@techelusive/nest-auth 0.0.0-stage → 0.2.1

package/dist/features/settings/settings.validation.js

@@ -0,0 +1,614 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findProblemsInChanges = findProblemsInChanges;
+exports.findSettingsConflicts = findSettingsConflicts;
+exports.applySettingsChanges = applySettingsChanges;
+exports.combineSettingsChanges = combineSettingsChanges;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const constants_1 = require("../../constants.js");
+/**
+ * Rules for every setting. Used for the settings in your code (checked at startup) and for
+ * admin changes (checked before saving). Unknown settings are rejected so typos fail loudly.
+ */
+class RegistrationRules {
+    enabled;
+    defaultRoles;
+    requireFirstAndLastName;
+    requirePhoneNumber;
+    requireTermsAcceptance;
+    requirePrivacyPolicyAcceptance;
+    allowedEmailDomains;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RegistrationRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.SETTINGS_LIMITS.maximumRolesInList),
+    (0, class_validator_1.Matches)(constants_1.ROLE_NAME_PATTERN, { each: true }),
+    __metadata("design:type", Array)
+], RegistrationRules.prototype, "defaultRoles", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RegistrationRules.prototype, "requireFirstAndLastName", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RegistrationRules.prototype, "requirePhoneNumber", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RegistrationRules.prototype, "requireTermsAcceptance", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RegistrationRules.prototype, "requirePrivacyPolicyAcceptance", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.SETTINGS_LIMITS.maximumAllowedEmailDomains),
+    (0, class_validator_1.Matches)(constants_1.EMAIL_DOMAIN_PATTERN, { each: true, message: constants_1.VALIDATION_PROBLEM.emailDomainFormat }),
+    __metadata("design:type", Array)
+], RegistrationRules.prototype, "allowedEmailDomains", void 0);
+class ActivationRules {
+    requireVerifiedEmail;
+    requireVerifiedPhone;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], ActivationRules.prototype, "requireVerifiedEmail", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], ActivationRules.prototype, "requireVerifiedPhone", void 0);
+class PasswordRules {
+    enabled;
+    minimumLength;
+    requireUppercaseLetter;
+    requireLowercaseLetter;
+    requireNumber;
+    requireSymbol;
+    rejectBreachedPasswords;
+    notifyOnChange;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.PASSWORD_MIN_LENGTH_FLOOR),
+    (0, class_validator_1.Max)(constants_1.PASSWORD_MAX_LENGTH),
+    __metadata("design:type", Number)
+], PasswordRules.prototype, "minimumLength", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "requireUppercaseLetter", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "requireLowercaseLetter", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "requireNumber", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "requireSymbol", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "rejectBreachedPasswords", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], PasswordRules.prototype, "notifyOnChange", void 0);
+class EmailVerificationRules {
+    linkExpiresInHours;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.emailVerificationLinkHours.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.emailVerificationLinkHours.maximum),
+    __metadata("design:type", Number)
+], EmailVerificationRules.prototype, "linkExpiresInHours", void 0);
+class PasswordResetRules {
+    linkExpiresInMinutes;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.passwordResetLinkMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.passwordResetLinkMinutes.maximum),
+    __metadata("design:type", Number)
+], PasswordResetRules.prototype, "linkExpiresInMinutes", void 0);
+class EmailChangeRules {
+    linkExpiresInMinutes;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.emailChangeLinkMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.emailChangeLinkMinutes.maximum),
+    __metadata("design:type", Number)
+], EmailChangeRules.prototype, "linkExpiresInMinutes", void 0);
+class OneTimeCodeRules {
+    enabled;
+    codeLength;
+    expiresInMinutes;
+    resendAfterSeconds;
+    allowSignUp;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], OneTimeCodeRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.codeLength.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.codeLength.maximum),
+    __metadata("design:type", Number)
+], OneTimeCodeRules.prototype, "codeLength", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.codeExpiresInMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.codeExpiresInMinutes.maximum),
+    __metadata("design:type", Number)
+], OneTimeCodeRules.prototype, "expiresInMinutes", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.resendAfterSeconds.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.resendAfterSeconds.maximum),
+    __metadata("design:type", Number)
+], OneTimeCodeRules.prototype, "resendAfterSeconds", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], OneTimeCodeRules.prototype, "allowSignUp", void 0);
+class PhoneOtpRules extends OneTimeCodeRules {
+    allowedCountryCodes;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.SETTINGS_LIMITS.maximumCountryCodes),
+    (0, class_validator_1.Matches)(constants_1.COUNTRY_CALLING_CODE_PATTERN, { each: true, message: constants_1.VALIDATION_PROBLEM.countryCodeFormat }),
+    __metadata("design:type", Array)
+], PhoneOtpRules.prototype, "allowedCountryCodes", void 0);
+class MagicLinkRules {
+    enabled;
+    expiresInMinutes;
+    allowSignUp;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MagicLinkRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.magicLinkMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.magicLinkMinutes.maximum),
+    __metadata("design:type", Number)
+], MagicLinkRules.prototype, "expiresInMinutes", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MagicLinkRules.prototype, "allowSignUp", void 0);
+class ClientIdProviderRules {
+    enabled;
+    clientIds;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], ClientIdProviderRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.SETTINGS_LIMITS.maximumClientIds),
+    (0, class_validator_1.Matches)(constants_1.OAUTH_CLIENT_ID_PATTERN, { each: true }),
+    __metadata("design:type", Array)
+], ClientIdProviderRules.prototype, "clientIds", void 0);
+class FacebookRules {
+    enabled;
+    appId;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], FacebookRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.SETTINGS_LIMITS.facebookAppIdMaxLength),
+    __metadata("design:type", String)
+], FacebookRules.prototype, "appId", void 0);
+class SwitchRules {
+    enabled;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], SwitchRules.prototype, "enabled", void 0);
+class TwoFactorRules {
+    enabled;
+    challengeExpiresInMinutes;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], TwoFactorRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.twoFactorChallengeMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.twoFactorChallengeMinutes.maximum),
+    __metadata("design:type", Number)
+], TwoFactorRules.prototype, "challengeExpiresInMinutes", void 0);
+class OrganizationRules {
+    enabled;
+    allowUsersToCreate;
+    invitationExpiresInDays;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], OrganizationRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], OrganizationRules.prototype, "allowUsersToCreate", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.invitationDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.invitationDays.maximum),
+    __metadata("design:type", Number)
+], OrganizationRules.prototype, "invitationExpiresInDays", void 0);
+class TokenRules {
+    accessTokenMinutes;
+    refreshTokenDays;
+    sessionDays;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.accessTokenMinutes.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.accessTokenMinutes.maximum),
+    __metadata("design:type", Number)
+], TokenRules.prototype, "accessTokenMinutes", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.refreshTokenDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.refreshTokenDays.maximum),
+    __metadata("design:type", Number)
+], TokenRules.prototype, "refreshTokenDays", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.sessionDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.sessionDays.maximum),
+    __metadata("design:type", Number)
+], TokenRules.prototype, "sessionDays", void 0);
+class AdminRules {
+    adminRoles;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.SETTINGS_LIMITS.maximumRolesInList),
+    (0, class_validator_1.Matches)(constants_1.ROLE_NAME_PATTERN, { each: true }),
+    __metadata("design:type", Array)
+], AdminRules.prototype, "adminRoles", void 0);
+class SecurityRules {
+    notifyOnNewSignIn;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], SecurityRules.prototype, "notifyOnNewSignIn", void 0);
+class RetentionRules {
+    enabled;
+    expiredRecordDays;
+    webhookDeliveryDays;
+    auditLogDays;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RetentionRules.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.expiredRecordDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.expiredRecordDays.maximum),
+    __metadata("design:type", Number)
+], RetentionRules.prototype, "expiredRecordDays", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.webhookDeliveryDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.webhookDeliveryDays.maximum),
+    __metadata("design:type", Number)
+], RetentionRules.prototype, "webhookDeliveryDays", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(constants_1.SETTINGS_LIMITS.auditLogDays.minimum),
+    (0, class_validator_1.Max)(constants_1.SETTINGS_LIMITS.auditLogDays.maximum),
+    __metadata("design:type", Number)
+], RetentionRules.prototype, "auditLogDays", void 0);
+class SettingsChangesRules {
+    registration;
+    activation;
+    password;
+    emailVerification;
+    passwordReset;
+    emailChange;
+    emailOtp;
+    magicLink;
+    phoneOtp;
+    google;
+    apple;
+    facebook;
+    passkeys;
+    twoFactor;
+    organizations;
+    tokens;
+    admin;
+    security;
+    retention;
+}
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RegistrationRules),
+    __metadata("design:type", RegistrationRules)
+], SettingsChangesRules.prototype, "registration", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => ActivationRules),
+    __metadata("design:type", ActivationRules)
+], SettingsChangesRules.prototype, "activation", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => PasswordRules),
+    __metadata("design:type", PasswordRules)
+], SettingsChangesRules.prototype, "password", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => EmailVerificationRules),
+    __metadata("design:type", EmailVerificationRules)
+], SettingsChangesRules.prototype, "emailVerification", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => PasswordResetRules),
+    __metadata("design:type", PasswordResetRules)
+], SettingsChangesRules.prototype, "passwordReset", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => EmailChangeRules),
+    __metadata("design:type", EmailChangeRules)
+], SettingsChangesRules.prototype, "emailChange", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => OneTimeCodeRules),
+    __metadata("design:type", OneTimeCodeRules)
+], SettingsChangesRules.prototype, "emailOtp", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => MagicLinkRules),
+    __metadata("design:type", MagicLinkRules)
+], SettingsChangesRules.prototype, "magicLink", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => PhoneOtpRules),
+    __metadata("design:type", PhoneOtpRules)
+], SettingsChangesRules.prototype, "phoneOtp", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => ClientIdProviderRules),
+    __metadata("design:type", ClientIdProviderRules)
+], SettingsChangesRules.prototype, "google", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => ClientIdProviderRules),
+    __metadata("design:type", ClientIdProviderRules)
+], SettingsChangesRules.prototype, "apple", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => FacebookRules),
+    __metadata("design:type", FacebookRules)
+], SettingsChangesRules.prototype, "facebook", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => SwitchRules),
+    __metadata("design:type", SwitchRules)
+], SettingsChangesRules.prototype, "passkeys", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => TwoFactorRules),
+    __metadata("design:type", TwoFactorRules)
+], SettingsChangesRules.prototype, "twoFactor", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => OrganizationRules),
+    __metadata("design:type", OrganizationRules)
+], SettingsChangesRules.prototype, "organizations", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => TokenRules),
+    __metadata("design:type", TokenRules)
+], SettingsChangesRules.prototype, "tokens", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => AdminRules),
+    __metadata("design:type", AdminRules)
+], SettingsChangesRules.prototype, "admin", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => SecurityRules),
+    __metadata("design:type", SecurityRules)
+], SettingsChangesRules.prototype, "security", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RetentionRules),
+    __metadata("design:type", RetentionRules)
+], SettingsChangesRules.prototype, "retention", void 0);
+/**
+ * Checks a set of changes on its own (types, ranges, unknown fields).
+ *
+ * @param changes - Settings changes from code or from an admin.
+ * @returns Readable problems like "password.minimumLength must not be less than 8"; empty means valid.
+ */
+function findProblemsInChanges(changes) {
+    if (typeof changes !== 'object' || changes === null || Array.isArray(changes))
+        return [constants_1.VALIDATION_PROBLEM.settingsNotAnObject];
+    const instance = (0, class_transformer_1.plainToInstance)(SettingsChangesRules, changes);
+    return describeValidationErrors((0, class_validator_1.validateSync)(instance, { whitelist: true, forbidNonWhitelisted: true }));
+}
+/**
+ * Checks rules that involve several settings together, on the final merged settings
+ * (e.g. at least one sign-in method must stay on).
+ *
+ * @param settings - The full merged settings.
+ * @returns Readable problems; empty means valid.
+ */
+function findSettingsConflicts(settings) {
+    const problems = [];
+    if (settings.tokens.refreshTokenDays > settings.tokens.sessionDays) {
+        problems.push(constants_1.VALIDATION_PROBLEM.refreshLongerThanSession);
+    }
+    const anySignInMethodEnabled = settings.password.enabled ||
+        settings.emailOtp.enabled ||
+        settings.magicLink.enabled ||
+        settings.phoneOtp.enabled ||
+        settings.google.enabled ||
+        settings.apple.enabled ||
+        settings.facebook.enabled ||
+        settings.passkeys.enabled;
+    if (!anySignInMethodEnabled)
+        problems.push(constants_1.VALIDATION_PROBLEM.noSignInMethodEnabled);
+    if (settings.google.enabled && settings.google.clientIds.length === 0)
+        problems.push(constants_1.VALIDATION_PROBLEM.googleClientIdsRequired);
+    if (settings.apple.enabled && settings.apple.clientIds.length === 0)
+        problems.push(constants_1.VALIDATION_PROBLEM.appleClientIdsRequired);
+    if (settings.facebook.enabled && !settings.facebook.appId)
+        problems.push(constants_1.VALIDATION_PROBLEM.facebookAppIdRequired);
+    if (settings.admin.adminRoles.length === 0)
+        problems.push(constants_1.VALIDATION_PROBLEM.adminRolesRequired);
+    return problems;
+}
+/**
+ * Turns class-validator's nested errors into lines like "password.minimumLength must not be less than 8".
+ *
+ * @param errors - The errors from `validateSync`.
+ * @param parentPath - The dotted path of the parent section (used while recursing).
+ * @returns One readable line per problem.
+ */
+function describeValidationErrors(errors, parentPath = '') {
+    return errors.flatMap((error) => {
+        const path = parentPath ? [parentPath, error.property].join(constants_1.SETTINGS_PATH_SEPARATOR) : error.property;
+        const ownProblems = Object.values(error.constraints ?? {}).map((message) => message.startsWith(error.property) ? path + message.slice(error.property.length) : constants_1.VALIDATION_PROBLEM.atPath(path, message));
+        return [...ownProblems, ...describeValidationErrors(error.children ?? [], path)];
+    });
+}
+/**
+ * Applies changes on top of settings, one section at a time. Unknown sections are ignored.
+ * The input objects are not modified.
+ *
+ * @param base - The settings to start from.
+ * @param changes - The changes to apply.
+ * @returns A new settings object.
+ */
+function applySettingsChanges(base, changes = {}) {
+    const result = structuredClone(base);
+    for (const section of Object.keys(result)) {
+        const sectionChanges = changes[section];
+        if (sectionChanges)
+            Object.assign(result[section], sectionChanges);
+    }
+    return result;
+}
+/**
+ * Combines two sets of changes; later values win. Used to keep admin changes on top of each other.
+ *
+ * @param earlier - The changes saved before.
+ * @param later - The new changes.
+ * @returns A new, combined set of changes.
+ */
+function combineSettingsChanges(earlier, later) {
+    const combined = structuredClone(earlier);
+    for (const section of Object.keys(later)) {
+        combined[section] = { ...combined[section], ...later[section] };
+    }
+    return combined;
+}
+//# sourceMappingURL=settings.validation.js.map

package/dist/features/settings/settings.validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.validation.js","sourceRoot":"","sources":["../../../src/features/settings/settings.validation.ts"],"names":[],"mappings":";;;;;;;;;;;AAuKA,sDAIC;AASD,sDAwBC;AA2BD,oDAOC;AASD,wDAMC;AA7PD,yDAA0D;AAC1D,qDAcyB;AACzB,2CAUqB;AAGrB;;;GAGG;AAGH,MAAM,iBAAiB;IACM,OAAO,CAAW;IAC0E,YAAY,CAAY;IACpH,uBAAuB,CAAW;IAClC,kBAAkB,CAAW;IAC7B,sBAAsB,CAAW;IACjC,8BAA8B,CAAW;IAEpE,mBAAmB,CAAY;CAChC;AAR4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;kDAAmB;AAC0E;IAAtH,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,2BAAe,CAAC,kBAAkB,CAAC;IAAE,IAAA,yBAAO,EAAC,6BAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;uDAAyB;AACpH;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;kEAAmC;AAClC;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAA8B;AAC7B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;iEAAkC;AACjC;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;yEAA0C;AAEpE;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,2BAAe,CAAC,0BAA0B,CAAC;IAAE,IAAA,yBAAO,EAAC,gCAAoB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,8BAAkB,CAAC,iBAAiB,EAAE,CAAC;;8DACjJ;AAGjC,MAAM,eAAe;IACQ,oBAAoB,CAAW;IAC/B,oBAAoB,CAAW;CAC3D;AAF4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAAgC;AAC/B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAAgC;AAG5D,MAAM,aAAa;IACU,OAAO,CAAW;IACoC,aAAa,CAAU;IAC7E,sBAAsB,CAAW;IACjC,sBAAsB,CAAW;IACjC,aAAa,CAAW;IACxB,aAAa,CAAW;IACxB,uBAAuB,CAAW;IAClC,cAAc,CAAW;CACrD;AAR4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;8CAAmB;AACoC;IAAhF,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,qCAAyB,CAAC;IAAE,IAAA,qBAAG,EAAC,+BAAmB,CAAC;;oDAAwB;AAC7E;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAAkC;AACjC;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAAkC;AACjC;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;oDAAyB;AACxB;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;oDAAyB;AACxB;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;8DAAmC;AAClC;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;qDAA0B;AAGtD,MAAM,sBAAsB;IAC+G,kBAAkB,CAAU;CACtK;AAD0I;IAAxI,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,0BAA0B,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,0BAA0B,CAAC,OAAO,CAAC;;kEAA6B;AAGvK,MAAM,kBAAkB;IAC+G,oBAAoB,CAAU;CACpK;AADsI;IAApI,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,wBAAwB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,wBAAwB,CAAC,OAAO,CAAC;;gEAA+B;AAGrK,MAAM,gBAAgB;IAC6G,oBAAoB,CAAU;CAChK;AADkI;IAAhI,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,sBAAsB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,sBAAsB,CAAC,OAAO,CAAC;;8DAA+B;AAGjK,MAAM,gBAAgB;IACO,OAAO,CAAW;IAC4D,UAAU,CAAU;IACA,gBAAgB,CAAU;IAC9B,kBAAkB,CAAU;IAC1H,WAAW,CAAW;CAClD;AAL4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;iDAAmB;AAC4D;IAAxG,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,UAAU,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,UAAU,CAAC,OAAO,CAAC;;oDAAqB;AACA;IAA5H,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC;;0DAA2B;AAC9B;IAAxH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC;;4DAA6B;AAC1H;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;qDAAuB;AAGnD,MAAM,aAAc,SAAQ,gBAAgB;IAE1C,mBAAmB,CAAY;CAChC;AADC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,2BAAe,CAAC,mBAAmB,CAAC;IAAE,IAAA,yBAAO,EAAC,wCAA4B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,8BAAkB,CAAC,iBAAiB,EAAE,CAAC;;0DAClJ;AAGjC,MAAM,cAAc;IACS,OAAO,CAAW;IACwE,gBAAgB,CAAU;IACpH,WAAW,CAAW;CAClD;AAH4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;+CAAmB;AACwE;IAApH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;;wDAA2B;AACpH;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;mDAAuB;AAGnD,MAAM,qBAAqB;IACE,OAAO,CAAW;IAC8E,SAAS,CAAY;CACjJ;AAF4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;sDAAmB;AAC8E;IAA1H,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,2BAAe,CAAC,gBAAgB,CAAC;IAAE,IAAA,yBAAO,EAAC,mCAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDAAsB;AAGlJ,MAAM,aAAa;IACU,OAAO,CAAW;IACgC,KAAK,CAAU;CAC7F;AAF4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;8CAAmB;AACgC;IAA5E,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,2BAAe,CAAC,sBAAsB,CAAC;;4CAAgB;AAG9F,MAAM,WAAW;IACY,OAAO,CAAW;CAC9C;AAD4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;4CAAmB;AAG/C,MAAM,cAAc;IACS,OAAO,CAAW;IAC0F,yBAAyB,CAAU;CAC3K;AAF4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;+CAAmB;AAC0F;IAAtI,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,yBAAyB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,yBAAyB,CAAC,OAAO,CAAC;;iEAAoC;AAG5K,MAAM,iBAAiB;IACM,OAAO,CAAW;IAClB,kBAAkB,CAAW;IACyD,uBAAuB,CAAU;CACnJ;AAH4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;kDAAmB;AAClB;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;6DAA8B;AACyD;IAAhH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,cAAc,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,cAAc,CAAC,OAAO,CAAC;;kEAAkC;AAGpJ,MAAM,UAAU;IAC2G,kBAAkB,CAAU;IAChC,gBAAgB,CAAU;IACpC,WAAW,CAAU;CACjI;AAH0H;IAAxH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC;;sDAA6B;AAChC;IAApH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;;oDAA2B;AACpC;IAA1G,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,WAAW,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,WAAW,CAAC,OAAO,CAAC;;+CAAsB;AAGlI,MAAM,UAAU;IACyG,UAAU,CAAY;CAC9I;AADwH;IAAtH,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,2BAAe,CAAC,kBAAkB,CAAC;IAAE,IAAA,yBAAO,EAAC,6BAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;8CAAuB;AAG/I,MAAM,aAAa;IACU,iBAAiB,CAAW;CACxD;AAD4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;wDAA6B;AAGzD,MAAM,cAAc;IACS,OAAO,CAAW;IAC0E,iBAAiB,CAAU;IACvB,mBAAmB,CAAU;IAC3C,YAAY,CAAU;CACpI;AAJ4B;IAA1B,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;+CAAmB;AAC0E;IAAtH,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC;;yDAA4B;AACvB;IAA1H,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC;;2DAA8B;AAC3C;IAA5G,IAAA,4BAAU,GAAE;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,YAAY,CAAC,OAAO,CAAC;IAAE,IAAA,qBAAG,EAAC,2BAAe,CAAC,YAAY,CAAC,OAAO,CAAC;;oDAAuB;AAGrI,MAAM,oBAAoB;IACuC,YAAY,CAAqB;IACnC,UAAU,CAAmB;IAC/B,QAAQ,CAAiB;IAChB,iBAAiB,CAA0B;IAC/C,aAAa,CAAsB;IACrC,WAAW,CAAoB;IAC/B,QAAQ,CAAoB;IAC9B,SAAS,CAAkB;IAC5B,QAAQ,CAAiB;IACjB,MAAM,CAAyB;IAC/B,KAAK,CAAyB;IACtC,QAAQ,CAAiB;IAC3B,QAAQ,CAAe;IACpB,SAAS,CAAkB;IACxB,aAAa,CAAqB;IACzC,MAAM,CAAc;IACpB,KAAK,CAAc;IAChB,QAAQ,CAAiB;IACxB,SAAS,CAAkB;CACxF;AAnBgE;IAA9D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;8BAAgB,iBAAiB;0DAAC;AACnC;IAA5D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC;8BAAc,eAAe;wDAAC;AAC/B;IAA1D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,aAAa,CAAC;8BAAY,aAAa;sDAAC;AAChB;IAAnE,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC;8BAAqB,sBAAsB;+DAAC;AAC/C;IAA/D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC;8BAAiB,kBAAkB;2DAAC;AACrC;IAA7D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC;8BAAe,gBAAgB;yDAAC;AAC/B;IAA7D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC;8BAAY,gBAAgB;sDAAC;AAC9B;IAA3D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;8BAAa,cAAc;uDAAC;AAC5B;IAA1D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,aAAa,CAAC;8BAAY,aAAa;sDAAC;AACjB;IAAlE,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC;8BAAU,qBAAqB;oDAAC;AAC/B;IAAlE,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC;8BAAS,qBAAqB;mDAAC;AACtC;IAA1D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,aAAa,CAAC;8BAAY,aAAa;sDAAC;AAC3B;IAAxD,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC;8BAAY,WAAW;sDAAC;AACpB;IAA3D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;8BAAa,cAAc;uDAAC;AACxB;IAA9D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;8BAAiB,iBAAiB;2DAAC;AACzC;IAAvD,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,UAAU,CAAC;8BAAU,UAAU;oDAAC;AACpB;IAAvD,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,UAAU,CAAC;8BAAS,UAAU;mDAAC;AAChB;IAA1D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,aAAa,CAAC;8BAAY,aAAa;sDAAC;AACxB;IAA3D,IAAA,4BAAU,GAAE;IAAE,IAAA,gCAAc,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;8BAAa,cAAc;uDAAC;AAGzF;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,8BAAkB,CAAC,mBAAmB,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,IAAA,mCAAe,EAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,wBAAwB,CAAC,IAAA,8BAAY,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,QAAsB;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,QAAQ,CAAC,MAAM,CAAC,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,sBAAsB,GAC1B,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzB,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzB,QAAQ,CAAC,SAAS,CAAC,OAAO;QAC1B,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzB,QAAQ,CAAC,MAAM,CAAC,OAAO;QACvB,QAAQ,CAAC,KAAK,CAAC,OAAO;QACtB,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,sBAAsB;QAAE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,qBAAqB,CAAC,CAAC;IAErF,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,uBAAuB,CAAC,CAAC;IACjI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,sBAAsB,CAAC,CAAC;IAC9H,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,qBAAqB,CAAC,CAAC;IACnH,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,8BAAkB,CAAC,kBAAkB,CAAC,CAAC;IAEjG,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,MAAyB,EAAE,UAAU,GAAG,EAAE;IAC1E,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mCAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtG,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACzE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,8BAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAC5H,CAAC;QACF,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,IAAkB,EAAE,UAA2B,EAAE;IACpF,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAA8B,EAAE,CAAC;QACvE,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,cAAc;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,OAAwB,EAAE,KAAsB;IACrF,MAAM,QAAQ,GAAoB,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAA8B,EAAE,CAAC;QACtE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAI,QAAQ,CAAC,OAAO,CAAY,EAAE,GAAI,KAAK,CAAC,OAAO,CAAY,EAAS,CAAC;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}