bunderstack 0.17.0-beta.2 → 0.17.0-beta.4

package/CHANGELOG.md

@@ -0,0 +1,233 @@
+# Changelog
+
+All notable changes to `bunderstack` will be documented in this file.
+
+## [0.17.0-beta.4] - 2026-08-12
+
+### Added
+
+- **`auth` accepts a builder** — `auth: ({ db, env }) => BetterAuthConfig`, alongside the existing plain-object form. `db` is the app's own connection, typed from `schema` alone, so better-auth database hooks can live in their own file without importing the app they help type — the same reason `api`, `jobs`, and `routes` take builders. Applications no longer need a second drizzle instance just to give auth hooks a database. Exported `AuthConfigContext`, `AuthConfigInput`, `AuthConfigFactory`, and `resolveAuthConfig`.
+
+## [0.17.0-beta.3] - 2026-08-12
+
+### Breaking
+
+- **The package publishes built `dist`, not raw `src`.** Every entry point now
+  resolves to `dist/<entry>.js` with `dist/<entry>.d.ts` beside it, and the
+  tarball no longer contains TypeScript sources. Consumers therefore typecheck
+  our *declarations*, which `skipLibCheck` can suppress — previously our sources
+  were compiled under the app's own flags, where `exactOptionalPropertyTypes`
+  alone produced 168 errors inside `node_modules` and
+  `noPropertyAccessFromIndexSignature` another 79. A strict app now sees zero
+  (`bun run verify:consumer` packs, installs, and proves it).
+- **`createAuth` returns better-auth's plain `Auth`** instead of the
+  plugin-parameterised instance type. The value is unchanged; only the declared
+  type is narrower, because the inferred one did not survive declaration emit.
+  Plugin endpoints are still reachable through runtime checks.
+- **Relative imports inside the published JS and declarations carry `.js`
+  extensions**, so the build no longer depends on bundler-style resolution.
+
+### Fixed
+
+- **Generated CRUD types survive publishing.** Declaration emit inlined
+  drizzle-valibot's internal generics (`TRefinements`, `TType`) into the
+  published `.d.ts`, where they are unbound — a `notNull` column silently became
+  optional for consumers. `select`, `update`, and `list` schemas now state their
+  types explicitly, which also makes the emitted API dramatically smaller.
+- `lookupIdempotency` no longer takes an unused config parameter, and
+  `Bun.Image` is typed locally so image transforms compile against any
+  `bun-types` version and report a clear error on an older Bun.
+
+### Added
+
+- `bun run build` (and `prepare`/`prepack`) build every package;
+  `scripts/build-package.ts` fails the build if an emitted import resolves to
+  nothing.
+- `bun run verify:consumer` — packs the tarballs, installs them into a scratch
+  app with the strictest common flags and `skipLibCheck: false`, then typechecks
+  and smoke-runs it.
+- `noUnusedParameters` and `noImplicitReturns` are on in every package.
+- The tarball now includes `CHANGELOG.md`, and the README links to the migration
+  guides with absolute URLs so they are reachable from an installed package.
+
+## [0.17.0-beta.2] - 2026-08-12
+
+Migration guide: [docs/MIGRATION-0.17.md](https://github.com/kirill-dev-pro/bunderstack/blob/main/docs/MIGRATION-0.17.md).
+
+### Breaking
+
+- **Generated `list` takes a typed, nested `filters` object.** Filter, sort, and
+  paging parameters are now declared by a per-table schema derived from the
+  table's columns and its `access` allowlists, and query strings are coerced to
+  those types by oRPC's `SmartCoercionHandlerPlugin`. `?filters[authorId]=u1`
+  replaces `?authorId=u1`, `?filters[id][]=a&filters[id][]=b` replaces the
+  comma-separated `?id=a,b`, and a bare query param is now a 400 instead of a
+  silent filter. On the client, `filters` autocompletes to real columns and
+  rejects wrong value types at compile time.
+- **Error codes are oRPC's own codes.** `VALIDATION_ERROR` → `BAD_REQUEST`,
+  `RATE_LIMITED` → `TOO_MANY_REQUESTS`. `BUNDERSTACK_ERROR_STATUS_MAP` is
+  removed along with the handlers' `errorStatusMap` override.
+- **Realtime events and subscriptions name tables by schema key**, not SQL table
+  name, so one name works for procedures, subscriptions, and events. Only
+  affects apps whose schema key differs from the table name.
+- **`ScopedCollectionOptions.filter` → `filters`** in `bunderstack-sync`, and
+  `table.list(input)` forwards its input to the procedure unchanged.
+- **`filterableColumns` / `sortableColumns` no longer reject** column names like
+  `limit` or `sort`; nesting removed the collision that made the rule necessary.
+
+### Fixed
+
+- **Client errors answer 4xx instead of 500.** Because the custom status map had
+  no entry for oRPC's own codes, every schema failure and every rate-limit
+  rejection answered HTTP 500 with a 4xx code in the body — on both REST and
+  RPC. Validation responses now also carry `details` naming the failing field.
+- **REST list parameters work.** `?offset=` and `?count=` failed validation
+  because only `limit` was coerced from its query string; numeric, boolean, and
+  date filters had no way through at all.
+- **`operations.list` no longer reads the raw request URL.** The validated input
+  is the only source, so a query param can no longer bypass the procedure schema
+  and reach the WHERE clause.
+- **Realtime updates reach sync collections** for tables whose schema key is not
+  the SQL name; they previously degraded to refetch-only.
+- **Packages compile under a consumer's `noUnusedLocals`.** Type-probe files are
+  excluded from the tarball, unused imports are gone, and every package builds
+  with the flag on so this cannot rot again (`scripts/packaging-contract.test.ts`).
+
+### Added
+
+- **`ApiContext` is exported**, so shared middleware can be declared as
+  `os.$context<ApiContext<typeof schema>>()` instead of over a hand-written
+  minimal context.
+- `@orpc/json-schema` as a direct dependency (query/body coercion plugin).
+
+## [0.17.0-beta.0] - 2026-08-11
+
+The oRPC-first redesign: one procedure graph for CRUD, storage, realtime, and
+custom procedures, served as RPC at `/api/rpc/*` and REST/OpenAPI at `/api/*`.
+
+### Breaking
+
+- **tRPC is replaced by oRPC.** `trpc:` → `api:`, `.query()`/`.mutation()` →
+  `.handler()`, `ctx` → `context`. `@trpc/server` is no longer a dependency.
+- **Validation is Standard Schema** (valibot in the box; zod and arktype work,
+  with valibot the only vendor the bundled OpenAPI generator can convert).
+- **Realtime runs on oRPC Publisher** as an event-iterator procedure at
+  `/api/realtime`, with heartbeats and `Last-Event-ID` resume; the previous
+  in-house broker is gone.
+- **Storage and CRUD are procedures**, not bespoke Hono handlers.
+- **`bunderstack-query` exposes oRPC's TanStack Query utilities.**
+  `queryOptions(input, opts)` → `queryOptions({ input, ...opts })`,
+  `keys.all` → `key()`; `listQuery`/`getQuery` are gone.
+
+## [0.16.0] - 2026-08-07
+
+### Breaking
+
+- **Cron collapsed into the jobs table.** A cron occurrence is now an ordinary queue job with `type = 'cron:<name>'`, `runAt = <slot>`, and `dedupeKey = String(slot)`, reusing the existing `unique(type, dedupeKey)` constraint for exactly-once slot ownership. The `_bunderstack_cron_runs` table is dropped — **run `drizzle-kit generate` and apply the migration**.
+- **Removed `app.startCronScheduler()`.** Cron runs through the same tick everywhere, so the development/production split no longer exists.
+- **Removed the signed cron endpoints** `POST /api/_bunderstack/cron/:name` and `POST /api/_bunderstack/maintenance/:name`, along with `signScheduleRequest` / `verifyScheduleRequest` and the `BUNDERSTACK_CRON_SECRET` environment variable. Platforms no longer dispatch individual cron slots.
+- **`bunderstack/cron` export changed.** It no longer re-exports the signing helpers; it now exports `parseCron`, `cronMatches`, `slotsDue`, `floorSlot`, `CRON_PREFIX`, and `SLOT_MS`.
+- **`JobsRuntimeFacade.tick()` returns `TickResult`** (`{ claimed, ran, failed }`) instead of `void`.
+- **Queue job names may not begin with `cron:`** — the prefix is reserved and rejected at startup.
+- **`concurrency` is rejected on cron definitions** at startup; cron slots are already unique.
+- **Removed the `envSource` config option**, replaced by `processEnv` (see below).
+
+### Added
+
+- **`BUNDERSTACK_ROLE`** (`all` | `web` | `worker`, default `all`) makes process topology a deployment concern. The background loop starts automatically when the role includes the worker; no application code calls `startWorker()`. Override with `background: { autoStart: false }`.
+- **`app.backgroundRunning`** reports whether this process runs the background loop.
+- **Cron definitions gained `retries`, `backoff`, `timeout`, and `onFailed`**, matching queue jobs. Previously a throwing cron handler was never retried.
+- **Cron definitions gained `catchUp`** (`'latest'` default, or `'all'`) and `catchUpWindow` (default 1 hour) controlling how missed slots are handled after downtime.
+- **`routes` config option** — a builder callback `(ctx) => Hono` mounting custom Hono routes at root, ahead of bunderstack's own. The context carries `db`, `env`, `storage`, `email`, `jobs`, `realtime`, `auth`, plus lazy `getSession(request)` / `getUser(request)`. Exported as `BunderstackRouteContext`.
+- **`processEnv` config option** — a single stand-in for `process.env`, feeding both env validation and platform overrides. Replaces `envSource` and unifies what were three separate injection points.
+- **`typecheck` script** on the package.
+
+### Fixed
+
+- **Terminal job updates are fenced on the held lease.** A worker whose lease expired could previously mark a row `succeeded` after another worker re-claimed and re-ran it, and could fire `onFailed` twice.
+- **Retry backoff is jittered** (±20%), so jobs failed by a shared outage no longer retry in lockstep.
+- **Custom routes are rate limited.** Routes mounted via `routes` sit inside the rate-limited app; the previous external-wrapper workaround left them uncovered.
+- **`bunderstack/cron` no longer imports a deleted module.** The entry point was broken at runtime.
+- **Succeeded-row reaping moved off the per-tick path** to at most hourly. Retention is unchanged at 24h.
+- `tableEntryForName` is defined once in `access.ts` instead of copied into four modules, so CRUD, realtime, and route validation cannot disagree on which tables are enabled.
+
+## [0.15.2] - 2026-08-05
+
+### Fixed
+
+- S3 uploads carry the correct content type.
+- Documented the nested `node_modules` resolution issue for consumers.
+
+## [0.15.1] - 2026-08-04
+
+### Fixed
+
+- Blueprint generator tests use a cross-platform temp directory; the CLI is
+  marked executable.
+
+## [0.15.0] - 2026-08-04
+
+### Added
+
+- **Deployment blueprints** (`bunderstack blueprint`) — static deploy metadata a
+  hosting platform can read without executing application code.
+
+## [0.13.0] - 2026-08-01
+
+### Added
+
+- **`StorageFacade.upload()`** for server-generated files.
+- Nested file paths in the storage `GET`/`DELETE` routes.
+
+## [0.12.0] - 2026-07-31
+
+### Added
+
+- **`storage` in the procedure context**, alongside `db`, `env`, and the rest.
+
+### Fixed
+
+- Presign fallback uses the configured default bucket.
+
+## [0.11.0] - 2026-07-30
+
+### Added
+
+- **`BunderstackJobContext`** exported as a type alias for typing job handlers.
+
+## [0.10.0] - 2026-07-28
+
+### Added
+
+- **Static Deployment Metadata**: Preserve cron schedule literals in the public jobs type so hosting platforms can infer deployment requirements without executing application code.
+
+### Fixed
+
+- **Browser Timer Compatibility**: Accept numeric timer handles in the local cron scheduler.
+
+## [0.9.1] - 2026-07-26
+
+### Fixed
+
+- **npm Publish Workspace Resolution**: Automatically sanitize `workspace:*` dependency protocols to exact version specifiers (`^0.9.1`) during `npm publish` in CI/CD pipeline.
+
+## [0.9.0] - 2026-07-26
+
+### Added
+
+- **Realtime Transport Metadata**: Added `realtime.transport` (`'disabled' | 'memory' | 'redis'`) to `RealtimeFacade` and `app.realtime`.
+- **Manifest Transport Inspection**: Added `realtimeTransport` field to `BunderstackManifest` and `buildManifest()` for platform introspection (Bunderhost).
+- **Standalone Worker Transport Safety**: `app.runWorker()` now rejects in-memory realtime brokers by default to prevent silent event loss between web and worker processes. Added `allowProcessLocalRealtime?: boolean` flag for workers that do not publish realtime events.
+- Exported `RealtimeTransport` and `createRealtimeFacade` from `bunderstack`.
+
+### Fixed
+
+- Fixed test isolation in worker and introspection unit tests when `process.env.REDIS_URL` is set in the execution environment.
+
+## [0.8.0] - 2026-07-25
+
+### Added
+
+- **Static Dependency Boundaries**: Clean separation of database, auth, email, and storage adapter boundaries.
+- **JobContext & tRPC Context Realtime**: Wired generic-typed `ctx.realtime` into background job handlers and tRPC procedures.
+- **DB Provisioning Internals**: Standalone `bunderstack/provision` module for database migration tooling.

package/README.md

@@ -44,9 +44,19 @@ Use the in-memory Publisher for one process or configure
 `realtime: { redis: process.env.REDIS_URL! }` for multi-process delivery and
 replay. Deployment metadata is generated with `bunx bunderstack blueprint`.
 
-See the [workspace documentation](../../README.md) for webhooks, clients,
+See the [workspace documentation](https://github.com/kirill-dev-pro/bunderstack#readme) for webhooks, clients,
 storage, collections, lifecycle, and complete examples.
 
+## Upgrading
+
+0.17 is a breaking release: tRPC became oRPC, generated `list` takes nested
+typed `filters`, error codes are oRPC's own, and realtime names tables by their
+schema key. Every change is listed with before/after code in the migration
+guides, which ship with the package as `CHANGELOG.md` and live in full at:
+
+- [Migrating to 0.17](https://github.com/kirill-dev-pro/bunderstack/blob/main/docs/MIGRATION-0.17.md)
+- [Migrating to 0.16](https://github.com/kirill-dev-pro/bunderstack/blob/main/docs/MIGRATION-0.16.md)
+
 ## License
 
 MIT

package/dist/access.d.ts

@@ -0,0 +1,116 @@
+export declare const AUTH_TABLE_NAMES: Set<string>;
+export type AccessUser = {
+    id: string;
+    email: string;
+    name?: string;
+    role?: string;
+};
+export type AccessContext = {
+    user: AccessUser | null;
+    request: Request;
+    row?: Record<string, unknown>;
+    body?: Record<string, unknown>;
+    session?: {
+        activeOrganizationId: string | null;
+    } | null;
+};
+export type OperationRule = 'public' | 'authenticated' | 'owner' | 'deny' | ((ctx: AccessContext) => boolean | Promise<boolean>);
+export type ScopeMap = Record<string, string | string[]>;
+export type ScopeResolver = (ctx: AccessContext) => ScopeMap;
+export type CrudOperation = 'list' | 'get' | 'create' | 'update' | 'delete';
+export type SortOrder = 'asc' | 'desc';
+export type DefaultSort = {
+    column: string;
+    order: SortOrder;
+};
+export type TableAccessInput = {
+    crud?: boolean;
+    /** Opt the BetterAuth `user` table into auto-CRUD (read profiles, owner-update image). */
+    exposeAuthTable?: boolean;
+    ownerColumn?: string;
+    list?: OperationRule;
+    get?: OperationRule;
+    create?: OperationRule;
+    update?: OperationRule;
+    delete?: OperationRule;
+    /** Explicit write allowlist. Entries override matching system-readonly
+     * defaults such as `updatedAt`; `id` remains immutable on update. */
+    writableColumns?: string[];
+    readonlyColumns?: string[];
+    /** Columns matched by `?q=` on list — opt-in; omitted columns are never searched. */
+    searchableColumns?: string[];
+    /** Columns filterable via flat `?column=value` query params. */
+    filterableColumns?: string[];
+    /** Columns allowed in `?sort=`. Defaults to `['id']`. */
+    sortableColumns?: string[];
+    /** Default list ordering when `?sort` is omitted. Defaults to `{ column: 'id', order: 'desc' }`. */
+    defaultSort?: DefaultSort;
+    scope?: {
+        read?: ScopeResolver;
+        write?: ScopeResolver;
+    };
+};
+export type ResolvedTableAccess = {
+    tableKey: string;
+    tableName: string;
+    enabled: boolean;
+    ownerColumn?: string;
+    list: OperationRule;
+    get: OperationRule;
+    create: OperationRule;
+    update: OperationRule;
+    delete: OperationRule;
+    writableColumns?: string[];
+    readonlyColumns: string[];
+    searchableColumns?: string[];
+    filterableColumns: string[];
+    sortableColumns: string[];
+    defaultSort: DefaultSort;
+    readScope?: ScopeResolver;
+    writeScope?: ScopeResolver;
+};
+export type ResolvedAccess = Map<string, ResolvedTableAccess>;
+/**
+ * Look up a table's resolved access by its physical table name.
+ *
+ * `ResolvedAccess` is keyed by schema export name, not table name, so every
+ * consumer that starts from a physical name needs this scan. It lives here so
+ * CRUD, realtime, and route validation cannot drift apart on which tables they
+ * consider enabled.
+ */
+export declare function tableEntryForName(access: ResolvedAccess, tableName: string): ResolvedTableAccess | undefined;
+export declare function validateAndResolveAccess<TSchema extends Record<string, unknown>>(schema: TSchema, accessInput?: Record<string, TableAccessInput>): ResolvedAccess;
+export declare function defineAccess<TSchema extends Record<string, unknown>, const TRules extends Record<string, TableAccessInput>>(schema: TSchema, rules: TRules): TRules;
+export declare function rowMatchesScope(row: Record<string, unknown>, scope: ScopeMap): boolean;
+export declare function stampScope(values: Record<string, unknown>, scope: ScopeMap): Record<string, unknown>;
+export declare function checkAccessSync(rule: Exclude<OperationRule, (ctx: AccessContext) => boolean | Promise<boolean>>, ctx: AccessContext, ownerColumn?: string): {
+    allowed: boolean;
+};
+export declare function checkAccess(rule: OperationRule, ctx: AccessContext, ownerColumn?: string): Promise<{
+    allowed: boolean;
+    status: 401 | 403;
+}>;
+export declare function sanitizeWriteBody(body: Record<string, unknown>, access: ResolvedTableAccess, mode: 'create' | 'update', userId: string | null): Record<string, unknown>;
+export type AuthSessionResolver = {
+    api: {
+        getSession: (opts: {
+            headers: Headers;
+        }) => Promise<{
+            user: {
+                id: string;
+                email: string;
+                name?: string;
+                role?: string;
+            } | null;
+            session?: {
+                activeOrganizationId?: string | null;
+            } | null;
+        } | null>;
+    };
+};
+export declare function resolveAccessUser(auth: AuthSessionResolver | undefined, headers: Headers): Promise<AccessUser | null>;
+export declare function resolveSession(auth: AuthSessionResolver | undefined, headers: Headers): Promise<{
+    user: AccessUser | null;
+    activeOrganizationId: string | null;
+}>;
+//# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gBAAgB,aAK3B,CAAA;AAIF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE;QAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;CACzD,CAAA;AAED,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,eAAe,GACf,OAAO,GACP,MAAM,GACN,CAAC,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;AAExD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAA;AACxD,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,QAAQ,CAAA;AAE5D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3E,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAA;AAEtC,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,SAAS,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,0FAA0F;IAC1F,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,GAAG,CAAC,EAAE,aAAa,CAAA;IACnB,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB;yEACqE;IACrE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,oGAAoG;IACpG,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,aAAa,CAAA;QACpB,KAAK,CAAC,EAAE,aAAa,CAAA;KACtB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,aAAa,CAAA;IACnB,GAAG,EAAE,aAAa,CAAA;IAClB,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,aAAa,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,UAAU,CAAC,EAAE,aAAa,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;AAE7D;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,MAAM,GAChB,mBAAmB,GAAG,SAAS,CAKjC;AA+GD,wBAAgB,wBAAwB,CACtC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEvC,MAAM,EAAE,OAAO,EACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAC7C,cAAc,CA4IhB;AAED,wBAAgB,YAAY,CAC1B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACrD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGxC;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,KAAK,EAAE,QAAQ,GACd,OAAO,CAWT;AAED,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,QAAQ,GACd,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,CACX,aAAa,EACb,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CACnD,EACD,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAWtB;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;CAAE,CAAC,CAwBlD;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,EACzB,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4BzB;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE;QACH,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC;YAClD,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAA;YACxE,OAAO,CAAC,EAAE;gBAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;aAAE,GAAG,IAAI,CAAA;SAC1D,GAAG,IAAI,CAAC,CAAA;KACV,CAAA;CACF,CAAA;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,GAAG,SAAS,EACrC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAU5B;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,mBAAmB,GAAG,SAAS,EACrC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAa3E"}