAASA,EAAS,QAAQ;AAGlE,YAAM,IAAI,MAAM,4CAA4C;AAI9D,UAAMC,IAAW,MAAM,KAAK,QAAQ,GAAG,KAAK,OAAO,eAAe;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B,aAAa;AAAA,MACb,UAAU;AAAA,MACV,MAAM,KAAK,UAAU,EAAE,UAAAH,GAAU,UAAAC,GAAU;AAAA,IAAA,CAC5C;AACD,QAAI,CAACE,EAAS;AACZ,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAEJ,UAAMC,IAAU,MAAMD,EAAS,KAAA;AAC/B,QACEC,EAAQ,OAAO,MACf,OAAOA,EAAQ,SAAU,YACzB,CAACA,EAAQ;AAET,YAAM,IAAI,MAAM,8CAA8C;AAEhE,WAAOA,EAAQ;AAAA,EACjB;AAAA,EAEA,MAAM,QAAwB;AAC5B,WAAO,KAAK,KAAY,QAAQ;AAAA,EAClC;AAAA,EAEA,MAAM,gBAAwC;AAC5C,WAAO,KAAK,KAAoB,iBAAiB;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAA8C;AAIlD,YAHU,MAAM,KAAK;AAAA,MACnB;AAAA,IAAA,GAEO,OAAO,QAAQ,IAAI,CAACC,MAAQ;AACnC,YAAM7E,IAAI6E,EAAI;AACd,aAAO;AAAA,QACL,MAAM,OAAO7E,EAAE,QAAQ,EAAE;AAAA,QACzB,MAAMA,EAAE;AAAA,QACR,MAAM,OAAOA,EAAE,QAAQ,QAAQ;AAAA,QAC/B,MAAOA,EAAE,QAA0B;AAAA,QACnC,2BAA2BA,EAAE,8BAA8B;AAAA,QAC3D,eACE,OAAOA,EAAE,iBAAkB,WAAWA,EAAE,gBAAgB;AAAA,MAAA;AAAA,IAE9D,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAAU8E,GAAeC,GAAsC;AACnE,UAAMC,IAAK,IAAI,gBAAgB,EAAE,OAAAF,GAAO;AACxC,WAAIC,MAAS,UAAWC,EAAG,IAAI,QAAQ,OAAOD,CAAI,CAAC,GAC5C,KAAK,KAAmB,iBAAiBC,CAAE,EAAE;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eACJF,GACAX,GACAc,GACAC,GACuB;AACvB,UAAMF,IAAK,IAAI,gBAAgB;AAAA,MAC7B,OAAAF;AAAA,MACA,OAAO,OAAOX,CAAK;AAAA,MACnB,KAAK,OAAOc,CAAG;AAAA,MACf,MAAM,OAAOC,CAAI;AAAA,IAAA,CAClB;AACD,WAAO,KAAK,KAAmB,uBAAuBF,CAAE,EAAE;AAAA,EAC5D;AAAA,EAEA,MAAM,OAEJ;AACA,UAAMb,IAAQ,YAAY,IAAA;AAC1B,QAAI;AACF,mBAAM,KAAK,KAAK,QAAQ,GACjB,EAAE,IAAI,IAAM,QAAQ,KAAK,MAAM,YAAY,QAAQA,CAAK,EAAA;AAAA,IACjE,SAASnC,GAAG;AACV,aAAO,EAAE,IAAI,IAAO,OAAOmB,EAAUnB,CAAC,EAAA;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAA4C;AAChD,QAAI;AACF,YAAMR,IAAM,MAAM,KAAK,KAAsB,eAAe;AAC5D,aAAOD,EAAuBC,CAAG;AAAA,IACnC,SAASQ,GAAG;AAGV,UAAI,CAACC,EAAmBD,CAAC,EAAG,QAAO,EAAE,GAAGX,EAAA;AAAA,IAC1C;AACA,UAAM,CAAC8D,GAAKC,CAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7C,KAAK,SAAS,uBAAuB;AAAA,MACrC,KAAK,SAAS,iBAAiB;AAAA,IAAA,CAChC;AACD,WAAO,EAAE,GAAG/D,GAA2B,KAAA8D,GAAK,eAAAC,EAAA;AAAA,EAC9C;AAAA;AAAA;AAAA,EAIA,MAAc,SAASvB,GAAgC;AACrD,QAAI;AACF,mBAAM,KAAK,KAAKA,CAAI,GACb;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,cAAiC;AAErC,YADU,MAAM,KAAK,KAAgC,cAAc,GAC1D;AAAA,EACX;AAAA,EAEA,MAAM,WAAWpC,GAA2C;AAC1D,QAAII,EAA8B,IAAI,KAAK,OAAO;AAChD,YAAMM,EAAmC,KAAK,OAAO;AAGvD,UAAM0B,IAAO,gBAAgB,mBAAmBpC,CAAI,CAAC,IAC/C4D,IAAgBvD,EAA+B,IAAI,KAAK,OAAO;AACrE,QAAIuD,GAAe;AAEjB,UAAI,CADc,MAAMA,EACR,OAAMlD,EAAmC,KAAK,OAAO;AACrE,aAAO,KAAK,KAAyB0B,CAAI;AAAA,IAC3C;AAEA,QAAIyB;AACJ,UAAMC,IAAQ,IAAI,QAAiB,CAACC,MAAY;AAC9C,MAAAF,IAAeE;AAAA,IACjB,CAAC;AACD,IAAA1D,EAA+B,IAAI,KAAK,SAASyD,CAAK;AAEtD,QAAI;AACF,YAAME,IAAW,MAAM,KAAK,KAAyB5B,CAAI;AACzD,aAAAyB,EAAc,EAAI,GACXG;AAAA,IACT,SAASzD,GAAG;AACV,YAAID,EAAqCC,CAAC,KACxCH,EAA8B,IAAI,KAAK,OAAO,GAC9CyD,EAAc,EAAK,KAEnBA,EAAc,EAAI,GAEdtD;AAAA,IACR,UAAA;AACE,MAAAF,EAA+B,OAAO,KAAK,OAAO;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiBL,GAA6B;AAClD,UAAM,KAAK,KAAK,gBAAgB;AAAA,MAC9B,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,MAAAA,GAAM;AAAA,IAAA,CAC9B;AAAA,EACH;AAAA,EAEA,MAAM,eACJiE,GACAC,GACyB;AACzB,WAAO,KAAK;AAAA,MACV,gBAAgB,mBAAmBD,CAAU,CAAC;AAAA,MAC9C;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAUC,CAAG;AAAA,MAAA;AAAA,IAC1B;AAAA,EAEJ;AAAA,EAEA,MAAM,MACJb,GACArB,IAAiC,IACX;AACtB,WAAO,KAAK,KAAkB,UAAU;AAAA,MACtC,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,OAAAqB,GAAO;AAAA,MAC9B,QAAQrB,EAAK;AAAA,IAAA,CACd;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,mBACJqB,GACArB,IAAmD,IACrB;AAC9B,UAAMmC,IAAUnC,EAAK,WAAW,KAC1BO,IAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IAAA;AAEV,WAAO,OAAOA,GAAS,KAAK,OAA6C;AAKzE,UAAME,IAAY,KAAK,IAAA,GACjBC,IAAQ,YAAY,IAAA,GACpB/D,IAAO,KAAK,UAAU,EAAE,OAAA0E,GAAO,GAC/BV,IAAUjE,EAAgBC,CAAI,GAC9BiE,IAAU,MAAM,KAAK,MAAM,YAAY,IAAA,IAAQF,CAAK;AAE1D,QAAIG;AACJ,QAAI;AACF,MAAAA,IAAM,MAAM,KAAK,QAAQ,GAAG,KAAK,OAAO,iBAAiB;AAAA,QACvD,QAAQ;AAAA,QACR,SAAAN;AAAA,QACA,MAAA5D;AAAA,QACA,QAAQqD,EAAK;AAAA,MAAA,CACd;AAAA,IACH,SAASzB,GAAG;AACV,YAAAjB,EAAW,OAAO;AAAA,QAChB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAAmD;AAAA,QACA,YAAYG,EAAA;AAAA,QACZ,IAAI;AAAA,QACJ,SAAAD;AAAA,QACA,OAAOjB,EAAUnB,CAAC;AAAA,MAAA,CACnB,GACKA;AAAA,IACR;AACA,QAAI,CAACsC,EAAI,MAAM,CAACA,EAAI,MAAM;AACxB,YAAMuB,IAAUvB,EAAI,OAAO,MAAMA,EAAI,OAAO,MAAM,MAAM,EAAE,IAAI,IACxDpC,IAAU,wBAAwBoC,EAAI,MAAM,IAAIuB,EAAQ,MAAM,GAAG,GAAG,CAAC;AAC3E,YAAA9E,EAAW,OAAO;AAAA,QAChB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAAmD;AAAA,QACA,YAAYG,EAAA;AAAA,QACZ,IAAI;AAAA,QACJ,QAAQC,EAAI;AAAA,QACZ,SAAAF;AAAA,QACA,OAAOlC;AAAA,MAAA,CACR,GACK,IAAI,MAAMA,CAAO;AAAA,IACzB;AAEA,UAAMjC,IAA2B;AAAA,MAC/B,SAAS,CAAA;AAAA,MACT,MAAM,CAAA;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IAAA;AAGb,qBAAiB6F,KAASvD,EAAkB+B,EAAI,IAAI;AAClD,UAAI,gBAAgBwB;AAClB,QAAA7F,EAAI,WAAW6F,EAAM,WAAW,WAAW,CAAA,GAAI;AAAA,UAAI,CAACC,MAClD,OAAOA,KAAW,WAAWA,IAASA,EAAO;AAAA,QAAA,GAE/C9F,EAAI,oBAAoB6F,EAAM,WAAW;AAAA,eAChC,YAAYA;AACrB,QAAA7F,EAAI,SAAS6F,EAAM,OAAO;AAAA,eACjB,SAASA,GAAO;AACzB,YAAI7F,EAAI,KAAK,UAAU2F,GAAS;AAC9B,UAAA3F,EAAI,YAAY;AAChB;AAAA,QACF;AACA,QAAAA,EAAI,KAAK,KAAK6F,EAAM,GAAG,GACvB7F,EAAI,WAAWA,EAAI,KAAK;AAAA,MAC1B,WAAW,SAAS6F,KAAS,eAAeA;AAC1C;AAIJ,WAAA/E,EAAW,OAAO;AAAA,MAChB,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,WAAAmD;AAAA,MACA,YAAYG,EAAA;AAAA,MACZ,IAAI;AAAA,MACJ,QAAQC,EAAI;AAAA,MACZ,UAAUrE,EAAI;AAAA,MACd,SAAAmE;AAAA,IAAA,CACD,GAGGnE,EAAI,aAAaA,EAAI,UACvB,MAAM,KAAK,kBAAkBA,EAAI,MAAM,EAAE,MAAM,MAAM;AAAA,IAErD,CAAC,GAEIA;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,kBAAkB+F,GAA+B;AACrD,UAAM,KAAK,KAAK,wBAAwB;AAAA,MACtC,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,QAAAA,GAAQ;AAAA,IAAA,CAChC,EAAE,MAAM,MAAA;AAAA,KAAe;AAAA,EAC1B;AAAA,EAEA,MAAM,cAAcvE,GAA2C;AAI7D,YAHU,MAAM,KAAK;AAAA,MACnB,gBAAgB,mBAAmBA,CAAI,CAAC;AAAA,IAAA,GAEjC;AAAA,EACX;AAAA,EAEA,MAAM,iBACJA,GACAwE,GAC6B;AAQ7B,YAPU,MAAM,KAAK;AAAA,MACnB,gBAAgB,mBAAmBxE,CAAI,CAAC;AAAA,MACxC;AAAA,QACE,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,EAAE,WAAAwE,GAAW;AAAA,MAAA;AAAA,IACpC,GAEO;AAAA,EACX;AAAA,EAEA,MAAM,QACJxC,IAOI,IACkB;AACtB,UAAMuB,IAAK,IAAI,gBAAA;AACf,IAAIvB,EAAK,QAAMuB,EAAG,IAAI,QAAQvB,EAAK,IAAI,GACnCA,EAAK,MAAIuB,EAAG,IAAI,MAAMvB,EAAK,EAAE,GAC7BA,EAAK,UAAQuB,EAAG,IAAI,UAAUvB,EAAK,MAAM,GACzCA,EAAK,UAAU,UAAWuB,EAAG,IAAI,SAAS,OAAOvB,EAAK,KAAK,CAAC,GAC5DA,EAAK,SAAS,UAAWuB,EAAG,IAAI,QAAQ,OAAOvB,EAAK,IAAI,CAAC,GACzDA,EAAK,aAAa,UAAWuB,EAAG,IAAI,aAAa,OAAOvB,EAAK,QAAQ,CAAC;AAC1E,UAAMyC,IAASlB,EAAG,SAAA,IAAa,IAAIA,CAAE,KAAK;AAI1C,YAHU,MAAM,KAAK;AAAA,MACnB,gBAAgBkB,CAAM;AAAA,IAAA,GAEf;AAAA,EACX;AAAA,EAEA,MAAM,WACJC,GACAC,GACA3C,IAAmD,CAAA,GACjC;AAClB,UAAMuB,IAAK,IAAI,gBAAA;AACf,IAAIvB,EAAK,cAAYuB,EAAG,IAAI,cAAcvB,EAAK,UAAU,GACrDA,EAAK,YAAY,UAAWuB,EAAG,IAAI,WAAW,OAAOvB,EAAK,OAAO,CAAC;AACtE,UAAMyC,IAASlB,EAAG,SAAA,IAAa,IAAIA,CAAE,KAAK;AAI1C,YAHU,MAAM,KAAK;AAAA,MACnB,iBAAiB,mBAAmBmB,CAAI,CAAC,SAAS,mBAAmBC,CAAE,CAAC,GAAGF,CAAM;AAAA,IAAA,GAE1E;AAAA,EACX;AAAA,EAEA,MAAM,cAA0C;AAC9C,WAAO,KAAK,KAAwB,qBAAqB,EAAE,MAAM,OAAO;AAAA,MACtE,IAAI;AAAA,MACJ,MAAM;AAAA,IAAA,EACN;AAAA,EACJ;AAAA,EAEA,MAAM,SAA0B;AAC9B,WAAO,KAAK,KAAa,cAAc;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,IAAIG,GAAkB5C,IAAmB,IAA0B;AACvE,WAAO,KAAK,KAAkB,WAAW;AAAA,MACvC,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,UAAA4C,GAAU,GAAG5C,GAAM;AAAA,IAAA,CAC3C;AAAA,EACH;AAAA,EAEA,MAAM,QAA6B;AAIjC,YAHU,MAAM,KAAK;AAAA,MACnB;AAAA,IAAA,GAEO;AAAA,EACX;AAAA,EAEA,MAAM,UAAiC;AAIrC,YAHU,MAAM,KAAK;AAAA,MACnB;AAAA,IAAA,GAEO,WAAW,CAAA;AAAA,EACtB;AAAA,EAEA,MAAM,WAAkC;AAItC,YAHU,MAAM,KAAK;AAAA,MACnB;AAAA,IAAA,GAEO,YAAY,CAAA;AAAA,EACvB;AAAA,EAEA,MAAM,QAAQ6C,GAA0D;AACtE,UAAMC,IAAI,MAAM,KAAK,KAAsB,aAAa;AAAA,MACtD,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,QAAAD,GAAQ;AAAA,IAAA,CAChC;AACD,QAAI,CAAC,MAAM,QAAQC,EAAE,OAAO;AAC1B,YAAM,IAAI,MAAMA,EAAE,SAAS,oCAAoC;AAEjE,WAAOD,EAAO,IAAI,CAACE,GAAOC,MAAU;;AAClC,YAAMC,MAAS/E,IAAA4E,EAAE,YAAF,gBAAA5E,EAAY8E,OAAU,CAAA,GAC/BE,IAAWtE,EAAqBqE,EAAO,QAAQ,IACjDA,EAAO,WACPF,EAAM;AACV,aAAO;AAAA,QACL,QACE,OAAOE,EAAO,UAAW,WAAWA,EAAO,SAASF,EAAM;AAAA,QAC5D,UAAAG;AAAA,QACA,gBACE,OAAOD,EAAO,kBAAmB,WAC7BA,EAAO,iBACPF,EAAM;AAAA,QACZ,SAASE,EAAO,YAAY;AAAA,QAC5B,QAAQ,OAAOA,EAAO,UAAW,WAAWA,EAAO,SAAS;AAAA,MAAA;AAAA,IAEhE,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJE,GACAnD,IAAgD,IACxB;AACxB,UAAMuB,IAAK,IAAI,gBAAA;AACf,IAAI4B,MAAa,UAAW5B,EAAG,IAAI,aAAa,OAAO4B,CAAQ,CAAC,GAC5DnD,EAAK,UAAU,UAAWuB,EAAG,IAAI,SAAS,OAAOvB,EAAK,KAAK,CAAC;AAChE,UAAMyC,IAASlB,EAAG,SAAA,IAAa,IAAIA,CAAE,KAAK,IAEpC6B,KADI,MAAM,KAAK,KAAgC,aAAaX,CAAM,GACvD,UAAU,CAAA;AAC3B,WAAOzC,EAAK,aACRoD,EAAO,OAAO,CAAC7E,MAAMA,EAAE,eAAeyB,EAAK,UAAU,IACrDoD;AAAA,EACN;AAAA;AAAA,EAGA,MAAM,KAAK/B,GAAwD;AAEjE,YADU,MAAM,KAAK,MAAMA,CAAK,GACvB,OAAO,QAAQ,IAAI,CAACD,MAAQA,EAAI,MAAM;AAAA,EACjD;AACF;ACx5BO,MAAMiC,WAA+B,MAAM;AAAA,EAChD,YAA4BC,GAAY;AACtC,UAAM,uBAAuBA,CAAE,EAAE,GADP,KAAA,KAAAA,GAE1B,KAAK,OAAO;AAAA,EACd;AACF;AAEO,MAAMC,WAA0B,MAAM;AAAA,EAC3C,cAAc;AACZ,UAAM,6CAA6C,GACnD,KAAK,OAAO;AAAA,EACd;AACF;AAEO,MAAMC,WAAmC,MAAM;AAAA,EACpD,YAA4BF,GAA4BG,GAAgB;AACtE,UAAM,cAAcH,CAAE,iBAAiBG,CAAM,EAAE,GADrB,KAAA,KAAAH,GAA4B,KAAA,SAAAG,GAEtD,KAAK,OAAO;AAAA,EACd;AACF;ACzCO,MAAMC,GAAqD;AAAA,EAMhE,YAAY1D,GAA6B;AALxB,IAAAhD,EAAA;AAER;AAAA,IAAAA,EAAA;AACD,IAAAA,EAAA,mBAAY;;AAGlB,SAAK,SAASgD,EAAK,QACnB,KAAK,aAAa;AAAA,MAChB,MAAI9B,IAAA8B,EAAK,eAAL,gBAAA9B,EAAiB,OAAM;AAAA,MAC3B,SAAOyF,IAAA3D,EAAK,eAAL,gBAAA2D,EAAiB,UAAS;AAAA,MACjC,OAAKC,IAAA5D,EAAK,eAAL,gBAAA4D,EAAiB,QAAO;AAAA,MAC7B,QAAMC,IAAA7D,EAAK,eAAL,gBAAA6D,EAAiB,SAAQ;AAAA,MAC/B,eAAaC,IAAA9D,EAAK,eAAL,gBAAA8D,EAAiB,gBAAe;AAAA,IAAA;AAAA,EAEjD;AAAA,EAEA,MAAM,OAA8B;AAClC,WAAO,CAAC,KAAK,UAAU;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,QAAQR,GAAuC;AACnD,QAAIA,MAAO,KAAK,WAAW,GAAI,OAAM,IAAID,GAAuBC,CAAE;AAClE,QAAIS,IAAS;AACb,QAAI;AACF,YAAMC,IAAO,MAAM,KAAK,OAAO,KAAA;AAC/B,MAAIA,EAAK,OAAID,IAASC,EAAK;AAAA,IAC7B,QAAQ;AAAA,IAER;AACA,gBAAK,YAAY,IACV,EAAE,YAAY,KAAK,YAAY,QAAQ,KAAK,QAAQ,QAAAD,EAAA;AAAA,EAC7D;AAAA,EAEA,MAAM,SAA4B;AAChC,QAAI,CAAC,KAAK,UAAW,OAAM,IAAIR,GAAA;AAC/B,UAAMU,IAAI,MAAM,KAAK,OAAO,OAAA;AAC5B,WAAO,EAAE,eAAeA,EAAE,eAAe,UAAUA,EAAE,UAAU,MAAMA,EAAE,KAAA;AAAA,EACzE;AACF;ACvBA,MAAMC,KAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqFlB,SAASC,IAAmB;AAC1B,EAAI,OAAO,SAAW,QAAa,OAAO,2BAA2B;AACvE;AAEA,eAAsBC,GACpBC,GACArE,GAC2B;AAC3B,EAAAmE,EAAA,GACAE,EAAK,QAAQ,QAAQrE,EAAK,SAASqE,EAAK,QAAQ,SAAS;AAEzD,QAAMC,IACJD,EAAK,cAAcA,EAAK,aAAarE,EAAK,cAAc,EAAE,MAAM,QAAQ;AAC1E,EAAAsE,EAAW,cAAc;AAEzB,QAAMC,IAAQ,SAAS,cAAc,OAAO;AAC5C,EAAAA,EAAM,cAAc,GAAGC,CAAM;AAAA,EAAKN,EAAS;AAE3C,QAAMO,IAAc,SAAS,cAAc,KAAK;AAChD,EAAAA,EAAY,YAAY;AAExB,QAAMC,IAAe,SAAS,cAAc,KAAK;AACjD,EAAAA,EAAa,aAAa,6BAA6B,EAAE,GAEzDJ,EAAW,OAAOC,GAAOE,GAAaC,CAAY;AAElD,QAAM,CAAC,EAAE,OAAAC,GAAO,SAAAC,EAAA,GAAWC,CAAI,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,OAAO,4BAAQ,EAAA,KAAA,CAAAC,MAAAA,EAAA,EAAA;AAAA,IACf,OAAO,8BAAyB,EAAA,KAAA,CAAAA,MAAAA,EAAA,CAAA;AAAA,EAAA,CAGjC,GAEKC,IAAWJ,EAAME,EAAK,SAAS;AAAA,IACnC,QAAQJ;AAAA,IACR,OAAO;AAAA,MACL,oBAAoBzE,EAAK;AAAA,MACzB,cAAA0E;AAAA,MACA,YAAYL;AAAA,MACZ,cAAcrE,EAAK;AAAA,MACnB,cAAcA,EAAK;AAAA,IAAA;AAAA,EACrB,CACD,GAEKgF,IAAahF,EAAK,cACpB1C,EAAW,QAAQ0C,EAAK,WAAW,IACnC;AAEJ,SAAO;AAAA,IACL,MAAAqE;AAAA,IACA,YAAAC;AAAA,IACA,cAAAI;AAAA,IACA,SAAS,MAAM;AACb,MAAAM,KAAA,QAAAA,KACKJ,EAAQG,CAAQ,GACrBT,EAAW,cAAc;AAAA,IAC3B;AAAA,EAAA;AAEJ;;AAEO,MAAMW,UAAqB,YAAY;AAAA,EAAvC;AAAA;AAAA,IAAAC,EAAA,MAAAC;AACL,IAAAD,EAAA,MAAAE,GAAiD;AACjD,IAAAF,EAAA,MAAAG,GAAmC;AACnC,IAAArI,EAAA;AACA,IAAAA,EAAA;AACA,IAAAkI,EAAA,MAAAI,GAAmC;AACnC,IAAAJ,EAAA,MAAAK,GAAkC;AAAA;AAAA,EAKlC,IAAI,UAAkB;AACpB,WAAO5H;AAAA,EACT;AAAA,EAEA,IAAI,qBAAgD;AAClD,WAAO6H,EAAA,MAAKJ;AAAA,EACd;AAAA,EAEA,IAAI,mBAAmBK,GAAqC;AAC1D,IAAAC,EAAA,MAAKN,GAAsBK,IACvB,KAAK,eAAaC,EAAA,MAAKH,GAAYI,EAAA,MAAKR,GAAAS,GAAL;AAAA,EACzC;AAAA,EAEA,IAAI,cAAkC;AACpC,WAAOJ,EAAA,MAAKH;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,YAAYlI,GAA0B;AACxC,IAAAuI,EAAA,MAAKL,GAAelI,IAChB,KAAK,eAAauI,EAAA,MAAKH,GAAYI,EAAA,MAAKR,GAAAS,GAAL;AAAA,EACzC;AAAA,EAEA,oBAAoB;AAClB,IAAK,KAAK,aAAa,SAAS,KAC9B,KAAK,aAAa,WAAWjI,CAAc,GAC7C6H,EAAA,MAAKD,MAALG,EAAA,MAAKH,GAAcI,EAAA,MAAKR,GAAAS,GAAL;AAAA,EACrB;AAAA,EAEA,uBAAuB;;AACrB,KAAA1H,IAAAsH,EAAA,MAAKF,OAAL,QAAApH,EAAc,WACdwH,EAAA,MAAKJ,GAAU,OACfI,EAAA,MAAKH,GAAY;AAAA,EACnB;AAYF;AA3DEH,IAAA,eACAC,IAAA,eAGAC,IAAA,eACAC,IAAA,eANKJ,IAAA,eAkDCS,IAAA,iBAAS;;AACb,EAAKJ,EAAA,MAAKJ,QACVlH,IAAAsH,EAAA,MAAKF,OAAL,QAAApH,EAAc,WACdwH,EAAA,MAAKJ,GAAU,MAAMlB,GAAW,MAAM;AAAA,IACpC,oBAAoBoB,EAAA,MAAKJ;AAAA,IACzB,cAAc,KAAK;AAAA,IACnB,OAAO,KAAK;AAAA,IACZ,aAAaI,EAAA,MAAKH,MAAgB;AAAA,EAAA,CACnC;AACH;AAAA;AAjDArI,EAVWiI,GAUK,WAAUtH;AAoDrB,SAASkI,GACdC,IAA+B,cACV;AACrB,SAAA3B,EAAA,GACK,eAAe,IAAI2B,CAAO,KAC7B,eAAe,OAAOA,GAASb,CAAY,GACtC,eAAe,IAAIa,CAAO;AACnC;"}