@fudanda/client 2.20261024.1-beta.1 → 2.20261024.1-beta.2

package/dist/shared/settings/modules/ai.d.ts

@@ -0,0 +1,15 @@
+import * as z from 'zod';
+export declare const aiSettingsSchema: z.ZodObject<{
+    dailyTokenQuota: z.ZodDefault<z.ZodInt>;
+    contentFilterEnabled: z.ZodDefault<z.ZodBoolean>;
+    embeddingModel: z.ZodDefault<z.ZodString>;
+    imageModel: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export type AiSettings = z.output<typeof aiSettingsSchema>;
+export declare const aiSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    dailyTokenQuota: z.ZodDefault<z.ZodInt>;
+    contentFilterEnabled: z.ZodDefault<z.ZodBoolean>;
+    embeddingModel: z.ZodDefault<z.ZodString>;
+    imageModel: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>>;
+//# sourceMappingURL=ai.d.ts.map

package/dist/shared/settings/modules/ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/ai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,eAAO,MAAM,gBAAgB;;;;;iBASC,CAAC;AAE/B,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,gBAAgB;;;;;kBAS3B,CAAC"}

package/dist/shared/settings/modules/ai.js

@@ -0,0 +1,23 @@
+import * as z from 'zod';
+import { defineSettingsModule } from '../module-def.js';
+export const aiSettingsSchema = z.object({
+    dailyTokenQuota: z.int().min(0).max(1_000_000_000).default(0)
+        .meta({ title: '每用户每日 Token 配额', description: '输入 + 输出合计；0 表示不限制，超限后当日无法继续对话' }),
+    contentFilterEnabled: z.boolean().default(false)
+        .meta({ title: '输入侧敏感词过滤', description: '词库维护在字典「AI 敏感词」中，命中直接拒绝发送' }),
+    embeddingModel: z.string().trim().max(128).default('')
+        .meta({ title: '知识库向量模型', description: '使用系统默认 AI 服务商的 /embeddings 接口；留空则知识库退化为关键词检索' }),
+    imageModel: z.string().trim().max(128).default('')
+        .meta({ title: '图片生成模型', description: '使用系统默认 AI 服务商的 /images/generations 接口；留空则关闭图片生成' }),
+}).meta({ id: 'Settings.Ai' });
+export const aiSettingsModule = defineSettingsModule({
+    schema: aiSettingsSchema,
+    title: 'AI 助手',
+    description: 'Token 配额、敏感词过滤与默认模型',
+    scope: 'platform',
+    feature: 'ai',
+    readPermission: 'system:setting:view',
+    writePermission: 'system:setting:update',
+    sort: 70,
+});
+//# sourceMappingURL=ai.js.map

package/dist/shared/settings/modules/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../../src/settings/modules/ai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;SAC1D,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAClF,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAC7C,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACnD,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC1F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/C,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;CAC7F,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAI/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;IACnD,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,qBAAqB;IAClC,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,IAAI;IACb,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,uBAAuB;IACxC,IAAI,EAAE,EAAE;CACT,CAAC,CAAC"}

package/dist/shared/settings/modules/analytics.d.ts

@@ -0,0 +1,51 @@
+import * as z from 'zod';
+export declare const analyticsSettingsSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    sampleRate: z.ZodDefault<z.ZodNumber>;
+    trackPageviews: z.ZodDefault<z.ZodBoolean>;
+    trackClicks: z.ZodDefault<z.ZodBoolean>;
+    trackPerformance: z.ZodDefault<z.ZodBoolean>;
+    trackErrors: z.ZodDefault<z.ZodBoolean>;
+    trackApi: z.ZodDefault<z.ZodBoolean>;
+    maskInputs: z.ZodDefault<z.ZodBoolean>;
+    respectDnt: z.ZodDefault<z.ZodBoolean>;
+    anonymizeIp: z.ZodDefault<z.ZodBoolean>;
+    blacklistPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    errorIgnorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    retentionDays: z.ZodDefault<z.ZodInt>;
+    errorRetentionDays: z.ZodDefault<z.ZodInt>;
+    sessionTimeoutMinutes: z.ZodDefault<z.ZodInt>;
+    trackReplay: z.ZodDefault<z.ZodBoolean>;
+    replaySessionSampleRate: z.ZodDefault<z.ZodNumber>;
+    replayOnError: z.ZodDefault<z.ZodBoolean>;
+    replayMaskAllText: z.ZodDefault<z.ZodBoolean>;
+    replayBlockSelector: z.ZodDefault<z.ZodString>;
+    replayRetentionDays: z.ZodDefault<z.ZodInt>;
+    replayStorageQuotaMb: z.ZodDefault<z.ZodInt>;
+}, z.core.$strip>;
+export type AnalyticsSettings = z.output<typeof analyticsSettingsSchema>;
+export declare const analyticsSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    sampleRate: z.ZodDefault<z.ZodNumber>;
+    trackPageviews: z.ZodDefault<z.ZodBoolean>;
+    trackClicks: z.ZodDefault<z.ZodBoolean>;
+    trackPerformance: z.ZodDefault<z.ZodBoolean>;
+    trackErrors: z.ZodDefault<z.ZodBoolean>;
+    trackApi: z.ZodDefault<z.ZodBoolean>;
+    maskInputs: z.ZodDefault<z.ZodBoolean>;
+    respectDnt: z.ZodDefault<z.ZodBoolean>;
+    anonymizeIp: z.ZodDefault<z.ZodBoolean>;
+    blacklistPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    errorIgnorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    retentionDays: z.ZodDefault<z.ZodInt>;
+    errorRetentionDays: z.ZodDefault<z.ZodInt>;
+    sessionTimeoutMinutes: z.ZodDefault<z.ZodInt>;
+    trackReplay: z.ZodDefault<z.ZodBoolean>;
+    replaySessionSampleRate: z.ZodDefault<z.ZodNumber>;
+    replayOnError: z.ZodDefault<z.ZodBoolean>;
+    replayMaskAllText: z.ZodDefault<z.ZodBoolean>;
+    replayBlockSelector: z.ZodDefault<z.ZodString>;
+    replayRetentionDays: z.ZodDefault<z.ZodInt>;
+    replayStorageQuotaMb: z.ZodDefault<z.ZodInt>;
+}, z.core.$strip>>;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/shared/settings/modules/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;iBAuBC,CAAC;AAEtC,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;kBASlC,CAAC"}

package/dist/shared/settings/modules/analytics.js

@@ -0,0 +1,37 @@
+import * as z from 'zod';
+import { defineSettingsModule } from '../module-def.js';
+export const analyticsSettingsSchema = z.object({
+    enabled: z.boolean().default(true).meta({ title: '启用采集', description: '关闭后不再采集新的行为、性能和错误数据' }),
+    sampleRate: z.number().min(0).max(1).default(1).meta({ title: '采样率', description: '行为事件采集比例，0%–100%' }),
+    trackPageviews: z.boolean().default(true).meta({ title: '页面浏览' }),
+    trackClicks: z.boolean().default(true).meta({ title: '点击行为' }),
+    trackPerformance: z.boolean().default(true).meta({ title: '性能指标' }),
+    trackErrors: z.boolean().default(true).meta({ title: '错误采集' }),
+    trackApi: z.boolean().default(true).meta({ title: 'API 请求' }),
+    maskInputs: z.boolean().default(true).meta({ title: '脱敏输入内容' }),
+    respectDnt: z.boolean().default(false).meta({ title: '尊重 DNT' }),
+    anonymizeIp: z.boolean().default(false).meta({ title: 'IP 匿名化', description: '开启后仅存储网段，地理解析不受影响' }),
+    blacklistPaths: z.array(z.string().max(256)).default(() => []).meta({ title: '黑名单路径' }),
+    errorIgnorePatterns: z.array(z.string().min(1).max(500)).max(50).default(() => []).meta({ title: '错误忽略规则（正则）', description: '命中错误消息的前端错误不会上报' }),
+    retentionDays: z.int().min(1).max(3650).default(180).meta({ title: '事件保留天数' }),
+    errorRetentionDays: z.int().min(1).max(3650).default(90).meta({ title: '错误保留天数' }),
+    sessionTimeoutMinutes: z.int().min(1).max(1440).default(30).meta({ title: '会话超时分钟' }),
+    trackReplay: z.boolean().default(false).meta({ title: '会话回放' }),
+    replaySessionSampleRate: z.number().min(0).max(1).default(0).meta({ title: '全程录制采样率' }),
+    replayOnError: z.boolean().default(true).meta({ title: '错误触发回放' }),
+    replayMaskAllText: z.boolean().default(false).meta({ title: '回放打码所有文本' }),
+    replayBlockSelector: z.string().max(256).default('').meta({ title: '回放屏蔽选择器' }),
+    replayRetentionDays: z.int().min(1).max(3650).default(30).meta({ title: '回放保留天数' }),
+    replayStorageQuotaMb: z.int().min(0).max(1_048_576).default(4096).meta({ title: '回放存储配额（MB）', description: '0 表示不限制' }),
+}).meta({ id: 'Settings.Analytics' });
+export const analyticsSettingsModule = defineSettingsModule({
+    schema: analyticsSettingsSchema,
+    title: '数据采集',
+    description: '行为事件、错误监控和会话回放采集策略；配置页面位于数据管理',
+    scope: 'tenant',
+    readPermission: 'analytics:view',
+    writePermission: 'analytics:manage',
+    page: '/analytics/data?tab=settings',
+    sort: 125,
+});
+//# sourceMappingURL=analytics.js.map

package/dist/shared/settings/modules/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../../src/settings/modules/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAC9F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACvG,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACjE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9D,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAChE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnG,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvF,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAChJ,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9E,kBAAkB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClF,qBAAqB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvF,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACzE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/E,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnF,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;CACxH,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAItC,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;IAC1D,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,+BAA+B;IAC5C,KAAK,EAAE,QAAQ;IACf,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,kBAAkB;IACnC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,GAAG;CACV,CAAC,CAAC"}

package/dist/shared/settings/modules/auth.d.ts

@@ -0,0 +1,23 @@
+import * as z from 'zod';
+export declare const authSettingsSchema: z.ZodObject<{
+    captchaEnabled: z.ZodDefault<z.ZodBoolean>;
+    captchaComplexity: z.ZodDefault<z.ZodEnum<{
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>>;
+    allowRegistration: z.ZodDefault<z.ZodBoolean>;
+    forgotPasswordEnabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type AuthSettings = z.output<typeof authSettingsSchema>;
+export declare const authSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    captchaEnabled: z.ZodDefault<z.ZodBoolean>;
+    captchaComplexity: z.ZodDefault<z.ZodEnum<{
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>>;
+    allowRegistration: z.ZodDefault<z.ZodBoolean>;
+    forgotPasswordEnabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/shared/settings/modules/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAKzB,eAAO,MAAM,kBAAkB;;;;;;;;;iBASC,CAAC;AAEjC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,kBAAkB;;;;;;;;;kBAU7B,CAAC"}

package/dist/shared/settings/modules/auth.js

@@ -0,0 +1,24 @@
+import * as z from 'zod';
+import { CAPTCHA_COMPLEXITIES } from '../constants.js';
+import { defineSettingsModule } from '../module-def.js';
+export const authSettingsSchema = z.object({
+    captchaEnabled: z.boolean().default(false)
+        .meta({ title: '登录验证码', description: '开启后登录必须输入图形验证码' }),
+    captchaComplexity: z.enum(CAPTCHA_COMPLEXITIES).default('medium')
+        .meta({ title: '验证码复杂度', description: '仅在开启登录验证码后生效' }),
+    allowRegistration: z.boolean().default(false)
+        .meta({ title: '开放注册', description: '是否允许新用户自助注册' }),
+    forgotPasswordEnabled: z.boolean().default(false)
+        .meta({ title: '忘记密码', description: '是否开启邮件重置密码功能' }),
+}).meta({ id: 'Settings.Auth' });
+export const authSettingsModule = defineSettingsModule({
+    schema: authSettingsSchema,
+    title: '登录与注册',
+    description: '登录验证码、自助注册与找回密码入口',
+    scope: 'platform',
+    readPermission: 'system:setting:view',
+    writePermission: 'system:setting:update',
+    visibility: { captchaEnabled: 'public', captchaComplexity: 'public', allowRegistration: 'public', forgotPasswordEnabled: 'public' },
+    sort: 10,
+});
+//# sourceMappingURL=auth.js.map

package/dist/shared/settings/modules/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/settings/modules/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SACvC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC9D,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACzD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAC1C,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACtD,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAC9C,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;CACxD,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AAIjC,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;IACrD,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,mBAAmB;IAEhC,KAAK,EAAE,UAAU;IACjB,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,uBAAuB;IACxC,UAAU,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE;IACnI,IAAI,EAAE,EAAE;CACT,CAAC,CAAC"}

package/dist/shared/settings/modules/drive.d.ts

@@ -0,0 +1,45 @@
+import * as z from 'zod';
+export declare const driveSettingsSchema: z.ZodObject<{
+    personalQuotaGb: z.ZodDefault<z.ZodNumber>;
+    departmentQuotaGb: z.ZodDefault<z.ZodNumber>;
+    teamQuotaGb: z.ZodDefault<z.ZodNumber>;
+    departmentSpaceAutoCreate: z.ZodDefault<z.ZodBoolean>;
+    recycleRetentionDays: z.ZodDefault<z.ZodInt>;
+    maxVersions: z.ZodDefault<z.ZodInt>;
+    quotaWarningPercent: z.ZodDefault<z.ZodInt>;
+    externalShareEnabled: z.ZodDefault<z.ZodBoolean>;
+    externalShareMaxDays: z.ZodDefault<z.ZodInt>;
+    externalShareRequirePassword: z.ZodDefault<z.ZodBoolean>;
+    collectMaxFileSizeMb: z.ZodDefault<z.ZodInt>;
+    shareExpiryReminderHours: z.ZodDefault<z.ZodInt>;
+    previewWatermarkEnabled: z.ZodDefault<z.ZodBoolean>;
+    alertWindowMinutes: z.ZodDefault<z.ZodInt>;
+    alertBulkDownloadCount: z.ZodDefault<z.ZodInt>;
+    alertShareFailureCount: z.ZodDefault<z.ZodInt>;
+    blockedExtensions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    thumbnailEnabled: z.ZodDefault<z.ZodBoolean>;
+    textIndexEnabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type DriveSettings = z.output<typeof driveSettingsSchema>;
+export declare const driveSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    personalQuotaGb: z.ZodDefault<z.ZodNumber>;
+    departmentQuotaGb: z.ZodDefault<z.ZodNumber>;
+    teamQuotaGb: z.ZodDefault<z.ZodNumber>;
+    departmentSpaceAutoCreate: z.ZodDefault<z.ZodBoolean>;
+    recycleRetentionDays: z.ZodDefault<z.ZodInt>;
+    maxVersions: z.ZodDefault<z.ZodInt>;
+    quotaWarningPercent: z.ZodDefault<z.ZodInt>;
+    externalShareEnabled: z.ZodDefault<z.ZodBoolean>;
+    externalShareMaxDays: z.ZodDefault<z.ZodInt>;
+    externalShareRequirePassword: z.ZodDefault<z.ZodBoolean>;
+    collectMaxFileSizeMb: z.ZodDefault<z.ZodInt>;
+    shareExpiryReminderHours: z.ZodDefault<z.ZodInt>;
+    previewWatermarkEnabled: z.ZodDefault<z.ZodBoolean>;
+    alertWindowMinutes: z.ZodDefault<z.ZodInt>;
+    alertBulkDownloadCount: z.ZodDefault<z.ZodInt>;
+    alertShareFailureCount: z.ZodDefault<z.ZodInt>;
+    blockedExtensions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    thumbnailEnabled: z.ZodDefault<z.ZodBoolean>;
+    textIndexEnabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>>;
+//# sourceMappingURL=drive.d.ts.map

package/dist/shared/settings/modules/drive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/drive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAwCC,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;kBAW9B,CAAC"}

package/dist/shared/settings/modules/drive.js

@@ -0,0 +1,56 @@
+import * as z from 'zod';
+import { defineSettingsModule } from '../module-def.js';
+export const driveSettingsSchema = z.object({
+    personalQuotaGb: z.number().min(0).max(1_000_000).default(10)
+        .meta({ title: '个人空间默认配额（GB）', description: '0 表示不限；空间显式配额优先' }),
+    departmentQuotaGb: z.number().min(0).max(1_000_000).default(100)
+        .meta({ title: '部门空间默认配额（GB）', description: '0 表示不限' }),
+    teamQuotaGb: z.number().min(0).max(1_000_000).default(50)
+        .meta({ title: '协作空间默认配额（GB）', description: '0 表示不限' }),
+    departmentSpaceAutoCreate: z.boolean().default(true)
+        .meta({ title: '自动创建部门空间', description: '成员首次进入网盘时创建其直属部门的部门空间（部门及子部门成员默认可编辑，负责人为管理者）' }),
+    recycleRetentionDays: z.int().min(0).max(3650).default(30)
+        .meta({ title: '回收站保留天数', description: '前端提示用；实际清理由「数据保留 → 网盘回收站到期清理」策略执行' }),
+    maxVersions: z.int().min(1).max(200).default(20)
+        .meta({ title: '文件版本上限', description: '超出自动修剪最旧版本；空间可单独设置' }),
+    quotaWarningPercent: z.int().min(50).max(100).default(90)
+        .meta({ title: '配额预警阈值（%）', description: '已用比例达到该值时通知空间管理者（每日一次）' }),
+    externalShareEnabled: z.boolean().default(true)
+        .meta({ title: '允许外链分享', description: '关闭后任何人不能创建网盘外链（已有外链仍可撤销）' }),
+    externalShareMaxDays: z.int().min(0).max(3650).default(30)
+        .meta({ title: '外链最长有效期（天）', description: '外链必须设置且不超过该天数；0 表示允许永久外链' }),
+    externalShareRequirePassword: z.boolean().default(false)
+        .meta({ title: '外链强制密码' }),
+    collectMaxFileSizeMb: z.int().min(1).max(10_240).default(100)
+        .meta({ title: '文件收集单文件上限（MB）', description: '匿名提交为单请求上传；收集链接可在此上限内单独收紧' }),
+    shareExpiryReminderHours: z.int().min(0).max(720).default(24)
+        .meta({ title: '到期提前提醒（小时）', description: '外链与临时授权到期前提醒创建者 / 被授权人；0 表示关闭' }),
+    previewWatermarkEnabled: z.boolean().default(false)
+        .meta({ title: '站内预览水印', description: '登录用户在线预览时叠加「姓名 · 工号 · 时间」水印' }),
+    alertWindowMinutes: z.int().min(5).max(1440).default(10)
+        .meta({ title: '异常行为统计窗口（分钟）', description: '批量下载与外链爆破按该滑动窗口计数（告警规则取平台值，租户覆盖不生效）' }),
+    alertBulkDownloadCount: z.int().min(0).max(100_000).default(200)
+        .meta({ title: '批量下载告警阈值（次）', description: '同一用户或 IP 在窗口内下载次数达到该值即告警网盘管理员；0 表示关闭（平台值）' }),
+    alertShareFailureCount: z.int().min(0).max(100_000).default(30)
+        .meta({ title: '外链爆破告警阈值（次）', description: '同一 IP 或同一外链在窗口内被拒绝（密码错误 / IP 拦截等）次数达到该值即告警；0 表示关闭（平台值）' }),
+    blockedExtensions: z.array(z.string().trim().min(1).max(32).regex(/^\.?[A-Za-z0-9]+$/, '扩展名只能包含字母与数字')).max(200)
+        .default(() => ['exe', 'bat', 'cmd', 'sh', 'msi', 'dll', 'scr', 'com', 'ps1', 'vbs'])
+        .meta({ title: '禁止上传的扩展名', description: '不区分大小写，可带或不带前导点；可执行文件另按内容魔数拦截，不受改名影响' }),
+    thumbnailEnabled: z.boolean().default(true)
+        .meta({ title: '生成图片缩略图', description: '图片上传后异步生成 webp 缩略图供网格视图展示' }),
+    textIndexEnabled: z.boolean().default(true)
+        .meta({ title: '文本文件全文索引', description: '文本类文件（≤ 2MB）上传后抽取正文建立索引，搜索可勾选「搜正文」' }),
+}).meta({ id: 'Settings.Drive' });
+export const driveSettingsModule = defineSettingsModule({
+    schema: driveSettingsSchema,
+    title: '企业网盘',
+    description: '空间配额、版本保留、外链与内容策略；租户可在平台值之上覆盖',
+    scope: 'tenant',
+    feature: 'drive',
+    readPermission: 'drive:setting:view',
+    writePermission: 'drive:setting:edit',
+    visibility: { previewWatermarkEnabled: 'authenticated' },
+    page: '/drive/admin/settings',
+    sort: 120,
+});
+//# sourceMappingURL=drive.js.map

package/dist/shared/settings/modules/drive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive.js","sourceRoot":"","sources":["../../../src/settings/modules/drive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAClE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SAC7D,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACtD,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACzD,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACjD,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC3F,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACvD,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7C,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAC/D,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACtD,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACtE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5C,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACrE,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACvD,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACzE,4BAA4B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SACrD,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5B,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SAC1D,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IAC7E,wBAAwB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;IAC9E,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAChD,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IACxE,kBAAkB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACrD,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACtF,sBAAsB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SAC7D,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IAC3F,sBAAsB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC5D,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;IACxG,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;SAC7G,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;SACpF,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;IACnF,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACxC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACxC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;CAClF,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAIlC,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;IACtD,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,+BAA+B;IAC5C,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,oBAAoB;IACrC,UAAU,EAAE,EAAE,uBAAuB,EAAE,eAAe,EAAE;IACxD,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,GAAG;CACV,CAAC,CAAC"}

package/dist/shared/settings/modules/error-tracking.d.ts

@@ -0,0 +1,27 @@
+import * as z from 'zod';
+export declare const errorTrackingSettingsSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    captureLoggedErrors: z.ZodDefault<z.ZodBoolean>;
+    perIssuePerMinute: z.ZodDefault<z.ZodInt>;
+    globalPerMinute: z.ZodDefault<z.ZodInt>;
+    request: z.ZodPrefault<z.ZodObject<{
+        captureBody: z.ZodDefault<z.ZodBoolean>;
+        bodyMaxBytes: z.ZodDefault<z.ZodInt>;
+        redactKeys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    ignorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ErrorTrackingSettings = z.output<typeof errorTrackingSettingsSchema>;
+export declare const errorTrackingSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    captureLoggedErrors: z.ZodDefault<z.ZodBoolean>;
+    perIssuePerMinute: z.ZodDefault<z.ZodInt>;
+    globalPerMinute: z.ZodDefault<z.ZodInt>;
+    request: z.ZodPrefault<z.ZodObject<{
+        captureBody: z.ZodDefault<z.ZodBoolean>;
+        bodyMaxBytes: z.ZodDefault<z.ZodInt>;
+        redactKeys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    ignorePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>>;
+//# sourceMappingURL=error-tracking.d.ts.map

package/dist/shared/settings/modules/error-tracking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAmBC,CAAC;AAE1C,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEjF,eAAO,MAAM,2BAA2B;;;;;;;;;;;kBAQtC,CAAC"}

package/dist/shared/settings/modules/error-tracking.js

@@ -0,0 +1,32 @@
+import * as z from 'zod';
+import { defineSettingsModule } from '../module-def.js';
+export const errorTrackingSettingsSchema = z.object({
+    enabled: z.boolean().default(true)
+        .meta({ title: '采集服务端异常', description: '关闭后异常只写进程日志，不再进入异常日志 / 告警' }),
+    captureLoggedErrors: z.boolean().default(true)
+        .meta({ title: '采集 error / fatal 日志写入点', description: '携带 Error 对象的 logger.error / logger.fatal 调用也记为异常事件（覆盖「已捕获但只打日志」的失败）' }),
+    perIssuePerMinute: z.int().min(1).max(10_000).default(60)
+        .meta({ title: '单个 Issue 每分钟保存事件上限', description: '同一指纹超出部分只累加发生次数，不再保存事件详情' }),
+    globalPerMinute: z.int().min(1).max(100_000).default(600)
+        .meta({ title: '全部 Issue 每分钟保存事件上限', description: '错误风暴时的总闸；超出部分只累加发生次数' }),
+    request: z.object({
+        captureBody: z.boolean().default(true)
+            .meta({ title: '记录请求体', description: '非 GET 请求的 JSON / 表单体，写入前按脱敏字段名打码并截断' }),
+        bodyMaxBytes: z.int().min(0).max(65_536).default(4096)
+            .meta({ title: '请求体截断长度（字节）' }),
+        redactKeys: z.array(z.string().trim().min(1).max(64)).max(100).default(() => [])
+            .meta({ title: '额外脱敏字段名', description: '在内置的 password / secret / authorization / cookie 等之外追加；按字段名包含匹配，不区分大小写' }),
+    }).prefault({}).meta({ title: '请求快照' }),
+    ignorePatterns: z.array(z.string().trim().min(1).max(200)).max(100).default(() => [])
+        .meta({ title: '忽略规则（正则）', description: '异常消息命中任一正则即不记录（压制已知无价值的噪音）' }),
+}).meta({ id: 'Settings.ErrorTracking' });
+export const errorTrackingSettingsModule = defineSettingsModule({
+    schema: errorTrackingSettingsSchema,
+    title: '异常日志',
+    description: '服务端异常采集开关、风暴闸值与请求快照脱敏',
+    scope: 'platform',
+    readPermission: 'system:setting:view',
+    writePermission: 'system:setting:update',
+    sort: 55,
+});
+//# sourceMappingURL=error-tracking.js.map

package/dist/shared/settings/modules/error-tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.js","sourceRoot":"","sources":["../../../src/settings/modules/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAMrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC/B,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACvE,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC3C,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,qEAAqE,EAAE,CAAC;IAChI,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACtD,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACjF,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SACtD,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;IAC7E,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;aACnC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;QAC/E,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;aACnD,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;aAC7E,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,uEAAuE,EAAE,CAAC;KACpH,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;SAClF,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;CAC1E,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,CAAC;AAI1C,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;IAC9D,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,uBAAuB;IACpC,KAAK,EAAE,UAAU;IACjB,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,uBAAuB;IACxC,IAAI,EAAE,EAAE;CACT,CAAC,CAAC"}

package/dist/shared/settings/modules/files.d.ts

@@ -0,0 +1,18 @@
+import * as z from 'zod';
+export declare const DEFAULT_UPLOAD_ALLOWED_TYPES: readonly ['image/*', 'video/*', 'audio/*', 'application/pdf', 'text/plain', 'text/csv', 'text/vtt', 'application/zip', 'application/x-zip-compressed', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'application/vnd.openxmlformats-officedocument.presentationml.presentation', 'application/vnd.ms-excel', 'application/msword', 'application/vnd.ms-powerpoint'];
+export declare const filesSettingsSchema: z.ZodObject<{
+    uploadValidateType: z.ZodDefault<z.ZodBoolean>;
+    uploadAllowedTypes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    uploadMaxSizeMb: z.ZodDefault<z.ZodInt>;
+    chunkThresholdMb: z.ZodDefault<z.ZodInt>;
+    chunkSizeMb: z.ZodDefault<z.ZodInt>;
+}, z.core.$strip>;
+export type FilesSettings = z.output<typeof filesSettingsSchema>;
+export declare const filesSettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    uploadValidateType: z.ZodDefault<z.ZodBoolean>;
+    uploadAllowedTypes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    uploadMaxSizeMb: z.ZodDefault<z.ZodInt>;
+    chunkThresholdMb: z.ZodDefault<z.ZodInt>;
+    chunkSizeMb: z.ZodDefault<z.ZodInt>;
+}, z.core.$strip>>;
+//# sourceMappingURL=files.d.ts.map

package/dist/shared/settings/modules/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB,eAAO,MAAM,4BAA4B,YACvC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EACxF,iBAAiB,EAAE,8BAA8B,EACjD,mEAAmE,EACnE,yEAAyE,EACzE,2EAA2E,EAC3E,0BAA0B,EAAE,oBAAoB,EAAE,+BAA+B,CACzE,CAAC;AAGX,eAAO,MAAM,mBAAmB;;;;;;iBAWC,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,mBAAmB;;;;;;kBAS9B,CAAC"}

package/dist/shared/settings/modules/files.js

@@ -0,0 +1,35 @@
+import * as z from 'zod';
+import { UPLOAD_CHUNK_MAX_BYTES, UPLOAD_CHUNK_MIN_BYTES } from '../../platform/constants.js';
+import { defineSettingsModule } from '../module-def.js';
+const MIB = 1024 * 1024;
+export const DEFAULT_UPLOAD_ALLOWED_TYPES = [
+    'image/*', 'video/*', 'audio/*', 'application/pdf', 'text/plain', 'text/csv', 'text/vtt',
+    'application/zip', 'application/x-zip-compressed',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+    'application/vnd.ms-excel', 'application/msword', 'application/vnd.ms-powerpoint',
+];
+export const filesSettingsSchema = z.object({
+    uploadValidateType: z.boolean().default(true)
+        .meta({ title: '校验真实文件类型', description: '基于 magic bytes 识别，防止伪造 MIME type 绕过校验' }),
+    uploadAllowedTypes: z.array(z.string().trim().min(1).max(128)).max(200).default(() => [...DEFAULT_UPLOAD_ALLOWED_TYPES])
+        .meta({ title: '允许的 MIME 类型', description: '支持通配符（如 image/*）；填 * 或 */* 放行全部类型' }),
+    uploadMaxSizeMb: z.int().min(0).max(102_400).default(0)
+        .meta({ title: '单文件大小上限（MB）', description: '0 表示不限制；超过的上传（含分片）将被拒绝' }),
+    chunkThresholdMb: z.int().min(1).max(UPLOAD_CHUNK_MAX_BYTES / MIB).default(UPLOAD_CHUNK_MIN_BYTES / MIB)
+        .meta({ title: '分片上传阈值（MB）', description: '超过该大小的文件走分片上传 + 断点续传，不超过则单请求上传（含网盘简单上传 / 新版本）；受反向代理请求体上限约束' }),
+    chunkSizeMb: z.int().min(UPLOAD_CHUNK_MIN_BYTES / MIB).max(UPLOAD_CHUNK_MAX_BYTES / MIB).default(UPLOAD_CHUNK_MIN_BYTES / MIB)
+        .meta({ title: '分片大小（MB）', description: '服务端裁定的分片基线，不低于对象存储要求的最小分片；文件过大时自动上调以不超过片数上限' }),
+}).meta({ id: 'Settings.Files' });
+export const filesSettingsModule = defineSettingsModule({
+    schema: filesSettingsSchema,
+    title: '文件上传',
+    description: '托管文件上传的类型校验、大小上限与分片策略',
+    scope: 'platform',
+    readPermission: 'system:setting:view',
+    writePermission: 'system:setting:update',
+    visibility: { chunkThresholdMb: 'authenticated', chunkSizeMb: 'authenticated' },
+    sort: 40,
+});
+//# sourceMappingURL=files.js.map

package/dist/shared/settings/modules/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/settings/modules/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAGxB,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU;IACxF,iBAAiB,EAAE,8BAA8B;IACjD,mEAAmE;IACnE,yEAAyE;IACzE,2EAA2E;IAC3E,0BAA0B,EAAE,oBAAoB,EAAE,+BAA+B;CACzE,CAAC;AAGX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC1C,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IACpF,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,4BAA4B,CAAC,CAAC;SACrH,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;IACnF,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;SACpD,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxE,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,GAAG,GAAG,CAAC;SACrG,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,4DAA4D,EAAE,CAAC;IAC3G,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,GAAG,GAAG,CAAC;SAC3H,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;CAC3F,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAIlC,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;IACtD,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,uBAAuB;IACpC,KAAK,EAAE,UAAU;IACjB,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,uBAAuB;IACxC,UAAU,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE;IAC/E,IAAI,EAAE,EAAE;CACT,CAAC,CAAC"}

package/dist/shared/settings/modules/identity-security.d.ts

@@ -0,0 +1,113 @@
+import * as z from 'zod';
+export declare const identitySecuritySettingsSchema: z.ZodObject<{
+    password: z.ZodPrefault<z.ZodObject<{
+        minLength: z.ZodDefault<z.ZodInt>;
+        requireUppercase: z.ZodDefault<z.ZodBoolean>;
+        requireSpecialChar: z.ZodDefault<z.ZodBoolean>;
+        expiryEnabled: z.ZodDefault<z.ZodBoolean>;
+        expiryDays: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    loginChallenge: z.ZodPrefault<z.ZodObject<{
+        maxAttemptsPerSource: z.ZodDefault<z.ZodInt>;
+        sourceLimit: z.ZodDefault<z.ZodInt>;
+        windowMinutes: z.ZodDefault<z.ZodInt>;
+        alert: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            sourceThreshold: z.ZodDefault<z.ZodInt>;
+            failureThreshold: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    session: z.ZodPrefault<z.ZodObject<{
+        maxSessions: z.ZodDefault<z.ZodInt>;
+        scope: z.ZodDefault<z.ZodEnum<{
+            global: "global";
+            "per-client": "per-client";
+        }>>;
+        exceedAction: z.ZodDefault<z.ZodEnum<{
+            "kick-oldest": "kick-oldest";
+            "reject-new": "reject-new";
+        }>>;
+    }, z.core.$strip>>;
+    mfa: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            off: "off";
+            optional: "optional";
+            required: "required";
+        }>>;
+        rememberDeviceDays: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    risk: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        newDeviceAction: z.ZodDefault<z.ZodEnum<{
+            allow: "allow";
+            challenge: "challenge";
+        }>>;
+    }, z.core.$strip>>;
+    impersonation: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxMinutes: z.ZodDefault<z.ZodInt>;
+        allowWrite: z.ZodDefault<z.ZodBoolean>;
+        notifyTarget: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type IdentitySecuritySettings = z.output<typeof identitySecuritySettingsSchema>;
+export type PasswordPolicy = IdentitySecuritySettings['password'];
+export type SessionConcurrencyPolicy = IdentitySecuritySettings['session'];
+export type PasswordRules = Pick<PasswordPolicy, 'minLength' | 'requireUppercase' | 'requireSpecialChar'>;
+export declare const identitySecuritySettingsModule: import("../module-def.js").SettingsModuleDef<z.ZodObject<{
+    password: z.ZodPrefault<z.ZodObject<{
+        minLength: z.ZodDefault<z.ZodInt>;
+        requireUppercase: z.ZodDefault<z.ZodBoolean>;
+        requireSpecialChar: z.ZodDefault<z.ZodBoolean>;
+        expiryEnabled: z.ZodDefault<z.ZodBoolean>;
+        expiryDays: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    loginChallenge: z.ZodPrefault<z.ZodObject<{
+        maxAttemptsPerSource: z.ZodDefault<z.ZodInt>;
+        sourceLimit: z.ZodDefault<z.ZodInt>;
+        windowMinutes: z.ZodDefault<z.ZodInt>;
+        alert: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            sourceThreshold: z.ZodDefault<z.ZodInt>;
+            failureThreshold: z.ZodDefault<z.ZodInt>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    session: z.ZodPrefault<z.ZodObject<{
+        maxSessions: z.ZodDefault<z.ZodInt>;
+        scope: z.ZodDefault<z.ZodEnum<{
+            global: "global";
+            "per-client": "per-client";
+        }>>;
+        exceedAction: z.ZodDefault<z.ZodEnum<{
+            "kick-oldest": "kick-oldest";
+            "reject-new": "reject-new";
+        }>>;
+    }, z.core.$strip>>;
+    mfa: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            off: "off";
+            optional: "optional";
+            required: "required";
+        }>>;
+        rememberDeviceDays: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
+    risk: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        newDeviceAction: z.ZodDefault<z.ZodEnum<{
+            allow: "allow";
+            challenge: "challenge";
+        }>>;
+    }, z.core.$strip>>;
+    impersonation: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxMinutes: z.ZodDefault<z.ZodInt>;
+        allowWrite: z.ZodDefault<z.ZodBoolean>;
+        notifyTarget: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare function validatePassword(password: string, policy: PasswordRules): string | null;
+export declare function formatPasswordPolicyHint(policy: PasswordRules | null | undefined): string;
+export declare function formatSessionPolicyHint(policy: SessionConcurrencyPolicy): string;
+//# sourceMappingURL=identity-security.d.ts.map

package/dist/shared/settings/modules/identity-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-security.d.ts","sourceRoot":"","sources":["../../../src/settings/modules/identity-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAKzB,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwDC,CAAC;AAE7C,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACvF,MAAM,MAAM,cAAc,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;AAClE,MAAM,MAAM,wBAAwB,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;AAE3E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,kBAAkB,GAAG,oBAAoB,CAAC,CAAC;AAE1G,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYzC,CAAC;AAMH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAWvF;AAGD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAMzF;AAMD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAQhF"}