enpilink 1.0.2 → 1.0.3

package/dist/server/config/config.test.js

@@ -4,21 +4,28 @@ import path from "node:path";
 import express from "express";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import { MemoryStorageAdapter } from "../storage/memory.js";
-import { MASKED, resolveConfig, validateRuntimeWrite } from "./resolve.js";
+import { MASKED, resetBootSnapshotForTests, resolveConfig, validateConfigWrite, validateRuntimeWrite, } from "./resolve.js";
 import { createConfigRouter } from "./router.js";
 /** A throwaway dir with no enpilink.config.* so file source never interferes. */
 let cwd;
+const RESTART_ENV = ["ENPILINK_STORAGE", "ENPILINK_DB_PATH", "PORT"];
 beforeEach(() => {
     cwd = fs.mkdtempSync(path.join(os.tmpdir(), "enpi-cfg-"));
+    resetBootSnapshotForTests();
 });
 afterEach(() => {
     fs.rmSync(cwd, { recursive: true, force: true });
     // Clean any env we set.
     for (const k of Object.keys(process.env)) {
-        if (k.startsWith("ENPILINK_CFG_") || k === "ENPILINK_ANALYTICS") {
+        if (k.startsWith("ENPILINK_CFG_") ||
+            k === "ENPILINK_ANALYTICS" ||
+            k === "ENPILINK_ADMIN_TOKEN" ||
+            k === "ENPILINK_ADMIN" ||
+            RESTART_ENV.includes(k)) {
             delete process.env[k];
         }
     }
+    resetBootSnapshotForTests();
 });
 describe("resolveConfig precedence", () => {
     it("defaults when no source supplies a value", async () => {
@@ -82,12 +89,20 @@ describe("secret masking", () => {
         const s = settings.find((x) => x.key === "adminAuthToken");
         expect(s?.value).toBeNull();
     });
-    it("bootstrap keys are always env-locked", async () => {
+    it("readonly bootstrap key (admin) is always env-locked", async () => {
         const { settings } = await resolveConfig(null, cwd);
-        for (const key of ["storage", "dbPath", "port", "admin"]) {
+        const s = settings.find((x) => x.key === "admin");
+        expect(s?.tier).toBe("bootstrap");
+        expect(s?.editable).toBe("readonly");
+        expect(s?.envLocked).toBe(true);
+    });
+    it("restart-tier bootstrap keys are editable when not env/file-pinned", async () => {
+        const { settings } = await resolveConfig(null, cwd);
+        for (const key of ["storage", "dbPath", "port"]) {
             const s = settings.find((x) => x.key === key);
             expect(s?.tier).toBe("bootstrap");
-            expect(s?.envLocked).toBe(true);
+            expect(s?.editable).toBe("restart");
+            expect(s?.envLocked).toBe(false);
         }
     });
 });
@@ -164,11 +179,11 @@ describe("config router", () => {
             newValue: 0.4,
         });
     });
-    it("PUT rejects a bootstrap key (403)", async () => {
+    it("PUT rejects a readonly bootstrap key like `admin` (403)", async () => {
         const storage = new MemoryStorageAdapter();
         const app = appWith(storage);
-        const { status } = await request(app, "PUT", "/__enpilink/config/port", {
-            value: 9999,
+        const { status } = await request(app, "PUT", "/__enpilink/config/admin", {
+            value: true,
         });
         expect(status).toBe(403);
     });
@@ -211,4 +226,182 @@ describe("config router", () => {
         expect(json.audit).toEqual([]);
     });
 });
+// --- Per-key metadata (richer ResolvedSetting) ---
+describe("resolved setting metadata", () => {
+    it("exposes label/description/group/unit/default/editable per key", async () => {
+        const { settings } = await resolveConfig(null, cwd);
+        const sample = settings.find((s) => s.key === "analytics.sampleRate");
+        expect(sample?.label).toBe("Sampling rate");
+        expect(typeof sample?.description).toBe("string");
+        expect(sample?.group).toBe("Analytics");
+        expect(sample?.unit).toBe("0–1 ratio");
+        expect(sample?.default).toBe(1);
+        expect(sample?.editable).toBe("runtime");
+    });
+    it("classifies restart vs readonly editability", async () => {
+        const { settings } = await resolveConfig(null, cwd);
+        const byKey = new Map(settings.map((s) => [s.key, s]));
+        expect(byKey.get("port")?.editable).toBe("restart");
+        expect(byKey.get("storage")?.editable).toBe("restart");
+        expect(byKey.get("dbPath")?.editable).toBe("restart");
+        expect(byKey.get("admin")?.editable).toBe("readonly");
+        expect(byKey.get("adminAuthToken")?.editable).toBe("readonly");
+    });
+    it("restart-tier keys NOT pinned by env/file are not env-locked", async () => {
+        const { settings } = await resolveConfig(null, cwd);
+        const port = settings.find((s) => s.key === "port");
+        expect(port?.envLocked).toBe(false);
+        const admin = settings.find((s) => s.key === "admin");
+        // readonly key stays env-locked (read-only) even without an env pin.
+        expect(admin?.envLocked).toBe(true);
+    });
+    it("modified=true only when a DB override differs from the default", async () => {
+        const storage = new MemoryStorageAdapter();
+        await storage.setConfig("retention.events", 9999);
+        const { settings } = await resolveConfig(storage, cwd);
+        const s = settings.find((x) => x.key === "retention.events");
+        expect(s?.modified).toBe(true);
+        // an untouched key is not modified
+        const other = settings.find((x) => x.key === "analytics.sampleRate");
+        expect(other?.modified).toBe(false);
+    });
+});
+// --- Restart-tier writes + restartRequired ---
+describe("restart-tier editability", () => {
+    it("validateConfigWrite accepts a restart key, rejects secret", () => {
+        expect(validateConfigWrite("port", 8080).ok).toBe(true);
+        expect(validateConfigWrite("storage", "sqlite").ok).toBe(true);
+        expect(validateConfigWrite("adminAuthToken", "x").ok).toBe(false);
+        expect(validateConfigWrite("admin", true).ok).toBe(false);
+    });
+    it("PUT a restart key persists + flags restartRequired", async () => {
+        const storage = new MemoryStorageAdapter();
+        const app = appWith(storage);
+        const { status, json } = await request(app, "PUT", "/__enpilink/config/port", {
+            value: 8080,
+        });
+        expect(status).toBe(200);
+        expect(json.restartRequired).toBe(true);
+        expect(await storage.getConfig("port")).toBe(8080);
+        // The boot snapshot is the default 3000; the persisted 8080 differs → pending.
+        const { settings } = await resolveConfig(storage, cwd);
+        const port = settings.find((s) => s.key === "port");
+        expect(port?.source).toBe("db");
+        expect(port?.value).toBe(8080);
+        expect(port?.restartRequired).toBe(true);
+    });
+    it("restartRequired is false when the DB value equals the booted value", async () => {
+        const storage = new MemoryStorageAdapter();
+        // booted with default 3000; persist the same value
+        await storage.setConfig("port", 3000);
+        const { settings } = await resolveConfig(storage, cwd);
+        const port = settings.find((s) => s.key === "port");
+        expect(port?.restartRequired).toBe(false);
+    });
+    it("PUT a restart key 409s when env-pinned (envLocked)", async () => {
+        process.env.PORT = "4000";
+        resetBootSnapshotForTests();
+        const storage = new MemoryStorageAdapter();
+        const app = appWith(storage);
+        const { status } = await request(app, "PUT", "/__enpilink/config/port", {
+            value: 8080,
+        });
+        expect(status).toBe(409);
+    });
+});
+// --- Security guardrails ---
+describe("write guardrails (PUT + DELETE)", () => {
+    it("PUT rejects `admin` (403) — never web-editable", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        const { status } = await request(app, "PUT", "/__enpilink/config/admin", {
+            value: true,
+        });
+        expect(status).toBe(403);
+    });
+    it("PUT rejects `adminAuthToken` (403) — secret", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        const { status } = await request(app, "PUT", "/__enpilink/config/adminAuthToken", { value: "leak" });
+        expect(status).toBe(403);
+    });
+    it("PUT rejects an unknown key (404)", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        const { status } = await request(app, "PUT", "/__enpilink/config/nope", {
+            value: 1,
+        });
+        expect(status).toBe(404);
+    });
+    it("PUT rejects an env-locked runtime key (409)", async () => {
+        process.env.ENPILINK_CFG_FLAGS_LIVE_LOGS = "false";
+        const app = appWith(new MemoryStorageAdapter());
+        const { status } = await request(app, "PUT", "/__enpilink/config/flags.liveLogs", { value: true });
+        expect(status).toBe(409);
+    });
+    it("DELETE rejects `admin`/`adminAuthToken`/unknown the same way", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        expect((await request(app, "DELETE", "/__enpilink/config/admin")).status).toBe(403);
+        expect((await request(app, "DELETE", "/__enpilink/config/adminAuthToken"))
+            .status).toBe(403);
+        expect((await request(app, "DELETE", "/__enpilink/config/nope")).status).toBe(404);
+    });
+});
+// --- Reset to default ---
+describe("reset to default (DELETE)", () => {
+    it("clears a DB override and falls back to default + audits", async () => {
+        const storage = new MemoryStorageAdapter();
+        await storage.setConfig("retention.events", 9999, "tester");
+        const app = appWith(storage);
+        const { status, json } = await request(app, "DELETE", "/__enpilink/config/retention.events");
+        expect(status).toBe(200);
+        expect(json.reset).toBe(true);
+        // Override gone → resolution falls back to the default.
+        const { settings } = await resolveConfig(storage, cwd);
+        const s = settings.find((x) => x.key === "retention.events");
+        expect(s?.source).toBe("default");
+        expect(s?.value).toBe(5000);
+        expect(s?.modified).toBe(false);
+        // Audit recorded the reset (most recent first; router actor = "dev").
+        const audit = await storage.getConfigAudit();
+        expect(audit[0]).toMatchObject({ key: "retention.events", actor: "dev" });
+    });
+    it("DELETE with no storage → 409", async () => {
+        const app = appWith(null);
+        const { status } = await request(app, "DELETE", "/__enpilink/config/flags.liveLogs");
+        expect(status).toBe(409);
+    });
+});
+// --- Presets ---
+describe("presets", () => {
+    it("GET /config/presets lists Dev + Prod with values", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        const { status, json } = await request(app, "GET", "/__enpilink/config/presets");
+        expect(status).toBe(200);
+        const presets = json.presets;
+        expect(presets.map((p) => p.name).sort()).toEqual(["dev", "prod"]);
+    });
+    it("POST applies a preset to runtime keys + audits", async () => {
+        const storage = new MemoryStorageAdapter();
+        const app = appWith(storage);
+        const { status, json } = await request(app, "POST", "/__enpilink/config/preset/prod");
+        expect(status).toBe(200);
+        const body = json;
+        expect(body.applied.length).toBeGreaterThan(0);
+        expect(await storage.getConfig("analytics.sampleRate")).toBe(0.25);
+        expect(await storage.getConfig("flags.liveLogs")).toBe(false);
+    });
+    it("POST skips env-locked keys, reporting them", async () => {
+        process.env.ENPILINK_CFG_ANALYTICS_SAMPLE_RATE = "1";
+        const storage = new MemoryStorageAdapter();
+        const app = appWith(storage);
+        const { json } = await request(app, "POST", "/__enpilink/config/preset/prod");
+        const body = json;
+        expect(body.skipped.some((s) => s.key === "analytics.sampleRate")).toBe(true);
+        // env-pinned key was NOT persisted
+        expect(await storage.getConfig("analytics.sampleRate")).toBeUndefined();
+    });
+    it("POST unknown preset → 404", async () => {
+        const app = appWith(new MemoryStorageAdapter());
+        const { status } = await request(app, "POST", "/__enpilink/config/preset/nope");
+        expect(status).toBe(404);
+    });
+});
 //# sourceMappingURL=config.test.js.map

package/dist/server/config/config.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../src/server/config/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,iFAAiF;AACjF,IAAI,GAAW,CAAC;AAEhB,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,wBAAwB;IACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAChE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAChD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,MAAM,CAAC;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,MAAM,CAAC;QACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;QACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mCAAmC;AAEnC,KAAK,UAAU,OAAO,CACpB,GAAoB,EACpB,MAAc,EACd,GAAW,EACX,IAAc;IAEd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,GAAG,EAAE,EAAE;YACxD,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAA8B;IAC7C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAI,IAAgC,CAAC,QAAQ,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,yCAAyC,EACzC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAAwB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7B,GAAG,EAAE,sBAAsB;YAC3B,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE;YACtE,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE;YACtE,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,yCAAyC,EACzC,EAAE,KAAK,EAAE,EAAE,EAAE,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,KAAK,GAAI,IAA0C,CAAC,KAAK,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAA6B,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport express from \"express\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\nimport { MemoryStorageAdapter } from \"../storage/memory.js\";\nimport type { StorageAdapter } from \"../storage/types.js\";\nimport { MASKED, resolveConfig, validateRuntimeWrite } from \"./resolve.js\";\nimport { createConfigRouter } from \"./router.js\";\n\n/** A throwaway dir with no enpilink.config.* so file source never interferes. */\nlet cwd: string;\n\nbeforeEach(() => {\n  cwd = fs.mkdtempSync(path.join(os.tmpdir(), \"enpi-cfg-\"));\n});\nafterEach(() => {\n  fs.rmSync(cwd, { recursive: true, force: true });\n  // Clean any env we set.\n  for (const k of Object.keys(process.env)) {\n    if (k.startsWith(\"ENPILINK_CFG_\") || k === \"ENPILINK_ANALYTICS\") {\n      delete process.env[k];\n    }\n  }\n});\n\ndescribe(\"resolveConfig precedence\", () => {\n  it(\"defaults when no source supplies a value\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.value).toBe(1);\n    expect(s?.source).toBe(\"default\");\n    expect(s?.envLocked).toBe(false);\n  });\n\n  it(\"db beats default for runtime keys\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25, \"tester\");\n    const { settings, values } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"db\");\n    expect(s?.value).toBe(0.25);\n    expect(values[\"analytics.sampleRate\"]).toBe(0.25);\n  });\n\n  it(\"file beats db\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25);\n    fs.writeFileSync(\n      path.join(cwd, \"enpilink.config.json\"),\n      JSON.stringify({ \"analytics.sampleRate\": 0.5 }),\n    );\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"file\");\n    expect(s?.value).toBe(0.5);\n    expect(s?.envLocked).toBe(true); // file pins it → read-only in UI\n  });\n\n  it(\"env beats file and db\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25);\n    fs.writeFileSync(\n      path.join(cwd, \"enpilink.config.json\"),\n      JSON.stringify({ \"analytics.sampleRate\": 0.5 }),\n    );\n    process.env.ENPILINK_CFG_ANALYTICS_SAMPLE_RATE = \"0.75\";\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"env\");\n    expect(s?.value).toBe(0.75);\n    expect(s?.envLocked).toBe(true);\n  });\n\n  it(\"coerces env booleans/numbers to typed values\", async () => {\n    process.env.ENPILINK_CFG_FLAGS_LIVE_LOGS = \"false\";\n    process.env.ENPILINK_CFG_RETENTION_EVENTS = \"1234\";\n    const { values } = await resolveConfig(null, cwd);\n    expect(values[\"flags.liveLogs\"]).toBe(false);\n    expect(values[\"retention.events\"]).toBe(1234);\n  });\n});\n\ndescribe(\"secret masking\", () => {\n  it(\"never returns a secret value in plaintext\", async () => {\n    process.env.ENPILINK_ADMIN_TOKEN = \"super-secret-xyz\";\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"adminAuthToken\");\n    expect(s?.secret).toBe(true);\n    expect(s?.envLocked).toBe(true);\n    expect(s?.value).toBe(MASKED);\n    expect(JSON.stringify(settings)).not.toContain(\"super-secret-xyz\");\n    delete process.env.ENPILINK_ADMIN_TOKEN;\n  });\n\n  it(\"unset secret reports null, not masked\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"adminAuthToken\");\n    expect(s?.value).toBeNull();\n  });\n\n  it(\"bootstrap keys are always env-locked\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    for (const key of [\"storage\", \"dbPath\", \"port\", \"admin\"]) {\n      const s = settings.find((x) => x.key === key);\n      expect(s?.tier).toBe(\"bootstrap\");\n      expect(s?.envLocked).toBe(true);\n    }\n  });\n});\n\ndescribe(\"validateRuntimeWrite\", () => {\n  it(\"accepts a valid runtime value\", () => {\n    const r = validateRuntimeWrite(\"analytics.sampleRate\", 0.3);\n    expect(r.ok).toBe(true);\n    if (r.ok) {\n      expect(r.value).toBe(0.3);\n    }\n  });\n  it(\"coerces a stringy boolean for a flag\", () => {\n    const r = validateRuntimeWrite(\"flags.liveLogs\", \"true\");\n    expect(r.ok).toBe(true);\n    if (r.ok) {\n      expect(r.value).toBe(true);\n    }\n  });\n  it(\"rejects out-of-range\", () => {\n    const r = validateRuntimeWrite(\"analytics.sampleRate\", 5);\n    expect(r.ok).toBe(false);\n  });\n  it(\"rejects bootstrap key\", () => {\n    expect(validateRuntimeWrite(\"port\", 8080).ok).toBe(false);\n  });\n  it(\"rejects secret key\", () => {\n    expect(validateRuntimeWrite(\"adminAuthToken\", \"x\").ok).toBe(false);\n  });\n});\n\n// --- Router integration tests ---\n\nasync function request(\n  app: express.Express,\n  method: string,\n  url: string,\n  body?: unknown,\n): Promise<{ status: number; json: unknown }> {\n  const { createServer } = await import(\"node:http\");\n  const server = createServer(app);\n  await new Promise<void>((r) => server.listen(0, r));\n  const addr = server.address();\n  const port = typeof addr === \"object\" && addr ? addr.port : 0;\n  try {\n    const res = await fetch(`http://127.0.0.1:${port}${url}`, {\n      method,\n      headers: body ? { \"content-type\": \"application/json\" } : undefined,\n      body: body ? JSON.stringify(body) : undefined,\n    });\n    return { status: res.status, json: await res.json().catch(() => null) };\n  } finally {\n    await new Promise<void>((r) => server.close(() => r()));\n  }\n}\n\nfunction appWith(storage: StorageAdapter | null): express.Express {\n  const app = express();\n  app.use(express.json());\n  app.use(createConfigRouter(() => storage));\n  return app;\n}\n\ndescribe(\"config router\", () => {\n  it(\"GET /config returns settings; never 500 with no storage\", async () => {\n    const app = appWith(null);\n    const { status, json } = await request(app, \"GET\", \"/__enpilink/config\");\n    expect(status).toBe(200);\n    const settings = (json as { settings: unknown[] }).settings;\n    expect(Array.isArray(settings)).toBe(true);\n    expect(settings.length).toBeGreaterThan(0);\n  });\n\n  it(\"PUT a runtime key persists + writes an audit row\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.sampleRate\",\n      { value: 0.4 },\n    );\n    expect(status).toBe(200);\n    expect((json as { ok: boolean }).ok).toBe(true);\n    expect(await storage.getConfig(\"analytics.sampleRate\")).toBe(0.4);\n    const audit = await storage.getConfigAudit();\n    expect(audit[0]).toMatchObject({\n      key: \"analytics.sampleRate\",\n      newValue: 0.4,\n    });\n  });\n\n  it(\"PUT rejects a bootstrap key (403)\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/port\", {\n      value: 9999,\n    });\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects a secret key (403)\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/adminAuthToken\",\n      { value: \"x\" },\n    );\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects an unknown key (404)\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/nope\", {\n      value: 1,\n    });\n    expect(status).toBe(404);\n  });\n\n  it(\"PUT rejects an out-of-range runtime value (400)\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.sampleRate\",\n      { value: 99 },\n    );\n    expect(status).toBe(400);\n  });\n\n  it(\"PUT with no storage → 409 (nowhere to persist)\", async () => {\n    const app = appWith(null);\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/flags.liveLogs\",\n      { value: false },\n    );\n    expect(status).toBe(409);\n  });\n\n  it(\"GET /config/audit surfaces entries\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"flags.liveLogs\", false, \"tester\");\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"GET\",\n      \"/__enpilink/config/audit\",\n    );\n    expect(status).toBe(200);\n    const audit = (json as { audit: Array<{ key: string }> }).audit;\n    expect(audit[0]?.key).toBe(\"flags.liveLogs\");\n  });\n\n  it(\"GET /config/audit with no storage → empty, never 500\", async () => {\n    const app = appWith(null);\n    const { status, json } = await request(\n      app,\n      \"GET\",\n      \"/__enpilink/config/audit\",\n    );\n    expect(status).toBe(200);\n    expect((json as { audit: unknown[] }).audit).toEqual([]);\n  });\n});\n"]}
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../src/server/config/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EACL,MAAM,EACN,yBAAyB,EACzB,aAAa,EACb,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,iFAAiF;AACjF,IAAI,GAAW,CAAC;AAEhB,MAAM,WAAW,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAErE,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1D,yBAAyB,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,wBAAwB;IACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IACE,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;YAC7B,CAAC,KAAK,oBAAoB;YAC1B,CAAC,KAAK,sBAAsB;YAC5B,CAAC,KAAK,gBAAgB;YACtB,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EACvB,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,yBAAyB,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAChD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,MAAM,CAAC;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,MAAM,CAAC;QACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;QACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,oBAAoB,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mCAAmC;AAEnC,KAAK,UAAU,OAAO,CACpB,GAAoB,EACpB,MAAc,EACd,GAAW,EACX,IAAc;IAEd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,GAAG,EAAE,EAAE;YACxD,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAA8B;IAC7C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAI,IAAgC,CAAC,QAAQ,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,yCAAyC,EACzC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAAwB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7B,GAAG,EAAE,sBAAsB;YAC3B,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE;YACvE,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE;YACtE,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,yCAAyC,EACzC,EAAE,KAAK,EAAE,EAAE,EAAE,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,KAAK,GAAI,IAA0C,CAAC,KAAK,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAA6B,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oDAAoD;AAEpD,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QACtD,qEAAqE;QACrE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,mCAAmC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gDAAgD;AAEhD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,yBAAyB,EACzB;YACE,KAAK,EAAE,IAAI;SACZ,CACF,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAAqC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnD,+EAA+E;QAC/E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,mDAAmD;QACnD,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;QAC1B,yBAAyB,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE;YACtE,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8BAA8B;AAE9B,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE;YACvE,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE;YACtE,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAC;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,KAAK,EACL,mCAAmC,EACnC,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,CACJ,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAClE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,CACJ,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;aAChE,MAAM,CACV,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,CACJ,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC,MAAM,CACjE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAE3B,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,QAAQ,EACR,qCAAqC,CACtC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,wDAAwD;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,QAAQ,EACR,mCAAmC,CACpC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,kBAAkB;AAElB,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,KAAK,EACL,4BAA4B,CAC7B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,OAAO,GAAI,IAA6C,CAAC,OAAO,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CACpC,GAAG,EACH,MAAM,EACN,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAGZ,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,GAAG,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAC5B,GAAG,EACH,MAAM,EACN,gCAAgC,CACjC,CAAC;QACF,MAAM,IAAI,GAAG,IAGZ,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CACrE,IAAI,CACL,CAAC;QACF,mCAAmC;QACnC,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAC9B,GAAG,EACH,MAAM,EACN,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport express from \"express\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\nimport { MemoryStorageAdapter } from \"../storage/memory.js\";\nimport type { StorageAdapter } from \"../storage/types.js\";\nimport {\n  MASKED,\n  resetBootSnapshotForTests,\n  resolveConfig,\n  validateConfigWrite,\n  validateRuntimeWrite,\n} from \"./resolve.js\";\nimport { createConfigRouter } from \"./router.js\";\n\n/** A throwaway dir with no enpilink.config.* so file source never interferes. */\nlet cwd: string;\n\nconst RESTART_ENV = [\"ENPILINK_STORAGE\", \"ENPILINK_DB_PATH\", \"PORT\"];\n\nbeforeEach(() => {\n  cwd = fs.mkdtempSync(path.join(os.tmpdir(), \"enpi-cfg-\"));\n  resetBootSnapshotForTests();\n});\nafterEach(() => {\n  fs.rmSync(cwd, { recursive: true, force: true });\n  // Clean any env we set.\n  for (const k of Object.keys(process.env)) {\n    if (\n      k.startsWith(\"ENPILINK_CFG_\") ||\n      k === \"ENPILINK_ANALYTICS\" ||\n      k === \"ENPILINK_ADMIN_TOKEN\" ||\n      k === \"ENPILINK_ADMIN\" ||\n      RESTART_ENV.includes(k)\n    ) {\n      delete process.env[k];\n    }\n  }\n  resetBootSnapshotForTests();\n});\n\ndescribe(\"resolveConfig precedence\", () => {\n  it(\"defaults when no source supplies a value\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.value).toBe(1);\n    expect(s?.source).toBe(\"default\");\n    expect(s?.envLocked).toBe(false);\n  });\n\n  it(\"db beats default for runtime keys\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25, \"tester\");\n    const { settings, values } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"db\");\n    expect(s?.value).toBe(0.25);\n    expect(values[\"analytics.sampleRate\"]).toBe(0.25);\n  });\n\n  it(\"file beats db\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25);\n    fs.writeFileSync(\n      path.join(cwd, \"enpilink.config.json\"),\n      JSON.stringify({ \"analytics.sampleRate\": 0.5 }),\n    );\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"file\");\n    expect(s?.value).toBe(0.5);\n    expect(s?.envLocked).toBe(true); // file pins it → read-only in UI\n  });\n\n  it(\"env beats file and db\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"analytics.sampleRate\", 0.25);\n    fs.writeFileSync(\n      path.join(cwd, \"enpilink.config.json\"),\n      JSON.stringify({ \"analytics.sampleRate\": 0.5 }),\n    );\n    process.env.ENPILINK_CFG_ANALYTICS_SAMPLE_RATE = \"0.75\";\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(s?.source).toBe(\"env\");\n    expect(s?.value).toBe(0.75);\n    expect(s?.envLocked).toBe(true);\n  });\n\n  it(\"coerces env booleans/numbers to typed values\", async () => {\n    process.env.ENPILINK_CFG_FLAGS_LIVE_LOGS = \"false\";\n    process.env.ENPILINK_CFG_RETENTION_EVENTS = \"1234\";\n    const { values } = await resolveConfig(null, cwd);\n    expect(values[\"flags.liveLogs\"]).toBe(false);\n    expect(values[\"retention.events\"]).toBe(1234);\n  });\n});\n\ndescribe(\"secret masking\", () => {\n  it(\"never returns a secret value in plaintext\", async () => {\n    process.env.ENPILINK_ADMIN_TOKEN = \"super-secret-xyz\";\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"adminAuthToken\");\n    expect(s?.secret).toBe(true);\n    expect(s?.envLocked).toBe(true);\n    expect(s?.value).toBe(MASKED);\n    expect(JSON.stringify(settings)).not.toContain(\"super-secret-xyz\");\n    delete process.env.ENPILINK_ADMIN_TOKEN;\n  });\n\n  it(\"unset secret reports null, not masked\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"adminAuthToken\");\n    expect(s?.value).toBeNull();\n  });\n\n  it(\"readonly bootstrap key (admin) is always env-locked\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const s = settings.find((x) => x.key === \"admin\");\n    expect(s?.tier).toBe(\"bootstrap\");\n    expect(s?.editable).toBe(\"readonly\");\n    expect(s?.envLocked).toBe(true);\n  });\n\n  it(\"restart-tier bootstrap keys are editable when not env/file-pinned\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    for (const key of [\"storage\", \"dbPath\", \"port\"]) {\n      const s = settings.find((x) => x.key === key);\n      expect(s?.tier).toBe(\"bootstrap\");\n      expect(s?.editable).toBe(\"restart\");\n      expect(s?.envLocked).toBe(false);\n    }\n  });\n});\n\ndescribe(\"validateRuntimeWrite\", () => {\n  it(\"accepts a valid runtime value\", () => {\n    const r = validateRuntimeWrite(\"analytics.sampleRate\", 0.3);\n    expect(r.ok).toBe(true);\n    if (r.ok) {\n      expect(r.value).toBe(0.3);\n    }\n  });\n  it(\"coerces a stringy boolean for a flag\", () => {\n    const r = validateRuntimeWrite(\"flags.liveLogs\", \"true\");\n    expect(r.ok).toBe(true);\n    if (r.ok) {\n      expect(r.value).toBe(true);\n    }\n  });\n  it(\"rejects out-of-range\", () => {\n    const r = validateRuntimeWrite(\"analytics.sampleRate\", 5);\n    expect(r.ok).toBe(false);\n  });\n  it(\"rejects bootstrap key\", () => {\n    expect(validateRuntimeWrite(\"port\", 8080).ok).toBe(false);\n  });\n  it(\"rejects secret key\", () => {\n    expect(validateRuntimeWrite(\"adminAuthToken\", \"x\").ok).toBe(false);\n  });\n});\n\n// --- Router integration tests ---\n\nasync function request(\n  app: express.Express,\n  method: string,\n  url: string,\n  body?: unknown,\n): Promise<{ status: number; json: unknown }> {\n  const { createServer } = await import(\"node:http\");\n  const server = createServer(app);\n  await new Promise<void>((r) => server.listen(0, r));\n  const addr = server.address();\n  const port = typeof addr === \"object\" && addr ? addr.port : 0;\n  try {\n    const res = await fetch(`http://127.0.0.1:${port}${url}`, {\n      method,\n      headers: body ? { \"content-type\": \"application/json\" } : undefined,\n      body: body ? JSON.stringify(body) : undefined,\n    });\n    return { status: res.status, json: await res.json().catch(() => null) };\n  } finally {\n    await new Promise<void>((r) => server.close(() => r()));\n  }\n}\n\nfunction appWith(storage: StorageAdapter | null): express.Express {\n  const app = express();\n  app.use(express.json());\n  app.use(createConfigRouter(() => storage));\n  return app;\n}\n\ndescribe(\"config router\", () => {\n  it(\"GET /config returns settings; never 500 with no storage\", async () => {\n    const app = appWith(null);\n    const { status, json } = await request(app, \"GET\", \"/__enpilink/config\");\n    expect(status).toBe(200);\n    const settings = (json as { settings: unknown[] }).settings;\n    expect(Array.isArray(settings)).toBe(true);\n    expect(settings.length).toBeGreaterThan(0);\n  });\n\n  it(\"PUT a runtime key persists + writes an audit row\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.sampleRate\",\n      { value: 0.4 },\n    );\n    expect(status).toBe(200);\n    expect((json as { ok: boolean }).ok).toBe(true);\n    expect(await storage.getConfig(\"analytics.sampleRate\")).toBe(0.4);\n    const audit = await storage.getConfigAudit();\n    expect(audit[0]).toMatchObject({\n      key: \"analytics.sampleRate\",\n      newValue: 0.4,\n    });\n  });\n\n  it(\"PUT rejects a readonly bootstrap key like `admin` (403)\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/admin\", {\n      value: true,\n    });\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects a secret key (403)\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/adminAuthToken\",\n      { value: \"x\" },\n    );\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects an unknown key (404)\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/nope\", {\n      value: 1,\n    });\n    expect(status).toBe(404);\n  });\n\n  it(\"PUT rejects an out-of-range runtime value (400)\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.sampleRate\",\n      { value: 99 },\n    );\n    expect(status).toBe(400);\n  });\n\n  it(\"PUT with no storage → 409 (nowhere to persist)\", async () => {\n    const app = appWith(null);\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/flags.liveLogs\",\n      { value: false },\n    );\n    expect(status).toBe(409);\n  });\n\n  it(\"GET /config/audit surfaces entries\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"flags.liveLogs\", false, \"tester\");\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"GET\",\n      \"/__enpilink/config/audit\",\n    );\n    expect(status).toBe(200);\n    const audit = (json as { audit: Array<{ key: string }> }).audit;\n    expect(audit[0]?.key).toBe(\"flags.liveLogs\");\n  });\n\n  it(\"GET /config/audit with no storage → empty, never 500\", async () => {\n    const app = appWith(null);\n    const { status, json } = await request(\n      app,\n      \"GET\",\n      \"/__enpilink/config/audit\",\n    );\n    expect(status).toBe(200);\n    expect((json as { audit: unknown[] }).audit).toEqual([]);\n  });\n});\n\n// --- Per-key metadata (richer ResolvedSetting) ---\n\ndescribe(\"resolved setting metadata\", () => {\n  it(\"exposes label/description/group/unit/default/editable per key\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const sample = settings.find((s) => s.key === \"analytics.sampleRate\");\n    expect(sample?.label).toBe(\"Sampling rate\");\n    expect(typeof sample?.description).toBe(\"string\");\n    expect(sample?.group).toBe(\"Analytics\");\n    expect(sample?.unit).toBe(\"0–1 ratio\");\n    expect(sample?.default).toBe(1);\n    expect(sample?.editable).toBe(\"runtime\");\n  });\n\n  it(\"classifies restart vs readonly editability\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const byKey = new Map(settings.map((s) => [s.key, s]));\n    expect(byKey.get(\"port\")?.editable).toBe(\"restart\");\n    expect(byKey.get(\"storage\")?.editable).toBe(\"restart\");\n    expect(byKey.get(\"dbPath\")?.editable).toBe(\"restart\");\n    expect(byKey.get(\"admin\")?.editable).toBe(\"readonly\");\n    expect(byKey.get(\"adminAuthToken\")?.editable).toBe(\"readonly\");\n  });\n\n  it(\"restart-tier keys NOT pinned by env/file are not env-locked\", async () => {\n    const { settings } = await resolveConfig(null, cwd);\n    const port = settings.find((s) => s.key === \"port\");\n    expect(port?.envLocked).toBe(false);\n    const admin = settings.find((s) => s.key === \"admin\");\n    // readonly key stays env-locked (read-only) even without an env pin.\n    expect(admin?.envLocked).toBe(true);\n  });\n\n  it(\"modified=true only when a DB override differs from the default\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"retention.events\", 9999);\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"retention.events\");\n    expect(s?.modified).toBe(true);\n    // an untouched key is not modified\n    const other = settings.find((x) => x.key === \"analytics.sampleRate\");\n    expect(other?.modified).toBe(false);\n  });\n});\n\n// --- Restart-tier writes + restartRequired ---\n\ndescribe(\"restart-tier editability\", () => {\n  it(\"validateConfigWrite accepts a restart key, rejects secret\", () => {\n    expect(validateConfigWrite(\"port\", 8080).ok).toBe(true);\n    expect(validateConfigWrite(\"storage\", \"sqlite\").ok).toBe(true);\n    expect(validateConfigWrite(\"adminAuthToken\", \"x\").ok).toBe(false);\n    expect(validateConfigWrite(\"admin\", true).ok).toBe(false);\n  });\n\n  it(\"PUT a restart key persists + flags restartRequired\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/port\",\n      {\n        value: 8080,\n      },\n    );\n    expect(status).toBe(200);\n    expect((json as { restartRequired: boolean }).restartRequired).toBe(true);\n    expect(await storage.getConfig(\"port\")).toBe(8080);\n\n    // The boot snapshot is the default 3000; the persisted 8080 differs → pending.\n    const { settings } = await resolveConfig(storage, cwd);\n    const port = settings.find((s) => s.key === \"port\");\n    expect(port?.source).toBe(\"db\");\n    expect(port?.value).toBe(8080);\n    expect(port?.restartRequired).toBe(true);\n  });\n\n  it(\"restartRequired is false when the DB value equals the booted value\", async () => {\n    const storage = new MemoryStorageAdapter();\n    // booted with default 3000; persist the same value\n    await storage.setConfig(\"port\", 3000);\n    const { settings } = await resolveConfig(storage, cwd);\n    const port = settings.find((s) => s.key === \"port\");\n    expect(port?.restartRequired).toBe(false);\n  });\n\n  it(\"PUT a restart key 409s when env-pinned (envLocked)\", async () => {\n    process.env.PORT = \"4000\";\n    resetBootSnapshotForTests();\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/port\", {\n      value: 8080,\n    });\n    expect(status).toBe(409);\n  });\n});\n\n// --- Security guardrails ---\n\ndescribe(\"write guardrails (PUT + DELETE)\", () => {\n  it(\"PUT rejects `admin` (403) — never web-editable\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/admin\", {\n      value: true,\n    });\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects `adminAuthToken` (403) — secret\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/adminAuthToken\",\n      { value: \"leak\" },\n    );\n    expect(status).toBe(403);\n  });\n\n  it(\"PUT rejects an unknown key (404)\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(app, \"PUT\", \"/__enpilink/config/nope\", {\n      value: 1,\n    });\n    expect(status).toBe(404);\n  });\n\n  it(\"PUT rejects an env-locked runtime key (409)\", async () => {\n    process.env.ENPILINK_CFG_FLAGS_LIVE_LOGS = \"false\";\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/flags.liveLogs\",\n      { value: true },\n    );\n    expect(status).toBe(409);\n  });\n\n  it(\"DELETE rejects `admin`/`adminAuthToken`/unknown the same way\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    expect(\n      (await request(app, \"DELETE\", \"/__enpilink/config/admin\")).status,\n    ).toBe(403);\n    expect(\n      (await request(app, \"DELETE\", \"/__enpilink/config/adminAuthToken\"))\n        .status,\n    ).toBe(403);\n    expect(\n      (await request(app, \"DELETE\", \"/__enpilink/config/nope\")).status,\n    ).toBe(404);\n  });\n});\n\n// --- Reset to default ---\n\ndescribe(\"reset to default (DELETE)\", () => {\n  it(\"clears a DB override and falls back to default + audits\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.setConfig(\"retention.events\", 9999, \"tester\");\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"DELETE\",\n      \"/__enpilink/config/retention.events\",\n    );\n    expect(status).toBe(200);\n    expect((json as { reset: boolean }).reset).toBe(true);\n    // Override gone → resolution falls back to the default.\n    const { settings } = await resolveConfig(storage, cwd);\n    const s = settings.find((x) => x.key === \"retention.events\");\n    expect(s?.source).toBe(\"default\");\n    expect(s?.value).toBe(5000);\n    expect(s?.modified).toBe(false);\n    // Audit recorded the reset (most recent first; router actor = \"dev\").\n    const audit = await storage.getConfigAudit();\n    expect(audit[0]).toMatchObject({ key: \"retention.events\", actor: \"dev\" });\n  });\n\n  it(\"DELETE with no storage → 409\", async () => {\n    const app = appWith(null);\n    const { status } = await request(\n      app,\n      \"DELETE\",\n      \"/__enpilink/config/flags.liveLogs\",\n    );\n    expect(status).toBe(409);\n  });\n});\n\n// --- Presets ---\n\ndescribe(\"presets\", () => {\n  it(\"GET /config/presets lists Dev + Prod with values\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status, json } = await request(\n      app,\n      \"GET\",\n      \"/__enpilink/config/presets\",\n    );\n    expect(status).toBe(200);\n    const presets = (json as { presets: Array<{ name: string }> }).presets;\n    expect(presets.map((p) => p.name).sort()).toEqual([\"dev\", \"prod\"]);\n  });\n\n  it(\"POST applies a preset to runtime keys + audits\", async () => {\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { status, json } = await request(\n      app,\n      \"POST\",\n      \"/__enpilink/config/preset/prod\",\n    );\n    expect(status).toBe(200);\n    const body = json as {\n      applied: { key: string }[];\n      skipped: { key: string }[];\n    };\n    expect(body.applied.length).toBeGreaterThan(0);\n    expect(await storage.getConfig(\"analytics.sampleRate\")).toBe(0.25);\n    expect(await storage.getConfig(\"flags.liveLogs\")).toBe(false);\n  });\n\n  it(\"POST skips env-locked keys, reporting them\", async () => {\n    process.env.ENPILINK_CFG_ANALYTICS_SAMPLE_RATE = \"1\";\n    const storage = new MemoryStorageAdapter();\n    const app = appWith(storage);\n    const { json } = await request(\n      app,\n      \"POST\",\n      \"/__enpilink/config/preset/prod\",\n    );\n    const body = json as {\n      applied: { key: string }[];\n      skipped: { key: string; reason: string }[];\n    };\n    expect(body.skipped.some((s) => s.key === \"analytics.sampleRate\")).toBe(\n      true,\n    );\n    // env-pinned key was NOT persisted\n    expect(await storage.getConfig(\"analytics.sampleRate\")).toBeUndefined();\n  });\n\n  it(\"POST unknown preset → 404\", async () => {\n    const app = appWith(new MemoryStorageAdapter());\n    const { status } = await request(\n      app,\n      \"POST\",\n      \"/__enpilink/config/preset/nope\",\n    );\n    expect(status).toBe(404);\n  });\n});\n"]}

package/dist/server/config/index.d.ts

@@ -1,3 +1,4 @@
-export { type ConfigSource, loadConfigFile, MASKED, type ResolvedConfig, type ResolvedSetting, resolveConfig, validateRuntimeWrite, } from "./resolve.js";
+export { getPreset, PRESET_NAMES, PRESETS, type Preset, } from "./presets.js";
+export { type ConfigSource, loadConfigFile, MASKED, type ResolvedConfig, type ResolvedSetting, resolveConfig, validateConfigWrite, validateRuntimeWrite, } from "./resolve.js";
 export { createConfigRouter } from "./router.js";
-export { allKeyMeta, BOOTSTRAP_KEYS, type BootstrapConfig, type BootstrapKey, bootstrapSchema, type Config, type ConfigKey, configSchema, ENV_VARS, isBootstrapKey, isKnownKey, isRuntimeKey, isSecretKey, type KeyMeta, keyMeta, RUNTIME_KEYS, type RuntimeConfig, type RuntimeKey, runtimeSchema, SECRET_KEYS, } from "./schema.js";
+export { allKeyMeta, BOOTSTRAP_KEYS, type BootstrapConfig, type BootstrapKey, bootstrapSchema, type Config, type ConfigKey, configSchema, defaultForKey, type Editable, ENV_VARS, editableOf, isBootstrapKey, isKnownKey, isRestartKey, isRuntimeKey, isSecretKey, type KeyMeta, keyMeta, RESTART_KEYS, RUNTIME_KEYS, type RuntimeConfig, type RuntimeKey, runtimeSchema, SECRET_KEYS, } from "./schema.js";

package/dist/server/config/index.js

@@ -1,4 +1,5 @@
-export { loadConfigFile, MASKED, resolveConfig, validateRuntimeWrite, } from "./resolve.js";
+export { getPreset, PRESET_NAMES, PRESETS, } from "./presets.js";
+export { loadConfigFile, MASKED, resolveConfig, validateConfigWrite, validateRuntimeWrite, } from "./resolve.js";
 export { createConfigRouter } from "./router.js";
-export { allKeyMeta, BOOTSTRAP_KEYS, bootstrapSchema, configSchema, ENV_VARS, isBootstrapKey, isKnownKey, isRuntimeKey, isSecretKey, keyMeta, RUNTIME_KEYS, runtimeSchema, SECRET_KEYS, } from "./schema.js";
+export { allKeyMeta, BOOTSTRAP_KEYS, bootstrapSchema, configSchema, defaultForKey, ENV_VARS, editableOf, isBootstrapKey, isKnownKey, isRestartKey, isRuntimeKey, isSecretKey, keyMeta, RESTART_KEYS, RUNTIME_KEYS, runtimeSchema, SECRET_KEYS, } from "./schema.js";
 //# sourceMappingURL=index.js.map

package/dist/server/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EACd,MAAM,EAGN,aAAa,EACb,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,UAAU,EACV,cAAc,EAGd,eAAe,EAGf,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,UAAU,EACV,YAAY,EACZ,WAAW,EAEX,OAAO,EACP,YAAY,EAGZ,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC","sourcesContent":["export {\n  type ConfigSource,\n  loadConfigFile,\n  MASKED,\n  type ResolvedConfig,\n  type ResolvedSetting,\n  resolveConfig,\n  validateRuntimeWrite,\n} from \"./resolve.js\";\nexport { createConfigRouter } from \"./router.js\";\nexport {\n  allKeyMeta,\n  BOOTSTRAP_KEYS,\n  type BootstrapConfig,\n  type BootstrapKey,\n  bootstrapSchema,\n  type Config,\n  type ConfigKey,\n  configSchema,\n  ENV_VARS,\n  isBootstrapKey,\n  isKnownKey,\n  isRuntimeKey,\n  isSecretKey,\n  type KeyMeta,\n  keyMeta,\n  RUNTIME_KEYS,\n  type RuntimeConfig,\n  type RuntimeKey,\n  runtimeSchema,\n  SECRET_KEYS,\n} from \"./schema.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,OAAO,GAER,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,cAAc,EACd,MAAM,EAGN,aAAa,EACb,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,UAAU,EACV,cAAc,EAGd,eAAe,EAGf,YAAY,EACZ,aAAa,EAEb,QAAQ,EACR,UAAU,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EAEX,OAAO,EACP,YAAY,EACZ,YAAY,EAGZ,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC","sourcesContent":["export {\n  getPreset,\n  PRESET_NAMES,\n  PRESETS,\n  type Preset,\n} from \"./presets.js\";\nexport {\n  type ConfigSource,\n  loadConfigFile,\n  MASKED,\n  type ResolvedConfig,\n  type ResolvedSetting,\n  resolveConfig,\n  validateConfigWrite,\n  validateRuntimeWrite,\n} from \"./resolve.js\";\nexport { createConfigRouter } from \"./router.js\";\nexport {\n  allKeyMeta,\n  BOOTSTRAP_KEYS,\n  type BootstrapConfig,\n  type BootstrapKey,\n  bootstrapSchema,\n  type Config,\n  type ConfigKey,\n  configSchema,\n  defaultForKey,\n  type Editable,\n  ENV_VARS,\n  editableOf,\n  isBootstrapKey,\n  isKnownKey,\n  isRestartKey,\n  isRuntimeKey,\n  isSecretKey,\n  type KeyMeta,\n  keyMeta,\n  RESTART_KEYS,\n  RUNTIME_KEYS,\n  type RuntimeConfig,\n  type RuntimeKey,\n  runtimeSchema,\n  SECRET_KEYS,\n} from \"./schema.js\";\n"]}

package/dist/server/config/presets.d.ts

@@ -0,0 +1,36 @@
+import type { RuntimeKey } from "./schema.js";
+/**
+ * Config presets / profiles (automation).
+ *
+ * A preset is a named bundle of RUNTIME-key → value overrides applied in one
+ * action. Presets ONLY touch runtime keys — never secrets, never the `admin`
+ * gate, never restart-tier bootstrap keys (`port`/`storage`/`dbPath`). The
+ * router applies each value through the same validation + audit path as a
+ * manual PUT, and skips any key currently pinned by env/file.
+ */
+export interface Preset {
+    /** Stable id (used in the URL: `POST /config/preset/:name`). */
+    name: string;
+    /** Human label for the UI button. */
+    label: string;
+    /** What the preset is for, in one line. */
+    description: string;
+    /** The runtime-key → value map this preset sets. */
+    values: Partial<Record<RuntimeKey, unknown>>;
+}
+/**
+ * Built-in presets.
+ *
+ * - **Dev** — maximum visibility for local development: analytics on, full
+ *   sampling (record everything), live logs on, generous retention, fine
+ *   1-minute chart buckets.
+ * - **Prod** — sensible production defaults: analytics on but sampled down to
+ *   25% to cut overhead/storage on busy servers, larger retention caps to keep
+ *   useful history, live logs off (avoid streaming overhead), coarser 5-minute
+ *   chart buckets.
+ */
+export declare const PRESETS: Record<string, Preset>;
+/** All preset ids. */
+export declare const PRESET_NAMES: string[];
+/** Look up a preset by name (case-insensitive). */
+export declare function getPreset(name: string): Preset | undefined;

package/dist/server/config/presets.js

@@ -0,0 +1,46 @@
+/**
+ * Built-in presets.
+ *
+ * - **Dev** — maximum visibility for local development: analytics on, full
+ *   sampling (record everything), live logs on, generous retention, fine
+ *   1-minute chart buckets.
+ * - **Prod** — sensible production defaults: analytics on but sampled down to
+ *   25% to cut overhead/storage on busy servers, larger retention caps to keep
+ *   useful history, live logs off (avoid streaming overhead), coarser 5-minute
+ *   chart buckets.
+ */
+export const PRESETS = {
+    dev: {
+        name: "dev",
+        label: "Dev",
+        description: "Maximum visibility for local development: analytics on, full sampling, live logs on, fine-grained charts.",
+        values: {
+            "analytics.enabled": true,
+            "analytics.sampleRate": 1,
+            "retention.events": 5000,
+            "retention.logs": 5000,
+            "flags.liveLogs": true,
+            "display.bucketMs": 60_000,
+        },
+    },
+    prod: {
+        name: "prod",
+        label: "Prod",
+        description: "Production-friendly defaults: analytics on but sampled to 25%, larger retention, live logs off, coarser charts.",
+        values: {
+            "analytics.enabled": true,
+            "analytics.sampleRate": 0.25,
+            "retention.events": 20_000,
+            "retention.logs": 20_000,
+            "flags.liveLogs": false,
+            "display.bucketMs": 300_000,
+        },
+    },
+};
+/** All preset ids. */
+export const PRESET_NAMES = Object.keys(PRESETS);
+/** Look up a preset by name (case-insensitive). */
+export function getPreset(name) {
+    return PRESETS[name.toLowerCase()];
+}
+//# sourceMappingURL=presets.js.map

package/dist/server/config/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../../src/server/config/presets.ts"],"names":[],"mappings":"AAuBA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,OAAO,GAA2B;IAC7C,GAAG,EAAE;QACH,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,WAAW,EACT,2GAA2G;QAC7G,MAAM,EAAE;YACN,mBAAmB,EAAE,IAAI;YACzB,sBAAsB,EAAE,CAAC;YACzB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,MAAM;SAC3B;KACF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,WAAW,EACT,iHAAiH;QACnH,MAAM,EAAE;YACN,mBAAmB,EAAE,IAAI;YACzB,sBAAsB,EAAE,IAAI;YAC5B,kBAAkB,EAAE,MAAM;YAC1B,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,OAAO;SAC5B;KACF;CACF,CAAC;AAEF,sBAAsB;AACtB,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAEjD,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { RuntimeKey } from \"./schema.js\";\n\n/**\n * Config presets / profiles (automation).\n *\n * A preset is a named bundle of RUNTIME-key → value overrides applied in one\n * action. Presets ONLY touch runtime keys — never secrets, never the `admin`\n * gate, never restart-tier bootstrap keys (`port`/`storage`/`dbPath`). The\n * router applies each value through the same validation + audit path as a\n * manual PUT, and skips any key currently pinned by env/file.\n */\n\nexport interface Preset {\n  /** Stable id (used in the URL: `POST /config/preset/:name`). */\n  name: string;\n  /** Human label for the UI button. */\n  label: string;\n  /** What the preset is for, in one line. */\n  description: string;\n  /** The runtime-key → value map this preset sets. */\n  values: Partial<Record<RuntimeKey, unknown>>;\n}\n\n/**\n * Built-in presets.\n *\n * - **Dev** — maximum visibility for local development: analytics on, full\n *   sampling (record everything), live logs on, generous retention, fine\n *   1-minute chart buckets.\n * - **Prod** — sensible production defaults: analytics on but sampled down to\n *   25% to cut overhead/storage on busy servers, larger retention caps to keep\n *   useful history, live logs off (avoid streaming overhead), coarser 5-minute\n *   chart buckets.\n */\nexport const PRESETS: Record<string, Preset> = {\n  dev: {\n    name: \"dev\",\n    label: \"Dev\",\n    description:\n      \"Maximum visibility for local development: analytics on, full sampling, live logs on, fine-grained charts.\",\n    values: {\n      \"analytics.enabled\": true,\n      \"analytics.sampleRate\": 1,\n      \"retention.events\": 5000,\n      \"retention.logs\": 5000,\n      \"flags.liveLogs\": true,\n      \"display.bucketMs\": 60_000,\n    },\n  },\n  prod: {\n    name: \"prod\",\n    label: \"Prod\",\n    description:\n      \"Production-friendly defaults: analytics on but sampled to 25%, larger retention, live logs off, coarser charts.\",\n    values: {\n      \"analytics.enabled\": true,\n      \"analytics.sampleRate\": 0.25,\n      \"retention.events\": 20_000,\n      \"retention.logs\": 20_000,\n      \"flags.liveLogs\": false,\n      \"display.bucketMs\": 300_000,\n    },\n  },\n};\n\n/** All preset ids. */\nexport const PRESET_NAMES = Object.keys(PRESETS);\n\n/** Look up a preset by name (case-insensitive). */\nexport function getPreset(name: string): Preset | undefined {\n  return PRESETS[name.toLowerCase()];\n}\n"]}

package/dist/server/config/resolve.d.ts

@@ -1,5 +1,5 @@
 import type { StorageAdapter } from "../storage/types.js";
-import { type Config, type ConfigKey } from "./schema.js";
+import { type Config, type ConfigKey, type Editable } from "./schema.js";
 /**
  * Config resolution (M4). Merges sources with precedence
  * **env > file (`enpilink.config.{json,ts}`) > db (runtime only) > default**
@@ -26,12 +26,37 @@ export interface ResolvedSetting {
     /** Whether this key is a secret (never returned in plaintext). */
     secret: boolean;
     /**
-     * Whether this key is read-only in the admin UI. True for all bootstrap keys,
-     * and for any runtime key pinned via env or file (the DB value is shadowed).
+     * Whether this key is pinned by env/file (the DB value is shadowed). The UI
+     * renders these read-only with a "set via ENV_VAR" hint. NOTE: a `restart`
+     * key that is NOT env/file-pinned is editable here even though
+     * `editable === "restart"`.
      */
     envLocked: boolean;
     /** The env var that drives / can pin this key. */
     env: string;
+    /** Human-friendly label. */
+    label: string;
+    /** Plain-language one-liner describing the setting. */
+    description: string;
+    /** Functional group for UI sectioning (e.g. "Analytics", "Server"). */
+    group: string;
+    /** Optional unit hint (e.g. "ms", "events", "0–1 ratio"). */
+    unit?: string;
+    /** The schema default value. */
+    default: unknown;
+    /** Editability classification: `runtime` | `restart` | `readonly`. */
+    editable: Editable;
+    /**
+     * True when the effective value comes from a DB override that differs from
+     * the schema default (i.e. the operator has changed it).
+     */
+    modified: boolean;
+    /**
+     * Restart-tier only: true when a persisted DB value differs from the value
+     * this process actually booted with — a pending change awaiting restart.
+     * Always `false` for non-restart keys.
+     */
+    restartRequired: boolean;
 }
 /** The full resolved config plus per-key reporting. */
 export interface ResolvedConfig {
@@ -50,6 +75,8 @@ export declare function loadConfigFile(cwd?: string): {
     source: "file" | null;
     values: Partial<Record<ConfigKey, unknown>>;
 };
+/** TEST-ONLY: reset the memoized boot snapshot so each test recomputes it. */
+export declare function resetBootSnapshotForTests(): void;
 /**
  * Resolve all config. Reads the DB (runtime keys only) when a storage adapter
  * is provided; secrets are never read from the DB. Falls back to defaults when
@@ -71,3 +98,15 @@ export declare function validateRuntimeWrite(key: string, rawValue: unknown): {
     ok: false;
     error: string;
 };
+/**
+ * Validate + coerce a single WRITABLE value (runtime OR restart tier) before
+ * persisting. Rejects secret keys and any key that is not writable from the
+ * admin UI (`readonly`/unknown). Used by the router's PUT + preset/reset paths.
+ */
+export declare function validateConfigWrite(key: string, rawValue: unknown): {
+    ok: true;
+    value: unknown;
+} | {
+    ok: false;
+    error: string;
+};