@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.10

package/dist/storage/config/storage-submission.service.js

@@ -0,0 +1,102 @@
+"use strict";
+// =============================================================================
+// StorageSubmissionService — a submitted, UNSAVED configuration, made runnable (#375; PP-14.7)
+// =============================================================================
+//
+// `POST /test` and `POST /bucket` both take the configuration in the request
+// body, which does not have to have been saved, and both need the same thing
+// before they can call the driver: the driver, its settings (the stored ones,
+// the legacy flat aliases, then `drivers.<id>`), a way to resolve its secrets
+// (a typed value wins, a blank one means "use the stored one") and the context
+// every driver operation receives. This is that, once, so the two routes
+// cannot disagree about what "the submitted configuration" is.
+//
+// ⚠ THE SECRET, AND WHERE IT IS ALLOWED TO GO. A secret is read at the moment a
+// driver asks for it (`ctx.secret(name)`), held in a local map for the length of
+// the call so it can be REDACTED out of anything that is about to be shown to an
+// administrator, and never stored, logged or returned. A driver that never asks
+// for a secret never causes one to be decrypted.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var StorageSubmissionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageSubmissionService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const index_1 = require("../../credentials/index");
+const index_2 = require("../../settings/index");
+const storage_driver_1 = require("../drivers/storage-driver");
+const storage_driver_context_1 = require("./storage-driver-context");
+const storage_settings_compat_1 = require("./storage-settings-compat");
+// The built-in drivers register on import: whatever resolves a driver by id finds them.
+require("../drivers/builtin-storage-drivers");
+/**
+ * Resolves the driver, settings and secrets of a SUBMITTED, unsaved storage configuration (the body of `POST /test` and `POST /bucket`), so the two routes cannot disagree about what that configuration is.
+ *
+ * @stability experimental
+ */
+let StorageSubmissionService = StorageSubmissionService_1 = class StorageSubmissionService {
+    credentials;
+    systemSettings;
+    config;
+    logger = new common_1.Logger(StorageSubmissionService_1.name);
+    constructor(credentials, systemSettings, config) {
+        this.credentials = credentials;
+        this.systemSettings = systemSettings;
+        this.config = config;
+    }
+    /**
+     * Resolves the body's driver, settings and secrets.
+     *
+     * @param input - the request body of `POST /test` or `POST /bucket`.
+     * @throws BadRequestException (400) for an unregistered driver, settings the driver refuses, or an alias contradicting `drivers`.
+     */
+    async prepare(input) {
+        const driver = (0, storage_driver_1.getStorageDriver)(input.provider) ?? (0, storage_settings_compat_1.unknownDriverRejection)(input.provider);
+        const stored = (await this.systemSettings.getStoragePolicy()).drivers[driver.id];
+        const settings = (0, storage_settings_compat_1.submittedDriverSettings)(driver.id, stored, input);
+        const typed = (0, storage_settings_compat_1.submittedSecretValues)(driver.id, input);
+        const resolved = new Map();
+        // BLANK PRESERVES, exactly as on `PUT`. An admin who changed only the region
+        // must not have to re-paste a credential they may not have to hand.
+        const secret = async (name) => {
+            const value = typed[name] ??
+                (await this.credentials.getSecret((0, storage_driver_1.storageSecretAddress)(driver, name).purpose, (0, storage_driver_1.storageSecretAddress)(driver, name).name));
+            if (value)
+                resolved.set(name, value);
+            return value ?? null;
+        };
+        return {
+            driver,
+            settings,
+            ctx: (0, storage_driver_context_1.storageDriverContext)({ settings, secret, logger: this.logger, config: this.config }),
+            location: (0, storage_driver_1.storageLocationOf)(driver, settings),
+            usedStoredSecret: (driver.secrets ?? []).some((spec) => typed[spec.name] === undefined),
+            redact: (text) => {
+                let out = text;
+                for (const value of [...Object.values(typed), ...resolved.values()]) {
+                    if (value.length === 0 || !out.includes(value))
+                        continue;
+                    out = value.length < 4 ? '[withheld: it contained a configured secret]' : out.split(value).join('[redacted]');
+                }
+                return out;
+            },
+        };
+    }
+};
+exports.StorageSubmissionService = StorageSubmissionService;
+exports.StorageSubmissionService = StorageSubmissionService = StorageSubmissionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.CredentialsService,
+        index_2.SystemSettingsService,
+        config_1.ConfigService])
+], StorageSubmissionService);
+//# sourceMappingURL=storage-submission.service.js.map

package/dist/storage/config/storage-submission.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-submission.service.js","sourceRoot":"","sources":["../../../src/storage/config/storage-submission.service.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+FAA+F;AAC/F,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,yEAAyE;AACzE,+DAA+D;AAC/D,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,iDAAiD;AACjD,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAoD;AACpD,2CAA+C;AAE/C,mDAA6D;AAC7D,gDAA6D;AAC7D,8DAOmC;AACnC,qEAAgE;AAChE,uEAImC;AACnC,wFAAwF;AACxF,8CAA4C;AAsB5C;;;;GAIG;AAEI,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAIhB;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,YACmB,WAA+B,EAC/B,cAAqC,EACrC,MAAqB;QAFrB,gBAAW,GAAX,WAAW,CAAoB;QAC/B,mBAAc,GAAd,cAAc,CAAuB;QACrC,WAAM,GAAN,MAAM,CAAe;IACrC,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,KAAqD;QACjE,MAAM,MAAM,GAAG,IAAA,iCAAgB,EAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAA,gDAAsB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,IAAA,iDAAuB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,+CAAqB,EAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE3C,6EAA6E;QAC7E,oEAAoE;QACpE,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;YAC5D,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,CAAC;gBACX,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAA,qCAAoB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,IAAA,qCAAoB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1H,IAAI,KAAK;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrC,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC,CAAC;QAEF,OAAO;YACL,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,IAAA,6CAAoB,EAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACzF,QAAQ,EAAE,IAAA,kCAAiB,EAAC,MAAM,EAAE,QAAQ,CAAC;YAC7C,gBAAgB,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;YACvF,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,GAAG,GAAG,IAAI,CAAC;gBACf,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;oBACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACzD,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChH,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhDY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAKqB,0BAAkB;QACf,6BAAqB;QAC7B,sBAAa;GAN7B,wBAAwB,CAgDpC"}

package/dist/storage/config/storage.system-settings.d.ts

@@ -0,0 +1,130 @@
+import { type StorageSettingsPatchInput, type SystemStorageValue } from '@marinoscar/platform-contract/storage';
+import { z } from 'zod';
+import type { SettingsReadHelpers } from '../../settings/index';
+import '../drivers/builtin-storage-drivers';
+/**
+ * The `storage` namespace's PATCH merge. `provider` replaces the active
+ * driver (an unregistered id is a 400). `drivers.<id>` merges over that
+ * driver's stored settings and is validated by the driver (`null` resets it to
+ * its defaults); a driver the patch does not name keeps its settings. The
+ * legacy flat fields merge into the settings of the driver named by
+ * `provider`, with the semantics they always had: a field the patch names
+ * replaces the stored one (an empty string included: `''` un-configures a
+ * field), an absent field is kept, and `forcePathStyle` is replaced on any
+ * value but `undefined` (`null` restores the vendor convention).
+ *
+ * Writes the new shape only; the legacy flat fields are never persisted.
+ *
+ * @param current - the stored value.
+ * @param patch - the PATCH body's `storage` branch, when present.
+ * @returns the merged value.
+ *
+ * @stability experimental
+ */
+export declare function mergeStorageSettings(current: SystemStorageValue, patch?: StorageSettingsPatchInput): SystemStorageValue;
+/**
+ * The `storage` system-settings namespace (#373, epic #372; drivers: PP-14.7):
+ * the object-storage driver configuration. Registered by the app's system
+ * settings manifest, after the operations namespaces. No secret, ever.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_SYSTEM_SETTINGS: {
+    /** The namespace key (permanent). */
+    key: "storage";
+    /** What it holds. */
+    description: string;
+    /** The stored shape. */
+    storedSchema: z.ZodObject<{
+        provider: z.ZodString;
+        bucket: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        accountId: z.ZodOptional<z.ZodString>;
+        accessKeyId: z.ZodOptional<z.ZodString>;
+        forcePathStyle: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        drivers: z.ZodPreprocess<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>;
+    /** The stored partial. */
+    patchSchema: z.ZodObject<{
+        provider: z.ZodOptional<z.ZodString>;
+        drivers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+        bucket: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        accountId: z.ZodOptional<z.ZodString>;
+        accessKeyId: z.ZodOptional<z.ZodString>;
+        forcePathStyle: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>;
+    /** The PUT body's branch. */
+    putSchema: z.ZodObject<{
+        provider: z.ZodString;
+        drivers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        bucket: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        accountId: z.ZodOptional<z.ZodString>;
+        accessKeyId: z.ZodOptional<z.ZodString>;
+        forcePathStyle: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>;
+    /** The PATCH body's branch. */
+    wirePatchSchema: z.ZodObject<{
+        provider: z.ZodOptional<z.ZodString>;
+        drivers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+        bucket: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        endpoint: z.ZodOptional<z.ZodString>;
+        accountId: z.ZodOptional<z.ZodString>;
+        accessKeyId: z.ZodOptional<z.ZodString>;
+        forcePathStyle: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>;
+    /** The GET response's branch. */
+    responseSchema: z.ZodObject<{
+        provider: z.ZodString;
+        drivers: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        bucket: z.ZodString;
+        region: z.ZodString;
+        endpoint: z.ZodString;
+        accountId: z.ZodString;
+        accessKeyId: z.ZodString;
+        forcePathStyle: z.ZodNullable<z.ZodBoolean>;
+    }, z.core.$strip>;
+    /** Unconfigured: every field that would send a request somewhere is empty. */
+    defaults: {
+        provider: string;
+        drivers: Record<string, Record<string, unknown>>;
+        bucket?: string | undefined;
+        region?: string | undefined;
+        endpoint?: string | undefined;
+        accountId?: string | undefined;
+        accessKeyId?: string | undefined;
+        forcePathStyle?: boolean | null | undefined;
+    };
+    /** Optional in a PUT body. */
+    requiredOnPut: false;
+    /**
+     * Salvage a stored value in either shape (see the file header): every
+     * registered driver present with defaults filled, an old flat row folded into
+     * `drivers.<provider>`, field by field, and the active built-in's settings
+     * republished as the deprecated flat fields.
+     */
+    read(stored: unknown, helpers: SettingsReadHelpers): SystemStorageValue;
+    /** The PATCH merge (`mergeStorageSettings`). */
+    merge: typeof mergeStorageSettings;
+};
+declare module '../../settings/index' {
+    interface SystemSettingsNamespaces {
+        /**
+         * Object-storage configuration (#373, epic #372; drivers: PP-14.7): the
+         * active driver and each driver's own non-secret settings. "Not configured"
+         * is a driver whose settings are incomplete, never the block being absent;
+         * see `systemStorageSchema`.
+         */
+        storage: SystemStorageValue;
+    }
+    interface SystemSettingsNamespaceDeclarations {
+        /** The `storage` declaration. */
+        storage: typeof STORAGE_SYSTEM_SETTINGS;
+    }
+}
+//# sourceMappingURL=storage.system-settings.d.ts.map

package/dist/storage/config/storage.system-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.system-settings.d.ts","sourceRoot":"","sources":["../../../src/storage/config/storage.system-settings.ts"],"names":[],"mappings":"AAqCA,OAAO,EAQL,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACxB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,mBAAmB,EAA2B,MAAM,sBAAsB,CAAC;AAEzF,OAAO,oCAAoC,CAAC;AA+L5C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,yBAAyB,GAAG,kBAAkB,CAsCvH;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;IAClC,qCAAqC;;IAErC,qBAAqB;;IAErB,wBAAwB;;;;;;;;;;;IAExB,0BAA0B;;;;;;;;;;;IAE1B,6BAA6B;;;;;;;;;;;IAE7B,+BAA+B;;;;;;;;;;;IAE/B,iCAAiC;;;;;;;;;;;IAEjC,8EAA8E;;;;;;;;;;;IAE9E,8BAA8B;;IAE9B;;;;;OAKG;iBACU,OAAO,WAAW,mBAAmB,GAAG,kBAAkB;IAIvE,gDAAgD;;CAE2C,CAAC;AAE9F,OAAO,QAAQ,sBAAsB,CAAC;IACpC,UAAU,wBAAwB;QAChC;;;;;WAKG;QACH,OAAO,EAAE,kBAAkB,CAAC;KAC7B;IACD,UAAU,mCAAmC;QAC3C,iCAAiC;QACjC,OAAO,EAAE,OAAO,uBAAuB,CAAC;KACzC;CACF"}

package/dist/storage/config/storage.system-settings.js

@@ -0,0 +1,307 @@
+"use strict";
+// =============================================================================
+// System settings namespace `storage` (issue #677; namespace #373, epic #372; drivers: PP-14.7)
+// =============================================================================
+//
+// A declaration file: imports leaf modules and the storage driver registry.
+// Registered by the app's system-settings manifest. Recipe:
+// packages/platform-api/src/settings/README.md.
+//
+// THE STORED SHAPE is `{ provider, drivers }`: the id of the active storage
+// driver and a record of every driver's own non-secret settings, each validated
+// by the driver that owns it (`storageDriverKind`). The six flat fields the
+// namespace stored before drivers were pluggable (`bucket`, `region`,
+// `endpoint`, `accountId`, `accessKeyId`, `forcePathStyle`) are still ACCEPTED
+// (a stored row, a PUT, a PATCH) and still PUBLISHED (the GET response), as the
+// settings of the active built-in driver:
+//
+//   READ    an old row has no `drivers`; `read` folds its flat fields into
+//           `drivers.<provider>` (field by field, so one damaged field keeps the
+//           bucket next to it) and the response republishes the active
+//           built-in's settings as the flat fields. Nothing is migrated.
+//   WRITE   `merge` (PATCH) and the stored schema's transform (PUT) store the
+//           new shape only: the flat fields are folded into `drivers` and
+//           dropped, so the first write after an upgrade converts the row.
+//
+// A flat field and `drivers.<provider>` naming the same setting with different
+// values is a 400: guessing which one the caller meant would silently ignore a
+// change.
+//
+// NO SECRET HERE, AND THERE NEVER MAY BE ONE: a driver's secrets are declared
+// by the driver and live in the encrypted credential store (the built-ins' at
+// `(purpose 'storage', name 'default')`). Proved at compile time in
+// `@marinoscar/platform-contract/storage` (`StorageSettingsCarriesNoSecret`),
+// at registration (`registerStorageDriver` refuses a secret-named setting) and
+// at import time by the settings registry.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_SYSTEM_SETTINGS = void 0;
+exports.mergeStorageSettings = mergeStorageSettings;
+const common_1 = require("@nestjs/common");
+const storage_1 = require("@marinoscar/platform-contract/storage");
+const zod_1 = require("zod");
+const index_1 = require("../../core/index");
+// Registers the three built-in drivers (side effect): the namespace below reads the registry.
+require("../drivers/builtin-storage-drivers");
+const storage_driver_1 = require("../drivers/storage-driver");
+const storage_settings_compat_1 = require("./storage-settings-compat");
+const DEFAULT_PROVIDER = 's3';
+const logger = new common_1.Logger('StorageSettings');
+/**
+ * Each distinct read warning is logged ONCE per process: the namespace is read
+ * on every settings read and every five seconds by the policy cache, and a
+ * stored entry for a driver that is no longer registered stays stored until the
+ * next save.
+ */
+const warnedOnce = new Set();
+function warnOnce(message) {
+    if (warnedOnce.has(message))
+        return;
+    warnedOnce.add(message);
+    logger.warn(message);
+}
+/** The defaults of every registered driver, in registration order. */
+function defaultDrivers() {
+    return Object.fromEntries(storage_driver_1.storageDriverKind.ids().map((id) => [id, structuredClone(storage_driver_1.storageDriverKind.parseSettings(id, {}))]));
+}
+/**
+ * One stored driver entry, salvaged FIELD BY FIELD against the driver's own
+ * `settingsSchema`: "not configured" is already an empty string, so a damaged
+ * `region` that dragged the whole entry back to the defaults would also blank
+ * the bucket an operator typed. A field that is absent or fails its schema
+ * falls back to the driver's default for that field.
+ */
+function salvageDriverEntry(id, raw) {
+    const impl = storage_driver_1.storageDriverKind.get(id);
+    const source = (0, storage_settings_compat_1.isRecord)(raw) ? raw : {};
+    const defaults = impl.defaults;
+    const salvaged = {};
+    const damaged = [];
+    for (const [key, field] of Object.entries(impl.settingsSchema.shape)) {
+        if (source[key] === undefined) {
+            salvaged[key] = structuredClone(defaults[key]);
+            continue;
+        }
+        const parsed = field.safeParse(source[key]);
+        if (parsed.success) {
+            salvaged[key] = parsed.data;
+        }
+        else {
+            damaged.push(key);
+            salvaged[key] = structuredClone(defaults[key]);
+        }
+    }
+    if (damaged.length > 0) {
+        warnOnce(`Stored storage settings for "${id}" have unusable field(s) ${damaged.join(', ')}; those fall back to their defaults.`);
+    }
+    try {
+        return storage_driver_1.storageDriverKind.parseSettings(id, salvaged);
+    }
+    catch (error) {
+        if (!(error instanceof index_1.PluggableSettingsError))
+            throw error;
+        warnOnce(`Stored storage settings for "${id}" no longer parse (${error.message}); using its defaults.`);
+        return structuredClone(storage_driver_1.storageDriverKind.parseSettings(id, {}));
+    }
+}
+/**
+ * `source` (the raw `storage` namespace, in either shape) as the new shape:
+ * every REGISTERED driver present with its defaults filled, the legacy flat
+ * fields folded into `drivers.<provider>` when that entry is absent, and a
+ * stored entry for a driver that is no longer registered dropped with one
+ * warning.
+ */
+function adaptStored(source) {
+    const provider = typeof source.provider === 'string' && storage_1.STORAGE_DRIVER_ID_PATTERN.test(source.provider) ? source.provider : DEFAULT_PROVIDER;
+    const stored = (0, storage_settings_compat_1.isRecord)(source.drivers) ? source.drivers : {};
+    const unknown = Object.keys(stored).filter((id) => !storage_driver_1.storageDriverKind.has(id));
+    if (unknown.length > 0) {
+        warnOnce(`Ignoring stored storage settings for ${unknown.map((id) => `"${id}"`).join(', ')}: ` +
+            `no such driver is registered (registered: ${storage_driver_1.storageDriverKind.ids().join(', ') || '(none)'}).`);
+    }
+    const legacy = (0, storage_settings_compat_1.legacyFieldsFor)(provider, (0, storage_settings_compat_1.legacyFieldsOf)(source));
+    const drivers = {};
+    for (const id of storage_driver_1.storageDriverKind.ids()) {
+        const entry = stored[id];
+        // A legacy row has no entry for the active provider: its flat fields ARE
+        // that entry. Never the other way round: a new-shape row keeps its entry.
+        const raw = !(0, storage_settings_compat_1.isRecord)(entry) && id === provider && Object.keys(legacy).length > 0 ? legacy : entry;
+        drivers[id] = salvageDriverEntry(id, raw);
+    }
+    return { provider, drivers };
+}
+/**
+ * The deprecated flat view of the active driver, for readers of
+ * `GET /api/system-settings` written before drivers were pluggable: the six
+ * legacy fields from `drivers.<provider>` when it declares them, empty
+ * otherwise.
+ */
+function legacyMirror(provider, drivers) {
+    const active = drivers[provider] ?? {};
+    const text = (field) => typeof active[field] === 'string' ? active[field] : '';
+    return {
+        bucket: text('bucket'),
+        region: text('region'),
+        endpoint: text('endpoint'),
+        accountId: text('accountId'),
+        accessKeyId: text('accessKeyId'),
+        forcePathStyle: typeof active.forcePathStyle === 'boolean' ? active.forcePathStyle : null,
+    };
+}
+/**
+ * The stored `storage` schema, still a plain `z.object` (an app can extend the
+ * namespace). A PUT body (and any value that reaches the composed stored
+ * schema) is checked by the driver that owns each entry, and refused when a
+ * legacy flat field contradicts `drivers.<provider>`.
+ *
+ * A PUT that carries only the legacy flat fields stores them as sent (with an
+ * empty `drivers`): `read` folds them into `drivers.<provider>` on every read,
+ * so the row means the same thing in either shape, and the first PATCH
+ * rewrites it in the new one.
+ */
+const storedStorageSchema = storage_1.systemStorageSchema
+    .extend({
+    /** Every driver's own settings, keyed by driver id; absent in a PUT of the legacy flat fields, read as `{}`. */
+    drivers: zod_1.z.preprocess((value) => value ?? {}, storage_1.systemStorageSchema.shape.drivers),
+})
+    .superRefine((value, ctx) => {
+    for (const [id, entry] of Object.entries(value.drivers)) {
+        try {
+            storage_driver_1.storageDriverKind.parseSettings(id, entry);
+        }
+        catch (error) {
+            if (!(error instanceof index_1.PluggableUnknownError) && !(error instanceof index_1.PluggableSettingsError))
+                throw error;
+            ctx.addIssue({ code: 'custom', message: error.message, path: ['drivers', id] });
+        }
+    }
+    const legacy = (0, storage_settings_compat_1.legacyFieldsFor)(value.provider, (0, storage_settings_compat_1.legacyFieldsOf)(value));
+    const conflicts = (0, storage_settings_compat_1.conflictsBetween)(legacy, value.drivers[value.provider]);
+    if (conflicts.length > 0) {
+        ctx.addIssue({
+            code: 'custom',
+            message: `${conflicts.join(', ')} given both as top-level fields and in drivers.${value.provider} with different values`,
+            path: ['drivers', value.provider],
+        });
+    }
+});
+/**
+ * The PUT body's `storage` branch: the wire schema, plus "the provider is a
+ * registered driver" (the contract cannot see the registry).
+ */
+const putStorageSchema = storage_1.storageSettingsSchema.refine((value) => storage_driver_1.storageDriverKind.has(value.provider), {
+    message: 'provider must be the id of a registered storage driver',
+    path: ['provider'],
+});
+// UNCONFIGURED: `provider: 's3'` names the driver the empty fields would be
+// filled in for, and every field that would actually make a request go
+// somewhere is empty. These are the ONLY source of a storage configuration
+// (`STORAGE_PROVIDER`/`S3_*` were removed in #377), so a fresh deployment
+// refuses storage operations with a 503 naming the empty fields until an
+// administrator fills them in at /admin/settings/storage. `'s3'` rather than
+// `null` because "no storage configured" is a driver whose settings are
+// incomplete (`bucket === ''`): one question with one answer, not a second way
+// to spell the same state. Only the built-ins are known when this module loads;
+// `read` fills in every driver registered since.
+const STORAGE_SYSTEM_DEFAULTS = {
+    provider: DEFAULT_PROVIDER,
+    drivers: defaultDrivers(),
+};
+/**
+ * The `storage` namespace's PATCH merge. `provider` replaces the active
+ * driver (an unregistered id is a 400). `drivers.<id>` merges over that
+ * driver's stored settings and is validated by the driver (`null` resets it to
+ * its defaults); a driver the patch does not name keeps its settings. The
+ * legacy flat fields merge into the settings of the driver named by
+ * `provider`, with the semantics they always had: a field the patch names
+ * replaces the stored one (an empty string included: `''` un-configures a
+ * field), an absent field is kept, and `forcePathStyle` is replaced on any
+ * value but `undefined` (`null` restores the vendor convention).
+ *
+ * Writes the new shape only; the legacy flat fields are never persisted.
+ *
+ * @param current - the stored value.
+ * @param patch - the PATCH body's `storage` branch, when present.
+ * @returns the merged value.
+ *
+ * @stability experimental
+ */
+function mergeStorageSettings(current, patch) {
+    const provider = patch?.provider ?? current.provider;
+    if (patch?.provider !== undefined && !storage_driver_1.storageDriverKind.has(provider)) {
+        (0, storage_settings_compat_1.driverRejection)(new index_1.PluggableUnknownError('storage-driver', provider, storage_driver_1.storageDriverKind.ids()));
+    }
+    const stored = structuredClone(current.drivers);
+    if (!patch)
+        return { provider, drivers: stored };
+    // `??` is the RIGHT operator for every STRING flat field even though it is
+    // the wrong one for `maintenance.startedAt`: none of them is nullable, so a
+    // caller can never send `null`, and a spread of the defined keys passes an
+    // empty string through unchanged. That last part is load-bearing: `''` is
+    // how an operator un-configures a field, and a `||` would silently turn
+    // "clear the endpoint" into "keep the old endpoint", the class of bug that
+    // leaves a deployment writing to a bucket it was told to stop writing to.
+    // `forcePathStyle` is tri-state, so only `undefined` means "leave it alone":
+    // the spread keeps an explicit `null`.
+    const legacy = (0, storage_settings_compat_1.legacyFieldsFor)(provider, (0, storage_settings_compat_1.legacyFieldsOf)(patch));
+    const named = patch.drivers?.[provider];
+    const conflicts = (0, storage_settings_compat_1.conflictsBetween)(legacy, (0, storage_settings_compat_1.isRecord)(named) ? named : undefined);
+    if (conflicts.length > 0)
+        (0, storage_settings_compat_1.conflictingFields)(provider, conflicts);
+    const entries = {};
+    for (const [id, entry] of Object.entries(patch.drivers ?? {}))
+        entries[id] = entry;
+    if (Object.keys(legacy).length > 0)
+        entries[provider] = { ...legacy, ...(entries[provider] ?? {}) };
+    // NOTHING HERE TOUCHES A SECRET. A driver's secrets are not in the DTO, not in
+    // the stored value and not in this merge; they are written through
+    // `CredentialsService` on their own path.
+    let drivers;
+    try {
+        drivers = storage_driver_1.storageDriverKind.mergeSettingsRecord(stored, entries);
+    }
+    catch (error) {
+        return (0, storage_settings_compat_1.driverRejection)(error);
+    }
+    return { provider, drivers };
+}
+/**
+ * The `storage` system-settings namespace (#373, epic #372; drivers: PP-14.7):
+ * the object-storage driver configuration. Registered by the app's system
+ * settings manifest, after the operations namespaces. No secret, ever.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_SYSTEM_SETTINGS = {
+    /** The namespace key (permanent). */
+    key: 'storage',
+    /** What it holds. */
+    description: 'Object-storage configuration: the active driver and each driver\'s own non-secret settings (bucket, region, endpoint, access key id, ...).',
+    /** The stored shape. */
+    storedSchema: storedStorageSchema,
+    /** The stored partial. */
+    patchSchema: storage_1.systemStoragePatchSchema,
+    /** The PUT body's branch. */
+    putSchema: putStorageSchema,
+    /** The PATCH body's branch. */
+    wirePatchSchema: storage_1.storageSettingsPatchSchema,
+    /** The GET response's branch. */
+    responseSchema: storage_1.storageResponseSchema,
+    /** Unconfigured: every field that would send a request somewhere is empty. */
+    defaults: STORAGE_SYSTEM_DEFAULTS,
+    /** Optional in a PUT body. */
+    requiredOnPut: false,
+    /**
+     * Salvage a stored value in either shape (see the file header): every
+     * registered driver present with defaults filled, an old flat row folded into
+     * `drivers.<provider>`, field by field, and the active built-in's settings
+     * republished as the deprecated flat fields.
+     */
+    read(stored, helpers) {
+        const { provider, drivers } = adaptStored(helpers.asPlainObject(stored) ?? {});
+        return { provider, drivers, ...legacyMirror(provider, drivers) };
+    },
+    /** The PATCH merge (`mergeStorageSettings`). */
+    merge: mergeStorageSettings,
+};
+//# sourceMappingURL=storage.system-settings.js.map

package/dist/storage/config/storage.system-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.system-settings.js","sourceRoot":"","sources":["../../../src/storage/config/storage.system-settings.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,gGAAgG;AAChG,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,4DAA4D;AAC5D,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,0CAA0C;AAC1C,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,uEAAuE;AACvE,yEAAyE;AACzE,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,UAAU;AACV,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAC9E,+EAA+E;AAC/E,2CAA2C;AAC3C,gFAAgF;;;AAqOhF,oDAsCC;AAzQD,2CAAwC;AACxC,mEAU+C;AAC/C,6BAAwB;AAExB,4CAAiF;AAEjF,8FAA8F;AAC9F,8CAA4C;AAC5C,8DAA8D;AAC9D,uEAUmC;AAEnC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAiB,CAAC,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AACrC,SAAS,QAAQ,CAAC,OAAe;IAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACpC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,WAAW,CAAC,kCAAiB,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC,kCAAiB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjI,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,EAAU,EAAE,GAAY;IAClD,MAAM,IAAI,GAAG,kCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAA,kCAAQ,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA0B,CAAC;IACjD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAkC,CAAC,EAAE,CAAC;QAClG,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,gCAAgC,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnI,CAAC;IAED,IAAI,CAAC;QACH,OAAO,kCAAiB,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,8BAAsB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5D,QAAQ,CAAC,gCAAgC,EAAE,sBAAsB,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;QACxG,OAAO,eAAe,CAAC,kCAAiB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,MAA+B;IAClD,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,mCAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC9H,MAAM,MAAM,GAAG,IAAA,kCAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,kCAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CACN,wCAAwC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACnF,6CAA6C,kCAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,yCAAe,EAAC,QAAQ,EAAE,IAAA,wCAAc,EAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,kCAAiB,CAAC,GAAG,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,GAAG,GAAG,CAAC,IAAA,kCAAQ,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACnG,OAAO,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAsB;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,KAAqE,EAAE,EAAE,CACrF,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;QACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;QAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;QAChC,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG,6BAAmB;KAC5C,MAAM,CAAC;IACN,gHAAgH;IAChH,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,6BAAmB,CAAC,KAAK,CAAC,OAAO,CAAC;CACjF,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,kCAAiB,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,8BAAsB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzG,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,yCAAe,EAAC,KAAK,CAAC,QAAQ,EAAE,IAAA,wCAAc,EAAC,KAAK,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAA,0CAAgB,EAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,KAAK,CAAC,QAAQ,wBAAwB;YACxH,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,gBAAgB,GAAG,+BAAqB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kCAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;IACtG,OAAO,EAAE,wDAAwD;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC;CACnB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,6EAA6E;AAC7E,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,iDAAiD;AACjD,MAAM,uBAAuB,GAAuB;IAClD,QAAQ,EAAE,gBAAgB;IAC1B,OAAO,EAAE,cAAc,EAAE;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,oBAAoB,CAAC,OAA2B,EAAE,KAAiC;IACjG,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACrD,IAAI,KAAK,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,kCAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,IAAA,yCAAe,EAAC,IAAI,6BAAqB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,kCAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAkB,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAEjD,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAA,yCAAe,EAAC,QAAQ,EAAE,IAAA,wCAAc,EAAC,KAAgC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAA,0CAAgB,EAAC,MAAM,EAAE,IAAA,kCAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,IAAA,2CAAiB,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,OAAO,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACnF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAEpG,+EAA+E;IAC/E,mEAAmE;IACnE,0CAA0C;IAC1C,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,kCAAiB,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAkB,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAA,yCAAe,EAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAG;IACrC,qCAAqC;IACrC,GAAG,EAAE,SAAS;IACd,qBAAqB;IACrB,WAAW,EAAE,4IAA4I;IACzJ,wBAAwB;IACxB,YAAY,EAAE,mBAAmB;IACjC,0BAA0B;IAC1B,WAAW,EAAE,kCAAwB;IACrC,6BAA6B;IAC7B,SAAS,EAAE,gBAAgB;IAC3B,+BAA+B;IAC/B,eAAe,EAAE,oCAA0B;IAC3C,iCAAiC;IACjC,cAAc,EAAE,+BAAqB;IACrC,8EAA8E;IAC9E,QAAQ,EAAE,uBAAuB;IACjC,8BAA8B;IAC9B,aAAa,EAAE,KAAK;IACpB;;;;;OAKG;IACH,IAAI,CAAC,MAAe,EAAE,OAA4B;QAChD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,gDAAgD;IAChD,KAAK,EAAE,oBAAoB;CACgE,CAAC"}