fluxmail 0.4.1 → 0.6.0

package/dist/deploymentConfig.js

@@ -0,0 +1,539 @@
+import { randomBytes } from 'node:crypto';
+import { chmodSync, closeSync, existsSync, fsyncSync, linkSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import path from 'node:path';
+import { parse, stringify } from 'smol-toml';
+import { withFileLock } from './storage/fileLock.js';
+export const DEPLOYMENT_REFERENCE = {
+    dataDir: {
+        canonicalName: 'deployment.data_dir',
+        env: 'FLUXMAIL_DATA_DIR',
+        type: 'path',
+        validation: 'Filesystem path',
+        defaultValue: '~/.fluxmail (/data in Docker)',
+        description: 'Directory for the SQLite database, deployment configuration, and generated encryption key.',
+        restartRequired: true,
+    },
+    dbPath: {
+        canonicalName: 'storage.database_path',
+        env: 'FLUXMAIL_DB_PATH',
+        toml: 'storage.database_path',
+        type: 'path',
+        validation: 'Non-empty filesystem path',
+        defaultValue: '<data dir>/fluxmail.db',
+        description: 'Override the SQLite database path.',
+        restartRequired: true,
+    },
+    encryptionKey: {
+        canonicalName: 'deployment.encryption_key',
+        env: 'FLUXMAIL_ENCRYPTION_KEY',
+        type: 'secret',
+        validation: 'Exactly 64 hexadecimal characters',
+        defaultValue: 'generated automatically',
+        description: 'A 64-character hexadecimal key used to encrypt credentials and instance secrets.',
+        secret: true,
+        restartRequired: true,
+    },
+    port: {
+        canonicalName: 'server.port',
+        env: 'FLUXMAIL_PORT',
+        toml: 'server.port',
+        type: 'integer',
+        validation: 'Integer from 1 through 65535',
+        defaultValue: '8977',
+        description: 'HTTP server port.',
+        restartRequired: true,
+    },
+    publicUrl: {
+        canonicalName: 'server.public_url',
+        env: 'FLUXMAIL_PUBLIC_URL',
+        toml: 'server.public_url',
+        type: 'url',
+        validation: 'HTTP or HTTPS URL without credentials, query, or fragment',
+        defaultValue: 'http://localhost:<FLUXMAIL_PORT>',
+        description: 'Public base URL used for HTTP APIs and hosted OAuth callbacks.',
+        restartRequired: true,
+    },
+    trustProxy: {
+        canonicalName: 'server.trust_proxy',
+        env: 'FLUXMAIL_TRUST_PROXY',
+        toml: 'server.trust_proxy',
+        type: 'boolean',
+        validation: 'Boolean',
+        defaultValue: 'false',
+        description: 'Trust forwarded protocol and client address headers from a reverse proxy.',
+        restartRequired: true,
+    },
+    oauthPort: {
+        canonicalName: 'oauth.local.port',
+        env: 'FLUXMAIL_OAUTH_PORT',
+        toml: 'oauth.local.port',
+        type: 'integer',
+        validation: 'Integer from 1 through 65535',
+        defaultValue: '8976',
+        description: 'Port for the local OAuth callback listener.',
+        restartRequired: true,
+    },
+    oauthHost: {
+        canonicalName: 'oauth.local.host',
+        env: 'FLUXMAIL_OAUTH_HOST',
+        toml: 'oauth.local.host',
+        type: 'string',
+        validation: 'Non-empty bind host or address',
+        defaultValue: '127.0.0.1',
+        description: 'Bind address for the local OAuth callback listener.',
+        restartRequired: true,
+    },
+    maxAttachmentBytes: {
+        canonicalName: 'server.max_attachment_mb',
+        env: 'FLUXMAIL_MAX_ATTACHMENT_MB',
+        toml: 'server.max_attachment_mb',
+        type: 'integer',
+        validation: 'Integer from 1 through 25',
+        defaultValue: '10',
+        description: 'Largest decoded attachment returned through MCP or REST, from 1 through 25 MB.',
+        restartRequired: true,
+    },
+    logLevel: {
+        canonicalName: 'logging.level',
+        env: 'FLUXMAIL_LOG_LEVEL',
+        toml: 'logging.level',
+        type: 'string',
+        validation: 'info, warn, error, or off',
+        defaultValue: 'info',
+        description: 'Minimum severity retained by the bounded local logger.',
+        restartRequired: true,
+    },
+    logDestination: {
+        canonicalName: 'logging.destination',
+        env: 'FLUXMAIL_LOG_DESTINATION',
+        toml: 'logging.destination',
+        type: 'string',
+        validation: 'both, file, or console',
+        defaultValue: 'both',
+        description: 'Write local logs to both the rotating file and console, or choose file or console.',
+        restartRequired: true,
+    },
+    licenseServerUrl: {
+        canonicalName: 'licensing.server_url',
+        env: 'FLUXMAIL_LICENSE_SERVER_URL',
+        toml: 'licensing.server_url',
+        type: 'url',
+        validation: 'HTTP or HTTPS URL',
+        defaultValue: 'https://fluxmail.ai',
+        description: 'License validation service override used for development and testing.',
+        documented: false,
+        restartRequired: true,
+    },
+};
+const CONFIG_LOCK_TIMEOUT_MS = 5_000;
+const CONFIG_LOCK_STALE_MS = 30_000;
+const BYTES_PER_MEGABYTE = 1024 * 1024;
+export const DEFAULT_MAX_ATTACHMENT_BYTES = 10 * BYTES_PER_MEGABYTE;
+export const HARD_MAX_ATTACHMENT_BYTES = 25 * BYTES_PER_MEGABYTE;
+export function expandHome(value) {
+    if (value === '~')
+        return homedir();
+    if (value.startsWith('~/'))
+        return path.join(homedir(), value.slice(2));
+    return value;
+}
+export function resolveDataDirectory(env = process.env) {
+    const configured = env.FLUXMAIL_DATA_DIR;
+    return configured ? expandHome(configured) : path.join(homedir(), '.fluxmail');
+}
+function readToml(file) {
+    if (!existsSync(file))
+        return {};
+    let parsed;
+    try {
+        parsed = parse(readFileSync(file, 'utf8'));
+    }
+    catch (error) {
+        throw new Error(`Could not parse ${file}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    validateTomlKeys(parsed, file);
+    return parsed;
+}
+const ALLOWED_TOML_KEYS = new Set([
+    'storage',
+    'storage.database_path',
+    'server',
+    'server.port',
+    'server.public_url',
+    'server.trust_proxy',
+    'server.max_attachment_mb',
+    'oauth',
+    'oauth.local',
+    'oauth.local.host',
+    'oauth.local.port',
+    'logging',
+    'logging.level',
+    'logging.destination',
+    'licensing',
+    'licensing.server_url',
+]);
+const TOML_TABLE_KEYS = new Set(['storage', 'server', 'oauth', 'oauth.local', 'logging', 'licensing']);
+function isTomlTable(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) && !(value instanceof Date);
+}
+function validateTomlKeys(table, file, prefix = '') {
+    for (const [key, value] of Object.entries(table)) {
+        const dotted = prefix ? `${prefix}.${key}` : key;
+        if (!ALLOWED_TOML_KEYS.has(dotted))
+            throw new Error(`Unknown setting "${dotted}" in ${file}`);
+        const nested = isTomlTable(value);
+        if (TOML_TABLE_KEYS.has(dotted) && !nested)
+            throw new Error(`"${dotted}" must be a TOML table in ${file}`);
+        if (nested)
+            validateTomlKeys(value, file, dotted);
+    }
+}
+function tomlValue(table, dotted) {
+    let value = table;
+    for (const part of dotted.split('.')) {
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            return undefined;
+        value = value[part];
+    }
+    return value;
+}
+function sourceValue(env, table, setting) {
+    const reference = DEPLOYMENT_REFERENCE[setting];
+    if (env[reference.env] !== undefined)
+        return { value: env[reference.env], source: 'environment' };
+    const tomlName = reference.toml;
+    const fromToml = tomlName ? tomlValue(table, tomlName) : undefined;
+    if (fromToml !== undefined)
+        return { value: fromToml, source: 'toml' };
+    return { value: undefined, source: 'default' };
+}
+function stringValue(name, input, fallback) {
+    if (input === undefined)
+        return fallback;
+    if (typeof input !== 'string')
+        throw new Error(`${name} must be a string`);
+    return input;
+}
+function pathValue(name, input, fallback) {
+    return nonEmptyStringValue(name, input, fallback);
+}
+function nonEmptyStringValue(name, input, fallback) {
+    const value = stringValue(name, input, fallback);
+    if (!value.trim())
+        throw new Error(`${name} cannot be empty.`);
+    return value;
+}
+function portValue(name, input, fallback) {
+    if (input === undefined)
+        return fallback;
+    const value = typeof input === 'number' ? input : Number(input);
+    if (!Number.isInteger(value) || value < 1 || value > 65_535) {
+        throw new Error(`${name} must be an integer between 1 and 65535, got "${String(input)}"`);
+    }
+    return value;
+}
+function booleanValue(name, input, fallback) {
+    if (input === undefined)
+        return fallback;
+    if (typeof input === 'boolean')
+        return input;
+    if (typeof input === 'string') {
+        const normalized = input.trim().toLowerCase();
+        if (normalized === '1' || normalized === 'true')
+            return true;
+        if (normalized === '0' || normalized === 'false')
+            return false;
+    }
+    throw new Error(`${name} must be 0, 1, false, or true, got "${String(input)}"`);
+}
+function maxAttachmentValue(input) {
+    if (input === undefined)
+        return DEFAULT_MAX_ATTACHMENT_BYTES;
+    const value = typeof input === 'number' ? input : Number(input);
+    const maximum = HARD_MAX_ATTACHMENT_BYTES / BYTES_PER_MEGABYTE;
+    if (!Number.isInteger(value) || value < 1 || value > maximum) {
+        throw new Error(`FLUXMAIL_MAX_ATTACHMENT_MB must be an integer between 1 and ${maximum}, got "${String(input)}"`);
+    }
+    return value * BYTES_PER_MEGABYTE;
+}
+function logLevelValue(input) {
+    const value = nonEmptyStringValue('FLUXMAIL_LOG_LEVEL', input, 'info').trim().toLowerCase();
+    if (value !== 'info' && value !== 'warn' && value !== 'error' && value !== 'off') {
+        throw new Error(`FLUXMAIL_LOG_LEVEL must be info, warn, error, or off, got "${value}"`);
+    }
+    return value;
+}
+function logDestinationValue(input) {
+    const value = nonEmptyStringValue('FLUXMAIL_LOG_DESTINATION', input, 'both').trim().toLowerCase();
+    if (value !== 'both' && value !== 'file' && value !== 'console') {
+        throw new Error(`FLUXMAIL_LOG_DESTINATION must be both, file, or console, got "${value}"`);
+    }
+    return value;
+}
+function publicUrlValue(input, port) {
+    const value = stringValue('FLUXMAIL_PUBLIC_URL', input, `http://localhost:${port}`).replace(/\/+$/, '');
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(`FLUXMAIL_PUBLIC_URL must be a valid HTTP or HTTPS URL, got "${value}"`);
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error(`FLUXMAIL_PUBLIC_URL must use HTTP or HTTPS, got "${parsed.protocol}"`);
+    }
+    if (parsed.username || parsed.password)
+        throw new Error('FLUXMAIL_PUBLIC_URL cannot contain embedded credentials');
+    if (parsed.search || parsed.hash)
+        throw new Error('FLUXMAIL_PUBLIC_URL cannot contain a query string or fragment');
+    return value;
+}
+export function deploymentTomlValuesFromEnvironment(env) {
+    const values = {};
+    if (env.FLUXMAIL_DB_PATH !== undefined) {
+        values.dbPath = stringValue('FLUXMAIL_DB_PATH', env.FLUXMAIL_DB_PATH, '');
+    }
+    if (env.FLUXMAIL_PORT !== undefined) {
+        values.port = portValue('FLUXMAIL_PORT', env.FLUXMAIL_PORT, 8977);
+    }
+    if (env.FLUXMAIL_PUBLIC_URL !== undefined) {
+        values.publicUrl = publicUrlValue(env.FLUXMAIL_PUBLIC_URL, values.port ?? 8977);
+    }
+    if (env.FLUXMAIL_TRUST_PROXY !== undefined) {
+        values.trustProxy = booleanValue('FLUXMAIL_TRUST_PROXY', env.FLUXMAIL_TRUST_PROXY, false);
+    }
+    if (env.FLUXMAIL_OAUTH_PORT !== undefined) {
+        values.oauthPort = portValue('FLUXMAIL_OAUTH_PORT', env.FLUXMAIL_OAUTH_PORT, 8976);
+    }
+    if (env.FLUXMAIL_OAUTH_HOST !== undefined) {
+        values.oauthHost = stringValue('FLUXMAIL_OAUTH_HOST', env.FLUXMAIL_OAUTH_HOST, '127.0.0.1');
+    }
+    if (env.FLUXMAIL_MAX_ATTACHMENT_MB !== undefined) {
+        values.maxAttachmentMb = maxAttachmentValue(env.FLUXMAIL_MAX_ATTACHMENT_MB) / BYTES_PER_MEGABYTE;
+    }
+    if (env.FLUXMAIL_LOG_LEVEL !== undefined) {
+        values.logLevel = logLevelValue(env.FLUXMAIL_LOG_LEVEL);
+    }
+    if (env.FLUXMAIL_LOG_DESTINATION !== undefined) {
+        values.logDestination = logDestinationValue(env.FLUXMAIL_LOG_DESTINATION);
+    }
+    if (env.FLUXMAIL_LICENSE_SERVER_URL !== undefined) {
+        values.licenseServerUrl = stringValue('FLUXMAIL_LICENSE_SERVER_URL', env.FLUXMAIL_LICENSE_SERVER_URL, '');
+    }
+    return values;
+}
+export function readSecretEnvironment(env, name, options = {}) {
+    const configuredDirect = env[name];
+    const direct = options.blank === 'unset' && configuredDirect !== undefined && !configuredDirect.trim()
+        ? undefined
+        : configuredDirect;
+    const file = env[`${name}_FILE`];
+    if (direct !== undefined && file !== undefined) {
+        throw new Error(`Set only one of ${name} and ${name}_FILE`);
+    }
+    if (direct !== undefined) {
+        if (!direct)
+            throw new Error(`${name} cannot be empty`);
+        return { value: direct, source: 'environment' };
+    }
+    if (file !== undefined) {
+        if (!path.isAbsolute(file))
+            throw new Error(`${name}_FILE must be an absolute path`);
+        let value;
+        try {
+            value = readFileSync(file, 'utf8').replace(/\r?\n$/, '');
+        }
+        catch (error) {
+            throw new Error(`Could not read ${name}_FILE: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (!value)
+            throw new Error(`${name}_FILE points to an empty file`);
+        return { value, source: 'environment-file' };
+    }
+    return {};
+}
+function decodeEncryptionKey(value, message) {
+    if (!/^[0-9a-fA-F]{64}$/.test(value))
+        throw new Error(message);
+    return Buffer.from(value, 'hex');
+}
+function tryRestrictPermissions(file) {
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch {
+        // The subsequent read or write reports actionable permission failures.
+    }
+}
+function trySyncDirectory(directory) {
+    let descriptor;
+    try {
+        descriptor = openSync(directory, 'r');
+        fsyncSync(descriptor);
+    }
+    catch {
+        // Some filesystems do not support directory fsync.
+    }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
+}
+function resolveEncryptionKey(dataDir, env, generateIfMissing) {
+    const configured = readSecretEnvironment(env, 'FLUXMAIL_ENCRYPTION_KEY');
+    if (configured.value) {
+        return {
+            value: decodeEncryptionKey(configured.value, 'FLUXMAIL_ENCRYPTION_KEY must be exactly 64 hex characters (32 bytes)'),
+            source: configured.source,
+        };
+    }
+    const keyPath = path.join(dataDir, 'encryption.key');
+    if (existsSync(keyPath)) {
+        tryRestrictPermissions(keyPath);
+        return {
+            value: decodeEncryptionKey(readFileSync(keyPath, 'utf8').trim(), `Corrupt encryption key at ${keyPath}`),
+            source: 'stored',
+        };
+    }
+    if (!generateIfMissing)
+        return { value: Buffer.alloc(0), source: 'default' };
+    return withFileLock(path.join(dataDir, '.encryption-key.lock'), {
+        timeoutMs: CONFIG_LOCK_TIMEOUT_MS,
+        staleMs: CONFIG_LOCK_STALE_MS,
+        description: `the encryption key at ${keyPath}`,
+    }, () => {
+        if (existsSync(keyPath)) {
+            tryRestrictPermissions(keyPath);
+            return {
+                value: decodeEncryptionKey(readFileSync(keyPath, 'utf8').trim(), `Corrupt encryption key at ${keyPath}`),
+                source: 'stored',
+            };
+        }
+        const value = randomBytes(32);
+        const temporary = path.join(dataDir, `.encryption.key.${process.pid}.${randomBytes(6).toString('hex')}.tmp`);
+        let descriptor;
+        try {
+            descriptor = openSync(temporary, 'wx', 0o600);
+            writeFileSync(descriptor, `${value.toString('hex')}\n`, 'utf8');
+            fsyncSync(descriptor);
+            closeSync(descriptor);
+            descriptor = undefined;
+            renameSync(temporary, keyPath);
+            trySyncDirectory(dataDir);
+            return { value, source: 'generated' };
+        }
+        finally {
+            if (descriptor !== undefined)
+                closeSync(descriptor);
+            rmSync(temporary, { force: true });
+        }
+    });
+}
+export function configTomlPath(dataDir) {
+    return path.join(dataDir, 'config.toml');
+}
+export function resolveDeploymentConfig(options) {
+    const baseEnvironment = options.env ?? process.env;
+    const dataDirRaw = baseEnvironment.FLUXMAIL_DATA_DIR;
+    const dataDir = resolveDataDirectory(baseEnvironment);
+    mkdirSync(dataDir, { recursive: true });
+    const environment = { ...baseEnvironment };
+    const configFile = configTomlPath(dataDir);
+    const table = readToml(configFile);
+    const sources = {};
+    sources.dataDir = dataDirRaw !== undefined ? 'environment' : 'default';
+    const deploymentValue = (setting) => {
+        const resolved = sourceValue(environment, table, setting);
+        sources[setting] = resolved.source;
+        return resolved.value;
+    };
+    const dbRaw = pathValue('FLUXMAIL_DB_PATH', deploymentValue('dbPath'), path.join(dataDir, 'fluxmail.db'));
+    const portNumber = portValue('FLUXMAIL_PORT', deploymentValue('port'), 8977);
+    const publicUrl = deploymentValue('publicUrl');
+    const trustProxy = deploymentValue('trustProxy');
+    const oauthPort = deploymentValue('oauthPort');
+    const oauthHost = deploymentValue('oauthHost');
+    const maxAttachment = deploymentValue('maxAttachmentBytes');
+    const logLevel = deploymentValue('logLevel');
+    const logDestination = deploymentValue('logDestination');
+    const licenseServer = deploymentValue('licenseServerUrl');
+    const encryption = resolveEncryptionKey(dataDir, environment, options.generateEncryptionKey !== false);
+    sources.encryptionKey = encryption.source;
+    return {
+        dataDir,
+        dbPath: expandHome(dbRaw),
+        encryptionKey: encryption.value,
+        port: portNumber,
+        publicUrl: publicUrlValue(publicUrl, portNumber),
+        publicUrlConfigured: publicUrl !== undefined,
+        trustProxy: booleanValue('FLUXMAIL_TRUST_PROXY', trustProxy, false),
+        oauthPort: portValue('FLUXMAIL_OAUTH_PORT', oauthPort, 8976),
+        oauthHost: nonEmptyStringValue('FLUXMAIL_OAUTH_HOST', oauthHost, '127.0.0.1'),
+        maxAttachmentBytes: maxAttachmentValue(maxAttachment),
+        logLevel: logLevelValue(logLevel),
+        logDestination: logDestinationValue(logDestination),
+        licenseServerUrl: stringValue('FLUXMAIL_LICENSE_SERVER_URL', licenseServer, options.defaultLicenseServerUrl).replace(/\/+$/, ''),
+        configFile,
+        environment,
+        sources,
+    };
+}
+export function ensureDeploymentEncryptionKey(deployment) {
+    if (deployment.encryptionKey.length)
+        return deployment;
+    const encryption = resolveEncryptionKey(deployment.dataDir, deployment.environment, true);
+    return {
+        ...deployment,
+        encryptionKey: encryption.value,
+        sources: { ...deployment.sources, encryptionKey: encryption.source },
+    };
+}
+export function deploymentToml(values = {}) {
+    return stringify({
+        storage: values.dbPath ? { database_path: values.dbPath } : {},
+        server: {
+            port: values.port ?? 8977,
+            ...(values.publicUrl ? { public_url: values.publicUrl } : {}),
+            trust_proxy: values.trustProxy ?? false,
+            max_attachment_mb: values.maxAttachmentMb ?? 10,
+        },
+        oauth: { local: { host: values.oauthHost ?? '127.0.0.1', port: values.oauthPort ?? 8976 } },
+        logging: { level: values.logLevel ?? 'info', destination: values.logDestination ?? 'both' },
+        ...(values.licenseServerUrl ? { licensing: { server_url: values.licenseServerUrl } } : {}),
+    });
+}
+export function writeDeploymentConfig(file, content, options = {}) {
+    const directory = path.dirname(file);
+    mkdirSync(directory, { recursive: true });
+    const temporary = path.join(directory, `.config.toml.${process.pid}.${randomBytes(6).toString('hex')}.tmp`);
+    let descriptor;
+    try {
+        descriptor = openSync(temporary, 'wx', 0o600);
+        writeFileSync(descriptor, content.endsWith('\n') ? content : `${content}\n`, 'utf8');
+        fsyncSync(descriptor);
+        closeSync(descriptor);
+        descriptor = undefined;
+        if (options.exclusive) {
+            try {
+                linkSync(temporary, file);
+            }
+            catch (error) {
+                if (error.code === 'EEXIST')
+                    throw new Error(`${file} already exists`);
+                throw error;
+            }
+        }
+        else {
+            renameSync(temporary, file);
+        }
+        tryRestrictPermissions(file);
+        trySyncDirectory(directory);
+    }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+        rmSync(temporary, { force: true });
+    }
+}
+//# sourceMappingURL=deploymentConfig.js.map

package/dist/deploymentConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploymentConfig.js","sourceRoot":"","sources":["../src/deploymentConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAkB,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAyDrD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE;QACP,aAAa,EAAE,qBAAqB;QACpC,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,iBAAiB;QAC7B,YAAY,EAAE,+BAA+B;QAC7C,WAAW,EAAE,4FAA4F;QACzG,eAAe,EAAE,IAAI;KACtB;IACD,MAAM,EAAE;QACN,aAAa,EAAE,uBAAuB;QACtC,GAAG,EAAE,kBAAkB;QACvB,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,2BAA2B;QACvC,YAAY,EAAE,wBAAwB;QACtC,WAAW,EAAE,oCAAoC;QACjD,eAAe,EAAE,IAAI;KACtB;IACD,aAAa,EAAE;QACb,aAAa,EAAE,2BAA2B;QAC1C,GAAG,EAAE,yBAAyB;QAC9B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,mCAAmC;QAC/C,YAAY,EAAE,yBAAyB;QACvC,WAAW,EAAE,kFAAkF;QAC/F,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,IAAI;KACtB;IACD,IAAI,EAAE;QACJ,aAAa,EAAE,aAAa;QAC5B,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,8BAA8B;QAC1C,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,mBAAmB;QAChC,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,aAAa,EAAE,mBAAmB;QAClC,GAAG,EAAE,qBAAqB;QAC1B,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,2DAA2D;QACvE,YAAY,EAAE,kCAAkC;QAChD,WAAW,EAAE,gEAAgE;QAC7E,eAAe,EAAE,IAAI;KACtB;IACD,UAAU,EAAE;QACV,aAAa,EAAE,oBAAoB;QACnC,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,2EAA2E;QACxF,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,aAAa,EAAE,kBAAkB;QACjC,GAAG,EAAE,qBAAqB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,8BAA8B;QAC1C,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,6CAA6C;QAC1D,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,aAAa,EAAE,kBAAkB;QACjC,GAAG,EAAE,qBAAqB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,qDAAqD;QAClE,eAAe,EAAE,IAAI;KACtB;IACD,kBAAkB,EAAE;QAClB,aAAa,EAAE,0BAA0B;QACzC,GAAG,EAAE,4BAA4B;QACjC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,2BAA2B;QACvC,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,gFAAgF;QAC7F,eAAe,EAAE,IAAI;KACtB;IACD,QAAQ,EAAE;QACR,aAAa,EAAE,eAAe;QAC9B,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,2BAA2B;QACvC,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,wDAAwD;QACrE,eAAe,EAAE,IAAI;KACtB;IACD,cAAc,EAAE;QACd,aAAa,EAAE,qBAAqB;QACpC,GAAG,EAAE,0BAA0B;QAC/B,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,wBAAwB;QACpC,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,oFAAoF;QACjG,eAAe,EAAE,IAAI;KACtB;IACD,gBAAgB,EAAE;QAChB,aAAa,EAAE,sBAAsB;QACrC,GAAG,EAAE,6BAA6B;QAClC,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,uEAAuE;QACpF,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,IAAI;KACtB;CACyE,CAAC;AAE7E,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,kBAAkB,CAAC;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,kBAAkB,CAAC;AAEjE,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACzC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,uBAAuB;IACvB,QAAQ;IACR,aAAa;IACb,mBAAmB;IACnB,oBAAoB;IACpB,0BAA0B;IAC1B,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,SAAS;IACT,eAAe;IACf,qBAAqB;IACrB,WAAW;IACX,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvG,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB,EAAE,IAAY,EAAE,MAAM,GAAG,EAAE;IACnE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,MAAM;YAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB,EAAE,MAAc;IACjD,IAAI,KAAK,GAAY,KAAK,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,KAAK,GAAI,KAAiC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAClB,GAAsB,EACtB,KAAgB,EAChB,OAA8B;IAE9B,MAAM,SAAS,GAA6B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAClG,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAc,EAAE,QAAgB;IACjE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,QAAgB;IAC/D,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAc,EAAE,QAAgB;IACzE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,QAAgB;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iDAAiD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAc,EAAE,QAAiB;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,yBAAyB,GAAG,kBAAkB,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,KAAK,GAAG,kBAAkB,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5F,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,iEAAiE,KAAK,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxG,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+DAA+D,KAAK,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnH,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC;AACf,CAAC;AAeD,MAAM,UAAU,mCAAmC,CAAC,GAAsB;IACxE,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,kBAAkB,EAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,sBAAsB,EAAE,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,qBAAqB,EAAE,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,qBAAqB,EAAE,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,CAAC,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,0BAA0B,CAAC,GAAG,kBAAkB,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,CAAC,gBAAgB,GAAG,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAsB,EACtB,IAAY,EACZ,UAAyC,EAAE;IAE3C,MAAM,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;QACrF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,QAAQ,IAAI,OAAO,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;QACrF,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,OAAe;IACzD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtC,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAe,EACf,GAAsB,EACtB,iBAA0B;IAE1B,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,mBAAmB,CACxB,UAAU,CAAC,KAAK,EAChB,sEAAsE,CACvE;YACD,MAAM,EAAE,UAAU,CAAC,MAAO;SAC3B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,mBAAmB,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,6BAA6B,OAAO,EAAE,CAAC;YACxG,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7E,OAAO,YAAY,CACjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAC1C;QACE,SAAS,EAAE,sBAAsB;QACjC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,yBAAyB,OAAO,EAAE;KAChD,EACD,GAAG,EAAE;QACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO;gBACL,KAAK,EAAE,mBAAmB,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,6BAA6B,OAAO,EAAE,CAAC;gBACxG,MAAM,EAAE,QAAiB;aAC1B,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7G,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9C,aAAa,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChE,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,UAAU,GAAG,SAAS,CAAC;YACvB,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/B,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAIvC;IACC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC;IACrD,MAAM,OAAO,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACtD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,WAAW,GAAsB,EAAE,GAAG,eAAe,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,EAAiD,CAAC;IAClE,OAAO,CAAC,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvE,MAAM,eAAe,GAAG,CAAC,OAA8B,EAAW,EAAE;QAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;QACnC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,CAAC;IACvG,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;IAE1C,OAAO;QACL,OAAO;QACP,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;QACzB,aAAa,EAAE,UAAU,CAAC,KAAK;QAC/B,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC;QAChD,mBAAmB,EAAE,SAAS,KAAK,SAAS;QAC5C,UAAU,EAAE,YAAY,CAAC,sBAAsB,EAAE,UAAU,EAAE,KAAK,CAAC;QACnE,SAAS,EAAE,SAAS,CAAC,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC;QAC5D,SAAS,EAAE,mBAAmB,CAAC,qBAAqB,EAAE,SAAS,EAAE,WAAW,CAAC;QAC7E,kBAAkB,EAAE,kBAAkB,CAAC,aAAa,CAAC;QACrD,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC;QACjC,cAAc,EAAE,mBAAmB,CAAC,cAAc,CAAC;QACnD,gBAAgB,EAAE,WAAW,CAC3B,6BAA6B,EAC7B,aAAa,EACb,OAAO,CAAC,uBAAuB,CAChC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACrB,UAAU;QACV,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,UAA4B;IACxE,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IACvD,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1F,OAAO;QACL,GAAG,UAAU;QACb,aAAa,EAAE,UAAU,CAAC,KAAK;QAC/B,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAA+B,EAAE;IAC9D,OAAO,SAAS,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAC9D,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACvC,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;SAChD;QACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,EAAE;QAC3F,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,EAAE;QAC3F,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAe,EAAE,UAAmC,EAAE;IACxG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5G,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,EAAE,MAAM,CAAC,CAAC;QACrF,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;QACvB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;gBAClG,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/http/admin.d.ts

@@ -1,21 +1,93 @@
 import { type OpenAPIHono } from '@hono/zod-openapi';
 import type { AccountRegistry } from '../accounts/registry.js';
-import type { FluxmailConfig } from '../config.js';
-import type { LicenseController } from '../licensing/refresher.js';
+import { type ConfigurationService, type FluxmailConfig } from '../config.js';
+import { type LicenseController } from '../licensing/refresher.js';
 import type { FluxmailDb } from '../storage/db.js';
+import { type Logger } from '../logging.js';
 export declare const ADMIN_BODY_LIMIT: number;
 export declare const ADMIN_CONNECTION_TIMEOUT_MS = 30000;
+export declare const adminOperationRoutes: {
+    readonly createConnection: {
+        readonly method: "post";
+        readonly path: "/api/v1/admin/connections";
+        readonly operationId: "createAdministrativeConnection";
+    };
+    readonly testImapConnection: {
+        readonly method: "post";
+        readonly path: "/api/v1/admin/imap/tests";
+        readonly operationId: "testAdministrativeImapConnection";
+    };
+    readonly updateImapFolders: {
+        readonly method: "patch";
+        readonly path: "/api/v1/admin/accounts/{accountId}/imap/folders";
+        readonly operationId: "updateAdministrativeImapFolders";
+    };
+    readonly listApiKeys: {
+        readonly method: "get";
+        readonly path: "/api/v1/admin/api-keys";
+        readonly operationId: "listAdministrativeApiKeys";
+    };
+    readonly createApiKey: {
+        readonly method: "post";
+        readonly path: "/api/v1/admin/api-keys";
+        readonly operationId: "createAdministrativeApiKey";
+    };
+    readonly updateApiKey: {
+        readonly method: "patch";
+        readonly path: "/api/v1/admin/api-keys/{keyId}";
+        readonly operationId: "updateAdministrativeApiKey";
+    };
+    readonly revokeApiKey: {
+        readonly method: "delete";
+        readonly path: "/api/v1/admin/api-keys/{keyId}";
+        readonly operationId: "revokeAdministrativeApiKey";
+    };
+    readonly getOauthApps: {
+        readonly method: "get";
+        readonly path: "/api/v1/admin/oauth-apps";
+        readonly operationId: "getAdministrativeOAuthApps";
+    };
+    readonly putOauthApp: {
+        readonly method: "put";
+        readonly path: "/api/v1/admin/oauth-apps/{provider}";
+        readonly operationId: "putAdministrativeOAuthApp";
+    };
+    readonly deleteOauthApp: {
+        readonly method: "delete";
+        readonly path: "/api/v1/admin/oauth-apps/{provider}";
+        readonly operationId: "deleteAdministrativeOAuthApp";
+    };
+    readonly getLicense: {
+        readonly method: "get";
+        readonly path: "/api/v1/admin/license";
+        readonly operationId: "getAdministrativeLicense";
+    };
+    readonly activateLicense: {
+        readonly method: "post";
+        readonly path: "/api/v1/admin/license/activate";
+        readonly operationId: "activateAdministrativeLicense";
+    };
+    readonly deactivateLicense: {
+        readonly method: "delete";
+        readonly path: "/api/v1/admin/license";
+        readonly operationId: "deactivateAdministrativeLicense";
+    };
+};
+export declare function adminOperationId(method: string, path: string): string | undefined;
 export interface AdminConnectionSecurity {
     remoteAddress?: string;
     encrypted?: boolean;
 }
-export declare function administrationUsesHttps(request: Request, connection?: AdminConnectionSecurity): boolean;
+export declare function administrationUsesHttps(request: Request, connection?: AdminConnectionSecurity, trustProxy?: boolean): boolean;
+export declare function requestClientAddress(request: Request, connection?: AdminConnectionSecurity, trustProxy?: boolean): string;
 export declare function requestBodyExceedsLimit(request: Request, limit?: number): Promise<boolean>;
 export interface AdminApiDeps {
     config: FluxmailConfig;
+    configuration: ConfigurationService;
     db: FluxmailDb;
     registry?: AccountRegistry;
     licenseController?: LicenseController;
+    logger?: Logger;
 }
 export declare function registerAdminRoutes(app: OpenAPIHono<any>, deps: AdminApiDeps): void;
 //# sourceMappingURL=admin.d.ts.map