@rovela-ai/sdk 0.4.1 → 0.4.2

package/dist/admin/api/customers.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @rovela/sdk/admin/api/customers
+ *
+ * API route handlers for admin customer management.
+ * Supports: List (GET), Get Single (GET), Update (PUT).
+ * Note: Create/Delete not available for security reasons.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/customers/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/customers'
+ *
+ * // app/api/admin/customers/[id]/route.ts
+ * export { getCustomer as GET, updateCustomer as PUT, deleteCustomer as DELETE } from '@rovela/sdk/admin/api/customers'
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { AdminApiError, PaginatedResponse } from '../types';
+/**
+ * GET /api/admin/customers
+ *
+ * List customers with search and pagination.
+ *
+ * Query Parameters:
+ * - search: string - Search by email or name
+ * - page: number (default 1)
+ * - limit: number (default 20, max 100)
+ */
+export declare function GET(request: NextRequest): Promise<NextResponse<PaginatedResponse<unknown> | AdminApiError>>;
+/**
+ * GET /api/admin/customers/[id]
+ *
+ * Get a single customer by ID with order history.
+ */
+export declare function getCustomer(_request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<{
+    data: unknown;
+} | AdminApiError>>;
+/**
+ * PUT /api/admin/customers/[id]
+ *
+ * Update a customer's profile information.
+ * Only name and email can be updated by admin.
+ *
+ * Request Body:
+ * - name?: string - Customer name
+ * - email?: string - Customer email
+ */
+export declare function updateCustomer(request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<{
+    data: unknown;
+} | AdminApiError>>;
+/**
+ * DELETE /api/admin/customers/[id]
+ *
+ * Delete (anonymize) a customer by ID.
+ *
+ * This performs a SOFT DELETE that anonymizes customer data:
+ * - Email changed to `deleted_{timestamp}@anonymized.local`
+ * - Name, passwordHash, emailVerified, stripeCustomerId cleared
+ * - Customer record preserved for order history integrity
+ * - Complies with GDPR "right to erasure" through anonymization
+ */
+export declare function deleteCustomer(_request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<{
+    success: boolean;
+} | AdminApiError>>;
+//# sourceMappingURL=customers.d.ts.map

package/dist/admin/api/customers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customers.d.ts","sourceRoot":"","sources":["../../../src/admin/api/customers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAUvD,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAMhE;;;;;;;;;GASG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAmDnE;AAMD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,WAAW,EACrB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CAqD1D;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,WAAW,EACpB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CAoE1D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,WAAW,EACrB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CA6C7D"}

package/dist/admin/api/customers.js

@@ -0,0 +1,219 @@
+/**
+ * @rovela/sdk/admin/api/customers
+ *
+ * API route handlers for admin customer management.
+ * Supports: List (GET), Get Single (GET), Update (PUT).
+ * Note: Create/Delete not available for security reasons.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/customers/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/customers'
+ *
+ * // app/api/admin/customers/[id]/route.ts
+ * export { getCustomer as GET, updateCustomer as PUT, deleteCustomer as DELETE } from '@rovela/sdk/admin/api/customers'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { findCustomers, findCustomerById, countCustomers, findCustomerOrders, deleteCustomer as deleteCustomerData, } from '../../core/db/queries';
+import { updateCustomer as updateCustomerData } from '../../auth/server/customer-service';
+// =============================================================================
+// List Customers
+// =============================================================================
+/**
+ * GET /api/admin/customers
+ *
+ * List customers with search and pagination.
+ *
+ * Query Parameters:
+ * - search: string - Search by email or name
+ * - page: number (default 1)
+ * - limit: number (default 20, max 100)
+ */
+export async function GET(request) {
+    // Listing customers — managers and above.
+    const guard = await requireAdmin({ permission: 'customers.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const searchParams = request.nextUrl.searchParams;
+        // Parse pagination
+        const page = Math.max(1, parseInt(searchParams.get('page') || '1', 10));
+        const limit = Math.min(100, Math.max(1, parseInt(searchParams.get('limit') || '20', 10)));
+        const offset = (page - 1) * limit;
+        // Parse search
+        const search = searchParams.get('search') || undefined;
+        // Execute queries
+        const [customers, total] = await Promise.all([
+            findCustomers({ search, limit, offset }),
+            countCustomers({ search }),
+        ]);
+        // Remove sensitive data (password_hash) from response
+        const safeCustomers = customers.map((customer) => ({
+            id: customer.id,
+            email: customer.email,
+            name: customer.name,
+            emailVerified: customer.emailVerified,
+            stripeCustomerId: customer.stripeCustomerId,
+            createdAt: customer.createdAt,
+        }));
+        return NextResponse.json({
+            data: safeCustomers,
+            total,
+            page,
+            pageSize: limit,
+            hasMore: offset + customers.length < total,
+        });
+    }
+    catch (error) {
+        console.error('[Admin Customers API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch customers', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Single Customer Operations
+// =============================================================================
+/**
+ * GET /api/admin/customers/[id]
+ *
+ * Get a single customer by ID with order history.
+ */
+export async function getCustomer(_request, { params }) {
+    // Customer detail view — read permission.
+    const guard = await requireAdmin({ permission: 'customers.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const customer = await findCustomerById(id);
+        if (!customer) {
+            return NextResponse.json({ error: 'Customer not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Get customer's orders
+        const orders = await findCustomerOrders(id);
+        // Remove sensitive data and include orders
+        const safeCustomer = {
+            id: customer.id,
+            email: customer.email,
+            name: customer.name,
+            emailVerified: customer.emailVerified,
+            stripeCustomerId: customer.stripeCustomerId,
+            createdAt: customer.createdAt,
+            orders: orders.map((order) => ({
+                id: order.id,
+                status: order.status,
+                total: order.total,
+                createdAt: order.createdAt,
+            })),
+            // Computed stats
+            stats: {
+                totalOrders: orders.length,
+                totalSpent: orders.reduce((sum, order) => sum + parseFloat(order.total || '0'), 0),
+            },
+        };
+        return NextResponse.json({ data: safeCustomer });
+    }
+    catch (error) {
+        console.error('[Admin Customers API] getCustomer error:', error);
+        return NextResponse.json({ error: 'Failed to fetch customer', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * PUT /api/admin/customers/[id]
+ *
+ * Update a customer's profile information.
+ * Only name and email can be updated by admin.
+ *
+ * Request Body:
+ * - name?: string - Customer name
+ * - email?: string - Customer email
+ */
+export async function updateCustomer(request, { params }) {
+    // Editing a customer record — managers and above.
+    const guard = await requireAdmin({ permission: 'customers.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const body = await request.json();
+        // Validate input
+        const { name, email } = body;
+        if (name === undefined && email === undefined) {
+            return NextResponse.json({ error: 'At least one field (name or email) is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Check customer exists
+        const existingCustomer = await findCustomerById(id);
+        if (!existingCustomer) {
+            return NextResponse.json({ error: 'Customer not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Update customer
+        const updatedCustomer = await updateCustomerData(id, { name, email });
+        if (!updatedCustomer) {
+            return NextResponse.json({ error: 'Failed to update customer', code: 'INTERNAL_ERROR' }, { status: 500 });
+        }
+        // Return safe customer data
+        const safeCustomer = {
+            id: updatedCustomer.id,
+            email: updatedCustomer.email,
+            name: updatedCustomer.name,
+            emailVerified: updatedCustomer.emailVerified,
+            stripeCustomerId: updatedCustomer.stripeCustomerId,
+            createdAt: updatedCustomer.createdAt,
+        };
+        return NextResponse.json({ data: safeCustomer });
+    }
+    catch (error) {
+        console.error('[Admin Customers API] updateCustomer error:', error);
+        // Check for duplicate email error
+        const err = error;
+        if (err.message?.includes('already exists')) {
+            return NextResponse.json({ error: 'A customer with this email already exists', code: 'EMAIL_EXISTS' }, { status: 409 });
+        }
+        return NextResponse.json({ error: 'Failed to update customer', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * DELETE /api/admin/customers/[id]
+ *
+ * Delete (anonymize) a customer by ID.
+ *
+ * This performs a SOFT DELETE that anonymizes customer data:
+ * - Email changed to `deleted_{timestamp}@anonymized.local`
+ * - Name, passwordHash, emailVerified, stripeCustomerId cleared
+ * - Customer record preserved for order history integrity
+ * - Complies with GDPR "right to erasure" through anonymization
+ */
+export async function deleteCustomer(_request, { params }) {
+    // Deleting a customer — owner/administrator only.
+    const guard = await requireAdmin({ permission: 'customers.delete' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        // Check if customer exists and is not already deleted
+        const existingCustomer = await findCustomerById(id);
+        if (!existingCustomer) {
+            return NextResponse.json({ error: 'Customer not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Check if already anonymized
+        if (existingCustomer.email.endsWith('@anonymized.local')) {
+            return NextResponse.json({ error: 'Customer already deleted', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Anonymize customer data
+        const deleted = await deleteCustomerData(id);
+        if (!deleted) {
+            return NextResponse.json({ error: 'Failed to delete customer', code: 'INTERNAL_ERROR' }, { status: 500 });
+        }
+        return NextResponse.json({ success: true });
+    }
+    catch (error) {
+        console.error('[Admin Customers API] deleteCustomer error:', error);
+        return NextResponse.json({ error: 'Failed to delete customer', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=customers.js.map

package/dist/admin/api/customers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customers.js","sourceRoot":"","sources":["../../../src/admin/api/customers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,IAAI,kBAAkB,GACrC,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AAGzF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,OAAoB;IAEpB,0CAA0C;IAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAA;QAEjD,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAC7D,CAAA;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA;QAEjC,eAAe;QACf,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;QAEtD,kBAAkB;QAClB,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;SAC3B,CAAC,CAAA;QAEF,sDAAsD;QACtD,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAG,QAA2B,CAAC,EAAE;YACnC,KAAK,EAAG,QAA8B,CAAC,KAAK;YAC5C,IAAI,EAAG,QAAoC,CAAC,IAAI;YAChD,aAAa,EAAG,QAA2C,CAAC,aAAa;YACzE,gBAAgB,EAAG,QAAgD,CAAC,gBAAgB;YACpF,SAAS,EAAG,QAAgC,CAAC,SAAS;SACvD,CAAC,CAAC,CAAA;QAEH,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,aAAa;YACnB,KAAK;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK;SAC3C,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;QACxD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAqB,EACrB,EAAE,MAAM,EAAuC;IAE/C,0CAA0C;IAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;QAE3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAE3C,2CAA2C;QAC3C,MAAM,YAAY,GAAG;YACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7B,EAAE,EAAG,KAAwB,CAAC,EAAE;gBAChC,MAAM,EAAG,KAA4B,CAAC,MAAM;gBAC5C,KAAK,EAAG,KAA2B,CAAC,KAAK;gBACzC,SAAS,EAAG,KAA6B,CAAC,SAAS;aACpD,CAAC,CAAC;YACH,iBAAiB;YACjB,KAAK,EAAE;gBACL,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,CACvB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,UAAU,CAAE,KAA2B,CAAC,KAAK,IAAI,GAAG,CAAC,EAC3E,CAAC,CACF;aACF;SACF,CAAA;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAChE,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC7D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAoB,EACpB,EAAE,MAAM,EAAuC;IAE/C,kDAAkD;IAClD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACnE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAEjC,iBAAiB;QACjB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAyC,CAAA;QAEjE,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,gDAAgD,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACrF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAErE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,EAAE,EAAE,eAAe,CAAC,EAAE;YACtB,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,aAAa,EAAE,eAAe,CAAC,aAAa;YAC5C,gBAAgB,EAAE,eAAe,CAAC,gBAAgB;YAClD,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAA;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QAEnE,kCAAkC;QAClC,MAAM,GAAG,GAAG,KAA6B,CAAA;QACzC,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5C,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2CAA2C,EAAE,IAAI,EAAE,cAAc,EAAE,EAC5E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAqB,EACrB,EAAE,MAAM,EAAuC;IAE/C,kDAAkD;IAClD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACpE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAA;QAE3B,sDAAsD;QACtD,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,WAAW,EAAE,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACzD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/forgot-password.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @rovela/sdk/admin/api/forgot-password
+ *
+ * API route handler for the admin forgot-password flow.
+ *
+ * Unauthenticated endpoint — any visitor may POST. The response shape is
+ * identical regardless of whether the email corresponds to a real admin
+ * (enumeration safety). The service layer also silently skips deactivated
+ * and invited admins.
+ *
+ * Runtime: Node.js (DB + email service dependencies). We set this
+ * explicitly so a future `export const runtime = 'edge'` accidentally
+ * dropped into this file wouldn't silently break the flow.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/forgot-password/route.ts
+ * export { POST } from '@rovela-ai/sdk/admin/api/forgot-password'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import type { AdminApiError } from '../types';
+export declare const runtime = "nodejs";
+interface ForgotPasswordResponse {
+    success: boolean;
+    message: string;
+}
+/**
+ * POST /api/admin/forgot-password
+ *
+ * Body: `{ "email": "admin@store.com" }`
+ *
+ * Always returns `200 { success: true, message }` when the request is
+ * well-formed, even if the email doesn't correspond to a real admin.
+ * Returns `400 VALIDATION_ERROR` only for missing/malformed email input.
+ */
+export declare function POST(request: Request): Promise<NextResponse<ForgotPasswordResponse | AdminApiError>>;
+export {};
+//# sourceMappingURL=forgot-password.d.ts.map

package/dist/admin/api/forgot-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot-password.d.ts","sourceRoot":"","sources":["../../../src/admin/api/forgot-password.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAE7C,eAAO,MAAM,OAAO,WAAW,CAAA;AAM/B,UAAU,sBAAsB;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAeD;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CACxB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,CAAC,sBAAsB,GAAG,aAAa,CAAC,CAAC,CAoC/D"}

package/dist/admin/api/forgot-password.js

@@ -0,0 +1,66 @@
+/**
+ * @rovela/sdk/admin/api/forgot-password
+ *
+ * API route handler for the admin forgot-password flow.
+ *
+ * Unauthenticated endpoint — any visitor may POST. The response shape is
+ * identical regardless of whether the email corresponds to a real admin
+ * (enumeration safety). The service layer also silently skips deactivated
+ * and invited admins.
+ *
+ * Runtime: Node.js (DB + email service dependencies). We set this
+ * explicitly so a future `export const runtime = 'edge'` accidentally
+ * dropped into this file wouldn't silently break the flow.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/forgot-password/route.ts
+ * export { POST } from '@rovela-ai/sdk/admin/api/forgot-password'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { requestAdminPasswordReset } from '../server/admin-password-reset';
+export const runtime = 'nodejs';
+// =============================================================================
+// Helpers
+// =============================================================================
+function isValidEmail(email) {
+    // Minimal format check — full RFC validation isn't worth it server-side.
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
+}
+// =============================================================================
+// Handler
+// =============================================================================
+/**
+ * POST /api/admin/forgot-password
+ *
+ * Body: `{ "email": "admin@store.com" }`
+ *
+ * Always returns `200 { success: true, message }` when the request is
+ * well-formed, even if the email doesn't correspond to a real admin.
+ * Returns `400 VALIDATION_ERROR` only for missing/malformed email input.
+ */
+export async function POST(request) {
+    try {
+        const body = (await request.json().catch(() => null));
+        const email = typeof body?.email === 'string' ? body.email.trim() : '';
+        if (!email) {
+            return NextResponse.json({ error: 'Email is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        if (!isValidEmail(email)) {
+            return NextResponse.json({ error: 'Please enter a valid email address', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Service is responsible for all enumeration-safe behavior —
+        // we just call it and pass through the (always successful) result.
+        await requestAdminPasswordReset(email);
+        return NextResponse.json({
+            success: true,
+            message: "If an account exists with this email, we've sent a password reset link.",
+        });
+    }
+    catch (error) {
+        console.error('[Admin Forgot Password] Error:', error);
+        return NextResponse.json({ error: 'Failed to process request. Please try again.', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=forgot-password.js.map

package/dist/admin/api/forgot-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forgot-password.js","sourceRoot":"","sources":["../../../src/admin/api/forgot-password.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAG1E,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAA;AAW/B,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,YAAY,CAAC,KAAa;IACjC,yEAAyE;IACzE,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjD,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAA;QAEnF,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,oCAAoC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EACzE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,6DAA6D;QAC7D,mEAAmE;QACnE,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAA;QAEtC,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;QACtD,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,8CAA8C,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACjF,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/index.d.ts

@@ -0,0 +1,109 @@
+/**
+ * @rovela/sdk/admin/api
+ *
+ * Admin API route handlers for Next.js App Router.
+ *
+ * These handlers can be re-exported directly in your route files:
+ *
+ * ```typescript
+ * // app/api/admin-auth/[...nextauth]/route.ts
+ * import NextAuth from 'next-auth'
+ * import { createAdminAuthOptions } from '@rovela-ai/sdk/admin'
+ * const handler = NextAuth(createAdminAuthOptions())
+ * export { handler as GET, handler as POST }
+ *
+ * // app/api/admin/products/route.ts
+ * export { GET, POST } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/products/[id]/route.ts
+ * export { getProduct as GET, PUT, DELETE } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/products/[id]/variants/route.ts
+ * export { addVariant as POST } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/products/variants/[variantId]/route.ts
+ * export { updateVariantHandler as PUT, deleteVariantHandler as DELETE } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/orders/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/orders'
+ *
+ * // app/api/admin/orders/[id]/route.ts
+ * export { getOrder as GET, PUT } from '@rovela/sdk/admin/api/orders'
+ *
+ * // app/api/admin/orders/[id]/refund/route.ts
+ * export { POST } from '@rovela/sdk/admin/api/refund'
+ *
+ * // app/api/admin/categories/route.ts
+ * export { GET, POST } from '@rovela/sdk/admin/api/categories'
+ *
+ * // app/api/admin/categories/[id]/route.ts
+ * export { getCategory as GET, PUT, DELETE } from '@rovela/sdk/admin/api/categories'
+ *
+ * // app/api/admin/customers/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/customers'
+ *
+ * // app/api/admin/customers/[id]/route.ts
+ * export { getCustomer as GET, updateCustomer as PUT, deleteCustomer as DELETE } from '@rovela/sdk/admin/api/customers'
+ *
+ * // app/api/admin/stats/route.ts
+ * export { GET } from '@rovela/sdk/admin/api/stats'
+ *
+ * // app/api/admin/setup/route.ts (first-time admin creation)
+ * export { POST } from '@rovela/sdk/admin/api/setup'
+ *
+ * // app/api/admin/check/route.ts (check if admin exists)
+ * export { GET } from '@rovela/sdk/admin/api/check'
+ *
+ * // app/api/admin/settings/route.ts (store settings)
+ * export { GET, PUT } from '@rovela/sdk/admin/api/settings'
+ *
+ * // app/api/admin/stripe-status/route.ts (Stripe connection & tax status)
+ * export { getStripeStatus as GET } from '@rovela/sdk/admin/api'
+ *
+ * // app/api/admin/shipping/zones/route.ts
+ * export { getZones as GET, createZone as POST } from '@rovela/sdk/admin/api/shipping'
+ *
+ * // app/api/admin/shipping/zones/[id]/route.ts
+ * export { getZone as GET, updateZone as PUT, deleteZone as DELETE } from '@rovela/sdk/admin/api/shipping'
+ *
+ * // app/api/admin/shipping/rates/route.ts
+ * export { createRate as POST } from '@rovela/sdk/admin/api/shipping'
+ *
+ * // app/api/admin/shipping/rates/[id]/route.ts
+ * export { updateRate as PUT, deleteRate as DELETE } from '@rovela/sdk/admin/api/shipping'
+ *
+ * // app/api/admin/tax-zones/route.ts
+ * export { getTaxZones as GET, createTaxZone as POST } from '@rovela/sdk/admin/api'
+ *
+ * // app/api/admin/tax-zones/[id]/route.ts
+ * export { getTaxZone as GET, updateTaxZone as PUT, deleteTaxZone as DELETE } from '@rovela/sdk/admin/api'
+ *
+ * // app/api/admin/linked-customer/route.ts (R112: admin ↔ customer role switcher)
+ * export { GET } from '@rovela-ai/sdk/admin/api/linked-customer'
+ * ```
+ */
+export { GET as getProducts, POST as createProduct, getProduct, PUT as updateProduct, DELETE as deleteProduct, addVariant, updateVariantHandler, deleteVariantHandler, } from './products';
+export { POST as bulkProducts } from './products-bulk';
+export { GET as getProductMetrics } from './products-stats';
+export { GET as getSetupGuide, POST as markSetupTask, } from './setup-guide';
+export type { SetupTaskId, SetupTier, SetupTask, SetupGuideResponse } from './setup-guide';
+export { GET as getOrders, getOrder, PUT as updateOrder, getShippoRatesForOrder, shipWithShippo, } from './orders';
+export { POST as processRefund } from './refund';
+export { APPROVE_POST as approveReturn, REJECT_POST as rejectReturn } from './return';
+export { GET as getStats } from './stats';
+export { GET as getCategories, POST as createCategory, getCategory, PUT as updateCategory, DELETE as deleteCategory, } from './categories';
+export { GET as getCustomers, getCustomer, updateCustomer, deleteCustomer, } from './customers';
+export { POST as setupAdmin } from './setup';
+export { GET as checkAdminExists } from './check';
+export { POST as adminForgotPassword } from './forgot-password';
+export { GET as validateAdminResetTokenHandler, POST as adminResetPassword, } from './reset-password';
+export { GET as getUsers, POST as inviteUser, getUser, PATCH as updateUser, DELETE as deleteUser, } from './users';
+export type { AdminListItem } from './users';
+export { GET as validateAdminInviteHandler, POST as acceptAdminInviteHandler, } from './accept-invite';
+export { GET as getMe, PATCH as updateMe, PATCH_PASSWORD as updateMyPassword, } from './me';
+export { GET as getSettings, PUT as updateSettings } from './settings';
+export { GET as getStripeStatus } from './stripe-status';
+export { getCarriers as getShippingCarriers, createCarrier as createShippingCarrier, getCarrier as getShippingCarrier, updateCarrier as updateShippingCarrier, deleteCarrier as deleteShippingCarrier, } from './shipping';
+export { getZones as getShippingZones, createZone as createShippingZone, getZone as getShippingZone, updateZone as updateShippingZone, deleteZone as deleteShippingZone, createRate as createShippingRate, updateRate as updateShippingRate, deleteRate as deleteShippingRate, validateShippoApiKey, saveShippoApiKey, deleteShippoApiKey, } from './shipping';
+export { getTaxZones, createTaxZone, getTaxZone, updateTaxZone, deleteTaxZone, } from './tax-zones';
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/admin/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAGH,OAAO,EACL,GAAG,IAAI,WAAW,EAClB,IAAI,IAAI,aAAa,EACrB,UAAU,EACV,GAAG,IAAI,aAAa,EACpB,MAAM,IAAI,aAAa,EACvB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGtD,OAAO,EAAE,GAAG,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAG3D,OAAO,EACL,GAAG,IAAI,aAAa,EACpB,IAAI,IAAI,aAAa,GACtB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAG1F,OAAO,EACL,GAAG,IAAI,SAAS,EAChB,QAAQ,EACR,GAAG,IAAI,WAAW,EAClB,sBAAsB,EACtB,cAAc,GACf,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,IAAI,IAAI,aAAa,EAAE,MAAM,UAAU,CAAA;AAGhD,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,WAAW,IAAI,YAAY,EAAE,MAAM,UAAU,CAAA;AAGrF,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAA;AAGzC,OAAO,EACL,GAAG,IAAI,aAAa,EACpB,IAAI,IAAI,cAAc,EACtB,WAAW,EACX,GAAG,IAAI,cAAc,EACrB,MAAM,IAAI,cAAc,GACzB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,GAAG,IAAI,YAAY,EACnB,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAA;AAGpB,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,SAAS,CAAA;AAG5C,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAGjD,OAAO,EAAE,IAAI,IAAI,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EACL,GAAG,IAAI,8BAA8B,EACrC,IAAI,IAAI,kBAAkB,GAC3B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,GAAG,IAAI,QAAQ,EACf,IAAI,IAAI,UAAU,EAClB,OAAO,EACP,KAAK,IAAI,UAAU,EACnB,MAAM,IAAI,UAAU,GACrB,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAG5C,OAAO,EACL,GAAG,IAAI,0BAA0B,EACjC,IAAI,IAAI,wBAAwB,GACjC,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,GAAG,IAAI,KAAK,EACZ,KAAK,IAAI,QAAQ,EACjB,cAAc,IAAI,gBAAgB,GACnC,MAAM,MAAM,CAAA;AAGb,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,YAAY,CAAA;AAGtE,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAGxD,OAAO,EACL,WAAW,IAAI,mBAAmB,EAClC,aAAa,IAAI,qBAAqB,EACtC,UAAU,IAAI,kBAAkB,EAChC,aAAa,IAAI,qBAAqB,EACtC,aAAa,IAAI,qBAAqB,GACvC,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,QAAQ,IAAI,gBAAgB,EAC5B,UAAU,IAAI,kBAAkB,EAChC,OAAO,IAAI,eAAe,EAC1B,UAAU,IAAI,kBAAkB,EAChC,UAAU,IAAI,kBAAkB,EAChC,UAAU,IAAI,kBAAkB,EAChC,UAAU,IAAI,kBAAkB,EAChC,UAAU,IAAI,kBAAkB,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,WAAW,EACX,aAAa,EACb,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,aAAa,CAAA"}