@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/config/services/app-configuration.backend.service.js

@@ -0,0 +1,494 @@
+/**
+ * Application Configuration Service
+ *
+ * Service for managing application-level configuration
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { injectable, inject } from 'inversify';
+import { APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS, AppConfiguration_Schema } from '../../config/models/app-config.backend.schemas.js';
+import { AppConfigurationLoaderService } from './app-configuration-loader.backend.service.js';
+import { applyBackendAuthoredConfig, inspectAppConfigurationBoundaryMutations, } from '../../config/models/app-config.backend-authored.definitions.js';
+import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
+import { LoggerService } from '../../monitoring/logger/services/logger.service.js';
+import { ErrorCustomMessageReference, ErrorType } from '@wildo-ai/saas-models';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+/**
+ * Application Configuration Service
+ *
+ * Manages complete application configuration. After T5, the loading chain is:
+ *   1. Env vars → database addresses, platform URLs
+ *   2. Minimal pre-override skeleton → only the structural placeholders the
+ *      backend must provide before backendConfig is merged
+ *   3. Apps-manager fetch → reduced managed metadata + JWT public keys + appSlug
+ *   4. App-authored backendConfig → merged onto the runtime/bootstrap seed
+ *
+ * This service uses the loader service for steps 1-3, then provides
+ * cached, type-safe access to all configuration sections.
+ */
+let AppConfigurationService = class AppConfigurationService {
+    logger;
+    errorBuilder;
+    loaderService;
+    logDebug;
+    _config = null;
+    _preOverrideConfig = null;
+    _secrets = null;
+    _applicationId = null;
+    _applicationEnv = null;
+    _serviceName = null;
+    _appSlug = null;
+    constructor(logger, errorBuilder, loaderService) {
+        this.logger = logger;
+        this.errorBuilder = errorBuilder;
+        this.loaderService = loaderService;
+        this.logDebug = this.logger.debugByType('AppConfigurationService');
+        this.logger.setDebugTypeLogging('AppConfigurationService', false);
+    }
+    /**
+     * Initialize the configuration service
+     */
+    async initialize() {
+        if (!this._config || !this._secrets) {
+            this.logDebug('Initializing application configuration...');
+            const { appConfig, appSecrets, applicationId, applicationEnvConfig, serviceName, appSlug } = await this.loaderService.initialize();
+            this._preOverrideConfig = appConfig;
+            this._secrets = appSecrets;
+            this._applicationId = applicationId;
+            this._applicationEnv = applicationEnvConfig.APPLICATION_ENV;
+            this._serviceName = serviceName;
+            this._appSlug = appSlug;
+            this.logDebug('Application configuration initialized successfully', { appSlug });
+        }
+    }
+    /**
+     * Hydrate the service from an already-resolved full configuration object.
+     *
+     * Platform startup paths use this when configuration was assembled by another
+     * runtime-specific service. Callers must make the ownership decision explicit:
+     * either provide a `boundaryBaseConfig` to run the Phase 4 mutation checks, or
+     * set `skipBoundaryInspection` when hydrating a platform-owned config that does
+     * not go through the tenant backendConfig authoring seam.
+     */
+    hydrateResolvedConfiguration(options) {
+        const resolvedAppSlug = options.appSlug.trim();
+        if (!resolvedAppSlug) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    message: 'Resolved application configuration requires a non-empty appSlug',
+                    serviceName: options.serviceName,
+                    applicationId: options.applicationId,
+                },
+            });
+        }
+        if (options.boundaryBaseConfig && options.skipBoundaryInspection) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    message: 'hydrateResolvedConfiguration cannot accept both boundaryBaseConfig and skipBoundaryInspection. ' +
+                        'Choose one ownership mode explicitly.',
+                    serviceName: options.serviceName,
+                    applicationId: options.applicationId,
+                },
+            });
+        }
+        if (!options.boundaryBaseConfig && !options.skipBoundaryInspection) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    message: 'hydrateResolvedConfiguration requires either boundaryBaseConfig for Phase 4 ownership checks ' +
+                        'or skipBoundaryInspection for platform-owned hydrated configs.',
+                    serviceName: options.serviceName,
+                    applicationId: options.applicationId,
+                },
+            });
+        }
+        if (options.boundaryBaseConfig) {
+            const boundaryInspection = inspectAppConfigurationBoundaryMutations(options.boundaryBaseConfig, options.config);
+            if (boundaryInspection.errors.length > 0) {
+                throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                    customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                    context: {
+                        message: `Hydrated resolved config attempted to cross platform/runtime-managed boundaries: ${boundaryInspection.errors.join(' ')}`,
+                        serviceName: options.serviceName,
+                        applicationId: options.applicationId,
+                    },
+                });
+            }
+            if ((options.emitWarnings ?? true) && boundaryInspection.warnings.length > 0) {
+                this.logger.warn(`[Config] hydrated resolved config touched migration-seam runtime fields. ${boundaryInspection.warnings.join(' ')}`);
+            }
+        }
+        this._secrets = options.secrets;
+        this._applicationId = options.applicationId;
+        this._applicationEnv = options.applicationEnv;
+        this._serviceName = options.serviceName;
+        this._appSlug = resolvedAppSlug;
+        this._preOverrideConfig = null;
+        this.applyResolvedConfig(options.config, {
+            reason: 'hydrated',
+            emitWarnings: options.emitWarnings ?? true,
+        });
+    }
+    /**
+     * W3.1: Get auth policy for a specific user type.
+     * Returns the complete per-user-type auth policy, or null if the user type doesn't exist in config.
+     */
+    getUserTypeAuthPolicy(userType) {
+        const appConfig = this._config;
+        if (!appConfig?.userTypes)
+            return null;
+        const typeDef = appConfig.userTypes[userType];
+        return typeDef?.auth ?? null;
+    }
+    /**
+     * Resolve a specific frontend-service user-management entry.
+     * Used when runtime flows must enforce surface-level auth/register policy
+     * for a known frontend service + user-type combination.
+     */
+    getFrontendServiceUserManagementEntry(frontendServiceName, userType) {
+        const appConfig = this._config;
+        if (!appConfig?.frontendServices)
+            return null;
+        return appConfig.frontendServices[frontendServiceName]?.usersManagement?.[userType] ?? null;
+    }
+    /**
+     * Check whether a frontend service identity is declared in app-owned config.
+     * This is the authoritative allow-list used for runtime/public frontend identity.
+     */
+    hasFrontendService(frontendServiceName) {
+        const appConfig = this._config;
+        if (!appConfig?.frontendServices)
+            return false;
+        return !!appConfig.frontendServices[frontendServiceName];
+    }
+    /**
+     * Resolve user type from the active frontend service identity.
+     * Reads `frontendServices[frontendServiceName].usersManagement` and returns
+     * the default entry, or the first entry when no explicit default exists.
+     */
+    resolveUserTypeFromFrontendServiceName(frontendServiceName) {
+        const appConfig = this._config;
+        if (!appConfig?.frontendServices)
+            return null;
+        const frontendServiceConfig = appConfig.frontendServices[frontendServiceName];
+        if (!frontendServiceConfig?.usersManagement)
+            return null;
+        const entries = Object.entries(frontendServiceConfig.usersManagement);
+        const defaultEntry = entries.find(([, v]) => v.isDefault);
+        const firstEntry = entries[0];
+        return (defaultEntry ?? firstEntry)?.[0] ?? null;
+    }
+    /**
+     * Reverse lookup: given a user type, find the frontend service where that user type
+     * has `isDefault: true` in usersManagement. Falls back to any app type that
+     * references the user type (with `auth: true`) if no isDefault match exists.
+     *
+     * This is the mirror of `resolveUserTypeFromFrontendServiceName()`:
+     *   frontendServiceName → userType (forward)
+     *   userType → frontendServiceName (reverse)
+     */
+    resolveFrontendServiceNameFromUserType(userType) {
+        const appConfig = this._config;
+        if (!appConfig?.frontendServices)
+            return null;
+        let fallback = null;
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(appConfig.frontendServices)) {
+            const entry = frontendServiceConfig.usersManagement[userType];
+            if (!entry)
+                continue;
+            if (entry.isDefault)
+                return frontendServiceName;
+            if (entry.auth && !fallback)
+                fallback = frontendServiceName;
+        }
+        return fallback;
+    }
+    /**
+     * Find the default frontend service — the first frontend service that has any
+     * user type entry with `isDefault: true`. Used as a last-resort fallback
+     * when no specific user type context is available (e.g., SAML errors
+     * before user identification).
+     */
+    resolveDefaultFrontendServiceName() {
+        const appConfig = this._config;
+        if (!appConfig?.frontendServices)
+            return null;
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(appConfig.frontendServices)) {
+            const hasDefault = Object.values(frontendServiceConfig.usersManagement).some(v => v.isDefault);
+            if (hasDefault)
+                return frontendServiceName;
+        }
+        const firstFrontendServiceName = Object.keys(appConfig.frontendServices)[0];
+        return firstFrontendServiceName ?? null;
+    }
+    validateEntityIdentityConfig(config) {
+        const { userTypes, frontendServices, organizationTypes } = config;
+        const userTypeKeys = new Set(Object.keys(userTypes));
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(frontendServices)) {
+            for (const userType of Object.keys(frontendServiceConfig.usersManagement)) {
+                if (!userTypeKeys.has(userType)) {
+                    throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                        context: {
+                            message: `frontendServices.${frontendServiceName}.usersManagement references unknown userType "${userType}". ` +
+                                `userTypes must define: ${[...userTypeKeys].join(', ')}`,
+                        },
+                    });
+                }
+            }
+        }
+        if (organizationTypes) {
+            const orgTypeKeys = new Set(Object.keys(organizationTypes));
+            for (const [, orgConfig] of Object.entries(organizationTypes)) {
+                for (const userType of orgConfig.userTypes) {
+                    if (!userTypeKeys.has(userType)) {
+                        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                            context: {
+                                message: `organizationTypes references unknown userType "${userType}". ` +
+                                    `userTypes must define: ${[...userTypeKeys].join(', ')}`,
+                            },
+                        });
+                    }
+                }
+            }
+            for (const [, userTypeDef] of Object.entries(userTypes)) {
+                const orgTypes = userTypeDef.requiresOrgMembership?.orgTypes;
+                if (orgTypes) {
+                    for (const ot of orgTypes) {
+                        if (!orgTypeKeys.has(ot)) {
+                            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                                context: {
+                                    message: `requiresOrgMembership.orgTypes references unknown org type "${ot}". ` +
+                                        `organizationTypes must define: ${[...orgTypeKeys].join(', ')}`,
+                                },
+                            });
+                        }
+                    }
+                }
+            }
+        }
+    }
+    emitDeferredFieldWarnings(config) {
+        if (config.auth?.crossOrgSSOAccess === false) {
+            this.logger.info(`[Config] crossOrgSSOAccess is disabled — users with enterprise SSO links from one organization will be blocked from SSO into other organizations.`);
+        }
+        for (const [userTypeKey, userTypeDef] of Object.entries(config.userTypes)) {
+            const auth = userTypeDef.auth;
+            if (auth?.anonymousSessionsEnabled === true) {
+                this.logger.info(`[Config] Anonymous sessions enabled for userType "${userTypeKey}" — isAnonymizable resources will support ANONYMOUS scope.`);
+            }
+            if (auth?.oneOffSessionAllowed === true) {
+                this.logger.info(`[Config] One-off sessions enabled for userType "${userTypeKey}" — consumable token links can create scoped sessions.`);
+            }
+            if (userTypeDef.uniqueIdentifier && userTypeDef.uniqueIdentifier !== 'email') {
+                this.logger.warn(`[Config] uniqueIdentifier only supports "email" — value "${userTypeDef.uniqueIdentifier}" will be treated as "email" for userType "${userTypeKey}".`);
+            }
+            if (auth?.stepUpAuth?.enabled) {
+                const stepUpMethods = auth.stepUpAuth.methods ?? [];
+                const enabledMethods = auth.authMethodsEnabled ?? {};
+                const hasUsableMethod = stepUpMethods.some((method) => {
+                    const methodValue = enabledMethods[method];
+                    if (methodValue === undefined)
+                        return false;
+                    if (typeof methodValue === 'boolean')
+                        return methodValue;
+                    return methodValue.enabled;
+                });
+                if (!hasUsableMethod) {
+                    this.logger.warn(`[Config] stepUpAuth is enabled for userType "${userTypeKey}" but none of its methods [${stepUpMethods.join(', ')}] are enabled in authMethodsEnabled — step-up will always fail.`);
+                }
+            }
+        }
+    }
+    getPreOverridePlaceholderPaths(config) {
+        const placeholderPaths = [];
+        if (config.appIdentity.appName === APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS.appName) {
+            placeholderPaths.push('appIdentity.appName');
+        }
+        if (config.appIdentity.version === APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS.version) {
+            placeholderPaths.push('appIdentity.version');
+        }
+        if (config.auth.passkeyConfig.rpName === APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS.passkeyRpName) {
+            placeholderPaths.push('auth.passkeyConfig.rpName');
+        }
+        if (config.auth.passkeyConfig.rpId === APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS.passkeyRpId) {
+            placeholderPaths.push('auth.passkeyConfig.rpId');
+        }
+        if (config.email.from === APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS.emailFrom) {
+            placeholderPaths.push('email.from');
+        }
+        return placeholderPaths;
+    }
+    createNotInitializedError(getterName) {
+        return this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+            customMessageReference: ErrorCustomMessageReference.APP_CONFIGURATION_NOT_INITIALIZED,
+            context: {
+                serviceName: this._serviceName,
+                applicationId: this._applicationId,
+                applicationEnv: this._applicationEnv,
+                message: `Application configuration not initialized : use ${getterName ?? 'getter'} before using the service`
+            }
+        });
+    }
+    /**
+     * Indicates whether the application configuration has been initialized.
+     * Returns true only once the final resolved config is available through
+     * `config`. A loader-only pre-override seed is not considered initialized for
+     * downstream consumers because it still contains unresolved placeholders.
+     */
+    isInitialized() {
+        return this._config !== null && this._secrets !== null;
+    }
+    get config() {
+        if (!this._config)
+            throw this.createNotInitializedError('config');
+        return this._config;
+    }
+    get secrets() {
+        if (!this._secrets)
+            throw this.createNotInitializedError('secrets');
+        return this._secrets;
+    }
+    get applicationId() {
+        if (!this._applicationId)
+            throw this.createNotInitializedError('applicationId');
+        return this._applicationId;
+    }
+    get applicationEnv() {
+        if (!this._applicationEnv)
+            throw this.createNotInitializedError('applicationEnv');
+        return this._applicationEnv;
+    }
+    get serviceName() {
+        if (!this._serviceName)
+            throw this.createNotInitializedError('serviceName');
+        return this._serviceName;
+    }
+    /**
+     * Application slug identifier (e.g., 'wildo-ai-application')
+     * Used in JWTs, job IDs, paths - NOT for display purposes
+     */
+    get appSlug() {
+        if (this._appSlug === null) {
+            throw this.createNotInitializedError('appSlug');
+        }
+        if (!this._appSlug) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    serviceName: this._serviceName,
+                    applicationId: this._applicationId,
+                    applicationEnv: this._applicationEnv,
+                    message: 'Application configuration is missing a resolved appSlug',
+                },
+            });
+        }
+        return this._appSlug;
+    }
+    /**
+     * Apply declarative app-authored backend config after the runtime/bootstrap
+     * seed has been loaded.
+     */
+    applyBackendConfig(backendConfig) {
+        const baseConfig = this._config ?? this._preOverrideConfig;
+        if (!baseConfig) {
+            throw this.createNotInitializedError('applyBackendConfig');
+        }
+        const resolvedConfig = applyBackendAuthoredConfig(baseConfig, backendConfig);
+        const boundaryInspection = inspectAppConfigurationBoundaryMutations(baseConfig, resolvedConfig);
+        if (boundaryInspection.errors.length > 0) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    message: `backendConfig attempted to mutate platform/runtime-managed fields: ${boundaryInspection.errors.join(' ')}`,
+                    sections: Object.keys(backendConfig),
+                },
+            });
+        }
+        if (boundaryInspection.warnings.length > 0) {
+            this.logger.warn(`[Config] backendConfig touched migration-seam runtime fields. ${boundaryInspection.warnings.join(' ')}`);
+        }
+        this.applyResolvedConfig(resolvedConfig, {
+            reason: 'backend-config',
+            emitWarnings: true,
+        });
+        this.logDebug('Applied backend config', {
+            reason: 'backend-config',
+            sections: Object.keys(backendConfig),
+        });
+    }
+    /**
+     * Fail startup if a non-platform app still carries the explicit pre-override
+     * placeholders after its backendConfig should have been applied.
+     */
+    assertNoPreOverridePlaceholders() {
+        if (!this._config) {
+            throw this.createNotInitializedError('assertNoPreOverridePlaceholders');
+        }
+        const placeholderPaths = this.getPreOverridePlaceholderPaths(this._config);
+        if (placeholderPaths.length === 0) {
+            return;
+        }
+        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+            context: {
+                message: `Application configuration still contains pre-override placeholder values at: ${placeholderPaths.join(', ')}. ` +
+                    `Define those fields in backendConfig instead of relying on backend loader placeholders.`,
+            },
+        });
+    }
+    applyResolvedConfig(config, options) {
+        const validatedConfig = AppConfiguration_Schema.parse(config);
+        this._config = validatedConfig;
+        this._preOverrideConfig = null;
+        if (this._appSlug !== null) {
+            this.logger.reinitialize(validatedConfig, this._appSlug);
+        }
+        this.validateEntityIdentityConfig(validatedConfig);
+        if (options.emitWarnings) {
+            this.emitDeferredFieldWarnings(validatedConfig);
+        }
+        this.logDebug('Resolved application configuration', {
+            reason: options.reason,
+            appSlug: this._appSlug,
+        });
+    }
+    /**
+     * Get JWT configuration with secrets
+     */
+    get jwtConfig() {
+        return {
+            config: this.config.jwt,
+            secrets: this.secrets.security.jwt
+        };
+    }
+    /** W7.3a: Whether anonymous sessions are enabled for any user type. */
+    get anonymousSessionsEnabled() {
+        const userTypes = this._config?.userTypes;
+        if (!userTypes)
+            return false;
+        return Object.values(userTypes).some(ut => ut.auth?.anonymousSessionsEnabled === true);
+    }
+};
+AppConfigurationService = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.AppConfigLoaderService)),
+    __metadata("design:paramtypes", [LoggerService,
+        ErrorBuilderBackendService,
+        AppConfigurationLoaderService])
+], AppConfigurationService);
+export { AppConfigurationService };
+//# sourceMappingURL=app-configuration.backend.service.js.map

package/dist/esm/config/services/app-configuration.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-configuration.backend.service.js","sourceRoot":"","sources":["../../../../src/config/services/app-configuration.backend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,2CAA2C,EAG3C,uBAAuB,EACxB,MAAM,6DAA6D,CAAC;AAErE,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EAEL,0BAA0B,EAC1B,wCAAwC,GACzC,MAAM,0EAA0E,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAmE,MAAM,uBAAuB,CAAC;AAChJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G;;;;;;;;;;;;GAYG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAWW;IACa;IACG;IAZnD,QAAQ,CAA+D;IACzE,OAAO,GAA4B,IAAI,CAAC;IACxC,kBAAkB,GAA4C,IAAI,CAAC;IACnE,QAAQ,GAAmC,IAAI,CAAC;IAChD,cAAc,GAAkB,IAAI,CAAC;IACrC,eAAe,GAA8B,IAAI,CAAC;IAClD,YAAY,GAAkB,IAAI,CAAC;IACnC,QAAQ,GAAkB,IAAI,CAAC;IAEvC,YAC6C,MAAqB,EACR,YAAwC,EACrC,aAA4C;QAF5D,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QACrC,kBAAa,GAAb,aAAa,CAA+B;QAEvG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC3D,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YACnI,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;YACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;YAC3B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,oBAAoB,CAAC,eAAe,CAAC;YAC5D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;YAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;YAExB,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACI,4BAA4B,CAAC,OAUnC;QACC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,OAAO,EAAE,iEAAiE;oBAC1E,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACjE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,OAAO,EACL,iGAAiG;wBACjG,uCAAuC;oBACzC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACnE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,OAAO,EACL,+FAA+F;wBAC/F,gEAAgE;oBAClE,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,MAAM,kBAAkB,GAAG,wCAAwC,CACjE,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,MAAM,CACf,CAAC;YACF,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EACL,oFAAoF,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;wBAC3H,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4EAA4E,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAE/B,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE;YACvC,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;SAC3C,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,qBAAqB,CAAC,QAAgB;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACI,qCAAqC,CAAC,mBAA2B,EAAE,QAAgB;QACxF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC9F,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,mBAA2B;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,gBAAgB;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACI,sCAAsC,CAAC,mBAA2B;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,qBAAqB,GAAG,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAC9E,IAAI,CAAC,qBAAqB,EAAE,eAAe;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;;;;;;;OAQG;IACI,sCAAsC,CAAC,QAAgB;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAE9C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtG,MAAM,KAAK,GAAG,qBAAqB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,mBAAmB,CAAC;YAChD,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;gBAAE,QAAQ,GAAG,mBAAmB,CAAC;QAC9D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,iCAAiC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAE9C,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtG,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/F,IAAI,UAAU;gBAAE,OAAO,mBAAmB,CAAC;QAC7C,CAAC;QACD,MAAM,wBAAwB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,wBAAwB,IAAI,IAAI,CAAC;IAC1C,CAAC;IAEO,4BAA4B,CAAC,MAAwB;QAC3D,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;QAClE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5F,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;wBACrE,OAAO,EAAE;4BACP,OAAO,EAAE,oBAAoB,mBAAmB,iDAAiD,QAAQ,KAAK;gCAC5G,0BAA0B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC3D;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC5D,KAAK,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9D,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBAC3C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAChC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;4BACrE,OAAO,EAAE;gCACP,OAAO,EAAE,kDAAkD,QAAQ,KAAK;oCACtE,0BAA0B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;6BAC3D;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,qBAAqB,EAAE,QAAQ,CAAC;gBAC7D,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;wBAC1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;4BACzB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gCACrE,OAAO,EAAE;oCACP,OAAO,EAAE,+DAA+D,EAAE,KAAK;wCAC7E,kCAAkC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iCAClE;6BACF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,MAAwB;QACxD,IAAI,MAAM,CAAC,IAAI,EAAE,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mJAAmJ,CACpJ,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;YAC9B,IAAI,IAAI,EAAE,wBAAwB,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qDAAqD,WAAW,4DAA4D,CAC7H,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,EAAE,oBAAoB,KAAK,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mDAAmD,WAAW,wDAAwD,CACvH,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,gBAAgB,IAAI,WAAW,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;gBAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4DAA4D,WAAW,CAAC,gBAAgB,8CAA8C,WAAW,IAAI,CACtJ,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;gBAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;gBACpD,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC;gBACrD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACpD,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,WAAW,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBAC5C,IAAI,OAAO,WAAW,KAAK,SAAS;wBAAE,OAAO,WAAW,CAAC;oBACzD,OAAO,WAAW,CAAC,OAAO,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,WAAW,8BAA8B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,iEAAiE,CACnL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,8BAA8B,CAAC,MAAwB;QAC7D,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,KAAK,2CAA2C,CAAC,OAAO,EAAE,CAAC;YACvF,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,KAAK,2CAA2C,CAAC,OAAO,EAAE,CAAC;YACvF,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,2CAA2C,CAAC,aAAa,EAAE,CAAC;YACnG,gBAAgB,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,2CAA2C,CAAC,WAAW,EAAE,CAAC;YAC/F,gBAAgB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,2CAA2C,CAAC,SAAS,EAAE,CAAC;YAChF,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,yBAAyB,CAAC,UAAmB;QACnD,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CACjC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAC;YACjC,sBAAsB,EAAE,2BAA2B,CAAC,iCAAiC;YACrF,OAAO,EAAE;gBACP,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,cAAc,EAAE,IAAI,CAAC,eAAe;gBACpC,OAAO,EAAE,mDAAmD,UAAU,IAAI,QAAQ,2BAA2B;aAC9G;SACF,CAEF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,aAAa;QAClB,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IACzD,CAAC;IAED,IAAW,MAAM;QAEf,IAAI,CAAC,IAAI,CAAC,OAAO;YACf,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,OAAQ,CAAC;IACvB,CAAC;IAGD,IAAW,OAAO;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChB,MAAM,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,QAAS,CAAC;IACxB,CAAC;IAED,IAAW,aAAa;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc;YACtB,MAAM,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,cAAe,CAAC;IAC9B,CAAC;IAED,IAAW,cAAc;QACvB,IAAI,CAAC,IAAI,CAAC,eAAe;YACvB,MAAM,IAAI,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,eAAgB,CAAC;IAC/B,CAAC;IAED,IAAW,WAAW;QACpB,IAAI,CAAC,IAAI,CAAC,YAAY;YACpB,MAAM,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;QAEtD,OAAO,IAAI,CAAC,YAAa,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,IAAW,OAAO;QAChB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,cAAc,EAAE,IAAI,CAAC,eAAe;oBACpC,OAAO,EAAE,yDAAyD;iBACnE;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACI,kBAAkB,CAAC,aAA+C;QACvE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,cAAc,GAAG,0BAA0B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC7E,MAAM,kBAAkB,GAAG,wCAAwC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChG,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,OAAO,EACL,sEAAsE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBAC7G,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;iBACrC;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iEAAiE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,cAAkC,EAAE;YAC3D,MAAM,EAAE,gBAAgB;YACxB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE;YACtC,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,+BAA+B;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EACL,gFAAgF,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC/G,yFAAyF;aAC5F;SACF,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB,CACzB,MAAwB,EACxB,OAGC;QAED,MAAM,eAAe,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC;QAC/B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,oCAAoC,EAAE;YAClD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAIlB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG;SACnC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,IAAW,wBAAwB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QAC1C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,KAAK,IAAI,CAAC,CAAC;IACzF,CAAC;CAEF,CAAA;AAhhBY,uBAAuB;IADnC,UAAU,EAAE;IAYR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAA;qCAFC,aAAa;QACM,0BAA0B;QACtB,6BAA6B;GAb9F,uBAAuB,CAghBnC"}

package/dist/esm/config/services/app-configuration.backend.utils.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Frontend Configuration Transformers Service
+ *
+ * Backend service to transform complete backend application configuration
+ * into frontend-safe subsets for API endpoints.
+ */
+import { AppConfiguration } from '../../config/models/app-config.backend.schemas.js';
+import { AppConfiguration_Shared } from '@wildo-ai/saas-models';
+export declare class ApplicationUtils {
+    /**
+     * Transforms backend application configuration to a frontend-safe shared payload.
+     * Filters out private/backend-only runtime endpoints and preserves only app-owned
+     * frontend service entries keyed by frontend service identity.
+     */
+    static toAppConfiguration_Shared(config: AppConfiguration): AppConfiguration_Shared;
+}
+//# sourceMappingURL=app-configuration.backend.utils.d.ts.map

package/dist/esm/config/services/app-configuration.backend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-configuration.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAC/F,OAAO,EACL,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAI/B,qBAAa,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,uBAAuB;CAwEpF"}

package/dist/esm/config/services/app-configuration.backend.utils.js

@@ -0,0 +1,61 @@
+/**
+ * Frontend Configuration Transformers Service
+ *
+ * Backend service to transform complete backend application configuration
+ * into frontend-safe subsets for API endpoints.
+ */
+import { JwtPrivateKeys } from '../../security/authentications/models/jwt.backend.schemas.js';
+import { PlatformApplicationType } from '../../applications/models/applications.backend.schemas.js';
+export class ApplicationUtils {
+    /**
+     * Transforms backend application configuration to a frontend-safe shared payload.
+     * Filters out private/backend-only runtime endpoints and preserves only app-owned
+     * frontend service entries keyed by frontend service identity.
+     */
+    static toAppConfiguration_Shared(config) {
+        const { appIdentity, appPreferences, runtime, auth, userTypes, frontendServices, organizationTypes, compliance, billing, analytics, lifecycle, } = config;
+        const runtime_endPoints = runtime.endPoints;
+        // Keep only shared endpoints by excluding platform-private keys.
+        // Config-defined frontend service endpoints pass through automatically.
+        const platformTypes = new Set(Object.values(PlatformApplicationType));
+        const runtime_endPoints_frontend = Object.keys(runtime_endPoints).reduce((acc, key) => {
+            if (!platformTypes.has(key)) {
+                acc[key] = runtime_endPoints[key];
+            }
+            return acc;
+        }, {});
+        // For frontend, expose only publicUrl; explicitly drop internalUrl
+        const runtime_endPoints_frontend_publicOnly = Object.fromEntries(Object.entries(runtime_endPoints_frontend).map(([appKey, urls]) => [
+            appKey,
+            { publicUrl: urls?.publicUrl },
+        ]));
+        const apiJwtPublicKey = config.jwt.publicKey[JwtPrivateKeys.APPLICATION_AUTH_TOKEN];
+        // Strip backend-only auth fields before sending to frontend.
+        // Same pattern as runtime (stripping appCustomRoot, internalUrl, platform-only endpoints).
+        const { passwordHashing, passkeyOperational, otpOperational, magicLinkOperational, totpOperational, ...sharedAuth } = auth;
+        // W6.9: Strip backend-only fields from per-user-type auth policies before frontend projection
+        const strippedUserTypes = Object.fromEntries(Object.entries(userTypes ?? {}).map(([typeName, typeDef]) => {
+            if (!typeDef?.auth)
+                return [typeName, typeDef];
+            const { lockoutPolicy: _lp, maxConcurrentSessions: _mcs, ...frontendAuth } = typeDef.auth;
+            return [typeName, { ...typeDef, auth: frontendAuth }];
+        }));
+        return {
+            appIdentity,
+            appPreferences,
+            runtime: {
+                endPoints: runtime_endPoints_frontend_publicOnly
+            },
+            auth: sharedAuth,
+            userTypes: strippedUserTypes,
+            frontendServices,
+            organizationTypes,
+            compliance,
+            billing,
+            analytics,
+            lifecycle,
+            apiJwtPublicKey,
+        };
+    }
+}
+//# sourceMappingURL=app-configuration.backend.utils.js.map

package/dist/esm/config/services/app-configuration.backend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-configuration.backend.utils.js","sourceRoot":"","sources":["../../../../src/config/services/app-configuration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AAKxG,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAG9G,MAAM,OAAO,gBAAgB;IAC3B;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAAC,MAAwB;QACvD,MAAM,EACJ,WAAW,EACX,cAAc,EACd,OAAO,EACP,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,OAAO,EACP,SAAS,EACT,SAAS,GACV,GAAG,MAAM,CAAC;QAEX,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAE5C,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC9E,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAA8B,CAAC,CAAC;QAEnC,mEAAmE;QACnE,MAAM,qCAAqC,GAAG,MAAM,CAAC,WAAW,CAC9D,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACjE,MAAM;YACN,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CACkC,CAAC;QAEvC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAEpF,6DAA6D;QAC7D,2FAA2F;QAC3F,MAAM,EACJ,eAAe,EACf,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,EACzE,GAAG,UAAU,EACd,GAAG,IAAI,CAAC;QAET,8FAA8F;QAC9F,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC,OAAO,EAAE,IAAI;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,IAAW,CAAC;YACjG,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,WAAW;YACX,cAAc;YACd,OAAO,EAAE;gBACP,SAAS,EAAE,qCAAqC;aACjD;YACD,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,iBAAiB;YAC5B,gBAAgB;YAChB,iBAAiB;YACjB,UAAU;YACV,OAAO;YACP,SAAS;YACT,SAAS;YACT,eAAe;SAChB,CAAC;IACJ,CAAC;CAEF"}