@dofe/infra-common 0.1.1

package/dist/guards/permission.guard.js

@@ -0,0 +1,141 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionGuard = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const nest_winston_1 = require("nest-winston");
+const winston_1 = require("winston");
+const jwt_1 = require("@nestjs/jwt");
+const config_1 = require("@nestjs/config");
+const organization_permission_1 = require("@app/tenant-management/organization-permission");
+const infra_contracts_1 = require("@dofe/infra-contracts");
+let PermissionGuard = class PermissionGuard {
+    reflector;
+    permissionService;
+    jwtService;
+    configService;
+    logger;
+    constructor(reflector, permissionService, jwtService, configService, logger) {
+        this.reflector = reflector;
+        this.permissionService = permissionService;
+        this.jwtService = jwtService;
+        this.configService = configService;
+        this.logger = logger;
+    }
+    /**
+     * 从 Authorization header 中提取并验证 JWT token
+     */
+    async extractUserFromToken(request) {
+        const authHeader = request.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            return null;
+        }
+        const token = authHeader.substring(7);
+        try {
+            const jwtConfig = this.configService.getOrThrow('jwt');
+            const payload = await this.jwtService.verifyAsync(token, {
+                secret: jwtConfig.secret,
+            });
+            if (payload?.isAnonymity) {
+                return null;
+            }
+            return {
+                userId: payload?.sub,
+                isAdmin: payload?.isAdmin || false,
+            };
+        }
+        catch (error) {
+            return null;
+        }
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        // 检查是否是公共端点
+        const isPublic = this.reflector.getAllAndOverride(infra_contracts_1.PUBLIC_ENDPOINT_KEY, [context.getHandler(), context.getClass()]);
+        if (isPublic) {
+            return true;
+        }
+        // 如果是内部服务，跳过权限检查
+        const isInternalService = request.isInternalService;
+        if (isInternalService) {
+            this.logger.info('Skipping permission check for internal service', {
+                service: request.internalServiceName,
+                tenantId: request.tenantId,
+            });
+            return true;
+        }
+        // 获取需要的权限
+        const requiredPermissions = this.reflector.getAllAndOverride(infra_contracts_1.REQUIRE_PERMISSIONS_KEY, [context.getHandler(), context.getClass()]);
+        // 如果没有权限要求，直接放行
+        if (!requiredPermissions || requiredPermissions.length === 0) {
+            return true;
+        }
+        let userId = request.userId;
+        let isSystemAdmin = request.isAdmin;
+        const tenantId = request.tenantId;
+        // 如果 userId 不存在（没有经过 AuthGuard），尝试从 JWT token 中解析
+        if (!userId) {
+            const user = await this.extractUserFromToken(request);
+            if (!user || !user.userId) {
+                this.logger.warn('No valid authentication found, denying access');
+                throw new common_1.UnauthorizedException('Authentication required');
+            }
+            userId = user.userId;
+            isSystemAdmin = user.isAdmin;
+            // 将用户信息设置到 request 中，供后续使用
+            request.userId = userId;
+            request.isAdmin = isSystemAdmin;
+        }
+        // 检查权限
+        this.logger.debug('Checking permissions', {
+            userId,
+            tenantId,
+            isSystemAdmin,
+            requiredPermissions,
+        });
+        const hasPermission = await this.permissionService.hasAllPermissions({
+            userId,
+            tenantId,
+            permissions: requiredPermissions,
+            isSystemAdmin,
+        });
+        if (!hasPermission) {
+            this.logger.warn('Permission check failed', {
+                userId,
+                tenantId,
+                isSystemAdmin,
+                requiredPermissions,
+            });
+            throw new common_1.ForbiddenException('Insufficient permissions');
+        }
+        this.logger.debug('Permission check passed', {
+            userId,
+            tenantId,
+            requiredPermissions,
+        });
+        return true;
+    }
+};
+exports.PermissionGuard = PermissionGuard;
+exports.PermissionGuard = PermissionGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(4, (0, common_1.Inject)(nest_winston_1.WINSTON_MODULE_PROVIDER)),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        organization_permission_1.OrganizationPermissionService,
+        jwt_1.JwtService,
+        config_1.ConfigService,
+        winston_1.Logger])
+], PermissionGuard);
+//# sourceMappingURL=permission.guard.js.map

package/dist/guards/permission.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.guard.js","sourceRoot":"","sources":["../../src/guards/permission.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,uCAAyC;AACzC,+CAAuD;AACvD,qCAAiC;AAEjC,qCAAyC;AACzC,2CAA+C;AAC/C,4FAA+F;AAC/F,2DAI+B;AAIxB,IAAM,eAAe,GAArB,MAAM,eAAe;IAEP;IACA;IACA;IACA;IACiC;IALpD,YACmB,SAAoB,EACpB,iBAAgD,EAChD,UAAsB,EACtB,aAA4B,EACK,MAAc;QAJ/C,cAAS,GAAT,SAAS,CAAW;QACpB,sBAAiB,GAAjB,iBAAiB,CAA+B;QAChD,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;QACK,WAAM,GAAN,MAAM,CAAQ;IAC/D,CAAC;IAEJ;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,OAAuB;QAIxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAY,KAAK,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE;gBACvD,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,OAAO,EAAE,GAAG;gBACpB,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QAEpE,YAAY;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC/C,qCAAmB,EACnB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iBAAiB;QACjB,MAAM,iBAAiB,GAAI,OAAe,CAAC,iBAAiB,CAAC;QAC7D,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBACjE,OAAO,EAAG,OAAe,CAAC,mBAAmB;gBAC7C,QAAQ,EAAG,OAAe,CAAC,QAAQ;aACpC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,UAAU;QACV,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC1D,yCAAuB,EACvB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,gBAAgB;QAChB,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,GAAI,OAAe,CAAC,MAAM,CAAC;QACrC,IAAI,aAAa,GAAI,OAAe,CAAC,OAAO,CAAC;QAC7C,MAAM,QAAQ,GAAI,OAAe,CAAC,QAAQ,CAAC;QAE3C,kDAAkD;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;gBAClE,MAAM,IAAI,8BAAqB,CAAC,yBAAyB,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;YAE7B,2BAA2B;YAC1B,OAAe,CAAC,MAAM,GAAG,MAAM,CAAC;YAChC,OAAe,CAAC,OAAO,GAAG,aAAa,CAAC;QAC3C,CAAC;QAED,OAAO;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACxC,MAAM;YACN,QAAQ;YACR,aAAa;YACb,mBAAmB;SACpB,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;YACnE,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,mBAAmB;YAChC,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBAC1C,MAAM;gBACN,QAAQ;gBACR,aAAa;gBACb,mBAAmB;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC3C,MAAM;YACN,QAAQ;YACR,mBAAmB;SACpB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA/HY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,sCAAuB,CAAC,CAAA;qCAJJ,gBAAS;QACD,uDAA6B;QACpC,gBAAU;QACP,sBAAa;QACa,gBAAM;GANvD,eAAe,CA+H3B"}

package/dist/guards/tenant-context.guard.d.ts

@@ -0,0 +1,12 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Logger } from 'winston';
+import { TenantContextService } from '@app/tenant-management/tenant-context';
+export declare class TenantContextGuard implements CanActivate {
+    private readonly reflector;
+    private readonly tenantContextService;
+    private readonly logger;
+    constructor(reflector: Reflector, tenantContextService: TenantContextService, logger: Logger);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+//# sourceMappingURL=tenant-context.guard.d.ts.map

package/dist/guards/tenant-context.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.guard.d.ts","sourceRoot":"","sources":["../../src/guards/tenant-context.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAQ7E,qBACa,kBAAmB,YAAW,WAAW;IAElD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACJ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFvC,SAAS,EAAE,SAAS,EACpB,oBAAoB,EAAE,oBAAoB,EACT,MAAM,EAAE,MAAM;IAG5D,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgF/D"}

package/dist/guards/tenant-context.guard.js

@@ -0,0 +1,94 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantContextGuard = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const nest_winston_1 = require("nest-winston");
+const winston_1 = require("winston");
+const tenant_context_1 = require("@app/tenant-management/tenant-context");
+const infra_contracts_1 = require("@dofe/infra-contracts");
+let TenantContextGuard = class TenantContextGuard {
+    reflector;
+    tenantContextService;
+    logger;
+    constructor(reflector, tenantContextService, logger) {
+        this.reflector = reflector;
+        this.tenantContextService = tenantContextService;
+        this.logger = logger;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        // 检查是否是公共端点
+        const isPublic = this.reflector.getAllAndOverride(infra_contracts_1.PUBLIC_ENDPOINT_KEY, [context.getHandler(), context.getClass()]);
+        if (isPublic) {
+            return true;
+        }
+        // 检查是否需要租户范围
+        const requiresTenantScope = this.reflector.getAllAndOverride(infra_contracts_1.TENANT_SCOPE_KEY, [context.getHandler(), context.getClass()]);
+        // 如果是内部服务且跳过租户检查，直接使用 header 中的租户 ID
+        const skipTenantCheck = request.skipTenantCheck;
+        if (skipTenantCheck) {
+            const headerTenantId = request.headers[infra_contracts_1.CURRENT_TENANT_HEADER];
+            // 如果 header 中有租户 ID，使用它；否则使用默认租户
+            const tenantId = headerTenantId || infra_contracts_1.DEFAULT_TENANT_ID;
+            request.tenantId = tenantId;
+            this.logger.debug('Using tenant ID for internal service', {
+                tenantId,
+                service: request.internalServiceName,
+                fromHeader: !!headerTenantId,
+            });
+            // 不进行其他租户验证
+            return true;
+        }
+        const userId = request.userId;
+        if (!userId) {
+            this.logger.warn('No userId found in request, skipping tenant context');
+            return true;
+        }
+        // 从 header 获取租户 ID
+        const headerTenantId = request.headers[infra_contracts_1.CURRENT_TENANT_HEADER];
+        // 解析当前租户
+        const tenantId = await this.tenantContextService.resolveCurrentTenant(userId, headerTenantId);
+        // 设置租户上下文到 request
+        request.tenantId = tenantId;
+        // 如果需要租户范围但没有租户 ID，抛出明确的错误
+        if (requiresTenantScope && !tenantId) {
+            this.logger.warn('Tenant scope required but no tenant ID available', {
+                userId,
+            });
+            throw new common_1.ForbiddenException('无法确定当前租户，请先选择租户或确保有租户成员资格');
+        }
+        // 如果有租户 ID，获取租户成员信息
+        if (tenantId) {
+            const tenantMember = await this.tenantContextService.getTenantMember(userId, tenantId);
+            request.tenantMember = tenantMember;
+        }
+        this.logger.debug('Tenant context resolved', {
+            userId,
+            tenantId,
+            requiresTenantScope,
+        });
+        return true;
+    }
+};
+exports.TenantContextGuard = TenantContextGuard;
+exports.TenantContextGuard = TenantContextGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(nest_winston_1.WINSTON_MODULE_PROVIDER)),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        tenant_context_1.TenantContextService,
+        winston_1.Logger])
+], TenantContextGuard);
+//# sourceMappingURL=tenant-context.guard.js.map

package/dist/guards/tenant-context.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.guard.js","sourceRoot":"","sources":["../../src/guards/tenant-context.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,uCAAyC;AACzC,+CAAuD;AACvD,qCAAiC;AAEjC,0EAA6E;AAC7E,2DAK+B;AAGxB,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEV;IACA;IACiC;IAHpD,YACmB,SAAoB,EACpB,oBAA0C,EACT,MAAc;QAF/C,cAAS,GAAT,SAAS,CAAW;QACpB,yBAAoB,GAApB,oBAAoB,CAAsB;QACT,WAAM,GAAN,MAAM,CAAQ;IAC/D,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QAEpE,YAAY;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC/C,qCAAmB,EACnB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,aAAa;QACb,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC1D,kCAAgB,EAChB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,qCAAqC;QACrC,MAAM,eAAe,GAAI,OAAe,CAAC,eAAe,CAAC;QACzD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAqB,CAAW,CAAC;YACxE,iCAAiC;YACjC,MAAM,QAAQ,GAAG,cAAc,IAAI,mCAAiB,CAAC;YACpD,OAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACxD,QAAQ;gBACR,OAAO,EAAG,OAAe,CAAC,mBAAmB;gBAC7C,UAAU,EAAE,CAAC,CAAC,cAAc;aAC7B,CAAC,CAAC;YACH,YAAY;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAI,OAAe,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAqB,CAAW,CAAC;QAExE,SAAS;QACT,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CACnE,MAAM,EACN,cAAc,CACf,CAAC;QAEF,mBAAmB;QAClB,OAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAErC,2BAA2B;QAC3B,IAAI,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;gBACnE,MAAM;aACP,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAClE,MAAM,EACN,QAAQ,CACT,CAAC;YACD,OAAe,CAAC,YAAY,GAAG,YAAY,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC3C,MAAM;YACN,QAAQ;YACR,mBAAmB;SACpB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAvFY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,sCAAuB,CAAC,CAAA;qCAFJ,gBAAS;QACE,qCAAoB;QACD,gBAAM;GAJvD,kBAAkB,CAuF9B"}

package/dist/guards/version.guard.d.ts

@@ -0,0 +1,100 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { type ApiContract, type Platform } from '@dofe/infra-contracts';
+/**
+ * 跳过版本检查的装饰器 key
+ */
+export declare const SKIP_VERSION_CHECK = "skipVersionCheck";
+/**
+ * 跳过版本检查装饰器
+ * @example
+ * ```typescript
+ * @SkipVersionCheck()
+ * @Get('health')
+ * health() { return { status: 'ok' }; }
+ * ```
+ */
+export declare const SkipVersionCheck: () => import("@nestjs/common").CustomDecorator<string>;
+/**
+ * 版本上下文接口
+ * 注入到 request 中供 Service 使用
+ */
+export interface VersionContext {
+    /** 平台类型 */
+    platform: Platform;
+    /** API 合约版本 (APP 专用) */
+    contract?: ApiContract;
+    /** 支持的能力列表 */
+    features: readonly string[];
+    /** APP 构建号 */
+    appBuild?: string;
+}
+declare module 'fastify' {
+    interface FastifyRequest {
+        versionContext?: VersionContext;
+        traceId?: string;
+    }
+}
+/**
+ * Version Guard
+ * 统一版本校验 Guard，支持 Web 和 APP 双轨校验
+ *
+ * 校验策略:
+ * - Web 客户端: 使用 Generation (代际号) 校验，不兼容时返回 426 强制刷新
+ * - APP 客户端: 使用 Contract (合约版本) 校验，通过 Adapter 兼容旧版本
+ *
+ * @example
+ * ```typescript
+ * // 全局注册
+ * app.useGlobalGuards(new VersionGuard(new Reflector()));
+ *
+ * // 跳过特定路由
+ * @SkipVersionCheck()
+ * @Get('health')
+ * health() { return { status: 'ok' }; }
+ *
+ * // 在 Service 中使用版本上下文
+ * @Injectable()
+ * class MyService {
+ *   getUser(req: FastifyRequest) {
+ *     const ctx = req.versionContext;
+ *     if (ctx?.features.includes('user-v2')) {
+ *       return this.getUserV2();
+ *     }
+ *     return this.getUserV1();
+ *   }
+ * }
+ * ```
+ */
+export declare class VersionGuard implements CanActivate {
+    private readonly reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+    /**
+     * Web 客户端校验
+     * 使用 Generation (代际号) 进行校验
+     */
+    private validateWebClient;
+    /**
+     * APP 客户端校验
+     * 使用 Contract (合约版本) 进行校验
+     */
+    private validateAppClient;
+    /**
+     * 从构建版本中提取代际号
+     * @param buildVersion 构建版本字符串 (格式: YYYY.MM.DD-hash-gNN)
+     * @returns 代际号，无法解析时返回 0
+     */
+    private extractGeneration;
+    /**
+     * 从 APP Build 中提取构建号
+     * @param appBuild APP 构建版本字符串 (格式: 数字或版本号)
+     * @returns 构建号，无法解析时返回 0
+     */
+    private extractBuildNumber;
+    /**
+     * 获取最低兼容的构建版本
+     */
+    private getMinAppBuild;
+}
+//# sourceMappingURL=version.guard.d.ts.map

package/dist/guards/version.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.guard.d.ts","sourceRoot":"","sources":["../../src/guards/version.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,wDAA8C,CAAC;AAE5E;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,cAAc;IACd,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,cAAc;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,cAAc,CAAC,EAAE,cAAc,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBACa,YAAa,YAAW,WAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAEjD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAkC/C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAkDzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA2FzB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,cAAc;CAGvB"}

package/dist/guards/version.guard.js

@@ -0,0 +1,233 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VersionGuard = exports.SkipVersionCheck = exports.SKIP_VERSION_CHECK = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const infra_contracts_1 = require("@dofe/infra-contracts");
+/**
+ * 跳过版本检查的装饰器 key
+ */
+exports.SKIP_VERSION_CHECK = 'skipVersionCheck';
+/**
+ * 跳过版本检查装饰器
+ * @example
+ * ```typescript
+ * @SkipVersionCheck()
+ * @Get('health')
+ * health() { return { status: 'ok' }; }
+ * ```
+ */
+const SkipVersionCheck = () => (0, common_1.SetMetadata)(exports.SKIP_VERSION_CHECK, true);
+exports.SkipVersionCheck = SkipVersionCheck;
+/**
+ * Version Guard
+ * 统一版本校验 Guard，支持 Web 和 APP 双轨校验
+ *
+ * 校验策略:
+ * - Web 客户端: 使用 Generation (代际号) 校验，不兼容时返回 426 强制刷新
+ * - APP 客户端: 使用 Contract (合约版本) 校验，通过 Adapter 兼容旧版本
+ *
+ * @example
+ * ```typescript
+ * // 全局注册
+ * app.useGlobalGuards(new VersionGuard(new Reflector()));
+ *
+ * // 跳过特定路由
+ * @SkipVersionCheck()
+ * @Get('health')
+ * health() { return { status: 'ok' }; }
+ *
+ * // 在 Service 中使用版本上下文
+ * @Injectable()
+ * class MyService {
+ *   getUser(req: FastifyRequest) {
+ *     const ctx = req.versionContext;
+ *     if (ctx?.features.includes('user-v2')) {
+ *       return this.getUserV2();
+ *     }
+ *     return this.getUserV1();
+ *   }
+ * }
+ * ```
+ */
+let VersionGuard = class VersionGuard {
+    reflector;
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        // 检查是否跳过版本检查
+        const skipVersionCheck = this.reflector.getAllAndOverride(exports.SKIP_VERSION_CHECK, [context.getHandler(), context.getClass()]);
+        if (skipVersionCheck) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const response = context.switchToHttp().getResponse();
+        const platform = request.headers[infra_contracts_1.PLATFORM_HEADER] || infra_contracts_1.PLATFORMS.WEB;
+        const appBuild = request.headers[infra_contracts_1.APP_BUILD_HEADER];
+        const contract = request.headers[infra_contracts_1.API_CONTRACT_HEADER];
+        // Web 客户端: Generation 校验
+        if (platform === infra_contracts_1.PLATFORMS.WEB || !platform) {
+            return this.validateWebClient(request, appBuild, response);
+        }
+        // APP 客户端: Contract 校验
+        return this.validateAppClient(request, platform, appBuild, contract, response);
+    }
+    /**
+     * Web 客户端校验
+     * 使用 Generation (代际号) 进行校验
+     */
+    validateWebClient(request, appBuild, response) {
+        // 开发环境或未提供版本时跳过检查
+        if (!appBuild || appBuild === 'dev' || appBuild === 'server') {
+            // 设置默认版本上下文
+            request.versionContext = {
+                platform: infra_contracts_1.PLATFORMS.WEB,
+                features: infra_contracts_1.CONTRACTS[infra_contracts_1.CURRENT_CONTRACT].features,
+                appBuild,
+            };
+            return true;
+        }
+        // 提取代际号
+        const clientGeneration = this.extractGeneration(appBuild);
+        // 检查兼容性
+        if (clientGeneration < infra_contracts_1.MIN_CLIENT_GENERATION) {
+            // 设置最低版本 header
+            const minAppBuild = this.getMinAppBuild();
+            response.header(infra_contracts_1.MIN_APP_BUILD_HEADER, minAppBuild);
+            throw new common_1.HttpException({
+                code: 426,
+                msg: '客户端版本过旧，请刷新页面',
+                data: {
+                    clientBuild: appBuild,
+                    clientGeneration,
+                    minGeneration: infra_contracts_1.MIN_CLIENT_GENERATION,
+                    minBuild: minAppBuild,
+                },
+            }, 426);
+        }
+        // 设置版本上下文
+        request.versionContext = {
+            platform: infra_contracts_1.PLATFORMS.WEB,
+            features: infra_contracts_1.CONTRACTS[infra_contracts_1.CURRENT_CONTRACT].features,
+            appBuild,
+        };
+        return true;
+    }
+    /**
+     * APP 客户端校验
+     * 使用 Contract (合约版本) 进行校验
+     */
+    validateAppClient(request, platform, appBuild, contract, response) {
+        // 检查 Contract 是否提供
+        if (!contract) {
+            // 如果没有提供 contract，使用默认最新版本
+            request.versionContext = {
+                platform,
+                contract: infra_contracts_1.CURRENT_CONTRACT,
+                features: infra_contracts_1.CONTRACTS[infra_contracts_1.CURRENT_CONTRACT].features,
+                appBuild,
+            };
+            return true;
+        }
+        // 检查 Contract 是否支持
+        if (!infra_contracts_1.CONTRACTS[contract]) {
+            throw new common_1.HttpException({
+                code: 400,
+                msg: '不支持的 API 版本，请升级 APP',
+                data: {
+                    providedContract: contract,
+                    supportedContracts: Object.keys(infra_contracts_1.CONTRACTS),
+                    minContract: infra_contracts_1.MIN_SUPPORTED_CONTRACT,
+                },
+            }, 400);
+        }
+        const contractConfig = infra_contracts_1.CONTRACTS[contract];
+        // 检查 Contract 是否已过期 (sunset)
+        if (contractConfig.sunset && new Date() > new Date(contractConfig.sunset)) {
+            throw new common_1.HttpException({
+                code: 426,
+                msg: '当前版本已停止支持，请升级 APP',
+                data: {
+                    expiredContract: contract,
+                    minContract: infra_contracts_1.MIN_SUPPORTED_CONTRACT,
+                    sunsetDate: contractConfig.sunset,
+                },
+            }, 426);
+        }
+        // 检查 APP Build 是否满足最低要求
+        if (appBuild && platform !== infra_contracts_1.PLATFORMS.WEB) {
+            const minBuild = contractConfig.minBuild[platform];
+            const buildNumber = this.extractBuildNumber(appBuild);
+            if (minBuild && buildNumber > 0 && buildNumber < minBuild) {
+                throw new common_1.HttpException({
+                    code: 426,
+                    msg: '请升级 APP 以继续使用',
+                    data: {
+                        currentBuild: buildNumber,
+                        minBuild,
+                        platform,
+                    },
+                }, 426);
+            }
+        }
+        // 设置版本上下文
+        request.versionContext = {
+            platform,
+            contract,
+            features: contractConfig.features,
+            appBuild,
+        };
+        // 如果 Contract 已废弃，添加警告 header
+        if (contractConfig.deprecated) {
+            response.header('X-Api-Deprecated', 'true');
+            response.header('X-Api-Upgrade-To', infra_contracts_1.CURRENT_CONTRACT);
+        }
+        return true;
+    }
+    /**
+     * 从构建版本中提取代际号
+     * @param buildVersion 构建版本字符串 (格式: YYYY.MM.DD-hash-gNN)
+     * @returns 代际号，无法解析时返回 0
+     */
+    extractGeneration(buildVersion) {
+        const match = buildVersion.match(/-g(\d+)$/);
+        return match ? parseInt(match[1], 10) : 0;
+    }
+    /**
+     * 从 APP Build 中提取构建号
+     * @param appBuild APP 构建版本字符串 (格式: 数字或版本号)
+     * @returns 构建号，无法解析时返回 0
+     */
+    extractBuildNumber(appBuild) {
+        // 如果是纯数字，直接返回
+        const numericBuild = parseInt(appBuild, 10);
+        if (!isNaN(numericBuild)) {
+            return numericBuild;
+        }
+        // 否则尝试从版本号中提取
+        const match = appBuild.match(/(\d+)/);
+        return match ? parseInt(match[1], 10) : 0;
+    }
+    /**
+     * 获取最低兼容的构建版本
+     */
+    getMinAppBuild() {
+        return `0000.00.00-000000-g${infra_contracts_1.MIN_CLIENT_GENERATION}`;
+    }
+};
+exports.VersionGuard = VersionGuard;
+exports.VersionGuard = VersionGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], VersionGuard);
+//# sourceMappingURL=version.guard.js.map

package/dist/guards/version.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.guard.js","sourceRoot":"","sources":["../../src/guards/version.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAMwB;AACxB,uCAAyC;AAEzC,2DAY+B;AAE/B;;GAEG;AACU,QAAA,kBAAkB,GAAG,kBAAkB,CAAC;AAErD;;;;;;;;GAQG;AACI,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,0BAAkB,EAAE,IAAI,CAAC,CAAC;AAA/D,QAAA,gBAAgB,oBAA+C;AAyB5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACM;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,WAAW,CAAC,OAAyB;QACnC,aAAa;QACb,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACvD,0BAAkB,EAClB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,WAAW,EAAgB,CAAC;QAEpE,MAAM,QAAQ,GACX,OAAO,CAAC,OAAO,CAAC,iCAAe,CAAY,IAAI,2BAAS,CAAC,GAAG,CAAC;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAgB,CAAW,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,qCAAmB,CAAgB,CAAC;QAErE,yBAAyB;QACzB,IAAI,QAAQ,KAAK,2BAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAED,uBAAuB;QACvB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,OAAO,EACP,QAAoB,EACpB,QAAQ,EACR,QAAQ,EACR,QAAQ,CACT,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,iBAAiB,CACvB,OAAuB,EACvB,QAAgB,EAChB,QAAsB;QAEtB,kBAAkB;QAClB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7D,YAAY;YACZ,OAAO,CAAC,cAAc,GAAG;gBACvB,QAAQ,EAAE,2BAAS,CAAC,GAAG;gBACvB,QAAQ,EAAE,2BAAS,CAAC,kCAAgB,CAAC,CAAC,QAAQ;gBAC9C,QAAQ;aACT,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ;QACR,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE1D,QAAQ;QACR,IAAI,gBAAgB,GAAG,uCAAqB,EAAE,CAAC;YAC7C,gBAAgB;YAChB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,QAAQ,CAAC,MAAM,CAAC,sCAAoB,EAAE,WAAW,CAAC,CAAC;YAEnD,MAAM,IAAI,sBAAa,CACrB;gBACE,IAAI,EAAE,GAAG;gBACT,GAAG,EAAE,eAAe;gBACpB,IAAI,EAAE;oBACJ,WAAW,EAAE,QAAQ;oBACrB,gBAAgB;oBAChB,aAAa,EAAE,uCAAqB;oBACpC,QAAQ,EAAE,WAAW;iBACtB;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,UAAU;QACV,OAAO,CAAC,cAAc,GAAG;YACvB,QAAQ,EAAE,2BAAS,CAAC,GAAG;YACvB,QAAQ,EAAE,2BAAS,CAAC,kCAAgB,CAAC,CAAC,QAAQ;YAC9C,QAAQ;SACT,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,iBAAiB,CACvB,OAAuB,EACvB,QAAkB,EAClB,QAAgB,EAChB,QAAqB,EACrB,QAAsB;QAEtB,mBAAmB;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,2BAA2B;YAC3B,OAAO,CAAC,cAAc,GAAG;gBACvB,QAAQ;gBACR,QAAQ,EAAE,kCAAgB;gBAC1B,QAAQ,EAAE,2BAAS,CAAC,kCAAgB,CAAC,CAAC,QAAQ;gBAC9C,QAAQ;aACT,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,2BAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAa,CACrB;gBACE,IAAI,EAAE,GAAG;gBACT,GAAG,EAAE,qBAAqB;gBAC1B,IAAI,EAAE;oBACJ,gBAAgB,EAAE,QAAQ;oBAC1B,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,2BAAS,CAAC;oBAC1C,WAAW,EAAE,wCAAsB;iBACpC;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,2BAAS,CAAC,QAAQ,CAAC,CAAC;QAE3C,6BAA6B;QAC7B,IAAI,cAAc,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,sBAAa,CACrB;gBACE,IAAI,EAAE,GAAG;gBACT,GAAG,EAAE,mBAAmB;gBACxB,IAAI,EAAE;oBACJ,eAAe,EAAE,QAAQ;oBACzB,WAAW,EAAE,wCAAsB;oBACnC,UAAU,EAAE,cAAc,CAAC,MAAM;iBAClC;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,IAAI,QAAQ,IAAI,QAAQ,KAAK,2BAAS,CAAC,GAAG,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAA6B,CAAC,CAAC;YACxE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAEtD,IAAI,QAAQ,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,sBAAa,CACrB;oBACE,IAAI,EAAE,GAAG;oBACT,GAAG,EAAE,eAAe;oBACpB,IAAI,EAAE;wBACJ,YAAY,EAAE,WAAW;wBACzB,QAAQ;wBACR,QAAQ;qBACT;iBACF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,UAAU;QACV,OAAO,CAAC,cAAc,GAAG;YACvB,QAAQ;YACR,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,QAAQ;SACT,CAAC;QAEF,8BAA8B;QAC9B,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC5C,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,kCAAgB,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,YAAoB;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAC,QAAgB;QACzC,cAAc;QACd,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,cAAc;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,OAAO,sBAAsB,uCAAqB,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AA1NY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAE6B,gBAAS;GADtC,YAAY,CA0NxB"}