@tekki-forge/runtime-api 0.2.0 → 0.3.2

package/dist/admin.d.ts

@@ -0,0 +1,146 @@
+import type { ForgeRequestContext } from "./extension.js";
+import type { ForgeService } from "./service.js";
+type Row = Record<string, any>;
+/**
+ * Who sees what in the administration area:
+ *  - global admins (the `admin` role on their account) see the whole system;
+ *  - with organizations, organization admins (member role admin/owner) see their own organization only;
+ *  - everyone else gets 403. API keys never reach this API.
+ */
+export interface AdminScope {
+    global: boolean;
+    /** Organization the data is limited to (organization admins), or null for everything. */
+    organizationId: string | null;
+}
+export declare function adminScope(service: ForgeService, ctx: ForgeRequestContext, opts?: {
+    globalOnly?: boolean;
+}): AdminScope;
+export interface SeriesPoint {
+    /** Bucket start: "2026-10-02" (day) or "2026-10" (month). */
+    key: string;
+    value: number;
+}
+/** Every bucket key between `since` and today, so charts show the empty days too. */
+export declare function bucketKeys(since: Date, by: "day" | "month", now?: Date): string[];
+/** System overview, analytics and organizations for Administration (see adminScope for who sees what). */
+export declare class AdminService {
+    private readonly service;
+    constructor(service: ForgeService);
+    private get prisma();
+    private get app();
+    /** User entities (not the tables plugins add for their own bookkeeping). */
+    private entities;
+    private userWhere;
+    /** Accounts created (global) or members who joined the organization, since `since`. */
+    private joinedSince;
+    overview(ctx: ForgeRequestContext): Promise<{
+        scope: "global" | "organization";
+        organizationId: string | null;
+        users: {
+            total: any;
+            newThisWeek: number;
+            newPreviousWeek: number;
+            weekly: SeriesPoint[];
+        };
+        organizations: {
+            total: any;
+            newThisWeek: any;
+        } | null;
+        sessions: {
+            active: any;
+        };
+        records: {
+            entity: string;
+            label: string;
+            path: string;
+            total: any;
+            last30: any;
+        }[];
+        recentSignups: any;
+        recentAudit: any;
+        jobs: {
+            failed: number;
+            active: number;
+            waiting: number;
+            delayed: number;
+        } | null;
+        webhooks: {
+            failed: number;
+            succeeded: number;
+            pending: number;
+        } | null;
+        billing: unknown;
+        support: {
+            open: number;
+            pending: number;
+            unassigned: number;
+        } | null;
+    }>;
+    /** New accounts (or members) per week, oldest first, for the trend sparkline. */
+    private weeklyJoins;
+    private jobs;
+    private webhooks;
+    private billing;
+    private support;
+    /**
+     * Time series for Administration → Analytics: sign-ups (or members joining), active users (people with
+     * a session used that day) and records created per entity. `?days=7|30|90|365` (365 is bucketed by month).
+     */
+    analytics(ctx: ForgeRequestContext, query?: Row): Promise<{
+        scope: "global" | "organization";
+        days: number;
+        by: "month" | "day";
+        since: string;
+        signups: {
+            total: number;
+            series: SeriesPoint[];
+        };
+        activeUsers: {
+            total: number;
+            series: SeriesPoint[];
+        };
+        records: {
+            entity: string;
+            label: string;
+            path: string;
+            total: number;
+            series: SeriesPoint[];
+        }[];
+        topEntities: {
+            entity: string;
+            label: string;
+            path: string;
+            total: number;
+        }[];
+    }>;
+    /** Every organization with its member count and plan (payments plugin). Global admins only. */
+    organizations(ctx: ForgeRequestContext, query?: Row): Promise<{
+        data: any;
+        meta: {
+            page: number;
+            pageSize: number;
+            total: any;
+            pages: number;
+        };
+        billing: boolean;
+    }>;
+    /** One organization: members and their roles, pending invitations, plan and record counts. Global admins only. */
+    organization(id: string, ctx: ForgeRequestContext): Promise<{
+        id: any;
+        name: any;
+        slug: any;
+        logo: any;
+        createdAt: any;
+        plan: {} | null;
+        members: any;
+        pendingInvitations: any;
+        records: {
+            entity: string;
+            label: string;
+            path: string;
+            total: any;
+        }[];
+    }>;
+    private plans;
+}
+export {};

package/dist/admin.js

@@ -0,0 +1,256 @@
+import { ForbiddenException, NotFoundException, UnauthorizedException } from "@nestjs/common";
+import { isGlobalAdminRole } from "./settings.js";
+export function adminScope(service, ctx, opts = {}) {
+    if (!service.app.admin.enabled)
+        throw new NotFoundException("The administration area is disabled (admin.enabled: false)");
+    if (!ctx.principal)
+        throw new UnauthorizedException("Sign in to continue");
+    if (ctx.apiKey)
+        throw new ForbiddenException("API keys cannot use the administration API");
+    if (isGlobalAdminRole(ctx.user?.role))
+        return { global: true, organizationId: null };
+    if (!opts.globalOnly && service.app.tenancy.enabled && ctx.principal.organizationId && ctx.principal.roles.includes("admin")) {
+        return { global: false, organizationId: ctx.principal.organizationId };
+    }
+    throw new ForbiddenException(opts.globalOnly ? "Only global administrators can see this" : "Only administrators can use the administration area");
+}
+const DAY = 86_400_000;
+const q = (name) => `"${name.replace(/"/g, '""')}"`;
+function startOfUtcDay(d) {
+    return new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+}
+/** Every bucket key between `since` and today, so charts show the empty days too. */
+export function bucketKeys(since, by, now = new Date()) {
+    const keys = [];
+    if (by === "month") {
+        const d = new Date(Date.UTC(since.getUTCFullYear(), since.getUTCMonth(), 1));
+        while (d <= now) {
+            keys.push(d.toISOString().slice(0, 7));
+            d.setUTCMonth(d.getUTCMonth() + 1);
+        }
+        return keys;
+    }
+    for (let d = startOfUtcDay(since); d <= now; d = new Date(d.getTime() + DAY))
+        keys.push(d.toISOString().slice(0, 10));
+    return keys;
+}
+function fill(keys, rows) {
+    const by = new Map(rows.map((r) => [r.k, Number(r.n)]));
+    return keys.map((key) => ({ key, value: by.get(key) ?? 0 }));
+}
+/** System overview, analytics and organizations for Administration (see adminScope for who sees what). */
+export class AdminService {
+    service;
+    constructor(service) {
+        this.service = service;
+    }
+    get prisma() {
+        return this.service.prisma;
+    }
+    get app() {
+        return this.service.app;
+    }
+    /** User entities (not the tables plugins add for their own bookkeeping). */
+    entities(scope) {
+        const internal = new Set(this.app.plugins.flatMap((p) => p.entities));
+        return this.app.entities.filter((e) => !internal.has(e.name) && e.features.timestamps && (scope.global || e.features.tenant));
+    }
+    userWhere(scope) {
+        return scope.organizationId ? { members: { some: { organizationId: scope.organizationId } } } : {};
+    }
+    /** Accounts created (global) or members who joined the organization, since `since`. */
+    async joinedSince(scope, since, until) {
+        const range = { gte: since, ...(until ? { lt: until } : {}) };
+        if (scope.organizationId)
+            return this.prisma.member.count({ where: { organizationId: scope.organizationId, createdAt: range } });
+        return this.prisma.user.count({ where: { createdAt: range } });
+    }
+    async overview(ctx) {
+        const scope = adminScope(this.service, ctx);
+        const now = new Date();
+        const weekAgo = new Date(now.getTime() - 7 * DAY);
+        const twoWeeksAgo = new Date(now.getTime() - 14 * DAY);
+        const monthAgo = new Date(now.getTime() - 30 * DAY);
+        const tenancy = this.app.tenancy.enabled;
+        const [usersTotal, newThisWeek, newPreviousWeek, activeSessions] = await Promise.all([
+            scope.organizationId ? this.prisma.member.count({ where: { organizationId: scope.organizationId } }) : this.prisma.user.count(),
+            this.joinedSince(scope, weekAgo),
+            this.joinedSince(scope, twoWeeksAgo, weekAgo),
+            this.prisma.session.count({ where: { expiresAt: { gt: now }, ...(scope.organizationId ? { user: this.userWhere(scope) } : {}) } }),
+        ]);
+        const weekly = await this.weeklyJoins(scope, 8);
+        const organizations = tenancy && scope.global
+            ? { total: await this.prisma.organization.count(), newThisWeek: await this.prisma.organization.count({ where: { createdAt: { gte: weekAgo } } }) }
+            : null;
+        const records = [];
+        for (const e of this.entities(scope)) {
+            const where = scope.organizationId ? { organizationId: scope.organizationId } : {};
+            const delegate = this.service.delegate(e);
+            const [total, last30] = await Promise.all([delegate.count({ where }), delegate.count({ where: { ...where, createdAt: { gte: monthAgo } } })]);
+            records.push({ entity: e.name, label: e.pluralLabel, path: e.path, total, last30 });
+        }
+        const recentSignups = scope.organizationId
+            ? (await this.prisma.member.findMany({
+                where: { organizationId: scope.organizationId },
+                orderBy: { createdAt: "desc" },
+                take: 6,
+                include: { user: { select: { id: true, name: true, email: true } } },
+            })).map((m) => ({ id: m.user.id, name: m.user.name, email: m.user.email, createdAt: m.createdAt, role: m.role }))
+            : (await this.prisma.user.findMany({ orderBy: { createdAt: "desc" }, take: 6, select: { id: true, name: true, email: true, createdAt: true, role: true } })).map((u) => ({ ...u, role: u.role ?? "user" }));
+        const auditWhere = tenancy && scope.organizationId ? { organizationId: scope.organizationId } : {};
+        const recentAudit = (await this.prisma.auditLog.findMany({ where: auditWhere, orderBy: { createdAt: "desc" }, take: 8, include: { user: { select: { id: true, name: true } } } })).map((l) => ({ id: l.id, entity: this.service.entityByStorageName(l.entity)?.name ?? l.entity, recordId: l.recordId, action: l.action, user: l.user ? { id: l.user.id, name: l.user.name } : null, createdAt: l.createdAt }));
+        return {
+            scope: scope.global ? "global" : "organization",
+            organizationId: scope.organizationId,
+            users: { total: usersTotal, newThisWeek, newPreviousWeek, weekly },
+            organizations,
+            sessions: { active: activeSessions },
+            records,
+            recentSignups,
+            recentAudit,
+            jobs: scope.global ? await this.jobs() : null,
+            webhooks: await this.webhooks(scope, weekAgo),
+            billing: scope.global ? await this.billing() : null,
+            support: scope.global && this.app.admin.support ? await this.support() : null,
+        };
+    }
+    /** New accounts (or members) per week, oldest first, for the trend sparkline. */
+    async weeklyJoins(scope, weeks) {
+        const now = Date.now();
+        const out = [];
+        for (let i = weeks - 1; i >= 0; i--) {
+            const start = new Date(now - (i + 1) * 7 * DAY);
+            const end = new Date(now - i * 7 * DAY);
+            out.push({ key: start.toISOString().slice(0, 10), value: await this.joinedSince(scope, start, end) });
+        }
+        return out;
+    }
+    async jobs() {
+        const queue = this.service.shared.get("jobsQueue");
+        if (!queue)
+            return this.app.plugins.some((p) => p.name === "jobs") ? { failed: 0, active: 0, waiting: 0, delayed: 0 } : null;
+        try {
+            const c = await queue.getJobCounts("failed", "active", "waiting", "delayed");
+            return { failed: c.failed ?? 0, active: c.active ?? 0, waiting: c.waiting ?? 0, delayed: c.delayed ?? 0 };
+        }
+        catch {
+            return null;
+        }
+    }
+    async webhooks(scope, since) {
+        if (!this.app.plugins.some((p) => p.name === "webhooks") || !this.prisma.webhookDelivery)
+            return null;
+        const where = { createdAt: { gte: since }, ...(scope.organizationId ? { organizationId: scope.organizationId } : {}) };
+        const [failed, succeeded, pending] = await Promise.all(["failed", "succeeded", "pending"].map((status) => this.prisma.webhookDelivery.count({ where: { ...where, status } })));
+        return { failed, succeeded, pending };
+    }
+    async billing() {
+        const billing = this.service.shared.get("billing");
+        return billing?.adminMetrics ? billing.adminMetrics() : null;
+    }
+    async support() {
+        if (!this.prisma.supportTicket)
+            return null;
+        const [open, pending, unassigned] = await Promise.all([
+            this.prisma.supportTicket.count({ where: { status: "open" } }),
+            this.prisma.supportTicket.count({ where: { status: "pending" } }),
+            this.prisma.supportTicket.count({ where: { status: { not: "closed" }, assigneeId: null } }),
+        ]);
+        return { open, pending, unassigned };
+    }
+    /**
+     * Time series for Administration → Analytics: sign-ups (or members joining), active users (people with
+     * a session used that day) and records created per entity. `?days=7|30|90|365` (365 is bucketed by month).
+     */
+    async analytics(ctx, query = {}) {
+        const scope = adminScope(this.service, ctx);
+        const days = [7, 30, 90, 365].includes(Number(query.days)) ? Number(query.days) : 30;
+        const by = days > 90 ? "month" : "day";
+        const now = new Date();
+        const since = by === "month" ? new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() - 11, 1)) : startOfUtcDay(new Date(now.getTime() - (days - 1) * DAY));
+        const keys = bucketKeys(since, by, now);
+        const fmt = by === "month" ? "YYYY-MM" : "YYYY-MM-DD";
+        const bucket = (col) => `to_char(date_trunc('${by}', ${col}), '${fmt}')`;
+        const raw = (sql, ...params) => this.prisma.$queryRawUnsafe(sql, ...params);
+        const signups = scope.organizationId
+            ? await raw(`SELECT ${bucket(`"createdAt"`)} AS k, count(*)::int AS n FROM "member" WHERE "createdAt" >= $1 AND "organizationId" = $2 GROUP BY 1`, since, scope.organizationId)
+            : await raw(`SELECT ${bucket(`"createdAt"`)} AS k, count(*)::int AS n FROM "user" WHERE "createdAt" >= $1 GROUP BY 1`, since);
+        const active = scope.organizationId
+            ? await raw(`SELECT ${bucket(`s."updatedAt"`)} AS k, count(DISTINCT s."userId")::int AS n FROM "session" s JOIN "member" m ON m."userId" = s."userId" AND m."organizationId" = $2 WHERE s."updatedAt" >= $1 GROUP BY 1`, since, scope.organizationId)
+            : await raw(`SELECT ${bucket(`"updatedAt"`)} AS k, count(DISTINCT "userId")::int AS n FROM "session" WHERE "updatedAt" >= $1 GROUP BY 1`, since);
+        const activeTotal = scope.organizationId
+            ? await raw(`SELECT 'all' AS k, count(DISTINCT s."userId")::int AS n FROM "session" s JOIN "member" m ON m."userId" = s."userId" AND m."organizationId" = $2 WHERE s."updatedAt" >= $1`, since, scope.organizationId)
+            : await raw(`SELECT 'all' AS k, count(DISTINCT "userId")::int AS n FROM "session" WHERE "updatedAt" >= $1`, since);
+        const records = [];
+        for (const e of this.entities(scope)) {
+            const rows = scope.organizationId
+                ? await raw(`SELECT ${bucket(`"created_at"`)} AS k, count(*)::int AS n FROM ${q(e.tableName)} WHERE "created_at" >= $1 AND "organization_id" = $2 GROUP BY 1`, since, scope.organizationId)
+                : await raw(`SELECT ${bucket(`"created_at"`)} AS k, count(*)::int AS n FROM ${q(e.tableName)} WHERE "created_at" >= $1 GROUP BY 1`, since);
+            const series = fill(keys, rows);
+            records.push({ entity: e.name, label: e.pluralLabel, path: e.path, total: series.reduce((s, p) => s + p.value, 0), series });
+        }
+        const signupSeries = fill(keys, signups);
+        return {
+            scope: scope.global ? "global" : "organization",
+            days,
+            by,
+            since: since.toISOString(),
+            signups: { total: signupSeries.reduce((s, p) => s + p.value, 0), series: signupSeries },
+            activeUsers: { total: Number(activeTotal[0]?.n ?? 0), series: fill(keys, active) },
+            records,
+            topEntities: [...records].sort((a, b) => b.total - a.total).slice(0, 5).map(({ entity, label, path, total }) => ({ entity, label, path, total })),
+        };
+    }
+    /** Every organization with its member count and plan (payments plugin). Global admins only. */
+    async organizations(ctx, query = {}) {
+        adminScope(this.service, ctx, { globalOnly: true });
+        if (!this.app.tenancy.enabled)
+            throw new NotFoundException("Organizations are not enabled (multiTenant)");
+        const page = Math.max(1, Number(query.page) || 1);
+        const pageSize = 25;
+        const search = typeof query.search === "string" ? query.search.trim().slice(0, 100) : "";
+        const where = search ? { OR: [{ name: { contains: search, mode: "insensitive" } }, { slug: { contains: search, mode: "insensitive" } }] } : {};
+        const [total, rows] = await this.prisma.$transaction([
+            this.prisma.organization.count({ where }),
+            this.prisma.organization.findMany({ where, orderBy: { createdAt: "desc" }, skip: (page - 1) * pageSize, take: pageSize, include: { _count: { select: { members: true } } } }),
+        ]);
+        const plans = await this.plans(rows.map((o) => o.id));
+        return {
+            data: rows.map((o) => ({ id: o.id, name: o.name, slug: o.slug, logo: o.logo ?? null, createdAt: o.createdAt, members: o._count.members, plan: plans.get(o.id) ?? null })),
+            meta: { page, pageSize, total, pages: Math.max(1, Math.ceil(total / pageSize)) },
+            billing: this.app.plugins.some((p) => p.name === "payments"),
+        };
+    }
+    /** One organization: members and their roles, pending invitations, plan and record counts. Global admins only. */
+    async organization(id, ctx) {
+        adminScope(this.service, ctx, { globalOnly: true });
+        if (!this.app.tenancy.enabled)
+            throw new NotFoundException("Organizations are not enabled (multiTenant)");
+        const org = await this.prisma.organization.findUnique({ where: { id } });
+        if (!org)
+            throw new NotFoundException("Organization not found");
+        const [members, invitations] = await Promise.all([
+            this.prisma.member.findMany({ where: { organizationId: id }, orderBy: { createdAt: "asc" }, include: { user: { select: { id: true, name: true, email: true, banned: true } } } }),
+            this.prisma.invitation.count({ where: { organizationId: id, status: "pending" } }),
+        ]);
+        const records = [];
+        for (const e of this.entities({ global: false, organizationId: id }))
+            records.push({ entity: e.name, label: e.pluralLabel, path: e.path, total: await this.service.delegate(e).count({ where: { organizationId: id } }) });
+        return {
+            id: org.id,
+            name: org.name,
+            slug: org.slug,
+            logo: org.logo ?? null,
+            createdAt: org.createdAt,
+            plan: (await this.plans([id])).get(id) ?? null,
+            members: members.map((m) => ({ id: m.id, userId: m.user.id, name: m.user.name, email: m.user.email, banned: !!m.user.banned, role: m.role, joinedAt: m.createdAt })),
+            pendingInvitations: invitations,
+            records,
+        };
+    }
+    async plans(orgIds) {
+        const billing = this.service.shared.get("billing");
+        return billing?.plansFor ? billing.plansFor(orgIds) : new Map();
+    }
+}
+//# sourceMappingURL=admin.js.map

package/dist/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAG9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAgBlD,MAAM,UAAU,UAAU,CAAC,OAAqB,EAAE,GAAwB,EAAE,OAAiC,EAAE;IAC7G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,4DAA4D,CAAC,CAAC;IAC1H,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,CAAC,CAAC;IAC3F,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACrF,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7H,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC;AACpJ,CAAC;AAQD,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAE5D,SAAS,aAAa,CAAC,CAAO;IAC5B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,KAAW,EAAE,EAAmB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC3E,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAc,EAAE,IAAyC;IACrE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,0GAA0G;AAC1G,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;IAAG,CAAC;IAEtD,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,IAAY,GAAG;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B,CAAC;IAED,4EAA4E;IACpE,QAAQ,CAAC,KAAiB;QAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChI,CAAC;IAEO,SAAS,CAAC,KAAiB;QACjC,OAAO,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,WAAW,CAAC,KAAiB,EAAE,KAAW,EAAE,KAAY;QACpE,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAwB;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;QAEzC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnF,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;YAC/H,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;SACnI,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEhD,MAAM,aAAa,GACjB,OAAO,IAAI,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;YAClJ,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9I,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc;YACxC,CAAC,CAAC,CACE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChC,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAC/C,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;aACrE,CAAC,CACH,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QAEnN,MAAM,UAAU,GAAQ,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,WAAW,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAC7J,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAEpO,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,cAAwB;YACrE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YAClE,aAAa;YACb,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;YACpC,OAAO;YACP,aAAa;YACb,WAAW;YACX,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;YAC7C,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;YAC7C,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;YACnD,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;SAC9E,CAAC;IACJ,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,WAAW,CAAC,KAAiB,EAAE,KAAa;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAuF,CAAC;QACzI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7H,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC7E,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAiB,EAAE,KAAW;QACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACtG,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvH,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACpD,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CACvH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAA0D,CAAC;QAC5G,OAAO,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,GAAwB,EAAE,QAAa,EAAE;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,EAAE,GAAoB,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC/J,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,uBAAuB,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;QACjF,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,GAAG,MAAiB,EAAgD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAE7I,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc;YAClC,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,aAAa,CAAC,sGAAsG,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC;YAC/K,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,aAAa,CAAC,0EAA0E,EAAE,KAAK,CAAC,CAAC;QAChI,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc;YACjC,CAAC,CAAC,MAAM,GAAG,CACP,UAAU,MAAM,CAAC,eAAe,CAAC,0KAA0K,EAC3M,KAAK,EACL,KAAK,CAAC,cAAc,CACrB;YACH,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,aAAa,CAAC,6FAA6F,EAAE,KAAK,CAAC,CAAC;QACnJ,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc;YACtC,CAAC,CAAC,MAAM,GAAG,CAAC,2KAA2K,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC;YACrN,CAAC,CAAC,MAAM,GAAG,CAAC,8FAA8F,EAAE,KAAK,CAAC,CAAC;QAErH,MAAM,OAAO,GAA4F,EAAE,CAAC;QAC5G,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc;gBAC/B,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iEAAiE,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC;gBAC3L,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC7I,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,cAAwB;YACrE,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE;YACvF,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YAClF,OAAO;YACP,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SAClJ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,aAAa,CAAC,GAAwB,EAAE,QAAa,EAAE;QAC3D,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,6CAA6C,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/I,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;SAC9K,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9K,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,EAAE;YAChF,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,kHAAkH;IAClH,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,GAAwB;QACrD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,6CAA6C,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;YACjL,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;SACnF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3N,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI;YAC9C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACzK,kBAAkB,EAAE,WAAW;YAC/B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAgB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAmF,CAAC;QACrI,OAAO,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IAClE,CAAC;CACF"}

package/dist/bootstrap.d.ts

@@ -42,6 +42,45 @@ export declare function setupForge(options: ForgeApiOptions): Promise<{
 export declare function backupJob(app: AppIR, service: ForgeService): JobDefinition;
 export declare function createForgeApi(options: ForgeApiOptions): Promise<INestApplication>;
 export declare function createForge(options: ForgeApiOptions): Promise<ForgeApi>;
+/**
+ * Tekki Cloud wakes sleeping apps by restoring a VM snapshot; every TCP connection in that memory is dead.
+ * Prisma reconnects lazily after $disconnect, plugins reopen theirs in onResume.
+ * The SIGUSR2 handlers that call this are only registered when TEKKI=1 (set by tekki-init), so apps elsewhere
+ * (e.g. under nodemon, which restarts on SIGUSR2) behave as before. A hung $disconnect is abandoned after
+ * `disconnectTimeoutMs` (default 5 s) so plugins still reconnect.
+ */
+export declare function resumeAfterSnapshot(prisma: {
+    $disconnect(): Promise<void>;
+}, plugins: {
+    runtime: {
+        onResume?(ctx: PluginContext): void | Promise<void>;
+    };
+    ctx: PluginContext;
+}[], { disconnectTimeoutMs }?: {
+    disconnectTimeoutMs?: number;
+}): Promise<void>;
+/**
+ * Returns a trigger that runs `fn` at most once at a time: a call during a run schedules exactly one rerun
+ * after it finishes, and further calls in the meantime do not queue more.
+ */
+export declare function coalesce(fn: () => Promise<void>): () => Promise<void>;
+/**
+ * Signals Nest's shutdown hooks listen to. Nest's default list includes SIGUSR2: it closes the app and re-raises
+ * the signal, which would kill the API on every wake from a Tekki snapshot. On Tekki (TEKKI=1) SIGUSR2 means
+ * "resumed" and belongs to resumeAfterSnapshot; elsewhere the default list (`[]`) is kept, so e.g. nodemon's
+ * SIGUSR2 still closes the app gracefully.
+ */
+export declare function shutdownSignals(env?: NodeJS.ProcessEnv): string[];
+/**
+ * The API's process signals: Nest's shutdown hooks (see shutdownSignals), plugin onStop on SIGTERM/SIGINT and,
+ * on Tekki (TEKKI=1), resumeAfterSnapshot on SIGUSR2. Exported for tests.
+ */
+export declare function handleApiSignals(app: Pick<INestApplication, "enableShutdownHooks">, prisma: {
+    $disconnect(): Promise<void>;
+}, plugins: {
+    runtime: ForgeApiPlugin;
+    ctx: PluginContext;
+}[], env?: NodeJS.ProcessEnv): void;
 export declare function startForgeApi(options: ForgeApiOptions & {
     port?: number;
     host?: string;

package/dist/bootstrap.js

@@ -5,15 +5,18 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import "reflect-metadata";
-import { Module } from "@nestjs/common";
+import { Module, ShutdownSignal } from "@nestjs/common";
 import { NestFactory } from "@nestjs/core";
 import { SwaggerModule } from "@nestjs/swagger";
-import { toNodeHandler } from "better-auth/node";
+import { fromNodeHeaders, toNodeHandler } from "better-auth/node";
 import express from "express";
 import { FORGE_SERVICE, ResourceController, SystemController } from "./controllers.js";
 import { ForgeExceptionFilter } from "./errors.js";
 import { createBackup, filesFromPrisma, localBackupStore } from "./backup.js";
 import { ForgeService } from "./service.js";
+import { SiteController } from "./site-controller.js";
+import { syncSite } from "./site.js";
+import { maintenanceBlock } from "./settings.js";
 let ForgeRootModule = class ForgeRootModule {
 };
 ForgeRootModule = __decorate([
@@ -24,7 +27,7 @@ export function forgeModule(service, imports = [], pluginControllers = []) {
         module: ForgeRootModule,
         imports,
         // Order matters: fixed system and plugin routes must win over the generic `:resource` routes.
-        controllers: [SystemController, ...pluginControllers, ResourceController],
+        controllers: [SystemController, ...pluginControllers, SiteController, ResourceController],
         providers: [{ provide: FORGE_SERVICE, useValue: service }],
         exports: [FORGE_SERVICE],
     };
@@ -96,6 +99,9 @@ export async function createForgeApi(options) {
 }
 export async function createForge(options) {
     const { service, plugins } = await setupForge(options);
+    // Seed/merge the website from forge.config.ts before serving it (never throws; warns when not migrated yet).
+    if (options.app.site)
+        await syncSite(options.app, options.prisma);
     const prefix = options.app.api.prefix;
     const pluginImports = plugins.flatMap((p) => p.runtime.imports ?? []);
     const pluginControllers = plugins.flatMap((p) => p.runtime.controllers ?? []);
@@ -112,6 +118,15 @@ export async function createForge(options) {
     for (const path of plugins.flatMap((p) => p.runtime.rawBodyPaths ?? []))
         server.use(`${prefix}${path}`, express.raw({ type: "*/*", limit: "1mb" }));
     server.use(express.json({ limit: "1mb" }));
+    // Maintenance mode (Administration → System settings): writes are refused except for global admins.
+    const rawPaths = plugins.flatMap((p) => p.runtime.rawBodyPaths ?? []);
+    server.use(prefix, (req, res, next) => {
+        const ctxReq = req;
+        const resolve = () => (ctxReq.forgeContext ??= service.resolveContext(fromNodeHeaders(req.headers), req.ip));
+        maintenanceBlock(service.settings, req.method, req.path, resolve, rawPaths)
+            .then((blocked) => (blocked ? void res.status(503).json({ statusCode: 503, error: "Service Unavailable", message: blocked.message }) : next()))
+            .catch(next);
+    });
     if (options.cors?.length)
         app.enableCors({ origin: options.cors, credentials: true });
     app.setGlobalPrefix(prefix.replace(/^\//, ""));
@@ -129,15 +144,89 @@ export async function createForge(options) {
     }
     return { app, service, plugins };
 }
-export async function startForgeApi(options) {
-    const { app, plugins } = await createForge(options);
-    app.enableShutdownHooks();
+/**
+ * Tekki Cloud wakes sleeping apps by restoring a VM snapshot; every TCP connection in that memory is dead.
+ * Prisma reconnects lazily after $disconnect, plugins reopen theirs in onResume.
+ * The SIGUSR2 handlers that call this are only registered when TEKKI=1 (set by tekki-init), so apps elsewhere
+ * (e.g. under nodemon, which restarts on SIGUSR2) behave as before. A hung $disconnect is abandoned after
+ * `disconnectTimeoutMs` (default 5 s) so plugins still reconnect.
+ */
+export async function resumeAfterSnapshot(prisma, plugins, { disconnectTimeoutMs = 5000 } = {}) {
+    let timer;
+    const timedOut = new Promise((resolve) => {
+        timer = setTimeout(() => {
+            console.error(`[forge] resume: prisma: $disconnect did not finish within ${disconnectTimeoutMs} ms, continuing`);
+            resolve();
+        }, disconnectTimeoutMs);
+    });
+    await Promise.race([prisma.$disconnect().catch((e) => console.error(`[forge] resume: prisma: ${e.message}`)), timedOut]);
+    clearTimeout(timer);
+    for (const p of plugins) {
+        try {
+            await p.runtime.onResume?.(p.ctx);
+        }
+        catch (e) {
+            console.error(`[forge] resume: plugin failed: ${e.message}`);
+        }
+    }
+}
+/**
+ * Returns a trigger that runs `fn` at most once at a time: a call during a run schedules exactly one rerun
+ * after it finishes, and further calls in the meantime do not queue more.
+ */
+export function coalesce(fn) {
+    let running;
+    let rerun = false;
+    const run = () => {
+        running = fn()
+            .catch((e) => console.error(`[forge] resume: ${e.message}`))
+            .then(() => {
+            if (!rerun)
+                return void (running = undefined);
+            rerun = false;
+            return run();
+        });
+        return running;
+    };
+    return () => {
+        if (running) {
+            rerun = true;
+            return running;
+        }
+        return run();
+    };
+}
+/**
+ * Signals Nest's shutdown hooks listen to. Nest's default list includes SIGUSR2: it closes the app and re-raises
+ * the signal, which would kill the API on every wake from a Tekki snapshot. On Tekki (TEKKI=1) SIGUSR2 means
+ * "resumed" and belongs to resumeAfterSnapshot; elsewhere the default list (`[]`) is kept, so e.g. nodemon's
+ * SIGUSR2 still closes the app gracefully.
+ */
+export function shutdownSignals(env = process.env) {
+    if (env.TEKKI !== "1")
+        return [];
+    return Object.values(ShutdownSignal).filter((s) => s !== ShutdownSignal.SIGUSR2);
+}
+/**
+ * The API's process signals: Nest's shutdown hooks (see shutdownSignals), plugin onStop on SIGTERM/SIGINT and,
+ * on Tekki (TEKKI=1), resumeAfterSnapshot on SIGUSR2. Exported for tests.
+ */
+export function handleApiSignals(app, prisma, plugins, env = process.env) {
+    app.enableShutdownHooks(shutdownSignals(env));
     const stop = async () => {
         for (const p of plugins)
             await p.runtime.onStop?.(p.ctx);
     };
     process.once("SIGTERM", () => void stop());
     process.once("SIGINT", () => void stop());
+    if (env.TEKKI === "1") {
+        const resume = coalesce(() => resumeAfterSnapshot(prisma, plugins));
+        process.on("SIGUSR2", () => void resume());
+    }
+}
+export async function startForgeApi(options) {
+    const { app, plugins } = await createForge(options);
+    handleApiSignals(app, options.prisma, plugins);
     const port = options.port ?? Number(process.env.API_PORT ?? process.env.PORT ?? 4000);
     await app.listen(port, options.host ?? "0.0.0.0");
     console.log(`[forge] ${options.app.name} API listening on http://localhost:${port}${options.app.api.prefix}`);
@@ -186,6 +275,10 @@ export async function startForgeWorker(options) {
     };
     process.once("SIGTERM", () => void stop().then(() => process.exit(0)));
     process.once("SIGINT", () => void stop().then(() => process.exit(0)));
+    if (process.env.TEKKI === "1") {
+        const resume = coalesce(() => resumeAfterSnapshot(options.prisma, [...contexts, ...plugins]));
+        process.on("SIGUSR2", () => void resume());
+    }
     return { stop };
 }
 //# sourceMappingURL=bootstrap.js.map