palaryn 0.1.0 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (344) hide show
  1. package/README.md +243 -588
  2. package/dist/sdk/typescript/src/client.js +2 -2
  3. package/dist/sdk/typescript/src/client.js.map +1 -1
  4. package/dist/src/anomaly/detector.d.ts +7 -4
  5. package/dist/src/anomaly/detector.d.ts.map +1 -1
  6. package/dist/src/anomaly/detector.js +22 -12
  7. package/dist/src/anomaly/detector.js.map +1 -1
  8. package/dist/src/audit/logger.d.ts +10 -0
  9. package/dist/src/audit/logger.d.ts.map +1 -1
  10. package/dist/src/audit/logger.js +52 -38
  11. package/dist/src/audit/logger.js.map +1 -1
  12. package/dist/src/auth/routes.d.ts.map +1 -1
  13. package/dist/src/auth/routes.js +35 -0
  14. package/dist/src/auth/routes.js.map +1 -1
  15. package/dist/src/budget/manager.d.ts +5 -0
  16. package/dist/src/budget/manager.d.ts.map +1 -1
  17. package/dist/src/budget/manager.js +32 -0
  18. package/dist/src/budget/manager.js.map +1 -1
  19. package/dist/src/budget/model-pricing.d.ts +20 -0
  20. package/dist/src/budget/model-pricing.d.ts.map +1 -0
  21. package/dist/src/budget/model-pricing.js +107 -0
  22. package/dist/src/budget/model-pricing.js.map +1 -0
  23. package/dist/src/budget/usage-extractor.d.ts +3 -1
  24. package/dist/src/budget/usage-extractor.d.ts.map +1 -1
  25. package/dist/src/budget/usage-extractor.js +47 -3
  26. package/dist/src/budget/usage-extractor.js.map +1 -1
  27. package/dist/src/config/defaults.d.ts.map +1 -1
  28. package/dist/src/config/defaults.js +65 -13
  29. package/dist/src/config/defaults.js.map +1 -1
  30. package/dist/src/dlp/tool-patterns.d.ts +7 -0
  31. package/dist/src/dlp/tool-patterns.d.ts.map +1 -0
  32. package/dist/src/dlp/tool-patterns.js +34 -0
  33. package/dist/src/dlp/tool-patterns.js.map +1 -0
  34. package/dist/src/executor/filesystem-executor.d.ts +28 -0
  35. package/dist/src/executor/filesystem-executor.d.ts.map +1 -0
  36. package/dist/src/executor/filesystem-executor.js +192 -0
  37. package/dist/src/executor/filesystem-executor.js.map +1 -0
  38. package/dist/src/executor/http-executor.d.ts.map +1 -1
  39. package/dist/src/executor/http-executor.js +22 -2
  40. package/dist/src/executor/http-executor.js.map +1 -1
  41. package/dist/src/executor/index.d.ts +4 -0
  42. package/dist/src/executor/index.d.ts.map +1 -1
  43. package/dist/src/executor/index.js +9 -1
  44. package/dist/src/executor/index.js.map +1 -1
  45. package/dist/src/executor/shell-executor.d.ts +22 -0
  46. package/dist/src/executor/shell-executor.d.ts.map +1 -0
  47. package/dist/src/executor/shell-executor.js +119 -0
  48. package/dist/src/executor/shell-executor.js.map +1 -0
  49. package/dist/src/executor/sql-executor.d.ts +29 -0
  50. package/dist/src/executor/sql-executor.d.ts.map +1 -0
  51. package/dist/src/executor/sql-executor.js +114 -0
  52. package/dist/src/executor/sql-executor.js.map +1 -0
  53. package/dist/src/executor/websocket-executor.d.ts +26 -0
  54. package/dist/src/executor/websocket-executor.d.ts.map +1 -0
  55. package/dist/src/executor/websocket-executor.js +205 -0
  56. package/dist/src/executor/websocket-executor.js.map +1 -0
  57. package/dist/src/interceptor/index.d.ts +2 -0
  58. package/dist/src/interceptor/index.d.ts.map +1 -0
  59. package/dist/src/interceptor/index.js +6 -0
  60. package/dist/src/interceptor/index.js.map +1 -0
  61. package/dist/src/interceptor/provider-interceptor.d.ts +36 -0
  62. package/dist/src/interceptor/provider-interceptor.d.ts.map +1 -0
  63. package/dist/src/interceptor/provider-interceptor.js +302 -0
  64. package/dist/src/interceptor/provider-interceptor.js.map +1 -0
  65. package/dist/src/mcp/auth-verifier.d.ts.map +1 -1
  66. package/dist/src/mcp/auth-verifier.js +3 -2
  67. package/dist/src/mcp/auth-verifier.js.map +1 -1
  68. package/dist/src/mcp/bridge.d.ts +14 -10
  69. package/dist/src/mcp/bridge.d.ts.map +1 -1
  70. package/dist/src/mcp/bridge.js +51 -227
  71. package/dist/src/mcp/bridge.js.map +1 -1
  72. package/dist/src/mcp/http-transport.d.ts +2 -0
  73. package/dist/src/mcp/http-transport.d.ts.map +1 -1
  74. package/dist/src/mcp/http-transport.js +117 -66
  75. package/dist/src/mcp/http-transport.js.map +1 -1
  76. package/dist/src/mcp/internal-auth.d.ts +13 -0
  77. package/dist/src/mcp/internal-auth.d.ts.map +1 -0
  78. package/dist/src/mcp/internal-auth.js +12 -0
  79. package/dist/src/mcp/internal-auth.js.map +1 -0
  80. package/dist/src/mcp/tool-definitions.d.ts +41 -0
  81. package/dist/src/mcp/tool-definitions.d.ts.map +1 -0
  82. package/dist/src/mcp/tool-definitions.js +491 -0
  83. package/dist/src/mcp/tool-definitions.js.map +1 -0
  84. package/dist/src/middleware/auth.js.map +1 -1
  85. package/dist/src/middleware/session.js.map +1 -1
  86. package/dist/src/middleware/validate.d.ts +8 -0
  87. package/dist/src/middleware/validate.d.ts.map +1 -1
  88. package/dist/src/middleware/validate.js +45 -0
  89. package/dist/src/middleware/validate.js.map +1 -1
  90. package/dist/src/policy/engine.d.ts +4 -0
  91. package/dist/src/policy/engine.d.ts.map +1 -1
  92. package/dist/src/policy/engine.js +117 -0
  93. package/dist/src/policy/engine.js.map +1 -1
  94. package/dist/src/saas/routes.d.ts.map +1 -1
  95. package/dist/src/saas/routes.js +355 -22
  96. package/dist/src/saas/routes.js.map +1 -1
  97. package/dist/src/server/app.d.ts.map +1 -1
  98. package/dist/src/server/app.js +24 -3
  99. package/dist/src/server/app.js.map +1 -1
  100. package/dist/src/server/gateway.d.ts.map +1 -1
  101. package/dist/src/server/gateway.js +17 -0
  102. package/dist/src/server/gateway.js.map +1 -1
  103. package/dist/src/server/index.d.ts.map +1 -1
  104. package/dist/src/server/index.js +18 -0
  105. package/dist/src/server/index.js.map +1 -1
  106. package/dist/src/storage/interfaces.d.ts +14 -3
  107. package/dist/src/storage/interfaces.d.ts.map +1 -1
  108. package/dist/src/storage/memory.d.ts +2 -0
  109. package/dist/src/storage/memory.d.ts.map +1 -1
  110. package/dist/src/storage/memory.js +6 -0
  111. package/dist/src/storage/memory.js.map +1 -1
  112. package/dist/src/storage/postgres.d.ts +5 -0
  113. package/dist/src/storage/postgres.d.ts.map +1 -1
  114. package/dist/src/storage/postgres.js +16 -0
  115. package/dist/src/storage/postgres.js.map +1 -1
  116. package/dist/src/storage/redis.d.ts +10 -0
  117. package/dist/src/storage/redis.d.ts.map +1 -1
  118. package/dist/src/storage/redis.js +65 -0
  119. package/dist/src/storage/redis.js.map +1 -1
  120. package/dist/src/types/budget.d.ts +4 -0
  121. package/dist/src/types/budget.d.ts.map +1 -1
  122. package/dist/src/types/config.d.ts +58 -0
  123. package/dist/src/types/config.d.ts.map +1 -1
  124. package/dist/src/types/events.d.ts +1 -0
  125. package/dist/src/types/events.d.ts.map +1 -1
  126. package/dist/src/types/policy.d.ts +11 -1
  127. package/dist/src/types/policy.d.ts.map +1 -1
  128. package/dist/src/types/tool-result.d.ts +11 -0
  129. package/dist/src/types/tool-result.d.ts.map +1 -1
  130. package/dist/tests/unit/app-routes.test.d.ts +2 -0
  131. package/dist/tests/unit/app-routes.test.d.ts.map +1 -0
  132. package/dist/tests/unit/app-routes.test.js +715 -0
  133. package/dist/tests/unit/app-routes.test.js.map +1 -0
  134. package/dist/tests/unit/audit-logger.test.js +105 -0
  135. package/dist/tests/unit/audit-logger.test.js.map +1 -1
  136. package/dist/tests/unit/auth-providers.test.d.ts +2 -0
  137. package/dist/tests/unit/auth-providers.test.d.ts.map +1 -0
  138. package/dist/tests/unit/auth-providers.test.js +279 -0
  139. package/dist/tests/unit/auth-providers.test.js.map +1 -0
  140. package/dist/tests/unit/auth-routes-extended.test.d.ts +2 -0
  141. package/dist/tests/unit/auth-routes-extended.test.d.ts.map +1 -0
  142. package/dist/tests/unit/auth-routes-extended.test.js +993 -0
  143. package/dist/tests/unit/auth-routes-extended.test.js.map +1 -0
  144. package/dist/tests/unit/auth-verifier.test.d.ts +2 -0
  145. package/dist/tests/unit/auth-verifier.test.d.ts.map +1 -0
  146. package/dist/tests/unit/auth-verifier.test.js +505 -0
  147. package/dist/tests/unit/auth-verifier.test.js.map +1 -0
  148. package/dist/tests/unit/billing-routes.test.d.ts +2 -0
  149. package/dist/tests/unit/billing-routes.test.d.ts.map +1 -0
  150. package/dist/tests/unit/billing-routes.test.js +432 -0
  151. package/dist/tests/unit/billing-routes.test.js.map +1 -0
  152. package/dist/tests/unit/config-defaults.test.d.ts +2 -0
  153. package/dist/tests/unit/config-defaults.test.d.ts.map +1 -0
  154. package/dist/tests/unit/config-defaults.test.js +119 -0
  155. package/dist/tests/unit/config-defaults.test.js.map +1 -0
  156. package/dist/tests/unit/defaults.test.js +0 -10
  157. package/dist/tests/unit/defaults.test.js.map +1 -1
  158. package/dist/tests/unit/filesystem-executor.test.d.ts +2 -0
  159. package/dist/tests/unit/filesystem-executor.test.d.ts.map +1 -0
  160. package/dist/tests/unit/filesystem-executor.test.js +280 -0
  161. package/dist/tests/unit/filesystem-executor.test.js.map +1 -0
  162. package/dist/tests/unit/gateway-branches.test.d.ts +2 -0
  163. package/dist/tests/unit/gateway-branches.test.d.ts.map +1 -0
  164. package/dist/tests/unit/gateway-branches.test.js +1039 -0
  165. package/dist/tests/unit/gateway-branches.test.js.map +1 -0
  166. package/dist/tests/unit/http-executor-branches.test.d.ts +2 -0
  167. package/dist/tests/unit/http-executor-branches.test.d.ts.map +1 -0
  168. package/dist/tests/unit/http-executor-branches.test.js +495 -0
  169. package/dist/tests/unit/http-executor-branches.test.js.map +1 -0
  170. package/dist/tests/unit/logger.test.d.ts +2 -0
  171. package/dist/tests/unit/logger.test.d.ts.map +1 -0
  172. package/dist/tests/unit/logger.test.js +97 -0
  173. package/dist/tests/unit/logger.test.js.map +1 -0
  174. package/dist/tests/unit/mcp-internal-auth.test.d.ts +2 -0
  175. package/dist/tests/unit/mcp-internal-auth.test.d.ts.map +1 -0
  176. package/dist/tests/unit/mcp-internal-auth.test.js +445 -0
  177. package/dist/tests/unit/mcp-internal-auth.test.js.map +1 -0
  178. package/dist/tests/unit/metrics.test.js +102 -0
  179. package/dist/tests/unit/metrics.test.js.map +1 -1
  180. package/dist/tests/unit/model-pricing.test.d.ts +2 -0
  181. package/dist/tests/unit/model-pricing.test.d.ts.map +1 -0
  182. package/dist/tests/unit/model-pricing.test.js +87 -0
  183. package/dist/tests/unit/model-pricing.test.js.map +1 -0
  184. package/dist/tests/unit/oauth-stores.test.d.ts +2 -0
  185. package/dist/tests/unit/oauth-stores.test.d.ts.map +1 -0
  186. package/dist/tests/unit/oauth-stores.test.js +260 -0
  187. package/dist/tests/unit/oauth-stores.test.js.map +1 -0
  188. package/dist/tests/unit/policy-engine.test.js +466 -0
  189. package/dist/tests/unit/policy-engine.test.js.map +1 -1
  190. package/dist/tests/unit/provider-interceptor.test.d.ts +2 -0
  191. package/dist/tests/unit/provider-interceptor.test.d.ts.map +1 -0
  192. package/dist/tests/unit/provider-interceptor.test.js +472 -0
  193. package/dist/tests/unit/provider-interceptor.test.js.map +1 -0
  194. package/dist/tests/unit/saas-routes-branches.test.d.ts +2 -0
  195. package/dist/tests/unit/saas-routes-branches.test.d.ts.map +1 -0
  196. package/dist/tests/unit/saas-routes-branches.test.js +2165 -0
  197. package/dist/tests/unit/saas-routes-branches.test.js.map +1 -0
  198. package/dist/tests/unit/saas-routes-crud.test.d.ts +2 -0
  199. package/dist/tests/unit/saas-routes-crud.test.d.ts.map +1 -0
  200. package/dist/tests/unit/saas-routes-crud.test.js +332 -0
  201. package/dist/tests/unit/saas-routes-crud.test.js.map +1 -0
  202. package/dist/tests/unit/saas-routes-data.test.d.ts +2 -0
  203. package/dist/tests/unit/saas-routes-data.test.d.ts.map +1 -0
  204. package/dist/tests/unit/saas-routes-data.test.js +405 -0
  205. package/dist/tests/unit/saas-routes-data.test.js.map +1 -0
  206. package/dist/tests/unit/saas-routes.test.js +3 -3
  207. package/dist/tests/unit/saas-routes.test.js.map +1 -1
  208. package/dist/tests/unit/shell-executor.test.d.ts +2 -0
  209. package/dist/tests/unit/shell-executor.test.d.ts.map +1 -0
  210. package/dist/tests/unit/shell-executor.test.js +145 -0
  211. package/dist/tests/unit/shell-executor.test.js.map +1 -0
  212. package/dist/tests/unit/sql-executor.test.d.ts +2 -0
  213. package/dist/tests/unit/sql-executor.test.d.ts.map +1 -0
  214. package/dist/tests/unit/sql-executor.test.js +177 -0
  215. package/dist/tests/unit/sql-executor.test.js.map +1 -0
  216. package/dist/tests/unit/stream-proxy.test.d.ts +2 -0
  217. package/dist/tests/unit/stream-proxy.test.d.ts.map +1 -0
  218. package/dist/tests/unit/stream-proxy.test.js +147 -0
  219. package/dist/tests/unit/stream-proxy.test.js.map +1 -0
  220. package/dist/tests/unit/tool-definitions.test.d.ts +2 -0
  221. package/dist/tests/unit/tool-definitions.test.d.ts.map +1 -0
  222. package/dist/tests/unit/tool-definitions.test.js +184 -0
  223. package/dist/tests/unit/tool-definitions.test.js.map +1 -0
  224. package/dist/tests/unit/usage-extractor.test.js +140 -0
  225. package/dist/tests/unit/usage-extractor.test.js.map +1 -1
  226. package/dist/tests/unit/webhook-handler.test.d.ts +2 -0
  227. package/dist/tests/unit/webhook-handler.test.d.ts.map +1 -0
  228. package/dist/tests/unit/webhook-handler.test.js +453 -0
  229. package/dist/tests/unit/webhook-handler.test.js.map +1 -0
  230. package/dist/tests/unit/webhook-routes.test.d.ts +2 -0
  231. package/dist/tests/unit/webhook-routes.test.d.ts.map +1 -0
  232. package/dist/tests/unit/webhook-routes.test.js +69 -0
  233. package/dist/tests/unit/webhook-routes.test.js.map +1 -0
  234. package/dist/tests/unit/websocket-executor.test.d.ts +2 -0
  235. package/dist/tests/unit/websocket-executor.test.d.ts.map +1 -0
  236. package/dist/tests/unit/websocket-executor.test.js +121 -0
  237. package/dist/tests/unit/websocket-executor.test.js.map +1 -0
  238. package/package.json +8 -2
  239. package/policy-packs/demo_fail.yaml +41 -0
  240. package/policy-packs/full_tools.yaml +136 -0
  241. package/src/admin/index.ts +1 -0
  242. package/src/admin/routes.ts +509 -0
  243. package/src/admin/templates.ts +572 -0
  244. package/src/anomaly/detector.ts +730 -0
  245. package/src/anomaly/index.ts +1 -0
  246. package/src/approval/manager.ts +569 -0
  247. package/src/approval/webhook.ts +133 -0
  248. package/src/audit/logger.ts +490 -0
  249. package/src/auth/index.ts +5 -0
  250. package/src/auth/password.ts +21 -0
  251. package/src/auth/pkce.ts +22 -0
  252. package/src/auth/providers.ts +208 -0
  253. package/src/auth/routes.ts +561 -0
  254. package/src/auth/session.ts +84 -0
  255. package/src/billing/index.ts +6 -0
  256. package/src/billing/plan-enforcer.ts +135 -0
  257. package/src/billing/routes.ts +229 -0
  258. package/src/billing/stripe-client.ts +58 -0
  259. package/src/billing/webhook-handler.ts +182 -0
  260. package/src/billing/webhook-routes.ts +28 -0
  261. package/src/budget/manager.ts +679 -0
  262. package/src/budget/model-pricing.ts +119 -0
  263. package/src/budget/usage-extractor.ts +214 -0
  264. package/src/cli.ts +91 -0
  265. package/src/config/defaults.ts +261 -0
  266. package/src/config/validate.ts +88 -0
  267. package/src/dlp/composite-scanner.ts +213 -0
  268. package/src/dlp/index.ts +9 -0
  269. package/src/dlp/interfaces.ts +34 -0
  270. package/src/dlp/patterns.ts +30 -0
  271. package/src/dlp/prompt-injection-backend.ts +181 -0
  272. package/src/dlp/prompt-injection-patterns.ts +302 -0
  273. package/src/dlp/regex-backend.ts +181 -0
  274. package/src/dlp/scanner.ts +502 -0
  275. package/src/dlp/text-normalizer.ts +225 -0
  276. package/src/dlp/tool-patterns.ts +35 -0
  277. package/src/dlp/trufflehog-backend.ts +190 -0
  278. package/src/executor/filesystem-executor.ts +196 -0
  279. package/src/executor/http-executor.ts +349 -0
  280. package/src/executor/index.ts +9 -0
  281. package/src/executor/interfaces.ts +11 -0
  282. package/src/executor/noop-executor.ts +23 -0
  283. package/src/executor/registry.ts +64 -0
  284. package/src/executor/shell-executor.ts +148 -0
  285. package/src/executor/slack-executor.ts +176 -0
  286. package/src/executor/sql-executor.ts +146 -0
  287. package/src/executor/websocket-executor.ts +211 -0
  288. package/src/index.ts +24 -0
  289. package/src/interceptor/index.ts +1 -0
  290. package/src/interceptor/provider-interceptor.ts +315 -0
  291. package/src/mcp/auth-verifier.ts +152 -0
  292. package/src/mcp/bridge.ts +703 -0
  293. package/src/mcp/http-transport.ts +698 -0
  294. package/src/mcp/index.ts +9 -0
  295. package/src/mcp/internal-auth.ts +14 -0
  296. package/src/mcp/oauth-pages.ts +139 -0
  297. package/src/mcp/oauth-postgres-stores.ts +278 -0
  298. package/src/mcp/oauth-provider.ts +536 -0
  299. package/src/mcp/oauth-stores.ts +202 -0
  300. package/src/mcp/server.ts +55 -0
  301. package/src/mcp/tool-definitions.ts +562 -0
  302. package/src/metrics/collector.ts +357 -0
  303. package/src/metrics/index.ts +1 -0
  304. package/src/middleware/auth.ts +814 -0
  305. package/src/middleware/session.ts +85 -0
  306. package/src/middleware/validate.ts +130 -0
  307. package/src/policy/engine.ts +815 -0
  308. package/src/policy/index.ts +2 -0
  309. package/src/policy/opa-engine.ts +829 -0
  310. package/src/proxy/forward-proxy.ts +649 -0
  311. package/src/proxy/index.ts +1 -0
  312. package/src/ratelimit/limiter.ts +196 -0
  313. package/src/replay/engine.ts +142 -0
  314. package/src/replay/index.ts +1 -0
  315. package/src/saas/index.ts +1 -0
  316. package/src/saas/routes.ts +2178 -0
  317. package/src/server/app.ts +985 -0
  318. package/src/server/errors.ts +49 -0
  319. package/src/server/gateway.ts +1130 -0
  320. package/src/server/index.ts +307 -0
  321. package/src/server/logger.ts +255 -0
  322. package/src/server/stream-proxy.ts +202 -0
  323. package/src/storage/file-persistence.ts +315 -0
  324. package/src/storage/index.ts +4 -0
  325. package/src/storage/interfaces.ts +287 -0
  326. package/src/storage/memory.ts +686 -0
  327. package/src/storage/postgres.ts +1831 -0
  328. package/src/storage/redis.ts +835 -0
  329. package/src/tracing/index.ts +1 -0
  330. package/src/tracing/provider.ts +100 -0
  331. package/src/trust/calculator.ts +141 -0
  332. package/src/trust/index.ts +7 -0
  333. package/src/types/budget.ts +36 -0
  334. package/src/types/config.ts +278 -0
  335. package/src/types/events.ts +41 -0
  336. package/src/types/express.d.ts +14 -0
  337. package/src/types/index.ts +7 -0
  338. package/src/types/policy.ts +83 -0
  339. package/src/types/stripe-config.ts +11 -0
  340. package/src/types/subscription.ts +59 -0
  341. package/src/types/tool-call.ts +47 -0
  342. package/src/types/tool-result.ts +82 -0
  343. package/src/types/user.ts +125 -0
  344. package/tsconfig.json +24 -0
@@ -0,0 +1,432 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ const express_1 = __importDefault(require("express"));
7
+ const supertest_1 = __importDefault(require("supertest"));
8
+ const routes_1 = require("../../src/billing/routes");
9
+ const memory_1 = require("../../src/storage/memory");
10
+ // ---------------------------------------------------------------------------
11
+ // Mocks
12
+ // ---------------------------------------------------------------------------
13
+ function makeStripeConfig() {
14
+ return {
15
+ secret_key: 'sk_test_fake',
16
+ webhook_secret: 'whsec_fake',
17
+ price_ids: { pro_monthly: 'price_pro', business_monthly: 'price_biz' },
18
+ };
19
+ }
20
+ function mockStripeClient() {
21
+ return {
22
+ createCustomer: jest.fn().mockResolvedValue({ id: 'cus_123' }),
23
+ createCheckoutSession: jest.fn().mockResolvedValue({ url: 'https://checkout.stripe.com/session' }),
24
+ createPortalSession: jest.fn().mockResolvedValue({ url: 'https://billing.stripe.com/portal' }),
25
+ getInvoices: jest.fn().mockResolvedValue([
26
+ {
27
+ id: 'in_1',
28
+ number: 'INV-001',
29
+ status: 'paid',
30
+ amount_due: 2000,
31
+ amount_paid: 2000,
32
+ currency: 'usd',
33
+ period_start: 1700000000,
34
+ period_end: 1702600000,
35
+ hosted_invoice_url: 'https://invoice.stripe.com/1',
36
+ created: 1700000000,
37
+ },
38
+ ]),
39
+ constructEvent: jest.fn(),
40
+ };
41
+ }
42
+ function mockGateway() {
43
+ return {
44
+ getAuditLogger: () => ({
45
+ getAllEvents: () => [],
46
+ }),
47
+ };
48
+ }
49
+ // ---------------------------------------------------------------------------
50
+ // Helpers
51
+ // ---------------------------------------------------------------------------
52
+ function createDeps(overrides) {
53
+ return {
54
+ stripeClient: mockStripeClient(),
55
+ stripeConfig: makeStripeConfig(),
56
+ subscriptionStore: new memory_1.InMemorySubscriptionStore(),
57
+ workspaceStore: new memory_1.InMemoryWorkspaceStore(),
58
+ workspaceMemberStore: new memory_1.InMemoryWorkspaceMemberStore(),
59
+ gateway: mockGateway(),
60
+ ...overrides,
61
+ };
62
+ }
63
+ function createApp(deps, sessionUser) {
64
+ const app = (0, express_1.default)();
65
+ app.use(express_1.default.json());
66
+ if (sessionUser) {
67
+ app.use((req, _res, next) => {
68
+ req.sessionUser = sessionUser;
69
+ next();
70
+ });
71
+ }
72
+ app.use((0, routes_1.createBillingRouter)(deps));
73
+ return app;
74
+ }
75
+ function seedWorkspaceAndMember(deps, opts) {
76
+ const now = new Date().toISOString();
77
+ deps.workspaceStore.create({
78
+ id: 'ws-1',
79
+ name: 'Test WS',
80
+ slug: 'test-ws',
81
+ owner_user_id: 'u-1',
82
+ plan: 'free',
83
+ settings: {},
84
+ created_at: now,
85
+ updated_at: now,
86
+ });
87
+ deps.workspaceMemberStore.create({
88
+ id: 'wm-1',
89
+ workspace_id: 'ws-1',
90
+ user_id: 'u-1',
91
+ role: (opts?.role || 'owner'),
92
+ joined_at: now,
93
+ });
94
+ }
95
+ const testUser = { id: 'u-1', email: 'alice@example.com', display_name: 'Alice' };
96
+ // ---------------------------------------------------------------------------
97
+ // Tests
98
+ // ---------------------------------------------------------------------------
99
+ describe('billing routes', () => {
100
+ // =========================================================================
101
+ // GET /workspaces/:id/billing
102
+ // =========================================================================
103
+ describe('GET /workspaces/:id/billing', () => {
104
+ it('returns 401 when session is missing', async () => {
105
+ const deps = createDeps();
106
+ const app = createApp(deps);
107
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
108
+ expect(res.status).toBe(401);
109
+ });
110
+ it('returns 403 when user is not a workspace member', async () => {
111
+ const deps = createDeps();
112
+ const app = createApp(deps, testUser);
113
+ // workspace exists but no membership
114
+ const now = new Date().toISOString();
115
+ deps.workspaceStore.create({
116
+ id: 'ws-1', name: 'Test', slug: 'test', owner_user_id: 'other',
117
+ plan: 'free', settings: {}, created_at: now, updated_at: now,
118
+ });
119
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
120
+ expect(res.status).toBe(403);
121
+ });
122
+ it('returns 404 when workspace does not exist', async () => {
123
+ const deps = createDeps();
124
+ const app = createApp(deps, testUser);
125
+ // membership exists but no workspace
126
+ const now = new Date().toISOString();
127
+ deps.workspaceMemberStore.create({
128
+ id: 'wm-1', workspace_id: 'ws-1', user_id: 'u-1',
129
+ role: 'owner', joined_at: now,
130
+ });
131
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
132
+ expect(res.status).toBe(404);
133
+ });
134
+ it('returns billing status with plan and limits', async () => {
135
+ const deps = createDeps();
136
+ const app = createApp(deps, testUser);
137
+ seedWorkspaceAndMember(deps);
138
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
139
+ expect(res.status).toBe(200);
140
+ expect(res.body.plan).toBe('free');
141
+ expect(res.body.limits).toBeDefined();
142
+ expect(res.body.limits.calls_per_month).toBe(10000);
143
+ expect(res.body.subscription).toBeNull();
144
+ });
145
+ it('includes subscription details when present', async () => {
146
+ const deps = createDeps();
147
+ const app = createApp(deps, testUser);
148
+ seedWorkspaceAndMember(deps);
149
+ const now = new Date().toISOString();
150
+ deps.subscriptionStore.create({
151
+ id: 'sub-1',
152
+ workspace_id: 'ws-1',
153
+ stripe_customer_id: 'cus_1',
154
+ stripe_subscription_id: 'sub_stripe_1',
155
+ plan: 'pro',
156
+ status: 'active',
157
+ current_period_start: now,
158
+ current_period_end: now,
159
+ cancel_at_period_end: false,
160
+ created_at: now,
161
+ updated_at: now,
162
+ });
163
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing');
164
+ expect(res.status).toBe(200);
165
+ expect(res.body.subscription).toBeDefined();
166
+ expect(res.body.subscription.id).toBe('sub-1');
167
+ expect(res.body.subscription.status).toBe('active');
168
+ });
169
+ });
170
+ // =========================================================================
171
+ // POST /workspaces/:id/billing/checkout
172
+ // =========================================================================
173
+ describe('POST /workspaces/:id/billing/checkout', () => {
174
+ it('returns 401 when session is missing', async () => {
175
+ const deps = createDeps();
176
+ const app = createApp(deps);
177
+ const res = await (0, supertest_1.default)(app)
178
+ .post('/workspaces/ws-1/billing/checkout')
179
+ .send({ plan: 'pro' });
180
+ expect(res.status).toBe(401);
181
+ });
182
+ it('returns 403 when user is not owner/admin', async () => {
183
+ const deps = createDeps();
184
+ const app = createApp(deps, testUser);
185
+ seedWorkspaceAndMember(deps, { role: 'member' });
186
+ const res = await (0, supertest_1.default)(app)
187
+ .post('/workspaces/ws-1/billing/checkout')
188
+ .send({ plan: 'pro' });
189
+ expect(res.status).toBe(403);
190
+ expect(res.body.error).toContain('owners and admins');
191
+ });
192
+ it('returns 400 for invalid plan', async () => {
193
+ const deps = createDeps();
194
+ const app = createApp(deps, testUser);
195
+ seedWorkspaceAndMember(deps);
196
+ const res = await (0, supertest_1.default)(app)
197
+ .post('/workspaces/ws-1/billing/checkout')
198
+ .send({ plan: 'invalid' });
199
+ expect(res.status).toBe(400);
200
+ expect(res.body.error).toContain('plan must be');
201
+ });
202
+ it('returns 400 when plan is missing', async () => {
203
+ const deps = createDeps();
204
+ const app = createApp(deps, testUser);
205
+ seedWorkspaceAndMember(deps);
206
+ const res = await (0, supertest_1.default)(app)
207
+ .post('/workspaces/ws-1/billing/checkout')
208
+ .send({});
209
+ expect(res.status).toBe(400);
210
+ });
211
+ it('creates a new customer and checkout session for pro plan', async () => {
212
+ const deps = createDeps();
213
+ const app = createApp(deps, testUser);
214
+ seedWorkspaceAndMember(deps);
215
+ const res = await (0, supertest_1.default)(app)
216
+ .post('/workspaces/ws-1/billing/checkout')
217
+ .send({ plan: 'pro' });
218
+ expect(res.status).toBe(200);
219
+ expect(res.body.url).toBe('https://checkout.stripe.com/session');
220
+ expect(deps.stripeClient.createCustomer).toHaveBeenCalledWith('alice@example.com', 'ws-1', 'Alice');
221
+ expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_123', 'price_pro', 'ws-1');
222
+ });
223
+ it('creates checkout session for business plan', async () => {
224
+ const deps = createDeps();
225
+ const app = createApp(deps, testUser);
226
+ seedWorkspaceAndMember(deps);
227
+ const res = await (0, supertest_1.default)(app)
228
+ .post('/workspaces/ws-1/billing/checkout')
229
+ .send({ plan: 'business' });
230
+ expect(res.status).toBe(200);
231
+ expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_123', 'price_biz', 'ws-1');
232
+ });
233
+ it('uses existing stripe customer ID when subscription exists', async () => {
234
+ const deps = createDeps();
235
+ const app = createApp(deps, testUser);
236
+ seedWorkspaceAndMember(deps);
237
+ const now = new Date().toISOString();
238
+ deps.subscriptionStore.create({
239
+ id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_existing',
240
+ plan: 'free', status: 'active', created_at: now, updated_at: now,
241
+ });
242
+ const res = await (0, supertest_1.default)(app)
243
+ .post('/workspaces/ws-1/billing/checkout')
244
+ .send({ plan: 'pro' });
245
+ expect(res.status).toBe(200);
246
+ expect(deps.stripeClient.createCustomer).not.toHaveBeenCalled();
247
+ expect(deps.stripeClient.createCheckoutSession).toHaveBeenCalledWith('cus_existing', 'price_pro', 'ws-1');
248
+ });
249
+ it('returns 500 when stripe throws', async () => {
250
+ const stripe = mockStripeClient();
251
+ stripe.createCustomer.mockRejectedValue(new Error('Stripe is down'));
252
+ const deps = createDeps({ stripeClient: stripe });
253
+ const app = createApp(deps, testUser);
254
+ seedWorkspaceAndMember(deps);
255
+ const res = await (0, supertest_1.default)(app)
256
+ .post('/workspaces/ws-1/billing/checkout')
257
+ .send({ plan: 'pro' });
258
+ expect(res.status).toBe(500);
259
+ expect(res.body.error).toBe('Stripe is down');
260
+ });
261
+ });
262
+ // =========================================================================
263
+ // POST /workspaces/:id/billing/portal
264
+ // =========================================================================
265
+ describe('POST /workspaces/:id/billing/portal', () => {
266
+ it('returns 401 when session is missing', async () => {
267
+ const deps = createDeps();
268
+ const app = createApp(deps);
269
+ const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
270
+ expect(res.status).toBe(401);
271
+ });
272
+ it('returns 403 when user is not owner/admin', async () => {
273
+ const deps = createDeps();
274
+ const app = createApp(deps, testUser);
275
+ seedWorkspaceAndMember(deps, { role: 'member' });
276
+ const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
277
+ expect(res.status).toBe(403);
278
+ });
279
+ it('returns 400 when no billing account exists', async () => {
280
+ const deps = createDeps();
281
+ const app = createApp(deps, testUser);
282
+ seedWorkspaceAndMember(deps);
283
+ const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
284
+ expect(res.status).toBe(400);
285
+ expect(res.body.error).toContain('No billing account');
286
+ });
287
+ it('returns portal URL when subscription exists', async () => {
288
+ const deps = createDeps();
289
+ const app = createApp(deps, testUser);
290
+ seedWorkspaceAndMember(deps);
291
+ const now = new Date().toISOString();
292
+ deps.subscriptionStore.create({
293
+ id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_portal',
294
+ plan: 'pro', status: 'active', created_at: now, updated_at: now,
295
+ });
296
+ const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
297
+ expect(res.status).toBe(200);
298
+ expect(res.body.url).toBe('https://billing.stripe.com/portal');
299
+ expect(deps.stripeClient.createPortalSession).toHaveBeenCalledWith('cus_portal');
300
+ });
301
+ it('returns 500 when stripe portal fails', async () => {
302
+ const stripe = mockStripeClient();
303
+ stripe.createPortalSession.mockRejectedValue(new Error('Portal error'));
304
+ const deps = createDeps({ stripeClient: stripe });
305
+ const app = createApp(deps, testUser);
306
+ seedWorkspaceAndMember(deps);
307
+ const now = new Date().toISOString();
308
+ deps.subscriptionStore.create({
309
+ id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_1',
310
+ plan: 'pro', status: 'active', created_at: now, updated_at: now,
311
+ });
312
+ const res = await (0, supertest_1.default)(app).post('/workspaces/ws-1/billing/portal');
313
+ expect(res.status).toBe(500);
314
+ expect(res.body.error).toBe('Portal error');
315
+ });
316
+ });
317
+ // =========================================================================
318
+ // GET /workspaces/:id/billing/invoices
319
+ // =========================================================================
320
+ describe('GET /workspaces/:id/billing/invoices', () => {
321
+ it('returns 401 when session is missing', async () => {
322
+ const deps = createDeps();
323
+ const app = createApp(deps);
324
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
325
+ expect(res.status).toBe(401);
326
+ });
327
+ it('returns 403 when user is not a member', async () => {
328
+ const deps = createDeps();
329
+ const app = createApp(deps, testUser);
330
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
331
+ expect(res.status).toBe(403);
332
+ });
333
+ it('returns empty invoices when no billing account exists', async () => {
334
+ const deps = createDeps();
335
+ const app = createApp(deps, testUser);
336
+ seedWorkspaceAndMember(deps);
337
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
338
+ expect(res.status).toBe(200);
339
+ expect(res.body.invoices).toEqual([]);
340
+ });
341
+ it('returns invoices from stripe', async () => {
342
+ const deps = createDeps();
343
+ const app = createApp(deps, testUser);
344
+ seedWorkspaceAndMember(deps);
345
+ const now = new Date().toISOString();
346
+ deps.subscriptionStore.create({
347
+ id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_inv',
348
+ plan: 'pro', status: 'active', created_at: now, updated_at: now,
349
+ });
350
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
351
+ expect(res.status).toBe(200);
352
+ expect(res.body.invoices).toHaveLength(1);
353
+ expect(res.body.invoices[0].id).toBe('in_1');
354
+ expect(res.body.invoices[0].number).toBe('INV-001');
355
+ expect(res.body.invoices[0].status).toBe('paid');
356
+ });
357
+ it('returns 500 when stripe invoices fail', async () => {
358
+ const stripe = mockStripeClient();
359
+ stripe.getInvoices.mockRejectedValue(new Error('Invoice fetch error'));
360
+ const deps = createDeps({ stripeClient: stripe });
361
+ const app = createApp(deps, testUser);
362
+ seedWorkspaceAndMember(deps);
363
+ const now = new Date().toISOString();
364
+ deps.subscriptionStore.create({
365
+ id: 'sub-1', workspace_id: 'ws-1', stripe_customer_id: 'cus_1',
366
+ plan: 'pro', status: 'active', created_at: now, updated_at: now,
367
+ });
368
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/invoices');
369
+ expect(res.status).toBe(500);
370
+ expect(res.body.error).toBe('Invoice fetch error');
371
+ });
372
+ });
373
+ // =========================================================================
374
+ // GET /workspaces/:id/billing/usage
375
+ // =========================================================================
376
+ describe('GET /workspaces/:id/billing/usage', () => {
377
+ it('returns 401 when session is missing', async () => {
378
+ const deps = createDeps();
379
+ const app = createApp(deps);
380
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
381
+ expect(res.status).toBe(401);
382
+ });
383
+ it('returns 403 when user is not a member', async () => {
384
+ const deps = createDeps();
385
+ const app = createApp(deps, testUser);
386
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
387
+ expect(res.status).toBe(403);
388
+ });
389
+ it('returns 404 when workspace does not exist', async () => {
390
+ const deps = createDeps();
391
+ const app = createApp(deps, testUser);
392
+ const now = new Date().toISOString();
393
+ deps.workspaceMemberStore.create({
394
+ id: 'wm-1', workspace_id: 'ws-1', user_id: 'u-1',
395
+ role: 'owner', joined_at: now,
396
+ });
397
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
398
+ expect(res.status).toBe(404);
399
+ });
400
+ it('returns usage data with zero calls', async () => {
401
+ const deps = createDeps();
402
+ const app = createApp(deps, testUser);
403
+ seedWorkspaceAndMember(deps);
404
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
405
+ expect(res.status).toBe(200);
406
+ expect(res.body.plan).toBe('free');
407
+ expect(res.body.calls_this_month).toBe(0);
408
+ expect(res.body.calls_limit).toBe(10000);
409
+ expect(res.body.allowed).toBe(true);
410
+ expect(res.body.usage_percent).toBe(0);
411
+ });
412
+ it('counts workspace events for current month', async () => {
413
+ const now = new Date();
414
+ const thisMonthEvent = {
415
+ workspace_id: 'ws-1',
416
+ timestamp: now.toISOString(),
417
+ };
418
+ const gateway = {
419
+ getAuditLogger: () => ({
420
+ getAllEvents: () => [thisMonthEvent, thisMonthEvent],
421
+ }),
422
+ };
423
+ const deps = createDeps({ gateway });
424
+ const app = createApp(deps, testUser);
425
+ seedWorkspaceAndMember(deps);
426
+ const res = await (0, supertest_1.default)(app).get('/workspaces/ws-1/billing/usage');
427
+ expect(res.status).toBe(200);
428
+ expect(res.body.calls_this_month).toBe(2);
429
+ });
430
+ });
431
+ });
432
+ //# sourceMappingURL=billing-routes.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"billing-routes.test.js","sourceRoot":"","sources":["../../../tests/unit/billing-routes.test.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,0DAAgC;AAChC,qDAAiF;AACjF,qDAIkC;AAGlC,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,SAAS,gBAAgB;IACvB,OAAO;QACL,UAAU,EAAE,cAAc;QAC1B,cAAc,EAAE,YAAY;QAC5B,SAAS,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QAC9D,qBAAqB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC;QAClG,mBAAmB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC;QAC9F,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC;gBACE,EAAE,EAAE,MAAM;gBACV,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,8BAA8B;gBAClD,OAAO,EAAE,UAAU;aACpB;SACF,CAAC;QACF,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE;KACnB,CAAC;AACX,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YACrB,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE;SACvB,CAAC;KACI,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO;QACL,YAAY,EAAE,gBAAgB,EAAE;QAChC,YAAY,EAAE,gBAAgB,EAAE;QAChC,iBAAiB,EAAE,IAAI,kCAAyB,EAAE;QAClD,cAAc,EAAE,IAAI,+BAAsB,EAAE;QAC5C,oBAAoB,EAAE,IAAI,qCAA4B,EAAE;QACxD,OAAO,EAAE,WAAW,EAAE;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB,EAAE,WAAiB;IAC1D,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,IAAI,WAAW,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACzB,GAAW,CAAC,WAAW,GAAG,WAAW,CAAC;YACvC,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAsB,EAAE,IAAwB;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QACzB,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,KAAK;QACpB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC/B,EAAE,EAAE,MAAM;QACV,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,CAAQ;QACpC,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAElF,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBACzB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO;gBAC9D,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAC7D,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAC/B,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;gBAChD,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG;aAC9B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO;gBACX,YAAY,EAAE,MAAM;gBACpB,kBAAkB,EAAE,OAAO;gBAC3B,sBAAsB,EAAE,cAAc;gBACtC,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,QAAQ;gBAChB,oBAAoB,EAAE,GAAG;gBACzB,kBAAkB,EAAE,GAAG;gBACvB,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAC5E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc;gBACrE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aACjE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,mCAAmC,CAAC;iBACzC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,sCAAsC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjD,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY;gBACnE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO;gBAC9D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uCAAuC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEtC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS;gBAChE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO;gBAC9D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;aAChE,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,oCAAoC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEtC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAC/B,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;gBAChD,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG;aAC9B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG;gBACrB,YAAY,EAAE,MAAM;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;oBACrB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC;iBACrD,CAAC;aACI,CAAC;YACT,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=config-defaults.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-defaults.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/config-defaults.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,119 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ const fs = __importStar(require("fs"));
37
+ const path = __importStar(require("path"));
38
+ const os = __importStar(require("os"));
39
+ describe('config/defaults', () => {
40
+ const originalEnv = { ...process.env };
41
+ afterEach(() => {
42
+ process.env = { ...originalEnv };
43
+ jest.resetModules();
44
+ });
45
+ it('reads JWT_SECRET from env var', () => {
46
+ process.env.JWT_SECRET = 'my-jwt-secret';
47
+ process.env.APPROVAL_SECRET = 'my-approval-secret';
48
+ process.env.OAUTH_SESSION_SECRET = 'my-oauth-secret';
49
+ delete process.env.NODE_ENV; // ensure dev mode
50
+ jest.isolateModules(() => {
51
+ const { DEFAULT_CONFIG } = require('../../src/config/defaults');
52
+ expect(DEFAULT_CONFIG.auth.jwt_secret).toBe('my-jwt-secret');
53
+ });
54
+ });
55
+ it('reads secret from _FILE env var', () => {
56
+ const tmpFile = path.join(os.tmpdir(), `palaryn-test-secret-${Date.now()}`);
57
+ fs.writeFileSync(tmpFile, ' file-based-secret \n');
58
+ process.env.JWT_SECRET_FILE = tmpFile;
59
+ process.env.APPROVAL_SECRET = 'test-approval';
60
+ process.env.OAUTH_SESSION_SECRET = 'test-oauth';
61
+ delete process.env.JWT_SECRET;
62
+ delete process.env.NODE_ENV;
63
+ try {
64
+ jest.isolateModules(() => {
65
+ const { DEFAULT_CONFIG } = require('../../src/config/defaults');
66
+ expect(DEFAULT_CONFIG.auth.jwt_secret).toBe('file-based-secret');
67
+ });
68
+ }
69
+ finally {
70
+ fs.unlinkSync(tmpFile);
71
+ }
72
+ });
73
+ it('throws when _FILE points to non-existent file', () => {
74
+ process.env.JWT_SECRET_FILE = '/nonexistent/path/secret.txt';
75
+ delete process.env.JWT_SECRET;
76
+ delete process.env.NODE_ENV;
77
+ expect(() => {
78
+ jest.isolateModules(() => {
79
+ require('../../src/config/defaults');
80
+ });
81
+ }).toThrow(/Failed to read secret file/);
82
+ });
83
+ it('generates random secret in dev mode when not set', () => {
84
+ delete process.env.JWT_SECRET;
85
+ delete process.env.JWT_SECRET_FILE;
86
+ delete process.env.APPROVAL_SECRET;
87
+ delete process.env.APPROVAL_SECRET_FILE;
88
+ delete process.env.OAUTH_SESSION_SECRET;
89
+ delete process.env.OAUTH_SESSION_SECRET_FILE;
90
+ delete process.env.NODE_ENV;
91
+ const warnSpy = jest.spyOn(console, 'warn').mockImplementation(() => { });
92
+ jest.isolateModules(() => {
93
+ const { DEFAULT_CONFIG } = require('../../src/config/defaults');
94
+ // Generated secrets should be 64-char hex strings
95
+ expect(DEFAULT_CONFIG.auth.jwt_secret).toMatch(/^[a-f0-9]{64}$/);
96
+ expect(DEFAULT_CONFIG.approval.token_secret).toMatch(/^[a-f0-9]{64}$/);
97
+ });
98
+ warnSpy.mockRestore();
99
+ });
100
+ it('DEFAULT_CONFIG has expected structure', () => {
101
+ process.env.JWT_SECRET = 'test';
102
+ process.env.APPROVAL_SECRET = 'test';
103
+ process.env.OAUTH_SESSION_SECRET = 'test';
104
+ delete process.env.NODE_ENV;
105
+ jest.isolateModules(() => {
106
+ const { DEFAULT_CONFIG } = require('../../src/config/defaults');
107
+ expect(DEFAULT_CONFIG).toHaveProperty('port');
108
+ expect(DEFAULT_CONFIG).toHaveProperty('auth');
109
+ expect(DEFAULT_CONFIG).toHaveProperty('policy');
110
+ expect(DEFAULT_CONFIG).toHaveProperty('dlp');
111
+ expect(DEFAULT_CONFIG).toHaveProperty('budget');
112
+ expect(DEFAULT_CONFIG).toHaveProperty('audit');
113
+ expect(DEFAULT_CONFIG).toHaveProperty('executor');
114
+ expect(DEFAULT_CONFIG).toHaveProperty('approval');
115
+ expect(DEFAULT_CONFIG).toHaveProperty('rate_limit');
116
+ });
117
+ });
118
+ });
119
+ //# sourceMappingURL=config-defaults.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-defaults.test.js","sourceRoot":"","sources":["../../../tests/unit/config-defaults.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,eAAe,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,oBAAoB,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,iBAAiB,CAAC;QACrD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,kBAAkB;QAE/C,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5E,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,YAAY,CAAC;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;gBACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAChE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,8BAA8B,CAAC;QAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,MAAM,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;gBACvB,OAAO,CAAC,2BAA2B,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,kDAAkD;YAClD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACjE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAE5B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -326,29 +326,19 @@ describe('DEFAULT_CONFIG (src/config/defaults.ts)', () => {
326
326
  it('should throw when JWT_SECRET is not set in production', () => {
327
327
  process.env.NODE_ENV = 'production';
328
328
  process.env.APPROVAL_SECRET = 'prod-approval-secret';
329
- process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
330
329
  // JWT_SECRET is not set
331
330
  expect(() => loadDefaults()).toThrow('JWT_SECRET (or JWT_SECRET_FILE) must be set in production');
332
331
  });
333
332
  it('should throw when APPROVAL_SECRET is not set in production', () => {
334
333
  process.env.NODE_ENV = 'production';
335
334
  process.env.JWT_SECRET = 'prod-jwt-secret';
336
- process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
337
335
  // APPROVAL_SECRET is not set
338
336
  expect(() => loadDefaults()).toThrow('APPROVAL_SECRET (or APPROVAL_SECRET_FILE) must be set in production');
339
337
  });
340
- it('should throw when OAUTH_SESSION_SECRET is not set in production', () => {
341
- process.env.NODE_ENV = 'production';
342
- process.env.JWT_SECRET = 'prod-jwt-secret';
343
- process.env.APPROVAL_SECRET = 'prod-approval-secret';
344
- // OAUTH_SESSION_SECRET is not set
345
- expect(() => loadDefaults()).toThrow('OAUTH_SESSION_SECRET (or OAUTH_SESSION_SECRET_FILE) must be set in production');
346
- });
347
338
  it('should not throw in production when all secrets are provided', () => {
348
339
  process.env.NODE_ENV = 'production';
349
340
  process.env.JWT_SECRET = 'prod-jwt-secret';
350
341
  process.env.APPROVAL_SECRET = 'prod-approval-secret';
351
- process.env.OAUTH_SESSION_SECRET = 'prod-session-secret';
352
342
  expect(() => loadDefaults()).not.toThrow();
353
343
  });
354
344
  it('should exclude dev API keys in production', () => {