@databehave/server 0.1.0

package/dist/validation/validate.js

@@ -0,0 +1,372 @@
+const DEPTH_CAP = 64;
+const PATTERN_MAX_LENGTH = 1024;
+// Maximum recursion depth for deepEqual when comparing user input against
+// `enum` choices. Beyond this we return false (treat as not-equal — the
+// input fails the enum check and the caller emits a 422). The cap exists
+// to prevent stack overflow on attacker-supplied deeply-nested values.
+const DEEP_EQUAL_DEPTH_CAP = 64;
+const POLLUTED_KEYS = new Set([
+    '__proto__', 'constructor', 'prototype',
+]);
+const UNSUPPORTED_KEYWORDS = new Set([
+    'if', 'then', 'else',
+    'dependentSchemas', 'dependentRequired',
+    'unevaluatedProperties', 'unevaluatedItems',
+    'contentEncoding', 'contentMediaType',
+    'propertyNames', 'patternProperties',
+]);
+const FORMAT_DATE = /^\d{4}-\d{2}-\d{2}$/;
+const FORMAT_DATE_TIME = /^\d{4}-\d{2}-\d{2}[Tt]\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:[Zz]|[+-]\d{2}:\d{2})$/;
+const FORMAT_UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+// Deliberately simple sane-default email regex. RFC 5322 is far stricter
+// and rejects edge cases real users care about; consumers who need
+// RFC 5322 should add a `pattern` to the schema and rely on the walker's
+// `pattern` keyword instead.
+const FORMAT_EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const isObj = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const deepEqual = (a, b, depth = 0) => {
+    if (depth > DEEP_EQUAL_DEPTH_CAP)
+        return false;
+    if (a === b)
+        return true;
+    if (typeof a !== typeof b || a === null || b === null)
+        return false;
+    if (Array.isArray(a)) {
+        if (!Array.isArray(b) || a.length !== b.length)
+            return false;
+        for (let i = 0; i < a.length; i++) {
+            if (!deepEqual(a[i], b[i], depth + 1))
+                return false;
+        }
+        return true;
+    }
+    if (typeof a === 'object') {
+        const ao = a;
+        const bo = b;
+        const ak = Object.keys(ao);
+        if (ak.length !== Object.keys(bo).length)
+            return false;
+        for (const k of ak) {
+            if (!Object.hasOwn(bo, k) || !deepEqual(ao[k], bo[k], depth + 1))
+                return false;
+        }
+        return true;
+    }
+    return false;
+};
+const buildErr = (ctx, message) => new Error(`@databehave/server/validation: ${message} (at ${ctx.schemaPointer})`);
+const enterPtr = (ctx, segment) => ({
+    ...ctx,
+    schemaPointer: `${ctx.schemaPointer}/${segment}`,
+    depth: ctx.depth + 1,
+});
+const resolveRef = (ref, ctx) => {
+    if (ref.includes('://'))
+        throw buildErr(ctx, `unsupported $ref: ${ref}`);
+    const m = /^#\/components\/schemas\/(.+)$/.exec(ref);
+    if (!m)
+        throw buildErr(ctx, `unsupported $ref: ${ref}`);
+    const name = decodeURIComponent(m[1]);
+    const target = ctx.doc.components?.schemas?.[name];
+    if (!target)
+        throw buildErr(ctx, `$ref not found: ${ref}`);
+    return target;
+};
+const checkFormat = (f, v) => {
+    switch (f) {
+        case 'date': return FORMAT_DATE.test(v) && !Number.isNaN(Date.parse(`${v}T00:00:00Z`));
+        case 'date-time': return FORMAT_DATE_TIME.test(v) && !Number.isNaN(Date.parse(v));
+        case 'email': return FORMAT_EMAIL.test(v);
+        case 'uuid': return FORMAT_UUID.test(v);
+        case 'uri': try {
+            new URL(v);
+            return true;
+        }
+        catch {
+            return false;
+        }
+        default: return true;
+    }
+};
+const typeOk = (t, value) => {
+    switch (t) {
+        case 'string': return typeof value === 'string';
+        case 'integer': return typeof value === 'number' && Number.isInteger(value);
+        case 'number': return typeof value === 'number' && !Number.isNaN(value);
+        case 'boolean': return typeof value === 'boolean';
+        case 'null': return value === null;
+        case 'array': return Array.isArray(value);
+        case 'object': return isObj(value);
+        default: return true;
+    }
+};
+const NUMERIC = [
+    ['minimum', (v, l) => v >= l, 'is less than minimum'],
+    ['maximum', (v, l) => v <= l, 'is greater than maximum'],
+    ['exclusiveMinimum', (v, l) => v > l, 'is not greater than exclusiveMinimum'],
+    ['exclusiveMaximum', (v, l) => v < l, 'is not less than exclusiveMaximum'],
+];
+export const compileValidator = (node, doc, schemaPointer = '#') => build(node, { doc, refStack: [], depth: 0, schemaPointer });
+const build = (node, ctx) => {
+    if (ctx.depth > DEPTH_CAP) {
+        throw buildErr(ctx, `schema nesting exceeds depth cap of ${DEPTH_CAP}`);
+    }
+    if (!isObj(node))
+        throw buildErr(ctx, 'schema node must be an object');
+    for (const key of Object.keys(node)) {
+        if (UNSUPPORTED_KEYWORDS.has(key)) {
+            throw buildErr(ctx, `unsupported JSON Schema keyword: ${key}`);
+        }
+    }
+    if (typeof node.$ref === 'string') {
+        if (ctx.refStack.includes(node.$ref)) {
+            throw buildErr(ctx, `$ref cycle detected: ${[...ctx.refStack, node.$ref].join(' -> ')}`);
+        }
+        const target = resolveRef(node.$ref, ctx);
+        return build(target, {
+            doc: ctx.doc,
+            refStack: [...ctx.refStack, node.$ref],
+            depth: ctx.depth + 1,
+            schemaPointer: node.$ref,
+        });
+    }
+    const typeArray = Array.isArray(node.type) ? node.type : null;
+    const allowsNull = node.nullable === true ||
+        (typeArray !== null && typeArray.includes('null'));
+    const checks = [];
+    if (typeof node.type === 'string') {
+        const t = node.type;
+        checks.push((v, p) => (v === null && allowsNull) || typeOk(t, v)
+            ? []
+            : [{ path: p, keyword: 'type', message: `expected ${t}` }]);
+    }
+    else if (typeArray) {
+        const nonNull = typeArray.filter((t) => t !== 'null');
+        if (nonNull.length > 0) {
+            checks.push((v, p) => {
+                if (v === null && allowsNull)
+                    return [];
+                for (const t of nonNull)
+                    if (typeOk(t, v))
+                        return [];
+                return [{ path: p, keyword: 'type', message: `value did not match any of the allowed types: ${nonNull.join(', ')}` }];
+            });
+        }
+    }
+    if (Array.isArray(node.enum)) {
+        const choices = node.enum;
+        checks.push((v, p) => choices.some((c) => deepEqual(v, c))
+            ? []
+            : [{ path: p, keyword: 'enum', message: 'value is not one of the allowed enum entries' }]);
+    }
+    if (typeof node.minLength === 'number') {
+        const m = node.minLength;
+        checks.push((v, p) => typeof v === 'string' && [...v].length < m
+            ? [{ path: p, keyword: 'minLength', message: `string is shorter than minLength ${m}` }]
+            : []);
+    }
+    if (typeof node.maxLength === 'number') {
+        const m = node.maxLength;
+        checks.push((v, p) => typeof v === 'string' && [...v].length > m
+            ? [{ path: p, keyword: 'maxLength', message: `string is longer than maxLength ${m}` }]
+            : []);
+    }
+    if (typeof node.pattern === 'string') {
+        const pattern = node.pattern;
+        if (pattern.length > PATTERN_MAX_LENGTH) {
+            throw buildErr(ctx, `pattern length ${pattern.length} exceeds cap of ${PATTERN_MAX_LENGTH} (ReDoS guard)`);
+        }
+        // FAIL LOUD: a `pattern` without an own `maxLength` is a ReDoS
+        // footgun — even with `PATTERN_MAX_LENGTH` capping the regex itself,
+        // catastrophic-backtracking patterns can still be triggered by
+        // unbounded user input. Force schema authors to declare an upper
+        // bound at the same node where the `pattern` lives. We deliberately
+        // do NOT walk up parent schemas: the cap belongs next to the
+        // pattern, not somewhere ambient.
+        if (typeof node.maxLength !== 'number') {
+            throw buildErr(ctx, `pattern requires maxLength on the same schema (footgun: ReDoS) at ${ctx.schemaPointer}`);
+        }
+        let re;
+        try {
+            re = new RegExp(pattern);
+        }
+        catch (err) {
+            throw buildErr(ctx, `invalid pattern: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        checks.push((v, p) => typeof v === 'string' && !re.test(v)
+            ? [{ path: p, keyword: 'pattern', message: 'string does not match the required pattern' }]
+            : []);
+    }
+    if (typeof node.format === 'string') {
+        const f = node.format;
+        if (f === 'date' || f === 'date-time' || f === 'email' || f === 'uuid' || f === 'uri') {
+            checks.push((v, p) => typeof v === 'string' && !checkFormat(f, v)
+                ? [{ path: p, keyword: 'format', message: `must be a valid ${f}` }]
+                : []);
+        }
+    }
+    for (const [key, op, label] of NUMERIC) {
+        const limit = node[key];
+        if (typeof limit === 'number') {
+            checks.push((v, p) => typeof v === 'number' && !op(v, limit)
+                ? [{ path: p, keyword: key, message: `value ${label} ${limit}` }]
+                : []);
+        }
+    }
+    if (typeof node.minItems === 'number') {
+        const m = node.minItems;
+        checks.push((v, p) => Array.isArray(v) && v.length < m
+            ? [{ path: p, keyword: 'minItems', message: `array has fewer than ${m} items` }]
+            : []);
+    }
+    if (typeof node.maxItems === 'number') {
+        const m = node.maxItems;
+        checks.push((v, p) => Array.isArray(v) && v.length > m
+            ? [{ path: p, keyword: 'maxItems', message: `array has more than ${m} items` }]
+            : []);
+    }
+    if (node.items) {
+        const inner = build(node.items, enterPtr(ctx, 'items'));
+        checks.push((v, p) => {
+            if (!Array.isArray(v))
+                return [];
+            const out = [];
+            for (let i = 0; i < v.length; i++)
+                out.push(...inner(v[i], `${p}/${i}`));
+            return out;
+        });
+    }
+    const required = Array.isArray(node.required) ? node.required : null;
+    const properties = isObj(node.properties) ? node.properties : null;
+    const additional = node.additionalProperties;
+    let propValidators = null;
+    if (properties) {
+        propValidators = new Map();
+        for (const [k, v] of Object.entries(properties)) {
+            if (POLLUTED_KEYS.has(k)) {
+                throw buildErr(ctx, `forbidden property name in schema.properties: ${k}`);
+            }
+            propValidators.set(k, build(v, enterPtr(ctx, `properties/${k}`)));
+        }
+    }
+    let additionalValidator = null;
+    let additionalAllowed = true;
+    if (additional === false)
+        additionalAllowed = false;
+    else if (isObj(additional)) {
+        additionalValidator = build(additional, enterPtr(ctx, 'additionalProperties'));
+    }
+    if (required || properties || additional !== undefined) {
+        checks.push((v, p) => {
+            if (!isObj(v))
+                return [];
+            const out = [];
+            const ownKeys = Object.keys(v);
+            for (const k of ownKeys) {
+                if (POLLUTED_KEYS.has(k)) {
+                    out.push({ path: `${p}/${k}`, keyword: 'prototypePollution', message: 'forbidden property name (prototype pollution guard)' });
+                }
+            }
+            if (required) {
+                for (const r of required) {
+                    if (!Object.hasOwn(v, r)) {
+                        out.push({ path: `${p}/${r}`, keyword: 'required', message: 'missing required property' });
+                    }
+                }
+            }
+            for (const k of ownKeys) {
+                if (POLLUTED_KEYS.has(k))
+                    continue;
+                const child = propValidators?.get(k);
+                if (child) {
+                    out.push(...child(v[k], `${p}/${k}`));
+                    continue;
+                }
+                if (!additionalAllowed) {
+                    out.push({ path: `${p}/${k}`, keyword: 'additionalProperties', message: 'unexpected additional property' });
+                    continue;
+                }
+                if (additionalValidator)
+                    out.push(...additionalValidator(v[k], `${p}/${k}`));
+            }
+            return out;
+        });
+    }
+    if (Array.isArray(node.allOf)) {
+        const subs = node.allOf.map((n, i) => build(n, enterPtr(ctx, `allOf/${i}`)));
+        checks.push((v, p) => subs.flatMap((s) => s(v, p)));
+    }
+    if (Array.isArray(node.anyOf)) {
+        const subs = node.anyOf.map((n, i) => build(n, enterPtr(ctx, `anyOf/${i}`)));
+        checks.push((v, p) => subs.some((s) => s(v, p).length === 0)
+            ? []
+            : [{ path: p, keyword: 'anyOf', message: 'value did not match any of the anyOf schemas' }]);
+    }
+    if (Array.isArray(node.oneOf)) {
+        const subs = node.oneOf.map((n, i) => build(n, enterPtr(ctx, `oneOf/${i}`)));
+        const disc = node.discriminator;
+        if (disc) {
+            const { propertyName, mapping } = disc;
+            const mapBuilt = new Map();
+            if (mapping) {
+                for (const [k, ref] of Object.entries(mapping)) {
+                    const childCtx = enterPtr(ctx, `discriminator/mapping/${k}`);
+                    // Defensive: any structural $ref cycle is caught at the
+                    // top-level $ref descent above before the discriminator
+                    // block runs.
+                    /* c8 ignore start */
+                    if (childCtx.refStack.includes(ref)) {
+                        throw buildErr(childCtx, `$ref cycle detected: ${ref}`);
+                    }
+                    /* c8 ignore stop */
+                    const target = resolveRef(ref, childCtx);
+                    mapBuilt.set(k, build(target, {
+                        ...childCtx,
+                        refStack: [...childCtx.refStack, ref],
+                        schemaPointer: ref,
+                    }));
+                }
+            }
+            checks.push((v, p) => {
+                if (!isObj(v)) {
+                    return [{ path: p, keyword: 'discriminator', message: `value must be an object to use discriminator '${propertyName}'` }];
+                }
+                const tag = v[propertyName];
+                if (typeof tag !== 'string') {
+                    return [{ path: `${p}/${propertyName}`, keyword: 'discriminator', message: `discriminator '${propertyName}' missing or not a string` }];
+                }
+                const sub = mapBuilt.get(tag);
+                if (sub)
+                    return sub(v, p);
+                const matches = subs.filter((s) => s(v, p).length === 0);
+                if (matches.length === 1)
+                    return [];
+                // Never echo the user-supplied tag — it is unsanitised input
+                // and ends up rendered in client error toasts / logs.
+                return [{ path: `${p}/${propertyName}`, keyword: 'discriminator', message: `unknown discriminator value '[redacted]'` }];
+            });
+        }
+        else {
+            checks.push((v, p) => {
+                let passing = 0;
+                for (const s of subs)
+                    if (s(v, p).length === 0)
+                        passing++;
+                if (passing === 1)
+                    return [];
+                if (passing === 0)
+                    return [{ path: p, keyword: 'oneOf', message: 'value did not match any of the oneOf schemas' }];
+                return [{ path: p, keyword: 'oneOf', message: `value matched ${passing} oneOf schemas (must match exactly one)` }];
+            });
+        }
+    }
+    return (value, pointer) => {
+        if (value === null && allowsNull)
+            return [];
+        const out = [];
+        for (const c of checks)
+            out.push(...c(value, pointer));
+        return out;
+    };
+};
+//# sourceMappingURL=validate.js.map

package/dist/validation/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/validation/validate.ts"],"names":[],"mappings":"AAuCA,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAE/B,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,WAAW,EAAE,aAAa,EAAE,WAAW;CACxC,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,IAAI,EAAE,MAAM,EAAE,MAAM;IACpB,kBAAkB,EAAE,mBAAmB;IACvC,uBAAuB,EAAE,kBAAkB;IAC3C,iBAAiB,EAAE,kBAAkB;IACrC,eAAe,EAAE,mBAAmB;CACrC,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,qBAAqB,CAAA;AACzC,MAAM,gBAAgB,GACpB,4EAA4E,CAAA;AAC9E,MAAM,WAAW,GACf,+EAA+E,CAAA;AACjF,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,6BAA6B;AAC7B,MAAM,YAAY,GAAG,4BAA4B,CAAA;AAEjD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CACzD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAE1D,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;IAC/D,IAAI,KAAK,GAAG,oBAAoB;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAA;QACrD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,CAA4B,CAAA;QACvC,MAAM,EAAE,GAAG,CAA4B,CAAA;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAA;QAChF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AASD,MAAM,QAAQ,GAAG,CAAC,GAAa,EAAE,OAAe,EAAS,EAAE,CACzD,IAAI,KAAK,CAAC,kCAAkC,OAAO,QAAQ,GAAG,CAAC,aAAa,GAAG,CAAC,CAAA;AAElF,MAAM,QAAQ,GAAG,CAAC,GAAa,EAAE,OAAe,EAAY,EAAE,CAAC,CAAC;IAC9D,GAAG,GAAG;IACN,aAAa,EAAE,GAAG,GAAG,CAAC,aAAa,IAAI,OAAO,EAAE;IAChD,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;CACrB,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,GAAa,EAAW,EAAE;IACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,qBAAqB,GAAG,EAAE,CAAC,CAAA;IACxE,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,CAAC,CAAC;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,qBAAqB,GAAG,EAAE,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAA;IAC1D,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IACpD,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;QACtF,KAAK,WAAW,CAAC,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QAClE,OAAO,CAAC,CAAC,OAAO,IAAI,CAAA;IACtB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,KAAc,EAAW,EAAE;IACpD,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,QAAQ,CAAC,CAAC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAA;QAC/C,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC3E,KAAK,QAAQ,CAAC,CAAC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvE,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAA;QACjD,KAAK,MAAM,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAA;QAClC,KAAK,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACzC,KAAK,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAA;IACtB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,OAAO,GAAuE;IAClF,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IACrD,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,yBAAyB,CAAC;IACxD,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,sCAAsC,CAAC;IAC7E,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,mCAAmC,CAAC;CAC3E,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAa,EACb,GAAW,EACX,aAAa,GAAG,GAAG,EACR,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;AAE3E,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,GAAa,EAAa,EAAE;IACxD,IAAI,GAAG,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,GAAG,EAAE,uCAAuC,SAAS,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IAEtE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,QAAQ,CAAC,GAAG,EAAE,oCAAoC,GAAG,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC,GAAG,EAAE,wBAAwB,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACzC,OAAO,KAAK,CAAC,MAAM,EAAE;YACnB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YACtC,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;YACpB,aAAa,EAAE,IAAI,CAAC,IAAI;SACzB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ,KAAK,IAAI;QACtB,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAEpD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAC7D,CAAA;IACH,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;QACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACnB,IAAI,CAAC,KAAK,IAAI,IAAI,UAAU;oBAAE,OAAO,EAAE,CAAA;gBACvC,KAAK,MAAM,CAAC,IAAI,OAAO;oBAAE,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;wBAAE,OAAO,EAAE,CAAA;gBACpD,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iDAAiD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACvH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAC5F,CAAA;IACH,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;QACxB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,CAAC,EAAE,EAAE,CAAC;YACvF,CAAC,CAAC,EAAE,CACP,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;QACxB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,mCAAmC,CAAC,EAAE,EAAE,CAAC;YACtF,CAAC,CAAC,EAAE,CACP,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACxC,MAAM,QAAQ,CAAC,GAAG,EAAE,kBAAkB,OAAO,CAAC,MAAM,mBAAmB,kBAAkB,gBAAgB,CAAC,CAAA;QAC5G,CAAC;QACD,+DAA+D;QAC/D,qEAAqE;QACrE,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,6DAA6D;QAC7D,kCAAkC;QAClC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,QAAQ,CACZ,GAAG,EACH,qEAAqE,GAAG,CAAC,aAAa,EAAE,CACzF,CAAA;QACH,CAAC;QACD,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAC5C,MAAM,QAAQ,CAAC,GAAG,EAAE,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;YAC1F,CAAC,CAAC,EAAE,CACP,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA;QACrB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;gBACnE,CAAC,CAAC,EAAE,CACP,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACvC,MAAM,KAAK,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAA;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC;gBACpC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,KAAK,IAAI,KAAK,EAAE,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE,CACP,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAA;QACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC;YAChF,CAAC,CAAC,EAAE,CACP,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAA;QACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC;YAC/E,CAAC,CAAC,EAAE,CACP,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAA;YAChC,MAAM,GAAG,GAAgB,EAAE,CAAA;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YACxE,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACpE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAA;IAC5C,IAAI,cAAc,GAAkC,IAAI,CAAA;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,GAAG,IAAI,GAAG,EAAE,CAAA;QAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,QAAQ,CAAC,GAAG,EAAE,iDAAiD,CAAC,EAAE,CAAC,CAAA;YAC3E,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAY,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IACD,IAAI,mBAAmB,GAAqB,IAAI,CAAA;IAChD,IAAI,iBAAiB,GAAG,IAAI,CAAA;IAC5B,IAAI,UAAU,KAAK,KAAK;QAAE,iBAAiB,GAAG,KAAK,CAAA;SAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,mBAAmB,GAAG,KAAK,CAAC,UAAqB,EAAE,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,IAAI,QAAQ,IAAI,UAAU,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAA;YACxB,MAAM,GAAG,GAAgB,EAAE,CAAA;YAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAA;gBAChI,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACzB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;oBAC5F,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,SAAQ;gBAClC,MAAM,KAAK,GAAG,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;gBACpC,IAAI,KAAK,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBAAC,SAAQ;gBAAC,CAAC;gBAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;oBAC3G,SAAQ;gBACV,CAAC;gBACD,IAAI,mBAAmB;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAC7F,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5E,MAAM,IAAI,GAAI,IAAuF,CAAC,aAAa,CAAA;QACnH,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;YACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAA;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC,CAAA;oBAC5D,wDAAwD;oBACxD,wDAAwD;oBACxD,cAAc;oBACd,qBAAqB;oBACrB,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACpC,MAAM,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAA;oBACzD,CAAC;oBACD,oBAAoB;oBACpB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;oBACxC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE;wBAC5B,GAAG,QAAQ;wBACX,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;wBACrC,aAAa,EAAE,GAAG;qBACnB,CAAC,CAAC,CAAA;gBACL,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACnB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,iDAAiD,YAAY,GAAG,EAAE,CAAC,CAAA;gBAC3H,CAAC;gBACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,CAAA;gBAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,YAAY,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,YAAY,2BAA2B,EAAE,CAAC,CAAA;gBACzI,CAAC;gBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC7B,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;gBACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAA;gBACnC,6DAA6D;gBAC7D,sDAAsD;gBACtD,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,YAAY,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAA;YAC1H,CAAC,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACnB,IAAI,OAAO,GAAG,CAAC,CAAA;gBACf,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,EAAE,CAAA;gBACzD,IAAI,OAAO,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAA;gBAC5B,IAAI,OAAO,KAAK,CAAC;oBAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAA;gBAClH,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,OAAO,yCAAyC,EAAE,CAAC,CAAA;YACpH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU;YAAE,OAAO,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAgB,EAAE,CAAA;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;QACtD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;AACH,CAAC,CAAA"}

package/docs/admin/error-mode.md

@@ -0,0 +1,14 @@
+# `ErrorMode` reference
+
+| Kind | Minimal body | Description |
+| - | - | - |
+| `http-status` | `{"kind":"http-status","status":500}` | Force the response status. Body from OAS schema if any. |
+| `business-failure` | `{"kind":"business-failure","message":"…","extra":{ }}` | 2xx envelope `{success:false, message, …extra}`. |
+| `custom-body` | `{"kind":"custom-body","body":{…},"status":200,"contentType":"application/json"}` | Arbitrary body / status / content-type.` |
+| `empty-body` | `{"kind":"empty-body","status":204}` | Empty response body. |
+| `malformed-json` | `{"kind":"malformed-json","status":200}` | Body is literally `{` — clients see `JSON.parse` failure. |
+| `delay` | `{"kind":"delay","ms":2000,"then":{"kind":"http-status","status":500}}` | Sleep `ms`, then run `then` (or passthrough if omitted). |
+| `hang` | `{"kind":"hang"}` | Never resolve — exercises client timeout / hang detection. |
+| `destroy` | `{"kind":"destroy"}` | Drop the socket. Gated by `allowDestroy: true`. |
+
+`delay.then` cannot itself be `delay`, `hang`, or `destroy`.

package/docs/admin/headers.md

@@ -0,0 +1,63 @@
+# `x-mock-*` header reference
+
+Per-request overrides. A header beats every sticky override and is
+discarded after the request. Conflicting terminal headers, an invalid
+base64 payload, or invalid JSON return **HTTP 400** with
+`{error: "invalid …: <reason>"}` so the typo is loud.
+
+| Header                                           | ErrorMode kind         | Example value                          |
+| ------------------------------------------------ | ---------------------- | -------------------------------------- |
+| `x-mock-status`                                  | `http-status`          | `500`                                  |
+| `x-mock-business-failure`                        | `business-failure`     | `update conflict`                      |
+| `x-mock-business-failure-b64`                    | `business-failure`     | `5pON5L2c44GM…` (base64 of UTF-8)      |
+| `x-mock-business-failure-extra`                  | merged into `extra`    | base64-of-JSON object                  |
+| `x-mock-body` (+ `-status`, `-content-type`)     | `custom-body`          | base64 JSON                            |
+| `x-mock-empty` (+ `-status`)                     | `empty-body`           | `1`                                    |
+| `x-mock-malformed` (+ `-status`)                 | `malformed-json`       | `1`                                    |
+| `x-mock-delay`                                   | `delay` (wraps others) | `2000`                                 |
+| `x-mock-hang`                                    | `hang`                 | `1`                                    |
+| `x-mock-destroy`                                 | `destroy`              | `1` (rejected with 503 if `allowDestroy:false`) |
+
+Base64 is standard (not URL-safe). Non-ASCII messages must use the
+`-b64` variant — HTTP headers reject byte values > 255.
+
+```sh
+# unicode business-failure
+MSG_B64=$(printf 'cannot copy: record was modified during operation — café' | base64)
+curl -sS -X POST http://127.0.0.1:8000/api/v1/widgets/copy \
+  -H "x-mock-business-failure-b64: $MSG_B64" \
+  -H 'content-type: application/json' -d '{}'
+```
+
+## `x-mock-injected` response header
+
+Whenever the admin inject hook overrides a response — whether from
+an `x-mock-*` request header or a sticky override — the response is
+tagged with `x-mock-injected: <kind>:<source>`:
+
+| `kind` | Where it came from |
+| ------ | --- |
+| `http-status`, `business-failure`, `custom-body`, `empty-body`, `malformed-json`, `delay`, `hang`, `destroy` | The ErrorMode that fired. |
+| `header-error` | Header parsing failed; the request was rejected with 400. |
+
+| `source` | Meaning |
+| -------- | --- |
+| `header` | The override came from an `x-mock-*` request header. |
+| `sticky` | The override came from a `POST /overrides` sticky entry. |
+
+Examples:
+
+```text
+x-mock-injected: http-status:header
+x-mock-injected: business-failure:sticky
+x-mock-injected: header-error
+```
+
+This is the single observability signal that proves an override
+fired — without it, a 500 from the mock server is indistinguishable
+from a 500 the real handler would have produced. Tests assert on
+this header to verify a mock pathway, and dashboards filter by it
+to separate injected failures from organic ones.
+
+`header-error` carries no `:source` suffix because the rejection
+happens before the override taxonomy applies.

package/docs/admin/index.md

@@ -0,0 +1,111 @@
+# Admin mode
+
+Opt-in error-injection panel + REST API + per-request `x-mock-*` headers,
+mounted under a configurable base path (default `/databehave`). All routes,
+headers, and behaviours below are served **only** when
+`admin.enabled: true`. With the flag off, the kit behaves exactly as
+the pre-`admin` versions did — no admin routes, no header parsing, no
+overrides store.
+
+For the `admin` config schema (`enabled`, `path`, `bind`, `cors`,
+`allowDestroy`, `scenariosDir`) see
+[../config/admin.md](../config/admin.md).
+
+## Sub-pages
+
+- [rest-api.md](./rest-api.md) — every `__databehave/*` endpoint.
+- [headers.md](./headers.md) — every `x-mock-*` request header.
+- [overrides.md](./overrides.md) — sticky overrides, matchers, resolution priority.
+- [scenarios.md](./scenarios.md) — scenario file format and lifecycle.
+- [error-mode.md](./error-mode.md) — `ErrorMode` reference.
+
+## Quick start
+
+```jsonc
+// databehave.jsonc
+{
+  "openapi":   "./openapi.json",
+  "basePath":  "/api/v1",
+  "endpoints": { /* ... */ },
+  "admin": { "enabled": true }
+}
+```
+
+```sh
+npx @databehave/server databehave.jsonc
+# stdout: [@databehave/server] admin panel ready at http://127.0.0.1:8000/databehave (dev mock — disable in production)
+```
+
+Point a browser at `http://127.0.0.1:8000/databehave`.
+
+Programmatic equivalent:
+
+```ts
+import { createServer } from '@databehave/server'
+
+const server = createServer({
+  routes: { 'GET /api/v1/ping': () => ({ json: { ok: true } }) },
+  admin: { enabled: true },
+})
+await server.listen({ port: 8000, host: '127.0.0.1' })
+```
+
+## UI overview
+
+The UI is shipped as `dist/admin/{ui.html, ui.js, ui.css}` and rendered
+with native Web Components — zero runtime framework, no CDN dependency.
+English-only.
+
+- **Endpoint list** — populated from `GET {path}/openapi-routes`, grouped by
+  OpenAPI tag, filterable. Each row opens an inject panel that pre-fills
+  from any existing sticky override targeting the same route.
+- **Global override modal** — top-bar button. Owns `kind: 'global'`
+  overrides (the per-endpoint inject panel only offers `exact` and `path`
+  scopes).
+- **Active overrides side panel** — right side. Global rows are tagged
+  `GLOBAL` and float above `path` / `exact` rows. A floating bottom-right
+  pill shows the active count.
+- **Try-it-out** — runs the live request through the dispatcher so the
+  injected override actually applies. The response viewer renders the
+  body as a collapsible **schema tree** for JSON responses (each
+  property is a fold-able row) and falls back to a raw text panel for
+  non-JSON bodies.
+- **Scenarios menu** — list, save (snapshot of the current overrides),
+  load, and delete named scenarios from disk.
+- **Toasts** — successful saves, deletes, and override-create actions
+  fire a top-right toast (`success` / `error` / `info` variants);
+  failures show the REST [error envelope](./rest-api.md#error-envelope)
+  detail verbatim.
+- **Keyboard** — `/` and `Cmd/Ctrl+K` focus the route filter, `Esc`
+  closes modals, `?` shows the help overlay.
+
+### Non-default `admin.path`
+
+The UI is path-agnostic. When `admin.path` is set to anything
+other than the default `/databehave`, the boot-time HTML injects a
+`window.__DATABEHAVE_BASE__ = '<path>'` shim before `ui.js` runs.
+The UI reads that constant for every REST call so the panel works
+unchanged behind a reverse proxy or a custom mount point.
+
+If you load the panel through a build of your own (rare), set
+`window.__DATABEHAVE_BASE__` yourself before importing
+`ui.js` — the script falls back to `/databehave` only when the
+constant is absent.
+
+## Security notes
+
+`admin` is a developer tool — not a hardened endpoint. Do not expose
+the admin panel to untrusted networks.
+
+- **Startup notice.** Every enabled boot writes
+  `admin panel ready at http://…/databehave (dev mock — disable in production)` to stdout. Misconfiguration is visible.
+- **`bind: 'loopback-only'` (default).** The CLI exits 1 (and
+  `server.listen()` rejects) when the configured host is not a loopback
+  address. Set `bind: 'any'` to opt out — only in trusted environments.
+- **`cors: 'auto'` (default).** Returns `Access-Control-Allow-Origin: *`
+  on loopback (so a localhost bookmarklet works) and switches to
+  `same-origin` (no CORS headers added) when `bind: 'any'`. Override with
+  `'any'`, `'same-origin'`, or `{ origin }`.
+- **`allowDestroy: true` (default).** Honours `x-mock-destroy` and the
+  matching `destroy` ErrorMode. Set `false` to reject those requests with
+  HTTP 503 instead.

package/docs/admin/overrides.md

@@ -0,0 +1,23 @@
+# Overrides
+
+## Matchers
+
+```jsonc
+{ "kind": "exact",  "method": "POST", "path": "/api/v1/example" }  // METHOD + path
+{ "kind": "path",   "path":   "/api/v1/example" }                  // any method
+{ "kind": "global" }                                                // every route
+```
+
+Resolution priority (first match wins): `exact` → `path` → `global`.
+
+## Sticky override resolution
+
+For each request, the dispatcher consults sources in this order — first
+hit wins:
+
+1. `x-mock-*` request headers (per-request, never stored).
+2. Sticky `exact` override (METHOD + path).
+3. Sticky `path` override (any method).
+4. Sticky `global` override.
+5. Existing `mockMode` resolution (see [../config/mock-mode.md](../config/mock-mode.md)).
+6. Passthrough — the real handler runs.