npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.0 → 1.1.2 - Mend

@wildo-ai/saas-backend-lib 1.1.0 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (265) hide show

package/dist/esm/runtime/services/start-application.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"start-application.backend.service.js","sourceRoot":"","sources":["../../../../../src/runtime/services/start-application.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAKzD,OAAO,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AAItI,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,cAAc,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,qCAAqC,EAAE,sCAAsC,EAAE,8BAA8B,EAAE,sCAAsC,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAExd,OAAO,EAAE,wDAAwD,EAAuC,MAAM,uBAAuB,CAAC;AACtI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAEhJ,OAAO,EACL,qCAAqC,EACrC,iCAAiC,EACjC,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,EACL,oDAAoD,EACpD,2CAA2C,EAC3C,sCAAsC,EACtC,gCAAgC,EAChC,uCAAuC,GACxC,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,8CAA8C,EAAE,MAAM,yEAAyE,CAAC;AACpK,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,wCAAwC,EAAE,MAAM,yFAAyF,CAAC;AACnJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,oFAAoF,CAAC;AAIjI,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAG3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AACjJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,kFAAkF,CAAC;AAC3I,OAAO,EAAE,yCAAyC,EAAE,MAAM,oFAAoF,CAAC;AAC/I,OAAO,EAAE,wCAAwC,EAAE,MAAM,mFAAmF,CAAC;AAE7I,OAAO,EAAE,gCAAgC,EAAE,MAAM,0EAA0E,CAAC;AAC5H,OAAO,EAAE,wCAAwC,EAAE,MAAM,+EAA+E,CAAC;AACzI,OAAO,EAAE,4BAA4B,EAAE,MAAM,8EAA8E,CAAC;AAC5H,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,2CAA2C,EAAE,MAAM,qGAAqG,CAAC;AAClK,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,0BAA0B,EAAE,MAAM,wEAAwE,CAAC;AACpH,OAAO,EAAE,6CAA6C,EAAE,MAAM,oFAAoF,CAAC;AACnJ,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,wCAAwC,EAAE,MAAM,mGAAmG,CAAC;AAE7J,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAClI,OAAO,EAAE,sCAAsC,EAAE,MAAM,4FAA4F,CAAC;AAEpJ,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,2DAA2D,EAAE,MAAM,qHAAqH,CAAC;AAClM,OAAO,EAAE,2CAA2C,EAAE,MAAM,uFAAuF,CAAC;AACpJ,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,uGAAuG,CAAC;AAC3J,OAAO,EAAE,gCAAgC,EAAE,MAAM,4FAA4F,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,qGAAqG,CAAC;AACzJ,OAAO,EAAE,4CAA4C,EAAE,MAAM,qGAAqG,CAAC;AACnK,OAAO,EAAE,sCAAsC,EAAE,MAAM,sGAAsG,CAAC;AAC9J,OAAO,EAAE,iCAAiC,EAAE,MAAM,iGAAiG,CAAC;AACpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,mFAAmF,CAAC;AACjI,OAAO,EAAE,sCAAsC,EAAE,MAAM,gFAAgF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,wFAAwF,CAAC;AAC/H,OAAO,EAAE,8BAA8B,EAAE,MAAM,uGAAuG,CAAC;AACvJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,qFAAqF,CAAC;AAClI,OAAO,EAAE,+BAA+B,EAAE,MAAM,gGAAgG,CAAC;AACjJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,iGAAiG,CAAC;AACnJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,6FAA6F,CAAC;AAC3I,OAAO,EAAE,qCAAqC,EAAE,MAAM,sGAAsG,CAAC;AAC7J,OAAO,EAAE,6BAA6B,EAAE,MAAM,sFAAsF,CAAC;AACrI,sGAAsG;AACtG,2FAA2F;AAC3F,qEAAqE;AACrE,OAAO,EACL,mCAAmC,EACnC,8CAA8C,EAC9C,uCAAuC,EACvC,wCAAwC,EACxC,6CAA6C,EAC7C,8CAA8C,EAC9C,mDAAmD,EACnD,4BAA4B,EAC5B,mCAAmC,EACnC,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,yCAAyC,EACzC,8CAA8C,EAC9C,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,6BAA6B,GAC9B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,+EAA+E,CAAC;AAClI,OAAO,EAAE,4BAA4B,EAAE,MAAM,0EAA0E,CAAC;AAGxH,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAmB,MAAM,uDAAuD,CAAC;AAC5G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,gCAAgC,EAAE,MAAM,gFAAgF,CAAC;AAElI,OAAO,EAAE,oCAAoC,EAAE,MAAM,mEAAmE,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAGnG,OAAO,EACH,iCAAiC,EACjC,8BAA8B,GACjC,MAAM,wFAAwF,CAAC;AAGhG,OAAO,EAAE,sCAAsC,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,wFAAwF,CAAC;AAC/M,OAAO,EAAE,sCAAsC,EAAkC,MAAM,sCAAsC,CAAC;AAG9H,OAAO,EAAE,qBAAqB,EAAE,MAAM,sFAAsF,CAAC;AAC7H,OAAO,EAAE,+BAA+B,EAAE,MAAM,iGAAiG,CAAC;AAClJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,2FAA2F,CAAC;AAGpJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,mEAAmE,CAAC;AAChH,OAAO,EAAE,sCAAsC,EAAE,MAAM,iFAAiF,CAAC;AACzI,OAAO,EAAE,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAC7H,OAAO,EAAE,gCAAgC,EAAE,MAAM,+EAA+E,CAAC;AAEjI,OAAO,EAAE,mCAAmC,EAAE,MAAM,yFAAyF,CAAC;AAG9I,OAAO,EAAE,yCAAyC,EAAE,MAAM,uFAAuF,CAAC;AAClJ,OAAO,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AA+NtI;;;;;;;;;;;;;;GAcG;AAEH,wHAAwH;AACxH;;;;;;;;;;;;;;GAcG;AACH,IAAK,sCAiBJ;AAjBD,WAAK,sCAAsC;IACvC,oEAAoE;IACpE,mFAAyC,CAAA;IACzC;;;;;;OAMG;IACH,iHAAuE,CAAA;IACvE,gFAAgF;IAChF,iFAAuC,CAAA;IACvC,4EAA4E;IAC5E,2EAAiC,CAAA;IACjC,2EAA2E;IAC3E,+EAAqC,CAAA;AACzC,CAAC,EAjBI,sCAAsC,KAAtC,sCAAsC,QAiB1C;AAYD;;;;;;;;;;GAUG;AACH,SAAS,wCAAwC,CAC7C,MAA8C,EAC9C,aAAmC,EACnC,MAAe;IAEf,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,IAAI,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,yEAAyE,CAAC;IACzF,MAAM,WAAW,GAAG,iEAAiE,CAAC;IAEtF,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,sCAAsC,CAAC,kBAAkB;YAC1D,OAAO,GAAG,MAAM,iEAAiE;kBAC3E,sEAAsE,WAAW,EAAE,CAAC;QAE9F,KAAK,sCAAsC,CAAC,iCAAiC;YACzE,OAAO,GAAG,MAAM,iBAAiB,WAAW,6CAA6C;kBACnF,mFAAmF;kBACnF,0EAA0E,WAAW,IAAI;kBACzF,oFAAoF;kBACpF,qFAAqF;kBACrF,sFAAsF;kBACtF,sEAAsE,WAAW,EAAE,CAAC;QAE9F,KAAK,sCAAsC,CAAC,iBAAiB;YACzD,OAAO,GAAG,MAAM,iBAAiB,WAAW,kDAAkD;kBACxF,sFAAsF;kBACtF,0BAA0B,WAAW,EAAE,CAAC;QAElD,KAAK,sCAAsC,CAAC,cAAc;YACtD,OAAO,GAAG,MAAM,iBAAiB,WAAW,4BAA4B;kBAClE,aAAa,MAAM,IAAI,SAAS,qDAAqD;kBACrF,mFAAmF,WAAW,EAAE,CAAC;QAE3G,KAAK,sCAAsC,CAAC,gBAAgB;YACxD,OAAO,GAAG,MAAM,iBAAiB,WAAW,yBAAyB;kBAC/D,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,wDAAwD;kBACtF,WAAW,WAAW,EAAE,CAAC;QAEnC,OAAO,CAAC,CAAC,CAAC;YACN,8DAA8D;YAC9D,gEAAgE;YAChE,oBAAoB;YACpB,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,GAAG,MAAM,iBAAiB,WAAW,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,WAAW,EAAE,CAAC;QAC7F,CAAC;IACL,CAAC;AACL,CAAC;AAGM,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAamB;IACU;IACwB;IACjB;IACW;IACb;IACY;IAChB;IACE;IACA;IACE;IACS;IACO;IACe;IACtC;IACF;IACD;IACmB;IACE;IACA;IACL;IACD;IACR;IACQ;IACK;IACF;IACX;IACE;IACI;IACH;IACH;IACD;IAKD;IACE;IAIW;IAWF;IAKC;IAMzD;IA3EvB;;;;OAIG;IACK,sBAAsB,GAA8B,yBAAyB,CAAC,mBAAmB,CAAC;IAEhG,QAAQ,CAA+D;IACvE,aAAa,GAAG,KAAK,CAAC;IACxB,cAAc,GAAG,KAAK,CAAC;IAE/B,YAC0D,MAAqB,EACX,gBAAyC,EACjB,iCAA2E,EAC5F,wBAAyD,EAC9C,2BAAsE,EACnF,uBAA8D,EAClD,0BAAoE,EACpF,iBAA2C,EACzC,YAAwC,EACxC,YAAiC,EAC/B,qBAAmD,EAC1C,eAAuD,EAChD,qCAA4E,EAC7D,kBAA+E,EACrH,cAA8B,EAChC,YAA0B,EAC3B,WAA+B,EACZ,8BAAqE,EACnE,gCAAyE,EACzE,gCAAyE,EAC9E,2BAAsE,EACvE,0BAAoE,EAC5E,kBAAoD,EAC5C,0BAAsD,EACjD,+BAA8E,EAChF,sBAA4D,EACvE,kBAA6C,EAC3C,oBAAiD,EAC7C,wBAAgE,EACnE,4BAAiE,EACpE,yBAA2D,EAC5D,iBAAkD,EAKnD,uBAAuD,EACrD,yBAA2D,EAIhD,oCAAiF,EAWnF,2BAAyD,EAKxD,gBAA0C,EAMnG,2BAAuE;QA/DpC,WAAM,GAAN,MAAM,CAAe;QACX,qBAAgB,GAAhB,gBAAgB,CAAyB;QACjB,sCAAiC,GAAjC,iCAAiC,CAA0C;QAC5F,6BAAwB,GAAxB,wBAAwB,CAAiC;QAC9C,gCAA2B,GAA3B,2BAA2B,CAA2C;QACnF,4BAAuB,GAAvB,uBAAuB,CAAuC;QAClD,+BAA0B,GAA1B,0BAA0B,CAA0C;QACpF,sBAAiB,GAAjB,iBAAiB,CAA0B;QACzC,iBAAY,GAAZ,YAAY,CAA4B;QACxC,iBAAY,GAAZ,YAAY,CAAqB;QAC/B,0BAAqB,GAArB,qBAAqB,CAA8B;QAC1C,oBAAe,GAAf,eAAe,CAAwC;QAChD,0CAAqC,GAArC,qCAAqC,CAAuC;QAC7D,uBAAkB,GAAlB,kBAAkB,CAA6D;QACrH,mBAAc,GAAd,cAAc,CAAgB;QAChC,iBAAY,GAAZ,YAAY,CAAc;QAC3B,gBAAW,GAAX,WAAW,CAAoB;QACZ,mCAA8B,GAA9B,8BAA8B,CAAuC;QACnE,qCAAgC,GAAhC,gCAAgC,CAAyC;QACzE,qCAAgC,GAAhC,gCAAgC,CAAyC;QAC9E,gCAA2B,GAA3B,2BAA2B,CAA2C;QACvE,+BAA0B,GAA1B,0BAA0B,CAA0C;QAC5E,uBAAkB,GAAlB,kBAAkB,CAAkC;QAC5C,+BAA0B,GAA1B,0BAA0B,CAA4B;QACjD,oCAA+B,GAA/B,+BAA+B,CAA+C;QAChF,2BAAsB,GAAtB,sBAAsB,CAAsC;QACvE,uBAAkB,GAAlB,kBAAkB,CAA2B;QAC3C,yBAAoB,GAApB,oBAAoB,CAA6B;QAC7C,6BAAwB,GAAxB,wBAAwB,CAAwC;QACnE,iCAA4B,GAA5B,4BAA4B,CAAqC;QACpE,8BAAyB,GAAzB,yBAAyB,CAAkC;QAC5D,sBAAiB,GAAjB,iBAAiB,CAAiC;QAKnD,4BAAuB,GAAvB,uBAAuB,CAAgC;QACrD,8BAAyB,GAAzB,yBAAyB,CAAkC;QAIhD,yCAAoC,GAApC,oCAAoC,CAA6C;QAWnF,gCAA2B,GAA3B,2BAA2B,CAA8B;QAKxD,qBAAgB,GAAhB,gBAAgB,CAA0B;QAMnG,gCAA2B,GAA3B,2BAA2B,CAA4C;QAG1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QACzD,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;QAC7D,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QAEnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,MAAuC;QAE3D,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO;QACX,CAAC;QAED,MAAM,EACF,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,GAAG,EAAE,EACjC,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,mBAAmB,EACnB,qBAAqB,GAAG,KAAK,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,uBAAuB,EACvB,SAAS,EACT,sBAAsB,EACtB,cAAc,GAAG,yBAAyB,CAAC,mBAAmB,EAC9D,YAAY,GAAG,KAAK,EACpB,YAAY,GAAG,KAAK,EACpB,gBAAgB,GAAG,KAAK,EACxB,gCAAgC,EAChC,iCAAiC,GACpC,GAAG,MAAM,CAAC;QAEX,qEAAqE;QACrE,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,cAAc,GAAG,8CAA8C,CAAC,cAAc,CAAC,CAAC;QACtF;;;;WAIG;QACH,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC;QAE7C,IAAI,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;YACnE,+CAA+C;YAC/C,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,mDAAmD;YACnD,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,qBAAqB,CAAC;YAE9C,IAAG,CAAC,qBAAqB,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,eAAe,EAAE,CAAC;oBAClB,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,aAAa,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;wBACvC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;qBACvC,CAAC,CAAC;gBACP,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,+BAA+B,EAAE,CAAC;gBACxD,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;gBACtE;;;;;;;;;;;;;;;;mBAgBG;gBACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;oBACjD,IAAI,CAAC;wBACD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBACpC,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;oBAC9D,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAQ,CAAC,CAAC;wBACnE,MAAM,CAAC,CAAC;oBACZ,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,iFAAiF,CAAC,CAAC;gBACrG,CAAC;gBACD,uEAAuE;gBACvE,oEAAoE;gBACpE,IAAI,CAAC;oBACD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,EAAE,GAAG,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrH,CAAC;gBAED,6EAA6E;gBAC7E,IAAI,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,CAAC;oBACxC,IAAI,CAAC;wBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;wBAC1C,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;oBAChD,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACT,8EAA8E;wBAC9E,8EAA8E;wBAC9E,0EAA0E;wBAC1E,0CAA0C;wBAC1C,EAAE;wBACF,2EAA2E;wBAC3E,0EAA0E;wBAC1E,6EAA6E;wBAC7E,6EAA6E;wBAC7E,2EAA2E;wBAC3E,6EAA6E;wBAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uFAAuF,EAAE,EAAE,GAAG,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrJ,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,yDAAyD,CAAC,CAAC;gBAC7E,CAAC;YACL,CAAC;YAED,8DAA8D;YAC9D,iEAAiE;YACjE,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,iBAAiB,GAAG,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;YAE3G,IAAI,iBAAiB,EAAE,CAAC;gBACpB,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACvE,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YACxD,IAAI,WAAW,EAAE,CAAC;gBACd,IAAI,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;gBAClE,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACJ,iEAAiE;gBACjE,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YAED,2DAA2D;YAC3D,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YAEvD,sFAAsF;YACtF,gEAAgE;YAChE,MAAM,eAAe,GAAgC,iBAAiB,EAAE,SAAS,CAAC;YAElF,8DAA8D;YAC9D,wEAAwE;YACxE,yEAAyE;YACzE,0EAA0E;YAC1E,4EAA4E;YAC5E,MAAM,qBAAqB,GAAG,yCAAyC,CACnE,iBAAiB,EACjB,EAAE,qBAAqB,EAAE,CAC5B,CAAC;YAEF,IAAI,qBAAqB,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,qCAAqC,qBAAqB,CAAC,IAAI,QAAQ,EAAE;oBACnF,eAAe,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO;oBACrD,qBAAqB,EAAE,CAAC,GAAG,EAAE;wBACzB,MAAM,aAAa,GAAG,iBAAiB,EAAE,OAAO,CAAC;wBACjD,IAAI,CAAC,aAAa,EAAE,OAAO;4BAAE,OAAO,KAAK,CAAC;wBAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;wBACtE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1D,CAAC,CAAC,EAAE;oBACJ,iBAAiB,EAAE,CAAC,eAAe,EAAE,OAAO;iBAC/C,CAAC,CAAC;YACP,CAAC;YAED,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CACtC,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,CAAC,6BAA6B,IAAI,EAAE,CAAmD,EACvF,+BAA+B,EAC/B,4BAA4B,EAC5B,4BAA4B,EAC5B,SAAS,EAAE,8CAA8C;YACzD,qBAAqB,EACrB,yBAAyB,CAChC,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,iBAAiB,IAAI,iCAAiC,EAAE,CAAC;gBACzD,MAAM,iCAAiC,CAAC;oBACpC,SAAS,EAAE,iBAAiB;oBAC5B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;oBACvD,YAAY,EAAE,IAAI,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,mBAAmB,IAAI,EAAE,EAAE;gBACjE,kBAAkB,EAAE,cAAc,CAAC,sCAAsC;aAC5E,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,qDAAqD;YACrD,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACjE,IAAI,CAAC,gCAAgC,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,wBAAwB,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,gCAAgC,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,EAAE,CAAC;YAC5D,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,EAAE,CAAC;YAE1D,oEAAoE;YACpE,IAAI,0BAA0B,EAAE,CAAC;gBAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,EAAE,CAAC;gBACjF,IAAI,CAAC,gCAAgC,CAAC,gBAAgB,CAAC;oBACnD,WAAW,EAAE,cAAc;oBAC3B,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,IAAI,EAAE;oBACnD,cAAc,EAAE,0BAA0B,CAAC,cAAc;oBACzD,oBAAoB,EAAE;wBAClB,eAAe,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,eAAe,IAAI,6BAA6B,CAAC,cAAc;wBACjI,mBAAmB,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,mBAAmB,IAAI,6BAA6B,CAAC,IAAI;wBAC/H,YAAY,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,YAAY,IAAI,EAAE;wBACjF,cAAc,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,cAAc,IAAI;4BAC/E,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,cAAc;4BAC/F,CAAC,2BAA2B,CAAC,cAAc,CAAC,EAAE,6BAA6B,CAAC,oBAAoB;4BAChG,CAAC,2BAA2B,CAAC,cAAc,CAAC,EAAE,6BAA6B,CAAC,IAAI;yBACnF;qBACJ;iBACJ,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,qBAAqB,GAAG,iBAAiB,EAAE,SAAS,EAAE,YAAY,CAAC;YAEzE,IAAI,CAAC,gCAAgC,CAAC,0BAA0B,EAAE,CAAC;YACnE,IAAI,CAAC,gCAAgC,CAAC,4BAA4B,CAAC;gBAC/D,eAAe,EAAE,0BAA0B,EAAE,QAAQ;gBACrD,gBAAgB;gBAChB,uBAAuB;gBACvB,kBAAkB;gBAClB,qBAAqB;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YAExE,uDAAuD;YACvD,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAClE,IAAI,yBAAyB,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,KAAK,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,yBAAyB,EAAE,CAAC;oBAClD,IAAI,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,cAAc,yBAAyB,CAAC,MAAM,gCAAgC,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,0BAA0B,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,2BAA2B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;gBACtF,IAAI,CAAC,2BAA2B,CAAC,mBAAmB,EAAE,CAAC;gBACvD,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,EAAE,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAE1E,2DAA2D;YAC3D,IAAI,CAAC,qBAAqB,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;gBACrD,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;gBACxD,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;gBAE5D,mEAAmE;gBACnE,wCAAwC,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEtG,uDAAuD;gBACvD,IAAI,eAAe,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC;oBAC/C,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;wBAClE,IAAI,SAAS,CAAC,aAAa,KAAK,uBAAuB,CAAC,SAAS,EAAE,CAAC;4BAChE,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;4BACxF,IAAI,CAAC,MAAM,EAAE,CAAC;gCACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,SAAS,CAAC,YAAY,GAAG,CAAC,CAAC;4BACjH,CAAC;wBACL,CAAC;6BAAM,IAAI,SAAS,CAAC,aAAa,KAAK,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;4BAChF,IAAI,CAAC,QAAQ,CAAC,6DAA6D,SAAS,CAAC,eAAe,0BAA0B,CAAC,CAAC;wBACpI,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;oBAC9C,qBAAqB,EAAE,eAAe,CAAC,qBAAqB;oBAC5D,uBAAuB,EAAE,eAAe,CAAC,uBAAuB;oBAChE,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;oBAC1D,uBAAuB,EAAE,eAAe,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;iBACrF,CAAC,CAAC;YACP,CAAC;iBAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,4EAA4E,CAAC,CAAC;YAChG,CAAC;YAED,8DAA8D;YAC9D,EAAE;YACF,qDAAqD;YACrD,yDAAyD;YACzD,8DAA8D;YAC9D,gEAAgE;YAChE,8DAA8D;YAC9D,kEAAkE;YAClE,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAC9D,IAAI,CAAC,8BAA8B,CAAC,UAAU,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACrD,sBAAsB,EAAE,OAAO,CAAC,eAAe,CAAC;gBAChD,aAAa,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI;aAChF,CAAC,CAAC;YAEH,oDAAoD;YACpD,8FAA8F;YAC9F,IAAI,iBAAiB,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,gCAAgC,CAAC,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;gBAExE,wEAAwE;gBACxE,qEAAqE;gBACrE,0EAA0E;gBAC1E,6EAA6E;gBAC7E,4EAA4E;gBAC5E,4EAA4E;gBAC5E,MAAM,2BAA2B,GAAG,IAAI,CAAC,gCAAgC,CAAC,sCAAsC,EAAE,CAAC;gBACnH,IAAI,2BAA2B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;wBACnE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;wBACjE,OAAO,EAAE;4BACL,OAAO,EACH,6DAA6D,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;kCACtG,mFAAmF;kCACnF,qFAAqF;kCACrF,8BAA8B;4BACpC,2BAA2B;yBAC9B;qBACJ,CAAC,CAAC;gBACP,CAAC;gBAED,yEAAyE;gBACzE,6EAA6E;gBAC7E,6EAA6E;gBAC7E,yEAAyE;gBACzE,2EAA2E;gBAC3E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,yDAAyD;gBACzD,EAAE;gBACF,4EAA4E;gBAC5E,8EAA8E;gBAC9E,+EAA+E;gBAC/E,4EAA4E;gBAC5E,8EAA8E;gBAC9E,8EAA8E;gBAC9E,+EAA+E;gBAC/E,8EAA8E;gBAC9E,4EAA4E;gBAC5E,IACI,qCAAqC,CAAC;oBAClC,yCAAyC,EAAE,cAAc,CAAC,kCAAkC;oBAC5F,2BAA2B,EAAE,IAAI,CAAC,gCAAgC,CAAC,yBAAyB,CACxF,gBAAgB,CAAC,sBAAsB,CAC1C;oBACD,6BAA6B,EAAE,IAAI,CAAC,gCAAgC,CAAC,oCAAoC,CACrG,gBAAgB,CAAC,sBAAsB,CAC1C,CAAC,MAAM;iBACX,CAAC,EACJ,CAAC;oBACC,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,0FAA0F;0BACxF,8FAA8F;0BAC9F,+FAA+F,CACpG,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,+GAA+G,CAAC,CAAC;YACnI,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YAC1D,MAAM,gCAAgC,GAAG;gBACrC,GAAG,CAAC,mBAAmB,EAAE,0BAA0B,IAAI,EAAE,CAAC;aAC7D,CAAC;YACF,MAAM,YAAY,GAAG;gBACjB,GAAG,CAAC,mBAAmB,EAAE,MAAM,IAAI,EAAE,CAAC;aACzC,CAAC;YACF,MAAM,mBAAmB,GAAG;gBACxB,GAAG,CAAC,mBAAmB,EAAE,aAAa,IAAI,EAAE,CAAC;aAChD,CAAC;YACF,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAC5C,gCAAgC,EAChC,YAAY,EACZ,mBAAmB,CACtB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,uFAAuF;YACvF,2FAA2F;YAC3F,2FAA2F;YAC3F,2FAA2F;YAC3F,wFAAwF;YACxF,yFAAyF;YACzF,mCAAmC;YACnC,+EAA+E;YAC/E,mFAAmF;YACnF,gFAAgF;YAChF,mFAAmF;YACnF,mFAAmF;YACnF,6EAA6E;YAC7E,gFAAgF;YAChF,uCAAuC;YACvC,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YACtE,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;YACzE,IAAI,cAAc,CAAC,2CAA2C,EAAE,CAAC;gBAC7D,IAAI,CAAC,+BAA+B,CAAC,0BAA0B,CAC3D,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1E,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,sGAAsG,EAAE;oBAClH,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC;YAED,uDAAuD;YACvD,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,EAAE;gBAC5C,oBAAoB,EAAE,qBAAqB;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YAEzD,gDAAgD;YAChD,IAAI,wBAAwB,IAAI,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzB,+EAA+E;gBAC/E,gFAAgF;gBAChF,mFAAmF;gBACnF,qFAAqF;gBACrF,kFAAkF;gBAClF,IAAI,CAAC,2BAA2B,EAAE,UAAU,EAAE,CAAC;YACnD,CAAC;YAED,uCAAuC;YACvC,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzF,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACtC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YACrG,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YAED,gDAAgD;YAChD,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxG,IAAI,CAAC,wBAAwB,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ,CAAC,qDAAqD,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC;YACpH,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,CAAC,wBAAwB,CAAC,yBAAyB,EAAE,CAAC;YAE1D,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;YAE/E,2EAA2E;YAC3E,sEAAsE;YACtE,kEAAkE;YAClE,6EAA6E;YAC7E,iDAAiD;YACjD,EAAE;YACF,6EAA6E;YAC7E,+EAA+E;YAC/E,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,+BAA+B;YAC/B,IAAI,uBAAuB,GAAqC,EAAE,CAAC;YACnE,IAAI,CAAC;gBACD,uBAAuB,GAAG,qCAAqC,CAC3D,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,EAAE;oBACzF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;gBAC9C,IAAI,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,EAAE,CAAC;oBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE;wBAC9G,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,eAAe,EAAE,SAAS,CAAC,eAAe;wBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;wBAChD,IAAI,EAAE,SAAS,CAAC,IAAI;qBACvB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YACD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,MAAM,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CACpF,CAAC;YACF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACX,kCAAkC,qBAAqB,CAAC,MAAM,8DAA8D;oBAC5H,qBAAqB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9E,CAAC;YACN,CAAC;YAED,mEAAmE;YACnE,2EAA2E;YAC3E,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,0EAA0E;YAC1E,0EAA0E;YAC1E,+CAA+C;YAC/C,mDAAmD;YACnD,IAAI,gCAAgC,GAAsC,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACD,gCAAgC,GAAG,8BAA8B,CAC7D,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,EAAE;oBAChF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,gCAAgC,EAAE,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,EAAE;oBAClE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;oBAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;oBAChD,aAAa,EAAE,SAAS,CAAC,aAAa;iBACzC,CAAC,CAAC;YACP,CAAC;YACD,IAAI,gCAAgC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACX,kCAAkC,gCAAgC,CAAC,MAAM,uCAAuC;oBAChH,gDAAgD;oBAChD,gCAAgC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;YACN,CAAC;YAED,4EAA4E;YAC5E,0FAA0F;YAC1F,uEAAuE;YACvE,0FAA0F;YAC1F,wFAAwF;YACxF,qFAAqF;YACrF,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,0FAA0F;YAC1F,yBAAyB;YACzB,IAAI,6BAA6B,GAA8C,EAAE,CAAC;YAClF,IAAI,CAAC;gBACD,6BAA6B,GAAG,sCAAsC,CAClE,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,EAAE;oBACzF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,MAAM,CAChE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sBAAsB,CAAC,wBAAwB,CACxF,CAAC;YACF,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,MAAM,CAChE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sBAAsB,CAAC,wBAAwB,CACxF,CAAC;YACF,0FAA0F;YAC1F,qEAAqE;YACrE,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uFAAuF;gBACvF,sFAAsF;gBACtF,sFAAsF;gBACtF,gFAAgF;gBAChF,8DAA8D;gBAC9D,MAAM,aAAa,GAAG;oBAClB,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,OAAO,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;iBACtG,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,yCAAyC,aAAa,CAAC,MAAM,2CAA2C;oBACxG,uGAAuG;oBACvG,qGAAqG;oBACrG,kGAAkG;oBAClG,sGAAsG;oBACtG,sBAAsB,EACtB;oBACI,KAAK,EAAE,aAAa;oBACpB,qFAAqF;oBACrF,uEAAuE;oBACvE,qBAAqB,EAAE,uBAAuB,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM;iBAC/E,CACJ,CAAC;YACN,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,OAAO,EAAE,EAAE;oBAC3E,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;oBAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;oBAChD,QAAQ,EAAE,SAAS,CAAC,QAAQ;iBAC/B,CAAC,CAAC;YACP,CAAC;YACD,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACX,kCAAkC,uBAAuB,CAAC,MAAM,wCAAwC;oBACxG,iGAAiG;oBACjG,uBAAuB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpF,CAAC;YACN,CAAC;YAED,kFAAkF;YAClF,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,+EAA+E;YAC/E,2EAA2E;YAC3E,iFAAiF;YACjF,+EAA+E;YAC/E,+EAA+E;YAC/E,iFAAiF;YACjF,6EAA6E;YAC7E,kFAAkF;YAClF,MAAM,+BAA+B,GAAa,EAAE,CAAC;YACrD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CACnC,iBAAiB,CAAC,sBAAsB,CACS,EAAE,CAAC;gBACpD,MAAM,iBAAiB,GAAG,WAAW,CAAC,kBAAkB,CAAC;gBACzD,MAAM,mBAAmB,GAA6B,WAAW,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,EAAE,CAAC;gBACnH,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;oBAC7C,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,CAAC,WAAW;wBAAE,SAAS;oBACrE,IAAI,YAAY,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,KAAK,IAAI;wBAAE,SAAS;oBACxF,uEAAuE;oBACvE,2EAA2E;oBAC3E,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,iBAAiB,CAAC;wBAAE,SAAS;oBAC5F,IAAI,CAAC;wBACD,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACxD,iBAAiB,EACjB,qBAAqB,CAAC,MAAM,CAC/B,CAAC;oBACN,CAAC;oBAAC,MAAM,CAAC;wBACL,+BAA+B,CAAC,IAAI,CAChC,sBAAsB,iBAAiB,cAAc,YAAY,CAAC,aAAa,aAAa;4BAC5F,kGAAkG;4BAClG,kGAAkG;4BAClG,kGAAkG,CACrG,CAAC;oBACN,CAAC;gBACL,CAAC;YACL,CAAC;YACD,IAAI,+BAA+B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACX,kCAAkC,+BAA+B,CAAC,MAAM,uCAAuC;oBAC/G,uFAAuF;oBACvF,+BAA+B,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChF,CAAC;YACN,CAAC;YAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAClC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,sBAAsB,CAA2D,CACrH,CAAC;YAEF,IAAI,0BAA0B,KAAK,SAAS,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CACX,uFAAuF;sBACrF,0FAA0F;sBAC1F,gDAAgD,CACrD,CAAC;YACN,CAAC;YACD,IAAI,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAC3C,oFAAoF;gBACpF,IAAI,CAAC,2BAA2B,CAAC,wCAAwC,CAAC,0BAA0B,CAAC,CAAC;YAC1G,CAAC;YAED,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,gBAAgB,IAAI,SAAS,CAAC,CAAC;YACrH,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,2FAA2F;YAC3F,4FAA4F;YAC5F,wFAAwF;YACxF,kFAAkF;YAClF,6FAA6F;YAC7F,2FAA2F;YAC3F,2FAA2F;YAC3F,yDAAyD;YACzD,uFAAuF;YACvF,0FAA0F;YAC1F,oFAAoF;YACpF,wFAAwF;YACxF,oFAAoF;YACpF,wEAAwE;YACxE,EAAE;YACF,wFAAwF;YACxF,sFAAsF;YACtF,sFAAsF;YACtF,wFAAwF;YACxF,kFAAkF;YAClF,gFAAgF;YAChF,2EAA2E;YAC3E,+DAA+D;YAC/D,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzB,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,2BAA2B,CAAC,8BAA8B,EAAE,CAAC;gBAExE,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;gBACnE,MAAM,IAAI,CAAC,2BAA2B,CAAC,4BAA4B,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,6DAA6D;YAC7D,gEAAgE;YAChE,qCAAqC;YACrC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;gBAC/B,GAAG,2CAA2C;gBAC9C,GAAG,4BAA4B;aAClC,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,CAAC;gBACpB,6DAA6D;gBAC7D,0DAA0D;gBAC1D,yDAAyD;gBACzD,4DAA4D;gBAC5D,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;gBAChE,IAAI,CAAC,iCAAiC,CAAC,mCAAmC,CAAC,iBAAiB,CAAC,CAAC;gBAC9F,kFAAkF;gBAClF,mFAAmF;gBACnF,gFAAgF;gBAChF,MAAM,IAAI,CAAC,iCAAiC,CAAC,qCAAqC,EAAE,CAAC;gBACrF,IAAI,cAAc,CAAC,sCAAsC,EAAE,CAAC;oBACxD,MAAM,IAAI,CAAC,iCAAiC;yBACvC,8CAA8C,CAC3C,iBAAiB,CACpB,CAAC;gBACV,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CACT,oFAAoF;0BAClF,oFAAoF;0BACpF,oFAAoF;0BACpF,kEAAkE,CACvE,CAAC;gBACN,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YAED,8DAA8D;YAC9D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;YACxD,IAAI,gCAAgC,EAAE,CAAC;gBACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;gBACjJ,CAAC;gBACD,IAAI,CAAC,uBAAuB,GAAG,gCAAgC,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC1F,SAAS,EAAE,iBAAiB;oBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,gCAAgC,CAAC,SAAS,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC/E,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,0FAA0F;YAC1F,EAAE;YACF,qFAAqF;YACrF,+EAA+E;YAC/E,gFAAgF;YAChF,yFAAyF;YACzF,uFAAuF;YACvF,IAAI,SAAS,EAAE,CAAC;gBACX,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,+BAA+B,CAA4C;qBACxG,QAAQ,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;oBAC/B,MAAO,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,eAAe,CAAmC;yBACrF,0BAA0B,CAAC,MAAM,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;gBACP,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,qDAAqD;YACrD,IAAI,iBAAiB,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YACnG,CAAC;YAED,yFAAyF;YACzF,IAAI,CAAC,qBAAqB,IAAI,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC;YAED,iEAAiE;YACjE,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YAGzD,iDAAiD;YACjD,IAAI,oBAAoB,GAAuC,EAAE,CAAC;YAElE,IAAI,SAAS,EAAE,CAAC;gBACZ,2EAA2E;gBAC3E,uFAAuF;gBACvF,0FAA0F;gBAC1F,6FAA6F;gBAC7F,0CAA0C;gBAC1C,MAAM,4BAA4B,GAAG,sCAAsC,CACvE,IAAI,CAAC,wBAAwB,CAAC,0BAA0B,EAAE,CAC7D,CAAC;gBACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,OAAO,CAAC;gBACjE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,SAAS,EAAE,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClJ,oBAAoB,GAAG;oBACnB,GAAG,iBAAiB;oBACpB,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;iBAC/B,CAAC;gBAIF,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;oBACxC,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;oBAC3C,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;oBACxD,sBAAsB,EAAE,oBAAoB,CAAC,MAAM;iBACtD,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,oBAAoB,GAAG,iBAAiB,IAAI,EAAE,CAAC;gBAE/C,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;oBACxC,iBAAiB,EAAE,CAAC;oBACpB,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;oBACxD,sBAAsB,EAAE,oBAAoB,CAAC,MAAM;iBACtD,CAAC,CAAC;YACP,CAAC;YACD,IAAG,CAAC,qBAAqB,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAC5C,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,EAClE,mBAAmB,CACtB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,iGAAiG,CAAC,CAAC;YACrH,CAAC;YAED,gFAAgF;YAChF,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,oBAAoB;gBACtC,CAAC,CAAC,oBAAoB,CAAC;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,8BAA8B,EAAE,IAAI,CAAC,qCAAqC;oBAC1E,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;oBACvD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;oBAC7D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;iBACtD,CAAC;gBACJ,CAAC,CAAC,IAAI,GAAG,EAA4D,CAAC;YAE1E,2EAA2E;YAC3E,aAAa,CAAC,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACtE,yFAAyF;YACzF,oFAAoF;YACpF,qFAAqF;YACrF,oFAAoF;YACpF,wFAAwF;YACxF,aAAa,CAAC,GAAG,CAAC,kCAAkC,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC3F,qFAAqF;YACrF,2EAA2E;YAC3E,gFAAgF;YAChF,mFAAmF;YACnF,oEAAoE;YACpE,aAAa,CAAC,GAAG,CAAC,6BAA6B,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACjF,aAAa,CAAC,GAAG,CAAC,mCAAmC,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC7F,aAAa,CAAC,GAAG,CAAC,kCAAkC,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAC1F,2EAA2E;YAC3E,4EAA4E;YAC5E,uEAAuE;YACvE,aAAa,CAAC,GAAG,CAAC,8CAA8C,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAClH,sFAAsF;YACtF,sFAAsF;YACtF,wFAAwF;YACxF,sFAAsF;YACtF,wEAAwE;YACxE,aAAa,CAAC,GAAG,CAAC,uCAAuC,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACrG;;;;;;eAMG;YACH,aAAa,CAAC,GAAG,CACf,wCAAwC,EACxC,iCAAiC,CAC/B,gBAAgB,CAAC,cAA8B,EAC/C,8CAA8C,CAC/C,CACF,CAAC;YACF,aAAa,CAAC,GAAG,CACf,6CAA6C,EAC7C,iCAAiC,CAC/B,gBAAgB,CAAC,mBAAmC,EACpD,mDAAmD,CACpD,CACF,CAAC;YACF,8EAA8E;YAC9E,yFAAyF;YACzF,wFAAwF;YACxF,qFAAqF;YACrF,0FAA0F;YAC1F,oEAAoE;YACpE,EAAE;YACF,0FAA0F;YAC1F,+EAA+E;YAC/E,wFAAwF;YACxF,4FAA4F;YAC5F,2FAA2F;YAC3F,IAAI,iBAAiB,EAAE,CAAC;gBACpB,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;YACpH,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,mDAAmD;YACnD,aAAa,CAAC,GAAG,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;YACrE,6DAA6D;YAC7D,qEAAqE;YACrE,qCAAqC;YACrC,4EAA4E;YAC5E,oEAAoE;YACpE,mEAAmE;YACnE,yDAAyD;YACzD,2DAA2D;YAC3D,aAAa,CAAC,GAAG,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,CAAC;YAClF,aAAa,CAAC,GAAG,CAAC,+BAA+B,EAAE,+BAA+B,CAAC,CAAC;YACpF,qFAAqF;YACrF,uFAAuF;YACvF,oFAAoF;YACpF,wFAAwF;YACxF,qFAAqF;YACrF,WAAW;YACX,aAAa,CAAC,GAAG,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;YAC5E,2EAA2E;YAC3E,+EAA+E;YAC/E,2EAA2E;YAC3E,aAAa,CAAC,GAAG,CAAC,gCAAgC,EAAE,gCAAgC,CAAC,CAAC;YACtF,2DAA2D;YAC3D,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,8DAA8D;YAC9D,aAAa;YACb,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,CAAC;YAE9E,IAAI,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,CAAC;gBACtE,aAAa,CAAC,GAAG,CAAC,mCAAmC,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBAC7F,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,+EAA+E;YAC/E,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;gBAC3B,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBACpH,IAAI,CAAC,QAAQ,CAAC,uCAAuC,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACnH,CAAC;YAED,4EAA4E;YAC5E,EAAE;YACF,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,qEAAqE;YACrE,2CAA2C;YAC3C,IAAI,iBAAiB,EAAE,CAAC;gBACpB,MAAM,iBAAiB,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;gBACxF,IAAI,iBAAiB,EAAE,CAAC;oBACpB,oDAAoD;oBACpD,sDAAsD;oBACtD,6DAA6D;oBAC7D,qDAAqD;oBACrD,sDAAsD;oBACtD,sDAAsD;oBACtD,oDAAoD;oBACpD,oDAAoD;oBACpD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,CAAC;oBACxD,MAAM,YAAY,GAAG,iBAAiB,EAAE,0BAA0B;2BAC3D,yCAAyC,CAAC;oBACjD,aAAa,CAAC,GAAG,CACb,sCAAsC,EACtC,oCAAoC,CAAC,YAAY,CAAC,CACrD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,iFAAiF;gBACjF,EAAE;gBACF,4FAA4F;gBAC5F,iFAAiF;gBACjF,6EAA6E;gBAC7E,6EAA6E;gBAC7E,iFAAiF;gBACjF,MAAM,wBAAwB,GAAG,IAAI,CAAC,wBAAwB;qBACzD,gBAAgB,EAAE;qBAClB,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;oBACnB,MAAM,aAAa,GAAG,IAAI,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,YAAY,CAExF,CAAC;oBACF,OAAO,aAAa,EAAE,oBAAoB,EAAE,YAAY,KAAK,SAAS,CAAC;gBAC3E,CAAC,CAAC,CAAC;gBACP,IAAI,wBAAwB,EAAE,CAAC;oBAC3B,aAAa,CAAC,GAAG,CACb,8CAA8C,EAC9C,2CAA2C,EAAE,CAChD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBAED,wDAAwD;gBACxD,6DAA6D;gBAC7D,yCAAyC;gBACzC,0DAA0D;gBAC1D,6DAA6D;gBAC7D,+CAA+C;gBAC/C,EAAE;gBACF,2DAA2D;gBAC3D,0DAA0D;gBAC1D,uDAAuD;gBACvD,sDAAsD;gBACtD,EAAE;gBACF,yDAAyD;gBACzD,2DAA2D;gBAC3D,oDAAoD;gBACpD,uDAAuD;gBACvD,cAAc;gBACd,MAAM,WAAW,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjD,IAAI,WAAW,EAAE,CAAC;oBACd,aAAa,CAAC,GAAG,CACb,kCAAkC,EAClC,gCAAgC,EAAE,CACrC,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;YACL,CAAC;YAED,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAElD,mFAAmF;YACnF,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBACpD,0EAA0E;gBAC1E,yEAAyE;gBACzE,4EAA4E;gBAC5E,6EAA6E;gBAC7E,0EAA0E;gBAC1E,sDAAsD;gBACtD,IAAI,SAAS,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACD,MAAM,0BAA0B,GAAG,SAAS,CAAC,GAAG,CAC5C,kBAAkB,CAAC,0BAA0B,CACX,CAAC;wBACvC,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;wBAC5E,IAAI,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC;oBAChF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uFAAuF,EAAE;4BACtG,GAAG,2BAA2B,CAAC,KAAK,CAAC;yBACxC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wFAAwF,CAAC,CAAC;YAC5G,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,mEAAmE;YACnE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACD,8DAA8D;oBAC9D,4DAA4D;oBAC5D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,8DAA8D;oBAC9D,6DAA6D;oBAC7D,iDAAiD;oBACjD,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,CACxC,gBAAgB;wBACZ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;wBACvD,CAAC,CAAC,SAAS,CAClB,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;gBACjF,CAAC;gBAED,uDAAuD;gBACvD,IAAI,IAAI,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;oBAChE,IAAI,CAAC;wBACD,8BAA8B;wBAC9B,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;wBAErC,0DAA0D;wBAC1D,8CAA8C;wBAC9C,wDAAwD;wBACxD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,wDAAwD;wBACxD,qDAAqD;wBACrD,wCAAwC;wBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YAED,mEAAmE;YACnE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;YAEjE,kFAAkF;YAClF,wFAAwF;YACxF,2BAA2B;YAC3B,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAEnC,uFAAuF;YACvF,uFAAuF;YACvF,kFAAkF;YAClF,0DAA0D;YAC1D,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAE1C,yFAAyF;YACzF,2FAA2F;YAC3F,yFAAyF;YACzF,yDAAyD;YACzD,IAAI,CAAC,yCAAyC,EAAE,CAAC;YAEjD,kCAAkC;YAClC,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAEpD,sFAAsF;YACtF,wFAAwF;YACxF,wFAAwF;YACxF,wFAAwF;YACxF,yFAAyF;YACzF,oEAAoE;YACpE,EAAE;YACF,2FAA2F;YAC3F,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,yFAAyF;YACzF,wFAAwF;YACxF,yFAAyF;YACzF,4FAA4F;YAC5F,wFAAwF;YACxF,EAAE;YACF,iGAAiG;YACjG,+FAA+F;YAC/F,wFAAwF;YACxF,IAAI,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,wCAAwC,CAAC;oBACjE,aAAa,EAAE,iBAAiB,CAAC,WAAW,CAAC,OAAO;oBACpD,SAAS,EAAE,iBAAiB,CAAC,SAAS;iBACzC,CAAC,CAAC;YACP,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAG1B,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,CAAC,2BAA2B,CAAC;gBAC7B,mBAAmB,EAAE,IAAI;gBACzB,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,CAAC;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YACpD,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;QAElF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,sEAAsE;YACtE,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,+BAA+B,CAAC,SAAc;QACxD,IAAI,CAAC;YACD,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAiC,CAAC;YAC/G,MAAM,qBAAqB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAwC,CAAC;YAE7H,MAAM,qBAAqB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC/D,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,yBAAyB,CACnC,SAAc,EACd,aAAmC,EACnC,qBAA2C;QAE3C,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;QAErD,+DAA+D;QAC/D,EAAE;QACF,4DAA4D;QAC5D,iEAAiE;QACjE,mEAAmE;QACnE,+DAA+D;QAC/D,iEAAiE;QACjE,iEAAiE;QACjE,gEAAgE;QAChE,0DAA0D;QAC1D,sDAAsD;QACtD,iEAAiE;QACjE,EAAE;QACF,iEAAiE;QACjE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACnE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACL,OAAO,EAAE,wCAAwC,CAC7C,UAAU,CAAC,MAAM,EACjB,aAAa,EACb,UAAU,CAAC,MAAM,CACpB;oBACD,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,IAAI;oBAC9C,uBAAuB,EAAE,UAAU,CAAC,MAAM;iBAC7C;aACJ,CAAC,CAAC;QACP,CAAC;QACD,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC;YACD,4CAA4C;YAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAqC,CAAC;YACpH,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,CAAgC,CAAC;YAE5G,0FAA0F;YAC1F,MAAM,kBAAkB,GAAwB,qBAAqB,IAAI,EAAE,CAAC;YAE5E,6CAA6C;YAC7C,MAAM,WAAW,CAAC,UAAU,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAEhD,0DAA0D;YAC1D,EAAE;YACF,wFAAwF;YACxF,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,qEAAqE;YACrE,SAAS;iBACJ,GAAG,CAAC,kBAAkB,CAAC,oCAAoC,CAAC;iBAC5D,QAAQ,CAAC,iCAAiC,CAAC;gBACxC,kBAAkB,EAAE,GAAG,EAAE,CAAC,eAAe;gBACzC,6BAA6B,EAAE,KAAK,EAAE,0BAA0B,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE;oBAC5F,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;oBACzG,OAAO,yBAAyB,CAAC,MAAM,YAAY,CAAC,YAAY,CAC5D,0BAA0B,EAC1B,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAC5C,CAAwD,CAAC;gBAC9D,CAAC;gBACD,uBAAuB,EAAE,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,EAAE;oBACjG,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;oBACzG,OAAO,yBAAyB,CAAC,MAAM,YAAY,CAAC,YAAY,CAC5D,wBAAwB,EACxB;wBACI,CAAC,qBAAqB,CAAC,EAAE,gBAAgB;wBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE;qBACnD,CACJ,CAA4D,CAAC;gBAClE,CAAC;gBACD,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;aACpE,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,4GAA4G;YAC5G,IAAI,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,EAAE;oBAClD,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM;iBACjD,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBACnE,GAAG,2BAA2B,CAAC,SAAS,CAAC;iBAC5C,CAAC,CAAC;YACP,CAAC;YAED,+FAA+F;YAC/F,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAqC,CAAC;YACpH,MAAM,mBAAmB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;YAChH,sCAAsC,CAAC,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAE5H,oGAAoG;YACpG,iCAAiC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAEhE,8BAA8B;YAC9B,2FAA2F;YAC3F,iFAAiF;YACjF,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAiC,CAAC;YAC/G,MAAM,qBAAqB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAwC,CAAC;YAE7H,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,eAAe,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;YAC7F,cAAc,CAAC,eAAe,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YAErF,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,gBAAgB,CAAqB,CAAC;YAChG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,kBAAkB,GAAG,IAAI,uCAAuC,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACnK,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;YACzF,qBAAqB,CAAC,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;YAE1E,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;gBACzD,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,aAAa,EAAE,aAAa,CAAC,aAAa;aAC7C,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,qFAAqF;YACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE;gBACxF,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,sBAAsB,CAAC,aAAmC;QACpE,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,kBAAkB,EAAE,CAAC;QACjG,CAAC;QAED,IAAI,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,8BAA8B,CAAC,kBAAkB,CAC1E,WAAW,EACX,sCAAsC,CAAC,gBAAgB,CAC1D,CAAC;YACF,IAAI,eAAe,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,kEAAkE;gBAClE,iEAAiE;gBACjE,mEAAmE;gBACnE,gEAAgE;gBAChE,iEAAiE;gBACjE,IAAI,CAAC,QAAQ,CAAC,uDAAuD,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxF,OAAO;oBACH,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,sCAAsC,CAAC,iCAAiC;iBACnF,CAAC;YACN,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,CACxD,WAAW,EACX,sCAAsC,CAAC,gBAAgB,CAC1D,EAAE,CAAC;gBACA,IAAI,CAAC,QAAQ,CAAC,8DAA8D,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,iBAAiB,EAAE,CAAC;YAChG,CAAC;YAED,2DAA2D;YAC3D,yDAAyD;YACzD,sDAAsD;YACtD,qCAAqC;YACrC,yDAAyD;YACzD,oDAAoD;YACpD,oDAAoD;YACpD,gEAAgE;YAChE,gDAAgD;YAChD,oDAAoD;YACpD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;YAC5C,MAAM,SAAS,GAAG,SAAS;gBACvB,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,CACrD,WAAW,EACX,sCAAsC,CAAC,gBAAgB,EACvD,SAAS,CACZ;gBACD,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClG,OAAO;oBACH,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,sCAAsC,CAAC,cAAc;oBAC7D,MAAM,EAAE,SAAS;iBACpB,CAAC;YACN,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,qEAAqE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,QAAQ,EAAE,IAAI,6BAA6B,CAAC,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACvG,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACV,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAG5C,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;QAEnC,4DAA4D;QAC5D,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAY,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;IACD;;OAEG;IACI,wBAAwB;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,oBAAoB;QACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,2BAA2B,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACI,2BAA2B,CAAC,UAM/B,EAAE;QACF,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QAE1E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,2BAA2B,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC1B,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QAEnE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,CAAC;IAC/D,CAAC;IAED;;OAEG;IACI,4BAA4B;QAC/B,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,sBAAsB;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,0BAA0B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,mBAAmB;QACtB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED;;OAEG;IACI,wBAAwB;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,KAAK,CAAC,kBAAkB,CAC9B,SAAoD,EACpD,sBAAmF;QAEnF,MAAM,kCAAkC,CAAC;YACrC,SAAS;YACT,sBAAsB;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,uBAAuB;YACtC,qBAAqB,EAAE,IAAI,CAAC,oCAAoC;YAChE,UAAU,EAAE,IAAI,CAAC,yBAAyB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,uBAAuB;SACjD,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACO,KAAK,CAAC,qBAAqB;QACjC,oFAAoF;QACpF,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qCAAqC;YAAE,OAAO;QAE/H,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,QAAQ,CAAC,kFAAkF,CAAC,CAAC;gBAClG,OAAO;YACX,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,0BAA0B,CAAC;gBACjG,SAAS,EAAE,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACnE,gBAAgB,CAAC,KAAK,EACtB,qBAAqB,CAAC,IAAI,CAC7B;gBACD,cAAc,EAAE;oBACZ;wBACI,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,mBAAmB,EAAE,oBAAoB,CAAC,WAAW;qBACxD;iBACJ;aACJ,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,iCAAiC,CAAC;gBACvD,gBAAgB;gBAChB,oBAAoB,EAAE,IAAI,CAAC,2BAA2B;gBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,eAAe,EAAE,gCAAgC,CAAC,IAAI,CAAC,qBAAqB,CAAC;aAChF,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE;oBACjD,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,uFAAuF;YACvF,kFAAkF;YAClF,sFAAsF;YACtF,kBAAkB;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,mFAAmF;kBACjF,kFAAkF;kBAClF,oFAAoF;kBACpF,gDAAgD,EAClD;gBACI,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;gBACvD,6BAA6B,EAAE,yBAAyB;gBACxD,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,cAAc,EAAE,CAAC,GAAG,qCAAqC,CAAC;aAC7D,CACJ,CAAC;YAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,qCAAqC,CAAC;gBAC/D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;gBACvD,6BAA6B,EAAE,yBAAyB;gBACxD,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,cAAc,EAAE,CAAC,GAAG,qCAAqC,CAAC;aAC7D,EAAE,gBAAgB,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACO,KAAK,CAAC,4BAA4B;QACxC,0EAA0E;QAC1E,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qCAAqC;YAAE,OAAO;QAE/H,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,aAAa,CAAC;mBAC5E,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC5F,IAAI,CAAC,QAAQ,CAAC,4FAA4F,CAAC,CAAC;gBAC5G,OAAO;YACX,CAAC;YAED,MAAM,2BAA2B,GAAG,IAAI,CAAC,2BAA2B,CAAC;YACrE,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,+FAA+F,CAAC,CAAC;gBAC/G,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,sCAAsC,CAAC;gBAC5D,mFAAmF;gBACnF,yFAAyF;gBACzF,wFAAwF;gBACxF,wEAAwE;gBACxE,4CAA4C;gBAC5C,2BAA2B;gBAC3B,oBAAoB,EAAE,IAAI,CAAC,2BAA2B;gBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,eAAe,EAAE,uCAAuC,CAAC,IAAI,CAAC,qBAAqB,CAAC;aACvF,CAAC,CAAC;YAEH,yFAAyF;YACzF,yFAAyF;YACzF,yFAAyF;YACzF,sFAAsF;YACtF,yEAAyE;YACzE,IAAI,UAAU,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,sFAAsF;sBACpF,uFAAuF;sBACvF,kFAAkF,EACpF;oBACI,4BAA4B,EAAE,UAAU,CAAC,wBAAwB,CAAC,MAAM;oBACxE,wBAAwB,EAAE,UAAU,CAAC,wBAAwB;oBAC7D,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;iBACpE,CACJ,CAAC;YACN,CAAC;YAED,IAAI,UAAU,CAAC,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,+DAA+D,EAAE;oBAC3E,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;iBACpE,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,yFAAyF;YACzF,yFAAyF;YACzF,0FAA0F;YAC1F,2FAA2F;YAC3F,sDAAsD;YACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,oFAAoF;kBAClF,oFAAoF;kBACpF,8DAA8D;kBAC9D,wFAAwF;kBACxF,qFAAqF;kBACrF,4DAA4D,EAC9D;gBACI,0BAA0B,EAAE,UAAU,CAAC,sBAAsB,CAAC,MAAM;gBACpE,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;gBACjE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;gBACzD,oBAAoB,EAAE,gCAAgC;gBACtD,eAAe,EAAE,uCAAuC,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBACpF,wBAAwB,EAAE,CAAC,GAAG,oDAAoD,CAAC;gBACnF,uBAAuB,EAAE,CAAC,GAAG,2CAA2C,CAAC;aAC5E,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,+CAA+C,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACvG,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACK,yCAAyC;QAC7C,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,EAAE,oBAAoB,EAAE,CAAC;YACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,wFAAwF,CAAC,CAAC;gBACxG,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,wDAAwD,CAAC;gBACxE,sBAAsB,EAAE,QAAQ,CAAC,sBAAmF;gBACpH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC9D,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,oEAAoE,EAAE;oBAChF,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,MAAM;iBACrE,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,6FAA6F;kBAC3F,6FAA6F;kBAC7F,yFAAyF;kBACzF,4FAA4F;kBAC5F,0FAA0F;kBAC1F,2FAA2F;kBAC3F,yCAAyC,EAC3C;gBACI,uBAAuB,EAAE,UAAU,CAAC,MAAM;gBAC1C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,MAAM;gBAClE,mBAAmB,EAAE,UAAU;aAClC,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,6FAA6F;YAC7F,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,UAAsC,EAAE;QACzE,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QAE1D,IAAI,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT,EAAC,sBAAsB,EAAE,2BAA2B,CAAC,sCAAsC,EAAC,CAC/F,CAAC;oBACF,MAAM,KAAK,CAAC;gBAChB,CAAC;YACL,CAAC;YAED,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;YACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT,EAAC,sBAAsB,EAAE,2BAA2B,CAAC,uCAAuC,EAAC,CAChG,CAAC;gBACF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,+CAA+C;YAC/C,iFAAiF;YACjF,8CAA8C;YAC9C,mEAAmE;YACnE,IAAI;YAEJ,2CAA2C;YAC3C,yEAAyE;YACzE,0CAA0C;YAC1C,+DAA+D;YAC/D,IAAI;YAEJ,8CAA8C;YAC9C,+EAA+E;YAC/E,6CAA6C;YAC7C,kEAAkE;YAClE,IAAI;YAEJ,qCAAqC;YACrC,6CAA6C;YAC7C,qDAAqD;YACrD,IAAI;YAEJ,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY;gBACnC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YAE7C,sEAAsE;YACtE,2CAA2C;YAC3C,gDAAgD;YAChD,2EAA2E;YAC3E,gEAAgE;YAChE,6EAA6E;YAC7E,qDAAqD;YACrD,qEAAqE;YACrE,8DAA8D;YAC9D,2EAA2E;YAC3E,qDAAqD;YACrD,6DAA6D;YAC7D,oCAAoC;YACpC,mCAAmC;YACnC,MAAM;QAEV,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,qEAAqE;YACrE,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,gCAAgC,EAAE,CAC3F,CAAC;YACF,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAES,0BAA0B,CAAC,OAAmC;QACpE,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACzD,CAAC;IAES,kBAAkB,CAAC,OAAmC;QAC5D,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACzD,CAAC;IAEO,gCAAgC,CAAC,SAAc,EAAE,QAA+C;QACpG,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACvD,OAAO;QACX,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClG,CAAC;CACJ,CAAA;AAtkEY,8BAA8B;IAD1C,UAAU,EAAE;IAcJ,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACnE,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAA;IAC5D,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,YAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAChD,YAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,YAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,YAAA,MAAM,CAAC,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;IAC/E,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,YAAA,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACvC,YAAA,MAAM,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;IACtC,YAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,YAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,YAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,YAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,YAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;IAC1D,YAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACxD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAC/C,YAAA,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAA;IACnD,YAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAChD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAK5C,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAI7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAWxD,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IAKtD,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAKvD,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;qCA9DL,aAAa;QACO,uBAAuB;QACkB,wCAAwC;QAClE,+BAA+B;QACjB,yCAAyC;QAC1D,qCAAqC;QACtB,wCAAwC;QACjE,wBAAwB;QAC3B,0BAA0B;QAC1B,mBAAmB;QACR,4BAA4B;QACzB,sCAAsC;QACT,qCAAqC;QACzC,2DAA2D;QACrG,cAAc;QAClB,YAAY;QACd,kBAAkB;QACoB,qCAAqC;QACjC,uCAAuC;QACvC,uCAAuC;QACjD,yCAAyC;QAC3C,wCAAwC;QACxD,gCAAgC;QAChB,0BAA0B;QAChB,6CAA6C;QACxD,oCAAoC;QACnD,yBAAyB;QACrB,2BAA2B;QACnB,sCAAsC;QACrC,mCAAmC;QACzC,gCAAgC;QACzC,+BAA+B;QAK1B,8BAA8B;QAC1B,gCAAgC,YAepB,2BAA2B,YAWnF,yCAAyC;GA5ErF,8BAA8B,CAskE1C;;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAI,MAAyC;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["import 'reflect-metadata';\nimport { injectable, inject, optional } from 'inversify';\nimport type { PersistenceAdapterType, ResourceConfiguration_InitializationFactoryMap, ResourceRelationship, ResourcesRegistry, ResourceType, RolesConfiguration, FlowsActors_Agent, ResourceConfiguration, FeatureDefinitionWithAutoRegister, FeatureConfiguration, ScopeFeatures, MilestoneDefinition, ForeignKeyFillabilityViolation, CompositionSeedabilityViolation, CompositionSeedabilityResourceInput, CompositionCascadeDeletabilityViolation, NotificationBadgeDefinition, ResourceServerInstance } from '@wildo-ai/saas-models';\nimport type { DataSeedDefinition } from '~wildo-backend-lib/data-seeding/models/data-seed.shared.schemas';\nimport type { DataSeedScopeResolver } from '~wildo-backend-lib/data-seeding/services/data-seed-scope-resolver-registry.backend.service';\nimport type { DataSeedScopeResolverRegistryBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-scope-resolver-registry.backend.service';\nimport { runDataSeedingApplicationBootstrap } from '~wildo-backend-lib/data-seeding/services/data-seed-application-bootstrap.backend';\nimport type { FlowActorSystem_InitializationFactoryMap } from '~wildo-backend-lib/flows-actors/models/flows-actors.backend.schemas';\nimport type { FunctionTool } from '~wildo-backend-lib/flows-actors/models/function-tools.backend.definitions';\nimport type { BackendProviderRegistry } from '@wildo-ai/external-connectors-private/backend';\nimport { ErrorType, ErrorCustomMessageReference, FeatureUnavailabilityBehavior, FeatureUnavailabilityReason, BILLING_SCOPES, ActivationCriterionType, ResourcePrimaryScope, CoreResourceType, CoreResourceOperation, CORE_APP_ROLES, RelationshipNature, validateRequiredForeignKeyFillability, ForeignKeyFillabilityViolationSeverity, validateCompositionSeedability, validateCompositionCascadeDeletability, ChildLifecycleStrategy, EngineCapability } from '@wildo-ai/saas-models';\nimport type { LifecycleConfig, OrganizationUnitNarrowingDeclaration } from '@wildo-ai/saas-models';\nimport { collectApplicationResourcesWithNoPersonalDataDeclaration, type PersonalDataDeclarationSubject } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError, projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport {\n ADMINISTRATIVELY_USABLE_USER_STATUSES,\n measureUsableSuperAdminPopulation,\n resolveSuperAdminConferringRoles,\n SUPER_ADMIN_FLOOR_MINIMUM,\n} from '~wildo-backend-lib/security/authorizations/super-admin-floor.backend.utils';\nimport {\n ADMINISTRATIVELY_USABLE_ORGANIZATION_MEMBER_STATUSES,\n ADMINISTRATIVELY_USABLE_OWNER_USER_STATUSES,\n measureOrganizationsMissingUsableOwner,\n ORGANIZATION_OWNER_FLOOR_MINIMUM,\n resolveOrganizationOwnerConferringRoles,\n} from '~wildo-backend-lib/security/authorizations/organization-owner-floor.backend.utils';\nimport { ApplicationRuntimeProfile, resolveApplicationRuntimeProfileBootAssertions } from '~wildo-backend-lib/config/bootstrap/application-runtime-profile.backend';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ApplicationStartupConfigValidatorService } from '~wildo-backend-lib/config/services/application-startup-config-validator.backend.service';\nimport { ObservabilityBackendService } from '~wildo-backend-lib/monitoring/observability/services/observability.backend.service';\nimport type { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport type { AppConfiguration_BackendAuthored } from '~wildo-backend-lib/config/models/app-config.backend-authored.definitions';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { SubjectSessionRevocationBackendService } from '~wildo-backend-lib/compliance/privacy/services/subject-session-revocation.backend.service';\nimport type { AuthTokenIssuerBackendService } from '~wildo-backend-lib/security/authentications/services/auth-token-issuer.backend.service';\nimport { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\nimport { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport { FeatureDefinitionRegistryBackendService } from '~wildo-backend-lib/features/services/feature-definition-registry.backend.service';\nimport { MilestoneDefinitionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-definition-registry.backend.service';\nimport { MilestoneConditionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-condition-registry.backend.service';\nimport type { MilestoneConditionFn } from '~wildo-backend-lib/guidance/services/milestone-condition-registry.backend.service';\nimport { LifecycleEvaluatorBackendService } from '~wildo-backend-lib/guidance/services/lifecycle-evaluator.backend.service';\nimport { initializeLifecycleCustomImplementations } from '~wildo-backend-lib/guidance/services/lifecycle-custom-implementations.backend';\nimport { createDormancyDetectionBatch } from '~wildo-backend-lib/guidance/batches/dormancy-detection.batch.backend.service';\nimport { createDataSeedingScheduledRerunBatch } from '~wildo-backend-lib/data-seeding/batches/data-seeding-scheduled-rerun.batch.backend.service';\nimport { createExternalDataPipelineScheduledRunBatch } from '~wildo-backend-lib/external-data/batches/external-data-pipeline-scheduled-run.batch.backend.service';\nimport { createDataSeedingRunCleanupBatch } from '~wildo-backend-lib/data-seeding/batches/data-seeding-run-cleanup.batch.backend.service';\nimport { FlowsActorsRegistryService } from '~wildo-backend-lib/flows-actors/services/flows-actors-registry.service';\nimport { ResourceServerInstancesRegistryBackendService } from '~wildo-backend-lib/mcp/services/resource-server-instances-registry.backend.service';\nimport { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport { ServicesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/services/services-registry-handler.backend.service';\nimport { ControllersRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/controllers-registry-handler.backend.service';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { getManualControllersBackend } from '~wildo-backend-lib/base-classes/models/manual-controllers.backend.definition';\nimport { HttpServerBackendService } from './http-server.backend.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { AuthorizationsBackendService } from '~wildo-backend-lib/security/authorizations/services/authorizations.backend.service';\nimport { BatchesCronjobsExecutor_BackendService } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-executor.backend.service';\nimport { BatchesCronjobsCustomExecution_Service } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-custom-execution.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { AuthExecutionContextFactoryBackendService } from '~wildo-backend-lib/security/authentications/services/auth-execution-context-factory.backend.service';\nimport { ResourceOperationCustomImplementationRegistryBackendService } from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation-registry.backend.service';\nimport { CoreBackend_ServiceImplementationsFactories } from '~wildo-backend-lib/resources/models/custom-service-implementations.backend.definition';\nimport { createFilesCleanupBatch } from '~wildo-backend-lib/files/batches/files-cleanup.batch.backend.service';\nimport { createConsumableTokensCleanupBatch } from '~wildo-backend-lib/security/consumable-tokens/batches/consumable-tokens-cleanup.batch.backend.service';\nimport { createA2AAbandonedTaskSweepBatch } from '~wildo-backend-lib/flows-actors/a2a/batches/a2a-abandoned-task-sweep.batch.backend.service';\nimport { createAnonymousSessionCleanupBatch } from '~wildo-backend-lib/security/authentications/batches/anonymous-session-cleanup.batch.backend.service';\nimport { createOrganizationMemberInvitationSweepBatch } from '~wildo-backend-lib/organizations/batches/organization-member-invitation-sweep.batch.backend.service';\nimport { createSuspensionReactivationSweepBatch } from '~wildo-backend-lib/base-classes/services/batches/suspension-reactivation-sweep.batch.backend.service';\nimport { createResourceRetentionSweepBatch } from '~wildo-backend-lib/base-classes/services/batches/resource-retention-sweep.batch.backend.service';\nimport { createOrganizationPurgeBatch } from '~wildo-backend-lib/organizations/batches/organization-purge.batch.backend.service';\nimport { isScimProvisioningEnabledForAnyOrgType } from '~wildo-backend-lib/organizations/services/scim-provisioning-gate.backend.utils';\nimport { emailBatchSendService } from '~wildo-backend-lib/notifications/email/services/email-batch-send.batch.backend.service';\nimport { m2mWebhookDeliveryBatchService } from '~wildo-backend-lib/notifications/webhooks/outbound/batches/m2m-webhook-delivery.batch.backend.service';\nimport { a2aPushDeliveryBatchService } from '~wildo-backend-lib/flows-actors/a2a/batches/a2a-push-delivery.batch.backend.service';\nimport { siemWebhookDeliveryBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/siem-webhook-delivery.batch.backend.service';\nimport { immudbAuditReconcileBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/immudb-audit-reconcile.batch.backend.service';\nimport { auditLogsArchiveBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/audit-logs-archive.batch.backend.service';\nimport { shouldWarnLayer2AuditProviderInactive } from '~wildo-backend-lib/compliance/audit-trails/utils/layer2-audit-provider-boot-diagnostic.backend.utils';\nimport { StripeStandardBillingProvider } from '~wildo-backend-lib/billing/services/stripe-standard-billing-provider.backend.service';\n// Internal callers go through the path alias (the `@wildo-ai/saas-backend-lib/custom-batch-manifests`\n// subpath export exists for external spec-layer consumers; self-imports through the public\n// package name are not wired in this workspace's tsconfig path map).\nimport {\n ANONYMOUS_SESSION_CLEANUP_BATCH_REF,\n ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF,\n SUSPENSION_REACTIVATION_SWEEP_BATCH_REF,\n JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ORGANIZATION_PURGE_BATCH_REF,\n CONSUMABLE_TOKENS_CLEANUP_BATCH_REF,\n A2A_ABANDONED_TASK_SWEEP_BATCH_REF,\n DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON,\n EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n DORMANCY_DETECTION_BATCH_REF,\n EMAIL_BATCH_SEND_BATCH_REF,\n FILES_CLEANUP_BATCH_REF,\n M2M_WEBHOOK_DELIVERY_BATCH_REF,\n A2A_PUSH_DELIVERY_BATCH_REF,\n SIEM_WEBHOOK_DELIVERY_BATCH_REF,\n IMMUDB_AUDIT_RECONCILE_BATCH_REF,\n AUDIT_LOGS_ARCHIVE_BATCH_REF,\n RAG_RECONCILIATION_SWEEP_BATCH_REF,\n RAG_EMBEDDING_DRAIN_BATCH_REF,\n} from '~wildo-backend-lib/base-classes/services/batches/engine-custom-batch-manifests';\nimport { createRagReconciliationSweepBatch } from '~wildo-backend-lib/rag/batches/rag-reconciliation-sweep.batch.backend.service';\nimport { createRagEmbeddingDrainBatch } from '~wildo-backend-lib/rag/batches/rag-embedding-drain.batch.backend.service';\nimport { SAAS_SERVICE_TYPES as TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { ResourceCustomServiceImplementationFactory } from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation.factory.backend';\nimport { MongoDBService } from '~wildo-backend-lib/databases/services/mongodb.service';\nimport { RedisService } from '~wildo-backend-lib/databases/services/redis.service';\nimport { I18nBackendService, CustomLabelsMap } from '~wildo-backend-lib/i18n/services/i18n.backend.service';\nimport { FileStorageRouterBackendService } from '~wildo-backend-lib/files/storage/file-storage-router.backend.service';\nimport { PdfTemplateBindingBackendService } from '~wildo-backend-lib/pdf-templates/services/pdf-template-binding.backend.service';\nimport type { PdfTemplateBindingsMap } from '~wildo-backend-lib/pdf-templates/models/pdf-template-binding';\nimport { QueueWorkerInitializerBackendService } from '~wildo-backend-lib/queue/queue-worker-initializer.backend.service';\nimport { CronJobSyncBackendService } from '~wildo-backend-lib/queue/cron-job-sync.backend.service';\nimport type { ProductCatalogSyncBackendService } from '~wildo-backend-lib/billing/services/back-office/product-catalog-sync.backend.service';\nimport type { UsageMeteringBackendService } from '~wildo-backend-lib/billing/services/back-office/usage-metering.backend.service';\nimport {\n createBillingSubjectErasureEffect,\n TERMINAL_SUBSCRIPTION_STATUSES,\n} from '~wildo-backend-lib/billing/services/back-office/billing-subject-erasure-effect.backend';\nimport type { SystemAccessBackendService } from '~wildo-backend-lib/base-classes/services/services/system-access.backend.service';\nimport type { BillingFeatureSyncBackendService } from '~wildo-backend-lib/billing/services/back-office/billing-feature-sync.backend.service';\nimport { initializeBillingCustomImplementations, registerBillingPostOperationHooks, setBillingWebSocketService } from '~wildo-backend-lib/billing/services/custom-impl/billing-custom-implementations.backend';\nimport { ExternalProvider_ExchangeProtocol_Kind, type StandardBilling_Interface } from '@wildo-ai/external-connectors-models';\nimport type { WebhookHandlerBackendService } from '~wildo-backend-lib/notifications/webhooks/services/webhook-handler.backend.service';\nimport type { WebhookAutoControllerBackendService } from '~wildo-backend-lib/notifications/webhooks/controllers/webhook-auto-controller.backend.service';\nimport { BillingWebhookAdapter } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-adapter.backend.service';\nimport { BillingWebhookCapabilityHandler } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-capability-handler.backend.service';\nimport { BillingWebhookEventRouterBackendService } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-event-router.backend.service';\nimport type { WebSocketService } from '~wildo-backend-lib/requests/service/websocket.service';\nimport type { BillingConfiguration, ProductDefinition, ChartDefinition, GuidanceFlowDefinition } from '@wildo-ai/saas-models';\nimport { ChartRegistryBackendService } from '~wildo-backend-lib/charts/services/chart-registry.backend.service';\nimport { GuidanceTriggerEvaluatorBackendService } from '~wildo-backend-lib/guidance/services/guidance-trigger-evaluator.backend.service';\nimport { DataSeedRegistryBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-registry.backend.service';\nimport { DataSeedDispatcherBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-dispatcher.backend.service';\nimport { DataSeedingAdminBackendController } from '~wildo-backend-lib/data-seeding/controllers/data-seeding-admin.backend.controller';\nimport { EmailTemplateRegistryBackendService } from '~wildo-backend-lib/notifications/email/services/email-template-registry.backend.service';\nimport type { EmailTemplateDefinitionsMap } from '~wildo-backend-lib/notifications/email/models/email-template-definition';\nimport { BillingStateBackendService } from '~wildo-backend-lib/billing/services/back-office/billing-state.backend.service';\nimport { resolveFeatureGatedCoreResourceExclusions } from '~wildo-backend-lib/runtime/utils/feature-gated-core-resource-exclusions.backend.utils';\nimport { resolveApplicationConfigForStartup } from '~wildo-backend-lib/runtime/utils/application-startup-config-access.backend.utils';\n\n\n\n/*\n Configuration object for {@link StartApplicationBackendService.initialize}.\n \n Groups the 25+ positional parameters into a single typed config,\n * preventing silent mis-ordering bugs (e.g. `customLabels` passed as `undefined`\n * at the wrong positional slot).\n /\nexport interface ApplicationInitializationConfig {\n sharedResourceConfigurations: ResourceConfiguration_InitializationFactoryMap;\n sharedResourceFieldIdentifiers?: Record<string, string>;\n sharedResourceRelationships: ResourceRelationship[];\n\n backendResourceConfigurations?: ResourceConfiguration_InitializationFactoryMap;\n backendResourceFieldIdentifiers?: Record<string, string>;\n backendResourceRelationships?: ResourceRelationship[];\n\n /\n App-declared notification badge definitions (merged with the framework's\n * `coreNotificationBadgeDefinitions` in the registry). DERIVED_QUERY badges\n * are recomputed by the dispatcher on source-resource mutations + on connect.\n /\n notificationBadgeDefinitions?: NotificationBadgeDefinition[];\n\n /\n Resources this application narrows by ORGANIZATION UNIT, keyed by resource type.\n \n assurance-control: WILDO.ACCESS.LEAST_PRIVILEGE — least-privilege confinement of a\n * unit-scoped principal to the records of their unit.\n \n Naming a resource here admits a caller whose authority for it comes ONLY from an organization\n * unit grant, and then confines every read and write to the rows of the units that grant covers.\n * ADDITIVE: a caller whose organization-wide role already satisfies the operation is not narrowed\n * at all, so opting a resource in can never shrink a result set someone could already see.\n \n `unitFieldName` must name a real field on that resource's schema holding the owning\n * `ORGANIZATION_UNITS` id. The authorization plane (membership, unit membership, units themselves,\n * and roles-bearing machine credentials) may never be declared here — startup fails closed if it\n * is, because a resource that ISSUES authority must not be governed by the authority it issues.\n /\n organizationUnitNarrowing?: Readonly<Partial<Record<string, OrganizationUnitNarrowingDeclaration>>>;\n\n customServiceImplementations: ResourceCustomServiceImplementationFactory[];\n\n\n customRoles?: RolesConfiguration;\n customControllers?: AbstractControllerBackendService[];\n container?: any;\n controllerWhiteList?: string[];\n isPlatformApplication?: boolean;\n /\n PLATFORM MODE ONLY (refused otherwise): the persistence adapter the platform service's OWN\n * resources are built on. Platform startups hydrate `AppConfigurationService` AFTER\n * `super.initialize()`, so the normal config-driven adapter resolution cannot see their choice\n * at repository-construction time — this passes the answer the platform already holds from its\n * Phase-1 bridged config. See `RepositoriesRegistryHandlerBackendService.platformModeDefaultAdapter`\n * for the full ordering rationale (Phase 5.2, D7). Non-platform applications declare their\n * adapter in application config (`DATABASE_DEFAULT_ADAPTER`); a second knob here would smuggle\n * the decision past that contract, which is why passing it without `isPlatformApplication`\n * throws.\n /\n platformPersistenceAdapter?: PersistenceAdapterType;\n\n customBatchesFactory?: (deps: {\n logger: LoggerService;\n errorBuilder: ErrorBuilderBackendService;\n errorHandler: ErrorHandlerService;\n executionContextCreatorService: ExecutionContextCreatorBackendService;\n resourcesRegistryService: ResourcesRegistryBackendService;\n repositoriesRegistryService: RepositoriesRegistryHandlerBackendService;\n servicesRegistryService: ServicesRegistryHandlerBackendService;\n }) => Map<string, BatchesCronjobsCustomExecution_Service<any, any>>;\n\n flowsActorsRegistry?: {\n flowActorSystemsFactoryMap?: FlowActorSystem_InitializationFactoryMap;\n agents?: FlowsActors_Agent[];\n functionTools?: FunctionTool[];\n };\n\n /\n App-declared NAMED external resource-server instances (R-2): multiple MCP servers and/or A2A\n * agents, each served at its own URL segment with its own RFC 8707 audience, discovery document,\n * and curated content (MCP tools via `operation.mcp.servers`; A2A skills via `actorSystemRefs`).\n \n Purely ADDITIVE — the unnamed default `/mcp` and `/a2a` surfaces always exist and are not\n * declared here. Membership refs are validated against the resource + actor-system registries at\n * startup, so a ref typo is a startup failure rather than a silently-empty surface.\n /\n resourceServerInstances?: ResourceServerInstance[];\n\n customLabels?: CustomLabelsMap;\n backendProviderRegistry?: BackendProviderRegistry;\n\n customFeatureDefinitions?: FeatureDefinitionWithAutoRegister[];\n customFeatureConfiguration?: {\n profiles?: Record<string, ScopeFeatures>;\n defaultProfile?: string;\n unavailabilityPolicy?: Partial<FeatureConfiguration['unavailabilityPolicy']>;\n };\n\n chartDefinitions?: ChartDefinition[];\n customMilestoneDefinitions?: MilestoneDefinition[];\n customMilestoneConditions?: Array<{ ref: string; fn: MilestoneConditionFn }>;\n productDefinitions?: ProductDefinition[];\n emailTemplateDefinitions?: EmailTemplateDefinitionsMap;\n /* Generated provider topology module imported by the application package. /\n providerRuntime?: ProviderRuntimeArtifact;\n /\n Backend-only generated PDF template bindings.\n \n Shared `z_file({ generation })` metadata carries only a stable\n * `templateId` because resource schemas are consumed by frontend,\n * specification, and companion surfaces. The live React-PDF template object\n * stays here, in backend startup configuration, and is validated against the\n * already-initialized resource registry before services/controllers accept\n * traffic.\n /\n pdfTemplateBindings?: PdfTemplateBindingsMap;\n backendConfig?: AppConfiguration_BackendAuthored;\n guidanceFlowDefinitions?: GuidanceFlowDefinition[];\n\n /\n Declarative data-seed definitions collected from `BackendDomainModule.seeds`.\n \n Consumed by the `DataSeedRegistry` / `DataSeedDispatcher` to run\n * application-lifecycle seeds at boot (Step 7.7) and resource-lifecycle /\n * lazy seeds at request time. See `.cursor/plans/seeding-first-class.md`.\n /\n dataSeeds?: DataSeedDefinition[];\n\n /\n Phase 7 / Item 47 (cron scheduler) — Slice 3.\n \n Custom scope-iteration callbacks aggregated from each module's\n * `BackendDomainModule.dataSeedScopeResolvers`. Forwarded to\n * `runDataSeedingApplicationBootstrap`, which calls\n * `DataSeedScopeResolverRegistryBackendService.registerResolvers` once\n * per boot.\n \n Cron seeds with `schedule.iterationStrategy === CUSTOM_RESOLVER`\n * resolve their `relatedId` rows via the resolver registered under the\n * matching `customResolverKey`.\n /\n dataSeedScopeResolvers?: Record<string, DataSeedScopeResolver>;\n\n /\n WHICH RUNTIME is booting this lifecycle, which determines which boot\n * ASSERTIONS apply. Defaults to\n * {@link ApplicationRuntimeProfile.APPLICATION_BACKEND}, so a host that does\n * not declare a profile is over-validated rather than under-validated.\n \n Distinct from {@link headlessMode} and its siblings: those control which\n * subsystems START, this controls which DECLARATION CLASSES are asserted to\n * be complete. See `application-runtime-profile.backend.ts`.\n /\n runtimeProfile?: ApplicationRuntimeProfile;\n /* Skip HTTP server initialization (used by apps-manager for E2E testing) /\n headlessMode?: boolean;\n /* Skip cron-job sync for non-HTTP runtimes like minions. /\n skipCronSync?: boolean;\n /\n Skip the shared application job consumers for runtimes that connect to\n * RabbitMQ only for their own dedicated topology (default: `false`).\n \n The canonical opt-in is a `BackgroundRuntimeType.MINION`: it reuses the\n * full backend startup lifecycle but must consume ONLY its own\n * `minion-tick.<name>` queue, never the shared operations/scheduled/callbacks\n * queues. When `true`, the queue-worker initializer still connects to the\n * broker (the minion's tick consumer needs that connection) but does NOT run\n * `jobConsumer.startConsuming()` — otherwise RabbitMQ would round-robin each\n * scheduled-cron tick between the backend-api pod and the minion, and the\n * minion would dead-letter every tick it cannot interpret (~50% loss).\n \n Sibling of {@link skipCronSync}; both default `false` so backend-api is\n * unaffected. Never set on the primary backend-api runtime.\n /\n skipJobConsumers?: boolean;\n /\n Runtime-specific decorator hook for the services registry.\n \n Used by the minion kernel to install resource-access enforcement without\n * changing the backend-api DI graph.\n /\n servicesRegistryDecoratorFactory?: (\n registry: ServicesRegistryHandlerBackendService,\n context: {\n appConfig: AppConfiguration;\n errorBuilder: ErrorBuilderBackendService;\n },\n ) => ServicesRegistryHandlerBackendService;\n /\n Runtime-specific hook that runs immediately after the resource catalog is\n * initialized and before downstream registries (services, flows/actors, controllers)\n * are installed.\n \n Minion startup uses this to cross-validate its `resourceAccess` whitelist\n * against the live application resource catalog.\n /\n afterResourcesRegistryInitialized?: (context: {\n appConfig: AppConfiguration;\n resourcesRegistryService: ResourcesRegistryBackendService;\n errorBuilder: ErrorBuilderBackendService;\n }) => Promise<void> \| void;\n\n /\n Caller-supplied `<scope>.<name>` identifier for THIS backend process.\n * Runtime provider selection is now expected to come from materialized\n * provider-scope artifacts. Examples:\n * - `'services.backend-api'` for a regular backend service\n * - `'minions.marketingScrapper'` for a minion process\n * - `'workers.myRustWorker'` for a worker process\n \n Each app's bootstrap (`index.ts`) is responsible for choosing\n * the correct value. The current runtime keeps the field so the\n * materializer can bind the process to its provider scope without\n * inferring from `SERVICE_NAME`.\n /\n serviceIdentifier?: string;\n}\n\n/\n Start Application Backend Service\n \n Orchestrates the initialization of the backend application by:\n * 1. Initializing application configuration\n * 1.5. Initializing roles configuration (defaults + custom roles)\n * 2. Initializing resources registry with all 4 sources\n * 3. Initializing repositories registry with mongoose models\n * 4. Initializing services registry with business logic layer\n * 5. Initializing controllers registry with HTTP endpoints layer\n * 6. Initializing HTTP server with Express.js and middleware\n * 7. Validating all components are properly initialized\n \n This service ensures proper startup sequence and dependency management.\n /\n\n/* @wildo_source:part:start saas.backend.billing.resolution-failure-reasons facet:layer:backend facet:family:billing /\n/\n Why billing-provider resolution failed at startup. Each reason maps 1:1 to a\n * DISTINCT config surface an app author must fix, so `billing.enabled: true`\n * that cannot resolve a provider fails LOUD with an actionable message instead\n * of the historical catch-all (\"set providerRef + its secret\") that misdirected\n * authors to the secret when the real gap was backend-scope authoring.\n \n Read this as a debugging map — the fatal startup message names the surface,\n * and each reason below is the surface:\n * - PROVIDER_REF_UNSET → `billing.providerRef` in `./backend-api/src/saas-config.backend.ts`\n * - PROVIDER_NOT_REACHABLE_ON_BACKEND → author the ref under `providers.scopes.backend` in `./wildo.saas.config.ts` + a matching backend contribution in `./backend-api/src/provider-contributions.ts` (the classic trap: authored only in a frontend scope), then `wildo config sync`\n * - PROVIDER_DISABLED → the ref resolves but is disabled for the BILLING protocol in external-provider config\n * - SECRET_MISSING → the env var named by the provider's `secretRef` is absent from the per-env `providerEnv` secrets\n * - RESOLUTION_ERROR → the provider threw while resolving (registry / billing-SDK fault)\n /\nenum BillingProviderResolutionFailureReason {\n /* `billing.enabled` is true but `billing.providerRef` is unset. /\n PROVIDER_REF_UNSET = 'provider-ref-unset',\n /\n `providerRef` is set, but no billing runtime contract is exposed to the\n * backend registry for it — the provider is not authored in\n * `providers.scopes.backend` (a common trap: it is authored only in a\n * frontend scope) and/or has no matching backend runtime-owner\n * contribution. The provider is filtered out of the active catalog.\n /\n PROVIDER_NOT_REACHABLE_ON_BACKEND = 'provider-not-reachable-on-backend',\n /* The provider resolves but is disabled by external-provider configuration. /\n PROVIDER_DISABLED = 'provider-disabled',\n /* The provider resolves but its secret (env var `secretRef`) is absent. /\n SECRET_MISSING = 'secret-missing',\n /* An unexpected error was thrown while resolving (registry/SDK fault). /\n RESOLUTION_ERROR = 'resolution-error',\n}\n/* @wildo_source:part:end saas.backend.billing.resolution-failure-reasons /\n\n/\n Discriminated result of {@link StartApplicationBackendService.resolveBillingProvider}.\n * A `null` provider always carries a `reason` (and optional `detail`) so the\n * caller can build a surface-specific error instead of a generic one.\n /\ntype BillingProviderResolution =\n \| { provider: StandardBilling_Interface; reason?: undefined; detail?: undefined }\n \| { provider: null; reason: BillingProviderResolutionFailureReason; detail?: string };\n\n/\n Build the fatal startup message for a failed billing-provider resolution,\n * routed by {@link BillingProviderResolutionFailureReason} to the SPECIFIC\n * config surface the operator must fix. Historically this was a single\n * catch-all (\"set providerRef + its secret\"), which misdirected operators\n * whenever the real gap was backend-scope authoring (providerRef + secret\n * both present, provider simply not exposed to the backend runtime).\n \n Every branch names the file/field to edit and the follow-up command\n * (`wildo config sync`) so the message is actionable without reading source.\n /\nfunction describeBillingProviderResolutionFailure(\n reason: BillingProviderResolutionFailureReason,\n billingConfig: BillingConfiguration,\n detail?: string,\n): string {\n const providerRef = billingConfig.providerRef ?? '(unset)';\n const prefix = 'billing.enabled is true but the billing provider could not be resolved.';\n const disableHint = 'Alternatively set billing.enabled=false to run without billing.';\n\n switch (reason) {\n case BillingProviderResolutionFailureReason.PROVIDER_REF_UNSET:\n return `${prefix} billing.providerRef is unset — set it (e.g. 'stripe') in your `\n + `backend app config (saas-config.backend.ts → billing.providerRef). ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.PROVIDER_NOT_REACHABLE_ON_BACKEND:\n return `${prefix} providerRef='${providerRef}' is set, but that provider is not exposed `\n + `to the BACKEND runtime, so no billing runtime contract could be loaded. A common `\n + `cause is authoring the provider only in a frontend scope. Fix: author '${providerRef}' `\n + `under providers.scopes.backend in wildo.saas.config.ts AND add a matching backend `\n + `contribution (runtimeTargets [{ kind: 'backend' }], protocols ['BILLING_PROVIDER', `\n + `'WEBHOOK_ORIGINATOR']) in the backend package's provider-contributions, then re-run `\n + `\\`wildo config sync\\` to regenerate the provider runtime artifact. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.PROVIDER_DISABLED:\n return `${prefix} providerRef='${providerRef}' resolves but is disabled by external-provider `\n + `configuration for the BILLING protocol. Enable it for this environment, then re-run `\n + `\\`wildo config sync\\`. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.SECRET_MISSING:\n return `${prefix} providerRef='${providerRef}' resolves but its secret `\n + `(env var '${detail ?? 'UNKNOWN'}') is missing. Populate it in your per-env secrets `\n + `(providerEnv) and re-run \\`wildo config sync\\` so it lands in the backend .env. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.RESOLUTION_ERROR:\n return `${prefix} providerRef='${providerRef}' threw while resolving`\n + `${detail ? `: ${detail}` : ''}. Inspect the backend provider registry / billing SDK `\n + `wiring. ${disableHint}`;\n\n default: {\n // Exhaustiveness guard: adding a new reason without a message\n // branch fails the type-check here rather than shipping a blank\n // fatal at runtime.\n const _exhaustive: never = reason;\n return `${prefix} providerRef='${providerRef}' (${String(_exhaustive)}). ${disableHint}`;\n }\n }\n}\n\n@injectable()\nexport class StartApplicationBackendService {\n /\n The profile this runtime booted under. Defaults FAIL-SAFE to `APPLICATION_BACKEND` — the\n * profile that asserts and reports the most — so a host that never declares one is never\n * silently exempted from a check it should run.\n /\n private resolvedRuntimeProfile: ApplicationRuntimeProfile = ApplicationRuntimeProfile.APPLICATION_BACKEND;\n\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n protected isInitialized = false;\n private isPlatformMode = false;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) protected readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) protected readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.ApplicationStartupConfigValidatorService) protected readonly applicationStartupConfigValidator: ApplicationStartupConfigValidatorService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) protected readonly resourcesRegistryService: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) protected readonly repositoriesRegistryService: RepositoriesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService) protected servicesRegistryService: ServicesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ControllersRegistryHandlerService) protected readonly controllersRegistryService: ControllersRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.HttpServerService) protected readonly httpServerService: HttpServerBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) protected readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) protected readonly errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.AuthorizationsService) protected readonly authorizationsService: AuthorizationsBackendService,\n @inject(SAAS_SERVICE_TYPES.BatchesCronjobsExecutorService) protected readonly batchesExecutor: BatchesCronjobsExecutor_BackendService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) protected readonly executionContextCreatorBackendService: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceOperationCustomImplementationRegistryService) protected readonly customImplRegistry: ResourceOperationCustomImplementationRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MongoDBService) protected readonly mongoDBService: MongoDBService,\n @inject(SAAS_SERVICE_TYPES.RedisService) protected readonly redisService: RedisService,\n @inject(SAAS_SERVICE_TYPES.I18nService) protected readonly i18nService: I18nBackendService,\n @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService) protected readonly backendProviderRegistryService: BackendProviderRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService) protected readonly externalProvidersRegistryService: ExternalProvidersRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.FeatureDefinitionRegistryService) protected readonly featureDefinitionRegistryService: FeatureDefinitionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry) protected readonly milestoneDefinitionRegistry: MilestoneDefinitionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneConditionRegistry) protected readonly milestoneConditionRegistry: MilestoneConditionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.LifecycleEvaluator) protected readonly lifecycleEvaluator: LifecycleEvaluatorBackendService,\n @inject(SAAS_SERVICE_TYPES.FlowsActorsRegistryService) protected readonly flowsActorsRegistryService: FlowsActorsRegistryService,\n @inject(SAAS_SERVICE_TYPES.ResourceServerInstancesRegistry) protected readonly resourceServerInstancesRegistry: ResourceServerInstancesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.QueueWorkerInitializerService) protected readonly queueWorkerInitializer: QueueWorkerInitializerBackendService,\n @inject(SAAS_SERVICE_TYPES.CronJobSyncService) protected readonly cronJobSyncService: CronJobSyncBackendService,\n @inject(SAAS_SERVICE_TYPES.ChartRegistryService) protected readonly chartRegistryService: ChartRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.GuidanceTriggerEvaluator) protected readonly guidanceTriggerEvaluator: GuidanceTriggerEvaluatorBackendService,\n @inject(SAAS_SERVICE_TYPES.EmailTemplateRegistry) protected readonly emailTemplateRegistryService: EmailTemplateRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.PdfTemplateBinding) protected readonly pdfTemplateBindingService: PdfTemplateBindingBackendService,\n @inject(SAAS_SERVICE_TYPES.FileStorageRouter) protected readonly fileStorageRouter: FileStorageRouterBackendService,\n // Phase 2.F — data-seeding subsystem. Registry stays inert until\n // Step 7.7 calls `registerSeeds(config.dataSeeds ?? [])`; dispatcher\n // is invoked from the same step (and later from Level-B hooks /\n // lazy-access — Phases 3 / 5).\n @inject(SAAS_SERVICE_TYPES.DataSeedRegistry) protected readonly dataSeedRegistryService: DataSeedRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.DataSeedDispatcher) protected readonly dataSeedDispatcherService: DataSeedDispatcherBackendService,\n // Phase 7 / Item 47 (Slice 3) — cron CUSTOM_RESOLVER registry. Same\n // boot lifecycle as `dataSeedRegistryService`: hydrated once in Step\n // 7.7 from `ApplicationInitializationConfig.dataSeedScopeResolvers`.\n @inject(SAAS_SERVICE_TYPES.DataSeedScopeResolverRegistry) protected readonly dataSeedScopeResolverRegistryService: DataSeedScopeResolverRegistryBackendService,\n // Slice 2 Phase 4 — observability reconcile + graceful-flush wiring. Appended LAST on\n // PURPOSE: `StartApplicationBackendService` has platform subclasses with FORWARDING\n // constructors that spread a positional `super([...])` array (see\n // `start-application.apps-manager.platform.service.ts` and `...registry.platform.service.ts`).\n // Inserting a param mid-list shifts every later arg and mis-injects them — it crashed the\n // apps-manager with \"featureDefinitionRegistryService.registerCoreFeatures is not a function\".\n // Appending keeps those subclasses aligned (they don't forward this last arg → it is\n // `undefined` there, which is HARMLESS because the reconcile call is gated on\n // `!isPlatformApplication`). Wonder-todos uses this class directly, so Inversify injects it\n // by symbol regardless of position. Optional type + `?.` call site reflect the platform case.\n @inject(SAAS_SERVICE_TYPES.ObservabilityBackendService) protected readonly observabilityBackendService?: ObservabilityBackendService,\n // APPENDED for the same subclass-forwarding reason as `observabilityBackendService` above:\n // subclasses that do not forward this arg receive `undefined`, which is harmless here — the\n // super-administrator floor REPORT degrades to a log-only finding when no audit sink is\n // bound, and the report is non-fatal by design either way.\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() protected readonly auditLogsService?: AuditLogsBackendService,\n // Appended LAST (platform-subclass forwarding, as above). The organization-owner floor REPORT\n // builds its own whole-estate measuring context from this factory; a platform subclass that does\n // not forward it receives `undefined`, which is harmless — `reportOrganizationOwnerFloor` skips\n // when it is absent, and platform mode runs no tenant population anyway.\n @inject(SAAS_SERVICE_TYPES.AuthExecutionContextFactory) @optional()\n protected readonly authExecutionContextFactory?: AuthExecutionContextFactoryBackendService,\n // Appended for the same platform-subclass compatibility reason as the optional services above.\n ) {\n this.logger = logger;\n this.appConfigService = appConfigService;\n this.resourcesRegistryService = resourcesRegistryService;\n this.repositoriesRegistryService = repositoriesRegistryService;\n this.servicesRegistryService = servicesRegistryService;\n this.controllersRegistryService = controllersRegistryService;\n this.httpServerService = httpServerService;\n this.authorizationsService = authorizationsService;\n\n this.logDebug = this.logger.debugByType('StartApplicationBackendService');\n this.logger.setDebugTypeLogging('StartApplicationBackendService', false);\n\n this.logDebug('Start application service created');\n }\n\n /\n Initialize the backend application with a structured configuration object.\n /\n public async initialize(config: ApplicationInitializationConfig): Promise<void> {\n\n if (this.isInitialized) {\n this.logDebug('Application already initialized, skipping');\n return;\n }\n\n const {\n sharedResourceConfigurations,\n sharedResourceFieldIdentifiers,\n sharedResourceRelationships,\n backendResourceConfigurations,\n backendResourceFieldIdentifiers,\n backendResourceRelationships = [],\n notificationBadgeDefinitions,\n organizationUnitNarrowing,\n resourceServerInstances,\n customServiceImplementations,\n customRoles,\n customControllers,\n container,\n controllerWhiteList,\n isPlatformApplication = false,\n platformPersistenceAdapter,\n customBatchesFactory,\n flowsActorsRegistry,\n customLabels,\n backendProviderRegistry,\n customFeatureDefinitions,\n customFeatureConfiguration,\n chartDefinitions,\n customMilestoneDefinitions,\n customMilestoneConditions,\n productDefinitions,\n emailTemplateDefinitions,\n providerRuntime,\n pdfTemplateBindings,\n backendConfig,\n guidanceFlowDefinitions,\n dataSeeds,\n dataSeedScopeResolvers,\n runtimeProfile = ApplicationRuntimeProfile.APPLICATION_BACKEND,\n headlessMode = false,\n skipCronSync = false,\n skipJobConsumers = false,\n servicesRegistryDecoratorFactory,\n afterResourcesRegistryInitialized,\n } = config;\n\n // Resolved ONCE, here, so every gated validator below reads the same\n // decision. Resolving per-call-site would let two validators disagree\n // about the runtime they are validating.\n const bootAssertions = resolveApplicationRuntimeProfileBootAssertions(runtimeProfile);\n /\n Kept on the instance so LATER boot steps can consult the same profile this method resolved.\n * Boot steps run as separate methods, and one that has to re-derive the profile is one that\n * can derive it differently — the assertions exist precisely so every step reads one answer.\n /\n this.resolvedRuntimeProfile = runtimeProfile;\n\n try {\n this.logDebug('🚀 Starting backend application initialization...');\n // Step 1: Initialize application configuration\n this.logDebug('📋 Initializing application configuration...');\n\n // Persist platform mode for validation differences\n this.isPlatformMode = !!isPlatformApplication;\n\n if(!isPlatformApplication) {\n await this.appConfigService.initialize();\n if (providerRuntime) {\n this.appConfigService.applyProviderRuntime(providerRuntime);\n }\n this.appConfigService.applyBackendConfig(backendConfig ?? {});\n if (backendConfig) {\n this.logger.info('Backend config applied', {\n sections: Object.keys(backendConfig),\n });\n }\n this.appConfigService.assertNoPreOverridePlaceholders();\n this.logDebug('✅ Application configuration initialized successfully');\n /\n Establish the default MongoDB connection — ONLY when this application has a\n * MongoDB to connect to.\n \n The loader builds `database.mongodb` only when the environment supplies\n * `MONGODB_HOST`, so its ABSENCE is the application saying it has no MongoDB. Until\n * 2026-08-28 this connect was unconditional and rethrowing, which made a mongod a\n * hard boot requirement for every application — including one whose every resource\n * is on PostgreSQL.\n \n Contrast the two blocks immediately below: Redis degrades to in-memory with a\n * warning, and file storage is explicitly non-fatal. MongoDB was the only backing\n * service that could refuse a boot by being absent rather than by being broken.\n \n It stays FATAL when a MongoDB IS declared and the connection fails — that is a\n * real outage and must not be softened into a warning.\n /\n if (this.appConfigService.config.database?.mongodb) {\n try {\n await this.mongoDBService.connect();\n this.logDebug('✅ MongoDB default connection established');\n } catch (e) {\n this.logger.error('❌ MongoDB default connection failed', e as any);\n throw e;\n }\n } else {\n this.logDebug('↷ No MongoDB configured for this application — skipping the default connection.');\n }\n // Establish Redis connection for caching, sessions, and WebSocket sync\n // Redis is optional - graceful fallback to in-memory if unavailable\n try {\n await this.redisService.connect();\n this.logDebug('✅ Redis connection established');\n } catch (e) {\n this.logger.warn('⚠️ Redis connection failed, using in-memory fallbacks', { ...projectCaughtErrorLogFields(e) });\n }\n\n // Initialize file storage (MinIO/S3) — optional, skipped when not configured\n if (this.fileStorageRouter.isConfigured()) {\n try {\n await this.fileStorageRouter.initialize();\n this.logDebug('✅ File storage initialized');\n } catch (e) {\n // Non-fatal AND not final. An application backend fetches short-lived storage\n // credentials from apps-manager, so a backend that boots BEFORE its issuer is\n // listening fails here with ECONNREFUSED through no fault of its own — an\n // ordinary outcome of concurrent respawn.\n //\n // `WildoManagedStorageProvider.healthCheck()` retries acquisition on every\n // readiness probe, so this clears WITHOUT a restart once the issuer is up\n // (proven live on a platform service 2026-08-13: same PID, monotonic uptime,\n // unhealthy → healthy). The previous wording — \"file operations will fail at\n // runtime\" — described the behaviour before that recovery existed, and now\n // sends whoever greps this log hunting a defect that will have fixed itself.\n this.logger.warn('⚠️ File storage initialization failed at startup — will retry on each readiness probe', { ...projectCaughtErrorLogFields(e) });\n }\n } else {\n this.logDebug('📦 File storage not configured, skipping initialization');\n }\n }\n\n // This is the only application-config read allowed before the\n // platform subclass hydrates AppConfigurationService. The helper\n // branches before evaluating the throwing getter, then every\n // startup decision below consumes this resolved boundary value.\n const applicationConfig = resolveApplicationConfigForStartup(this.appConfigService, isPlatformApplication);\n\n if (applicationConfig) {\n this.applicationStartupConfigValidator.validate(applicationConfig);\n }\n\n // Step 1.5: Initialize roles configuration\n this.logDebug('🔐 Initializing roles configuration...');\n if (customRoles) {\n this.authorizationsService.initializeRolesWithCustom(customRoles);\n this.logDebug('✅ Roles configuration initialized with custom roles');\n } else {\n // Roles are already initialized with defaults in the constructor\n this.logDebug('✅ Roles configuration using default roles only');\n }\n\n // Step 2: Initialize resources registry with all 4 sources\n this.logDebug('🔧 Initializing resources registry...');\n\n // Read lifecycle config early — needed for both resource exclusion and evaluator init\n // Platform apps don't use lifecycle, billing, or feature gating\n const lifecycleConfig: LifecycleConfig \| undefined = applicationConfig?.lifecycle;\n\n // Compute excluded resource types based on app configuration.\n // When billing/lifecycle is disabled, their resource types are excluded\n // from the registry (no routes, no repositories, no frontend resources).\n // When billing IS enabled, scope variants for scopes not in enabledScopes\n // are also excluded (e.g., USER variants when only ORG billing is enabled).\n const excludedResourceTypes = resolveFeatureGatedCoreResourceExclusions(\n applicationConfig,\n { isPlatformApplication },\n );\n\n if (excludedResourceTypes) {\n this.logDebug(`Feature-gated resources excluded: ${excludedResourceTypes.size} types`, {\n billingDisabled: !applicationConfig?.billing?.enabled,\n billingDisabledScopes: (() => {\n const billingConfig = applicationConfig?.billing;\n if (!billingConfig?.enabled) return 'all';\n const enabledSet = new Set<string>(billingConfig.enabledScopes ?? []);\n return BILLING_SCOPES.filter(s => !enabledSet.has(s));\n })(),\n lifecycleDisabled: !lifecycleConfig?.enabled,\n });\n }\n\n await this.resourcesRegistryService.initialize(\n sharedResourceConfigurations,\n sharedResourceFieldIdentifiers,\n sharedResourceRelationships,\n (backendResourceConfigurations ?? {}) as ResourceConfiguration_InitializationFactoryMap,\n backendResourceFieldIdentifiers,\n backendResourceRelationships,\n notificationBadgeDefinitions,\n undefined, // customAdditionalUserNotificationDefinitions\n excludedResourceTypes,\n organizationUnitNarrowing,\n );\n this.logDebug('✅ Resources registry initialized successfully');\n if (applicationConfig && afterResourcesRegistryInitialized) {\n await afterResourcesRegistryInitialized({\n appConfig: applicationConfig,\n resourcesRegistryService: this.resourcesRegistryService,\n errorBuilder: this.errorBuilder,\n });\n this.logDebug('✅ Runtime-specific resource-catalog hook completed');\n }\n\n this.pdfTemplateBindingService.initialize(pdfTemplateBindings ?? {}, {\n assertCompleteness: bootAssertions.assertsGeneratedPdfBindingCompleteness,\n });\n this.logDebug('✅ PDF template bindings initialized successfully');\n\n // Step 2.0.1: Initialize feature definition registry\n this.logDebug('🏷️ Initializing feature definition registry...');\n this.featureDefinitionRegistryService.registerCoreFeatures();\n if (customFeatureDefinitions && customFeatureDefinitions.length > 0) {\n this.featureDefinitionRegistryService.registerCustomFeatures(customFeatureDefinitions);\n }\n this.featureDefinitionRegistryService.validateDefinitions();\n this.featureDefinitionRegistryService.logStartupSummary();\n\n // Build and set the merged FeatureConfiguration (profiles + policy)\n if (customFeatureConfiguration) {\n const allDefinitions = this.featureDefinitionRegistryService.getAllDefinitions();\n this.featureDefinitionRegistryService.setConfiguration({\n definitions: allDefinitions,\n profiles: customFeatureConfiguration.profiles ?? {},\n defaultProfile: customFeatureConfiguration.defaultProfile,\n unavailabilityPolicy: {\n defaultBehavior: customFeatureConfiguration.unavailabilityPolicy?.defaultBehavior ?? FeatureUnavailabilityBehavior.UPGRADE_PROMPT,\n whenBillingDisabled: customFeatureConfiguration.unavailabilityPolicy?.whenBillingDisabled ?? FeatureUnavailabilityBehavior.HIDE,\n roleDefaults: customFeatureConfiguration.unavailabilityPolicy?.roleDefaults ?? {},\n reasonDefaults: customFeatureConfiguration.unavailabilityPolicy?.reasonDefaults ?? {\n [FeatureUnavailabilityReason.FEATURE_NOT_ENABLED]: FeatureUnavailabilityBehavior.UPGRADE_PROMPT,\n [FeatureUnavailabilityReason.LIMIT_EXCEEDED]: FeatureUnavailabilityBehavior.LIMIT_UPGRADE_PROMPT,\n [FeatureUnavailabilityReason.NOT_CONFIGURED]: FeatureUnavailabilityBehavior.HIDE,\n },\n },\n });\n this.logDebug('✅ Feature configuration set (profiles + unavailability policy)');\n }\n const analyticsValueMoments = applicationConfig?.analytics?.valueMoments;\n\n this.featureDefinitionRegistryService.warnMisplacedLimitFeatures();\n this.featureDefinitionRegistryService.warnInvalidFeatureReferences({\n featureProfiles: customFeatureConfiguration?.profiles,\n chartDefinitions,\n guidanceFlowDefinitions,\n productDefinitions,\n analyticsValueMoments,\n });\n this.logDebug('✅ Feature definition registry initialized successfully');\n\n // Step 2.0.2: Initialize milestone definition registry\n this.logDebug('🏅 Initializing milestone definition registry...');\n if (customMilestoneConditions && customMilestoneConditions.length > 0) {\n for (const { ref, fn } of customMilestoneConditions) {\n this.milestoneConditionRegistry.registerCondition(ref, fn);\n }\n this.logDebug(`Registered ${customMilestoneConditions.length} custom milestone condition(s)`);\n }\n if (customMilestoneDefinitions && customMilestoneDefinitions.length > 0) {\n this.milestoneDefinitionRegistry.registerCustomMilestones(customMilestoneDefinitions);\n this.milestoneDefinitionRegistry.validateDefinitions();\n this.milestoneDefinitionRegistry.logStartupSummary();\n }\n this.logDebug('✅ Milestone definition registry initialized successfully');\n\n // Step 2.0.3: Initialize lifecycle evaluator configuration\n if (!isPlatformApplication && lifecycleConfig?.enabled) {\n this.logDebug('🔄 Initializing lifecycle evaluator...');\n this.lifecycleEvaluator.setLifecycleConfig(lifecycleConfig);\n\n // Late-binding initialization for lifecycle custom implementations\n initializeLifecycleCustomImplementations(this.lifecycleEvaluator, lifecycleConfig, this.errorBuilder);\n\n // Validate activation criteria refs against registries\n if (lifecycleConfig.activationCriteria?.criteria) {\n for (const criterion of lifecycleConfig.activationCriteria.criteria) {\n if (criterion.criterionType === ActivationCriterionType.MILESTONE) {\n const exists = !!this.milestoneDefinitionRegistry.getDefinition(criterion.milestoneRef);\n if (!exists) {\n this.logger.warn(`Lifecycle activation criterion references unknown milestone: '${criterion.milestoneRef}'`);\n }\n } else if (criterion.criterionType === ActivationCriterionType.GUIDANCE_COMPLETED) {\n this.logDebug(`Lifecycle activation criterion references guidance flow: '${criterion.guidanceFlowRef}' (validated at runtime)`);\n }\n }\n }\n\n this.logDebug('✅ Lifecycle evaluator configured', {\n dormancyThresholdDays: lifecycleConfig.dormancyThresholdDays,\n activityDebounceMinutes: lifecycleConfig.activityDebounceMinutes,\n dormancyCronSchedule: lifecycleConfig.dormancyCronSchedule,\n activationCriteriaCount: lifecycleConfig.activationCriteria?.criteria?.length ?? 0,\n });\n } else if (!isPlatformApplication) {\n this.logDebug('🔄 Lifecycle system disabled (lifecycle.enabled = false or not configured)');\n }\n\n // Step 2.1: Initialize first-class backend provider registry.\n //\n // The composed catalog (engine + app-contributed via\n // `backendProviderRegistry`) is filtered by the authored\n // `providerRuntime.providerRefs` so this backend process only\n // exposes providers materialized for it. Any ref claimed by the\n // runtime artifact but missing from the catalog fails startup\n // loudly — there is no silent fallback to the unfiltered catalog.\n this.logDebug('📦 Initializing backend provider registry...');\n this.backendProviderRegistryService.initialize(backendProviderRegistry, providerRuntime);\n this.logDebug('✅ Backend provider registry initialized', {\n providerRuntimeApplied: Boolean(providerRuntime),\n providerCount: this.backendProviderRegistryService.getRegistry().modules.size,\n });\n\n // Step 2.2: Initialize external providers registry.\n // Skip for platform applications - they initialize config later and will refresh the registry\n if (applicationConfig) {\n this.logDebug('🔌 Initializing external providers registry...');\n await this.externalProvidersRegistryService.initialize();\n this.logDebug('✅ External providers registry initialized successfully');\n\n // F5 (audit Phase 5) — required-capability boot guard. Fail LOUD if any\n // capability the app marked `activation.required` resolves no active\n // provider (a hard requirement with nothing to serve it). Generalizes the\n // audit coherence to EVERY capability; audit is the first user, not special.\n // (Platform apps initialize the registry later, in the `else` branch — they\n // author no `required` capabilities, so the guard belongs on the app path.)\n const missingRequiredCapabilities = this.externalProvidersRegistryService.getRequiredCapabilitiesWithoutProvider();\n if (missingRequiredCapabilities.length > 0) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n message:\n `Required engine capabilities resolve no active provider: [${missingRequiredCapabilities.join(', ')}]. `\n + 'Each is marked `required` in engineCapabilities but has no provider serving it — '\n + 'declare a provider for it (SELECT_ONE needs a primary; FAN_OUT needs ≥1 declared), '\n + 'or drop the `required` flag.',\n missingRequiredCapabilities,\n },\n });\n }\n\n // G4 (audit Phase 5) — fail-OPEN audit-sink reconcile. Distinct from the\n // F5 hard guard above: this WARNS (never throws) when COMPLIANCE_AUDIT_TRAIL\n // is ENABLED but no provider resolves to deliver it — the operator turned on\n // Layer-2 audit fan-out yet nothing serves it (Layer-1 database audit is\n // unaffected). Mirrors ObservabilityBackendService's declared-but-inactive\n // reconcile. The resolved-provider-refs check is the faithful proxy for \"the\n // composite resolves zero live sinks\" (it builds one sink per resolved ref).\n // A `required` audit cap with no provider already threw in F5 above, so this\n // only fires for an enabled-but-not-required capability.\n //\n // Gated on the runtime profile: only a runtime EXPECTED to host the Layer-2\n // audit fan-out (the application backend) treats \"enabled but no provider\" as\n // a misconfiguration. An auxiliary runtime such as a minion is Layer-1-only by\n // design — the immudb node client is installed only in the backend, and the\n // backend's `immudb.audit-reconcile` cron backfills the minion's `AUDIT_LOGS`\n // rows into Layer-2 — so warning there is false-alarm noise on every restart,\n // not a real signal. `assertsLayer2AuditProviderPresence` is read off the same\n // `bootAssertions` decision resolved once above, so this gate cannot disagree\n // with the sibling profile-gated validators about which runtime is booting.\n if (\n shouldWarnLayer2AuditProviderInactive({\n runtimeAssertsLayer2AuditProviderPresence: bootAssertions.assertsLayer2AuditProviderPresence,\n complianceAuditTrailEnabled: this.externalProvidersRegistryService.isEngineCapabilityEnabled(\n EngineCapability.COMPLIANCE_AUDIT_TRAIL,\n ),\n resolvedAuditProviderRefCount: this.externalProvidersRegistryService.getResolvedProviderRefsForCapability(\n EngineCapability.COMPLIANCE_AUDIT_TRAIL,\n ).length,\n })\n ) {\n this.logger.warn(\n 'COMPLIANCE_AUDIT_TRAIL is enabled but no audit-log provider resolves — Layer-2 provider '\n + 'audit fan-out is INACTIVE (Layer-1 database audit is unaffected). Declare an audit provider '\n + '(e.g. immudb) in defineSaaSProviders, or disable the capability if Layer-1 alone is intended.',\n );\n }\n } else {\n this.logDebug('🔌 Skipping external providers registry initialization (platform app - will initialize after config is ready)');\n }\n\n // Step 2.3: Initialize flows-actors registry\n this.logDebug('🎭 Initializing flows-actors registry...');\n const mergedFlowActorSystemsFactoryMap = {\n ...(flowsActorsRegistry?.flowActorSystemsFactoryMap \|\| {}),\n };\n const mergedAgents = [\n ...(flowsActorsRegistry?.agents \|\| []),\n ];\n const mergedFunctionTools = [\n ...(flowsActorsRegistry?.functionTools \|\| []),\n ];\n await this.flowsActorsRegistryService.initialize(\n mergedFlowActorSystemsFactoryMap,\n mergedAgents,\n mergedFunctionTools\n );\n this.logDebug('✅ Flows-actors registry initialized successfully');\n\n // Step 2.3b: Register the app's NAMED external resource-server instances (multiple MCP\n // servers / A2A agents) and validate their membership refs. Runs HERE deliberately — after\n // BOTH the resources registry (Step 2.1, for `operation.mcp.servers`) and the flows-actors\n // registry (Step 2.3, for an agent's `actorSystemRefs`) — because validation resolves refs\n // against them. A bad ref throws a CONFIGURATION error and fails startup (fail-closed):\n // a tool that silently belongs to no catalog, or a card advertising an unroutable skill,\n // is worse than a refusal to boot.\n // Membership validation is gated on the runtime profile: it asserts that every\n // `operation.mcp.servers` / `actorSystemRefs` ref resolves to a declared instance,\n // which is only meaningful for a runtime that actually SERVES those transports.\n // A minion mounts none and carries no declarations, so running this would fail its\n // boot over refs describing a surface it cannot expose — the exact crash-loop that\n // motivated the profile mechanism. Registration itself always runs: an empty\n // registry is the correct state for a non-serving runtime, and `tryGetInstance`\n // callers stay fail-closed against it.\n this.logDebug('🔀 Registering external resource-server instances...');\n this.resourceServerInstancesRegistry.initialize(resourceServerInstances);\n if (bootAssertions.assertsResourceServerMembershipCompleteness) {\n this.resourceServerInstancesRegistry.validateDeclaredMembership(\n this.flowsActorsRegistryService.getActors().map((system) => system.ref),\n );\n this.logDebug('✅ External resource-server instances registered + validated');\n } else {\n this.logDebug('✅ External resource-server instances registered (membership validation N/A for this runtime profile)', {\n runtimeProfile,\n });\n }\n\n // Step 2.4: Initialize I18n service with custom labels\n this.logDebug('🌐 Initializing I18n service...');\n this.i18nService.initialize(customLabels \|\| {}, {\n suppressEmptyWarning: isPlatformApplication,\n });\n this.logDebug('✅ I18n service initialized successfully');\n\n // Step 2.4b: Initialize email template registry\n if (emailTemplateDefinitions && Object.keys(emailTemplateDefinitions).length > 0) {\n this.emailTemplateRegistryService.initialize(emailTemplateDefinitions);\n }\n\n if (!isPlatformApplication) {\n // Reconcile OTLP observability (post-config): compare the `--import` preload's\n // runtime state against the OBSERVABILITY_TELEMETRY provider selection, warn on\n // mismatch (E11), and wire graceful telemetry flush into the shutdown coordinator.\n // `?.` — platform subclasses don't forward this arg (see the constructor note); this\n // branch is non-platform so it's always defined here, but the guard is defensive.\n this.observabilityBackendService?.initialize();\n }\n\n // Step 2.5: Register chart definitions\n if (chartDefinitions && chartDefinitions.length > 0) {\n this.logDebug('📊 Registering chart definitions...', { count: chartDefinitions.length });\n for (const chartDef of chartDefinitions) {\n this.chartRegistryService.registerChart(chartDef);\n }\n this.logDebug('✅ Chart definitions registered successfully', { count: chartDefinitions.length });\n } else {\n this.logDebug('📊 No chart definitions provided, skipping chart registration');\n }\n\n // Step 2.5b: Register guidance flow definitions\n if (guidanceFlowDefinitions && guidanceFlowDefinitions.length > 0) {\n this.logDebug('🧭 Registering guidance flow definitions...', { count: guidanceFlowDefinitions.length });\n this.guidanceTriggerEvaluator.initializeFlows(guidanceFlowDefinitions);\n this.logDebug('✅ Guidance flow definitions registered successfully', { count: guidanceFlowDefinitions.length });\n } else {\n this.logDebug('🧭 No guidance flow definitions provided, skipping guidance registration');\n }\n\n // Step 2.6: Debug URL generation\n this.logDebug('🌐 Displaying generated URLs for debugging...');\n this.resourcesRegistryService.debugDisplayGeneratedUrls();\n\n // Step 3: Initialize repositories registry\n this.logDebug('🗄️ Initializing repositories registry...');\n const resourcesRegistry = this.resourcesRegistryService.getResourcesRegistry();\n\n // Guardrail: a REQUIRED composition-parent FK that the user must supply on\n // org-wide create (the parent is OPTIONAL_CONTEXT/STANDALONE) must be\n // user-fillable — otherwise the create form is silently dead (the\n // todoListId-create class of bug). Surface violations at boot rather than as\n // an unexplained client-side validation failure.\n //\n // Severity split: TARGET_NOT_SEARCHABLE degrades the picker → WARN (a custom\n // create surface might still supply the FK). EXCLUDED_FROM_CREATE is genuinely\n // impossible to create (no context, no control) → FAIL loud so the misconfig\n // never ships. The validator call itself is try/catch-guarded so a validator\n // edge case can never block startup; the intentional FAIL throw is outside\n // that guard so it propagates.\n let fkFillabilityViolations: ForeignKeyFillabilityViolation[] = [];\n try {\n fkFillabilityViolations = validateRequiredForeignKeyFillability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ required-foreign-key fillability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n for (const violation of fkFillabilityViolations) {\n if (violation.severity === ForeignKeyFillabilityViolationSeverity.WARN) {\n this.logger.warn(`⚠️ Required foreign key may be unfillable on create [${violation.kind}]: ${violation.message}`, {\n resourceType: violation.resourceType,\n foreignKeyField: violation.foreignKeyField,\n parentResourceType: violation.parentResourceType,\n kind: violation.kind,\n });\n }\n }\n const fkFillabilityFailures = fkFillabilityViolations.filter(\n (violation) => violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL,\n );\n if (fkFillabilityFailures.length > 0) {\n throw new Error(\n `Resource configuration error — ${fkFillabilityFailures.length} required foreign key(s) are impossible to fill on create:\\n` +\n fkFillabilityFailures.map((failure) => ` • ${failure.message}`).join('\\n'),\n );\n }\n\n // --- Composition-seedability guard (onParentCreate lifecycle) ---\n // FAIL-CLOSED: a composition that OPTED IN to `onParentCreate.enabled` but\n // whose child is not seedable (not default-materializable AND no override)\n // is a genuine misconfig — the runtime seed would silently no-op. It fires\n // ONLY on enabled adopters, so it never trips the dozens of on-demand\n // compositions that legitimately do not eager-seed. The validator call is\n // try/catch-guarded so a validator edge case can never block startup; the\n // intentional throw is outside that guard. See\n // .claude/plans/composition-oncreate-lifecycle.md.\n let compositionSeedabilityViolations: CompositionSeedabilityViolation[] = [];\n try {\n compositionSeedabilityViolations = validateCompositionSeedability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ composition-seedability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n for (const violation of compositionSeedabilityViolations) {\n this.logger.warn(`⚠️ [composition-seedability] ${violation.message}`, {\n childResourceType: violation.childResourceType,\n parentResourceType: violation.parentResourceType,\n missingFields: violation.missingFields,\n });\n }\n if (compositionSeedabilityViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${compositionSeedabilityViolations.length} composition relationship(s) enabled ` +\n `onParentCreate seeding but are not seedable:\\n` +\n compositionSeedabilityViolations.map((violation) => ` • ${violation.message}`).join('\\n'),\n );\n }\n\n // --- Composition cascade-DELETABILITY guard (onParentDelete lifecycle) ---\n // The delete-side counterpart of the seedability guard above. It is wired FAIL-CLOSED for\n // IMPERSONALIZE_AND_RETAIN edges only, and warn-only for DELETE edges:\n // - DELETE violations are a KNOWN, pre-existing backlog (the 16 billing edges tracked in\n // KNOWN_CASCADE_DELETABILITY_GAPS) awaiting a compliance decision — throwing on them\n // would fail boot on the current registry, so they stay a warning until resolved.\n // - IMPERSONALIZE_AND_RETAIN violations have NO such backlog (no core edge declares the\n // strategy yet), and their runtime failure mode is far worse: the misconfiguration\n // surfaces only when a real erasure runs, throws INSIDE the parent-delete transaction\n // and rolls the deletion back — i.e. a GDPR erasure request fails in production. Catch\n // it at boot instead.\n let cascadeDeletabilityViolations: CompositionCascadeDeletabilityViolation[] = [];\n try {\n cascadeDeletabilityViolations = validateCompositionCascadeDeletability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ composition-cascade-deletability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n const retainCascadeViolations = cascadeDeletabilityViolations.filter(\n (violation) => violation.strategy === ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN,\n );\n const deleteCascadeViolations = cascadeDeletabilityViolations.filter(\n (violation) => violation.strategy !== ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN,\n );\n // ONE aggregated line for the known DELETE backlog — per-violation warnings would put ~16\n // lines in every boot log and train operators to ignore the channel.\n if (deleteCascadeViolations.length > 0) {\n // Report the EDGES, not a presumed cause. An earlier version asserted \"known backlog —\n // pending a retain-vs-delete compliance decision\", which is true only for the billing\n // families; a live run showed platform resources in the same list, where the cause is\n // simply a missing DELETE op. Stating one registry's story for every registry's\n // violations is how an operator learns to ignore the channel.\n const distinctEdges = [\n ...new Set(deleteCascadeViolations.map((v) => `${v.childResourceType} <- ${v.parentResourceType}`)),\n ];\n this.logger.warn(\n `⚠️ [composition-cascade-deletability] ${distinctEdges.length} onParentDelete edge(s) declare a DELETE ` +\n `cascade toward a child that cannot be cascade-deleted (missing discovery and/or DELETE op). Deleting ` +\n `such a parent throws CONFIGURATION inside its delete transaction and ROLLS BACK the parent delete, ` +\n `once a child row exists. Each edge needs a decision: add the missing op(s), retain the children ` +\n `(disable the cascade, or use strategy IMPERSONALIZE_AND_RETAIN with a retention-governed child), or ` +\n `drop onParentDelete.`,\n {\n edges: distinctEdges,\n // Surfaced because a duplicated pair means the SAME relationship is registered twice\n // for that child — a registry-assembly problem, not a cascade problem.\n duplicatedEdgeReports: deleteCascadeViolations.length - distinctEdges.length,\n },\n );\n }\n for (const violation of retainCascadeViolations) {\n this.logger.warn(`⚠️ [composition-cascade-deletability] ${violation.message}`, {\n childResourceType: violation.childResourceType,\n parentResourceType: violation.parentResourceType,\n strategy: violation.strategy,\n });\n }\n if (retainCascadeViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${retainCascadeViolations.length} composition relationship(s) declared ` +\n `onParentDelete.strategy = IMPERSONALIZE_AND_RETAIN but cannot be impersonalized-and-retained:\\n` +\n retainCascadeViolations.map((violation) => ` • ${violation.message}`).join('\\n'),\n );\n }\n\n // --- Composition seed op-path resolvability guard (onParentCreate lifecycle) ---\n // Complements the saas-models seedability guard above. That one verifies the\n // child's CREATE DTO* is fillable; it cannot see whether the seed's SERVICE\n // op-path resolves — a backend-only concern. At seed time `createAsSystem`\n // resolves the child's default CREATE op via `getServiceOperationPathDefault`,\n // which accepts ONLY INTERNAL_CALL / API_CALL / API_CALL_WITH_CALLBACK — a\n // REPOSITORY_ONLY (or absent) default CREATE throws OPERATION_PATH_NOT_FOUND and\n // the runtime seed silently no-ops (the exact bug runtime-verify caught on the\n // first org/state adopters). Catch that class at boot, fail-closed, by reusing\n // the very resolver the seed uses (config-only, so callable here). Feature-gated\n // children are legitimately absent from the registry (the runtime seed skips\n // them the same way via `tryGetResourceConfiguration`) → they must not fail boot.\n const compositionSeedOpPathViolations: string[] = [];\n for (const childConfig of Object.values(\n resourcesRegistry.resourceConfigurations,\n ) as unknown as CompositionSeedabilityResourceInput[]) {\n const childResourceType = childConfig.resourceIdentifier;\n const parentRelationships: ResourceRelationship[] = childConfig.resourceRelationships?.parentRelationships ?? [];\n for (const relationship of parentRelationships) {\n if (relationship.nature !== RelationshipNature.COMPOSITION) continue;\n if (relationship.childOperations?.lifecycle?.onParentCreate?.enabled !== true) continue;\n // Feature-excluded child → absent from the registry → the runtime seed\n // skips it (same `tryGetResourceConfiguration` check), so don't fail boot.\n if (!this.resourcesRegistryService.tryGetResourceConfiguration(childResourceType)) continue;\n try {\n this.resourcesRegistryService.getServiceOperationPathDefault(\n childResourceType,\n CoreResourceOperation.CREATE,\n );\n } catch {\n compositionSeedOpPathViolations.push(\n `Composition child '${childResourceType}' (parent '${relationship.resourceType1}') enabled ` +\n `onParentCreate but createAsSystem cannot resolve a default CREATE service op-path — typically a ` +\n `REPOSITORY_ONLY or absent default CREATE variant (the service tier accepts only INTERNAL_CALL / ` +\n `API_CALL). The runtime seed would silently no-op. Make the default CREATE variant INTERNAL_CALL.`,\n );\n }\n }\n }\n if (compositionSeedOpPathViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${compositionSeedOpPathViolations.length} composition relationship(s) enabled ` +\n `onParentCreate seeding but their child has no service-resolvable default CREATE op:\\n` +\n compositionSeedOpPathViolations.map((message) => ` • ${message}`).join('\\n'),\n );\n }\n\n const resourceConfigurations = new Map(\n Object.entries(resourcesRegistry.resourceConfigurations) as [ResourceType, ResourceConfiguration<any, any, any>][]\n );\n\n if (platformPersistenceAdapter !== undefined && !isPlatformApplication) {\n throw new Error(\n 'platformPersistenceAdapter is a PLATFORM-MODE parameter. An application declares its '\n + 'persistence adapter in application config (DATABASE_DEFAULT_ADAPTER); accepting it here '\n + 'would smuggle the decision past that contract.',\n );\n }\n if (platformPersistenceAdapter !== undefined) {\n // BEFORE initializeRepositories, necessarily: this is the construction-time answer.\n this.repositoriesRegistryService.setPlatformModeDefaultPersistenceAdapter(platformPersistenceAdapter);\n }\n\n // Initialize repositories registry on the active default connection\n const activeConnection = this.mongoDBService.getConnection();\n await this.repositoriesRegistryService.initializeRepositories(resourceConfigurations, activeConnection \|\| undefined);\n this.logDebug('✅ Repositories registry initialized successfully');\n\n // PostgreSQL DDL is owned OUTSIDE the engine (the schema planner plans; migrations apply),\n // so a PostgreSQL-backed table can silently disagree with what the repository writes — most\n // sharply for framework-owned columns no app schema declares. Prove the physical tables\n // match the plan HERE, once, rather than letting the first request fail on a bare\n // `column \"...\" does not exist`. Deliberately after `initializeRepositories` (the plans must\n // exist) and outside it (the PostgreSQL connection is lazy and need not be reachable while\n // repositories are being constructed). No-op unless a resource is PostgreSQL-backed, so it\n // never forces a connection an application does not use.\n // THE PRODUCTION MIGRATION DOOR (K7), deliberately immediately BEFORE the schema gate:\n // the runner brings the database to the shipped migrations' state, then the gate verifies\n // the result — so the gate stays the backstop even for the runner itself (K6). Both\n // no-op unless a resource is PostgreSQL-backed, and the runner additionally no-ops when\n // the deployable ships no migrations directory. Concurrency (N instances booting at\n // once) is the runner's own property via the in-database advisory lock.\n //\n // PLATFORM MODE DEFERS BOTH (Phase 5.2): the AppConfigurationService a platform service\n // hydrates AFTER this method cannot answer connection questions here, and this shared\n // body must not read it (the 2026-08-02 incident class, platform/CLAUDE.md). Platform\n // startups invoke `applyStartupPostgresMigrations()` + `verifyPostgreSqlTableSchemas()`\n // themselves — apps-manager immediately after this method returns (its Phase 2.5,\n // BEFORE its first repository read, with the connection supplied by the Phase-1\n // `connectWithUrl` pre-connect door rather than by hydration — Phase 5.3);\n // module-registry in its platform-owner phase, post-hydration.\n if (!isPlatformApplication) {\n this.logDebug('🚚 Applying startup PostgreSQL migrations (if any)...');\n await this.repositoriesRegistryService.applyStartupPostgresMigrations();\n\n this.logDebug('🧮 Verifying PostgreSQL physical table schemas...');\n await this.repositoriesRegistryService.verifyPostgreSqlTableSchemas();\n this.logDebug('✅ PostgreSQL physical table schemas verified');\n }\n\n // Preserve the historical post-repository factory lifecycle:\n // custom factories may resolve repository-backed services while\n // materializing their registrations.\n this.customImplRegistry.initialize([\n ...CoreBackend_ServiceImplementationsFactories,\n ...customServiceImplementations,\n ]);\n\n if (applicationConfig) {\n // Runtime-contract validation needs both the populated email\n // template registry and the finalized `transactionalCore`\n // registrations. It still runs before service/controller\n // initialization, so no operation can accept traffic first.\n this.logDebug('🧭 Validating initialized runtime contracts...');\n this.applicationStartupConfigValidator.validateInitializedRuntimeContracts(applicationConfig);\n // RAG store capability probe (fail-closed) — async because it EXECUTES a pgvector\n // expression on the live connection; no-op for applications with no `.ragSource()`\n // fields, so it never forces a database connection an application does not use.\n await this.applicationStartupConfigValidator.validateInitializedRagStoreCapability();\n if (bootAssertions.assertsPersistenceTransactionReadiness) {\n await this.applicationStartupConfigValidator\n .validateInitializedRuntimeTransactionReadiness(\n applicationConfig,\n );\n } else {\n this.logDebug(\n '🧭 Skipping persistence transaction-readiness proof: this runtime does not own it '\n + '(ApplicationRuntimeProfileBootAssertions.assertsPersistenceTransactionReadiness). '\n + 'The probe touches a synthetic collection no resourceAccess declares, and proves a '\n + 'deployment-wide property the application backend already proves.',\n );\n }\n this.logDebug('✅ Initialized runtime contracts validated successfully');\n }\n\n // Step 4: Initialize services registry (business logic layer)\n this.logDebug('🏢 Initializing services registry...');\n await this.servicesRegistryService.initializeServices();\n if (servicesRegistryDecoratorFactory) {\n if (!applicationConfig) {\n throw new Error('servicesRegistryDecoratorFactory requires application configuration and cannot run during pre-hydration platform startup.');\n }\n this.servicesRegistryService = servicesRegistryDecoratorFactory(this.servicesRegistryService, {\n appConfig: applicationConfig,\n errorBuilder: this.errorBuilder,\n });\n this.rebindServicesRegistryForRuntime(container, this.servicesRegistryService);\n this.logDebug('✅ Runtime-specific services registry decorator installed');\n }\n this.logDebug('✅ Services registry initialized successfully');\n\n // Step 4.4: Supply the session revoker used when a subject erasure scrubs a person's row.\n //\n // Unconditional, unlike the billing effect below: an erased person's login must stop\n // working in every deployment, so this is a core privacy control rather than a\n // provider-tied one. Registered as a PORT rather than injected directly because\n // `AuthTokenIssuer` already depends on the services-registry handler, which is where the\n // scrub chokepoint that calls this lives — a direct dependency would close that cycle.\n if (container) {\n (container.get(SAAS_SERVICE_TYPES.SubjectSessionRevocationService) as SubjectSessionRevocationBackendService)\n .register(async (userId: string) => {\n await (container.get(SAAS_SERVICE_TYPES.AuthTokenIssuer) as AuthTokenIssuerBackendService)\n .invalidateAllTokensForUser(userId);\n });\n this.logDebug('🔒 Subject-erasure session revoker registered');\n }\n\n // Step 4.5: Initialize billing services (if enabled)\n if (applicationConfig?.billing?.enabled && container) {\n await this.initializeBillingServices(container, applicationConfig.billing, productDefinitions);\n }\n\n // Step 4.6: Initialize webhook auto-controller (must happen before controllers registry)\n if (!isPlatformApplication && container) {\n await this.initializeWebhookAutoController(container);\n }\n\n // Step 5: Initialize controllers registry (HTTP endpoints layer)\n this.logDebug('🌐 Initializing controllers registry...');\n\n\n // Get manual controllers from provided container\n let allCustomControllers: AbstractControllerBackendService[] = [];\n\n if (container) {\n // G-4: SCIM controller mount is app-global — it mounts when ANY registered\n // org type opts into scimProvisioning (organizationTypes[t].scimProvisioning.enabled).\n // Per-org / per-token enforcement happens downstream once mounted (DIRECTORY_PROVISIONING\n // feature + the org-type scimProvisioning.enabled gate via isScimProvisioningEnabledForOrg).\n // Fail-closed: off unless a type opts in.\n const directoryProvisioningEnabled = isScimProvisioningEnabledForAnyOrgType(\n this.resourcesRegistryService.getOrganizationTypesConfig(),\n );\n const analyticsEnabled = !!applicationConfig?.analytics?.enabled;\n const manualControllers = isPlatformApplication ? [] : getManualControllersBackend(container, { directoryProvisioningEnabled, analyticsEnabled });\n allCustomControllers = [\n ...manualControllers,\n ...(customControllers \|\| [])\n ];\n\n\n\n this.logDebug('📋 Controllers to register', {\n manualControllers: manualControllers.length,\n runtimeCustomControllers: customControllers?.length \|\| 0,\n totalCustomControllers: allCustomControllers.length\n });\n } else {\n allCustomControllers = customControllers \|\| [];\n\n this.logDebug('📋 Controllers to register', {\n manualControllers: 0,\n runtimeCustomControllers: customControllers?.length \|\| 0,\n totalCustomControllers: allCustomControllers.length\n });\n }\n if(!isPlatformApplication) {\n await this.controllersRegistryService.initialize(\n allCustomControllers.length > 0 ? allCustomControllers : undefined,\n controllerWhiteList\n );\n this.logDebug('✅ Controllers registry initialized successfully');\n } else {\n this.logDebug('Skipping controllers registry initialization in platform mode (will be started by apps-manager)');\n }\n\n // Step 5.5: Initialize batches/cronjobs (core engine + custom + resource-based)\n this.logDebug('🧵 Initializing batches & cronjobs...');\n const customBatches = customBatchesFactory\n ? customBatchesFactory({\n logger: this.logger,\n errorBuilder: this.errorBuilder,\n errorHandler: this.errorHandler,\n executionContextCreatorService: this.executionContextCreatorBackendService,\n resourcesRegistryService: this.resourcesRegistryService,\n repositoriesRegistryService: this.repositoriesRegistryService,\n servicesRegistryService: this.servicesRegistryService,\n })\n : new Map<string, BatchesCronjobsCustomExecution_Service<any, any>>();\n\n // Register core engine batches (always present, independent of custom app)\n customBatches.set(FILES_CLEANUP_BATCH_REF, createFilesCleanupBatch());\n // Hourly RAG reconciliation sweep (plan §3.c backstop, DL1). Registered UNCONDITIONALLY,\n // like files-cleanup: on an application with no `.ragSource()` fields it finds zero\n // resource types and zero chunk sets and costs one enumeration — a better trade than\n // corpus convergence silently depending on a registration condition. It is also the\n // bound every chunk-tier log-never-throw seam cites, so it must exist wherever they do.\n customBatches.set(RAG_RECONCILIATION_SWEEP_BATCH_REF, createRagReconciliationSweepBatch());\n // Five-minute RAG embedding drain (plan §3.d, Phase 4): fills the NULL-vector ledger\n // the sweep counts, and re-embeds on class→model binding moves. Registered\n // UNCONDITIONALLY for the sweep's reason — an app with no `.ragSource()` fields\n // returns after one detection walk; a RAG app with no embeddings provider gets the\n // one-WARN-per-run visibility instead of a silently frozen backlog.\n customBatches.set(RAG_EMBEDDING_DRAIN_BATCH_REF, createRagEmbeddingDrainBatch());\n customBatches.set(CONSUMABLE_TOKENS_CLEANUP_BATCH_REF, createConsumableTokensCleanupBatch());\n customBatches.set(A2A_ABANDONED_TASK_SWEEP_BATCH_REF, createA2AAbandonedTaskSweepBatch());\n // Daily hygiene sweep for the invitation→membership-junction model: prunes\n // long-stale INVITED rows + orphan PENDING_INVITATION users. Always present\n // (invitations are a core org capability, not a feature-gated add-on).\n customBatches.set(ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF, createOrganizationMemberInvitationSweepBatch());\n // Hourly sweep that lifts EXPIRED time-boxed suspensions. Registered UNCONDITIONALLY:\n // `organizationMembers \| suspend` and `users \| suspend_user` both accept a window and\n // persist the resolved instant, so an application without this batch records \"for seven\n // days\" and suspends forever. Unlike the invitation sweep above, correctness does NOT\n // hold without it — the batch is what makes the declared contract true.\n customBatches.set(SUSPENSION_REACTIVATION_SWEEP_BATCH_REF, createSuspensionReactivationSweepBatch());\n /*\n Retention sweeps for the two `.ttl()` resources. Registered UNCONDITIONALLY, like the\n * suspension sweep above and for the same reason: without them the declared contract is\n * simply untrue on PostgreSQL, which has no native TTL. On MongoDB the TTL index also\n * expires these rows — the sweep then finds nothing and costs one cheap query, which is\n * a better trade than retention silently depending on which store an app happens to use.\n /\n customBatches.set(\n JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n createResourceRetentionSweepBatch(\n CoreResourceType.JOB_EXECUTIONS as ResourceType,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ),\n );\n customBatches.set(\n JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n createResourceRetentionSweepBatch(\n CoreResourceType.JOB_PAYLOAD_STORAGE as ResourceType,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ),\n );\n // WS-A tenant teardown — destroys tenants whose retention window has elapsed.\n // Registered UNCONDITIONALLY (no feature gate) for real applications: `request_deletion`\n // is always reachable, so a tenant can always end up marked, and an application without\n // this batch would accumulate marked-but-never-destroyed tenants forever — the exact\n // failure a retention window exists to prevent. Every field of `tenantTeardown` defaults,\n // so an app that declares no block still purges on a 30-day window.\n //\n // Skipped for `isPlatformApplication`: platform services (apps-manager, crontabs-batches-\n // manager, ...) have no ORGANIZATIONS to tear down, and `applicationConfig` is\n // not yet populated at this point in a platform application's boot — it resolves config\n // in its own later phase, AFTER this `super.initialize()` call returns — so reading it here\n // unconditionally threw `app_configuration_not_initialized` at platform-apps-manager boot.\n if (applicationConfig) {\n customBatches.set(ORGANIZATION_PURGE_BATCH_REF, createOrganizationPurgeBatch(applicationConfig.tenantTeardown));\n }\n // Event-triggered (enqueued by the notifications dispatcher, no cron).\n // Registered unconditionally so any email notification enqueued onto\n // the custom-batch queue can resolve its executor.\n customBatches.set(EMAIL_BATCH_SEND_BATCH_REF, emailBatchSendService);\n // Event-triggered M2M outbound webhook delivery (enqueued by\n // `M2MWebhookDispatcherBackendService.enqueueDelivery`, no cron) and\n // SIEM webhook delivery (enqueued by\n // `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`, no\n // cron). Both are registered unconditionally for the SAME reason as\n // email: the dispatchers gate enqueue per-org/per-endpoint, so the\n // drains MUST always resolve — else an enqueued job hits\n // `JOB_BATCH_REF_NOT_FOUND` and is silently dead-lettered.\n customBatches.set(M2M_WEBHOOK_DELIVERY_BATCH_REF, m2mWebhookDeliveryBatchService);\n customBatches.set(SIEM_WEBHOOK_DELIVERY_BATCH_REF, siemWebhookDeliveryBatchService);\n // A2A push-notification delivery (enqueued by `A2APushDispatcherBackendService` on a\n // task transition, no cron). Registered unconditionally for the same reason as its two\n // siblings above: the dispatcher gates enqueue per registered webhook, so the drain\n // MUST always resolve — an enqueued job that hits `JOB_BATCH_REF_NOT_FOUND` is silently\n // dead-lettered, which for a notification means the client is never told and nothing\n // says so.\n customBatches.set(A2A_PUSH_DELIVERY_BATCH_REF, a2aPushDeliveryBatchService);\n // Audit Phase 3 — cron completeness reconciler. Registered unconditionally\n // (like the sibling delivery drains) so a mis-set global flag can't orphan the\n // schedule; it no-ops cleanly when no reconcilable audit sink is declared.\n customBatches.set(IMMUDB_AUDIT_RECONCILE_BATCH_REF, immudbAuditReconcileBatchService);\n // Audit Phase 5 / F1 — cron audit-log ARCHIVAL. Registered\n // unconditionally (like the reconcile batch); it no-ops cleanly at\n // tick time when `auditTrail.archiveAfterDays` is unset (opt-in) or\n // no file-storage provider is configured. Never deletes (AUDIT_LOGS\n // is immutable, G5) — it copies aged rows to durable archival\n // artifacts.\n customBatches.set(AUDIT_LOGS_ARCHIVE_BATCH_REF, auditLogsArchiveBatchService);\n\n if (applicationConfig && this.appConfigService.anonymousSessionsEnabled) {\n customBatches.set(ANONYMOUS_SESSION_CLEANUP_BATCH_REF, createAnonymousSessionCleanupBatch());\n this.logDebug('✅ Anonymous session cleanup batch registered');\n }\n\n // Register lifecycle dormancy detection batch (only when lifecycle is enabled)\n if (lifecycleConfig?.enabled) {\n customBatches.set(DORMANCY_DETECTION_BATCH_REF, createDormancyDetectionBatch(lifecycleConfig.dormancyCronSchedule));\n this.logDebug('✅ Dormancy detection batch registered', { cronSchedule: lifecycleConfig.dormancyCronSchedule });\n }\n\n // Register data-seeding scheduled-rerun batch (Phase 7 / Item 47, Slice 5).\n //\n // Gate: at least one passed `dataSeeds` entry declares a `schedule?:`\n // block. We pre-filter the in-memory definitions array (rather than\n // querying the registry, which is hydrated later in Step 7) so apps\n // without any cron-opted-in seeds don't spawn a minute-tick cron that\n // would always no-op. Platform mode bypasses entirely (no per-tenant\n // data seeds run on the platform process).\n if (applicationConfig) {\n const hasScheduledSeeds = (dataSeeds ?? []).some((seed) => seed.schedule !== undefined);\n if (hasScheduledSeeds) {\n // Fallback ladder is flat by design: the Zod schema\n // applies `DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON`\n // as a default when `dataSeeding.scheduledRerunCronSchedule`\n // is missing but the `dataSeeding` block is present;\n // when the whole block is absent, we short-circuit to\n // the shared constant. Both branches land on the SAME\n // literal, so there's a single source of truth — no\n // `?? manifest.cronExpression ?? ' * * * '` tail.\n const dataSeedingConfig = applicationConfig.dataSeeding;\n const cronSchedule = dataSeedingConfig?.scheduledRerunCronSchedule\n ?? DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON;\n customBatches.set(\n DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n createDataSeedingScheduledRerunBatch(cronSchedule),\n );\n this.logDebug('✅ Data-seeding scheduled-rerun batch registered', { cronSchedule });\n }\n\n // Register the ETL pipeline scheduled-run batch (partial-resource paper, PR-12).\n //\n // Gate: at least one registered resource declares `externalDataPipeline.scheduleCron` — the\n // resources registry is initialized in an earlier step, so we query it directly.\n // Apps with no scheduled pipelines don't spawn a minute-tick cron that would\n // always no-op; on-demand pipelines (no `scheduleCron`) run only through the\n // run service's imperative door. Same platform-mode bypass as the sibling above.\n const hasScheduledEtlPipelines = this.resourcesRegistryService\n .getResourceTypes()\n .some((resourceType) => {\n const configuration = this.resourcesRegistryService.getResourceConfiguration(resourceType) as {\n externalDataPipeline?: { scheduleCron?: string };\n };\n return configuration?.externalDataPipeline?.scheduleCron !== undefined;\n });\n if (hasScheduledEtlPipelines) {\n customBatches.set(\n EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n createExternalDataPipelineScheduledRunBatch(),\n );\n this.logDebug('✅ ETL pipeline scheduled-run batch registered');\n }\n\n // Register data-seeding run-cleanup batch (audit L4-10,\n // post-Phase-7 close-out). Daily retention sweep that prunes\n // terminal `DataSeedRun` rows older than\n // `DataSeedingConfig.runRetentionDays` (default 30) while\n // preserving the MAX(seedVersion) row per business-key group\n // (so dispatcher idempotency is never broken).\n //\n // Gate: any registered seeds (regardless of `schedule?:`).\n // Apps with no seeds produce no `DataSeedRun` rows so the\n // sweep would always no-op. Platform mode bypasses (no\n // per-tenant data seeds run on the platform process).\n //\n // Retention is read at TICK time from app config (NOT at\n // registration), so an in-place config change takes effect\n // on the next daily tick without redeploy — see the\n // manifest's JSDoc and `resolveRetentionDays()` in the\n // batch body.\n const hasAnySeeds = (dataSeeds ?? []).length > 0;\n if (hasAnySeeds) {\n customBatches.set(\n DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n createDataSeedingRunCleanupBatch(),\n );\n this.logDebug('✅ Data-seeding run-cleanup batch registered');\n }\n }\n\n await this.batchesExecutor.initialize(customBatches);\n this.logDebug('✅ Batches & cronjobs initialized');\n\n // Step 6: Initialize HTTP server (skip here in platform mode or headless runtimes)\n if (this.shouldInitializeHttpServer({ headlessMode })) {\n // Register operator-facing admin controllers BEFORE HTTP init so they get\n // mounted at their custom root paths (e.g. /internal/admin/data-seeding)\n // by registerRoutes(). They MUST go through registerCustomController(), not\n // through getManualControllersBackend(), because the manual-controllers list\n // is mounted under /api/v1 by the controllers registry — root-level admin\n // surfaces (mirroring /health) must skip that prefix.\n if (container) {\n try {\n const dataSeedingAdminController = container.get(\n SAAS_SERVICE_TYPES.DataSeedingAdminController,\n ) as DataSeedingAdminBackendController;\n this.httpServerService.registerCustomController(dataSeedingAdminController);\n this.logDebug('🌱 Data-seeding admin controller registered for root mount');\n } catch (error) {\n this.logger.warn('⚠️ Failed to register DataSeedingAdminController; admin endpoints will be unavailable', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n this.logger.info('🌍 Initializing HTTP server...');\n await this.httpServerService.initialize();\n this.logger.info('✅ HTTP server initialized successfully');\n } else if (this.isPlatformMode) {\n this.logDebug('Skipping HTTP server initialization in platform mode (will be started by apps-manager)');\n } else {\n this.logDebug('Skipping HTTP server initialization in headless mode');\n }\n\n // Step 7: Initialize queue workers (for background job processing)\n if (!this.isPlatformMode) {\n this.logger.info('🐰 Initializing queue workers...');\n try {\n // Headless job-processing runtimes (minions) still connect to\n // RabbitMQ here — their own tick consumer needs the adapter\n // connection + topology channel — but must NOT consume the\n // shared operations/scheduled/callbacks queues, or RabbitMQ\n // round-robins the scheduled-cron ticks onto them and they\n // dead-letter every tick they can't interpret. We also turn\n // OFF queue monitoring for those runtimes: it watches exactly\n // those four shared queues (which this runtime doesn't own),\n // and the backend-api pod already monitors them.\n await this.queueWorkerInitializer.initialize(\n skipJobConsumers\n ? { startJobConsumers: false, enableMonitoring: false }\n : undefined,\n );\n this.logger.info('✅ Queue workers initialized (if RabbitMQ configured)');\n } catch (error) {\n // Queue workers failing shouldn't prevent app from starting\n this.logger.warn('⚠️ Queue worker initialization skipped or failed:', error);\n }\n\n // Step 7.5: Sync cron jobs to crontabs-batches-manager\n if (this.shouldSyncCronJobs({ skipCronSync })) {\n this.logger.info('🕐 Syncing cron jobs to crontabs-manager...');\n try {\n // Initialize the sync service\n this.cronJobSyncService.initialize();\n\n // Sync cron jobs. Transient failures do not fail startup:\n // CronJobSyncBackendService keeps one capped,\n // process-lifecycle-aware reconciliation retry pending.\n await this.cronJobSyncService.syncCronJobsToManager();\n } catch (error) {\n // This catch is a final guard for an unexpected service\n // defect; ordinary remote failures are contained and\n // retried by CronJobSyncBackendService.\n this.logger.error('Unexpected cron job sync failure:', error);\n }\n } else {\n this.logDebug('Skipping cron job sync for this runtime profile');\n }\n } else {\n this.logDebug('Skipping queue worker initialization in platform mode');\n }\n\n // Step 7.7: Data-seeding subsystem — register declarations and run\n // application-lifecycle seeds (Phase 2.F of seeding-first-class plan).\n // Extracted into `runDataSeedingStep()` so it can be unit-tested in\n // isolation without standing up the full 30+ dependency boot chain.\n await this.runDataSeedingStep(dataSeeds, dataSeedScopeResolvers);\n\n // Step 7.8: Report — not enforce — the last-super-administrator floor. Runs AFTER\n // seeding so a seeded first administrator counts; see `reportSuperAdminFloor()` for why\n // this can never be fatal.\n await this.reportSuperAdminFloor();\n\n // Step 7.9: The per-tenant twin. Separate call, separate report: the application floor\n // answers \"can anyone administer this deployment\", this one answers \"which tenants can\n // nobody administer\" — different populations, different remedies, and an operator\n // needs both named rather than one folded into the other.\n await this.reportOrganizationOwnerFloor();\n\n // Step 7.10: Report — never enforce — which of the APPLICATION's own resources have said\n // nothing about whether their rows are about people. Reads the registry only: no database,\n // no execution context, so unlike the two floors above it needs nothing to be seeded and\n // cannot be confined to an empty set by a wrong context.\n this.reportApplicationPersonalDataDeclarations();\n\n // Step 8: Validate initialization\n await this.validateInitialization({ headlessMode });\n\n // Step 8.5: If the application's authored authentication policy (`userTypes..auth` —\n // MFA, password, lockout, enabled methods, step-up, session) moved since the last boot,\n // record it in the audit trail. Emitted HERE — after `validateInitialization`, with the\n // repositories registry and the audit boundary live and the resolved policy in effect —\n // because this boot is where the change takes effect and there is no human actor to name\n // (the \"who authored it\" lives in the deployment / source history).\n //\n // Gated three ways: `applicationConfig` is undefined in platform mode (the platform-gate);\n // and `!headlessMode` restricts the emit to the auth-SERVING runtime. A minion boots this\n // same lifecycle headlessly (`headlessMode: true`) with the SAME app config, so without\n // this gate every minion would write a duplicate row for one change — and a background\n // runtime that serves no HTTP/auth is not the honest emitter of an authentication-policy\n // change anyway. `shouldInitializeHttpServer` draws the identical `!headlessMode` line.\n // (Horizontally-scaled serving replicas can still race to one extra row per change; that\n // is safe over-recording in an append-only trail — the gap this closes is UNDER-recording.)\n // The service call is fully self-contained and fire-and-forget, so it cannot fail boot.\n //\n // assurance-control: WILDO.AUDIT.SECURITY_EVENT WILDO.IDENTITY.SESSION_ASSURANCE — the boot-time\n // activation point that guarantees a change to the authored authentication-assurance policy is\n // evidenced, from the auth-serving runtime, on the deployment that puts it into effect.\n if (applicationConfig && this.auditLogsService && !headlessMode) {\n await this.auditLogsService.emitApplicationAuthPolicyChangeIfChanged({\n applicationId: applicationConfig.appIdentity.appName,\n userTypes: applicationConfig.userTypes,\n });\n }\n\n this.isInitialized = true;\n\n\n // Step 9: Display debug information (after initialization is complete)\n this.logDebug('📋 Displaying implemented Mongoose schemas...');\n this.debugDisplayMongooseSchemas({\n showSchemaStructure: true,\n showIndexes: true,\n maxFieldDepth: 2,\n });\n\n this.logDebug('🌐 Displaying registered routes...');\n this.debugDisplayRegisteredRoutes();\n\n this.logDebug('🎉 Backend application initialization completed successfully');\n\n } catch (error) {\n // This orchestration layer does not handle the failure; it propagates\n // it to the runtime host. Logging here would duplicate the terminal\n // process-boundary record and lose host identity/context.\n throw error;\n }\n }\n\n /*\n Initialize the webhook auto-controller with its dependencies.\n \n Must run BEFORE the controllers registry mounts the controller's router:\n * `initialize()` is what actually registers the webhook routes (the route\n * set is data-dependent and the webhook handler is not constructor-injected,\n * so the base class's constructor-time `setupRoutes()` hook is a no-op — see\n * `WebhookAutoControllerBackendService.initialize()` for the full rationale).\n * Async because route definitions are read from first-class provider runtime contracts.\n /\n private async initializeWebhookAutoController(container: any): Promise<void> {\n try {\n const webhookHandler = container.get(SAAS_SERVICE_TYPES.WebhookHandlerService) as WebhookHandlerBackendService;\n const webhookAutoController = container.get(SAAS_SERVICE_TYPES.WebhookAutoController) as WebhookAutoControllerBackendService;\n\n await webhookAutoController.initialize(webhookHandler);\n this.logDebug('🔗 Webhook auto-controller initialized');\n } catch (error) {\n // Non-fatal — if no webhook providers are registered, this is expected\n this.logger.warn('Webhook auto-controller initialization skipped', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /\n Initialize billing services when billing is enabled.\n \n Resolves the billing provider from the external connectors system\n * and initializes all billing services (product catalog sync,\n * usage metering, promotions, custom implementations) and wires up webhooks.\n /\n private async initializeBillingServices(\n container: any,\n billingConfig: BillingConfiguration,\n appProductDefinitions?: ProductDefinition[],\n ): Promise<void> {\n this.logDebug('💳 Initializing billing services...');\n\n // Resolve the billing provider BEFORE the non-fatal try below.\n //\n // \"billing.enabled = true but no provider resolvable\" is an\n // INCOHERENT CONFIG, not a runtime hiccup, and must FAIL LOUD at\n // startup. The previous warn-and-return silently degraded: billing\n // resources stayed registered (enabled ⇒ not excluded) but the\n // back-office services that register their operation paths + run\n // the org auto-create never initialized. The result was request-\n // time FATALs (`resources_registry_operation_path_not_found` on\n // `organizationBillingAccounts` / `products` / `prices` /\n // `promotions`) during org provisioning — exactly the\n // silent-degradation anti-pattern the design philosophy forbids.\n //\n // The try/catch further down stays scoped to RUNTIME init errors\n // (a provider that resolves but then throws mid-wire) which remain\n // non-fatal. Config incoherence is a different, fatal class.\n const resolution = await this.resolveBillingProvider(billingConfig);\n if (!resolution.provider) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n message: describeBillingProviderResolutionFailure(\n resolution.reason,\n billingConfig,\n resolution.detail,\n ),\n providerRef: billingConfig.providerRef ?? null,\n resolutionFailureReason: resolution.reason,\n },\n });\n }\n const billingProvider = resolution.provider;\n\n try {\n // 2. Get billing services from DI container\n const catalogSync = container.get(SAAS_SERVICE_TYPES.ProductCatalogSyncService) as ProductCatalogSyncBackendService;\n const usageMetering = container.get(SAAS_SERVICE_TYPES.UsageMeteringService) as UsageMeteringBackendService;\n\n // 3. Product definitions from the custom app (like customRoles, customFeatureDefinitions)\n const productDefinitions: ProductDefinition[] = appProductDefinitions ?? [];\n\n // 4. Initialize services in dependency order\n await catalogSync.initialize(productDefinitions, billingProvider);\n await usageMetering.initialize(billingProvider);\n\n // 4b. Register the provider-side half of subject erasure.\n //\n // Registered HERE, inside the billing bootstrap, because that is what keeps the erasure\n // orchestrator domain-agnostic: `system-access` runs whatever declared itself relevant to\n // a subject and never learns that billing exists. It also ties the effect's lifetime to\n // the provider's — a deployment with no billing provider configured registers nothing,\n // rather than registering an effect that would fail at erasure time.\n container\n .get(SAAS_SERVICE_TYPES.SubjectErasureExternalEffectsService)\n .register(createBillingSubjectErasureEffect({\n getBillingProvider: () => billingProvider,\n listBillingAccountsForSubject: async (billingAccountResourceType, scopeFieldName, subjectIds) => {\n const systemAccess = container.get(SAAS_SERVICE_TYPES.SystemAccessService) as SystemAccessBackendService;\n return normalizeSystemListResult(await systemAccess.listAsSystem(\n billingAccountResourceType,\n { [scopeFieldName]: { $in: subjectIds } },\n )) as Array<{ _id: string; providerCustomerId?: string }>;\n },\n listActiveSubscriptions: async (subscriptionResourceType, billingAccountFkField, billingAccountId) => {\n const systemAccess = container.get(SAAS_SERVICE_TYPES.SystemAccessService) as SystemAccessBackendService;\n return normalizeSystemListResult(await systemAccess.listAsSystem(\n subscriptionResourceType,\n {\n [billingAccountFkField]: billingAccountId,\n status: { $nin: TERMINAL_SUBSCRIPTION_STATUSES },\n },\n )) as Array<{ _id: string; providerSubscriptionId?: string }>;\n },\n logWarn: (message, context) => this.logger.warn(message, context),\n }));\n this.logDebug('🧹 Billing subject-erasure effect registered');\n\n // 4a. Sync product catalog to DB (ensures products/prices exist before billing state endpoint queries them)\n try {\n const syncResult = await catalogSync.syncProductCatalog();\n this.logDebug('📦 Product catalog synced at startup', {\n synced: syncResult.synced,\n created: syncResult.created,\n updated: syncResult.updated,\n featuresDirty: syncResult.featuresDirty.length,\n });\n } catch (syncError) {\n this.logger.warn('⚠️ Product catalog startup sync failed (non-fatal)', {\n ...projectCaughtErrorLogFields(syncError),\n });\n }\n\n // 4b. Initialize billing custom implementations (late-binding for resource-centric operations)\n const featureSync = container.get(SAAS_SERVICE_TYPES.BillingFeatureSyncService) as BillingFeatureSyncBackendService;\n const billingStateService = container.get(SAAS_SERVICE_TYPES.BillingStateService) as BillingStateBackendService;\n initializeBillingCustomImplementations(billingProvider, featureSync, billingStateService, billingConfig, this.errorBuilder);\n\n // 4c. Register post-operation hooks (feature sync fires automatically after subscription mutations)\n registerBillingPostOperationHooks(this.servicesRegistryService);\n\n // 5. Wire up billing webhooks\n // The WebhookAutoControllerBackendService auto-registers routes from provider definitions,\n // so we only need to register the adapter (verify+parse) and handler (dispatch).\n const webhookHandler = container.get(SAAS_SERVICE_TYPES.WebhookHandlerService) as WebhookHandlerBackendService;\n const webhookAutoController = container.get(SAAS_SERVICE_TYPES.WebhookAutoController) as WebhookAutoControllerBackendService;\n\n const billingAdapter = new BillingWebhookAdapter(billingProvider, billingConfig.providerRef);\n webhookHandler.registerAdapter(billingConfig.providerRef, 'billing', billingAdapter);\n\n const webSocketService = container.get(SAAS_SERVICE_TYPES.WebSocketService) as WebSocketService;\n setBillingWebSocketService(webSocketService);\n const webhookEventRouter = new BillingWebhookEventRouterBackendService(this.servicesRegistryService, this.resourcesRegistryService, this.logger, webSocketService);\n const billingCapabilityHandler = new BillingWebhookCapabilityHandler(webhookEventRouter);\n webhookAutoController.registerCapabilityHandler(billingCapabilityHandler);\n\n this.logDebug('✅ Billing services initialized successfully', {\n providerRef: billingConfig.providerRef,\n enabledScopes: billingConfig.enabledScopes,\n });\n } catch (error) {\n // Billing initialization failure is non-fatal: the app can still run without billing\n this.logger.error('❌ Billing services initialization failed (billing will be unavailable)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /\n Resolve the StandardBilling_Interface from the external providers system.\n \n Flow:\n * 1. Get the billing providerRef from config (e.g., 'stripe')\n * 2. Verify the configured provider exposes the billing protocol\n * 3. Load the billing runtime contract from the backend provider registry\n \n Returns a discriminated {@link BillingProviderResolution}: on failure the\n * `provider` is null and a `reason` (plus optional `detail`) names the exact\n * config surface at fault, so the startup guard can route the operator to the\n * right fix (scope authoring vs. secret vs. disabled) rather than a catch-all.\n /\n private async resolveBillingProvider(billingConfig: BillingConfiguration): Promise<BillingProviderResolution> {\n const providerRef = billingConfig.providerRef;\n if (!providerRef) {\n this.logDebug('No billing providerRef configured');\n return { provider: null, reason: BillingProviderResolutionFailureReason.PROVIDER_REF_UNSET };\n }\n\n try {\n const runtimeContract = this.backendProviderRegistryService.getRuntimeContract(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n );\n if (runtimeContract?.kind !== 'billing') {\n // No billing runtime contract exposed to the backend registry for\n // this ref — the provider was filtered out of the active catalog\n // because it is not authored in `providers.scopes.backend` (and/or\n // lacks a backend runtime-owner contribution). This is distinct\n // from \"secret missing\": the ref never reached the backend host.\n this.logDebug('Billing provider not reachable on the backend runtime', { providerRef });\n return {\n provider: null,\n reason: BillingProviderResolutionFailureReason.PROVIDER_NOT_REACHABLE_ON_BACKEND,\n };\n }\n\n if (!this.externalProvidersRegistryService.isProviderEnabled(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n )) {\n this.logDebug('Billing provider disabled by external provider configuration', { providerRef });\n return { provider: null, reason: BillingProviderResolutionFailureReason.PROVIDER_DISABLED };\n }\n\n // The framework currently ships a single `kind: 'billing'`\n // adapter (Stripe, via `StripeStandardBillingProvider`).\n // The instantiation here is keyed on `kind` only — no\n // provider literal — so the CI guard\n // (`no-provider-ref-branches.guard.test.ts`) accepts it.\n // When a second billing adapter arrives, factor the\n // adapter constructor into the runtime contract via\n // `sdkFactory: (secretKey, opts) => StandardBilling_Interface`,\n // mirror of the LLM and email surfaces — do NOT\n // reintroduce a `provider === '<ref>'` branch here.\n const secretRef = runtimeContract.secretRef;\n const secretKey = secretRef\n ? this.externalProvidersRegistryService.getProviderSecret(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n secretRef,\n )\n : undefined;\n if (!secretKey) {\n this.logger.warn('Billing provider configured but secret is missing', { providerRef, secretRef });\n return {\n provider: null,\n reason: BillingProviderResolutionFailureReason.SECRET_MISSING,\n detail: secretRef,\n };\n }\n\n this.logDebug('Billing provider resolved from first-class billing runtime contract', { providerRef });\n return { provider: new StripeStandardBillingProvider(secretKey, runtimeContract.apiVersion) };\n } catch (error) {\n const detail = describeCaughtError(error);\n this.logger.warn('Failed to resolve billing provider', { providerRef, error: detail });\n return { provider: null, reason: BillingProviderResolutionFailureReason.RESOLUTION_ERROR, detail };\n }\n }\n\n async shutdown(): Promise<void> {\n this.logDebug('Starting graceful shutdown');\n\n\n // Cancel delayed cron reconciliation before stopping queue workers, so\n // shutdown cannot start a fresh platform request in the background.\n this.cronJobSyncService.shutdown();\n\n // Then shut down queue workers and wait for in-flight jobs.\n try {\n await this.queueWorkerInitializer.shutdown();\n } catch (error) {\n this.logger.error('Error during queue worker shutdown', error as any);\n }\n }\n /\n Check if the application is initialized\n /\n public isApplicationInitialized(): boolean {\n return this.isInitialized;\n }\n\n /\n Get application configuration\n /\n public async getAppConfig(): Promise<AppConfiguration> {\n this.ensureInitialized();\n return this.appConfigService.config;\n }\n\n /\n Get resources registry\n /\n public getResourcesRegistry(): ResourcesRegistry {\n this.ensureInitialized();\n return this.resourcesRegistryService.getResourcesRegistry();\n }\n\n /\n Get repositories registry handler\n /\n public getRepositoriesRegistry(): RepositoriesRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.repositoriesRegistryService;\n }\n\n /\n Debug function to display all implemented Mongoose schemas\n * Convenient access to schema debugging from the main application service\n /\n public debugDisplayMongooseSchemas(options: {\n showSchemaStructure?: boolean;\n showIndexes?: boolean;\n showVirtuals?: boolean;\n resourceTypeFilter?: string[];\n maxFieldDepth?: number;\n } = {}): void {\n this.logDebug('\\n🚀 === WILDO.AI BACKEND - MONGOOSE SCHEMAS DEBUG ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Schemas may not be available.');\n return;\n }\n\n this.repositoriesRegistryService.debugDisplayMongooseSchemas(options);\n }\n\n /\n Quick debug summary of all schemas\n /\n public debugShowSchemasSummary(): void {\n this.logDebug('\\n🚀 === WILDO.AI BACKEND - SCHEMAS SUMMARY ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Schemas may not be available.');\n return;\n }\n\n this.repositoriesRegistryService.debugShowSchemasSummary();\n }\n\n /\n Debug function to display all registered routes\n /\n public debugDisplayRegisteredRoutes(): void {\n this.logDebug('\\n🌐 === WILDO.AI BACKEND - REGISTERED ROUTES ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Routes may not be available.');\n return;\n }\n\n this.controllersRegistryService.displayAllRoutes();\n }\n\n /\n Get the controllers registry for route registration\n /\n public getControllersRegistry(): ControllersRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.controllersRegistryService;\n }\n\n /\n Get the services registry for business logic access\n /\n public getServicesRegistry(): ServicesRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.servicesRegistryService;\n }\n\n /\n Get the HTTP server service instance\n /\n public getHttpServer(): HttpServerBackendService {\n this.ensureInitialized();\n return this.httpServerService;\n }\n\n /\n Get the authorizations service instance\n /\n public getAuthorizationsService(): AuthorizationsBackendService {\n this.ensureInitialized();\n return this.authorizationsService;\n }\n\n /\n Step 7.7 — Data-seeding subsystem hand-off.\n \n Thin adapter around {@link runDataSeedingApplicationBootstrap}: this\n * method exists so subclasses (e.g. `PlatformAppsManager_ApplicationStartupService`)\n * can override / observe the step without reaching into the helper, and\n * so the heavy `initialize()` reads as a flat sequence of `await`s.\n \n The helper itself is exhaustively unit-tested at\n * `~/data-seeding/services/__tests__/data-seed-application-bootstrap.backend.test.ts`.\n * See the helper's JSDoc for the full contract (registration always runs,\n * dispatch is skipped in platform mode, dispatcher failures are FATAL).\n /\n protected async runDataSeedingStep(\n dataSeeds: readonly DataSeedDefinition[] \| undefined,\n dataSeedScopeResolvers: Readonly<Record<string, DataSeedScopeResolver>> \| undefined,\n ): Promise<void> {\n await runDataSeedingApplicationBootstrap({\n dataSeeds,\n dataSeedScopeResolvers,\n isPlatformMode: this.isPlatformMode,\n logger: this.logger,\n logDebug: this.logDebug,\n registry: this.dataSeedRegistryService,\n scopeResolverRegistry: this.dataSeedScopeResolverRegistryService,\n dispatcher: this.dataSeedDispatcherService,\n servicesRegistry: this.servicesRegistryService,\n });\n }\n\n /\n Report — never enforce — the last-super-administrator floor at startup.\n \n ## Why this exists next to the write guards\n \n Every write that could remove the last administratively usable super-administrator already\n * refuses (`super-admin-floor.backend.utils`, wired into the USERS role verbs, the core\n * UPDATE, DELETE and subject erasure). So this can only ever observe a breach that arrived\n * around those paths: a direct database edit, a restore from a backup taken mid-erasure, a seed\n * that authored no administrator, or — the one with no user row involved at all — a role-table\n * reconfiguration that dropped or renamed a custom role carrying\n * `inheritFrom: APP_ADMIN_SUPER_ADMIN`, silently reclassifying its holders as non-administrators.\n \n ## Why it MUST NOT fail startup\n \n A fresh application legitimately boots with zero users: the first administrator arrives\n * through seeding or first-run registration. A framework that refused to start on this data\n * condition would brick every greenfield app on its first run, and — worse — would make the\n * breach unrecoverable in exactly the situation where the operator needs the app up to fix it.\n * The finding is loud (`logger.error` + a CRITICAL audit event) and non-blocking. Rejected:\n * throwing `ErrorType.CONFIGURATION`, for both reasons above.\n \n ## Why every failure is swallowed\n \n A diagnostic that can take the application down is a worse defect than the one it reports.\n * The floor query needs the users repository and the role table; in platform mode, in reduced\n * runtime profiles, or in a minimal test container, either may legitimately be absent. All of\n * that degrades to a debug line.\n \n assurance-control: WILDO.ACCESS.ADMINISTRATIVE_CONTINUITY — surface the absence of an\n * accountable administrative principal, which is unrecoverable in-product once reached.\n /\n protected async reportSuperAdminFloor(): Promise<void> {\n // Platform mode runs no application user population — there is no floor to measure.\n if (this.isPlatformMode) return;\n /\n ONLY the runtime that owns the application's administrative population.\n \n The report reads `users` and `organizations` across the whole application. A confined\n * runtime (minion/worker) holds table-scoped grants covering neither, so it cannot perform\n * the read — and has no accountability for the answer even if it could. Observed on a\n * clean-room PostgreSQL boot (2026-08-24): the marketing-scrapper minion produced\n * `permission denied for table users` and `for table organizations` on every startup.\n \n It never blocked anything — the report is non-fatal by design — which is precisely why it\n * lasted: a recurring, ignorable error inside an otherwise healthy boot. The application\n * backend still runs both reports, so no observation is lost.\n /\n if (!resolveApplicationRuntimeProfileBootAssertions(this.resolvedRuntimeProfile).reportsAdministrativeContinuityFloors) return;\n\n try {\n if (!this.repositoriesRegistryService.getRepository(CoreResourceType.USERS)) {\n this.logDebug('Skipping the super-administrator floor report: no users repository is registered');\n return;\n }\n\n const executionContext = await this.executionContextCreatorBackendService.createForInternalOperation({\n operation: this.resourcesRegistryService.getServiceOperationPathDefault(\n CoreResourceType.USERS,\n CoreResourceOperation.LIST,\n ),\n initiatorRoles: [\n {\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n relatedPrimaryScope: ResourcePrimaryScope.APPLICATION,\n },\n ],\n });\n\n const population = await measureUsableSuperAdminPopulation({\n executionContext,\n repositoriesRegistry: this.repositoriesRegistryService,\n errorBuilder: this.errorBuilder,\n conferringRoles: resolveSuperAdminConferringRoles(this.authorizationsService),\n });\n\n if (population.meetsFloor) {\n this.logDebug('Super-administrator floor satisfied', {\n usableSuperAdminCount: population.usableSuperAdminCount,\n });\n return;\n }\n\n // ERROR, not warn: there is no in-product remedy — every door that could appoint a new\n // administrator is gated on the role that is missing. The recovery is necessarily\n // out-of-band (a direct database write, or a seed), so the log has to stand alone and\n // say what to do.\n this.logger.error(\n 'No administratively usable super-administrator exists. The application cannot be '\n + 'administered, and no in-product path can grant the role because every such path '\n + 'requires it. Restore one out-of-band (seed or direct database write) by giving an '\n + 'ACTIVE user one of the conferring roles below.',\n {\n usableSuperAdminCount: population.usableSuperAdminCount,\n requiredUsableSuperAdminCount: SUPER_ADMIN_FLOOR_MINIMUM,\n conferringRoles: population.conferringRoles,\n usableStatuses: [...ADMINISTRATIVELY_USABLE_USER_STATUSES],\n },\n );\n\n await this.auditLogsService?.logApplicationSuperAdminFloorBreached({\n usableSuperAdminCount: population.usableSuperAdminCount,\n requiredUsableSuperAdminCount: SUPER_ADMIN_FLOOR_MINIMUM,\n conferringRoles: population.conferringRoles,\n usableStatuses: [...ADMINISTRATIVELY_USABLE_USER_STATUSES],\n }, executionContext);\n } catch (error) {\n // See the header: a diagnostic must never be the reason startup fails.\n this.logDebug('Super-administrator floor report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n Report — never enforce — the last-organization-owner floor, per tenant.\n \n The write guards are the protection; this is the only surface that observes states they never\n * saw (a direct database edit, a restore from a backup taken mid-erasure, a seed that authored no\n * owner, or a role-table reconfiguration that changed which roles confer ownership).\n \n NON-FATAL, for the same reason as its application twin and one more of its own: a fresh\n * deployment legitimately has zero organizations, and a tenant left ownerless by an out-of-band\n * edit is a condition to report, not a reason to refuse to serve every OTHER tenant.\n \n Cost is three queries regardless of tenant count — see\n * {@link measureOrganizationsMissingUsableOwner}. The breached list is logged in full because an\n * operator cannot act on a count, but it is the ONLY thing that scales with the breach, not with\n * the tenant base.\n /\n protected async reportOrganizationOwnerFloor(): Promise<void> {\n // Platform mode runs no tenant population — there is no floor to measure.\n if (this.isPlatformMode) return;\n /\n ONLY the runtime that owns the application's administrative population.\n \n The report reads `users` and `organizations` across the whole application. A confined\n * runtime (minion/worker) holds table-scoped grants covering neither, so it cannot perform\n * the read — and has no accountability for the answer even if it could. Observed on a\n * clean-room PostgreSQL boot (2026-08-24): the marketing-scrapper minion produced\n * `permission denied for table users` and `for table organizations` on every startup.\n \n It never blocked anything — the report is non-fatal by design — which is precisely why it\n * lasted: a recurring, ignorable error inside an otherwise healthy boot. The application\n * backend still runs both reports, so no observation is lost.\n /\n if (!resolveApplicationRuntimeProfileBootAssertions(this.resolvedRuntimeProfile).reportsAdministrativeContinuityFloors) return;\n\n try {\n if (!this.repositoriesRegistryService.getRepository(CoreResourceType.ORGANIZATIONS)\n \|\| !this.repositoriesRegistryService.getRepository(CoreResourceType.ORGANIZATION_MEMBERS)) {\n this.logDebug('Skipping the organization-owner floor report: organization repositories are not registered');\n return;\n }\n\n const authExecutionContextFactory = this.authExecutionContextFactory;\n if (!authExecutionContextFactory) {\n this.logDebug('Skipping the organization-owner floor report: the auth execution-context factory is not bound');\n return;\n }\n\n const population = await measureOrganizationsMissingUsableOwner({\n // The report builds its OWN system context from this factory. It is a whole-estate\n // backstop and must NOT trust a caller-supplied context: a role-less or wrong-execution-\n // type context silently confined the ORGANIZATIONS scope-root read to the empty set and\n // the backstop then reported a healthy estate. See the block comment in\n // `measureOrganizationsMissingUsableOwner`.\n authExecutionContextFactory,\n repositoriesRegistry: this.repositoriesRegistryService,\n errorBuilder: this.errorBuilder,\n conferringRoles: resolveOrganizationOwnerConferringRoles(this.authorizationsService),\n });\n\n // The PREVENTIVE half, and the only one this floor has. A tenant with exactly one usable\n // owner is a single resignation or suspension away from being unadministrable, and it is\n // the population the floor will REFUSE to help — every removal there answers 409 until a\n // second owner exists. WARN, not error: nothing is broken yet, and an error here on a\n // legitimately small tenant would train operators to ignore the channel.\n if (population.singleOwnerOrganizations.length > 0) {\n this.logger.warn(\n 'Organizations have exactly ONE administratively usable owner. Each is one lifecycle '\n + 'event away from being unadministrable, and the owner floor will refuse every removal '\n + 'there until a second owner is granted. Recommend at least two owners per tenant.',\n {\n singleOwnerOrganizationCount: population.singleOwnerOrganizations.length,\n singleOwnerOrganizations: population.singleOwnerOrganizations,\n protectedOrganizationCount: population.protectedOrganizationCount,\n },\n );\n }\n\n if (population.ownerlessOrganizations.length === 0) {\n this.logDebug('Organization-owner floor satisfied for every protected tenant', {\n protectedOrganizationCount: population.protectedOrganizationCount,\n });\n return;\n }\n\n // ERROR, not warn: these tenants cannot administer THEMSELVES, and no member of them can\n // fix it — granting ownership requires the authority they just lost. Recovery exists but\n // is an out-of-tenant operator action, so the log names it rather than leaving the reader\n // to discover there is one. (Until 2026-08-05 this said no in-product path existed at all;\n // `organizationMembers.grantOwnership` is that path.)\n this.logger.error(\n 'Organizations exist with no administratively usable owner. They cannot administer '\n + 'themselves, and no member of them can repair it — granting ownership requires the '\n + 'authority that was lost. Repair from the platform tier with '\n + '`organizationMembers.grantOwnership`, which promotes an EXISTING member of the tenant '\n + 'and requires APP_ADMIN_SUPER_ADMIN. Failing that, restore out-of-band by giving an '\n + 'ACTIVE member an ACTIVE membership with a conferring role.',\n {\n ownerlessOrganizationCount: population.ownerlessOrganizations.length,\n protectedOrganizationCount: population.protectedOrganizationCount,\n ownerlessOrganizations: population.ownerlessOrganizations,\n requiredUsableOwners: ORGANIZATION_OWNER_FLOOR_MINIMUM,\n conferringRoles: resolveOrganizationOwnerConferringRoles(this.authorizationsService),\n usableMembershipStatuses: [...ADMINISTRATIVELY_USABLE_ORGANIZATION_MEMBER_STATUSES],\n usableOwnerUserStatuses: [...ADMINISTRATIVELY_USABLE_OWNER_USER_STATUSES],\n },\n );\n } catch (error) {\n // See the header: a diagnostic must never be the reason startup fails.\n this.logDebug('Organization-owner floor report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n WHICH of the application's own resources have never been asked whether they hold personal data.\n \n ## Why this reports and does not refuse — the decision, not an omission\n \n Issue #93 asked whether a resource holding personal data should be REQUIRED to declare it, and\n * the evidence for requiring it was strong. Measured across two applications, a declaration gets\n * made if and only if the framework refuses to start without it: `exportSubject` is fail-closed at\n * registration and was declared on 10 of 12 resources, while `retentionPolicy` and\n * `.impersonalizeWith()` are unenforced and were declared on 1 and 0.\n \n Paul decided against refusing: a hard constraint on every author, for every resource, forever is\n * too strict, and it is the shape `application-creation-directive.md` warns about — the system must\n * work first, with protection arriving as a judge-style guard rather than a refusal wired into the\n * mechanism. So the log line is the whole enforcement here, and the half that actually produces\n * declarations is the framework knowledge that teaches an author to write one while authoring the\n * resource, where it costs a line.\n \n ## WARN, and the wording matters more than the level\n \n This reports \"unanswered\", never \"undeclared personal data\". Most resources genuinely hold none,\n * and a report that implied otherwise would be wrong about the majority of its own findings — which\n * is precisely how a diagnostic channel trains its readers to skim. ERROR is reserved for the two\n * administrative floors above, where something IS broken.\n \n ## Application resources only\n \n The engine declares its own posture across ~85 resources and an application author cannot change\n * any of them. `applicationResourceTypes` comes from the registry, which records the split at the\n * one point where the app and core factory maps are still distinguishable.\n /\n private reportApplicationPersonalDataDeclarations(): void {\n try {\n const registry = this.resourcesRegistryService?.getResourcesRegistry();\n if (!registry) {\n this.logDebug('Skipping the personal-data declaration report: the resources registry is not available');\n return;\n }\n\n const unanswered = collectApplicationResourcesWithNoPersonalDataDeclaration({\n resourceConfigurations: registry.resourceConfigurations as unknown as Record<string, PersonalDataDeclarationSubject>,\n applicationResourceTypes: registry.applicationResourceTypes,\n });\n\n if (unanswered.length === 0) {\n this.logDebug('Every application resource has answered the personal-data question', {\n applicationResourceCount: registry.applicationResourceTypes.length,\n });\n return;\n }\n\n this.logger.warn(\n 'Application resources have said NOTHING about whether their rows are about people. This is '\n + 'not a claim that they hold personal data — most resources do not — it is that the question '\n + 'is unanswered, so a generated privacy notice can say nothing about them and an erasure '\n + 'request has no instruction for them. Answer it on the resource configuration with any of: '\n + '`retentionPolicy` (RETAIN_ONLY is the checked way to say \"holds no personal data of its '\n + 'own\"), `dataSubjectPolicy`, `systemAccessPolicy.exportSubject`, or a `.dataCategories()` '\n + 'declaration on the fields that hold it.',\n {\n unansweredResourceCount: unanswered.length,\n applicationResourceCount: registry.applicationResourceTypes.length,\n unansweredResources: unanswered,\n },\n );\n } catch (error) {\n // A diagnostic must never be the reason startup fails — the same contract as the two floors.\n this.logDebug('Personal-data declaration report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n Validate that all components are properly initialized\n /\n private async validateInitialization(options: { headlessMode?: boolean } = {}): Promise<void> {\n this.logDebug('Validating application initialization...');\n\n try {\n // Validate app config is accessible\n if (!this.isPlatformMode) {\n const config = this.appConfigService.config;\n if (!config) {\n const error = this.errorBuilder.buildError(\n ErrorType.CONFIGURATION,\n undefined,\n {customMessageReference: ErrorCustomMessageReference.START_APPLICATION_CONFIGURATION_FAILED}\n );\n throw error;\n }\n }\n\n // Validate resources registry is accessible\n const registry = this.resourcesRegistryService.getResourcesRegistry();\n if (!registry) {\n const error = this.errorBuilder.buildError(\n ErrorType.INTERNAL,\n undefined,\n {customMessageReference: ErrorCustomMessageReference.START_APPLICATION_INITIALIZATION_FAILED}\n );\n throw error;\n }\n\n // Validate repositories registry is accessible\n // const repositoriesDebugInfo = this.repositoriesRegistryService.getDebugInfo();\n // if (!repositoriesDebugInfo.isInitialized) {\n // throw new Error('Repositories registry is not initialized');\n // }\n\n // Validate services registry is accessible\n // const servicesDebugInfo = this.servicesRegistryService.getDebugInfo();\n // if (!servicesDebugInfo.isInitialized) {\n // throw new Error('Services registry is not initialized');\n // }\n\n // Validate controllers registry is accessible\n // const controllersDebugInfo = this.controllersRegistryService.getDebugInfo();\n // if (!controllersDebugInfo.isInitialized) {\n // throw new Error('Controllers registry is not initialized');\n // }\n\n // // Validate HTTP server is running\n // if (!this.httpServerService.isRunning()) {\n // throw new Error('HTTP server is not running');\n // }\n\n const serverInfo = options.headlessMode\n ? undefined\n : this.httpServerService.getServerInfo();\n\n // this.logDebug('Application initialization validation successful', {\n // appName: config.appIdentity.appName,\n // environment: process.env.APPLICATION_ENV,\n // resourcesCount: Object.keys(registry.resourceConfigurations).length,\n // repositoriesCount: repositoriesDebugInfo.repositoryCount,\n // repositoriesOperationPaths: repositoriesDebugInfo.operationPathsCount,\n // servicesCount: servicesDebugInfo.serviceCount,\n // servicesOperationPaths: servicesDebugInfo.operationPathsCount,\n // controllersCount: controllersDebugInfo.controllerCount,\n // controllersOperationPaths: controllersDebugInfo.operationPathsCount,\n // totalRoutes: controllersDebugInfo.totalRoutes,\n // httpServerRunning: this.httpServerService.isRunning(),\n // serverHost: serverInfo?.host,\n // serverPort: serverInfo?.port\n // });\n\n } catch (error) {\n // Validation failure ownership stays with the terminal runtime host.\n throw error;\n }\n }\n\n /\n Ensure the application is initialized before operations\n /\n private ensureInitialized(): void {\n if (!this.isInitialized) {\n const error = this.errorBuilder.buildError(\n ErrorType.INTERNAL,\n undefined,\n { customMessageReference: ErrorCustomMessageReference.START_APPLICATION_STARTUP_FAILED }\n );\n throw error;\n }\n }\n\n protected shouldInitializeHttpServer(options: { headlessMode?: boolean }): boolean {\n return !this.isPlatformMode && !options.headlessMode;\n }\n\n protected shouldSyncCronJobs(options: { skipCronSync?: boolean }): boolean {\n return !this.isPlatformMode && !options.skipCronSync;\n }\n\n private rebindServicesRegistryForRuntime(container: any, registry: ServicesRegistryHandlerBackendService): void {\n if (!container \|\| typeof container.rebind !== 'function') {\n return;\n }\n container.rebind(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService).toConstantValue(registry);\n }\n}\n\n/\n `listAsSystem` returns either a bare array or a paginated envelope depending on whether the caller\n * asked for pagination. The erasure effect's reads never paginate, but narrowing by CAST would be a\n * lie that survives until the day someone adds a pagination argument — normalise instead.\n */\nfunction normalizeSystemListResult<T>(result: T[] \| { data?: T[]; items?: T[] }): T[] {\n if (Array.isArray(result)) return result;\n return result?.data ?? result?.items ?? [];\n}\n\n"]}
1	+ {"version":3,"file":"start-application.backend.service.js","sourceRoot":"","sources":["../../../../../src/runtime/services/start-application.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAKzD,OAAO,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AAItI,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,cAAc,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,EAAE,kBAAkB,EAAE,qCAAqC,EAAE,sCAAsC,EAAE,8BAA8B,EAAE,sCAAsC,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAExd,OAAO,EAAE,wDAAwD,EAAuC,MAAM,uBAAuB,CAAC;AACtI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAEhJ,OAAO,EACL,qCAAqC,EACrC,iCAAiC,EACjC,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,EACL,oDAAoD,EACpD,2CAA2C,EAC3C,sCAAsC,EACtC,gCAAgC,EAChC,uCAAuC,GACxC,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,mCAAmC,EAAE,MAAM,mFAAmF,CAAC;AACxI,OAAO,EAAE,yBAAyB,EAAE,8CAA8C,EAAE,MAAM,yEAAyE,CAAC;AACpK,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,wCAAwC,EAAE,MAAM,yFAAyF,CAAC;AACnJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,oFAAoF,CAAC;AAIjI,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAG3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AACjJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,kFAAkF,CAAC;AAC3I,OAAO,EAAE,yCAAyC,EAAE,MAAM,oFAAoF,CAAC;AAC/I,OAAO,EAAE,wCAAwC,EAAE,MAAM,mFAAmF,CAAC;AAE7I,OAAO,EAAE,gCAAgC,EAAE,MAAM,0EAA0E,CAAC;AAC5H,OAAO,EAAE,wCAAwC,EAAE,MAAM,+EAA+E,CAAC;AACzI,OAAO,EAAE,4BAA4B,EAAE,MAAM,8EAA8E,CAAC;AAC5H,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,2CAA2C,EAAE,MAAM,qGAAqG,CAAC;AAClK,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,0BAA0B,EAAE,MAAM,wEAAwE,CAAC;AACpH,OAAO,EAAE,6CAA6C,EAAE,MAAM,oFAAoF,CAAC;AACnJ,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,wCAAwC,EAAE,MAAM,mGAAmG,CAAC;AAE7J,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAClI,OAAO,EAAE,sCAAsC,EAAE,MAAM,4FAA4F,CAAC;AAEpJ,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,2DAA2D,EAAE,MAAM,qHAAqH,CAAC;AAClM,OAAO,EAAE,2CAA2C,EAAE,MAAM,uFAAuF,CAAC;AACpJ,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,uGAAuG,CAAC;AAC3J,OAAO,EAAE,gCAAgC,EAAE,MAAM,4FAA4F,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,qGAAqG,CAAC;AACzJ,OAAO,EAAE,4CAA4C,EAAE,MAAM,qGAAqG,CAAC;AACnK,OAAO,EAAE,sCAAsC,EAAE,MAAM,sGAAsG,CAAC;AAC9J,OAAO,EAAE,iCAAiC,EAAE,MAAM,iGAAiG,CAAC;AACpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,mFAAmF,CAAC;AACjI,OAAO,EAAE,sCAAsC,EAAE,MAAM,gFAAgF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,wFAAwF,CAAC;AAC/H,OAAO,EAAE,8BAA8B,EAAE,MAAM,uGAAuG,CAAC;AACvJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,qFAAqF,CAAC;AAClI,OAAO,EAAE,+BAA+B,EAAE,MAAM,gGAAgG,CAAC;AACjJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,iGAAiG,CAAC;AACnJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,6FAA6F,CAAC;AAC3I,OAAO,EAAE,qCAAqC,EAAE,MAAM,sGAAsG,CAAC;AAC7J,OAAO,EAAE,6BAA6B,EAAE,MAAM,sFAAsF,CAAC;AACrI,sGAAsG;AACtG,2FAA2F;AAC3F,qEAAqE;AACrE,OAAO,EACL,mCAAmC,EACnC,8CAA8C,EAC9C,uCAAuC,EACvC,wCAAwC,EACxC,6CAA6C,EAC7C,8CAA8C,EAC9C,mDAAmD,EACnD,4BAA4B,EAC5B,mCAAmC,EACnC,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,yCAAyC,EACzC,8CAA8C,EAC9C,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,6BAA6B,GAC9B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,+EAA+E,CAAC;AAClI,OAAO,EAAE,4BAA4B,EAAE,MAAM,0EAA0E,CAAC;AAGxH,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAmB,MAAM,uDAAuD,CAAC;AAC5G,OAAO,EAAE,+BAA+B,EAAE,MAAM,sEAAsE,CAAC;AACvH,OAAO,EAAE,gCAAgC,EAAE,MAAM,gFAAgF,CAAC;AAElI,OAAO,EAAE,oCAAoC,EAAE,MAAM,mEAAmE,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AAGnG,OAAO,EACH,iCAAiC,EACjC,8BAA8B,GACjC,MAAM,wFAAwF,CAAC;AAGhG,OAAO,EAAE,sCAAsC,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,wFAAwF,CAAC;AAC/M,OAAO,EAAE,sCAAsC,EAAkC,MAAM,sCAAsC,CAAC;AAG9H,OAAO,EAAE,qBAAqB,EAAE,MAAM,sFAAsF,CAAC;AAC7H,OAAO,EAAE,+BAA+B,EAAE,MAAM,iGAAiG,CAAC;AAClJ,OAAO,EAAE,uCAAuC,EAAE,MAAM,2FAA2F,CAAC;AAGpJ,OAAO,EAAE,2BAA2B,EAAE,MAAM,mEAAmE,CAAC;AAChH,OAAO,EAAE,sCAAsC,EAAE,MAAM,iFAAiF,CAAC;AACzI,OAAO,EAAE,8BAA8B,EAAE,MAAM,6EAA6E,CAAC;AAC7H,OAAO,EAAE,gCAAgC,EAAE,MAAM,+EAA+E,CAAC;AAGjI,OAAO,EAAE,mCAAmC,EAAE,MAAM,yFAAyF,CAAC;AAG9I,OAAO,EAAE,yCAAyC,EAAE,MAAM,uFAAuF,CAAC;AAClJ,OAAO,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AA+NtI;;;;;;;;;;;;;;GAcG;AAEH,wHAAwH;AACxH;;;;;;;;;;;;;;GAcG;AACH,IAAK,sCAiBJ;AAjBD,WAAK,sCAAsC;IACvC,oEAAoE;IACpE,mFAAyC,CAAA;IACzC;;;;;;OAMG;IACH,iHAAuE,CAAA;IACvE,gFAAgF;IAChF,iFAAuC,CAAA;IACvC,4EAA4E;IAC5E,2EAAiC,CAAA;IACjC,2EAA2E;IAC3E,+EAAqC,CAAA;AACzC,CAAC,EAjBI,sCAAsC,KAAtC,sCAAsC,QAiB1C;AAYD;;;;;;;;;;GAUG;AACH,SAAS,wCAAwC,CAC7C,MAA8C,EAC9C,aAAmC,EACnC,MAAe;IAEf,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,IAAI,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,yEAAyE,CAAC;IACzF,MAAM,WAAW,GAAG,iEAAiE,CAAC;IAEtF,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,sCAAsC,CAAC,kBAAkB;YAC1D,OAAO,GAAG,MAAM,iEAAiE;kBAC3E,sEAAsE,WAAW,EAAE,CAAC;QAE9F,KAAK,sCAAsC,CAAC,iCAAiC;YACzE,OAAO,GAAG,MAAM,iBAAiB,WAAW,6CAA6C;kBACnF,mFAAmF;kBACnF,0EAA0E,WAAW,IAAI;kBACzF,oFAAoF;kBACpF,qFAAqF;kBACrF,sFAAsF;kBACtF,sEAAsE,WAAW,EAAE,CAAC;QAE9F,KAAK,sCAAsC,CAAC,iBAAiB;YACzD,OAAO,GAAG,MAAM,iBAAiB,WAAW,kDAAkD;kBACxF,sFAAsF;kBACtF,0BAA0B,WAAW,EAAE,CAAC;QAElD,KAAK,sCAAsC,CAAC,cAAc;YACtD,OAAO,GAAG,MAAM,iBAAiB,WAAW,4BAA4B;kBAClE,aAAa,MAAM,IAAI,SAAS,qDAAqD;kBACrF,mFAAmF,WAAW,EAAE,CAAC;QAE3G,KAAK,sCAAsC,CAAC,gBAAgB;YACxD,OAAO,GAAG,MAAM,iBAAiB,WAAW,yBAAyB;kBAC/D,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,wDAAwD;kBACtF,WAAW,WAAW,EAAE,CAAC;QAEnC,OAAO,CAAC,CAAC,CAAC;YACN,8DAA8D;YAC9D,gEAAgE;YAChE,oBAAoB;YACpB,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,GAAG,MAAM,iBAAiB,WAAW,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,WAAW,EAAE,CAAC;QAC7F,CAAC;IACL,CAAC;AACL,CAAC;AAGM,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAamB;IACU;IACwB;IACjB;IACW;IACb;IACY;IAChB;IACE;IACA;IACE;IACS;IACO;IACe;IACtC;IACF;IACD;IACmB;IACE;IACA;IACL;IACD;IACR;IACQ;IACK;IACF;IACX;IACE;IACI;IACH;IACH;IACD;IAKD;IACE;IAIW;IAWF;IAKC;IAMzD;IA3EvB;;;;OAIG;IACK,sBAAsB,GAA8B,yBAAyB,CAAC,mBAAmB,CAAC;IAEhG,QAAQ,CAA+D;IACvE,aAAa,GAAG,KAAK,CAAC;IACxB,cAAc,GAAG,KAAK,CAAC;IAE/B,YAC0D,MAAqB,EACX,gBAAyC,EACjB,iCAA2E,EAC5F,wBAAyD,EAC9C,2BAAsE,EACnF,uBAA8D,EAClD,0BAAoE,EACpF,iBAA2C,EACzC,YAAwC,EACxC,YAAiC,EAC/B,qBAAmD,EAC1C,eAAuD,EAChD,qCAA4E,EAC7D,kBAA+E,EACrH,cAA8B,EAChC,YAA0B,EAC3B,WAA+B,EACZ,8BAAqE,EACnE,gCAAyE,EACzE,gCAAyE,EAC9E,2BAAsE,EACvE,0BAAoE,EAC5E,kBAAoD,EAC5C,0BAAsD,EACjD,+BAA8E,EAChF,sBAA4D,EACvE,kBAA6C,EAC3C,oBAAiD,EAC7C,wBAAgE,EACnE,4BAAiE,EACpE,yBAA2D,EAC5D,iBAAkD,EAKnD,uBAAuD,EACrD,yBAA2D,EAIhD,oCAAiF,EAWnF,2BAAyD,EAKxD,gBAA0C,EAMnG,2BAAuE;QA/DpC,WAAM,GAAN,MAAM,CAAe;QACX,qBAAgB,GAAhB,gBAAgB,CAAyB;QACjB,sCAAiC,GAAjC,iCAAiC,CAA0C;QAC5F,6BAAwB,GAAxB,wBAAwB,CAAiC;QAC9C,gCAA2B,GAA3B,2BAA2B,CAA2C;QACnF,4BAAuB,GAAvB,uBAAuB,CAAuC;QAClD,+BAA0B,GAA1B,0BAA0B,CAA0C;QACpF,sBAAiB,GAAjB,iBAAiB,CAA0B;QACzC,iBAAY,GAAZ,YAAY,CAA4B;QACxC,iBAAY,GAAZ,YAAY,CAAqB;QAC/B,0BAAqB,GAArB,qBAAqB,CAA8B;QAC1C,oBAAe,GAAf,eAAe,CAAwC;QAChD,0CAAqC,GAArC,qCAAqC,CAAuC;QAC7D,uBAAkB,GAAlB,kBAAkB,CAA6D;QACrH,mBAAc,GAAd,cAAc,CAAgB;QAChC,iBAAY,GAAZ,YAAY,CAAc;QAC3B,gBAAW,GAAX,WAAW,CAAoB;QACZ,mCAA8B,GAA9B,8BAA8B,CAAuC;QACnE,qCAAgC,GAAhC,gCAAgC,CAAyC;QACzE,qCAAgC,GAAhC,gCAAgC,CAAyC;QAC9E,gCAA2B,GAA3B,2BAA2B,CAA2C;QACvE,+BAA0B,GAA1B,0BAA0B,CAA0C;QAC5E,uBAAkB,GAAlB,kBAAkB,CAAkC;QAC5C,+BAA0B,GAA1B,0BAA0B,CAA4B;QACjD,oCAA+B,GAA/B,+BAA+B,CAA+C;QAChF,2BAAsB,GAAtB,sBAAsB,CAAsC;QACvE,uBAAkB,GAAlB,kBAAkB,CAA2B;QAC3C,yBAAoB,GAApB,oBAAoB,CAA6B;QAC7C,6BAAwB,GAAxB,wBAAwB,CAAwC;QACnE,iCAA4B,GAA5B,4BAA4B,CAAqC;QACpE,8BAAyB,GAAzB,yBAAyB,CAAkC;QAC5D,sBAAiB,GAAjB,iBAAiB,CAAiC;QAKnD,4BAAuB,GAAvB,uBAAuB,CAAgC;QACrD,8BAAyB,GAAzB,yBAAyB,CAAkC;QAIhD,yCAAoC,GAApC,oCAAoC,CAA6C;QAWnF,gCAA2B,GAA3B,2BAA2B,CAA8B;QAKxD,qBAAgB,GAAhB,gBAAgB,CAA0B;QAMnG,gCAA2B,GAA3B,2BAA2B,CAA4C;QAG1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QACzD,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAC/D,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;QAC7D,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QAEnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,MAAuC;QAE3D,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO;QACX,CAAC;QAED,MAAM,EACF,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,GAAG,EAAE,EACjC,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,mBAAmB,EACnB,qBAAqB,GAAG,KAAK,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,uBAAuB,EACvB,SAAS,EACT,sBAAsB,EACtB,cAAc,GAAG,yBAAyB,CAAC,mBAAmB,EAC9D,YAAY,GAAG,KAAK,EACpB,YAAY,GAAG,KAAK,EACpB,gBAAgB,GAAG,KAAK,EACxB,gCAAgC,EAChC,iCAAiC,GACpC,GAAG,MAAM,CAAC;QAEX,qEAAqE;QACrE,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,cAAc,GAAG,8CAA8C,CAAC,cAAc,CAAC,CAAC;QACtF;;;;WAIG;QACH,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC;QAE7C,IAAI,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;YACnE,+CAA+C;YAC/C,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,mDAAmD;YACnD,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,qBAAqB,CAAC;YAE9C,IAAG,CAAC,qBAAqB,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,eAAe,EAAE,CAAC;oBAClB,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,aAAa,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;wBACvC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;qBACvC,CAAC,CAAC;gBACP,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,+BAA+B,EAAE,CAAC;gBACxD,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;gBACtE;;;;;;;;;;;;;;;;mBAgBG;gBACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;oBACjD,IAAI,CAAC;wBACD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBACpC,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;oBAC9D,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAQ,CAAC,CAAC;wBACnE,MAAM,CAAC,CAAC;oBACZ,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,iFAAiF,CAAC,CAAC;gBACrG,CAAC;gBACD,uEAAuE;gBACvE,oEAAoE;gBACpE,IAAI,CAAC;oBACD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,EAAE,GAAG,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrH,CAAC;gBAED,6EAA6E;gBAC7E,IAAI,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,CAAC;oBACxC,IAAI,CAAC;wBACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;wBAC1C,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;oBAChD,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACT,8EAA8E;wBAC9E,8EAA8E;wBAC9E,0EAA0E;wBAC1E,0CAA0C;wBAC1C,EAAE;wBACF,2EAA2E;wBAC3E,0EAA0E;wBAC1E,6EAA6E;wBAC7E,6EAA6E;wBAC7E,2EAA2E;wBAC3E,6EAA6E;wBAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uFAAuF,EAAE,EAAE,GAAG,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrJ,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,yDAAyD,CAAC,CAAC;gBAC7E,CAAC;YACL,CAAC;YAED,8DAA8D;YAC9D,iEAAiE;YACjE,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,iBAAiB,GAAG,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;YAE3G,IAAI,iBAAiB,EAAE,CAAC;gBACpB,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACvE,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YACxD,IAAI,WAAW,EAAE,CAAC;gBACd,IAAI,CAAC,qBAAqB,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;gBAClE,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACJ,iEAAiE;gBACjE,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YAED,2DAA2D;YAC3D,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YAEvD,sFAAsF;YACtF,gEAAgE;YAChE,MAAM,eAAe,GAAgC,iBAAiB,EAAE,SAAS,CAAC;YAElF,8DAA8D;YAC9D,wEAAwE;YACxE,yEAAyE;YACzE,0EAA0E;YAC1E,4EAA4E;YAC5E,MAAM,qBAAqB,GAAG,yCAAyC,CACnE,iBAAiB,EACjB,EAAE,qBAAqB,EAAE,CAC5B,CAAC;YAEF,IAAI,qBAAqB,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,qCAAqC,qBAAqB,CAAC,IAAI,QAAQ,EAAE;oBACnF,eAAe,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO;oBACrD,qBAAqB,EAAE,CAAC,GAAG,EAAE;wBACzB,MAAM,aAAa,GAAG,iBAAiB,EAAE,OAAO,CAAC;wBACjD,IAAI,CAAC,aAAa,EAAE,OAAO;4BAAE,OAAO,KAAK,CAAC;wBAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;wBACtE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1D,CAAC,CAAC,EAAE;oBACJ,iBAAiB,EAAE,CAAC,eAAe,EAAE,OAAO;iBAC/C,CAAC,CAAC;YACP,CAAC;YAED,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CACtC,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,CAAC,6BAA6B,IAAI,EAAE,CAAmD,EACvF,+BAA+B,EAC/B,4BAA4B,EAC5B,4BAA4B,EAC5B,SAAS,EAAE,8CAA8C;YACzD,qBAAqB,EACrB,yBAAyB,CAChC,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,iBAAiB,IAAI,iCAAiC,EAAE,CAAC;gBACzD,MAAM,iCAAiC,CAAC;oBACpC,SAAS,EAAE,iBAAiB;oBAC5B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;oBACvD,YAAY,EAAE,IAAI,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,mBAAmB,IAAI,EAAE,EAAE;gBACjE,kBAAkB,EAAE,cAAc,CAAC,sCAAsC;aAC5E,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,qDAAqD;YACrD,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACjE,IAAI,CAAC,gCAAgC,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,wBAAwB,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,gCAAgC,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,gCAAgC,CAAC,mBAAmB,EAAE,CAAC;YAC5D,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,EAAE,CAAC;YAE1D,oEAAoE;YACpE,IAAI,0BAA0B,EAAE,CAAC;gBAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,EAAE,CAAC;gBACjF,IAAI,CAAC,gCAAgC,CAAC,gBAAgB,CAAC;oBACnD,WAAW,EAAE,cAAc;oBAC3B,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,IAAI,EAAE;oBACnD,cAAc,EAAE,0BAA0B,CAAC,cAAc;oBACzD,oBAAoB,EAAE;wBAClB,eAAe,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,eAAe,IAAI,6BAA6B,CAAC,cAAc;wBACjI,mBAAmB,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,mBAAmB,IAAI,6BAA6B,CAAC,IAAI;wBAC/H,YAAY,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,YAAY,IAAI,EAAE;wBACjF,cAAc,EAAE,0BAA0B,CAAC,oBAAoB,EAAE,cAAc,IAAI;4BAC/E,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,cAAc;4BAC/F,CAAC,2BAA2B,CAAC,cAAc,CAAC,EAAE,6BAA6B,CAAC,oBAAoB;4BAChG,CAAC,2BAA2B,CAAC,cAAc,CAAC,EAAE,6BAA6B,CAAC,IAAI;yBACnF;qBACJ;iBACJ,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,qBAAqB,GAAG,iBAAiB,EAAE,SAAS,EAAE,YAAY,CAAC;YAEzE,IAAI,CAAC,gCAAgC,CAAC,0BAA0B,EAAE,CAAC;YACnE,IAAI,CAAC,gCAAgC,CAAC,4BAA4B,CAAC;gBAC/D,eAAe,EAAE,0BAA0B,EAAE,QAAQ;gBACrD,gBAAgB;gBAChB,uBAAuB;gBACvB,kBAAkB;gBAClB,qBAAqB;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YAExE,uDAAuD;YACvD,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAClE,IAAI,yBAAyB,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,KAAK,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,yBAAyB,EAAE,CAAC;oBAClD,IAAI,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,cAAc,yBAAyB,CAAC,MAAM,gCAAgC,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,0BAA0B,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,2BAA2B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;gBACtF,IAAI,CAAC,2BAA2B,CAAC,mBAAmB,EAAE,CAAC;gBACvD,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,EAAE,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAE1E,2DAA2D;YAC3D,IAAI,CAAC,qBAAqB,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;gBACrD,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;gBACxD,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;gBAE5D,mEAAmE;gBACnE,wCAAwC,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEtG,uDAAuD;gBACvD,IAAI,eAAe,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC;oBAC/C,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;wBAClE,IAAI,SAAS,CAAC,aAAa,KAAK,uBAAuB,CAAC,SAAS,EAAE,CAAC;4BAChE,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;4BACxF,IAAI,CAAC,MAAM,EAAE,CAAC;gCACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,SAAS,CAAC,YAAY,GAAG,CAAC,CAAC;4BACjH,CAAC;wBACL,CAAC;6BAAM,IAAI,SAAS,CAAC,aAAa,KAAK,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;4BAChF,IAAI,CAAC,QAAQ,CAAC,6DAA6D,SAAS,CAAC,eAAe,0BAA0B,CAAC,CAAC;wBACpI,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;oBAC9C,qBAAqB,EAAE,eAAe,CAAC,qBAAqB;oBAC5D,uBAAuB,EAAE,eAAe,CAAC,uBAAuB;oBAChE,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;oBAC1D,uBAAuB,EAAE,eAAe,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;iBACrF,CAAC,CAAC;YACP,CAAC;iBAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,4EAA4E,CAAC,CAAC;YAChG,CAAC;YAED,8DAA8D;YAC9D,EAAE;YACF,qDAAqD;YACrD,yDAAyD;YACzD,8DAA8D;YAC9D,gEAAgE;YAChE,8DAA8D;YAC9D,kEAAkE;YAClE,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAC9D,IAAI,CAAC,8BAA8B,CAAC,UAAU,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;YACzF,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACrD,sBAAsB,EAAE,OAAO,CAAC,eAAe,CAAC;gBAChD,aAAa,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI;aAChF,CAAC,CAAC;YAEH,oDAAoD;YACpD,8FAA8F;YAC9F,IAAI,iBAAiB,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,gCAAgC,CAAC,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;gBAExE,wEAAwE;gBACxE,qEAAqE;gBACrE,0EAA0E;gBAC1E,6EAA6E;gBAC7E,4EAA4E;gBAC5E,4EAA4E;gBAC5E,MAAM,2BAA2B,GAAG,IAAI,CAAC,gCAAgC,CAAC,sCAAsC,EAAE,CAAC;gBACnH,IAAI,2BAA2B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;wBACnE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;wBACjE,OAAO,EAAE;4BACL,OAAO,EACH,6DAA6D,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;kCACtG,mFAAmF;kCACnF,qFAAqF;kCACrF,8BAA8B;4BACpC,2BAA2B;yBAC9B;qBACJ,CAAC,CAAC;gBACP,CAAC;gBAED,yEAAyE;gBACzE,6EAA6E;gBAC7E,6EAA6E;gBAC7E,yEAAyE;gBACzE,2EAA2E;gBAC3E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,yDAAyD;gBACzD,EAAE;gBACF,4EAA4E;gBAC5E,8EAA8E;gBAC9E,+EAA+E;gBAC/E,4EAA4E;gBAC5E,8EAA8E;gBAC9E,8EAA8E;gBAC9E,+EAA+E;gBAC/E,8EAA8E;gBAC9E,4EAA4E;gBAC5E,IACI,qCAAqC,CAAC;oBAClC,yCAAyC,EAAE,cAAc,CAAC,kCAAkC;oBAC5F,2BAA2B,EAAE,IAAI,CAAC,gCAAgC,CAAC,yBAAyB,CACxF,gBAAgB,CAAC,sBAAsB,CAC1C;oBACD,6BAA6B,EAAE,IAAI,CAAC,gCAAgC,CAAC,oCAAoC,CACrG,gBAAgB,CAAC,sBAAsB,CAC1C,CAAC,MAAM;iBACX,CAAC,EACJ,CAAC;oBACC,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,0FAA0F;0BACxF,8FAA8F;0BAC9F,+FAA+F,CACpG,CAAC;gBACN,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,+GAA+G,CAAC,CAAC;YACnI,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YAC1D,MAAM,gCAAgC,GAAG;gBACrC,GAAG,CAAC,mBAAmB,EAAE,0BAA0B,IAAI,EAAE,CAAC;aAC7D,CAAC;YACF,MAAM,YAAY,GAAG;gBACjB,GAAG,CAAC,mBAAmB,EAAE,MAAM,IAAI,EAAE,CAAC;aACzC,CAAC;YACF,MAAM,mBAAmB,GAAG;gBACxB,GAAG,CAAC,mBAAmB,EAAE,aAAa,IAAI,EAAE,CAAC;aAChD,CAAC;YACF,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAC5C,gCAAgC,EAChC,YAAY,EACZ,mBAAmB,CACtB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,uFAAuF;YACvF,2FAA2F;YAC3F,2FAA2F;YAC3F,2FAA2F;YAC3F,wFAAwF;YACxF,yFAAyF;YACzF,mCAAmC;YACnC,+EAA+E;YAC/E,mFAAmF;YACnF,gFAAgF;YAChF,mFAAmF;YACnF,mFAAmF;YACnF,6EAA6E;YAC7E,gFAAgF;YAChF,uCAAuC;YACvC,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YACtE,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;YACzE,IAAI,cAAc,CAAC,2CAA2C,EAAE,CAAC;gBAC7D,IAAI,CAAC,+BAA+B,CAAC,0BAA0B,CAC3D,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1E,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,sGAAsG,EAAE;oBAClH,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC;YAED,uDAAuD;YACvD,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,EAAE;gBAC5C,oBAAoB,EAAE,qBAAqB;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YAEzD,gDAAgD;YAChD,IAAI,wBAAwB,IAAI,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzB,+EAA+E;gBAC/E,gFAAgF;gBAChF,mFAAmF;gBACnF,qFAAqF;gBACrF,kFAAkF;gBAClF,IAAI,CAAC,2BAA2B,EAAE,UAAU,EAAE,CAAC;YACnD,CAAC;YAED,uCAAuC;YACvC,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzF,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACtC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YACrG,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YAED,gDAAgD;YAChD,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxG,IAAI,CAAC,wBAAwB,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ,CAAC,qDAAqD,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC;YACpH,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,CAAC,wBAAwB,CAAC,yBAAyB,EAAE,CAAC;YAE1D,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;YAE/E,2EAA2E;YAC3E,sEAAsE;YACtE,kEAAkE;YAClE,6EAA6E;YAC7E,iDAAiD;YACjD,EAAE;YACF,6EAA6E;YAC7E,+EAA+E;YAC/E,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,+BAA+B;YAC/B,IAAI,uBAAuB,GAAqC,EAAE,CAAC;YACnE,IAAI,CAAC;gBACD,uBAAuB,GAAG,qCAAqC,CAC3D,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,EAAE;oBACzF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;gBAC9C,IAAI,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,EAAE,CAAC;oBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE;wBAC9G,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,eAAe,EAAE,SAAS,CAAC,eAAe;wBAC1C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;wBAChD,IAAI,EAAE,SAAS,CAAC,IAAI;qBACvB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YACD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,MAAM,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CACpF,CAAC;YACF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACX,kCAAkC,qBAAqB,CAAC,MAAM,8DAA8D;oBAC5H,qBAAqB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9E,CAAC;YACN,CAAC;YAED,mEAAmE;YACnE,2EAA2E;YAC3E,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,0EAA0E;YAC1E,0EAA0E;YAC1E,+CAA+C;YAC/C,mDAAmD;YACnD,IAAI,gCAAgC,GAAsC,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACD,gCAAgC,GAAG,8BAA8B,CAC7D,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,EAAE;oBAChF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,gCAAgC,EAAE,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,EAAE;oBAClE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;oBAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;oBAChD,aAAa,EAAE,SAAS,CAAC,aAAa;iBACzC,CAAC,CAAC;YACP,CAAC;YACD,IAAI,gCAAgC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACX,kCAAkC,gCAAgC,CAAC,MAAM,uCAAuC;oBAChH,gDAAgD;oBAChD,gCAAgC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;YACN,CAAC;YAED,4EAA4E;YAC5E,0FAA0F;YAC1F,uEAAuE;YACvE,0FAA0F;YAC1F,wFAAwF;YACxF,qFAAqF;YACrF,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;YACzF,0FAA0F;YAC1F,yBAAyB;YACzB,IAAI,6BAA6B,GAA8C,EAAE,CAAC;YAClF,IAAI,CAAC;gBACD,6BAA6B,GAAG,sCAAsC,CAClE,iBAAiB,CAAC,sBAA6B,CAClD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,EAAE;oBACzF,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACxC,CAAC,CAAC;YACP,CAAC;YACD,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,MAAM,CAChE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sBAAsB,CAAC,wBAAwB,CACxF,CAAC;YACF,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,MAAM,CAChE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,sBAAsB,CAAC,wBAAwB,CACxF,CAAC;YACF,0FAA0F;YAC1F,qEAAqE;YACrE,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,uFAAuF;gBACvF,sFAAsF;gBACtF,sFAAsF;gBACtF,gFAAgF;gBAChF,8DAA8D;gBAC9D,MAAM,aAAa,GAAG;oBAClB,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,OAAO,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;iBACtG,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,yCAAyC,aAAa,CAAC,MAAM,2CAA2C;oBACxG,uGAAuG;oBACvG,qGAAqG;oBACrG,kGAAkG;oBAClG,sGAAsG;oBACtG,sBAAsB,EACtB;oBACI,KAAK,EAAE,aAAa;oBACpB,qFAAqF;oBACrF,uEAAuE;oBACvE,qBAAqB,EAAE,uBAAuB,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM;iBAC/E,CACJ,CAAC;YACN,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,OAAO,EAAE,EAAE;oBAC3E,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;oBAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;oBAChD,QAAQ,EAAE,SAAS,CAAC,QAAQ;iBAC/B,CAAC,CAAC;YACP,CAAC;YACD,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACX,kCAAkC,uBAAuB,CAAC,MAAM,wCAAwC;oBACxG,iGAAiG;oBACjG,uBAAuB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpF,CAAC;YACN,CAAC;YAED,kFAAkF;YAClF,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,+EAA+E;YAC/E,2EAA2E;YAC3E,iFAAiF;YACjF,+EAA+E;YAC/E,+EAA+E;YAC/E,iFAAiF;YACjF,6EAA6E;YAC7E,kFAAkF;YAClF,MAAM,+BAA+B,GAAa,EAAE,CAAC;YACrD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CACnC,iBAAiB,CAAC,sBAAsB,CACS,EAAE,CAAC;gBACpD,MAAM,iBAAiB,GAAG,WAAW,CAAC,kBAAkB,CAAC;gBACzD,MAAM,mBAAmB,GAA6B,WAAW,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,EAAE,CAAC;gBACnH,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;oBAC7C,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,CAAC,WAAW;wBAAE,SAAS;oBACrE,IAAI,YAAY,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,KAAK,IAAI;wBAAE,SAAS;oBACxF,uEAAuE;oBACvE,2EAA2E;oBAC3E,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,iBAAiB,CAAC;wBAAE,SAAS;oBAC5F,IAAI,CAAC;wBACD,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACxD,iBAAiB,EACjB,qBAAqB,CAAC,MAAM,CAC/B,CAAC;oBACN,CAAC;oBAAC,MAAM,CAAC;wBACL,+BAA+B,CAAC,IAAI,CAChC,sBAAsB,iBAAiB,cAAc,YAAY,CAAC,aAAa,aAAa;4BAC5F,kGAAkG;4BAClG,kGAAkG;4BAClG,kGAAkG,CACrG,CAAC;oBACN,CAAC;gBACL,CAAC;YACL,CAAC;YACD,IAAI,+BAA+B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACX,kCAAkC,+BAA+B,CAAC,MAAM,uCAAuC;oBAC/G,uFAAuF;oBACvF,+BAA+B,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChF,CAAC;YACN,CAAC;YAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAClC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,sBAAsB,CAA2D,CACrH,CAAC;YAEF,IAAI,0BAA0B,KAAK,SAAS,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CACX,uFAAuF;sBACrF,0FAA0F;sBAC1F,gDAAgD,CACrD,CAAC;YACN,CAAC;YACD,IAAI,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAC3C,oFAAoF;gBACpF,IAAI,CAAC,2BAA2B,CAAC,wCAAwC,CAAC,0BAA0B,CAAC,CAAC;YAC1G,CAAC;YAED,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,gBAAgB,IAAI,SAAS,CAAC,CAAC;YACrH,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;YAElE,2FAA2F;YAC3F,4FAA4F;YAC5F,wFAAwF;YACxF,kFAAkF;YAClF,6FAA6F;YAC7F,2FAA2F;YAC3F,2FAA2F;YAC3F,yDAAyD;YACzD,uFAAuF;YACvF,0FAA0F;YAC1F,oFAAoF;YACpF,wFAAwF;YACxF,oFAAoF;YACpF,wEAAwE;YACxE,EAAE;YACF,wFAAwF;YACxF,sFAAsF;YACtF,sFAAsF;YACtF,wFAAwF;YACxF,kFAAkF;YAClF,gFAAgF;YAChF,2EAA2E;YAC3E,+DAA+D;YAC/D,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzB,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,2BAA2B,CAAC,8BAA8B,EAAE,CAAC;gBAExE,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;gBACnE,MAAM,IAAI,CAAC,2BAA2B,CAAC,4BAA4B,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,6DAA6D;YAC7D,gEAAgE;YAChE,qCAAqC;YACrC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;gBAC/B,GAAG,2CAA2C;gBAC9C,GAAG,4BAA4B;aAClC,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,CAAC;gBACpB,6DAA6D;gBAC7D,0DAA0D;gBAC1D,yDAAyD;gBACzD,4DAA4D;gBAC5D,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;gBAChE,IAAI,CAAC,iCAAiC,CAAC,mCAAmC,CAAC,iBAAiB,CAAC,CAAC;gBAC9F,kFAAkF;gBAClF,mFAAmF;gBACnF,gFAAgF;gBAChF,MAAM,IAAI,CAAC,iCAAiC,CAAC,qCAAqC,EAAE,CAAC;gBACrF,IAAI,cAAc,CAAC,sCAAsC,EAAE,CAAC;oBACxD,MAAM,IAAI,CAAC,iCAAiC;yBACvC,8CAA8C,CAC3C,iBAAiB,CACpB,CAAC;gBACV,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CACT,oFAAoF;0BAClF,oFAAoF;0BACpF,oFAAoF;0BACpF,kEAAkE,CACvE,CAAC;gBACN,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YAED,8DAA8D;YAC9D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;YACxD,IAAI,gCAAgC,EAAE,CAAC;gBACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;gBACjJ,CAAC;gBACD,IAAI,CAAC,uBAAuB,GAAG,gCAAgC,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC1F,SAAS,EAAE,iBAAiB;oBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,gCAAgC,CAAC,SAAS,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC/E,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,0FAA0F;YAC1F,EAAE;YACF,qFAAqF;YACrF,+EAA+E;YAC/E,gFAAgF;YAChF,yFAAyF;YACzF,uFAAuF;YACvF,IAAI,SAAS,EAAE,CAAC;gBACX,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,+BAA+B,CAA4C;qBACxG,QAAQ,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;oBAC/B,MAAO,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,eAAe,CAAmC;yBACrF,0BAA0B,CAAC,MAAM,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;gBACP,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,qDAAqD;YACrD,IAAI,iBAAiB,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YACnG,CAAC;YAED,yFAAyF;YACzF,IAAI,CAAC,qBAAqB,IAAI,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC;YAED,iEAAiE;YACjE,IAAI,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;YAGzD,iDAAiD;YACjD,IAAI,oBAAoB,GAAuC,EAAE,CAAC;YAElE,IAAI,SAAS,EAAE,CAAC;gBACZ,2EAA2E;gBAC3E,uFAAuF;gBACvF,0FAA0F;gBAC1F,6FAA6F;gBAC7F,0CAA0C;gBAC1C,MAAM,4BAA4B,GAAG,sCAAsC,CACvE,IAAI,CAAC,wBAAwB,CAAC,0BAA0B,EAAE,CAC7D,CAAC;gBACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,OAAO,CAAC;gBACjE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,SAAS,EAAE,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClJ,oBAAoB,GAAG;oBACnB,GAAG,iBAAiB;oBACpB,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;iBAC/B,CAAC;gBAIF,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;oBACxC,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;oBAC3C,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;oBACxD,sBAAsB,EAAE,oBAAoB,CAAC,MAAM;iBACtD,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,oBAAoB,GAAG,iBAAiB,IAAI,EAAE,CAAC;gBAE/C,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;oBACxC,iBAAiB,EAAE,CAAC;oBACpB,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;oBACxD,sBAAsB,EAAE,oBAAoB,CAAC,MAAM;iBACtD,CAAC,CAAC;YACP,CAAC;YACD,IAAG,CAAC,qBAAqB,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAC5C,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,EAClE,mBAAmB,CACtB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,iGAAiG,CAAC,CAAC;YACrH,CAAC;YAED,gFAAgF;YAChF,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,oBAAoB;gBACtC,CAAC,CAAC,oBAAoB,CAAC;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,8BAA8B,EAAE,IAAI,CAAC,qCAAqC;oBAC1E,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;oBACvD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;oBAC7D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;iBACtD,CAAC;gBACJ,CAAC,CAAC,IAAI,GAAG,EAA4D,CAAC;YAE1E,2EAA2E;YAC3E,aAAa,CAAC,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACtE,yFAAyF;YACzF,oFAAoF;YACpF,qFAAqF;YACrF,oFAAoF;YACpF,wFAAwF;YACxF,aAAa,CAAC,GAAG,CAAC,kCAAkC,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC3F,qFAAqF;YACrF,2EAA2E;YAC3E,gFAAgF;YAChF,mFAAmF;YACnF,oEAAoE;YACpE,aAAa,CAAC,GAAG,CAAC,6BAA6B,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACjF,aAAa,CAAC,GAAG,CAAC,mCAAmC,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC7F,aAAa,CAAC,GAAG,CAAC,kCAAkC,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAC1F,2EAA2E;YAC3E,4EAA4E;YAC5E,uEAAuE;YACvE,aAAa,CAAC,GAAG,CAAC,8CAA8C,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAClH,sFAAsF;YACtF,sFAAsF;YACtF,wFAAwF;YACxF,sFAAsF;YACtF,wEAAwE;YACxE,aAAa,CAAC,GAAG,CAAC,uCAAuC,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACrG;;;;;;eAMG;YACH,aAAa,CAAC,GAAG,CACf,wCAAwC,EACxC,iCAAiC,CAC/B,gBAAgB,CAAC,cAA8B,EAC/C,8CAA8C,CAC/C,CACF,CAAC;YACF,aAAa,CAAC,GAAG,CACf,6CAA6C,EAC7C,iCAAiC,CAC/B,gBAAgB,CAAC,mBAAmC,EACpD,mDAAmD,CACpD,CACF,CAAC;YACF,8EAA8E;YAC9E,yFAAyF;YACzF,wFAAwF;YACxF,qFAAqF;YACrF,0FAA0F;YAC1F,oEAAoE;YACpE,EAAE;YACF,0FAA0F;YAC1F,+EAA+E;YAC/E,wFAAwF;YACxF,4FAA4F;YAC5F,2FAA2F;YAC3F,IAAI,iBAAiB,EAAE,CAAC;gBACpB,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;YACpH,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,mDAAmD;YACnD,aAAa,CAAC,GAAG,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;YACrE,6DAA6D;YAC7D,qEAAqE;YACrE,qCAAqC;YACrC,4EAA4E;YAC5E,oEAAoE;YACpE,mEAAmE;YACnE,yDAAyD;YACzD,2DAA2D;YAC3D,aAAa,CAAC,GAAG,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,CAAC;YAClF,aAAa,CAAC,GAAG,CAAC,+BAA+B,EAAE,+BAA+B,CAAC,CAAC;YACpF,qFAAqF;YACrF,uFAAuF;YACvF,oFAAoF;YACpF,wFAAwF;YACxF,qFAAqF;YACrF,WAAW;YACX,aAAa,CAAC,GAAG,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;YAC5E,2EAA2E;YAC3E,+EAA+E;YAC/E,2EAA2E;YAC3E,aAAa,CAAC,GAAG,CAAC,gCAAgC,EAAE,gCAAgC,CAAC,CAAC;YACtF,2DAA2D;YAC3D,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,8DAA8D;YAC9D,aAAa;YACb,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,CAAC;YAE9E,IAAI,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,CAAC;gBACtE,aAAa,CAAC,GAAG,CAAC,mCAAmC,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBAC7F,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,+EAA+E;YAC/E,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;gBAC3B,aAAa,CAAC,GAAG,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBACpH,IAAI,CAAC,QAAQ,CAAC,uCAAuC,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACnH,CAAC;YAED,4EAA4E;YAC5E,EAAE;YACF,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,qEAAqE;YACrE,2CAA2C;YAC3C,IAAI,iBAAiB,EAAE,CAAC;gBACpB,MAAM,iBAAiB,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;gBACxF,IAAI,iBAAiB,EAAE,CAAC;oBACpB,oDAAoD;oBACpD,sDAAsD;oBACtD,6DAA6D;oBAC7D,qDAAqD;oBACrD,sDAAsD;oBACtD,sDAAsD;oBACtD,oDAAoD;oBACpD,oDAAoD;oBACpD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,CAAC;oBACxD,MAAM,YAAY,GAAG,iBAAiB,EAAE,0BAA0B;2BAC3D,yCAAyC,CAAC;oBACjD,aAAa,CAAC,GAAG,CACb,sCAAsC,EACtC,oCAAoC,CAAC,YAAY,CAAC,CACrD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,iFAAiF;gBACjF,EAAE;gBACF,4FAA4F;gBAC5F,iFAAiF;gBACjF,6EAA6E;gBAC7E,6EAA6E;gBAC7E,iFAAiF;gBACjF,MAAM,wBAAwB,GAAG,IAAI,CAAC,wBAAwB;qBACzD,gBAAgB,EAAE;qBAClB,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;oBACnB,MAAM,aAAa,GAAG,IAAI,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,YAAY,CAExF,CAAC;oBACF,OAAO,aAAa,EAAE,oBAAoB,EAAE,YAAY,KAAK,SAAS,CAAC;gBAC3E,CAAC,CAAC,CAAC;gBACP,IAAI,wBAAwB,EAAE,CAAC;oBAC3B,aAAa,CAAC,GAAG,CACb,8CAA8C,EAC9C,2CAA2C,EAAE,CAChD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBAED,wDAAwD;gBACxD,6DAA6D;gBAC7D,yCAAyC;gBACzC,0DAA0D;gBAC1D,6DAA6D;gBAC7D,+CAA+C;gBAC/C,EAAE;gBACF,2DAA2D;gBAC3D,0DAA0D;gBAC1D,uDAAuD;gBACvD,sDAAsD;gBACtD,EAAE;gBACF,yDAAyD;gBACzD,2DAA2D;gBAC3D,oDAAoD;gBACpD,uDAAuD;gBACvD,cAAc;gBACd,MAAM,WAAW,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjD,IAAI,WAAW,EAAE,CAAC;oBACd,aAAa,CAAC,GAAG,CACb,kCAAkC,EAClC,gCAAgC,EAAE,CACrC,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;YACL,CAAC;YAED,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAElD,mFAAmF;YACnF,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBACpD,0EAA0E;gBAC1E,yEAAyE;gBACzE,4EAA4E;gBAC5E,6EAA6E;gBAC7E,0EAA0E;gBAC1E,sDAAsD;gBACtD,IAAI,SAAS,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACD,MAAM,0BAA0B,GAAG,SAAS,CAAC,GAAG,CAC5C,kBAAkB,CAAC,0BAA0B,CACX,CAAC;wBACvC,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;wBAC5E,IAAI,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC;wBAE5E,uEAAuE;wBACvE,sEAAsE;wBACtE,2DAA2D;wBAC3D,MAAM,2BAA2B,GAAG,SAAS,CAAC,GAAG,CAC7C,kBAAkB,CAAC,2BAA2B,CACX,CAAC;wBACxC,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,CAAC;wBAC7E,IAAI,CAAC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;oBACjF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uFAAuF,EAAE;4BACtG,GAAG,2BAA2B,CAAC,KAAK,CAAC;yBACxC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wFAAwF,CAAC,CAAC;YAC5G,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,mEAAmE;YACnE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACD,8DAA8D;oBAC9D,4DAA4D;oBAC5D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,8DAA8D;oBAC9D,6DAA6D;oBAC7D,iDAAiD;oBACjD,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,CACxC,gBAAgB;wBACZ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;wBACvD,CAAC,CAAC,SAAS,CAClB,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;gBACjF,CAAC;gBAED,uDAAuD;gBACvD,IAAI,IAAI,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;oBAChE,IAAI,CAAC;wBACD,8BAA8B;wBAC9B,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;wBAErC,0DAA0D;wBAC1D,8CAA8C;wBAC9C,wDAAwD;wBACxD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,wDAAwD;wBACxD,qDAAqD;wBACrD,wCAAwC;wBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YAED,mEAAmE;YACnE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;YAEjE,kFAAkF;YAClF,wFAAwF;YACxF,2BAA2B;YAC3B,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAEnC,uFAAuF;YACvF,uFAAuF;YACvF,kFAAkF;YAClF,0DAA0D;YAC1D,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAE1C,iFAAiF;YACjF,0FAA0F;YAC1F,kFAAkF;YAClF,MAAM,IAAI,CAAC,gCAAgC,EAAE,CAAC;YAE9C,yFAAyF;YACzF,2FAA2F;YAC3F,yFAAyF;YACzF,yDAAyD;YACzD,IAAI,CAAC,yCAAyC,EAAE,CAAC;YAEjD,kCAAkC;YAClC,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAEpD,sFAAsF;YACtF,wFAAwF;YACxF,wFAAwF;YACxF,wFAAwF;YACxF,yFAAyF;YACzF,oEAAoE;YACpE,EAAE;YACF,2FAA2F;YAC3F,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,yFAAyF;YACzF,wFAAwF;YACxF,yFAAyF;YACzF,4FAA4F;YAC5F,wFAAwF;YACxF,EAAE;YACF,iGAAiG;YACjG,+FAA+F;YAC/F,wFAAwF;YACxF,IAAI,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,wCAAwC,CAAC;oBACjE,aAAa,EAAE,iBAAiB,CAAC,WAAW,CAAC,OAAO;oBACpD,SAAS,EAAE,iBAAiB,CAAC,SAAS;iBACzC,CAAC,CAAC;YACP,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAG1B,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YAC/D,IAAI,CAAC,2BAA2B,CAAC;gBAC7B,mBAAmB,EAAE,IAAI;gBACzB,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,CAAC;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YACpD,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;QAElF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,sEAAsE;YACtE,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,+BAA+B,CAAC,SAAc;QACxD,IAAI,CAAC;YACD,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAiC,CAAC;YAC/G,MAAM,qBAAqB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAwC,CAAC;YAE7H,MAAM,qBAAqB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC/D,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,yBAAyB,CACnC,SAAc,EACd,aAAmC,EACnC,qBAA2C;QAE3C,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;QAErD,+DAA+D;QAC/D,EAAE;QACF,4DAA4D;QAC5D,iEAAiE;QACjE,mEAAmE;QACnE,+DAA+D;QAC/D,iEAAiE;QACjE,iEAAiE;QACjE,gEAAgE;QAChE,0DAA0D;QAC1D,sDAAsD;QACtD,iEAAiE;QACjE,EAAE;QACF,iEAAiE;QACjE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACnE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACL,OAAO,EAAE,wCAAwC,CAC7C,UAAU,CAAC,MAAM,EACjB,aAAa,EACb,UAAU,CAAC,MAAM,CACpB;oBACD,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,IAAI;oBAC9C,uBAAuB,EAAE,UAAU,CAAC,MAAM;iBAC7C;aACJ,CAAC,CAAC;QACP,CAAC;QACD,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC;YACD,4CAA4C;YAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAqC,CAAC;YACpH,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,CAAgC,CAAC;YAE5G,0FAA0F;YAC1F,MAAM,kBAAkB,GAAwB,qBAAqB,IAAI,EAAE,CAAC;YAE5E,6CAA6C;YAC7C,MAAM,WAAW,CAAC,UAAU,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAEhD,0DAA0D;YAC1D,EAAE;YACF,wFAAwF;YACxF,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,qEAAqE;YACrE,SAAS;iBACJ,GAAG,CAAC,kBAAkB,CAAC,oCAAoC,CAAC;iBAC5D,QAAQ,CAAC,iCAAiC,CAAC;gBACxC,kBAAkB,EAAE,GAAG,EAAE,CAAC,eAAe;gBACzC,6BAA6B,EAAE,KAAK,EAAE,0BAA0B,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE;oBAC5F,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;oBACzG,OAAO,yBAAyB,CAAC,MAAM,YAAY,CAAC,YAAY,CAC5D,0BAA0B,EAC1B,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAC5C,CAAwD,CAAC;gBAC9D,CAAC;gBACD,uBAAuB,EAAE,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,EAAE;oBACjG,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;oBACzG,OAAO,yBAAyB,CAAC,MAAM,YAAY,CAAC,YAAY,CAC5D,wBAAwB,EACxB;wBACI,CAAC,qBAAqB,CAAC,EAAE,gBAAgB;wBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE;qBACnD,CACJ,CAA4D,CAAC;gBAClE,CAAC;gBACD,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;aACpE,CAAC,CAAC,CAAC;YACR,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,4GAA4G;YAC5G,IAAI,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,EAAE;oBAClD,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM;iBACjD,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBACnE,GAAG,2BAA2B,CAAC,SAAS,CAAC;iBAC5C,CAAC,CAAC;YACP,CAAC;YAED,+FAA+F;YAC/F,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAqC,CAAC;YACpH,MAAM,mBAAmB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAA+B,CAAC;YAChH,sCAAsC,CAAC,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAE5H,oGAAoG;YACpG,iCAAiC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAEhE,8BAA8B;YAC9B,2FAA2F;YAC3F,iFAAiF;YACjF,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAiC,CAAC;YAC/G,MAAM,qBAAqB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAwC,CAAC;YAE7H,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC,eAAe,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;YAC7F,cAAc,CAAC,eAAe,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YAErF,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,gBAAgB,CAAqB,CAAC;YAChG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,kBAAkB,GAAG,IAAI,uCAAuC,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACnK,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;YACzF,qBAAqB,CAAC,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;YAE1E,IAAI,CAAC,QAAQ,CAAC,6CAA6C,EAAE;gBACzD,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,aAAa,EAAE,aAAa,CAAC,aAAa;aAC7C,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,qFAAqF;YACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE;gBACxF,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACxC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,sBAAsB,CAAC,aAAmC;QACpE,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,kBAAkB,EAAE,CAAC;QACjG,CAAC;QAED,IAAI,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,8BAA8B,CAAC,kBAAkB,CAC1E,WAAW,EACX,sCAAsC,CAAC,gBAAgB,CAC1D,CAAC;YACF,IAAI,eAAe,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtC,kEAAkE;gBAClE,iEAAiE;gBACjE,mEAAmE;gBACnE,gEAAgE;gBAChE,iEAAiE;gBACjE,IAAI,CAAC,QAAQ,CAAC,uDAAuD,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxF,OAAO;oBACH,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,sCAAsC,CAAC,iCAAiC;iBACnF,CAAC;YACN,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,CACxD,WAAW,EACX,sCAAsC,CAAC,gBAAgB,CAC1D,EAAE,CAAC;gBACA,IAAI,CAAC,QAAQ,CAAC,8DAA8D,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,iBAAiB,EAAE,CAAC;YAChG,CAAC;YAED,2DAA2D;YAC3D,yDAAyD;YACzD,sDAAsD;YACtD,qCAAqC;YACrC,yDAAyD;YACzD,oDAAoD;YACpD,oDAAoD;YACpD,gEAAgE;YAChE,gDAAgD;YAChD,oDAAoD;YACpD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;YAC5C,MAAM,SAAS,GAAG,SAAS;gBACvB,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,iBAAiB,CACrD,WAAW,EACX,sCAAsC,CAAC,gBAAgB,EACvD,SAAS,CACZ;gBACD,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClG,OAAO;oBACH,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,sCAAsC,CAAC,cAAc;oBAC7D,MAAM,EAAE,SAAS;iBACpB,CAAC;YACN,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,qEAAqE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,QAAQ,EAAE,IAAI,6BAA6B,CAAC,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACvG,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACV,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAG5C,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;QAEnC,4DAA4D;QAC5D,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAY,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;IACD;;OAEG;IACI,wBAAwB;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,oBAAoB;QACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,2BAA2B,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACI,2BAA2B,CAAC,UAM/B,EAAE;QACF,IAAI,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;QAE1E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,2BAA2B,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC1B,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QAEnE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;YACpF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,CAAC;IAC/D,CAAC;IAED;;OAEG;IACI,4BAA4B;QAC/B,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO;QACX,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,sBAAsB;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,0BAA0B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,mBAAmB;QACtB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED;;OAEG;IACI,wBAAwB;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;OAYG;IACO,KAAK,CAAC,kBAAkB,CAC9B,SAAoD,EACpD,sBAAmF;QAEnF,MAAM,kCAAkC,CAAC;YACrC,SAAS;YACT,sBAAsB;YACtB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,uBAAuB;YACtC,qBAAqB,EAAE,IAAI,CAAC,oCAAoC;YAChE,UAAU,EAAE,IAAI,CAAC,yBAAyB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,uBAAuB;SACjD,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACO,KAAK,CAAC,qBAAqB;QACjC,oFAAoF;QACpF,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qCAAqC;YAAE,OAAO;QAE/H,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,QAAQ,CAAC,kFAAkF,CAAC,CAAC;gBAClG,OAAO;YACX,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,0BAA0B,CAAC;gBACjG,SAAS,EAAE,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACnE,gBAAgB,CAAC,KAAK,EACtB,qBAAqB,CAAC,IAAI,CAC7B;gBACD,cAAc,EAAE;oBACZ;wBACI,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,mBAAmB,EAAE,oBAAoB,CAAC,WAAW;qBACxD;iBACJ;aACJ,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,iCAAiC,CAAC;gBACvD,gBAAgB;gBAChB,oBAAoB,EAAE,IAAI,CAAC,2BAA2B;gBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,eAAe,EAAE,gCAAgC,CAAC,IAAI,CAAC,qBAAqB,CAAC;aAChF,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE;oBACjD,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,uFAAuF;YACvF,kFAAkF;YAClF,sFAAsF;YACtF,kBAAkB;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,mFAAmF;kBACjF,kFAAkF;kBAClF,oFAAoF;kBACpF,gDAAgD,EAClD;gBACI,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;gBACvD,6BAA6B,EAAE,yBAAyB;gBACxD,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,cAAc,EAAE,CAAC,GAAG,qCAAqC,CAAC;aAC7D,CACJ,CAAC;YAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,qCAAqC,CAAC;gBAC/D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;gBACvD,6BAA6B,EAAE,yBAAyB;gBACxD,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,cAAc,EAAE,CAAC,GAAG,qCAAqC,CAAC;aAC7D,EAAE,gBAAgB,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACO,KAAK,CAAC,4BAA4B;QACxC,0EAA0E;QAC1E,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qCAAqC;YAAE,OAAO;QAE/H,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,aAAa,CAAC;mBAC5E,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC5F,IAAI,CAAC,QAAQ,CAAC,4FAA4F,CAAC,CAAC;gBAC5G,OAAO;YACX,CAAC;YAED,MAAM,2BAA2B,GAAG,IAAI,CAAC,2BAA2B,CAAC;YACrE,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,+FAA+F,CAAC,CAAC;gBAC/G,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,sCAAsC,CAAC;gBAC5D,mFAAmF;gBACnF,yFAAyF;gBACzF,wFAAwF;gBACxF,wEAAwE;gBACxE,4CAA4C;gBAC5C,2BAA2B;gBAC3B,oBAAoB,EAAE,IAAI,CAAC,2BAA2B;gBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,eAAe,EAAE,uCAAuC,CAAC,IAAI,CAAC,qBAAqB,CAAC;aACvF,CAAC,CAAC;YAEH,yFAAyF;YACzF,yFAAyF;YACzF,yFAAyF;YACzF,sFAAsF;YACtF,yEAAyE;YACzE,IAAI,UAAU,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,sFAAsF;sBACpF,uFAAuF;sBACvF,kFAAkF,EACpF;oBACI,4BAA4B,EAAE,UAAU,CAAC,wBAAwB,CAAC,MAAM;oBACxE,wBAAwB,EAAE,UAAU,CAAC,wBAAwB;oBAC7D,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;iBACpE,CACJ,CAAC;YACN,CAAC;YAED,IAAI,UAAU,CAAC,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,+DAA+D,EAAE;oBAC3E,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;iBACpE,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,yFAAyF;YACzF,yFAAyF;YACzF,0FAA0F;YAC1F,2FAA2F;YAC3F,sDAAsD;YACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,oFAAoF;kBAClF,oFAAoF;kBACpF,8DAA8D;kBAC9D,wFAAwF;kBACxF,qFAAqF;kBACrF,4DAA4D,EAC9D;gBACI,0BAA0B,EAAE,UAAU,CAAC,sBAAsB,CAAC,MAAM;gBACpE,0BAA0B,EAAE,UAAU,CAAC,0BAA0B;gBACjE,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;gBACzD,oBAAoB,EAAE,gCAAgC;gBACtD,eAAe,EAAE,uCAAuC,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBACpF,wBAAwB,EAAE,CAAC,GAAG,oDAAoD,CAAC;gBACnF,uBAAuB,EAAE,CAAC,GAAG,2CAA2C,CAAC;aAC5E,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAI,CAAC,QAAQ,CAAC,+CAA+C,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACvG,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACO,KAAK,CAAC,gCAAgC;QAC5C,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qCAAqC;YAAE,OAAO;QAE/H,IAAI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,QAAQ,CAAC,qFAAqF,CAAC,CAAC;gBACrG,OAAO;YACX,CAAC;YACD,MAAM,2BAA2B,GAAG,IAAI,CAAC,2BAA2B,CAAC;YACrE,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,mGAAmG,CAAC,CAAC;gBACnH,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC;gBACzD,2BAA2B;gBAC3B,oBAAoB,EAAE,IAAI,CAAC,2BAA2B;gBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,+BAA+B,EAAE,gCAAgC,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAC7F,gCAAgC,EAAE,uCAAuC,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBACrG,0EAA0E;gBAC1E,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,uCAAuC,EAAE;gBACnD,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,2BAA2B,EAAE,UAAU,CAAC,uBAAuB,CAAC,MAAM;gBACtE,4BAA4B,EAAE,UAAU,CAAC,wBAAwB,CAAC,MAAM;gBACxE,+BAA+B,EAAE,UAAU,CAAC,+BAA+B;gBAC3E,gCAAgC,EAAE,UAAU,CAAC,gCAAgC;aAChF,CAAC,CAAC;YAEH,oFAAoF;YACpF,uFAAuF;YACvF,mFAAmF;YACnF,IAAI,UAAU,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,sGAAsG;sBACpG,oGAAoG;sBACpG,0CAA0C,EAC5C,EAAE,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,EAAE,CACtE,CAAC;YACN,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3G,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACK,yCAAyC;QAC7C,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,EAAE,oBAAoB,EAAE,CAAC;YACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,wFAAwF,CAAC,CAAC;gBACxG,OAAO;YACX,CAAC;YAED,MAAM,UAAU,GAAG,wDAAwD,CAAC;gBACxE,sBAAsB,EAAE,QAAQ,CAAC,sBAAmF;gBACpH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;aAC9D,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,oEAAoE,EAAE;oBAChF,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,MAAM;iBACrE,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,6FAA6F;kBAC3F,6FAA6F;kBAC7F,yFAAyF;kBACzF,4FAA4F;kBAC5F,0FAA0F;kBAC1F,2FAA2F;kBAC3F,yCAAyC,EAC3C;gBACI,uBAAuB,EAAE,UAAU,CAAC,MAAM;gBAC1C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,MAAM;gBAClE,mBAAmB,EAAE,UAAU;aAClC,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,6FAA6F;YAC7F,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,UAAsC,EAAE;QACzE,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;QAE1D,IAAI,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT,EAAC,sBAAsB,EAAE,2BAA2B,CAAC,sCAAsC,EAAC,CAC/F,CAAC;oBACF,MAAM,KAAK,CAAC;gBAChB,CAAC;YACL,CAAC;YAED,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;YACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT,EAAC,sBAAsB,EAAE,2BAA2B,CAAC,uCAAuC,EAAC,CAChG,CAAC;gBACF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,+CAA+C;YAC/C,iFAAiF;YACjF,8CAA8C;YAC9C,mEAAmE;YACnE,IAAI;YAEJ,2CAA2C;YAC3C,yEAAyE;YACzE,0CAA0C;YAC1C,+DAA+D;YAC/D,IAAI;YAEJ,8CAA8C;YAC9C,+EAA+E;YAC/E,6CAA6C;YAC7C,kEAAkE;YAClE,IAAI;YAEJ,qCAAqC;YACrC,6CAA6C;YAC7C,qDAAqD;YACrD,IAAI;YAEJ,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY;gBACnC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YAE7C,sEAAsE;YACtE,2CAA2C;YAC3C,gDAAgD;YAChD,2EAA2E;YAC3E,gEAAgE;YAChE,6EAA6E;YAC7E,qDAAqD;YACrD,qEAAqE;YACrE,8DAA8D;YAC9D,2EAA2E;YAC3E,qDAAqD;YACrD,6DAA6D;YAC7D,oCAAoC;YACpC,mCAAmC;YACnC,MAAM;QAEV,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,qEAAqE;YACrE,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,gCAAgC,EAAE,CAC3F,CAAC;YACF,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAES,0BAA0B,CAAC,OAAmC;QACpE,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACzD,CAAC;IAES,kBAAkB,CAAC,OAAmC;QAC5D,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACzD,CAAC;IAEO,gCAAgC,CAAC,SAAc,EAAE,QAA+C;QACpG,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACvD,OAAO;QACX,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClG,CAAC;CACJ,CAAA;AAhqEY,8BAA8B;IAD1C,UAAU,EAAE;IAcJ,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACnE,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAA;IAC5D,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,YAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAChD,YAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,YAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,YAAA,MAAM,CAAC,kBAAkB,CAAC,oDAAoD,CAAC,CAAA;IAC/E,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,YAAA,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACvC,YAAA,MAAM,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;IACtC,YAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,YAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,YAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,YAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,YAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;IAC1D,YAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IACxD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAC/C,YAAA,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAA;IACnD,YAAA,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAA;IAChD,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAK5C,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,YAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAI7C,YAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAWxD,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IAKtD,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAKvD,YAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;qCA9DL,aAAa;QACO,uBAAuB;QACkB,wCAAwC;QAClE,+BAA+B;QACjB,yCAAyC;QAC1D,qCAAqC;QACtB,wCAAwC;QACjE,wBAAwB;QAC3B,0BAA0B;QAC1B,mBAAmB;QACR,4BAA4B;QACzB,sCAAsC;QACT,qCAAqC;QACzC,2DAA2D;QACrG,cAAc;QAClB,YAAY;QACd,kBAAkB;QACoB,qCAAqC;QACjC,uCAAuC;QACvC,uCAAuC;QACjD,yCAAyC;QAC3C,wCAAwC;QACxD,gCAAgC;QAChB,0BAA0B;QAChB,6CAA6C;QACxD,oCAAoC;QACnD,yBAAyB;QACrB,2BAA2B;QACnB,sCAAsC;QACrC,mCAAmC;QACzC,gCAAgC;QACzC,+BAA+B;QAK1B,8BAA8B;QAC1B,gCAAgC,YAepB,2BAA2B,YAWnF,yCAAyC;GA5ErF,8BAA8B,CAgqE1C;;AAED;;;;GAIG;AACH,SAAS,yBAAyB,CAAI,MAAyC;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["import 'reflect-metadata';\nimport { injectable, inject, optional } from 'inversify';\nimport type { PersistenceAdapterType, ResourceConfiguration_InitializationFactoryMap, ResourceRelationship, ResourcesRegistry, ResourceType, RolesConfiguration, FlowsActors_Agent, ResourceConfiguration, FeatureDefinitionWithAutoRegister, FeatureConfiguration, ScopeFeatures, MilestoneDefinition, ForeignKeyFillabilityViolation, CompositionSeedabilityViolation, CompositionSeedabilityResourceInput, CompositionCascadeDeletabilityViolation, NotificationBadgeDefinition, ResourceServerInstance } from '@wildo-ai/saas-models';\nimport type { DataSeedDefinition } from '~wildo-backend-lib/data-seeding/models/data-seed.shared.schemas';\nimport type { DataSeedScopeResolver } from '~wildo-backend-lib/data-seeding/services/data-seed-scope-resolver-registry.backend.service';\nimport type { DataSeedScopeResolverRegistryBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-scope-resolver-registry.backend.service';\nimport { runDataSeedingApplicationBootstrap } from '~wildo-backend-lib/data-seeding/services/data-seed-application-bootstrap.backend';\nimport type { FlowActorSystem_InitializationFactoryMap } from '~wildo-backend-lib/flows-actors/models/flows-actors.backend.schemas';\nimport type { FunctionTool } from '~wildo-backend-lib/flows-actors/models/function-tools.backend.definitions';\nimport type { BackendProviderRegistry } from '@wildo-ai/external-connectors-private/backend';\nimport { ErrorType, ErrorCustomMessageReference, FeatureUnavailabilityBehavior, FeatureUnavailabilityReason, BILLING_SCOPES, ActivationCriterionType, ResourcePrimaryScope, CoreResourceType, CoreResourceOperation, CORE_APP_ROLES, RelationshipNature, validateRequiredForeignKeyFillability, ForeignKeyFillabilityViolationSeverity, validateCompositionSeedability, validateCompositionCascadeDeletability, ChildLifecycleStrategy, EngineCapability } from '@wildo-ai/saas-models';\nimport type { LifecycleConfig, OrganizationUnitNarrowingDeclaration } from '@wildo-ai/saas-models';\nimport { collectApplicationResourcesWithNoPersonalDataDeclaration, type PersonalDataDeclarationSubject } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { describeCaughtError, projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport {\n ADMINISTRATIVELY_USABLE_USER_STATUSES,\n measureUsableSuperAdminPopulation,\n resolveSuperAdminConferringRoles,\n SUPER_ADMIN_FLOOR_MINIMUM,\n} from '~wildo-backend-lib/security/authorizations/super-admin-floor.backend.utils';\nimport {\n ADMINISTRATIVELY_USABLE_ORGANIZATION_MEMBER_STATUSES,\n ADMINISTRATIVELY_USABLE_OWNER_USER_STATUSES,\n measureOrganizationsMissingUsableOwner,\n ORGANIZATION_OWNER_FLOOR_MINIMUM,\n resolveOrganizationOwnerConferringRoles,\n} from '~wildo-backend-lib/security/authorizations/organization-owner-floor.backend.utils';\nimport { enumeratePrivilegedAccessPopulation } from '~wildo-backend-lib/security/authorizations/privileged-access-review.backend.utils';\nimport { ApplicationRuntimeProfile, resolveApplicationRuntimeProfileBootAssertions } from '~wildo-backend-lib/config/bootstrap/application-runtime-profile.backend';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { ApplicationStartupConfigValidatorService } from '~wildo-backend-lib/config/services/application-startup-config-validator.backend.service';\nimport { ObservabilityBackendService } from '~wildo-backend-lib/monitoring/observability/services/observability.backend.service';\nimport type { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport type { AppConfiguration_BackendAuthored } from '~wildo-backend-lib/config/models/app-config.backend-authored.definitions';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { SubjectSessionRevocationBackendService } from '~wildo-backend-lib/compliance/privacy/services/subject-session-revocation.backend.service';\nimport type { AuthTokenIssuerBackendService } from '~wildo-backend-lib/security/authentications/services/auth-token-issuer.backend.service';\nimport { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\nimport { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport { FeatureDefinitionRegistryBackendService } from '~wildo-backend-lib/features/services/feature-definition-registry.backend.service';\nimport { MilestoneDefinitionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-definition-registry.backend.service';\nimport { MilestoneConditionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-condition-registry.backend.service';\nimport type { MilestoneConditionFn } from '~wildo-backend-lib/guidance/services/milestone-condition-registry.backend.service';\nimport { LifecycleEvaluatorBackendService } from '~wildo-backend-lib/guidance/services/lifecycle-evaluator.backend.service';\nimport { initializeLifecycleCustomImplementations } from '~wildo-backend-lib/guidance/services/lifecycle-custom-implementations.backend';\nimport { createDormancyDetectionBatch } from '~wildo-backend-lib/guidance/batches/dormancy-detection.batch.backend.service';\nimport { createDataSeedingScheduledRerunBatch } from '~wildo-backend-lib/data-seeding/batches/data-seeding-scheduled-rerun.batch.backend.service';\nimport { createExternalDataPipelineScheduledRunBatch } from '~wildo-backend-lib/external-data/batches/external-data-pipeline-scheduled-run.batch.backend.service';\nimport { createDataSeedingRunCleanupBatch } from '~wildo-backend-lib/data-seeding/batches/data-seeding-run-cleanup.batch.backend.service';\nimport { FlowsActorsRegistryService } from '~wildo-backend-lib/flows-actors/services/flows-actors-registry.service';\nimport { ResourceServerInstancesRegistryBackendService } from '~wildo-backend-lib/mcp/services/resource-server-instances-registry.backend.service';\nimport { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport { ServicesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/services/services-registry-handler.backend.service';\nimport { ControllersRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/controllers-registry-handler.backend.service';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { getManualControllersBackend } from '~wildo-backend-lib/base-classes/models/manual-controllers.backend.definition';\nimport { HttpServerBackendService } from './http-server.backend.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { AuthorizationsBackendService } from '~wildo-backend-lib/security/authorizations/services/authorizations.backend.service';\nimport { BatchesCronjobsExecutor_BackendService } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-executor.backend.service';\nimport { BatchesCronjobsCustomExecution_Service } from '~wildo-backend-lib/base-classes/services/batches/batches-cronjobs-custom-execution.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { AuthExecutionContextFactoryBackendService } from '~wildo-backend-lib/security/authentications/services/auth-execution-context-factory.backend.service';\nimport { ResourceOperationCustomImplementationRegistryBackendService } from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation-registry.backend.service';\nimport { CoreBackend_ServiceImplementationsFactories } from '~wildo-backend-lib/resources/models/custom-service-implementations.backend.definition';\nimport { createFilesCleanupBatch } from '~wildo-backend-lib/files/batches/files-cleanup.batch.backend.service';\nimport { createConsumableTokensCleanupBatch } from '~wildo-backend-lib/security/consumable-tokens/batches/consumable-tokens-cleanup.batch.backend.service';\nimport { createA2AAbandonedTaskSweepBatch } from '~wildo-backend-lib/flows-actors/a2a/batches/a2a-abandoned-task-sweep.batch.backend.service';\nimport { createAnonymousSessionCleanupBatch } from '~wildo-backend-lib/security/authentications/batches/anonymous-session-cleanup.batch.backend.service';\nimport { createOrganizationMemberInvitationSweepBatch } from '~wildo-backend-lib/organizations/batches/organization-member-invitation-sweep.batch.backend.service';\nimport { createSuspensionReactivationSweepBatch } from '~wildo-backend-lib/base-classes/services/batches/suspension-reactivation-sweep.batch.backend.service';\nimport { createResourceRetentionSweepBatch } from '~wildo-backend-lib/base-classes/services/batches/resource-retention-sweep.batch.backend.service';\nimport { createOrganizationPurgeBatch } from '~wildo-backend-lib/organizations/batches/organization-purge.batch.backend.service';\nimport { isScimProvisioningEnabledForAnyOrgType } from '~wildo-backend-lib/organizations/services/scim-provisioning-gate.backend.utils';\nimport { emailBatchSendService } from '~wildo-backend-lib/notifications/email/services/email-batch-send.batch.backend.service';\nimport { m2mWebhookDeliveryBatchService } from '~wildo-backend-lib/notifications/webhooks/outbound/batches/m2m-webhook-delivery.batch.backend.service';\nimport { a2aPushDeliveryBatchService } from '~wildo-backend-lib/flows-actors/a2a/batches/a2a-push-delivery.batch.backend.service';\nimport { siemWebhookDeliveryBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/siem-webhook-delivery.batch.backend.service';\nimport { immudbAuditReconcileBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/immudb-audit-reconcile.batch.backend.service';\nimport { auditLogsArchiveBatchService } from '~wildo-backend-lib/compliance/audit-trails/batches/audit-logs-archive.batch.backend.service';\nimport { shouldWarnLayer2AuditProviderInactive } from '~wildo-backend-lib/compliance/audit-trails/utils/layer2-audit-provider-boot-diagnostic.backend.utils';\nimport { StripeStandardBillingProvider } from '~wildo-backend-lib/billing/services/stripe-standard-billing-provider.backend.service';\n// Internal callers go through the path alias (the `@wildo-ai/saas-backend-lib/custom-batch-manifests`\n// subpath export exists for external spec-layer consumers; self-imports through the public\n// package name are not wired in this workspace's tsconfig path map).\nimport {\n ANONYMOUS_SESSION_CLEANUP_BATCH_REF,\n ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF,\n SUSPENSION_REACTIVATION_SWEEP_BATCH_REF,\n JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ORGANIZATION_PURGE_BATCH_REF,\n CONSUMABLE_TOKENS_CLEANUP_BATCH_REF,\n A2A_ABANDONED_TASK_SWEEP_BATCH_REF,\n DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON,\n EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n DORMANCY_DETECTION_BATCH_REF,\n EMAIL_BATCH_SEND_BATCH_REF,\n FILES_CLEANUP_BATCH_REF,\n M2M_WEBHOOK_DELIVERY_BATCH_REF,\n A2A_PUSH_DELIVERY_BATCH_REF,\n SIEM_WEBHOOK_DELIVERY_BATCH_REF,\n IMMUDB_AUDIT_RECONCILE_BATCH_REF,\n AUDIT_LOGS_ARCHIVE_BATCH_REF,\n RAG_RECONCILIATION_SWEEP_BATCH_REF,\n RAG_EMBEDDING_DRAIN_BATCH_REF,\n} from '~wildo-backend-lib/base-classes/services/batches/engine-custom-batch-manifests';\nimport { createRagReconciliationSweepBatch } from '~wildo-backend-lib/rag/batches/rag-reconciliation-sweep.batch.backend.service';\nimport { createRagEmbeddingDrainBatch } from '~wildo-backend-lib/rag/batches/rag-embedding-drain.batch.backend.service';\nimport { SAAS_SERVICE_TYPES as TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { ResourceCustomServiceImplementationFactory } from '~wildo-backend-lib/base-classes/services/services/resource-operation-custom-implementation.factory.backend';\nimport { MongoDBService } from '~wildo-backend-lib/databases/services/mongodb.service';\nimport { RedisService } from '~wildo-backend-lib/databases/services/redis.service';\nimport { I18nBackendService, CustomLabelsMap } from '~wildo-backend-lib/i18n/services/i18n.backend.service';\nimport { FileStorageRouterBackendService } from '~wildo-backend-lib/files/storage/file-storage-router.backend.service';\nimport { PdfTemplateBindingBackendService } from '~wildo-backend-lib/pdf-templates/services/pdf-template-binding.backend.service';\nimport type { PdfTemplateBindingsMap } from '~wildo-backend-lib/pdf-templates/models/pdf-template-binding';\nimport { QueueWorkerInitializerBackendService } from '~wildo-backend-lib/queue/queue-worker-initializer.backend.service';\nimport { CronJobSyncBackendService } from '~wildo-backend-lib/queue/cron-job-sync.backend.service';\nimport type { ProductCatalogSyncBackendService } from '~wildo-backend-lib/billing/services/back-office/product-catalog-sync.backend.service';\nimport type { UsageMeteringBackendService } from '~wildo-backend-lib/billing/services/back-office/usage-metering.backend.service';\nimport {\n createBillingSubjectErasureEffect,\n TERMINAL_SUBSCRIPTION_STATUSES,\n} from '~wildo-backend-lib/billing/services/back-office/billing-subject-erasure-effect.backend';\nimport type { SystemAccessBackendService } from '~wildo-backend-lib/base-classes/services/services/system-access.backend.service';\nimport type { BillingFeatureSyncBackendService } from '~wildo-backend-lib/billing/services/back-office/billing-feature-sync.backend.service';\nimport { initializeBillingCustomImplementations, registerBillingPostOperationHooks, setBillingWebSocketService } from '~wildo-backend-lib/billing/services/custom-impl/billing-custom-implementations.backend';\nimport { ExternalProvider_ExchangeProtocol_Kind, type StandardBilling_Interface } from '@wildo-ai/external-connectors-models';\nimport type { WebhookHandlerBackendService } from '~wildo-backend-lib/notifications/webhooks/services/webhook-handler.backend.service';\nimport type { WebhookAutoControllerBackendService } from '~wildo-backend-lib/notifications/webhooks/controllers/webhook-auto-controller.backend.service';\nimport { BillingWebhookAdapter } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-adapter.backend.service';\nimport { BillingWebhookCapabilityHandler } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-capability-handler.backend.service';\nimport { BillingWebhookEventRouterBackendService } from '~wildo-backend-lib/billing/services/webhooks/billing-webhook-event-router.backend.service';\nimport type { WebSocketService } from '~wildo-backend-lib/requests/service/websocket.service';\nimport type { BillingConfiguration, ProductDefinition, ChartDefinition, GuidanceFlowDefinition } from '@wildo-ai/saas-models';\nimport { ChartRegistryBackendService } from '~wildo-backend-lib/charts/services/chart-registry.backend.service';\nimport { GuidanceTriggerEvaluatorBackendService } from '~wildo-backend-lib/guidance/services/guidance-trigger-evaluator.backend.service';\nimport { DataSeedRegistryBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-registry.backend.service';\nimport { DataSeedDispatcherBackendService } from '~wildo-backend-lib/data-seeding/services/data-seed-dispatcher.backend.service';\nimport { DataSeedingAdminBackendController } from '~wildo-backend-lib/data-seeding/controllers/data-seeding-admin.backend.controller';\nimport { ExternalDataAdminBackendController } from '~wildo-backend-lib/external-data/controllers/external-data-admin.backend.controller';\nimport { EmailTemplateRegistryBackendService } from '~wildo-backend-lib/notifications/email/services/email-template-registry.backend.service';\nimport type { EmailTemplateDefinitionsMap } from '~wildo-backend-lib/notifications/email/models/email-template-definition';\nimport { BillingStateBackendService } from '~wildo-backend-lib/billing/services/back-office/billing-state.backend.service';\nimport { resolveFeatureGatedCoreResourceExclusions } from '~wildo-backend-lib/runtime/utils/feature-gated-core-resource-exclusions.backend.utils';\nimport { resolveApplicationConfigForStartup } from '~wildo-backend-lib/runtime/utils/application-startup-config-access.backend.utils';\n\n\n\n/*\n Configuration object for {@link StartApplicationBackendService.initialize}.\n \n Groups the 25+ positional parameters into a single typed config,\n * preventing silent mis-ordering bugs (e.g. `customLabels` passed as `undefined`\n * at the wrong positional slot).\n /\nexport interface ApplicationInitializationConfig {\n sharedResourceConfigurations: ResourceConfiguration_InitializationFactoryMap;\n sharedResourceFieldIdentifiers?: Record<string, string>;\n sharedResourceRelationships: ResourceRelationship[];\n\n backendResourceConfigurations?: ResourceConfiguration_InitializationFactoryMap;\n backendResourceFieldIdentifiers?: Record<string, string>;\n backendResourceRelationships?: ResourceRelationship[];\n\n /\n App-declared notification badge definitions (merged with the framework's\n * `coreNotificationBadgeDefinitions` in the registry). DERIVED_QUERY badges\n * are recomputed by the dispatcher on source-resource mutations + on connect.\n /\n notificationBadgeDefinitions?: NotificationBadgeDefinition[];\n\n /\n Resources this application narrows by ORGANIZATION UNIT, keyed by resource type.\n \n assurance-control: WILDO.ACCESS.LEAST_PRIVILEGE — least-privilege confinement of a\n * unit-scoped principal to the records of their unit.\n \n Naming a resource here admits a caller whose authority for it comes ONLY from an organization\n * unit grant, and then confines every read and write to the rows of the units that grant covers.\n * ADDITIVE: a caller whose organization-wide role already satisfies the operation is not narrowed\n * at all, so opting a resource in can never shrink a result set someone could already see.\n \n `unitFieldName` must name a real field on that resource's schema holding the owning\n * `ORGANIZATION_UNITS` id. The authorization plane (membership, unit membership, units themselves,\n * and roles-bearing machine credentials) may never be declared here — startup fails closed if it\n * is, because a resource that ISSUES authority must not be governed by the authority it issues.\n /\n organizationUnitNarrowing?: Readonly<Partial<Record<string, OrganizationUnitNarrowingDeclaration>>>;\n\n customServiceImplementations: ResourceCustomServiceImplementationFactory[];\n\n\n customRoles?: RolesConfiguration;\n customControllers?: AbstractControllerBackendService[];\n container?: any;\n controllerWhiteList?: string[];\n isPlatformApplication?: boolean;\n /\n PLATFORM MODE ONLY (refused otherwise): the persistence adapter the platform service's OWN\n * resources are built on. Platform startups hydrate `AppConfigurationService` AFTER\n * `super.initialize()`, so the normal config-driven adapter resolution cannot see their choice\n * at repository-construction time — this passes the answer the platform already holds from its\n * Phase-1 bridged config. See `RepositoriesRegistryHandlerBackendService.platformModeDefaultAdapter`\n * for the full ordering rationale (Phase 5.2, D7). Non-platform applications declare their\n * adapter in application config (`DATABASE_DEFAULT_ADAPTER`); a second knob here would smuggle\n * the decision past that contract, which is why passing it without `isPlatformApplication`\n * throws.\n /\n platformPersistenceAdapter?: PersistenceAdapterType;\n\n customBatchesFactory?: (deps: {\n logger: LoggerService;\n errorBuilder: ErrorBuilderBackendService;\n errorHandler: ErrorHandlerService;\n executionContextCreatorService: ExecutionContextCreatorBackendService;\n resourcesRegistryService: ResourcesRegistryBackendService;\n repositoriesRegistryService: RepositoriesRegistryHandlerBackendService;\n servicesRegistryService: ServicesRegistryHandlerBackendService;\n }) => Map<string, BatchesCronjobsCustomExecution_Service<any, any>>;\n\n flowsActorsRegistry?: {\n flowActorSystemsFactoryMap?: FlowActorSystem_InitializationFactoryMap;\n agents?: FlowsActors_Agent[];\n functionTools?: FunctionTool[];\n };\n\n /\n App-declared NAMED external resource-server instances (R-2): multiple MCP servers and/or A2A\n * agents, each served at its own URL segment with its own RFC 8707 audience, discovery document,\n * and curated content (MCP tools via `operation.mcp.servers`; A2A skills via `actorSystemRefs`).\n \n Purely ADDITIVE — the unnamed default `/mcp` and `/a2a` surfaces always exist and are not\n * declared here. Membership refs are validated against the resource + actor-system registries at\n * startup, so a ref typo is a startup failure rather than a silently-empty surface.\n /\n resourceServerInstances?: ResourceServerInstance[];\n\n customLabels?: CustomLabelsMap;\n backendProviderRegistry?: BackendProviderRegistry;\n\n customFeatureDefinitions?: FeatureDefinitionWithAutoRegister[];\n customFeatureConfiguration?: {\n profiles?: Record<string, ScopeFeatures>;\n defaultProfile?: string;\n unavailabilityPolicy?: Partial<FeatureConfiguration['unavailabilityPolicy']>;\n };\n\n chartDefinitions?: ChartDefinition[];\n customMilestoneDefinitions?: MilestoneDefinition[];\n customMilestoneConditions?: Array<{ ref: string; fn: MilestoneConditionFn }>;\n productDefinitions?: ProductDefinition[];\n emailTemplateDefinitions?: EmailTemplateDefinitionsMap;\n /* Generated provider topology module imported by the application package. /\n providerRuntime?: ProviderRuntimeArtifact;\n /\n Backend-only generated PDF template bindings.\n \n Shared `z_file({ generation })` metadata carries only a stable\n * `templateId` because resource schemas are consumed by frontend,\n * specification, and companion surfaces. The live React-PDF template object\n * stays here, in backend startup configuration, and is validated against the\n * already-initialized resource registry before services/controllers accept\n * traffic.\n /\n pdfTemplateBindings?: PdfTemplateBindingsMap;\n backendConfig?: AppConfiguration_BackendAuthored;\n guidanceFlowDefinitions?: GuidanceFlowDefinition[];\n\n /\n Declarative data-seed definitions collected from `BackendDomainModule.seeds`.\n \n Consumed by the `DataSeedRegistry` / `DataSeedDispatcher` to run\n * application-lifecycle seeds at boot (Step 7.7) and resource-lifecycle /\n * lazy seeds at request time. See `.cursor/plans/seeding-first-class.md`.\n /\n dataSeeds?: DataSeedDefinition[];\n\n /\n Phase 7 / Item 47 (cron scheduler) — Slice 3.\n \n Custom scope-iteration callbacks aggregated from each module's\n * `BackendDomainModule.dataSeedScopeResolvers`. Forwarded to\n * `runDataSeedingApplicationBootstrap`, which calls\n * `DataSeedScopeResolverRegistryBackendService.registerResolvers` once\n * per boot.\n \n Cron seeds with `schedule.iterationStrategy === CUSTOM_RESOLVER`\n * resolve their `relatedId` rows via the resolver registered under the\n * matching `customResolverKey`.\n /\n dataSeedScopeResolvers?: Record<string, DataSeedScopeResolver>;\n\n /\n WHICH RUNTIME is booting this lifecycle, which determines which boot\n * ASSERTIONS apply. Defaults to\n * {@link ApplicationRuntimeProfile.APPLICATION_BACKEND}, so a host that does\n * not declare a profile is over-validated rather than under-validated.\n \n Distinct from {@link headlessMode} and its siblings: those control which\n * subsystems START, this controls which DECLARATION CLASSES are asserted to\n * be complete. See `application-runtime-profile.backend.ts`.\n /\n runtimeProfile?: ApplicationRuntimeProfile;\n /* Skip HTTP server initialization (used by apps-manager for E2E testing) /\n headlessMode?: boolean;\n /* Skip cron-job sync for non-HTTP runtimes like minions. /\n skipCronSync?: boolean;\n /\n Skip the shared application job consumers for runtimes that connect to\n * RabbitMQ only for their own dedicated topology (default: `false`).\n \n The canonical opt-in is a `BackgroundRuntimeType.MINION`: it reuses the\n * full backend startup lifecycle but must consume ONLY its own\n * `minion-tick.<name>` queue, never the shared operations/scheduled/callbacks\n * queues. When `true`, the queue-worker initializer still connects to the\n * broker (the minion's tick consumer needs that connection) but does NOT run\n * `jobConsumer.startConsuming()` — otherwise RabbitMQ would round-robin each\n * scheduled-cron tick between the backend-api pod and the minion, and the\n * minion would dead-letter every tick it cannot interpret (~50% loss).\n \n Sibling of {@link skipCronSync}; both default `false` so backend-api is\n * unaffected. Never set on the primary backend-api runtime.\n /\n skipJobConsumers?: boolean;\n /\n Runtime-specific decorator hook for the services registry.\n \n Used by the minion kernel to install resource-access enforcement without\n * changing the backend-api DI graph.\n /\n servicesRegistryDecoratorFactory?: (\n registry: ServicesRegistryHandlerBackendService,\n context: {\n appConfig: AppConfiguration;\n errorBuilder: ErrorBuilderBackendService;\n },\n ) => ServicesRegistryHandlerBackendService;\n /\n Runtime-specific hook that runs immediately after the resource catalog is\n * initialized and before downstream registries (services, flows/actors, controllers)\n * are installed.\n \n Minion startup uses this to cross-validate its `resourceAccess` whitelist\n * against the live application resource catalog.\n /\n afterResourcesRegistryInitialized?: (context: {\n appConfig: AppConfiguration;\n resourcesRegistryService: ResourcesRegistryBackendService;\n errorBuilder: ErrorBuilderBackendService;\n }) => Promise<void> \| void;\n\n /\n Caller-supplied `<scope>.<name>` identifier for THIS backend process.\n * Runtime provider selection is now expected to come from materialized\n * provider-scope artifacts. Examples:\n * - `'services.backend-api'` for a regular backend service\n * - `'minions.marketingScrapper'` for a minion process\n * - `'workers.myRustWorker'` for a worker process\n \n Each app's bootstrap (`index.ts`) is responsible for choosing\n * the correct value. The current runtime keeps the field so the\n * materializer can bind the process to its provider scope without\n * inferring from `SERVICE_NAME`.\n /\n serviceIdentifier?: string;\n}\n\n/\n Start Application Backend Service\n \n Orchestrates the initialization of the backend application by:\n * 1. Initializing application configuration\n * 1.5. Initializing roles configuration (defaults + custom roles)\n * 2. Initializing resources registry with all 4 sources\n * 3. Initializing repositories registry with mongoose models\n * 4. Initializing services registry with business logic layer\n * 5. Initializing controllers registry with HTTP endpoints layer\n * 6. Initializing HTTP server with Express.js and middleware\n * 7. Validating all components are properly initialized\n \n This service ensures proper startup sequence and dependency management.\n /\n\n/* @wildo_source:part:start saas.backend.billing.resolution-failure-reasons facet:layer:backend facet:family:billing /\n/\n Why billing-provider resolution failed at startup. Each reason maps 1:1 to a\n * DISTINCT config surface an app author must fix, so `billing.enabled: true`\n * that cannot resolve a provider fails LOUD with an actionable message instead\n * of the historical catch-all (\"set providerRef + its secret\") that misdirected\n * authors to the secret when the real gap was backend-scope authoring.\n \n Read this as a debugging map — the fatal startup message names the surface,\n * and each reason below is the surface:\n * - PROVIDER_REF_UNSET → `billing.providerRef` in `./backend-api/src/saas-config.backend.ts`\n * - PROVIDER_NOT_REACHABLE_ON_BACKEND → author the ref under `providers.scopes.backend` in `./wildo.saas.config.ts` + a matching backend contribution in `./backend-api/src/provider-contributions.ts` (the classic trap: authored only in a frontend scope), then `wildo config sync`\n * - PROVIDER_DISABLED → the ref resolves but is disabled for the BILLING protocol in external-provider config\n * - SECRET_MISSING → the env var named by the provider's `secretRef` is absent from the per-env `providerEnv` secrets\n * - RESOLUTION_ERROR → the provider threw while resolving (registry / billing-SDK fault)\n /\nenum BillingProviderResolutionFailureReason {\n /* `billing.enabled` is true but `billing.providerRef` is unset. /\n PROVIDER_REF_UNSET = 'provider-ref-unset',\n /\n `providerRef` is set, but no billing runtime contract is exposed to the\n * backend registry for it — the provider is not authored in\n * `providers.scopes.backend` (a common trap: it is authored only in a\n * frontend scope) and/or has no matching backend runtime-owner\n * contribution. The provider is filtered out of the active catalog.\n /\n PROVIDER_NOT_REACHABLE_ON_BACKEND = 'provider-not-reachable-on-backend',\n /* The provider resolves but is disabled by external-provider configuration. /\n PROVIDER_DISABLED = 'provider-disabled',\n /* The provider resolves but its secret (env var `secretRef`) is absent. /\n SECRET_MISSING = 'secret-missing',\n /* An unexpected error was thrown while resolving (registry/SDK fault). /\n RESOLUTION_ERROR = 'resolution-error',\n}\n/* @wildo_source:part:end saas.backend.billing.resolution-failure-reasons /\n\n/\n Discriminated result of {@link StartApplicationBackendService.resolveBillingProvider}.\n * A `null` provider always carries a `reason` (and optional `detail`) so the\n * caller can build a surface-specific error instead of a generic one.\n /\ntype BillingProviderResolution =\n \| { provider: StandardBilling_Interface; reason?: undefined; detail?: undefined }\n \| { provider: null; reason: BillingProviderResolutionFailureReason; detail?: string };\n\n/\n Build the fatal startup message for a failed billing-provider resolution,\n * routed by {@link BillingProviderResolutionFailureReason} to the SPECIFIC\n * config surface the operator must fix. Historically this was a single\n * catch-all (\"set providerRef + its secret\"), which misdirected operators\n * whenever the real gap was backend-scope authoring (providerRef + secret\n * both present, provider simply not exposed to the backend runtime).\n \n Every branch names the file/field to edit and the follow-up command\n * (`wildo config sync`) so the message is actionable without reading source.\n /\nfunction describeBillingProviderResolutionFailure(\n reason: BillingProviderResolutionFailureReason,\n billingConfig: BillingConfiguration,\n detail?: string,\n): string {\n const providerRef = billingConfig.providerRef ?? '(unset)';\n const prefix = 'billing.enabled is true but the billing provider could not be resolved.';\n const disableHint = 'Alternatively set billing.enabled=false to run without billing.';\n\n switch (reason) {\n case BillingProviderResolutionFailureReason.PROVIDER_REF_UNSET:\n return `${prefix} billing.providerRef is unset — set it (e.g. 'stripe') in your `\n + `backend app config (saas-config.backend.ts → billing.providerRef). ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.PROVIDER_NOT_REACHABLE_ON_BACKEND:\n return `${prefix} providerRef='${providerRef}' is set, but that provider is not exposed `\n + `to the BACKEND runtime, so no billing runtime contract could be loaded. A common `\n + `cause is authoring the provider only in a frontend scope. Fix: author '${providerRef}' `\n + `under providers.scopes.backend in wildo.saas.config.ts AND add a matching backend `\n + `contribution (runtimeTargets [{ kind: 'backend' }], protocols ['BILLING_PROVIDER', `\n + `'WEBHOOK_ORIGINATOR']) in the backend package's provider-contributions, then re-run `\n + `\\`wildo config sync\\` to regenerate the provider runtime artifact. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.PROVIDER_DISABLED:\n return `${prefix} providerRef='${providerRef}' resolves but is disabled by external-provider `\n + `configuration for the BILLING protocol. Enable it for this environment, then re-run `\n + `\\`wildo config sync\\`. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.SECRET_MISSING:\n return `${prefix} providerRef='${providerRef}' resolves but its secret `\n + `(env var '${detail ?? 'UNKNOWN'}') is missing. Populate it in your per-env secrets `\n + `(providerEnv) and re-run \\`wildo config sync\\` so it lands in the backend .env. ${disableHint}`;\n\n case BillingProviderResolutionFailureReason.RESOLUTION_ERROR:\n return `${prefix} providerRef='${providerRef}' threw while resolving`\n + `${detail ? `: ${detail}` : ''}. Inspect the backend provider registry / billing SDK `\n + `wiring. ${disableHint}`;\n\n default: {\n // Exhaustiveness guard: adding a new reason without a message\n // branch fails the type-check here rather than shipping a blank\n // fatal at runtime.\n const _exhaustive: never = reason;\n return `${prefix} providerRef='${providerRef}' (${String(_exhaustive)}). ${disableHint}`;\n }\n }\n}\n\n@injectable()\nexport class StartApplicationBackendService {\n /\n The profile this runtime booted under. Defaults FAIL-SAFE to `APPLICATION_BACKEND` — the\n * profile that asserts and reports the most — so a host that never declares one is never\n * silently exempted from a check it should run.\n /\n private resolvedRuntimeProfile: ApplicationRuntimeProfile = ApplicationRuntimeProfile.APPLICATION_BACKEND;\n\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n protected isInitialized = false;\n private isPlatformMode = false;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) protected readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) protected readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.ApplicationStartupConfigValidatorService) protected readonly applicationStartupConfigValidator: ApplicationStartupConfigValidatorService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) protected readonly resourcesRegistryService: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) protected readonly repositoriesRegistryService: RepositoriesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService) protected servicesRegistryService: ServicesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ControllersRegistryHandlerService) protected readonly controllersRegistryService: ControllersRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.HttpServerService) protected readonly httpServerService: HttpServerBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) protected readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) protected readonly errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.AuthorizationsService) protected readonly authorizationsService: AuthorizationsBackendService,\n @inject(SAAS_SERVICE_TYPES.BatchesCronjobsExecutorService) protected readonly batchesExecutor: BatchesCronjobsExecutor_BackendService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) protected readonly executionContextCreatorBackendService: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceOperationCustomImplementationRegistryService) protected readonly customImplRegistry: ResourceOperationCustomImplementationRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MongoDBService) protected readonly mongoDBService: MongoDBService,\n @inject(SAAS_SERVICE_TYPES.RedisService) protected readonly redisService: RedisService,\n @inject(SAAS_SERVICE_TYPES.I18nService) protected readonly i18nService: I18nBackendService,\n @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService) protected readonly backendProviderRegistryService: BackendProviderRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService) protected readonly externalProvidersRegistryService: ExternalProvidersRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.FeatureDefinitionRegistryService) protected readonly featureDefinitionRegistryService: FeatureDefinitionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry) protected readonly milestoneDefinitionRegistry: MilestoneDefinitionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneConditionRegistry) protected readonly milestoneConditionRegistry: MilestoneConditionRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.LifecycleEvaluator) protected readonly lifecycleEvaluator: LifecycleEvaluatorBackendService,\n @inject(SAAS_SERVICE_TYPES.FlowsActorsRegistryService) protected readonly flowsActorsRegistryService: FlowsActorsRegistryService,\n @inject(SAAS_SERVICE_TYPES.ResourceServerInstancesRegistry) protected readonly resourceServerInstancesRegistry: ResourceServerInstancesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.QueueWorkerInitializerService) protected readonly queueWorkerInitializer: QueueWorkerInitializerBackendService,\n @inject(SAAS_SERVICE_TYPES.CronJobSyncService) protected readonly cronJobSyncService: CronJobSyncBackendService,\n @inject(SAAS_SERVICE_TYPES.ChartRegistryService) protected readonly chartRegistryService: ChartRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.GuidanceTriggerEvaluator) protected readonly guidanceTriggerEvaluator: GuidanceTriggerEvaluatorBackendService,\n @inject(SAAS_SERVICE_TYPES.EmailTemplateRegistry) protected readonly emailTemplateRegistryService: EmailTemplateRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.PdfTemplateBinding) protected readonly pdfTemplateBindingService: PdfTemplateBindingBackendService,\n @inject(SAAS_SERVICE_TYPES.FileStorageRouter) protected readonly fileStorageRouter: FileStorageRouterBackendService,\n // Phase 2.F — data-seeding subsystem. Registry stays inert until\n // Step 7.7 calls `registerSeeds(config.dataSeeds ?? [])`; dispatcher\n // is invoked from the same step (and later from Level-B hooks /\n // lazy-access — Phases 3 / 5).\n @inject(SAAS_SERVICE_TYPES.DataSeedRegistry) protected readonly dataSeedRegistryService: DataSeedRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.DataSeedDispatcher) protected readonly dataSeedDispatcherService: DataSeedDispatcherBackendService,\n // Phase 7 / Item 47 (Slice 3) — cron CUSTOM_RESOLVER registry. Same\n // boot lifecycle as `dataSeedRegistryService`: hydrated once in Step\n // 7.7 from `ApplicationInitializationConfig.dataSeedScopeResolvers`.\n @inject(SAAS_SERVICE_TYPES.DataSeedScopeResolverRegistry) protected readonly dataSeedScopeResolverRegistryService: DataSeedScopeResolverRegistryBackendService,\n // Slice 2 Phase 4 — observability reconcile + graceful-flush wiring. Appended LAST on\n // PURPOSE: `StartApplicationBackendService` has platform subclasses with FORWARDING\n // constructors that spread a positional `super([...])` array (see\n // `start-application.apps-manager.platform.service.ts` and `...registry.platform.service.ts`).\n // Inserting a param mid-list shifts every later arg and mis-injects them — it crashed the\n // apps-manager with \"featureDefinitionRegistryService.registerCoreFeatures is not a function\".\n // Appending keeps those subclasses aligned (they don't forward this last arg → it is\n // `undefined` there, which is HARMLESS because the reconcile call is gated on\n // `!isPlatformApplication`). Wonder-todos uses this class directly, so Inversify injects it\n // by symbol regardless of position. Optional type + `?.` call site reflect the platform case.\n @inject(SAAS_SERVICE_TYPES.ObservabilityBackendService) protected readonly observabilityBackendService?: ObservabilityBackendService,\n // APPENDED for the same subclass-forwarding reason as `observabilityBackendService` above:\n // subclasses that do not forward this arg receive `undefined`, which is harmless here — the\n // super-administrator floor REPORT degrades to a log-only finding when no audit sink is\n // bound, and the report is non-fatal by design either way.\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() protected readonly auditLogsService?: AuditLogsBackendService,\n // Appended LAST (platform-subclass forwarding, as above). The organization-owner floor REPORT\n // builds its own whole-estate measuring context from this factory; a platform subclass that does\n // not forward it receives `undefined`, which is harmless — `reportOrganizationOwnerFloor` skips\n // when it is absent, and platform mode runs no tenant population anyway.\n @inject(SAAS_SERVICE_TYPES.AuthExecutionContextFactory) @optional()\n protected readonly authExecutionContextFactory?: AuthExecutionContextFactoryBackendService,\n // Appended for the same platform-subclass compatibility reason as the optional services above.\n ) {\n this.logger = logger;\n this.appConfigService = appConfigService;\n this.resourcesRegistryService = resourcesRegistryService;\n this.repositoriesRegistryService = repositoriesRegistryService;\n this.servicesRegistryService = servicesRegistryService;\n this.controllersRegistryService = controllersRegistryService;\n this.httpServerService = httpServerService;\n this.authorizationsService = authorizationsService;\n\n this.logDebug = this.logger.debugByType('StartApplicationBackendService');\n this.logger.setDebugTypeLogging('StartApplicationBackendService', false);\n\n this.logDebug('Start application service created');\n }\n\n /\n Initialize the backend application with a structured configuration object.\n /\n public async initialize(config: ApplicationInitializationConfig): Promise<void> {\n\n if (this.isInitialized) {\n this.logDebug('Application already initialized, skipping');\n return;\n }\n\n const {\n sharedResourceConfigurations,\n sharedResourceFieldIdentifiers,\n sharedResourceRelationships,\n backendResourceConfigurations,\n backendResourceFieldIdentifiers,\n backendResourceRelationships = [],\n notificationBadgeDefinitions,\n organizationUnitNarrowing,\n resourceServerInstances,\n customServiceImplementations,\n customRoles,\n customControllers,\n container,\n controllerWhiteList,\n isPlatformApplication = false,\n platformPersistenceAdapter,\n customBatchesFactory,\n flowsActorsRegistry,\n customLabels,\n backendProviderRegistry,\n customFeatureDefinitions,\n customFeatureConfiguration,\n chartDefinitions,\n customMilestoneDefinitions,\n customMilestoneConditions,\n productDefinitions,\n emailTemplateDefinitions,\n providerRuntime,\n pdfTemplateBindings,\n backendConfig,\n guidanceFlowDefinitions,\n dataSeeds,\n dataSeedScopeResolvers,\n runtimeProfile = ApplicationRuntimeProfile.APPLICATION_BACKEND,\n headlessMode = false,\n skipCronSync = false,\n skipJobConsumers = false,\n servicesRegistryDecoratorFactory,\n afterResourcesRegistryInitialized,\n } = config;\n\n // Resolved ONCE, here, so every gated validator below reads the same\n // decision. Resolving per-call-site would let two validators disagree\n // about the runtime they are validating.\n const bootAssertions = resolveApplicationRuntimeProfileBootAssertions(runtimeProfile);\n /\n Kept on the instance so LATER boot steps can consult the same profile this method resolved.\n * Boot steps run as separate methods, and one that has to re-derive the profile is one that\n * can derive it differently — the assertions exist precisely so every step reads one answer.\n /\n this.resolvedRuntimeProfile = runtimeProfile;\n\n try {\n this.logDebug('🚀 Starting backend application initialization...');\n // Step 1: Initialize application configuration\n this.logDebug('📋 Initializing application configuration...');\n\n // Persist platform mode for validation differences\n this.isPlatformMode = !!isPlatformApplication;\n\n if(!isPlatformApplication) {\n await this.appConfigService.initialize();\n if (providerRuntime) {\n this.appConfigService.applyProviderRuntime(providerRuntime);\n }\n this.appConfigService.applyBackendConfig(backendConfig ?? {});\n if (backendConfig) {\n this.logger.info('Backend config applied', {\n sections: Object.keys(backendConfig),\n });\n }\n this.appConfigService.assertNoPreOverridePlaceholders();\n this.logDebug('✅ Application configuration initialized successfully');\n /\n Establish the default MongoDB connection — ONLY when this application has a\n * MongoDB to connect to.\n \n The loader builds `database.mongodb` only when the environment supplies\n * `MONGODB_HOST`, so its ABSENCE is the application saying it has no MongoDB. Until\n * 2026-08-28 this connect was unconditional and rethrowing, which made a mongod a\n * hard boot requirement for every application — including one whose every resource\n * is on PostgreSQL.\n \n Contrast the two blocks immediately below: Redis degrades to in-memory with a\n * warning, and file storage is explicitly non-fatal. MongoDB was the only backing\n * service that could refuse a boot by being absent rather than by being broken.\n \n It stays FATAL when a MongoDB IS declared and the connection fails — that is a\n * real outage and must not be softened into a warning.\n /\n if (this.appConfigService.config.database?.mongodb) {\n try {\n await this.mongoDBService.connect();\n this.logDebug('✅ MongoDB default connection established');\n } catch (e) {\n this.logger.error('❌ MongoDB default connection failed', e as any);\n throw e;\n }\n } else {\n this.logDebug('↷ No MongoDB configured for this application — skipping the default connection.');\n }\n // Establish Redis connection for caching, sessions, and WebSocket sync\n // Redis is optional - graceful fallback to in-memory if unavailable\n try {\n await this.redisService.connect();\n this.logDebug('✅ Redis connection established');\n } catch (e) {\n this.logger.warn('⚠️ Redis connection failed, using in-memory fallbacks', { ...projectCaughtErrorLogFields(e) });\n }\n\n // Initialize file storage (MinIO/S3) — optional, skipped when not configured\n if (this.fileStorageRouter.isConfigured()) {\n try {\n await this.fileStorageRouter.initialize();\n this.logDebug('✅ File storage initialized');\n } catch (e) {\n // Non-fatal AND not final. An application backend fetches short-lived storage\n // credentials from apps-manager, so a backend that boots BEFORE its issuer is\n // listening fails here with ECONNREFUSED through no fault of its own — an\n // ordinary outcome of concurrent respawn.\n //\n // `WildoManagedStorageProvider.healthCheck()` retries acquisition on every\n // readiness probe, so this clears WITHOUT a restart once the issuer is up\n // (proven live on a platform service 2026-08-13: same PID, monotonic uptime,\n // unhealthy → healthy). The previous wording — \"file operations will fail at\n // runtime\" — described the behaviour before that recovery existed, and now\n // sends whoever greps this log hunting a defect that will have fixed itself.\n this.logger.warn('⚠️ File storage initialization failed at startup — will retry on each readiness probe', { ...projectCaughtErrorLogFields(e) });\n }\n } else {\n this.logDebug('📦 File storage not configured, skipping initialization');\n }\n }\n\n // This is the only application-config read allowed before the\n // platform subclass hydrates AppConfigurationService. The helper\n // branches before evaluating the throwing getter, then every\n // startup decision below consumes this resolved boundary value.\n const applicationConfig = resolveApplicationConfigForStartup(this.appConfigService, isPlatformApplication);\n\n if (applicationConfig) {\n this.applicationStartupConfigValidator.validate(applicationConfig);\n }\n\n // Step 1.5: Initialize roles configuration\n this.logDebug('🔐 Initializing roles configuration...');\n if (customRoles) {\n this.authorizationsService.initializeRolesWithCustom(customRoles);\n this.logDebug('✅ Roles configuration initialized with custom roles');\n } else {\n // Roles are already initialized with defaults in the constructor\n this.logDebug('✅ Roles configuration using default roles only');\n }\n\n // Step 2: Initialize resources registry with all 4 sources\n this.logDebug('🔧 Initializing resources registry...');\n\n // Read lifecycle config early — needed for both resource exclusion and evaluator init\n // Platform apps don't use lifecycle, billing, or feature gating\n const lifecycleConfig: LifecycleConfig \| undefined = applicationConfig?.lifecycle;\n\n // Compute excluded resource types based on app configuration.\n // When billing/lifecycle is disabled, their resource types are excluded\n // from the registry (no routes, no repositories, no frontend resources).\n // When billing IS enabled, scope variants for scopes not in enabledScopes\n // are also excluded (e.g., USER variants when only ORG billing is enabled).\n const excludedResourceTypes = resolveFeatureGatedCoreResourceExclusions(\n applicationConfig,\n { isPlatformApplication },\n );\n\n if (excludedResourceTypes) {\n this.logDebug(`Feature-gated resources excluded: ${excludedResourceTypes.size} types`, {\n billingDisabled: !applicationConfig?.billing?.enabled,\n billingDisabledScopes: (() => {\n const billingConfig = applicationConfig?.billing;\n if (!billingConfig?.enabled) return 'all';\n const enabledSet = new Set<string>(billingConfig.enabledScopes ?? []);\n return BILLING_SCOPES.filter(s => !enabledSet.has(s));\n })(),\n lifecycleDisabled: !lifecycleConfig?.enabled,\n });\n }\n\n await this.resourcesRegistryService.initialize(\n sharedResourceConfigurations,\n sharedResourceFieldIdentifiers,\n sharedResourceRelationships,\n (backendResourceConfigurations ?? {}) as ResourceConfiguration_InitializationFactoryMap,\n backendResourceFieldIdentifiers,\n backendResourceRelationships,\n notificationBadgeDefinitions,\n undefined, // customAdditionalUserNotificationDefinitions\n excludedResourceTypes,\n organizationUnitNarrowing,\n );\n this.logDebug('✅ Resources registry initialized successfully');\n if (applicationConfig && afterResourcesRegistryInitialized) {\n await afterResourcesRegistryInitialized({\n appConfig: applicationConfig,\n resourcesRegistryService: this.resourcesRegistryService,\n errorBuilder: this.errorBuilder,\n });\n this.logDebug('✅ Runtime-specific resource-catalog hook completed');\n }\n\n this.pdfTemplateBindingService.initialize(pdfTemplateBindings ?? {}, {\n assertCompleteness: bootAssertions.assertsGeneratedPdfBindingCompleteness,\n });\n this.logDebug('✅ PDF template bindings initialized successfully');\n\n // Step 2.0.1: Initialize feature definition registry\n this.logDebug('🏷️ Initializing feature definition registry...');\n this.featureDefinitionRegistryService.registerCoreFeatures();\n if (customFeatureDefinitions && customFeatureDefinitions.length > 0) {\n this.featureDefinitionRegistryService.registerCustomFeatures(customFeatureDefinitions);\n }\n this.featureDefinitionRegistryService.validateDefinitions();\n this.featureDefinitionRegistryService.logStartupSummary();\n\n // Build and set the merged FeatureConfiguration (profiles + policy)\n if (customFeatureConfiguration) {\n const allDefinitions = this.featureDefinitionRegistryService.getAllDefinitions();\n this.featureDefinitionRegistryService.setConfiguration({\n definitions: allDefinitions,\n profiles: customFeatureConfiguration.profiles ?? {},\n defaultProfile: customFeatureConfiguration.defaultProfile,\n unavailabilityPolicy: {\n defaultBehavior: customFeatureConfiguration.unavailabilityPolicy?.defaultBehavior ?? FeatureUnavailabilityBehavior.UPGRADE_PROMPT,\n whenBillingDisabled: customFeatureConfiguration.unavailabilityPolicy?.whenBillingDisabled ?? FeatureUnavailabilityBehavior.HIDE,\n roleDefaults: customFeatureConfiguration.unavailabilityPolicy?.roleDefaults ?? {},\n reasonDefaults: customFeatureConfiguration.unavailabilityPolicy?.reasonDefaults ?? {\n [FeatureUnavailabilityReason.FEATURE_NOT_ENABLED]: FeatureUnavailabilityBehavior.UPGRADE_PROMPT,\n [FeatureUnavailabilityReason.LIMIT_EXCEEDED]: FeatureUnavailabilityBehavior.LIMIT_UPGRADE_PROMPT,\n [FeatureUnavailabilityReason.NOT_CONFIGURED]: FeatureUnavailabilityBehavior.HIDE,\n },\n },\n });\n this.logDebug('✅ Feature configuration set (profiles + unavailability policy)');\n }\n const analyticsValueMoments = applicationConfig?.analytics?.valueMoments;\n\n this.featureDefinitionRegistryService.warnMisplacedLimitFeatures();\n this.featureDefinitionRegistryService.warnInvalidFeatureReferences({\n featureProfiles: customFeatureConfiguration?.profiles,\n chartDefinitions,\n guidanceFlowDefinitions,\n productDefinitions,\n analyticsValueMoments,\n });\n this.logDebug('✅ Feature definition registry initialized successfully');\n\n // Step 2.0.2: Initialize milestone definition registry\n this.logDebug('🏅 Initializing milestone definition registry...');\n if (customMilestoneConditions && customMilestoneConditions.length > 0) {\n for (const { ref, fn } of customMilestoneConditions) {\n this.milestoneConditionRegistry.registerCondition(ref, fn);\n }\n this.logDebug(`Registered ${customMilestoneConditions.length} custom milestone condition(s)`);\n }\n if (customMilestoneDefinitions && customMilestoneDefinitions.length > 0) {\n this.milestoneDefinitionRegistry.registerCustomMilestones(customMilestoneDefinitions);\n this.milestoneDefinitionRegistry.validateDefinitions();\n this.milestoneDefinitionRegistry.logStartupSummary();\n }\n this.logDebug('✅ Milestone definition registry initialized successfully');\n\n // Step 2.0.3: Initialize lifecycle evaluator configuration\n if (!isPlatformApplication && lifecycleConfig?.enabled) {\n this.logDebug('🔄 Initializing lifecycle evaluator...');\n this.lifecycleEvaluator.setLifecycleConfig(lifecycleConfig);\n\n // Late-binding initialization for lifecycle custom implementations\n initializeLifecycleCustomImplementations(this.lifecycleEvaluator, lifecycleConfig, this.errorBuilder);\n\n // Validate activation criteria refs against registries\n if (lifecycleConfig.activationCriteria?.criteria) {\n for (const criterion of lifecycleConfig.activationCriteria.criteria) {\n if (criterion.criterionType === ActivationCriterionType.MILESTONE) {\n const exists = !!this.milestoneDefinitionRegistry.getDefinition(criterion.milestoneRef);\n if (!exists) {\n this.logger.warn(`Lifecycle activation criterion references unknown milestone: '${criterion.milestoneRef}'`);\n }\n } else if (criterion.criterionType === ActivationCriterionType.GUIDANCE_COMPLETED) {\n this.logDebug(`Lifecycle activation criterion references guidance flow: '${criterion.guidanceFlowRef}' (validated at runtime)`);\n }\n }\n }\n\n this.logDebug('✅ Lifecycle evaluator configured', {\n dormancyThresholdDays: lifecycleConfig.dormancyThresholdDays,\n activityDebounceMinutes: lifecycleConfig.activityDebounceMinutes,\n dormancyCronSchedule: lifecycleConfig.dormancyCronSchedule,\n activationCriteriaCount: lifecycleConfig.activationCriteria?.criteria?.length ?? 0,\n });\n } else if (!isPlatformApplication) {\n this.logDebug('🔄 Lifecycle system disabled (lifecycle.enabled = false or not configured)');\n }\n\n // Step 2.1: Initialize first-class backend provider registry.\n //\n // The composed catalog (engine + app-contributed via\n // `backendProviderRegistry`) is filtered by the authored\n // `providerRuntime.providerRefs` so this backend process only\n // exposes providers materialized for it. Any ref claimed by the\n // runtime artifact but missing from the catalog fails startup\n // loudly — there is no silent fallback to the unfiltered catalog.\n this.logDebug('📦 Initializing backend provider registry...');\n this.backendProviderRegistryService.initialize(backendProviderRegistry, providerRuntime);\n this.logDebug('✅ Backend provider registry initialized', {\n providerRuntimeApplied: Boolean(providerRuntime),\n providerCount: this.backendProviderRegistryService.getRegistry().modules.size,\n });\n\n // Step 2.2: Initialize external providers registry.\n // Skip for platform applications - they initialize config later and will refresh the registry\n if (applicationConfig) {\n this.logDebug('🔌 Initializing external providers registry...');\n await this.externalProvidersRegistryService.initialize();\n this.logDebug('✅ External providers registry initialized successfully');\n\n // F5 (audit Phase 5) — required-capability boot guard. Fail LOUD if any\n // capability the app marked `activation.required` resolves no active\n // provider (a hard requirement with nothing to serve it). Generalizes the\n // audit coherence to EVERY capability; audit is the first user, not special.\n // (Platform apps initialize the registry later, in the `else` branch — they\n // author no `required` capabilities, so the guard belongs on the app path.)\n const missingRequiredCapabilities = this.externalProvidersRegistryService.getRequiredCapabilitiesWithoutProvider();\n if (missingRequiredCapabilities.length > 0) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n message:\n `Required engine capabilities resolve no active provider: [${missingRequiredCapabilities.join(', ')}]. `\n + 'Each is marked `required` in engineCapabilities but has no provider serving it — '\n + 'declare a provider for it (SELECT_ONE needs a primary; FAN_OUT needs ≥1 declared), '\n + 'or drop the `required` flag.',\n missingRequiredCapabilities,\n },\n });\n }\n\n // G4 (audit Phase 5) — fail-OPEN audit-sink reconcile. Distinct from the\n // F5 hard guard above: this WARNS (never throws) when COMPLIANCE_AUDIT_TRAIL\n // is ENABLED but no provider resolves to deliver it — the operator turned on\n // Layer-2 audit fan-out yet nothing serves it (Layer-1 database audit is\n // unaffected). Mirrors ObservabilityBackendService's declared-but-inactive\n // reconcile. The resolved-provider-refs check is the faithful proxy for \"the\n // composite resolves zero live sinks\" (it builds one sink per resolved ref).\n // A `required` audit cap with no provider already threw in F5 above, so this\n // only fires for an enabled-but-not-required capability.\n //\n // Gated on the runtime profile: only a runtime EXPECTED to host the Layer-2\n // audit fan-out (the application backend) treats \"enabled but no provider\" as\n // a misconfiguration. An auxiliary runtime such as a minion is Layer-1-only by\n // design — the immudb node client is installed only in the backend, and the\n // backend's `immudb.audit-reconcile` cron backfills the minion's `AUDIT_LOGS`\n // rows into Layer-2 — so warning there is false-alarm noise on every restart,\n // not a real signal. `assertsLayer2AuditProviderPresence` is read off the same\n // `bootAssertions` decision resolved once above, so this gate cannot disagree\n // with the sibling profile-gated validators about which runtime is booting.\n if (\n shouldWarnLayer2AuditProviderInactive({\n runtimeAssertsLayer2AuditProviderPresence: bootAssertions.assertsLayer2AuditProviderPresence,\n complianceAuditTrailEnabled: this.externalProvidersRegistryService.isEngineCapabilityEnabled(\n EngineCapability.COMPLIANCE_AUDIT_TRAIL,\n ),\n resolvedAuditProviderRefCount: this.externalProvidersRegistryService.getResolvedProviderRefsForCapability(\n EngineCapability.COMPLIANCE_AUDIT_TRAIL,\n ).length,\n })\n ) {\n this.logger.warn(\n 'COMPLIANCE_AUDIT_TRAIL is enabled but no audit-log provider resolves — Layer-2 provider '\n + 'audit fan-out is INACTIVE (Layer-1 database audit is unaffected). Declare an audit provider '\n + '(e.g. immudb) in defineSaaSProviders, or disable the capability if Layer-1 alone is intended.',\n );\n }\n } else {\n this.logDebug('🔌 Skipping external providers registry initialization (platform app - will initialize after config is ready)');\n }\n\n // Step 2.3: Initialize flows-actors registry\n this.logDebug('🎭 Initializing flows-actors registry...');\n const mergedFlowActorSystemsFactoryMap = {\n ...(flowsActorsRegistry?.flowActorSystemsFactoryMap \|\| {}),\n };\n const mergedAgents = [\n ...(flowsActorsRegistry?.agents \|\| []),\n ];\n const mergedFunctionTools = [\n ...(flowsActorsRegistry?.functionTools \|\| []),\n ];\n await this.flowsActorsRegistryService.initialize(\n mergedFlowActorSystemsFactoryMap,\n mergedAgents,\n mergedFunctionTools\n );\n this.logDebug('✅ Flows-actors registry initialized successfully');\n\n // Step 2.3b: Register the app's NAMED external resource-server instances (multiple MCP\n // servers / A2A agents) and validate their membership refs. Runs HERE deliberately — after\n // BOTH the resources registry (Step 2.1, for `operation.mcp.servers`) and the flows-actors\n // registry (Step 2.3, for an agent's `actorSystemRefs`) — because validation resolves refs\n // against them. A bad ref throws a CONFIGURATION error and fails startup (fail-closed):\n // a tool that silently belongs to no catalog, or a card advertising an unroutable skill,\n // is worse than a refusal to boot.\n // Membership validation is gated on the runtime profile: it asserts that every\n // `operation.mcp.servers` / `actorSystemRefs` ref resolves to a declared instance,\n // which is only meaningful for a runtime that actually SERVES those transports.\n // A minion mounts none and carries no declarations, so running this would fail its\n // boot over refs describing a surface it cannot expose — the exact crash-loop that\n // motivated the profile mechanism. Registration itself always runs: an empty\n // registry is the correct state for a non-serving runtime, and `tryGetInstance`\n // callers stay fail-closed against it.\n this.logDebug('🔀 Registering external resource-server instances...');\n this.resourceServerInstancesRegistry.initialize(resourceServerInstances);\n if (bootAssertions.assertsResourceServerMembershipCompleteness) {\n this.resourceServerInstancesRegistry.validateDeclaredMembership(\n this.flowsActorsRegistryService.getActors().map((system) => system.ref),\n );\n this.logDebug('✅ External resource-server instances registered + validated');\n } else {\n this.logDebug('✅ External resource-server instances registered (membership validation N/A for this runtime profile)', {\n runtimeProfile,\n });\n }\n\n // Step 2.4: Initialize I18n service with custom labels\n this.logDebug('🌐 Initializing I18n service...');\n this.i18nService.initialize(customLabels \|\| {}, {\n suppressEmptyWarning: isPlatformApplication,\n });\n this.logDebug('✅ I18n service initialized successfully');\n\n // Step 2.4b: Initialize email template registry\n if (emailTemplateDefinitions && Object.keys(emailTemplateDefinitions).length > 0) {\n this.emailTemplateRegistryService.initialize(emailTemplateDefinitions);\n }\n\n if (!isPlatformApplication) {\n // Reconcile OTLP observability (post-config): compare the `--import` preload's\n // runtime state against the OBSERVABILITY_TELEMETRY provider selection, warn on\n // mismatch (E11), and wire graceful telemetry flush into the shutdown coordinator.\n // `?.` — platform subclasses don't forward this arg (see the constructor note); this\n // branch is non-platform so it's always defined here, but the guard is defensive.\n this.observabilityBackendService?.initialize();\n }\n\n // Step 2.5: Register chart definitions\n if (chartDefinitions && chartDefinitions.length > 0) {\n this.logDebug('📊 Registering chart definitions...', { count: chartDefinitions.length });\n for (const chartDef of chartDefinitions) {\n this.chartRegistryService.registerChart(chartDef);\n }\n this.logDebug('✅ Chart definitions registered successfully', { count: chartDefinitions.length });\n } else {\n this.logDebug('📊 No chart definitions provided, skipping chart registration');\n }\n\n // Step 2.5b: Register guidance flow definitions\n if (guidanceFlowDefinitions && guidanceFlowDefinitions.length > 0) {\n this.logDebug('🧭 Registering guidance flow definitions...', { count: guidanceFlowDefinitions.length });\n this.guidanceTriggerEvaluator.initializeFlows(guidanceFlowDefinitions);\n this.logDebug('✅ Guidance flow definitions registered successfully', { count: guidanceFlowDefinitions.length });\n } else {\n this.logDebug('🧭 No guidance flow definitions provided, skipping guidance registration');\n }\n\n // Step 2.6: Debug URL generation\n this.logDebug('🌐 Displaying generated URLs for debugging...');\n this.resourcesRegistryService.debugDisplayGeneratedUrls();\n\n // Step 3: Initialize repositories registry\n this.logDebug('🗄️ Initializing repositories registry...');\n const resourcesRegistry = this.resourcesRegistryService.getResourcesRegistry();\n\n // Guardrail: a REQUIRED composition-parent FK that the user must supply on\n // org-wide create (the parent is OPTIONAL_CONTEXT/STANDALONE) must be\n // user-fillable — otherwise the create form is silently dead (the\n // todoListId-create class of bug). Surface violations at boot rather than as\n // an unexplained client-side validation failure.\n //\n // Severity split: TARGET_NOT_SEARCHABLE degrades the picker → WARN (a custom\n // create surface might still supply the FK). EXCLUDED_FROM_CREATE is genuinely\n // impossible to create (no context, no control) → FAIL loud so the misconfig\n // never ships. The validator call itself is try/catch-guarded so a validator\n // edge case can never block startup; the intentional FAIL throw is outside\n // that guard so it propagates.\n let fkFillabilityViolations: ForeignKeyFillabilityViolation[] = [];\n try {\n fkFillabilityViolations = validateRequiredForeignKeyFillability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ required-foreign-key fillability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n for (const violation of fkFillabilityViolations) {\n if (violation.severity === ForeignKeyFillabilityViolationSeverity.WARN) {\n this.logger.warn(`⚠️ Required foreign key may be unfillable on create [${violation.kind}]: ${violation.message}`, {\n resourceType: violation.resourceType,\n foreignKeyField: violation.foreignKeyField,\n parentResourceType: violation.parentResourceType,\n kind: violation.kind,\n });\n }\n }\n const fkFillabilityFailures = fkFillabilityViolations.filter(\n (violation) => violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL,\n );\n if (fkFillabilityFailures.length > 0) {\n throw new Error(\n `Resource configuration error — ${fkFillabilityFailures.length} required foreign key(s) are impossible to fill on create:\\n` +\n fkFillabilityFailures.map((failure) => ` • ${failure.message}`).join('\\n'),\n );\n }\n\n // --- Composition-seedability guard (onParentCreate lifecycle) ---\n // FAIL-CLOSED: a composition that OPTED IN to `onParentCreate.enabled` but\n // whose child is not seedable (not default-materializable AND no override)\n // is a genuine misconfig — the runtime seed would silently no-op. It fires\n // ONLY on enabled adopters, so it never trips the dozens of on-demand\n // compositions that legitimately do not eager-seed. The validator call is\n // try/catch-guarded so a validator edge case can never block startup; the\n // intentional throw is outside that guard. See\n // .claude/plans/composition-oncreate-lifecycle.md.\n let compositionSeedabilityViolations: CompositionSeedabilityViolation[] = [];\n try {\n compositionSeedabilityViolations = validateCompositionSeedability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ composition-seedability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n for (const violation of compositionSeedabilityViolations) {\n this.logger.warn(`⚠️ [composition-seedability] ${violation.message}`, {\n childResourceType: violation.childResourceType,\n parentResourceType: violation.parentResourceType,\n missingFields: violation.missingFields,\n });\n }\n if (compositionSeedabilityViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${compositionSeedabilityViolations.length} composition relationship(s) enabled ` +\n `onParentCreate seeding but are not seedable:\\n` +\n compositionSeedabilityViolations.map((violation) => ` • ${violation.message}`).join('\\n'),\n );\n }\n\n // --- Composition cascade-DELETABILITY guard (onParentDelete lifecycle) ---\n // The delete-side counterpart of the seedability guard above. It is wired FAIL-CLOSED for\n // IMPERSONALIZE_AND_RETAIN edges only, and warn-only for DELETE edges:\n // - DELETE violations are a KNOWN, pre-existing backlog (the 16 billing edges tracked in\n // KNOWN_CASCADE_DELETABILITY_GAPS) awaiting a compliance decision — throwing on them\n // would fail boot on the current registry, so they stay a warning until resolved.\n // - IMPERSONALIZE_AND_RETAIN violations have NO such backlog (no core edge declares the\n // strategy yet), and their runtime failure mode is far worse: the misconfiguration\n // surfaces only when a real erasure runs, throws INSIDE the parent-delete transaction\n // and rolls the deletion back — i.e. a GDPR erasure request fails in production. Catch\n // it at boot instead.\n let cascadeDeletabilityViolations: CompositionCascadeDeletabilityViolation[] = [];\n try {\n cascadeDeletabilityViolations = validateCompositionCascadeDeletability(\n resourcesRegistry.resourceConfigurations as any,\n );\n } catch (error) {\n this.logger.warn('⚠️ composition-cascade-deletability guardrail skipped (validation error)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n const retainCascadeViolations = cascadeDeletabilityViolations.filter(\n (violation) => violation.strategy === ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN,\n );\n const deleteCascadeViolations = cascadeDeletabilityViolations.filter(\n (violation) => violation.strategy !== ChildLifecycleStrategy.IMPERSONALIZE_AND_RETAIN,\n );\n // ONE aggregated line for the known DELETE backlog — per-violation warnings would put ~16\n // lines in every boot log and train operators to ignore the channel.\n if (deleteCascadeViolations.length > 0) {\n // Report the EDGES, not a presumed cause. An earlier version asserted \"known backlog —\n // pending a retain-vs-delete compliance decision\", which is true only for the billing\n // families; a live run showed platform resources in the same list, where the cause is\n // simply a missing DELETE op. Stating one registry's story for every registry's\n // violations is how an operator learns to ignore the channel.\n const distinctEdges = [\n ...new Set(deleteCascadeViolations.map((v) => `${v.childResourceType} <- ${v.parentResourceType}`)),\n ];\n this.logger.warn(\n `⚠️ [composition-cascade-deletability] ${distinctEdges.length} onParentDelete edge(s) declare a DELETE ` +\n `cascade toward a child that cannot be cascade-deleted (missing discovery and/or DELETE op). Deleting ` +\n `such a parent throws CONFIGURATION inside its delete transaction and ROLLS BACK the parent delete, ` +\n `once a child row exists. Each edge needs a decision: add the missing op(s), retain the children ` +\n `(disable the cascade, or use strategy IMPERSONALIZE_AND_RETAIN with a retention-governed child), or ` +\n `drop onParentDelete.`,\n {\n edges: distinctEdges,\n // Surfaced because a duplicated pair means the SAME relationship is registered twice\n // for that child — a registry-assembly problem, not a cascade problem.\n duplicatedEdgeReports: deleteCascadeViolations.length - distinctEdges.length,\n },\n );\n }\n for (const violation of retainCascadeViolations) {\n this.logger.warn(`⚠️ [composition-cascade-deletability] ${violation.message}`, {\n childResourceType: violation.childResourceType,\n parentResourceType: violation.parentResourceType,\n strategy: violation.strategy,\n });\n }\n if (retainCascadeViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${retainCascadeViolations.length} composition relationship(s) declared ` +\n `onParentDelete.strategy = IMPERSONALIZE_AND_RETAIN but cannot be impersonalized-and-retained:\\n` +\n retainCascadeViolations.map((violation) => ` • ${violation.message}`).join('\\n'),\n );\n }\n\n // --- Composition seed op-path resolvability guard (onParentCreate lifecycle) ---\n // Complements the saas-models seedability guard above. That one verifies the\n // child's CREATE DTO* is fillable; it cannot see whether the seed's SERVICE\n // op-path resolves — a backend-only concern. At seed time `createAsSystem`\n // resolves the child's default CREATE op via `getServiceOperationPathDefault`,\n // which accepts ONLY INTERNAL_CALL / API_CALL / API_CALL_WITH_CALLBACK — a\n // REPOSITORY_ONLY (or absent) default CREATE throws OPERATION_PATH_NOT_FOUND and\n // the runtime seed silently no-ops (the exact bug runtime-verify caught on the\n // first org/state adopters). Catch that class at boot, fail-closed, by reusing\n // the very resolver the seed uses (config-only, so callable here). Feature-gated\n // children are legitimately absent from the registry (the runtime seed skips\n // them the same way via `tryGetResourceConfiguration`) → they must not fail boot.\n const compositionSeedOpPathViolations: string[] = [];\n for (const childConfig of Object.values(\n resourcesRegistry.resourceConfigurations,\n ) as unknown as CompositionSeedabilityResourceInput[]) {\n const childResourceType = childConfig.resourceIdentifier;\n const parentRelationships: ResourceRelationship[] = childConfig.resourceRelationships?.parentRelationships ?? [];\n for (const relationship of parentRelationships) {\n if (relationship.nature !== RelationshipNature.COMPOSITION) continue;\n if (relationship.childOperations?.lifecycle?.onParentCreate?.enabled !== true) continue;\n // Feature-excluded child → absent from the registry → the runtime seed\n // skips it (same `tryGetResourceConfiguration` check), so don't fail boot.\n if (!this.resourcesRegistryService.tryGetResourceConfiguration(childResourceType)) continue;\n try {\n this.resourcesRegistryService.getServiceOperationPathDefault(\n childResourceType,\n CoreResourceOperation.CREATE,\n );\n } catch {\n compositionSeedOpPathViolations.push(\n `Composition child '${childResourceType}' (parent '${relationship.resourceType1}') enabled ` +\n `onParentCreate but createAsSystem cannot resolve a default CREATE service op-path — typically a ` +\n `REPOSITORY_ONLY or absent default CREATE variant (the service tier accepts only INTERNAL_CALL / ` +\n `API_CALL). The runtime seed would silently no-op. Make the default CREATE variant INTERNAL_CALL.`,\n );\n }\n }\n }\n if (compositionSeedOpPathViolations.length > 0) {\n throw new Error(\n `Resource configuration error — ${compositionSeedOpPathViolations.length} composition relationship(s) enabled ` +\n `onParentCreate seeding but their child has no service-resolvable default CREATE op:\\n` +\n compositionSeedOpPathViolations.map((message) => ` • ${message}`).join('\\n'),\n );\n }\n\n const resourceConfigurations = new Map(\n Object.entries(resourcesRegistry.resourceConfigurations) as [ResourceType, ResourceConfiguration<any, any, any>][]\n );\n\n if (platformPersistenceAdapter !== undefined && !isPlatformApplication) {\n throw new Error(\n 'platformPersistenceAdapter is a PLATFORM-MODE parameter. An application declares its '\n + 'persistence adapter in application config (DATABASE_DEFAULT_ADAPTER); accepting it here '\n + 'would smuggle the decision past that contract.',\n );\n }\n if (platformPersistenceAdapter !== undefined) {\n // BEFORE initializeRepositories, necessarily: this is the construction-time answer.\n this.repositoriesRegistryService.setPlatformModeDefaultPersistenceAdapter(platformPersistenceAdapter);\n }\n\n // Initialize repositories registry on the active default connection\n const activeConnection = this.mongoDBService.getConnection();\n await this.repositoriesRegistryService.initializeRepositories(resourceConfigurations, activeConnection \|\| undefined);\n this.logDebug('✅ Repositories registry initialized successfully');\n\n // PostgreSQL DDL is owned OUTSIDE the engine (the schema planner plans; migrations apply),\n // so a PostgreSQL-backed table can silently disagree with what the repository writes — most\n // sharply for framework-owned columns no app schema declares. Prove the physical tables\n // match the plan HERE, once, rather than letting the first request fail on a bare\n // `column \"...\" does not exist`. Deliberately after `initializeRepositories` (the plans must\n // exist) and outside it (the PostgreSQL connection is lazy and need not be reachable while\n // repositories are being constructed). No-op unless a resource is PostgreSQL-backed, so it\n // never forces a connection an application does not use.\n // THE PRODUCTION MIGRATION DOOR (K7), deliberately immediately BEFORE the schema gate:\n // the runner brings the database to the shipped migrations' state, then the gate verifies\n // the result — so the gate stays the backstop even for the runner itself (K6). Both\n // no-op unless a resource is PostgreSQL-backed, and the runner additionally no-ops when\n // the deployable ships no migrations directory. Concurrency (N instances booting at\n // once) is the runner's own property via the in-database advisory lock.\n //\n // PLATFORM MODE DEFERS BOTH (Phase 5.2): the AppConfigurationService a platform service\n // hydrates AFTER this method cannot answer connection questions here, and this shared\n // body must not read it (the 2026-08-02 incident class, platform/CLAUDE.md). Platform\n // startups invoke `applyStartupPostgresMigrations()` + `verifyPostgreSqlTableSchemas()`\n // themselves — apps-manager immediately after this method returns (its Phase 2.5,\n // BEFORE its first repository read, with the connection supplied by the Phase-1\n // `connectWithUrl` pre-connect door rather than by hydration — Phase 5.3);\n // module-registry in its platform-owner phase, post-hydration.\n if (!isPlatformApplication) {\n this.logDebug('🚚 Applying startup PostgreSQL migrations (if any)...');\n await this.repositoriesRegistryService.applyStartupPostgresMigrations();\n\n this.logDebug('🧮 Verifying PostgreSQL physical table schemas...');\n await this.repositoriesRegistryService.verifyPostgreSqlTableSchemas();\n this.logDebug('✅ PostgreSQL physical table schemas verified');\n }\n\n // Preserve the historical post-repository factory lifecycle:\n // custom factories may resolve repository-backed services while\n // materializing their registrations.\n this.customImplRegistry.initialize([\n ...CoreBackend_ServiceImplementationsFactories,\n ...customServiceImplementations,\n ]);\n\n if (applicationConfig) {\n // Runtime-contract validation needs both the populated email\n // template registry and the finalized `transactionalCore`\n // registrations. It still runs before service/controller\n // initialization, so no operation can accept traffic first.\n this.logDebug('🧭 Validating initialized runtime contracts...');\n this.applicationStartupConfigValidator.validateInitializedRuntimeContracts(applicationConfig);\n // RAG store capability probe (fail-closed) — async because it EXECUTES a pgvector\n // expression on the live connection; no-op for applications with no `.ragSource()`\n // fields, so it never forces a database connection an application does not use.\n await this.applicationStartupConfigValidator.validateInitializedRagStoreCapability();\n if (bootAssertions.assertsPersistenceTransactionReadiness) {\n await this.applicationStartupConfigValidator\n .validateInitializedRuntimeTransactionReadiness(\n applicationConfig,\n );\n } else {\n this.logDebug(\n '🧭 Skipping persistence transaction-readiness proof: this runtime does not own it '\n + '(ApplicationRuntimeProfileBootAssertions.assertsPersistenceTransactionReadiness). '\n + 'The probe touches a synthetic collection no resourceAccess declares, and proves a '\n + 'deployment-wide property the application backend already proves.',\n );\n }\n this.logDebug('✅ Initialized runtime contracts validated successfully');\n }\n\n // Step 4: Initialize services registry (business logic layer)\n this.logDebug('🏢 Initializing services registry...');\n await this.servicesRegistryService.initializeServices();\n if (servicesRegistryDecoratorFactory) {\n if (!applicationConfig) {\n throw new Error('servicesRegistryDecoratorFactory requires application configuration and cannot run during pre-hydration platform startup.');\n }\n this.servicesRegistryService = servicesRegistryDecoratorFactory(this.servicesRegistryService, {\n appConfig: applicationConfig,\n errorBuilder: this.errorBuilder,\n });\n this.rebindServicesRegistryForRuntime(container, this.servicesRegistryService);\n this.logDebug('✅ Runtime-specific services registry decorator installed');\n }\n this.logDebug('✅ Services registry initialized successfully');\n\n // Step 4.4: Supply the session revoker used when a subject erasure scrubs a person's row.\n //\n // Unconditional, unlike the billing effect below: an erased person's login must stop\n // working in every deployment, so this is a core privacy control rather than a\n // provider-tied one. Registered as a PORT rather than injected directly because\n // `AuthTokenIssuer` already depends on the services-registry handler, which is where the\n // scrub chokepoint that calls this lives — a direct dependency would close that cycle.\n if (container) {\n (container.get(SAAS_SERVICE_TYPES.SubjectSessionRevocationService) as SubjectSessionRevocationBackendService)\n .register(async (userId: string) => {\n await (container.get(SAAS_SERVICE_TYPES.AuthTokenIssuer) as AuthTokenIssuerBackendService)\n .invalidateAllTokensForUser(userId);\n });\n this.logDebug('🔒 Subject-erasure session revoker registered');\n }\n\n // Step 4.5: Initialize billing services (if enabled)\n if (applicationConfig?.billing?.enabled && container) {\n await this.initializeBillingServices(container, applicationConfig.billing, productDefinitions);\n }\n\n // Step 4.6: Initialize webhook auto-controller (must happen before controllers registry)\n if (!isPlatformApplication && container) {\n await this.initializeWebhookAutoController(container);\n }\n\n // Step 5: Initialize controllers registry (HTTP endpoints layer)\n this.logDebug('🌐 Initializing controllers registry...');\n\n\n // Get manual controllers from provided container\n let allCustomControllers: AbstractControllerBackendService[] = [];\n\n if (container) {\n // G-4: SCIM controller mount is app-global — it mounts when ANY registered\n // org type opts into scimProvisioning (organizationTypes[t].scimProvisioning.enabled).\n // Per-org / per-token enforcement happens downstream once mounted (DIRECTORY_PROVISIONING\n // feature + the org-type scimProvisioning.enabled gate via isScimProvisioningEnabledForOrg).\n // Fail-closed: off unless a type opts in.\n const directoryProvisioningEnabled = isScimProvisioningEnabledForAnyOrgType(\n this.resourcesRegistryService.getOrganizationTypesConfig(),\n );\n const analyticsEnabled = !!applicationConfig?.analytics?.enabled;\n const manualControllers = isPlatformApplication ? [] : getManualControllersBackend(container, { directoryProvisioningEnabled, analyticsEnabled });\n allCustomControllers = [\n ...manualControllers,\n ...(customControllers \|\| [])\n ];\n\n\n\n this.logDebug('📋 Controllers to register', {\n manualControllers: manualControllers.length,\n runtimeCustomControllers: customControllers?.length \|\| 0,\n totalCustomControllers: allCustomControllers.length\n });\n } else {\n allCustomControllers = customControllers \|\| [];\n\n this.logDebug('📋 Controllers to register', {\n manualControllers: 0,\n runtimeCustomControllers: customControllers?.length \|\| 0,\n totalCustomControllers: allCustomControllers.length\n });\n }\n if(!isPlatformApplication) {\n await this.controllersRegistryService.initialize(\n allCustomControllers.length > 0 ? allCustomControllers : undefined,\n controllerWhiteList\n );\n this.logDebug('✅ Controllers registry initialized successfully');\n } else {\n this.logDebug('Skipping controllers registry initialization in platform mode (will be started by apps-manager)');\n }\n\n // Step 5.5: Initialize batches/cronjobs (core engine + custom + resource-based)\n this.logDebug('🧵 Initializing batches & cronjobs...');\n const customBatches = customBatchesFactory\n ? customBatchesFactory({\n logger: this.logger,\n errorBuilder: this.errorBuilder,\n errorHandler: this.errorHandler,\n executionContextCreatorService: this.executionContextCreatorBackendService,\n resourcesRegistryService: this.resourcesRegistryService,\n repositoriesRegistryService: this.repositoriesRegistryService,\n servicesRegistryService: this.servicesRegistryService,\n })\n : new Map<string, BatchesCronjobsCustomExecution_Service<any, any>>();\n\n // Register core engine batches (always present, independent of custom app)\n customBatches.set(FILES_CLEANUP_BATCH_REF, createFilesCleanupBatch());\n // Hourly RAG reconciliation sweep (plan §3.c backstop, DL1). Registered UNCONDITIONALLY,\n // like files-cleanup: on an application with no `.ragSource()` fields it finds zero\n // resource types and zero chunk sets and costs one enumeration — a better trade than\n // corpus convergence silently depending on a registration condition. It is also the\n // bound every chunk-tier log-never-throw seam cites, so it must exist wherever they do.\n customBatches.set(RAG_RECONCILIATION_SWEEP_BATCH_REF, createRagReconciliationSweepBatch());\n // Five-minute RAG embedding drain (plan §3.d, Phase 4): fills the NULL-vector ledger\n // the sweep counts, and re-embeds on class→model binding moves. Registered\n // UNCONDITIONALLY for the sweep's reason — an app with no `.ragSource()` fields\n // returns after one detection walk; a RAG app with no embeddings provider gets the\n // one-WARN-per-run visibility instead of a silently frozen backlog.\n customBatches.set(RAG_EMBEDDING_DRAIN_BATCH_REF, createRagEmbeddingDrainBatch());\n customBatches.set(CONSUMABLE_TOKENS_CLEANUP_BATCH_REF, createConsumableTokensCleanupBatch());\n customBatches.set(A2A_ABANDONED_TASK_SWEEP_BATCH_REF, createA2AAbandonedTaskSweepBatch());\n // Daily hygiene sweep for the invitation→membership-junction model: prunes\n // long-stale INVITED rows + orphan PENDING_INVITATION users. Always present\n // (invitations are a core org capability, not a feature-gated add-on).\n customBatches.set(ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF, createOrganizationMemberInvitationSweepBatch());\n // Hourly sweep that lifts EXPIRED time-boxed suspensions. Registered UNCONDITIONALLY:\n // `organizationMembers \| suspend` and `users \| suspend_user` both accept a window and\n // persist the resolved instant, so an application without this batch records \"for seven\n // days\" and suspends forever. Unlike the invitation sweep above, correctness does NOT\n // hold without it — the batch is what makes the declared contract true.\n customBatches.set(SUSPENSION_REACTIVATION_SWEEP_BATCH_REF, createSuspensionReactivationSweepBatch());\n /*\n Retention sweeps for the two `.ttl()` resources. Registered UNCONDITIONALLY, like the\n * suspension sweep above and for the same reason: without them the declared contract is\n * simply untrue on PostgreSQL, which has no native TTL. On MongoDB the TTL index also\n * expires these rows — the sweep then finds nothing and costs one cheap query, which is\n * a better trade than retention silently depending on which store an app happens to use.\n /\n customBatches.set(\n JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n createResourceRetentionSweepBatch(\n CoreResourceType.JOB_EXECUTIONS as ResourceType,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ),\n );\n customBatches.set(\n JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n createResourceRetentionSweepBatch(\n CoreResourceType.JOB_PAYLOAD_STORAGE as ResourceType,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ),\n );\n // WS-A tenant teardown — destroys tenants whose retention window has elapsed.\n // Registered UNCONDITIONALLY (no feature gate) for real applications: `request_deletion`\n // is always reachable, so a tenant can always end up marked, and an application without\n // this batch would accumulate marked-but-never-destroyed tenants forever — the exact\n // failure a retention window exists to prevent. Every field of `tenantTeardown` defaults,\n // so an app that declares no block still purges on a 30-day window.\n //\n // Skipped for `isPlatformApplication`: platform services (apps-manager, crontabs-batches-\n // manager, ...) have no ORGANIZATIONS to tear down, and `applicationConfig` is\n // not yet populated at this point in a platform application's boot — it resolves config\n // in its own later phase, AFTER this `super.initialize()` call returns — so reading it here\n // unconditionally threw `app_configuration_not_initialized` at platform-apps-manager boot.\n if (applicationConfig) {\n customBatches.set(ORGANIZATION_PURGE_BATCH_REF, createOrganizationPurgeBatch(applicationConfig.tenantTeardown));\n }\n // Event-triggered (enqueued by the notifications dispatcher, no cron).\n // Registered unconditionally so any email notification enqueued onto\n // the custom-batch queue can resolve its executor.\n customBatches.set(EMAIL_BATCH_SEND_BATCH_REF, emailBatchSendService);\n // Event-triggered M2M outbound webhook delivery (enqueued by\n // `M2MWebhookDispatcherBackendService.enqueueDelivery`, no cron) and\n // SIEM webhook delivery (enqueued by\n // `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`, no\n // cron). Both are registered unconditionally for the SAME reason as\n // email: the dispatchers gate enqueue per-org/per-endpoint, so the\n // drains MUST always resolve — else an enqueued job hits\n // `JOB_BATCH_REF_NOT_FOUND` and is silently dead-lettered.\n customBatches.set(M2M_WEBHOOK_DELIVERY_BATCH_REF, m2mWebhookDeliveryBatchService);\n customBatches.set(SIEM_WEBHOOK_DELIVERY_BATCH_REF, siemWebhookDeliveryBatchService);\n // A2A push-notification delivery (enqueued by `A2APushDispatcherBackendService` on a\n // task transition, no cron). Registered unconditionally for the same reason as its two\n // siblings above: the dispatcher gates enqueue per registered webhook, so the drain\n // MUST always resolve — an enqueued job that hits `JOB_BATCH_REF_NOT_FOUND` is silently\n // dead-lettered, which for a notification means the client is never told and nothing\n // says so.\n customBatches.set(A2A_PUSH_DELIVERY_BATCH_REF, a2aPushDeliveryBatchService);\n // Audit Phase 3 — cron completeness reconciler. Registered unconditionally\n // (like the sibling delivery drains) so a mis-set global flag can't orphan the\n // schedule; it no-ops cleanly when no reconcilable audit sink is declared.\n customBatches.set(IMMUDB_AUDIT_RECONCILE_BATCH_REF, immudbAuditReconcileBatchService);\n // Audit Phase 5 / F1 — cron audit-log ARCHIVAL. Registered\n // unconditionally (like the reconcile batch); it no-ops cleanly at\n // tick time when `auditTrail.archiveAfterDays` is unset (opt-in) or\n // no file-storage provider is configured. Never deletes (AUDIT_LOGS\n // is immutable, G5) — it copies aged rows to durable archival\n // artifacts.\n customBatches.set(AUDIT_LOGS_ARCHIVE_BATCH_REF, auditLogsArchiveBatchService);\n\n if (applicationConfig && this.appConfigService.anonymousSessionsEnabled) {\n customBatches.set(ANONYMOUS_SESSION_CLEANUP_BATCH_REF, createAnonymousSessionCleanupBatch());\n this.logDebug('✅ Anonymous session cleanup batch registered');\n }\n\n // Register lifecycle dormancy detection batch (only when lifecycle is enabled)\n if (lifecycleConfig?.enabled) {\n customBatches.set(DORMANCY_DETECTION_BATCH_REF, createDormancyDetectionBatch(lifecycleConfig.dormancyCronSchedule));\n this.logDebug('✅ Dormancy detection batch registered', { cronSchedule: lifecycleConfig.dormancyCronSchedule });\n }\n\n // Register data-seeding scheduled-rerun batch (Phase 7 / Item 47, Slice 5).\n //\n // Gate: at least one passed `dataSeeds` entry declares a `schedule?:`\n // block. We pre-filter the in-memory definitions array (rather than\n // querying the registry, which is hydrated later in Step 7) so apps\n // without any cron-opted-in seeds don't spawn a minute-tick cron that\n // would always no-op. Platform mode bypasses entirely (no per-tenant\n // data seeds run on the platform process).\n if (applicationConfig) {\n const hasScheduledSeeds = (dataSeeds ?? []).some((seed) => seed.schedule !== undefined);\n if (hasScheduledSeeds) {\n // Fallback ladder is flat by design: the Zod schema\n // applies `DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON`\n // as a default when `dataSeeding.scheduledRerunCronSchedule`\n // is missing but the `dataSeeding` block is present;\n // when the whole block is absent, we short-circuit to\n // the shared constant. Both branches land on the SAME\n // literal, so there's a single source of truth — no\n // `?? manifest.cronExpression ?? ' * * * '` tail.\n const dataSeedingConfig = applicationConfig.dataSeeding;\n const cronSchedule = dataSeedingConfig?.scheduledRerunCronSchedule\n ?? DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON;\n customBatches.set(\n DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n createDataSeedingScheduledRerunBatch(cronSchedule),\n );\n this.logDebug('✅ Data-seeding scheduled-rerun batch registered', { cronSchedule });\n }\n\n // Register the ETL pipeline scheduled-run batch (partial-resource paper, PR-12).\n //\n // Gate: at least one registered resource declares `externalDataPipeline.scheduleCron` — the\n // resources registry is initialized in an earlier step, so we query it directly.\n // Apps with no scheduled pipelines don't spawn a minute-tick cron that would\n // always no-op; on-demand pipelines (no `scheduleCron`) run only through the\n // run service's imperative door. Same platform-mode bypass as the sibling above.\n const hasScheduledEtlPipelines = this.resourcesRegistryService\n .getResourceTypes()\n .some((resourceType) => {\n const configuration = this.resourcesRegistryService.getResourceConfiguration(resourceType) as {\n externalDataPipeline?: { scheduleCron?: string };\n };\n return configuration?.externalDataPipeline?.scheduleCron !== undefined;\n });\n if (hasScheduledEtlPipelines) {\n customBatches.set(\n EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n createExternalDataPipelineScheduledRunBatch(),\n );\n this.logDebug('✅ ETL pipeline scheduled-run batch registered');\n }\n\n // Register data-seeding run-cleanup batch (audit L4-10,\n // post-Phase-7 close-out). Daily retention sweep that prunes\n // terminal `DataSeedRun` rows older than\n // `DataSeedingConfig.runRetentionDays` (default 30) while\n // preserving the MAX(seedVersion) row per business-key group\n // (so dispatcher idempotency is never broken).\n //\n // Gate: any registered seeds (regardless of `schedule?:`).\n // Apps with no seeds produce no `DataSeedRun` rows so the\n // sweep would always no-op. Platform mode bypasses (no\n // per-tenant data seeds run on the platform process).\n //\n // Retention is read at TICK time from app config (NOT at\n // registration), so an in-place config change takes effect\n // on the next daily tick without redeploy — see the\n // manifest's JSDoc and `resolveRetentionDays()` in the\n // batch body.\n const hasAnySeeds = (dataSeeds ?? []).length > 0;\n if (hasAnySeeds) {\n customBatches.set(\n DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n createDataSeedingRunCleanupBatch(),\n );\n this.logDebug('✅ Data-seeding run-cleanup batch registered');\n }\n }\n\n await this.batchesExecutor.initialize(customBatches);\n this.logDebug('✅ Batches & cronjobs initialized');\n\n // Step 6: Initialize HTTP server (skip here in platform mode or headless runtimes)\n if (this.shouldInitializeHttpServer({ headlessMode })) {\n // Register operator-facing admin controllers BEFORE HTTP init so they get\n // mounted at their custom root paths (e.g. /internal/admin/data-seeding)\n // by registerRoutes(). They MUST go through registerCustomController(), not\n // through getManualControllersBackend(), because the manual-controllers list\n // is mounted under /api/v1 by the controllers registry — root-level admin\n // surfaces (mirroring /health) must skip that prefix.\n if (container) {\n try {\n const dataSeedingAdminController = container.get(\n SAAS_SERVICE_TYPES.DataSeedingAdminController,\n ) as DataSeedingAdminBackendController;\n this.httpServerService.registerCustomController(dataSeedingAdminController);\n this.logDebug('🌱 Data-seeding admin controller registered for root mount');\n\n // The external-data operator door (list pipelines + run one now). Same\n // root-mount reasoning, and registered beside its sibling so a future\n // reader finds every /internal admin surface in one place.\n const externalDataAdminController = container.get(\n SAAS_SERVICE_TYPES.ExternalDataAdminController,\n ) as ExternalDataAdminBackendController;\n this.httpServerService.registerCustomController(externalDataAdminController);\n this.logDebug('🔌 External-data admin controller registered for root mount');\n } catch (error) {\n this.logger.warn('⚠️ Failed to register DataSeedingAdminController; admin endpoints will be unavailable', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n this.logger.info('🌍 Initializing HTTP server...');\n await this.httpServerService.initialize();\n this.logger.info('✅ HTTP server initialized successfully');\n } else if (this.isPlatformMode) {\n this.logDebug('Skipping HTTP server initialization in platform mode (will be started by apps-manager)');\n } else {\n this.logDebug('Skipping HTTP server initialization in headless mode');\n }\n\n // Step 7: Initialize queue workers (for background job processing)\n if (!this.isPlatformMode) {\n this.logger.info('🐰 Initializing queue workers...');\n try {\n // Headless job-processing runtimes (minions) still connect to\n // RabbitMQ here — their own tick consumer needs the adapter\n // connection + topology channel — but must NOT consume the\n // shared operations/scheduled/callbacks queues, or RabbitMQ\n // round-robins the scheduled-cron ticks onto them and they\n // dead-letter every tick they can't interpret. We also turn\n // OFF queue monitoring for those runtimes: it watches exactly\n // those four shared queues (which this runtime doesn't own),\n // and the backend-api pod already monitors them.\n await this.queueWorkerInitializer.initialize(\n skipJobConsumers\n ? { startJobConsumers: false, enableMonitoring: false }\n : undefined,\n );\n this.logger.info('✅ Queue workers initialized (if RabbitMQ configured)');\n } catch (error) {\n // Queue workers failing shouldn't prevent app from starting\n this.logger.warn('⚠️ Queue worker initialization skipped or failed:', error);\n }\n\n // Step 7.5: Sync cron jobs to crontabs-batches-manager\n if (this.shouldSyncCronJobs({ skipCronSync })) {\n this.logger.info('🕐 Syncing cron jobs to crontabs-manager...');\n try {\n // Initialize the sync service\n this.cronJobSyncService.initialize();\n\n // Sync cron jobs. Transient failures do not fail startup:\n // CronJobSyncBackendService keeps one capped,\n // process-lifecycle-aware reconciliation retry pending.\n await this.cronJobSyncService.syncCronJobsToManager();\n } catch (error) {\n // This catch is a final guard for an unexpected service\n // defect; ordinary remote failures are contained and\n // retried by CronJobSyncBackendService.\n this.logger.error('Unexpected cron job sync failure:', error);\n }\n } else {\n this.logDebug('Skipping cron job sync for this runtime profile');\n }\n } else {\n this.logDebug('Skipping queue worker initialization in platform mode');\n }\n\n // Step 7.7: Data-seeding subsystem — register declarations and run\n // application-lifecycle seeds (Phase 2.F of seeding-first-class plan).\n // Extracted into `runDataSeedingStep()` so it can be unit-tested in\n // isolation without standing up the full 30+ dependency boot chain.\n await this.runDataSeedingStep(dataSeeds, dataSeedScopeResolvers);\n\n // Step 7.8: Report — not enforce — the last-super-administrator floor. Runs AFTER\n // seeding so a seeded first administrator counts; see `reportSuperAdminFloor()` for why\n // this can never be fatal.\n await this.reportSuperAdminFloor();\n\n // Step 7.9: The per-tenant twin. Separate call, separate report: the application floor\n // answers \"can anyone administer this deployment\", this one answers \"which tenants can\n // nobody administer\" — different populations, different remedies, and an operator\n // needs both named rather than one folded into the other.\n await this.reportOrganizationOwnerFloor();\n\n // Step 7.95: The CEILING, beside the two floors. They ask \"is there at least one\n // administrator\"; this asks \"who are they\" — the enumeration a periodic privileged-access\n // review reads (#202). Same non-fatal posture, same gate, and it decides nothing.\n await this.reportPrivilegedAccessPopulation();\n\n // Step 7.10: Report — never enforce — which of the APPLICATION's own resources have said\n // nothing about whether their rows are about people. Reads the registry only: no database,\n // no execution context, so unlike the two floors above it needs nothing to be seeded and\n // cannot be confined to an empty set by a wrong context.\n this.reportApplicationPersonalDataDeclarations();\n\n // Step 8: Validate initialization\n await this.validateInitialization({ headlessMode });\n\n // Step 8.5: If the application's authored authentication policy (`userTypes..auth` —\n // MFA, password, lockout, enabled methods, step-up, session) moved since the last boot,\n // record it in the audit trail. Emitted HERE — after `validateInitialization`, with the\n // repositories registry and the audit boundary live and the resolved policy in effect —\n // because this boot is where the change takes effect and there is no human actor to name\n // (the \"who authored it\" lives in the deployment / source history).\n //\n // Gated three ways: `applicationConfig` is undefined in platform mode (the platform-gate);\n // and `!headlessMode` restricts the emit to the auth-SERVING runtime. A minion boots this\n // same lifecycle headlessly (`headlessMode: true`) with the SAME app config, so without\n // this gate every minion would write a duplicate row for one change — and a background\n // runtime that serves no HTTP/auth is not the honest emitter of an authentication-policy\n // change anyway. `shouldInitializeHttpServer` draws the identical `!headlessMode` line.\n // (Horizontally-scaled serving replicas can still race to one extra row per change; that\n // is safe over-recording in an append-only trail — the gap this closes is UNDER-recording.)\n // The service call is fully self-contained and fire-and-forget, so it cannot fail boot.\n //\n // assurance-control: WILDO.AUDIT.SECURITY_EVENT WILDO.IDENTITY.SESSION_ASSURANCE — the boot-time\n // activation point that guarantees a change to the authored authentication-assurance policy is\n // evidenced, from the auth-serving runtime, on the deployment that puts it into effect.\n if (applicationConfig && this.auditLogsService && !headlessMode) {\n await this.auditLogsService.emitApplicationAuthPolicyChangeIfChanged({\n applicationId: applicationConfig.appIdentity.appName,\n userTypes: applicationConfig.userTypes,\n });\n }\n\n this.isInitialized = true;\n\n\n // Step 9: Display debug information (after initialization is complete)\n this.logDebug('📋 Displaying implemented Mongoose schemas...');\n this.debugDisplayMongooseSchemas({\n showSchemaStructure: true,\n showIndexes: true,\n maxFieldDepth: 2,\n });\n\n this.logDebug('🌐 Displaying registered routes...');\n this.debugDisplayRegisteredRoutes();\n\n this.logDebug('🎉 Backend application initialization completed successfully');\n\n } catch (error) {\n // This orchestration layer does not handle the failure; it propagates\n // it to the runtime host. Logging here would duplicate the terminal\n // process-boundary record and lose host identity/context.\n throw error;\n }\n }\n\n /*\n Initialize the webhook auto-controller with its dependencies.\n \n Must run BEFORE the controllers registry mounts the controller's router:\n * `initialize()` is what actually registers the webhook routes (the route\n * set is data-dependent and the webhook handler is not constructor-injected,\n * so the base class's constructor-time `setupRoutes()` hook is a no-op — see\n * `WebhookAutoControllerBackendService.initialize()` for the full rationale).\n * Async because route definitions are read from first-class provider runtime contracts.\n /\n private async initializeWebhookAutoController(container: any): Promise<void> {\n try {\n const webhookHandler = container.get(SAAS_SERVICE_TYPES.WebhookHandlerService) as WebhookHandlerBackendService;\n const webhookAutoController = container.get(SAAS_SERVICE_TYPES.WebhookAutoController) as WebhookAutoControllerBackendService;\n\n await webhookAutoController.initialize(webhookHandler);\n this.logDebug('🔗 Webhook auto-controller initialized');\n } catch (error) {\n // Non-fatal — if no webhook providers are registered, this is expected\n this.logger.warn('Webhook auto-controller initialization skipped', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /\n Initialize billing services when billing is enabled.\n \n Resolves the billing provider from the external connectors system\n * and initializes all billing services (product catalog sync,\n * usage metering, promotions, custom implementations) and wires up webhooks.\n /\n private async initializeBillingServices(\n container: any,\n billingConfig: BillingConfiguration,\n appProductDefinitions?: ProductDefinition[],\n ): Promise<void> {\n this.logDebug('💳 Initializing billing services...');\n\n // Resolve the billing provider BEFORE the non-fatal try below.\n //\n // \"billing.enabled = true but no provider resolvable\" is an\n // INCOHERENT CONFIG, not a runtime hiccup, and must FAIL LOUD at\n // startup. The previous warn-and-return silently degraded: billing\n // resources stayed registered (enabled ⇒ not excluded) but the\n // back-office services that register their operation paths + run\n // the org auto-create never initialized. The result was request-\n // time FATALs (`resources_registry_operation_path_not_found` on\n // `organizationBillingAccounts` / `products` / `prices` /\n // `promotions`) during org provisioning — exactly the\n // silent-degradation anti-pattern the design philosophy forbids.\n //\n // The try/catch further down stays scoped to RUNTIME init errors\n // (a provider that resolves but then throws mid-wire) which remain\n // non-fatal. Config incoherence is a different, fatal class.\n const resolution = await this.resolveBillingProvider(billingConfig);\n if (!resolution.provider) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n message: describeBillingProviderResolutionFailure(\n resolution.reason,\n billingConfig,\n resolution.detail,\n ),\n providerRef: billingConfig.providerRef ?? null,\n resolutionFailureReason: resolution.reason,\n },\n });\n }\n const billingProvider = resolution.provider;\n\n try {\n // 2. Get billing services from DI container\n const catalogSync = container.get(SAAS_SERVICE_TYPES.ProductCatalogSyncService) as ProductCatalogSyncBackendService;\n const usageMetering = container.get(SAAS_SERVICE_TYPES.UsageMeteringService) as UsageMeteringBackendService;\n\n // 3. Product definitions from the custom app (like customRoles, customFeatureDefinitions)\n const productDefinitions: ProductDefinition[] = appProductDefinitions ?? [];\n\n // 4. Initialize services in dependency order\n await catalogSync.initialize(productDefinitions, billingProvider);\n await usageMetering.initialize(billingProvider);\n\n // 4b. Register the provider-side half of subject erasure.\n //\n // Registered HERE, inside the billing bootstrap, because that is what keeps the erasure\n // orchestrator domain-agnostic: `system-access` runs whatever declared itself relevant to\n // a subject and never learns that billing exists. It also ties the effect's lifetime to\n // the provider's — a deployment with no billing provider configured registers nothing,\n // rather than registering an effect that would fail at erasure time.\n container\n .get(SAAS_SERVICE_TYPES.SubjectErasureExternalEffectsService)\n .register(createBillingSubjectErasureEffect({\n getBillingProvider: () => billingProvider,\n listBillingAccountsForSubject: async (billingAccountResourceType, scopeFieldName, subjectIds) => {\n const systemAccess = container.get(SAAS_SERVICE_TYPES.SystemAccessService) as SystemAccessBackendService;\n return normalizeSystemListResult(await systemAccess.listAsSystem(\n billingAccountResourceType,\n { [scopeFieldName]: { $in: subjectIds } },\n )) as Array<{ _id: string; providerCustomerId?: string }>;\n },\n listActiveSubscriptions: async (subscriptionResourceType, billingAccountFkField, billingAccountId) => {\n const systemAccess = container.get(SAAS_SERVICE_TYPES.SystemAccessService) as SystemAccessBackendService;\n return normalizeSystemListResult(await systemAccess.listAsSystem(\n subscriptionResourceType,\n {\n [billingAccountFkField]: billingAccountId,\n status: { $nin: TERMINAL_SUBSCRIPTION_STATUSES },\n },\n )) as Array<{ _id: string; providerSubscriptionId?: string }>;\n },\n logWarn: (message, context) => this.logger.warn(message, context),\n }));\n this.logDebug('🧹 Billing subject-erasure effect registered');\n\n // 4a. Sync product catalog to DB (ensures products/prices exist before billing state endpoint queries them)\n try {\n const syncResult = await catalogSync.syncProductCatalog();\n this.logDebug('📦 Product catalog synced at startup', {\n synced: syncResult.synced,\n created: syncResult.created,\n updated: syncResult.updated,\n featuresDirty: syncResult.featuresDirty.length,\n });\n } catch (syncError) {\n this.logger.warn('⚠️ Product catalog startup sync failed (non-fatal)', {\n ...projectCaughtErrorLogFields(syncError),\n });\n }\n\n // 4b. Initialize billing custom implementations (late-binding for resource-centric operations)\n const featureSync = container.get(SAAS_SERVICE_TYPES.BillingFeatureSyncService) as BillingFeatureSyncBackendService;\n const billingStateService = container.get(SAAS_SERVICE_TYPES.BillingStateService) as BillingStateBackendService;\n initializeBillingCustomImplementations(billingProvider, featureSync, billingStateService, billingConfig, this.errorBuilder);\n\n // 4c. Register post-operation hooks (feature sync fires automatically after subscription mutations)\n registerBillingPostOperationHooks(this.servicesRegistryService);\n\n // 5. Wire up billing webhooks\n // The WebhookAutoControllerBackendService auto-registers routes from provider definitions,\n // so we only need to register the adapter (verify+parse) and handler (dispatch).\n const webhookHandler = container.get(SAAS_SERVICE_TYPES.WebhookHandlerService) as WebhookHandlerBackendService;\n const webhookAutoController = container.get(SAAS_SERVICE_TYPES.WebhookAutoController) as WebhookAutoControllerBackendService;\n\n const billingAdapter = new BillingWebhookAdapter(billingProvider, billingConfig.providerRef);\n webhookHandler.registerAdapter(billingConfig.providerRef, 'billing', billingAdapter);\n\n const webSocketService = container.get(SAAS_SERVICE_TYPES.WebSocketService) as WebSocketService;\n setBillingWebSocketService(webSocketService);\n const webhookEventRouter = new BillingWebhookEventRouterBackendService(this.servicesRegistryService, this.resourcesRegistryService, this.logger, webSocketService);\n const billingCapabilityHandler = new BillingWebhookCapabilityHandler(webhookEventRouter);\n webhookAutoController.registerCapabilityHandler(billingCapabilityHandler);\n\n this.logDebug('✅ Billing services initialized successfully', {\n providerRef: billingConfig.providerRef,\n enabledScopes: billingConfig.enabledScopes,\n });\n } catch (error) {\n // Billing initialization failure is non-fatal: the app can still run without billing\n this.logger.error('❌ Billing services initialization failed (billing will be unavailable)', {\n ...projectCaughtErrorLogFields(error),\n });\n }\n }\n\n /\n Resolve the StandardBilling_Interface from the external providers system.\n \n Flow:\n * 1. Get the billing providerRef from config (e.g., 'stripe')\n * 2. Verify the configured provider exposes the billing protocol\n * 3. Load the billing runtime contract from the backend provider registry\n \n Returns a discriminated {@link BillingProviderResolution}: on failure the\n * `provider` is null and a `reason` (plus optional `detail`) names the exact\n * config surface at fault, so the startup guard can route the operator to the\n * right fix (scope authoring vs. secret vs. disabled) rather than a catch-all.\n /\n private async resolveBillingProvider(billingConfig: BillingConfiguration): Promise<BillingProviderResolution> {\n const providerRef = billingConfig.providerRef;\n if (!providerRef) {\n this.logDebug('No billing providerRef configured');\n return { provider: null, reason: BillingProviderResolutionFailureReason.PROVIDER_REF_UNSET };\n }\n\n try {\n const runtimeContract = this.backendProviderRegistryService.getRuntimeContract(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n );\n if (runtimeContract?.kind !== 'billing') {\n // No billing runtime contract exposed to the backend registry for\n // this ref — the provider was filtered out of the active catalog\n // because it is not authored in `providers.scopes.backend` (and/or\n // lacks a backend runtime-owner contribution). This is distinct\n // from \"secret missing\": the ref never reached the backend host.\n this.logDebug('Billing provider not reachable on the backend runtime', { providerRef });\n return {\n provider: null,\n reason: BillingProviderResolutionFailureReason.PROVIDER_NOT_REACHABLE_ON_BACKEND,\n };\n }\n\n if (!this.externalProvidersRegistryService.isProviderEnabled(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n )) {\n this.logDebug('Billing provider disabled by external provider configuration', { providerRef });\n return { provider: null, reason: BillingProviderResolutionFailureReason.PROVIDER_DISABLED };\n }\n\n // The framework currently ships a single `kind: 'billing'`\n // adapter (Stripe, via `StripeStandardBillingProvider`).\n // The instantiation here is keyed on `kind` only — no\n // provider literal — so the CI guard\n // (`no-provider-ref-branches.guard.test.ts`) accepts it.\n // When a second billing adapter arrives, factor the\n // adapter constructor into the runtime contract via\n // `sdkFactory: (secretKey, opts) => StandardBilling_Interface`,\n // mirror of the LLM and email surfaces — do NOT\n // reintroduce a `provider === '<ref>'` branch here.\n const secretRef = runtimeContract.secretRef;\n const secretKey = secretRef\n ? this.externalProvidersRegistryService.getProviderSecret(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n secretRef,\n )\n : undefined;\n if (!secretKey) {\n this.logger.warn('Billing provider configured but secret is missing', { providerRef, secretRef });\n return {\n provider: null,\n reason: BillingProviderResolutionFailureReason.SECRET_MISSING,\n detail: secretRef,\n };\n }\n\n this.logDebug('Billing provider resolved from first-class billing runtime contract', { providerRef });\n return { provider: new StripeStandardBillingProvider(secretKey, runtimeContract.apiVersion) };\n } catch (error) {\n const detail = describeCaughtError(error);\n this.logger.warn('Failed to resolve billing provider', { providerRef, error: detail });\n return { provider: null, reason: BillingProviderResolutionFailureReason.RESOLUTION_ERROR, detail };\n }\n }\n\n async shutdown(): Promise<void> {\n this.logDebug('Starting graceful shutdown');\n\n\n // Cancel delayed cron reconciliation before stopping queue workers, so\n // shutdown cannot start a fresh platform request in the background.\n this.cronJobSyncService.shutdown();\n\n // Then shut down queue workers and wait for in-flight jobs.\n try {\n await this.queueWorkerInitializer.shutdown();\n } catch (error) {\n this.logger.error('Error during queue worker shutdown', error as any);\n }\n }\n /\n Check if the application is initialized\n /\n public isApplicationInitialized(): boolean {\n return this.isInitialized;\n }\n\n /\n Get application configuration\n /\n public async getAppConfig(): Promise<AppConfiguration> {\n this.ensureInitialized();\n return this.appConfigService.config;\n }\n\n /\n Get resources registry\n /\n public getResourcesRegistry(): ResourcesRegistry {\n this.ensureInitialized();\n return this.resourcesRegistryService.getResourcesRegistry();\n }\n\n /\n Get repositories registry handler\n /\n public getRepositoriesRegistry(): RepositoriesRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.repositoriesRegistryService;\n }\n\n /\n Debug function to display all implemented Mongoose schemas\n * Convenient access to schema debugging from the main application service\n /\n public debugDisplayMongooseSchemas(options: {\n showSchemaStructure?: boolean;\n showIndexes?: boolean;\n showVirtuals?: boolean;\n resourceTypeFilter?: string[];\n maxFieldDepth?: number;\n } = {}): void {\n this.logDebug('\\n🚀 === WILDO.AI BACKEND - MONGOOSE SCHEMAS DEBUG ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Schemas may not be available.');\n return;\n }\n\n this.repositoriesRegistryService.debugDisplayMongooseSchemas(options);\n }\n\n /\n Quick debug summary of all schemas\n /\n public debugShowSchemasSummary(): void {\n this.logDebug('\\n🚀 === WILDO.AI BACKEND - SCHEMAS SUMMARY ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Schemas may not be available.');\n return;\n }\n\n this.repositoriesRegistryService.debugShowSchemasSummary();\n }\n\n /\n Debug function to display all registered routes\n /\n public debugDisplayRegisteredRoutes(): void {\n this.logDebug('\\n🌐 === WILDO.AI BACKEND - REGISTERED ROUTES ===\\n');\n\n if (!this.isInitialized) {\n this.logDebug('⚠️ Application not initialized yet. Routes may not be available.');\n return;\n }\n\n this.controllersRegistryService.displayAllRoutes();\n }\n\n /\n Get the controllers registry for route registration\n /\n public getControllersRegistry(): ControllersRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.controllersRegistryService;\n }\n\n /\n Get the services registry for business logic access\n /\n public getServicesRegistry(): ServicesRegistryHandlerBackendService {\n this.ensureInitialized();\n return this.servicesRegistryService;\n }\n\n /\n Get the HTTP server service instance\n /\n public getHttpServer(): HttpServerBackendService {\n this.ensureInitialized();\n return this.httpServerService;\n }\n\n /\n Get the authorizations service instance\n /\n public getAuthorizationsService(): AuthorizationsBackendService {\n this.ensureInitialized();\n return this.authorizationsService;\n }\n\n /\n Step 7.7 — Data-seeding subsystem hand-off.\n \n Thin adapter around {@link runDataSeedingApplicationBootstrap}: this\n * method exists so subclasses (e.g. `PlatformAppsManager_ApplicationStartupService`)\n * can override / observe the step without reaching into the helper, and\n * so the heavy `initialize()` reads as a flat sequence of `await`s.\n \n The helper itself is exhaustively unit-tested at\n * `~/data-seeding/services/__tests__/data-seed-application-bootstrap.backend.test.ts`.\n * See the helper's JSDoc for the full contract (registration always runs,\n * dispatch is skipped in platform mode, dispatcher failures are FATAL).\n /\n protected async runDataSeedingStep(\n dataSeeds: readonly DataSeedDefinition[] \| undefined,\n dataSeedScopeResolvers: Readonly<Record<string, DataSeedScopeResolver>> \| undefined,\n ): Promise<void> {\n await runDataSeedingApplicationBootstrap({\n dataSeeds,\n dataSeedScopeResolvers,\n isPlatformMode: this.isPlatformMode,\n logger: this.logger,\n logDebug: this.logDebug,\n registry: this.dataSeedRegistryService,\n scopeResolverRegistry: this.dataSeedScopeResolverRegistryService,\n dispatcher: this.dataSeedDispatcherService,\n servicesRegistry: this.servicesRegistryService,\n });\n }\n\n /\n Report — never enforce — the last-super-administrator floor at startup.\n \n ## Why this exists next to the write guards\n \n Every write that could remove the last administratively usable super-administrator already\n * refuses (`super-admin-floor.backend.utils`, wired into the USERS role verbs, the core\n * UPDATE, DELETE and subject erasure). So this can only ever observe a breach that arrived\n * around those paths: a direct database edit, a restore from a backup taken mid-erasure, a seed\n * that authored no administrator, or — the one with no user row involved at all — a role-table\n * reconfiguration that dropped or renamed a custom role carrying\n * `inheritFrom: APP_ADMIN_SUPER_ADMIN`, silently reclassifying its holders as non-administrators.\n \n ## Why it MUST NOT fail startup\n \n A fresh application legitimately boots with zero users: the first administrator arrives\n * through seeding or first-run registration. A framework that refused to start on this data\n * condition would brick every greenfield app on its first run, and — worse — would make the\n * breach unrecoverable in exactly the situation where the operator needs the app up to fix it.\n * The finding is loud (`logger.error` + a CRITICAL audit event) and non-blocking. Rejected:\n * throwing `ErrorType.CONFIGURATION`, for both reasons above.\n \n ## Why every failure is swallowed\n \n A diagnostic that can take the application down is a worse defect than the one it reports.\n * The floor query needs the users repository and the role table; in platform mode, in reduced\n * runtime profiles, or in a minimal test container, either may legitimately be absent. All of\n * that degrades to a debug line.\n \n assurance-control: WILDO.ACCESS.ADMINISTRATIVE_CONTINUITY — surface the absence of an\n * accountable administrative principal, which is unrecoverable in-product once reached.\n /\n protected async reportSuperAdminFloor(): Promise<void> {\n // Platform mode runs no application user population — there is no floor to measure.\n if (this.isPlatformMode) return;\n /\n ONLY the runtime that owns the application's administrative population.\n \n The report reads `users` and `organizations` across the whole application. A confined\n * runtime (minion/worker) holds table-scoped grants covering neither, so it cannot perform\n * the read — and has no accountability for the answer even if it could. Observed on a\n * clean-room PostgreSQL boot (2026-08-24): the marketing-scrapper minion produced\n * `permission denied for table users` and `for table organizations` on every startup.\n \n It never blocked anything — the report is non-fatal by design — which is precisely why it\n * lasted: a recurring, ignorable error inside an otherwise healthy boot. The application\n * backend still runs both reports, so no observation is lost.\n /\n if (!resolveApplicationRuntimeProfileBootAssertions(this.resolvedRuntimeProfile).reportsAdministrativeContinuityFloors) return;\n\n try {\n if (!this.repositoriesRegistryService.getRepository(CoreResourceType.USERS)) {\n this.logDebug('Skipping the super-administrator floor report: no users repository is registered');\n return;\n }\n\n const executionContext = await this.executionContextCreatorBackendService.createForInternalOperation({\n operation: this.resourcesRegistryService.getServiceOperationPathDefault(\n CoreResourceType.USERS,\n CoreResourceOperation.LIST,\n ),\n initiatorRoles: [\n {\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n relatedPrimaryScope: ResourcePrimaryScope.APPLICATION,\n },\n ],\n });\n\n const population = await measureUsableSuperAdminPopulation({\n executionContext,\n repositoriesRegistry: this.repositoriesRegistryService,\n errorBuilder: this.errorBuilder,\n conferringRoles: resolveSuperAdminConferringRoles(this.authorizationsService),\n });\n\n if (population.meetsFloor) {\n this.logDebug('Super-administrator floor satisfied', {\n usableSuperAdminCount: population.usableSuperAdminCount,\n });\n return;\n }\n\n // ERROR, not warn: there is no in-product remedy — every door that could appoint a new\n // administrator is gated on the role that is missing. The recovery is necessarily\n // out-of-band (a direct database write, or a seed), so the log has to stand alone and\n // say what to do.\n this.logger.error(\n 'No administratively usable super-administrator exists. The application cannot be '\n + 'administered, and no in-product path can grant the role because every such path '\n + 'requires it. Restore one out-of-band (seed or direct database write) by giving an '\n + 'ACTIVE user one of the conferring roles below.',\n {\n usableSuperAdminCount: population.usableSuperAdminCount,\n requiredUsableSuperAdminCount: SUPER_ADMIN_FLOOR_MINIMUM,\n conferringRoles: population.conferringRoles,\n usableStatuses: [...ADMINISTRATIVELY_USABLE_USER_STATUSES],\n },\n );\n\n await this.auditLogsService?.logApplicationSuperAdminFloorBreached({\n usableSuperAdminCount: population.usableSuperAdminCount,\n requiredUsableSuperAdminCount: SUPER_ADMIN_FLOOR_MINIMUM,\n conferringRoles: population.conferringRoles,\n usableStatuses: [...ADMINISTRATIVELY_USABLE_USER_STATUSES],\n }, executionContext);\n } catch (error) {\n // See the header: a diagnostic must never be the reason startup fails.\n this.logDebug('Super-administrator floor report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n Report — never enforce — the last-organization-owner floor, per tenant.\n \n The write guards are the protection; this is the only surface that observes states they never\n * saw (a direct database edit, a restore from a backup taken mid-erasure, a seed that authored no\n * owner, or a role-table reconfiguration that changed which roles confer ownership).\n \n NON-FATAL, for the same reason as its application twin and one more of its own: a fresh\n * deployment legitimately has zero organizations, and a tenant left ownerless by an out-of-band\n * edit is a condition to report, not a reason to refuse to serve every OTHER tenant.\n \n Cost is three queries regardless of tenant count — see\n * {@link measureOrganizationsMissingUsableOwner}. The breached list is logged in full because an\n * operator cannot act on a count, but it is the ONLY thing that scales with the breach, not with\n * the tenant base.\n /\n protected async reportOrganizationOwnerFloor(): Promise<void> {\n // Platform mode runs no tenant population — there is no floor to measure.\n if (this.isPlatformMode) return;\n /\n ONLY the runtime that owns the application's administrative population.\n \n The report reads `users` and `organizations` across the whole application. A confined\n * runtime (minion/worker) holds table-scoped grants covering neither, so it cannot perform\n * the read — and has no accountability for the answer even if it could. Observed on a\n * clean-room PostgreSQL boot (2026-08-24): the marketing-scrapper minion produced\n * `permission denied for table users` and `for table organizations` on every startup.\n \n It never blocked anything — the report is non-fatal by design — which is precisely why it\n * lasted: a recurring, ignorable error inside an otherwise healthy boot. The application\n * backend still runs both reports, so no observation is lost.\n /\n if (!resolveApplicationRuntimeProfileBootAssertions(this.resolvedRuntimeProfile).reportsAdministrativeContinuityFloors) return;\n\n try {\n if (!this.repositoriesRegistryService.getRepository(CoreResourceType.ORGANIZATIONS)\n \|\| !this.repositoriesRegistryService.getRepository(CoreResourceType.ORGANIZATION_MEMBERS)) {\n this.logDebug('Skipping the organization-owner floor report: organization repositories are not registered');\n return;\n }\n\n const authExecutionContextFactory = this.authExecutionContextFactory;\n if (!authExecutionContextFactory) {\n this.logDebug('Skipping the organization-owner floor report: the auth execution-context factory is not bound');\n return;\n }\n\n const population = await measureOrganizationsMissingUsableOwner({\n // The report builds its OWN system context from this factory. It is a whole-estate\n // backstop and must NOT trust a caller-supplied context: a role-less or wrong-execution-\n // type context silently confined the ORGANIZATIONS scope-root read to the empty set and\n // the backstop then reported a healthy estate. See the block comment in\n // `measureOrganizationsMissingUsableOwner`.\n authExecutionContextFactory,\n repositoriesRegistry: this.repositoriesRegistryService,\n errorBuilder: this.errorBuilder,\n conferringRoles: resolveOrganizationOwnerConferringRoles(this.authorizationsService),\n });\n\n // The PREVENTIVE half, and the only one this floor has. A tenant with exactly one usable\n // owner is a single resignation or suspension away from being unadministrable, and it is\n // the population the floor will REFUSE to help — every removal there answers 409 until a\n // second owner exists. WARN, not error: nothing is broken yet, and an error here on a\n // legitimately small tenant would train operators to ignore the channel.\n if (population.singleOwnerOrganizations.length > 0) {\n this.logger.warn(\n 'Organizations have exactly ONE administratively usable owner. Each is one lifecycle '\n + 'event away from being unadministrable, and the owner floor will refuse every removal '\n + 'there until a second owner is granted. Recommend at least two owners per tenant.',\n {\n singleOwnerOrganizationCount: population.singleOwnerOrganizations.length,\n singleOwnerOrganizations: population.singleOwnerOrganizations,\n protectedOrganizationCount: population.protectedOrganizationCount,\n },\n );\n }\n\n if (population.ownerlessOrganizations.length === 0) {\n this.logDebug('Organization-owner floor satisfied for every protected tenant', {\n protectedOrganizationCount: population.protectedOrganizationCount,\n });\n return;\n }\n\n // ERROR, not warn: these tenants cannot administer THEMSELVES, and no member of them can\n // fix it — granting ownership requires the authority they just lost. Recovery exists but\n // is an out-of-tenant operator action, so the log names it rather than leaving the reader\n // to discover there is one. (Until 2026-08-05 this said no in-product path existed at all;\n // `organizationMembers.grantOwnership` is that path.)\n this.logger.error(\n 'Organizations exist with no administratively usable owner. They cannot administer '\n + 'themselves, and no member of them can repair it — granting ownership requires the '\n + 'authority that was lost. Repair from the platform tier with '\n + '`organizationMembers.grantOwnership`, which promotes an EXISTING member of the tenant '\n + 'and requires APP_ADMIN_SUPER_ADMIN. Failing that, restore out-of-band by giving an '\n + 'ACTIVE member an ACTIVE membership with a conferring role.',\n {\n ownerlessOrganizationCount: population.ownerlessOrganizations.length,\n protectedOrganizationCount: population.protectedOrganizationCount,\n ownerlessOrganizations: population.ownerlessOrganizations,\n requiredUsableOwners: ORGANIZATION_OWNER_FLOOR_MINIMUM,\n conferringRoles: resolveOrganizationOwnerConferringRoles(this.authorizationsService),\n usableMembershipStatuses: [...ADMINISTRATIVELY_USABLE_ORGANIZATION_MEMBER_STATUSES],\n usableOwnerUserStatuses: [...ADMINISTRATIVELY_USABLE_OWNER_USER_STATUSES],\n },\n );\n } catch (error) {\n // See the header: a diagnostic must never be the reason startup fails.\n this.logDebug('Organization-owner floor report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n WHO holds privileged access right now, at both scopes — the review's raw material (#202).\n \n assurance-control: WILDO.ACCESS.PRIVILEGED_REVIEW — surface the privileged-access population at\n * a moment an operator is present, so a periodic review has an explicitly scoped list to decide\n * over.\n \n ## Why it reports the SHAPE and not the roster\n \n The roster is what a reviewer needs and a boot log is the wrong place to put it: it would be\n * per-principal lines on every restart, unread, and it would put administrator identities into a\n * log stream that has no reason to hold them. What the log CAN carry is the size and the axes —\n * how many at each scope, which roles confer it, and which tenants could not be read — which is\n * enough to notice that the population moved and to know a review is due. The roster stays one\n * call away in `enumeratePrivilegedAccessPopulation`.\n \n ## Why it is not a review\n \n Nothing here schedules, decides or records an outcome. The occurrence record is the\n * application's to supply as a declared host artifact\n * (`PRIVILEGED_ACCESS_REVIEW_HOST_RECORD_ARTIFACT_KIND_REF`), because Wildo cannot witness a human\n * review — and a boot line that read as one would be the framework asserting a decision nobody\n * made.\n \n NON-FATAL and gated exactly like the two floors above: a confined runtime holds no grant over\n * `users` or `organizations`, and a diagnostic must never be why startup fails.\n /\n protected async reportPrivilegedAccessPopulation(): Promise<void> {\n if (this.isPlatformMode) return;\n if (!resolveApplicationRuntimeProfileBootAssertions(this.resolvedRuntimeProfile).reportsAdministrativeContinuityFloors) return;\n\n try {\n if (!this.repositoriesRegistryService.getRepository(CoreResourceType.USERS)) {\n this.logDebug('Skipping the privileged-access population report: no users repository is registered');\n return;\n }\n const authExecutionContextFactory = this.authExecutionContextFactory;\n if (!authExecutionContextFactory) {\n this.logDebug('Skipping the privileged-access population report: the auth execution-context factory is not bound');\n return;\n }\n\n const population = await enumeratePrivilegedAccessPopulation({\n authExecutionContextFactory,\n repositoriesRegistry: this.repositoriesRegistryService,\n errorBuilder: this.errorBuilder,\n applicationScopeConferringRoles: resolveSuperAdminConferringRoles(this.authorizationsService),\n organizationScopeConferringRoles: resolveOrganizationOwnerConferringRoles(this.authorizationsService),\n // Supplied, never read inside the enumeration — see its `observedAt` doc.\n observedAt: new Date().toISOString(),\n });\n\n this.logDebug('Privileged-access population observed', {\n observedAt: population.observedAt,\n applicationScopeHolderCount: population.applicationScopeHolders.length,\n organizationScopeHolderCount: population.organizationScopeHolders.length,\n applicationScopeConferringRoles: population.applicationScopeConferringRoles,\n organizationScopeConferringRoles: population.organizationScopeConferringRoles,\n });\n\n // WARN and separate, because it is the only part a reader must act on: a tenant the\n // enumeration could not read is absent from the population, and an absent tenant looks\n // exactly like one with no privileged access — the wrong direction to be wrong in.\n if (population.unreadableOrganizationIds.length > 0) {\n this.logger.warn(\n 'The privileged-access enumeration could not read the memberships of some tenants. Those tenants are '\n + 'ABSENT from the population, which is indistinguishable from having no privileged access — treat a '\n + 'review taken now as incomplete for them.',\n { unreadableOrganizationIds: population.unreadableOrganizationIds },\n );\n }\n } catch (error) {\n this.logDebug('Privileged-access population report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n WHICH of the application's own resources have never been asked whether they hold personal data.\n \n ## Why this reports and does not refuse — the decision, not an omission\n \n Issue #93 asked whether a resource holding personal data should be REQUIRED to declare it, and\n * the evidence for requiring it was strong. Measured across two applications, a declaration gets\n * made if and only if the framework refuses to start without it: `exportSubject` is fail-closed at\n * registration and was declared on 10 of 12 resources, while `retentionPolicy` and\n * `.impersonalizeWith()` are unenforced and were declared on 1 and 0.\n \n Paul decided against refusing: a hard constraint on every author, for every resource, forever is\n * too strict, and it is the shape `application-creation-directive.md` warns about — the system must\n * work first, with protection arriving as a judge-style guard rather than a refusal wired into the\n * mechanism. So the log line is the whole enforcement here, and the half that actually produces\n * declarations is the framework knowledge that teaches an author to write one while authoring the\n * resource, where it costs a line.\n \n ## WARN, and the wording matters more than the level\n \n This reports \"unanswered\", never \"undeclared personal data\". Most resources genuinely hold none,\n * and a report that implied otherwise would be wrong about the majority of its own findings — which\n * is precisely how a diagnostic channel trains its readers to skim. ERROR is reserved for the two\n * administrative floors above, where something IS broken.\n \n ## Application resources only\n \n The engine declares its own posture across ~85 resources and an application author cannot change\n * any of them. `applicationResourceTypes` comes from the registry, which records the split at the\n * one point where the app and core factory maps are still distinguishable.\n /\n private reportApplicationPersonalDataDeclarations(): void {\n try {\n const registry = this.resourcesRegistryService?.getResourcesRegistry();\n if (!registry) {\n this.logDebug('Skipping the personal-data declaration report: the resources registry is not available');\n return;\n }\n\n const unanswered = collectApplicationResourcesWithNoPersonalDataDeclaration({\n resourceConfigurations: registry.resourceConfigurations as unknown as Record<string, PersonalDataDeclarationSubject>,\n applicationResourceTypes: registry.applicationResourceTypes,\n });\n\n if (unanswered.length === 0) {\n this.logDebug('Every application resource has answered the personal-data question', {\n applicationResourceCount: registry.applicationResourceTypes.length,\n });\n return;\n }\n\n this.logger.warn(\n 'Application resources have said NOTHING about whether their rows are about people. This is '\n + 'not a claim that they hold personal data — most resources do not — it is that the question '\n + 'is unanswered, so a generated privacy notice can say nothing about them and an erasure '\n + 'request has no instruction for them. Answer it on the resource configuration with any of: '\n + '`retentionPolicy` (RETAIN_ONLY is the checked way to say \"holds no personal data of its '\n + 'own\"), `dataSubjectPolicy`, `systemAccessPolicy.exportSubject`, or a `.dataCategories()` '\n + 'declaration on the fields that hold it.',\n {\n unansweredResourceCount: unanswered.length,\n applicationResourceCount: registry.applicationResourceTypes.length,\n unansweredResources: unanswered,\n },\n );\n } catch (error) {\n // A diagnostic must never be the reason startup fails — the same contract as the two floors.\n this.logDebug('Personal-data declaration report could not run', projectCaughtErrorLogFields(error));\n }\n }\n\n /\n Validate that all components are properly initialized\n /\n private async validateInitialization(options: { headlessMode?: boolean } = {}): Promise<void> {\n this.logDebug('Validating application initialization...');\n\n try {\n // Validate app config is accessible\n if (!this.isPlatformMode) {\n const config = this.appConfigService.config;\n if (!config) {\n const error = this.errorBuilder.buildError(\n ErrorType.CONFIGURATION,\n undefined,\n {customMessageReference: ErrorCustomMessageReference.START_APPLICATION_CONFIGURATION_FAILED}\n );\n throw error;\n }\n }\n\n // Validate resources registry is accessible\n const registry = this.resourcesRegistryService.getResourcesRegistry();\n if (!registry) {\n const error = this.errorBuilder.buildError(\n ErrorType.INTERNAL,\n undefined,\n {customMessageReference: ErrorCustomMessageReference.START_APPLICATION_INITIALIZATION_FAILED}\n );\n throw error;\n }\n\n // Validate repositories registry is accessible\n // const repositoriesDebugInfo = this.repositoriesRegistryService.getDebugInfo();\n // if (!repositoriesDebugInfo.isInitialized) {\n // throw new Error('Repositories registry is not initialized');\n // }\n\n // Validate services registry is accessible\n // const servicesDebugInfo = this.servicesRegistryService.getDebugInfo();\n // if (!servicesDebugInfo.isInitialized) {\n // throw new Error('Services registry is not initialized');\n // }\n\n // Validate controllers registry is accessible\n // const controllersDebugInfo = this.controllersRegistryService.getDebugInfo();\n // if (!controllersDebugInfo.isInitialized) {\n // throw new Error('Controllers registry is not initialized');\n // }\n\n // // Validate HTTP server is running\n // if (!this.httpServerService.isRunning()) {\n // throw new Error('HTTP server is not running');\n // }\n\n const serverInfo = options.headlessMode\n ? undefined\n : this.httpServerService.getServerInfo();\n\n // this.logDebug('Application initialization validation successful', {\n // appName: config.appIdentity.appName,\n // environment: process.env.APPLICATION_ENV,\n // resourcesCount: Object.keys(registry.resourceConfigurations).length,\n // repositoriesCount: repositoriesDebugInfo.repositoryCount,\n // repositoriesOperationPaths: repositoriesDebugInfo.operationPathsCount,\n // servicesCount: servicesDebugInfo.serviceCount,\n // servicesOperationPaths: servicesDebugInfo.operationPathsCount,\n // controllersCount: controllersDebugInfo.controllerCount,\n // controllersOperationPaths: controllersDebugInfo.operationPathsCount,\n // totalRoutes: controllersDebugInfo.totalRoutes,\n // httpServerRunning: this.httpServerService.isRunning(),\n // serverHost: serverInfo?.host,\n // serverPort: serverInfo?.port\n // });\n\n } catch (error) {\n // Validation failure ownership stays with the terminal runtime host.\n throw error;\n }\n }\n\n /\n Ensure the application is initialized before operations\n /\n private ensureInitialized(): void {\n if (!this.isInitialized) {\n const error = this.errorBuilder.buildError(\n ErrorType.INTERNAL,\n undefined,\n { customMessageReference: ErrorCustomMessageReference.START_APPLICATION_STARTUP_FAILED }\n );\n throw error;\n }\n }\n\n protected shouldInitializeHttpServer(options: { headlessMode?: boolean }): boolean {\n return !this.isPlatformMode && !options.headlessMode;\n }\n\n protected shouldSyncCronJobs(options: { skipCronSync?: boolean }): boolean {\n return !this.isPlatformMode && !options.skipCronSync;\n }\n\n private rebindServicesRegistryForRuntime(container: any, registry: ServicesRegistryHandlerBackendService): void {\n if (!container \|\| typeof container.rebind !== 'function') {\n return;\n }\n container.rebind(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService).toConstantValue(registry);\n }\n}\n\n/\n `listAsSystem` returns either a bare array or a paginated envelope depending on whether the caller\n * asked for pagination. The erasure effect's reads never paginate, but narrowing by CAST would be a\n * lie that survives until the day someone adds a pagination argument — normalise instead.\n */\nfunction normalizeSystemListResult<T>(result: T[] \| { data?: T[]; items?: T[] }): T[] {\n if (Array.isArray(result)) return result;\n return result?.data ?? result?.items ?? [];\n}\n\n"]}