@serve.zone/dcrouter 2.12.4

package/dist_ts/ts/mail/routing/index.d.ts

@@ -0,0 +1,5 @@
+export * from './classes.email.router.js';
+export * from './classes.unified.email.server.js';
+export * from './classes.dns.manager.js';
+export * from './interfaces.js';
+export * from './classes.domain.registry.js';

package/dist_ts/ts/mail/routing/index.js

@@ -0,0 +1,7 @@
+// Email routing components
+export * from './classes.email.router.js';
+export * from './classes.unified.email.server.js';
+export * from './classes.dns.manager.js';
+export * from './interfaces.js';
+export * from './classes.domain.registry.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9tYWlsL3JvdXRpbmcvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsMkJBQTJCO0FBQzNCLGNBQWMsMkJBQTJCLENBQUM7QUFDMUMsY0FBYyxtQ0FBbUMsQ0FBQztBQUNsRCxjQUFjLDBCQUEwQixDQUFDO0FBQ3pDLGNBQWMsaUJBQWlCLENBQUM7QUFDaEMsY0FBYyw4QkFBOEIsQ0FBQyJ9

package/dist_ts/ts/mail/routing/interfaces.d.ts

@@ -0,0 +1,187 @@
+import type { Email } from '../core/classes.email.js';
+import type { IExtendedSmtpSession } from './classes.unified.email.server.js';
+/**
+ * Route configuration for email routing
+ */
+export interface IEmailRoute {
+    /** Route identifier */
+    name: string;
+    /** Order of evaluation (higher priority evaluated first, default: 0) */
+    priority?: number;
+    /** Conditions to match */
+    match: IEmailMatch;
+    /** Action to take when matched */
+    action: IEmailAction;
+}
+/**
+ * Match criteria for email routing
+ */
+export interface IEmailMatch {
+    /** Email patterns to match recipients: "*@example.com", "admin@*" */
+    recipients?: string | string[];
+    /** Email patterns to match senders */
+    senders?: string | string[];
+    /** IP addresses or CIDR ranges to match */
+    clientIp?: string | string[];
+    /** Require authentication status */
+    authenticated?: boolean;
+    /** Headers to match */
+    headers?: Record<string, string | RegExp>;
+    /** Message size range */
+    sizeRange?: {
+        min?: number;
+        max?: number;
+    };
+    /** Subject line patterns */
+    subject?: string | RegExp;
+    /** Has attachments */
+    hasAttachments?: boolean;
+}
+/**
+ * Action to take when route matches
+ */
+export interface IEmailAction {
+    /** Type of action to perform */
+    type: 'forward' | 'deliver' | 'reject' | 'process';
+    /** Forward action configuration */
+    forward?: {
+        /** Target host to forward to */
+        host: string;
+        /** Target port (default: 25) */
+        port?: number;
+        /** Authentication credentials */
+        auth?: {
+            user: string;
+            pass: string;
+        };
+        /** Preserve original headers */
+        preserveHeaders?: boolean;
+        /** Additional headers to add */
+        addHeaders?: Record<string, string>;
+    };
+    /** Reject action configuration */
+    reject?: {
+        /** SMTP response code */
+        code: number;
+        /** SMTP response message */
+        message: string;
+    };
+    /** Process action configuration */
+    process?: {
+        /** Enable content scanning */
+        scan?: boolean;
+        /** Enable DKIM signing */
+        dkim?: boolean;
+        /** Delivery queue priority */
+        queue?: 'normal' | 'priority' | 'bulk';
+    };
+    /** Options for various action types */
+    options?: {
+        /** MTA specific options */
+        mtaOptions?: {
+            domain?: string;
+            allowLocalDelivery?: boolean;
+            localDeliveryPath?: string;
+            dkimSign?: boolean;
+            dkimOptions?: {
+                domainName: string;
+                keySelector: string;
+                privateKey?: string;
+            };
+            smtpBanner?: string;
+            maxConnections?: number;
+            connTimeout?: number;
+            spoolDir?: string;
+        };
+        /** Content scanning configuration */
+        contentScanning?: boolean;
+        scanners?: Array<{
+            type: 'spam' | 'virus' | 'attachment';
+            threshold?: number;
+            action: 'tag' | 'reject';
+            blockedExtensions?: string[];
+        }>;
+        /** Email transformations */
+        transformations?: Array<{
+            type: string;
+            header?: string;
+            value?: string;
+            domains?: string[];
+            append?: boolean;
+            [key: string]: any;
+        }>;
+    };
+    /** Delivery options (applies to forward/process/deliver) */
+    delivery?: {
+        /** Rate limit (messages per minute) */
+        rateLimit?: number;
+        /** Number of retry attempts */
+        retries?: number;
+    };
+}
+/**
+ * Context for route evaluation
+ */
+export interface IEmailContext {
+    /** The email being routed */
+    email: Email;
+    /** The SMTP session */
+    session: IExtendedSmtpSession;
+}
+/**
+ * Email domain configuration
+ */
+export interface IEmailDomainConfig {
+    /** Domain name */
+    domain: string;
+    /** DNS handling mode */
+    dnsMode: 'forward' | 'internal-dns' | 'external-dns';
+    /** DNS configuration based on mode */
+    dns?: {
+        /** For 'forward' mode */
+        forward?: {
+            /** Skip DNS validation (default: false) */
+            skipDnsValidation?: boolean;
+            /** Target server's expected domain */
+            targetDomain?: string;
+        };
+        /** For 'internal-dns' mode */
+        internal?: {
+            /** TTL for DNS records in seconds (default: 3600) */
+            ttl?: number;
+            /** MX record priority (default: 10) */
+            mxPriority?: number;
+        };
+        /** For 'external-dns' mode */
+        external?: {
+            /** Custom DNS servers (default: system DNS) */
+            servers?: string[];
+            /** Which records to validate (default: ['MX', 'SPF', 'DKIM', 'DMARC']) */
+            requiredRecords?: ('MX' | 'SPF' | 'DKIM' | 'DMARC')[];
+        };
+    };
+    /** Per-domain DKIM settings (DKIM always enabled) */
+    dkim?: {
+        /** DKIM selector (default: 'default') */
+        selector?: string;
+        /** Key size in bits (default: 2048) */
+        keySize?: number;
+        /** Automatically rotate keys (default: false) */
+        rotateKeys?: boolean;
+        /** Days between key rotations (default: 90) */
+        rotationInterval?: number;
+    };
+    /** Per-domain rate limits */
+    rateLimits?: {
+        outbound?: {
+            messagesPerMinute?: number;
+            messagesPerHour?: number;
+            messagesPerDay?: number;
+        };
+        inbound?: {
+            messagesPerMinute?: number;
+            connectionsPerIp?: number;
+            recipientsPerMessage?: number;
+        };
+    };
+}

package/dist_ts/ts/mail/routing/interfaces.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW50ZXJmYWNlcy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3RzL21haWwvcm91dGluZy9pbnRlcmZhY2VzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiIifQ==

package/dist_ts/ts/mail/security/classes.dkimcreator.d.ts

@@ -0,0 +1,68 @@
+import * as plugins from '../../plugins.js';
+import { Email } from '../core/classes.email.js';
+export interface IKeyPaths {
+    privateKeyPath: string;
+    publicKeyPath: string;
+}
+export interface IDkimKeyMetadata {
+    domain: string;
+    selector: string;
+    createdAt: number;
+    rotatedAt?: number;
+    previousSelector?: string;
+    keySize: number;
+}
+export declare class DKIMCreator {
+    private keysDir;
+    private storageManager?;
+    constructor(keysDir?: string, storageManager?: any);
+    getKeyPathsForDomain(domainArg: string): Promise<IKeyPaths>;
+    handleDKIMKeysForDomain(domainArg: string): Promise<void>;
+    handleDKIMKeysForEmail(email: Email): Promise<void>;
+    readDKIMKeys(domainArg: string): Promise<{
+        privateKey: string;
+        publicKey: string;
+    }>;
+    createDKIMKeys(): Promise<{
+        privateKey: string;
+        publicKey: string;
+    }>;
+    storeDKIMKeys(privateKey: string, publicKey: string, privateKeyPath: string, publicKeyPath: string): Promise<void>;
+    createAndStoreDKIMKeys(domain: string): Promise<void>;
+    getDNSRecordForDomain(domainArg: string): Promise<plugins.tsclass.network.IDnsRecord>;
+    /**
+     * Get DKIM key metadata for a domain
+     */
+    private getKeyMetadata;
+    /**
+     * Save DKIM key metadata
+     */
+    private saveKeyMetadata;
+    /**
+     * Check if DKIM keys need rotation
+     */
+    needsRotation(domain: string, selector?: string, rotationIntervalDays?: number): Promise<boolean>;
+    /**
+     * Rotate DKIM keys for a domain
+     */
+    rotateDkimKeys(domain: string, currentSelector?: string, keySize?: number): Promise<string>;
+    /**
+     * Get key paths for a specific selector
+     */
+    getKeyPathsForSelector(domain: string, selector: string): Promise<IKeyPaths>;
+    /**
+     * Read DKIM keys for a specific selector
+     */
+    readDKIMKeysForSelector(domain: string, selector: string): Promise<{
+        privateKey: string;
+        publicKey: string;
+    }>;
+    /**
+     * Get DNS record for a specific selector
+     */
+    getDNSRecordForSelector(domain: string, selector: string): Promise<plugins.tsclass.network.IDnsRecord>;
+    /**
+     * Clean up old DKIM keys after grace period
+     */
+    cleanupOldKeys(domain: string, gracePeriodDays?: number): Promise<void>;
+}

package/dist_ts/ts/mail/security/classes.dkimcreator.js

@@ -0,0 +1,346 @@
+import * as plugins from '../../plugins.js';
+import * as paths from '../../paths.js';
+import { Email } from '../core/classes.email.js';
+// MtaService reference removed
+const readFile = plugins.util.promisify(plugins.fs.readFile);
+const writeFile = plugins.util.promisify(plugins.fs.writeFile);
+const generateKeyPair = plugins.util.promisify(plugins.crypto.generateKeyPair);
+export class DKIMCreator {
+    constructor(keysDir = paths.keysDir, storageManager) {
+        this.keysDir = keysDir;
+        this.storageManager = storageManager;
+    }
+    async getKeyPathsForDomain(domainArg) {
+        return {
+            privateKeyPath: plugins.path.join(this.keysDir, `${domainArg}-private.pem`),
+            publicKeyPath: plugins.path.join(this.keysDir, `${domainArg}-public.pem`),
+        };
+    }
+    // Check if a DKIM key is present and creates one and stores it to disk otherwise
+    async handleDKIMKeysForDomain(domainArg) {
+        try {
+            await this.readDKIMKeys(domainArg);
+        }
+        catch (error) {
+            console.log(`No DKIM keys found for ${domainArg}. Generating...`);
+            await this.createAndStoreDKIMKeys(domainArg);
+            const dnsValue = await this.getDNSRecordForDomain(domainArg);
+            plugins.smartfile.fs.ensureDirSync(paths.dnsRecordsDir);
+            plugins.smartfile.memory.toFsSync(JSON.stringify(dnsValue, null, 2), plugins.path.join(paths.dnsRecordsDir, `${domainArg}.dkimrecord.json`));
+        }
+    }
+    async handleDKIMKeysForEmail(email) {
+        const domain = email.from.split('@')[1];
+        await this.handleDKIMKeysForDomain(domain);
+    }
+    // Read DKIM keys - always use storage manager, migrate from filesystem if needed
+    async readDKIMKeys(domainArg) {
+        // Try to read from storage manager first
+        if (this.storageManager) {
+            try {
+                const [privateKey, publicKey] = await Promise.all([
+                    this.storageManager.get(`/email/dkim/${domainArg}/private.key`),
+                    this.storageManager.get(`/email/dkim/${domainArg}/public.key`)
+                ]);
+                if (privateKey && publicKey) {
+                    return { privateKey, publicKey };
+                }
+            }
+            catch (error) {
+                // Fall through to migration check
+            }
+            // Check if keys exist in filesystem and migrate them to storage manager
+            const keyPaths = await this.getKeyPathsForDomain(domainArg);
+            try {
+                const [privateKeyBuffer, publicKeyBuffer] = await Promise.all([
+                    readFile(keyPaths.privateKeyPath),
+                    readFile(keyPaths.publicKeyPath),
+                ]);
+                // Convert the buffers to strings
+                const privateKey = privateKeyBuffer.toString();
+                const publicKey = publicKeyBuffer.toString();
+                // Migrate to storage manager
+                console.log(`Migrating DKIM keys for ${domainArg} from filesystem to StorageManager`);
+                await Promise.all([
+                    this.storageManager.set(`/email/dkim/${domainArg}/private.key`, privateKey),
+                    this.storageManager.set(`/email/dkim/${domainArg}/public.key`, publicKey)
+                ]);
+                return { privateKey, publicKey };
+            }
+            catch (error) {
+                if (error.code === 'ENOENT') {
+                    // Keys don't exist anywhere
+                    throw new Error(`DKIM keys not found for domain ${domainArg}`);
+                }
+                throw error;
+            }
+        }
+        else {
+            // No storage manager, use filesystem directly
+            const keyPaths = await this.getKeyPathsForDomain(domainArg);
+            const [privateKeyBuffer, publicKeyBuffer] = await Promise.all([
+                readFile(keyPaths.privateKeyPath),
+                readFile(keyPaths.publicKeyPath),
+            ]);
+            const privateKey = privateKeyBuffer.toString();
+            const publicKey = publicKeyBuffer.toString();
+            return { privateKey, publicKey };
+        }
+    }
+    // Create a DKIM key pair - changed to public for API access
+    async createDKIMKeys() {
+        const { privateKey, publicKey } = await generateKeyPair('rsa', {
+            modulusLength: 2048,
+            publicKeyEncoding: { type: 'spki', format: 'pem' },
+            privateKeyEncoding: { type: 'pkcs1', format: 'pem' },
+        });
+        return { privateKey, publicKey };
+    }
+    // Store a DKIM key pair - uses storage manager if available, else disk
+    async storeDKIMKeys(privateKey, publicKey, privateKeyPath, publicKeyPath) {
+        // Store in storage manager if available
+        if (this.storageManager) {
+            // Extract domain from path (e.g., /path/to/keys/example.com-private.pem -> example.com)
+            const match = privateKeyPath.match(/\/([^\/]+)-private\.pem$/);
+            if (match) {
+                const domain = match[1];
+                await Promise.all([
+                    this.storageManager.set(`/email/dkim/${domain}/private.key`, privateKey),
+                    this.storageManager.set(`/email/dkim/${domain}/public.key`, publicKey)
+                ]);
+            }
+        }
+        // Also store to filesystem for backward compatibility
+        await Promise.all([writeFile(privateKeyPath, privateKey), writeFile(publicKeyPath, publicKey)]);
+    }
+    // Create a DKIM key pair and store it to disk - changed to public for API access
+    async createAndStoreDKIMKeys(domain) {
+        const { privateKey, publicKey } = await this.createDKIMKeys();
+        const keyPaths = await this.getKeyPathsForDomain(domain);
+        await this.storeDKIMKeys(privateKey, publicKey, keyPaths.privateKeyPath, keyPaths.publicKeyPath);
+        console.log(`DKIM keys for ${domain} created and stored.`);
+    }
+    // Changed to public for API access
+    async getDNSRecordForDomain(domainArg) {
+        await this.handleDKIMKeysForDomain(domainArg);
+        const keys = await this.readDKIMKeys(domainArg);
+        // Remove the PEM header and footer and newlines
+        const pemHeader = '-----BEGIN PUBLIC KEY-----';
+        const pemFooter = '-----END PUBLIC KEY-----';
+        const keyContents = keys.publicKey
+            .replace(pemHeader, '')
+            .replace(pemFooter, '')
+            .replace(/\n/g, '');
+        // Now generate the DKIM DNS TXT record
+        const dnsRecordValue = `v=DKIM1; h=sha256; k=rsa; p=${keyContents}`;
+        return {
+            name: `mta._domainkey.${domainArg}`,
+            type: 'TXT',
+            dnsSecEnabled: null,
+            value: dnsRecordValue,
+        };
+    }
+    /**
+     * Get DKIM key metadata for a domain
+     */
+    async getKeyMetadata(domain, selector = 'default') {
+        if (!this.storageManager) {
+            return null;
+        }
+        const metadataKey = `/email/dkim/${domain}/${selector}/metadata`;
+        const metadataStr = await this.storageManager.get(metadataKey);
+        if (!metadataStr) {
+            return null;
+        }
+        return JSON.parse(metadataStr);
+    }
+    /**
+     * Save DKIM key metadata
+     */
+    async saveKeyMetadata(metadata) {
+        if (!this.storageManager) {
+            return;
+        }
+        const metadataKey = `/email/dkim/${metadata.domain}/${metadata.selector}/metadata`;
+        await this.storageManager.set(metadataKey, JSON.stringify(metadata));
+    }
+    /**
+     * Check if DKIM keys need rotation
+     */
+    async needsRotation(domain, selector = 'default', rotationIntervalDays = 90) {
+        const metadata = await this.getKeyMetadata(domain, selector);
+        if (!metadata) {
+            // No metadata means old keys, should rotate
+            return true;
+        }
+        const now = Date.now();
+        const keyAgeMs = now - metadata.createdAt;
+        const keyAgeDays = keyAgeMs / (1000 * 60 * 60 * 24);
+        return keyAgeDays >= rotationIntervalDays;
+    }
+    /**
+     * Rotate DKIM keys for a domain
+     */
+    async rotateDkimKeys(domain, currentSelector = 'default', keySize = 2048) {
+        console.log(`Rotating DKIM keys for ${domain}...`);
+        // Generate new selector based on date
+        const now = new Date();
+        const newSelector = `key${now.getFullYear()}${String(now.getMonth() + 1).padStart(2, '0')}`;
+        // Create new keys with custom key size
+        const { privateKey, publicKey } = await generateKeyPair('rsa', {
+            modulusLength: keySize,
+            publicKeyEncoding: { type: 'spki', format: 'pem' },
+            privateKeyEncoding: { type: 'pkcs1', format: 'pem' },
+        });
+        // Store new keys with new selector
+        const newKeyPaths = await this.getKeyPathsForSelector(domain, newSelector);
+        // Store in storage manager if available
+        if (this.storageManager) {
+            await Promise.all([
+                this.storageManager.set(`/email/dkim/${domain}/${newSelector}/private.key`, privateKey),
+                this.storageManager.set(`/email/dkim/${domain}/${newSelector}/public.key`, publicKey)
+            ]);
+        }
+        // Also store to filesystem
+        await this.storeDKIMKeys(privateKey, publicKey, newKeyPaths.privateKeyPath, newKeyPaths.publicKeyPath);
+        // Save metadata for new keys
+        const metadata = {
+            domain,
+            selector: newSelector,
+            createdAt: Date.now(),
+            previousSelector: currentSelector,
+            keySize
+        };
+        await this.saveKeyMetadata(metadata);
+        // Update metadata for old keys
+        const oldMetadata = await this.getKeyMetadata(domain, currentSelector);
+        if (oldMetadata) {
+            oldMetadata.rotatedAt = Date.now();
+            await this.saveKeyMetadata(oldMetadata);
+        }
+        console.log(`DKIM keys rotated for ${domain}. New selector: ${newSelector}`);
+        return newSelector;
+    }
+    /**
+     * Get key paths for a specific selector
+     */
+    async getKeyPathsForSelector(domain, selector) {
+        return {
+            privateKeyPath: plugins.path.join(this.keysDir, `${domain}-${selector}-private.pem`),
+            publicKeyPath: plugins.path.join(this.keysDir, `${domain}-${selector}-public.pem`),
+        };
+    }
+    /**
+     * Read DKIM keys for a specific selector
+     */
+    async readDKIMKeysForSelector(domain, selector) {
+        // Try to read from storage manager first
+        if (this.storageManager) {
+            try {
+                const [privateKey, publicKey] = await Promise.all([
+                    this.storageManager.get(`/email/dkim/${domain}/${selector}/private.key`),
+                    this.storageManager.get(`/email/dkim/${domain}/${selector}/public.key`)
+                ]);
+                if (privateKey && publicKey) {
+                    return { privateKey, publicKey };
+                }
+            }
+            catch (error) {
+                // Fall through to migration check
+            }
+            // Check if keys exist in filesystem and migrate them to storage manager
+            const keyPaths = await this.getKeyPathsForSelector(domain, selector);
+            try {
+                const [privateKeyBuffer, publicKeyBuffer] = await Promise.all([
+                    readFile(keyPaths.privateKeyPath),
+                    readFile(keyPaths.publicKeyPath),
+                ]);
+                const privateKey = privateKeyBuffer.toString();
+                const publicKey = publicKeyBuffer.toString();
+                // Migrate to storage manager
+                console.log(`Migrating DKIM keys for ${domain}/${selector} from filesystem to StorageManager`);
+                await Promise.all([
+                    this.storageManager.set(`/email/dkim/${domain}/${selector}/private.key`, privateKey),
+                    this.storageManager.set(`/email/dkim/${domain}/${selector}/public.key`, publicKey)
+                ]);
+                return { privateKey, publicKey };
+            }
+            catch (error) {
+                if (error.code === 'ENOENT') {
+                    throw new Error(`DKIM keys not found for domain ${domain} with selector ${selector}`);
+                }
+                throw error;
+            }
+        }
+        else {
+            // No storage manager, use filesystem directly
+            const keyPaths = await this.getKeyPathsForSelector(domain, selector);
+            const [privateKeyBuffer, publicKeyBuffer] = await Promise.all([
+                readFile(keyPaths.privateKeyPath),
+                readFile(keyPaths.publicKeyPath),
+            ]);
+            const privateKey = privateKeyBuffer.toString();
+            const publicKey = publicKeyBuffer.toString();
+            return { privateKey, publicKey };
+        }
+    }
+    /**
+     * Get DNS record for a specific selector
+     */
+    async getDNSRecordForSelector(domain, selector) {
+        const keys = await this.readDKIMKeysForSelector(domain, selector);
+        // Remove the PEM header and footer and newlines
+        const pemHeader = '-----BEGIN PUBLIC KEY-----';
+        const pemFooter = '-----END PUBLIC KEY-----';
+        const keyContents = keys.publicKey
+            .replace(pemHeader, '')
+            .replace(pemFooter, '')
+            .replace(/\n/g, '');
+        // Generate the DKIM DNS TXT record
+        const dnsRecordValue = `v=DKIM1; h=sha256; k=rsa; p=${keyContents}`;
+        return {
+            name: `${selector}._domainkey.${domain}`,
+            type: 'TXT',
+            dnsSecEnabled: null,
+            value: dnsRecordValue,
+        };
+    }
+    /**
+     * Clean up old DKIM keys after grace period
+     */
+    async cleanupOldKeys(domain, gracePeriodDays = 30) {
+        if (!this.storageManager) {
+            return;
+        }
+        // List all selectors for the domain
+        const metadataKeys = await this.storageManager.list(`/email/dkim/${domain}/`);
+        for (const key of metadataKeys) {
+            if (key.endsWith('/metadata')) {
+                const metadataStr = await this.storageManager.get(key);
+                if (metadataStr) {
+                    const metadata = JSON.parse(metadataStr);
+                    // Check if key is rotated and past grace period
+                    if (metadata.rotatedAt) {
+                        const gracePeriodMs = gracePeriodDays * 24 * 60 * 60 * 1000;
+                        const now = Date.now();
+                        if (now - metadata.rotatedAt > gracePeriodMs) {
+                            console.log(`Cleaning up old DKIM keys for ${domain} selector ${metadata.selector}`);
+                            // Delete key files
+                            const keyPaths = await this.getKeyPathsForSelector(domain, metadata.selector);
+                            try {
+                                await plugins.fs.promises.unlink(keyPaths.privateKeyPath);
+                                await plugins.fs.promises.unlink(keyPaths.publicKeyPath);
+                            }
+                            catch (error) {
+                                console.warn(`Failed to delete old key files: ${error.message}`);
+                            }
+                            // Delete metadata
+                            await this.storageManager.delete(key);
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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