@crowi/api 2.0.0-alpha.0

package/dist/hono/handlers/app.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAppRoutes = void 0;
+/**
+ * RFC-0006 Phase 3 pilot — `app` resource Hono port.
+ *
+ * Replaces `packages/api/src/routes/ts-rest/app.ts`. The handler logic
+ * is reproduced byte-for-byte (same `'Crowi'` sentinel rule for the
+ * default site title), but the integration shape is now `app.openapi(
+ * route, handler)` chaining against the route definition in
+ * `@crowi/api-contract`'s `contracts/app.ts`.
+ *
+ * The function returns the chained `OpenAPIHono` so callers can keep
+ * extending the chain without breaking `AppType` inference (Phase 3
+ * smoke-test guarantee — see `docs/migrations/0006-hono-context.md`
+ * §11).
+ */
+const api_contract_1 = require("@crowi/api-contract");
+const registerAppRoutes = (app, crowi) => app.openapi(api_contract_1.getAppInfoRoute, (c) => {
+    const config = crowi.getConfig();
+    const raw = config?.crowi?.['app:title'];
+    // 'Crowi' is the seed default in models/config.ts; treat that and
+    // empty/missing values as "not customized" so the client can render
+    // the full lockup instead of an icon-plus-text composition.
+    const title = raw && raw !== 'Crowi' ? raw : null;
+    // Confidentiality notice (app:confidential) rides the same public
+    // channel so the (auth) shell can render an always-on header banner.
+    // Empty/missing collapses to null (banner hidden).
+    const confidentialRaw = config?.crowi?.['app:confidential'];
+    const confidential = confidentialRaw ? confidentialRaw : null;
+    return c.json({ title, confidential }, 200);
+});
+exports.registerAppRoutes = registerAppRoutes;
+//# sourceMappingURL=app.js.map

package/dist/hono/handlers/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/hono/handlers/app.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;GAaG;AACH,sDAAsD;AAO/C,MAAM,iBAAiB,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE,CAClG,GAAG,CAAC,OAAO,CAAC,8BAAe,EAAE,CAAC,CAAC,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAuB,CAAC;IAC/D,kEAAkE;IAClE,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,kEAAkE;IAClE,qEAAqE;IACrE,mDAAmD;IACnD,MAAM,eAAe,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAuB,CAAC;IAClF,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAdQ,QAAA,iBAAiB,qBAczB"}

package/dist/hono/handlers/attachment-stream.d.ts

@@ -0,0 +1,4 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import type Crowi from '../../crowi';
+import type { CrowiHonoBindings } from '../app';
+export declare const registerAttachmentStreamRoutes: (app: OpenAPIHono<CrowiHonoBindings>, crowi: Crowi) => OpenAPIHono<CrowiHonoBindings, {}, "/">;

package/dist/hono/handlers/attachment-stream.js

@@ -0,0 +1,211 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAttachmentStreamRoutes = void 0;
+/**
+ * RFC-0006 Phase 6 Sub-batch D — Hono port of the raw streaming
+ * attachment routes that previously lived on the Express bridge
+ * (`packages/api/src/routes/ts-rest/attachment-stream.ts`, now
+ * deleted).
+ *
+ *   GET /attachments/by-key/:key(*)  — public-keyed delivery
+ *                                       (profile pictures only)
+ *   GET /attachments/:id             — by-id delivery with
+ *                                       page grant check +
+ *                                       placeholder fallback
+ *
+ * These endpoints stream `Readable` bytes from the storage driver
+ * (local fs / S3) and never buffer the whole file. Hono lets us
+ * surface a Node `Readable` as a Web `ReadableStream` via
+ * `Readable.toWeb`, which the `@hono/node-server` adaptor then pipes
+ * back onto the socket — equivalent posture to the old Express
+ * `stream.pipe(res)` codepath, no buffering introduced.
+ *
+ * Auth: both endpoints install `createJwtAuth(crowi)` directly on the
+ * literal paths. They are OUTSIDE the revision-owned `/pages/*`
+ * broad apply (which covers list / add / usage), and the
+ * `/attachments/*` broad apply in the JSON attachment handler runs
+ * AFTER this handler registers — registering jwtAuth on the literal
+ * paths here keeps the request-time middleware stack identical.
+ */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_stream_1 = require("node:stream");
+const debug_1 = __importDefault(require("debug"));
+const fileUploader_1 = __importDefault(require("../../util/fileUploader"));
+const ts_rest_helpers_1 = require("../../util/ts-rest-helpers");
+const auth_1 = require("../middleware/auth");
+const debug = (0, debug_1.default)('crowi:hono:handlers:attachment-stream');
+/** Profile-picture key prefix — the only one allowed by `by-key`. */
+const BY_KEY_ALLOWED_PREFIX = 'user/';
+const KEY_EXT_TO_MIME = {
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    svg: 'image/svg+xml',
+    bmp: 'image/bmp',
+};
+const guessMimeFromKey = (key) => {
+    const m = key.match(/\.([^.]+)$/);
+    if (!m)
+        return 'application/octet-stream';
+    return KEY_EXT_TO_MIME[m[1].toLowerCase()] || 'application/octet-stream';
+};
+const errorBody = (code, message) => ({
+    error: { code, message },
+});
+/**
+ * Whether a storage-driver `get()` rejection means the object is simply
+ * missing (as opposed to a real failure). Local driver throws
+ * `code: 'ENOENT'`; the S3 driver surfaces missing as AWS SDK v3
+ * `NoSuchKey` (`$metadata.httpStatusCode === 404`, no `code`).
+ */
+const isMissingFileError = (err) => {
+    const e = err;
+    return e.code === 'ENOENT' || e.name === 'NoSuchKey' || e.$metadata?.httpStatusCode === 404;
+};
+/**
+ * Convert a Node `Readable` into a Web `ReadableStream` so Hono's
+ * `c.body(...)` can surface it as the response body. `Readable.toWeb`
+ * propagates the underlying stream's `'error'` event by erroring the
+ * Web stream, which the adaptor surfaces as a chunked-encoding
+ * truncation on the wire — identical observable behaviour to the
+ * legacy Express `stream.pipe(res)` codepath aborting mid-response.
+ */
+const toWebStream = (stream) => {
+    return node_stream_1.Readable.toWeb(stream);
+};
+const registerAttachmentStreamRoutes = (app, crowi) => {
+    const Attachment = crowi.model('Attachment');
+    const Page = crowi.model('Page');
+    const fileUploader = (0, fileUploader_1.default)(crowi);
+    /** Absolute path to the placeholder image served when an attachment is gone. */
+    const FILE_NOT_FOUND_IMAGE = node_path_1.default.join(crowi.publicDir, 'images', 'file-not-found.png');
+    /**
+     * Stream the `file-not-found.png` placeholder as `200 image/png`.
+     * Phase 3 (RFC-0004) — used by `GET /attachments/:id` when the
+     * attachment record is missing OR its backing object is gone from
+     * storage. We deliberately return `200` (not `404`) so an embedded
+     * `<img>` renders the placeholder inline.
+     */
+    const buildPlaceholderResponse = () => {
+        const stream = node_fs_1.default.createReadStream(FILE_NOT_FOUND_IMAGE);
+        return new Response(toWebStream(stream), {
+            status: 200,
+            headers: { 'Content-Type': 'image/png' },
+        });
+    };
+    // Install jwtAuth on both literal paths. `/attachments/*` is OUTSIDE
+    // the revision-owned `/pages/*` broad apply, and the JSON attachment
+    // handler's broad `/attachments/*` apply runs after this handler
+    // registers — we keep the literal install so each route has exactly
+    // one jwtAuth invocation regardless of ordering.
+    app.use('/attachments/by-key/*', (0, auth_1.createJwtAuth)(crowi));
+    app.use('/attachments/:id', (0, auth_1.createJwtAuth)(crowi));
+    // --------------------------------------------------------------
+    // GET /attachments/by-key/:key(*)
+    // --------------------------------------------------------------
+    // Hono path params don't natively cover greedy "rest of the URL",
+    // so we use `:key{.+}` to capture everything after the prefix.
+    app.get('/attachments/by-key/:key{.+}', async (c) => {
+        const rawKey = c.req.param('key');
+        if (typeof rawKey !== 'string' || rawKey.length === 0) {
+            return c.json(errorBody('FILE_MISSING', 'Missing storage key'), 400);
+        }
+        let key;
+        try {
+            key = decodeURIComponent(rawKey);
+        }
+        catch {
+            return c.json(errorBody('FILE_MISSING', 'Invalid storage key'), 400);
+        }
+        if (!key.startsWith(BY_KEY_ALLOWED_PREFIX)) {
+            return c.json(errorBody('FORBIDDEN_FOR_DELETE', 'Storage key not permitted by this endpoint'), 403);
+        }
+        let stream;
+        try {
+            stream = await fileUploader.findDeliveryFile(null, key);
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === 'ENOENT') {
+                return c.json(errorBody('ATTACHMENT_NOT_FOUND', 'File not found'), 404);
+            }
+            debug('by-key delivery error', err);
+            return c.json(errorBody('UPLOAD_FAILED', 'Failed to deliver file'), 500);
+        }
+        return new Response(toWebStream(stream), {
+            status: 200,
+            headers: { 'Content-Type': guessMimeFromKey(key) },
+        });
+    });
+    // --------------------------------------------------------------
+    // GET /attachments/:id
+    // --------------------------------------------------------------
+    // We register a narrower handler on the 24-hex pattern so the
+    // `:id` route doesn't intercept `/attachments/upload` /
+    // `/attachments/:id/meta` etc. — Hono dispatches by literal-segment
+    // priority within the same prefix, and `upload` / `:id/meta` are
+    // defined on the same Hono instance via the JSON attachment
+    // handler, but matching on `/^[0-9a-f]{24}$/` here makes the
+    // boundary explicit.
+    app.get('/attachments/:id{[0-9a-fA-F]{24}}', async (c) => {
+        const user = c.get('user');
+        if (!user) {
+            return c.json({ error: { code: 'AUTHENTICATION_REQUIRED', message: 'Authentication is required' } }, 401);
+        }
+        const id = c.req.param('id');
+        if (!(0, ts_rest_helpers_1.isValidObjectId)(id)) {
+            return c.json(errorBody('INVALID_ATTACHMENT_ID', 'Invalid attachment id'), 400);
+        }
+        let attachment;
+        try {
+            attachment = (await Attachment.findById(id));
+        }
+        catch (err) {
+            debug('attachment lookup error', err);
+            return c.json(errorBody('UPLOAD_FAILED', 'Failed to load attachment'), 500);
+        }
+        if (!attachment) {
+            // A missing record means the file was deleted or never existed;
+            // serve the placeholder so embedded references render gracefully.
+            return buildPlaceholderResponse();
+        }
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, attachment.page.toString(), user);
+        if ('error' in grant) {
+            // Collapse INVALID_PAGE_ID + PAGE_NOT_FOUND alike to 404 — the
+            // page id comes from the persisted attachment, so an
+            // INVALID_PAGE_ID would only mean the document is corrupt.
+            return c.json(errorBody('ATTACHMENT_NOT_FOUND', 'Attachment not found'), 404);
+        }
+        let stream;
+        try {
+            stream = await Attachment.findDeliveryFile(attachment);
+        }
+        catch (err) {
+            // The record exists but the backing object is gone from storage
+            // (local `ENOENT` / S3 `NoSuchKey`). Serve the placeholder so
+            // embedded references render gracefully. Any other driver error
+            // is a genuine failure → 500.
+            if (isMissingFileError(err)) {
+                return buildPlaceholderResponse();
+            }
+            debug('attachment delivery error', err);
+            return c.json(errorBody('UPLOAD_FAILED', 'Failed to deliver file'), 500);
+        }
+        return new Response(toWebStream(stream), {
+            status: 200,
+            headers: {
+                'Content-Type': attachment.fileFormat,
+                'Content-Disposition': `inline; filename*=UTF-8''${encodeURIComponent(attachment.originalName || attachment.fileName)}`,
+            },
+        });
+    });
+    return app;
+};
+exports.registerAttachmentStreamRoutes = registerAttachmentStreamRoutes;
+//# sourceMappingURL=attachment-stream.js.map

package/dist/hono/handlers/attachment-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-stream.js","sourceRoot":"","sources":["../../../src/hono/handlers/attachment-stream.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,sDAAyB;AACzB,0DAA6B;AAC7B,6CAAuC;AAGvC,kDAA0B;AAI1B,yEAAiD;AACjD,8DAA4E;AAG5E,6CAAmD;AAEnD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,uCAAuC,CAAC,CAAC;AAE7D,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAEtC,MAAM,eAAe,GAA2B;IAC9C,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC1C,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC3E,CAAC,CAAC;AAIF,MAAM,SAAS,GAAG,CAAC,IAAqB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC;IAC7D,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;CACzB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAW,EAAE;IACnD,MAAM,CAAC,GAAG,GAAgF,CAAC;IAC3F,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,KAAK,GAAG,CAAC;AAC9F,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,CAAC,MAAgB,EAAkB,EAAE;IACvD,OAAO,sBAAQ,CAAC,KAAK,CAAC,MAAM,CAAmB,CAAC;AAClD,CAAC,CAAC;AAEK,MAAM,8BAA8B,GAAG,CAAC,GAAmC,EAAE,KAAY,EAAE,EAAE;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,CAAC;IAEzC,gFAAgF;IAChF,MAAM,oBAAoB,GAAG,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAExF;;;;;;OAMG;IACH,MAAM,wBAAwB,GAAG,GAAa,EAAE;QAC9C,MAAM,MAAM,GAAG,iBAAE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QACzD,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACvC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;SACzC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,qEAAqE;IACrE,qEAAqE;IACrE,iEAAiE;IACjE,oEAAoE;IACpE,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC,CAAC;IAElD,iEAAiE;IACjE,kCAAkC;IAClC,iEAAiE;IACjE,kEAAkE;IAClE,+DAA+D;IAC/D,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,4CAA4C,CAAC,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QAED,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAwB,CAAC;YACnC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACvC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;SACnD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,uBAAuB;IACvB,iEAAiE;IACjE,8DAA8D;IAC9D,wDAAwD;IACxD,oEAAoE;IACpE,iEAAiE;IACjE,4DAA4D;IAC5D,6DAA6D;IAC7D,qBAAqB;IACrB,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5G,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAA,iCAAe,EAAC,EAAE,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,UAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,UAAU,GAAG,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAA8B,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,wBAAwB,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,+DAA+D;YAC/D,qDAAqD;YACrD,2DAA2D;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,8BAA8B;YAC9B,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,wBAAwB,EAAE,CAAC;YACpC,CAAC;YACD,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;YACvC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,UAAU,CAAC,UAAU;gBACrC,qBAAqB,EAAE,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE;aACxH;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AA3IW,QAAA,8BAA8B,kCA2IzC"}