@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/host/http/request-id.middleware.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestIdMiddleware = void 0;
+const common_1 = require("@nestjs/common");
+const api_1 = require("@opentelemetry/api");
+const node_crypto_1 = require("node:crypto");
+/**
+ * Assigns each request an id (the incoming `x-request-id`, or a random UUID),
+ * attaches it and the active trace and span ids to the raw request, and echoes
+ * `x-request-id` and `x-trace-id` on the response. Applied to every route by
+ * `PlatformHostCoreModule.forRoot()` (packaged by #867).
+ *
+ * @stability experimental
+ */
+let RequestIdMiddleware = class RequestIdMiddleware {
+    /**
+     * NestJS middleware with Fastify receives raw Node.js objects.
+     *
+     * @param req - the raw request.
+     * @param res - the raw response.
+     * @param next - continues the chain.
+     */
+    use(req, res, next) {
+        // Get or generate request ID
+        const requestId = req.headers['x-request-id'] || (0, node_crypto_1.randomUUID)();
+        // Get trace context from OpenTelemetry
+        const activeSpan = api_1.trace.getSpan(api_1.context.active());
+        const spanContext = activeSpan?.spanContext();
+        // Attach to request (cast to any to add custom properties)
+        req.requestId = requestId;
+        if (spanContext) {
+            req.traceId = spanContext.traceId;
+            req.spanId = spanContext.spanId;
+        }
+        // Set response headers using Node.js API
+        res.setHeader('x-request-id', requestId);
+        if (spanContext) {
+            res.setHeader('x-trace-id', spanContext.traceId);
+        }
+        next();
+    }
+};
+exports.RequestIdMiddleware = RequestIdMiddleware;
+exports.RequestIdMiddleware = RequestIdMiddleware = __decorate([
+    (0, common_1.Injectable)()
+], RequestIdMiddleware);
+//# sourceMappingURL=request-id.middleware.js.map

package/dist/host/http/request-id.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-id.middleware.js","sourceRoot":"","sources":["../../../src/host/http/request-id.middleware.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4D;AAG5D,4CAAoD;AACpD,6CAAyC;AAUzC;;;;;;;GAOG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B;;;;;;OAMG;IACH,GAAG,CAAC,GAAsF,EAAE,GAAmB,EAAE,IAAgB;QAC/H,6BAA6B;QAC7B,MAAM,SAAS,GACZ,GAAG,CAAC,OAAO,CAAC,cAAc,CAAY,IAAI,IAAA,wBAAU,GAAE,CAAC;QAE1D,uCAAuC;QACvC,MAAM,UAAU,GAAG,WAAK,CAAC,OAAO,CAAC,aAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,EAAE,CAAC;QAE9C,2DAA2D;QAC1D,GAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACnC,IAAI,WAAW,EAAE,CAAC;YACf,GAAW,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YAC1C,GAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAC3C,CAAC;QAED,yCAAyC;QACzC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AAhCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;GACA,mBAAmB,CAgC/B"}

package/dist/host/http/response-meta.registry.d.ts

@@ -0,0 +1,62 @@
+import { type Registry } from '../../core/index';
+/**
+ * The id pattern of a response meta contributor: lower-case, 2 to 48
+ * characters, starting with a letter (`api-revision`).
+ *
+ * @stability experimental
+ */
+export declare const RESPONSE_META_CONTRIBUTOR_ID_PATTERN: RegExp;
+/**
+ * What a contributor receives: the incoming request, as the HTTP adapter gives
+ * it (treat it as read-only).
+ *
+ * @stability experimental
+ */
+export type ResponseMetaRequest = Readonly<Record<string, unknown>>;
+/**
+ * One response meta contributor.
+ *
+ * @stability experimental
+ */
+export interface ResponseMetaContributorDef {
+    /** The id, for logs. See {@link RESPONSE_META_CONTRIBUTOR_ID_PATTERN}. */
+    readonly id: string;
+    /**
+     * The facts to merge into `meta` for this response. Synchronous and cheap.
+     *
+     * @param request - the incoming request (read-only).
+     * @returns the extra `meta` entries.
+     */
+    contribute(request: ResponseMetaRequest): Record<string, unknown>;
+}
+/**
+ * Every registered response meta contributor, in registration order. Frozen
+ * when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare const responseMetaContributorRegistry: Registry<ResponseMetaContributorDef>;
+/**
+ * Registers a response meta contributor. Call it at module load, before the
+ * application is created; a duplicate id throws.
+ *
+ * Pass a definition `{ id, contribute }`, or a bare function whose name is the
+ * id (converted from camelCase, so a function named `apiRevision` registers as
+ * `api-revision`).
+ *
+ * @param contributor - the definition or the function.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ * @throws Error when a bare function has no name.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerResponseMetaContributor({ id: 'api-revision', contribute: () => ({ apiRevision: 4 }) });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerResponseMetaContributor(contributor: ResponseMetaContributorDef | ((request: ResponseMetaRequest) => Record<string, unknown>)): void;
+//# sourceMappingURL=response-meta.registry.d.ts.map

package/dist/host/http/response-meta.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-meta.registry.d.ts","sourceRoot":"","sources":["../../../src/host/http/response-meta.registry.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,QAA2B,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CAAC,0BAA0B,CAU7E,CAAC;AAEL;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,0BAA0B,GAAG,CAAC,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACpG,IAAI,CAUN"}

package/dist/host/http/response-meta.registry.js

@@ -0,0 +1,86 @@
+"use strict";
+// =============================================================================
+// The response `meta` contributor registry (PP-14.13)
+// =============================================================================
+//
+// Every successful JSON body is wrapped as `{ data, meta: { timestamp } }`
+// (`TransformInterceptor`). An app that wants more facts on every response (an
+// API revision, the serving region, a correlation id of its own) registers a
+// contributor; the interceptor merges what each returns into `meta`.
+//
+// THE RULES ARE ENFORCED HERE, because `meta` is on EVERY response, including
+// public ones:
+//
+//   * a contributor runs SYNCHRONOUSLY on the response path: no I/O, no await;
+//   * `timestamp` is the platform's and cannot be overridden;
+//   * keys are bounded (a short alphanumeric name, at most 8 per contributor
+//     and 16 in total) and credential-looking names are dropped;
+//   * a value must be JSON and, serialised, at most 512 characters; anything
+//     else is dropped;
+//   * a contributor that throws is skipped for that response (and logged at
+//     debug), never turned into a failed request.
+//
+// An extension must still never put a secret, a user's data or a stack trace in
+// `meta`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.responseMetaContributorRegistry = exports.RESPONSE_META_CONTRIBUTOR_ID_PATTERN = void 0;
+exports.registerResponseMetaContributor = registerResponseMetaContributor;
+const index_1 = require("../../core/index");
+/**
+ * The id pattern of a response meta contributor: lower-case, 2 to 48
+ * characters, starting with a letter (`api-revision`).
+ *
+ * @stability experimental
+ */
+exports.RESPONSE_META_CONTRIBUTOR_ID_PATTERN = /^[a-z][a-z0-9-]{1,47}$/;
+/**
+ * Every registered response meta contributor, in registration order. Frozen
+ * when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.responseMetaContributorRegistry = (0, index_1.defineRegistry)({
+    name: 'host.response-meta-contributors',
+    idOf: (contributor) => contributor.id,
+    idPattern: exports.RESPONSE_META_CONTRIBUTOR_ID_PATTERN,
+    validate: (contributor) => {
+        if (typeof contributor.contribute !== 'function') {
+            throw new Error(`response meta contributor "${contributor.id}": contribute must be a function`);
+        }
+    },
+});
+/**
+ * Registers a response meta contributor. Call it at module load, before the
+ * application is created; a duplicate id throws.
+ *
+ * Pass a definition `{ id, contribute }`, or a bare function whose name is the
+ * id (converted from camelCase, so a function named `apiRevision` registers as
+ * `api-revision`).
+ *
+ * @param contributor - the definition or the function.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ * @throws Error when a bare function has no name.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerResponseMetaContributor({ id: 'api-revision', contribute: () => ({ apiRevision: 4 }) });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerResponseMetaContributor(contributor) {
+    if (typeof contributor === 'function') {
+        const id = contributor.name.replace(/([a-z0-9])([A-Z])/g, '$1-$2').toLowerCase();
+        if (id === '') {
+            throw new Error('registerResponseMetaContributor: an anonymous function has no id; name the function or pass { id, contribute }');
+        }
+        exports.responseMetaContributorRegistry.register({ id, contribute: contributor });
+        return;
+    }
+    exports.responseMetaContributorRegistry.register(contributor);
+}
+//# sourceMappingURL=response-meta.registry.js.map

package/dist/host/http/response-meta.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-meta.registry.js","sourceRoot":"","sources":["../../../src/host/http/response-meta.registry.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,eAAe;AACf,EAAE;AACF,+EAA+E;AAC/E,8DAA8D;AAC9D,6EAA6E;AAC7E,iEAAiE;AACjE,6EAA6E;AAC7E,uBAAuB;AACvB,4EAA4E;AAC5E,kDAAkD;AAClD,EAAE;AACF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;;;AA6EhF,0EAYC;AAvFD,4CAAiE;AAEjE;;;;;GAKG;AACU,QAAA,oCAAoC,GAAG,wBAAwB,CAAC;AA2B7E;;;;;;GAMG;AACU,QAAA,+BAA+B,GAC1C,IAAA,sBAAc,EAA6B;IACzC,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE;IACrC,SAAS,EAAE,4CAAoC;IAC/C,QAAQ,EAAE,CAAC,WAAW,EAAE,EAAE;QACxB,IAAI,OAAO,WAAW,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEL;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,+BAA+B,CAC7C,WAAqG;IAErG,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACjF,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC;QACpI,CAAC;QACD,uCAA+B,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,uCAA+B,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC"}

package/dist/host/http/transform.interceptor.d.ts

@@ -0,0 +1,77 @@
+import { NestInterceptor, ExecutionContext, CallHandler } from '@nestjs/common';
+import { Observable } from 'rxjs';
+/**
+ * The most keys one contributor may add to `meta`.
+ *
+ * @stability experimental
+ */
+export declare const RESPONSE_META_MAX_KEYS_PER_CONTRIBUTOR = 8;
+/**
+ * The most keys contributors may add to `meta` in total.
+ *
+ * @stability experimental
+ */
+export declare const RESPONSE_META_MAX_KEYS = 16;
+/**
+ * The longest a contributed value may be once serialised as JSON.
+ *
+ * @stability experimental
+ */
+export declare const RESPONSE_META_MAX_VALUE_LENGTH = 512;
+/**
+ * The `meta` of one enveloped response.
+ *
+ * @stability experimental
+ */
+export interface ResponseMeta {
+    /** When the response was built (ISO 8601). */
+    timestamp: string;
+    /** What the registered contributors added. */
+    [key: string]: unknown;
+}
+/**
+ * Builds `meta` for one response: the timestamp, then the entries the
+ * registered contributors returned. A contributor that throws is skipped. The
+ * platform's `timestamp` cannot be overridden; a key beyond the limits, a
+ * credential-looking key, and a value that is not JSON or serialises to more
+ * than {@link RESPONSE_META_MAX_VALUE_LENGTH} characters are dropped.
+ *
+ * @param request - the incoming request, passed to each contributor.
+ * @returns the `meta` object.
+ *
+ * @stability experimental
+ */
+export declare function buildResponseMeta(request: unknown): ResponseMeta;
+/**
+ * The envelope every successful JSON response is wrapped in.
+ *
+ * @typeParam T - the handler's return type.
+ * @stability experimental
+ */
+export interface ApiEnvelope<T> {
+    /** The handler's return value. */
+    data: T;
+    /** Server facts about the response. */
+    meta?: {
+        /** When the response was built (ISO 8601). */
+        timestamp: string;
+        [key: string]: unknown;
+    };
+}
+/**
+ * Wraps every successful JSON body in the `{ data, meta }` envelope.
+ *
+ * @typeParam T - the handler's return type.
+ * @stability experimental
+ */
+export declare class TransformInterceptor<T> implements NestInterceptor<T, ApiEnvelope<T>> {
+    /**
+     * Wraps the handler's value, or passes an SSE stream through untouched.
+     *
+     * @param context - the Nest execution context.
+     * @param next - the handler.
+     * @returns the enveloped stream.
+     */
+    intercept(context: ExecutionContext, next: CallHandler): Observable<ApiEnvelope<T>>;
+}
+//# sourceMappingURL=transform.interceptor.d.ts.map

package/dist/host/http/transform.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.interceptor.d.ts","sourceRoot":"","sources":["../../../src/host/http/transform.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAqBlC;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAgChE;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,kCAAkC;IAClC,IAAI,EAAE,CAAC,CAAC;IACR,uCAAuC;IACvC,IAAI,CAAC,EAAE;QACL,8CAA8C;QAC9C,SAAS,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;;;;GAKG;AACH,qBACa,oBAAoB,CAAC,CAAC,CACjC,YAAW,eAAe,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAE7C;;;;;;OAMG;IACH,SAAS,CACP,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,WAAW,GAChB,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;CAgD9B"}

package/dist/host/http/transform.interceptor.js

@@ -0,0 +1,161 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TransformInterceptor = exports.RESPONSE_META_MAX_VALUE_LENGTH = exports.RESPONSE_META_MAX_KEYS = exports.RESPONSE_META_MAX_KEYS_PER_CONTRIBUTOR = void 0;
+exports.buildResponseMeta = buildResponseMeta;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("@nestjs/common/constants");
+const operators_1 = require("rxjs/operators");
+const bounded_1 = require("../internal/bounded");
+const response_meta_registry_1 = require("./response-meta.registry");
+// =============================================================================
+// The `{ data }` response envelope (packaged in the host slice by #867)
+// =============================================================================
+//
+// Registered as a global `APP_INTERCEPTOR` by `PlatformHostCoreModule.forRoot()`.
+// Every successful JSON body is wrapped as `{ data, meta: { timestamp } }`,
+// except a body that already carries a `data` key and an `@Sse()` stream.
+// `applyDataEnvelope` (../openapi/data-envelope.ts) documents the same rule in
+// the OpenAPI document, so the two cannot drift.
+//
+// `meta` may carry more than the timestamp: an app registers a contributor
+// (`registerResponseMetaContributor`) and its entries are merged in, bounded
+// and secret-filtered (`buildResponseMeta`).
+// =============================================================================
+/**
+ * The most keys one contributor may add to `meta`.
+ *
+ * @stability experimental
+ */
+exports.RESPONSE_META_MAX_KEYS_PER_CONTRIBUTOR = 8;
+/**
+ * The most keys contributors may add to `meta` in total.
+ *
+ * @stability experimental
+ */
+exports.RESPONSE_META_MAX_KEYS = 16;
+/**
+ * The longest a contributed value may be once serialised as JSON.
+ *
+ * @stability experimental
+ */
+exports.RESPONSE_META_MAX_VALUE_LENGTH = 512;
+/**
+ * Builds `meta` for one response: the timestamp, then the entries the
+ * registered contributors returned. A contributor that throws is skipped. The
+ * platform's `timestamp` cannot be overridden; a key beyond the limits, a
+ * credential-looking key, and a value that is not JSON or serialises to more
+ * than {@link RESPONSE_META_MAX_VALUE_LENGTH} characters are dropped.
+ *
+ * @param request - the incoming request, passed to each contributor.
+ * @returns the `meta` object.
+ *
+ * @stability experimental
+ */
+function buildResponseMeta(request) {
+    const meta = { timestamp: new Date().toISOString() };
+    const contributors = response_meta_registry_1.responseMetaContributorRegistry.list();
+    if (contributors.length === 0)
+        return meta;
+    const view = (request ?? {});
+    let total = 0;
+    for (const contributor of contributors) {
+        let contributed;
+        try {
+            contributed = contributor.contribute(view);
+        }
+        catch {
+            continue;
+        }
+        if (contributed === null || typeof contributed !== 'object' || Array.isArray(contributed))
+            continue;
+        let own = 0;
+        for (const [key, value] of Object.entries(contributed)) {
+            if (own >= exports.RESPONSE_META_MAX_KEYS_PER_CONTRIBUTOR || total >= exports.RESPONSE_META_MAX_KEYS)
+                break;
+            if (key === 'timestamp' || key in meta || !(0, bounded_1.isReportableKey)(key))
+                continue;
+            let serialised;
+            try {
+                serialised = JSON.stringify(value);
+            }
+            catch {
+                serialised = undefined;
+            }
+            if (serialised === undefined || serialised.length > exports.RESPONSE_META_MAX_VALUE_LENGTH)
+                continue;
+            meta[key] = JSON.parse(serialised);
+            own += 1;
+            total += 1;
+        }
+    }
+    return meta;
+}
+/**
+ * Wraps every successful JSON body in the `{ data, meta }` envelope.
+ *
+ * @typeParam T - the handler's return type.
+ * @stability experimental
+ */
+let TransformInterceptor = class TransformInterceptor {
+    /**
+     * Wraps the handler's value, or passes an SSE stream through untouched.
+     *
+     * @param context - the Nest execution context.
+     * @param next - the handler.
+     * @returns the enveloped stream.
+     */
+    intercept(context, next) {
+        // -------------------------------------------------------------------------
+        // SSE HANDLERS ARE NOT ENVELOPED (issue #127, epic #109)
+        // -------------------------------------------------------------------------
+        //
+        // An `@Sse()` handler returns an Observable of `MessageEvent`s, and this
+        // interceptor sits between it and the framework's `SseStream` — so without
+        // this guard the map below runs once PER EVENT, not once per response.
+        //
+        // The damage is not hypothetical and it is not cosmetic. A heartbeat is a
+        // COMMENT-ONLY message, `{ comment: 'heartbeat' }`, which has no `data`
+        // key — so the passthrough test below misses it and it gets wrapped into
+        // `{ data: { comment: 'heartbeat' }, meta: … }`. `SseStream` then writes
+        // that as a real `data:` frame, and every client's `onmessage` fires for
+        // what was supposed to be an invisible keep-alive. The heartbeat stops
+        // being a heartbeat and becomes a notification-shaped object arriving
+        // every 25 seconds.
+        //
+        // Data-carrying frames survive by luck rather than design (a `MessageEvent`
+        // happens to have a `data` key, so the passthrough returns it untouched),
+        // and relying on that coincidence for a security-relevant transport is not
+        // acceptable. The envelope is a REQUEST/RESPONSE convention — one body,
+        // one `meta.timestamp` — and an SSE stream is neither.
+        //
+        // Keyed on Nest's OWN `@Sse()` metadata rather than a route allowlist, so
+        // any SSE endpoint added later is correct without anybody remembering this
+        // file exists.
+        const isSse = Reflect.getMetadata(constants_1.SSE_METADATA, context.getHandler());
+        if (isSse) {
+            return next.handle();
+        }
+        const request = context.switchToHttp().getRequest();
+        return next.handle().pipe((0, operators_1.map)((data) => {
+            // If already wrapped, return as-is
+            if (data && typeof data === 'object' && 'data' in data) {
+                return data;
+            }
+            return {
+                data,
+                meta: buildResponseMeta(request),
+            };
+        }));
+    }
+};
+exports.TransformInterceptor = TransformInterceptor;
+exports.TransformInterceptor = TransformInterceptor = __decorate([
+    (0, common_1.Injectable)()
+], TransformInterceptor);
+//# sourceMappingURL=transform.interceptor.js.map

package/dist/host/http/transform.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.interceptor.js","sourceRoot":"","sources":["../../../src/host/http/transform.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAyEA,8CAgCC;AAzGD,2CAKwB;AACxB,wDAAwD;AAExD,8CAAqC;AAErC,iDAAsD;AACtD,qEAA2E;AAE3E,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,EAAE;AACF,kFAAkF;AAClF,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,6CAA6C;AAC7C,gFAAgF;AAEhF;;;;GAIG;AACU,QAAA,sCAAsC,GAAG,CAAC,CAAC;AAExD;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,EAAE,CAAC;AAEzC;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,GAAG,CAAC;AAclD;;;;;;;;;;;GAWG;AACH,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,GAAiB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,wDAA+B,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAsC,CAAC;IAClE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,SAAS;QACpG,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC,EAAE,CAAC;YAClF,IAAI,GAAG,IAAI,8CAAsC,IAAI,KAAK,IAAI,8BAAsB;gBAAE,MAAM;YAC5F,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAA,yBAAe,EAAC,GAAG,CAAC;gBAAE,SAAS;YAC1E,IAAI,UAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,SAAS,CAAC;YACzB,CAAC;YACD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,sCAA8B;gBAAE,SAAS;YAC7F,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;YAC9C,GAAG,IAAI,CAAC,CAAC;YACT,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAmBD;;;;;GAKG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAG/B;;;;;;OAMG;IACH,SAAS,CACP,OAAyB,EACzB,IAAiB;QAEjB,4EAA4E;QAC5E,yDAAyD;QACzD,4EAA4E;QAC5E,EAAE;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,EAAE;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,oBAAoB;QACpB,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,uDAAuD;QACvD,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,eAAe;QACf,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,wBAAY,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAgC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAEpD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,eAAG,EAAC,CAAC,IAAI,EAAE,EAAE;YACX,mCAAmC;YACnC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC;aACjC,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA7DY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CA6DhC"}

package/dist/host/index.d.ts

@@ -0,0 +1,83 @@
+export { PlatformHostCoreModule } from './host-core.module';
+export { PLATFORM_HOST_CORE_OPTIONS, resolvePlatformHostCoreOptions } from './host-core.options';
+export type { PlatformHostCoreImport, PlatformHostCoreOptions, PlatformHostCorePermissions, ResolvedPlatformHostCoreOptions, } from './host-core.options';
+export { BUILTIN_EVENT_BUS_ADAPTERS, EVENT_BUS, EVENT_BUS_ADAPTERS, EVENT_BUS_CHANNEL_PATTERN, EVENT_BUS_MAX_PAYLOAD_BYTES, EventBusPayloadTooLargeError, } from './event-bus/event-bus.interface';
+export type { BuiltinEventBusAdapterName, EventBus, EventBusAdapterName, EventBusHandler, EventBusHealth, EventBusMeta, } from './event-bus/event-bus.interface';
+export { exceedsEventBusPayloadLimit } from './event-bus/event-bus-core';
+export { BOUND_EVENT_BUS_SELECTION, DEFAULT_EVENT_BUS_ADAPTER, EVENT_BUS_SELECTION, parseEventBusAdapter, } from './event-bus/event-bus.config';
+export type { EventBusSelection } from './event-bus/event-bus.config';
+export { EVENT_BUS_APP_METRICS, NOOP_EVENT_BUS_METRICS, eventBusMetricsVia } from './event-bus/event-bus.metrics';
+export type { EventBusAppMetricDef, EventBusAppMetricKey, EventBusMetrics, EventBusPublishOutcome } from './event-bus/event-bus.metrics';
+export { InProcessEventBus } from './event-bus/in-process-event-bus';
+export { EVENT_BUS_ADAPTER_ID_PATTERN, eventBusAdapterRegistry, registerEventBusAdapter, unknownEventBusAdapterError, } from './event-bus/event-bus-adapter.registry';
+export type { EventBusAdapterContext, EventBusAdapterDef } from './event-bus/event-bus-adapter.registry';
+export { IN_PROCESS_EVENT_BUS_ADAPTER, POSTGRES_EVENT_BUS_ADAPTER } from './event-bus/builtin-event-bus-adapters';
+export { DEFAULT_INITIAL_BACKOFF_MS, DEFAULT_MAX_BACKOFF_MS, EVENT_BUS_LISTENER_APPLICATION_NAME, EVENT_BUS_PG_CHANNEL, PostgresEventBus, eventBusBackoffMs, } from './event-bus/postgres-event-bus';
+export type { EventBusListenerClient, EventBusListenerQueryResult, EventBusSqlPublisher, PostgresEventBusOptions, } from './event-bus/postgres-event-bus';
+export { BUILTIN_DEPLOYMENT_MODES, DEFAULT_DEPLOYMENT_MODE, DEPLOYMENT_CAPABILITY_ID_PATTERN, DEPLOYMENT_MODES, DEPLOYMENT_MODE_ENV_VAR, DEPLOYMENT_MODE_ID_PATTERN, capabilitiesFor, deploymentCapabilityRegistry, deploymentModeRegistry, describeDeploymentMode, parseDeploymentMode, registerDeploymentCapability, registerDeploymentMode, verifyDeploymentModeAtStartup, } from './deployment/deployment-mode';
+export type { BuiltinDeploymentMode, DeploymentCapabilities, DeploymentCapabilityDef, DeploymentMode, DeploymentModeDef, } from './deployment/deployment-mode';
+export { DEPLOYMENT_MODE_CONFIG_KEY, DeploymentModeService } from './deployment/deployment-mode.service';
+export { DEFAULT_DEPLOYMENT_NETWORK, DEPLOYMENT_NETWORK_ENV_VAR, describeDeploymentNetwork, parseDeploymentNetwork, verifyDeploymentNetworkAtStartup, } from './deployment/deployment-network';
+export { DEPLOYMENT_NETWORK_CONFIG_KEY, DeploymentNetworkService } from './deployment/deployment-network.service';
+export { DB_SLOW_LATENCY_MS, DbConnectionDoctorCheck } from './doctor/db-connection.doctor-check';
+export { DbMigrationsDoctorCheck, decideMigrations } from './doctor/db-migrations.doctor-check';
+export type { MigrationState } from './doctor/db-migrations.doctor-check';
+export { DeploymentModeDoctorCheck, decideDeploymentMode } from './doctor/deployment-mode.doctor-check';
+export type { DeploymentModeFacts } from './doctor/deployment-mode.doctor-check';
+export { EncryptionKeyDoctorCheck } from './doctor/encryption-key.doctor-check';
+export { RlsRoleDoctorCheck, decideRlsRole } from './doctor/rls-role.doctor-check';
+export type { RlsRoleFacts } from './doctor/rls-role.doctor-check';
+export { APP_METRICS_OPTIONS, AppMetricsService, GAUGE_CACHE_TTL_MS, createRegisteredGauge, fallbackAppMetrics, } from './metrics/app-metrics.service';
+export type { AiUsageMetric, AppMetricKey, AppMetricsFindFirstDelegate, AppMetricsGaugeClient, AppMetricsGroupByDelegate, GaugeBackupLastSuccess, GaugeDepthRow, GaugeOldestPendingRow, AppMetricsOptions, AuthLoginOutcome, AuthRefreshOutcome, BackupOutcome, GaugeSnapshot, JobExecutorLabel, JobReapOutcome, NotificationDeliveryOutcome, } from './metrics/app-metrics.service';
+export { PLATFORM_APP_METRICS } from './metrics/platform-app-metrics';
+export type { PlatformAppMetricDef, PlatformAppMetricKey } from './metrics/platform-app-metrics';
+export { registerPlatformHostAppMetrics } from './metrics/register';
+export { MAINTENANCE_AUDIT_DISABLE, MAINTENANCE_AUDIT_ENABLE, MAINTENANCE_AUDIT_TARGET_ID, MAINTENANCE_AUDIT_TARGET_TYPE, MAINTENANCE_PERSISTED_CACHE_MS, MaintenanceModeService, } from './maintenance/maintenance-mode.service';
+export type { MaintenanceEnvLayer, MaintenanceLayers, MaintenanceMemoryLayer, MaintenancePersistedLayer, MaintenanceOverride, MaintenanceSource, MaintenanceStatus, SetMaintenanceInput, } from './maintenance/maintenance-mode.service';
+export { MAINTENANCE_ERROR_MARKER, MAINTENANCE_RETRY_AFTER_SECONDS, MaintenanceGuard, OPAQUE_BEARER_PREFIXES, } from './maintenance/maintenance.guard';
+export { MAINTENANCE_BYPASS_ID_PATTERN, MAINTENANCE_BYPASS_TIMEOUT_MS, maintenanceBypassRegistry, registerMaintenanceBypass, } from './maintenance/maintenance-bypass.registry';
+export type { MaintenanceBypassDef, MaintenanceBypassPrincipal, MaintenanceBypassRequest, } from './maintenance/maintenance-bypass.registry';
+export { DEFAULT_MAINTENANCE_READ_PERMISSION, DEFAULT_MAINTENANCE_WRITE_PERMISSION, MaintenanceController, createMaintenanceController, } from './maintenance/maintenance.controller';
+export type { MaintenanceControllerClass, MaintenanceControllerInstance, MaintenanceControllerOptions, } from './maintenance/maintenance.controller';
+export { MaintenanceStatusDto, UpdateMaintenanceDto, maintenanceStatusSchema, updateMaintenanceSchema, } from './maintenance/dto/update-maintenance.dto';
+export { MAINTENANCE_SYSTEM_SETTINGS, mergeMaintenanceSettings } from './maintenance/maintenance.system-settings';
+export { DEFAULT_MAINTENANCE_MESSAGE, maintenanceResponseSchema, maintenanceSettingsPatchSchema, maintenanceSettingsSchema, systemMaintenancePatchSchema, systemMaintenanceSchema, } from './maintenance/maintenance.schemas';
+export type { HostEnum, SystemMaintenanceValue } from './maintenance/maintenance.schemas';
+export { RESPONSE_META_MAX_KEYS, RESPONSE_META_MAX_KEYS_PER_CONTRIBUTOR, RESPONSE_META_MAX_VALUE_LENGTH, TransformInterceptor, buildResponseMeta, } from './http/transform.interceptor';
+export type { ResponseMeta } from './http/transform.interceptor';
+export type { ApiEnvelope } from './http/transform.interceptor';
+export { RESPONSE_META_CONTRIBUTOR_ID_PATTERN, registerResponseMetaContributor, responseMetaContributorRegistry, } from './http/response-meta.registry';
+export type { ResponseMetaContributorDef, ResponseMetaRequest } from './http/response-meta.registry';
+export { LoggingInterceptor } from './http/logging.interceptor';
+export { RequestIdMiddleware } from './http/request-id.middleware';
+export { InvalidCorsOriginError, buildCorsOptions, isSameOriginOnly } from './http/cors-options';
+export type { AllowlistCorsOptions, CorsOptions, ExtraCorsOptions, SameOriginCorsOptions } from './http/cors-options';
+export { HEALTH_INDICATOR_DEFAULT_TIMEOUT_MS, HEALTH_INDICATOR_ID_PATTERN, HEALTH_INDICATOR_MAX_TIMEOUT_MS, healthIndicatorRegistry, registerHealthIndicator, } from './health/health-indicator.registry';
+export type { HealthIndicatorContext, HealthIndicatorDef, HealthIndicatorOutcome, } from './health/health-indicator.registry';
+export { DATABASE_HEALTH_INDICATOR, DATABASE_HEALTH_INDICATOR_ID } from './health/builtin-health-indicators';
+export { HealthController, createHealthController } from './health/health.controller';
+export type { HealthControllerClass, HealthControllerInstance, LivenessResult, TimestampedHealthResult, } from './health/health.controller';
+export { HealthIndicatorRunner } from './health/health-indicator.runner';
+export { DatabaseHealthIndicator } from './health/database.indicator';
+export { SECURITY_SCHEMES, buildOpenApiConfig, buildOperationId, createOpenApiDocument, enrichOpenApiDocument, isAuthenticatedOperation, resolveOpenApiVersion, } from './openapi/document';
+export type { PlatformOpenApiOptions } from './openapi/document';
+export { buildApiDescription } from './openapi/description';
+export type { ApiDescriptionIdentity } from './openapi/description';
+export { DOCS_PATH, DOCS_UNAVAILABLE_MESSAGE, OPENAPI_JSON_PATH, OPENAPI_UNAVAILABLE_CODE, registerDocsRoutes, registerDocsRoutesOrDegrade, registerPlatformDocs, } from './openapi/register-docs-routes';
+export type { DocsHostApplication, DocsHttpAdapter, DocsHttpServer, DocsLogger, DocsRoutesOptions } from './openapi/register-docs-routes';
+export { DEFAULT_SCALAR_CDN, SESSION_SECURITY_SCHEME, buildDocsAuthScript, renderDocsPage, renderDocsUnavailablePage, } from './openapi/docs-page';
+export type { DocsPageOptions, DocsUnavailablePageOptions } from './openapi/docs-page';
+export { resolveApiVersion } from './openapi/version';
+export { REQUIREMENTS_MARKER } from './openapi/rbac-docs';
+export { HTTP_METHODS, forEachOperation } from './openapi/types';
+export type { DocOperation, DocPathItem, MutableDocument } from './openapi/types';
+export { AboutModule } from './about/about.module';
+export type { AboutModuleOptions } from './about/about.options';
+export { ABOUT_CONTRIBUTOR_ID_PATTERN, ABOUT_CONTRIBUTOR_TIMEOUT_MS, aboutContributorRegistry, registerAboutContributor, } from './about/about-contributor.registry';
+export type { AboutContributorDef } from './about/about-contributor.registry';
+export type { BoundedFacts, BoundedFactValue } from './internal/bounded';
+export { AboutService } from './about/about.service';
+export { AboutController, DEFAULT_ABOUT_PERMISSION, createAboutController } from './about/about.controller';
+export type { AboutControllerClass, AboutControllerInstance, AboutControllerOptions } from './about/about.controller';
+export { DEFAULT_DEPLOY_INFO_PATH, readDeployInfo, resolveDeployInfoPath } from './about/deploy-info';
+//# sourceMappingURL=index.d.ts.map

package/dist/host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACjG,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,0BAA0B,EAC1B,SAAS,EACT,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,0BAA0B,EAC1B,QAAQ,EACR,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAClH,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACzI,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACzG,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AAClH,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,gCAAgC,EAChC,gBAAgB,EAChB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,4BAA4B,EAC5B,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACzG,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,EACtB,gCAAgC,GACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAClH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAChG,YAAY,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AACxG,YAAY,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACnF,YAAY,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAGnE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,aAAa,EACb,YAAY,EACZ,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAGpE,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,mCAAmC,EACnC,oCAAoC,EACpC,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAClH,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAG1F,OAAO,EACL,sBAAsB,EACtB,sCAAsC,EACtC,8BAA8B,EAC9B,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EACL,oCAAoC,EACpC,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACrG,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACjG,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAGtH,OAAO,EACL,mCAAmC,EACnC,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAE7G,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACtF,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EACd,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAGtE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,SAAS,EACT,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAC1I,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACjE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC5G,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACtH,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}