@dealdesk/server 2026.527.0-canary.0

package/dist/auth/better-auth.js

@@ -0,0 +1,133 @@
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { toNodeHandler } from "better-auth/node";
+import { authAccounts, authSessions, authUsers, authVerifications, } from "@dealdesk/db";
+import { resolveDealDeskInstanceId } from "../home-paths.js";
+const AUTH_COOKIE_PREFIX_FALLBACK = "default";
+const AUTH_COOKIE_PREFIX_INVALID_SEGMENTS_RE = /[^a-zA-Z0-9_-]+/g;
+export function deriveAuthCookiePrefix(instanceId = resolveDealDeskInstanceId()) {
+    const scopedInstanceId = instanceId
+        .trim()
+        .replace(AUTH_COOKIE_PREFIX_INVALID_SEGMENTS_RE, "-")
+        .replace(/^-+|-+$/g, "") || AUTH_COOKIE_PREFIX_FALLBACK;
+    return `dealdesk-${scopedInstanceId}`;
+}
+export function buildBetterAuthAdvancedOptions(input) {
+    return {
+        cookiePrefix: deriveAuthCookiePrefix(),
+        ...(input.disableSecureCookies ? { useSecureCookies: false } : {}),
+    };
+}
+function headersFromNodeHeaders(rawHeaders) {
+    const headers = new Headers();
+    for (const [key, raw] of Object.entries(rawHeaders)) {
+        if (!raw)
+            continue;
+        if (Array.isArray(raw)) {
+            for (const value of raw)
+                headers.append(key, value);
+            continue;
+        }
+        headers.set(key, raw);
+    }
+    return headers;
+}
+function headersFromExpressRequest(req) {
+    return headersFromNodeHeaders(req.headers);
+}
+export function deriveAuthTrustedOrigins(config, opts) {
+    const baseUrl = config.authBaseUrlMode === "explicit" ? config.authPublicBaseUrl : undefined;
+    const trustedOrigins = new Set();
+    if (baseUrl) {
+        try {
+            trustedOrigins.add(new URL(baseUrl).origin);
+        }
+        catch {
+            // Better Auth will surface invalid base URL separately.
+        }
+    }
+    if (config.deploymentMode === "authenticated") {
+        const port = opts?.listenPort ?? config.port;
+        const needsPortVariants = port !== 80 && port !== 443;
+        for (const hostname of config.allowedHostnames) {
+            const trimmed = hostname.trim().toLowerCase();
+            if (!trimmed)
+                continue;
+            trustedOrigins.add(`https://${trimmed}`);
+            trustedOrigins.add(`http://${trimmed}`);
+            if (needsPortVariants) {
+                trustedOrigins.add(`https://${trimmed}:${port}`);
+                trustedOrigins.add(`http://${trimmed}:${port}`);
+            }
+        }
+    }
+    return Array.from(trustedOrigins);
+}
+export function createBetterAuthInstance(db, config, trustedOrigins) {
+    const baseUrl = config.authBaseUrlMode === "explicit" ? config.authPublicBaseUrl : undefined;
+    const secret = process.env.BETTER_AUTH_SECRET ?? process.env.DEALDESK_AGENT_JWT_SECRET;
+    if (!secret) {
+        throw new Error("BETTER_AUTH_SECRET (or DEALDESK_AGENT_JWT_SECRET) must be set. " +
+            "For local development, set BETTER_AUTH_SECRET=dealdesk-dev-secret in your .env file.");
+    }
+    const publicUrl = process.env.DEALDESK_PUBLIC_URL ?? baseUrl;
+    const isHttpOnly = publicUrl ? publicUrl.startsWith("http://") : false;
+    const authConfig = {
+        baseURL: baseUrl,
+        secret,
+        trustedOrigins,
+        database: drizzleAdapter(db, {
+            provider: "pg",
+            schema: {
+                user: authUsers,
+                session: authSessions,
+                account: authAccounts,
+                verification: authVerifications,
+            },
+        }),
+        emailAndPassword: {
+            enabled: true,
+            requireEmailVerification: false,
+            disableSignUp: config.authDisableSignUp,
+        },
+        advanced: buildBetterAuthAdvancedOptions({ disableSecureCookies: isHttpOnly }),
+    };
+    if (!baseUrl) {
+        delete authConfig.baseURL;
+    }
+    return betterAuth(authConfig);
+}
+export function createBetterAuthHandler(auth) {
+    const handler = toNodeHandler(auth);
+    return (req, res, next) => {
+        void Promise.resolve(handler(req, res)).catch(next);
+    };
+}
+export async function resolveBetterAuthSessionFromHeaders(auth, headers) {
+    const api = auth.api;
+    if (!api?.getSession)
+        return null;
+    const sessionValue = await api.getSession({
+        headers,
+    });
+    if (!sessionValue || typeof sessionValue !== "object")
+        return null;
+    const value = sessionValue;
+    const session = value.session?.id && value.session.userId
+        ? { id: value.session.id, userId: value.session.userId }
+        : null;
+    const user = value.user?.id
+        ? {
+            id: value.user.id,
+            email: value.user.email ?? null,
+            name: value.user.name ?? null,
+        }
+        : null;
+    if (!session || !user)
+        return null;
+    return { session, user };
+}
+export async function resolveBetterAuthSession(auth, req) {
+    return resolveBetterAuthSessionFromHeaders(auth, headersFromExpressRequest(req));
+}
+//# sourceMappingURL=better-auth.js.map

package/dist/auth/better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.js","sourceRoot":"","sources":["../../src/auth/better-auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAe7D,MAAM,2BAA2B,GAAG,SAAS,CAAC;AAC9C,MAAM,sCAAsC,GAAG,kBAAkB,CAAC;AAElE,MAAM,UAAU,sBAAsB,CAAC,UAAU,GAAG,yBAAyB,EAAE;IAC7E,MAAM,gBAAgB,GAAG,UAAU;SAChC,IAAI,EAAE;SACN,OAAO,CAAC,sCAAsC,EAAE,GAAG,CAAC;SACpD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC;IAC1D,OAAO,YAAY,gBAAgB,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAwC;IACrF,OAAO;QACL,YAAY,EAAE,sBAAsB,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA+B;IAC7D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,GAAG;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAY;IAC7C,OAAO,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,IAA8B;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,iBAAiB,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;QACtD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,cAAc,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;YACzC,cAAc,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;YACxC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,cAAc,CAAC,GAAG,CAAC,WAAW,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjD,cAAc,CAAC,GAAG,CAAC,UAAU,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAM,EAAE,MAAc,EAAE,cAAwB;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iEAAiE;YACjE,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC;IAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEvE,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,OAAO;QAChB,MAAM;QACN,cAAc;QACd,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,YAAY;gBACrB,YAAY,EAAE,iBAAiB;aAChC;SACF,CAAC;QACF,gBAAgB,EAAE;YAChB,OAAO,EAAE,IAAI;YACb,wBAAwB,EAAE,KAAK;YAC/B,aAAa,EAAE,MAAM,CAAC,iBAAiB;SACxC;QACD,QAAQ,EAAE,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;KAC/E,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAQ,UAAmC,CAAC,OAAO,CAAC;IACtD,CAAC;IAED,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAwB;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAwB,EACxB,OAAgB;IAEhB,MAAM,GAAG,GAAI,IAAmF,CAAC,GAAG,CAAC;IACrG,IAAI,CAAC,GAAG,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC;QACxC,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,KAAK,GAAG,YAGb,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;QACvD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE;QACxD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;QACzB,CAAC,CAAC;YACE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;SAC9B;QACH,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAwB,EACxB,GAAY;IAEZ,OAAO,mCAAmC,CAAC,IAAI,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/board-claim.d.ts

@@ -0,0 +1,23 @@
+import type { Db } from "@dealdesk/db";
+import type { DeploymentMode } from "@dealdesk/shared";
+type ChallengeStatus = "available" | "claimed" | "expired" | "invalid";
+export declare function initializeBoardClaimChallenge(db: Db, opts: {
+    deploymentMode: DeploymentMode;
+}): Promise<void>;
+export declare function getBoardClaimWarningUrl(host: string, port: number): string | null;
+export declare function inspectBoardClaimChallenge(token: string, code: string | undefined): {
+    status: ChallengeStatus;
+    requiresSignIn: boolean;
+    expiresAt: string | null;
+    claimedByUserId: string | null;
+};
+export declare function claimBoardOwnership(db: Db, opts: {
+    token: string;
+    code: string | undefined;
+    userId: string;
+}): Promise<{
+    status: ChallengeStatus;
+    claimedByUserId?: string;
+}>;
+export {};
+//# sourceMappingURL=board-claim.d.ts.map

package/dist/board-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-claim.d.ts","sourceRoot":"","sources":["../src/board-claim.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvD,KAAK,eAAe,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAiCvE,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IAAE,cAAc,EAAE,cAAc,CAAA;CAAE,GACvC,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKjF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS;;;;;EAQjF;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6DhE"}

package/dist/board-claim.js

@@ -0,0 +1,115 @@
+import { randomBytes } from "node:crypto";
+import { and, eq } from "drizzle-orm";
+import { companies, companyMemberships, instanceUserRoles } from "@dealdesk/db";
+const LOCAL_BOARD_USER_ID = "local-board";
+const CLAIM_TTL_MS = 1000 * 60 * 60 * 24;
+let activeChallenge = null;
+function createChallenge(now = new Date()) {
+    return {
+        token: randomBytes(24).toString("hex"),
+        code: randomBytes(12).toString("hex"),
+        createdAt: now,
+        expiresAt: new Date(now.getTime() + CLAIM_TTL_MS),
+        claimedAt: null,
+        claimedByUserId: null,
+    };
+}
+function getChallengeStatus(token, code) {
+    if (!activeChallenge)
+        return "invalid";
+    if (activeChallenge.token !== token)
+        return "invalid";
+    if (activeChallenge.code !== (code ?? ""))
+        return "invalid";
+    if (activeChallenge.claimedAt)
+        return "claimed";
+    if (activeChallenge.expiresAt.getTime() <= Date.now())
+        return "expired";
+    return "available";
+}
+export async function initializeBoardClaimChallenge(db, opts) {
+    if (opts.deploymentMode !== "authenticated") {
+        activeChallenge = null;
+        return;
+    }
+    const admins = await db
+        .select({ userId: instanceUserRoles.userId })
+        .from(instanceUserRoles)
+        .where(eq(instanceUserRoles.role, "instance_admin"));
+    const onlyLocalBoardAdmin = admins.length === 1 && admins[0]?.userId === LOCAL_BOARD_USER_ID;
+    if (!onlyLocalBoardAdmin) {
+        activeChallenge = null;
+        return;
+    }
+    if (!activeChallenge || activeChallenge.expiresAt.getTime() <= Date.now() || activeChallenge.claimedAt) {
+        activeChallenge = createChallenge();
+    }
+}
+export function getBoardClaimWarningUrl(host, port) {
+    if (!activeChallenge)
+        return null;
+    if (activeChallenge.claimedAt || activeChallenge.expiresAt.getTime() <= Date.now())
+        return null;
+    const visibleHost = host === "0.0.0.0" ? "localhost" : host;
+    return `http://${visibleHost}:${port}/board-claim/${activeChallenge.token}?code=${activeChallenge.code}`;
+}
+export function inspectBoardClaimChallenge(token, code) {
+    const status = getChallengeStatus(token, code);
+    return {
+        status,
+        requiresSignIn: true,
+        expiresAt: activeChallenge?.expiresAt?.toISOString() ?? null,
+        claimedByUserId: activeChallenge?.claimedByUserId ?? null,
+    };
+}
+export async function claimBoardOwnership(db, opts) {
+    const status = getChallengeStatus(opts.token, opts.code);
+    if (status !== "available")
+        return { status };
+    await db.transaction(async (tx) => {
+        const existingTargetAdmin = await tx
+            .select({ id: instanceUserRoles.id })
+            .from(instanceUserRoles)
+            .where(and(eq(instanceUserRoles.userId, opts.userId), eq(instanceUserRoles.role, "instance_admin")))
+            .then((rows) => rows[0] ?? null);
+        if (!existingTargetAdmin) {
+            await tx.insert(instanceUserRoles).values({
+                userId: opts.userId,
+                role: "instance_admin",
+            });
+        }
+        await tx
+            .delete(instanceUserRoles)
+            .where(and(eq(instanceUserRoles.userId, LOCAL_BOARD_USER_ID), eq(instanceUserRoles.role, "instance_admin")));
+        const allCompanies = await tx.select({ id: companies.id }).from(companies);
+        for (const company of allCompanies) {
+            const existing = await tx
+                .select({ id: companyMemberships.id, status: companyMemberships.status })
+                .from(companyMemberships)
+                .where(and(eq(companyMemberships.companyId, company.id), eq(companyMemberships.principalType, "user"), eq(companyMemberships.principalId, opts.userId)))
+                .then((rows) => rows[0] ?? null);
+            if (!existing) {
+                await tx.insert(companyMemberships).values({
+                    companyId: company.id,
+                    principalType: "user",
+                    principalId: opts.userId,
+                    status: "active",
+                    membershipRole: "owner",
+                });
+                continue;
+            }
+            if (existing.status !== "active") {
+                await tx
+                    .update(companyMemberships)
+                    .set({ status: "active", membershipRole: "owner", updatedAt: new Date() })
+                    .where(eq(companyMemberships.id, existing.id));
+            }
+        }
+    });
+    if (activeChallenge && activeChallenge.token === opts.token) {
+        activeChallenge.claimedAt = new Date();
+        activeChallenge.claimedByUserId = opts.userId;
+    }
+    return { status: "claimed", claimedByUserId: opts.userId };
+}
+//# sourceMappingURL=board-claim.js.map

package/dist/board-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-claim.js","sourceRoot":"","sources":["../src/board-claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGhF,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAazC,IAAI,eAAe,GAA0B,IAAI,CAAC;AAElD,SAAS,eAAe,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACvC,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrC,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC;QACjD,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,IAAwB;IACjE,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,eAAe,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,eAAe,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAM,EACN,IAAwC;IAExC,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;QAC5C,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,MAAM,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,CAAC;SAC5C,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEvD,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,mBAAmB,CAAC;IAC7F,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QACvG,eAAe,GAAG,eAAe,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,IAAY;IAChE,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAChG,MAAM,WAAW,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,OAAO,UAAU,WAAW,IAAI,IAAI,gBAAgB,eAAe,CAAC,KAAK,SAAS,eAAe,CAAC,IAAI,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa,EAAE,IAAwB;IAChF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,MAAM;QACN,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QAC5D,eAAe,EAAE,eAAe,EAAE,eAAe,IAAI,IAAI;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAM,EACN,IAAiE;IAEjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE9C,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QAChC,MAAM,mBAAmB,GAAG,MAAM,EAAE;aACjC,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;aACpC,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;aACnG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;gBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE;aACL,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAE/G,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAC;iBACxE,IAAI,CAAC,kBAAkB,CAAC;iBACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAChD,CACF;iBACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;oBACzC,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,aAAa,EAAE,MAAM;oBACrB,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,OAAO;iBACxB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,EAAE;qBACL,MAAM,CAAC,kBAAkB,CAAC;qBAC1B,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBACzE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,eAAe,IAAI,eAAe,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5D,eAAe,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACvC,eAAe,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC"}

package/dist/config-file.d.ts

@@ -0,0 +1,3 @@
+import { type DealDeskConfig } from "@dealdesk/shared";
+export declare function readConfigFile(): DealDeskConfig | null;
+//# sourceMappingURL=config-file.d.ts.map

package/dist/config-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.d.ts","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAG7E,wBAAgB,cAAc,IAAI,cAAc,GAAG,IAAI,CAWtD"}

package/dist/config-file.js

@@ -0,0 +1,16 @@
+import fs from "node:fs";
+import { dealDeskConfigSchema } from "@dealdesk/shared";
+import { resolveDealDeskConfigPath } from "./paths.js";
+export function readConfigFile() {
+    const configPath = resolveDealDeskConfigPath();
+    if (!fs.existsSync(configPath))
+        return null;
+    try {
+        const raw = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        return dealDeskConfigSchema.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=config-file.js.map

package/dist/config-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.js","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;IAE/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,50 @@
+import { type BindMode, type AuthBaseUrlMode, type DeploymentExposure, type DeploymentMode, type SecretProvider, type StorageProvider } from "@dealdesk/shared";
+type DatabaseMode = "embedded-postgres" | "postgres";
+export interface Config {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    bind: BindMode;
+    customBindHost: string | undefined;
+    host: string;
+    port: number;
+    allowedHostnames: string[];
+    authBaseUrlMode: AuthBaseUrlMode;
+    authPublicBaseUrl: string | undefined;
+    authDisableSignUp: boolean;
+    databaseMode: DatabaseMode;
+    databaseUrl: string | undefined;
+    databaseMigrationUrl: string | undefined;
+    embeddedPostgresDataDir: string;
+    embeddedPostgresPort: number;
+    databaseBackupEnabled: boolean;
+    databaseBackupIntervalMinutes: number;
+    databaseBackupRetentionDays: number;
+    databaseBackupDir: string;
+    serveUi: boolean;
+    uiDevMiddleware: boolean;
+    secretsProvider: SecretProvider;
+    secretsStrictMode: boolean;
+    secretsMasterKeyFilePath: string;
+    storageProvider: StorageProvider;
+    storageLocalDiskBaseDir: string;
+    storageS3Bucket: string;
+    storageS3Region: string;
+    storageS3Endpoint: string | undefined;
+    storageS3Prefix: string;
+    storageS3ForcePathStyle: boolean;
+    feedbackExportBackendUrl: string | undefined;
+    feedbackExportBackendToken: string | undefined;
+    heartbeatSchedulerEnabled: boolean;
+    heartbeatSchedulerIntervalMs: number;
+    companyDeletionEnabled: boolean;
+    telemetryEnabled: boolean;
+    googleOAuth: GoogleOAuthConfig | null;
+}
+export interface GoogleOAuthConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+}
+export declare function loadConfig(): Config;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,OAAO,EAOL,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EAIrB,MAAM,kBAAkB,CAAC;AA0B1B,KAAK,YAAY,GAAG,mBAAmB,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,MAAM;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,2BAA2B,EAAE,MAAM,CAAC;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,cAAc,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wBAAwB,EAAE,MAAM,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,OAAO,CAAC;IACjC,wBAAwB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,0BAA0B,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,yBAAyB,EAAE,OAAO,CAAC;IACnC,4BAA4B,EAAE,MAAM,CAAC;IACrC,sBAAsB,EAAE,OAAO,CAAC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAI1B,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAqBD,wBAAgB,UAAU,IAAI,MAAM,CA2OnC"}

package/dist/config.js

@@ -0,0 +1,233 @@
+import { readConfigFile } from "./config-file.js";
+import { execFileSync } from "node:child_process";
+import { existsSync, realpathSync } from "node:fs";
+import { resolve } from "node:path";
+import { config as loadDotenv } from "dotenv";
+import { resolveDealDeskEnvPath } from "./paths.js";
+import { maybeRepairLegacyWorktreeConfigAndEnvFiles } from "./worktree-config.js";
+import { AUTH_BASE_URL_MODES, BIND_MODES, DEPLOYMENT_EXPOSURES, DEPLOYMENT_MODES, SECRET_PROVIDERS, STORAGE_PROVIDERS, inferBindModeFromHost, resolveRuntimeBind, validateConfiguredBindMode, } from "@dealdesk/shared";
+import { resolveDefaultBackupDir, resolveDefaultEmbeddedPostgresDir, resolveDefaultSecretsKeyFilePath, resolveDefaultStorageDir, resolveHomeAwarePath, } from "./home-paths.js";
+const DEALDESK_ENV_FILE_PATH = resolveDealDeskEnvPath();
+if (existsSync(DEALDESK_ENV_FILE_PATH)) {
+    loadDotenv({ path: DEALDESK_ENV_FILE_PATH, override: false, quiet: true });
+}
+const CWD_ENV_PATH = resolve(process.cwd(), ".env");
+const isSameFile = existsSync(CWD_ENV_PATH) && existsSync(DEALDESK_ENV_FILE_PATH)
+    ? realpathSync(CWD_ENV_PATH) === realpathSync(DEALDESK_ENV_FILE_PATH)
+    : CWD_ENV_PATH === DEALDESK_ENV_FILE_PATH;
+if (!isSameFile && existsSync(CWD_ENV_PATH)) {
+    loadDotenv({ path: CWD_ENV_PATH, override: false, quiet: true });
+}
+maybeRepairLegacyWorktreeConfigAndEnvFiles();
+const TAILSCALE_DETECT_TIMEOUT_MS = 3000;
+function detectTailnetBindHost() {
+    const explicit = process.env.DEALDESK_TAILNET_BIND_HOST?.trim();
+    if (explicit)
+        return explicit;
+    try {
+        const stdout = execFileSync("tailscale", ["ip", "-4"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            timeout: TAILSCALE_DETECT_TIMEOUT_MS,
+        });
+        return stdout
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .find(Boolean);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function loadConfig() {
+    const fileConfig = readConfigFile();
+    const fileDatabaseMode = (fileConfig?.database.mode === "postgres" ? "postgres" : "embedded-postgres");
+    const fileDbUrl = fileDatabaseMode === "postgres"
+        ? fileConfig?.database.connectionString
+        : undefined;
+    const fileDatabaseBackup = fileConfig?.database.backup;
+    const fileSecrets = fileConfig?.secrets;
+    const fileStorage = fileConfig?.storage;
+    const providerFromEnvRaw = process.env.DEALDESK_SECRETS_PROVIDER;
+    const providerFromEnv = providerFromEnvRaw && SECRET_PROVIDERS.includes(providerFromEnvRaw)
+        ? providerFromEnvRaw
+        : null;
+    const providerFromFile = fileSecrets?.provider;
+    const secretsProvider = providerFromEnv ?? providerFromFile ?? "local_encrypted";
+    const storageProviderFromEnvRaw = process.env.DEALDESK_STORAGE_PROVIDER;
+    const storageProviderFromEnv = storageProviderFromEnvRaw && STORAGE_PROVIDERS.includes(storageProviderFromEnvRaw)
+        ? storageProviderFromEnvRaw
+        : null;
+    const storageProvider = storageProviderFromEnv ?? fileStorage?.provider ?? "local_disk";
+    const storageLocalDiskBaseDir = resolveHomeAwarePath(process.env.DEALDESK_STORAGE_LOCAL_DIR ??
+        fileStorage?.localDisk?.baseDir ??
+        resolveDefaultStorageDir());
+    const storageS3Bucket = process.env.DEALDESK_STORAGE_S3_BUCKET ?? fileStorage?.s3?.bucket ?? "dealdesk";
+    const storageS3Region = process.env.DEALDESK_STORAGE_S3_REGION ?? fileStorage?.s3?.region ?? "us-east-1";
+    const storageS3Endpoint = process.env.DEALDESK_STORAGE_S3_ENDPOINT ?? fileStorage?.s3?.endpoint ?? undefined;
+    const storageS3Prefix = process.env.DEALDESK_STORAGE_S3_PREFIX ?? fileStorage?.s3?.prefix ?? "";
+    const storageS3ForcePathStyle = process.env.DEALDESK_STORAGE_S3_FORCE_PATH_STYLE !== undefined
+        ? process.env.DEALDESK_STORAGE_S3_FORCE_PATH_STYLE === "true"
+        : (fileStorage?.s3?.forcePathStyle ?? false);
+    const feedbackExportBackendUrl = process.env.DEALDESK_FEEDBACK_EXPORT_BACKEND_URL?.trim() ||
+        process.env.DEALDESK_TELEMETRY_BACKEND_URL?.trim() ||
+        undefined;
+    const feedbackExportBackendToken = process.env.DEALDESK_FEEDBACK_EXPORT_BACKEND_TOKEN?.trim() ||
+        process.env.DEALDESK_TELEMETRY_BACKEND_TOKEN?.trim() ||
+        undefined;
+    const deploymentModeFromEnvRaw = process.env.DEALDESK_DEPLOYMENT_MODE;
+    const deploymentModeFromEnv = deploymentModeFromEnvRaw && DEPLOYMENT_MODES.includes(deploymentModeFromEnvRaw)
+        ? deploymentModeFromEnvRaw
+        : null;
+    const deploymentMode = deploymentModeFromEnv ?? fileConfig?.server.deploymentMode ?? "local_trusted";
+    const strictModeFromEnv = process.env.DEALDESK_SECRETS_STRICT_MODE;
+    const secretsStrictMode = strictModeFromEnv !== undefined
+        ? strictModeFromEnv === "true"
+        : (fileSecrets?.strictMode ?? deploymentMode === "authenticated");
+    const deploymentExposureFromEnvRaw = process.env.DEALDESK_DEPLOYMENT_EXPOSURE;
+    const deploymentExposureFromEnv = deploymentExposureFromEnvRaw &&
+        DEPLOYMENT_EXPOSURES.includes(deploymentExposureFromEnvRaw)
+        ? deploymentExposureFromEnvRaw
+        : null;
+    const deploymentExposure = deploymentMode === "local_trusted"
+        ? "private"
+        : (deploymentExposureFromEnv ?? fileConfig?.server.exposure ?? "private");
+    const bindFromEnvRaw = process.env.DEALDESK_BIND;
+    const bindFromEnv = bindFromEnvRaw && BIND_MODES.includes(bindFromEnvRaw)
+        ? bindFromEnvRaw
+        : null;
+    const configuredHost = process.env.HOST ?? fileConfig?.server.host ?? "127.0.0.1";
+    const tailnetBindHost = detectTailnetBindHost();
+    const bind = bindFromEnv ??
+        fileConfig?.server.bind ??
+        inferBindModeFromHost(configuredHost, { tailnetBindHost });
+    const customBindHost = process.env.DEALDESK_BIND_HOST ?? fileConfig?.server.customBindHost;
+    const authBaseUrlModeFromEnvRaw = process.env.DEALDESK_AUTH_BASE_URL_MODE;
+    const authBaseUrlModeFromEnv = authBaseUrlModeFromEnvRaw &&
+        AUTH_BASE_URL_MODES.includes(authBaseUrlModeFromEnvRaw)
+        ? authBaseUrlModeFromEnvRaw
+        : null;
+    const publicUrlFromEnv = process.env.DEALDESK_PUBLIC_URL;
+    const authPublicBaseUrlRaw = process.env.DEALDESK_AUTH_PUBLIC_BASE_URL ??
+        process.env.BETTER_AUTH_URL ??
+        process.env.BETTER_AUTH_BASE_URL ??
+        publicUrlFromEnv ??
+        fileConfig?.auth?.publicBaseUrl;
+    const authPublicBaseUrl = authPublicBaseUrlRaw?.trim() || undefined;
+    const authBaseUrlMode = authBaseUrlModeFromEnv ??
+        fileConfig?.auth?.baseUrlMode ??
+        (authPublicBaseUrl ? "explicit" : "auto");
+    const disableSignUpFromEnv = process.env.DEALDESK_AUTH_DISABLE_SIGN_UP;
+    const authDisableSignUp = disableSignUpFromEnv !== undefined
+        ? disableSignUpFromEnv === "true"
+        : (fileConfig?.auth?.disableSignUp ?? false);
+    const allowedHostnamesFromEnvRaw = process.env.DEALDESK_ALLOWED_HOSTNAMES;
+    const allowedHostnamesFromEnv = allowedHostnamesFromEnvRaw
+        ? allowedHostnamesFromEnvRaw
+            .split(",")
+            .map((value) => value.trim().toLowerCase())
+            .filter((value) => value.length > 0)
+        : null;
+    const publicUrlHostname = authPublicBaseUrl
+        ? (() => {
+            try {
+                return new URL(authPublicBaseUrl).hostname.trim().toLowerCase();
+            }
+            catch {
+                return null;
+            }
+        })()
+        : null;
+    const allowedHostnames = Array.from(new Set([
+        ...(allowedHostnamesFromEnv ?? fileConfig?.server.allowedHostnames ?? []),
+        ...(publicUrlHostname ? [publicUrlHostname] : []),
+    ]
+        .map((value) => value.trim().toLowerCase())
+        .filter(Boolean)));
+    const googleClientId = process.env.GOOGLE_OAUTH_CLIENT_ID;
+    const googleClientSecret = process.env.GOOGLE_OAUTH_CLIENT_SECRET;
+    const googleRedirectUri = process.env.GOOGLE_OAUTH_REDIRECT_URI;
+    const googleOAuth = googleClientId && googleClientSecret && googleRedirectUri
+        ? { clientId: googleClientId, clientSecret: googleClientSecret, redirectUri: googleRedirectUri }
+        : null;
+    const companyDeletionEnvRaw = process.env.DEALDESK_ENABLE_COMPANY_DELETION;
+    const companyDeletionEnabled = companyDeletionEnvRaw !== undefined
+        ? companyDeletionEnvRaw === "true"
+        : deploymentMode === "local_trusted";
+    const databaseBackupEnabled = process.env.DEALDESK_DB_BACKUP_ENABLED !== undefined
+        ? process.env.DEALDESK_DB_BACKUP_ENABLED === "true"
+        : (fileDatabaseBackup?.enabled ?? true);
+    const databaseBackupIntervalMinutes = Math.max(1, Number(process.env.DEALDESK_DB_BACKUP_INTERVAL_MINUTES) ||
+        fileDatabaseBackup?.intervalMinutes ||
+        60);
+    const databaseBackupRetentionDays = Math.max(1, Number(process.env.DEALDESK_DB_BACKUP_RETENTION_DAYS) ||
+        fileDatabaseBackup?.retentionDays ||
+        7);
+    const databaseBackupDir = resolveHomeAwarePath(process.env.DEALDESK_DB_BACKUP_DIR ??
+        fileDatabaseBackup?.dir ??
+        resolveDefaultBackupDir());
+    const bindValidationErrors = validateConfiguredBindMode({
+        deploymentMode,
+        deploymentExposure,
+        bind,
+        host: configuredHost,
+        customBindHost,
+    });
+    if (bindValidationErrors.length > 0) {
+        throw new Error(bindValidationErrors[0]);
+    }
+    const resolvedBind = resolveRuntimeBind({
+        bind,
+        host: configuredHost,
+        customBindHost,
+        tailnetBindHost,
+    });
+    if (resolvedBind.errors.length > 0) {
+        throw new Error(resolvedBind.errors[0]);
+    }
+    return {
+        deploymentMode,
+        deploymentExposure,
+        bind: resolvedBind.bind,
+        customBindHost: resolvedBind.customBindHost,
+        host: resolvedBind.host,
+        port: Number(process.env.PORT) || fileConfig?.server.port || 3100,
+        allowedHostnames,
+        authBaseUrlMode,
+        authPublicBaseUrl,
+        authDisableSignUp,
+        databaseMode: fileDatabaseMode,
+        databaseUrl: process.env.DATABASE_URL ?? fileDbUrl,
+        databaseMigrationUrl: process.env.DATABASE_MIGRATION_URL,
+        embeddedPostgresDataDir: resolveHomeAwarePath(fileConfig?.database.embeddedPostgresDataDir ?? resolveDefaultEmbeddedPostgresDir()),
+        embeddedPostgresPort: fileConfig?.database.embeddedPostgresPort ?? 54329,
+        databaseBackupEnabled,
+        databaseBackupIntervalMinutes,
+        databaseBackupRetentionDays,
+        databaseBackupDir,
+        serveUi: process.env.SERVE_UI !== undefined
+            ? process.env.SERVE_UI === "true"
+            : fileConfig?.server.serveUi ?? true,
+        uiDevMiddleware: process.env.DEALDESK_UI_DEV_MIDDLEWARE === "true",
+        secretsProvider,
+        secretsStrictMode,
+        secretsMasterKeyFilePath: resolveHomeAwarePath(process.env.DEALDESK_SECRETS_MASTER_KEY_FILE ??
+            fileSecrets?.localEncrypted.keyFilePath ??
+            resolveDefaultSecretsKeyFilePath()),
+        storageProvider,
+        storageLocalDiskBaseDir,
+        storageS3Bucket,
+        storageS3Region,
+        storageS3Endpoint,
+        storageS3Prefix,
+        storageS3ForcePathStyle,
+        feedbackExportBackendUrl,
+        feedbackExportBackendToken,
+        heartbeatSchedulerEnabled: process.env.HEARTBEAT_SCHEDULER_ENABLED !== "false",
+        heartbeatSchedulerIntervalMs: Math.max(10000, Number(process.env.HEARTBEAT_SCHEDULER_INTERVAL_MS) || 30000),
+        companyDeletionEnabled,
+        telemetryEnabled: fileConfig?.telemetry?.enabled ?? (process.env.DEALDESK_TELEMETRY_ENABLED === "1"),
+        googleOAuth,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EAOjB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,gCAAgC,EAChC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,sBAAsB,GAAG,sBAAsB,EAAE,CAAC;AACxD,IAAI,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,sBAAsB,CAAC;IAC/E,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,YAAY,CAAC,sBAAsB,CAAC;IACrE,CAAC,CAAC,YAAY,KAAK,sBAAsB,CAAC;AAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;IAC5C,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,0CAA0C,EAAE,CAAC;AAE7C,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAsDzC,SAAS,qBAAqB;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YACrD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;QACH,OAAO,MAAM;aACV,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,gBAAgB,GACpB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAiB,CAAC;IAEhG,MAAM,SAAS,GACb,gBAAgB,KAAK,UAAU;QAC7B,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,gBAAgB;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,kBAAkB,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC;IACvD,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC;IACxC,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC;IAExC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACjE,MAAM,eAAe,GACnB,kBAAkB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,kBAAoC,CAAC;QACnF,CAAC,CAAE,kBAAqC;QACxC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GAAG,WAAW,EAAE,QAAQ,CAAC;IAC/C,MAAM,eAAe,GAAmB,eAAe,IAAI,gBAAgB,IAAI,iBAAiB,CAAC;IAEjG,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACxE,MAAM,sBAAsB,GAC1B,yBAAyB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,yBAA4C,CAAC;QACnG,CAAC,CAAE,yBAA6C;QAChD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAAoB,sBAAsB,IAAI,WAAW,EAAE,QAAQ,IAAI,YAAY,CAAC;IACzG,MAAM,uBAAuB,GAAG,oBAAoB,CAClD,OAAO,CAAC,GAAG,CAAC,0BAA0B;QACpC,WAAW,EAAE,SAAS,EAAE,OAAO;QAC/B,wBAAwB,EAAE,CAC7B,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,UAAU,CAAC;IACxG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,WAAW,CAAC;IACzG,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,WAAW,EAAE,EAAE,EAAE,QAAQ,IAAI,SAAS,CAAC;IAC7G,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC;IAChG,MAAM,uBAAuB,GAC3B,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,SAAS;QAC5D,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,MAAM;QAC7D,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC,CAAC;IACjD,MAAM,wBAAwB,GAC5B,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,IAAI,EAAE;QACxD,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE;QAClD,SAAS,CAAC;IACZ,MAAM,0BAA0B,GAC9B,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,IAAI,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE;QACpD,SAAS,CAAC;IAEZ,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACtE,MAAM,qBAAqB,GACzB,wBAAwB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,wBAA0C,CAAC;QAC/F,CAAC,CAAE,wBAA2C;QAC9C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAAmB,qBAAqB,IAAI,UAAU,EAAE,MAAM,CAAC,cAAc,IAAI,eAAe,CAAC;IACrH,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IACnE,MAAM,iBAAiB,GACrB,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,iBAAiB,KAAK,MAAM;QAC9B,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,IAAI,cAAc,KAAK,eAAe,CAAC,CAAC;IACtE,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC9E,MAAM,yBAAyB,GAC7B,4BAA4B;QAC5B,oBAAoB,CAAC,QAAQ,CAAC,4BAAkD,CAAC;QAC/E,CAAC,CAAE,4BAAmD;QACtD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,kBAAkB,GACtB,cAAc,KAAK,eAAe;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,IAAI,UAAU,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACjD,MAAM,WAAW,GACf,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,cAA0B,CAAC;QAC/D,CAAC,CAAE,cAA2B;QAC9B,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IAClF,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;IAChD,MAAM,IAAI,GACR,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,qBAAqB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC;IAC3F,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC1E,MAAM,sBAAsB,GAC1B,yBAAyB;QACzB,mBAAmB,CAAC,QAAQ,CAAC,yBAA4C,CAAC;QACxE,CAAC,CAAE,yBAA6C;QAChD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzD,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,6BAA6B;QACzC,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,gBAAgB;QAChB,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC;IAClC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpE,MAAM,eAAe,GACnB,sBAAsB;QACtB,UAAU,EAAE,IAAI,EAAE,WAAW;QAC7B,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACvE,MAAM,iBAAiB,GACrB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB,KAAK,MAAM;QACjC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;IACjD,MAAM,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAC1E,MAAM,uBAAuB,GAAG,0BAA0B;QACxD,CAAC,CAAC,0BAA0B;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,iBAAiB,GAAG,iBAAiB;QACzC,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,IAAI,GAAG,CACL;QACE,GAAG,CAAC,uBAAuB,IAAI,UAAU,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACzE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD;SACE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC1D,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAChE,MAAM,WAAW,GACf,cAAc,IAAI,kBAAkB,IAAI,iBAAiB;QACvD,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAChG,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAC3E,MAAM,sBAAsB,GAC1B,qBAAqB,KAAK,SAAS;QACjC,CAAC,CAAC,qBAAqB,KAAK,MAAM;QAClC,CAAC,CAAC,cAAc,KAAK,eAAe,CAAC;IACzC,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,SAAS;QAClD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,MAAM;QACnD,CAAC,CAAC,CAAC,kBAAkB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IAC5C,MAAM,6BAA6B,GAAG,IAAI,CAAC,GAAG,CAC5C,CAAC,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC;QACrD,kBAAkB,EAAE,eAAe;QACnC,EAAE,CACL,CAAC;IACF,MAAM,2BAA2B,GAAG,IAAI,CAAC,GAAG,CAC1C,CAAC,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;QACnD,kBAAkB,EAAE,aAAa;QACjC,CAAC,CACJ,CAAC;IACF,MAAM,iBAAiB,GAAG,oBAAoB,CAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAChC,kBAAkB,EAAE,GAAG;QACvB,uBAAuB,EAAE,CAC5B,CAAC;IACF,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;QACtD,cAAc;QACd,kBAAkB;QAClB,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,cAAc;KACf,CAAC,CAAC;IACH,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,cAAc;QACd,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,cAAc;QACd,kBAAkB;QAClB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;QACjE,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS;QAClD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QACxD,uBAAuB,EAAE,oBAAoB,CAC3C,UAAU,EAAE,QAAQ,CAAC,uBAAuB,IAAI,iCAAiC,EAAE,CACpF;QACD,oBAAoB,EAAE,UAAU,EAAE,QAAQ,CAAC,oBAAoB,IAAI,KAAK;QACxE,qBAAqB;QACrB,6BAA6B;QAC7B,2BAA2B;QAC3B,iBAAiB;QACjB,OAAO,EACL,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;YAChC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YACjC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QACxC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,MAAM;QAClE,eAAe;QACf,iBAAiB;QACjB,wBAAwB,EACtB,oBAAoB,CAClB,OAAO,CAAC,GAAG,CAAC,gCAAgC;YAC1C,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,gCAAgC,EAAE,CACrC;QACH,eAAe;QACf,uBAAuB;QACvB,eAAe;QACf,eAAe;QACf,iBAAiB;QACjB,eAAe;QACf,uBAAuB;QACvB,wBAAwB;QACxB,0BAA0B;QAC1B,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,OAAO;QAC9E,4BAA4B,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC;QAC3G,sBAAsB;QACtB,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;QACpG,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/deal-desk/enrichment/__tests__/apollo-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=apollo-client.test.d.ts.map

package/dist/deal-desk/enrichment/__tests__/apollo-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apollo-client.test.d.ts","sourceRoot":"","sources":["../../../../src/deal-desk/enrichment/__tests__/apollo-client.test.ts"],"names":[],"mappings":""}