@crowi/api 2.0.0-alpha.0

package/dist/hono/handlers/attachment.js

@@ -0,0 +1,566 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAttachmentRoutes = void 0;
+/**
+ * RFC-0006 Phase 4 Batch 6 — `attachment` resource Hono port.
+ *
+ * Replaces `packages/api/src/routes/ts-rest/attachment.ts`. Six
+ * endpoints, plus the two raw-stream Express routes (`GET
+ * /attachments/:id` / `GET /attachments/by-key/:key`) which stay on
+ * the Express bridge until Phase 6 because they pipe `Readable` bytes
+ * and Hono's typed-response API does not express
+ * streaming-without-buffer cleanly:
+ *
+ *   GET    /pages/:pageId/attachments        — list (page-scoped)
+ *   POST   /pages/:pageId/attachments        — add (multipart)
+ *   GET    /pages/:pageId/attachments/usage  — usage breakdown
+ *   GET    /attachments/:id/meta             — single attachment meta
+ *   POST   /attachments/upload               — editor paste/D&D upload (multipart)
+ *   DELETE /attachments/:id                  — remove
+ *
+ * Auth split:
+ *  - `/pages/*` (list / add / usage) rides on the `revision` handler's
+ *    broad `createJwtAuth(crowi)` apply.
+ *  - `/attachments/*` (meta / upload / remove) is OUTSIDE that prefix
+ *    so we install jwtAuth on `/attachments/*` ourselves.
+ *
+ * Multipart (RFC-0006 discovery doc §5):
+ *  - `addAttachment` + `uploadAttachment` use Hono-native
+ *    `c.req.parseBody()`. multer is gone from this resource.
+ *  - `uploadAttachment` reads `c.req.header('content-length')` BEFORE
+ *    `parseBody()` and 413's a body that exceeds the larger D&D ceiling
+ *    (50 MB) — this preserves the multer `LIMIT_FILE_SIZE` early-reject
+ *    posture without buffering the body. The per-intent paste cap
+ *    (10 MB) is enforced AFTER parse against the actual file size.
+ *
+ * Rate limiting:
+ *  - `uploadAttachment` only: 20 req/min/user, name
+ *    `'attachment-upload'`. 429 envelope:
+ *    `{ error: 'rate_limited', message, details: { retryAfterSeconds } }`
+ *    (`UploadAttachmentErrorSchema`). Applied AFTER jwtAuth on
+ *    `/attachments/upload`.
+ */
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_fs_2 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const node_stream_1 = require("node:stream");
+const promises_1 = require("node:stream/promises");
+const api_contract_1 = require("@crowi/api-contract");
+const debug_1 = __importDefault(require("debug"));
+const mongoose_1 = require("mongoose");
+const fileUploader_1 = __importDefault(require("../../util/fileUploader"));
+const rate_limit_1 = require("../../util/rate-limit");
+const ts_rest_helpers_1 = require("../../util/ts-rest-helpers");
+const auth_1 = require("../middleware/auth");
+const rate_limit_2 = require("../middleware/rate-limit");
+const require_scope_1 = require("../middleware/require-scope");
+const errors_1 = require("./_helpers/errors");
+const debug = (0, debug_1.default)('crowi:hono:handlers:attachment');
+/**
+ * RFC-0004 Phase 6/7 — intent-aware limits for the editor upload.
+ *   - `paste`: 10 MB, images only (a clipboard blob is always an image).
+ *   - `dnd`  : 50 MB, images + documents (`.pdf`, `.txt`, `.md`, `.csv`)
+ *              + archives (`.zip`).
+ *
+ * The `Content-Length` precheck uses the larger ceiling (50 MB) so a
+ * legitimate D&D upload is never 413'd before parse. The per-intent
+ * cap (paste 10 MB) is then enforced post-parse against the actual
+ * file size.
+ */
+const PASTE_MAX_BYTES = 10 * 1024 * 1024;
+const DND_MAX_BYTES = 50 * 1024 * 1024;
+const UPLOAD_PARSE_MAX_BYTES = DND_MAX_BYTES;
+const PASTE_ALLOWED_MIME = new Set(api_contract_1.IMAGE_UPLOAD_MIME);
+const DND_ALLOWED_MIME = new Set([...api_contract_1.IMAGE_UPLOAD_MIME, ...api_contract_1.DND_EXTRA_UPLOAD_MIME]);
+const limitsForIntent = (intent) => intent === 'dnd' ? { maxBytes: DND_MAX_BYTES, allowedMime: DND_ALLOWED_MIME } : { maxBytes: PASTE_MAX_BYTES, allowedMime: PASTE_ALLOWED_MIME };
+/** Per-user budget for the editor upload endpoint — RFC §"Attachment upload endpoint". */
+const UPLOAD_RATE_LIMIT = 20;
+const UPLOAD_RATE_WINDOW_MS = 60_000;
+const errorBody = (code, message) => ({ error: { code, message } });
+/**
+ * Lowercase RFC-0004 error envelope for `POST /attachments/upload`.
+ * Kept separate from `errorBody` because the upload endpoint's codes
+ * are lowercase + RFC-pinned (the editor maps each to a specific toast).
+ */
+const uploadErrorBody = (error, message, details) => ({
+    error,
+    message,
+    ...(details ? { details } : {}),
+});
+const INVALID_PAGE_ID_FOR_ATTACHMENT_BODY = errorBody('INVALID_PAGE_ID', 'Invalid pageId');
+const PAGE_NOT_FOUND_FOR_ATTACHMENT_BODY = errorBody('PAGE_NOT_FOUND', 'Page not found');
+const ATTACHMENT_NOT_FOUND_BODY = errorBody('ATTACHMENT_NOT_FOUND', 'Attachment not found');
+/**
+ * Outer ceiling for `POST /pages/:pageId/attachments`. The legacy multer
+ * disk-storage didn't bound the size, but Hono's `parseBody()` buffers
+ * the entire body in memory, so we need a hard cap to avoid OOM.
+ */
+const ADD_ATTACHMENT_MAX_BYTES = 100 * 1024 * 1024;
+/**
+ * RFC-0004 Phase 7 — extract attachment ObjectId hex strings referenced
+ * by a revision body. Matches the current `/api/v2/attachments/<id>`
+ * (the `fileUrl` virtual / stream route) and the legacy `/files/<id>`
+ * form still present in bodies saved before the migration.
+ */
+const ATTACHMENT_URI_RE = /(?:\/api\/v2\/attachments\/|\/files\/)([0-9a-f]{24})/gi;
+const collectReferencedAttachmentIds = (body) => {
+    const ids = new Set();
+    for (const match of body.matchAll(ATTACHMENT_URI_RE)) {
+        ids.add(match[1].toLowerCase());
+    }
+    return ids;
+};
+/**
+ * Convert an AttachmentDocument (with optional populated `creator`) into
+ * the wire response. `inUse` (Phase 7) is supplied by the caller.
+ */
+const attachmentToResponse = (attachment, inUse) => {
+    const obj = attachment.toJSON();
+    const creator = obj.creator;
+    const creatorPublic = (0, ts_rest_helpers_1.isPopulatedUser)(creator)
+        ? (0, ts_rest_helpers_1.toUserPublic)(creator)
+        : // Fallback when creator is unpopulated (shouldn't happen on our
+            // paths because list / add both populate, but the schema requires
+            // the public shape so synthesize the minimum surface).
+            (0, ts_rest_helpers_1.toUserPublic)({ _id: creator ? (0, ts_rest_helpers_1.toStringId)(creator) : '' });
+    return {
+        _id: (0, ts_rest_helpers_1.toStringId)(obj._id),
+        page: (0, ts_rest_helpers_1.toStringId)(obj.page),
+        creator: creatorPublic,
+        filePath: obj.filePath,
+        fileName: obj.fileName,
+        originalName: obj.originalName ?? '',
+        fileFormat: obj.fileFormat,
+        fileSize: obj.fileSize,
+        createdAt: (0, ts_rest_helpers_1.toISOStringOrNull)(obj.createdAt) ?? new Date(0).toISOString(),
+        url: obj.fileUrl,
+        inUse,
+    };
+};
+const attachmentToMetaResponse = (attachment) => {
+    const { inUse: _inUse, ...meta } = attachmentToResponse(attachment, false);
+    return meta;
+};
+/**
+ * Drain a Web `File` to a temp file on disk. The existing `FileUploader`
+ * pipeline (streams from disk) is left unchanged downstream so we mirror
+ * multer's "tmp path + mimetype" shape exactly. Streams the body directly
+ * to disk to avoid buffering the full file in memory twice
+ * (`arrayBuffer()` + `Buffer.from(...)`).
+ */
+const persistUploadToTmp = async (file, tmpDir) => {
+    (0, node_fs_2.mkdirSync)(tmpDir, { recursive: true });
+    const randomId = `${Date.now()}-${(0, node_crypto_1.randomBytes)(8).toString('hex')}`;
+    const tmpPath = node_path_1.default.join(tmpDir, randomId);
+    await (0, promises_1.pipeline)(node_stream_1.Readable.fromWeb(file.stream()), node_fs_1.default.createWriteStream(tmpPath));
+    return {
+        tmpPath,
+        mimetype: file.type || 'application/octet-stream',
+        originalname: file.name || randomId,
+        size: file.size,
+    };
+};
+const cleanupTmp = (tmpPath) => {
+    if (!tmpPath)
+        return;
+    node_fs_1.default.unlink(tmpPath, (err) => {
+        if (err)
+            debug('failed to unlink tmp file', err);
+    });
+};
+/** Resolve the first `File` instance under field `name` from parseBody. */
+const pickFile = (parsed, name) => {
+    const value = parsed[name];
+    if (value instanceof File)
+        return value;
+    if (Array.isArray(value)) {
+        return value.find((entry) => entry instanceof File);
+    }
+    return undefined;
+};
+const pickString = (parsed, name) => {
+    const value = parsed[name];
+    if (typeof value === 'string')
+        return value;
+    if (Array.isArray(value)) {
+        return value.find((entry) => typeof entry === 'string');
+    }
+    return undefined;
+};
+const registerAttachmentRoutes = (app, crowi) => {
+    const Attachment = crowi.model('Attachment');
+    const Page = crowi.model('Page');
+    const fileUploader = (0, fileUploader_1.default)(crowi);
+    // One shared upload limiter per process.
+    const uploadLimiter = (0, rate_limit_1.createRateLimiter)({
+        name: 'attachment-upload',
+        limit: UPLOAD_RATE_LIMIT,
+        windowMs: UPLOAD_RATE_WINDOW_MS,
+        redisClient: crowi.redis ?? null,
+    });
+    const uploadRateLimitMiddleware = (0, rate_limit_2.withRateLimit)({
+        limiter: uploadLimiter,
+        wireShape: 'attachment-upload-envelope',
+        message: (retry) => `Upload limit reached. Try again in ${retry} seconds.`,
+    });
+    // `/attachments/*` is OUTSIDE the revision-owned `/pages/*` apply.
+    // Install jwtAuth broadly here; the rate limit is per-endpoint
+    // (only `uploadAttachment` is throttled).
+    app.use('/attachments/*', (0, auth_1.createJwtAuth)(crowi));
+    app.use('/attachments/upload', uploadRateLimitMiddleware);
+    // RFC-0010 — attachment scopes.
+    (0, require_scope_1.applyScope)(app, api_contract_1.getAttachmentUsageRoute, 'attachments:read');
+    (0, require_scope_1.applyScope)(app, api_contract_1.listAttachmentsRoute, 'attachments:read');
+    (0, require_scope_1.applyScope)(app, api_contract_1.getAttachmentMetaRoute, 'attachments:read');
+    (0, require_scope_1.applyScope)(app, api_contract_1.addAttachmentRoute, 'attachments:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.uploadAttachmentRoute, 'attachments:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.removeAttachmentRoute, 'attachments:write');
+    return (app
+        // --------------------------------------------------------------
+        // GET /pages/:pageId/attachments/usage   (registered first so the
+        // literal `/usage` suffix wins over `/pages/:pageId/attachments`)
+        // --------------------------------------------------------------
+        .openapi(api_contract_1.getAttachmentUsageRoute, async (c) => {
+        const user = c.get('user');
+        const { pageId } = c.req.valid('param');
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, pageId, user);
+        if ('error' in grant) {
+            if (grant.error.status === 400)
+                return c.json(INVALID_PAGE_ID_FOR_ATTACHMENT_BODY, 400);
+            return c.json(PAGE_NOT_FOUND_FOR_ATTACHMENT_BODY, 404);
+        }
+        const page = grant.page;
+        try {
+            const Revision = crowi.model('Revision');
+            // All revisions, newest first. `renderedAst` is deliberately
+            // excluded — heavy and the scan only needs raw body.
+            const revisions = (await Revision.find({ path: page.path }).select('_id body createdAt author').sort({ createdAt: -1 }).populate('author'));
+            // `page.revision` may be a bare ObjectId or a populated
+            // Revision document (findPageById populates it). Normalise to
+            // the hex id.
+            const rawRevision = page.revision;
+            const latestRevisionId = rawRevision == null
+                ? null
+                : typeof rawRevision === 'object' && rawRevision !== null && '_id' in rawRevision
+                    ? (0, ts_rest_helpers_1.toStringId)(rawRevision._id)
+                    : (0, ts_rest_helpers_1.toStringId)(rawRevision);
+            let latestIds = new Set();
+            const referencedByPast = new Map();
+            for (const revision of revisions) {
+                const ids = revision.body ? collectReferencedAttachmentIds(revision.body) : new Set();
+                const isLatest = latestRevisionId !== null && revision._id.toString() === latestRevisionId;
+                if (isLatest) {
+                    latestIds = ids;
+                    continue;
+                }
+                for (const id of ids) {
+                    const list = referencedByPast.get(id) ?? [];
+                    list.push({
+                        revisionId: revision._id.toString(),
+                        createdAt: (0, ts_rest_helpers_1.toISOStringOrNull)(revision.createdAt) ?? new Date(0).toISOString(),
+                        author: revision.author ?? null,
+                    });
+                    referencedByPast.set(id, list);
+                }
+            }
+            const attachments = (await Attachment.getListByPageId(new mongoose_1.Types.ObjectId(pageId)));
+            const latest = [];
+            const past = [];
+            for (const att of attachments) {
+                const attId = att._id.toString().toLowerCase();
+                if (latestIds.has(attId)) {
+                    latest.push(attachmentToResponse(att, true));
+                    continue;
+                }
+                const refs = referencedByPast.get(attId) ?? [];
+                past.push({
+                    attachment: attachmentToResponse(att, false),
+                    referencingRevisions: refs.map((r) => ({
+                        revisionId: r.revisionId,
+                        createdAt: r.createdAt,
+                        author: (0, ts_rest_helpers_1.isPopulatedUser)(r.author)
+                            ? (0, ts_rest_helpers_1.toUserPublic)(r.author)
+                            : (0, ts_rest_helpers_1.toUserPublic)({ _id: r.author ? (0, ts_rest_helpers_1.toStringId)(r.author) : '' }),
+                    })),
+                });
+            }
+            return c.json({ pagePath: page.path, latest, past }, 200);
+        }
+        catch (err) {
+            debug('getAttachmentUsage error', err);
+            return c.json(errors_1.INTERNAL_ERROR_BODY, 500);
+        }
+    })
+        // --------------------------------------------------------------
+        // GET /pages/:pageId/attachments
+        // --------------------------------------------------------------
+        .openapi(api_contract_1.listAttachmentsRoute, async (c) => {
+        const user = c.get('user');
+        const { pageId } = c.req.valid('param');
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, pageId, user);
+        if ('error' in grant) {
+            if (grant.error.status === 400)
+                return c.json(INVALID_PAGE_ID_FOR_ATTACHMENT_BODY, 400);
+            return c.json(PAGE_NOT_FOUND_FOR_ATTACHMENT_BODY, 404);
+        }
+        try {
+            const attachments = (await Attachment.getListByPageId(new mongoose_1.Types.ObjectId(pageId)));
+            // Phase 7 — derive `inUse` from the page's latest revision
+            // body. The page is already loaded via `loadGrantedPage` (no
+            // revisionId → `grant.page.revision` is the latest). Read just
+            // the body and scan it once. Missing / empty revision falls
+            // back to `inUse: true` for every attachment rather than
+            // hiding files while reference state is undetermined.
+            const revisionId = grant.page.revision;
+            let referencedIds = null;
+            if (revisionId) {
+                const Revision = crowi.model('Revision');
+                const revision = (await Revision.findById(revisionId).select('body'));
+                if (revision?.body) {
+                    referencedIds = collectReferencedAttachmentIds(revision.body);
+                }
+            }
+            return c.json({
+                attachments: attachments.map((a) => attachmentToResponse(a, referencedIds === null ? true : referencedIds.has(a._id.toString().toLowerCase()))),
+            }, 200);
+        }
+        catch (err) {
+            debug('listAttachments error', err);
+            return c.json(errors_1.INTERNAL_ERROR_BODY, 500);
+        }
+    })
+        // --------------------------------------------------------------
+        // POST /pages/:pageId/attachments  (multipart/form-data)
+        // --------------------------------------------------------------
+        .openapi(api_contract_1.addAttachmentRoute, async (c) => {
+        const user = c.get('user');
+        const { pageId } = c.req.valid('param');
+        // Hard ceiling on the multipart body before `parseBody()` buffers
+        // it. Mirrors the editor-upload precheck — without it, a logged-in
+        // user posting a 2 GB body would OOM the api process.
+        const contentLengthHeader = c.req.header('content-length');
+        if (contentLengthHeader && Number.parseInt(contentLengthHeader, 10) > ADD_ATTACHMENT_MAX_BYTES) {
+            return c.json(errorBody('FILE_MISSING', 'Request body exceeds 100 MB'), 413);
+        }
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, pageId, user);
+        if ('error' in grant) {
+            if (grant.error.status === 400)
+                return c.json(INVALID_PAGE_ID_FOR_ATTACHMENT_BODY, 400);
+            return c.json(PAGE_NOT_FOUND_FOR_ATTACHMENT_BODY, 404);
+        }
+        const pageData = grant.page;
+        let parsed;
+        try {
+            parsed = await c.req.parseBody();
+        }
+        catch (err) {
+            debug('addAttachment parseBody error', err);
+            return c.json(errorBody('FILE_MISSING', 'File upload error'), 400);
+        }
+        const file = pickFile(parsed, 'file');
+        if (!file) {
+            return c.json(errorBody('FILE_MISSING', 'No file provided'), 400);
+        }
+        let tmpPath = null;
+        try {
+            const persisted = await persistUploadToTmp(file, crowi.tmpDir);
+            tmpPath = persisted.tmpPath;
+            const originalName = persisted.originalname;
+            // Mirror multer's `filename + originalname` shape so
+            // `createAttachmentFilePath` infers the same key as before.
+            const fileName = node_path_1.default.basename(persisted.tmpPath) + persisted.originalname;
+            const fileType = persisted.mimetype;
+            const fileSize = persisted.size;
+            const filePath = Attachment.createAttachmentFilePath(pageData._id, fileName, fileType);
+            const tmpFileStream = node_fs_1.default.createReadStream(persisted.tmpPath, { flags: 'r', autoClose: true });
+            await fileUploader.uploadFile(filePath, fileType, tmpFileStream, {});
+            const created = (await Attachment.create({
+                page: pageData._id,
+                creator: user._id,
+                filePath,
+                originalName,
+                fileName,
+                fileFormat: fileType,
+                fileSize,
+            }));
+            await created.populate('creator');
+            cleanupTmp(tmpPath);
+            tmpPath = null;
+            // A freshly uploaded file is not yet referenced in the body,
+            // so it starts `inUse: false`. The next `listAttachments`
+            // recomputes from the latest revision.
+            const responseBody = attachmentToResponse(created, false);
+            return c.json({ attachment: responseBody, url: responseBody.url }, 200);
+        }
+        catch (err) {
+            debug('addAttachment error', err);
+            cleanupTmp(tmpPath);
+            return c.json(errorBody('UPLOAD_FAILED', 'Failed to save attachment'), 500);
+        }
+    })
+        // --------------------------------------------------------------
+        // POST /attachments/upload  (multipart/form-data)
+        // --------------------------------------------------------------
+        .openapi(api_contract_1.uploadAttachmentRoute, async (c) => {
+        const user = c.get('user');
+        // Content-Length precheck: reject obvious over-cap bodies
+        // BEFORE invoking `parseBody()`. This reproduces multer's
+        // `LIMIT_FILE_SIZE` early-reject posture without buffering.
+        // We use the larger D&D ceiling (50 MB) here — the per-intent
+        // paste cap (10 MB) is enforced post-parse against the actual
+        // file size (the multipart envelope overhead would otherwise
+        // make a 9.99 MB paste 413 prematurely).
+        const contentLengthHeader = c.req.header('content-length');
+        if (contentLengthHeader) {
+            const parsedLen = Number.parseInt(contentLengthHeader, 10);
+            if (Number.isFinite(parsedLen) && parsedLen > UPLOAD_PARSE_MAX_BYTES) {
+                return c.json(uploadErrorBody('too_large', 'The file is too large to upload.', { maxBytes: UPLOAD_PARSE_MAX_BYTES }), 413);
+            }
+        }
+        let parsed;
+        try {
+            parsed = await c.req.parseBody();
+        }
+        catch (err) {
+            debug('uploadAttachment parseBody error', err);
+            return c.json(uploadErrorBody('disallowed_type', 'File upload error.'), 400);
+        }
+        const file = pickFile(parsed, 'file');
+        const pageId = pickString(parsed, 'pageId') ?? '';
+        const intentField = pickString(parsed, 'intent');
+        const intent = intentField === 'paste' || intentField === 'dnd' ? intentField : null;
+        if (!file) {
+            return c.json(uploadErrorBody('disallowed_type', 'No file provided.'), 400);
+        }
+        if (!(0, ts_rest_helpers_1.isValidObjectId)(pageId)) {
+            return c.json(uploadErrorBody('no_permission', 'A valid pageId is required.'), 400);
+        }
+        if (!intent) {
+            return c.json(uploadErrorBody('disallowed_type', "The intent field must be 'paste' or 'dnd'."), 400);
+        }
+        // Intent-aware size + MIME enforcement (paste is held to 10 MB
+        // even when the wire body fits the 50 MB D&D ceiling).
+        const { maxBytes, allowedMime } = limitsForIntent(intent);
+        if (file.size > maxBytes) {
+            return c.json(uploadErrorBody('too_large', 'The file is too large to upload.', { maxBytes }), 413);
+        }
+        const fileType = file.type || 'application/octet-stream';
+        if (!allowedMime.has(fileType)) {
+            return c.json(uploadErrorBody('disallowed_type', `Files of type ${fileType} cannot be uploaded.`, { mimeType: fileType }), 415);
+        }
+        // Permission: a caller who can view the page can attach to it
+        // (same posture as `addAttachment`). Grant failure → 403.
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, pageId, user);
+        if ('error' in grant) {
+            return c.json(uploadErrorBody('no_permission', 'You do not have permission to attach files to this page.'), 403);
+        }
+        const pageData = grant.page;
+        let tmpPath = null;
+        try {
+            const persisted = await persistUploadToTmp(file, crowi.tmpDir);
+            tmpPath = persisted.tmpPath;
+            const originalName = persisted.originalname;
+            const fileName = node_path_1.default.basename(persisted.tmpPath) + persisted.originalname;
+            const fileSize = persisted.size;
+            const filePath = Attachment.createAttachmentFilePath(pageData._id, fileName, fileType);
+            const tmpFileStream = node_fs_1.default.createReadStream(persisted.tmpPath, { flags: 'r', autoClose: true });
+            await fileUploader.uploadFile(filePath, fileType, tmpFileStream, {});
+            const created = (await Attachment.create({
+                page: pageData._id,
+                creator: user._id,
+                filePath,
+                originalName,
+                fileName,
+                fileFormat: fileType,
+                fileSize,
+            }));
+            cleanupTmp(tmpPath);
+            tmpPath = null;
+            debug('editor upload ok', { intent, pageId, attachmentId: created._id.toString() });
+            return c.json({
+                url: created.fileUrl,
+                filename: originalName,
+                mimeType: fileType,
+                sizeBytes: fileSize,
+            }, 200);
+        }
+        catch (err) {
+            debug('editor upload error', err);
+            cleanupTmp(tmpPath);
+            return c.json(errors_1.INTERNAL_ERROR_BODY, 500);
+        }
+    })
+        // --------------------------------------------------------------
+        // GET /attachments/:id/meta
+        // --------------------------------------------------------------
+        .openapi(api_contract_1.getAttachmentMetaRoute, async (c) => {
+        const user = c.get('user');
+        const { id } = c.req.valid('param');
+        if (!(0, ts_rest_helpers_1.isValidObjectId)(id)) {
+            return c.json(errorBody('INVALID_ATTACHMENT_ID', 'Invalid attachment id'), 400);
+        }
+        let attachment;
+        try {
+            attachment = (await Attachment.findById(id).populate('creator'));
+        }
+        catch (err) {
+            debug('getAttachmentMeta lookup error', err);
+            return c.json(errors_1.INTERNAL_ERROR_BODY, 500);
+        }
+        if (!attachment) {
+            return c.json(ATTACHMENT_NOT_FOUND_BODY, 404);
+        }
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, attachment.page.toString(), user);
+        if ('error' in grant) {
+            // Collapse INVALID_PAGE_ID + PAGE_NOT_FOUND alike to 404 —
+            // the page id comes from the persisted attachment, and a
+            // hidden page must not be distinguishable from a missing one.
+            return c.json(ATTACHMENT_NOT_FOUND_BODY, 404);
+        }
+        return c.json(attachmentToMetaResponse(attachment), 200);
+    })
+        // --------------------------------------------------------------
+        // DELETE /attachments/:id
+        // --------------------------------------------------------------
+        //
+        // Wiki policy: any authenticated user who can view the owning
+        // page may delete an attachment. The caller still has to pass
+        // the page grant check (so an attachment on a page they cannot
+        // see stays a 404).
+        .openapi(api_contract_1.removeAttachmentRoute, async (c) => {
+        const user = c.get('user');
+        const { id } = c.req.valid('param');
+        if (!(0, ts_rest_helpers_1.isValidObjectId)(id)) {
+            return c.json(errorBody('INVALID_ATTACHMENT_ID', 'Invalid attachment id'), 400);
+        }
+        let attachment;
+        try {
+            attachment = (await Attachment.findById(id));
+        }
+        catch (err) {
+            debug('removeAttachment lookup error', err);
+            return c.json(errorBody('REMOVE_FAILED', 'Failed to load attachment'), 500);
+        }
+        if (!attachment) {
+            return c.json(ATTACHMENT_NOT_FOUND_BODY, 404);
+        }
+        const grant = await (0, ts_rest_helpers_1.loadGrantedPage)(Page, attachment.page.toString(), user);
+        if ('error' in grant) {
+            return c.json(ATTACHMENT_NOT_FOUND_BODY, 404);
+        }
+        try {
+            await Attachment.removeAttachment(attachment);
+            return c.json({ success: true }, 200);
+        }
+        catch (err) {
+            debug('removeAttachment error', err);
+            return c.json(errorBody('REMOVE_FAILED', 'Failed to delete attachment'), 500);
+        }
+    }));
+};
+exports.registerAttachmentRoutes = registerAttachmentRoutes;
+//# sourceMappingURL=attachment.js.map

package/dist/hono/handlers/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../../src/hono/handlers/attachment.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,6CAA0C;AAC1C,sDAAyB;AACzB,qCAAoC;AACpC,0DAA6B;AAC7B,6CAAuC;AACvC,mDAAgD;AAEhD,sDAa6B;AAE7B,kDAA0B;AAC1B,uCAAiC;AAKjC,yEAAiD;AACjD,oDAAwD;AACxD,8DAQkC;AAGlC,6CAAmD;AACnD,yDAAyD;AACzD,+DAAyD;AAEzD,8CAAwD;AAExD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,gCAAgC,CAAC,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAE7C,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,gCAAiB,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,gCAAiB,EAAE,GAAG,oCAAqB,CAAC,CAAC,CAAC;AAE3F,MAAM,eAAe,GAAG,CAAC,MAAuB,EAAkD,EAAE,CAClG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AAEjJ,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAcrC,MAAM,SAAS,GAAG,CAAC,IAAyB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,KAAgC,EAAE,OAAe,EAAE,OAAiC,EAAE,EAAE,CAAC,CAAC;IACjH,KAAK;IACL,OAAO;IACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,mCAAmC,GAAG,SAAS,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;AAC3F,MAAM,kCAAkC,GAAG,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AACzF,MAAM,yBAAyB,GAAG,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;AAE5F;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,wDAAwD,CAAC;AAEnF,MAAM,8BAA8B,GAAG,CAAC,IAAY,EAAe,EAAE;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,oBAAoB,GAAG,CAAC,UAA8B,EAAE,KAAc,EAAoB,EAAE;IAChG,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAW5B,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAA,iCAAe,EAAC,OAAO,CAAC;QAC5C,CAAC,CAAC,IAAA,8BAAY,EAAC,OAAO,CAAC;QACvB,CAAC,CAAC,gEAAgE;YAChE,kEAAkE;YAClE,uDAAuD;YACvD,IAAA,8BAAY,EAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,IAAA,4BAAU,EAAC,OAAkC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzF,OAAO;QACL,GAAG,EAAE,IAAA,4BAAU,EAAC,GAAG,CAAC,GAA8B,CAAC;QACnD,IAAI,EAAE,IAAA,4BAAU,EAAC,GAAG,CAAC,IAA+B,CAAC;QACrD,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;QACpC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAA,mCAAiB,EAAC,GAAG,CAAC,SAA6B,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC5F,GAAG,EAAE,GAAG,CAAC,OAAO;QAChB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,UAA8B,EAAkB,EAAE;IAClF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAU,EAAE,MAAc,EAAsF,EAAE;IAClJ,IAAA,mBAAS,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE5C,MAAM,IAAA,mBAAQ,EAAC,sBAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAA4C,CAAC,EAAE,iBAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzH,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,0BAA0B;QACjD,YAAY,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,OAAsB,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,iBAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,GAAG;YAAE,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,CAAC,MAAyD,EAAE,IAAY,EAAoB,EAAE;IAC7G,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAiB,EAAE,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAAyD,EAAE,IAAY,EAAsB,EAAE;IACjH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEK,MAAM,wBAAwB,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE;IACzG,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,CAAC;IAEzC,yCAAyC;IACzC,MAAM,aAAa,GAAG,IAAA,8BAAiB,EAAC;QACtC,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,qBAAqB;QAC/B,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;KACjC,CAAC,CAAC;IAEH,MAAM,yBAAyB,GAAG,IAAA,0BAAa,EAAC;QAC9C,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,4BAA4B;QACvC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,sCAAsC,KAAK,WAAW;KAC3E,CAAC,CAAC;IAEH,mEAAmE;IACnE,+DAA+D;IAC/D,0CAA0C;IAC1C,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAC;IAE1D,gCAAgC;IAChC,IAAA,0BAAU,EAAC,GAAG,EAAE,sCAAuB,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAA,0BAAU,EAAC,GAAG,EAAE,mCAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAA,0BAAU,EAAC,GAAG,EAAE,qCAAsB,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAA,0BAAU,EAAC,GAAG,EAAE,iCAAkB,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAA,0BAAU,EAAC,GAAG,EAAE,oCAAqB,EAAE,mBAAmB,CAAC,CAAC;IAC5D,IAAA,0BAAU,EAAC,GAAG,EAAE,oCAAqB,EAAE,mBAAmB,CAAC,CAAC;IAE5D,OAAO,CACL,GAAG;QACD,iEAAiE;QACjE,kEAAkE;QAClE,kEAAkE;QAClE,iEAAiE;SAChE,OAAO,CAAC,sCAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAEzC,6DAA6D;YAC7D,qDAAqD;YACrD,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAKxI,CAAC;YAEH,wDAAwD;YACxD,8DAA8D;YAC9D,cAAc;YACd,MAAM,WAAW,GAAG,IAAI,CAAC,QAAmB,CAAC;YAC7C,MAAM,gBAAgB,GACpB,WAAW,IAAI,IAAI;gBACjB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,IAAI,WAAW;oBAC/E,CAAC,CAAC,IAAA,4BAAU,EAAE,WAAgD,CAAC,GAAG,CAAC;oBACnE,CAAC,CAAC,IAAA,4BAAU,EAAC,WAAsC,CAAC,CAAC;YAE3D,IAAI,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAC;YACvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;YAEJ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;gBAC9F,MAAM,QAAQ,GAAG,gBAAgB,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,gBAAgB,CAAC;gBAC3F,IAAI,QAAQ,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBACrB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,IAAI,CAAC;wBACR,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;wBACnC,SAAS,EAAE,IAAA,mCAAiB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;wBAC7E,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;qBAChC,CAAC,CAAC;oBACH,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,IAAI,gBAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAyB,CAAC;YAE3G,MAAM,MAAM,GAAuB,EAAE,CAAC;YACtC,MAAM,IAAI,GAGL,EAAE,CAAC;YAER,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC,IAAI,CAAC;oBACR,UAAU,EAAE,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC;oBAC5C,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrC,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,MAAM,EAAE,IAAA,iCAAe,EAAC,CAAC,CAAC,MAAM,CAAC;4BAC/B,CAAC,CAAC,IAAA,8BAAY,EAAC,CAAC,CAAC,MAAM,CAAC;4BACxB,CAAC,CAAC,IAAA,8BAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,4BAAU,EAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;qBAC3F,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;QACF,iEAAiE;QACjE,iCAAiC;QACjC,iEAAiE;SAChE,OAAO,CAAC,mCAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,IAAI,gBAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAyB,CAAC;YAE3G,2DAA2D;YAC3D,6DAA6D;YAC7D,+DAA+D;YAC/D,4DAA4D;YAC5D,yDAAyD;YACzD,sDAAsD;YACtD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvC,IAAI,aAAa,GAAuB,IAAI,CAAC;YAC7C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAA6B,CAAC;gBAClG,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;oBACnB,aAAa,GAAG,8BAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;aAChJ,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;QACF,iEAAiE;QACjE,yDAAyD;QACzD,iEAAiE;SAChE,OAAO,CAAC,iCAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExC,kEAAkE;QAClE,mEAAmE;QACnE,sDAAsD;QACtD,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,mBAAmB,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,GAAG,wBAAwB,EAAE,CAAC;YAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAiB,KAAK,CAAC,IAAI,CAAC;QAE1C,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAE5B,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YAC5C,qDAAqD;YACrD,4DAA4D;YAC5D,MAAM,QAAQ,GAAG,mBAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;YAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;YACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;YAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC,wBAAwB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvF,MAAM,aAAa,GAAG,iBAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9F,MAAM,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAErE,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE,QAAQ,CAAC,GAAG;gBAClB,OAAO,EAAE,IAAI,CAAC,GAAG;gBACjB,QAAQ;gBACR,YAAY;gBACZ,QAAQ;gBACR,UAAU,EAAE,QAAQ;gBACpB,QAAQ;aACT,CAAC,CAAuB,CAAC;YAE1B,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAElC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;YAEf,6DAA6D;YAC7D,0DAA0D;YAC1D,uCAAuC;YACvC,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAClC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC;QACF,iEAAiE;QACjE,kDAAkD;QAClD,iEAAiE;SAChE,OAAO,CAAC,oCAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,0DAA0D;QAC1D,0DAA0D;QAC1D,4DAA4D;QAC5D,8DAA8D;QAC9D,8DAA8D;QAC9D,6DAA6D;QAC7D,yCAAyC;QACzC,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,sBAAsB,EAAE,CAAC;gBACrE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,kCAAkC,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QAED,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAA2B,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7G,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAA,iCAAe,EAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,EAAE,GAAG,CAAC,CAAC;QACvG,CAAC;QAED,+DAA+D;QAC/D,uDAAuD;QACvD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,kCAAkC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;QACzD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,iBAAiB,QAAQ,sBAAsB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAClI,CAAC;QAED,8DAA8D;QAC9D,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,0DAA0D,CAAC,EAAE,GAAG,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,QAAQ,GAAiB,KAAK,CAAC,IAAI,CAAC;QAE1C,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAE5B,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YAC5C,MAAM,QAAQ,GAAG,mBAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;YAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;YAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC,wBAAwB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvF,MAAM,aAAa,GAAG,iBAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9F,MAAM,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAErE,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE,QAAQ,CAAC,GAAG;gBAClB,OAAO,EAAE,IAAI,CAAC,GAAG;gBACjB,QAAQ;gBACR,YAAY;gBACZ,QAAQ;gBACR,UAAU,EAAE,QAAQ;gBACpB,QAAQ;aACT,CAAC,CAAuB,CAAC;YAE1B,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;YAEf,KAAK,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;aACpB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAClC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,4BAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;QACF,iEAAiE;QACjE,4BAA4B;QAC5B,iEAAiE;SAChE,OAAO,CAAC,qCAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEpC,IAAI,CAAC,IAAA,iCAAe,EAAC,EAAE,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,UAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,UAAU,GAAG,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA8B,CAAC;QAChG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,4BAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,2DAA2D;YAC3D,yDAAyD;YACzD,8DAA8D;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC;QACF,iEAAiE;QACjE,0BAA0B;QAC1B,iEAAiE;QACjE,EAAE;QACF,8DAA8D;QAC9D,8DAA8D;QAC9D,+DAA+D;QAC/D,oBAAoB;SACnB,OAAO,CAAC,oCAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEpC,IAAI,CAAC,IAAA,iCAAe,EAAC,EAAE,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,UAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,UAAU,GAAG,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAA8B,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CACL,CAAC;AACJ,CAAC,CAAC;AA9aW,QAAA,wBAAwB,4BA8anC"}