expediate 1.0.4 → 1.0.6

package/dist/openapi.js

@@ -0,0 +1,624 @@
+/* Copyright 2021 Fabien Bavent
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a
+ * copy of this software and associated documentation files (the "Software"),
+ * to deal in the Software without restriction, including without limitation
+ * the rights to use, copy, modify, merge, publish, distribute, sublicense,
+ * and/or sell copies of the Software, and to permit persons to whom the
+ * Software is furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included
+ * in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+ * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ */
+'use strict';
+import { joinPath, routeScore, normalizePermission } from './apis.js';
+// ── YAML serialiser (zero-dependency, block-style) ────────────────────────────
+/**
+ * YAML reserved keywords that must be quoted as scalars so that YAML parsers
+ * do not interpret them as the corresponding typed values.
+ */
+const YAML_KW = new Set([
+    'true', 'false', 'yes', 'no', 'on', 'off', 'null', '~',
+]);
+/** Pattern matching integer and floating-point number strings. */
+const LOOKS_LIKE_NUMBER = /^[-+]?(\d+\.?\d*|\.\d+)([eE][+-]?\d+)?$|^0x[0-9a-fA-F]+$|^0o[0-7]+$/;
+/**
+ * Serialise a string as a YAML scalar value or key.
+ *
+ * The string is returned unquoted when it is a valid YAML plain scalar —
+ * i.e. it cannot be misinterpreted as another type and does not contain
+ * characters that would confuse a YAML parser.
+ *
+ * Otherwise the value is wrapped in double quotes with control characters,
+ * backslashes, and `"` escaped so the output is always valid YAML 1.2.
+ *
+ * @param s - The string to serialise.
+ */
+function yamlString(s) {
+    if (s === '')
+        return '""';
+    const needsQuote = 
+    // Would be misinterpreted as a YAML typed value.
+    YAML_KW.has(s.toLowerCase()) ||
+        LOOKS_LIKE_NUMBER.test(s) ||
+        // Starts with a YAML indicator that has special meaning at the start of a
+        // plain scalar (block context).
+        /^[-?:,[\]{}#&*!|>'"%@`~]/.test(s) ||
+        // Inline sequences that break block-mapping parsing.
+        s.includes(': ') ||
+        s.endsWith(':') ||
+        s.includes(' #') ||
+        // Leading / trailing whitespace.
+        s !== s.trim() ||
+        // Flow indicator characters anywhere — present in path patterns such as
+        // `/items/{id}` and must be quoted to avoid flow-collection ambiguity.
+        /[{}[\]]/.test(s) ||
+        // Control characters.
+        /[\x00-\x1f\x7f]/.test(s);
+    if (!needsQuote)
+        return s;
+    // Double-quoted style: always valid, handles all edge cases.
+    return '"' +
+        s
+            .replace(/\\/g, '\\\\')
+            .replace(/"/g, '\\"')
+            .replace(/\n/g, '\\n')
+            .replace(/\r/g, '\\r')
+            .replace(/\t/g, '\\t')
+            .replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g, c => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`)
+        + '"';
+}
+/**
+ * Serialise a mapping key as a YAML scalar.
+ *
+ * Uses the same quoting rules as {@link yamlString}.  Numbers as keys
+ * (e.g. HTTP status codes `200`, `500`) are always quoted so that YAML
+ * parsers do not interpret them as integer keys.
+ */
+function yamlKey(key) {
+    return yamlString(key);
+}
+/**
+ * Recursively serialise a JSON-compatible value into an array of YAML block
+ * notation lines.
+ *
+ * Each returned line has **no leading indentation** — it is the caller's
+ * responsibility to prefix nested lines with `'  '` (two spaces) when
+ * embedding them inside a mapping value or sequence item.
+ *
+ * @param value - The value to serialise.
+ */
+function toYamlLines(value) {
+    // ── Scalars ─────────────────────────────────────────────────────────────────
+    if (value === null || value === undefined)
+        return ['null'];
+    if (typeof value === 'boolean')
+        return [String(value)];
+    if (typeof value === 'number')
+        return [isFinite(value) ? String(value) : '.inf'];
+    if (typeof value === 'string')
+        return [yamlString(value)];
+    // ── Sequences ────────────────────────────────────────────────────────────────
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            return ['[]'];
+        const lines = [];
+        for (const item of value) {
+            const itemLines = toYamlLines(item);
+            // First line of the item goes on the same line as the dash.
+            lines.push(`- ${itemLines[0]}`);
+            // Subsequent lines are indented by two spaces (relative to the `-`).
+            for (const l of itemLines.slice(1))
+                lines.push(`  ${l}`);
+        }
+        return lines;
+    }
+    // ── Mappings ─────────────────────────────────────────────────────────────────
+    if (typeof value === 'object') {
+        const obj = value;
+        const entries = Object.entries(obj).filter(([, v]) => v !== undefined);
+        if (entries.length === 0)
+            return ['{}'];
+        const lines = [];
+        for (const [key, val] of entries) {
+            const k = yamlKey(key);
+            const valLines = toYamlLines(val);
+            // Inline only when the value is a scalar, null, or an empty collection
+            // (`{}` / `[]`).  Non-empty objects and arrays — even when they happen
+            // to serialise to a single line (e.g. `$ref: "#/..."`) — must go block
+            // style; inlining them produces ambiguous YAML like `key: $ref: "..."`.
+            const isComplex = typeof val === 'object' && val !== null;
+            const isEmptyCollection = valLines.length === 1 &&
+                (valLines[0] === '{}' || valLines[0] === '[]');
+            if (!isComplex || isEmptyCollection) {
+                // Scalar or empty collection: fits on the same line as the key.
+                lines.push(`${k}: ${valLines[0]}`);
+            }
+            else {
+                // Block style: key on its own line, value indented below.
+                lines.push(`${k}:`);
+                for (const l of valLines)
+                    lines.push(`  ${l}`);
+            }
+        }
+        return lines;
+    }
+    // Defensive fallback: every JSON value type (null, boolean, number, string,
+    // array, object) is handled above, so `value` here is only reachable for
+    // bigint/symbol/function — none of which occur in a JSON-derived spec.
+    // eslint-disable-next-line @typescript-eslint/no-base-to-string
+    return [String(value)];
+}
+/**
+ * Serialise an {@link OpenApiDocument} to either JSON or YAML.
+ *
+ * - `'json'` — pretty-printed with 2-space indentation.
+ * - `'yaml'` — block-style YAML 1.2, produced by a zero-dependency serialiser
+ *   built into expediate.
+ *
+ * @param doc    - The document to serialise.
+ * @param format - Output format (`'json'` by default).
+ */
+export function serializeSpec(doc, format = 'json') {
+    if (format === 'yaml')
+        return toYamlLines(doc).join('\n') + '\n';
+    return JSON.stringify(doc, null, 2);
+}
+// ---------------------------------------------------------------------------
+// Symbol for attaching metadata to handler functions
+// ---------------------------------------------------------------------------
+/**
+ * Unique symbol used as a non-enumerable property key on handler functions
+ * that have been annotated via {@link describe}.
+ *
+ * Using a `unique symbol` (rather than a plain string key) prevents accidental
+ * collisions with user-defined properties on handler objects.
+ */
+export const DESCRIBE_META = Symbol('expediate.openapi.meta');
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Annotate a service method handler with OpenAPI operation metadata.
+ *
+ * The metadata is attached to the returned function via a non-enumerable
+ * property keyed by {@link DESCRIBE_META}.  The returned function is otherwise
+ * identical to `handler` — it can be used directly in a `ServiceDefinition`
+ * route map.
+ *
+ * ```ts
+ * GET: {
+ *   '/items/:id': describe(
+ *     function (this: TodoService, p) {
+ *       return this.findOrFail(p.id);
+ *     },
+ *     {
+ *       summary: 'Get a single item by ID',
+ *       tags: ['items'],
+ *       parameters: [{ name: 'id', in: 'path', required: true, schema: { type: 'string' } }],
+ *       responses: {
+ *         '200': { description: 'The item', content: { 'application/json': { schema: { $ref: '#/components/schemas/Item' } } } },
+ *         '404': { description: 'Not found' },
+ *       },
+ *     },
+ *   ),
+ * }
+ * ```
+ *
+ * @param handler - The service method to annotate.
+ * @param meta    - OpenAPI operation metadata.
+ * @returns The same handler function, with metadata attached.
+ */
+export function describe(handler, meta) {
+    // Wrap the handler so we have a fresh function object to attach metadata to,
+    // avoiding unexpected mutations of functions shared across route maps.
+    const described = function (ctx, body) {
+        return handler.apply(this, [ctx, body]);
+    };
+    // Attach metadata as a non-enumerable property so it is invisible to
+    // Object.keys() / JSON.stringify() and does not pollute the function's
+    // "own" enumerable surface.
+    Object.defineProperty(described, DESCRIBE_META, {
+        value: meta,
+        enumerable: false,
+        configurable: true,
+        writable: false,
+    });
+    return described;
+}
+// ---------------------------------------------------------------------------
+// Internal path-translation helpers
+// ---------------------------------------------------------------------------
+/**
+ * Convert an Express-style path pattern to an OpenAPI path pattern.
+ *
+ * - `:param` segments become `{param}`.
+ * - An optional `basePath` prefix is prepended (with duplicate-slash guards).
+ *
+ * @example
+ * ```ts
+ * toOpenApiPath('/items/:id', '/api/v1') // → '/api/v1/items/{id}'
+ * toOpenApiPath('/items',     '')         // → '/items'
+ * ```
+ */
+function toOpenApiPath(pattern, basePath) {
+    const converted = pattern.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, '{$1}');
+    if (!basePath)
+        return converted;
+    const base = basePath.replace(/\/+$/, '');
+    const path = converted.replace(/^\/+/, '/');
+    return base + (path.startsWith('/') ? path : `/${path}`);
+}
+/**
+ * Extract named path parameters from an Express-style pattern as
+ * {@link ParameterObject} entries with `in: 'path'` and `required: true`.
+ *
+ * Parameters already listed in `annotated` (by name) are skipped to avoid
+ * duplicates when the caller has provided explicit metadata for them.
+ *
+ * @param pattern   - Express-style route pattern (e.g. `/items/:id`).
+ * @param annotated - Explicit parameters provided by the caller (may be empty).
+ */
+function extractPathParams(pattern, annotated) {
+    const annotatedNames = new Set(annotated.map(p => p.name));
+    const params = [];
+    for (const match of pattern.matchAll(/:([A-Za-z_][A-Za-z0-9_]*)/g)) {
+        const name = match[1];
+        if (!annotatedNames.has(name)) {
+            params.push({
+                name,
+                in: 'path',
+                required: true,
+                schema: { type: 'string' },
+            });
+        }
+    }
+    return params;
+}
+/**
+ * Build an `operationId` string from an HTTP verb and a path pattern.
+ *
+ * The algorithm:
+ * 1. Lowercase the verb (e.g. `'GET'` → `'get'`).
+ * 2. Split the pattern on `/` and `:` (and `{` / `}` for pre-translated paths).
+ * 3. CamelCase each non-empty segment (first-letter uppercase).
+ * 4. Prefix each path-param segment with `'By'`.
+ * 5. Join everything into a single camelCase string.
+ *
+ * @example
+ * ```ts
+ * buildOperationId('GET',    '/items')     // → 'getItems'
+ * buildOperationId('GET',    '/items/:id') // → 'getItemsById'
+ * buildOperationId('DELETE', '/a/:b/:c')   // → 'deleteAByBByC'
+ * ```
+ */
+function buildOperationId(verb, pattern) {
+    const parts = pattern.split(/[/:{} ]+/).filter(Boolean);
+    let result = verb.toLowerCase();
+    for (const part of parts) {
+        const isParam = pattern.includes(`:${part}`) || pattern.includes(`{${part}}`);
+        const pascal = part.charAt(0).toUpperCase() + part.slice(1);
+        result += isParam ? `By${pascal}` : pascal;
+    }
+    return result;
+}
+/**
+ * Build the default responses for an operation when none are provided by the
+ * caller.
+ *
+ * - `POST` → `201 No Content` (successful write with no response body).
+ * - All other verbs → `200 OK` with a generic JSON response.
+ * - `500` → always added as a reference to the built-in `ApiError` component.
+ */
+function buildDefaultResponses(verb) {
+    const ok = verb === 'POST'
+        ? { description: 'Created' }
+        : { description: 'OK', content: { 'application/json': {} } };
+    return {
+        [verb === 'POST' ? '201' : '200']: ok,
+        '500': { $ref: '#/components/responses/ApiError' },
+    };
+}
+/**
+ * Convert caller-provided `responses` metadata into the OpenAPI responses
+ * map, injecting the built-in `ApiError` reference for `500` unless the
+ * caller has explicitly provided one.
+ */
+function buildAnnotatedResponses(responses) {
+    const result = { ...responses };
+    if (!result['500']) {
+        result['500'] = { $ref: '#/components/responses/ApiError' };
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// Multi-source route collection (spec-generation counterpart to `collectRoutes`)
+// ---------------------------------------------------------------------------
+/**
+ * The five HTTP verbs `openApiSpec` looks for route maps under.
+ *
+ * Kept as a private duplicate of `apis.ts`'s internal `VERBS` (only the
+ * derived {@link ApiVerb} type is exported from there) — not worth exporting
+ * a const for.
+ */
+const VERBS = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH'];
+/**
+ * Build the merged, globally-sorted route table for one or more
+ * {@link OpenApiSource} values — the spec-generation counterpart to
+ * `apis.ts`'s `collectRoutes`.
+ *
+ * Deliberately kept separate from `collectRoutes` so the real request
+ * pipeline (`apiBuilder`) is never affected by spec-only concerns: this
+ * function only inspects route *shapes* to produce documentation and never
+ * invokes a handler. A route value is resolved as `describe()`-attached
+ * metadata when it is a function, or used directly as an {@link OperationMeta}
+ * object when it is not (the {@link ServiceOpenApi} case).
+ *
+ * Duplicate `(verb, path)` pairs are detected **across all sources**, not
+ * just within one — extending `collectRoutes`'s single-service duplicate
+ * check to the merged multi-source document.
+ *
+ * @throws Error on a duplicate `(verb, path)` pair across any of the sources.
+ */
+function collectOpenApiRoutes(sources) {
+    const routes = [];
+    /** Duplicate detection across ALL sources: `"VERB /joined/path"` → declarer label. */
+    const seen = new Map();
+    sources.forEach((source, sourceIndex) => {
+        const defaultTag = source.openapi?.tag;
+        const permissionsExtension = source.auth?.permissionsExtension ?? 'x-required-permissions';
+        // Root route maps form an implicit, anonymous controller — same trick as
+        // `collectRoutes`'s `rootController`.
+        const rootController = {
+            prefix: '',
+            GET: source.GET,
+            POST: source.POST,
+            PUT: source.PUT,
+            DELETE: source.DELETE,
+            PATCH: source.PATCH,
+        };
+        const controllers = [rootController, ...(source.controllers ?? [])];
+        controllers.forEach((controller, controllerIndex) => {
+            const label = controllerIndex === 0
+                ? `source #${sourceIndex}`
+                : (controller.tags?.[0] ?? controller.prefix ?? `source #${sourceIndex} controller #${controllerIndex}`);
+            const prefix = controller.prefix ?? '';
+            for (const verb of VERBS) {
+                const routeMap = controller[verb];
+                if (!routeMap)
+                    continue;
+                for (const [pattern, value] of Object.entries(routeMap)) {
+                    const path = joinPath(prefix, pattern);
+                    // Loud failure on duplicates, across the whole merged document.
+                    const dupKey = `${verb} ${path}`;
+                    const declarer = seen.get(dupKey);
+                    if (declarer !== undefined) {
+                        throw new Error(`openApiSpec: duplicate route ${verb} ${path}\n` +
+                            `  declared by '${declarer}' and '${label}'`);
+                    }
+                    seen.set(dupKey, label);
+                    const meta = typeof value === 'function'
+                        ? value[DESCRIBE_META]
+                        : value;
+                    routes.push({
+                        verb,
+                        path,
+                        meta,
+                        tags: meta?.tags ?? controller.tags,
+                        permission: normalizePermission(meta?.permission ?? controller.permission),
+                        defaultTag,
+                        permissionsExtension,
+                    });
+                }
+            }
+        });
+    });
+    // Global specificity sort across all sources and controllers.
+    routes.sort((a, b) => routeScore(b.path) - routeScore(a.path) || b.path.localeCompare(a.path));
+    return routes;
+}
+// ---------------------------------------------------------------------------
+// Core spec generator
+// ---------------------------------------------------------------------------
+/** Default OpenAPI security scheme when `AuthBinding.scheme` is absent. */
+const DEFAULT_SECURITY_SCHEME = {
+    type: 'http',
+    scheme: 'bearer',
+    bearerFormat: 'JWT',
+};
+/**
+ * Generate an OpenAPI 3.1.0 document from one or more {@link OpenApiSource}
+ * values — real {@link ServiceDefinition}s, spec-only {@link ServiceOpenApi}
+ * descriptions, or a mix of both in a single array.
+ *
+ * Route handlers that have been annotated with {@link describe} contribute
+ * rich operation metadata (summary, description, parameters, requestBody,
+ * responses).  Unannotated handlers receive sensible defaults automatically.
+ * `ServiceOpenApi` route maps provide that same {@link OperationMeta} shape
+ * directly, since there is no handler to annotate.
+ *
+ * The generated document always includes:
+ * - An `ApiError` schema (shape: `{ status?, message?, data? }`) in
+ *   `components.schemas`.
+ * - An `ApiError` response (`500` reference) in `components.responses`.
+ *
+ * Caller-supplied `opts.schemas` and each source's `openapi.schemas` /
+ * `schemas` are merged on top of the built-in components, source by source
+ * in array order — for a single source this preserves the original
+ * precedence exactly: built-ins ← `openapi.schemas` ← `opts.schemas` ←
+ * `schemas`.
+ *
+ * Routes are merged and duplicate-checked **across all sources** (see
+ * {@link collectOpenApiRoutes}), so passing several sources still produces
+ * ONE document. Each route's default tag and permissions vendor-extension
+ * name are resolved from its own originating source; the
+ * `components.securitySchemes.bearerAuth` value comes from the first source
+ * in array order that declares a custom `auth.scheme`, else the default.
+ *
+ * @param service - The source(s) to document.
+ * @param opts    - Top-level spec options (title, version, basePath, …).
+ * @returns A fully-formed OpenAPI 3.1.0 document object.
+ *
+ * @example
+ * ```ts
+ * const spec = openApiSpec(todoDefinition, {
+ *   title:    'Todo API',
+ *   version:  '1.0.0',
+ *   basePath: '/api',
+ * });
+ *
+ * app.get('/openapi.json', (_req, res) => {
+ *   res.json(spec);
+ * });
+ * ```
+ *
+ * @example Merging a real service with hand-documented auth routes
+ * ```ts
+ * const authDocs: ServiceOpenApi = {
+ *   openapi: { tag: 'auth' },
+ *   POST: {
+ *     '/auth/login':   { summary: 'Log in' },
+ *     '/auth/refresh': { summary: 'Refresh a token' },
+ *     '/auth/logout':  { summary: 'Log out' },
+ *   },
+ * };
+ *
+ * const spec = openApiSpec([authDocs, todoDefinition], { title: 'Todo API', version: '1.0.0' });
+ * ```
+ */
+export function openApiSpec(service, opts) {
+    const sources = Array.isArray(service) ? service : [service];
+    const basePath = opts.basePath ?? '';
+    // ── Components ──────────────────────────────────────────────────────────────
+    const builtinSchemas = {
+        ApiError: {
+            type: 'object',
+            properties: {
+                status: { type: 'integer', description: 'HTTP status code' },
+                message: { type: 'string', description: 'Human-readable error message' },
+                data: { description: 'Structured error payload (overrides message when present)' },
+            },
+        },
+    };
+    const builtinResponses = {
+        ApiError: {
+            description: 'API error response',
+            content: {
+                'application/json': { schema: { $ref: '#/components/schemas/ApiError' } },
+            },
+        },
+    };
+    // Merge schemas: built-ins ← each source's openapi.schemas (array order)
+    // ← caller-level opts.schemas ← each source's own `schemas` (array order,
+    // last wins).  For a single source this is exactly the original order:
+    // built-ins, service-level openapi meta, caller-level, service-definition
+    // `schemas` — which supersedes `opts.schemas`.
+    let schemas = { ...builtinSchemas };
+    for (const source of sources)
+        schemas = { ...schemas, ...source.openapi?.schemas };
+    schemas = { ...schemas, ...opts.schemas };
+    for (const source of sources)
+        schemas = { ...schemas, ...source.schemas };
+    let responses = { ...builtinResponses };
+    for (const source of sources)
+        responses = { ...responses, ...source.openapi?.responses };
+    // ── Tags ─────────────────────────────────────────────────────────────────────
+    const tags = [];
+    const seenTags = new Set();
+    for (const source of sources) {
+        const tag = source.openapi?.tag;
+        if (tag && !seenTags.has(tag)) {
+            seenTags.add(tag);
+            tags.push({ name: tag, description: source.openapi?.tagDescription });
+        }
+    }
+    // ── Security scheme ──────────────────────────────────────────────────────────
+    // First source in array order that declares a custom scheme wins; falls
+    // back to the default HTTP bearer/JWT scheme.
+    const securityScheme = sources.find(s => s.auth?.scheme)?.auth?.scheme ?? DEFAULT_SECURITY_SCHEME;
+    // ── Paths ────────────────────────────────────────────────────────────────────
+    // Operates on the merged route table (all sources' root route maps and
+    // controllers), so multiple sources still produce ONE document. Controller
+    // `tags` fill in `OperationMeta.tags` when a route declares none.
+    const paths = {};
+    const routes = collectOpenApiRoutes(sources);
+    let securedRoutes = false;
+    for (const route of routes) {
+        const { verb, path: pattern, meta } = route;
+        const openApiPath = toOpenApiPath(pattern, basePath);
+        if (!paths[openApiPath])
+            paths[openApiPath] = {};
+        // ── Parameters ─────────────────────────────────────────────────────────
+        const annotatedParams = meta?.parameters ?? [];
+        const inferredParams = extractPathParams(pattern, annotatedParams);
+        const parameters = [...annotatedParams, ...inferredParams];
+        // ── Responses ──────────────────────────────────────────────────────────
+        const operationResponses = meta?.responses
+            ? buildAnnotatedResponses(meta.responses)
+            : buildDefaultResponses(verb);
+        // ── Operation object ───────────────────────────────────────────────────
+        const operation = {
+            operationId: meta?.operationId ?? buildOperationId(verb, pattern),
+            ...(meta?.summary && { summary: meta.summary }),
+            ...(meta?.description && { description: meta.description }),
+            ...(meta?.deprecated && { deprecated: true }),
+            ...(parameters.length > 0 && { parameters }),
+            ...(meta?.requestBody && { requestBody: meta.requestBody }),
+            responses: operationResponses,
+        };
+        // Apply route tags (meta-level, else controller-level), then this route's
+        // source default tag when neither is declared.
+        const opTags = route.tags ?? (route.defaultTag ? [route.defaultTag] : undefined);
+        if (opTags)
+            operation.tags = opTags;
+        // Carry through any vendor extensions (x-* keys).
+        if (meta) {
+            for (const [k, v] of Object.entries(meta)) {
+                if (k.startsWith('x-'))
+                    operation[k] = v;
+            }
+        }
+        // ── Security ───────────────────────────────────────────────────────────
+        // Routes carrying a permission requirement (route- or controller-level)
+        // are marked with the bearerAuth scheme and the vendor extension listing
+        // the required permissions.
+        if (route.permission) {
+            securedRoutes = true;
+            operation.security = [{ bearerAuth: [] }];
+            operation[route.permissionsExtension] = route.permission;
+        }
+        paths[openApiPath][verb.toLowerCase()] = operation;
+    }
+    // ── Assemble document ────────────────────────────────────────────────────────
+    const doc = {
+        openapi: '3.1.0',
+        info: {
+            title: opts.title,
+            version: opts.version,
+            ...(opts.description && { description: opts.description }),
+        },
+        ...(opts.servers && { servers: opts.servers }),
+        ...(tags.length > 0 && { tags }),
+        paths,
+        components: {
+            schemas,
+            responses,
+            // Emitted once when at least one operation declares a permission.
+            ...(securedRoutes && {
+                securitySchemes: {
+                    bearerAuth: securityScheme,
+                },
+            }),
+        },
+    };
+    return doc;
+}
+//# sourceMappingURL=openapi.js.map

package/dist/openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,YAAY,CAAC;AAEb,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAkUtE,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;IAC9B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;CACvD,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,iBAAiB,GAAG,qEAAqE,CAAC;AAEhG;;;;;;;;;;;GAWG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU;IACd,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,0EAA0E;QAC1E,gCAAgC;QAChC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,qDAAqD;QACrD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QACf,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChB,iCAAiC;QACjC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;QACd,wEAAwE;QACxE,uEAAuE;QACvE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACjB,sBAAsB;QACtB,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5B,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC;IAE1B,6DAA6D;IAC7D,OAAO,GAAG;QACR,CAAC;aACE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,CAChD,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;UACxD,GAAG,CAAC;AACV,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,+EAA+E;IAC/E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAa,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAc,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAc,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtE,gFAAgF;IAChF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACpC,4DAA4D;YAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,qEAAqE;YACrE,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gFAAgF;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAO,KAAgC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAExC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,GAAU,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAElC,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC;YAC1D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC7C,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAEjD,IAAI,CAAC,SAAS,IAAI,iBAAiB,EAAE,CAAC;gBACpC,gEAAgE;gBAChE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,0DAA0D;gBAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,KAAK,MAAM,CAAC,IAAI,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB,EAAE,SAAqB,MAAM;IAC7E,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAiC,EACjC,IAAsB;IAEtB,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,SAAS,GAA6B,UAE1C,GAAgB,EAChB,IAAc;QAEd,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,qEAAqE;IACrE,uEAAuE;IACvE,4BAA4B;IAC5B,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE;QAC9C,KAAK,EAAS,IAAI;QAClB,UAAU,EAAI,KAAK;QACnB,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAM,KAAK;KACpB,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,QAAgB;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CACxB,OAAiB,EACjB,SAA4B;IAE5B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,EAAE,EAAQ,MAAM;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,MAAM,KAAK,GAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,EAAE,GAAmB,IAAI,KAAK,MAAM;QACxC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE;QAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC;IAE/D,OAAO;QACL,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;QACrC,KAAK,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;KACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,SAAyC;IAEzC,MAAM,MAAM,GAAsD,EAAE,GAAG,SAAS,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,KAAK,GAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AA4CnE;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,oBAAoB,CAAC,OAAwB;IACpD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,sFAAsF;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACtC,MAAM,UAAU,GAAa,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;QACjD,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,EAAE,oBAAoB,IAAI,wBAAwB,CAAC;QAE3F,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,cAAc,GAAqB;YACvC,MAAM,EAAE,EAAE;YACV,GAAG,EAAK,MAAM,CAAC,GAAG;YAClB,IAAI,EAAI,MAAM,CAAC,IAAI;YACnB,GAAG,EAAK,MAAM,CAAC,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAG,MAAM,CAAC,KAAK;SACrB,CAAC;QACF,MAAM,WAAW,GAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAExF,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE;YAClD,MAAM,KAAK,GAAG,eAAe,KAAK,CAAC;gBACjC,CAAC,CAAC,WAAW,WAAW,EAAE;gBAC1B,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,WAAW,WAAW,gBAAgB,eAAe,EAAE,CAAC,CAAC;YAC3G,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;YAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAEvC,gEAAgE;oBAChE,MAAM,MAAM,GAAK,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;oBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,IAAI,IAAI,IAAI;4BAChD,kBAAkB,QAAQ,UAAU,KAAK,GAAG,CAAC,CAAC;oBAClD,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBAExB,MAAM,IAAI,GAA8B,OAAO,KAAK,KAAK,UAAU;wBACjE,CAAC,CAAE,KAA6C,CAAC,aAAa,CAAC;wBAC/D,CAAC,CAAC,KAAK,CAAC;oBAEV,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,IAAI,EAAQ,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI;wBACzC,UAAU,EAAE,mBAAmB,CAAC,IAAI,EAAE,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC;wBAC1E,UAAU;wBACV,oBAAoB;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,2EAA2E;AAC3E,MAAM,uBAAuB,GAA4B;IACvD,IAAI,EAAU,MAAM;IACpB,MAAM,EAAQ,QAAQ;IACtB,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAM,UAAU,WAAW,CACzB,OAAwC,EACxC,IAAoB;IAEpB,MAAM,OAAO,GAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAErC,+EAA+E;IAC/E,MAAM,cAAc,GAA+B;QACjD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAG,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBAC7D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAG,WAAW,EAAE,8BAA8B,EAAE;gBACzE,IAAI,EAAK,EAAE,WAAW,EAAE,2DAA2D,EAAE;aACtF;SACF;KACF,CAAC;IAEF,MAAM,gBAAgB,GAAmC;QACvD,QAAQ,EAAE;YACR,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE;gBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE;aAC1E;SACF;KACF,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,+CAA+C;IAC/C,IAAI,OAAO,GAA+B,EAAE,GAAG,cAAc,EAAE,CAAC;IAChE,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAE1E,IAAI,SAAS,GAAmC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAEzF,gFAAgF;IAChF,MAAM,IAAI,GAA6C,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,wEAAwE;IACxE,8CAA8C;IAC9C,MAAM,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,uBAAuB,CAAC;IAE7E,gFAAgF;IAChF,uEAAuE;IACvE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,KAAK,GAA4C,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;QAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;QAEjD,0EAA0E;QAC1E,MAAM,eAAe,GAAsB,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QAClE,MAAM,cAAc,GAAI,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,UAAU,GAAQ,CAAC,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,CAAC;QAEhE,0EAA0E;QAC1E,MAAM,kBAAkB,GAAG,IAAI,EAAE,SAAS;YACxC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;YACzC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEhC,0EAA0E;QAC1E,MAAM,SAAS,GAA4B;YACzC,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC;YACjE,GAAG,CAAC,IAAI,EAAE,OAAO,IAAQ,EAAE,OAAO,EAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,EAAE,UAAU,IAAK,EAAE,UAAU,EAAG,IAAI,EAAE,CAAC;YAC/C,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3D,SAAS,EAAE,kBAAkB;SAC9B,CAAC;QAEF,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjF,IAAI,MAAM;YAAE,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC;QAEpC,kDAAkD;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,4BAA4B;QAC5B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,aAAa,GAAG,IAAI,CAAC;YACrB,SAAS,CAAC,QAAQ,GAAsB,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC;IACrD,CAAC;IAED,gFAAgF;IAChF,MAAM,GAAG,GAAoB;QAC3B,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,KAAK,EAAI,IAAI,CAAC,KAAK;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SAC3D;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAChC,KAAK;QACL,UAAU,EAAE;YACV,OAAO;YACP,SAAS;YACT,kEAAkE;YAClE,GAAG,CAAC,aAAa,IAAI;gBACnB,eAAe,EAAE;oBACf,UAAU,EAAE,cAAc;iBAC3B;aACF,CAAC;SACH;KACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}