@oronts/vendure-data-hub-plugin 0.1.0

package/dist/src/api/controllers/webhook.controller.js

@@ -0,0 +1,363 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataHubWebhookController = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const crypto = __importStar(require("crypto"));
+const constants_1 = require("../../constants");
+const enums_1 = require("../../constants/enums");
+const adapter_config_types_1 = require("../../../shared/types/adapter-config.types");
+const pipeline_1 = require("../../entities/pipeline");
+const services_1 = require("../../services");
+const secret_service_1 = require("../../services/config/secret.service");
+const domain_events_service_1 = require("../../services/events/domain-events.service");
+const logger_1 = require("../../services/logger");
+const rate_limit_1 = require("../../services/rate-limit");
+const utils_1 = require("../../utils");
+let DataHubWebhookController = class DataHubWebhookController {
+    constructor(requestContextService, connection, pipelineService, secretService, domainEvents, rateLimitService, loggerFactory) {
+        this.requestContextService = requestContextService;
+        this.connection = connection;
+        this.pipelineService = pipelineService;
+        this.secretService = secretService;
+        this.domainEvents = domainEvents;
+        this.rateLimitService = rateLimitService;
+        this.authStrategies = {
+            [adapter_config_types_1.ConnectionAuthType.API_KEY]: (ctx, req, _body, cfg) => this.verifyApiKey(ctx, req, cfg),
+            [adapter_config_types_1.ConnectionAuthType.HMAC]: (ctx, req, body, cfg) => this.verifyHmacSignature(ctx, req, body, cfg),
+            [adapter_config_types_1.ConnectionAuthType.BASIC]: (ctx, req, _body, cfg) => this.verifyBasicAuth(ctx, req, cfg),
+            [adapter_config_types_1.ConnectionAuthType.JWT]: (ctx, req, _body, cfg) => this.verifyJwtAuth(ctx, req, cfg),
+        };
+        this.logger = loggerFactory.createLogger(constants_1.LOGGER_CONTEXTS.WEBHOOK);
+    }
+    async handle(code, body, req) {
+        if (!code || !(0, utils_1.isValidPipelineCode)(code)) {
+            throw new common_1.HttpException('Invalid pipeline code format', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const ip = req.ip || req.connection?.remoteAddress || 'unknown';
+        const ctx = await this.requestContextService.create({ apiType: 'admin' });
+        const repo = this.connection.getRepository(ctx, pipeline_1.Pipeline);
+        const pipeline = await repo.findOne({ where: { code } });
+        if (!pipeline || !pipeline.enabled) {
+            throw new common_1.HttpException('Pipeline not found or disabled', common_1.HttpStatus.NOT_FOUND);
+        }
+        if (pipeline.status !== constants_1.PipelineStatus.PUBLISHED) {
+            throw new common_1.HttpException('Pipeline must be published to receive webhook triggers', common_1.HttpStatus.BAD_REQUEST);
+        }
+        // Find ALL enabled webhook triggers - supports multiple webhooks per pipeline
+        const definition = pipeline.definition;
+        const webhookTriggers = (0, utils_1.findEnabledTriggersByType)(definition, enums_1.TriggerType.WEBHOOK);
+        if (webhookTriggers.length === 0) {
+            throw new common_1.HttpException('Pipeline is not configured for webhook trigger', common_1.HttpStatus.BAD_REQUEST);
+        }
+        // Try to authenticate against each webhook trigger
+        // First successful auth wins and that trigger's config is used
+        let authenticatedTrigger = null;
+        let lastAuthError = null;
+        for (const trigger of webhookTriggers) {
+            const cfg = (trigger.config ?? {});
+            const authType = cfg.authentication || adapter_config_types_1.ConnectionAuthType.NONE;
+            try {
+                const strategy = this.authStrategies[authType];
+                if (strategy) {
+                    await strategy(ctx, req, body, cfg);
+                }
+                else if (authType !== adapter_config_types_1.ConnectionAuthType.NONE) {
+                    throw new common_1.HttpException('Invalid authentication type', common_1.HttpStatus.BAD_REQUEST);
+                }
+                // Auth passed - use this trigger
+                authenticatedTrigger = trigger;
+                if (authType === adapter_config_types_1.ConnectionAuthType.NONE) {
+                    this.logger.error(`SECURITY: Webhook received WITHOUT authentication for pipeline: ${code}. ` +
+                        `Configure authentication (api-key, hmac, basic, or jwt) to secure this endpoint.`, undefined, {
+                        ip,
+                        pipelineCode: code,
+                        triggerKey: trigger.key,
+                        severity: 'security',
+                    });
+                }
+                break;
+            }
+            catch (error) {
+                if (error instanceof common_1.HttpException) {
+                    lastAuthError = error;
+                    // Continue to try next webhook trigger
+                    continue;
+                }
+                throw error;
+            }
+        }
+        if (!authenticatedTrigger) {
+            // All webhook triggers failed auth - throw the last error
+            throw lastAuthError ?? new common_1.HttpException('Authentication failed', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const cfg = (authenticatedTrigger.config ?? {});
+        const configuredRateLimit = typeof cfg.rateLimit === 'number' ? cfg.rateLimit : constants_1.INTERNAL_TIMINGS.DEFAULT_WEBHOOK_RATE_LIMIT;
+        if (configuredRateLimit > 0) {
+            const rateLimitResult = this.rateLimitService.isRateLimited({ ip, pipelineCode: code }, configuredRateLimit, constants_1.INTERNAL_TIMINGS.DEFAULT_RATE_LIMIT_WINDOW_MS);
+            if (rateLimitResult.limited) {
+                throw new common_1.HttpException('Too many webhook requests', common_1.HttpStatus.TOO_MANY_REQUESTS);
+            }
+        }
+        if (cfg.requireIdempotencyKey) {
+            const idk = req.headers['x-idempotency-key'];
+            if (!idk) {
+                throw new common_1.HttpException('Missing X-Idempotency-Key', common_1.HttpStatus.BAD_REQUEST);
+            }
+        }
+        const authType = cfg.authentication || adapter_config_types_1.ConnectionAuthType.NONE;
+        const records = Array.isArray(body)
+            ? body
+            : (Array.isArray(body?.records)
+                ? body.records
+                : [body]);
+        await this.pipelineService.startRunWithSeed(ctx, pipeline.id, records, {
+            skipPermissionCheck: true,
+            triggeredBy: `webhook:${authenticatedTrigger.key}`,
+        });
+        this.domainEvents.publishTriggerFired(String(pipeline.id), 'WEBHOOK', { pipelineCode: code, triggerKey: authenticatedTrigger.key, recordCount: records.length });
+        this.logger.debug(`Webhook accepted for pipeline: ${code}`, {
+            pipelineCode: code,
+            triggerKey: authenticatedTrigger.key,
+            recordCount: records.length,
+            authType,
+        });
+        return { accepted: true };
+    }
+    async verifyApiKey(ctx, req, cfg) {
+        const headerName = (cfg.apiKeyHeaderName ?? constants_1.DEFAULT_WEBHOOK_CONFIG.apiKeyHeaderName).toLowerCase();
+        const apiKey = req.headers[headerName];
+        if (!apiKey) {
+            throw new common_1.HttpException('Missing API key', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        if (apiKey.length > constants_1.WEBHOOK.MAX_API_KEY_LENGTH) {
+            throw new common_1.HttpException('Invalid API key format', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const secretCode = cfg.apiKeySecretCode;
+        if (!secretCode) {
+            throw new common_1.HttpException('API key secret code not configured', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        const secretValue = await this.secretService.resolve(ctx, secretCode);
+        if (!secretValue) {
+            throw new common_1.HttpException('API key not found', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const prefix = cfg.apiKeyPrefix ?? '';
+        const providedKey = apiKey.startsWith(prefix)
+            ? apiKey.slice(prefix.length)
+            : apiKey;
+        if (!this.timingSafeCompare(secretValue, providedKey)) {
+            throw new common_1.HttpException('Invalid API key', common_1.HttpStatus.UNAUTHORIZED);
+        }
+    }
+    async verifyHmacSignature(ctx, req, body, cfg) {
+        const headerName = cfg.hmacHeaderName ?? constants_1.DEFAULT_WEBHOOK_CONFIG.hmacHeaderName;
+        const sig = req.headers[headerName.toLowerCase()];
+        if (!sig) {
+            throw new common_1.HttpException('Missing signature', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        if (sig.length > constants_1.WEBHOOK.MAX_SIGNATURE_LENGTH) {
+            throw new common_1.HttpException('Invalid signature format', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const secretCode = cfg.secretCode;
+        if (!secretCode) {
+            throw new common_1.HttpException('HMAC secret code not configured', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        const secretValue = await this.secretService.resolve(ctx, secretCode);
+        if (!secretValue) {
+            throw new common_1.HttpException('HMAC secret not found', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        const algorithm = cfg.hmacAlgorithm?.toLowerCase() ?? 'sha256';
+        if (!constants_1.WEBHOOK.ALLOWED_HMAC_ALGORITHMS.includes(algorithm)) {
+            throw new common_1.HttpException('Unsupported HMAC algorithm', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const expectedHash = crypto.createHmac(algorithm, secretValue)
+            .update(JSON.stringify(body ?? {}))
+            .digest('hex');
+        if (!this.timingSafeCompare(expectedHash, sig)) {
+            throw new common_1.HttpException('Invalid signature', common_1.HttpStatus.UNAUTHORIZED);
+        }
+    }
+    async verifyBasicAuth(ctx, req, cfg) {
+        const authHeader = req.headers['authorization'];
+        if (!authHeader) {
+            throw new common_1.HttpException('Missing Authorization header', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const basicPrefix = `${constants_1.AUTH_SCHEMES.BASIC} `;
+        if (!authHeader.startsWith(basicPrefix)) {
+            throw new common_1.HttpException('Invalid Authorization header format', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const credentials = authHeader.slice(basicPrefix.length);
+        let decoded;
+        try {
+            decoded = Buffer.from(credentials, 'base64').toString('utf8');
+        }
+        catch {
+            throw new common_1.HttpException('Invalid credentials encoding', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const colonIndex = decoded.indexOf(':');
+        if (colonIndex === -1) {
+            throw new common_1.HttpException('Invalid credentials format', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const username = decoded.slice(0, colonIndex);
+        const password = decoded.slice(colonIndex + 1);
+        if (!username || !password) {
+            throw new common_1.HttpException('Invalid credentials format', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const secretCode = cfg.basicSecretCode;
+        if (!secretCode) {
+            throw new common_1.HttpException('Basic auth secret code not configured', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        const secretValue = await this.secretService.resolve(ctx, secretCode);
+        if (!secretValue) {
+            throw new common_1.HttpException('Basic auth credentials not found', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        if (!this.timingSafeCompare(secretValue, decoded)) {
+            throw new common_1.HttpException('Invalid credentials', common_1.HttpStatus.UNAUTHORIZED);
+        }
+    }
+    async verifyJwtAuth(ctx, req, cfg) {
+        const headerName = cfg.jwtHeaderName ?? constants_1.DEFAULT_WEBHOOK_CONFIG.jwtHeaderName;
+        const authHeader = req.headers[headerName.toLowerCase()];
+        if (!authHeader) {
+            throw new common_1.HttpException('Missing Authorization header', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        if (authHeader.length > constants_1.WEBHOOK.MAX_AUTH_HEADER_LENGTH) {
+            throw new common_1.HttpException('Authorization header too large', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const parts = authHeader.split(' ');
+        if (parts[0]?.toLowerCase() !== constants_1.AUTH_SCHEMES.BEARER.toLowerCase() || !parts[1]) {
+            throw new common_1.HttpException('Invalid Authorization header format', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const token = parts[1];
+        const secretCode = cfg.jwtSecretCode;
+        if (!secretCode) {
+            throw new common_1.HttpException('JWT secret code not configured', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        const secretValue = await this.secretService.resolve(ctx, secretCode);
+        if (!secretValue) {
+            throw new common_1.HttpException('JWT secret not found', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const jwtParts = token.split('.');
+        if (jwtParts.length !== constants_1.WEBHOOK.JWT_PARTS_COUNT) {
+            throw new common_1.HttpException('Invalid JWT format', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const [headerB64, payloadB64, signatureB64] = jwtParts;
+        // Validate JWT algorithm header to prevent alg:none and other attacks
+        try {
+            const headerJson = Buffer.from(headerB64, 'base64url').toString('utf8');
+            const header = JSON.parse(headerJson);
+            if (header.alg !== constants_1.WEBHOOK.REQUIRED_JWT_ALGORITHM) {
+                throw new common_1.HttpException(`Unsupported JWT algorithm: '${header.alg}'. Only HS256 is accepted.`, common_1.HttpStatus.UNAUTHORIZED);
+            }
+        }
+        catch (error) {
+            if (error instanceof common_1.HttpException) {
+                throw error;
+            }
+            throw new common_1.HttpException('Invalid JWT header', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        const signingInput = `${headerB64}.${payloadB64}`;
+        const expectedSignature = crypto
+            .createHmac('sha256', secretValue)
+            .update(signingInput)
+            .digest('base64url');
+        if (!this.timingSafeCompare(expectedSignature, signatureB64)) {
+            throw new common_1.HttpException('Invalid JWT signature', common_1.HttpStatus.UNAUTHORIZED);
+        }
+        try {
+            const payloadJson = Buffer.from(payloadB64, 'base64url').toString('utf8');
+            const payload = JSON.parse(payloadJson);
+            const nowUnix = Math.floor(Date.now() / constants_1.TIME.SECOND);
+            if (payload.exp && payload.exp < nowUnix) {
+                throw new common_1.HttpException('JWT has expired', common_1.HttpStatus.UNAUTHORIZED);
+            }
+            if (payload.nbf && payload.nbf > nowUnix) {
+                throw new common_1.HttpException('JWT is not yet valid', common_1.HttpStatus.UNAUTHORIZED);
+            }
+        }
+        catch (error) {
+            if (error instanceof common_1.HttpException) {
+                throw error;
+            }
+            throw new common_1.HttpException('Invalid JWT payload', common_1.HttpStatus.UNAUTHORIZED);
+        }
+    }
+    timingSafeCompare(expected, provided) {
+        const expectedBuffer = Buffer.from(expected, 'utf8');
+        const providedBuffer = Buffer.from(provided, 'utf8');
+        const maxLength = Math.max(expectedBuffer.length, providedBuffer.length);
+        const paddedExpected = Buffer.alloc(maxLength);
+        const paddedProvided = Buffer.alloc(maxLength);
+        expectedBuffer.copy(paddedExpected);
+        providedBuffer.copy(paddedProvided);
+        const match = crypto.timingSafeEqual(paddedExpected, paddedProvided);
+        return match && expectedBuffer.length === providedBuffer.length;
+    }
+};
+exports.DataHubWebhookController = DataHubWebhookController;
+__decorate([
+    (0, common_1.Post)(':code'),
+    (0, common_1.HttpCode)(202),
+    __param(0, (0, common_1.Param)('code')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], DataHubWebhookController.prototype, "handle", null);
+exports.DataHubWebhookController = DataHubWebhookController = __decorate([
+    (0, common_1.Controller)('data-hub/webhook'),
+    __metadata("design:paramtypes", [core_1.RequestContextService,
+        core_1.TransactionalConnection,
+        services_1.PipelineService,
+        secret_service_1.SecretService,
+        domain_events_service_1.DomainEventsService,
+        rate_limit_1.RateLimitService,
+        logger_1.DataHubLoggerFactory])
+], DataHubWebhookController);
+//# sourceMappingURL=webhook.controller.js.map

package/dist/src/api/controllers/webhook.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.controller.js","sourceRoot":"","sources":["../../../../src/api/controllers/webhook.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAyG;AACzG,wCAA+F;AAE/F,+CAAiC;AAEjC,+CAAyI;AACzI,iDAAuE;AACvE,qFAAgF;AAChF,sDAAmD;AACnD,6CAAiD;AACjD,yEAAqE;AACrE,uFAAkF;AAClF,kDAA4E;AAC5E,0DAA6D;AAC7D,uCAA6E;AAGtE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAejC,YACY,qBAA4C,EAC5C,UAAmC,EACnC,eAAgC,EAChC,aAA4B,EAC5B,YAAiC,EACjC,gBAAkC,EAC1C,aAAmC;QAN3B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAyB;QACnC,oBAAe,GAAf,eAAe,CAAiB;QAChC,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAqB;QACjC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAlB7B,mBAAc,GAKT;YAClB,CAAC,yCAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YACxF,CAAC,yCAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;YACjG,CAAC,yCAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YACzF,CAAC,yCAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SACxF,CAAC;QAWE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,2BAAe,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACO,IAAY,EACnB,IAAyC,EAC1C,GAAY;QAEnB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAA,2BAAmB,EAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAa,CAAC,8BAA8B,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAK,GAA6D,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC;QAC3H,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,mBAAQ,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAa,CAAC,gCAAgC,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,0BAAc,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,sBAAa,CAAC,wDAAwD,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAC9G,CAAC;QAED,8EAA8E;QAC9E,MAAM,UAAU,GAAG,QAAQ,CAAC,UAA4C,CAAC;QACzE,MAAM,eAAe,GAAG,IAAA,iCAAyB,EAAC,UAAU,EAAE,mBAAe,CAAC,OAAO,CAAC,CAAC;QAEvF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,sBAAa,CAAC,gDAAgD,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QACtG,CAAC;QAED,mDAAmD;QACnD,+DAA+D;QAC/D,IAAI,oBAAoB,GAAqC,IAAI,CAAC;QAClE,IAAI,aAAa,GAAyB,IAAI,CAAC;QAE/C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;YAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,yCAAkB,CAAC,IAAI,CAAC;YAE/D,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC/C,IAAI,QAAQ,EAAE,CAAC;oBACX,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,QAAQ,KAAK,yCAAkB,CAAC,IAAI,EAAE,CAAC;oBAC9C,MAAM,IAAI,sBAAa,CAAC,6BAA6B,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;gBACnF,CAAC;gBACD,iCAAiC;gBACjC,oBAAoB,GAAG,OAAO,CAAC;gBAC/B,IAAI,QAAQ,KAAK,yCAAkB,CAAC,IAAI,EAAE,CAAC;oBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,mEAAmE,IAAI,IAAI;wBAC3E,kFAAkF,EAClF,SAAS,EACT;wBACI,EAAE;wBACF,YAAY,EAAE,IAAI;wBAClB,UAAU,EAAE,OAAO,CAAC,GAAG;wBACvB,QAAQ,EAAE,UAAU;qBACvB,CACJ,CAAC;gBACN,CAAC;gBACD,MAAM;YACV,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,sBAAa,EAAE,CAAC;oBACjC,aAAa,GAAG,KAAK,CAAC;oBACtB,uCAAuC;oBACvC,SAAS;gBACb,CAAC;gBACD,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAED,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACxB,0DAA0D;YAC1D,MAAM,aAAa,IAAI,IAAI,sBAAa,CAAC,uBAAuB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,oBAAoB,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;QAEvF,MAAM,mBAAmB,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,4BAAgB,CAAC,0BAA0B,CAAC;QAC5H,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CACvD,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,EAC1B,mBAAmB,EACnB,4BAAgB,CAAC,4BAA4B,CAChD,CAAC;YAEF,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAa,CAAC,2BAA2B,EAAE,mBAAU,CAAC,iBAAiB,CAAC,CAAC;YACvF,CAAC;QACL,CAAC;QAED,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAuB,CAAC;YACnE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM,IAAI,sBAAa,CAAC,2BAA2B,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;YACjF,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,yCAAkB,CAAC,IAAI,CAAC;QAE/D,MAAM,OAAO,GAAgB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5C,CAAC,CAAE,IAAoB;YACvB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,IAAgC,EAAE,OAAO,CAAC;gBACxD,CAAC,CAAG,IAAgC,CAAC,OAAuB;gBAC5D,CAAC,CAAC,CAAC,IAAiB,CAAC,CAAC,CAAC;QAE/B,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE;YACnE,mBAAmB,EAAE,IAAI;YACzB,WAAW,EAAE,WAAW,oBAAoB,CAAC,GAAG,EAAE;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,mBAAmB,CACjC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EACnB,SAAS,EACT,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAC5F,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,EAAE,EAAE;YACxD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,oBAAoB,CAAC,GAAG;YACpC,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,QAAQ;SACX,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,YAAY,CACtB,GAAmB,EACnB,GAAY,EACZ,GAA6B;QAE7B,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,kCAAsB,CAAC,gBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QACpG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,sBAAa,CAAC,iBAAiB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAO,CAAC,kBAAkB,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAa,CAAC,wBAAwB,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACxC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,oCAAoC,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CAAC,mBAAmB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YACzC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC;QAEb,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,sBAAa,CAAC,iBAAiB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACxE,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC7B,GAAmB,EACnB,GAAY,EACZ,IAAyC,EACzC,GAA6B;QAE7B,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,IAAI,kCAAsB,CAAC,cAAe,CAAC;QAChF,MAAM,GAAG,GAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAwB,CAAC;QAE1E,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,sBAAa,CAAC,mBAAmB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAO,CAAC,oBAAoB,EAAE,CAAC;YAC5C,MAAM,IAAI,sBAAa,CAAC,0BAA0B,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,iCAAiC,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CAAC,uBAAuB,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC;QAC/D,IAAI,CAAC,mBAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,sBAAa,CAAC,4BAA4B,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC;aACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;aAClC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEnB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAa,CAAC,mBAAmB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CACzB,GAAmB,EACnB,GAAY,EACZ,GAA6B;QAE7B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAuB,CAAC;QAEtE,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,8BAA8B,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,wBAAY,CAAC,KAAK,GAAG,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAa,CAAC,qCAAqC,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,sBAAa,CAAC,8BAA8B,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAa,CAAC,4BAA4B,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAa,CAAC,4BAA4B,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,uCAAuC,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CAAC,kCAAkC,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAa,CAAC,qBAAqB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACvB,GAAmB,EACnB,GAAY,EACZ,GAA6B;QAE7B,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,IAAI,kCAAsB,CAAC,aAAc,CAAC;QAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAuB,CAAC;QAE/E,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,8BAA8B,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,mBAAO,CAAC,sBAAsB,EAAE,CAAC;YACrD,MAAM,IAAI,sBAAa,CAAC,gCAAgC,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,wBAAY,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAa,CAAC,qCAAqC,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEvB,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC;QACrC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,gCAAgC,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,mBAAO,CAAC,eAAe,EAAE,CAAC;YAC9C,MAAM,IAAI,sBAAa,CAAC,oBAAoB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC;QAEvD,sEAAsE;QACtE,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,GAAG,KAAK,mBAAO,CAAC,sBAAsB,EAAE,CAAC;gBAChD,MAAM,IAAI,sBAAa,CACnB,+BAA+B,MAAM,CAAC,GAAG,4BAA4B,EACrE,mBAAU,CAAC,YAAY,CAC1B,CAAC;YACN,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,sBAAa,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,sBAAa,CAAC,oBAAoB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,MAAM;aAC3B,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,sBAAa,CAAC,uBAAuB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAExC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAI,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;gBACvC,MAAM,IAAI,sBAAa,CAAC,iBAAiB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;gBACvC,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YAC7E,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,sBAAa,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,sBAAa,CAAC,qBAAqB,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;QACxD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAErD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE/C,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAErE,OAAO,KAAK,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,CAAC;IACpE,CAAC;CACJ,CAAA;AAtYY,4DAAwB;AA6B3B;IAFL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAET,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IACb,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDA2HT;mCA3JQ,wBAAwB;IADpC,IAAA,mBAAU,EAAC,kBAAkB,CAAC;qCAiBQ,4BAAqB;QAChC,8BAAuB;QAClB,0BAAe;QACjB,8BAAa;QACd,2CAAmB;QACf,6BAAgB;QAC3B,6BAAoB;GAtB9B,wBAAwB,CAsYpC"}

package/dist/src/api/resolvers/adapter.resolver.d.ts

@@ -0,0 +1,7 @@
+import { DataHubRegistryService } from '../../sdk/registry.service';
+export declare class DataHubAdapterAdminResolver {
+    private registry;
+    constructor(registry: DataHubRegistryService);
+    dataHubAdapters(): import("../..").AdapterDefinition[];
+}
+//# sourceMappingURL=adapter.resolver.d.ts.map

package/dist/src/api/resolvers/adapter.resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.resolver.d.ts","sourceRoot":"","sources":["../../../../src/api/resolvers/adapter.resolver.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,qBACa,2BAA2B;IACxB,OAAO,CAAC,QAAQ;gBAAR,QAAQ,EAAE,sBAAsB;IAIpD,eAAe;CAGlB"}

package/dist/src/api/resolvers/adapter.resolver.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataHubAdapterAdminResolver = void 0;
+const graphql_1 = require("@nestjs/graphql");
+const core_1 = require("@vendure/core");
+const permissions_1 = require("../../permissions");
+const registry_service_1 = require("../../sdk/registry.service");
+let DataHubAdapterAdminResolver = class DataHubAdapterAdminResolver {
+    constructor(registry) {
+        this.registry = registry;
+    }
+    dataHubAdapters() {
+        return this.registry.list();
+    }
+};
+exports.DataHubAdapterAdminResolver = DataHubAdapterAdminResolver;
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(permissions_1.ManageDataHubAdaptersPermission.Permission),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], DataHubAdapterAdminResolver.prototype, "dataHubAdapters", null);
+exports.DataHubAdapterAdminResolver = DataHubAdapterAdminResolver = __decorate([
+    (0, graphql_1.Resolver)(),
+    __metadata("design:paramtypes", [registry_service_1.DataHubRegistryService])
+], DataHubAdapterAdminResolver);
+//# sourceMappingURL=adapter.resolver.js.map

package/dist/src/api/resolvers/adapter.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.resolver.js","sourceRoot":"","sources":["../../../../src/api/resolvers/adapter.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAkD;AAClD,wCAAsC;AACtC,mDAAoE;AACpE,iEAAoE;AAG7D,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACpC,YAAoB,QAAgC;QAAhC,aAAQ,GAAR,QAAQ,CAAwB;IAAG,CAAC;IAIxD,eAAe;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;CACJ,CAAA;AARY,kEAA2B;AAKpC;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,6CAA+B,CAAC,UAAU,CAAC;;;;kEAGjD;sCAPQ,2BAA2B;IADvC,IAAA,kBAAQ,GAAE;qCAEuB,yCAAsB;GAD3C,2BAA2B,CAQvC"}

package/dist/src/api/resolvers/analytics.resolver.d.ts

@@ -0,0 +1,91 @@
+import { RequestContext } from '@vendure/core';
+import { AnalyticsService, WebhookRetryService, ExportDestinationService, DestinationConfig, FileStorageService } from '../../services';
+import type { AnalyticsOverview, PipelinePerformance, ErrorAnalytics, ThroughputMetrics, RealTimeStats } from '../../services/analytics/analytics.types';
+import type { WebhookDelivery, WebhookStats } from '../../services/webhooks/webhook.types';
+import type { DeliveryResult } from '../../services/destinations/destination.types';
+import type { ConnectionTestResult } from '../../../shared/types';
+/** Redacted destination config for API responses */
+interface RedactedDestinationConfig extends Omit<DestinationConfig, 'secretAccessKey' | 'password' | 'privateKey'> {
+    secretAccessKey?: string;
+    password?: string;
+    privateKey?: string;
+}
+/** Result of retry dead letter operation */
+interface RetryDeadLetterResult {
+    success: boolean;
+    delivery: WebhookDelivery | null;
+}
+/** Result of remove dead letter operation */
+interface RemoveDeadLetterResult {
+    success: boolean;
+}
+/** Result of registering export destination */
+interface RegisterDestinationResult {
+    success: boolean;
+    id: string;
+}
+export declare class DataHubAnalyticsAdminResolver {
+    private analyticsService;
+    private webhookRetryService;
+    private exportDestinationService;
+    private fileStorageService;
+    constructor(analyticsService: AnalyticsService, webhookRetryService: WebhookRetryService, exportDestinationService: ExportDestinationService, fileStorageService: FileStorageService);
+    dataHubAnalyticsOverview(ctx: RequestContext): Promise<AnalyticsOverview>;
+    dataHubPipelinePerformance(ctx: RequestContext, args: {
+        pipelineId?: string;
+        timeRange?: string;
+        limit?: number;
+    }): Promise<PipelinePerformance[]>;
+    dataHubErrorAnalytics(ctx: RequestContext, args: {
+        pipelineId?: string;
+        timeRange?: string;
+    }): Promise<ErrorAnalytics>;
+    dataHubThroughputMetrics(ctx: RequestContext, args: {
+        pipelineId?: string;
+        timeRange?: string;
+    }): Promise<ThroughputMetrics>;
+    dataHubRealTimeStats(ctx: RequestContext): Promise<RealTimeStats>;
+    dataHubStorageStats(_ctx: RequestContext): Promise<{
+        totalFiles: number;
+        totalSize: number;
+        byMimeType: Record<string, {
+            count: number;
+            size: number;
+        }>;
+    }>;
+    dataHubWebhookDeliveries(_ctx: RequestContext, args: {
+        status?: string;
+        webhookId?: string;
+        limit?: number;
+    }): Promise<WebhookDelivery[]>;
+    dataHubWebhookDelivery(_ctx: RequestContext, args: {
+        deliveryId: string;
+    }): Promise<WebhookDelivery | undefined>;
+    dataHubDeadLetterQueue(_ctx: RequestContext): Promise<WebhookDelivery[]>;
+    dataHubWebhookStats(_ctx: RequestContext): Promise<WebhookStats>;
+    dataHubRetryDeadLetter(_ctx: RequestContext, args: {
+        deliveryId: string;
+    }): Promise<RetryDeadLetterResult>;
+    dataHubRemoveDeadLetter(_ctx: RequestContext, args: {
+        deliveryId: string;
+    }): Promise<RemoveDeadLetterResult>;
+    dataHubExportDestinations(_ctx: RequestContext): Promise<RedactedDestinationConfig[]>;
+    dataHubExportDestination(_ctx: RequestContext, args: {
+        id: string;
+    }): Promise<RedactedDestinationConfig | null>;
+    private redactDestinationSecrets;
+    dataHubRegisterExportDestination(_ctx: RequestContext, args: {
+        input: DestinationConfig;
+    }): Promise<RegisterDestinationResult>;
+    dataHubTestExportDestination(_ctx: RequestContext, args: {
+        id: string;
+    }): Promise<ConnectionTestResult>;
+    dataHubDeliverToDestination(_ctx: RequestContext, args: {
+        destinationId: string;
+        content: string;
+        filename: string;
+        mimeType?: string;
+    }): Promise<DeliveryResult>;
+}
+export {};
+//# sourceMappingURL=analytics.resolver.d.ts.map

package/dist/src/api/resolvers/analytics.resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.resolver.d.ts","sourceRoot":"","sources":["../../../../src/api/resolvers/analytics.resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,cAAc,EAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACH,gBAAgB,EAChB,mBAAmB,EAEnB,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EACrB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,KAAK,EACR,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,aAAa,EAChB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EACR,eAAe,EACf,YAAY,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACR,cAAc,EACjB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,oDAAoD;AACpD,UAAU,yBAA0B,SAAQ,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,GAAG,UAAU,GAAG,YAAY,CAAC;IAC9G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4CAA4C;AAC5C,UAAU,qBAAqB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CACpC;AAED,6CAA6C;AAC7C,UAAU,sBAAsB;IAC5B,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,+CAA+C;AAC/C,UAAU,yBAAyB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACd;AAED,qBACa,6BAA6B;IAElC,OAAO,CAAC,gBAAgB;IACxB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,kBAAkB;gBAHlB,gBAAgB,EAAE,gBAAgB,EAClC,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,kBAAkB,EAAE,kBAAkB;IAK5C,wBAAwB,CAAQ,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMhF,0BAA0B,CACrB,GAAG,EAAE,cAAc,EAClB,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAU3B,qBAAqB,CAChB,GAAG,EAAE,cAAc,EAClB,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,cAAc,CAAC;IASpB,wBAAwB,CACnB,GAAG,EAAE,cAAc,EAClB,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,iBAAiB,CAAC;IASvB,oBAAoB,CAAQ,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAMxE,mBAAmB,CAAQ,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAC5D,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC/D,CAAC;IAWI,wBAAwB,CACnB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC,eAAe,EAAE,CAAC;IAUvB,sBAAsB,CACjB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GACrC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAMjC,sBAAsB,CAAQ,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAM/E,mBAAmB,CAAQ,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAOvE,sBAAsB,CACjB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GACrC,OAAO,CAAC,qBAAqB,CAAC;IAW3B,uBAAuB,CAClB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GACrC,OAAO,CAAC,sBAAsB,CAAC;IAO5B,yBAAyB,CAAQ,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAM5F,wBAAwB,CACnB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAM5C,OAAO,CAAC,wBAAwB;IAY1B,gCAAgC,CAC3B,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,GAC3C,OAAO,CAAC,yBAAyB,CAAC;IAQ/B,4BAA4B,CACvB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,oBAAoB,CAAC;IAO1B,2BAA2B,CACtB,IAAI,EAAE,cAAc,EACnB,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9F,OAAO,CAAC,cAAc,CAAC;CAQ7B"}