pipework 0.7.12 → 0.7.17

package/dist/request/http/server.js

@@ -0,0 +1,391 @@
+import { randomUUID } from 'node:crypto';
+import { Readable } from 'node:stream';
+import Fastify, {} from 'fastify';
+import fastifyCors from '@fastify/cors';
+import fastifyHelmet from '@fastify/helmet';
+import fastifyRateLimit from '@fastify/rate-limit';
+import { runInContext } from '../context/store.js';
+import { bindTransaction } from '../context/guard.js';
+import { resolveAndExecute } from '../di/resolve.js';
+import { buildContext } from './middleware.js';
+import { buildErrorResponse, buildInternalErrorResponse } from './response.js';
+import { sql } from '../../data/db/sql.js';
+import { PipeworkError } from '../../core/errors/index.js';
+import { toJsonSchema } from '../../data/schema/json-schema.js';
+import { generateOpenAPI } from '../openapi/generate.js';
+import { getBaseLogger, setLoggingConfig } from '../../core/logging/index.js';
+import { setupDrain } from '../../core/lifecycle/drain.js';
+import { registerHealthRoutes } from '../../core/lifecycle/health.js';
+import { propagateTenantLocals, validateSessionVarName } from '../../auth/tenant/index.js';
+import { ForbiddenError } from '../../core/errors/index.js';
+import { resourceToHandlers } from '../fixture/to-handlers.js';
+/** Creates a PipeworkServer — wraps Fastify with auto request IDs, CORS, rate limiting, and transaction-per-request. */
+export function createServer(instance, config = {}) {
+    if (instance.config.environment === 'production') {
+        validateProductionConfig(config);
+    }
+    const fastifyOpts = {
+        trustProxy: config.trustProxy ?? false,
+        genReqId: () => randomUUID(),
+        requestIdHeader: false,
+    };
+    if (config.logger === false) {
+        fastifyOpts['logger'] = false;
+    }
+    else {
+        fastifyOpts['loggerInstance'] = config.logger ?? getBaseLogger();
+    }
+    const app = Fastify(fastifyOpts);
+    // Validation is handled by Pipework's DI layer (parse + ValidationError).
+    // Pass-through compiler lets us attach JSON Schema for OpenAPI without AJV double-validating.
+    app.setValidatorCompiler(() => () => ({ value: undefined }));
+    if (config.cors !== false) {
+        void app.register(fastifyCors, (config.cors ?? {}));
+    }
+    if (config.security !== false) {
+        void app.register(fastifyHelmet, (config.security ?? {}));
+    }
+    if (config.rateLimit !== false) {
+        void app.register(fastifyRateLimit, (config.rateLimit ?? {}));
+    }
+    if (config.logging) {
+        setLoggingConfig(config.logging);
+    }
+    app.decorateRequest('rawBody', undefined);
+    app.addHook('onSend', (_req, reply, payload, done) => {
+        void reply.header('x-request-id', _req.id);
+        done(null, payload);
+    });
+    const routes = [];
+    const authConfig = config.auth;
+    const strategies = authConfig
+        ? ('strategies' in authConfig ? authConfig.strategies : [authConfig.strategy])
+        : [];
+    const enrichers = authConfig && 'enrichers' in authConfig ? (authConfig.enrichers ?? []) : [];
+    const tenantResolver = authConfig && 'tenantResolver' in authConfig ? authConfig.tenantResolver : undefined;
+    const tenantConfig = config.tenant ?? null;
+    if (tenantConfig?.sessionVars) {
+        for (const name of Object.keys(tenantConfig.sessionVars)) {
+            validateSessionVarName(name);
+        }
+    }
+    const contextOptions = {
+        instance,
+        strategies,
+        enrichers,
+        tenantResolver,
+        tenantConfig,
+        authOptional: authConfig?.optional ?? false,
+        logging: config.logging ?? null,
+    };
+    const gracefulShutdownMs = config.gracefulShutdownMs ?? 10000;
+    const drain = setupDrain(app);
+    if (config.health !== false) {
+        registerHealthRoutes(app, instance, config.healthChecks ?? [], {
+            health: config.healthPath ?? '/health',
+            ready: config.readyPath ?? '/ready',
+        });
+    }
+    const rbacInstance = config.rbac ?? null;
+    const txDatabases = config.transactionPerRequest !== undefined && config.transactionPerRequest !== false
+        ? (config.transactionPerRequest === true
+            ? [...instance.config.databases().keys()]
+            : config.transactionPerRequest)
+        : null;
+    const txTimeoutMs = config.transactionTimeoutMs ?? 5000;
+    if (tenantConfig?.sessionVars !== undefined && txDatabases === null) {
+        throw new Error('[pipework] Tenant session variables require transactionPerRequest.\n\n' +
+            '  Your server config has tenant.sessionVars configured, but transactionPerRequest\n' +
+            '  is not enabled. Session variables are propagated via SET LOCAL inside a\n' +
+            '  transaction — without transactionPerRequest, they are silently skipped.\n\n' +
+            '  Fix: Add transactionPerRequest: true (or a list of database names) to your\n' +
+            '  createServer() config.\n');
+    }
+    function route(method, path, handler) {
+        routes.push({ method, path, handler });
+        const fastifyMethod = method.toLowerCase();
+        const schema = {};
+        if (handler.meta.inputSchema) {
+            schema['body'] = toJsonSchema(handler.meta.inputSchema);
+        }
+        if (handler.meta.outputSchemas.size > 0) {
+            const response = {};
+            for (const [status, outputSchema] of handler.meta.outputSchemas) {
+                response[String(status)] = toJsonSchema(outputSchema);
+            }
+            schema['response'] = response;
+        }
+        if (handler.meta.querySchema) {
+            schema['querystring'] = toJsonSchema(handler.meta.querySchema);
+        }
+        if (handler.meta.paramsSchema) {
+            schema['params'] = toJsonSchema(handler.meta.paramsSchema);
+        }
+        const opts = Object.keys(schema).length > 0 ? { schema } : {};
+        if (handler.meta.wantsRawBody) {
+            opts['preParsing'] = async (req, _reply, payload) => {
+                const chunks = [];
+                for await (const chunk of payload)
+                    chunks.push(chunk);
+                const raw = Buffer.concat(chunks);
+                req.rawBody = raw;
+                return Readable.from(raw);
+            };
+        }
+        app[fastifyMethod](path, opts, async (req, reply) => {
+            try {
+                const ctx = await buildContext(req, contextOptions, handler.meta.authRequirement);
+                if (handler.meta.permission && rbacInstance) {
+                    await enforceHandlerPermission(instance, ctx, handler.meta, rbacInstance);
+                }
+                const requestObj = { headers: req.headers };
+                const rawBodyBuffer = handler.meta.wantsRawBody
+                    ? req.rawBody
+                    : undefined;
+                if (rawBodyBuffer !== undefined) {
+                    requestObj.rawBody = rawBodyBuffer;
+                }
+                const httpOptions = {
+                    request: requestObj,
+                    response: { header: (name, value) => { void reply.header(name, value); } },
+                    ...(rawBodyBuffer !== undefined ? { rawBody: rawBodyBuffer } : {}),
+                };
+                let result;
+                if (txDatabases !== null && txDatabases.length > 0) {
+                    result = await executeInTransaction(instance, ctx, txDatabases, handler, req, tenantConfig, txTimeoutMs, httpOptions);
+                }
+                else {
+                    result = await runInContext(ctx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+                }
+                return sendResult(reply, result);
+            }
+            catch (error) {
+                if (error instanceof PipeworkError) {
+                    return reply.status(error.httpStatus).send(buildErrorResponse(error));
+                }
+                req.log.error(error, 'Unhandled error in route handler');
+                return reply.status(500).send(buildInternalErrorResponse());
+            }
+        });
+    }
+    function registerHandlers(handlers) {
+        for (const handler of handlers) {
+            if (handler.meta.route) {
+                route(handler.meta.route.method, handler.meta.route.path, handler);
+            }
+        }
+    }
+    function registerResourceFn(resource) {
+        registerHandlers(resourceToHandlers(resource));
+    }
+    if (config.openapi) {
+        const openApiPath = config.openApiPath ?? '/openapi.json';
+        const openApiInfo = config.openapi;
+        app.get(openApiPath, async (_req, reply) => {
+            return reply.send(generateOpenAPI(openApiInfo, routes));
+        });
+    }
+    async function listen() {
+        const address = await app.listen({
+            port: config.port ?? 3000,
+            host: config.host ?? '0.0.0.0',
+        });
+        if (config.managed !== true) {
+            setupGracefulShutdown(app, instance, drain, gracefulShutdownMs);
+        }
+        return address;
+    }
+    async function close() {
+        await app.close();
+        await instance.pool.closeAll();
+    }
+    async function ready() {
+        await app.ready();
+    }
+    async function inject(opts) {
+        const response = await app.inject({
+            method: opts.method,
+            url: opts.url,
+            headers: opts.headers,
+            payload: opts.payload,
+            query: opts.query,
+        });
+        const r = response;
+        return { statusCode: r.statusCode, headers: r.headers, body: r.body, json: () => r.json() };
+    }
+    return { route, registerHandlers, registerResource: registerResourceFn, ready, inject, listen, close };
+}
+function setupGracefulShutdown(app, instance, drain, timeoutMs) {
+    const shutdown = async (signal) => {
+        app.log.info({ signal }, 'Graceful shutdown initiated');
+        const timer = setTimeout(() => {
+            process.exit(1);
+        }, timeoutMs);
+        let exitCode = 0;
+        try {
+            await drain.waitForDrain(timeoutMs - 1000);
+            await app.close();
+            await instance.pool.closeAll();
+        }
+        catch {
+            exitCode = 1;
+        }
+        finally {
+            clearTimeout(timer);
+            process.exit(exitCode);
+        }
+    };
+    process.once('SIGTERM', () => { void shutdown('SIGTERM'); });
+    process.once('SIGINT', () => { void shutdown('SIGINT'); });
+}
+async function executeInTransaction(instance, ctx, databases, handler, req, tenant, timeoutMs, httpOptions) {
+    if (databases.length === 1) {
+        const dbName = databases[0];
+        const dbConfig = instance.config.database(dbName);
+        const conn = instance.pool.getOrCreate(dbConfig);
+        return conn.drizzle.transaction(async (tx) => {
+            const childCtx = {
+                ...ctx,
+                transactions: new Map(ctx.transactions),
+            };
+            childCtx.transactions.set(dbName, bindTransaction(ctx, dbName, tx));
+            await propagateLocals(tx, ctx, tenant);
+            return runInContext(childCtx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+        });
+    }
+    // Multiple databases: nested transactions (each independent)
+    const childCtx = {
+        ...ctx,
+        transactions: new Map(ctx.transactions),
+    };
+    const txPromises = [];
+    const readyPromises = [];
+    const readyDatabases = new Set();
+    let releaseAll;
+    let abortAll;
+    const donePromise = new Promise((resolve, reject) => {
+        releaseAll = resolve;
+        abortAll = reject;
+    });
+    donePromise.catch(() => { });
+    for (const dbName of databases) {
+        const dbConfig = instance.config.database(dbName);
+        const conn = instance.pool.getOrCreate(dbConfig);
+        let signalReady;
+        readyPromises.push(new Promise(r => { signalReady = r; }));
+        txPromises.push(conn.drizzle.transaction(async (tx) => {
+            childCtx.transactions.set(dbName, bindTransaction(ctx, dbName, tx));
+            await propagateLocals(tx, ctx, tenant);
+            readyDatabases.add(dbName);
+            signalReady();
+            await donePromise;
+        }));
+    }
+    const timeoutPromise = new Promise((_, reject) => {
+        const timer = setTimeout(() => {
+            const pending = databases.filter(db => !readyDatabases.has(db));
+            reject(new Error(`[pipework] Multi-database transaction setup timed out after ${timeoutMs}ms.\n\n` +
+                `  Database(s) that failed to become ready: ${pending.join(', ')}\n` +
+                `  Database(s) that are ready: ${[...readyDatabases].join(', ') || '(none)'}\n\n` +
+                '  This usually means one of the databases is unreachable or under heavy load.\n' +
+                '  You can increase the timeout via createServer({ transactionTimeoutMs }).\n'));
+        }, timeoutMs);
+        timer.unref();
+    });
+    try {
+        await Promise.race([Promise.all(readyPromises), timeoutPromise]);
+    }
+    catch (err) {
+        abortAll(err instanceof Error ? err : new Error(String(err)));
+        await Promise.allSettled(txPromises);
+        throw err;
+    }
+    try {
+        const result = await runInContext(childCtx, () => resolveAndExecute(handler, req.body, req.query, req.params, httpOptions));
+        releaseAll();
+        await Promise.all(txPromises);
+        return result;
+    }
+    catch (err) {
+        abortAll(err instanceof Error ? err : new Error(String(err)));
+        await Promise.allSettled(txPromises);
+        throw err;
+    }
+}
+async function propagateLocals(tx, ctx, tenant) {
+    if (ctx.requestId !== '') {
+        await tx.execute(sql `SELECT set_config('pipework.request_id', ${ctx.requestId}, true)`);
+    }
+    if (ctx.tenant !== null) {
+        await tx.execute(sql `SELECT set_config('pipework.tenant_id', ${ctx.tenant}, true)`);
+    }
+    if (tenant !== null && tenant.sessionVars !== undefined && ctx.tenant !== null) {
+        const tenantCtx = {
+            tenant: ctx.tenant,
+            requestId: ctx.requestId,
+            userId: ctx.auth !== null && typeof ctx.auth === 'object' && 'userId' in ctx.auth
+                ? ctx.auth.userId
+                : null,
+        };
+        await propagateTenantLocals(tx, tenant, tenantCtx);
+    }
+}
+function sendResult(reply, result) {
+    if (result !== null && typeof result === 'object' && 'status' in result && typeof result['status'] === 'number') {
+        const response = result;
+        if (response.body !== undefined) {
+            return reply.status(response.status).send(response.body);
+        }
+        return reply.status(response.status).send();
+    }
+    return reply.status(200).send(result);
+}
+function validateProductionConfig(config) {
+    const problems = [];
+    if (config.cors !== false) {
+        const corsOpts = config.cors ?? {};
+        if (!('origin' in corsOpts)) {
+            problems.push('CORS: No explicit origin configured. In production, CORS defaults to allowing all origins.\n' +
+                '  Fix: Set cors.origin to your domain(s), or set cors: false if this is an internal API.');
+        }
+    }
+    if (config.rateLimit === undefined) {
+        problems.push('Rate limiting: Not configured. Production APIs should have rate limiting.\n' +
+            '  Fix: Set rateLimit: { max: 100, timeWindow: "1 minute" }, or set rateLimit: false to explicitly opt out.');
+    }
+    if (config.auth !== undefined && config.tenant === undefined) {
+        problems.push('Tenant isolation: Auth is configured but no tenant config is set.\n' +
+            '  Fix: Set tenant: { mode: "schema" | "rls" | "header", ... } to enforce tenant isolation,\n' +
+            '  or acknowledge this by setting tenant: null in your server config.');
+    }
+    if (problems.length > 0) {
+        throw new Error(`[pipework] Production server configuration is missing security settings:\n\n${problems.map((p, i) => `  ${i + 1}. ${p}`).join('\n\n')}\n\n` +
+            '  Pipework refuses to start a production server with insecure defaults.\n' +
+            '  Set each option explicitly to confirm your security posture.\n');
+    }
+}
+async function enforceHandlerPermission(instance, ctx, meta, rbac) {
+    const permission = meta.permission;
+    if (ctx.auth === null || typeof ctx.auth !== 'object') {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const auth = ctx.auth;
+    const userId = typeof auth['userId'] === 'string' ? auth['userId'] : null;
+    const tenantId = ctx.tenant;
+    const authVersion = typeof auth['authVersion'] === 'number' ? auth['authVersion'] : 1;
+    if (userId === null || tenantId === null) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const dbName = meta.databases[0] ?? [...instance.config.databases().keys()][0];
+    if (dbName === undefined) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+    const dbConfig = instance.config.database(dbName);
+    const conn = instance.pool.getOrCreate(dbConfig);
+    const permissionSet = await rbac.resolve(conn.drizzle, userId, tenantId, authVersion);
+    const granted = rbac.check(permissionSet, permission.resource, permission.action, permission.scope);
+    if (!granted) {
+        throw new ForbiddenError(`Missing permission: ${permission.resource}:${permission.action}`);
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/request/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/request/http/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,OAAO,EAAE,EAAgE,MAAM,SAAS,CAAA;AAC/F,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,gBAAgB,MAAM,qBAAqB,CAAA;AAKlD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAuB,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,YAAY,EAAuB,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC9E,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAG1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAa9D,wHAAwH;AACxH,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,SAAuB,EAAE;IACxE,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACjD,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IAED,MAAM,WAAW,GAA4B;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;QACtC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC5B,eAAe,EAAE,KAAK;KACvB,CAAA;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;IAC/B,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAEhC,0EAA0E;IAC1E,8FAA8F;IAC9F,GAAG,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAE5D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAA;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,KAAK,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,CAAA;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC/B,KAAK,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAEzC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACnD,KAAK,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAwB,EAAE,CAAA;IAEtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAA;IAC9B,MAAM,UAAU,GAAG,UAAU;QAC3B,CAAC,CAAC,CAAC,YAAY,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,SAAS,GAAG,UAAU,IAAI,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7F,MAAM,cAAc,GAAG,UAAU,IAAI,gBAAgB,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;IAE3G,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAA;IAC1C,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,sBAAsB,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAmB;QACrC,QAAQ;QACR,UAAU;QACV,SAAS;QACT,cAAc;QACd,YAAY;QACZ,YAAY,EAAE,UAAU,EAAE,QAAQ,IAAI,KAAK;QAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;KAChC,CAAA;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAA;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE;YAC7D,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YACtC,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ;SACpC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAA;IAExC,MAAM,WAAW,GAAoB,MAAM,CAAC,qBAAqB,KAAK,SAAS,IAAI,MAAM,CAAC,qBAAqB,KAAK,KAAK;QACvH,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI;YACpC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACnC,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAA;IAEvD,IAAI,YAAY,EAAE,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,qFAAqF;YACrF,6EAA6E;YAC7E,+EAA+E;YAC/E,gFAAgF;YAChF,4BAA4B,CAC7B,CAAA;IACH,CAAC;IAED,SAAS,KAAK,CACZ,MAAkB,EAClB,IAAY,EACZ,OAAkD;QAElD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAEtC,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAiD,CAAA;QAEzF,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,QAAQ,GAA4B,EAAE,CAAA;YAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAChE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;YACvD,CAAC;YACD,MAAM,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAA;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,IAAI,GAA4B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEtF,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,GAAmB,EAAE,MAAoB,EAAE,OAA8B,EAAE,EAAE;gBACvG,MAAM,MAAM,GAAa,EAAE,CAAA;gBAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACrD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;gBAAC,GAA4C,CAAC,OAAO,GAAG,GAAG,CAAA;gBAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC,CAAA;QACH,CAAC;QAED,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAmB,EAAE,KAAmB,EAAE,EAAE;YAChF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;gBAEjF,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,EAAE,CAAC;oBAC5C,MAAM,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;gBAC3E,CAAC;gBAED,MAAM,UAAU,GAAqC,EAAE,OAAO,EAAE,GAAG,CAAC,OAA6C,EAAE,CAAA;gBACnH,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY;oBAC7C,CAAC,CAAE,GAA4C,CAAC,OAAO;oBACvD,CAAC,CAAC,SAAS,CAAA;gBACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC/B,UAAkC,CAAC,OAAO,GAAG,aAAa,CAAA;gBAC7D,CAAC;gBAED,MAAM,WAAW,GAAmB;oBAClC,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA,CAAC,CAAC,EAAE;oBACzF,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAA;gBAED,IAAI,MAAe,CAAA;gBACnB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;gBACvH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;gBAClH,CAAC;gBAED,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;gBACvE,CAAC;gBAED,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAA;gBACxD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,gBAAgB,CAAC,QAAqD;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,kBAAkB,CAAC,QAA2B;QACrD,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,eAAe,CAAA;QACzD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAA;QAClC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACzC,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;SAC/B,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC5B,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAA;QACjE,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IACnB,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,IAAmB;QACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,MAAe;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAiC;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,KAAK,EAAE,IAAI,CAAC,KAA+B;SAC5C,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,QAA6I,CAAA;QACvJ,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;IAC7F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACxG,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAoB,EACpB,QAAkB,EAClB,KAAoC,EACpC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;YAC1C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;YACjB,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,CAAC,CAAA;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC,CAAA;IAED,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC3D,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAkB,EAClB,GAAuC,EACvC,SAAmB,EACnB,OAAkD,EAClD,GAAmB,EACnB,MAA2B,EAC3B,SAAiB,EACjB,WAA4B;IAE5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEhD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3C,MAAM,QAAQ,GAAuC;gBACnD,GAAG,GAAG;gBACN,YAAY,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;aACxC,CAAA;YACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAEnE,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YAEtC,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;QAC/G,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAuC;QACnD,GAAG,GAAG;QACN,YAAY,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;KACxC,CAAA;IAED,MAAM,UAAU,GAAoB,EAAE,CAAA;IACtC,MAAM,aAAa,GAAoB,EAAE,CAAA;IACzC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IACxC,IAAI,UAAuB,CAAA;IAC3B,IAAI,QAA+B,CAAA;IAEnC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,UAAU,GAAG,OAAO,CAAA;QACpB,QAAQ,GAAG,MAAM,CAAA;IACnB,CAAC,CAAC,CAAA;IACF,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE3B,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEhD,IAAI,WAAwB,CAAA;QAC5B,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,GAAG,WAAW,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAA;QAE/D,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YACnE,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1B,WAAW,EAAE,CAAA;YACb,MAAM,WAAW,CAAA;QACnB,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,MAAM,CAAC,IAAI,KAAK,CACd,+DAA+D,SAAS,SAAS;gBACjF,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpE,iCAAiC,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM;gBACjF,iFAAiF;gBACjF,8EAA8E,CAC/E,CAAC,CAAA;QACJ,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3H,UAAU,EAAE,CAAA;QACZ,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC7B,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,EAAM,EACN,GAAuC,EACvC,MAA2B;IAE3B,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,4CAA4C,GAAG,CAAC,SAAS,SAAS,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,2CAA2C,GAAG,CAAC,MAAM,SAAS,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC/E,MAAM,SAAS,GAAkB;YAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI;gBAC/E,CAAC,CAAE,GAAG,CAAC,IAA2B,CAAC,MAAM;gBACzC,CAAC,CAAC,IAAI;SACT,CAAA;QACD,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB,EAAE,MAAe;IACtD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,OAAQ,MAAkC,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7I,MAAM,QAAQ,GAAG,MAAyB,CAAA;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAoB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAA;QAClC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CACX,8FAA8F;gBAC9F,0FAA0F,CAC3F,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CACX,6EAA6E;YAC7E,4GAA4G,CAC7G,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CACX,qEAAqE;YACrE,8FAA8F;YAC9F,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,+EAA+E,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAC5I,2EAA2E;YAC3E,kEAAkE,CACnE,CAAA;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAAkB,EAClB,GAAuC,EACvC,IAA0C,EAC1C,IAAU;IAEV,MAAM,UAAU,GAAG,IAAI,CAAC,UAAW,CAAA;IAEnC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAA;IAChD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;IAC3B,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAErF,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAEhD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACnG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,uBAAuB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,CAAC;AACH,CAAC"}

package/dist/request/http/types.d.ts

@@ -0,0 +1,130 @@
+import type { AuthStrategy } from '../../auth/auth/types.js';
+import type { AuthEnricher, TenantResolver } from '../../auth/auth/chain.js';
+import type { Handler, HttpMethod } from '../di/types.js';
+import type { HealthCheck } from '../../core/lifecycle/types.js';
+import type { TenantConfig } from '../../auth/tenant/types.js';
+import type { Rbac } from '../../auth/rbac/types.js';
+import type { OpenAPIInfo } from '../openapi/generate.js';
+import type { LoggingConfig } from '../../core/logging/types.js';
+import type { PipeworkLogger } from '../../core/logging/types.js';
+/** Fastify request with pipework extensions — req.id (UUID), typed headers. */
+export interface HttpRequest {
+    readonly headers: Readonly<Record<string, string | undefined>>;
+    readonly rawBody?: Buffer;
+}
+/** Fastify reply with pipework extensions. */
+export interface HttpResponse {
+    header(name: string, value: string): void;
+}
+/** CORS configuration — origin, methods, headers, credentials, maxAge. */
+export interface CorsConfig {
+    origin?: string | string[] | boolean | RegExp | ((origin: string) => boolean);
+    methods?: string[];
+    allowedHeaders?: string[];
+    exposedHeaders?: string[];
+    credentials?: boolean;
+    maxAge?: number;
+}
+/** Security header configuration — passed to @fastify/helmet. */
+export interface SecurityConfig {
+    contentSecurityPolicy?: boolean | Record<string, string[]>;
+    crossOriginEmbedderPolicy?: boolean;
+    crossOriginOpenerPolicy?: boolean | {
+        policy: string;
+    };
+    crossOriginResourcePolicy?: boolean | {
+        policy: string;
+    };
+    dnsPrefetchControl?: boolean;
+    frameguard?: boolean | {
+        action: string;
+    };
+    hidePoweredBy?: boolean;
+    hsts?: boolean | {
+        maxAge: number;
+        includeSubDomains?: boolean;
+    };
+    ieNoOpen?: boolean;
+    noSniff?: boolean;
+    referrerPolicy?: boolean | {
+        policy: string;
+    };
+    xssFilter?: boolean;
+}
+/** Rate limiting configuration — max requests, time window, key generator. */
+export interface RateLimitConfig {
+    max?: number;
+    timeWindow?: string | number;
+    keyGenerator?: (request: HttpRequest) => string;
+    allowList?: string[];
+    ban?: number;
+}
+/** Options for server.inject() — method, url, headers, payload for testing without HTTP. */
+export interface InjectOptions {
+    method: string;
+    url: string;
+    headers?: Record<string, string | string[] | undefined>;
+    payload?: unknown;
+    query?: Record<string, string | string[]>;
+}
+/** Response from server.inject() — statusCode, headers, body, json() helper. */
+export interface InjectResponse {
+    statusCode: number;
+    headers: Record<string, string | number | string[] | undefined>;
+    body: string;
+    json(): unknown;
+}
+/** Configuration for http.createServer() — CORS, security headers, rate limiting, transaction timeout. */
+export interface ServerConfig {
+    port?: number;
+    host?: string;
+    gracefulShutdownMs?: number;
+    trustProxy?: boolean;
+    logger?: PipeworkLogger | false;
+    health?: boolean;
+    healthPath?: string;
+    readyPath?: string;
+    healthChecks?: HealthCheck[];
+    transactionPerRequest?: boolean | string[];
+    transactionTimeoutMs?: number;
+    auth?: ServerAuthConfig;
+    tenant?: TenantConfig | null;
+    rbac?: Rbac;
+    cors?: CorsConfig | false;
+    security?: SecurityConfig | false;
+    rateLimit?: RateLimitConfig | false;
+    openapi?: OpenAPIInfo;
+    openApiPath?: string;
+    logging?: LoggingConfig;
+    managed?: boolean;
+}
+/** Server-level auth configuration — strategy, session config, optional enricher. */
+export type ServerAuthConfig = {
+    strategy: AuthStrategy<unknown>;
+    optional?: boolean;
+} | {
+    strategies: AuthStrategy<unknown>[];
+    enrichers?: AuthEnricher<unknown>[];
+    tenantResolver?: TenantResolver<unknown>;
+    optional?: boolean;
+};
+/** Internal route registration record — used by OpenAPI generation to discover routes. */
+export interface RouteRegistration {
+    method: HttpMethod;
+    path: string;
+    handler: Handler<Record<string, unknown>, unknown>;
+}
+/** Standard handler response shape — statusCode, headers, body. */
+export interface HandlerResponse {
+    readonly status: number;
+    readonly body?: unknown;
+}
+/** Standard error response shape — { error: { code, message }, statusCode }. */
+export interface ErrorResponse {
+    error: {
+        code: string;
+        message: string;
+        fields?: Record<string, readonly string[]>;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/request/http/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/request/http/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC5E,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEjE,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAA;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,qBAAqB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1D,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,uBAAuB,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,yBAAyB,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,UAAU,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,IAAI,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;IAChE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,cAAc,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAA;IAC/C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAA;CAC1C;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,IAAI,OAAO,CAAA;CAChB;AAED,0GAA0G;AAC1G,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,MAAM,CAAC,EAAE,cAAc,GAAG,KAAK,CAAA;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAA;IAC5B,qBAAqB,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAA;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,IAAI,CAAC,EAAE,gBAAgB,CAAA;IACvB,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,IAAI,CAAC,EAAE,UAAU,GAAG,KAAK,CAAA;IACzB,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,CAAA;IACjC,SAAS,CAAC,EAAE,eAAe,GAAG,KAAK,CAAA;IACnC,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9I,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;CACnD;AAED,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAA;KAC3C,CAAA;CACF"}

package/dist/request/http/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/request/http/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/request/http/types.ts"],"names":[],"mappings":""}

package/dist/request/openapi/generate.d.ts

@@ -0,0 +1,13 @@
+import type { RouteRegistration } from '../http/types.js';
+export interface OpenAPIInfo {
+    title: string;
+    version: string;
+    description?: string;
+}
+export interface OpenAPIDocument {
+    openapi: '3.0.3';
+    info: OpenAPIInfo;
+    paths: Record<string, Record<string, unknown>>;
+}
+export declare function generateOpenAPI(info: OpenAPIInfo, routes: readonly RouteRegistration[]): OpenAPIDocument;
+//# sourceMappingURL=generate.d.ts.map

package/dist/request/openapi/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/request/openapi/generate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGzD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,SAAS,iBAAiB,EAAE,GACnC,eAAe,CA8FjB"}