@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/config/services/application-startup-config-validator.backend.service.d.ts

@@ -0,0 +1,70 @@
+import { type ConfigurationValidationResult } from '@wildo-ai/saas-models';
+import type { AppConfiguration } from '../../config/models/app-config.backend.schemas.js';
+import { LoggerService } from '../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service.js';
+import { FlowsActorsRegistryService } from '../../flows-actors/services/flows-actors-registry.service.js';
+import { ResourcesRegistryBackendService } from '../../resources/services/resources-registry.backend.service.js';
+import { FileFieldDetectionBackendService } from '../../files/services/file-field-detection.backend.service.js';
+import { FileStorageRouterBackendService } from '../../files/storage/file-storage-router.backend.service.js';
+import { ClamAVScannerBackendService } from '../../files/scanning/clamav-scanner.backend.service.js';
+import { YaraScannerBackendService } from '../../files/scanning/yara-scanner.backend.service.js';
+import { WeaviateVectorStoreBackendService } from '../../files/rag/weaviate-vector-store.backend.service.js';
+/**
+ * Startup-only governance rules for application configuration.
+ *
+ * Two phases:
+ *
+ * 1. `validate(config)` — pre-registry checks on the raw AppConfiguration
+ *    (auth consistency, frontend service bindings, etc.)
+ *
+ * 2. `validateInitializedRuntimeContracts()` — post-registry cross-checks
+ *    that need the fully resolved registry (z_file() vs storage providers,
+ *    CLI-runtime agents, etc.). Uses the collector pattern: each validator
+ *    returns `ConfigurationValidationIssue[]`, the runner consolidates,
+ *    logs warnings, and throws on errors.
+ *
+ * Frontend will adopt the same `ConfigurationValidationIssue` contract
+ * for its own post-registry checks (feature gating, launcher coherence, etc.).
+ */
+export declare class ApplicationStartupConfigValidatorService {
+    private readonly logger;
+    private readonly errorBuilder;
+    private readonly externalProvidersRegistry;
+    private readonly flowsActorsRegistry;
+    private readonly resourcesRegistry;
+    private readonly fileFieldDetection;
+    private readonly fileStorageRouter;
+    private readonly clamavScanner;
+    private readonly yaraScanner;
+    private readonly weaviateVectorStore;
+    private logDebug;
+    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, externalProvidersRegistry: ExternalProvidersRegistryBackendService, flowsActorsRegistry: FlowsActorsRegistryService, resourcesRegistry: ResourcesRegistryBackendService, fileFieldDetection: FileFieldDetectionBackendService, fileStorageRouter: FileStorageRouterBackendService, clamavScanner: ClamAVScannerBackendService, yaraScanner: YaraScannerBackendService, weaviateVectorStore: WeaviateVectorStoreBackendService);
+    validate(config: AppConfiguration): void;
+    /**
+     * Run all post-registry validators, collect issues, then report.
+     *
+     * To add a new cross-check:
+     *   1. Write a private method returning `ConfigurationValidationIssue[]`
+     *   2. Add its call to the `validators` array below
+     *   3. The runner handles logging warnings and throwing on errors
+     */
+    validateInitializedRuntimeContracts(): ConfigurationValidationResult;
+    /**
+     * Log warnings and throw a consolidated error if any ERROR-severity
+     * issues were collected.
+     */
+    private reportValidationResult;
+    private assertNoRemovedGlobalAuthFields;
+    private validateUserTypeAuthConsistency;
+    private validateFrontendServiceRuntimeBindings;
+    private warnOnMultipleDefaultUserTypes;
+    private warnOnDuplicateClaimedDomains;
+    private warnOnBroadAutoLinkSSO;
+    private collectStorageIssues;
+    private collectScanningIssues;
+    private collectYaraIssues;
+    private collectRAGIssues;
+    private collectCLIRuntimeAgentIssues;
+}
+//# sourceMappingURL=application-startup-config-validator.backend.service.d.ts.map

package/dist/esm/config/services/application-startup-config-validator.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-startup-config-validator.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/config/services/application-startup-config-validator.backend.service.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,6BAA6B,EAKnC,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,wEAAwE,CAAC;AACpH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAC1H,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,oEAAoE,CAAC;AAEvH;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,wCAAwC;IAId,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7E,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAEpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IApBtC,OAAO,CAAC,QAAQ,CAA+D;gBAGzB,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAExF,yBAAyB,EAAE,uCAAuC,EAElE,mBAAmB,EAAE,0BAA0B,EAE/C,iBAAiB,EAAE,+BAA+B,EAElD,kBAAkB,EAAE,gCAAgC,EAEpD,iBAAiB,EAAE,+BAA+B,EAElD,aAAa,EAAE,2BAA2B,EAE1C,WAAW,EAAE,yBAAyB,EAEtC,mBAAmB,EAAE,iCAAiC;IASlE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAa/C;;;;;;;OAOG;IACI,mCAAmC,IAAI,6BAA6B;IAmB3E;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IA8B9B,OAAO,CAAC,+BAA+B;IA+BvC,OAAO,CAAC,+BAA+B;IAqEvC,OAAO,CAAC,sCAAsC;IAsB9C,OAAO,CAAC,8BAA8B;IAYtC,OAAO,CAAC,6BAA6B;IA0BrC,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,oBAAoB;IAyD5B,OAAO,CAAC,qBAAqB;IAqC7B,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,gBAAgB;IAqCxB,OAAO,CAAC,4BAA4B;CAwHrC"}

package/dist/esm/config/services/application-startup-config-validator.backend.service.js

@@ -0,0 +1,470 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from 'inversify';
+import { AuthUtils, ErrorCustomMessageReference, ErrorType, FlowsActors_Agent_Status, ConfigurationValidationDomain, ConfigurationValidationSeverity, buildValidationResult, issueError, } from '@wildo-ai/saas-models';
+import { APPLICATION_ENVIRONMENT, CLIRuntime_AuthMode, ExternalProvider_ExchangeProtocol_Kind, } from '@wildo-ai/external-connectors-models';
+import { FileStorageAccepted } from '@wildo-ai/zod-decorators';
+import { assessCLIRuntimeOperationSupport } from '../../flows-actors/utils/cli-runtime-operation-support.backend.utils.js';
+import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
+import { LoggerService } from '../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service.js';
+import { FlowsActorsRegistryService } from '../../flows-actors/services/flows-actors-registry.service.js';
+import { ResourcesRegistryBackendService } from '../../resources/services/resources-registry.backend.service.js';
+import { FileFieldDetectionBackendService } from '../../files/services/file-field-detection.backend.service.js';
+import { FileStorageRouterBackendService } from '../../files/storage/file-storage-router.backend.service.js';
+import { ClamAVScannerBackendService } from '../../files/scanning/clamav-scanner.backend.service.js';
+import { YaraScannerBackendService } from '../../files/scanning/yara-scanner.backend.service.js';
+import { WeaviateVectorStoreBackendService } from '../../files/rag/weaviate-vector-store.backend.service.js';
+/**
+ * Startup-only governance rules for application configuration.
+ *
+ * Two phases:
+ *
+ * 1. `validate(config)` — pre-registry checks on the raw AppConfiguration
+ *    (auth consistency, frontend service bindings, etc.)
+ *
+ * 2. `validateInitializedRuntimeContracts()` — post-registry cross-checks
+ *    that need the fully resolved registry (z_file() vs storage providers,
+ *    CLI-runtime agents, etc.). Uses the collector pattern: each validator
+ *    returns `ConfigurationValidationIssue[]`, the runner consolidates,
+ *    logs warnings, and throws on errors.
+ *
+ * Frontend will adopt the same `ConfigurationValidationIssue` contract
+ * for its own post-registry checks (feature gating, launcher coherence, etc.).
+ */
+let ApplicationStartupConfigValidatorService = class ApplicationStartupConfigValidatorService {
+    logger;
+    errorBuilder;
+    externalProvidersRegistry;
+    flowsActorsRegistry;
+    resourcesRegistry;
+    fileFieldDetection;
+    fileStorageRouter;
+    clamavScanner;
+    yaraScanner;
+    weaviateVectorStore;
+    logDebug;
+    constructor(logger, errorBuilder, externalProvidersRegistry, flowsActorsRegistry, resourcesRegistry, fileFieldDetection, fileStorageRouter, clamavScanner, yaraScanner, weaviateVectorStore) {
+        this.logger = logger;
+        this.errorBuilder = errorBuilder;
+        this.externalProvidersRegistry = externalProvidersRegistry;
+        this.flowsActorsRegistry = flowsActorsRegistry;
+        this.resourcesRegistry = resourcesRegistry;
+        this.fileFieldDetection = fileFieldDetection;
+        this.fileStorageRouter = fileStorageRouter;
+        this.clamavScanner = clamavScanner;
+        this.yaraScanner = yaraScanner;
+        this.weaviateVectorStore = weaviateVectorStore;
+        this.logDebug = this.logger.debugByType('ApplicationStartupConfigValidatorService');
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Phase 1: pre-registry config checks
+    // ─────────────────────────────────────────────────────────────────────────
+    validate(config) {
+        this.assertNoRemovedGlobalAuthFields(config.auth);
+        this.validateFrontendServiceRuntimeBindings(config);
+        this.validateUserTypeAuthConsistency(config);
+        this.warnOnMultipleDefaultUserTypes(config);
+        this.warnOnDuplicateClaimedDomains(config);
+        this.warnOnBroadAutoLinkSSO(config);
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Phase 2: post-registry cross-checks (collector pattern)
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Run all post-registry validators, collect issues, then report.
+     *
+     * To add a new cross-check:
+     *   1. Write a private method returning `ConfigurationValidationIssue[]`
+     *   2. Add its call to the `validators` array below
+     *   3. The runner handles logging warnings and throwing on errors
+     */
+    validateInitializedRuntimeContracts() {
+        const validators = [
+            () => this.collectStorageIssues(),
+            () => this.collectScanningIssues(),
+            () => this.collectYaraIssues(),
+            () => this.collectRAGIssues(),
+            () => this.collectCLIRuntimeAgentIssues(),
+        ];
+        const allIssues = [];
+        for (const validator of validators) {
+            allIssues.push(...validator());
+        }
+        const result = buildValidationResult(allIssues);
+        this.reportValidationResult(result);
+        return result;
+    }
+    /**
+     * Log warnings and throw a consolidated error if any ERROR-severity
+     * issues were collected.
+     */
+    reportValidationResult(result) {
+        const warnings = result.issues.filter((i) => i.severity === ConfigurationValidationSeverity.WARNING);
+        const errors = result.issues.filter((i) => i.severity === ConfigurationValidationSeverity.ERROR);
+        for (const warning of warnings) {
+            this.logger.warn(`[${warning.domain}] ${warning.message}`, warning.context);
+        }
+        if (errors.length === 0) {
+            if (warnings.length > 0) {
+                this.logDebug(`Post-registry validation completed with ${warnings.length} warning(s)`);
+            }
+            return;
+        }
+        const errorMessages = errors.map((e) => `  [${e.domain}] ${e.message}`).join('\n');
+        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+            context: {
+                message: `Post-registry configuration validation failed with ${errors.length} error(s):\n` +
+                    errorMessages,
+                errorCount: errors.length,
+                warningCount: warnings.length,
+                domains: [...new Set(errors.map((e) => e.domain))],
+            },
+        });
+    }
+    assertNoRemovedGlobalAuthFields(auth) {
+        const rawAuth = auth;
+        const removedFields = [
+            'mfaPolicy',
+            'authMethodsEnabled',
+            'autoLinkByEmail',
+            'registration',
+            'passwordPolicy',
+            'methodManagement',
+            'sessionDurationMinutes',
+            'magicLink',
+            'smsOtp',
+        ];
+        const foundDeprecated = removedFields.filter((field) => rawAuth && field in rawAuth);
+        if (foundDeprecated.length === 0) {
+            return;
+        }
+        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+            context: {
+                message: `Deprecated auth config fields detected: ${foundDeprecated.join(', ')}. ` +
+                    `These fields were removed in W6.8. Migrate them to userTypes[typeName].auth.* ` +
+                    `(see entity-identity-config.shared.schemas.ts → UserTypeAuthPolicySchema). ` +
+                    `Remove them from your auth config and configure per-user-type auth policies instead.`,
+            },
+        });
+    }
+    validateUserTypeAuthConsistency(config) {
+        const userTypes = config.userTypes ?? {};
+        const frontendServices = config.frontendServices ?? {};
+        for (const [typeName, typeDef] of Object.entries(userTypes)) {
+            const typeAuth = typeDef?.auth;
+            if (!typeAuth) {
+                continue;
+            }
+            if (typeAuth.mfaPolicy?.requireMFA) {
+                const secondFactorMethods = AuthUtils.getSecondFactorMethods();
+                const hasEnabled = secondFactorMethods.some((method) => !!typeAuth.authMethodsEnabled?.[method]);
+                if (!hasEnabled) {
+                    throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                        context: {
+                            message: `Config deadlock: userTypes.${typeName}.auth.mfaPolicy.requireMFA is true ` +
+                                `but no second-factor method is enabled in authMethodsEnabled. ` +
+                                `Enable at least one of: ${secondFactorMethods.join(', ')}`,
+                        },
+                    });
+                }
+            }
+            const acceptableMethods = typeAuth.mfaPolicy?.acceptableMFAMethods ?? [];
+            for (const method of acceptableMethods) {
+                if (!typeAuth.authMethodsEnabled?.[method]) {
+                    this.logger.warn(`userTypes.${typeName}: acceptableMFAMethods includes '${method}' but it is not enabled in authMethodsEnabled`);
+                }
+            }
+            if (typeAuth.mfaPolicy?.requireMFA && typeAuth.mfaPolicy?.enrollmentGracePeriodDays === 0) {
+                const emailVerification = typeAuth.registration?.emailVerification;
+                if (emailVerification === 'deferred') {
+                    this.logger.warn(`userTypes.${typeName}: enrollmentGracePeriodDays=0 with emailVerification=deferred — users must enroll MFA immediately on deferred-verified accounts (valid but poor UX)`);
+                }
+            }
+            const registrationMode = typeAuth.registration?.mode;
+            if (!registrationMode) {
+                continue;
+            }
+            for (const [frontendServiceName, frontendServiceConfig] of Object.entries(frontendServices)) {
+                const userManagement = frontendServiceConfig?.usersManagement?.[typeName];
+                if (!userManagement) {
+                    continue;
+                }
+                if (registrationMode === 'disabled' && userManagement.register) {
+                    this.logger.warn(`userTypes.${typeName}: registration.mode='disabled' but frontendServices.${frontendServiceName}.usersManagement.${typeName}.register=true — registration will be blocked at API level`);
+                }
+                if (registrationMode !== 'disabled' && !userManagement.register) {
+                    this.logger.warn(`userTypes.${typeName}: registration.mode='${registrationMode}' but frontendServices.${frontendServiceName}.usersManagement.${typeName}.register=false — registration will be blocked at frontend service level`);
+                }
+            }
+        }
+    }
+    validateFrontendServiceRuntimeBindings(config) {
+        const frontendServices = Object.entries(config.frontendServices ?? {});
+        if (frontendServices.length === 0) {
+            return;
+        }
+        for (const [frontendServiceName, frontendServiceConfig] of frontendServices) {
+            const runtimeEndpoint = config.runtime?.endPoints?.[frontendServiceName];
+            if (!runtimeEndpoint?.publicUrl || !runtimeEndpoint?.internalUrl) {
+                throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
+                    customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                    context: {
+                        message: `frontendServices.${frontendServiceName} is declared but runtime.endPoints.${frontendServiceName} ` +
+                            `is missing a matching publicUrl/internalUrl binding. Runtime topology must materialize every declared frontend service.`,
+                        frontendServiceName,
+                    },
+                });
+            }
+        }
+    }
+    warnOnMultipleDefaultUserTypes(config) {
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(config.frontendServices ?? {})) {
+            const userManagement = frontendServiceConfig?.usersManagement ?? {};
+            const defaultEntries = Object.entries(userManagement).filter(([, value]) => value?.isDefault);
+            if (defaultEntries.length > 1) {
+                this.logger.warn(`frontendServices.${frontendServiceName}: multiple isDefault:true entries in usersManagement: ${defaultEntries.map(([key]) => key).join(', ')}. Only the first will be used for user-type resolution.`);
+            }
+        }
+    }
+    warnOnDuplicateClaimedDomains(config) {
+        const domainClaimMap = new Map();
+        for (const [orgTypeName, orgTypeDef] of Object.entries(config.organizationTypes ?? {})) {
+            const claimedDomains = orgTypeDef?.sso?.claimedDomains;
+            if (!claimedDomains) {
+                continue;
+            }
+            for (const domain of claimedDomains) {
+                const normalizedDomain = domain.toLowerCase();
+                const orgTypes = domainClaimMap.get(normalizedDomain) ?? [];
+                orgTypes.push(orgTypeName);
+                domainClaimMap.set(normalizedDomain, orgTypes);
+            }
+        }
+        for (const [domain, orgTypeNames] of domainClaimMap.entries()) {
+            if (orgTypeNames.length > 1) {
+                this.logger.warn(`E-VER-9: Domain "${domain}" is claimed by multiple organization types: ${orgTypeNames.join(', ')}. Domain-to-org resolution will be non-deterministic.`);
+            }
+        }
+    }
+    warnOnBroadAutoLinkSSO(config) {
+        const ssoProviders = config.auth?.ssoProviders ?? {};
+        const socialProvidersWithEmptyDomains = Object.entries(ssoProviders)
+            .filter(([, providerConfig]) => {
+            const typedConfig = providerConfig;
+            return typedConfig.enabled !== false && (!typedConfig.allowedDomains || typedConfig.allowedDomains.length === 0);
+        })
+            .map(([providerName]) => providerName);
+        if (socialProvidersWithEmptyDomains.length === 0) {
+            return;
+        }
+        for (const [typeName, typeDef] of Object.entries(config.userTypes ?? {})) {
+            const autoLinkByEmail = typeDef?.auth?.autoLinkByEmail;
+            if (autoLinkByEmail === true || autoLinkByEmail === undefined) {
+                this.logger.warn(`E-VER-11: userTypes.${typeName}.auth.autoLinkByEmail is true (or defaulted) and SSO providers [${socialProvidersWithEmptyDomains.join(', ')}] have empty allowedDomains. Any verified email from these IdPs can auto-link to existing accounts.`);
+            }
+        }
+    }
+    // ─── Storage ────────────────────────────────────────────────────────────
+    collectStorageIssues() {
+        const allResourceTypes = this.resourcesRegistry.getResourceTypes();
+        if (allResourceTypes.length === 0) {
+            return [];
+        }
+        const envHints = {
+            [FileStorageAccepted.WILDO_MANAGED]: 'STORAGE_ENDPOINT, STORAGE_ACCESS_KEY, STORAGE_SECRET_KEY',
+            [FileStorageAccepted.LOCAL_DIRECTORY]: 'STORAGE_LOCAL_BASE_DIR',
+        };
+        const issues = [];
+        for (const resourceType of allResourceTypes) {
+            let fileFields;
+            try {
+                fileFields = this.fileFieldDetection.detectFileFields(resourceType);
+            }
+            catch {
+                continue;
+            }
+            for (const field of fileFields) {
+                const accepted = field.fileMetadata.storageAccepted;
+                const fieldRef = `${resourceType}.${field.fieldName}`;
+                if (!accepted || accepted.length === 0) {
+                    const provider = this.fileStorageRouter.getProviderById(FileStorageAccepted.WILDO_MANAGED);
+                    if (!provider || !provider.isConfigured()) {
+                        const hint = envHints[FileStorageAccepted.WILDO_MANAGED];
+                        issues.push(issueError(ConfigurationValidationDomain.STORAGE, `${fieldRef}: no storageAccepted specified and default WILDO_MANAGED is not configured — set ${hint}`, { fieldRef, storageAccepted: [FileStorageAccepted.WILDO_MANAGED] }));
+                    }
+                }
+                else {
+                    const hasSatisfied = accepted.some((provId) => {
+                        const p = this.fileStorageRouter.getProviderById(provId);
+                        return p?.isConfigured() ?? false;
+                    });
+                    if (!hasSatisfied) {
+                        const hints = accepted.map((p) => envHints[p] ?? p).join(' or ');
+                        issues.push(issueError(ConfigurationValidationDomain.STORAGE, `${fieldRef}: accepts [${accepted.join(', ')}] but none are configured — set ${hints}`, { fieldRef, storageAccepted: [...accepted] }));
+                    }
+                }
+            }
+        }
+        return issues;
+    }
+    // ─── Scanning (ClamAV) ──────────────────────────────────────────────────
+    collectScanningIssues() {
+        const issues = [];
+        const allResourceTypes = this.resourcesRegistry.getResourceTypes();
+        const fieldsRequiringScan = [];
+        for (const resourceType of allResourceTypes) {
+            let fileFields;
+            try {
+                fileFields = this.fileFieldDetection.detectFileFields(resourceType);
+            }
+            catch {
+                continue;
+            }
+            for (const field of fileFields) {
+                if (field.fileMetadata.scanPolicy === 'required') {
+                    fieldsRequiringScan.push(`${resourceType}.${field.fieldName}`);
+                }
+            }
+        }
+        if (fieldsRequiringScan.length === 0) {
+            return issues;
+        }
+        if (!this.clamavScanner.isConfigured()) {
+            issues.push(issueError(ConfigurationValidationDomain.STORAGE, `${fieldsRequiringScan.length} z_file() field(s) declare scanPolicy: 'required' but ClamAV is not configured — set CLAMAV_HOST and CLAMAV_PORT`, { fields: fieldsRequiringScan, hint: 'Set CLAMAV_HOST env var or remove scanPolicy from z_file() declarations' }));
+        }
+        return issues;
+    }
+    // ─── YARA (platform-level pattern scanning) ─────────────────────────
+    collectYaraIssues() {
+        const issues = [];
+        if (!this.yaraScanner.isExplicitlyEnabled())
+            return issues;
+        if (!this.yaraScanner.isConfigured()) {
+            issues.push(issueError(ConfigurationValidationDomain.STORAGE, 'YARA_ENABLED is true but YARA_HOST is not set — the YARA scanner service is unreachable', { hint: 'Set YARA_HOST to the YARA scanner Docker service hostname (e.g., yara-scanner)' }));
+        }
+        return issues;
+    }
+    // ─── RAG (Weaviate) ────────────────────────────────────────────────────
+    collectRAGIssues() {
+        const issues = [];
+        const allResourceTypes = this.resourcesRegistry.getResourceTypes();
+        const fieldsRequiringRAG = [];
+        for (const resourceType of allResourceTypes) {
+            let fileFields;
+            try {
+                fileFields = this.fileFieldDetection.detectFileFields(resourceType);
+            }
+            catch {
+                continue;
+            }
+            for (const field of fileFields) {
+                if (field.fileMetadata.rag?.enabled === true) {
+                    fieldsRequiringRAG.push(`${resourceType}.${field.fieldName}`);
+                }
+            }
+        }
+        if (fieldsRequiringRAG.length === 0) {
+            return issues;
+        }
+        if (!this.weaviateVectorStore.isConfigured()) {
+            issues.push(issueError(ConfigurationValidationDomain.STORAGE, `${fieldsRequiringRAG.length} z_file() field(s) declare rag.enabled but Weaviate is not configured — set WEAVIATE_HOST`, { fields: fieldsRequiringRAG, hint: 'Set WEAVIATE_HOST env var or remove rag.enabled from z_file() declarations' }));
+        }
+        return issues;
+    }
+    // ─── CLI Runtime Agents ─────────────────────────────────────────────────
+    collectCLIRuntimeAgentIssues() {
+        const applicationEnv = (process.env.APPLICATION_ENV ?? APPLICATION_ENVIRONMENT.DEVELOPMENT);
+        const platformEnvironmentId = process.env.PLATFORM_ENVIRONMENT_ID;
+        const agents = Object.values(this.flowsActorsRegistry.getRegistry().agents);
+        const issues = [];
+        for (const agent of agents) {
+            if (agent.status !== FlowsActors_Agent_Status.ACTIVE
+                || !agent.config.executionProfileRef) {
+                continue;
+            }
+            const providerRef = agent.config.providerRef;
+            const executionProfileRef = agent.config.executionProfileRef;
+            const operationKey = agent.config.operationKey;
+            const model = agent.config.model;
+            const agentCtx = { agentRef: agent.ref, providerRef, executionProfileRef };
+            if (!this.externalProvidersRegistry.isProviderEnabled(providerRef, ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER)) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': provider '${providerRef}' has no enabled semantic LLM protocol`, agentCtx));
+                continue;
+            }
+            const llmProtocol = this.externalProvidersRegistry.getCachedProtocol(providerRef, ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER);
+            if (!llmProtocol || !('operations' in llmProtocol) || !llmProtocol.operations[operationKey]) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': LLM operation '${operationKey}' not available on provider '${providerRef}'`, { ...agentCtx, operationKey }));
+                continue;
+            }
+            if (!this.externalProvidersRegistry.isProviderEnabled(providerRef, ExternalProvider_ExchangeProtocol_Kind.CLI_RUNTIME)) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': provider '${providerRef}' has no enabled CLI runtime transport`, agentCtx));
+                continue;
+            }
+            const cliRuntimeProfile = this.externalProvidersRegistry.getCachedCLIRuntimeProfile(providerRef);
+            const cliExecutionProfile = this.externalProvidersRegistry.getCLIRuntimeExecutionProfile(providerRef, executionProfileRef);
+            if (!cliRuntimeProfile || !cliExecutionProfile) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': CLI runtime metadata or execution profile '${executionProfileRef}' not found`, agentCtx));
+                continue;
+            }
+            const operationSupport = assessCLIRuntimeOperationSupport(cliRuntimeProfile, cliExecutionProfile, operationKey);
+            if (!operationSupport.supported) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': ${operationSupport.message ?? `operation '${operationKey}' not supported by CLI runtime`}`, { ...agentCtx, operationKey, supportedOperationKeys: cliRuntimeProfile.supportedOperationKeys }));
+            }
+            if (!cliRuntimeProfile.supportedModels.includes(model)) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': model '${model}' not declared by CLI runtime profile (supported: ${cliRuntimeProfile.supportedModels.join(', ')})`, { ...agentCtx, model, supportedModels: cliRuntimeProfile.supportedModels }));
+            }
+            if (!cliExecutionProfile.allowedApplicationEnvironments.includes(applicationEnv)) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': not allowed in application environment '${applicationEnv}'`, { ...agentCtx, applicationEnv, allowedApplicationEnvironments: cliExecutionProfile.allowedApplicationEnvironments }));
+            }
+            if (cliExecutionProfile.allowedPlatformEnvironmentIds?.length
+                && (!platformEnvironmentId || !cliExecutionProfile.allowedPlatformEnvironmentIds.includes(platformEnvironmentId))) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': not allowed in platform environment '${platformEnvironmentId ?? '(unset)'}'`, { ...agentCtx, platformEnvironmentId, allowedPlatformEnvironmentIds: cliExecutionProfile.allowedPlatformEnvironmentIds }));
+            }
+            if (cliExecutionProfile.authMode === CLIRuntime_AuthMode.SECRET_REF_ENV_INJECTION
+                && !this.externalProvidersRegistry.getCLIRuntimeExecutionProfileSecret(providerRef, executionProfileRef)) {
+                issues.push(issueError(ConfigurationValidationDomain.AGENTS, `Agent '${agent.ref}': CLI runtime secret '${cliExecutionProfile.secretRef}' could not be resolved at startup`, { ...agentCtx, secretRef: cliExecutionProfile.secretRef }));
+            }
+        }
+        return issues;
+    }
+};
+ApplicationStartupConfigValidatorService = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)),
+    __param(3, inject(SAAS_SERVICE_TYPES.FlowsActorsRegistryService)),
+    __param(4, inject(SAAS_SERVICE_TYPES.ResourceRegistryService)),
+    __param(5, inject(SAAS_SERVICE_TYPES.FileFieldDetectionService)),
+    __param(6, inject(SAAS_SERVICE_TYPES.FileStorageRouter)),
+    __param(7, inject(SAAS_SERVICE_TYPES.ClamAVScannerService)),
+    __param(8, inject(SAAS_SERVICE_TYPES.YaraScannerService)),
+    __param(9, inject(SAAS_SERVICE_TYPES.WeaviateVectorStoreService)),
+    __metadata("design:paramtypes", [LoggerService,
+        ErrorBuilderBackendService,
+        ExternalProvidersRegistryBackendService,
+        FlowsActorsRegistryService,
+        ResourcesRegistryBackendService,
+        FileFieldDetectionBackendService,
+        FileStorageRouterBackendService,
+        ClamAVScannerBackendService,
+        YaraScannerBackendService,
+        WeaviateVectorStoreBackendService])
+], ApplicationStartupConfigValidatorService);
+export { ApplicationStartupConfigValidatorService };
+//# sourceMappingURL=application-startup-config-validator.backend.service.js.map

package/dist/esm/config/services/application-startup-config-validator.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-startup-config-validator.backend.service.js","sourceRoot":"","sources":["../../../../src/config/services/application-startup-config-validator.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,SAAS,EACT,wBAAwB,EAIxB,6BAA6B,EAC7B,+BAA+B,EAC/B,qBAAqB,EACrB,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gCAAgC,EAAE,MAAM,mFAAmF,CAAC;AAErI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,wEAAwE,CAAC;AACpH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAC1H,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,2BAA2B,EAAE,MAAM,kEAAkE,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EAAE,iCAAiC,EAAE,MAAM,oEAAoE,CAAC;AAEvH;;;;;;;;;;;;;;;;GAgBG;AAEI,IAAM,wCAAwC,GAA9C,MAAM,wCAAwC;IAIG;IACa;IAEhD;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IAEA;IApBX,QAAQ,CAA+D;IAE/E,YACsD,MAAqB,EACR,YAAwC,EAExF,yBAAkE,EAElE,mBAA+C,EAE/C,iBAAkD,EAElD,kBAAoD,EAEpD,iBAAkD,EAElD,aAA0C,EAE1C,WAAsC,EAEtC,mBAAsD;QAjBnB,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAExF,8BAAyB,GAAzB,yBAAyB,CAAyC;QAElE,wBAAmB,GAAnB,mBAAmB,CAA4B;QAE/C,sBAAiB,GAAjB,iBAAiB,CAAiC;QAElD,uBAAkB,GAAlB,kBAAkB,CAAkC;QAEpD,sBAAiB,GAAjB,iBAAiB,CAAiC;QAElD,kBAAa,GAAb,aAAa,CAA6B;QAE1C,gBAAW,GAAX,WAAW,CAA2B;QAEtC,wBAAmB,GAAnB,mBAAmB,CAAmC;QAEvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IACtF,CAAC;IAED,4EAA4E;IAC5E,sCAAsC;IACtC,4EAA4E;IAErE,QAAQ,CAAC,MAAwB;QACtC,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,sCAAsC,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,0DAA0D;IAC1D,4EAA4E;IAE5E;;;;;;;OAOG;IACI,mCAAmC;QACxC,MAAM,UAAU,GAA6C;YAC3D,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACjC,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAClC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC7B,GAAG,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE;SAC1C,CAAC;QAEF,MAAM,SAAS,GAAmC,EAAE,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAAC,MAAqC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAEjG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,2CAA2C,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;YACzF,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EACL,sDAAsD,MAAM,CAAC,MAAM,cAAc;oBACjF,aAAa;gBACf,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;IAEO,+BAA+B,CAAC,IAAkC;QACxE,MAAM,OAAO,GAAG,IAA2C,CAAC;QAC5D,MAAM,aAAa,GAAG;YACpB,WAAW;YACX,oBAAoB;YACpB,iBAAiB;YACjB,cAAc;YACd,gBAAgB;YAChB,kBAAkB;YAClB,wBAAwB;YACxB,WAAW;YACX,QAAQ;SACA,CAAC;QAEX,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,IAAI,OAAO,CAAC,CAAC;QACrF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EACL,2CAA2C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACzE,gFAAgF;oBAChF,6EAA6E;oBAC7E,sFAAsF;aACzF;SACF,CAAC,CAAC;IACL,CAAC;IAEO,+BAA+B,CAAC,MAAwB;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAEvD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAI,OAA+B,EAAE,IAAI,CAAC;YACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC;gBACnC,MAAM,mBAAmB,GAAG,SAAS,CAAC,sBAAsB,EAAE,CAAC;gBAC/D,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;wBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;wBACjE,OAAO,EAAE;4BACP,OAAO,EACL,8BAA8B,QAAQ,qCAAqC;gCAC3E,gEAAgE;gCAChE,2BAA2B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC9D;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,EAAE,oBAAoB,IAAI,EAAE,CAAC;YACzE,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,aAAa,QAAQ,oCAAoC,MAAM,+CAA+C,CAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,SAAS,EAAE,UAAU,IAAI,QAAQ,CAAC,SAAS,EAAE,yBAAyB,KAAK,CAAC,EAAE,CAAC;gBAC1F,MAAM,iBAAiB,GAAI,QAAQ,CAAC,YAAgD,EAAE,iBAAiB,CAAC;gBACxG,IAAI,iBAAiB,KAAK,UAAU,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,aAAa,QAAQ,qJAAqJ,CAC3K,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,gBAAgB,GAAI,QAAQ,CAAC,YAAgD,EAAE,IAAI,CAAC;YAC1F,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5F,MAAM,cAAc,GAAI,qBAA6C,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACnG,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBAED,IAAI,gBAAgB,KAAK,UAAU,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,aAAa,QAAQ,uDAAuD,mBAAmB,oBAAoB,QAAQ,4DAA4D,CACxL,CAAC;gBACJ,CAAC;gBACD,IAAI,gBAAgB,KAAK,UAAU,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;oBAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,aAAa,QAAQ,wBAAwB,gBAAgB,0BAA0B,mBAAmB,oBAAoB,QAAQ,0EAA0E,CACjN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,sCAAsC,CAAC,MAAwB;QACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC5E,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,mBAAmB,CAAC,CAAC;YACzE,IAAI,CAAC,eAAe,EAAE,SAAS,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC;gBACjE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EACL,oBAAoB,mBAAmB,sCAAsC,mBAAmB,GAAG;4BACnG,yHAAyH;wBAC3H,mBAAmB;qBACpB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,8BAA8B,CAAC,MAAwB;QAC7D,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;YACzG,MAAM,cAAc,GAAI,qBAA6C,EAAE,eAAe,IAAI,EAAE,CAAC;YAC7F,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAE,KAA6B,EAAE,SAAS,CAAC,CAAC;YACvH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oBAAoB,mBAAmB,yDAAyD,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yDAAyD,CACvM,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,6BAA6B,CAAC,MAAwB;QAC5D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEnD,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,MAAM,cAAc,GAAI,UAAkC,EAAE,GAAG,EAAE,cAAsC,CAAC;YACxG,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBAC5D,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oBAAoB,MAAM,gDAAgD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD,CACzJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,MAAwB;QACrD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;QACrD,MAAM,+BAA+B,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;aACjE,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE;YAC7B,MAAM,WAAW,GAAG,cAAqC,CAAC;YAC1D,OAAO,WAAW,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACnH,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;QAEzC,IAAI,+BAA+B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,eAAe,GAAI,OAA+B,EAAE,IAAI,EAAE,eAAe,CAAC;YAChF,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,QAAQ,mEAAmE,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CAClP,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,oBAAoB;QAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACnE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAA2B;YACvC,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,0DAA0D;YAC/F,CAAC,mBAAmB,CAAC,eAAe,CAAC,EAAE,wBAAwB;SAChE,CAAC;QAEF,MAAM,MAAM,GAAmC,EAAE,CAAC;QAElD,KAAK,MAAM,YAAY,IAAI,gBAAgB,EAAE,CAAC;YAC5C,IAAI,UAAU,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC;gBACpD,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBAEtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;oBAC3F,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;wBAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;wBACzD,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,OAAO,EACrC,GAAG,QAAQ,oFAAoF,IAAI,EAAE,EACrG,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,CACnE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;wBACzD,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,KAAK,CAAC;oBACpC,CAAC,CAAC,CAAC;oBACH,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACjE,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,OAAO,EACrC,GAAG,QAAQ,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,KAAK,EAAE,EACtF,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAC7C,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2EAA2E;IAEnE,qBAAqB;QAC3B,MAAM,MAAM,GAAmC,EAAE,CAAC;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAa,EAAE,CAAC;QAEzC,KAAK,MAAM,YAAY,IAAI,gBAAgB,EAAE,CAAC;YAC5C,IAAI,UAAU,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACjD,mBAAmB,CAAC,IAAI,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,OAAO,EACrC,GAAG,mBAAmB,CAAC,MAAM,kHAAkH,EAC/I,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,yEAAyE,EAAE,CACjH,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IAE/D,iBAAiB;QACvB,MAAM,MAAM,GAAmC,EAAE,CAAC;QAElD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE;YAAE,OAAO,MAAM,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,OAAO,EACrC,yFAAyF,EACzF,EAAE,IAAI,EAAE,gFAAgF,EAAE,CAC3F,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAElE,gBAAgB;QACtB,MAAM,MAAM,GAAmC,EAAE,CAAC;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACnE,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,KAAK,MAAM,YAAY,IAAI,gBAAgB,EAAE,CAAC;YAC5C,IAAI,UAAU,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,IAAI,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC7C,kBAAkB,CAAC,IAAI,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,OAAO,EACrC,GAAG,kBAAkB,CAAC,MAAM,2FAA2F,EACvH,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,4EAA4E,EAAE,CACnH,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2EAA2E;IAEnE,4BAA4B;QAClC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB,CAAC,WAAW,CAA4B,CAAC;QACvH,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAmC,EAAE,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IACE,KAAK,CAAC,MAAM,KAAK,wBAAwB,CAAC,MAAM;mBAC7C,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EACpC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7C,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YACjC,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;YAE3E,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,WAAW,EAAE,sCAAsC,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxH,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,gBAAgB,WAAW,wCAAwC,EACtF,QAAQ,CACT,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAClE,WAAW,EACX,sCAAsC,CAAC,YAAY,CACpD,CAAC;YACF,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,qBAAqB,YAAY,gCAAgC,WAAW,GAAG,EAClG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,CAC9B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,WAAW,EAAE,sCAAsC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvH,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,gBAAgB,WAAW,wCAAwC,EACtF,QAAQ,CACT,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;YACjG,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CAAC,6BAA6B,CACtF,WAAW,EACX,mBAAmB,CACpB,CAAC;YAEF,IAAI,CAAC,iBAAiB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,iDAAiD,mBAAmB,aAAa,EACpG,QAAQ,CACT,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,CACb,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,MAAM,gBAAgB,CAAC,OAAO,IAAI,cAAc,YAAY,gCAAgC,EAAE,EACjH,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,CAChG,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,aAAa,KAAK,qDAAqD,iBAAiB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACzI,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,CAC3E,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,mBAAmB,CAAC,8BAA8B,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjF,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,8CAA8C,cAAc,GAAG,EAClF,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,8BAA8B,EAAE,mBAAmB,CAAC,8BAA8B,EAAE,CACpH,CAAC,CAAC;YACL,CAAC;YAED,IACE,mBAAmB,CAAC,6BAA6B,EAAE,MAAM;mBACtD,CAAC,CAAC,qBAAqB,IAAI,CAAC,mBAAmB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EACjH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,2CAA2C,qBAAqB,IAAI,SAAS,GAAG,EACnG,EAAE,GAAG,QAAQ,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,mBAAmB,CAAC,6BAA6B,EAAE,CACzH,CAAC,CAAC;YACL,CAAC;YAED,IACE,mBAAmB,CAAC,QAAQ,KAAK,mBAAmB,CAAC,wBAAwB;mBAC1E,CAAC,IAAI,CAAC,yBAAyB,CAAC,mCAAmC,CAAC,WAAW,EAAE,mBAAmB,CAAC,EACxG,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,UAAU,CACpB,6BAA6B,CAAC,MAAM,EACpC,UAAU,KAAK,CAAC,GAAG,0BAA0B,mBAAmB,CAAC,SAAS,oCAAoC,EAC9G,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,SAAS,EAAE,CAC1D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AA9iBY,wCAAwC;IADpD,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IAErD,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAElD,WAAA,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAA;IAEpD,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAE5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAE/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAE7C,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;qCAhBM,aAAa;QACM,0BAA0B;QAE7D,uCAAuC;QAE7C,0BAA0B;QAE5B,+BAA+B;QAE9B,gCAAgC;QAEjC,+BAA+B;QAEnC,2BAA2B;QAE7B,yBAAyB;QAEjB,iCAAiC;GArB9D,wCAAwC,CA8iBpD"}