@dealdesk/server 2026.527.0-canary.0

package/dist/app.js

@@ -0,0 +1,426 @@
+import express, { Router } from "express";
+import cookieParser from "cookie-parser";
+import { eq, and } from "drizzle-orm";
+import path from "node:path";
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+import { httpLogger, errorHandler } from "./middleware/index.js";
+import { actorMiddleware } from "./middleware/auth.js";
+import { boardMutationGuard } from "./middleware/board-mutation-guard.js";
+import { privateHostnameGuard, resolvePrivateHostnameAllowSet } from "./middleware/private-hostname-guard.js";
+import { healthRoutes } from "./routes/health.js";
+import { companyRoutes } from "./routes/companies.js";
+// DEAL DESK: PE-specific routes (theses, targets, intermediaries, tools).
+import { dealDeskRoutes } from "./routes/deal-desk.js";
+// DEAL DESK: Gmail OAuth start + callback routes for Outreach Analyst email account linking.
+import { createGmailOAuthRouter } from "./routes/gmail-oauth.js";
+import { resolveGmailOAuthRedirectUri } from "./deal-desk/gmail/redirect-uri.js";
+import { loadGmailOAuthClient, } from "./deal-desk/gmail/client-config.js";
+import { secretService } from "./services/secrets.js";
+import { companySecrets } from "@dealdesk/db";
+import { companySkillRoutes } from "./routes/company-skills.js";
+import { agentRoutes } from "./routes/agents.js";
+import { projectRoutes } from "./routes/projects.js";
+import { issueRoutes } from "./routes/issues.js";
+import { issueTreeControlRoutes } from "./routes/issue-tree-control.js";
+import { routineRoutes } from "./routes/routines.js";
+import { environmentRoutes } from "./routes/environments.js";
+import { executionWorkspaceRoutes } from "./routes/execution-workspaces.js";
+import { approvalRoutes } from "./routes/approvals.js";
+import { secretRoutes } from "./routes/secrets.js";
+import { costRoutes } from "./routes/costs.js";
+import { activityRoutes } from "./routes/activity.js";
+import { dashboardRoutes } from "./routes/dashboard.js";
+import { userProfileRoutes } from "./routes/user-profiles.js";
+import { sidebarBadgeRoutes } from "./routes/sidebar-badges.js";
+import { sidebarPreferenceRoutes } from "./routes/sidebar-preferences.js";
+import { inboxDismissalRoutes } from "./routes/inbox-dismissals.js";
+import { instanceSettingsRoutes } from "./routes/instance-settings.js";
+import { instanceDatabaseBackupRoutes, } from "./routes/instance-database-backups.js";
+import { llmRoutes } from "./routes/llms.js";
+import { authRoutes } from "./routes/auth.js";
+import { assetRoutes } from "./routes/assets.js";
+import { accessRoutes } from "./routes/access.js";
+import { assertCompanyAccess } from "./routes/authz.js";
+import { pluginRoutes } from "./routes/plugins.js";
+import { adapterRoutes } from "./routes/adapters.js";
+import { pluginUiStaticRoutes } from "./routes/plugin-ui-static.js";
+import { applyUiBranding } from "./ui-branding.js";
+import { logger } from "./middleware/logger.js";
+import { DEFAULT_LOCAL_PLUGIN_DIR, pluginLoader } from "./services/plugin-loader.js";
+import { createPluginWorkerManager } from "./services/plugin-worker-manager.js";
+import { createPluginJobScheduler } from "./services/plugin-job-scheduler.js";
+import { pluginJobStore } from "./services/plugin-job-store.js";
+import { createPluginToolDispatcher } from "./services/plugin-tool-dispatcher.js";
+import { pluginLifecycleManager } from "./services/plugin-lifecycle.js";
+import { createPluginJobCoordinator } from "./services/plugin-job-coordinator.js";
+import { buildHostServices, flushPluginLogBuffer } from "./services/plugin-host-services.js";
+import { createPluginEventBus } from "./services/plugin-event-bus.js";
+import { setPluginEventBus } from "./services/activity-log.js";
+import { createPluginDevWatcher } from "./services/plugin-dev-watcher.js";
+import { createPluginHostServiceCleanup } from "./services/plugin-host-service-cleanup.js";
+import { createCoalescedErrorLogger } from "./utils/coalesced-error-logger.js";
+import { pluginRegistryService } from "./services/plugin-registry.js";
+import { createHostClientHandlers } from "@dealdesk/plugin-sdk";
+import { createCachedViteHtmlRenderer } from "./vite-html-renderer.js";
+const FEEDBACK_EXPORT_FLUSH_INTERVAL_MS = 5_000;
+const VITE_DEV_ASSET_PREFIXES = [
+    "/@fs/",
+    "/@id/",
+    "/@react-refresh",
+    "/@vite/",
+    "/assets/",
+    "/node_modules/",
+    "/src/",
+];
+const VITE_DEV_STATIC_PATHS = new Set([
+    "/apple-touch-icon.png",
+    "/favicon-16x16.png",
+    "/favicon-32x32.png",
+    "/favicon.ico",
+    "/favicon.svg",
+    "/site.webmanifest",
+    "/sw.js",
+]);
+export function resolveViteHmrPort(serverPort) {
+    if (serverPort <= 55_535) {
+        return serverPort + 10_000;
+    }
+    return Math.max(1_024, serverPort - 10_000);
+}
+export function shouldServeViteDevHtml(req) {
+    const pathname = req.path;
+    if (VITE_DEV_STATIC_PATHS.has(pathname))
+        return false;
+    if (VITE_DEV_ASSET_PREFIXES.some((prefix) => pathname.startsWith(prefix)))
+        return false;
+    return req.accepts(["html"]) === "html";
+}
+export function shouldEnablePrivateHostnameGuard(opts) {
+    return (opts.deploymentExposure === "private" &&
+        (opts.deploymentMode === "local_trusted" || opts.deploymentMode === "authenticated"));
+}
+function isDealDeskManagedAuthPath(pathname) {
+    return pathname === "/api/auth/get-session" || pathname === "/api/auth/profile";
+}
+export async function createApp(db, opts) {
+    const app = express();
+    app.use(httpLogger);
+    app.use(cookieParser());
+    const privateHostnameGateEnabled = shouldEnablePrivateHostnameGuard({
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+    });
+    const privateHostnameAllowSet = resolvePrivateHostnameAllowSet({
+        allowedHostnames: opts.allowedHostnames,
+        bindHost: opts.bindHost,
+    });
+    app.use(privateHostnameGuard({
+        enabled: privateHostnameGateEnabled,
+        allowedHostnames: opts.allowedHostnames,
+        bindHost: opts.bindHost,
+    }));
+    if (opts.betterAuthHandler) {
+        app.all("/api/auth/{*authPath}", (req, res, next) => {
+            if (isDealDeskManagedAuthPath(req.path)) {
+                next();
+                return;
+            }
+            opts.betterAuthHandler(req, res, next);
+        });
+    }
+    app.use(express.json({
+        // Company import/export payloads can inline full portable packages.
+        limit: "10mb",
+        verify: (req, _res, buf) => {
+            req.rawBody = buf;
+        },
+    }));
+    app.use(actorMiddleware(db, {
+        deploymentMode: opts.deploymentMode,
+        resolveSession: opts.resolveSession,
+    }));
+    app.use("/api/auth", authRoutes(db));
+    app.use(llmRoutes(db));
+    const hostServicesDisposers = new Map();
+    const workerManager = opts.pluginWorkerManager ?? createPluginWorkerManager();
+    // Mount API routes
+    const api = Router();
+    api.use(boardMutationGuard());
+    api.use("/health", healthRoutes(db, {
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+        authReady: opts.authReady,
+        companyDeletionEnabled: opts.companyDeletionEnabled,
+    }));
+    api.use("/companies", companyRoutes(db, opts.storageService));
+    // DEAL DESK:
+    api.use("/companies", dealDeskRoutes(db));
+    // DEAL DESK: Gmail OAuth start + callback routes for Outreach Analyst email account linking.
+    const buildOAuthClientStore = () => {
+        const realSvc = secretService(db);
+        return {
+            getByKey: async ({ companyId, key }) => {
+                const row = await db
+                    .select({ id: companySecrets.id })
+                    .from(companySecrets)
+                    .where(and(eq(companySecrets.companyId, companyId), eq(companySecrets.key, key), eq(companySecrets.status, "active")))
+                    .limit(1);
+                return row[0] ? { secretId: row[0].id } : null;
+            },
+            create: async () => { throw new Error("create() not used in OAuth route"); },
+            replace: async () => { throw new Error("replace() not used in OAuth route"); },
+            remove: async () => { throw new Error("remove() not used in OAuth route"); },
+            load: async ({ companyId, secretId }) => {
+                return await realSvc.resolveSecretValue(companyId, secretId, "latest");
+            },
+        };
+    };
+    api.use("/oauth/gmail", createGmailOAuthRouter({
+        loadClientConfig: (companyId) => loadGmailOAuthClient({ companyId }, { store: buildOAuthClientStore() }),
+        resolveRedirectUri: resolveGmailOAuthRedirectUri,
+        resolveCompanyId: (req) => req.query.companyId ??
+            req.user?.companyId ??
+            null,
+        authorizeCompanyId: (req, companyId) => assertCompanyAccess(req, companyId),
+        deps: { db },
+    }));
+    api.use(companySkillRoutes(db));
+    api.use(agentRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(assetRoutes(db, opts.storageService));
+    api.use(projectRoutes(db));
+    api.use(issueRoutes(db, opts.storageService, {
+        feedbackExportService: opts.feedbackExportService,
+        pluginWorkerManager: workerManager,
+    }));
+    api.use(issueTreeControlRoutes(db));
+    api.use(routineRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(environmentRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(executionWorkspaceRoutes(db));
+    api.use(approvalRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(secretRoutes(db));
+    api.use(costRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(activityRoutes(db));
+    api.use(dashboardRoutes(db));
+    api.use(userProfileRoutes(db));
+    api.use(sidebarBadgeRoutes(db));
+    api.use(sidebarPreferenceRoutes(db));
+    api.use(inboxDismissalRoutes(db));
+    api.use(instanceSettingsRoutes(db));
+    if (opts.databaseBackupService) {
+        api.use(instanceDatabaseBackupRoutes(opts.databaseBackupService));
+    }
+    const pluginRegistry = pluginRegistryService(db);
+    const eventBus = createPluginEventBus();
+    setPluginEventBus(eventBus);
+    const jobStore = pluginJobStore(db);
+    const lifecycle = pluginLifecycleManager(db, { workerManager });
+    const scheduler = createPluginJobScheduler({
+        db,
+        jobStore,
+        workerManager,
+    });
+    const toolDispatcher = createPluginToolDispatcher({
+        workerManager,
+        lifecycleManager: lifecycle,
+        db,
+    });
+    const jobCoordinator = createPluginJobCoordinator({
+        db,
+        lifecycle,
+        scheduler,
+        jobStore,
+    });
+    const hostServiceCleanup = createPluginHostServiceCleanup(lifecycle, hostServicesDisposers);
+    let viteHtmlRenderer = null;
+    const loader = pluginLoader(db, {
+        localPluginDir: opts.localPluginDir ?? DEFAULT_LOCAL_PLUGIN_DIR,
+        migrationDb: opts.pluginMigrationDb,
+    }, {
+        workerManager,
+        eventBus,
+        jobScheduler: scheduler,
+        jobStore,
+        toolDispatcher,
+        lifecycleManager: lifecycle,
+        instanceInfo: {
+            instanceId: opts.instanceId ?? "default",
+            hostVersion: opts.hostVersion ?? "0.0.0",
+            deploymentMode: opts.deploymentMode,
+            deploymentExposure: opts.deploymentExposure,
+        },
+        buildHostHandlers: (pluginId, manifest) => {
+            const notifyWorker = (method, params) => {
+                const handle = workerManager.getWorker(pluginId);
+                if (handle)
+                    handle.notify(method, params);
+            };
+            const services = buildHostServices(db, pluginId, manifest.id, eventBus, notifyWorker, {
+                pluginWorkerManager: workerManager,
+                manifest,
+            });
+            hostServicesDisposers.set(pluginId, () => services.dispose());
+            return createHostClientHandlers({
+                pluginId,
+                capabilities: manifest.capabilities,
+                services,
+            });
+        },
+    });
+    api.use(pluginRoutes(db, loader, { scheduler, jobStore }, { workerManager }, { toolDispatcher }, { workerManager }));
+    api.use(adapterRoutes());
+    api.use(accessRoutes(db, {
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+        bindHost: opts.bindHost,
+        allowedHostnames: opts.allowedHostnames,
+    }));
+    app.use("/api", api);
+    app.use("/api", (_req, res) => {
+        res.status(404).json({ error: "API route not found" });
+    });
+    app.use(pluginUiStaticRoutes(db, {
+        localPluginDir: opts.localPluginDir ?? DEFAULT_LOCAL_PLUGIN_DIR,
+    }));
+    const __dirname = path.dirname(fileURLToPath(import.meta.url));
+    if (opts.uiMode === "static") {
+        // Try published location first (server/ui-dist/), then monorepo dev location (../../ui/dist)
+        const candidates = [
+            path.resolve(__dirname, "../ui-dist"),
+            path.resolve(__dirname, "../../ui/dist"),
+        ];
+        const uiDist = candidates.find((p) => fs.existsSync(path.join(p, "index.html")));
+        if (uiDist) {
+            const indexHtml = applyUiBranding(fs.readFileSync(path.join(uiDist, "index.html"), "utf-8"));
+            // Hashed asset files (Vite emits them under /assets/<name>.<hash>.<ext>)
+            // never change once built, so they can be cached aggressively.
+            app.use("/assets", express.static(path.join(uiDist, "assets"), {
+                maxAge: "1y",
+                immutable: true,
+            }));
+            // Non-hashed static files (favicon.ico, manifest, robots.txt, etc.):
+            // short cache so operators who swap them out see the new version
+            // reasonably fast. Override for `index.html` specifically — it is
+            // served by this middleware for `/` and `/index.html`, and it must
+            // never outlive the asset hashes it points at.
+            app.use(express.static(uiDist, {
+                maxAge: "1h",
+                setHeaders(res, filePath) {
+                    if (path.basename(filePath) === "index.html") {
+                        res.set("Cache-Control", "no-cache");
+                    }
+                },
+            }));
+            // SPA fallback. Only for non-asset routes — if the browser asks for
+            // /assets/something.js that doesn't exist, we must NOT serve the HTML
+            // shell: the browser would try to load it as a JavaScript module, fail
+            // with a MIME-type error, and cache that broken response. Return 404
+            // instead. The index.html response itself is no-cache so a subsequent
+            // deploy's updated asset hashes are picked up on next load.
+            app.get(/.*/, (req, res) => {
+                if (req.path.startsWith("/assets/")) {
+                    res.status(404).end();
+                    return;
+                }
+                res
+                    .status(200)
+                    .set("Content-Type", "text/html")
+                    .set("Cache-Control", "no-cache")
+                    .end(indexHtml);
+            });
+        }
+        else {
+            console.warn("[dealdesk] UI dist not found; running in API-only mode");
+        }
+    }
+    if (opts.uiMode === "vite-dev") {
+        const uiRoot = path.resolve(__dirname, "../../ui");
+        const publicUiRoot = path.resolve(uiRoot, "public");
+        const hmrPort = resolveViteHmrPort(opts.serverPort);
+        const { createServer: createViteServer } = await import("vite");
+        const vite = await createViteServer({
+            root: uiRoot,
+            appType: "custom",
+            server: {
+                middlewareMode: true,
+                hmr: {
+                    host: opts.bindHost,
+                    port: hmrPort,
+                    clientPort: hmrPort,
+                },
+                allowedHosts: privateHostnameGateEnabled ? Array.from(privateHostnameAllowSet) : undefined,
+            },
+        });
+        viteHtmlRenderer = createCachedViteHtmlRenderer({
+            vite,
+            uiRoot,
+            brandHtml: applyUiBranding,
+        });
+        const renderViteHtml = viteHtmlRenderer;
+        if (fs.existsSync(publicUiRoot)) {
+            app.use(express.static(publicUiRoot, { index: false }));
+        }
+        app.get(/.*/, async (req, res, next) => {
+            if (!shouldServeViteDevHtml(req)) {
+                next();
+                return;
+            }
+            try {
+                const html = await renderViteHtml.render(req.originalUrl);
+                res.status(200).set({ "Content-Type": "text/html" }).end(html);
+            }
+            catch (err) {
+                next(err);
+            }
+        });
+        app.use(vite.middlewares);
+    }
+    app.use(errorHandler);
+    jobCoordinator.start();
+    scheduler.start();
+    const logRepeatedError = createCoalescedErrorLogger({
+        logger,
+        intervalMs: 60_000,
+    });
+    const feedbackExportTimer = opts.feedbackExportService
+        ? setInterval(() => {
+            void opts.feedbackExportService?.flushPendingFeedbackTraces().catch((err) => {
+                logRepeatedError(err, "Failed to flush pending feedback exports");
+            });
+        }, FEEDBACK_EXPORT_FLUSH_INTERVAL_MS)
+        : null;
+    feedbackExportTimer?.unref?.();
+    if (opts.feedbackExportService) {
+        void opts.feedbackExportService.flushPendingFeedbackTraces().catch((err) => {
+            logRepeatedError(err, "Failed to flush pending feedback exports");
+        });
+    }
+    void toolDispatcher.initialize().catch((err) => {
+        logger.error({ err }, "Failed to initialize plugin tool dispatcher");
+    });
+    const devWatcher = createPluginDevWatcher(lifecycle, async (pluginId) => (await pluginRegistry.getById(pluginId))?.packagePath ?? null);
+    void loader.loadAll().then((result) => {
+        if (!result)
+            return;
+        for (const loaded of result.results) {
+            if (devWatcher && loaded.success && loaded.plugin.packagePath) {
+                devWatcher.watch(loaded.plugin.id, loaded.plugin.packagePath);
+            }
+        }
+    }).catch((err) => {
+        logger.error({ err }, "Failed to load ready plugins on startup");
+    });
+    process.once("exit", () => {
+        if (feedbackExportTimer)
+            clearInterval(feedbackExportTimer);
+        devWatcher?.close();
+        viteHtmlRenderer?.dispose();
+        hostServiceCleanup.disposeAll();
+        hostServiceCleanup.teardown();
+    });
+    process.once("beforeExit", () => {
+        void flushPluginLogBuffer();
+    });
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,MAAM,EAAkC,MAAM,SAAS,CAAC;AAC1E,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,0EAA0E;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,6FAA6F;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAA4B,MAAM,qCAAqC,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAChD,MAAM,uBAAuB,GAAG;IAC9B,OAAO;IACP,OAAO;IACP,iBAAiB;IACjB,SAAS;IACT,UAAU;IACV,gBAAgB;IAChB,OAAO;CACR,CAAC;AACF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,uBAAuB;IACvB,oBAAoB;IACpB,oBAAoB;IACpB,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,UAAU,GAAG,MAAM,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAmB;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;IAC1B,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAGhD;IACC,OAAO,CACL,IAAI,CAAC,kBAAkB,KAAK,SAAS;QACrC,CAAC,IAAI,CAAC,cAAc,KAAK,eAAe,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,OAAO,QAAQ,KAAK,uBAAuB,IAAI,QAAQ,KAAK,mBAAmB,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAM,EACN,IA0BC;IAED,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACxB,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;QAClE,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;KAC5C,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;QACnB,OAAO,EAAE,0BAA0B;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CACH,CAAC;IACF,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAClD,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC,iBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,oEAAoE;QACpE,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxB,GAAsC,CAAC,OAAO,GAAG,GAAG,CAAC;QACxD,CAAC;KACF,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CACL,eAAe,CAAC,EAAE,EAAE;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAEvB,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,IAAI,yBAAyB,EAAE,CAAC;IAE9E,mBAAmB;IACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CACL,SAAS,EACT,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;KACpD,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,6FAA6F;IAC7F,MAAM,qBAAqB,GAAG,GAA2B,EAAE;QACzD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;gBACrC,MAAM,GAAG,GAAG,MAAM,EAAE;qBACjB,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;qBACjC,IAAI,CAAC,cAAc,CAAC;qBACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,EACvC,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAC3B,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CACpC,CACF;qBACA,KAAK,CAAC,CAAC,CAAC,CAAC;gBACZ,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,CAAC;YACD,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACtC,OAAO,MAAM,OAAO,CAAC,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzE,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CACL,cAAc,EACd,sBAAsB,CAAC;QACrB,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE,CAC9B,oBAAoB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;QACzE,kBAAkB,EAAE,4BAA4B;QAChD,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CACvB,GAAG,CAAC,KAAK,CAAC,SAAgC;YAC1C,GAA0D,CAAC,IAAI,EAAE,SAAS;YAC3E,IAAI;QACN,kBAAkB,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC;QAC3E,IAAI,EAAE,EAAE,EAAE,EAAE;KACb,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACjE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE;QAC3C,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,mBAAmB,EAAE,aAAa;KACnC,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,wBAAwB,CAAC;QACzC,EAAE;QACF,QAAQ;QACR,aAAa;KACd,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,0BAA0B,CAAC;QAChD,aAAa;QACb,gBAAgB,EAAE,SAAS;QAC3B,EAAE;KACH,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,0BAA0B,CAAC;QAChD,EAAE;QACF,SAAS;QACT,SAAS;QACT,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,8BAA8B,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC5F,IAAI,gBAAgB,GAA2D,IAAI,CAAC;IACpF,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,EACF;QACE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,wBAAwB;QAC/D,WAAW,EAAE,IAAI,CAAC,iBAAiB;KACpC,EACD;QACE,aAAa;QACb,QAAQ;QACR,YAAY,EAAE,SAAS;QACvB,QAAQ;QACR,cAAc;QACd,gBAAgB,EAAE,SAAS;QAC3B,YAAY,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;YACxC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,OAAO;YACxC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C;QACD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACxC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,MAAe,EAAE,EAAE;gBACvD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,MAAM;oBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;gBACpF,mBAAmB,EAAE,aAAa;gBAClC,QAAQ;aACT,CAAC,CAAC;YACH,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,OAAO,wBAAwB,CAAC;gBAC9B,QAAQ;gBACR,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;KACF,CACF,CAAC;IACF,GAAG,CAAC,GAAG,CACL,YAAY,CACV,EAAE,EACF,MAAM,EACN,EAAE,SAAS,EAAE,QAAQ,EAAE,EACvB,EAAE,aAAa,EAAE,EACjB,EAAE,cAAc,EAAE,EAClB,EAAE,aAAa,EAAE,CAClB,CACF,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,GAAG,CACL,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE;QAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,wBAAwB;KAChE,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,6FAA6F;QAC7F,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC;SACzC,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7F,yEAAyE;YACzE,+DAA+D;YAC/D,GAAG,CAAC,GAAG,CACL,SAAS,EACT,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;gBAC1C,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;aAChB,CAAC,CACH,CAAC;YACF,qEAAqE;YACrE,iEAAiE;YACjE,kEAAkE;YAClE,mEAAmE;YACnE,+CAA+C;YAC/C,GAAG,CAAC,GAAG,CACL,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACrB,MAAM,EAAE,IAAI;gBACZ,UAAU,CAAC,GAAG,EAAE,QAAQ;oBACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,YAAY,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;aACF,CAAC,CACH,CAAC;YACF,oEAAoE;YACpE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,sEAAsE;YACtE,4DAA4D;YAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACzB,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;qBAChC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC;qBAChC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;YAClC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE;gBACN,cAAc,EAAE,IAAI;gBACpB,GAAG,EAAE;oBACH,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,OAAO;iBACpB;gBACD,YAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;aAC3F;SACF,CAAC,CAAC;QACH,gBAAgB,GAAG,4BAA4B,CAAC;YAC9C,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,eAAe;SAC3B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,gBAAgB,CAAC;QAExC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEtB,cAAc,CAAC,KAAK,EAAE,CAAC;IACvB,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;QAClD,MAAM;QACN,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,IAAI,CAAC,qBAAqB;QACpD,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;YACjB,KAAK,IAAI,CAAC,qBAAqB,EAAE,0BAA0B,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1E,gBAAgB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,iCAAiC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC;IACT,mBAAmB,EAAE,KAAK,EAAE,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACzE,gBAAgB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,6CAA6C,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,sBAAsB,CACvC,SAAS,EACT,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,IAAI,IAAI,CAClF,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9D,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,IAAI,mBAAmB;YAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;QAC5D,UAAU,EAAE,KAAK,EAAE,CAAC;QACpB,gBAAgB,EAAE,OAAO,EAAE,CAAC;QAC5B,kBAAkB,CAAC,UAAU,EAAE,CAAC;QAChC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;QAC9B,KAAK,oBAAoB,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/attachment-types.d.ts

@@ -0,0 +1,23 @@
+export declare const DEFAULT_ALLOWED_TYPES: readonly string[];
+export declare const DEFAULT_ATTACHMENT_CONTENT_TYPE = "application/octet-stream";
+export declare const SVG_CONTENT_TYPE = "image/svg+xml";
+export declare const INLINE_ATTACHMENT_TYPES: readonly string[];
+/**
+ * Parse a comma-separated list of MIME type patterns into a normalised array.
+ * Returns the default image-only list when the input is empty or undefined.
+ */
+export declare function parseAllowedTypes(raw: string | undefined): string[];
+/**
+ * Check whether `contentType` matches any entry in `allowedPatterns`.
+ *
+ * Supports exact matches ("application/pdf") and wildcard / prefix
+ * patterns ("image/*", "application/vnd.openxmlformats-officedocument.*").
+ */
+export declare function matchesContentType(contentType: string, allowedPatterns: string[]): boolean;
+export declare function normalizeContentType(contentType: string | null | undefined): string;
+export declare function isInlineAttachmentContentType(contentType: string): boolean;
+/** Convenience wrapper using the process-level allowed list. */
+export declare function isAllowedContentType(contentType: string): boolean;
+export declare const MAX_ATTACHMENT_BYTES: number;
+export declare function normalizeIssueAttachmentMaxBytes(value: number | null | undefined): number;
+//# sourceMappingURL=attachment-types.d.ts.map

package/dist/attachment-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-types.d.ts","sourceRoot":"","sources":["../src/attachment-types.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAYlD,CAAC;AAEF,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAChD,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAOpD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAOnE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAS1F;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGnF;AAED,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE1E;AAQD,gEAAgE;AAChE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,eAAO,MAAM,oBAAoB,QACsC,CAAC;AAExE,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAKzF"}

package/dist/attachment-types.js

@@ -0,0 +1,91 @@
+/**
+ * Shared attachment content-type configuration.
+ *
+ * By default a curated set of image/document/text types are allowed. Set the
+ * `DEALDESK_ALLOWED_ATTACHMENT_TYPES` environment variable to a
+ * comma-separated list of MIME types or wildcard patterns to expand the
+ * allowed set for routes that use this allowlist.
+ *
+ * Examples:
+ *   DEALDESK_ALLOWED_ATTACHMENT_TYPES=image/*,application/pdf
+ *   DEALDESK_ALLOWED_ATTACHMENT_TYPES=image/*,application/pdf,text/*
+ *
+ * Supported pattern syntax:
+ *   - Exact types:   "application/pdf"
+ *   - Wildcards:     "image/*"  or  "application/vnd.openxmlformats-officedocument.*"
+ */
+import { DEFAULT_COMPANY_ATTACHMENT_MAX_BYTES, MAX_COMPANY_ATTACHMENT_MAX_BYTES, } from "@dealdesk/shared";
+export const DEFAULT_ALLOWED_TYPES = [
+    "image/png",
+    "image/jpeg",
+    "image/jpg",
+    "image/webp",
+    "image/gif",
+    "application/pdf",
+    "text/markdown",
+    "text/plain",
+    "application/json",
+    "text/csv",
+    "text/html",
+];
+export const DEFAULT_ATTACHMENT_CONTENT_TYPE = "application/octet-stream";
+export const SVG_CONTENT_TYPE = "image/svg+xml";
+export const INLINE_ATTACHMENT_TYPES = [
+    "image/*",
+    "application/pdf",
+    "text/plain",
+    "text/markdown",
+    "application/json",
+    "text/csv",
+];
+/**
+ * Parse a comma-separated list of MIME type patterns into a normalised array.
+ * Returns the default image-only list when the input is empty or undefined.
+ */
+export function parseAllowedTypes(raw) {
+    if (!raw)
+        return [...DEFAULT_ALLOWED_TYPES];
+    const parsed = raw
+        .split(",")
+        .map((s) => s.trim().toLowerCase())
+        .filter((s) => s.length > 0);
+    return parsed.length > 0 ? parsed : [...DEFAULT_ALLOWED_TYPES];
+}
+/**
+ * Check whether `contentType` matches any entry in `allowedPatterns`.
+ *
+ * Supports exact matches ("application/pdf") and wildcard / prefix
+ * patterns ("image/*", "application/vnd.openxmlformats-officedocument.*").
+ */
+export function matchesContentType(contentType, allowedPatterns) {
+    const ct = contentType.toLowerCase();
+    return allowedPatterns.some((pattern) => {
+        if (pattern === "*")
+            return true;
+        if (pattern.endsWith("/*") || pattern.endsWith(".*")) {
+            return ct.startsWith(pattern.slice(0, -1));
+        }
+        return ct === pattern;
+    });
+}
+export function normalizeContentType(contentType) {
+    const normalized = (contentType ?? "").trim().toLowerCase();
+    return normalized || DEFAULT_ATTACHMENT_CONTENT_TYPE;
+}
+export function isInlineAttachmentContentType(contentType) {
+    return matchesContentType(contentType, [...INLINE_ATTACHMENT_TYPES]);
+}
+// ---------- Module-level singletons read once at startup ----------
+const allowedPatterns = parseAllowedTypes(process.env.DEALDESK_ALLOWED_ATTACHMENT_TYPES);
+/** Convenience wrapper using the process-level allowed list. */
+export function isAllowedContentType(contentType) {
+    return matchesContentType(contentType, allowedPatterns);
+}
+export const MAX_ATTACHMENT_BYTES = Number(process.env.DEALDESK_ATTACHMENT_MAX_BYTES) || 10 * 1024 * 1024;
+export function normalizeIssueAttachmentMaxBytes(value) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+        return Math.min(DEFAULT_COMPANY_ATTACHMENT_MAX_BYTES, MAX_ATTACHMENT_BYTES);
+    }
+    return Math.min(Math.floor(value), MAX_COMPANY_ATTACHMENT_MAX_BYTES, MAX_ATTACHMENT_BYTES);
+}
+//# sourceMappingURL=attachment-types.js.map

package/dist/attachment-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-types.js","sourceRoot":"","sources":["../src/attachment-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,eAAe;IACf,YAAY;IACZ,kBAAkB;IAClB,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAChD,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,SAAS;IACT,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,kBAAkB;IAClB,UAAU;CACX,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAuB;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,GAAG,qBAAqB,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,eAAyB;IAC/E,MAAM,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,KAAK,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAsC;IACzE,MAAM,UAAU,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,OAAO,UAAU,IAAI,+BAA+B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,OAAO,kBAAkB,CAAC,WAAW,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,qEAAqE;AAErE,MAAM,eAAe,GAAa,iBAAiB,CACjD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAC9C,CAAC;AAEF,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,kBAAkB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExE,MAAM,UAAU,gCAAgC,CAAC,KAAgC;IAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,oCAAoC,EAAE,oBAAoB,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,gCAAgC,EAAE,oBAAoB,CAAC,CAAC;AAC7F,CAAC"}

package/dist/auth/better-auth.d.ts

@@ -0,0 +1,33 @@
+import type { Request, RequestHandler } from "express";
+import { betterAuth } from "better-auth";
+import type { Db } from "@dealdesk/db";
+import type { Config } from "../config.js";
+export type BetterAuthSessionUser = {
+    id: string;
+    email?: string | null;
+    name?: string | null;
+};
+export type BetterAuthSessionResult = {
+    session: {
+        id: string;
+        userId: string;
+    } | null;
+    user: BetterAuthSessionUser | null;
+};
+type BetterAuthInstance = ReturnType<typeof betterAuth>;
+export declare function deriveAuthCookiePrefix(instanceId?: string): string;
+export declare function buildBetterAuthAdvancedOptions(input: {
+    disableSecureCookies: boolean;
+}): {
+    useSecureCookies?: boolean | undefined;
+    cookiePrefix: string;
+};
+export declare function deriveAuthTrustedOrigins(config: Config, opts?: {
+    listenPort?: number;
+}): string[];
+export declare function createBetterAuthInstance(db: Db, config: Config, trustedOrigins: string[]): BetterAuthInstance;
+export declare function createBetterAuthHandler(auth: BetterAuthInstance): RequestHandler;
+export declare function resolveBetterAuthSessionFromHeaders(auth: BetterAuthInstance, headers: Headers): Promise<BetterAuthSessionResult | null>;
+export declare function resolveBetterAuthSession(auth: BetterAuthInstance, req: Request): Promise<BetterAuthSessionResult | null>;
+export {};
+//# sourceMappingURL=better-auth.d.ts.map

package/dist/auth/better-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.d.ts","sourceRoot":"","sources":["../../src/auth/better-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAOvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,KAAK,kBAAkB,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AAKxD,wBAAgB,sBAAsB,CAAC,UAAU,SAA8B,GAAG,MAAM,CAMvF;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE;;;EAKtF;AAmBD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CA2BjG;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAsC7G;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CAKhF;AAED,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA0BzC;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,kBAAkB,EACxB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAEzC"}