@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/email/email-settings.service.js

@@ -0,0 +1,570 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var EmailSettingsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailSettingsService = exports.EMAIL_SETTINGS_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const index_1 = require("../core/index");
+const index_2 = require("../credentials/index");
+const index_3 = require("../settings/index");
+const email_settings_schema_1 = require("./email-settings.schema");
+const email_settings_compat_1 = require("./email-settings-compat");
+const email_transport_1 = require("./transports/email-transport");
+/**
+ * The stored row read RAW (any JSON), so this service decides what an invalid
+ * value means: the send path throws, the admin view degrades and reports it.
+ * The row store's own salvage would hide the corruption from both.
+ */
+const RAW_ROW = zod_1.z.unknown();
+// =============================================================================
+// EmailSettingsService — where email configuration is read from (issue #122)
+// =============================================================================
+//
+// WHERE THESE SETTINGS LIVE, AND WHY
+//
+// Since #737 every read and write goes through the settings slice's
+// `SystemSettingsRowStore` (version counter, `If-Match`, audit), never the
+// table directly. The row key `'email'` is PERMANENT: deployed databases hold
+// their configuration under it.
+//
+// In the existing `system_settings` table, as epic #109 and issue #122 call
+// for — but in a row of its OWN, under key 'email', NOT inside the 'global'
+// row's blob. No new table, no migration; `system_settings.key` is already
+// `@unique` and the table is already keyed for exactly this.
+//
+// The reason it is not inside the 'global' blob is not taste, it is that the
+// blob would eat it. `SystemSettingsService` rebuilds that value field by
+// field on every write:
+//
+//   • replaceSettings (PUT)  → `systemSettingsSchema.parse(dto)`, and zod
+//                              STRIPS unknown keys, so anything not in that
+//                              schema is dropped from the stored object.
+//   • patchSettings (PATCH)  → hand-builds `merged` from the modelled
+//                              namespaces, which discards every other key
+//                              even on a partial update.
+//
+// So an `email` key inside the 'global' blob would be silently destroyed the
+// next time an admin saved an unrelated general setting — mail stops working,
+// nothing in the audit trail explains why, and the admin's action ("I toggled
+// an unrelated setting") has no visible connection to the outcome ("email is
+// unconfigured"). Widening `systemSettingsSchema` does not fix it: a PUT whose
+// DTO omits `email` still stores an object without it.
+//
+// A separate row makes that impossible: the two settings surfaces write
+// different rows, and neither can clobber the other. It also keeps SMTP host
+// and username out of `GET /api/system-settings`' response, which is a smaller
+// blast radius for no extra cost, and it gives #124's page its own version
+// counter for optimistic concurrency instead of sharing one with a page that
+// has nothing to do with email.
+//
+// #124 owns the WRITE path and adds it here, next to this read, so both halves
+// of "what is the email configuration" stay in one file. That write path also
+// routes the SMTP PASSWORD -- to `CredentialsService`, never into the blob --
+// for the reason spelled out on `update` below.
+// =============================================================================
+/**
+ * The `system_settings.key` this configuration is stored under. PERMANENT:
+ * renaming it orphans every deployment's stored email configuration.
+ *
+ * @stability stable
+ */
+exports.EMAIL_SETTINGS_KEY = 'email';
+/**
+ * A zod failure rendered as the list of field paths that failed.
+ *
+ * PATHS, NEVER VALUES, and the two callers both depend on that: one logs the
+ * result and one returns it to an admin. `zod`'s own `message` strings can
+ * quote the received value, so the issue objects are never stringified
+ * wholesale. There is no secret in this schema today -- there is a
+ * compile-time proof of that in email-settings.schema.ts -- and this function
+ * is what keeps the claim true if the schema ever grows.
+ */
+function describeInvalidPaths(error) {
+    return error.issues
+        .map((issue) => issue.path.join('.') || '(root)')
+        .join(', ');
+}
+/**
+ * Drop the settings fields an admin left empty.
+ *
+ * An HTML form cannot express "absent": a cleared input submits `''`, and a
+ * reset controlled component submits `null`. Every optional field in
+ * `emailSettingsSchema` expresses "not configured" as the KEY BEING MISSING
+ * (`.min(1)` on the strings, so `''` is a validation error rather than a
+ * value). Without this step, an admin switching from SMTP to SES could not
+ * save without first inventing a value for a field they are abandoning.
+ *
+ * `provider` IS EXEMPT: `null` there is a real, persisted state -- "no
+ * transport chosen" -- and stripping it would drop a required key and fail the
+ * parse. That distinction is the whole reason this is an explicit function
+ * rather than a blanket falsy filter.
+ *
+ * The SMTP PASSWORD never reaches here: it is destructured off in `update`
+ * before this is called. `''` there means "keep the stored one" and must
+ * survive intact; putting it through this function would convert it to
+ * "absent", which is the same thing to `CredentialsService` today but is a
+ * coincidence, not a contract, and not one worth depending on.
+ */
+function stripUnsetSettingFields(input) {
+    const out = {};
+    for (const [key, value] of Object.entries(input)) {
+        if (key === 'provider') {
+            out[key] = value;
+            continue;
+        }
+        if (value === '' || value === null)
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+/**
+ * Is this submission "I did not retype the secret"?
+ *
+ * Mirrors `CredentialsService.isBlankSecret` exactly, including the ABSENCE of
+ * `.trim()`: a passphrase whose surrounding whitespace is significant is a
+ * real secret, and silently altering its bytes produces an authentication
+ * failure with no visible cause.
+ *
+ * Shared by the SMTP password and the SES secret access key: it exists only
+ * to decide WHETHER TO CALL `setSecret` at all (see `update`); the preserve
+ * behaviour itself belongs to the store and is not reimplemented. If this
+ * definition and the store's ever need to differ, that is a bug in this one.
+ */
+function isBlankSecret(value) {
+    return value === undefined || value === null || value === '';
+}
+/**
+ * The secrets a PUT body asks to store: `secrets.<transport>.<name>` for any
+ * transport, plus the two legacy aliases (`smtpPassword`, `sesSecretAccessKey`),
+ * which `secrets` overrides. A BLANK value is not a write (blank preserves the
+ * stored secret), but a secret NAME no registered transport declares is a 400
+ * either way, so a typo is never silently ignored.
+ */
+function collectSecretWrites(input) {
+    const typed = new Map();
+    const put = (transport, name, value) => {
+        if (isBlankSecret(value))
+            return;
+        if (!typed.has(transport))
+            typed.set(transport, new Map());
+        typed.get(transport)?.set(name, value);
+    };
+    put('smtp', 'password', input.smtpPassword);
+    put('ses', 'secretAccessKey', input.sesSecretAccessKey);
+    for (const [transport, values] of Object.entries(input.secrets ?? {})) {
+        if (!email_transport_1.emailTransportKind.has(transport))
+            (0, email_settings_compat_1.unknownTransportRejection)(transport);
+        const definition = (0, email_transport_1.requireEmailTransport)(transport);
+        const declared = (definition.secrets ?? []).map((spec) => spec.name);
+        for (const [name, value] of Object.entries(values)) {
+            if (!declared.includes(name))
+                (0, email_settings_compat_1.unknownSecretRejection)(transport, name, declared);
+            put(transport, name, value);
+        }
+    }
+    const writes = [];
+    for (const [transport, values] of typed) {
+        if (!email_transport_1.emailTransportKind.has(transport))
+            continue;
+        const definition = (0, email_transport_1.requireEmailTransport)(transport);
+        for (const [secret, value] of values) {
+            if (!(definition.secrets ?? []).some((spec) => spec.name === secret))
+                continue;
+            writes.push({ transport, secret, address: (0, email_transport_1.emailTransportSecretAddress)(definition, secret), value });
+        }
+    }
+    return writes;
+}
+/**
+ * Reads and writes the `email` settings row (through `SystemSettingsRowStore`)
+ * and the two email secrets (through `CredentialsService`): `get` for the send
+ * path (throws on a corrupt row), `describeForAdmin` for the page (degrades and
+ * reports), `update` for `PUT /api/email-settings`.
+ *
+ * @stability experimental
+ */
+let EmailSettingsService = EmailSettingsService_1 = class EmailSettingsService {
+    rows;
+    prisma;
+    credentials;
+    logger = new common_1.Logger(EmailSettingsService_1.name);
+    constructor(
+    // The `email` row: read, versioned, written and audited by the settings
+    // slice's row store (#733), never by this service directly (#737).
+    rows, prisma, 
+    // The SMTP password's and the SES secret access key's only home.
+    // `EmailSettingsService` holds this reference so that "save the email
+    // configuration" is ONE operation with one transactional story, rather
+    // than a controller stitching a settings write and one or two credential
+    // writes together and getting the order wrong.
+    //
+    // Note it is only ever used through `setSecret` (write) and `describe`
+    // (masked read). `getSecret` -- the plaintext one -- is never called from
+    // this file, and must not be: nothing on the settings path needs a
+    // secret's value, and a call to it here would put plaintext one careless
+    // `return` away from an admin response.
+    credentials) {
+        this.rows = rows;
+        this.prisma = prisma;
+        this.credentials = credentials;
+    }
+    /**
+     * Read the current email configuration.
+     *
+     * @returns validated settings; {@link DEFAULT_EMAIL_SETTINGS} when nothing
+     *          has been configured yet.
+     * @throws if a row exists but does not validate (see below). Callers inside
+     *         a provider are safe: `BaseEmailProvider.send` turns this into a
+     *         `{ success: false, error }`, which is how an admin gets told.
+     */
+    async get() {
+        const row = await this.readRow();
+        if (!row.exists) {
+            // Absent is NOT an error: a fresh install has no email configuration and
+            // that is a normal, expected state. Callers see "no provider selected"
+            // and report it as such.
+            return email_settings_schema_1.DEFAULT_EMAIL_SETTINGS;
+        }
+        const parsed = this.parseRow(row.snapshot.value);
+        if (!parsed.ok) {
+            // THROW, DO NOT FALL BACK TO DEFAULTS. Silently substituting defaults
+            // for a stored-but-invalid configuration reports the system as "email
+            // not configured" when what actually happened is that a hand-edited row,
+            // a bad migration, or an older schema left something unreadable. That is
+            // the same silent-disablement failure CredentialsService refuses on a
+            // decrypt error, for the same reason: a configuration problem has to be
+            // visible to the person who can fix it.
+            //
+            // FIELD PATHS ONLY, NEVER VALUES. No secret is in this schema by
+            // construction, but an error message that echoes stored configuration is
+            // a habit that stops being safe the moment the schema grows. `zod`'s own
+            // `message` strings can quote the received value, so only `path` is used.
+            this.logger.error(`Stored email settings are invalid at: ${parsed.paths}. Email is unusable until they are saved again.`);
+            throw new Error(`Stored email settings are invalid at: ${parsed.paths}. Re-save the email configuration.`);
+        }
+        return parsed.settings;
+    }
+    /**
+     * The stored row, read in the current shape: a row written before
+     * transports were pluggable (flat `ses*`/`smtp*` fields) is folded into
+     * `transports` first, then the row is validated, then each REGISTERED
+     * transport's stored settings are validated by that transport's own schema
+     * (an entry for a transport nobody registers any more is kept and ignored,
+     * so removing a plugin never bricks the row). The result also carries the
+     * deprecated flat view, so a reader written against the old shape keeps working.
+     */
+    parseRow(value) {
+        const folded = (0, email_settings_compat_1.foldLegacyEmailFields)(value);
+        const parsed = email_settings_schema_1.emailSettingsSchema.safeParse(folded);
+        if (!parsed.success) {
+            // Report the transports' own failures beside the row's, so one repair
+            // covers everything that is wrong.
+            const own = (0, email_settings_compat_1.isRecord)(folded) && (0, email_settings_compat_1.isRecord)(folded.transports) ? (0, email_settings_compat_1.invalidTransportPaths)(folded.transports) : [];
+            return { ok: false, paths: [describeInvalidPaths(parsed.error), ...own].join(', ') };
+        }
+        const invalid = (0, email_settings_compat_1.invalidTransportPaths)(parsed.data.transports);
+        if (invalid.length > 0)
+            return { ok: false, paths: invalid.join(', ') };
+        return { ok: true, settings: { ...parsed.data, ...(0, email_settings_compat_1.legacyFlatView)(parsed.data.transports) } };
+    }
+    // ---------------------------------------------------------------------------
+    // Admin surface (#124)
+    // ---------------------------------------------------------------------------
+    /**
+     * Everything `GET /api/email-settings` renders: the configuration, whether a
+     * password is stored, and the provenance/version metadata.
+     *
+     * SEPARATE FROM {@link get} ON PURPOSE, in two ways that matter.
+     *
+     * 1. IT DOES NOT THROW ON AN INVALID STORED ROW; it reports the problem in
+     *    `settingsError` and returns the defaults alongside it. `get` is the
+     *    SEND path and is right to throw -- a corrupt row must not be reported
+     *    to a provider as the benign "email is not configured". This is the
+     *    REPAIR path, and a 500 here would make the broken row take down the one
+     *    screen capable of fixing it, leaving no in-app route back. The failure
+     *    is still loud: it is in the payload, in front of the person who can act
+     *    on it, which is the property the throw exists to protect.
+     *
+     * 2. IT TOUCHES THE CREDENTIAL STORE, which `get` deliberately does not. A
+     *    send path has no business paying for a credential lookup it will not
+     *    use, and keeping the two apart means the provider's read stays a single
+     *    settings query.
+     *
+     * The password itself is NOT read here. `describe` returns `CredentialInfo`,
+     * a type that carries a compile-time proof it cannot hold secret material,
+     * and whose query does not select the ciphertext column at all -- so for
+     * this request the encrypted bytes never leave Postgres.
+     */
+    async describeForAdmin() {
+        const row = await this.readRow();
+        let settings = email_settings_schema_1.DEFAULT_EMAIL_SETTINGS;
+        let settingsError = null;
+        if (row.exists) {
+            const parsed = this.parseRow(row.snapshot.value);
+            if (parsed.ok) {
+                settings = parsed.settings;
+            }
+            else {
+                // FIELD PATHS ONLY, NEVER VALUES -- the same rule as `get`. No secret
+                // is in this schema by construction, but a message that echoes stored
+                // configuration stops being safe the moment the schema grows, and
+                // zod's own `message` strings can quote the received value.
+                const paths = parsed.paths;
+                this.logger.error(`Stored email settings are invalid at: ${paths}. Serving defaults to the settings page so they can be re-saved.`);
+                settingsError = `The stored email configuration is invalid at: ${paths}. Correct those fields and save to repair it.`;
+            }
+        }
+        return this.toAdminView(settings, settingsError, row.exists ? row.snapshot : null);
+    }
+    /**
+     * Replace the email configuration (`PUT /api/email-settings`).
+     *
+     * THREE DESTINATIONS, ONE SUBMISSION. The ordinary settings go to the
+     * `email` row of `system_settings`; the SMTP password and the SES secret
+     * access key each go to their own address in the encrypted credential store
+     * and NOWHERE ELSE.
+     *
+     * -----------------------------------------------------------------------
+     * WHY THE SECRETS ARE WRITTEN FIRST
+     * -----------------------------------------------------------------------
+     *
+     * `CredentialsService.setSecret` rejects (400) a blank secret written to an
+     * address that holds nothing yet. Doing the settings write first would mean
+     * that request persists an SMTP username (or an SES access key id) with no
+     * secret behind it and then 400s -- the admin sees a failure, the
+     * configuration changed anyway, and the next send fails for a reason the
+     * error never mentioned. Secrets first makes that refusal happen before
+     * anything is persisted.
+     *
+     * The opposite partial failure (a credential written, settings write fails)
+     * is harmless by construction: a stored secret that no settings row points
+     * at yet is inert, and the next successful save picks it up. Given the
+     * choice of which half to leave orphaned, the inert one is the right answer.
+     *
+     * -----------------------------------------------------------------------
+     * BLANK PRESERVES -- AND WHY `setSecret` IS SKIPPED ENTIRELY WHEN BLANK
+     * -----------------------------------------------------------------------
+     *
+     * An empty password field means "I did not retype the password", so the
+     * stored one is kept. `CredentialsService` already implements exactly that
+     * and this method must not reimplement, second-guess or pre-normalise it:
+     * no `.trim()`, no `''` → `undefined` coercion, no "erase when empty"
+     * branch. The value arrives here byte-for-byte as submitted.
+     *
+     * What this method DOES decide is whether to call `setSecret` at all, and it
+     * calls it only for a non-blank value. Calling it with a blank one on a
+     * system that has never stored an SMTP password -- an SES deployment, or an
+     * IP-authorised relay with no credential -- would raise that first-write 400
+     * on an ordinary save that has nothing to do with SMTP. Skipping the call
+     * produces the identical outcome for an existing credential (preserved) and
+     * the correct one for a non-existent one (still absent, no error).
+     *
+     * Erasing a stored password is `CredentialsService.deleteSecret`, from a
+     * distinct control. It is deliberately not reachable through this endpoint.
+     *
+     * @param input - the parsed PUT body, secrets included.
+     * @param userId - the acting administrator.
+     * @param expectedVersion - optional `If-Match`; a mismatch is a 409 rather
+     *   than a silent overwrite of a colleague's save.
+     */
+    async update(input, userId, expectedVersion) {
+        // Destructured out FIRST, so each secret is a named local that never
+        // travels with the rest of the body. `emailSettingsSchema.parse` below
+        // would strip them anyway (zod drops unknown keys) -- that is the
+        // structural guarantee -- but relying on a silent strip to keep a secret
+        // out of a persisted blob is a guarantee nobody reading the call site can
+        // see.
+        const { smtpPassword, sesSecretAccessKey, secrets, transports: transportsPatch, ...submitted } = input;
+        // The four settings every transport shares. Blank forms are "absent".
+        const common = stripUnsetSettingFields({
+            provider: submitted.provider,
+            enabled: submitted.enabled,
+            fromAddress: submitted.fromAddress,
+            fromName: submitted.fromName,
+        });
+        // Rejected up front, before anything is persisted: an unregistered
+        // transport cannot be selected.
+        if (typeof common.provider === 'string' && !email_transport_1.emailTransportKind.has(common.provider)) {
+            (0, email_settings_compat_1.unknownTransportRejection)(common.provider);
+        }
+        // Read the current row once, for the concurrency check and for the
+        // stored transports the patch merges over. `version` starts at 0 for "no
+        // row yet" so a first save can be guarded with `If-Match: 0` rather than
+        // having no way to express "I believe nothing is stored".
+        const row = await this.readRow();
+        const currentVersion = row.snapshot.version;
+        const storedTransports = this.storedTransports(row.exists ? row.snapshot.value : undefined);
+        const transports = this.mergeTransports(storedTransports, (0, email_settings_compat_1.legacyAliasPatch)(submitted), transportsPatch ?? {});
+        const toWrite = collectSecretWrites({ secrets, smtpPassword, sesSecretAccessKey });
+        const settings = email_settings_schema_1.emailSettingsSchema.parse({ ...common, transports });
+        if (expectedVersion !== undefined && currentVersion !== expectedVersion) {
+            throw new common_1.ConflictException(`Email settings version mismatch. Expected ${expectedVersion}, found ${currentVersion}`);
+        }
+        // See the header: secrets first, and only when actually typed. Each
+        // transport's secrets are independent writes -- only one transport is
+        // active at a time, but nothing stops storing several, and there is no
+        // ordering dependency between them.
+        for (const write of toWrite) {
+            await this.credentials.setSecret(write.address.purpose, write.address.name, 
+            // Passed through UNTOUCHED. See the blank-preserves note above.
+            write.value, { label: write.address.label, updatedByUserId: userId });
+        }
+        const changed = (transport, name) => toWrite.some((write) => write.transport === transport && write.secret === name);
+        const passwordSubmitted = changed('smtp', 'password');
+        const sesSecretSubmitted = changed('ses', 'secretAccessKey');
+        // The row store validates against the schema, refuses a stale `If-Match`
+        // with the same 409 as the check above (the second guard closes the gap
+        // between the two), writes, bumps the version and audits.
+        const written = await this.rows.write(exports.EMAIL_SETTINGS_KEY, settings, {
+            actorId: userId,
+            ...(expectedVersion !== undefined ? { ifMatch: expectedVersion } : {}),
+            schema: email_settings_schema_1.emailSettingsSchema,
+            auditAction: 'email_settings:replace',
+            auditMeta: {
+                // SAFE TO RECORD IN FULL: `settings` is the output of
+                // `emailSettingsSchema.parse`, and that schema carries a
+                // compile-time proof that it has no secret-bearing field.
+                newValue: settings,
+                // WHETHER each secret changed, never what it changed to.
+                smtpPasswordChanged: passwordSubmitted,
+                sesSecretAccessKeyChanged: sesSecretSubmitted,
+                // The same fact for every transport, as `transport.secret` NAMES.
+                secretsChanged: toWrite.map((write) => `${write.transport}.${write.secret}`),
+            },
+        });
+        // userId only. No settings values, no recipient, and above all no
+        // secret: application logs are shipped, indexed and retained far more
+        // widely than this table is.
+        const updatedParts = toWrite.map((write) => `${write.transport} ${write.secret} updated`);
+        this.logger.log(`Email settings replaced by user ${userId}` +
+            (updatedParts.length > 0 ? ` (${updatedParts.join(', ')})` : ''));
+        return this.toAdminView({ ...settings, ...(0, email_settings_compat_1.legacyFlatView)(settings.transports) }, null, written);
+    }
+    /** The stored `transports` of a raw row value, with the legacy flat fields folded in. */
+    storedTransports(value) {
+        const folded = (0, email_settings_compat_1.foldLegacyEmailFields)(value);
+        return (0, email_settings_compat_1.isRecord)(folded) && (0, email_settings_compat_1.isRecord)(folded.transports) ? folded.transports : {};
+    }
+    /**
+     * The stored `transports` with a submitted patch merged in. A legacy flat
+     * alias is overridden by `transports.<id>` for the same setting; `null`
+     * removes a transport's stored settings. A registered transport's patched
+     * entry is validated by its own schema; anything it refuses is a 400.
+     */
+    mergeTransports(stored, aliases, patch) {
+        const combined = {};
+        for (const [id, value] of Object.entries(aliases))
+            combined[id] = value;
+        for (const [id, value] of Object.entries(patch))
+            combined[id] = value === null ? null : { ...combined[id], ...value };
+        try {
+            return email_transport_1.emailTransportKind.mergeSettingsRecord(stored, combined);
+        }
+        catch (error) {
+            return (0, email_settings_compat_1.transportRejection)(error);
+        }
+    }
+    /**
+     * Assemble the admin view from an already-validated settings object and the
+     * row it came from.
+     *
+     * Shared by {@link describeForAdmin} and {@link update} so a PUT's response
+     * is built by the same code as the following GET -- otherwise the page can
+     * render one shape after saving and a different one after a reload, and the
+     * difference is invisible until someone hits it.
+     *
+     * Fields are named EXPLICITLY rather than spread from the row, matching
+     * `CredentialsService.toInfo` and for the same reason: a spread makes the
+     * response shape a consequence of whatever the query happened to select, so
+     * a later `include` or a plain `findUnique` with no `select` would silently
+     * start serialising columns nobody decided to publish.
+     */
+    async toAdminView(settings, settingsError, row) {
+        const definitions = email_transport_1.emailTransportKind.list();
+        // The masked read. NOT `getSecret` -- `describe` returns `CredentialInfo`,
+        // which has no field capable of carrying secret material, so there is
+        // nothing on this path that could be widened into a leak. One lookup per
+        // declared secret of each registered transport.
+        const lookups = definitions.flatMap((definition) => (definition.secrets ?? []).map(async (spec) => {
+            const address = (0, email_transport_1.emailTransportSecretAddress)(definition, spec.name);
+            const info = await this.credentials.describe(address.purpose, address.name);
+            return { transport: definition.id, secret: spec.name, info };
+        }));
+        const [found, updatedBy] = await Promise.all([Promise.all(lookups), this.findUpdatedBy(row?.updatedByUserId ?? null)]);
+        const secretStatuses = {};
+        for (const definition of definitions)
+            secretStatuses[definition.id] = {};
+        for (const { transport, secret, info } of found) {
+            (secretStatuses[transport] ??= {})[secret] = {
+                configured: info !== null,
+                // The store's own mask ('••••' plus at most four trailing
+                // characters, and nothing at all below eight). Derived on write by
+                // `CredentialsService`; never computed here, because computing it
+                // would mean holding the plaintext to compute it from.
+                hint: info?.hint ?? null,
+                updatedAt: info?.updatedAt ?? null,
+                updatedByUserId: info?.updatedByUserId ?? null,
+            };
+        }
+        const NOT_CONFIGURED = { configured: false, hint: null, updatedAt: null, updatedByUserId: null };
+        // Every registered transport's settings, defaults filled; an entry that
+        // no longer parses falls back to the defaults (the invalid case was
+        // already reported through `settingsError`), an entry for an unregistered
+        // transport is dropped with one warning.
+        const read = email_transport_1.emailTransportKind.readSettingsRecord(settings.transports ?? {}, (message) => this.logger.warn(message));
+        const transports = {};
+        for (const definition of definitions) {
+            transports[definition.id] = read[definition.id] ?? email_transport_1.emailTransportKind.parseSettings(definition.id, {});
+        }
+        const descriptors = (0, email_transport_1.describeEmailTransports)((id) => ({
+            secrets: Object.fromEntries(Object.entries(secretStatuses[id] ?? {}).map(([name, status]) => [name, status.configured])),
+        }));
+        return {
+            ...settings,
+            transports,
+            descriptors,
+            secretStatuses,
+            smtpPasswordStatus: secretStatuses.smtp?.password ?? NOT_CONFIGURED,
+            sesSecretAccessKeyStatus: secretStatuses.ses?.secretAccessKey ?? NOT_CONFIGURED,
+            settingsError,
+            version: row?.version ?? 0,
+            updatedAt: row?.updatedAt ?? null,
+            updatedBy,
+        };
+    }
+    /**
+     * The `email` row through the row store, raw. A missing row is version 0
+     * with no value; `exists` tells the two apart.
+     */
+    async readRow() {
+        const snapshot = await this.rows.read(exports.EMAIL_SETTINGS_KEY, RAW_ROW, null);
+        return { exists: snapshot.version > 0 || snapshot.value !== null, snapshot };
+    }
+    /** `{ id, email }` of the user who last saved, or `null` (none, or deleted). */
+    async findUpdatedBy(userId) {
+        if (!userId)
+            return null;
+        const user = await this.prisma.user.findUnique({ where: { id: userId }, select: { id: true, email: true } });
+        return user ? { id: user.id, email: user.email } : null;
+    }
+};
+exports.EmailSettingsService = EmailSettingsService;
+exports.EmailSettingsService = EmailSettingsService = EmailSettingsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [index_3.SystemSettingsRowStore, Object, index_2.CredentialsService])
+], EmailSettingsService);
+//# sourceMappingURL=email-settings.service.js.map

package/dist/email/email-settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.service.js","sourceRoot":"","sources":["../../src/email/email-settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA+E;AAE/E,6BAAwB;AAExB,yCAAgD;AAChD,gDAA0D;AAC1D,6CAA2F;AAC3F,mEAIiC;AACjC,mEAUiC;AACjC,kEAMsC;AAiCtC;;;;GAIG;AACH,MAAM,OAAO,GAAG,OAAC,CAAC,OAAO,EAAE,CAAC;AAE5B,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,qCAAqC;AACrC,EAAE;AACF,oEAAoE;AACpE,2EAA2E;AAC3E,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,wBAAwB;AACxB,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,yDAAyD;AACzD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,gDAAgD;AAChD,gFAAgF;AAEhF;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,OAAO,CAAC;AAoF1C;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;SAChD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,uBAAuB,CAC9B,KAA8B;IAE9B,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAE7C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,aAAa,CAAC,KAAgC;IACrD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;AAC/D,CAAC;AAUD;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAI5B;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAgC,EAAQ,EAAE;QACtF,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3D,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,KAAe,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5C,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,oCAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,IAAA,iDAAyB,EAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAA,uCAAqB,EAAC,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAA,8CAAsB,EAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChF,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACxC,IAAI,CAAC,oCAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACjD,MAAM,UAAU,GAAG,IAAA,uCAAqB,EAAC,SAAS,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;gBAAE,SAAS;YAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,6CAA2B,EAAC,UAAU,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AAEI,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAMZ;IAEyB;IAYzB;IAnBF,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhE;IACE,wEAAwE;IACxE,mEAAmE;IAClD,IAA4B,EAEH,MAAmB;IAC7D,iEAAiE;IACjE,sEAAsE;IACtE,uEAAuE;IACvE,yEAAyE;IACzE,+CAA+C;IAC/C,EAAE;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,mEAAmE;IACnE,yEAAyE;IACzE,wCAAwC;IACvB,WAA+B;QAd/B,SAAI,GAAJ,IAAI,CAAwB;QAEH,WAAM,GAAN,MAAM,CAAa;QAY5C,gBAAW,GAAX,WAAW,CAAoB;IAC/C,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,GAAG;QACP,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAEjC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,yEAAyE;YACzE,uEAAuE;YACvE,yBAAyB;YACzB,OAAO,8CAAsB,CAAC;QAChC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,sEAAsE;YACtE,sEAAsE;YACtE,yEAAyE;YACzE,yEAAyE;YACzE,sEAAsE;YACtE,wEAAwE;YACxE,wCAAwC;YACxC,EAAE;YACF,iEAAiE;YACjE,yEAAyE;YACzE,yEAAyE;YACzE,0EAA0E;YAC1E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,MAAM,CAAC,KAAK,iDAAiD,CACvG,CAAC;YAEF,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,KAAK,oCAAoC,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACK,QAAQ,CAAC,KAAc;QAC7B,MAAM,MAAM,GAAG,IAAA,6CAAqB,EAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,2CAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,sEAAsE;YACtE,mCAAmC;YACnC,MAAM,GAAG,GAAG,IAAA,gCAAQ,EAAC,MAAM,CAAC,IAAI,IAAA,gCAAQ,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,6CAAqB,EAAC,MAAM,CAAC,UAAmC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,6CAAqB,EAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAExE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAA,sCAAc,EAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAEjC,IAAI,QAAQ,GAAkB,8CAAsB,CAAC;QACrD,IAAI,aAAa,GAAkB,IAAI,CAAC;QAExC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEjD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,sEAAsE;gBACtE,kEAAkE;gBAClE,4DAA4D;gBAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAE3B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yCAAyC,KAAK,kEAAkE,CACjH,CAAC;gBAEF,aAAa,GAAG,iDAAiD,KAAK,+CAA+C,CAAC;YACxH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkDG;IACH,KAAK,CAAC,MAAM,CACV,KAA+B,EAC/B,MAAc,EACd,eAAwB;QAExB,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,OAAO;QACP,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC;QAEvG,sEAAsE;QACtE,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAC;QAEH,mEAAmE;QACnE,gCAAgC;QAChC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oCAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpF,IAAA,iDAAyB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,mEAAmE;QACnE,yEAAyE;QACzE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAE5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,IAAA,wCAAgB,EAAC,SAAS,CAAC,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAEnF,MAAM,QAAQ,GAAG,2CAAmB,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,IAAI,eAAe,KAAK,SAAS,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;YACxE,MAAM,IAAI,0BAAiB,CACzB,6CAA6C,eAAe,WAAW,cAAc,EAAE,CACxF,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,oCAAoC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,EACrB,KAAK,CAAC,OAAO,CAAC,IAAI;YAClB,gEAAgE;YAChE,KAAK,CAAC,KAAK,EACX,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAW,EAAE,CAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QAClF,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAE7D,yEAAyE;QACzE,wEAAwE;QACxE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,0BAAkB,EAAE,QAAQ,EAAE;YAClE,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,2CAAmB;YAC3B,WAAW,EAAE,wBAAwB;YACrC,SAAS,EAAE;gBACT,sDAAsD;gBACtD,yDAAyD;gBACzD,0DAA0D;gBAC1D,QAAQ,EAAE,QAAQ;gBAClB,yDAAyD;gBACzD,mBAAmB,EAAE,iBAAiB;gBACtC,yBAAyB,EAAE,kBAAkB;gBAC7C,kEAAkE;gBAClE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;aAC7E;SACF,CAAC,CAAC;QAEH,kEAAkE;QAClE,sEAAsE;QACtE,6BAA6B;QAC7B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC;QAE1F,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mCAAmC,MAAM,EAAE;YACzC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACnE,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAA,sCAAc,EAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClG,CAAC;IAED,yFAAyF;IACjF,gBAAgB,CAAC,KAAc;QACrC,MAAM,MAAM,GAAG,IAAA,6CAAqB,EAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,IAAA,gCAAQ,EAAC,MAAM,CAAC,IAAI,IAAA,gCAAQ,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,UAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;;;;OAKG;IACK,eAAe,CACrB,MAA6B,EAC7B,OAAgD,EAChD,KAAqD;QAErD,MAAM,QAAQ,GAAmD,EAAE,CAAC;QACpE,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACxE,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QAEtH,IAAI,CAAC;YACH,OAAO,oCAAkB,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,0CAAkB,EAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,KAAK,CAAC,WAAW,CACvB,QAAuB,EACvB,aAA4B,EAC5B,GAA8C;QAE9C,MAAM,WAAW,GAAG,oCAAkB,CAAC,IAAI,EAA8C,CAAC;QAE1F,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACjD,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAA,6CAA2B,EAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5E,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAC/D,CAAC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvH,MAAM,cAAc,GAAqD,EAAE,CAAC;QAC5E,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;QACzE,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;YAChD,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG;gBAC3C,UAAU,EAAE,IAAI,KAAK,IAAI;gBACzB,0DAA0D;gBAC1D,mEAAmE;gBACnE,kEAAkE;gBAClE,uDAAuD;gBACvD,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;gBACxB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;gBAClC,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,IAAI;aAC/C,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAqB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAEnH,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;QAC1E,yCAAyC;QACzC,MAAM,IAAI,GAAG,oCAAkB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACtH,MAAM,UAAU,GAA0B,EAAE,CAAC;QAC7C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,oCAAkB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,yCAAuB,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;SACzH,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,GAAG,QAAQ;YACX,UAAU;YACV,WAAW;YACX,cAAc;YACd,kBAAkB,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,IAAI,cAAc;YACnE,wBAAwB,EAAE,cAAc,CAAC,GAAG,EAAE,eAAe,IAAI,cAAc;YAC/E,aAAa;YACb,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC;YAC1B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,OAAO;QACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,0BAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/E,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,aAAa,CAAC,MAAqB;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;CACF,CAAA;AA1aY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCAFD,8BAAsB,UAcf,0BAAkB;GApBvC,oBAAoB,CA0ahC"}