openxiangda-nest 2.0.0-alpha.100

package/dist/gateway-transport.js

@@ -0,0 +1,369 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable, UnauthorizedException, } from "@nestjs/common";
+import { createHash, createPublicKey, verify } from "node:crypto";
+import { SCHEMA_VERSIONS } from "openxiangda-contracts";
+import { OpenXiangdaPlatformClient } from "./platform-client.js";
+import { OPENXIANGDA_MODULE_OPTIONS } from "./tokens.js";
+let OpenXiangdaGatewayAssertionVerifier = class OpenXiangdaGatewayAssertionVerifier {
+    platform;
+    options;
+    keys = new Map();
+    keysExpireAt = 0;
+    constructor(platform, options) {
+        this.platform = platform;
+        this.options = options;
+    }
+    async verify(input) {
+        const parts = input.assertion.split(".");
+        if (parts.length !== 3 || parts.some(part => !part)) {
+            return this.fail("OPENXIANGDA_GATEWAY_ASSERTION_FORMAT_INVALID");
+        }
+        let header;
+        let payload;
+        try {
+            header = JSON.parse(Buffer.from(parts[0], "base64url").toString("utf8"));
+            payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+        }
+        catch {
+            return this.fail("OPENXIANGDA_GATEWAY_ASSERTION_FORMAT_INVALID");
+        }
+        if (header.alg !== "EdDSA" ||
+            header.typ !== "openxiangda-gateway+jws" ||
+            !String(header.kid || "")) {
+            return this.fail("OPENXIANGDA_GATEWAY_ASSERTION_HEADER_INVALID");
+        }
+        const kid = String(header.kid);
+        let key = await this.key(kid, false);
+        if (!key)
+            key = await this.key(kid, true);
+        if (!key)
+            return this.fail("OPENXIANGDA_GATEWAY_ASSERTION_KEY_UNKNOWN");
+        let signatureValid = false;
+        try {
+            signatureValid = verify(null, Buffer.from(`${parts[0]}.${parts[1]}`), createPublicKey({ key, format: "jwk" }), Buffer.from(parts[2], "base64url"));
+        }
+        catch {
+            signatureValid = false;
+        }
+        if (!signatureValid) {
+            return this.fail("OPENXIANGDA_GATEWAY_ASSERTION_SIGNATURE_INVALID");
+        }
+        this.assertPayload(payload, input);
+        return payload;
+    }
+    assertPayload(payload, input) {
+        const now = Math.floor(Date.now() / 1000);
+        const request = requestFacts(input.request);
+        if (payload.assertion_contract !== "native-2" ||
+            payload.iss !== "openxiangda-platform-gateway" ||
+            payload.aud !== "openxiangda-app-backend" ||
+            !payload.jti ||
+            !Number.isSafeInteger(payload.iat) ||
+            !Number.isSafeInteger(payload.nbf) ||
+            !Number.isSafeInteger(payload.exp) ||
+            payload.nbf > now + 5 ||
+            payload.iat > now + 5 ||
+            payload.exp < now - 5 ||
+            payload.exp <= payload.iat ||
+            payload.exp - payload.iat > 30 ||
+            payload.app_code !== this.options.appCode ||
+            payload.environment_key !== this.options.environmentKey ||
+            payload.environment_id !== this.options.environmentId ||
+            payload.app_version_id !== this.options.appVersionId ||
+            payload.deployment_run_id !== this.options.deploymentRunId ||
+            payload.head_revision !== this.options.environmentHeadRevision ||
+            payload.backend_revision_id !== this.options.backendRevisionId ||
+            payload.method !== request.method ||
+            payload.normalized_path !== request.path ||
+            payload.canonical_query_digest !== digest(request.canonicalQuery) ||
+            payload.body_digest !== digest(request.body) ||
+            payload.invocation_token_digest !== digest(input.invocationToken) ||
+            payload.perspective_code !== perspectiveCode(input.request)) {
+            this.fail("OPENXIANGDA_GATEWAY_ASSERTION_CONTEXT_INVALID");
+        }
+    }
+    async key(kid, force) {
+        if (force || Date.now() >= this.keysExpireAt || this.keys.size === 0) {
+            const jwks = await this.platform.gatewayAssertionKeys();
+            if (jwks.schemaVersion !== SCHEMA_VERSIONS.gatewayAssertionJwks) {
+                this.fail("OPENXIANGDA_GATEWAY_ASSERTION_JWKS_INVALID");
+            }
+            const next = new Map();
+            for (const key of jwks.keys || []) {
+                if (key.kty !== "OKP" ||
+                    key.crv !== "Ed25519" ||
+                    key.alg !== "EdDSA" ||
+                    key.use !== "sig" ||
+                    !/^[A-Za-z0-9._-]{1,128}$/.test(key.kid) ||
+                    !key.x) {
+                    this.fail("OPENXIANGDA_GATEWAY_ASSERTION_JWKS_INVALID");
+                }
+                next.set(key.kid, key);
+            }
+            if (next.size < 1 || next.size > 3) {
+                this.fail("OPENXIANGDA_GATEWAY_ASSERTION_JWKS_INVALID");
+            }
+            this.keys = next;
+            this.keysExpireAt = Date.now() + 30_000;
+        }
+        return this.keys.get(kid);
+    }
+    fail(code) {
+        throw new UnauthorizedException({ code });
+    }
+};
+OpenXiangdaGatewayAssertionVerifier = __decorate([
+    Injectable(),
+    __param(0, Inject(OpenXiangdaPlatformClient)),
+    __param(1, Inject(OPENXIANGDA_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [OpenXiangdaPlatformClient, Object])
+], OpenXiangdaGatewayAssertionVerifier);
+export { OpenXiangdaGatewayAssertionVerifier };
+let OpenXiangdaGatewayTransportGuard = class OpenXiangdaGatewayTransportGuard {
+    verifier;
+    platform;
+    options;
+    constructor(verifier, platform, options) {
+        this.verifier = verifier;
+        this.platform = platform;
+        this.options = options;
+    }
+    async canActivate(context) {
+        if (context.getType() !== "http")
+            return true;
+        const request = context.switchToHttp().getRequest();
+        const path = requestFacts(request).path;
+        if (gatewayExemptRequest(request, path))
+            return true;
+        if (this.options.connectedDevelopment &&
+            header(request, "x-openxiangda-connected-dev") === "1") {
+            return await this.acceptConnectedDevelopment(request);
+        }
+        const authorization = header(request, "authorization");
+        const token = authorization.match(/^Bearer\s+(\S+)$/i)?.[1] || "";
+        if (!token)
+            this.fail("OPENXIANGDA_INVOCATION_TOKEN_REQUIRED");
+        const assertion = header(request, "x-openxiangda-gateway-assertion").trim();
+        if (!assertion)
+            this.fail("OPENXIANGDA_GATEWAY_ASSERTION_REQUIRED");
+        const payload = await this.verifier.verify({
+            assertion,
+            invocationToken: token,
+            request,
+        });
+        const invocation = await this.platform.verifyGatewayInvocation(authorization, assertion);
+        this.assertInvocation(invocation, payload);
+        request.openxiangdaInvocation = {
+            ...invocation,
+            authorization,
+            perspectiveCode: payload.perspective_code,
+        };
+        return true;
+    }
+    async acceptConnectedDevelopment(request) {
+        const remoteAddress = String(request.raw?.socket?.remoteAddress || "");
+        if (!isLoopback(remoteAddress)) {
+            this.fail("OPENXIANGDA_CONNECTED_DEV_LOOPBACK_REQUIRED");
+        }
+        const authorization = header(request, "authorization");
+        if (!/^Bearer\s+\S+$/i.test(authorization)) {
+            this.fail("OPENXIANGDA_INVOCATION_TOKEN_REQUIRED");
+        }
+        const sessionToken = header(request, "x-openxiangda-dev-session").trim();
+        if (!sessionToken) {
+            this.fail("OPENXIANGDA_CONNECTED_DEV_SESSION_REQUIRED");
+        }
+        const session = await this.platform.connectedDevelopmentSession(authorization, sessionToken);
+        const sessionModeValid = (session.mode === "published-resources" &&
+            session.manifestOverlay === false &&
+            session.additiveSchemaSync === false) ||
+            (session.mode === "manifest-overlay" &&
+                session.manifestOverlay === true &&
+                session.additiveSchemaSync === true);
+        if (session.schemaVersion !== "openxiangda.connected-dev-session/v2" ||
+            !sessionModeValid ||
+            session.environment.key !== this.options.environmentKey ||
+            session.environment.id !== this.options.environmentId ||
+            !session.environment.activeAppVersionId ||
+            !Number.isSafeInteger(session.environment.headRevision) ||
+            session.environment.headRevision < 1 ||
+            session.principal.type !== "developer" ||
+            !session.principal.userId ||
+            session.subjectProfile?.userId !== session.principal.userId ||
+            !isHumanDisplayName(session.subjectProfile?.displayName, session.principal.userId) ||
+            typeof session.principal.isAppSuperAdmin !== "boolean" ||
+            session.principal.roleCodes.length < 1 ||
+            !Array.isArray(session.principal.capabilityCodes) ||
+            !session.principal.roleCodes.every(code => /^[A-Za-z0-9._:-]{1,128}$/.test(code)) ||
+            !session.principal.capabilityCodes.every(code => /^[A-Za-z0-9*._:-]{1,256}$/.test(code))) {
+            this.fail("OPENXIANGDA_CONNECTED_DEV_IDENTITY_INVALID");
+        }
+        const roleCodes = [...new Set(session.principal.roleCodes)];
+        request.openxiangda = {
+            principal: {
+                principalType: "developer",
+                userId: session.principal.userId,
+                displayName: session.subjectProfile.displayName.trim(),
+                appCode: this.options.appCode,
+                environmentId: session.environment.id,
+                environmentKey: session.environment.key,
+                activeAppVersionId: session.environment.activeAppVersionId,
+                environmentHeadRevision: session.environment.headRevision,
+                roleCodes,
+                isAppSuperAdmin: session.principal.isAppSuperAdmin,
+                capabilityCodes: [...new Set(session.principal.capabilityCodes)],
+            },
+            authorization,
+            perspectiveCode: perspectiveCode(request),
+            roleCodes,
+            connectedDevelopmentSessionToken: sessionToken,
+        };
+        return true;
+    }
+    assertInvocation(invocation, payload) {
+        const target = invocation?.target;
+        if (invocation?.schemaVersion !==
+            SCHEMA_VERSIONS.gatewayInvocationPrincipal ||
+            !target ||
+            !sameTarget(target, payload) ||
+            target.appCode !== this.options.appCode ||
+            target.environmentKey !== this.options.environmentKey ||
+            target.environmentId !== this.options.environmentId ||
+            target.appVersionId !== this.options.appVersionId ||
+            target.deploymentRunId !== this.options.deploymentRunId ||
+            target.headRevision !== this.options.environmentHeadRevision ||
+            target.backendRevisionId !== this.options.backendRevisionId) {
+            this.fail("OPENXIANGDA_GATEWAY_INVOCATION_CONTEXT_INVALID");
+        }
+        if (invocation.principal.principalType === "user" &&
+            !isHumanDisplayName(invocation.principal.displayName, invocation.principal.userId)) {
+            this.fail("OPENXIANGDA_GATEWAY_USER_DISPLAY_NAME_INVALID");
+        }
+    }
+    fail(code) {
+        throw new UnauthorizedException({ code });
+    }
+};
+OpenXiangdaGatewayTransportGuard = __decorate([
+    Injectable(),
+    __param(0, Inject(OpenXiangdaGatewayAssertionVerifier)),
+    __param(1, Inject(OpenXiangdaPlatformClient)),
+    __param(2, Inject(OPENXIANGDA_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [OpenXiangdaGatewayAssertionVerifier,
+        OpenXiangdaPlatformClient, Object])
+], OpenXiangdaGatewayTransportGuard);
+export { OpenXiangdaGatewayTransportGuard };
+function isHumanDisplayName(value, userId) {
+    const candidate = String(value || "").trim();
+    if (!candidate || candidate === String(userId || "").trim())
+        return false;
+    if (candidate.startsWith("__"))
+        return false;
+    return !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(candidate);
+}
+function requestFacts(request) {
+    const method = String(request.method || "GET").toUpperCase();
+    const rawUrl = String(request.raw?.url || request.originalUrl || request.url || "/");
+    let url;
+    try {
+        url = new URL(rawUrl, "http://openxiangda-runtime.local");
+    }
+    catch {
+        throw new UnauthorizedException({
+            code: "OPENXIANGDA_GATEWAY_REQUEST_URL_INVALID",
+        });
+    }
+    let path;
+    try {
+        path = decodeURIComponent(url.pathname);
+    }
+    catch {
+        throw new UnauthorizedException({
+            code: "OPENXIANGDA_GATEWAY_REQUEST_URL_INVALID",
+        });
+    }
+    if (!path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("\0") ||
+        path.split("/").some(part => part === "." || part === "..")) {
+        throw new UnauthorizedException({
+            code: "OPENXIANGDA_GATEWAY_REQUEST_URL_INVALID",
+        });
+    }
+    const entries = [...url.searchParams.entries()].sort(([leftName, leftValue], [rightName, rightValue]) => leftName.localeCompare(rightName) || leftValue.localeCompare(rightValue));
+    const query = new URLSearchParams();
+    for (const [name, value] of entries)
+        query.append(name, value);
+    let body = Buffer.alloc(0);
+    if (!["GET", "HEAD"].includes(method)) {
+        if (Buffer.isBuffer(request.rawBody)) {
+            body = request.rawBody;
+        }
+        else if (Buffer.isBuffer(request.body)) {
+            body = request.body;
+        }
+        else if (request.body !== undefined) {
+            throw new UnauthorizedException({
+                code: "OPENXIANGDA_GATEWAY_RAW_BODY_REQUIRED",
+            });
+        }
+    }
+    return { method, path, canonicalQuery: query.toString(), body };
+}
+function gatewayExemptRequest(request, path) {
+    if (["/__platform/health", "/__platform/ready", "/__platform/version"].includes(path)) {
+        return true;
+    }
+    const hasSignedCallbackEnvelope = Boolean(header(request, "x-openxiangda-signature")) &&
+        Boolean(header(request, "x-openxiangda-timestamp"));
+    if (!hasSignedCallbackEnvelope)
+        return false;
+    const isEventDelivery = path.startsWith("/__platform/events/") &&
+        Boolean(header(request, "x-openxiangda-subscription-code")) &&
+        Boolean(header(request, "x-openxiangda-delivery-id"));
+    const isAssigneeProviderCall = path.startsWith("/openxiangda/workflow/assignee-providers/") &&
+        Boolean(header(request, "x-openxiangda-workflow-provider")) &&
+        Boolean(header(request, "x-openxiangda-request-id"));
+    return isEventDelivery || isAssigneeProviderCall;
+}
+function sameTarget(target, payload) {
+    return (target.tenantId === payload.tenant_id &&
+        target.appCode === payload.app_code &&
+        target.environmentId === payload.environment_id &&
+        target.environmentKey === payload.environment_key &&
+        target.appVersionId === payload.app_version_id &&
+        target.deploymentRunId === payload.deployment_run_id &&
+        target.headRevision === payload.head_revision &&
+        target.backendRevisionId === payload.backend_revision_id);
+}
+function header(request, name) {
+    const value = request.headers[name] || request.headers[name.toLowerCase()];
+    return Array.isArray(value) ? String(value[0] || "") : String(value || "");
+}
+function perspectiveCode(request) {
+    const value = header(request, "x-openxiangda-perspective").trim();
+    if (!value)
+        return null;
+    if (!/^[a-z][a-z0-9._-]{0,127}$/.test(value)) {
+        throw new UnauthorizedException({ code: "OPENXIANGDA_PERSPECTIVE_INVALID" });
+    }
+    return value;
+}
+function isLoopback(value) {
+    return value === "127.0.0.1" || value === "::1" || value === "::ffff:127.0.0.1";
+}
+function digest(value) {
+    return createHash("sha256").update(value).digest("base64url");
+}
+//# sourceMappingURL=gateway-transport.js.map

package/dist/gateway-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-transport.js","sourceRoot":"","sources":["../src/gateway-transport.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAGL,MAAM,EACN,UAAU,EACV,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAMlE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AA+BlD,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAM3B;IAEA;IAPX,IAAI,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC9C,YAAY,GAAG,CAAC,CAAC;IAEzB,YAEmB,QAAmC,EAEnC,OAAiC;QAFjC,aAAQ,GAAR,QAAQ,CAA2B;QAEnC,YAAO,GAAP,OAAO,CAA0B;IACjD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAIZ;QACC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAA+B,CAAC;QACpC,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC1B,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,KAAK,CAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC1B,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACnE,CAAC;QACD,IACE,MAAM,CAAC,GAAG,KAAK,OAAO;YACtB,MAAM,CAAC,GAAG,KAAK,yBAAyB;YACxC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EACzB,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxE,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,CACrB,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EACrC,eAAuB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CACpC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CACnB,OAAgC,EAChC,KAGC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IACE,OAAO,CAAC,kBAAkB,KAAK,UAAU;YACzC,OAAO,CAAC,GAAG,KAAK,8BAA8B;YAC9C,OAAO,CAAC,GAAG,KAAK,yBAAyB;YACzC,CAAC,OAAO,CAAC,GAAG;YACZ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;YACrB,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;YACrB,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;YACrB,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC1B,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,EAAE;YAC9B,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;YACzC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc;YACvD,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;YACrD,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY;YACpD,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe;YAC1D,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,uBAAuB;YAC9D,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAC9D,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACjC,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,IAAI;YACxC,OAAO,CAAC,sBAAsB,KAAK,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;YACjE,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5C,OAAO,CAAC,uBAAuB,KAAK,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;YACjE,OAAO,CAAC,gBAAgB,KAAK,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAC3D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAc;QAC3C,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,aAAa,KAAK,eAAe,CAAC,oBAAoB,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA+B,CAAC;YACpD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBAClC,IACE,GAAG,CAAC,GAAG,KAAK,KAAK;oBACjB,GAAG,CAAC,GAAG,KAAK,SAAS;oBACrB,GAAG,CAAC,GAAG,KAAK,OAAO;oBACnB,GAAG,CAAC,GAAG,KAAK,KAAK;oBACjB,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBACxC,CAAC,GAAG,CAAC,CAAC,EACN,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,MAAM,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AArIY,mCAAmC;IAD/C,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,yBAAyB,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;qCADR,yBAAyB;GAN3C,mCAAmC,CAqI/C;;AAGM,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IAGxB;IAEA;IAEA;IANnB,YAEmB,QAA6C,EAE7C,QAAmC,EAEnC,OAAiC;QAJjC,aAAQ,GAAR,QAAQ,CAAqC;QAE7C,aAAQ,GAAR,QAAQ,CAA2B;QAEnC,YAAO,GAAP,OAAO,CAA0B;IACjD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA0B,CAAC;QAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QACxC,IAAI,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IACE,IAAI,CAAC,OAAO,CAAC,oBAAoB;YACjC,MAAM,CAAC,OAAO,EAAE,6BAA6B,CAAC,KAAK,GAAG,EACtD,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CACtB,OAAO,EACP,iCAAiC,CAClC,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzC,SAAS;YACT,eAAe,EAAE,KAAK;YACtB,OAAO;SACR,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAC5D,aAAa,EACb,SAAS,CACV,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,qBAAqB,GAAG;YAC9B,GAAG,UAAU;YACb,aAAa;YACb,eAAe,EAAE,OAAO,CAAC,gBAAgB;SAC1C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,OAA+B;QACtE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CACzB,OAAO,EACP,2BAA2B,CAC5B,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAC7D,aAAa,EACb,YAAY,CACb,CAAC;QACF,MAAM,gBAAgB,GACpB,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB;YACrC,OAAO,CAAC,eAAe,KAAK,KAAK;YACjC,OAAO,CAAC,kBAAkB,KAAK,KAAK,CAAC;YACvC,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB;gBAClC,OAAO,CAAC,eAAe,KAAK,IAAI;gBAChC,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC;QACzC,IACE,OAAO,CAAC,aAAa,KAAK,sCAAsC;YAChE,CAAC,gBAAgB;YACjB,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc;YACvD,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;YACrD,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB;YACvC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC;YACvD,OAAO,CAAC,WAAW,CAAC,YAAY,GAAG,CAAC;YACpC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW;YACtC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACzB,OAAO,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM;YAC3D,CAAC,kBAAkB,CACjB,OAAO,CAAC,cAAc,EAAE,WAAW,EACnC,OAAO,CAAC,SAAS,CAAC,MAAM,CACzB;YACD,OAAO,OAAO,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;YACtD,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;YACjD,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACxC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CACtC;YACD,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAC9C,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,EACD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,WAAW,GAAG;YACpB,SAAS,EAAE;gBACT,aAAa,EAAE,WAAW;gBAC1B,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE;gBACtD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE;gBACrC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;gBACvC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,kBAAkB;gBAC1D,uBAAuB,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY;gBACzD,SAAS;gBACT,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,eAAe;gBAClD,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;aACjE;YACD,aAAa;YACb,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;YACzC,SAAS;YACT,gCAAgC,EAAE,YAAY;SAC/C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CACtB,UAAsC,EACtC,OAAgC;QAEhC,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,CAAC;QAClC,IACE,UAAU,EAAE,aAAa;YACvB,eAAe,CAAC,0BAA0B;YAC5C,CAAC,MAAM;YACP,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;YAC5B,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;YACvC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc;YACrD,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;YACnD,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY;YACjD,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe;YACvD,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,uBAAuB;YAC5D,MAAM,CAAC,iBAAiB,KAAK,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC3D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,CAAC;QACD,IACE,UAAU,CAAC,SAAS,CAAC,aAAa,KAAK,MAAM;YAC7C,CAAC,kBAAkB,CACjB,UAAU,CAAC,SAAS,CAAC,WAAW,EAChC,UAAU,CAAC,SAAS,CAAC,MAAM,CAC5B,EACD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,MAAM,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AA9JY,gCAAgC;IAD5C,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,mCAAmC,CAAC,CAAA;IAE3C,WAAA,MAAM,CAAC,yBAAyB,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;qCAHR,mCAAmC;QAEnC,yBAAyB;GAL3C,gCAAgC,CA8J5C;;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,MAAc;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,CAAC,4EAA4E,CAAC,IAAI,CACvF,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAA+B;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,CACnB,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,CAC9D,CAAC;IACF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CACjD,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAC3E,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO;QAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,IAAI,GAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,qBAAqB,CAAC;gBAC9B,IAAI,EAAE,uCAAuC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA+B,EAAE,IAAY;IACzE,IACE,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CACzE,IAAI,CACL,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,yBAAyB,GAC7B,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,yBAAyB;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,eAAe,GACnB,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxD,MAAM,sBAAsB,GAC1B,IAAI,CAAC,UAAU,CAAC,2CAA2C,CAAC;QAC5D,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvD,OAAO,eAAe,IAAI,sBAAsB,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CACjB,MAA+B,EAC/B,OAAgC;IAEhC,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS;QACrC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ;QACnC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,cAAc;QAC/C,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,eAAe;QACjD,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,cAAc;QAC9C,MAAM,CAAC,eAAe,KAAK,OAAO,CAAC,iBAAiB;QACpD,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,aAAa;QAC7C,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,mBAAmB,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,OAA+B,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,OAA+B;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,kBAAkB,CAAC;AAClF,CAAC;AAED,SAAS,MAAM,CAAC,KAAuC;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChE,CAAC"}

package/dist/health.d.ts

@@ -0,0 +1,36 @@
+import { OpenXiangdaPlatformClient } from './platform-client.js';
+import type { OpenXiangdaModuleOptions } from './types.js';
+export declare class OpenXiangdaPlatformController {
+    private readonly options;
+    private readonly platform;
+    constructor(options: OpenXiangdaModuleOptions, platform: OpenXiangdaPlatformClient);
+    health(): {
+        status: "ok";
+    };
+    ready(): {
+        status: "ready";
+        appCode: string;
+        environmentKey: string;
+        environmentId: string;
+        appVersionId: string;
+        deploymentRunId: string;
+        environmentHeadRevision: number;
+        backendRevisionId: string;
+        contractVersion: "2.0.0-alpha.5";
+    };
+    platformDependency(): Promise<{
+        status: "ready";
+        dependency: "platform";
+        platformVersion: string;
+        contractVersion: "2.0.0-alpha.5";
+    }>;
+    version(): {
+        appCode: string;
+        environmentKey: string;
+        version: string;
+        gitSha: string | null;
+        buildId: string | null;
+        contractVersion: "2.0.0-alpha.5";
+    };
+}
+//# sourceMappingURL=health.d.ts.map

package/dist/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG3D,qBAEa,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAFR,OAAO,EAAE,wBAAwB,EAEjC,QAAQ,EAAE,yBAAyB;IAItD,MAAM;;;IAKN,KAAK;;;;;;;;;;;IAeC,kBAAkB;;;;;;IAwBxB,OAAO;;;;;;;;CAUR"}

package/dist/health.js

@@ -0,0 +1,105 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Controller, Get, Inject, ServiceUnavailableException, } from '@nestjs/common';
+import { OPENXIANGDA_CONTRACT_VERSION } from 'openxiangda-contracts';
+import { OpenXiangdaPlatformClient } from './platform-client.js';
+import { OPENXIANGDA_MODULE_OPTIONS } from './tokens.js';
+import { OpenXiangdaInfrastructureController } from './infrastructure-controller.js';
+let OpenXiangdaPlatformController = class OpenXiangdaPlatformController {
+    options;
+    platform;
+    constructor(options, platform) {
+        this.options = options;
+        this.platform = platform;
+    }
+    health() {
+        return { status: 'ok' };
+    }
+    ready() {
+        return {
+            status: 'ready',
+            appCode: this.options.appCode,
+            environmentKey: this.options.environmentKey,
+            environmentId: this.options.environmentId,
+            appVersionId: this.options.appVersionId,
+            deploymentRunId: this.options.deploymentRunId,
+            environmentHeadRevision: this.options.environmentHeadRevision,
+            backendRevisionId: this.options.backendRevisionId,
+            contractVersion: OPENXIANGDA_CONTRACT_VERSION,
+        };
+    }
+    async platformDependency() {
+        try {
+            const capabilities = await this.platform.capabilities();
+            if (capabilities.contractVersion !== OPENXIANGDA_CONTRACT_VERSION) {
+                throw new Error(`contract mismatch: ${capabilities.contractVersion}`);
+            }
+            return {
+                status: 'ready',
+                dependency: 'platform',
+                platformVersion: capabilities.platformVersion,
+                contractVersion: capabilities.contractVersion,
+            };
+        }
+        catch (error) {
+            throw new ServiceUnavailableException({
+                status: 'not_ready',
+                dependency: 'platform',
+                reason: error?.message || 'platform unavailable',
+            });
+        }
+    }
+    version() {
+        return {
+            appCode: this.options.appCode,
+            environmentKey: this.options.environmentKey,
+            version: this.options.version,
+            gitSha: this.options.gitSha || null,
+            buildId: this.options.buildId || null,
+            contractVersion: OPENXIANGDA_CONTRACT_VERSION,
+        };
+    }
+};
+__decorate([
+    Get('health'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], OpenXiangdaPlatformController.prototype, "health", null);
+__decorate([
+    Get('ready'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], OpenXiangdaPlatformController.prototype, "ready", null);
+__decorate([
+    Get('dependencies/platform'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], OpenXiangdaPlatformController.prototype, "platformDependency", null);
+__decorate([
+    Get('version'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], OpenXiangdaPlatformController.prototype, "version", null);
+OpenXiangdaPlatformController = __decorate([
+    OpenXiangdaInfrastructureController(),
+    Controller('__platform'),
+    __param(0, Inject(OPENXIANGDA_MODULE_OPTIONS)),
+    __param(1, Inject(OpenXiangdaPlatformClient)),
+    __metadata("design:paramtypes", [Object, OpenXiangdaPlatformClient])
+], OpenXiangdaPlatformController);
+export { OpenXiangdaPlatformController };
+//# sourceMappingURL=health.js.map

package/dist/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EACL,UAAU,EACV,GAAG,EACH,MAAM,EACN,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,gCAAgC,CAAC;AAI9E,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGrB;IAEA;IAJnB,YAEmB,OAAiC,EAEjC,QAAmC;QAFnC,YAAO,GAAP,OAAO,CAA0B;QAEjC,aAAQ,GAAR,QAAQ,CAA2B;IACnD,CAAC;IAGJ,MAAM;QACJ,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC;IACnC,CAAC;IAGD,KAAK;QACH,OAAO;YACL,MAAM,EAAE,OAAgB;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;YAC7C,uBAAuB,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;YAC7D,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,eAAe,EAAE,4BAA4B;SAC9C,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxD,IAAI,YAAY,CAAC,eAAe,KAAK,4BAA4B,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,sBAAsB,YAAY,CAAC,eAAe,EAAE,CACrD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,OAAgB;gBACxB,UAAU,EAAE,UAAmB;gBAC/B,eAAe,EAAE,YAAY,CAAC,eAAe;gBAC7C,eAAe,EAAE,YAAY,CAAC,eAAe;aAC9C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,2BAA2B,CAAC;gBACpC,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAG,KAAe,EAAE,OAAO,IAAI,sBAAsB;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGD,OAAO;QACL,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;YACrC,eAAe,EAAE,4BAA4B;SAC9C,CAAC;IACJ,CAAC;CACF,CAAA;AAtDC;IADC,GAAG,CAAC,QAAQ,CAAC;;;;2DAGb;AAGD;IADC,GAAG,CAAC,OAAO,CAAC;;;;0DAaZ;AAGK;IADL,GAAG,CAAC,uBAAuB,CAAC;;;;uEAsB5B;AAGD;IADC,GAAG,CAAC,SAAS,CAAC;;;;4DAUd;AA9DU,6BAA6B;IAFzC,mCAAmC,EAAE;IACrC,UAAU,CAAC,YAAY,CAAC;IAGpB,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;IAElC,WAAA,MAAM,CAAC,yBAAyB,CAAC,CAAA;6CACP,yBAAyB;GAL3C,6BAA6B,CA+DzC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+export * from './authz.js';
+export * from './bootstrap.js';
+export * from './business-action-context.js';
+export * from './business-directory.js';
+export * from './business-notification.js';
+export * from './business-process.js';
+export * from './assignee-provider.js';
+export * from './application-credentials.js';
+export * from './data-api.js';
+export * from './event-context.js';
+export * from './event-handler.js';
+export * from './events.js';
+export * from './health.js';
+export * from './gateway-transport.js';
+export * from './module.js';
+export * from './notification.js';
+export * from './platform-client.js';
+export * from './runtime.js';
+export * from './standard-operations.js';
+export * from './tokens.js';
+export * from './types.js';
+export * from './workflow.js';
+export * from './todo.js';
+export * from './logger.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAE9B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,25 @@
+export * from './authz.js';
+export * from './bootstrap.js';
+export * from './business-action-context.js';
+export * from './business-directory.js';
+export * from './business-notification.js';
+export * from './business-process.js';
+export * from './assignee-provider.js';
+export * from './application-credentials.js';
+export * from './data-api.js';
+export * from './event-context.js';
+export * from './event-handler.js';
+export * from './events.js';
+export * from './health.js';
+export * from './gateway-transport.js';
+export * from './module.js';
+export * from './notification.js';
+export * from './platform-client.js';
+export * from './runtime.js';
+export * from './standard-operations.js';
+export * from './tokens.js';
+export * from './types.js';
+export * from './workflow.js';
+export * from './todo.js';
+export * from './logger.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAE9B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/infrastructure-controller.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Marks SDK-owned transport endpoints that are authenticated by their own
+ * infrastructure protocol rather than an application business capability.
+ * This module is intentionally not part of the public package exports.
+ */
+export declare function OpenXiangdaInfrastructureController(): ClassDecorator;
+export declare function isOpenXiangdaInfrastructureController(target: Function): boolean;
+//# sourceMappingURL=infrastructure-controller.d.ts.map

package/dist/infrastructure-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure-controller.d.ts","sourceRoot":"","sources":["../src/infrastructure-controller.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,cAAc,CAIpE;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,QAAQ,GACf,OAAO,CAET"}

package/dist/infrastructure-controller.js

@@ -0,0 +1,15 @@
+const infrastructureControllers = new WeakSet();
+/**
+ * Marks SDK-owned transport endpoints that are authenticated by their own
+ * infrastructure protocol rather than an application business capability.
+ * This module is intentionally not part of the public package exports.
+ */
+export function OpenXiangdaInfrastructureController() {
+    return target => {
+        infrastructureControllers.add(target);
+    };
+}
+export function isOpenXiangdaInfrastructureController(target) {
+    return infrastructureControllers.has(target);
+}
+//# sourceMappingURL=infrastructure-controller.js.map

package/dist/infrastructure-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure-controller.js","sourceRoot":"","sources":["../src/infrastructure-controller.ts"],"names":[],"mappings":"AAAA,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAAY,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,mCAAmC;IACjD,OAAO,MAAM,CAAC,EAAE;QACd,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,MAAgB;IAEhB,OAAO,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC"}