@crowi/api 2.0.0-alpha.0

package/dist/hono/handlers/me.js

@@ -0,0 +1,390 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMeRoutes = void 0;
+/**
+ * RFC-0006 Phase 4 Batch 2 — `me` resource Hono port.
+ *
+ * Replaces `packages/api/src/routes/ts-rest/me.ts`. Eight endpoints,
+ * all behind `createJwtAuth(crowi)` applied broadly to `/me/*`:
+ *
+ *   GET    /me                       — profile
+ *   PUT    /me                       — update profile
+ *   POST   /me/picture               — upload picture (Hono-native multipart)
+ *   DELETE /me/picture               — clear picture
+ *   PUT    /me/password              — change password
+ *   GET    /me/recently-viewed-pages — recently-viewed pages (capped at 5)
+ *
+ * Personal access token management (RFC-0010, replacing the legacy
+ * `GET/POST /me/apiToken`) lives in `./access-token.ts`.
+ *
+ * Wire-format parity is preserved with the ts-rest era. Notable points:
+ *
+ *  - Picture upload uses `c.req.parseBody()` (no multer). Discovery doc
+ *    §5 designated all 3 multipart endpoints as Hono-native; me/picture
+ *    is the first to move. The temporary file is written to
+ *    `crowi.tmpDir` so the existing `FileUploader` pipeline (streams
+ *    from disk) remains unchanged. Size precheck via the
+ *    `content-length` header is unnecessary here — profile pictures are
+ *    typically <1 MB and the multipart parser already buffers them.
+ *  - Password change preserves the legacy "6-character minimum on
+ *    `oldPassword`" guard for backwards compatibility with users who
+ *    set their password before the bcrypt migration; new-password
+ *    validation lives in the Zod schema.
+ *  - `recentlyViewedPages` reads `crowi.lru.get(userId, 6)` (6 entries
+ *    to absorb at most one root-portal entry, then truncates to 5).
+ */
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const api_contract_1 = require("@crowi/api-contract");
+const debug_1 = __importDefault(require("debug"));
+const fileUploader_1 = __importDefault(require("../../util/fileUploader"));
+const map_duplicate_key_error_1 = require("../../util/map-duplicate-key-error");
+const mail_token_1 = require("../../util/mail-token");
+const page_response_1 = require("../../util/page-response");
+const auth_1 = require("../middleware/auth");
+const require_scope_1 = require("../middleware/require-scope");
+const debug = (0, debug_1.default)('crowi:hono:handlers:me');
+// Profile schema declares `image: z.string().nullable()` (Mongoose
+// `null | string`), so we forward `user.image` verbatim — no
+// `toUserImage` coercion. Only token endpoints, where the schema is
+// `z.string().optional()`, need `null → undefined`.
+// Normalise a legacy regional `lang` ('en-US' / 'en-GB') to 'en' for the
+// response. Rows predating the enum tightening can still hold a legacy value
+// until their next save (which the User `pre('validate')` hook coerces), so we
+// guard the read boundary too — the typed contract only allows 'en' / 'ja'.
+const toResponseLang = (lang) => (lang === 'ja' ? 'ja' : 'en');
+const userToProfileResponse = (user, hasPassword, emailChangePending) => ({
+    id: user._id.toString(),
+    username: user.username,
+    name: user.name,
+    email: user.email,
+    lang: toResponseLang(user.lang),
+    theme: user.theme ?? 'system',
+    image: user.image,
+    introduction: user.introduction || undefined,
+    hasPassword,
+    createdAt: user.createdAt.toISOString(),
+    ...(emailChangePending ? { emailChangePending: true } : {}),
+});
+const extractMongooseErrors = (err, fallback) => {
+    const error = err;
+    if (error.errors) {
+        const messages = Object.values(error.errors).map((e) => e.message);
+        if (messages.length > 0)
+            return messages;
+    }
+    return [fallback];
+};
+/**
+ * Drain a Web `File` (returned by `c.req.parseBody()`) to a temp file on
+ * disk. The legacy multer pipeline returns a path + mimetype the rest
+ * of `FileUploader` consumes via a `fs.createReadStream`; mirror that
+ * shape so the downstream code stays unchanged.
+ */
+const persistUploadToTmp = async (file, tmpDir) => {
+    (0, node_fs_1.mkdirSync)(tmpDir, { recursive: true });
+    // 32-hex-char random suffix; collision-resistant for concurrent uploads.
+    const randomId = `${Date.now()}-${(0, node_crypto_1.randomBytes)(16).toString('hex')}`;
+    const tmpPath = node_path_1.default.join(tmpDir, randomId);
+    await new Promise((resolve, reject) => {
+        const stream = (0, node_fs_1.createWriteStream)(tmpPath);
+        stream.on('finish', () => resolve());
+        stream.on('error', (err) => reject(err));
+        Promise.resolve(file.arrayBuffer())
+            .then((buf) => {
+            stream.end(Buffer.from(buf));
+        })
+            .catch((err) => {
+            stream.destroy(err);
+            reject(err);
+        });
+    });
+    return {
+        tmpPath,
+        mimetype: file.type || 'application/octet-stream',
+        originalname: file.name || randomId,
+    };
+};
+const cleanupTmp = (tmpPath) => {
+    (0, node_fs_1.unlink)(tmpPath, (err) => {
+        if (err)
+            debug('Error while deleting tmp file:', err);
+    });
+};
+const registerMeRoutes = (app, crowi) => {
+    const User = crowi.model('User');
+    const Page = crowi.model('Page');
+    // Every `/me/*` endpoint requires auth. Install the middleware before
+    // `.openapi(...)` so the path matcher sees the route (consistent with
+    // Batch 1's per-path approach but applied broadly because every route
+    // in this group needs the same guard).
+    app.use('/me/*', (0, auth_1.createJwtAuth)(crowi));
+    // RFC-0010 — profile scopes. PAT management (`/me/access-tokens`) is
+    // web-session only and registered in `./access-token.ts`, so it carries
+    // no scope guard here.
+    (0, require_scope_1.applyScope)(app, api_contract_1.getProfileRoute, 'profile:read');
+    (0, require_scope_1.applyScope)(app, api_contract_1.recentlyViewedPagesRoute, 'profile:read');
+    (0, require_scope_1.applyScope)(app, api_contract_1.updateProfileRoute, 'profile:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.updateThemeRoute, 'profile:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.uploadPictureRoute, 'profile:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.deletePictureRoute, 'profile:write');
+    (0, require_scope_1.applyScope)(app, api_contract_1.updatePasswordRoute, 'profile:write');
+    return app
+        .openapi(api_contract_1.getProfileRoute, async (c) => {
+        const user = c.get('user');
+        const userWithSecrets = await user.populateSecrets();
+        const hasPassword = userWithSecrets.isPasswordSet();
+        return c.json(userToProfileResponse(user, hasPassword), 200);
+    })
+        .openapi(api_contract_1.updateProfileRoute, async (c) => {
+        const user = c.get('user');
+        const { name, email, lang } = c.req.valid('json').userForm;
+        if (!User.isEmailValid(email)) {
+            return c.json({
+                status: 'error',
+                code: 'EMAIL_NOT_ALLOWED',
+                message: "You can't update to that email address",
+                errors: ["You can't update to that email address"],
+            }, 400);
+        }
+        const existing = await User.findOne({ email });
+        if (existing && !existing._id.equals(user._id)) {
+            debug('Email address was duplicated');
+            return c.json({
+                status: 'error',
+                code: 'EMAIL_TAKEN',
+                message: 'It can not be changed to that mail address',
+                errors: ['It can not be changed to that mail address'],
+            }, 400);
+        }
+        try {
+            // Email changes are not applied immediately — they require the
+            // user to confirm control of the new address via an emailed link.
+            // Name / lang apply right away.
+            const emailChangeRequested = email !== user.email;
+            user.name = name;
+            user.lang = lang;
+            await user.save();
+            if (emailChangeRequested) {
+                const mailer = crowi.getMailer();
+                const baseUrl = crowi.getBaseUrl() || '';
+                // Bind the token to the CURRENT email so it is single-use: once
+                // the address changes, a stale token (whose fromEmail no longer
+                // matches) is rejected and cannot revert the address later.
+                const { token } = (0, mail_token_1.createMailTokenUtil)().signMailToken({ purpose: 'email-change', userId: user._id.toString(), email, fromEmail: user.email });
+                const confirmUrl = `${baseUrl}/confirm-email?token=${token}`;
+                // Fire-and-forget: do not block the profile response on SMTP.
+                void mailer
+                    .send({ to: email, htmlTemplate: 'emailChange', lang: user.lang, vars: { ...mailer.brandVars(), confirmUrl, newEmail: email } })
+                    // Best-effort: the address simply stays unchanged on failure.
+                    .catch((err) => debug('failed to send email-change confirmation:', err));
+            }
+            const userWithSecrets = await user.populateSecrets();
+            const hasPassword = userWithSecrets.isPasswordSet();
+            return c.json(userToProfileResponse(user, hasPassword, emailChangeRequested), 200);
+        }
+        catch (err) {
+            // The email findOne pre-check can be raced; the unique index is the
+            // final defence. Map its E11000 to EMAIL_TAKEN (the same code the
+            // pre-check returns) instead of a generic validation error.
+            if ((0, map_duplicate_key_error_1.mapDuplicateKeyError)(err) === 'EMAIL_TAKEN') {
+                return c.json({
+                    status: 'error',
+                    code: 'EMAIL_TAKEN',
+                    message: 'It can not be changed to that mail address',
+                    errors: ['It can not be changed to that mail address'],
+                }, 400);
+            }
+            const errors = extractMongooseErrors(err, 'Failed to update profile');
+            return c.json({ status: 'error', message: errors[0], errors }, 400);
+        }
+    })
+        .openapi(api_contract_1.updateThemeRoute, async (c) => {
+        const user = c.get('user');
+        const { theme } = c.req.valid('json');
+        try {
+            // Lightweight, dedicated to the theme toggle: persist just the
+            // theme so the `next-themes` change syncs across devices without
+            // resubmitting the full profile form (name / email / lang).
+            user.theme = theme;
+            await user.save();
+            return c.json({ status: 'ok', theme }, 200);
+        }
+        catch (err) {
+            const errors = extractMongooseErrors(err, 'Failed to update theme');
+            return c.json({ status: 'error', message: errors[0], errors }, 400);
+        }
+    })
+        .openapi(api_contract_1.uploadPictureRoute, async (c) => {
+        const user = c.get('user');
+        let parsed;
+        try {
+            parsed = await c.req.parseBody();
+        }
+        catch (err) {
+            debug('parseBody error:', err);
+            return c.json({ status: 'error', message: 'File upload error.', errors: ['File upload error.'] }, 400);
+        }
+        const fileField = parsed['file'];
+        const file = fileField instanceof File ? fileField : Array.isArray(fileField) ? fileField.find((entry) => entry instanceof File) : undefined;
+        if (!file) {
+            return c.json({ status: 'error', message: 'No file provided.', errors: ['No file provided.'] }, 400);
+        }
+        if (!/^image\/.+/.test(file.type || '')) {
+            return c.json({
+                status: 'error',
+                message: 'File type error. Only image files is allowed to set as user picture.',
+                errors: ['File type error. Only image files is allowed to set as user picture.'],
+            }, 400);
+        }
+        const fileUploader = (0, fileUploader_1.default)(crowi);
+        let tmpPath = null;
+        try {
+            const persisted = await persistUploadToTmp(file, crowi.tmpDir);
+            tmpPath = persisted.tmpPath;
+            // Match the legacy `tmpFile.filename + tmpFile.originalname` shape so
+            // `createUserPictureFilePath` infers the same extension as before.
+            const combined = node_path_1.default.basename(persisted.tmpPath) + persisted.originalname;
+            const ext = combined.match(/(.*)(?:\.([^.]+$))/)?.[2] || '';
+            const filePath = User.createUserPictureFilePath(user, ext);
+            const tmpFileStream = (0, node_fs_1.createReadStream)(persisted.tmpPath, {
+                flags: 'r',
+                mode: 0o666,
+                autoClose: true,
+            });
+            await fileUploader.uploadFile(filePath, persisted.mimetype, tmpFileStream, {});
+            // Persist the STABLE proxy URL, not a signed one: `user.image`
+            // is stored in the DB and served verbatim, so a time-limited
+            // S3 signed URL would 403 once its (5-minute) TTL elapsed.
+            const imageUrl = fileUploader.persistentUrl(filePath);
+            await new Promise((resolve, reject) => {
+                user.updateImage(imageUrl, (err) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve();
+                });
+            });
+            cleanupTmp(persisted.tmpPath);
+            tmpPath = null;
+            return c.json({ status: true, url: imageUrl, message: '' }, 200);
+        }
+        catch (err) {
+            debug('Uploading error:', err);
+            if (tmpPath)
+                cleanupTmp(tmpPath);
+            return c.json({
+                status: 'error',
+                message: 'Error while uploading file',
+                errors: ['Error while uploading file'],
+            }, 400);
+        }
+    })
+        .openapi(api_contract_1.deletePictureRoute, async (c) => {
+        const user = c.get('user');
+        return new Promise((resolve) => {
+            // TODO: Also delete from S3/storage. Mirrors the ts-rest TODO.
+            user.deleteImage((err) => {
+                if (err) {
+                    debug('Error deleting image:', err);
+                    resolve(c.json({
+                        status: 'error',
+                        message: 'Failed to delete profile picture',
+                        errors: ['Failed to delete profile picture'],
+                    }, 400));
+                    return;
+                }
+                resolve(c.json({ status: 'ok', message: 'Deleted profile picture' }, 200));
+            });
+        });
+    })
+        .openapi(api_contract_1.updatePasswordRoute, async (c) => {
+        const user = c.get('user');
+        const { oldPassword, newPassword } = c.req.valid('json');
+        if (!user.isEmailSet()) {
+            return c.json({
+                status: 'error',
+                message: 'Email must be set before setting password',
+                errors: ['Email must be set before setting password'],
+            }, 400);
+        }
+        const userWithSecrets = await user.populateSecrets();
+        const hasPassword = userWithSecrets.isPasswordSet();
+        if (hasPassword) {
+            if (!oldPassword) {
+                return c.json({
+                    status: 'error',
+                    message: 'Current password is required',
+                    errors: ['Current password is required'],
+                }, 400);
+            }
+            if (oldPassword.length < 6) {
+                return c.json({
+                    status: 'error',
+                    message: 'Current password must be at least 6 characters',
+                    errors: ['Current password must be at least 6 characters'],
+                }, 400);
+            }
+            if (!userWithSecrets.isPasswordValid(oldPassword)) {
+                return c.json({
+                    status: 'error',
+                    message: 'Wrong current password',
+                    errors: ['Wrong current password'],
+                }, 400);
+            }
+        }
+        return new Promise((resolve) => {
+            userWithSecrets.updatePassword(newPassword, (err) => {
+                if (err) {
+                    debug('Error updating password:', err);
+                    const errors = extractMongooseErrors(err, 'Failed to update password');
+                    resolve(c.json({ status: 'error', message: errors[0] || 'Failed to update password', errors }, 400));
+                    return;
+                }
+                // Security notification — best-effort, never fails the change.
+                void crowi
+                    .getMailer()
+                    .sendPasswordChangedNotice(user.email, user.lang)
+                    .catch((mailErr) => debug('failed to send password-changed notice:', mailErr));
+                resolve(c.json({ status: 'ok', message: 'Password updated' }, 200));
+            });
+        });
+    })
+        .openapi(api_contract_1.recentlyViewedPagesRoute, async (c) => {
+        const user = c.get('user');
+        try {
+            // Read 6 to absorb at most one root-portal entry; the dropdown
+            // shows 5. Same logic as the ts-rest handler.
+            const ids = (await crowi.lru.get(user._id.toString(), 6)) ?? [];
+            if (ids.length === 0) {
+                return c.json({ pages: [] }, 200);
+            }
+            const found = (await Page.findPagesByIds(ids));
+            const byId = new Map();
+            for (const p of found)
+                byId.set(p._id.toString(), p);
+            const ordered = [];
+            for (const id of ids) {
+                const p = byId.get(id);
+                if (!p || p.path === '/')
+                    continue;
+                ordered.push(p);
+                if (ordered.length >= 5)
+                    break;
+            }
+            return c.json({ pages: ordered.map((p) => (0, page_response_1.pageToResponse)(p)) }, 200);
+        }
+        catch (err) {
+            debug('recentlyViewedPages: lru / populate failed: %s', err.message);
+            // Legacy parity: surface lru/populate errors as an empty list
+            // rather than a 5xx so the dropdown UI degrades gracefully.
+            return c.json({ pages: [] }, 200);
+        }
+    });
+};
+exports.registerMeRoutes = registerMeRoutes;
+//# sourceMappingURL=me.js.map

package/dist/hono/handlers/me.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.js","sourceRoot":"","sources":["../../../src/hono/handlers/me.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,6CAA0C;AAC1C,qCAAiF;AACjF,0DAA6B;AAE7B,sDAQ6B;AAE7B,kDAA0B;AAK1B,yEAAiD;AACjD,8EAAwE;AACxE,oDAA0D;AAC1D,0DAAwD;AAGxD,6CAAmD;AACnD,+DAAyD;AAEzD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,wBAAwB,CAAC,CAAC;AAE9C,mEAAmE;AACnE,6DAA6D;AAC7D,oEAAoE;AACpE,oDAAoD;AACpD,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,cAAc,GAAG,CAAC,IAAY,EAAe,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,qBAAqB,GAAG,CAAC,IAAkB,EAAE,WAAoB,EAAE,kBAA4B,EAAE,EAAE,CAAC,CAAC;IACzG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;IAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ;IAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;IAC5C,WAAW;IACX,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;IACvC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,GAAY,EAAE,QAAgB,EAAY,EAAE;IACzE,MAAM,KAAK,GAAG,GAAuD,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAU,EAAE,MAAc,EAAwE,EAAE;IACpI,IAAA,mBAAS,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,yEAAyE;IACzE,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE5C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAChC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,0BAA0B;QACjD,YAAY,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;KACpC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAQ,EAAE;IAC3C,IAAA,gBAAM,EAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACtB,IAAI,GAAG;YAAE,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE;IACjG,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,uCAAuC;IACvC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC,CAAC;IAEvC,qEAAqE;IACrE,wEAAwE;IACxE,uBAAuB;IACvB,IAAA,0BAAU,EAAC,GAAG,EAAE,8BAAe,EAAE,cAAc,CAAC,CAAC;IACjD,IAAA,0BAAU,EAAC,GAAG,EAAE,uCAAwB,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAA,0BAAU,EAAC,GAAG,EAAE,iCAAkB,EAAE,eAAe,CAAC,CAAC;IACrD,IAAA,0BAAU,EAAC,GAAG,EAAE,+BAAgB,EAAE,eAAe,CAAC,CAAC;IACnD,IAAA,0BAAU,EAAC,GAAG,EAAE,iCAAkB,EAAE,eAAe,CAAC,CAAC;IACrD,IAAA,0BAAU,EAAC,GAAG,EAAE,iCAAkB,EAAE,eAAe,CAAC,CAAC;IACrD,IAAA,0BAAU,EAAC,GAAG,EAAE,kCAAmB,EAAE,eAAe,CAAC,CAAC;IAEtD,OAAO,GAAG;SACP,OAAO,CAAC,8BAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACrD,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC;SACD,OAAO,CAAC,iCAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAgB;gBACxB,IAAI,EAAE,mBAA4B;gBAClC,OAAO,EAAE,wCAAwC;gBACjD,MAAM,EAAE,CAAC,wCAAwC,CAAC;aACnD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAgB;gBACxB,IAAI,EAAE,aAAsB;gBAC5B,OAAO,EAAE,4CAA4C;gBACrD,MAAM,EAAE,CAAC,4CAA4C,CAAC;aACvD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+DAA+D;YAC/D,kEAAkE;YAClE,gCAAgC;YAChC,MAAM,oBAAoB,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC;YAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAElB,IAAI,oBAAoB,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;gBACzC,gEAAgE;gBAChE,gEAAgE;gBAChE,4DAA4D;gBAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,gCAAmB,GAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9I,MAAM,UAAU,GAAG,GAAG,OAAO,wBAAwB,KAAK,EAAE,CAAC;gBAC7D,8DAA8D;gBAC9D,KAAK,MAAM;qBACR,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;oBAChI,8DAA8D;qBAC7D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,IAAA,8CAAoB,EAAC,GAAG,CAAC,KAAK,aAAa,EAAE,CAAC;gBAChD,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,MAAM,EAAE,OAAgB;oBACxB,IAAI,EAAE,aAAsB;oBAC5B,OAAO,EAAE,4CAA4C;oBACrD,MAAM,EAAE,CAAC,4CAA4C,CAAC;iBACvD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,+BAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,+DAA+D;YAC/D,iEAAiE;YACjE,4DAA4D;YAC5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,iCAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GACR,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAiB,EAAE,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjJ,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAgB;gBACxB,OAAO,EAAE,sEAAsE;gBAC/E,MAAM,EAAE,CAAC,sEAAsE,CAAC;aACjF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAE5B,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,QAAQ,GAAG,mBAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;YAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,SAAS,CAAC,OAAO,EAAE;gBACxD,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/E,+DAA+D;YAC/D,6DAA6D;YAC7D,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAEtD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,GAAiB,EAAE,EAAE;oBAC/C,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;YAEf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,OAAO;gBAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAgB;gBACxB,OAAO,EAAE,4BAA4B;gBACrC,MAAM,EAAE,CAAC,4BAA4B,CAAC;aACvC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,iCAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,+DAA+D;YAC/D,IAAI,CAAC,WAAW,CAAC,CAAC,GAAiB,EAAE,EAAE;gBACrC,IAAI,GAAG,EAAE,CAAC;oBACR,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;oBACpC,OAAO,CACL,CAAC,CAAC,IAAI,CACJ;wBACE,MAAM,EAAE,OAAgB;wBACxB,OAAO,EAAE,kCAAkC;wBAC3C,MAAM,EAAE,CAAC,kCAAkC,CAAC;qBAC7C,EACD,GAAG,CACJ,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,OAAO,CAAC,kCAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAgB;gBACxB,OAAO,EAAE,2CAA2C;gBACpD,MAAM,EAAE,CAAC,2CAA2C,CAAC;aACtD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACrD,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC;QAEpD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,MAAM,EAAE,OAAgB;oBACxB,OAAO,EAAE,8BAA8B;oBACvC,MAAM,EAAE,CAAC,8BAA8B,CAAC;iBACzC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,MAAM,EAAE,OAAgB;oBACxB,OAAO,EAAE,gDAAgD;oBACzD,MAAM,EAAE,CAAC,gDAAgD,CAAC;iBAC3D,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,MAAM,EAAE,OAAgB;oBACxB,OAAO,EAAE,wBAAwB;oBACjC,MAAM,EAAE,CAAC,wBAAwB,CAAC;iBACnC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,eAAe,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAiB,EAAE,EAAE;gBAChE,IAAI,GAAG,EAAE,CAAC;oBACR,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;oBACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;oBACvE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,2BAA2B,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC9G,OAAO;gBACT,CAAC;gBACD,+DAA+D;gBAC/D,KAAK,KAAK;qBACP,SAAS,EAAE;qBACX,yBAAyB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;qBAChD,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,OAAO,CAAC,uCAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,+DAA+D;YAC/D,8CAA8C;YAC9C,MAAM,GAAG,GAAa,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAmB,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;YAC7C,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;YAErD,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;oBAAE,SAAS;gBACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM;YACjC,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,8BAAc,EAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,gDAAgD,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChF,8DAA8D;YAC9D,4DAA4D;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAjUW,QAAA,gBAAgB,oBAiU3B"}