@researchdatabox/redbox-core 5.1.0-beta.12568 → 5.1.0-beta.13939

package/dist/services/AppConfigSecrets.js

@@ -0,0 +1,396 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppConfigSecrets = void 0;
+exports.isAppConfigSecretReference = isAppConfigSecretReference;
+const node_crypto_1 = require("node:crypto");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+function isAppConfigSecretReference(value) {
+    if (typeof value !== 'object' || value === null || !('$appConfigSecret' in value))
+        return false;
+    const reference = value.$appConfigSecret;
+    return (typeof reference === 'object' &&
+        reference !== null &&
+        'provider' in reference &&
+        reference.provider === 'aws-secrets-manager' &&
+        'arn' in reference &&
+        typeof reference.arn === 'string' &&
+        reference.arn.startsWith('arn:') &&
+        (!('key' in reference) || (typeof reference.key === 'string' && reference.key.length > 0)));
+}
+/** Only controlled application messages may bypass SDK error redaction. */
+class AppConfigSecretsInternalError extends Error {
+}
+/** Cached reads for both immutable field secrets and mutable brand bundles. */
+class AppConfigSecrets {
+    config;
+    client;
+    values = new Map();
+    bundleTokens = new Map();
+    constructor(config) {
+        this.config = config;
+        this.client = new client_secrets_manager_1.SecretsManagerClient({
+            region: config.region,
+            // Bound connection/header waits per attempt. Overall deadlines below also
+            // cover response bodies and retries, including reads outside storeBundle.
+            requestHandler: { connectionTimeout: 5_000, requestTimeout: 30_000, throwOnRequestTimeout: true }
+        });
+    }
+    async store(brandId, configKey, field, value) {
+        const prefix = this.getPrefix();
+        const scope = (0, node_crypto_1.createHash)('sha256')
+            .update(JSON.stringify([brandId, configKey, field]))
+            .digest('hex');
+        const result = await this.safeAwsCall('store', () => this.withAwsDeadline(signal => this.client.send(new client_secrets_manager_1.CreateSecretCommand({
+            Name: `${prefix}/${scope}/${(0, node_crypto_1.randomUUID)()}`,
+            SecretString: value,
+            KmsKeyId: this.config.kmsKeyId,
+            Tags: [{ Key: 'managed-by', Value: 'redbox-appconfig' }],
+        }), { abortSignal: signal })));
+        if (!result.ARN)
+            throw new Error('AWS Secrets Manager did not return a secret ARN');
+        this.remember({ arn: result.ARN, name: result.Name, value });
+        return { $appConfigSecret: { provider: 'aws-secrets-manager', arn: result.ARN } };
+    }
+    getPrefix() {
+        const prefix = this.config.namePrefix;
+        if (!prefix || !/^[a-zA-Z0-9/_+=.@-]+$/.test(prefix) || prefix.length > 400)
+            throw new Error('Invalid appConfigSecrets.namePrefix');
+        return prefix;
+    }
+    remember(secret) {
+        const cached = Promise.resolve(secret);
+        this.values.set(secret.arn, cached);
+        if (secret.name)
+            this.values.set(secret.name, cached);
+    }
+    /** Promise caching also coalesces concurrent reads. Rejected requests can be retried. */
+    async read(secretId) {
+        const cached = this.values.get(secretId);
+        if (cached)
+            return cached;
+        const pending = this.fetch(secretId);
+        this.values.set(secretId, pending);
+        try {
+            const secret = await pending;
+            if (this.values.get(secretId) === pending) {
+                // Do not replace a newer value published while this read was in flight.
+                if (!this.values.has(secret.arn))
+                    this.values.set(secret.arn, pending);
+                if (secret.name && !this.values.has(secret.name))
+                    this.values.set(secret.name, pending);
+            }
+            return secret;
+        }
+        catch (error) {
+            if (this.values.get(secretId) === pending)
+                this.values.delete(secretId);
+            throw error;
+        }
+    }
+    /** Abort the complete SDK operation, including a response body stalled after headers. */
+    async withAwsDeadline(request) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 30_000);
+        try {
+            return await request(controller.signal);
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    async fetch(secretId, signal) {
+        const request = (abortSignal) => this.client.send(new client_secrets_manager_1.GetSecretValueCommand({ SecretId: secretId }), { abortSignal });
+        const result = signal ? await request(signal) : await this.withAwsDeadline(request);
+        if (result.SecretString === undefined)
+            throw new AppConfigSecretsInternalError('AppConfig secrets must contain a SecretString');
+        return { arn: result.ARN ?? secretId, name: result.Name, value: result.SecretString };
+    }
+    parseBundle(value) {
+        let parsed;
+        try {
+            parsed = JSON.parse(value);
+        }
+        catch {
+            throw new AppConfigSecretsInternalError('Invalid AppConfig secret bundle');
+        }
+        if (typeof parsed !== 'object' || parsed === null || !('format' in parsed) || parsed.format !== 'redbox-appconfig-v1' ||
+            !('values' in parsed) || typeof parsed.values !== 'object' || parsed.values === null || Array.isArray(parsed.values) ||
+            !Object.values(parsed.values).every(value => typeof value === 'string'))
+            throw new AppConfigSecretsInternalError('Invalid AppConfig secret bundle');
+        return parsed;
+    }
+    bundleName(brandId) {
+        const scope = (0, node_crypto_1.createHash)('sha256').update(brandId).digest('hex');
+        return `${this.getPrefix()}/brands/${scope}`;
+    }
+    lockCollection() {
+        const model = AppConfig;
+        const collection = model.getDatastore?.().manager?.collection?.('appconfigsecretlocks');
+        if (!collection)
+            throw new Error('Bundled AppConfig secrets require MongoDB write coordination');
+        return collection;
+    }
+    synchronizeBundleCache(name, token) {
+        if (this.bundleTokens.get(name) !== token)
+            this.invalidate(name);
+        this.bundleTokens.set(name, token);
+    }
+    /** Mongo-only freshness check before comparisons or hydration during saves/reloads. */
+    async synchronizeBundle(brandId, purpose = 'save', lease) {
+        const name = this.bundleName(brandId);
+        if (lease) {
+            this.assertBundleLease(lease, name);
+            this.synchronizeBundleCache(name, lease.token);
+            return;
+        }
+        let lock;
+        try {
+            lock = await this.lockCollection().findOne({ _id: name });
+        }
+        catch {
+            throw new Error('Unable to coordinate AppConfig secret update');
+        }
+        if (lock?.owner && lock.expiresAt.getTime() > Date.now()) {
+            if (purpose === 'save')
+                throw new Error('Another AppConfig secret update is in progress for this brand. Retry shortly.');
+            // Startup/reload can read the current AWS value during another node's write.
+            // Its snapshot must remain untrusted for a later save, even if that writer
+            // already published its token but has not yet finished its AWS request.
+            this.invalidate(name);
+            this.bundleTokens.delete(name);
+            return;
+        }
+        this.synchronizeBundleCache(name, lock?.cacheToken ?? '');
+    }
+    /** Keep the same cross-node lease from the authoritative row read through cache publication. */
+    async withBundleSave(brandId, save) {
+        const name = this.bundleName(brandId);
+        const collection = this.lockCollection();
+        const owner = (0, node_crypto_1.randomUUID)();
+        const now = Date.now();
+        try {
+            await collection.updateOne({ _id: name, expiresAt: { $lte: new Date(now) } }, {
+                $set: { owner, expiresAt: new Date(now + 120_000) }
+            }, { upsert: true });
+        }
+        catch (error) {
+            if (typeof error === 'object' && error !== null && 'code' in error && error.code === 11000) {
+                throw new Error('Another AppConfig secret update is in progress for this brand. Retry shortly.');
+            }
+            throw new Error('Unable to coordinate AppConfig secret update');
+        }
+        const lease = { name, collection, owner, token: '', expiresAt: now + 120_000, active: true, aborted: false, lost: false };
+        let heartbeat;
+        let renewing;
+        let closing = false;
+        const schedule = () => {
+            if (closing || !lease.active || lease.aborted || lease.lost)
+                return;
+            heartbeat = setTimeout(() => {
+                if (closing || lease.aborted || lease.lost)
+                    return;
+                renewing = this.checkBundleSave(lease).catch(() => {
+                    sails.log.error('Unable to renew AppConfig secret write lease. Further writes require a valid lease.');
+                }).finally(schedule);
+            }, 20_000);
+            heartbeat.unref();
+        };
+        try {
+            let lock;
+            try {
+                lock = await collection.findOne({ _id: name, owner });
+            }
+            catch {
+                throw new Error('Unable to coordinate AppConfig secret update');
+            }
+            if (!lock)
+                throw new Error('Unable to coordinate AppConfig secret update');
+            lease.token = lock.cacheToken ?? '';
+            this.assertBundleLease(lease, name);
+            this.synchronizeBundleCache(name, lease.token);
+            schedule();
+            return await save(lease);
+        }
+        finally {
+            closing = true;
+            clearTimeout(heartbeat);
+            await renewing;
+            lease.active = false;
+            if (lease.lost || Date.now() >= lease.expiresAt)
+                sails.log.error('AppConfig secret write lease was lost during the save. Reload and retry the intended configuration.');
+            // An aborted request may still finish at AWS. Leave its lease until expiry.
+            if (!lease.aborted) {
+                // Keep the freshness token after release; it is cache invalidation metadata,
+                // not a stored secret version or rollback history.
+                try {
+                    const released = await collection.updateOne({ _id: name, owner }, { $set: { expiresAt: new Date(0) }, $unset: { owner: '' } });
+                    if (released.matchedCount !== 1)
+                        sails.log.error('AppConfig secret write lease ownership changed before release.');
+                }
+                catch {
+                    sails.log.error('Unable to release AppConfig secret write lease; it will expire automatically.');
+                }
+            }
+        }
+    }
+    assertBundleLease(lease, name) {
+        if (lease.expiresAt <= Date.now())
+            lease.lost = true;
+        if (lease.name !== name || !lease.active || lease.aborted || lease.lost)
+            throw new AppConfigSecretsInternalError('AppConfig secret write lease was lost or aborted. Reload and retry.');
+    }
+    /** Renew immediately before persistence, and while an unabortable database write is pending. */
+    async checkBundleSave(lease) {
+        this.assertBundleLease(lease, lease.name);
+        const expiresAt = Date.now() + 120_000;
+        let renewed;
+        try {
+            renewed = await lease.collection.updateOne({ _id: lease.name, owner: lease.owner, expiresAt: { $gt: new Date() } }, { $max: { expiresAt: new Date(expiresAt) } });
+        }
+        catch {
+            throw new AppConfigSecretsInternalError('Unable to coordinate AppConfig secret update. Check MongoDB connectivity and retry.');
+        }
+        if (renewed.matchedCount !== 1)
+            lease.lost = true;
+        lease.expiresAt = Math.max(lease.expiresAt, expiresAt);
+        this.assertBundleLease(lease, lease.name);
+    }
+    /** Merge only explicitly changed fields into the current brand JSON; never send cached snapshots. */
+    async storeBundle(brandId, changes, lease) {
+        if (!lease)
+            return this.withBundleSave(brandId, owned => this.storeBundle(brandId, changes, owned));
+        const name = this.bundleName(brandId);
+        this.assertBundleLease(lease, name);
+        const { collection, owner } = lease;
+        const controller = new AbortController();
+        const signal = controller.signal;
+        const deadline = Date.now() + 30_000;
+        const timeout = setTimeout(() => { lease.aborted = true; controller.abort(); }, 30_000);
+        try {
+            const result = await this.safeAwsCall('store', async () => {
+                this.synchronizeBundleCache(name, lease.token);
+                const cached = this.values.get(name);
+                if (cached) {
+                    try {
+                        const secret = await cached;
+                        const bundle = this.parseBundle(secret.value);
+                        const unchanged = [...changes].every(([key, value]) => value === null
+                            ? !Object.prototype.hasOwnProperty.call(bundle.values, key)
+                            : Object.prototype.hasOwnProperty.call(bundle.values, key) && bundle.values[key] === value);
+                        if (unchanged)
+                            return secret.arn;
+                    }
+                    catch {
+                        // An in-flight read can fail. Retry under the lease with normal redaction.
+                    }
+                }
+                let current;
+                try {
+                    current = await this.fetch(name, signal);
+                }
+                catch (error) {
+                    if (!(error instanceof Error) || error.name !== 'ResourceNotFoundException')
+                        throw error;
+                }
+                const bundle = current ? this.parseBundle(current.value) : { format: 'redbox-appconfig-v1', values: {} };
+                let changed = false;
+                for (const [key, value] of changes) {
+                    if (value === null) {
+                        if (Object.prototype.hasOwnProperty.call(bundle.values, key)) {
+                            delete bundle.values[key];
+                            changed = true;
+                        }
+                    }
+                    else if (!Object.prototype.hasOwnProperty.call(bundle.values, key) || bundle.values[key] !== value) {
+                        Object.defineProperty(bundle.values, key, { value, enumerable: true, writable: true, configurable: true });
+                        changed = true;
+                    }
+                }
+                if (!changed) {
+                    if (current)
+                        this.remember(current);
+                    return current?.arn;
+                }
+                const value = JSON.stringify(bundle);
+                if (Buffer.byteLength(value, 'utf8') > 65_536)
+                    throw new AppConfigSecretsInternalError('AppConfig secret bundle exceeds the AWS 64 KiB limit');
+                // Invalidate other nodes BEFORE dispatch: a failed/aborted AWS request may
+                // still commit. Never leave their old caches marked as current in that case.
+                const nextToken = (0, node_crypto_1.randomUUID)();
+                await this.checkBundleSave(lease);
+                let marked;
+                try {
+                    marked = await collection.updateOne({ _id: name, owner, expiresAt: { $gt: new Date() } }, { $set: { cacheToken: nextToken } });
+                }
+                catch {
+                    throw new AppConfigSecretsInternalError('Unable to coordinate AppConfig secret update. Check MongoDB connectivity and retry.');
+                }
+                if (marked.matchedCount !== 1) {
+                    lease.lost = true;
+                    throw new AppConfigSecretsInternalError('AppConfig secret write lease was lost. Reload and retry.');
+                }
+                lease.token = nextToken;
+                if (signal.aborted || Date.now() >= deadline)
+                    throw new AppConfigSecretsInternalError('AppConfig secret write timed out. Retry shortly.');
+                const result = current
+                    ? await this.client.send(new client_secrets_manager_1.PutSecretValueCommand({ SecretId: current.arn, SecretString: value }), { abortSignal: signal })
+                    : await this.client.send(new client_secrets_manager_1.CreateSecretCommand({
+                        Name: name, SecretString: value, KmsKeyId: this.config.kmsKeyId,
+                        Tags: [{ Key: 'managed-by', Value: 'redbox-appconfig' }]
+                    }), { abortSignal: signal });
+                const arn = result.ARN ?? current?.arn;
+                if (!arn)
+                    throw new AppConfigSecretsInternalError('AWS Secrets Manager did not return a secret ARN');
+                this.remember({ arn, name, value });
+                this.bundleTokens.set(name, nextToken);
+                return arn;
+            });
+            this.assertBundleLease(lease, name);
+            return result;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    /** Explicit reloads refresh this ARN and its name alias without evicting other brands. */
+    invalidate(arn) {
+        const cached = this.values.get(arn);
+        if (cached)
+            for (const [key, value] of this.values)
+                if (value === cached)
+                    this.values.delete(key);
+    }
+    /** SDK messages can contain IAM/KMS resource details. Never log request inputs or raw errors. */
+    async safeAwsCall(operation, call) {
+        try {
+            return await call();
+        }
+        catch (error) {
+            if (error instanceof AppConfigSecretsInternalError)
+                throw error;
+            const name = error instanceof Error ? error.name : '';
+            const knownErrors = ['AccessDeniedException', 'DecryptionFailure', 'EncryptionFailure', 'ResourceNotFoundException', 'InvalidRequestException', 'ThrottlingException'];
+            const category = knownErrors.includes(name) ? name : 'SDKError';
+            sails.log.error(`AppConfig Secrets Manager ${operation} failed (${category}). Check AWS permissions, KMS and connectivity.`);
+            throw new Error(`Unable to ${operation} AppConfig secret in AWS Secrets Manager`);
+        }
+    }
+    async resolve(reference) {
+        return this.safeAwsCall('resolve', async () => {
+            const secret = await this.read(reference.$appConfigSecret.arn);
+            const key = reference.$appConfigSecret.key;
+            if (key === undefined)
+                return secret.value;
+            const bundle = this.parseBundle(secret.value);
+            if (!Object.prototype.hasOwnProperty.call(bundle.values, key)) {
+                // A clear can commit before its database write fails, or while a reload
+                // still holds the old reference. The current bundle remains authoritative.
+                sails.log.warn('AppConfig bundle field has been cleared. Retry any incomplete configuration save.');
+                return '';
+            }
+            return bundle.values[key];
+        });
+    }
+}
+exports.AppConfigSecrets = AppConfigSecrets;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/services/AppConfigService.d.ts

@@ -19,12 +19,20 @@ export declare namespace Services {
         }>;
         modelSchemaMap: Record<string, unknown>;
         private extraTsGlobs;
+        private secretStore?;
+        private configWriteGates;
         protected _exportedMethods: string[];
         bootstrap: () => Promise<void>;
         private bootstrapAsync;
         initAllConfigFormSchemas(): Promise<void>;
-        private refreshBrandingAppConfigMap;
+        private prepareBrandingCache;
+        /** Expand only own properties; wildcard matches one literal key, including punctuation. */
+        private getSecretPaths;
+        private setExistingSecretPath;
         private getSecretFields;
+        private getSecretStore;
+        private hydrateSecretFields;
+        private storeSecretFields;
         private isMaskedSecretPlaceholder;
         private shouldMaskSecretValue;
         private maskSecretFields;
@@ -34,11 +42,14 @@ export declare namespace Services {
         getAppConfigurationForBrand(brandName: string): BrandingConfigurationDefaultsConfig & {
             authorizedDomainsEmails?: AuthorizedDomainsEmails;
         };
+        /** Safe admin view; backend consumers continue to use the hydrated cache. */
+        getMaskedAppConfigurationForBrand(brandName: string, configKey?: string): unknown;
         getAllConfigurationForBrand: (brandId: string) => Promise<AppConfigAttributes[]>;
         private getConfigRecordTimestamp;
         private chooseLatestConfigRecord;
         private reduceToLatestConfigRecords;
         private findLatestConfigRecord;
+        private createDefaultConfiguration;
         loadAppConfigurationModel(brandId: string): Promise<BrandingConfigurationDefaultsConfig & {
             authorizedDomainsEmails?: AuthorizedDomainsEmails;
         }>;
@@ -48,7 +59,11 @@ export declare namespace Services {
          * operations: independent dashboard settings are revision-checked and live in
          * the DashboardConfiguration model. The migration reads legacy rows directly.
          */
+        private isSafeConfigKey;
+        private assertSafeConfigKey;
         private assertWritableConfigKey;
+        /** Order persistence/cache publication per key, or per brand for shared JSON bundles. */
+        private withConfigWriteLock;
         createOrUpdateConfig(branding: BrandingModel, configKey: string, configData: AppConfigData): Promise<unknown>;
         createConfig(brandName: string, configKey: string, configData: AppConfigData): Promise<unknown>;
         getAppConfigForm(branding: BrandingModel, configForm: string): Promise<{

package/dist/services/AppConfigService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppConfigService.d.ts","sourceRoot":"","sources":["../../src/services/AppConfigService.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,QAAQ,IAAI,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAsC,KAAK,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/G,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAE1G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAIvF,eAAO,MAAM,sBAAsB,iBAAiB,CAAA;AACpD,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAI7C,yBAAiB,QAAQ,CAAC;IACxB;;;;OAIG;IACH,MAAa,UAAW,SAAQ,QAAQ,CAAC,IAAI,CAAC,OAAO;QACnD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAM;QACvI,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;QAC7C,OAAO,CAAC,YAAY,CAA0B;QAE9C,UAAmB,gBAAgB,EAAE,MAAM,EAAE,CAU3C;QAGK,SAAS,QAAO,OAAO,CAAC,IAAI,CAAC,CAGnC;gBAEa,cAAc;QAetB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;gBAsBjC,2BAA2B;QAKzC,OAAO,CAAC,eAAe;QAIvB,OAAO,CAAC,yBAAyB;QAIjC,OAAO,CAAC,qBAAqB;QAO7B,OAAO,CAAC,gBAAgB;QAgBxB,OAAO,CAAC,iBAAiB;QAuBzB,OAAO,CAAC,yBAAyB;QAQjC,OAAO,CAAC,yBAAyB;QAQ1B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE;QAI3I,2BAA2B,GAAI,SAAS,MAAM,KAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAErF;QAED,OAAO,CAAC,wBAAwB;QAYhC,OAAO,CAAC,wBAAwB;QAWhC,OAAO,CAAC,2BAA2B;gBAkBrB,sBAAsB;QAQvB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE,CAAC;QAiChJ,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;QAoB5F;;;;WAIG;QACH,OAAO,CAAC,uBAAuB;QASlB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QAkB7G,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QAiB/F,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAiB7I,OAAO,CAAC,aAAa;QAuCrB;;;;WAIG;QACI,mBAAmB,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE;gBAAE,KAAI,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBAAC,aAAa,CAAC,EAAE,MAAM,MAAM,EAAE,CAAA;aAAE,CAAC;YAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,WAAW,CAAC,EAAE,sBAAsB,CAAA;SAAE,GAAG,IAAI;KA6BlQ;CAEF;AAED,OAAO,CAAC,MAAM,CAAC;IACb,IAAI,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C"}
+{"version":3,"file":"AppConfigService.d.ts","sourceRoot":"","sources":["../../src/services/AppConfigService.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,QAAQ,IAAI,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAsC,KAAK,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/G,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAE1G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAMvF,eAAO,MAAM,sBAAsB,iBAAiB,CAAA;AACpD,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAI7C,yBAAiB,QAAQ,CAAC;IACxB;;;;OAIG;IACH,MAAa,UAAW,SAAQ,QAAQ,CAAC,IAAI,CAAC,OAAO;QACnD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAM;QACvI,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;QAC7C,OAAO,CAAC,YAAY,CAA0B;QAC9C,OAAO,CAAC,WAAW,CAAC,CAAmB;QACvC,OAAO,CAAC,gBAAgB,CAAoC;QAE5D,UAAmB,gBAAgB,EAAE,MAAM,EAAE,CAW3C;QAGK,SAAS,QAAO,OAAO,CAAC,IAAI,CAAC,CAGnC;gBAEa,cAAc;QAetB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;QAsB/C,OAAO,CAAC,oBAAoB;QAW5B,2FAA2F;QAC3F,OAAO,CAAC,cAAc;QAmBtB,OAAO,CAAC,qBAAqB;QAc7B,OAAO,CAAC,eAAe;QAIvB,OAAO,CAAC,cAAc;gBAIR,mBAAmB;gBAYnB,iBAAiB;QAsF/B,OAAO,CAAC,yBAAyB;QAIjC,OAAO,CAAC,qBAAqB;QAO7B,OAAO,CAAC,gBAAgB;QAgBxB,OAAO,CAAC,iBAAiB;QAuBzB,OAAO,CAAC,yBAAyB;QAQjC,OAAO,CAAC,yBAAyB;QAQ1B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE;QAIlJ,6EAA6E;QACtE,iCAAiC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;QASjF,2BAA2B,GAAI,SAAS,MAAM,KAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAErF;QAED,OAAO,CAAC,wBAAwB;QAYhC,OAAO,CAAC,wBAAwB;QAWhC,OAAO,CAAC,2BAA2B;gBAkBrB,sBAAsB;QAQpC,OAAO,CAAC,0BAA0B;QAoBrB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,GAAG;YAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAA;SAAE,CAAC;QAqChJ,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;QAqB5F;;;;WAIG;QACH,OAAO,CAAC,eAAe;QAKvB,OAAO,CAAC,mBAAmB;QAI3B,OAAO,CAAC,uBAAuB;QAU/B,yFAAyF;gBAC3E,mBAAmB;QA+BpB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QAuB7G,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QAqB/F,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAiB7I,OAAO,CAAC,aAAa;QAuCrB;;;;WAIG;QACI,mBAAmB,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE;gBAAE,KAAI,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBAAC,aAAa,CAAC,EAAE,MAAM,MAAM,EAAE,CAAA;aAAE,CAAC;YAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,WAAW,CAAC,EAAE,sBAAsB,CAAA;SAAE,GAAG,IAAI;KA6BlQ;CAEF;AAED,OAAO,CAAC,MAAM,CAAC;IACb,IAAI,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C"}