@marinoscar/platform-contract 0.0.0-stage → 0.1.0-next.4

package/dist/cjs/email/index.d.ts

@@ -0,0 +1,5 @@
+export { BUILTIN_EMAIL_PROVIDER_KINDS, DEFAULT_SMTP_PORT, EMAIL_PROVIDER_KINDS, EMAIL_TRANSPORT_ID_PATTERN, IMPLICIT_TLS_SMTP_PORT, LEGACY_EMAIL_FLAT_FIELDS, LEGACY_EMAIL_FLAT_FIELD_TARGETS, } from './constants.js';
+export type { BuiltinEmailProviderKind, EmailProviderKind, LegacyEmailFieldTarget } from './constants.js';
+export { DEFAULT_EMAIL_SETTINGS, EMAIL_SETTINGS_CARRIES_NO_SECRET, EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET, credentialStatusSchema, emailSettingsResponseSchema, emailSettingsSchema, emailTransportIdSchema, emailTransportSettingsSchema, emailTransportsPatchSchema, emailTransportsSchema, testEmailResultSchema, updateEmailSettingsSchema, } from './schemas.js';
+export type { EmailCredentialStatusDto, EmailProviderKindEnum, EmailSecretFieldName, EmailSettings, EmailSettingsCarriesNoSecret, EmailSettingsResponse, EmailSettingsResponseCarriesNoSecret, TestEmailResult, UpdateEmailSettingsInput, } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/email/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,yCAAyC,EACzC,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,4BAA4B,EAC5B,qBAAqB,EACrB,oCAAoC,EACpC,eAAe,EACf,wBAAwB,GACzB,MAAM,cAAc,CAAC"}

package/dist/cjs/email/index.js

@@ -0,0 +1,30 @@
+"use strict";
+// `@marinoscar/platform-contract/email`: the wire contract of the email
+// slice's admin routes (issue #737, PP-8.4): the stored settings, the PUT
+// body, the GET/PUT response, the test-send result and the built-in transport
+// list (the transport itself is an open id, PP-14.8). constants.ts is zod-free. Documented in ./README.md. Explicit named
+// exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateEmailSettingsSchema = exports.testEmailResultSchema = exports.emailTransportsSchema = exports.emailTransportsPatchSchema = exports.emailTransportSettingsSchema = exports.emailTransportIdSchema = exports.emailSettingsSchema = exports.emailSettingsResponseSchema = exports.credentialStatusSchema = exports.EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET = exports.EMAIL_SETTINGS_CARRIES_NO_SECRET = exports.DEFAULT_EMAIL_SETTINGS = exports.LEGACY_EMAIL_FLAT_FIELD_TARGETS = exports.LEGACY_EMAIL_FLAT_FIELDS = exports.IMPLICIT_TLS_SMTP_PORT = exports.EMAIL_TRANSPORT_ID_PATTERN = exports.EMAIL_PROVIDER_KINDS = exports.DEFAULT_SMTP_PORT = exports.BUILTIN_EMAIL_PROVIDER_KINDS = void 0;
+var constants_js_1 = require("./constants.js");
+Object.defineProperty(exports, "BUILTIN_EMAIL_PROVIDER_KINDS", { enumerable: true, get: function () { return constants_js_1.BUILTIN_EMAIL_PROVIDER_KINDS; } });
+Object.defineProperty(exports, "DEFAULT_SMTP_PORT", { enumerable: true, get: function () { return constants_js_1.DEFAULT_SMTP_PORT; } });
+Object.defineProperty(exports, "EMAIL_PROVIDER_KINDS", { enumerable: true, get: function () { return constants_js_1.EMAIL_PROVIDER_KINDS; } });
+Object.defineProperty(exports, "EMAIL_TRANSPORT_ID_PATTERN", { enumerable: true, get: function () { return constants_js_1.EMAIL_TRANSPORT_ID_PATTERN; } });
+Object.defineProperty(exports, "IMPLICIT_TLS_SMTP_PORT", { enumerable: true, get: function () { return constants_js_1.IMPLICIT_TLS_SMTP_PORT; } });
+Object.defineProperty(exports, "LEGACY_EMAIL_FLAT_FIELDS", { enumerable: true, get: function () { return constants_js_1.LEGACY_EMAIL_FLAT_FIELDS; } });
+Object.defineProperty(exports, "LEGACY_EMAIL_FLAT_FIELD_TARGETS", { enumerable: true, get: function () { return constants_js_1.LEGACY_EMAIL_FLAT_FIELD_TARGETS; } });
+var schemas_js_1 = require("./schemas.js");
+Object.defineProperty(exports, "DEFAULT_EMAIL_SETTINGS", { enumerable: true, get: function () { return schemas_js_1.DEFAULT_EMAIL_SETTINGS; } });
+Object.defineProperty(exports, "EMAIL_SETTINGS_CARRIES_NO_SECRET", { enumerable: true, get: function () { return schemas_js_1.EMAIL_SETTINGS_CARRIES_NO_SECRET; } });
+Object.defineProperty(exports, "EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET", { enumerable: true, get: function () { return schemas_js_1.EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET; } });
+Object.defineProperty(exports, "credentialStatusSchema", { enumerable: true, get: function () { return schemas_js_1.credentialStatusSchema; } });
+Object.defineProperty(exports, "emailSettingsResponseSchema", { enumerable: true, get: function () { return schemas_js_1.emailSettingsResponseSchema; } });
+Object.defineProperty(exports, "emailSettingsSchema", { enumerable: true, get: function () { return schemas_js_1.emailSettingsSchema; } });
+Object.defineProperty(exports, "emailTransportIdSchema", { enumerable: true, get: function () { return schemas_js_1.emailTransportIdSchema; } });
+Object.defineProperty(exports, "emailTransportSettingsSchema", { enumerable: true, get: function () { return schemas_js_1.emailTransportSettingsSchema; } });
+Object.defineProperty(exports, "emailTransportsPatchSchema", { enumerable: true, get: function () { return schemas_js_1.emailTransportsPatchSchema; } });
+Object.defineProperty(exports, "emailTransportsSchema", { enumerable: true, get: function () { return schemas_js_1.emailTransportsSchema; } });
+Object.defineProperty(exports, "testEmailResultSchema", { enumerable: true, get: function () { return schemas_js_1.testEmailResultSchema; } });
+Object.defineProperty(exports, "updateEmailSettingsSchema", { enumerable: true, get: function () { return schemas_js_1.updateEmailSettingsSchema; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/email/index.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,8EAA8E;AAC9E,0HAA0H;AAC1H,gBAAgB;;;AAEhB,+CAQwB;AAPtB,4HAAA,4BAA4B,OAAA;AAC5B,iHAAA,iBAAiB,OAAA;AACjB,oHAAA,oBAAoB,OAAA;AACpB,0HAAA,0BAA0B,OAAA;AAC1B,sHAAA,sBAAsB,OAAA;AACtB,wHAAA,wBAAwB,OAAA;AACxB,+HAAA,+BAA+B,OAAA;AAGjC,2CAasB;AAZpB,oHAAA,sBAAsB,OAAA;AACtB,8HAAA,gCAAgC,OAAA;AAChC,uIAAA,yCAAyC,OAAA;AACzC,oHAAA,sBAAsB,OAAA;AACtB,yHAAA,2BAA2B,OAAA;AAC3B,iHAAA,mBAAmB,OAAA;AACnB,oHAAA,sBAAsB,OAAA;AACtB,0HAAA,4BAA4B,OAAA;AAC5B,wHAAA,0BAA0B,OAAA;AAC1B,mHAAA,qBAAqB,OAAA;AACrB,mHAAA,qBAAqB,OAAA;AACrB,uHAAA,yBAAyB,OAAA"}

package/dist/cjs/email/schemas.d.ts

@@ -0,0 +1,276 @@
+import { z } from 'zod';
+import type { BuiltinEmailProviderKind } from './constants.js';
+/**
+ * The entries of the former transport enum: each built-in kind keyed by itself.
+ *
+ * @deprecated The transport is an open id now ({@link emailTransportIdSchema}).
+ * @stability stable
+ */
+export type EmailProviderKindEnum = {
+    [K in BuiltinEmailProviderKind]: K;
+};
+/**
+ * An email transport id: any string matching {@link EMAIL_TRANSPORT_ID_PATTERN}.
+ * Not an enum: an app registers transports (`registerEmailTransport`), and the
+ * API validates the id against the registry.
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+export declare const emailTransportIdSchema: z.ZodString;
+/**
+ * One transport's non-secret settings as stored: whatever that transport's
+ * `settingsSchema` declares. The contract cannot see the registry, so it
+ * checks the shape (a record) and the API validates each entry with the
+ * transport that owns it.
+ *
+ * @stability experimental
+ */
+export declare const emailTransportSettingsSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+/**
+ * The `transports` record: transport id to that transport's settings.
+ *
+ * @stability experimental
+ */
+export declare const emailTransportsSchema: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+/**
+ * The `transports` record of a PUT: `null` removes a transport's stored
+ * settings (back to its defaults), an object is merged over them.
+ *
+ * @stability experimental
+ */
+export declare const emailTransportsPatchSchema: z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+/**
+ * The admin-configurable half of email delivery: which transport, where it
+ * lives, who the mail claims to be from. Ordinary configuration, safe to
+ * return from an admin endpoint; stored in the `email` row of
+ * `system_settings`.
+ *
+ * @stability stable
+ */
+export declare const emailSettingsSchema: z.ZodObject<{
+    provider: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+    transports: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    sesRegion: z.ZodOptional<z.ZodString>;
+    sesAccessKeyId: z.ZodOptional<z.ZodString>;
+    smtpHost: z.ZodOptional<z.ZodString>;
+    smtpPort: z.ZodOptional<z.ZodNumber>;
+    smtpUseTls: z.ZodOptional<z.ZodBoolean>;
+    smtpUsername: z.ZodOptional<z.ZodString>;
+    fromAddress: z.ZodOptional<z.ZodEmail>;
+    fromName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Validated email settings.
+ *
+ * @stability stable
+ */
+export type EmailSettings = z.infer<typeof emailSettingsSchema>;
+/**
+ * What a system with no email configuration reads as: no transport, switched
+ * off.
+ *
+ * @stability stable
+ */
+export declare const DEFAULT_EMAIL_SETTINGS: EmailSettings;
+/**
+ * What the admin page knows about a stored secret (the SMTP password, the SES
+ * secret access key) without being told the secret: whether it is set, the
+ * store's mask, and when and by whom it was last written.
+ *
+ * @stability stable
+ */
+export declare const credentialStatusSchema: z.ZodObject<{
+    configured: z.ZodBoolean;
+    hint: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodISODateTime>;
+    updatedByUserId: z.ZodNullable<z.ZodUUID>;
+}, z.core.$strip>;
+/**
+ * The masked status of one stored secret.
+ *
+ * @stability stable
+ */
+export type EmailCredentialStatusDto = z.infer<typeof credentialStatusSchema>;
+/**
+ * The `GET` and `PUT /api/email-settings` response body (inside the global
+ * `{ data }` envelope): the settings, a descriptor per registered transport,
+ * the masked status of every transport secret, why
+ * the stored row could not be read (field paths only; the read degrades to
+ * the defaults instead of failing, so the page that repairs the row still
+ * renders), and the row's version for `If-Match`.
+ *
+ * @stability stable
+ */
+export declare const emailSettingsResponseSchema: z.ZodObject<{
+    provider: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+    sesRegion: z.ZodOptional<z.ZodString>;
+    sesAccessKeyId: z.ZodOptional<z.ZodString>;
+    smtpHost: z.ZodOptional<z.ZodString>;
+    smtpPort: z.ZodOptional<z.ZodNumber>;
+    smtpUseTls: z.ZodOptional<z.ZodBoolean>;
+    smtpUsername: z.ZodOptional<z.ZodString>;
+    fromAddress: z.ZodOptional<z.ZodEmail>;
+    fromName: z.ZodOptional<z.ZodString>;
+    transports: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    descriptors: z.ZodArray<z.ZodObject<{
+        kind: z.ZodString;
+        id: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"boolean">;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"enum">;
+            options: z.ZodArray<z.ZodString>;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"number">;
+            min: z.ZodOptional<z.ZodNumber>;
+            max: z.ZodOptional<z.ZodNumber>;
+            integer: z.ZodOptional<z.ZodBoolean>;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"string">;
+            maxLength: z.ZodOptional<z.ZodNumber>;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"other">;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret">;
+            hasValue: z.ZodBoolean;
+            required: z.ZodBoolean;
+            name: z.ZodString;
+            label: z.ZodString;
+            help: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>], "kind">>;
+    }, z.core.$strip>>;
+    secretStatuses: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodObject<{
+        configured: z.ZodBoolean;
+        hint: z.ZodNullable<z.ZodString>;
+        updatedAt: z.ZodNullable<z.ZodISODateTime>;
+        updatedByUserId: z.ZodNullable<z.ZodUUID>;
+    }, z.core.$strip>>>;
+    smtpPasswordStatus: z.ZodObject<{
+        configured: z.ZodBoolean;
+        hint: z.ZodNullable<z.ZodString>;
+        updatedAt: z.ZodNullable<z.ZodISODateTime>;
+        updatedByUserId: z.ZodNullable<z.ZodUUID>;
+    }, z.core.$strip>;
+    sesSecretAccessKeyStatus: z.ZodObject<{
+        configured: z.ZodBoolean;
+        hint: z.ZodNullable<z.ZodString>;
+        updatedAt: z.ZodNullable<z.ZodISODateTime>;
+        updatedByUserId: z.ZodNullable<z.ZodUUID>;
+    }, z.core.$strip>;
+    settingsError: z.ZodNullable<z.ZodString>;
+    version: z.ZodNumber;
+    updatedAt: z.ZodNullable<z.ZodISODateTime>;
+    updatedBy: z.ZodNullable<z.ZodObject<{
+        id: z.ZodUUID;
+        email: z.ZodEmail;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * The GET/PUT response body, as sent.
+ *
+ * @stability stable
+ */
+export type EmailSettingsResponse = z.infer<typeof emailSettingsResponseSchema>;
+/**
+ * The `PUT /api/email-settings` body: every settings field (blankable), the
+ * `transports` patch, plus the WRITE-ONLY secrets (`secrets`, and the two
+ * legacy aliases). A blank secret (absent, `null` or `''`)
+ * preserves the stored one; erasing a stored secret is not expressible here.
+ *
+ * @stability stable
+ */
+export declare const updateEmailSettingsSchema: z.ZodObject<{
+    provider: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+    transports: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+    sesRegion: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodString>]>;
+    sesAccessKeyId: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodString>]>;
+    smtpHost: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodString>]>;
+    smtpPort: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodNumber>]>;
+    smtpUseTls: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodBoolean>]>;
+    smtpUsername: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodString>]>;
+    fromAddress: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodEmail>]>;
+    fromName: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<"">, z.ZodNull]>, z.ZodOptional<z.ZodString>]>;
+    smtpPassword: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sesSecretAccessKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodNullable<z.ZodString>>>>>;
+}, z.core.$strip>;
+/**
+ * The parsed PUT body, secrets included.
+ *
+ * @stability stable
+ */
+export type UpdateEmailSettingsInput = z.infer<typeof updateEmailSettingsSchema>;
+/**
+ * The `POST /api/email-settings/test` response body. HTTP 200 even when the
+ * send failed: read `success`, and show `error`, the provider's own message
+ * (already redacted of every credential and length-capped by the API).
+ *
+ * @stability stable
+ */
+export declare const testEmailResultSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    sentTo: z.ZodEmail;
+    providerKind: z.ZodNullable<z.ZodString>;
+    messageId: z.ZodNullable<z.ZodString>;
+    error: z.ZodNullable<z.ZodString>;
+    attemptedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+/**
+ * The POST /test response body.
+ *
+ * @stability stable
+ */
+export type TestEmailResult = z.infer<typeof testEmailResultSchema>;
+/**
+ * The field names no email settings shape may declare (the compile-time
+ * proofs below check against them).
+ *
+ * @stability stable
+ */
+export type EmailSecretFieldName = 'smtpPassword' | 'password' | 'secret' | 'apiKey' | 'accessKeyId' | 'secretAccessKey' | 'ciphertext';
+/**
+ * `true` while {@link EmailSettings} has no secret-named field; `never` otherwise.
+ *
+ * @stability stable
+ */
+export type EmailSettingsCarriesNoSecret = Extract<keyof EmailSettings, EmailSecretFieldName> extends never ? true : never;
+/**
+ * The proof that {@link EmailSettings} carries no secret (fails to compile otherwise).
+ *
+ * @stability stable
+ */
+export declare const EMAIL_SETTINGS_CARRIES_NO_SECRET: EmailSettingsCarriesNoSecret;
+/**
+ * `true` while {@link EmailSettingsResponse} has no secret-named field; `never` otherwise.
+ *
+ * @stability stable
+ */
+export type EmailSettingsResponseCarriesNoSecret = Extract<keyof EmailSettingsResponse, EmailSecretFieldName> extends never ? true : never;
+/**
+ * The proof that {@link EmailSettingsResponse} carries no secret (fails to compile otherwise).
+ *
+ * @stability stable
+ */
+export declare const EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET: EmailSettingsResponseCarriesNoSecret;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/cjs/email/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/email/schemas.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;KAAG,CAAC,IAAI,wBAAwB,GAAG,CAAC;CAAE,CAAC;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,aAA+C,CAAC;AAEnF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,wCAAoC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,kEAAiE,CAAC;AAEpG;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,iFAA4E,CAAC;AAKpH;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBA6D9B,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAGpC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;iBASjC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE9E;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmCtC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAqBhF;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAkCpC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAahC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAYpE;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,UAAU,GACV,QAAQ,GACR,QAAQ,GACR,aAAa,GACb,iBAAiB,GACjB,YAAY,CAAC;AAEjB;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,oBAAoB,CAAC,SAAS,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;AAE3H;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAAE,4BAAmC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,oCAAoC,GAC9C,OAAO,CAAC,MAAM,qBAAqB,EAAE,oBAAoB,CAAC,SAAS,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;AAE1F;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EAAE,oCAA2C,CAAC"}

package/dist/cjs/email/schemas.js

@@ -0,0 +1,280 @@
+"use strict";
+// =============================================================================
+// Email: the wire contract of `/api/email-settings` (issue #737, PP-8.4;
+// shapes from #122, #124 and #585)
+// =============================================================================
+//
+// The stored settings, the PUT body, the GET/PUT response and the test-send
+// result. The API slice (`@marinoscar/platform-api/email`) wraps each with
+// `createZodDto`; the web slice reads the inferred types.
+//
+// NO SECRET IS STORED IN THE SETTINGS. The SMTP password and the SES secret
+// access key live in the encrypted credential store; the PUT body accepts
+// them write-only, and the response describes them only as a masked status.
+// Compile-time proofs at the bottom of this file fail the build the moment a
+// secret-named field is added to the stored settings or to the response.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET = exports.EMAIL_SETTINGS_CARRIES_NO_SECRET = exports.testEmailResultSchema = exports.updateEmailSettingsSchema = exports.emailSettingsResponseSchema = exports.credentialStatusSchema = exports.DEFAULT_EMAIL_SETTINGS = exports.emailSettingsSchema = exports.emailTransportsPatchSchema = exports.emailTransportsSchema = exports.emailTransportSettingsSchema = exports.emailTransportIdSchema = void 0;
+const zod_1 = require("zod");
+const index_js_1 = require("../settings/index.js");
+const constants_js_1 = require("./constants.js");
+/**
+ * An email transport id: any string matching {@link EMAIL_TRANSPORT_ID_PATTERN}.
+ * Not an enum: an app registers transports (`registerEmailTransport`), and the
+ * API validates the id against the registry.
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+exports.emailTransportIdSchema = zod_1.z.string().regex(constants_js_1.EMAIL_TRANSPORT_ID_PATTERN);
+/**
+ * One transport's non-secret settings as stored: whatever that transport's
+ * `settingsSchema` declares. The contract cannot see the registry, so it
+ * checks the shape (a record) and the API validates each entry with the
+ * transport that owns it.
+ *
+ * @stability experimental
+ */
+exports.emailTransportSettingsSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+/**
+ * The `transports` record: transport id to that transport's settings.
+ *
+ * @stability experimental
+ */
+exports.emailTransportsSchema = zod_1.z.record(exports.emailTransportIdSchema, exports.emailTransportSettingsSchema);
+/**
+ * The `transports` record of a PUT: `null` removes a transport's stored
+ * settings (back to its defaults), an object is merged over them.
+ *
+ * @stability experimental
+ */
+exports.emailTransportsPatchSchema = zod_1.z.record(exports.emailTransportIdSchema, exports.emailTransportSettingsSchema.nullable());
+// The transport, as the settings and the test-send result carry it.
+const providerKindSchema = exports.emailTransportIdSchema;
+/**
+ * The admin-configurable half of email delivery: which transport, where it
+ * lives, who the mail claims to be from. Ordinary configuration, safe to
+ * return from an admin endpoint; stored in the `email` row of
+ * `system_settings`.
+ *
+ * @stability stable
+ */
+exports.emailSettingsSchema = zod_1.z.object({
+    /**
+     * The id of the active transport: a built-in (`ses`, `smtp`) or one an app
+     * registered. `null` means "no transport chosen", the state of
+     * every fresh installation: a real, persisted state rather than an absent
+     * key.
+     */
+    provider: providerKindSchema.nullable(),
+    /** Master switch. Nothing is sent while this is false. */
+    enabled: zod_1.z.boolean(),
+    /**
+     * Every transport's own non-secret settings, keyed by transport id
+     * (`transports.smtp.host`, `transports.my-relay.apiBase`), each validated by
+     * the transport that owns it. A row written before transports were pluggable
+     * has none: the API folds the flat fields below into `transports.ses` and
+     * `transports.smtp` when it reads such a row.
+     */
+    transports: exports.emailTransportsSchema.optional(),
+    /**
+     * @deprecated Read view of `transports.ses.region`. SES region override. Absent means "use the deployment's SES region
+     * fallback" (`SES_REGION` in the reference app). A verified sending identity
+     * is regional, so the override is the usual case.
+     */
+    sesRegion: zod_1.z.string().trim().min(1).optional(),
+    /**
+     * @deprecated Read view of `transports.ses.accessKeyId`. SES access key id. An IDENTIFIER, NOT A SECRET: it travels in clear in
+     * every SigV4 request. The secret access key lives in the credential store.
+     */
+    sesAccessKeyId: zod_1.z.string().trim().min(1).optional(),
+    /** @deprecated Read view of `transports.smtp.host`. SMTP server host. */
+    smtpHost: zod_1.z.string().trim().min(1).optional(),
+    /**
+     * @deprecated Read view of `transports.smtp.port`. SMTP port, validated here so a typo fails on the settings form rather than
+     * as a socket-level error.
+     */
+    smtpPort: zod_1.z.number().int().min(1).max(65535).optional(),
+    /**
+     * @deprecated Read view of `transports.smtp.useTls`. Require TLS. Absent is treated as `true` by the provider: a mail
+     * credential must not cross the network in the clear because a checkbox was
+     * missing from a stored row.
+     */
+    smtpUseTls: zod_1.z.boolean().optional(),
+    /**
+     * @deprecated Read view of `transports.smtp.username`. SMTP username. Absent means unauthenticated submission (an internal relay
+     * that authorises by source IP).
+     */
+    smtpUsername: zod_1.z.string().trim().min(1).optional(),
+    /** Envelope and header sender, validated as an address. */
+    fromAddress: zod_1.z.email().optional(),
+    /** Display name paired with `fromAddress`, e.g. `Acme <no-reply@acme.com>`. */
+    fromName: zod_1.z.string().trim().min(1).max(100).optional(),
+});
+/**
+ * What a system with no email configuration reads as: no transport, switched
+ * off.
+ *
+ * @stability stable
+ */
+exports.DEFAULT_EMAIL_SETTINGS = {
+    provider: null,
+    enabled: false,
+};
+/**
+ * What the admin page knows about a stored secret (the SMTP password, the SES
+ * secret access key) without being told the secret: whether it is set, the
+ * store's mask, and when and by whom it was last written.
+ *
+ * @stability stable
+ */
+exports.credentialStatusSchema = zod_1.z.object({
+    /** Is a secret stored at this credential's address? */
+    configured: zod_1.z.boolean(),
+    /** The store's non-secret mask, e.g. `••••x9fQ`; null when nothing is stored. */
+    hint: zod_1.z.string().nullable(),
+    /** When the stored secret was last written; null when nothing is stored. */
+    updatedAt: zod_1.z.iso.datetime().nullable(),
+    /** Who last wrote it; null when nothing is stored, or the user was deleted. */
+    updatedByUserId: zod_1.z.uuid().nullable(),
+});
+/**
+ * The `GET` and `PUT /api/email-settings` response body (inside the global
+ * `{ data }` envelope): the settings, a descriptor per registered transport,
+ * the masked status of every transport secret, why
+ * the stored row could not be read (field paths only; the read degrades to
+ * the defaults instead of failing, so the page that repairs the row still
+ * renders), and the row's version for `If-Match`.
+ *
+ * @stability stable
+ */
+exports.emailSettingsResponseSchema = exports.emailSettingsSchema.extend({
+    /** Every REGISTERED transport's own settings, keyed by transport id, with its defaults filled. */
+    transports: exports.emailTransportsSchema,
+    /**
+     * One descriptor per registered transport, in registration order: its id
+     * and label, its non-secret settings fields and one `secret` field per
+     * declared secret carrying only whether a value is stored (`hasValue`),
+     * never the value. The admin page renders any transport without
+     * hard-coded knowledge of it.
+     */
+    descriptors: zod_1.z.array(index_js_1.pluggableDescriptorSchema),
+    /**
+     * The masked status of every declared secret of every registered transport:
+     * `{ <transportId>: { <secretName>: status } }`. Nothing here can carry a value.
+     */
+    secretStatuses: zod_1.z.record(exports.emailTransportIdSchema, zod_1.z.record(zod_1.z.string(), exports.credentialStatusSchema)),
+    /** @deprecated `secretStatuses.smtp.password`. The SMTP password's masked status. */
+    smtpPasswordStatus: exports.credentialStatusSchema,
+    /** @deprecated `secretStatuses.ses.secretAccessKey`. The SES secret access key's masked status. */
+    sesSecretAccessKeyStatus: exports.credentialStatusSchema,
+    /** Why the stored configuration could not be read; null normally. Field paths only. */
+    settingsError: zod_1.z.string().nullable(),
+    /** Bumped on every write; pass back as `If-Match` on PUT. `0` while nothing is stored. */
+    version: zod_1.z.number().int(),
+    /** When the row last changed. */
+    updatedAt: zod_1.z.iso.datetime().nullable(),
+    /** Who last changed it. */
+    updatedBy: zod_1.z
+        .object({
+        /** The user's id. */
+        id: zod_1.z.uuid(),
+        /** The user's address. */
+        email: zod_1.z.email(),
+    })
+        .nullable(),
+});
+/**
+ * Length ceiling on a submitted secret. Not a security control: a bound on
+ * what a paste accident can push into an encrypted column.
+ */
+const MAX_SECRET_LENGTH = 1024;
+/**
+ * A settings field an admin left empty: a cleared input submits `''`, a reset
+ * controlled field `null`. A union rather than a `z.preprocess`, because the
+ * OpenAPI generator cannot represent a transform. The service converts both
+ * to "absent".
+ */
+const unset = zod_1.z.union([zod_1.z.literal(''), zod_1.z.null()]);
+/** The stored rule for one field, plus the two "empty box" forms. */
+function blankable(inner) {
+    return zod_1.z.union([unset, inner]);
+}
+/**
+ * The `PUT /api/email-settings` body: every settings field (blankable), the
+ * `transports` patch, plus the WRITE-ONLY secrets (`secrets`, and the two
+ * legacy aliases). A blank secret (absent, `null` or `''`)
+ * preserves the stored one; erasing a stored secret is not expressible here.
+ *
+ * @stability stable
+ */
+exports.updateEmailSettingsSchema = exports.emailSettingsSchema.extend({
+    /**
+     * Transport settings to merge, per transport id, each validated by the
+     * transport that owns it. `null` removes a transport's stored settings (back
+     * to its defaults); a setting a transport's entry omits keeps its stored
+     * value. `transports.<id>` wins over a legacy flat field for the same setting.
+     */
+    transports: exports.emailTransportsPatchSchema.optional(),
+    /** @deprecated Alias of `transports.ses.region`; blank clears it. */
+    sesRegion: blankable(exports.emailSettingsSchema.shape.sesRegion),
+    /** @deprecated Alias of `transports.ses.accessKeyId` (not a secret); blank clears it. */
+    sesAccessKeyId: blankable(exports.emailSettingsSchema.shape.sesAccessKeyId),
+    /** @deprecated Alias of `transports.smtp.host`; blank clears it. */
+    smtpHost: blankable(exports.emailSettingsSchema.shape.smtpHost),
+    /** @deprecated Alias of `transports.smtp.port`; blank clears it (587 applies). */
+    smtpPort: blankable(exports.emailSettingsSchema.shape.smtpPort),
+    /** @deprecated Alias of `transports.smtp.useTls`; blank clears it (on applies). */
+    smtpUseTls: blankable(exports.emailSettingsSchema.shape.smtpUseTls),
+    /** @deprecated Alias of `transports.smtp.username`; blank means unauthenticated submission. */
+    smtpUsername: blankable(exports.emailSettingsSchema.shape.smtpUsername),
+    /** Sender address; blank clears it. */
+    fromAddress: blankable(exports.emailSettingsSchema.shape.fromAddress),
+    /** Sender display name; blank clears it. */
+    fromName: blankable(exports.emailSettingsSchema.shape.fromName),
+    /** The SMTP password. Write-only; blank preserves the stored one. Alias of `secrets.smtp.password`. */
+    smtpPassword: zod_1.z.string().max(MAX_SECRET_LENGTH).nullish(),
+    /** The SES secret access key. Write-only; blank preserves the stored one. Alias of `secrets.ses.secretAccessKey`. */
+    sesSecretAccessKey: zod_1.z.string().max(MAX_SECRET_LENGTH).nullish(),
+    /**
+     * WRITE-ONLY secrets of any transport: `{ <transportId>: { <secretName>: value } }`,
+     * the names the transport declares (`descriptors[].fields` of kind `secret`).
+     * A blank value keeps the stored one. Never echoed back.
+     */
+    secrets: zod_1.z.record(exports.emailTransportIdSchema, zod_1.z.record(zod_1.z.string(), zod_1.z.string().max(4096).nullish())).optional(),
+});
+/**
+ * The `POST /api/email-settings/test` response body. HTTP 200 even when the
+ * send failed: read `success`, and show `error`, the provider's own message
+ * (already redacted of every credential and length-capped by the API).
+ *
+ * @stability stable
+ */
+exports.testEmailResultSchema = zod_1.z.object({
+    /** Did the provider ACCEPT the message (not: was it delivered)? */
+    success: zod_1.z.boolean(),
+    /** Where it went: always the caller's own address (there is no recipient parameter). */
+    sentTo: zod_1.z.email(),
+    /** Which transport carried (or refused) it; null when none was configured. */
+    providerKind: providerKindSchema.nullable(),
+    /** The transport's message id, on success. */
+    messageId: zod_1.z.string().nullable(),
+    /** The provider's error, verbatim after redaction; null on success. */
+    error: zod_1.z.string().nullable(),
+    /** When the attempt was made (ISO 8601). */
+    attemptedAt: zod_1.z.iso.datetime(),
+});
+/**
+ * The proof that {@link EmailSettings} carries no secret (fails to compile otherwise).
+ *
+ * @stability stable
+ */
+exports.EMAIL_SETTINGS_CARRIES_NO_SECRET = true;
+/**
+ * The proof that {@link EmailSettingsResponse} carries no secret (fails to compile otherwise).
+ *
+ * @stability stable
+ */
+exports.EMAIL_SETTINGS_RESPONSE_CARRIES_NO_SECRET = true;
+//# sourceMappingURL=schemas.js.map

package/dist/cjs/email/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/email/schemas.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,mCAAmC;AACnC,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,gFAAgF;;;AAEhF,6BAAwB;AAExB,mDAAiE;AACjE,iDAA4D;AAW5D;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yCAA0B,CAAC,CAAC;AAEnF;;;;;;;GAOG;AACU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE9E;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,8BAAsB,EAAE,oCAA4B,CAAC,CAAC;AAEpG;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC,8BAAsB,EAAE,oCAA4B,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpH,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,8BAAsB,CAAC;AAElD;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAEvC,0DAA0D;IAC1D,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IAEpB;;;;;;OAMG;IACH,UAAU,EAAE,6BAAqB,CAAC,QAAQ,EAAE;IAE5C;;;;OAIG;IACH,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE9C;;;OAGG;IACH,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEnD,yEAAyE;IACzE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE7C;;;OAGG;IACH,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAEvD;;;;OAIG;IACH,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAElC;;;OAGG;IACH,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEjD,2DAA2D;IAC3D,WAAW,EAAE,OAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAEjC,+EAA+E;IAC/E,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AASH;;;;;GAKG;AACU,QAAA,sBAAsB,GAAkB;IACnD,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;;;;GAMG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,uDAAuD;IACvD,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB,iFAAiF;IACjF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,4EAA4E;IAC5E,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,+EAA+E;IAC/E,eAAe,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AASH;;;;;;;;;GASG;AACU,QAAA,2BAA2B,GAAG,2BAAmB,CAAC,MAAM,CAAC;IACpE,kGAAkG;IAClG,UAAU,EAAE,6BAAqB;IACjC;;;;;;OAMG;IACH,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,oCAAyB,CAAC;IAC/C;;;OAGG;IACH,cAAc,EAAE,OAAC,CAAC,MAAM,CAAC,8BAAsB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,8BAAsB,CAAC,CAAC;IAC9F,qFAAqF;IACrF,kBAAkB,EAAE,8BAAsB;IAC1C,mGAAmG;IACnG,wBAAwB,EAAE,8BAAsB;IAChD,uFAAuF;IACvF,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,0FAA0F;IAC1F,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,iCAAiC;IACjC,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,2BAA2B;IAC3B,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,qBAAqB;QACrB,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE;QACZ,0BAA0B;QAC1B,KAAK,EAAE,OAAC,CAAC,KAAK,EAAE;KACjB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AASH;;;GAGG;AACH,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,KAAK,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAEjD,qEAAqE;AACrE,SAAS,SAAS,CAAyB,KAAQ;IACjD,OAAO,OAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,yBAAyB,GAAG,2BAAmB,CAAC,MAAM,CAAC;IAClE;;;;;OAKG;IACH,UAAU,EAAE,kCAA0B,CAAC,QAAQ,EAAE;IACjD,qEAAqE;IACrE,SAAS,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;IACzD,yFAAyF;IACzF,cAAc,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,cAAc,CAAC;IACnE,oEAAoE;IACpE,QAAQ,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvD,kFAAkF;IAClF,QAAQ,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvD,mFAAmF;IACnF,UAAU,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,UAAU,CAAC;IAC3D,+FAA+F;IAC/F,YAAY,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;IAC/D,uCAAuC;IACvC,WAAW,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7D,4CAA4C;IAC5C,QAAQ,EAAE,SAAS,CAAC,2BAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvD,uGAAuG;IACvG,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACzD,qHAAqH;IACrH,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IAC/D;;;;OAIG;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,8BAAsB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3G,CAAC,CAAC;AASH;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,mEAAmE;IACnE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,wFAAwF;IACxF,MAAM,EAAE,OAAC,CAAC,KAAK,EAAE;IACjB,8EAA8E;IAC9E,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,8CAA8C;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,uEAAuE;IACvE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,4CAA4C;IAC5C,WAAW,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAyCH;;;;GAIG;AACU,QAAA,gCAAgC,GAAiC,IAAI,CAAC;AAUnF;;;;GAIG;AACU,QAAA,yCAAyC,GAAyC,IAAI,CAAC"}