@veecode-platform/backstage-plugin-kong-service-manager-backend-dynamic 1.0.1

package/README.md

@@ -0,0 +1,179 @@
+# Kong Service Manager Backend
+
+Backstage backend plugin that proxies requests to the
+[Kong Admin API](https://docs.konghq.com/gateway/latest/admin-api/),
+letting catalog entities manage their Kong services, routes, and plugins
+from the Backstage UI.
+
+## Features
+
+- Query Kong service information linked to catalog entities
+- Full CRUD for routes on a Kong service
+- Add, update, and remove plugins on services and routes
+- Retrieve available plugins and their configuration schemas
+- Support for multiple Kong instances with different auth methods
+- Kong workspace support
+
+## Installation
+
+```bash
+# From your Backstage root directory
+yarn --cwd packages/backend add @veecode-platform/backstage-plugin-kong-service-manager-backend
+```
+
+## Configuration
+
+### Register the plugin
+
+The plugin uses the new Backstage backend system. Add it to
+`packages/backend/src/index.ts`:
+
+```ts
+const backend = createBackend();
+// ...existing plugins...
+backend.add(import('@veecode-platform/backstage-plugin-kong-service-manager-backend'));
+backend.start();
+```
+
+### `app-config.yaml`
+
+Add one or more Kong instances under the `kong` key:
+
+```yaml
+kong:
+  instances:
+    - id: default
+      apiBaseUrl: ${KONG_ADMIN_URL} # e.g. http://localhost:8001
+      # workspace: default          # optional Kong workspace
+      auth:
+        kongAdmin: ${KONG_ADMIN_TOKEN}
+```
+
+#### Configuration reference
+
+| Field | Type | Required | Description |
+|---|---|---|---|
+| `kong.instances[].id` | `string` | Yes | Unique identifier for this Kong instance. |
+| `kong.instances[].apiBaseUrl` | `string` | Yes | Kong Admin API base URL. |
+| `kong.instances[].workspace` | `string` | No | Kong workspace name. |
+| `kong.instances[].auth.kongAdmin` | `string` | Conditional | Token sent as the `Kong-Admin-Token` header. Use this **or** `custom`. |
+| `kong.instances[].auth.custom.header` | `string` | Conditional | Custom auth header name. |
+| `kong.instances[].auth.custom.value` | `string` | Conditional | Custom auth header value. |
+
+#### Multiple instances
+
+```yaml
+kong:
+  instances:
+    - id: development
+      apiBaseUrl: http://kong-dev:8001
+      auth:
+        kongAdmin: ${KONG_DEV_TOKEN}
+    - id: production
+      apiBaseUrl: https://kong-prod.example.com:8001
+      workspace: prod
+      auth:
+        custom:
+          header: Authorization
+          value: Bearer ${KONG_PROD_TOKEN}
+```
+
+### Annotate your catalog entities
+
+Add the `kong-manager/service-name` annotation to any Component that should
+display Kong data:
+
+```yaml
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: my-service
+  annotations:
+    kong-manager/service-name: my-kong-service
+spec:
+  type: service
+  owner: team-a
+```
+
+## API endpoints
+
+All endpoints are served under `/api/kong-service-manager-backend`.
+
+### Health
+
+| Method | Path | Description |
+|---|---|---|
+| `GET` | `/health` | Health check (unauthenticated). |
+
+### Services
+
+| Method | Path | Description |
+|---|---|---|
+| `GET` | `/:instance/services/:serviceName` | Get service info. |
+| `GET` | `/:instance/services/:serviceName/plugins/associated` | List plugins on a service. |
+
+### Routes
+
+| Method | Path | Description |
+|---|---|---|
+| `GET` | `/:instance/services/:serviceName/routes` | List routes for a service. |
+| `GET` | `/:instance/services/:serviceName/routes/:routeId` | Get a single route. |
+| `POST` | `/:instance/services/:serviceName/routes` | Create a route. |
+| `PATCH` | `/:instance/services/:serviceName/routes/:routeId` | Update a route. |
+| `DELETE` | `/:instance/services/:serviceName/routes/:routeId` | Delete a route. |
+
+### Service plugins
+
+| Method | Path | Description |
+|---|---|---|
+| `GET` | `/:instance/plugins` | List available plugins. |
+| `GET` | `/:instance/services/plugins/:pluginName/fields` | Get plugin schema. |
+| `POST` | `/:instance/services/:serviceName/plugins` | Add plugin to service. |
+| `PATCH` | `/:instance/services/:serviceName/plugins/:pluginId` | Update service plugin. |
+| `DELETE` | `/:instance/services/:serviceName/plugins/:pluginId` | Remove service plugin. |
+
+### Route plugins
+
+| Method | Path | Description |
+|---|---|---|
+| `GET` | `/:instance/routes/:routeId/plugins/associated` | List plugins on a route. |
+| `POST` | `/:instance/routes/:routeId/plugins` | Add plugin to route. |
+| `PATCH` | `/:instance/routes/:routeId/plugins/:pluginId` | Update route plugin. |
+| `DELETE` | `/:instance/routes/:routeId/plugins/:pluginId` | Remove route plugin. |
+
+## RBAC note
+
+Role-Based Access Control (RBAC) and workspaces are **Kong Enterprise** features.
+They are available on Kong Gateway (Enterprise) and Kong Konnect, but **not** on Kong OSS.
+If your Kong Admin API is protected by RBAC, the token supplied in `auth.kongAdmin` (or
+the custom header) must carry the appropriate permissions for the endpoints this
+plugin calls.
+
+See the [Kong RBAC documentation](https://developer.konghq.com/gateway/entities/rbac/)
+for details on configuring roles and permissions.
+
+You can leave them both empty if your Kong Admin API does not require authentication (as in Kong OSS).
+
+**Note:** it is custom practice to create Kong service and routes for the Admin API itself,
+so that you can control access to it via "homemade" RBAC using the bundled OSS plugins. This strategy can be refined to the point of partially exposing the Admin API, but we will not cover this in this documentation.
+
+## Development
+
+Start the plugin in standalone mode for local development:
+
+```bash
+cd workspace/kong-tools
+yarn start --filter=kong-service-manager-backend
+```
+
+The standalone server reads configuration from `app-config.yaml` and starts
+on port **7007**. You can test with:
+
+```bash
+curl http://localhost:7007/api/kong-service-manager-backend/health
+curl http://localhost:7007/api/kong-service-manager-backend/default/services/my-service
+```
+
+## License
+
+Apache-2.0

package/dist/.config-schema.json

@@ -0,0 +1 @@
+{}

package/dist/configSchema.json

@@ -0,0 +1 @@
+{}

package/dist/index.cjs.js

@@ -0,0 +1,13 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var plugin = require('./plugin.cjs.js');
+var KongServiceManagerService = require('./services/KongServiceManagerService.cjs.js');
+
+
+
+exports.default = plugin.kongServiceManagerBackendPlugin;
+exports.KongServiceManagerService = KongServiceManagerService.KongServiceManagerService;
+exports.kongServiceManagerServiceRef = KongServiceManagerService.kongServiceManagerServiceRef;
+//# sourceMappingURL=index.cjs.js.map

package/dist/index.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}

package/dist/index.d.ts

@@ -0,0 +1,44 @@
+import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
+import { LoggerService } from '@backstage/backend-plugin-api';
+import { Config } from '@backstage/config';
+import { ServiceInfoResponse, RoutesResponse, RouteResponse, CreateRoute, AssociatedPluginsResponse, AvailablePluginsResponse, PluginFieldsResponse, CreatePlugin } from '@veecode-platform/backstage-plugin-kong-service-manager-common';
+
+/**
+ * Kong Service Manager backend plugin
+ *
+ * @public
+ */
+declare const kongServiceManagerBackendPlugin: _backstage_backend_plugin_api.BackendFeature;
+
+declare class KongServiceManagerService {
+    #private;
+    static create(options: {
+        logger: LoggerService;
+        config: Config;
+    }): KongServiceManagerService;
+    private constructor();
+    private readInstances;
+    private getInstance;
+    private buildUrl;
+    private buildHeaders;
+    private kongFetch;
+    getServiceInfo(instanceName: string, serviceName: string): Promise<ServiceInfoResponse>;
+    getRoutes(instanceName: string, serviceName: string): Promise<RoutesResponse>;
+    getRouteById(instanceName: string, serviceName: string, routeId: string): Promise<RouteResponse>;
+    createRoute(instanceName: string, serviceName: string, route: CreateRoute): Promise<RouteResponse>;
+    editRoute(instanceName: string, serviceName: string, routeId: string, route: Partial<CreateRoute>): Promise<RouteResponse>;
+    removeRoute(instanceName: string, serviceName: string, routeId: string): Promise<void>;
+    getServiceAssociatedPlugins(instanceName: string, serviceName: string): Promise<AssociatedPluginsResponse[]>;
+    getAvailablePlugins(instanceName: string): Promise<AvailablePluginsResponse>;
+    getPluginFields(instanceName: string, pluginName: string): Promise<PluginFieldsResponse>;
+    addPluginToService(instanceName: string, serviceName: string, plugin: CreatePlugin): Promise<AssociatedPluginsResponse>;
+    editServicePlugin(instanceName: string, serviceName: string, pluginId: string, plugin: Partial<CreatePlugin>): Promise<AssociatedPluginsResponse>;
+    removeServicePlugin(instanceName: string, serviceName: string, pluginId: string): Promise<void>;
+    getRouteAssociatedPlugins(instanceName: string, routeId: string): Promise<AssociatedPluginsResponse[]>;
+    addPluginToRoute(instanceName: string, routeId: string, plugin: CreatePlugin): Promise<AssociatedPluginsResponse>;
+    editRoutePlugin(instanceName: string, routeId: string, pluginId: string, plugin: Partial<CreatePlugin>): Promise<AssociatedPluginsResponse>;
+    removeRoutePlugin(instanceName: string, routeId: string, pluginId: string): Promise<void>;
+}
+declare const kongServiceManagerServiceRef: _backstage_backend_plugin_api.ServiceRef<KongServiceManagerService, "plugin", "singleton">;
+
+export { KongServiceManagerService, kongServiceManagerBackendPlugin as default, kongServiceManagerServiceRef };

package/dist/plugin.cjs.js

@@ -0,0 +1,36 @@
+'use strict';
+
+var backendPluginApi = require('@backstage/backend-plugin-api');
+var router = require('./router.cjs.js');
+var KongServiceManagerService = require('./services/KongServiceManagerService.cjs.js');
+
+const kongServiceManagerBackendPlugin = backendPluginApi.createBackendPlugin({
+  pluginId: "kong-service-manager-backend",
+  register(env) {
+    env.registerInit({
+      deps: {
+        httpAuth: backendPluginApi.coreServices.httpAuth,
+        httpRouter: backendPluginApi.coreServices.httpRouter,
+        config: backendPluginApi.coreServices.rootConfig,
+        logger: backendPluginApi.coreServices.logger,
+        permissions: backendPluginApi.coreServices.permissions
+      },
+      async init({ httpAuth, httpRouter, config, logger, permissions }) {
+        logger.info("Initializing Kong Service Manager backend plugin...");
+        const kongService = KongServiceManagerService.KongServiceManagerService.create({ logger, config });
+        const router$1 = await router.createRouter({ httpAuth, permissions, kongService });
+        httpRouter.use(router$1);
+        httpRouter.addAuthPolicy({
+          path: "/health",
+          allow: "unauthenticated"
+        });
+        logger.info(
+          "Kong Service Manager backend plugin initialized successfully"
+        );
+      }
+    });
+  }
+});
+
+exports.kongServiceManagerBackendPlugin = kongServiceManagerBackendPlugin;
+//# sourceMappingURL=plugin.cjs.js.map

package/dist/plugin.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["import {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { createRouter } from './router';\nimport { KongServiceManagerService } from './services/KongServiceManagerService';\n\n/**\n * Kong Service Manager backend plugin\n *\n * @public\n */\nexport const kongServiceManagerBackendPlugin = createBackendPlugin({\n  pluginId: 'kong-service-manager-backend',\n  register(env) {\n    env.registerInit({\n      deps: {\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        permissions: coreServices.permissions,\n      },\n      async init({ httpAuth, httpRouter, config, logger, permissions }) {\n        logger.info('Initializing Kong Service Manager backend plugin...');\n\n        const kongService = KongServiceManagerService.create({ logger, config });\n\n        const router = await createRouter({ httpAuth, permissions, kongService });\n\n        httpRouter.use(router);\n        httpRouter.addAuthPolicy({\n          path: '/health',\n          allow: 'unauthenticated',\n        });\n\n        logger.info(\n          'Kong Service Manager backend plugin initialized successfully',\n        );\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","KongServiceManagerService","router","createRouter"],"mappings":";;;;;;AAYO,MAAM,kCAAkCA,oCAAA,CAAoB;AAAA,EACjE,QAAA,EAAU,8BAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,UAAUC,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,QAAQA,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,aAAaA,6BAAA,CAAa;AAAA,OAC5B;AAAA,MACA,MAAM,KAAK,EAAE,QAAA,EAAU,YAAY,MAAA,EAAQ,MAAA,EAAQ,aAAY,EAAG;AAChE,QAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAEjE,QAAA,MAAM,cAAcC,mDAAA,CAA0B,MAAA,CAAO,EAAE,MAAA,EAAQ,QAAQ,CAAA;AAEvE,QAAA,MAAMC,WAAS,MAAMC,mBAAA,CAAa,EAAE,QAAA,EAAU,WAAA,EAAa,aAAa,CAAA;AAExE,QAAA,UAAA,CAAW,IAAID,QAAM,CAAA;AACrB,QAAA,UAAA,CAAW,aAAA,CAAc;AAAA,UACvB,IAAA,EAAM,SAAA;AAAA,UACN,KAAA,EAAO;AAAA,SACR,CAAA;AAED,QAAA,MAAA,CAAO,IAAA;AAAA,UACL;AAAA,SACF;AAAA,MACF;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/router.cjs.js

@@ -0,0 +1,313 @@
+'use strict';
+
+var errors = require('@backstage/errors');
+var pluginPermissionCommon = require('@backstage/plugin-permission-common');
+var zod = require('zod');
+var express = require('express');
+var Router = require('express-promise-router');
+var backstagePluginKongServiceManagerCommon = require('@veecode-platform/backstage-plugin-kong-service-manager-common');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
+
+var express__default = /*#__PURE__*/_interopDefaultCompat(express);
+var Router__default = /*#__PURE__*/_interopDefaultCompat(Router);
+
+async function createRouter({
+  httpAuth,
+  permissions,
+  kongService
+}) {
+  const router = Router__default.default();
+  router.use(express__default.default.json());
+  async function authorize(req, permission) {
+    const credentials = await httpAuth.credentials(req);
+    const decision = await permissions.authorize(
+      [{ permission }],
+      { credentials }
+    );
+    if (decision[0].result !== pluginPermissionCommon.AuthorizeResult.ALLOW) {
+      throw new errors.NotAllowedError("Permission denied");
+    }
+  }
+  const instanceServiceParams = zod.z.object({
+    instance: zod.z.string(),
+    serviceName: zod.z.string()
+  });
+  const instanceServiceRouteParams = zod.z.object({
+    instance: zod.z.string(),
+    serviceName: zod.z.string(),
+    routeId: zod.z.string()
+  });
+  const instanceServicePluginParams = zod.z.object({
+    instance: zod.z.string(),
+    serviceName: zod.z.string(),
+    pluginId: zod.z.string()
+  });
+  const instanceRouteParams = zod.z.object({
+    instance: zod.z.string(),
+    routeId: zod.z.string()
+  });
+  const instanceRoutePluginParams = zod.z.object({
+    instance: zod.z.string(),
+    routeId: zod.z.string(),
+    pluginId: zod.z.string()
+  });
+  const createRouteBody = zod.z.object({
+    name: zod.z.string().optional(),
+    protocols: zod.z.array(zod.z.string()).optional(),
+    methods: zod.z.array(zod.z.string()).optional(),
+    hosts: zod.z.array(zod.z.string()).optional(),
+    paths: zod.z.array(zod.z.string()).optional(),
+    headers: zod.z.record(zod.z.array(zod.z.string())).optional(),
+    https_redirect_status_code: zod.z.number().optional(),
+    regex_priority: zod.z.number().optional(),
+    strip_path: zod.z.boolean().optional(),
+    path_handling: zod.z.string().optional(),
+    preserve_host: zod.z.boolean().optional(),
+    request_buffering: zod.z.boolean().optional(),
+    response_buffering: zod.z.boolean().optional(),
+    tags: zod.z.array(zod.z.string()).optional()
+  });
+  const createPluginBody = zod.z.object({
+    name: zod.z.string(),
+    config: zod.z.record(zod.z.unknown()).optional(),
+    enabled: zod.z.boolean().optional(),
+    protocols: zod.z.array(zod.z.string()).optional(),
+    tags: zod.z.array(zod.z.string()).optional()
+  });
+  const editPluginBody = zod.z.object({
+    name: zod.z.string().optional(),
+    config: zod.z.record(zod.z.unknown()).optional(),
+    enabled: zod.z.boolean().optional(),
+    protocols: zod.z.array(zod.z.string()).optional(),
+    tags: zod.z.array(zod.z.string()).optional()
+  });
+  router.get("/health", async (_req, res) => {
+    res.json({ status: "ok" });
+  });
+  router.get("/:instance/services/:serviceName", async (req, res) => {
+    await authorize(req, backstagePluginKongServiceManagerCommon.kongServiceReadPermission);
+    const parsed = instanceServiceParams.safeParse(req.params);
+    if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+    const result = await kongService.getServiceInfo(
+      parsed.data.instance,
+      parsed.data.serviceName
+    );
+    res.json(result);
+  });
+  router.get(
+    "/:instance/services/:serviceName/plugins/associated",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongPluginsReadPermission);
+      const parsed = instanceServiceParams.safeParse(req.params);
+      if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+      const result = await kongService.getServiceAssociatedPlugins(
+        parsed.data.instance,
+        parsed.data.serviceName
+      );
+      res.json(result);
+    }
+  );
+  router.get("/:instance/plugins", async (req, res) => {
+    await authorize(req, backstagePluginKongServiceManagerCommon.kongPluginsReadPermission);
+    const instance = zod.z.string().safeParse(req.params.instance);
+    if (!instance.success) throw new errors.InputError(instance.error.toString());
+    const result = await kongService.getAvailablePlugins(instance.data);
+    res.json(result);
+  });
+  router.get(
+    "/:instance/services/plugins/:pluginName/fields",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongPluginsReadPermission);
+      const parsed = zod.z.object({ instance: zod.z.string(), pluginName: zod.z.string() }).safeParse(req.params);
+      if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+      const result = await kongService.getPluginFields(
+        parsed.data.instance,
+        parsed.data.pluginName
+      );
+      res.json(result);
+    }
+  );
+  router.post(
+    "/:instance/services/:serviceName/plugins",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongApplyPluginServicePermission);
+      const params = instanceServiceParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      const body = createPluginBody.safeParse(req.body);
+      if (!body.success) throw new errors.InputError(body.error.toString());
+      const result = await kongService.addPluginToService(
+        params.data.instance,
+        params.data.serviceName,
+        body.data
+      );
+      res.status(201).json(result);
+    }
+  );
+  router.patch(
+    "/:instance/services/:serviceName/plugins/:pluginId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongUpdateServicePluginPermission);
+      const params = instanceServicePluginParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      const body = editPluginBody.safeParse(req.body);
+      if (!body.success) throw new errors.InputError(body.error.toString());
+      const result = await kongService.editServicePlugin(
+        params.data.instance,
+        params.data.serviceName,
+        params.data.pluginId,
+        body.data
+      );
+      res.json(result);
+    }
+  );
+  router.delete(
+    "/:instance/services/:serviceName/plugins/:pluginId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongDisableServicePluginPermission);
+      const params = instanceServicePluginParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      await kongService.removeServicePlugin(
+        params.data.instance,
+        params.data.serviceName,
+        params.data.pluginId
+      );
+      res.status(204).end();
+    }
+  );
+  router.get(
+    "/:instance/services/:serviceName/routes",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongRoutesReadPermission);
+      const parsed = instanceServiceParams.safeParse(req.params);
+      if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+      const result = await kongService.getRoutes(
+        parsed.data.instance,
+        parsed.data.serviceName
+      );
+      res.json(result);
+    }
+  );
+  router.get(
+    "/:instance/services/:serviceName/routes/:routeId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongRoutesReadPermission);
+      const parsed = instanceServiceRouteParams.safeParse(req.params);
+      if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+      const result = await kongService.getRouteById(
+        parsed.data.instance,
+        parsed.data.serviceName,
+        parsed.data.routeId
+      );
+      res.json(result);
+    }
+  );
+  router.post(
+    "/:instance/services/:serviceName/routes",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongRouteCreatePermission);
+      const params = instanceServiceParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      const body = createRouteBody.safeParse(req.body);
+      if (!body.success) throw new errors.InputError(body.error.toString());
+      const result = await kongService.createRoute(
+        params.data.instance,
+        params.data.serviceName,
+        body.data
+      );
+      res.status(201).json(result);
+    }
+  );
+  router.patch(
+    "/:instance/services/:serviceName/routes/:routeId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongRouteUpdatePermission);
+      const params = instanceServiceRouteParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      const body = createRouteBody.partial().safeParse(req.body);
+      if (!body.success) throw new errors.InputError(body.error.toString());
+      const result = await kongService.editRoute(
+        params.data.instance,
+        params.data.serviceName,
+        params.data.routeId,
+        body.data
+      );
+      res.json(result);
+    }
+  );
+  router.delete(
+    "/:instance/services/:serviceName/routes/:routeId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongRouteDeletePermission);
+      const params = instanceServiceRouteParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      await kongService.removeRoute(
+        params.data.instance,
+        params.data.serviceName,
+        params.data.routeId
+      );
+      res.status(204).end();
+    }
+  );
+  router.get(
+    "/:instance/routes/:routeId/plugins/associated",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongPluginsReadPermission);
+      const parsed = instanceRouteParams.safeParse(req.params);
+      if (!parsed.success) throw new errors.InputError(parsed.error.toString());
+      const result = await kongService.getRouteAssociatedPlugins(
+        parsed.data.instance,
+        parsed.data.routeId
+      );
+      res.json(result);
+    }
+  );
+  router.post("/:instance/routes/:routeId/plugins", async (req, res) => {
+    await authorize(req, backstagePluginKongServiceManagerCommon.kongApplyPluginRoutePermission);
+    const params = instanceRouteParams.safeParse(req.params);
+    if (!params.success) throw new errors.InputError(params.error.toString());
+    const body = createPluginBody.safeParse(req.body);
+    if (!body.success) throw new errors.InputError(body.error.toString());
+    const result = await kongService.addPluginToRoute(
+      params.data.instance,
+      params.data.routeId,
+      body.data
+    );
+    res.status(201).json(result);
+  });
+  router.patch(
+    "/:instance/routes/:routeId/plugins/:pluginId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongUpdateRoutePluginPermission);
+      const params = instanceRoutePluginParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      const body = editPluginBody.safeParse(req.body);
+      if (!body.success) throw new errors.InputError(body.error.toString());
+      const result = await kongService.editRoutePlugin(
+        params.data.instance,
+        params.data.routeId,
+        params.data.pluginId,
+        body.data
+      );
+      res.json(result);
+    }
+  );
+  router.delete(
+    "/:instance/routes/:routeId/plugins/:pluginId",
+    async (req, res) => {
+      await authorize(req, backstagePluginKongServiceManagerCommon.kongDisableRoutePluginPermission);
+      const params = instanceRoutePluginParams.safeParse(req.params);
+      if (!params.success) throw new errors.InputError(params.error.toString());
+      await kongService.removeRoutePlugin(
+        params.data.instance,
+        params.data.routeId,
+        params.data.pluginId
+      );
+      res.status(204).end();
+    }
+  );
+  return router;
+}
+
+exports.createRouter = createRouter;
+//# sourceMappingURL=router.cjs.js.map

package/dist/router.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.cjs.js","sources":["../src/router.ts"],"sourcesContent":["import { HttpAuthService, PermissionsService } from '@backstage/backend-plugin-api';\nimport { InputError, NotAllowedError } from '@backstage/errors';\nimport { AuthorizeResult, type BasicPermission } from '@backstage/plugin-permission-common';\nimport { z } from 'zod';\nimport express from 'express';\nimport Router from 'express-promise-router';\nimport type { CreateRoute } from '@veecode-platform/backstage-plugin-kong-service-manager-common';\nimport {\n  kongServiceReadPermission,\n  kongPluginsReadPermission,\n  kongRoutesReadPermission,\n  kongApplyPluginServicePermission,\n  kongUpdateServicePluginPermission,\n  kongDisableServicePluginPermission,\n  kongRouteCreatePermission,\n  kongRouteUpdatePermission,\n  kongRouteDeletePermission,\n  kongApplyPluginRoutePermission,\n  kongUpdateRoutePluginPermission,\n  kongDisableRoutePluginPermission,\n} from '@veecode-platform/backstage-plugin-kong-service-manager-common';\nimport { KongServiceManagerService } from './services/KongServiceManagerService';\n\nexport async function createRouter({\n  httpAuth,\n  permissions,\n  kongService,\n}: {\n  httpAuth: HttpAuthService;\n  permissions: PermissionsService;\n  kongService: KongServiceManagerService;\n}): Promise<express.Router> {\n  const router = Router();\n  router.use(express.json());\n\n  async function authorize(req: express.Request, permission: BasicPermission) {\n    const credentials = await httpAuth.credentials(req);\n    const decision = await permissions.authorize(\n      [{ permission }],\n      { credentials },\n    );\n    if (decision[0].result !== AuthorizeResult.ALLOW) {\n      throw new NotAllowedError('Permission denied');\n    }\n  }\n\n  // --- Validation schemas ---\n\n  const instanceServiceParams = z.object({\n    instance: z.string(),\n    serviceName: z.string(),\n  });\n\n  const instanceServiceRouteParams = z.object({\n    instance: z.string(),\n    serviceName: z.string(),\n    routeId: z.string(),\n  });\n\n  const instanceServicePluginParams = z.object({\n    instance: z.string(),\n    serviceName: z.string(),\n    pluginId: z.string(),\n  });\n\n  const instanceRouteParams = z.object({\n    instance: z.string(),\n    routeId: z.string(),\n  });\n\n  const instanceRoutePluginParams = z.object({\n    instance: z.string(),\n    routeId: z.string(),\n    pluginId: z.string(),\n  });\n\n  const createRouteBody = z.object({\n    name: z.string().optional(),\n    protocols: z.array(z.string()).optional(),\n    methods: z.array(z.string()).optional(),\n    hosts: z.array(z.string()).optional(),\n    paths: z.array(z.string()).optional(),\n    headers: z.record(z.array(z.string())).optional(),\n    https_redirect_status_code: z.number().optional(),\n    regex_priority: z.number().optional(),\n    strip_path: z.boolean().optional(),\n    path_handling: z.string().optional(),\n    preserve_host: z.boolean().optional(),\n    request_buffering: z.boolean().optional(),\n    response_buffering: z.boolean().optional(),\n    tags: z.array(z.string()).optional(),\n  });\n\n  const createPluginBody = z.object({\n    name: z.string(),\n    config: z.record(z.unknown()).optional(),\n    enabled: z.boolean().optional(),\n    protocols: z.array(z.string()).optional(),\n    tags: z.array(z.string()).optional(),\n  });\n\n  const editPluginBody = z.object({\n    name: z.string().optional(),\n    config: z.record(z.unknown()).optional(),\n    enabled: z.boolean().optional(),\n    protocols: z.array(z.string()).optional(),\n    tags: z.array(z.string()).optional(),\n  });\n\n  // --- Health check ---\n\n  router.get('/health', async (_req, res) => {\n    res.json({ status: 'ok' });\n  });\n\n  // --- Service routes (Phase 1) ---\n\n  // GET /:instance/services/:serviceName\n  router.get('/:instance/services/:serviceName', async (req, res) => {\n    await authorize(req, kongServiceReadPermission);\n\n    const parsed = instanceServiceParams.safeParse(req.params);\n    if (!parsed.success) throw new InputError(parsed.error.toString());\n\n    const result = await kongService.getServiceInfo(\n      parsed.data.instance,\n      parsed.data.serviceName,\n    );\n    res.json(result);\n  });\n\n  // GET /:instance/services/:serviceName/plugins/associated\n  router.get(\n    '/:instance/services/:serviceName/plugins/associated',\n    async (req, res) => {\n      await authorize(req, kongPluginsReadPermission);\n\n      const parsed = instanceServiceParams.safeParse(req.params);\n      if (!parsed.success) throw new InputError(parsed.error.toString());\n\n      const result = await kongService.getServiceAssociatedPlugins(\n        parsed.data.instance,\n        parsed.data.serviceName,\n      );\n      res.json(result);\n    },\n  );\n\n  // GET /:instance/plugins\n  router.get('/:instance/plugins', async (req, res) => {\n    await authorize(req, kongPluginsReadPermission);\n\n    const instance = z.string().safeParse(req.params.instance);\n    if (!instance.success) throw new InputError(instance.error.toString());\n\n    const result = await kongService.getAvailablePlugins(instance.data);\n    res.json(result);\n  });\n\n  // --- Plugin schema introspection (Phase 2) ---\n\n  // GET /:instance/services/plugins/:pluginName/fields\n  router.get(\n    '/:instance/services/plugins/:pluginName/fields',\n    async (req, res) => {\n      await authorize(req, kongPluginsReadPermission);\n\n      const parsed = z\n        .object({ instance: z.string(), pluginName: z.string() })\n        .safeParse(req.params);\n      if (!parsed.success) throw new InputError(parsed.error.toString());\n\n      const result = await kongService.getPluginFields(\n        parsed.data.instance,\n        parsed.data.pluginName,\n      );\n      res.json(result);\n    },\n  );\n\n  // --- Service plugin CRUD (Phase 2) ---\n\n  // POST /:instance/services/:serviceName/plugins\n  router.post(\n    '/:instance/services/:serviceName/plugins',\n    async (req, res) => {\n      await authorize(req, kongApplyPluginServicePermission);\n\n      const params = instanceServiceParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      const body = createPluginBody.safeParse(req.body);\n      if (!body.success) throw new InputError(body.error.toString());\n\n      const result = await kongService.addPluginToService(\n        params.data.instance,\n        params.data.serviceName,\n        body.data,\n      );\n      res.status(201).json(result);\n    },\n  );\n\n  // PATCH /:instance/services/:serviceName/plugins/:pluginId\n  router.patch(\n    '/:instance/services/:serviceName/plugins/:pluginId',\n    async (req, res) => {\n      await authorize(req, kongUpdateServicePluginPermission);\n\n      const params = instanceServicePluginParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      const body = editPluginBody.safeParse(req.body);\n      if (!body.success) throw new InputError(body.error.toString());\n\n      const result = await kongService.editServicePlugin(\n        params.data.instance,\n        params.data.serviceName,\n        params.data.pluginId,\n        body.data,\n      );\n      res.json(result);\n    },\n  );\n\n  // DELETE /:instance/services/:serviceName/plugins/:pluginId\n  router.delete(\n    '/:instance/services/:serviceName/plugins/:pluginId',\n    async (req, res) => {\n      await authorize(req, kongDisableServicePluginPermission);\n\n      const params = instanceServicePluginParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      await kongService.removeServicePlugin(\n        params.data.instance,\n        params.data.serviceName,\n        params.data.pluginId,\n      );\n      res.status(204).end();\n    },\n  );\n\n  // --- Route CRUD (Phase 3) ---\n\n  // GET /:instance/services/:serviceName/routes\n  router.get(\n    '/:instance/services/:serviceName/routes',\n    async (req, res) => {\n      await authorize(req, kongRoutesReadPermission);\n\n      const parsed = instanceServiceParams.safeParse(req.params);\n      if (!parsed.success) throw new InputError(parsed.error.toString());\n\n      const result = await kongService.getRoutes(\n        parsed.data.instance,\n        parsed.data.serviceName,\n      );\n      res.json(result);\n    },\n  );\n\n  // GET /:instance/services/:serviceName/routes/:routeId\n  router.get(\n    '/:instance/services/:serviceName/routes/:routeId',\n    async (req, res) => {\n      await authorize(req, kongRoutesReadPermission);\n\n      const parsed = instanceServiceRouteParams.safeParse(req.params);\n      if (!parsed.success) throw new InputError(parsed.error.toString());\n\n      const result = await kongService.getRouteById(\n        parsed.data.instance,\n        parsed.data.serviceName,\n        parsed.data.routeId,\n      );\n      res.json(result);\n    },\n  );\n\n  // POST /:instance/services/:serviceName/routes\n  router.post(\n    '/:instance/services/:serviceName/routes',\n    async (req, res) => {\n      await authorize(req, kongRouteCreatePermission);\n\n      const params = instanceServiceParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      const body = createRouteBody.safeParse(req.body);\n      if (!body.success) throw new InputError(body.error.toString());\n\n      const result = await kongService.createRoute(\n        params.data.instance,\n        params.data.serviceName,\n        body.data as CreateRoute,\n      );\n      res.status(201).json(result);\n    },\n  );\n\n  // PATCH /:instance/services/:serviceName/routes/:routeId\n  router.patch(\n    '/:instance/services/:serviceName/routes/:routeId',\n    async (req, res) => {\n      await authorize(req, kongRouteUpdatePermission);\n\n      const params = instanceServiceRouteParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      const body = createRouteBody.partial().safeParse(req.body);\n      if (!body.success) throw new InputError(body.error.toString());\n\n      const result = await kongService.editRoute(\n        params.data.instance,\n        params.data.serviceName,\n        params.data.routeId,\n        body.data as Partial<CreateRoute>,\n      );\n      res.json(result);\n    },\n  );\n\n  // DELETE /:instance/services/:serviceName/routes/:routeId\n  router.delete(\n    '/:instance/services/:serviceName/routes/:routeId',\n    async (req, res) => {\n      await authorize(req, kongRouteDeletePermission);\n\n      const params = instanceServiceRouteParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      await kongService.removeRoute(\n        params.data.instance,\n        params.data.serviceName,\n        params.data.routeId,\n      );\n      res.status(204).end();\n    },\n  );\n\n  // --- Route plugin CRUD (Phase 4) ---\n\n  // GET /:instance/routes/:routeId/plugins/associated\n  router.get(\n    '/:instance/routes/:routeId/plugins/associated',\n    async (req, res) => {\n      await authorize(req, kongPluginsReadPermission);\n\n      const parsed = instanceRouteParams.safeParse(req.params);\n      if (!parsed.success) throw new InputError(parsed.error.toString());\n\n      const result = await kongService.getRouteAssociatedPlugins(\n        parsed.data.instance,\n        parsed.data.routeId,\n      );\n      res.json(result);\n    },\n  );\n\n  // POST /:instance/routes/:routeId/plugins\n  router.post('/:instance/routes/:routeId/plugins', async (req, res) => {\n    await authorize(req, kongApplyPluginRoutePermission);\n\n    const params = instanceRouteParams.safeParse(req.params);\n    if (!params.success) throw new InputError(params.error.toString());\n\n    const body = createPluginBody.safeParse(req.body);\n    if (!body.success) throw new InputError(body.error.toString());\n\n    const result = await kongService.addPluginToRoute(\n      params.data.instance,\n      params.data.routeId,\n      body.data,\n    );\n    res.status(201).json(result);\n  });\n\n  // PATCH /:instance/routes/:routeId/plugins/:pluginId\n  router.patch(\n    '/:instance/routes/:routeId/plugins/:pluginId',\n    async (req, res) => {\n      await authorize(req, kongUpdateRoutePluginPermission);\n\n      const params = instanceRoutePluginParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      const body = editPluginBody.safeParse(req.body);\n      if (!body.success) throw new InputError(body.error.toString());\n\n      const result = await kongService.editRoutePlugin(\n        params.data.instance,\n        params.data.routeId,\n        params.data.pluginId,\n        body.data,\n      );\n      res.json(result);\n    },\n  );\n\n  // DELETE /:instance/routes/:routeId/plugins/:pluginId\n  router.delete(\n    '/:instance/routes/:routeId/plugins/:pluginId',\n    async (req, res) => {\n      await authorize(req, kongDisableRoutePluginPermission);\n\n      const params = instanceRoutePluginParams.safeParse(req.params);\n      if (!params.success) throw new InputError(params.error.toString());\n\n      await kongService.removeRoutePlugin(\n        params.data.instance,\n        params.data.routeId,\n        params.data.pluginId,\n      );\n      res.status(204).end();\n    },\n  );\n\n  return router;\n}\n"],"names":["Router","express","AuthorizeResult","NotAllowedError","z","kongServiceReadPermission","InputError","kongPluginsReadPermission","kongApplyPluginServicePermission","kongUpdateServicePluginPermission","kongDisableServicePluginPermission","kongRoutesReadPermission","kongRouteCreatePermission","kongRouteUpdatePermission","kongRouteDeletePermission","kongApplyPluginRoutePermission","kongUpdateRoutePluginPermission","kongDisableRoutePluginPermission"],"mappings":";;;;;;;;;;;;;;AAuBA,eAAsB,YAAA,CAAa;AAAA,EACjC,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA,EAI4B;AAC1B,EAAA,MAAM,SAASA,uBAAA,EAAO;AACtB,EAAA,MAAA,CAAO,GAAA,CAAIC,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAEzB,EAAA,eAAe,SAAA,CAAU,KAAsB,UAAA,EAA6B;AAC1E,IAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,IAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,SAAA;AAAA,MACjC,CAAC,EAAE,UAAA,EAAY,CAAA;AAAA,MACf,EAAE,WAAA;AAAY,KAChB;AACA,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,CAAE,MAAA,KAAWC,uCAAgB,KAAA,EAAO;AAChD,MAAA,MAAM,IAAIC,uBAAgB,mBAAmB,CAAA;AAAA,IAC/C;AAAA,EACF;AAIA,EAAA,MAAM,qBAAA,GAAwBC,MAAE,MAAA,CAAO;AAAA,IACrC,QAAA,EAAUA,MAAE,MAAA,EAAO;AAAA,IACnB,WAAA,EAAaA,MAAE,MAAA;AAAO,GACvB,CAAA;AAED,EAAA,MAAM,0BAAA,GAA6BA,MAAE,MAAA,CAAO;AAAA,IAC1C,QAAA,EAAUA,MAAE,MAAA,EAAO;AAAA,IACnB,WAAA,EAAaA,MAAE,MAAA,EAAO;AAAA,IACtB,OAAA,EAASA,MAAE,MAAA;AAAO,GACnB,CAAA;AAED,EAAA,MAAM,2BAAA,GAA8BA,MAAE,MAAA,CAAO;AAAA,IAC3C,QAAA,EAAUA,MAAE,MAAA,EAAO;AAAA,IACnB,WAAA,EAAaA,MAAE,MAAA,EAAO;AAAA,IACtB,QAAA,EAAUA,MAAE,MAAA;AAAO,GACpB,CAAA;AAED,EAAA,MAAM,mBAAA,GAAsBA,MAAE,MAAA,CAAO;AAAA,IACnC,QAAA,EAAUA,MAAE,MAAA,EAAO;AAAA,IACnB,OAAA,EAASA,MAAE,MAAA;AAAO,GACnB,CAAA;AAED,EAAA,MAAM,yBAAA,GAA4BA,MAAE,MAAA,CAAO;AAAA,IACzC,QAAA,EAAUA,MAAE,MAAA,EAAO;AAAA,IACnB,OAAA,EAASA,MAAE,MAAA,EAAO;AAAA,IAClB,QAAA,EAAUA,MAAE,MAAA;AAAO,GACpB,CAAA;AAED,EAAA,MAAM,eAAA,GAAkBA,MAAE,MAAA,CAAO;AAAA,IAC/B,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,WAAWA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACxC,SAASA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACtC,OAAOA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACpC,OAAOA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACpC,OAAA,EAASA,KAAA,CAAE,MAAA,CAAOA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAChD,0BAAA,EAA4BA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAChD,cAAA,EAAgBA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACpC,UAAA,EAAYA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IACjC,aAAA,EAAeA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACnC,aAAA,EAAeA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IACpC,iBAAA,EAAmBA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IACxC,kBAAA,EAAoBA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IACzC,MAAMA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACpC,CAAA;AAED,EAAA,MAAM,gBAAA,GAAmBA,MAAE,MAAA,CAAO;AAAA,IAChC,IAAA,EAAMA,MAAE,MAAA,EAAO;AAAA,IACf,QAAQA,KAAA,CAAE,MAAA,CAAOA,MAAE,OAAA,EAAS,EAAE,QAAA,EAAS;AAAA,IACvC,OAAA,EAASA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IAC9B,WAAWA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACxC,MAAMA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACpC,CAAA;AAED,EAAA,MAAM,cAAA,GAAiBA,MAAE,MAAA,CAAO;AAAA,IAC9B,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,QAAQA,KAAA,CAAE,MAAA,CAAOA,MAAE,OAAA,EAAS,EAAE,QAAA,EAAS;AAAA,IACvC,OAAA,EAASA,KAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IAC9B,WAAWA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACxC,MAAMA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACpC,CAAA;AAID,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,OAAO,IAAA,EAAM,GAAA,KAAQ;AACzC,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAC,CAAA;AAKD,EAAA,MAAA,CAAO,GAAA,CAAI,kCAAA,EAAoC,OAAO,GAAA,EAAK,GAAA,KAAQ;AACjE,IAAA,MAAM,SAAA,CAAU,KAAKC,iEAAyB,CAAA;AAE9C,IAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACzD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIC,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,IAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,cAAA;AAAA,MAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,MACZ,OAAO,IAAA,CAAK;AAAA,KACd;AACA,IAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,EACjB,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,qDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKC,iEAAyB,CAAA;AAE9C,MAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACzD,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAID,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,2BAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,GAAA,CAAI,oBAAA,EAAsB,OAAO,GAAA,EAAK,GAAA,KAAQ;AACnD,IAAA,MAAM,SAAA,CAAU,KAAKC,iEAAyB,CAAA;AAE9C,IAAA,MAAM,WAAWH,KAAA,CAAE,MAAA,GAAS,SAAA,CAAU,GAAA,CAAI,OAAO,QAAQ,CAAA;AACzD,IAAA,IAAI,CAAC,SAAS,OAAA,EAAS,MAAM,IAAIE,iBAAA,CAAW,QAAA,CAAS,KAAA,CAAM,QAAA,EAAU,CAAA;AAErE,IAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,mBAAA,CAAoB,SAAS,IAAI,CAAA;AAClE,IAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,EACjB,CAAC,CAAA;AAKD,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,gDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKC,iEAAyB,CAAA;AAE9C,MAAA,MAAM,SAASH,KAAA,CACZ,MAAA,CAAO,EAAE,QAAA,EAAUA,MAAE,MAAA,EAAO,EAAG,UAAA,EAAYA,KAAA,CAAE,QAAO,EAAG,CAAA,CACvD,SAAA,CAAU,IAAI,MAAM,CAAA;AACvB,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIE,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,eAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAKA,EAAA,MAAA,CAAO,IAAA;AAAA,IACL,0CAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKE,wEAAgC,CAAA;AAErD,MAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACzD,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIF,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAChD,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,kBAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,IAAA,CAAK;AAAA,OACP;AACA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAAA,IAC7B;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,KAAA;AAAA,IACL,oDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKG,yEAAiC,CAAA;AAEtD,MAAA,MAAM,MAAA,GAAS,2BAAA,CAA4B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC/D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIH,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,IAAA,GAAO,cAAA,CAAe,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC9C,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,iBAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,IAAA,CAAK;AAAA,OACP;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,MAAA;AAAA,IACL,oDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKI,0EAAkC,CAAA;AAEvD,MAAA,MAAM,MAAA,GAAS,2BAAA,CAA4B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC/D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIJ,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,WAAA,CAAY,mBAAA;AAAA,QAChB,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AAAA,IACtB;AAAA,GACF;AAKA,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,yCAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKK,gEAAwB,CAAA;AAE7C,MAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACzD,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIL,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,SAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,kDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKK,gEAAwB,CAAA;AAE7C,MAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC9D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIL,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,YAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,IAAA;AAAA,IACL,yCAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKM,iEAAyB,CAAA;AAE9C,MAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACzD,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIN,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC/C,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,WAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,IAAA,CAAK;AAAA,OACP;AACA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAAA,IAC7B;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,KAAA;AAAA,IACL,kDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKO,iEAAyB,CAAA;AAE9C,MAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC9D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIP,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,OAAO,eAAA,CAAgB,OAAA,EAAQ,CAAE,SAAA,CAAU,IAAI,IAAI,CAAA;AACzD,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,SAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,OAAO,IAAA,CAAK,OAAA;AAAA,QACZ,IAAA,CAAK;AAAA,OACP;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,MAAA;AAAA,IACL,kDAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKQ,iEAAyB,CAAA;AAE9C,MAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC9D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIR,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,WAAA,CAAY,WAAA;AAAA,QAChB,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,WAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AAAA,IACtB;AAAA,GACF;AAKA,EAAA,MAAA,CAAO,GAAA;AAAA,IACL,+CAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKC,iEAAyB,CAAA;AAE9C,MAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACvD,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAID,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,yBAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,IAAA,CAAK,oCAAA,EAAsC,OAAO,GAAA,EAAK,GAAA,KAAQ;AACpE,IAAA,MAAM,SAAA,CAAU,KAAKS,sEAA8B,CAAA;AAEnD,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACvD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIT,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAChD,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,IAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,gBAAA;AAAA,MAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,MACZ,OAAO,IAAA,CAAK,OAAA;AAAA,MACZ,IAAA,CAAK;AAAA,KACP;AACA,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,MAAM,CAAA;AAAA,EAC7B,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,KAAA;AAAA,IACL,8CAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKU,uEAA+B,CAAA;AAEpD,MAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC7D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIV,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,IAAA,GAAO,cAAA,CAAe,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC9C,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS,MAAM,IAAIA,iBAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAE7D,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,eAAA;AAAA,QAC/B,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,OAAA;AAAA,QACZ,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,IAAA,CAAK;AAAA,OACP;AACA,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB;AAAA,GACF;AAGA,EAAA,MAAA,CAAO,MAAA;AAAA,IACL,8CAAA;AAAA,IACA,OAAO,KAAK,GAAA,KAAQ;AAClB,MAAA,MAAM,SAAA,CAAU,KAAKW,wEAAgC,CAAA;AAErD,MAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AAC7D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS,MAAM,IAAIX,iBAAA,CAAW,MAAA,CAAO,KAAA,CAAM,QAAA,EAAU,CAAA;AAEjE,MAAA,MAAM,WAAA,CAAY,iBAAA;AAAA,QAChB,OAAO,IAAA,CAAK,QAAA;AAAA,QACZ,OAAO,IAAA,CAAK,OAAA;AAAA,QACZ,OAAO,IAAA,CAAK;AAAA,OACd;AACA,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AAAA,IACtB;AAAA,GACF;AAEA,EAAA,OAAO,MAAA;AACT;;;;"}