@carlonicora/nestjs-neo4jsonapi 8.5.0 → 8.6.0

package/dist/foundations/account-deletion/repositories/account-deletion.repository.d.ts

@@ -0,0 +1,85 @@
+import { ClsService } from "nestjs-cls";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { User, UserDescriptor } from "../../user/entities/user";
+/**
+ * Reads and writes of the account-deletion request on the User node.
+ *
+ * Owner decision OD-1 (Carlo, 2026-10-25): this repository reads a User and its
+ * Memberships by explicit id with no company predicate, for exactly six callers
+ * (self preview/request, admin preview/request on another user, the public keep
+ * link, the daily cron, the login hook and the worker processor), and runs three
+ * hand-written writes by user id (setRequest, clearRequest, deleteSessions).
+ * A user deleting their account is not scoped to one company: a placeholder
+ * player belongs to the GM's company, an administrator acts on any user, and the
+ * keep link and the cron run with no session at all. Every query therefore runs
+ * in a fresh CLS context (`ifNested: "override"`), so `initQuery` binds no
+ * caller company or user. Every id is a query parameter. User nodes come back
+ * through readOne/readMany with the User serialiser; only findMembershipSummary
+ * returns a scalar row.
+ */
+export declare class AccountDeletionRepository extends AbstractRepository<User, typeof UserDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<User, {
+        role: {
+            model: import("../../..").DataMeta;
+            direction: "out";
+            relationship: string;
+            cardinality: "many";
+            dtoKey: string;
+            readOnly: true;
+        };
+        company: {
+            model: import("../../..").DataModelInterface<import("../..").Company>;
+            direction: "out";
+            relationship: string;
+            cardinality: "one";
+        };
+        module: {
+            model: import("../../..").DataMeta;
+            direction: "out";
+            relationship: string;
+            cardinality: "many";
+            dtoKey: string;
+        };
+    }>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    /** Runs the callback in an empty CLS context: no caller company or user is bound (OD-1). */
+    private _unscoped;
+    private _userReturn;
+    findTargetUser(params: {
+        userId: string;
+    }): Promise<User | null>;
+    findByUndoTokenHash(params: {
+        undoTokenHash: string;
+    }): Promise<User | null>;
+    /** Users whose grace period is over. Worker cron only. */
+    findDue(params: {
+        now: string;
+    }): Promise<User[]>;
+    /**
+     * The company of the user's Membership (preferring the company the user also
+     * BELONGS_TO) and how many Memberships that company has. A placeholder user
+     * (no Membership) gets `{ companyId: null, memberCount: 0 }`.
+     */
+    findMembershipSummary(params: {
+        userId: string;
+    }): Promise<{
+        companyId: string | null;
+        memberCount: number;
+    }>;
+    setRequest(params: {
+        userId: string;
+        requestedAt: string;
+        scheduledAt: string;
+        undoTokenHash: string | null;
+    }): Promise<void>;
+    clearRequest(params: {
+        userId: string;
+    }): Promise<void>;
+    /** Logs the user out everywhere: every Auth and AuthCode, and every OAuth token revoked. */
+    deleteSessions(params: {
+        userId: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=account-deletion.repository.d.ts.map

package/dist/foundations/account-deletion/repositories/account-deletion.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/account-deletion/repositories/account-deletion.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAGnF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGhE;;;;;;;;;;;;;;;GAeG;AACH,qBACa,yBAA0B,SAAQ,kBAAkB,CAAC,IAAI,EAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAC1G,SAAS,CAAC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;OAAkB;gBAEnC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAIzF,4FAA4F;IAC5F,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;IAOb,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAahE,mBAAmB,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAalF,0DAA0D;IACpD,OAAO,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAevD;;;;OAIG;IACG,qBAAqB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IA6B7G,UAAU,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBX,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAc7D,4FAA4F;IACtF,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAwBhE"}

package/dist/foundations/account-deletion/repositories/account-deletion.repository.js

@@ -0,0 +1,186 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountDeletionRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const security_service_1 = require("../../../core/security/services/security.service");
+const company_meta_1 = require("../../company/entities/company.meta");
+const revoke_user_oauth_tokens_query_1 = require("../../oauth/queries/revoke-user-oauth-tokens.query");
+const user_1 = require("../../user/entities/user");
+const user_meta_1 = require("../../user/entities/user.meta");
+/**
+ * Reads and writes of the account-deletion request on the User node.
+ *
+ * Owner decision OD-1 (Carlo, 2026-10-25): this repository reads a User and its
+ * Memberships by explicit id with no company predicate, for exactly six callers
+ * (self preview/request, admin preview/request on another user, the public keep
+ * link, the daily cron, the login hook and the worker processor), and runs three
+ * hand-written writes by user id (setRequest, clearRequest, deleteSessions).
+ * A user deleting their account is not scoped to one company: a placeholder
+ * player belongs to the GM's company, an administrator acts on any user, and the
+ * keep link and the cron run with no session at all. Every query therefore runs
+ * in a fresh CLS context (`ifNested: "override"`), so `initQuery` binds no
+ * caller company or user. Every id is a query parameter. User nodes come back
+ * through readOne/readMany with the User serialiser; only findMembershipSummary
+ * returns a scalar row.
+ */
+let AccountDeletionRepository = class AccountDeletionRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = user_1.UserDescriptor;
+    }
+    /** Runs the callback in an empty CLS context: no caller company or user is bound (OD-1). */
+    _unscoped(callback) {
+        return this.clsService.run({ ifNested: "override" }, callback);
+    }
+    _userReturn() {
+        return `
+      OPTIONAL MATCH (${user_meta_1.userMeta.nodeName})-[:BELONGS_TO]->(${user_meta_1.userMeta.nodeName}_${company_meta_1.companyMeta.nodeName}:${company_meta_1.companyMeta.labelName})
+      RETURN ${user_meta_1.userMeta.nodeName}, ${user_meta_1.userMeta.nodeName}_${company_meta_1.companyMeta.nodeName}
+    `;
+    }
+    async findTargetUser(params) {
+        return this._unscoped(async () => {
+            const query = this.neo4j.initQuery({ serialiser: user_1.UserDescriptor.model });
+            query.queryParams = { ...query.queryParams, userId: params.userId };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (${user_meta_1.userMeta.nodeName}:${user_meta_1.userMeta.labelName} {id: $userId})
+        ${this._userReturn()}
+      `;
+            return this.neo4j.readOne(query);
+        });
+    }
+    async findByUndoTokenHash(params) {
+        return this._unscoped(async () => {
+            const query = this.neo4j.initQuery({ serialiser: user_1.UserDescriptor.model });
+            query.queryParams = { ...query.queryParams, undoTokenHash: params.undoTokenHash };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (${user_meta_1.userMeta.nodeName}:${user_meta_1.userMeta.labelName} {deletionUndoTokenHash: $undoTokenHash})
+        ${this._userReturn()}
+      `;
+            return this.neo4j.readOne(query);
+        });
+    }
+    /** Users whose grace period is over. Worker cron only. */
+    async findDue(params) {
+        return this._unscoped(async () => {
+            const query = this.neo4j.initQuery({ serialiser: user_1.UserDescriptor.model, fetchAll: true });
+            query.queryParams = { ...query.queryParams, now: params.now };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (${user_meta_1.userMeta.nodeName}:${user_meta_1.userMeta.labelName})
+        WHERE ${user_meta_1.userMeta.nodeName}.deletionScheduledAt IS NOT NULL
+          AND ${user_meta_1.userMeta.nodeName}.deletionScheduledAt <= datetime($now)
+        ${this._userReturn()}
+      `;
+            return this.neo4j.readMany(query);
+        });
+    }
+    /**
+     * The company of the user's Membership (preferring the company the user also
+     * BELONGS_TO) and how many Memberships that company has. A placeholder user
+     * (no Membership) gets `{ companyId: null, memberCount: 0 }`.
+     */
+    async findMembershipSummary(params) {
+        return this._unscoped(async () => {
+            // nja-lint-ignore OD-1
+            const result = await this.neo4j.read(`
+        MATCH (user:User {id: $userId})
+        OPTIONAL MATCH (user)-[:HAS_MEMBERSHIP]->(:Membership)-[:IN_COMPANY]->(company:Company)
+        WITH user, company
+        ORDER BY CASE WHEN company IS NOT NULL AND EXISTS { (user)-[:BELONGS_TO]->(company) } THEN 0 ELSE 1 END
+        WITH collect(company)[0] AS company
+        OPTIONAL MATCH (member:Membership)-[:IN_COMPANY]->(company)
+        RETURN company.id AS companyId, count(DISTINCT member) AS memberCount
+        `, { userId: params.userId });
+            // nja-lint-ignore OD-1 (scalar row: company id and a count, no entity node)
+            const record = result.records?.[0];
+            if (!record)
+                return { companyId: null, memberCount: 0 };
+            const companyId = record.get("companyId");
+            const memberCount = record.get("memberCount");
+            return {
+                companyId: companyId ?? null,
+                memberCount: typeof memberCount?.toNumber === "function" ? memberCount.toNumber() : Number(memberCount ?? 0),
+            };
+        });
+    }
+    async setRequest(params) {
+        await this._unscoped(async () => {
+            const query = this.neo4j.initQuery();
+            query.queryParams = {
+                ...query.queryParams,
+                userId: params.userId,
+                requestedAt: params.requestedAt,
+                scheduledAt: params.scheduledAt,
+                undoTokenHash: params.undoTokenHash,
+            };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (user:User {id: $userId})
+        SET user.deletionRequestedAt = datetime($requestedAt),
+            user.deletionScheduledAt = datetime($scheduledAt),
+            user.deletionUndoTokenHash = $undoTokenHash,
+            user.updatedAt = datetime()
+      `;
+            await this.neo4j.writeOne(query);
+        });
+    }
+    async clearRequest(params) {
+        await this._unscoped(async () => {
+            const query = this.neo4j.initQuery();
+            query.queryParams = { ...query.queryParams, userId: params.userId };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (user:User {id: $userId})
+        REMOVE user.deletionRequestedAt, user.deletionScheduledAt, user.deletionUndoTokenHash
+        SET user.updatedAt = datetime()
+      `;
+            await this.neo4j.writeOne(query);
+        });
+    }
+    /** Logs the user out everywhere: every Auth and AuthCode, and every OAuth token revoked. */
+    async deleteSessions(params) {
+        await this._unscoped(async () => {
+            const query = this.neo4j.initQuery();
+            query.queryParams = { ...query.queryParams, userId: params.userId };
+            // nja-lint-ignore OD-1
+            query.query += `
+        MATCH (user:User {id: $userId})
+        CALL {
+          WITH user
+          MATCH (user)-[:HAS_AUTH]->(:Auth)-[:HAS_AUTH_CODE]->(code:AuthCode)
+          DETACH DELETE code
+        }
+        CALL {
+          WITH user
+          MATCH (user)-[:HAS_AUTH]->(auth:Auth)
+          DETACH DELETE auth
+        }
+        WITH user
+        ${(0, revoke_user_oauth_tokens_query_1.revokeUserOAuthTokensClause)("user")}
+        RETURN user.id AS userId
+      `;
+            await this.neo4j.writeOne(query);
+        });
+    }
+};
+exports.AccountDeletionRepository = AccountDeletionRepository;
+exports.AccountDeletionRepository = AccountDeletionRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], AccountDeletionRepository);
+//# sourceMappingURL=account-deletion.repository.js.map

package/dist/foundations/account-deletion/repositories/account-deletion.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.repository.js","sourceRoot":"","sources":["../../../../src/foundations/account-deletion/repositories/account-deletion.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,8EAA0E;AAC1E,2FAAuF;AACvF,uFAAmF;AACnF,sEAAkE;AAClE,uGAAiG;AACjG,mDAAgE;AAChE,6DAAyD;AAEzD;;;;;;;;;;;;;;;GAeG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,wCAA6D;IAG1G,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,qBAAc,CAAC;IAI/C,CAAC;IAED,4FAA4F;IACpF,SAAS,CAAI,QAA0B;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IAEO,WAAW;QACjB,OAAO;wBACa,oBAAQ,CAAC,QAAQ,qBAAqB,oBAAQ,CAAC,QAAQ,IAAI,0BAAW,CAAC,QAAQ,IAAI,0BAAW,CAAC,SAAS;eACjH,oBAAQ,CAAC,QAAQ,KAAK,oBAAQ,CAAC,QAAQ,IAAI,0BAAW,CAAC,QAAQ;KACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;iBACJ,oBAAQ,CAAC,QAAQ,IAAI,oBAAQ,CAAC,SAAS;UAC9C,IAAI,CAAC,WAAW,EAAE;OACrB,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAiC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;YAClF,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;iBACJ,oBAAQ,CAAC,QAAQ,IAAI,oBAAQ,CAAC,SAAS;UAC9C,IAAI,CAAC,WAAW,EAAE;OACrB,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,OAAO,CAAC,MAAuB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9D,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;iBACJ,oBAAQ,CAAC,QAAQ,IAAI,oBAAQ,CAAC,SAAS;gBACxC,oBAAQ,CAAC,QAAQ;gBACjB,oBAAQ,CAAC,QAAQ;UACvB,IAAI,CAAC,WAAW,EAAE;OACrB,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,MAA0B;QACpD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC/B,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC;;;;;;;;SAQC,EACD,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;YAEF,4EAA4E;YAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YAExD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9C,OAAO;gBACL,SAAS,EAAE,SAAS,IAAI,IAAI;gBAC5B,WAAW,EAAE,OAAO,WAAW,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;aAC7G,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAKhB;QACC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,WAAW,GAAG;gBAClB,GAAG,KAAK,CAAC,WAAW;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC;YACF,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;;;;;;OAMd,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0B;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;;;;OAId,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,uBAAuB;YACvB,KAAK,CAAC,KAAK,IAAI;;;;;;;;;;;;;UAaX,IAAA,4DAA2B,EAAC,MAAM,CAAC;;OAEtC,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAjKY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;qCAIQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAH9E,yBAAyB,CAiKrC"}

package/dist/foundations/account-deletion/repositories/account-deletion.wipe.repository.d.ts

@@ -0,0 +1,77 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { User, UserDescriptor } from "../../user/entities/user";
+export declare class AccountDeletionWipeRepository extends AbstractRepository<User, typeof UserDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<User, {
+        role: {
+            model: import("../../..").DataMeta;
+            direction: "out";
+            relationship: string;
+            cardinality: "many";
+            dtoKey: string;
+            readOnly: true;
+        };
+        company: {
+            model: import("../../..").DataModelInterface<import("../..").Company>;
+            direction: "out";
+            relationship: string;
+            cardinality: "one";
+        };
+        module: {
+            model: import("../../..").DataMeta;
+            direction: "out";
+            relationship: string;
+            cardinality: "many";
+            dtoKey: string;
+        };
+    }>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    deleteUserLinkedNodes(params: {
+        userId: string;
+        batchSize: number;
+    }): Promise<void>;
+    detachUserFromForeignNodes(params: {
+        userId: string;
+        batchSize: number;
+    }): Promise<void>;
+    deleteEmailKeyed(params: {
+        email: string;
+        userId: string;
+        batchSize: number;
+    }): Promise<void>;
+    deleteStripeNodes(params: {
+        companyId: string;
+        batchSize: number;
+    }): Promise<void>;
+    deleteCompanyNodes(params: {
+        companyId: string;
+        batchSize: number;
+    }): Promise<void>;
+    deleteDisconnectedKnowledge(params: {
+        batchSize: number;
+    }): Promise<void>;
+    /**
+     * Deletes the Company node and its Memberships in one transaction (a company has a handful
+     * of memberships; an orphaned Membership would read as a platform membership). Remaining
+     * edges, referrals included, go with the Company.
+     */
+    deleteCompanyShell(params: {
+        companyId: string;
+    }): Promise<void>;
+    /** Hard-deletes the User node. Last step of an account wipe. */
+    deleteUserNode(params: {
+        userId: string;
+    }): Promise<void>;
+    /** Ids of the users of a company (legacy BELONGS_TO edge or a Membership), members first. */
+    findCompanyUserIds(params: {
+        companyId: string;
+    }): Promise<string[]>;
+    private _companyDelete;
+    /** Seeds a query with only the parameters it needs (never the CLS company / user). */
+    private _wipeQuery;
+    /** Runs one batch per transaction until a batch deletes nothing. */
+    private _deleteInBatches;
+}
+//# sourceMappingURL=account-deletion.wipe.repository.d.ts.map

package/dist/foundations/account-deletion/repositories/account-deletion.wipe.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.wipe.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/account-deletion/repositories/account-deletion.wipe.repository.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AA8EhE,qBACa,6BAA8B,SAAQ,kBAAkB,CAAC,IAAI,EAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAC9G,SAAS,CAAC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;OAAkB;gBAEnC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAInF,qBAAqB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBnF,0BAA0B,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcxF,gBAAgB,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB7F,iBAAiB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlF,kBAAkB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnF,2BAA2B,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/E;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IActE,gEAAgE;IAC1D,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/D,6FAA6F;IACvF,kBAAkB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAyB1E,OAAO,CAAC,cAAc;IAatB,sFAAsF;IACtF,OAAO,CAAC,UAAU;IAYlB,oEAAoE;YACtD,gBAAgB;CAa/B"}

package/dist/foundations/account-deletion/repositories/account-deletion.wipe.repository.js

@@ -0,0 +1,243 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountDeletionWipeRepository = void 0;
+// Only caller: AccountDeletionProcessor (through AccountWipeService and FullCompanyDeletionService), never an HTTP request.
+//
+// Owner-approved exception (Carlo, 2026-10-25, recorded in the account-deletion plan):
+// - The wipe deletes nodes of every label that hang off one user or one company, across
+//   companies, so it matches by an explicit user / company id instead of buildDefaultMatch().
+// - initQuery() is not used: in the processor the CLS carries companyId and userId, and
+//   initQuery() would prepend a currentUser-BELONGS_TO-company match that stops matching as
+//   soon as the company or the user is gone, turning every later step into a silent no-op.
+// - Bulk deletes read their own scalar "deleted" count, which readOne()/readMany() cannot
+//   map, so they run through executeInTransaction (writeOne returns null without a serialiser).
+// - Every id is a query parameter. Every bulk delete runs LIMIT $batchSize (a neo4j Integer,
+//   WIPE_BATCH_SIZE = 1000) per transaction and loops until a batch deletes 0. The patterns
+//   interpolated into the query text are constants of this file, never request input.
+const common_1 = require("@nestjs/common");
+const neo4j_driver_1 = require("neo4j-driver");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const user_1 = require("../../user/entities/user");
+/**
+ * Nodes owned by the user, deleted with the account. Each pattern binds the node to delete
+ * as `n`; `u` is the user. Order matters: children before the node they hang off.
+ */
+const USER_LINKED_PATTERNS = [
+    "(u)-[:HAS_AUTH]->(:Auth)-[:HAS_AUTH_CODE]->(n)",
+    "(u)-[:HAS_AUTH]->(n)",
+    "(u)-[:HAS_TOTP_AUTHENTICATOR]->(n)",
+    "(u)-[:HAS_BACKUP_CODE]->(n)",
+    "(u)-[:HAS_TWO_FACTOR_CONFIG]->(n)",
+    "(u)-[:HAS_PENDING_TWO_FACTOR]->(n)",
+    "(u)-[:HAS_PASSKEY]->(n)",
+    "(u)-[:OWNS_CLIENT]->(:OAuthClient)-[:ISSUED_ACCESS_TOKEN]->(:OAuthAccessToken)-[:LINKED_REFRESH]->(n)",
+    "(u)-[:OWNS_CLIENT]->(:OAuthClient)-[:ISSUED_ACCESS_TOKEN|ISSUED_CODE]->(n)",
+    "(u)-[:OWNS_CLIENT]->(n)",
+    "(u)-[:AUTHORIZED_CODE]->(n)",
+    "(u)-[:HAS_ACCESS_TOKEN]->(:OAuthAccessToken)-[:LINKED_REFRESH]->(n)",
+    "(u)-[:HAS_ACCESS_TOKEN]->(n)",
+    "(n:OAuthRefreshToken {userId: u.id})",
+    "(n:OAuthAccessToken {userId: u.id})",
+    "(u)-[:HAS_DISCORD]->(n)",
+    "(u)-[:HAS_GOOGLE]->(n)",
+    "(u)-[:HAS_PUSH]->(n)",
+    "(n:Notification)-[:TRIGGERED_FOR]->(u)",
+    "(u)-[:PERFORMED]->(n)",
+    "(n:AnalyticsPageView)-[:IN_SESSION]->(:AnalyticsSession)-[:BY_USER]->(u)",
+    "(n:AnalyticsSession)-[:BY_USER]->(u)",
+    "(u)-[:HAS_MEMBERSHIP]->(n:Membership)",
+];
+/** Edges from the user to nodes that belong to someone else: the edge goes, the node stays. */
+const FOREIGN_EDGE_TYPES = "TRIGGERED_BY|CREATED_BY|CREATED|PUBLISHED|AUTHORED";
+/** Email-keyed nodes. `$email` and `$userId` are parameters. */
+const EMAIL_KEYED_MATCHES = [
+    "MATCH (n:Waitlist) WHERE ($email <> '' AND toLower(n.email) = toLower($email)) OR n.userId = $userId",
+    "MATCH (n:EmailAutomationEnrollment) WHERE $email <> '' AND toLower(n.email) = toLower($email)",
+    "MATCH (n:EmailOptOut) WHERE $email <> '' AND toLower(n.email) = toLower($email)",
+];
+/**
+ * Stripe nodes of the company's customer, children first. StripeInvoice has no Company edge
+ * (it hangs off the customer and the subscription), so the company sweep alone would orphan it.
+ */
+const STRIPE_PATTERNS = [
+    "(company)<-[:BELONGS_TO]-(:StripeCustomer)<-[:BELONGS_TO]-(n:StripeInvoice)",
+    "(company)<-[:BELONGS_TO]-(:StripeCustomer)<-[:BELONGS_TO]-(:StripeSubscription)<-[:FOR_SUBSCRIPTION]-(n:StripeInvoice)",
+    "(company)<-[:BELONGS_TO]-(:StripeCustomer)<-[:BELONGS_TO]-(:StripeSubscription)<-[:BELONGS_TO]-(n:StripeUsageRecord)",
+    "(company)<-[:BELONGS_TO]-(:StripeCustomer)--(n:StripePaymentMethod)",
+    "(company)<-[:BELONGS_TO]-(:StripeCustomer)<-[:BELONGS_TO]-(n:StripeSubscription)",
+    "(company)<-[:BELONGS_TO]-(n:StripeCustomer)",
+];
+/**
+ * Company nodes. Users are never swept here: placeholders are deleted one by one with their
+ * user-linked nodes, and members keep their node (the account-deletion flow handles them).
+ * Memberships are not swept here either: they go with the Company in deleteCompanyShell, so a
+ * crash half way leaves the member still recognised as the company's only member on re-run.
+ */
+const COMPANY_PATTERNS = [
+    "(company)<-[:BELONGS_TO]-(owner)-[:HAS_CHUNK]->(n:Chunk) WHERE NOT owner:User",
+    "(company)<-[:BELONGS_TO]-(n) WHERE NOT n:User AND NOT n:Company",
+];
+/**
+ * Shared knowledge left with nothing pointing at it. AtomicFacts are shared across companies
+ * (md5 id), so only facts no chunk links any more go; KeyConcepts go only when nothing at all
+ * (fact, community, key-concept relationship) is linked to them.
+ */
+const DISCONNECTED_KNOWLEDGE_MATCHES = [
+    "MATCH (n:AtomicFact) WHERE NOT (n)<-[:HAS_ATOMIC_FACT]-() // nja-lint-ignore wipe-exception",
+    "MATCH (n:KeyConcept) WHERE NOT (n)--() // nja-lint-ignore wipe-exception",
+];
+let AccountDeletionWipeRepository = class AccountDeletionWipeRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = user_1.UserDescriptor;
+    }
+    async deleteUserLinkedNodes(params) {
+        for (const pattern of USER_LINKED_PATTERNS) {
+            await this._deleteInBatches(this._wipeQuery({ userId: params.userId, batchSize: params.batchSize }, `
+          MATCH (u:User {id: $userId}) // nja-lint-ignore wipe-exception
+          MATCH ${pattern}
+          WITH DISTINCT n LIMIT $batchSize
+          DETACH DELETE n
+          RETURN count(*) AS deleted
+        `));
+        }
+    }
+    async detachUserFromForeignNodes(params) {
+        await this._deleteInBatches(this._wipeQuery({ userId: params.userId, batchSize: params.batchSize }, `
+        MATCH (u:User {id: $userId})-[r:${FOREIGN_EDGE_TYPES}]-() // nja-lint-ignore wipe-exception
+        WITH r LIMIT $batchSize
+        DELETE r
+        RETURN count(*) AS deleted
+      `));
+    }
+    async deleteEmailKeyed(params) {
+        for (const match of EMAIL_KEYED_MATCHES) {
+            await this._deleteInBatches(this._wipeQuery({ email: params.email ?? "", userId: params.userId, batchSize: params.batchSize }, `
+          ${match} // nja-lint-ignore wipe-exception
+          WITH n LIMIT $batchSize
+          DETACH DELETE n
+          RETURN count(*) AS deleted
+        `));
+        }
+    }
+    async deleteStripeNodes(params) {
+        for (const pattern of STRIPE_PATTERNS) {
+            await this._deleteInBatches(this._companyDelete(params, pattern));
+        }
+    }
+    async deleteCompanyNodes(params) {
+        for (const pattern of COMPANY_PATTERNS) {
+            await this._deleteInBatches(this._companyDelete(params, pattern));
+        }
+    }
+    async deleteDisconnectedKnowledge(params) {
+        for (const match of DISCONNECTED_KNOWLEDGE_MATCHES) {
+            await this._deleteInBatches(this._wipeQuery({ batchSize: params.batchSize }, `
+          ${match}
+          WITH n LIMIT $batchSize
+          DETACH DELETE n
+          RETURN count(*) AS deleted
+        `));
+        }
+    }
+    /**
+     * Deletes the Company node and its Memberships in one transaction (a company has a handful
+     * of memberships; an orphaned Membership would read as a platform membership). Remaining
+     * edges, referrals included, go with the Company.
+     */
+    async deleteCompanyShell(params) {
+        const { query, queryParams } = this._wipeQuery({ companyId: params.companyId }, `
+      MATCH (company:Company {id: $companyId}) // nja-lint-ignore wipe-exception
+      OPTIONAL MATCH (company)<-[:IN_COMPANY]-(membership:Membership)
+      DETACH DELETE membership
+      WITH DISTINCT company
+      DETACH DELETE company
+    `);
+        await this.neo4j.executeInTransaction([{ query, params: queryParams }]);
+    }
+    /** Hard-deletes the User node. Last step of an account wipe. */
+    async deleteUserNode(params) {
+        const { query, queryParams } = this._wipeQuery({ userId: params.userId }, `
+      MATCH (u:User {id: $userId}) // nja-lint-ignore wipe-exception
+      DETACH DELETE u
+    `);
+        await this.neo4j.executeInTransaction([{ query, params: queryParams }]);
+    }
+    /** Ids of the users of a company (legacy BELONGS_TO edge or a Membership), members first. */
+    async findCompanyUserIds(params) {
+        const { query, queryParams } = this._wipeQuery({ companyId: params.companyId }, `
+      MATCH (company:Company {id: $companyId}) // nja-lint-ignore wipe-exception
+      CALL {
+        WITH company
+        MATCH (u:User)-[:BELONGS_TO]->(company)
+        RETURN u
+        UNION
+        WITH company
+        MATCH (u:User)-[:HAS_MEMBERSHIP]->(:Membership)-[:IN_COMPANY]->(company)
+        RETURN u
+      }
+      WITH DISTINCT company, u
+      RETURN u.id AS id,
+        EXISTS { (u)-[:HAS_MEMBERSHIP]->(:Membership)-[:IN_COMPANY]->(company) } AS isMember
+      ORDER BY isMember DESC, id ASC
+    `);
+        // nja-lint-ignore wipe-exception
+        const result = await this.neo4j.read(query, queryParams);
+        return result.records.map((record) => String(record.get("id")));
+    }
+    _companyDelete(params, pattern) {
+        return this._wipeQuery({ companyId: params.companyId, batchSize: params.batchSize }, `
+      MATCH (company:Company {id: $companyId}) // nja-lint-ignore wipe-exception
+      MATCH ${pattern}
+      WITH DISTINCT n LIMIT $batchSize
+      DETACH DELETE n
+      RETURN count(*) AS deleted
+    `);
+    }
+    /** Seeds a query with only the parameters it needs (never the CLS company / user). */
+    _wipeQuery(params, query) {
+        const queryParams = {};
+        if (params.userId !== undefined)
+            queryParams.userId = params.userId;
+        if (params.companyId !== undefined)
+            queryParams.companyId = params.companyId;
+        if (params.email !== undefined)
+            queryParams.email = params.email;
+        if (params.batchSize !== undefined)
+            queryParams.batchSize = (0, neo4j_driver_1.int)(params.batchSize);
+        return { query, queryParams };
+    }
+    /** Runs one batch per transaction until a batch deletes nothing. */
+    async _deleteInBatches(wipeQuery) {
+        let total = 0;
+        for (;;) {
+            // nja-lint-ignore wipe-exception
+            const [result] = await this.neo4j.executeInTransaction([
+                { query: wipeQuery.query, params: wipeQuery.queryParams },
+            ]);
+            const raw = result?.records?.[0]?.get("deleted");
+            const deleted = (0, neo4j_driver_1.isInt)(raw) ? raw.toNumber() : Number(raw ?? 0);
+            if (!deleted)
+                return total;
+            total += deleted;
+        }
+    }
+};
+exports.AccountDeletionWipeRepository = AccountDeletionWipeRepository;
+exports.AccountDeletionWipeRepository = AccountDeletionWipeRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], AccountDeletionWipeRepository);
+//# sourceMappingURL=account-deletion.wipe.repository.js.map

package/dist/foundations/account-deletion/repositories/account-deletion.wipe.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.wipe.repository.js","sourceRoot":"","sources":["../../../../src/foundations/account-deletion/repositories/account-deletion.wipe.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4HAA4H;AAC5H,EAAE;AACF,uFAAuF;AACvF,wFAAwF;AACxF,8FAA8F;AAC9F,wFAAwF;AACxF,4FAA4F;AAC5F,2FAA2F;AAC3F,0FAA0F;AAC1F,gGAAgG;AAChG,6FAA6F;AAC7F,4FAA4F;AAC5F,sFAAsF;AACtF,2CAA4C;AAC5C,+CAA0C;AAC1C,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,mDAAgE;AAIhE;;;GAGG;AACH,MAAM,oBAAoB,GAAa;IACrC,gDAAgD;IAChD,sBAAsB;IACtB,oCAAoC;IACpC,6BAA6B;IAC7B,mCAAmC;IACnC,oCAAoC;IACpC,yBAAyB;IACzB,uGAAuG;IACvG,4EAA4E;IAC5E,yBAAyB;IACzB,6BAA6B;IAC7B,qEAAqE;IACrE,8BAA8B;IAC9B,sCAAsC;IACtC,qCAAqC;IACrC,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,wCAAwC;IACxC,uBAAuB;IACvB,0EAA0E;IAC1E,sCAAsC;IACtC,uCAAuC;CACxC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,oDAAoD,CAAC;AAEhF,gEAAgE;AAChE,MAAM,mBAAmB,GAAa;IACpC,sGAAsG;IACtG,+FAA+F;IAC/F,iFAAiF;CAClF,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAa;IAChC,6EAA6E;IAC7E,wHAAwH;IACxH,sHAAsH;IACtH,qEAAqE;IACrE,kFAAkF;IAClF,6CAA6C;CAC9C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,gBAAgB,GAAa;IACjC,+EAA+E;IAC/E,iEAAiE;CAClE,CAAC;AAEF;;;;GAIG;AACH,MAAM,8BAA8B,GAAa;IAC/C,6FAA6F;IAC7F,0EAA0E;CAC3E,CAAC;AAGK,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,wCAA6D;IAG9G,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,qBAAc,CAAC;IAI/C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAA6C;QACvE,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,gBAAgB,CACzB,IAAI,CAAC,UAAU,CACb,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EACtD;;kBAEQ,OAAO;;;;SAIhB,CACA,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAA6C;QAC5E,MAAM,IAAI,CAAC,gBAAgB,CACzB,IAAI,CAAC,UAAU,CACb,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EACtD;0CACkC,kBAAkB;;;;OAIrD,CACA,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA4D;QACjF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,gBAAgB,CACzB,IAAI,CAAC,UAAU,CACb,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EACjF;YACE,KAAK;;;;SAIR,CACA,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAgD;QACtE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAgD;QACvE,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,MAA6B;QAC7D,KAAK,MAAM,KAAK,IAAI,8BAA8B,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,gBAAgB,CACzB,IAAI,CAAC,UAAU,CACb,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC/B;YACE,KAAK;;;;SAIR,CACA,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAA6B;QACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,UAAU,CAC5C,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC/B;;;;;;KAMD,CACA,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,UAAU,CAC5C,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACzB;;;KAGD,CACA,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,kBAAkB,CAAC,MAA6B;QACpD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,UAAU,CAC5C,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC/B;;;;;;;;;;;;;;;KAeD,CACA,CAAC;QACF,iCAAiC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACzD,OAAQ,MAAM,CAAC,OAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,cAAc,CAAC,MAAgD,EAAE,OAAe;QACtF,OAAO,IAAI,CAAC,UAAU,CACpB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC5D;;cAEQ,OAAO;;;;KAIhB,CACA,CAAC;IACJ,CAAC;IAED,sFAAsF;IAC9E,UAAU,CAChB,MAAmF,EACnF,KAAa;QAEb,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,WAAW,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7E,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACjE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,WAAW,CAAC,SAAS,GAAG,IAAA,kBAAG,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,gBAAgB,CAAC,SAAoB;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACR,iCAAiC;YACjC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;gBACrD,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,WAAW,EAAE;aAC1D,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAA,oBAAK,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,KAAK,IAAI,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAA;AAnLY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;qCAIQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAH9E,6BAA6B,CAmLzC"}