openxiangda-nest 2.0.0-alpha.100

package/dist/events.js

@@ -0,0 +1,513 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { BadRequestException, HttpException, Inject, Injectable, ServiceUnavailableException, UnauthorizedException } from '@nestjs/common';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+import { DATA_EVENT_TYPES_V2, DATA_RECORD_EVENT_DATA_SCHEMA_V2, EVENT_DATA_MAX_BYTES_V2, SCHEMA_VERSIONS, WORKFLOW_EVENT_DATA_SCHEMA_V2, WORKFLOW_EVENT_TYPES_V2, eventDeliverySignatureContentV2, sha256Digest, } from 'openxiangda-contracts';
+import { OPENXIANGDA_EVENT_RECEIPT_STORE, OPENXIANGDA_MODULE_OPTIONS } from './tokens.js';
+import { OpenXiangdaEventContext, } from './event-context.js';
+class OpenXiangdaEventReceiptBusyError extends Error {
+}
+export class OpenXiangdaEventRetryableError extends HttpException {
+    constructor(code, message = '事件处理暂时不可用', status = 503) {
+        if (![408, 409, 425, 429].includes(status) && status < 500) {
+            throw new Error('retryable event status 必须是 408/409/425/429/5xx');
+        }
+        super({ code, message, retryable: true }, status);
+    }
+}
+export class OpenXiangdaEventDeterministicError extends HttpException {
+    constructor(code, message = '事件业务请求不可处理', status = 422) {
+        if (status < 400 || status >= 500 || [408, 409, 425, 429].includes(status)) {
+            throw new Error('deterministic event status 必须是非重试 4xx');
+        }
+        super({ code, message, retryable: false }, status);
+    }
+}
+/**
+ * Resolves only declared event subscription credentials from the standard
+ * platform environment contract. A staged next secret is first so a rolling
+ * deployment can acknowledge deliveries with the credential being activated.
+ */
+export function eventSigningSecretsFromEnvironment(subscriptionCodes, environment = process.env) {
+    return Object.fromEntries([...new Set(subscriptionCodes.map(String))].sort().flatMap(code => {
+        const envCode = code.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
+        const active = String(environment[`OPENXIANGDA_EVENT_SECRET_${envCode}`] || '').trim();
+        const next = String(environment[`OPENXIANGDA_EVENT_SECRET_${envCode}_NEXT`] || '').trim();
+        const values = [next, active].filter(Boolean);
+        return values.length ? [[code, values]] : [];
+    }));
+}
+let InMemoryOpenXiangdaEventReceiptStore = class InMemoryOpenXiangdaEventReceiptStore {
+    receipts = new Map();
+    async claim(receipt) {
+        const key = this.key(receipt);
+        const current = this.receipts.get(key);
+        if (current === 'processing')
+            return 'busy';
+        if (current === 'succeeded')
+            return 'duplicate';
+        this.receipts.set(key, 'processing');
+        return 'claimed';
+    }
+    async complete(receipt) {
+        this.receipts.set(this.key(receipt), 'succeeded');
+    }
+    async release(receipt) {
+        const key = this.key(receipt);
+        if (this.receipts.get(key) === 'processing')
+            this.receipts.delete(key);
+    }
+    key(receipt) {
+        return `${receipt.tenantId}:${receipt.appCode}:${receipt.environmentKey}:${receipt.subscriptionCode}:${receipt.eventId}`;
+    }
+};
+InMemoryOpenXiangdaEventReceiptStore = __decorate([
+    Injectable()
+], InMemoryOpenXiangdaEventReceiptStore);
+export { InMemoryOpenXiangdaEventReceiptStore };
+/**
+ * Production receipt store backed by the OpenXiangda platform database.
+ * The event subscription secret authenticates every command; no app OAuth
+ * credential or local database is required.
+ */
+let PlatformOpenXiangdaEventReceiptStore = class PlatformOpenXiangdaEventReceiptStore {
+    options;
+    claimTokens = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    async claim(receipt) {
+        let result;
+        try {
+            result = await this.execute(receipt, 'claim');
+        }
+        catch (error) {
+            if (error instanceof OpenXiangdaEventReceiptBusyError)
+                return 'busy';
+            throw error;
+        }
+        if (result.outcome === 'claimed' && result.claimToken) {
+            this.claimTokens.set(this.key(receipt), result.claimToken);
+            return 'claimed';
+        }
+        if (result.outcome === 'duplicate' && result.status === 'succeeded') {
+            return 'duplicate';
+        }
+        if (result.outcome === 'duplicate' && result.status === 'processing') {
+            return 'busy';
+        }
+        throw new ServiceUnavailableException('平台返回了不一致的事件回执领取状态');
+    }
+    async complete(receipt) {
+        await this.finish(receipt, 'complete');
+        this.claimTokens.delete(this.key(receipt));
+    }
+    async release(receipt) {
+        try {
+            await this.finish(receipt, 'release');
+        }
+        finally {
+            this.claimTokens.delete(this.key(receipt));
+        }
+    }
+    async finish(receipt, action) {
+        const key = this.key(receipt);
+        const claimToken = this.claimTokens.get(key);
+        if (!claimToken) {
+            throw new ServiceUnavailableException('当前事件缺少平台回执 claimToken');
+        }
+        const maxAttempts = Math.max(1, Math.min(5, Math.floor(this.options.eventReceiptMaxAttempts || 3)));
+        const baseDelay = Math.max(0, Math.min(2_000, Math.floor(this.options.eventReceiptRetryDelayMs ?? 150)));
+        for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
+            try {
+                const result = await this.execute(receipt, action, claimToken);
+                const expectedOutcome = action === 'complete' ? 'completed' : 'released';
+                if (result.outcome !== expectedOutcome &&
+                    !(action === 'release' && result.outcome === 'completed')) {
+                    throw new ServiceUnavailableException(`平台事件回执 ${action} 返回状态不一致`);
+                }
+                return;
+            }
+            catch (error) {
+                if (!(error instanceof ServiceUnavailableException) ||
+                    attempt >= maxAttempts) {
+                    throw error;
+                }
+                await this.delay(baseDelay * 2 ** (attempt - 1));
+            }
+        }
+    }
+    async delay(milliseconds) {
+        if (milliseconds <= 0)
+            return;
+        await new Promise(resolve => setTimeout(resolve, milliseconds));
+    }
+    async execute(receipt, action, claimToken) {
+        const secret = this.signingSecrets(receipt.subscriptionCode)[0];
+        if (!secret) {
+            throw new UnauthorizedException('事件订阅签名密钥未配置');
+        }
+        const command = {
+            schemaVersion: SCHEMA_VERSIONS.eventReceiptCommand,
+            action,
+            ...receipt,
+            ...(claimToken ? { claimToken } : {}),
+        };
+        const timestamp = String(Math.floor(Date.now() / 1000));
+        const signature = createHmac('sha256', secret)
+            .update(this.signatureContent(command, timestamp))
+            .digest('hex');
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), Math.max(1_000, this.options.requestTimeoutMs || 10_000));
+        let response;
+        try {
+            const fetcher = this.options.fetch || globalThis.fetch;
+            response = await fetcher(this.receiptUrl(), {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-OpenXiangda-Timestamp': timestamp,
+                    'X-OpenXiangda-Signature': `v1=${signature}`,
+                },
+                body: JSON.stringify(command),
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            throw new ServiceUnavailableException(error instanceof Error && error.name === 'AbortError'
+                ? '平台事件回执请求超时'
+                : '平台事件回执请求失败');
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+        let envelope;
+        try {
+            envelope = (await response.json());
+        }
+        catch {
+            throw new ServiceUnavailableException('平台事件回执返回的不是有效 JSON');
+        }
+        const code = Number(envelope.code ?? response.status);
+        if (!response.ok || code >= 400) {
+            if (action === 'claim' &&
+                response.status === 409 &&
+                envelope.errorCode === 'EVENT_V2_RECEIPT_IN_PROGRESS') {
+                throw new OpenXiangdaEventReceiptBusyError();
+            }
+            const message = String(envelope.errorCode || envelope.message || '').trim() ||
+                `平台事件回执请求失败 (${response.status})`;
+            if (response.status === 401 || response.status === 403) {
+                throw new UnauthorizedException(message);
+            }
+            throw new ServiceUnavailableException(message);
+        }
+        const result = envelope.data;
+        if (!result ||
+            result.schemaVersion !== SCHEMA_VERSIONS.eventReceiptResult ||
+            result.eventId !== receipt.eventId ||
+            result.deliveryId !== receipt.deliveryId ||
+            !Number.isInteger(result.attempts)) {
+            throw new ServiceUnavailableException('平台事件回执响应不符合 v2 协议');
+        }
+        return result;
+    }
+    signatureContent(command, timestamp) {
+        return [
+            SCHEMA_VERSIONS.eventReceiptCommand,
+            timestamp,
+            command.action,
+            command.tenantId,
+            command.appCode,
+            command.environmentKey,
+            command.subscriptionCode,
+            command.eventId,
+            command.deliveryId,
+            command.claimToken || '',
+        ].join('\n');
+    }
+    receiptUrl() {
+        return new URL('openxiangda-api/v2/event-receipts', this.options.platformBaseUrl.endsWith('/')
+            ? this.options.platformBaseUrl
+            : `${this.options.platformBaseUrl}/`).toString();
+    }
+    signingSecrets(subscriptionCode) {
+        const configured = this.options.eventSigningSecrets?.[subscriptionCode] ||
+            this.options.eventSigningSecret;
+        return (Array.isArray(configured) ? configured : [configured])
+            .map(secret => String(secret || '').trim())
+            .filter(Boolean);
+    }
+    key(receipt) {
+        return `${receipt.tenantId}:${receipt.appCode}:${receipt.environmentKey}:${receipt.subscriptionCode}:${receipt.eventId}`;
+    }
+};
+PlatformOpenXiangdaEventReceiptStore = __decorate([
+    Injectable(),
+    __param(0, Inject(OPENXIANGDA_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], PlatformOpenXiangdaEventReceiptStore);
+export { PlatformOpenXiangdaEventReceiptStore };
+let OpenXiangdaEventReceiver = class OpenXiangdaEventReceiver {
+    options;
+    receipts;
+    eventContext;
+    validators = new Map();
+    constructor(options, receipts, eventContext) {
+        this.options = options;
+        this.receipts = receipts;
+        this.eventContext = eventContext;
+        const ajv = new Ajv2020({
+            allErrors: true,
+            strict: false,
+            allowUnionTypes: true,
+        });
+        const register = (eventType, dataSchemaVersion, jsonSchema) => {
+            const key = this.schemaKey(eventType, dataSchemaVersion);
+            if (this.validators.has(key)) {
+                throw new Error(`事件 Schema 重复: ${eventType}@${dataSchemaVersion}`);
+            }
+            this.validators.set(key, ajv.compile(jsonSchema));
+        };
+        for (const eventType of DATA_EVENT_TYPES_V2) {
+            register(eventType, '2.0.0', DATA_RECORD_EVENT_DATA_SCHEMA_V2);
+        }
+        for (const eventType of WORKFLOW_EVENT_TYPES_V2) {
+            register(eventType, '2.0.0', WORKFLOW_EVENT_DATA_SCHEMA_V2);
+        }
+        for (const schema of this.options.eventSchemas || []) {
+            registerSchema(register, schema);
+        }
+    }
+    async accept(contract, headers, rawBody, handler) {
+        const bytes = Buffer.isBuffer(rawBody)
+            ? rawBody.byteLength
+            : Buffer.byteLength(String(rawBody || ''), 'utf8');
+        if (bytes > Math.min(contract.maxBodyBytes, EVENT_DATA_MAX_BYTES_V2)) {
+            throw new BadRequestException('事件 raw body 超过 handler 上限');
+        }
+        const body = Buffer.isBuffer(rawBody)
+            ? rawBody.toString('utf8')
+            : String(rawBody || '');
+        if (!body)
+            throw new BadRequestException('事件 raw body 不能为空');
+        const event = this.parseEvent(body);
+        const subscriptionCode = this.header(headers, 'x-openxiangda-subscription-code');
+        const timestamp = this.header(headers, 'x-openxiangda-timestamp');
+        const signature = this.header(headers, 'x-openxiangda-signature');
+        const deliveryId = this.header(headers, 'x-openxiangda-delivery-id');
+        const eventId = this.header(headers, 'x-openxiangda-event-id');
+        const signingKeyVersion = this.header(headers, 'x-openxiangda-signing-key-version');
+        const handlerManifestDigest = this.header(headers, 'x-openxiangda-handler-manifest-digest');
+        this.assertContentType(headers);
+        if (subscriptionCode !== contract.code) {
+            throw new UnauthorizedException('事件订阅与 handler 不一致');
+        }
+        if (eventId !== event.id) {
+            throw new UnauthorizedException('事件 ID header 与 body 不一致');
+        }
+        if (!/^[1-9]\d*$/.test(signingKeyVersion)) {
+            throw new UnauthorizedException('事件签名 key version 无效');
+        }
+        if (handlerManifestDigest !== this.manifestDigest()) {
+            throw new UnauthorizedException('事件 handler manifest 与运行版本不一致');
+        }
+        this.assertTimestamp(timestamp);
+        this.assertSignature(subscriptionCode, timestamp, signature, signingKeyVersion, deliveryId, eventId, handlerManifestDigest, body);
+        if (event.appcode !== this.options.appCode) {
+            throw new UnauthorizedException('事件 appCode 与当前应用不一致');
+        }
+        if (event.environment !== this.options.environmentKey) {
+            throw new UnauthorizedException('事件 environment 与当前环境不一致');
+        }
+        this.assertEventSchema(contract, event);
+        const receipt = {
+            tenantId: event.tenantid,
+            appCode: event.appcode,
+            environmentKey: event.environment,
+            subscriptionCode,
+            eventId: event.id,
+            deliveryId,
+        };
+        const claim = await this.receipts.claim(receipt);
+        if (claim === 'duplicate') {
+            return this.ack(event.id, deliveryId, true);
+        }
+        if (claim === 'busy') {
+            throw new OpenXiangdaEventRetryableError('OPENXIANGDA_EVENT_RECEIPT_BUSY', '事件已由另一个实例处理中，请稍后重试', 425);
+        }
+        try {
+            await this.eventContext.run(event, deliveryId, subscriptionCode, async (context) => await handler(event, context));
+        }
+        catch (handlerError) {
+            try {
+                await this.receipts.release(receipt);
+            }
+            catch (receiptError) {
+                const combined = new ServiceUnavailableException({
+                    status: 'event_receipt_release_failed',
+                    message: '业务处理失败，且平台事件回执释放失败',
+                    handlerError: handlerError instanceof Error
+                        ? handlerError.message
+                        : String(handlerError),
+                    receiptError: receiptError instanceof Error
+                        ? receiptError.message
+                        : String(receiptError),
+                });
+                combined.cause = handlerError;
+                throw combined;
+            }
+            throw handlerError;
+        }
+        // The handler has already committed its side effects. Completion is
+        // idempotent and retried by the receipt store; never release here, or a
+        // transient acknowledgement failure would invite immediate re-execution.
+        await this.receipts.complete(receipt);
+        return this.ack(event.id, deliveryId, false);
+    }
+    parseEvent(body) {
+        let value;
+        try {
+            value = JSON.parse(body);
+        }
+        catch {
+            throw new BadRequestException('事件 body 不是有效 JSON');
+        }
+        const event = value;
+        if (!event ||
+            event.specversion !== '1.0' ||
+            !String(event.id || '').trim() ||
+            !String(event.type || '').trim() ||
+            !String(event.source || '').trim() ||
+            !String(event.time || '').trim() ||
+            !String(event.tenantid || '').trim() ||
+            !String(event.appcode || '').trim() ||
+            !String(event.environment || '').trim() ||
+            event.datacontenttype !== 'application/json' ||
+            !String(event.schemaversion || '').trim() ||
+            !event.data ||
+            typeof event.data !== 'object' ||
+            Array.isArray(event.data)) {
+            throw new BadRequestException('事件不符合 CloudEvents 1.0 协议');
+        }
+        return event;
+    }
+    assertTimestamp(value) {
+        const timestamp = Number(value);
+        const maxAgeSeconds = Math.max(30, this.options.eventMaxAgeSeconds || 300);
+        if (!Number.isSafeInteger(timestamp) ||
+            Math.abs(Math.floor(Date.now() / 1000) - timestamp) > maxAgeSeconds) {
+            throw new UnauthorizedException('事件签名时间戳无效或已过期');
+        }
+    }
+    assertSignature(subscriptionCode, timestamp, value, signingKeyVersion, deliveryId, eventId, handlerManifestDigest, body) {
+        const configured = this.options.eventSigningSecrets?.[subscriptionCode] ||
+            this.options.eventSigningSecret;
+        const secrets = (Array.isArray(configured) ? configured : [configured])
+            .map(secret => String(secret || '').trim())
+            .filter(Boolean);
+        if (!secrets.length) {
+            throw new UnauthorizedException('事件订阅签名密钥未配置');
+        }
+        const actual = value.startsWith('v2=') ? value.slice(3) : '';
+        if (!/^[0-9a-f]{64}$/i.test(actual)) {
+            throw new UnauthorizedException('事件签名无效');
+        }
+        const actualBuffer = Buffer.from(actual, 'hex');
+        const valid = secrets.some(secret => {
+            const expectedBuffer = Buffer.from(createHmac('sha256', secret)
+                .update(eventDeliverySignatureContentV2({
+                timestamp,
+                signingKeyVersion,
+                deliveryId,
+                eventId,
+                subscriptionCode,
+                handlerManifestDigest,
+                rawBody: body,
+            }))
+                .digest('hex'), 'hex');
+            return (actualBuffer.length === expectedBuffer.length &&
+                timingSafeEqual(actualBuffer, expectedBuffer));
+        });
+        if (!valid) {
+            throw new UnauthorizedException('事件签名无效');
+        }
+    }
+    assertContentType(headers) {
+        const value = this.header(headers, 'content-type').toLowerCase();
+        if (!value.startsWith('application/cloudevents+json')) {
+            throw new BadRequestException('事件 Content-Type 必须是 structured CloudEvents JSON');
+        }
+    }
+    assertEventSchema(contract, event) {
+        if (!contract.eventTypes.includes(event.type)) {
+            throw new BadRequestException('事件类型不在 handler manifest 中');
+        }
+        if (!contract.dataSchemaVersions.includes(event.schemaversion)) {
+            throw new BadRequestException('事件 data schema version 不受 handler 支持');
+        }
+        const validate = this.validators.get(this.schemaKey(event.type, event.schemaversion));
+        if (!validate) {
+            throw new BadRequestException('事件 data schema 未随应用版本声明');
+        }
+        if (!validate(event.data)) {
+            throw new BadRequestException('事件 data 不符合声明的 JSON Schema');
+        }
+    }
+    manifestDigest() {
+        const manifest = this.options.eventHandlerManifest;
+        if (!manifest ||
+            manifest.schemaVersion !== SCHEMA_VERSIONS.eventHandlerManifest ||
+            manifest.appCode !== this.options.appCode) {
+            throw new ServiceUnavailableException('运行版本缺少事件 handler manifest');
+        }
+        return sha256Digest(manifest);
+    }
+    schemaKey(eventType, dataSchemaVersion) {
+        return `${eventType}\u0000${dataSchemaVersion}`;
+    }
+    ack(eventId, deliveryId, duplicate) {
+        return {
+            schemaVersion: SCHEMA_VERSIONS.eventDeliveryAck,
+            accepted: true,
+            duplicate,
+            eventId,
+            deliveryId,
+            receiptStatus: 'succeeded',
+        };
+    }
+    header(headers, name) {
+        const value = headers[name] ?? headers[name.toLowerCase()];
+        const normalized = Array.isArray(value) ? value[0] : value;
+        if (!String(normalized || '').trim()) {
+            throw new UnauthorizedException(`缺少事件头 ${name}`);
+        }
+        return String(normalized).trim();
+    }
+};
+OpenXiangdaEventReceiver = __decorate([
+    Injectable(),
+    __param(0, Inject(OPENXIANGDA_MODULE_OPTIONS)),
+    __param(1, Inject(OPENXIANGDA_EVENT_RECEIPT_STORE)),
+    __param(2, Inject(OpenXiangdaEventContext)),
+    __metadata("design:paramtypes", [Object, Object, OpenXiangdaEventContext])
+], OpenXiangdaEventReceiver);
+export { OpenXiangdaEventReceiver };
+function registerSchema(register, schema) {
+    if (schema.owner !== 'application') {
+        throw new Error(`应用 eventSchemas 不能覆盖平台 Schema: ${schema.eventType}`);
+    }
+    register(schema.eventType, schema.dataSchemaVersion, schema.jsonSchema);
+}
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,MAAM,EACN,UAAU,EACV,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAyB,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,mBAAmB,EACnB,gCAAgC,EAChC,uBAAuB,EACvB,eAAe,EACf,6BAA6B,EAC7B,uBAAuB,EACvB,+BAA+B,EAC/B,YAAY,GAOb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAS5B,MAAM,gCAAiC,SAAQ,KAAK;CAAG;AAEvD,MAAM,OAAO,8BAA+B,SAAQ,aAAa;IAC/D,YACE,IAAY,EACZ,OAAO,GAAG,WAAW,EACrB,MAAM,GAAG,GAAG;QAEZ,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,kCAAmC,SAAQ,aAAa;IACnE,YAAY,IAAY,EAAE,OAAO,GAAG,YAAY,EAAE,MAAM,GAAG,GAAG;QAC5D,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,iBAAoC,EACpC,cAAkD,OAAO,CAAC,GAAG;IAE7D,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CACnB,WAAW,CAAC,4BAA4B,OAAO,EAAE,CAAC,IAAI,EAAE,CACzD,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,MAAM,CACjB,WAAW,CAAC,4BAA4B,OAAO,OAAO,CAAC,IAAI,EAAE,CAC9D,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAGM,IAAM,oCAAoC,GAA1C,MAAM,oCAAoC;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IAE1E,KAAK,CAAC,KAAK,CACT,OAAuC;QAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,YAAY;YAAE,OAAO,MAAM,CAAC;QAC5C,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAuC;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAuC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,YAAY;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAEO,GAAG,CAAC,OAAuC;QACjD,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3H,CAAC;CACF,CAAA;AA1BY,oCAAoC;IADhD,UAAU,EAAE;GACA,oCAAoC,CA0BhD;;AAED;;;;GAIG;AAEI,IAAM,oCAAoC,GAA1C,MAAM,oCAAoC;IAO5B;IAJF,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzD,YAEmB,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;IACjD,CAAC;IAEJ,KAAK,CAAC,KAAK,CACT,OAAuC;QAEvC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAgC;gBAAE,OAAO,MAAM,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAuC;QACpD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAuC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,OAAuC,EACvC,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,2BAA2B,CAAC,uBAAuB,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,IAAI,CAAC,CAAC,CAAC,CACnE,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC,CAC1E,CAAC;QACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC/D,MAAM,eAAe,GACnB,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;gBACnD,IACE,MAAM,CAAC,OAAO,KAAK,eAAe;oBAClC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,EACzD,CAAC;oBACD,MAAM,IAAI,2BAA2B,CACnC,UAAU,MAAM,UAAU,CAC3B,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC;oBAC/C,OAAO,IAAI,WAAW,EACtB,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,YAAoB;QACtC,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO;QAC9B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAAuC,EACvC,MAAqC,EACrC,UAAmB;QAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,qBAAqB,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,OAAO,GAAwB;YACnC,aAAa,EAAE,eAAe,CAAC,mBAAmB;YAClD,MAAM;YACN,GAAG,OAAO;YACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC3C,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;aACjD,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,CACzD,CAAC;QACF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YACvD,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,yBAAyB,EAAE,SAAS;oBACpC,yBAAyB,EAAE,MAAM,SAAS,EAAE;iBAC7C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,2BAA2B,CACnC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;gBACnD,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,YAAY,CACjB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,QAKH,CAAC;QACF,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChC,IACE,MAAM,KAAK,OAAO;gBAClB,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,SAAS,KAAK,8BAA8B,EACrD,CAAC;gBACD,MAAM,IAAI,gCAAgC,EAAE,CAAC;YAC/C,CAAC;YACD,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBAC3D,eAAe,QAAQ,CAAC,MAAM,GAAG,CAAC;YACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAA+C,CAAC;QACxE,IACE,CAAC,MAAM;YACP,MAAM,CAAC,aAAa,KAAK,eAAe,CAAC,kBAAkB;YAC3D,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAClC,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YACxC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAA4B,CAAC;IACtC,CAAC;IAEO,gBAAgB,CAAC,OAA4B,EAAE,SAAiB;QACtE,OAAO;YACL,eAAe,CAAC,mBAAmB;YACnC,SAAS;YACT,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,cAAc;YACtB,OAAO,CAAC,gBAAgB;YACxB,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,UAAU,IAAI,EAAE;SACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,GAAG,CACZ,mCAAmC,EACnC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe;YAC9B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,CACvC,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,gBAAwB;QAC7C,MAAM,UAAU,GACd,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aAC3D,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAEO,GAAG,CAAC,OAAuC;QACjD,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3H,CAAC;CACF,CAAA;AA3NY,oCAAoC;IADhD,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;;GAN1B,oCAAoC,CA2NhD;;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAKhB;IAEA;IAEA;IARF,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAElE,YAEmB,OAAiC,EAEjC,QAAsC,EAEtC,YAAqC;QAJrC,YAAO,GAAP,OAAO,CAA0B;QAEjC,aAAQ,GAAR,QAAQ,CAA8B;QAEtC,iBAAY,GAAZ,YAAY,CAAyB;QAEtD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;YACtB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,KAAK;YACb,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CACf,SAAiB,EACjB,iBAAyB,EACzB,UAAmC,EACnC,EAAE;YACF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,iBAAiB,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,gCAAgC,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;YAChD,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACrD,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAiC,EACjC,OAAsD,EACtD,OAAwB,EACxB,OAG+B;QAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,UAAU;YACpB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAClC,OAAO,EACP,iCAAiC,CAClC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACnC,OAAO,EACP,mCAAmC,CACpC,CAAC;QACF,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CACvC,OAAO,EACP,uCAAuC,CACxC,CAAC;QACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,gBAAgB,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,qBAAqB,KAAK,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,eAAe,CAClB,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,OAAO,EACP,qBAAqB,EACrB,IAAI,CACL,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACtD,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,OAAO,GAAmC;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,gBAAgB;YAChB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,UAAU;SACX,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CACtC,gCAAgC,EAChC,oBAAoB,EACpB,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CACzB,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,KAAK,EAAC,OAAO,EAAC,EAAE,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,2BAA2B,CAAC;oBAC/C,MAAM,EAAE,8BAA8B;oBACtC,OAAO,EAAE,oBAAoB;oBAC7B,YAAY,EACV,YAAY,YAAY,KAAK;wBAC3B,CAAC,CAAC,YAAY,CAAC,OAAO;wBACtB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC1B,YAAY,EACV,YAAY,YAAY,KAAK;wBAC3B,CAAC,CAAC,YAAY,CAAC,OAAO;wBACtB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;iBAC3B,CAAsD,CAAC;gBACxD,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAC;gBAC9B,MAAM,QAAQ,CAAC;YACjB,CAAC;YACD,MAAM,YAAY,CAAC;QACrB,CAAC;QACD,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,KAA4B,CAAC;QAC3C,IACE,CAAC,KAAK;YACN,KAAK,CAAC,WAAW,KAAK,KAAK;YAC3B,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9B,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAChC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAClC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAChC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACpC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACnC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACvC,KAAK,CAAC,eAAe,KAAK,kBAAkB;YAC5C,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACzC,CAAC,KAAK,CAAC,IAAI;YACX,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAmB,CAAC;IAC7B,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC;QAC3E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,aAAa,EACnE,CAAC;YACD,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,gBAAwB,EACxB,SAAiB,EACjB,KAAa,EACb,iBAAyB,EACzB,UAAkB,EAClB,OAAe,EACf,qBAA6B,EAC7B,IAAY;QAEZ,MAAM,UAAU,GACd,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAClC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aACpE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,qBAAqB,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAClC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAChC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;iBACzB,MAAM,CACL,+BAA+B,CAAC;gBAC9B,SAAS;gBACT,iBAAiB;gBACjB,UAAU;gBACV,OAAO;gBACP,gBAAgB;gBAChB,qBAAqB;gBACrB,OAAO,EAAE,IAAI;aACd,CAAC,CACH;iBACA,MAAM,CAAC,KAAK,CAAC,EAChB,KAAK,CACN,CAAC;YACF,OAAO,CACL,YAAY,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;gBAC7C,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,OAAsD;QAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAAC,iDAAiD,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,QAAiC,EACjC,KAAiB;QAEjB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAAC,sCAAsC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAChD,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACnD,IACE,CAAC,QAAQ;YACT,QAAQ,CAAC,aAAa,KAAK,eAAe,CAAC,oBAAoB;YAC/D,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EACzC,CAAC;YACD,MAAM,IAAI,2BAA2B,CAAC,2BAA2B,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,iBAAyB;QAC5D,OAAO,GAAG,SAAS,SAAS,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAEO,GAAG,CACT,OAAe,EACf,UAAkB,EAClB,SAAkB;QAElB,OAAO;YACL,aAAa,EAAE,eAAe,CAAC,gBAAgB;YAC/C,QAAQ,EAAE,IAAI;YACd,SAAS;YACT,OAAO;YACP,UAAU;YACV,aAAa,EAAE,WAAW;SAC3B,CAAC;IACJ,CAAC;IAEO,MAAM,CACZ,OAAsD,EACtD,IAAY;QAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,qBAAqB,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;CACF,CAAA;AAlUY,wBAAwB;IADpC,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;IAElC,WAAA,MAAM,CAAC,+BAA+B,CAAC,CAAA;IAEvC,WAAA,MAAM,CAAC,uBAAuB,CAAC,CAAA;qDACD,uBAAuB;GAT7C,wBAAwB,CAkUpC;;AAED,SAAS,cAAc,CACrB,QAIS,EACT,MAA6B;IAE7B,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC"}

package/dist/gateway-transport.d.ts

@@ -0,0 +1,53 @@
+import { CanActivate, ExecutionContext } from "@nestjs/common";
+import { OpenXiangdaPlatformClient } from "./platform-client.js";
+import type { OpenXiangdaHttpRequest, OpenXiangdaModuleOptions } from "./types.js";
+interface GatewayAssertionPayload {
+    assertion_contract: "native-2";
+    iss: "openxiangda-platform-gateway";
+    aud: "openxiangda-app-backend";
+    tenant_id: string;
+    app_code: string;
+    environment_id: string;
+    environment_key: string;
+    app_version_id: string;
+    deployment_run_id: string;
+    head_revision: number;
+    backend_revision_id: string;
+    method: string;
+    normalized_path: string;
+    canonical_query_digest: string;
+    body_digest: string;
+    invocation_token_digest: string;
+    perspective_code: string | null;
+    jti: string;
+    iat: number;
+    nbf: number;
+    exp: number;
+}
+export declare class OpenXiangdaGatewayAssertionVerifier {
+    private readonly platform;
+    private readonly options;
+    private keys;
+    private keysExpireAt;
+    constructor(platform: OpenXiangdaPlatformClient, options: OpenXiangdaModuleOptions);
+    verify(input: {
+        assertion: string;
+        invocationToken: string;
+        request: OpenXiangdaHttpRequest;
+    }): Promise<GatewayAssertionPayload>;
+    private assertPayload;
+    private key;
+    private fail;
+}
+export declare class OpenXiangdaGatewayTransportGuard implements CanActivate {
+    private readonly verifier;
+    private readonly platform;
+    private readonly options;
+    constructor(verifier: OpenXiangdaGatewayAssertionVerifier, platform: OpenXiangdaPlatformClient, options: OpenXiangdaModuleOptions);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private acceptConnectedDevelopment;
+    private assertInvocation;
+    private fail;
+}
+export {};
+//# sourceMappingURL=gateway-transport.d.ts.map

package/dist/gateway-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-transport.d.ts","sourceRoot":"","sources":["../src/gateway-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAIjB,MAAM,gBAAgB,CAAC;AAQxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,OAAO,KAAK,EACV,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,UAAU,uBAAuB;IAC/B,kBAAkB,EAAE,UAAU,CAAC;IAC/B,GAAG,EAAE,8BAA8B,CAAC;IACpC,GAAG,EAAE,yBAAyB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,EAAE,MAAM,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qBACa,mCAAmC;IAM5C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP1B,OAAO,CAAC,IAAI,CAA0C;IACtD,OAAO,CAAC,YAAY,CAAK;gBAIN,QAAQ,EAAE,yBAAyB,EAEnC,OAAO,EAAE,wBAAwB;IAG9C,MAAM,CAAC,KAAK,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,sBAAsB,CAAC;KACjC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA8CpC,OAAO,CAAC,aAAa;YAwCP,GAAG;IA6BjB,OAAO,CAAC,IAAI;CAGb;AAED,qBACa,gCAAiC,YAAW,WAAW;IAGhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAJP,QAAQ,EAAE,mCAAmC,EAE7C,QAAQ,EAAE,yBAAyB,EAEnC,OAAO,EAAE,wBAAwB;IAG9C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAqChD,0BAA0B;IA6ExC,OAAO,CAAC,gBAAgB;IA+BxB,OAAO,CAAC,IAAI;CAGb"}