@memberjunction/server 6.1.0-edge.2 → 6.1.0-edge.4

package/dist/auth/initializeProviders.js

@@ -1,13 +1,41 @@
 import { configInfo } from '../config.js';
-import { LogError } from '@memberjunction/core';
+import { LogError, LogStatus, LogStatusEx } from '@memberjunction/core';
 import { AuthProviderFactory } from '@memberjunction/auth-providers';
+import { AuthProviderEngine } from './AuthProviderEngine.js';
 /**
- * Initialize authentication providers from configuration
+ * Initialize authentication providers from configuration.
+ *
+ * Registers everything declared in `mj.config.cjs`'s `authProviders` array. This remains the
+ * baseline path and runs on every boot: it needs no database, so it is what lets the server
+ * authenticate even when metadata is unreachable.
+ *
+ * Providers defined in the `MJ: Authentication Providers` catalog are layered on top by
+ * {@link initializeAuthProvidersFromMetadata}, which runs later in startup once a database
+ * connection and a system user exist.
  */
 export function initializeAuthProviders() {
     const factory = AuthProviderFactory.Instance;
     // Clear any existing providers
     factory.clear();
+    // Environment-derived providers are DEFAULTS: each provider class maps its own variables via
+    // the ConfigFromEnvironment hook, and they apply only when the config file declares no
+    // providers of its own. That mirrors the previous behaviour exactly — the env block used to sit
+    // in DEFAULT_SERVER_CONFIG, and mergeConfigs replaces (rather than concatenates) arrays, so an
+    // explicit `authProviders` in mj.config.cjs has always suppressed the env-derived set.
+    //
+    // Written back into configInfo.authProviders rather than kept local because that array is the
+    // live registry other code reads and appends to (registerMagicLinkAuthProvider pushes into it so
+    // a later re-initialize keeps magic-link).
+    if (!configInfo.authProviders || configInfo.authProviders.length === 0) {
+        const discovered = AuthProviderFactory.DiscoverFromEnvironment();
+        if (discovered.length > 0) {
+            configInfo.authProviders = discovered;
+            LogStatusEx({
+                message: `[Auth] Configured ${discovered.length} provider(s) from environment variables: ${discovered.map((p) => p.name).join(', ')}`,
+                verboseOnly: true
+            });
+        }
+    }
     // Initialize providers from authProviders config
     if (configInfo.authProviders && configInfo.authProviders.length > 0) {
         for (const providerConfig of configInfo.authProviders) {
@@ -23,9 +51,93 @@ export function initializeAuthProviders() {
             }
         }
     }
-    // Validate we have at least one provider
-    if (!factory.hasProviders()) {
-        LogError('No authentication providers configured. Please configure authProviders array in mj.config.cjs');
+    // NOTE: the "no providers configured" check deliberately does NOT live here any more — see
+    // validateAuthProvidersRegistered(). A metadata-only deployment legitimately has an empty
+    // authProviders array at this point, and erroring here would cry wolf on every boot.
+}
+/**
+ * Layers the metadata provider catalog on top of the config-declared providers.
+ *
+ * Called after the data provider and system user are available. Metadata rows are registered in
+ * addition to — not instead of — the config-declared ones: a deployment mid-migration may
+ * legitimately have both, and a name collision resolves to the metadata row because it registers
+ * last and `AuthProviderFactory.register` keys by provider name.
+ *
+ * Never throws. An unreachable or empty catalog leaves the config-declared providers exactly as
+ * they were, which is what makes adopting this feature a no-op for existing deployments and keeps
+ * a metadata problem from turning into a lockout.
+ *
+ * @returns the number of providers registered from metadata.
+ */
+export async function initializeAuthProvidersFromMetadata(contextUser, provider) {
+    try {
+        await AuthProviderEngine.Instance.Config(false, contextUser, provider);
+        const count = await AuthProviderEngine.Instance.RegisterAll(contextUser);
+        if (count > 0) {
+            LogStatus(`[Auth] ${count} authentication provider(s) registered from metadata.`);
+        }
+        return count;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        LogError(`[Auth] Could not load the authentication provider catalog from metadata (${message}). Continuing with providers from mj.config.cjs.`);
+        return 0;
+    }
+}
+/**
+ * Rebuilds the provider registry from scratch: config-declared providers first, then the
+ * metadata catalog layered on top — the same two-source order as startup.
+ *
+ * This is THE entry point for reacting to a catalog edit at runtime (an admin page's Save
+ * button, a future invalidation hook). A full rebuild is required because the factory caches
+ * issuer→provider resolutions, so an edited row would otherwise keep serving its old
+ * configuration until the process restarted. It lives here rather than on `AuthProviderEngine`
+ * because a bare `factory.clear()` + metadata re-registration would silently drop everything
+ * the config path registered — magic-link included — and no caller should have to know to put
+ * those back. `initializeAuthProviders()` clears the factory itself, so no separate clear step
+ * exists for a caller to forget.
+ *
+ * **Failure policy: abort-before-mutate.** Everything that can throw — the catalog reload and
+ * the permission probe on its result — runs BEFORE the factory is touched, so a failed refresh
+ * leaves the registry serving the previous (stale but complete) provider set and surfaces the
+ * error to the caller. This is deliberately the opposite of `initializeAuthProvidersFromMetadata`,
+ * which swallows metadata failures: at boot there is no previous registry to preserve and a
+ * metadata problem must not become a lockout, while at refresh time there is one and the caller
+ * (an admin UI) wants the error. That difference in failure policy is why this function does not
+ * simply delegate to its sibling.
+ *
+ * Known limitation, acceptable for an admin-triggered operation: metadata providers are absent
+ * from the registry for the duration of `RegisterAll`'s per-row config builds (config-declared
+ * providers are restored synchronously). A request bearing a metadata-declared IdP's token in
+ * that window is rejected. If a caller ever needs an atomic swap, build the configs first and
+ * register them in one synchronous pass.
+ *
+ * @returns the number of providers registered from metadata after the refresh.
+ */
+export async function refreshAuthProviders(contextUser, provider) {
+    await AuthProviderEngine.Instance.Config(true, contextUser, provider);
+    // Probe the reloaded catalog BEFORE clearing anything: reading Providers throws
+    // PermissionConstrainedError when the load was skipped for permission reasons, and that
+    // failure must abort the refresh while the registry is still intact.
+    const pendingRows = AuthProviderEngine.Instance.Providers.length;
+    initializeAuthProviders();
+    const count = await AuthProviderEngine.Instance.RegisterAll(contextUser);
+    LogStatus(`[Auth] Provider registry refreshed — ${count} of ${pendingRows} metadata provider(s) registered on top of the config-declared set.`);
+    return count;
+}
+/**
+ * Reports whether any provider is registered, from either source, and logs a diagnostic when none
+ * is.
+ *
+ * Split out from {@link initializeAuthProviders} because "no providers" is only genuinely wrong
+ * once BOTH sources have had their turn.
+ */
+export function validateAuthProvidersRegistered() {
+    const hasProviders = AuthProviderFactory.Instance.hasProviders();
+    if (!hasProviders) {
+        LogError('No authentication providers are configured. Define them in the "MJ: Authentication Providers" metadata entity, ' +
+            'or in the authProviders array in mj.config.cjs.');
     }
+    return hasProviders;
 }
 //# sourceMappingURL=initializeProviders.js.map

package/dist/auth/initializeProviders.js.map

@@ -1 +1 @@
-{"version":3,"file":"initializeProviders.js","sourceRoot":"","sources":["../../src/auth/initializeProviders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAsB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC;IAE7C,+BAA+B;IAC/B,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,iDAAiD;IACjD,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,cAAc,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,CAAC,cAAoC,CAAC,CAAC;gBAC1F,sFAAsF;gBACtF,mFAAmF;gBACnF,6CAA6C;gBAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,sCAAsC,cAAc,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QAC5B,QAAQ,CAAC,+FAA+F,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC"}
+{"version":3,"file":"initializeProviders.js","sourceRoot":"","sources":["../../src/auth/initializeProviders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAsB,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAoC,MAAM,sBAAsB,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC;IAE7C,+BAA+B;IAC/B,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,6FAA6F;IAC7F,uFAAuF;IACvF,gGAAgG;IAChG,+FAA+F;IAC/F,uFAAuF;IACvF,EAAE;IACF,8FAA8F;IAC9F,iGAAiG;IACjG,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;QACjE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC;YACtC,WAAW,CAAC;gBACV,OAAO,EAAE,qBAAqB,UAAU,CAAC,MAAM,4CAA4C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrI,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,cAAc,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,CAAC,cAAoC,CAAC,CAAC;gBAC1F,sFAAsF;gBACtF,mFAAmF;gBACnF,6CAA6C;gBAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,sCAAsC,cAAc,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,0FAA0F;IAC1F,qFAAqF;AACvF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,WAAsB,EAAE,QAA4B;IAC5G,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACzE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,SAAS,CAAC,UAAU,KAAK,uDAAuD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,QAAQ,CAAC,4EAA4E,OAAO,kDAAkD,CAAC,CAAC;QAChJ,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAsB,EAAE,QAA4B;IAC7F,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEtE,gFAAgF;IAChF,wFAAwF;IACxF,qEAAqE;IACrE,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;IAEjE,uBAAuB,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACzE,SAAS,CACP,wCAAwC,KAAK,OAAO,WAAW,qEAAqE,CACrI,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B;IAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IACjE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,QAAQ,CACN,iHAAiH;YAC/G,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/auth/scopeLimitedPrincipal.d.ts

@@ -0,0 +1,39 @@
+import { UserInfo } from '@memberjunction/core';
+/**
+ * True when a session's read authority is deliberately narrower than the role grant it
+ * authenticates with — i.e. the principal is confined by per-session scope rather than by
+ * its roles alone.
+ *
+ * Two such principals exist today, both from the magic-link surface:
+ *
+ * - **Anonymous magic-link guests** (`IsMagicLinkAnonymous`) authenticate as the *shared*
+ *   Anonymous principal, so their role grant is common to every guest. What separates one
+ *   guest from another is not the role — it is the per-session scope.
+ * - **Resource-scoped magic-link sessions** (`MagicLinkScope`) hold a normal role, pinned to
+ *   one shared resource (and its FK-reachable dependents) for the life of the session.
+ *
+ * In both cases the confinement is expressed as row-level-security filter tokens
+ * (`{{ScopeResourceID}}` / `{{ScopeResourceType}}`) that the entity-read path substitutes.
+ * That means the confinement only exists on code paths that go **through** entity
+ * permissions and RLS — `RunView`, `BaseEntity`, the generated resolvers. Any path that
+ * reaches the database *around* those layers (raw SQL on the read-only pool, for instance)
+ * sees no scope at all, so such a path must refuse these principals outright rather than
+ * assume a filter it never applies.
+ *
+ * Callers should treat a `true` result as "not permitted here", never as "apply a narrower
+ * filter" — a caller that could narrow correctly would not need this predicate.
+ *
+ * @param user the principal to classify. A missing principal returns `true`: an
+ *        unidentifiable session is the one case where the scope certainly cannot be
+ *        established, so it fails closed.
+ * @returns `true` when the principal is scope-limited (or unidentifiable), else `false`.
+ *
+ * @example
+ * ```typescript
+ * if (IsScopeLimitedPrincipal(context.userPayload?.userRecord)) {
+ *     return this.buildErrorResult('Not permitted for scope-limited sessions.');
+ * }
+ * ```
+ */
+export declare function IsScopeLimitedPrincipal(user: UserInfo | undefined | null): boolean;
+//# sourceMappingURL=scopeLimitedPrincipal.d.ts.map

package/dist/auth/scopeLimitedPrincipal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeLimitedPrincipal.d.ts","sourceRoot":"","sources":["../../src/auth/scopeLimitedPrincipal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAWlF"}

package/dist/auth/scopeLimitedPrincipal.js

@@ -0,0 +1,49 @@
+/**
+ * True when a session's read authority is deliberately narrower than the role grant it
+ * authenticates with — i.e. the principal is confined by per-session scope rather than by
+ * its roles alone.
+ *
+ * Two such principals exist today, both from the magic-link surface:
+ *
+ * - **Anonymous magic-link guests** (`IsMagicLinkAnonymous`) authenticate as the *shared*
+ *   Anonymous principal, so their role grant is common to every guest. What separates one
+ *   guest from another is not the role — it is the per-session scope.
+ * - **Resource-scoped magic-link sessions** (`MagicLinkScope`) hold a normal role, pinned to
+ *   one shared resource (and its FK-reachable dependents) for the life of the session.
+ *
+ * In both cases the confinement is expressed as row-level-security filter tokens
+ * (`{{ScopeResourceID}}` / `{{ScopeResourceType}}`) that the entity-read path substitutes.
+ * That means the confinement only exists on code paths that go **through** entity
+ * permissions and RLS — `RunView`, `BaseEntity`, the generated resolvers. Any path that
+ * reaches the database *around* those layers (raw SQL on the read-only pool, for instance)
+ * sees no scope at all, so such a path must refuse these principals outright rather than
+ * assume a filter it never applies.
+ *
+ * Callers should treat a `true` result as "not permitted here", never as "apply a narrower
+ * filter" — a caller that could narrow correctly would not need this predicate.
+ *
+ * @param user the principal to classify. A missing principal returns `true`: an
+ *        unidentifiable session is the one case where the scope certainly cannot be
+ *        established, so it fails closed.
+ * @returns `true` when the principal is scope-limited (or unidentifiable), else `false`.
+ *
+ * @example
+ * ```typescript
+ * if (IsScopeLimitedPrincipal(context.userPayload?.userRecord)) {
+ *     return this.buildErrorResult('Not permitted for scope-limited sessions.');
+ * }
+ * ```
+ */
+export function IsScopeLimitedPrincipal(user) {
+    if (!user) {
+        return true; // no identifiable principal — fail closed
+    }
+    if (user.IsMagicLinkAnonymous) {
+        return true;
+    }
+    const scope = user.MagicLinkScope;
+    // An empty scope object carries no confinement; only a populated one does. (Truthiness
+    // of the object alone would classify `{}` as scoped and lock out a session that is not.)
+    return !!(scope?.ResourceID || scope?.ResourceType);
+}
+//# sourceMappingURL=scopeLimitedPrincipal.js.map

package/dist/auth/scopeLimitedPrincipal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeLimitedPrincipal.js","sourceRoot":"","sources":["../../src/auth/scopeLimitedPrincipal.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiC;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,CAAC,0CAA0C;IAC3D,CAAC;IACD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;IAClC,uFAAuF;IACvF,yFAAyF;IACzF,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,IAAI,KAAK,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC"}

package/dist/config.d.ts

@@ -1,7 +1,19 @@
 import { z } from 'zod';
 declare const userHandlingInfoSchema: z.ZodObject<{
     autoCreateNewUsers: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /** When true, auto-provisioning is restricted to the domains in `newUserAuthorizedDomains`. */
     newUserLimitedToAuthorizedDomains: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /**
+     * Authorized **email domains** for auto-provisioned users — e.g. `['example.com', '*.example.org']`.
+     *
+     * These are matched against the domain of the email address in the verified identity token, NOT
+     * against the browser `Origin` / frontend hostname. If you are upgrading from a build that
+     * compared these to the request origin, replace any frontend hostnames here (`app.example.com`,
+     * `localhost`) with the email domains your users actually sign in with.
+     *
+     * `*` wildcards are supported and match in full: `*.example.com` matches `mail.example.com` but
+     * NOT `example.com` — list both if you need both.
+     */
     newUserAuthorizedDomains: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
     newUserRoles: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
     updateCacheWhenNotFound: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
@@ -332,6 +344,32 @@ declare const scheduledJobsSchema: z.ZodObject<{
     defaultLockTimeout?: number;
     staleLockCleanupInterval?: number;
 }>;
+/**
+ * Integration sync worker (PR 1 item 8). When enabled, this process polls
+ * `CompanyIntegrationRun` for `Status='Queued'` rows, atomically claims them, executes
+ * the sync, and releases. The claim sproc is the mutual exclusion, so any number of
+ * processes may run a worker against the same database.
+ */
+declare const integrationSyncWorkerSchema: z.ZodObject<{
+    /** Master switch — off by default so existing deployments keep running syncs inline. */
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /** Email of the user the worker executes syncs as. */
+    systemUserEmail: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    /** How often to poll the queue, in ms. */
+    pollingIntervalMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    /** Maximum runs this worker executes concurrently. */
+    maxConcurrentRuns: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    enabled?: boolean;
+    systemUserEmail?: string;
+    pollingIntervalMs?: number;
+    maxConcurrentRuns?: number;
+}, {
+    enabled?: boolean;
+    systemUserEmail?: string;
+    pollingIntervalMs?: number;
+    maxConcurrentRuns?: number;
+}>;
 declare const queryDialectSchema: z.ZodObject<{
     /** When true, saving a Query entity auto-generates QuerySQL entries for configured target dialects */
     autoConvertOnSave: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -1764,7 +1802,19 @@ declare const telephonySchema: z.ZodObject<{
 declare const configInfoSchema: z.ZodObject<{
     userHandling: z.ZodObject<{
         autoCreateNewUsers: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** When true, auto-provisioning is restricted to the domains in `newUserAuthorizedDomains`. */
         newUserLimitedToAuthorizedDomains: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /**
+         * Authorized **email domains** for auto-provisioned users — e.g. `['example.com', '*.example.org']`.
+         *
+         * These are matched against the domain of the email address in the verified identity token, NOT
+         * against the browser `Origin` / frontend hostname. If you are upgrading from a build that
+         * compared these to the request origin, replace any frontend hostnames here (`app.example.com`,
+         * `localhost`) with the email domains your users actually sign in with.
+         *
+         * `*` wildcards are supported and match in full: `*.example.com` matches `mail.example.com` but
+         * NOT `example.com` — list both if you need both.
+         */
         newUserAuthorizedDomains: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
         newUserRoles: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
         updateCacheWhenNotFound: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
@@ -2963,6 +3013,26 @@ declare const configInfoSchema: z.ZodObject<{
         defaultLockTimeout?: number;
         staleLockCleanupInterval?: number;
     }>>>;
+    integrationSyncWorker: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        /** Master switch — off by default so existing deployments keep running syncs inline. */
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Email of the user the worker executes syncs as. */
+        systemUserEmail: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        /** How often to poll the queue, in ms. */
+        pollingIntervalMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /** Maximum runs this worker executes concurrently. */
+        maxConcurrentRuns: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled?: boolean;
+        systemUserEmail?: string;
+        pollingIntervalMs?: number;
+        maxConcurrentRuns?: number;
+    }, {
+        enabled?: boolean;
+        systemUserEmail?: string;
+        pollingIntervalMs?: number;
+        maxConcurrentRuns?: number;
+    }>>>;
     telemetry: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
         level: z.ZodDefault<z.ZodOptional<z.ZodEnum<["minimal", "standard", "verbose", "debug"]>>>;
@@ -3452,6 +3522,12 @@ declare const configInfoSchema: z.ZodObject<{
         defaultLockTimeout?: number;
         staleLockCleanupInterval?: number;
     };
+    integrationSyncWorker?: {
+        enabled?: boolean;
+        systemUserEmail?: string;
+        pollingIntervalMs?: number;
+        maxConcurrentRuns?: number;
+    };
     telemetry?: {
         enabled?: boolean;
         level?: "minimal" | "standard" | "verbose" | "debug";
@@ -3727,6 +3803,12 @@ declare const configInfoSchema: z.ZodObject<{
         defaultLockTimeout?: number;
         staleLockCleanupInterval?: number;
     };
+    integrationSyncWorker?: {
+        enabled?: boolean;
+        systemUserEmail?: string;
+        pollingIntervalMs?: number;
+        maxConcurrentRuns?: number;
+    };
     telemetry?: {
         enabled?: string | number | boolean;
         level?: "minimal" | "standard" | "verbose" | "debug";
@@ -3835,6 +3917,7 @@ export type SqlLoggingInfo = z.infer<typeof sqlLoggingSchema>;
 export type AuthProviderConfig = z.infer<typeof authProviderSchema>;
 export type ComponentRegistryConfig = z.infer<typeof componentRegistrySchema>;
 export type ScheduledJobsConfig = z.infer<typeof scheduledJobsSchema>;
+export type IntegrationSyncWorkerConfig = z.infer<typeof integrationSyncWorkerSchema>;
 export type TelemetryConfig = z.infer<typeof telemetrySchema>;
 export type QueryDialectConfig = z.infer<typeof queryDialectSchema>;
 export type MultiTenancyConfig = z.infer<typeof multiTenancySchema>;
@@ -4059,6 +4142,12 @@ export declare function loadConfig(): {
         defaultLockTimeout?: number;
         staleLockCleanupInterval?: number;
     };
+    integrationSyncWorker?: {
+        enabled?: boolean;
+        systemUserEmail?: string;
+        pollingIntervalMs?: number;
+        maxConcurrentRuns?: number;
+    };
     telemetry?: {
         enabled?: boolean;
         level?: "minimal" | "standard" | "verbose" | "debug";

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU1B,CAAC;AAEH,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAC;AAEH,QAAA,MAAM,uBAAuB;;;;;;EAE3B,CAAC;AAEH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAMxB,CAAC;AA4BH,QAAA,MAAM,uBAAuB;;;;IAI3B;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;EAMH,CAAC;AAEH,QAAA,MAAM,gBAAgB;;;;;;QAdpB;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeH,CAAC;AAEH,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAUR,CAAC;AAEjB,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAab,CAAC;AAEjB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAMvB,CAAC;AAEH,QAAA,MAAM,kBAAkB;IACtB,sGAAsG;;IAEtG,sFAAsF;;;;;;;;EAEtF,CAAC;AAEH,QAAA,MAAM,kBAAkB;IACtB,2EAA2E;;IAE3E,uDAAuD;;IAEvD,2DAA2D;;IAE3D,+EAA+E;;IAE/E,gFAAgF;;IAEhF,4EAA4E;;IAE5E,2DAA2D;;IAE3D,sFAAsF;;IAEtF,kDAAkD;;IAElD,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;EAEnF,CAAC;AAEH,QAAA,MAAM,eAAe;;;;;;;;;EAKnB,CAAC;AAEH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;gCAKX,CAAC;AAEjB,QAAA,MAAM,mBAAmB;IACvB,4HAA4H;;IAE5H,oHAAoH;;IAEpH,wFAAwF;;IAExF,+FAA+F;;IAE/F,8EAA8E;;;;;;;;;;;;;;EAE9E,CAAC;AAEH,QAAA,MAAM,qBAAqB;;QAEvB;;;;;;;;WAQG;;;;;;;;;;;;;;;EAGL,CAAC;AAEH,QAAA,MAAM,UAAU;IACd,kGAAkG;;IAElG,gFAAgF;;IAEhF,mFAAmF;;;;;;;;;;EAEnF,CAAC;AAEH,QAAA,MAAM,aAAa;IACjB;;;;;;;OAOG;;;;;;EAEH,CAAC;AAEH,QAAA,MAAM,eAAe;IACnB,yEAAyE;;;QAGvE,+CAA+C;;QAE/C,0CAA0C;;QAE1C,qDAAqD;;;;;;;;;;;;QAIrD,kEAAkE;;QAElE,sDAAsD;;;;;;;;;;QAItD,sEAAsE;;QAEtE,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGtD,CAAC;AAEH,QAAA,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AAEH,QAAA,MAAM,sBAAsB;IAC1B,yFAAyF;;IAEzF,uEAAuE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvE,CAAC;AAEH,QAAA,MAAM,eAAe;IACnB,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;;IAvDH,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;;IAvDH,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;gCAEW,CAAC;AAEjB;;;;;;GAMG;AACH,QAAA,MAAM,YAAY;IAChB,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;;IAvCH,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;;IAvCH,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;gCAKW,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB;IACzB,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;;IAZ1E,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;;IAZ1E,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;gCAE5D,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB;IACzB,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;;IAZxG,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;;IAZxG,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;gCAE1F,CAAC;AAEjB;;;;;;;;;;GAUG;AACH,QAAA,MAAM,0BAA0B;IAC9B,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;;IAZ1E,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;;IAZ1E,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;gCAE5D,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,mBAAmB;IACvB,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;;IAZpG,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;;IAZpG,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;gCAEtF,CAAC;AAEjB,QAAA,MAAM,eAAe;IACnB,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;;IAKpG,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;;IAKpG,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;gCAetF,CAAC;AAEjB,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA/NpB,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;QAvDH,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;QAvDH,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;;QAYH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;QAvCH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;QAvCH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;;QAyGH,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;QAKpG,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;QAKpG,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA/YpG;;;;;;eAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAqDH,sGAAsG;;QAEtG,sFAAsF;;;;;;;;;;QAKtF,2EAA2E;;QAE3E,uDAAuD;;QAEvD,2DAA2D;;QAE3D,+EAA+E;;QAE/E,gFAAgF;;QAEhF,4EAA4E;;QAE5E,2DAA2D;;QAE3D,sFAAsF;;QAEtF,kDAAkD;;QAElD,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmBnF,4HAA4H;;QAE5H,oHAAoH;;QAEpH,wFAAwF;;QAExF,+FAA+F;;QAE/F,8EAA8E;;;;;;;;;;;;;;;;;YAM5E;;;;;;;;eAQG;;;;;;;;;;;;;;;;;QA6DL,yFAAyF;;QAEzF,uEAAuE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAzDvE,kGAAkG;;QAElG,gFAAgF;;QAEhF,mFAAmF;;;;;;;;;;;;QAiBnF,yEAAyE;;;YAGvE,+CAA+C;;YAE/C,0CAA0C;;YAE1C,qDAAqD;;;;;;;;;;;;YAIrD,kEAAkE;;YAElE,sDAAsD;;;;;;;;;;YAItD,sEAAsE;;YAEtE,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA/BtD;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiUH,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AACpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,UAAU,CAoJrD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,IAAI,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;AAE9C,eAAO,MAAM,UAAU,EAAE,UAAyB,CAAC;AAEnD,eAAO,MACL,UAAU,UACV,UAAU,UACV,MAAM,UACN,UAAU,UACV,MAAM,UACN,wBAAwB,aACxB,cAAc,UACd,WAAW,UACX,gBAAgB,UAChB,iBAAiB,UACjB,4BAA4B,UAC5B,eAAe,UACf,mBAAmB,WACnB,qBAAqB,UACrB,YAAY,0BACZ,MAAM,UACN,OAAO,UACP,SAAS,UACK,cAAc,UAC5B,kBAAkB,UAClB,kBAAkB,UACF,cAAc;;;;;;CAClB,CAAC;AAEf,wBAAgB,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BzB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,QAAA,MAAM,sBAAsB;;IAE1B,+FAA+F;;IAE/F;;;;;;;;;;OAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQH,CAAC;AAEH,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAC;AAEH,QAAA,MAAM,uBAAuB;;;;;;EAE3B,CAAC;AAEH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAMxB,CAAC;AA4BH,QAAA,MAAM,uBAAuB;;;;IAI3B;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;EAMH,CAAC;AAEH,QAAA,MAAM,gBAAgB;;;;;;QAdpB;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeH,CAAC;AAEH,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAUR,CAAC;AAEjB,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAab,CAAC;AAEjB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAMvB,CAAC;AAEH;;;;;GAKG;AACH,QAAA,MAAM,2BAA2B;IAC/B,wFAAwF;;IAExF,sDAAsD;;IAEtD,0CAA0C;;IAE1C,sDAAsD;;;;;;;;;;;;EAEtD,CAAC;AAEH,QAAA,MAAM,kBAAkB;IACtB,sGAAsG;;IAEtG,sFAAsF;;;;;;;;EAEtF,CAAC;AAEH,QAAA,MAAM,kBAAkB;IACtB,2EAA2E;;IAE3E,uDAAuD;;IAEvD,2DAA2D;;IAE3D,+EAA+E;;IAE/E,gFAAgF;;IAEhF,4EAA4E;;IAE5E,2DAA2D;;IAE3D,sFAAsF;;IAEtF,kDAAkD;;IAElD,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;EAEnF,CAAC;AAEH,QAAA,MAAM,eAAe;;;;;;;;;EAKnB,CAAC;AAEH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;gCAKX,CAAC;AAEjB,QAAA,MAAM,mBAAmB;IACvB,4HAA4H;;IAE5H,oHAAoH;;IAEpH,wFAAwF;;IAExF,+FAA+F;;IAE/F,8EAA8E;;;;;;;;;;;;;;EAE9E,CAAC;AAEH,QAAA,MAAM,qBAAqB;;QAEvB;;;;;;;;WAQG;;;;;;;;;;;;;;;EAGL,CAAC;AAEH,QAAA,MAAM,UAAU;IACd,kGAAkG;;IAElG,gFAAgF;;IAEhF,mFAAmF;;;;;;;;;;EAEnF,CAAC;AAEH,QAAA,MAAM,aAAa;IACjB;;;;;;;OAOG;;;;;;EAEH,CAAC;AAEH,QAAA,MAAM,eAAe;IACnB,yEAAyE;;;QAGvE,+CAA+C;;QAE/C,0CAA0C;;QAE1C,qDAAqD;;;;;;;;;;;;QAIrD,kEAAkE;;QAElE,sDAAsD;;;;;;;;;;QAItD,sEAAsE;;QAEtE,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGtD,CAAC;AAEH,QAAA,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AAEH,QAAA,MAAM,sBAAsB;IAC1B,yFAAyF;;IAEzF,uEAAuE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvE,CAAC;AAEH,QAAA,MAAM,eAAe;IACnB,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;;IAvDH,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;;IAvDH,4HAA4H;;IAE5H;;;;OAIG;;IAEH,+EAA+E;;IAE/E,iGAAiG;;IAEjG,mGAAmG;;IAEnG;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,uIAAuI;;IAEvI;;;;;;;OAOG;;IAEH,uMAAuM;;IAEvM,sCAAsC;;IAEtC,uFAAuF;;IAEvF,sGAAsG;;IAEtG,0DAA0D;;IAE1D,0DAA0D;;IAE1D;;;;;OAKG;;gCAEW,CAAC;AAEjB;;;;;;GAMG;AACH,QAAA,MAAM,YAAY;IAChB,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;;IAvCH,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;;IAvCH,qEAAqE;;IAErE;;;;OAIG;;IAEH;;;OAGG;;IAEH,0GAA0G;;IAE1G,wFAAwF;;IAExF,gGAAgG;;IAEhG,oFAAoF;;IAEpF,qGAAqG;;IAErG,mHAAmH;;IAEnH;;;;;;OAMG;;IAEH;;;;;;OAMG;;;;;;;;;;;gCAKW,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB;IACzB,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;;IAZ1E,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;;IAZ1E,kCAAkC;;IAElC,kHAAkH;;IAElH,uGAAuG;;IAEvG,8CAA8C;;IAE9C,0GAA0G;;IAE1G,uHAAuH;;IAEvH,0EAA0E;;gCAE5D,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB;IACzB,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;;IAZxG,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;;IAZxG,8EAA8E;;IAE9E,2EAA2E;;IAE3E,wGAAwG;;IAExG,+CAA+C;;IAE/C,iGAAiG;;IAEjG,8GAA8G;;IAE9G,wGAAwG;;gCAE1F,CAAC;AAEjB;;;;;;;;;;GAUG;AACH,QAAA,MAAM,0BAA0B;IAC9B,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;;IAZ1E,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;;IAZ1E,+CAA+C;;IAE/C,2EAA2E;;IAE3E,iEAAiE;;IAEjE,6DAA6D;;IAE7D,wEAAwE;;IAExE,8GAA8G;;IAE9G,0EAA0E;;gCAE5D,CAAC;AAEjB;;;;;GAKG;AACH,QAAA,MAAM,mBAAmB;IACvB,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;;IAZpG,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;;IAZpG,oDAAoD;;IAEpD,+FAA+F;;IAE/F,+CAA+C;;IAE/C,oHAAoH;;IAEpH,+GAA+G;;IAE/G,2GAA2G;;IAE3G,oGAAoG;;gCAEtF,CAAC;AAEjB,QAAA,MAAM,eAAe;IACnB,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;;IAKpG,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;;IAKpG,wGAAwG;;IAExG,yDAAyD;;QA7FzD,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;QAZ1E,kCAAkC;;QAElC,kHAAkH;;QAElH,uGAAuG;;QAEvG,8CAA8C;;QAE9C,0GAA0G;;QAE1G,uHAAuH;;QAEvH,0EAA0E;;;IAmF1E,8CAA8C;;QAxE9C,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;QAZxG,8EAA8E;;QAE9E,2EAA2E;;QAE3E,wGAAwG;;QAExG,+CAA+C;;QAE/C,iGAAiG;;QAEjG,8GAA8G;;QAE9G,wGAAwG;;;IA8DxG,uDAAuD;;QA9CvD,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;QAZ1E,+CAA+C;;QAE/C,2EAA2E;;QAE3E,iEAAiE;;QAEjE,6DAA6D;;QAE7D,wEAAwE;;QAExE,8GAA8G;;QAE9G,0EAA0E;;;IAoC1E,oGAAoG;;QAzBpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;QAZpG,oDAAoD;;QAEpD,+FAA+F;;QAE/F,+CAA+C;;QAE/C,oHAAoH;;QAEpH,+GAA+G;;QAE/G,2GAA2G;;QAE3G,oGAAoG;;;gCAetF,CAAC;AAEjB,QAAA,MAAM,gBAAgB;;;QA/fpB,+FAA+F;;QAE/F;;;;;;;;;;WAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoRH,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;QAvDH,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;QAvDH,4HAA4H;;QAE5H;;;;WAIG;;QAEH,+EAA+E;;QAE/E,iGAAiG;;QAEjG,mGAAmG;;QAEnG;;;;WAIG;;QAEH;;;;;WAKG;;QAEH,uIAAuI;;QAEvI;;;;;;;WAOG;;QAEH,uMAAuM;;QAEvM,sCAAsC;;QAEtC,uFAAuF;;QAEvF,sGAAsG;;QAEtG,0DAA0D;;QAE1D,0DAA0D;;QAE1D;;;;;WAKG;;;;QAYH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;QAvCH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;QAvCH,qEAAqE;;QAErE;;;;WAIG;;QAEH;;;WAGG;;QAEH,0GAA0G;;QAE1G,wFAAwF;;QAExF,gGAAgG;;QAEhG,oFAAoF;;QAEpF,qGAAqG;;QAErG,mHAAmH;;QAEnH;;;;;;WAMG;;QAEH;;;;;;WAMG;;;;;;;;;;;;;QAyGH,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;QAKpG,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;QAKpG,wGAAwG;;QAExG,yDAAyD;;YA7FzD,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;YAZ1E,kCAAkC;;YAElC,kHAAkH;;YAElH,uGAAuG;;YAEvG,8CAA8C;;YAE9C,0GAA0G;;YAE1G,uHAAuH;;YAEvH,0EAA0E;;;QAmF1E,8CAA8C;;YAxE9C,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;YAZxG,8EAA8E;;YAE9E,2EAA2E;;YAE3E,wGAAwG;;YAExG,+CAA+C;;YAE/C,iGAAiG;;YAEjG,8GAA8G;;YAE9G,wGAAwG;;;QA8DxG,uDAAuD;;YA9CvD,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;YAZ1E,+CAA+C;;YAE/C,2EAA2E;;YAE3E,iEAAiE;;YAEjE,6DAA6D;;YAE7D,wEAAwE;;YAExE,8GAA8G;;YAE9G,0EAA0E;;;QAoC1E,oGAAoG;;YAzBpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;YAZpG,oDAAoD;;YAEpD,+FAA+F;;YAE/F,+CAA+C;;YAE/C,oHAAoH;;YAEpH,+GAA+G;;YAE/G,2GAA2G;;YAE3G,oGAAoG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAhapG;;;;;;eAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2DH,wFAAwF;;QAExF,sDAAsD;;QAEtD,0CAA0C;;QAE1C,sDAAsD;;;;;;;;;;;;;;;;;;;;;;;;QAKtD,sGAAsG;;QAEtG,sFAAsF;;;;;;;;;;QAKtF,2EAA2E;;QAE3E,uDAAuD;;QAEvD,2DAA2D;;QAE3D,+EAA+E;;QAE/E,gFAAgF;;QAEhF,4EAA4E;;QAE5E,2DAA2D;;QAE3D,sFAAsF;;QAEtF,kDAAkD;;QAElD,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmBnF,4HAA4H;;QAE5H,oHAAoH;;QAEpH,wFAAwF;;QAExF,+FAA+F;;QAE/F,8EAA8E;;;;;;;;;;;;;;;;;YAM5E;;;;;;;;eAQG;;;;;;;;;;;;;;;;;QA6DL,yFAAyF;;QAEzF,uEAAuE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAzDvE,kGAAkG;;QAElG,gFAAgF;;QAEhF,mFAAmF;;;;;;;;;;;;QAiBnF,yEAAyE;;;YAGvE,+CAA+C;;YAE/C,0CAA0C;;YAE1C,qDAAqD;;;;;;;;;;;;YAIrD,kEAAkE;;YAElE,sDAAsD;;;;;;;;;;YAItD,sEAAsE;;YAEtE,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA/BtD;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkUH,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AACpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AACtF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,UAAU,CAwIrD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,IAAI,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;AAE9C,eAAO,MAAM,UAAU,EAAE,UAAyB,CAAC;AAEnD,eAAO,MACL,UAAU,UACV,UAAU,UACV,MAAM,UACN,UAAU,UACV,MAAM,UACN,wBAAwB,aACxB,cAAc,UACd,WAAW,UACX,gBAAgB,UAChB,iBAAiB,UACjB,4BAA4B,UAC5B,eAAe,UACf,mBAAmB,WACnB,qBAAqB,UACrB,YAAY,0BACZ,MAAM,UACN,OAAO,UACP,SAAS,UACK,cAAc,UAC5B,kBAAkB,UAClB,kBAAkB,UACF,cAAc;;;;;;CAClB,CAAC;AAEf,wBAAgB,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BzB"}

package/dist/config.js

@@ -5,7 +5,19 @@ import { mergeConfigs, parseBooleanEnv } from '@memberjunction/config';
 const explorer = cosmiconfigSync('mj', { searchStrategy: 'global' });
 const userHandlingInfoSchema = z.object({
     autoCreateNewUsers: z.boolean().optional().default(false),
+    /** When true, auto-provisioning is restricted to the domains in `newUserAuthorizedDomains`. */
     newUserLimitedToAuthorizedDomains: z.boolean().optional().default(false),
+    /**
+     * Authorized **email domains** for auto-provisioned users — e.g. `['example.com', '*.example.org']`.
+     *
+     * These are matched against the domain of the email address in the verified identity token, NOT
+     * against the browser `Origin` / frontend hostname. If you are upgrading from a build that
+     * compared these to the request origin, replace any frontend hostnames here (`app.example.com`,
+     * `localhost`) with the email domains your users actually sign in with.
+     *
+     * `*` wildcards are supported and match in full: `*.example.com` matches `mail.example.com` but
+     * NOT `example.com` — list both if you need both.
+     */
     newUserAuthorizedDomains: z.array(z.string()).optional().default([]),
     newUserRoles: z.array(z.string()).optional().default([]),
     updateCacheWhenNotFound: z.boolean().optional().default(false),
@@ -118,6 +130,22 @@ const scheduledJobsSchema = z.object({
     defaultLockTimeout: z.number().optional().default(600000), // 10 minutes in ms
     staleLockCleanupInterval: z.number().optional().default(300000), // 5 minutes in ms
 });
+/**
+ * Integration sync worker (PR 1 item 8). When enabled, this process polls
+ * `CompanyIntegrationRun` for `Status='Queued'` rows, atomically claims them, executes
+ * the sync, and releases. The claim sproc is the mutual exclusion, so any number of
+ * processes may run a worker against the same database.
+ */
+const integrationSyncWorkerSchema = z.object({
+    /** Master switch — off by default so existing deployments keep running syncs inline. */
+    enabled: z.boolean().optional().default(false),
+    /** Email of the user the worker executes syncs as. */
+    systemUserEmail: z.string().optional().default('system@memberjunction.org'),
+    /** How often to poll the queue, in ms. */
+    pollingIntervalMs: z.number().optional().default(15000),
+    /** Maximum runs this worker executes concurrently. */
+    maxConcurrentRuns: z.number().optional().default(3),
+});
 const queryDialectSchema = z.object({
     /** When true, saving a Query entity auto-generates QuerySQL entries for configured target dialects */
     autoConvertOnSave: zodBooleanWithTransforms().default(false),
@@ -469,6 +497,7 @@ const configInfoSchema = z.object({
     authProviders: z.array(authProviderSchema).optional(),
     componentRegistries: z.array(componentRegistrySchema).optional(),
     scheduledJobs: scheduledJobsSchema.optional().default({}),
+    integrationSyncWorker: integrationSyncWorkerSchema.optional().default({}),
     telemetry: telemetrySchema.optional().default({}),
     queryDialects: queryDialectSchema.optional().default({}),
     multiTenancy: multiTenancySchema.optional().default({}),
@@ -598,6 +627,13 @@ export const DEFAULT_SERVER_CONFIG = {
         defaultLockTimeout: 600000,
         staleLockCleanupInterval: 300000
     },
+    // Integration sync worker defaults (off — syncs run inline unless a worker is enabled)
+    integrationSyncWorker: {
+        enabled: false,
+        systemUserEmail: 'not.set@nowhere.com',
+        pollingIntervalMs: 15000,
+        maxConcurrentRuns: 3
+    },
     // Telemetry defaults
     telemetry: {
         enabled: true,
@@ -620,41 +656,22 @@ export const DEFAULT_SERVER_CONFIG = {
             logVariables: parseBooleanEnv(process.env.MJ_LOG_GRAPHQL_VARIABLES),
         },
     },
-    // Auth providers (environment-driven)
-    authProviders: [
-        // Microsoft Azure AD / Entra ID
-        process.env.TENANT_ID && process.env.WEB_CLIENT_ID ? {
-            name: 'azure',
-            type: 'msal',
-            issuer: `https://login.microsoftonline.com/${process.env.TENANT_ID}/v2.0`,
-            audience: process.env.WEB_CLIENT_ID,
-            jwksUri: `https://login.microsoftonline.com/${process.env.TENANT_ID}/discovery/v2.0/keys`,
-            clientId: process.env.WEB_CLIENT_ID,
-            tenantId: process.env.TENANT_ID
-        } : null,
-        // Auth0
-        process.env.AUTH0_DOMAIN && process.env.AUTH0_CLIENT_ID ? {
-            name: 'auth0',
-            type: 'auth0',
-            issuer: `https://${process.env.AUTH0_DOMAIN}/`,
-            audience: process.env.AUTH0_CLIENT_ID,
-            jwksUri: `https://${process.env.AUTH0_DOMAIN}/.well-known/jwks.json`,
-            clientId: process.env.AUTH0_CLIENT_ID,
-            clientSecret: process.env.AUTH0_CLIENT_SECRET,
-            domain: process.env.AUTH0_DOMAIN
-        } : null,
-        // AWS Cognito
-        process.env.COGNITO_USER_POOL_ID && process.env.COGNITO_CLIENT_ID && process.env.AWS_REGION ? {
-            name: 'cognito',
-            type: 'cognito',
-            issuer: `https://cognito-idp.${process.env.AWS_REGION}.amazonaws.com/${process.env.COGNITO_USER_POOL_ID}`,
-            audience: process.env.COGNITO_CLIENT_ID,
-            jwksUri: `https://cognito-idp.${process.env.AWS_REGION}.amazonaws.com/${process.env.COGNITO_USER_POOL_ID}/.well-known/jwks.json`,
-            clientId: process.env.COGNITO_CLIENT_ID,
-            region: process.env.AWS_REGION,
-            userPoolId: process.env.COGNITO_USER_POOL_ID
-        } : null,
-    ].filter(Boolean),
+    // Auth providers.
+    //
+    // Empty by design. This used to be a hard-coded block that enumerated Entra / Auth0 / Cognito
+    // inline and built each config from its environment variables. That made env-var configuration
+    // a closed domain: a third-party provider could register a driver class and take a metadata row
+    // or an explicit entry here, but it could never offer the "set two variables and you're done"
+    // experience, because the enumeration lived in core.
+    //
+    // Each provider class now owns its own mapping via the optional static
+    // `ConfigFromEnvironment` (see IEnvironmentConfigurableProvider in @memberjunction/auth-providers),
+    // and `initializeAuthProviders()` collects them through the ClassFactory registry.
+    //
+    // Discovery cannot happen here: this literal is evaluated when config.ts is imported, which is
+    // BEFORE @memberjunction/auth-providers loads and the driver classes register. It is deferred to
+    // registration time, where the registry is populated.
+    authProviders: [],
 };
 /**
  * Absolute path to the resolved config file, captured during {@link loadConfig}.