palaryn 0.1.0 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +243 -588
- package/dist/sdk/typescript/src/client.js +2 -2
- package/dist/sdk/typescript/src/client.js.map +1 -1
- package/dist/src/anomaly/detector.d.ts +7 -4
- package/dist/src/anomaly/detector.d.ts.map +1 -1
- package/dist/src/anomaly/detector.js +22 -12
- package/dist/src/anomaly/detector.js.map +1 -1
- package/dist/src/audit/logger.d.ts +10 -0
- package/dist/src/audit/logger.d.ts.map +1 -1
- package/dist/src/audit/logger.js +52 -38
- package/dist/src/audit/logger.js.map +1 -1
- package/dist/src/auth/routes.d.ts.map +1 -1
- package/dist/src/auth/routes.js +35 -0
- package/dist/src/auth/routes.js.map +1 -1
- package/dist/src/budget/manager.d.ts +5 -0
- package/dist/src/budget/manager.d.ts.map +1 -1
- package/dist/src/budget/manager.js +32 -0
- package/dist/src/budget/manager.js.map +1 -1
- package/dist/src/budget/model-pricing.d.ts +20 -0
- package/dist/src/budget/model-pricing.d.ts.map +1 -0
- package/dist/src/budget/model-pricing.js +107 -0
- package/dist/src/budget/model-pricing.js.map +1 -0
- package/dist/src/budget/usage-extractor.d.ts +3 -1
- package/dist/src/budget/usage-extractor.d.ts.map +1 -1
- package/dist/src/budget/usage-extractor.js +47 -3
- package/dist/src/budget/usage-extractor.js.map +1 -1
- package/dist/src/config/defaults.d.ts.map +1 -1
- package/dist/src/config/defaults.js +65 -13
- package/dist/src/config/defaults.js.map +1 -1
- package/dist/src/dlp/tool-patterns.d.ts +7 -0
- package/dist/src/dlp/tool-patterns.d.ts.map +1 -0
- package/dist/src/dlp/tool-patterns.js +34 -0
- package/dist/src/dlp/tool-patterns.js.map +1 -0
- package/dist/src/executor/filesystem-executor.d.ts +28 -0
- package/dist/src/executor/filesystem-executor.d.ts.map +1 -0
- package/dist/src/executor/filesystem-executor.js +192 -0
- package/dist/src/executor/filesystem-executor.js.map +1 -0
- package/dist/src/executor/http-executor.d.ts.map +1 -1
- package/dist/src/executor/http-executor.js +22 -2
- package/dist/src/executor/http-executor.js.map +1 -1
- package/dist/src/executor/index.d.ts +4 -0
- package/dist/src/executor/index.d.ts.map +1 -1
- package/dist/src/executor/index.js +9 -1
- package/dist/src/executor/index.js.map +1 -1
- package/dist/src/executor/shell-executor.d.ts +22 -0
- package/dist/src/executor/shell-executor.d.ts.map +1 -0
- package/dist/src/executor/shell-executor.js +119 -0
- package/dist/src/executor/shell-executor.js.map +1 -0
- package/dist/src/executor/sql-executor.d.ts +29 -0
- package/dist/src/executor/sql-executor.d.ts.map +1 -0
- package/dist/src/executor/sql-executor.js +114 -0
- package/dist/src/executor/sql-executor.js.map +1 -0
- package/dist/src/executor/websocket-executor.d.ts +26 -0
- package/dist/src/executor/websocket-executor.d.ts.map +1 -0
- package/dist/src/executor/websocket-executor.js +205 -0
- package/dist/src/executor/websocket-executor.js.map +1 -0
- package/dist/src/interceptor/index.d.ts +2 -0
- package/dist/src/interceptor/index.d.ts.map +1 -0
- package/dist/src/interceptor/index.js +6 -0
- package/dist/src/interceptor/index.js.map +1 -0
- package/dist/src/interceptor/provider-interceptor.d.ts +36 -0
- package/dist/src/interceptor/provider-interceptor.d.ts.map +1 -0
- package/dist/src/interceptor/provider-interceptor.js +302 -0
- package/dist/src/interceptor/provider-interceptor.js.map +1 -0
- package/dist/src/mcp/auth-verifier.d.ts.map +1 -1
- package/dist/src/mcp/auth-verifier.js +3 -2
- package/dist/src/mcp/auth-verifier.js.map +1 -1
- package/dist/src/mcp/bridge.d.ts +14 -10
- package/dist/src/mcp/bridge.d.ts.map +1 -1
- package/dist/src/mcp/bridge.js +51 -227
- package/dist/src/mcp/bridge.js.map +1 -1
- package/dist/src/mcp/http-transport.d.ts +2 -0
- package/dist/src/mcp/http-transport.d.ts.map +1 -1
- package/dist/src/mcp/http-transport.js +117 -66
- package/dist/src/mcp/http-transport.js.map +1 -1
- package/dist/src/mcp/internal-auth.d.ts +13 -0
- package/dist/src/mcp/internal-auth.d.ts.map +1 -0
- package/dist/src/mcp/internal-auth.js +12 -0
- package/dist/src/mcp/internal-auth.js.map +1 -0
- package/dist/src/mcp/tool-definitions.d.ts +41 -0
- package/dist/src/mcp/tool-definitions.d.ts.map +1 -0
- package/dist/src/mcp/tool-definitions.js +491 -0
- package/dist/src/mcp/tool-definitions.js.map +1 -0
- package/dist/src/middleware/auth.js.map +1 -1
- package/dist/src/middleware/session.js.map +1 -1
- package/dist/src/middleware/validate.d.ts +8 -0
- package/dist/src/middleware/validate.d.ts.map +1 -1
- package/dist/src/middleware/validate.js +45 -0
- package/dist/src/middleware/validate.js.map +1 -1
- package/dist/src/policy/engine.d.ts +4 -0
- package/dist/src/policy/engine.d.ts.map +1 -1
- package/dist/src/policy/engine.js +117 -0
- package/dist/src/policy/engine.js.map +1 -1
- package/dist/src/saas/routes.d.ts.map +1 -1
- package/dist/src/saas/routes.js +355 -22
- package/dist/src/saas/routes.js.map +1 -1
- package/dist/src/server/app.d.ts.map +1 -1
- package/dist/src/server/app.js +24 -3
- package/dist/src/server/app.js.map +1 -1
- package/dist/src/server/gateway.d.ts.map +1 -1
- package/dist/src/server/gateway.js +17 -0
- package/dist/src/server/gateway.js.map +1 -1
- package/dist/src/server/index.d.ts.map +1 -1
- package/dist/src/server/index.js +18 -0
- package/dist/src/server/index.js.map +1 -1
- package/dist/src/storage/interfaces.d.ts +14 -3
- package/dist/src/storage/interfaces.d.ts.map +1 -1
- package/dist/src/storage/memory.d.ts +2 -0
- package/dist/src/storage/memory.d.ts.map +1 -1
- package/dist/src/storage/memory.js +6 -0
- package/dist/src/storage/memory.js.map +1 -1
- package/dist/src/storage/postgres.d.ts +5 -0
- package/dist/src/storage/postgres.d.ts.map +1 -1
- package/dist/src/storage/postgres.js +16 -0
- package/dist/src/storage/postgres.js.map +1 -1
- package/dist/src/storage/redis.d.ts +10 -0
- package/dist/src/storage/redis.d.ts.map +1 -1
- package/dist/src/storage/redis.js +65 -0
- package/dist/src/storage/redis.js.map +1 -1
- package/dist/src/types/budget.d.ts +4 -0
- package/dist/src/types/budget.d.ts.map +1 -1
- package/dist/src/types/config.d.ts +58 -0
- package/dist/src/types/config.d.ts.map +1 -1
- package/dist/src/types/events.d.ts +1 -0
- package/dist/src/types/events.d.ts.map +1 -1
- package/dist/src/types/policy.d.ts +11 -1
- package/dist/src/types/policy.d.ts.map +1 -1
- package/dist/src/types/tool-result.d.ts +11 -0
- package/dist/src/types/tool-result.d.ts.map +1 -1
- package/dist/tests/unit/app-routes.test.d.ts +2 -0
- package/dist/tests/unit/app-routes.test.d.ts.map +1 -0
- package/dist/tests/unit/app-routes.test.js +715 -0
- package/dist/tests/unit/app-routes.test.js.map +1 -0
- package/dist/tests/unit/audit-logger.test.js +105 -0
- package/dist/tests/unit/audit-logger.test.js.map +1 -1
- package/dist/tests/unit/auth-providers.test.d.ts +2 -0
- package/dist/tests/unit/auth-providers.test.d.ts.map +1 -0
- package/dist/tests/unit/auth-providers.test.js +279 -0
- package/dist/tests/unit/auth-providers.test.js.map +1 -0
- package/dist/tests/unit/auth-routes-extended.test.d.ts +2 -0
- package/dist/tests/unit/auth-routes-extended.test.d.ts.map +1 -0
- package/dist/tests/unit/auth-routes-extended.test.js +993 -0
- package/dist/tests/unit/auth-routes-extended.test.js.map +1 -0
- package/dist/tests/unit/auth-verifier.test.d.ts +2 -0
- package/dist/tests/unit/auth-verifier.test.d.ts.map +1 -0
- package/dist/tests/unit/auth-verifier.test.js +505 -0
- package/dist/tests/unit/auth-verifier.test.js.map +1 -0
- package/dist/tests/unit/billing-routes.test.d.ts +2 -0
- package/dist/tests/unit/billing-routes.test.d.ts.map +1 -0
- package/dist/tests/unit/billing-routes.test.js +432 -0
- package/dist/tests/unit/billing-routes.test.js.map +1 -0
- package/dist/tests/unit/config-defaults.test.d.ts +2 -0
- package/dist/tests/unit/config-defaults.test.d.ts.map +1 -0
- package/dist/tests/unit/config-defaults.test.js +119 -0
- package/dist/tests/unit/config-defaults.test.js.map +1 -0
- package/dist/tests/unit/defaults.test.js +0 -10
- package/dist/tests/unit/defaults.test.js.map +1 -1
- package/dist/tests/unit/filesystem-executor.test.d.ts +2 -0
- package/dist/tests/unit/filesystem-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/filesystem-executor.test.js +280 -0
- package/dist/tests/unit/filesystem-executor.test.js.map +1 -0
- package/dist/tests/unit/gateway-branches.test.d.ts +2 -0
- package/dist/tests/unit/gateway-branches.test.d.ts.map +1 -0
- package/dist/tests/unit/gateway-branches.test.js +1039 -0
- package/dist/tests/unit/gateway-branches.test.js.map +1 -0
- package/dist/tests/unit/http-executor-branches.test.d.ts +2 -0
- package/dist/tests/unit/http-executor-branches.test.d.ts.map +1 -0
- package/dist/tests/unit/http-executor-branches.test.js +495 -0
- package/dist/tests/unit/http-executor-branches.test.js.map +1 -0
- package/dist/tests/unit/logger.test.d.ts +2 -0
- package/dist/tests/unit/logger.test.d.ts.map +1 -0
- package/dist/tests/unit/logger.test.js +97 -0
- package/dist/tests/unit/logger.test.js.map +1 -0
- package/dist/tests/unit/mcp-internal-auth.test.d.ts +2 -0
- package/dist/tests/unit/mcp-internal-auth.test.d.ts.map +1 -0
- package/dist/tests/unit/mcp-internal-auth.test.js +445 -0
- package/dist/tests/unit/mcp-internal-auth.test.js.map +1 -0
- package/dist/tests/unit/metrics.test.js +102 -0
- package/dist/tests/unit/metrics.test.js.map +1 -1
- package/dist/tests/unit/model-pricing.test.d.ts +2 -0
- package/dist/tests/unit/model-pricing.test.d.ts.map +1 -0
- package/dist/tests/unit/model-pricing.test.js +87 -0
- package/dist/tests/unit/model-pricing.test.js.map +1 -0
- package/dist/tests/unit/oauth-stores.test.d.ts +2 -0
- package/dist/tests/unit/oauth-stores.test.d.ts.map +1 -0
- package/dist/tests/unit/oauth-stores.test.js +260 -0
- package/dist/tests/unit/oauth-stores.test.js.map +1 -0
- package/dist/tests/unit/policy-engine.test.js +466 -0
- package/dist/tests/unit/policy-engine.test.js.map +1 -1
- package/dist/tests/unit/provider-interceptor.test.d.ts +2 -0
- package/dist/tests/unit/provider-interceptor.test.d.ts.map +1 -0
- package/dist/tests/unit/provider-interceptor.test.js +472 -0
- package/dist/tests/unit/provider-interceptor.test.js.map +1 -0
- package/dist/tests/unit/saas-routes-branches.test.d.ts +2 -0
- package/dist/tests/unit/saas-routes-branches.test.d.ts.map +1 -0
- package/dist/tests/unit/saas-routes-branches.test.js +2165 -0
- package/dist/tests/unit/saas-routes-branches.test.js.map +1 -0
- package/dist/tests/unit/saas-routes-crud.test.d.ts +2 -0
- package/dist/tests/unit/saas-routes-crud.test.d.ts.map +1 -0
- package/dist/tests/unit/saas-routes-crud.test.js +332 -0
- package/dist/tests/unit/saas-routes-crud.test.js.map +1 -0
- package/dist/tests/unit/saas-routes-data.test.d.ts +2 -0
- package/dist/tests/unit/saas-routes-data.test.d.ts.map +1 -0
- package/dist/tests/unit/saas-routes-data.test.js +405 -0
- package/dist/tests/unit/saas-routes-data.test.js.map +1 -0
- package/dist/tests/unit/saas-routes.test.js +3 -3
- package/dist/tests/unit/saas-routes.test.js.map +1 -1
- package/dist/tests/unit/shell-executor.test.d.ts +2 -0
- package/dist/tests/unit/shell-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/shell-executor.test.js +145 -0
- package/dist/tests/unit/shell-executor.test.js.map +1 -0
- package/dist/tests/unit/sql-executor.test.d.ts +2 -0
- package/dist/tests/unit/sql-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/sql-executor.test.js +177 -0
- package/dist/tests/unit/sql-executor.test.js.map +1 -0
- package/dist/tests/unit/stream-proxy.test.d.ts +2 -0
- package/dist/tests/unit/stream-proxy.test.d.ts.map +1 -0
- package/dist/tests/unit/stream-proxy.test.js +147 -0
- package/dist/tests/unit/stream-proxy.test.js.map +1 -0
- package/dist/tests/unit/tool-definitions.test.d.ts +2 -0
- package/dist/tests/unit/tool-definitions.test.d.ts.map +1 -0
- package/dist/tests/unit/tool-definitions.test.js +184 -0
- package/dist/tests/unit/tool-definitions.test.js.map +1 -0
- package/dist/tests/unit/usage-extractor.test.js +140 -0
- package/dist/tests/unit/usage-extractor.test.js.map +1 -1
- package/dist/tests/unit/webhook-handler.test.d.ts +2 -0
- package/dist/tests/unit/webhook-handler.test.d.ts.map +1 -0
- package/dist/tests/unit/webhook-handler.test.js +453 -0
- package/dist/tests/unit/webhook-handler.test.js.map +1 -0
- package/dist/tests/unit/webhook-routes.test.d.ts +2 -0
- package/dist/tests/unit/webhook-routes.test.d.ts.map +1 -0
- package/dist/tests/unit/webhook-routes.test.js +69 -0
- package/dist/tests/unit/webhook-routes.test.js.map +1 -0
- package/dist/tests/unit/websocket-executor.test.d.ts +2 -0
- package/dist/tests/unit/websocket-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/websocket-executor.test.js +121 -0
- package/dist/tests/unit/websocket-executor.test.js.map +1 -0
- package/package.json +8 -2
- package/policy-packs/demo_fail.yaml +41 -0
- package/policy-packs/full_tools.yaml +136 -0
- package/src/admin/index.ts +1 -0
- package/src/admin/routes.ts +509 -0
- package/src/admin/templates.ts +572 -0
- package/src/anomaly/detector.ts +730 -0
- package/src/anomaly/index.ts +1 -0
- package/src/approval/manager.ts +569 -0
- package/src/approval/webhook.ts +133 -0
- package/src/audit/logger.ts +490 -0
- package/src/auth/index.ts +5 -0
- package/src/auth/password.ts +21 -0
- package/src/auth/pkce.ts +22 -0
- package/src/auth/providers.ts +208 -0
- package/src/auth/routes.ts +561 -0
- package/src/auth/session.ts +84 -0
- package/src/billing/index.ts +6 -0
- package/src/billing/plan-enforcer.ts +135 -0
- package/src/billing/routes.ts +229 -0
- package/src/billing/stripe-client.ts +58 -0
- package/src/billing/webhook-handler.ts +182 -0
- package/src/billing/webhook-routes.ts +28 -0
- package/src/budget/manager.ts +679 -0
- package/src/budget/model-pricing.ts +119 -0
- package/src/budget/usage-extractor.ts +214 -0
- package/src/cli.ts +91 -0
- package/src/config/defaults.ts +261 -0
- package/src/config/validate.ts +88 -0
- package/src/dlp/composite-scanner.ts +213 -0
- package/src/dlp/index.ts +9 -0
- package/src/dlp/interfaces.ts +34 -0
- package/src/dlp/patterns.ts +30 -0
- package/src/dlp/prompt-injection-backend.ts +181 -0
- package/src/dlp/prompt-injection-patterns.ts +302 -0
- package/src/dlp/regex-backend.ts +181 -0
- package/src/dlp/scanner.ts +502 -0
- package/src/dlp/text-normalizer.ts +225 -0
- package/src/dlp/tool-patterns.ts +35 -0
- package/src/dlp/trufflehog-backend.ts +190 -0
- package/src/executor/filesystem-executor.ts +196 -0
- package/src/executor/http-executor.ts +349 -0
- package/src/executor/index.ts +9 -0
- package/src/executor/interfaces.ts +11 -0
- package/src/executor/noop-executor.ts +23 -0
- package/src/executor/registry.ts +64 -0
- package/src/executor/shell-executor.ts +148 -0
- package/src/executor/slack-executor.ts +176 -0
- package/src/executor/sql-executor.ts +146 -0
- package/src/executor/websocket-executor.ts +211 -0
- package/src/index.ts +24 -0
- package/src/interceptor/index.ts +1 -0
- package/src/interceptor/provider-interceptor.ts +315 -0
- package/src/mcp/auth-verifier.ts +152 -0
- package/src/mcp/bridge.ts +703 -0
- package/src/mcp/http-transport.ts +698 -0
- package/src/mcp/index.ts +9 -0
- package/src/mcp/internal-auth.ts +14 -0
- package/src/mcp/oauth-pages.ts +139 -0
- package/src/mcp/oauth-postgres-stores.ts +278 -0
- package/src/mcp/oauth-provider.ts +536 -0
- package/src/mcp/oauth-stores.ts +202 -0
- package/src/mcp/server.ts +55 -0
- package/src/mcp/tool-definitions.ts +562 -0
- package/src/metrics/collector.ts +357 -0
- package/src/metrics/index.ts +1 -0
- package/src/middleware/auth.ts +814 -0
- package/src/middleware/session.ts +85 -0
- package/src/middleware/validate.ts +130 -0
- package/src/policy/engine.ts +815 -0
- package/src/policy/index.ts +2 -0
- package/src/policy/opa-engine.ts +829 -0
- package/src/proxy/forward-proxy.ts +649 -0
- package/src/proxy/index.ts +1 -0
- package/src/ratelimit/limiter.ts +196 -0
- package/src/replay/engine.ts +142 -0
- package/src/replay/index.ts +1 -0
- package/src/saas/index.ts +1 -0
- package/src/saas/routes.ts +2178 -0
- package/src/server/app.ts +985 -0
- package/src/server/errors.ts +49 -0
- package/src/server/gateway.ts +1130 -0
- package/src/server/index.ts +307 -0
- package/src/server/logger.ts +255 -0
- package/src/server/stream-proxy.ts +202 -0
- package/src/storage/file-persistence.ts +315 -0
- package/src/storage/index.ts +4 -0
- package/src/storage/interfaces.ts +287 -0
- package/src/storage/memory.ts +686 -0
- package/src/storage/postgres.ts +1831 -0
- package/src/storage/redis.ts +835 -0
- package/src/tracing/index.ts +1 -0
- package/src/tracing/provider.ts +100 -0
- package/src/trust/calculator.ts +141 -0
- package/src/trust/index.ts +7 -0
- package/src/types/budget.ts +36 -0
- package/src/types/config.ts +278 -0
- package/src/types/events.ts +41 -0
- package/src/types/express.d.ts +14 -0
- package/src/types/index.ts +7 -0
- package/src/types/policy.ts +83 -0
- package/src/types/stripe-config.ts +11 -0
- package/src/types/subscription.ts +59 -0
- package/src/types/tool-call.ts +47 -0
- package/src/types/tool-result.ts +82 -0
- package/src/types/user.ts +125 -0
- package/tsconfig.json +24 -0
|
@@ -0,0 +1,432 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
const express_1 = __importDefault(require("express"));
|
|
7
|
+
const supertest_1 = __importDefault(require("supertest"));
|
|
8
|
+
const routes_1 = require("../../src/billing/routes");
|
|
9
|
+
const memory_1 = require("../../src/storage/memory");
|
|
10
|
+
// ---------------------------------------------------------------------------
|
|
11
|
+
// Mocks
|
|
12
|
+
// ---------------------------------------------------------------------------
|
|
13
|
+
function makeStripeConfig() {
|
|
14
|
+
return {
|
|
15
|
+
secret_key: 'sk_test_fake',
|
|
16
|
+
webhook_secret: 'whsec_fake',
|
|
17
|
+
price_ids: { pro_monthly: 'price_pro', business_monthly: 'price_biz' },
|
|
18
|
+
};
|
|
19
|
+
}
|
|
20
|
+
function mockStripeClient() {
|
|
21
|
+
return {
|
|
22
|
+
createCustomer: jest.fn().mockResolvedValue({ id: 'cus_123' }),
|
|
23
|
+
createCheckoutSession: jest.fn().mockResolvedValue({ url: 'https://checkout.stripe.com/session' }),
|
|
24
|
+
createPortalSession: jest.fn().mockResolvedValue({ url: 'https://billing.stripe.com/portal' }),
|
|
25
|
+
getInvoices: jest.fn().mockResolvedValue([
|
|
26
|
+
{
|
|
27
|
+
id: 'in_1',
|
|
28
|
+
number: 'INV-001',
|
|
29
|
+
status: 'paid',
|
|
30
|
+
amount_due: 2000,
|
|
31
|
+
amount_paid: 2000,
|
|
32
|
+
currency: 'usd',
|
|
33
|
+
period_start: 1700000000,
|
|
34
|
+
period_end: 1702600000,
|
|
35
|
+
hosted_invoice_url: 'https://invoice.stripe.com/1',
|
|
36
|
+
created: 1700000000,
|
|
37
|
+
},
|
|
38
|
+
]),
|
|
39
|
+
constructEvent: jest.fn(),
|
|
40
|
+
};
|
|
41
|
+
}
|
|
42
|
+
function mockGateway() {
|
|
43
|
+
return {
|
|
44
|
+
getAuditLogger: () => ({
|
|
45
|
+
getAllEvents: () => [],
|
|
46
|
+
}),
|
|
47
|
+
};
|
|
48
|
+
}
|
|
49
|
+
// ---------------------------------------------------------------------------
|
|
50
|
+
// Helpers
|
|
51
|
+
// ---------------------------------------------------------------------------
|
|
52
|
+
function createDeps(overrides) {
|
|
53
|
+
return {
|
|
54
|
+
stripeClient: mockStripeClient(),
|
|
55
|
+
stripeConfig: makeStripeConfig(),
|
|
56
|
+
subscriptionStore: new memory_1.InMemorySubscriptionStore(),
|
|
57
|
+
workspaceStore: new memory_1.InMemoryWorkspaceStore(),
|
|
58
|
+
workspaceMemberStore: new memory_1.InMemoryWorkspaceMemberStore(),
|
|
59
|
+
gateway: mockGateway(),
|
|
60
|
+
...overrides,
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
function createApp(deps, sessionUser) {
|
|
64
|
+
const app = (0, express_1.default)();
|
|
65
|
+
app.use(express_1.default.json());
|
|
66
|
+
if (sessionUser) {
|
|
67
|
+
app.use((req, _res, next) => {
|
|
68
|
+
req.sessionUser = sessionUser;
|
|
69
|
+
next();
|
|
70
|
+
});
|
|
71
|
+
}
|
|
72
|
+
app.use((0, routes_1.createBillingRouter)(deps));
|
|
73
|
+
return app;
|
|
74
|
+
}
|
|
75
|
+
function seedWorkspaceAndMember(deps, opts) {
|
|
76
|
+
const now = new Date().toISOString();
|
|
77
|
+
deps.workspaceStore.create({
|
|
78
|
+
id: 'ws-1',
|
|
79
|
+
name: 'Test WS',
|
|
80
|
+
slug: 'test-ws',
|
|
81
|
+
owner_user_id: 'u-1',
|
|
82
|
+
plan: 'free',
|
|
83
|
+
settings: {},
|
|
84
|
+
created_at: now,
|
|
85
|
+
updated_at: now,
|
|
86
|
+
});
|
|
87
|
+
deps.workspaceMemberStore.create({
|
|
88
|
+
id: 'wm-1',
|
|
89
|
+
workspace_id: 'ws-1',
|
|
90
|
+
user_id: 'u-1',
|
|
91
|
+
role: (opts?.role || 'owner'),
|
|
92
|
+
joined_at: now,
|
|
93
|
+
});
|
|
94
|
+
}
|
|
95
|
+
const testUser = { id: 'u-1', email: 'alice@example.com', display_name: 'Alice' };
|
|
96
|
+
// ---------------------------------------------------------------------------
|
|
97
|
+
// Tests
|
|
98
|
+
// ---------------------------------------------------------------------------
|
|
99
|
+
describe('billing routes', () => {
|
|
100
|
+
// =========================================================================
|
|
101
|
+
// GET /workspaces/:id/billing
|
|
102
|
+
// =========================================================================
|
|
103
|
+
describe('GET /workspaces/:id/billing', () => {
|
|
104
|
+
it('returns 401 when session is missing', async () => {
|
|
105
|
+
const deps = createDeps();
|
|
106
|
+
const app = createApp(deps);
|
|
107
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
|
|
108
|
+
expect(res.status).toBe(401);
|
|
109
|
+
});
|
|
110
|
+
it('returns 403 when user is not a workspace member', async () => {
|
|
111
|
+
const deps = createDeps();
|
|
112
|
+
const app = createApp(deps, testUser);
|
|
113
|
+
// workspace exists but no membership
|
|
114
|
+
const now = new Date().toISOString();
|
|
115
|
+
deps.workspaceStore.create({
|
|
116
|
+
id: 'ws-1', name: 'Test', slug: 'test', owner_user_id: 'other',
|
|
117
|
+
plan: 'free', settings: {}, created_at: now, updated_at: now,
|
|
118
|
+
});
|
|
119
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
|
|
120
|
+
expect(res.status).toBe(403);
|
|
121
|
+
});
|
|
122
|
+
it('returns 404 when workspace does not exist', async () => {
|
|
123
|
+
const deps = createDeps();
|
|
124
|
+
const app = createApp(deps, testUser);
|
|
125
|
+
// membership exists but no workspace
|
|
126
|
+
const now = new Date().toISOString();
|
|
127
|
+
deps.workspaceMemberStore.create({
|
|
128
|
+
id: 'wm-1', workspace_id: 'ws-1', user_id: 'u-1',
|
|
129
|
+
role: 'owner', joined_at: now,
|
|
130
|
+
});
|
|
131
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
|
|
132
|
+
expect(res.status).toBe(404);
|
|
133
|
+
});
|
|
134
|
+
it('returns billing status with plan and limits', async () => {
|
|
135
|
+
const deps = createDeps();
|
|
136
|
+
const app = createApp(deps, testUser);
|
|
137
|
+
seedWorkspaceAndMember(deps);
|
|
138
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
|
|
139
|
+
expect(res.status).toBe(200);
|
|
140
|
+
expect(res.body.plan).toBe('free');
|
|
141
|
+
expect(res.body.limits).toBeDefined();
|
|
142
|
+
expect(res.body.limits.calls_per_month).toBe(10000);
|
|
143
|
+
expect(res.body.subscription).toBeNull();
|
|
144
|
+
});
|
|
145
|
+
it('includes subscription details when present', async () => {
|
|
146
|
+
const deps = createDeps();
|
|
147
|
+
const app = createApp(deps, testUser);
|
|
148
|
+
seedWorkspaceAndMember(deps);
|
|
149
|
+
const now = new Date().toISOString();
|
|
150
|
+
deps.subscriptionStore.create({
|
|
151
|
+
id: 'sub-1',
|
|
152
|
+
workspace_id: 'ws-1',
|
|
153
|
+
stripe_customer_id: 'cus_1',
|
|
154
|
+
stripe_subscription_id: 'sub_stripe_1',
|
|
155
|
+
plan: 'pro',
|
|
156
|
+
status: 'active',
|
|
157
|
+
current_period_start: now,
|
|
158
|
+
current_period_end: now,
|
|
159
|
+
cancel_at_period_end: false,
|
|
160
|
+
created_at: now,
|
|
161
|
+
updated_at: now,
|
|
162
|
+
});
|
|
163
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
|
|
164
|
+
expect(res.status).toBe(200);
|
|
165
|
+
expect(res.body.subscription).toBeDefined();
|
|
166
|
+
expect(res.body.subscription.id).toBe('sub-1');
|
|
167
|
+
expect(res.body.subscription.status).toBe('active');
|
|
168
|
+
});
|
|
169
|
+
});
|
|
170
|
+
// =========================================================================
|
|
171
|
+
// POST /workspaces/:id/billing/checkout
|
|
172
|
+
// =========================================================================
|
|
173
|
+
describe('POST /workspaces/:id/billing/checkout', () => {
|
|
174
|
+
it('returns 401 when session is missing', async () => {
|
|
175
|
+
const deps = createDeps();
|
|
176
|
+
const app = createApp(deps);
|
|
177
|
+
const res = await (0, supertest_1.default)(app)
|
|
178
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
179
|
+
.send({ plan: 'pro' });
|
|
180
|
+
expect(res.status).toBe(401);
|
|
181
|
+
});
|
|
182
|
+
it('returns 403 when user is not owner/admin', async () => {
|
|
183
|
+
const deps = createDeps();
|
|
184
|
+
const app = createApp(deps, testUser);
|
|
185
|
+
seedWorkspaceAndMember(deps, { role: 'member' });
|
|
186
|
+
const res = await (0, supertest_1.default)(app)
|
|
187
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
188
|
+
.send({ plan: 'pro' });
|
|
189
|
+
expect(res.status).toBe(403);
|
|
190
|
+
expect(res.body.error).toContain('owners and admins');
|
|
191
|
+
});
|
|
192
|
+
it('returns 400 for invalid plan', async () => {
|
|
193
|
+
const deps = createDeps();
|
|
194
|
+
const app = createApp(deps, testUser);
|
|
195
|
+
seedWorkspaceAndMember(deps);
|
|
196
|
+
const res = await (0, supertest_1.default)(app)
|
|
197
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
198
|
+
.send({ plan: 'invalid' });
|
|
199
|
+
expect(res.status).toBe(400);
|
|
200
|
+
expect(res.body.error).toContain('plan must be');
|
|
201
|
+
});
|
|
202
|
+
it('returns 400 when plan is missing', async () => {
|
|
203
|
+
const deps = createDeps();
|
|
204
|
+
const app = createApp(deps, testUser);
|
|
205
|
+
seedWorkspaceAndMember(deps);
|
|
206
|
+
const res = await (0, supertest_1.default)(app)
|
|
207
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
208
|
+
.send({});
|
|
209
|
+
expect(res.status).toBe(400);
|
|
210
|
+
});
|
|
211
|
+
it('creates a new customer and checkout session for pro plan', async () => {
|
|
212
|
+
const deps = createDeps();
|
|
213
|
+
const app = createApp(deps, testUser);
|
|
214
|
+
seedWorkspaceAndMember(deps);
|
|
215
|
+
const res = await (0, supertest_1.default)(app)
|
|
216
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
217
|
+
.send({ plan: 'pro' });
|
|
218
|
+
expect(res.status).toBe(200);
|
|
219
|
+
expect(res.body.url).toBe('https://checkout.stripe.com/session');
|
|
220
|
+
expect(deps.stripeClient.createCustomer).toHaveBeenCalledWith('alice@example.com', 'ws-1', 'Alice');
|
|
221
|
+
expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_123', 'price_pro', 'ws-1');
|
|
222
|
+
});
|
|
223
|
+
it('creates checkout session for business plan', async () => {
|
|
224
|
+
const deps = createDeps();
|
|
225
|
+
const app = createApp(deps, testUser);
|
|
226
|
+
seedWorkspaceAndMember(deps);
|
|
227
|
+
const res = await (0, supertest_1.default)(app)
|
|
228
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
229
|
+
.send({ plan: 'business' });
|
|
230
|
+
expect(res.status).toBe(200);
|
|
231
|
+
expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_123', 'price_biz', 'ws-1');
|
|
232
|
+
});
|
|
233
|
+
it('uses existing stripe customer ID when subscription exists', async () => {
|
|
234
|
+
const deps = createDeps();
|
|
235
|
+
const app = createApp(deps, testUser);
|
|
236
|
+
seedWorkspaceAndMember(deps);
|
|
237
|
+
const now = new Date().toISOString();
|
|
238
|
+
deps.subscriptionStore.create({
|
|
239
|
+
id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_existing',
|
|
240
|
+
plan: 'free', status: 'active', created_at: now, updated_at: now,
|
|
241
|
+
});
|
|
242
|
+
const res = await (0, supertest_1.default)(app)
|
|
243
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
244
|
+
.send({ plan: 'pro' });
|
|
245
|
+
expect(res.status).toBe(200);
|
|
246
|
+
expect(deps.stripeClient.createCustomer).not.toHaveBeenCalled();
|
|
247
|
+
expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_existing', 'price_pro', 'ws-1');
|
|
248
|
+
});
|
|
249
|
+
it('returns 500 when stripe throws', async () => {
|
|
250
|
+
const stripe = mockStripeClient();
|
|
251
|
+
stripe.createCustomer.mockRejectedValue(new Error('Stripe is down'));
|
|
252
|
+
const deps = createDeps({ stripeClient: stripe });
|
|
253
|
+
const app = createApp(deps, testUser);
|
|
254
|
+
seedWorkspaceAndMember(deps);
|
|
255
|
+
const res = await (0, supertest_1.default)(app)
|
|
256
|
+
.post('/workspaces/ws-1/billing/checkout')
|
|
257
|
+
.send({ plan: 'pro' });
|
|
258
|
+
expect(res.status).toBe(500);
|
|
259
|
+
expect(res.body.error).toBe('Stripe is down');
|
|
260
|
+
});
|
|
261
|
+
});
|
|
262
|
+
// =========================================================================
|
|
263
|
+
// POST /workspaces/:id/billing/portal
|
|
264
|
+
// =========================================================================
|
|
265
|
+
describe('POST /workspaces/:id/billing/portal', () => {
|
|
266
|
+
it('returns 401 when session is missing', async () => {
|
|
267
|
+
const deps = createDeps();
|
|
268
|
+
const app = createApp(deps);
|
|
269
|
+
const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
|
|
270
|
+
expect(res.status).toBe(401);
|
|
271
|
+
});
|
|
272
|
+
it('returns 403 when user is not owner/admin', async () => {
|
|
273
|
+
const deps = createDeps();
|
|
274
|
+
const app = createApp(deps, testUser);
|
|
275
|
+
seedWorkspaceAndMember(deps, { role: 'member' });
|
|
276
|
+
const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
|
|
277
|
+
expect(res.status).toBe(403);
|
|
278
|
+
});
|
|
279
|
+
it('returns 400 when no billing account exists', async () => {
|
|
280
|
+
const deps = createDeps();
|
|
281
|
+
const app = createApp(deps, testUser);
|
|
282
|
+
seedWorkspaceAndMember(deps);
|
|
283
|
+
const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
|
|
284
|
+
expect(res.status).toBe(400);
|
|
285
|
+
expect(res.body.error).toContain('No billing account');
|
|
286
|
+
});
|
|
287
|
+
it('returns portal URL when subscription exists', async () => {
|
|
288
|
+
const deps = createDeps();
|
|
289
|
+
const app = createApp(deps, testUser);
|
|
290
|
+
seedWorkspaceAndMember(deps);
|
|
291
|
+
const now = new Date().toISOString();
|
|
292
|
+
deps.subscriptionStore.create({
|
|
293
|
+
id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_portal',
|
|
294
|
+
plan: 'pro', status: 'active', created_at: now, updated_at: now,
|
|
295
|
+
});
|
|
296
|
+
const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
|
|
297
|
+
expect(res.status).toBe(200);
|
|
298
|
+
expect(res.body.url).toBe('https://billing.stripe.com/portal');
|
|
299
|
+
expect(deps.stripeClient.createPortalSession).toHaveBeenCalledWith('cus_portal');
|
|
300
|
+
});
|
|
301
|
+
it('returns 500 when stripe portal fails', async () => {
|
|
302
|
+
const stripe = mockStripeClient();
|
|
303
|
+
stripe.createPortalSession.mockRejectedValue(new Error('Portal error'));
|
|
304
|
+
const deps = createDeps({ stripeClient: stripe });
|
|
305
|
+
const app = createApp(deps, testUser);
|
|
306
|
+
seedWorkspaceAndMember(deps);
|
|
307
|
+
const now = new Date().toISOString();
|
|
308
|
+
deps.subscriptionStore.create({
|
|
309
|
+
id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_1',
|
|
310
|
+
plan: 'pro', status: 'active', created_at: now, updated_at: now,
|
|
311
|
+
});
|
|
312
|
+
const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
|
|
313
|
+
expect(res.status).toBe(500);
|
|
314
|
+
expect(res.body.error).toBe('Portal error');
|
|
315
|
+
});
|
|
316
|
+
});
|
|
317
|
+
// =========================================================================
|
|
318
|
+
// GET /workspaces/:id/billing/invoices
|
|
319
|
+
// =========================================================================
|
|
320
|
+
describe('GET /workspaces/:id/billing/invoices', () => {
|
|
321
|
+
it('returns 401 when session is missing', async () => {
|
|
322
|
+
const deps = createDeps();
|
|
323
|
+
const app = createApp(deps);
|
|
324
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
|
|
325
|
+
expect(res.status).toBe(401);
|
|
326
|
+
});
|
|
327
|
+
it('returns 403 when user is not a member', async () => {
|
|
328
|
+
const deps = createDeps();
|
|
329
|
+
const app = createApp(deps, testUser);
|
|
330
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
|
|
331
|
+
expect(res.status).toBe(403);
|
|
332
|
+
});
|
|
333
|
+
it('returns empty invoices when no billing account exists', async () => {
|
|
334
|
+
const deps = createDeps();
|
|
335
|
+
const app = createApp(deps, testUser);
|
|
336
|
+
seedWorkspaceAndMember(deps);
|
|
337
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
|
|
338
|
+
expect(res.status).toBe(200);
|
|
339
|
+
expect(res.body.invoices).toEqual([]);
|
|
340
|
+
});
|
|
341
|
+
it('returns invoices from stripe', async () => {
|
|
342
|
+
const deps = createDeps();
|
|
343
|
+
const app = createApp(deps, testUser);
|
|
344
|
+
seedWorkspaceAndMember(deps);
|
|
345
|
+
const now = new Date().toISOString();
|
|
346
|
+
deps.subscriptionStore.create({
|
|
347
|
+
id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_inv',
|
|
348
|
+
plan: 'pro', status: 'active', created_at: now, updated_at: now,
|
|
349
|
+
});
|
|
350
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
|
|
351
|
+
expect(res.status).toBe(200);
|
|
352
|
+
expect(res.body.invoices).toHaveLength(1);
|
|
353
|
+
expect(res.body.invoices[0].id).toBe('in_1');
|
|
354
|
+
expect(res.body.invoices[0].number).toBe('INV-001');
|
|
355
|
+
expect(res.body.invoices[0].status).toBe('paid');
|
|
356
|
+
});
|
|
357
|
+
it('returns 500 when stripe invoices fail', async () => {
|
|
358
|
+
const stripe = mockStripeClient();
|
|
359
|
+
stripe.getInvoices.mockRejectedValue(new Error('Invoice fetch error'));
|
|
360
|
+
const deps = createDeps({ stripeClient: stripe });
|
|
361
|
+
const app = createApp(deps, testUser);
|
|
362
|
+
seedWorkspaceAndMember(deps);
|
|
363
|
+
const now = new Date().toISOString();
|
|
364
|
+
deps.subscriptionStore.create({
|
|
365
|
+
id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_1',
|
|
366
|
+
plan: 'pro', status: 'active', created_at: now, updated_at: now,
|
|
367
|
+
});
|
|
368
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
|
|
369
|
+
expect(res.status).toBe(500);
|
|
370
|
+
expect(res.body.error).toBe('Invoice fetch error');
|
|
371
|
+
});
|
|
372
|
+
});
|
|
373
|
+
// =========================================================================
|
|
374
|
+
// GET /workspaces/:id/billing/usage
|
|
375
|
+
// =========================================================================
|
|
376
|
+
describe('GET /workspaces/:id/billing/usage', () => {
|
|
377
|
+
it('returns 401 when session is missing', async () => {
|
|
378
|
+
const deps = createDeps();
|
|
379
|
+
const app = createApp(deps);
|
|
380
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
|
|
381
|
+
expect(res.status).toBe(401);
|
|
382
|
+
});
|
|
383
|
+
it('returns 403 when user is not a member', async () => {
|
|
384
|
+
const deps = createDeps();
|
|
385
|
+
const app = createApp(deps, testUser);
|
|
386
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
|
|
387
|
+
expect(res.status).toBe(403);
|
|
388
|
+
});
|
|
389
|
+
it('returns 404 when workspace does not exist', async () => {
|
|
390
|
+
const deps = createDeps();
|
|
391
|
+
const app = createApp(deps, testUser);
|
|
392
|
+
const now = new Date().toISOString();
|
|
393
|
+
deps.workspaceMemberStore.create({
|
|
394
|
+
id: 'wm-1', workspace_id: 'ws-1', user_id: 'u-1',
|
|
395
|
+
role: 'owner', joined_at: now,
|
|
396
|
+
});
|
|
397
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
|
|
398
|
+
expect(res.status).toBe(404);
|
|
399
|
+
});
|
|
400
|
+
it('returns usage data with zero calls', async () => {
|
|
401
|
+
const deps = createDeps();
|
|
402
|
+
const app = createApp(deps, testUser);
|
|
403
|
+
seedWorkspaceAndMember(deps);
|
|
404
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
|
|
405
|
+
expect(res.status).toBe(200);
|
|
406
|
+
expect(res.body.plan).toBe('free');
|
|
407
|
+
expect(res.body.calls_this_month).toBe(0);
|
|
408
|
+
expect(res.body.calls_limit).toBe(10000);
|
|
409
|
+
expect(res.body.allowed).toBe(true);
|
|
410
|
+
expect(res.body.usage_percent).toBe(0);
|
|
411
|
+
});
|
|
412
|
+
it('counts workspace events for current month', async () => {
|
|
413
|
+
const now = new Date();
|
|
414
|
+
const thisMonthEvent = {
|
|
415
|
+
workspace_id: 'ws-1',
|
|
416
|
+
timestamp: now.toISOString(),
|
|
417
|
+
};
|
|
418
|
+
const gateway = {
|
|
419
|
+
getAuditLogger: () => ({
|
|
420
|
+
getAllEvents: () => [thisMonthEvent, thisMonthEvent],
|
|
421
|
+
}),
|
|
422
|
+
};
|
|
423
|
+
const deps = createDeps({ gateway });
|
|
424
|
+
const app = createApp(deps, testUser);
|
|
425
|
+
seedWorkspaceAndMember(deps);
|
|
426
|
+
const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
|
|
427
|
+
expect(res.status).toBe(200);
|
|
428
|
+
expect(res.body.calls_this_month).toBe(2);
|
|
429
|
+
});
|
|
430
|
+
});
|
|
431
|
+
});
|
|
432
|
+
//# sourceMappingURL=billing-routes.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"billing-routes.test.js","sourceRoot":"","sources":["../../../tests/unit/billing-routes.test.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,0DAAgC;AAChC,qDAAiF;AACjF,qDAIkC;AAGlC,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,gBAAgB;IACvB,OAAO;QACL,UAAU,EAAE,cAAc;QAC1B,cAAc,EAAE,YAAY;QAC5B,SAAS,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QAC9D,qBAAqB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC;QAClG,mBAAmB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC;QAC9F,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC;gBACE,EAAE,EAAE,MAAM;gBACV,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,8BAA8B;gBAClD,OAAO,EAAE,UAAU;aACpB;SACF,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE;KACnB,CAAC;AACX,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YACrB,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE;SACvB,CAAC;KACI,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO;QACL,YAAY,EAAE,gBAAgB,EAAE;QAChC,YAAY,EAAE,gBAAgB,EAAE;QAChC,iBAAiB,EAAE,IAAI,kCAAyB,EAAE;QAClD,cAAc,EAAE,IAAI,+BAAsB,EAAE;QAC5C,oBAAoB,EAAE,IAAI,qCAA4B,EAAE;QACxD,OAAO,EAAE,WAAW,EAAE;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB,EAAE,WAAiB;IAC1D,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACzB,GAAW,CAAC,WAAW,GAAG,WAAW,CAAC;YACvC,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAsB,EAAE,IAAwB;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QACzB,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,KAAK;QACpB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC/B,EAAE,EAAE,MAAM;QACV,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,CAAQ;QACpC,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAElF,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBACzB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO;gBAC9D,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAC7D,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAC/B,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;gBAChD,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG;aAC9B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO;gBACX,YAAY,EAAE,MAAM;gBACpB,kBAAkB,EAAE,OAAO;gBAC3B,sBAAsB,EAAE,cAAc;gBACtC,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,QAAQ;gBAChB,oBAAoB,EAAE,GAAG;gBACzB,kBAAkB,EAAE,GAAG;gBACvB,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAC5E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc;gBACrE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aACjE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,sCAAsC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY;gBACnE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO;gBAC9D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uCAAuC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEtC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS;gBAChE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO;gBAC9D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,oCAAoC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEtC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAC/B,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;gBAChD,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG;aAC9B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG;gBACrB,YAAY,EAAE,MAAM;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;oBACrB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC;iBACrD,CAAC;aACI,CAAC;YACT,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-defaults.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/config-defaults.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,119 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
const fs = __importStar(require("fs"));
|
|
37
|
+
const path = __importStar(require("path"));
|
|
38
|
+
const os = __importStar(require("os"));
|
|
39
|
+
describe('config/defaults', () => {
|
|
40
|
+
const originalEnv = { ...process.env };
|
|
41
|
+
afterEach(() => {
|
|
42
|
+
process.env = { ...originalEnv };
|
|
43
|
+
jest.resetModules();
|
|
44
|
+
});
|
|
45
|
+
it('reads JWT_SECRET from env var', () => {
|
|
46
|
+
process.env.JWT_SECRET = 'my-jwt-secret';
|
|
47
|
+
process.env.APPROVAL_SECRET = 'my-approval-secret';
|
|
48
|
+
process.env.OAUTH_SESSION_SECRET = 'my-oauth-secret';
|
|
49
|
+
delete process.env.NODE_ENV; // ensure dev mode
|
|
50
|
+
jest.isolateModules(() => {
|
|
51
|
+
const { DEFAULT_CONFIG } = require('../../src/config/defaults');
|
|
52
|
+
expect(DEFAULT_CONFIG.auth.jwt_secret).toBe('my-jwt-secret');
|
|
53
|
+
});
|
|
54
|
+
});
|
|
55
|
+
it('reads secret from _FILE env var', () => {
|
|
56
|
+
const tmpFile = path.join(os.tmpdir(), `palaryn-test-secret-${Date.now()}`);
|
|
57
|
+
fs.writeFileSync(tmpFile, ' file-based-secret \n');
|
|
58
|
+
process.env.JWT_SECRET_FILE = tmpFile;
|
|
59
|
+
process.env.APPROVAL_SECRET = 'test-approval';
|
|
60
|
+
process.env.OAUTH_SESSION_SECRET = 'test-oauth';
|
|
61
|
+
delete process.env.JWT_SECRET;
|
|
62
|
+
delete process.env.NODE_ENV;
|
|
63
|
+
try {
|
|
64
|
+
jest.isolateModules(() => {
|
|
65
|
+
const { DEFAULT_CONFIG } = require('../../src/config/defaults');
|
|
66
|
+
expect(DEFAULT_CONFIG.auth.jwt_secret).toBe('file-based-secret');
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
finally {
|
|
70
|
+
fs.unlinkSync(tmpFile);
|
|
71
|
+
}
|
|
72
|
+
});
|
|
73
|
+
it('throws when _FILE points to non-existent file', () => {
|
|
74
|
+
process.env.JWT_SECRET_FILE = '/nonexistent/path/secret.txt';
|
|
75
|
+
delete process.env.JWT_SECRET;
|
|
76
|
+
delete process.env.NODE_ENV;
|
|
77
|
+
expect(() => {
|
|
78
|
+
jest.isolateModules(() => {
|
|
79
|
+
require('../../src/config/defaults');
|
|
80
|
+
});
|
|
81
|
+
}).toThrow(/Failed to read secret file/);
|
|
82
|
+
});
|
|
83
|
+
it('generates random secret in dev mode when not set', () => {
|
|
84
|
+
delete process.env.JWT_SECRET;
|
|
85
|
+
delete process.env.JWT_SECRET_FILE;
|
|
86
|
+
delete process.env.APPROVAL_SECRET;
|
|
87
|
+
delete process.env.APPROVAL_SECRET_FILE;
|
|
88
|
+
delete process.env.OAUTH_SESSION_SECRET;
|
|
89
|
+
delete process.env.OAUTH_SESSION_SECRET_FILE;
|
|
90
|
+
delete process.env.NODE_ENV;
|
|
91
|
+
const warnSpy = jest.spyOn(console, 'warn').mockImplementation(() => { });
|
|
92
|
+
jest.isolateModules(() => {
|
|
93
|
+
const { DEFAULT_CONFIG } = require('../../src/config/defaults');
|
|
94
|
+
// Generated secrets should be 64-char hex strings
|
|
95
|
+
expect(DEFAULT_CONFIG.auth.jwt_secret).toMatch(/^[a-f0-9]{64}$/);
|
|
96
|
+
expect(DEFAULT_CONFIG.approval.token_secret).toMatch(/^[a-f0-9]{64}$/);
|
|
97
|
+
});
|
|
98
|
+
warnSpy.mockRestore();
|
|
99
|
+
});
|
|
100
|
+
it('DEFAULT_CONFIG has expected structure', () => {
|
|
101
|
+
process.env.JWT_SECRET = 'test';
|
|
102
|
+
process.env.APPROVAL_SECRET = 'test';
|
|
103
|
+
process.env.OAUTH_SESSION_SECRET = 'test';
|
|
104
|
+
delete process.env.NODE_ENV;
|
|
105
|
+
jest.isolateModules(() => {
|
|
106
|
+
const { DEFAULT_CONFIG } = require('../../src/config/defaults');
|
|
107
|
+
expect(DEFAULT_CONFIG).toHaveProperty('port');
|
|
108
|
+
expect(DEFAULT_CONFIG).toHaveProperty('auth');
|
|
109
|
+
expect(DEFAULT_CONFIG).toHaveProperty('policy');
|
|
110
|
+
expect(DEFAULT_CONFIG).toHaveProperty('dlp');
|
|
111
|
+
expect(DEFAULT_CONFIG).toHaveProperty('budget');
|
|
112
|
+
expect(DEFAULT_CONFIG).toHaveProperty('audit');
|
|
113
|
+
expect(DEFAULT_CONFIG).toHaveProperty('executor');
|
|
114
|
+
expect(DEFAULT_CONFIG).toHaveProperty('approval');
|
|
115
|
+
expect(DEFAULT_CONFIG).toHaveProperty('rate_limit');
|
|
116
|
+
});
|
|
117
|
+
});
|
|
118
|
+
});
|
|
119
|
+
//# sourceMappingURL=config-defaults.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-defaults.test.js","sourceRoot":"","sources":["../../../tests/unit/config-defaults.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,eAAe,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,oBAAoB,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,iBAAiB,CAAC;QACrD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,kBAAkB;QAE/C,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5E,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,YAAY,CAAC;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;gBACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,8BAA8B,CAAC;QAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,MAAM,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;gBACvB,OAAO,CAAC,2BAA2B,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,kDAAkD;YAClD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -326,29 +326,19 @@ describe('DEFAULT_CONFIG (src/config/defaults.ts)', () => {
|
|
|
326
326
|
it('should throw when JWT_SECRET is not set in production', () => {
|
|
327
327
|
process.env.NODE_ENV = 'production';
|
|
328
328
|
process.env.APPROVAL_SECRET = 'prod-approval-secret';
|
|
329
|
-
process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
|
|
330
329
|
// JWT_SECRET is not set
|
|
331
330
|
expect(() => loadDefaults()).toThrow('JWT_SECRET (or JWT_SECRET_FILE) must be set in production');
|
|
332
331
|
});
|
|
333
332
|
it('should throw when APPROVAL_SECRET is not set in production', () => {
|
|
334
333
|
process.env.NODE_ENV = 'production';
|
|
335
334
|
process.env.JWT_SECRET = 'prod-jwt-secret';
|
|
336
|
-
process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
|
|
337
335
|
// APPROVAL_SECRET is not set
|
|
338
336
|
expect(() => loadDefaults()).toThrow('APPROVAL_SECRET (or APPROVAL_SECRET_FILE) must be set in production');
|
|
339
337
|
});
|
|
340
|
-
it('should throw when OAUTH_SESSION_SECRET is not set in production', () => {
|
|
341
|
-
process.env.NODE_ENV = 'production';
|
|
342
|
-
process.env.JWT_SECRET = 'prod-jwt-secret';
|
|
343
|
-
process.env.APPROVAL_SECRET = 'prod-approval-secret';
|
|
344
|
-
// OAUTH_SESSION_SECRET is not set
|
|
345
|
-
expect(() => loadDefaults()).toThrow('OAUTH_SESSION_SECRET (or OAUTH_SESSION_SECRET_FILE) must be set in production');
|
|
346
|
-
});
|
|
347
338
|
it('should not throw in production when all secrets are provided', () => {
|
|
348
339
|
process.env.NODE_ENV = 'production';
|
|
349
340
|
process.env.JWT_SECRET = 'prod-jwt-secret';
|
|
350
341
|
process.env.APPROVAL_SECRET = 'prod-approval-secret';
|
|
351
|
-
process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
|
|
352
342
|
expect(() => loadDefaults()).not.toThrow();
|
|
353
343
|
});
|
|
354
344
|
it('should exclude dev API keys in production', () => {
|