@toeichust/common 0.0.13 → 1.0.1

package/dist/constants/swagger.constant.js

@@ -11,7 +11,7 @@ exports.SWAGGER_DESCRIPTION = `<table border="0">
       <h3>Giới thiệu</h3>
       <ul>
         <li>Đây là API cho <code>${process.env.NAME_SERVICE || 'Tên mặc định'}</code></li>
-        <li><a href="https://github.com/ToeicHUST/${process.env.NAME_SERVICE || 'Tên mặc định'}">Xem thông tin github</a></li>
+        <li><a href="https://github.com/${process.env.NAME_SERVICE || 'Tên mặc định'}">Xem thông tin github</a></li>
       </ul>
       <h3>JSON và YAML docs:</h3>
       <ul>

package/dist/constants/swagger.constant.js.map

@@ -1 +1 @@
-{"version":3,"file":"swagger.constant.js","sourceRoot":"","sources":["../../src/constants/swagger.constant.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG,MAAM,CAAC;AAC3B,QAAA,gBAAgB,GAAG,YAAY,CAAC;AAChC,QAAA,cAAc,GACzB,0DAA0D,CAAC;AAChD,QAAA,sBAAsB,GACjC,wGAAwG,CAAC;AAC9F,QAAA,mBAAmB,GAAG;;;;;mCAKA,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc;oDACzB,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc;;;;wBAItE,yBAAiB;wBACjB,yBAAiB;;;;kBAIvB,8BAAsB;;;SAG/B,CAAC"}
+{"version":3,"file":"swagger.constant.js","sourceRoot":"","sources":["../../src/constants/swagger.constant.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG,MAAM,CAAC;AAC3B,QAAA,gBAAgB,GAAG,YAAY,CAAC;AAChC,QAAA,cAAc,GACzB,0DAA0D,CAAC;AAChD,QAAA,sBAAsB,GACjC,wGAAwG,CAAC;AAC9F,QAAA,mBAAmB,GAAG;;;;;mCAKA,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc;0CACnC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,cAAc;;;;wBAI5D,yBAAiB;wBACjB,yBAAiB;;;;kBAIvB,8BAAsB;;;SAG/B,CAAC"}

package/dist/index.d.ts

@@ -2,3 +2,6 @@ export * from './constants/swagger.constant';
 export * from './helpers/bootstrap.helper';
 export * from './helpers/swagger.helper';
 export * from './middlewares/logger.middleware';
+export * from './modules/vault/vault.module';
+export * from './modules/vault/vault.service.spec';
+export * from './modules/vault/vault.service';

package/dist/index.js

@@ -18,4 +18,7 @@ __exportStar(require("./constants/swagger.constant"), exports);
 __exportStar(require("./helpers/bootstrap.helper"), exports);
 __exportStar(require("./helpers/swagger.helper"), exports);
 __exportStar(require("./middlewares/logger.middleware"), exports);
+__exportStar(require("./modules/vault/vault.module"), exports);
+__exportStar(require("./modules/vault/vault.service.spec"), exports);
+__exportStar(require("./modules/vault/vault.service"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,+DAA6C;AAC7C,6DAA2C;AAC3C,2DAAyC;AACzC,kEAAgD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,+DAA6C;AAC7C,6DAA2C;AAC3C,2DAAyC;AACzC,kEAAgD;AAChD,+DAA6C;AAC7C,qEAAmD;AACnD,gEAA8C"}

package/dist/modules/vault/vault.module.d.ts

@@ -0,0 +1,2 @@
+export declare class VaultModule {
+}

package/dist/modules/vault/vault.module.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VaultModule = void 0;
+const common_1 = require("@nestjs/common");
+const vault_service_1 = require("./vault.service");
+const config_1 = require("@nestjs/config");
+let VaultModule = class VaultModule {
+};
+exports.VaultModule = VaultModule;
+exports.VaultModule = VaultModule = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({
+        imports: [config_1.ConfigModule],
+        providers: [
+            {
+                provide: vault_service_1.VaultService,
+                useFactory: async (configService) => {
+                    const vaultService = new vault_service_1.VaultService(configService);
+                    await vaultService.loadSecrets();
+                    return vaultService;
+                },
+                inject: [config_1.ConfigService],
+            },
+        ],
+        exports: [vault_service_1.VaultService],
+    })
+], VaultModule);
+//# sourceMappingURL=vault.module.js.map

package/dist/modules/vault/vault.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.module.js","sourceRoot":"","sources":["../../../src/modules/vault/vault.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAgD;AAChD,mDAA+C;AAC/C,2CAA6D;AAoBtD,IAAM,WAAW,GAAjB,MAAM,WAAW;CAAG,CAAA;AAAd,kCAAW;sBAAX,WAAW;IAlBvB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,qBAAY,CAAC;QACvB,SAAS,EAAE;YACT;gBACE,OAAO,EAAE,4BAAY;gBACrB,UAAU,EAAE,KAAK,EAAE,aAA4B,EAAE,EAAE;oBACjD,MAAM,YAAY,GAAG,IAAI,4BAAY,CAAC,aAAa,CAAC,CAAC;oBAErD,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;oBAEjC,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,MAAM,EAAE,CAAC,sBAAa,CAAC;aACxB;SACF;QACD,OAAO,EAAE,CAAC,4BAAY,CAAC;KACxB,CAAC;GACW,WAAW,CAAG"}

package/dist/modules/vault/vault.service.d.ts

@@ -0,0 +1,10 @@
+import { ConfigService } from '@nestjs/config';
+export declare class VaultService {
+    private configService;
+    constructor(configService: ConfigService);
+    private readonly logger;
+    private vaultClient;
+    private secrets;
+    loadSecrets(): Promise<void>;
+    get<T = string>(key: string): T;
+}

package/dist/modules/vault/vault.service.js

@@ -0,0 +1,92 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var VaultService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VaultService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const node_vault_1 = __importDefault(require("node-vault"));
+let VaultService = VaultService_1 = class VaultService {
+    configService;
+    constructor(configService) {
+        this.configService = configService;
+    }
+    logger = new common_1.Logger(VaultService_1.name);
+    vaultClient;
+    secrets = {};
+    async loadSecrets() {
+        this.logger.log('Đang kết nối tới Vault...');
+        const NODE_ENV = this.configService.get('NODE_ENV');
+        const isDevelopment = NODE_ENV === 'development';
+        const VAULT_ADDR = this.configService.get('VAULT_ADDR');
+        const VAULT_ROLE_ID = this.configService.get('VAULT_ROLE_ID');
+        const VAULT_SECRET_ID = this.configService.get('VAULT_SECRET_ID');
+        const VAULT_DATA_PATH = this.configService.get('VAULT_DATA_PATH');
+        if (!VAULT_ADDR || !VAULT_ROLE_ID || !VAULT_SECRET_ID) {
+            this.logger.error('Thiếu cấu hình Vault (ADDR, ROLE_ID hoặc SECRET_ID)');
+            throw new Error('Missing Vault configuration');
+        }
+        this.vaultClient = (0, node_vault_1.default)({
+            apiVersion: 'v1',
+            endpoint: VAULT_ADDR,
+        });
+        try {
+            const loginResult = await this.vaultClient.approleLogin({
+                role_id: VAULT_ROLE_ID,
+                secret_id: VAULT_SECRET_ID,
+            });
+            this.vaultClient.token = loginResult.auth.client_token;
+            const vaultPath = VAULT_DATA_PATH || 'secret/data/myapp';
+            const response = await this.vaultClient.read(vaultPath);
+            let fetchedSecrets = {};
+            if (response.data && response.data.data && response.data.metadata) {
+                fetchedSecrets = response.data.data;
+            }
+            else {
+                fetchedSecrets = response.data || {};
+            }
+            if (isDevelopment) {
+                const overriddenKeys = [];
+                Object.keys(fetchedSecrets).forEach((key) => {
+                    const envValue = this.configService.get(key);
+                    if (envValue !== undefined && envValue !== null && envValue !== '') {
+                        fetchedSecrets[key] = envValue;
+                        overriddenKeys.push(key);
+                    }
+                });
+                this.secrets = fetchedSecrets;
+                if (overriddenKeys.length > 0) {
+                    this.logger.warn(`⚠️  Các biến sau đây đang sử dụng giá trị từ ENV (ghi đè Vault): ${overriddenKeys.join(', ')}`);
+                }
+            }
+            else {
+                this.secrets = fetchedSecrets;
+            }
+            this.logger.log('Đã kết nối và lấy dữ liệu thành công từ Vault');
+        }
+        catch (error) {
+            this.logger.error(`Lỗi kết nối Vault: ${error.message}`, error.stack);
+            throw error;
+        }
+    }
+    get(key) {
+        return this.secrets[key];
+    }
+};
+exports.VaultService = VaultService;
+exports.VaultService = VaultService = VaultService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], VaultService);
+//# sourceMappingURL=vault.service.js.map

package/dist/modules/vault/vault.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.service.js","sourceRoot":"","sources":["../../../src/modules/vault/vault.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2CAA+C;AAC/C,4DAA+B;AAGxB,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACH;IAApB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAEnC,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAChD,WAAW,CAAe;IAC1B,OAAO,GAAwB,EAAE,CAAC;IAE1C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,UAAU,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,QAAQ,KAAK,aAAa,CAAC;QAEjD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,YAAY,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;QAE1E,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAGD,IAAI,CAAC,WAAW,GAAG,IAAA,oBAAK,EAAC;YACvB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;gBACtD,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;YAEvD,MAAM,SAAS,GAAG,eAAe,IAAI,mBAAmB,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAExD,IAAI,cAAc,GAAwB,EAAE,CAAC;YAE7C,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClE,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACvC,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,cAAc,GAAa,EAAE,CAAC;gBAEpC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;oBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAE7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;wBACnE,cAAc,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;wBAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC;gBAE9B,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oEAAoE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChG,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC;YAChC,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAa,GAAW;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAM,CAAC;IAChC,CAAC;CACF,CAAA;AAjFY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAEwB,sBAAa;GADrC,YAAY,CAiFxB"}

package/dist/modules/vault/vault.service.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/modules/vault/vault.service.spec.js

@@ -0,0 +1,300 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const testing_1 = require("@nestjs/testing");
+const config_1 = require("@nestjs/config");
+const vault_service_1 = require("./vault.service");
+const node_vault_1 = __importDefault(require("node-vault"));
+jest.mock('node-vault');
+describe('VaultService', () => {
+    let service;
+    let configService;
+    let mockVaultClient;
+    beforeEach(async () => {
+        mockVaultClient = {
+            approleLogin: jest.fn(),
+            read: jest.fn(),
+            token: null,
+        };
+        node_vault_1.default.mockReturnValue(mockVaultClient);
+        const module = await testing_1.Test.createTestingModule({
+            providers: [
+                vault_service_1.VaultService,
+                {
+                    provide: config_1.ConfigService,
+                    useValue: {
+                        get: jest.fn(),
+                    },
+                },
+            ],
+        }).compile();
+        service = module.get(vault_service_1.VaultService);
+        configService = module.get(config_1.ConfigService);
+    });
+    it('should be defined', () => {
+        expect(service).toBeDefined();
+    });
+    describe('loadSecrets', () => {
+        it('should throw error when VAULT_ADDR is missing', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                if (key === 'VAULT_ROLE_ID')
+                    return 'test-role-id';
+                if (key === 'VAULT_SECRET_ID')
+                    return 'test-secret-id';
+                return undefined;
+            });
+            await expect(service.loadSecrets()).rejects.toThrow('Missing Vault configuration');
+        });
+        it('should throw error when VAULT_ROLE_ID is missing', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                if (key === 'VAULT_ADDR')
+                    return 'http://localhost:8200';
+                if (key === 'VAULT_SECRET_ID')
+                    return 'test-secret-id';
+                return undefined;
+            });
+            await expect(service.loadSecrets()).rejects.toThrow('Missing Vault configuration');
+        });
+        it('should throw error when VAULT_SECRET_ID is missing', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                if (key === 'VAULT_ADDR')
+                    return 'http://localhost:8200';
+                if (key === 'VAULT_ROLE_ID')
+                    return 'test-role-id';
+                return undefined;
+            });
+            await expect(service.loadSecrets()).rejects.toThrow('Missing Vault configuration');
+        });
+        it('should successfully connect to Vault and fetch secrets with KV v2 engine', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'production',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                    VAULT_DATA_PATH: 'secret/data/myapp',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: {
+                    data: { DB_HOST: 'localhost', DB_PORT: '5432' },
+                    metadata: { version: 1 },
+                },
+            });
+            await service.loadSecrets();
+            expect(mockVaultClient.approleLogin).toHaveBeenCalledWith({
+                role_id: 'test-role-id',
+                secret_id: 'test-secret-id',
+            });
+            expect(mockVaultClient.token).toBe('test-token');
+            expect(mockVaultClient.read).toHaveBeenCalledWith('secret/data/myapp');
+        });
+        it('should successfully fetch secrets with KV v1 engine', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'production',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                    VAULT_DATA_PATH: 'secret/myapp',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: { API_KEY: 'secret-key', DB_PASSWORD: 'password123' },
+            });
+            await service.loadSecrets();
+            expect(service.get('API_KEY')).toBe('secret-key');
+            expect(service.get('DB_PASSWORD')).toBe('password123');
+        });
+        it('should override Vault secrets with ENV variables in development mode', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'development',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                    VAULT_DATA_PATH: 'secret/data/myapp',
+                    DB_HOST: 'localhost-override',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: {
+                    data: { DB_HOST: 'vault-host', DB_PORT: '5432' },
+                    metadata: { version: 1 },
+                },
+            });
+            await service.loadSecrets();
+            expect(service.get('DB_HOST')).toBe('localhost-override');
+            expect(service.get('DB_PORT')).toBe('5432');
+        });
+        it('should not override Vault secrets with empty ENV variables in development mode', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'development',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                    DB_HOST: '',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: {
+                    data: { DB_HOST: 'vault-host' },
+                    metadata: { version: 1 },
+                },
+            });
+            await service.loadSecrets();
+            expect(service.get('DB_HOST')).toBe('vault-host');
+        });
+        it('should throw error when Vault login fails', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockRejectedValue(new Error('Authentication failed'));
+            await expect(service.loadSecrets()).rejects.toThrow('Authentication failed');
+        });
+        it('should throw error when reading Vault path fails', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                    VAULT_DATA_PATH: 'secret/data/myapp',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockRejectedValue(new Error('Path not found'));
+            await expect(service.loadSecrets()).rejects.toThrow('Path not found');
+        });
+        it('should use default VAULT_DATA_PATH when not provided', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: { data: {}, metadata: { version: 1 } },
+            });
+            await service.loadSecrets();
+            expect(mockVaultClient.read).toHaveBeenCalledWith('secret/data/myapp');
+        });
+    });
+    describe('get', () => {
+        it('should return secret value for existing key', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'production',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: {
+                    data: { API_KEY: 'my-secret-key' },
+                    metadata: { version: 1 },
+                },
+            });
+            await service.loadSecrets();
+            expect(service.get('API_KEY')).toBe('my-secret-key');
+        });
+        it('should return undefined for non-existing key', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'production',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: { data: {}, metadata: { version: 1 } },
+            });
+            await service.loadSecrets();
+            expect(service.get('NON_EXISTING_KEY')).toBeUndefined();
+        });
+        it('should return typed value when type parameter is provided', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                const config = {
+                    NODE_ENV: 'production',
+                    VAULT_ADDR: 'http://localhost:8200',
+                    VAULT_ROLE_ID: 'test-role-id',
+                    VAULT_SECRET_ID: 'test-secret-id',
+                };
+                return config[key];
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({
+                data: {
+                    data: { PORT: '3000', IS_ENABLED: 'true' },
+                    metadata: { version: 1 },
+                },
+            });
+            await service.loadSecrets();
+            const port = service.get('PORT');
+            const isEnabled = service.get('IS_ENABLED');
+            expect(port).toBe('3000');
+            expect(isEnabled).toBe('true');
+        });
+        it('should fallback to empty object when response.data is null in KV v1', async () => {
+            jest.spyOn(configService, 'get').mockImplementation((key) => {
+                if (key === 'VAULT_ADDR')
+                    return 'http://localhost:8200';
+                if (key === 'VAULT_ROLE_ID')
+                    return 'test-role-id';
+                if (key === 'VAULT_SECRET_ID')
+                    return 'test-secret-id';
+                return undefined;
+            });
+            mockVaultClient.approleLogin.mockResolvedValue({
+                auth: { client_token: 'test-token' },
+            });
+            mockVaultClient.read.mockResolvedValue({ data: null });
+            await service.loadSecrets();
+            expect(service.get('ANY_KEY')).toBeUndefined();
+        });
+    });
+});
+//# sourceMappingURL=vault.service.spec.js.map

package/dist/modules/vault/vault.service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.service.spec.js","sourceRoot":"","sources":["../../../src/modules/vault/vault.service.spec.ts"],"names":[],"mappings":";;;;;AAAA,6CAAsD;AACtD,2CAA+C;AAC/C,mDAA+C;AAC/C,4DAA+B;AAE/B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAExB,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,OAAqB,CAAC;IAC1B,IAAI,aAA4B,CAAC;IACjC,IAAI,eAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,eAAe,GAAG;YAChB,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;YACf,KAAK,EAAE,IAAI;SACZ,CAAC;QAED,oBAAmB,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAkB,MAAM,cAAI,CAAC,mBAAmB,CAAC;YAC3D,SAAS,EAAE;gBACT,4BAAY;gBACZ;oBACE,OAAO,EAAE,sBAAa;oBACtB,QAAQ,EAAE;wBACR,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;qBACf;iBACF;aACF;SACF,CAAC,CAAC,OAAO,EAAE,CAAC;QAEb,OAAO,GAAG,MAAM,CAAC,GAAG,CAAe,4BAAY,CAAC,CAAC;QACjD,aAAa,GAAG,MAAM,CAAC,GAAG,CAAgB,sBAAa,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAE7D,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,IAAI,GAAG,KAAK,eAAe;oBAAE,OAAO,cAAc,CAAC;gBACnD,IAAI,GAAG,KAAK,iBAAiB;oBAAE,OAAO,gBAAgB,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,IAAI,GAAG,KAAK,YAAY;oBAAE,OAAO,uBAAuB,CAAC;gBACzD,IAAI,GAAG,KAAK,iBAAiB;oBAAE,OAAO,gBAAgB,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,IAAI,GAAG,KAAK,YAAY;oBAAE,OAAO,uBAAuB,CAAC;gBACzD,IAAI,GAAG,KAAK,eAAe;oBAAE,OAAO,cAAc,CAAC;gBACnD,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;oBACjC,eAAe,EAAE,mBAAmB;iBACrC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE;oBACJ,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE;oBAC/C,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC;gBACxD,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,gBAAgB;aAC5B,CAAC,CAAC;YACH,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;oBACjC,eAAe,EAAE,cAAc;iBAChC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE;aAC5D,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YAEpF,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,aAAa;oBACvB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;oBACjC,eAAe,EAAE,mBAAmB;oBACpC,OAAO,EAAE,oBAAoB;iBAC9B,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE;oBACJ,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE;oBAChD,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAE9F,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAAwB;oBAClC,QAAQ,EAAE,aAAa;oBACvB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;oBACjC,OAAO,EAAE,EAAE;iBACZ,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE;oBACJ,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;oBAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;iBAClC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAC5C,IAAI,KAAK,CAAC,uBAAuB,CAAC,CACnC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CACjD,uBAAuB,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;oBACjC,eAAe,EAAE,mBAAmB;iBACrC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAEpE,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;iBAClC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;QACnB,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;iBAClC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE;oBACJ,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;oBAClC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;iBAClC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,MAAM,MAAM,GAA2B;oBACrC,QAAQ,EAAE,YAAY;oBACtB,UAAU,EAAE,uBAAuB;oBACnC,aAAa,EAAE,cAAc;oBAC7B,eAAe,EAAE,gBAAgB;iBAClC,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAEH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,EAAE;oBACJ,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;oBAC1C,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAE5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAS,MAAM,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAS,YAAY,CAAC,CAAC;YAEpD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;gBAClE,IAAI,GAAG,KAAK,YAAY;oBAAE,OAAO,uBAAuB,CAAC;gBACzD,IAAI,GAAG,KAAK,eAAe;oBAAE,OAAO,cAAc,CAAC;gBACnD,IAAI,GAAG,KAAK,iBAAiB;oBAAE,OAAO,gBAAgB,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,eAAe,CAAC,YAAY,CAAC,iBAAiB,CAAC;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YAGH,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvD,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAG5B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}