@crowi/api 2.0.0-alpha.0

package/dist/plugin/schema-serializer.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeConfigSchema = serializeConfigSchema;
+// Plugin config schemas are still authored against zod v3 (see
+// `packages/plugin-*`/index.ts). The serializer introspects v3 internals
+// (`_def`, `ZodEffects`, `ZodNativeEnum`, etc.) that were restructured in
+// zod v4, so we explicitly pin this file to the `zod/v3` compat module
+// that the v4 package ships. The v4 schemas live in `@crowi/api-contract`
+// and never reach this code path.
+const v3_1 = require("zod/v3");
+const plugin_api_1 = require("@crowi/plugin-api");
+/**
+ * Walk a plugin's `configSchema` (assumed to be a `z.object({...})`)
+ * and produce a flat list of fields the admin form can render. Only
+ * the field shapes the plugin RFC committed to are recognised:
+ * string / number / boolean / enum / string[]. Anything else falls
+ * back to `kind: 'string'` (with a descriptive log on the server).
+ */
+function serializeConfigSchema(schema) {
+    const out = [];
+    for (const [name, raw] of Object.entries(schema.shape)) {
+        out.push(serializeField(name, raw));
+    }
+    return out;
+}
+function serializeField(name, raw) {
+    const { unwrapped, optional, defaultValue } = unwrapMeta(raw);
+    const description = (unwrapped.description ?? raw.description) || undefined;
+    const cleanedDescription = stripMarkers(description);
+    const action = (0, plugin_api_1.getActionAnnotation)(raw) ?? (0, plugin_api_1.getActionAnnotation)(unwrapped) ?? undefined;
+    const sensitive = describesSensitive(raw) || describesSensitive(unwrapped);
+    const kindResult = detectKind(unwrapped, sensitive);
+    return {
+        name,
+        kind: kindResult.kind,
+        description: cleanedDescription,
+        // Sensitive defaults are not echoed back — operators set their own.
+        defaultValue: sensitive ? undefined : defaultValue,
+        options: kindResult.options,
+        action,
+        optional,
+    };
+}
+/**
+ * Strip `ZodOptional` / `ZodDefault` / `ZodEffects` wrappers (which
+ * `z.string().refine(...)` introduces) so we can introspect the inner
+ * primitive type.
+ */
+function unwrapMeta(node) {
+    let cur = node;
+    let optional = false;
+    let defaultValue = undefined;
+    // Unwrap up to a small depth to avoid pathological loops.
+    for (let i = 0; i < 6; i++) {
+        if (cur instanceof v3_1.z.ZodOptional) {
+            optional = true;
+            cur = cur._def.innerType;
+            continue;
+        }
+        if (cur instanceof v3_1.z.ZodDefault) {
+            const def = cur._def.defaultValue;
+            defaultValue = typeof def === 'function' ? def() : def;
+            cur = cur._def.innerType;
+            continue;
+        }
+        if (cur instanceof v3_1.z.ZodEffects) {
+            // refine / transform — keep the underlying schema for kind detection
+            cur = cur._def.schema;
+            continue;
+        }
+        break;
+    }
+    return { unwrapped: cur, optional, defaultValue };
+}
+function detectKind(unwrapped, sensitive) {
+    if (unwrapped instanceof v3_1.z.ZodString) {
+        return { kind: sensitive ? 'secret' : 'string' };
+    }
+    if (unwrapped instanceof v3_1.z.ZodNumber) {
+        return { kind: 'number' };
+    }
+    if (unwrapped instanceof v3_1.z.ZodBoolean) {
+        return { kind: 'boolean' };
+    }
+    if (unwrapped instanceof v3_1.z.ZodEnum) {
+        return { kind: 'enum', options: [...unwrapped._def.values] };
+    }
+    if (unwrapped instanceof v3_1.z.ZodNativeEnum) {
+        const values = Object.values(unwrapped._def.values).filter((v) => typeof v === 'string');
+        return { kind: 'enum', options: values };
+    }
+    if (unwrapped instanceof v3_1.z.ZodArray && unwrapped._def.type instanceof v3_1.z.ZodString) {
+        return { kind: 'string-array' };
+    }
+    // Unrecognised shape — fall back to string (admin form renders an Input).
+    return { kind: 'string' };
+}
+function describesSensitive(node) {
+    const d = node.description;
+    return typeof d === 'string' && d.trimStart().startsWith(plugin_api_1.SENSITIVE_FIELD_MARKER);
+}
+/**
+ * Remove the leading `@sensitive` / `@action ...` marker from a
+ * description so the admin form can render it as plain help text.
+ * The marker payload is already extracted into `kind`/`action`.
+ */
+function stripMarkers(description) {
+    if (!description)
+        return undefined;
+    const trimmed = description.trimStart();
+    if (trimmed.startsWith(plugin_api_1.SENSITIVE_FIELD_MARKER)) {
+        return trimmed.slice(plugin_api_1.SENSITIVE_FIELD_MARKER.length).trim() || undefined;
+    }
+    if (trimmed.startsWith(plugin_api_1.ACTION_FIELD_MARKER)) {
+        // The full annotation `"label" METHOD /path` is captured into
+        // `action`; the leftover after parsing is rarely useful for help
+        // text, so omit it entirely.
+        return undefined;
+    }
+    return description;
+}
+//# sourceMappingURL=schema-serializer.js.map

package/dist/plugin/schema-serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-serializer.js","sourceRoot":"","sources":["../../src/plugin/schema-serializer.ts"],"names":[],"mappings":";;AAsCA,sDAMC;AA5CD,+DAA+D;AAC/D,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAC1E,kCAAkC;AAClC,+BAA4C;AAC5C,kDAAqG;AAwBrG;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,MAA+C;IACnF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,GAAe;IACnD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IAC5E,MAAM,kBAAkB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAA,gCAAmB,EAAC,GAAG,CAAC,IAAI,IAAA,gCAAmB,EAAC,SAAS,CAAC,IAAI,SAAS,CAAC;IACvF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,kBAAkB;QAC/B,oEAAoE;QACpE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QAClD,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,GAAG,GAAe,IAAI,CAAC;IAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,YAAY,GAAY,SAAS,CAAC;IAEtC,0DAA0D;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,GAAG,YAAY,MAAC,CAAC,WAAW,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,YAAY,MAAC,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;YAClC,YAAY,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACvD,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,YAAY,MAAC,CAAC,UAAU,EAAE,CAAC;YAChC,qEAAqE;YACrE,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,SAAqB,EAAE,SAAkB;IAC3D,IAAI,SAAS,YAAY,MAAC,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,SAAS,YAAY,MAAC,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,SAAS,YAAY,MAAC,CAAC,UAAU,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS,YAAY,MAAC,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,SAAS,YAAY,MAAC,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACtG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,YAAY,MAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,YAAY,MAAC,CAAC,SAAS,EAAE,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,0EAA0E;IAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,mCAAsB,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,WAA+B;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,UAAU,CAAC,mCAAsB,CAAC,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,KAAK,CAAC,mCAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,gCAAmB,CAAC,EAAE,CAAC;QAC5C,8DAA8D;QAC9D,iEAAiE;QACjE,6BAA6B;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/plugin/topo-sort.d.ts

@@ -0,0 +1,15 @@
+import type { CrowiPlugin } from '@crowi/plugin-api';
+/**
+ * Topologically sort the loaded plugins so each plugin's `requires`
+ * are processed (registered) before the plugin itself. A `requires`
+ * entry that points at a plugin not in the input set is ignored
+ * (already-loaded core defaults / sibling plugins): we only sort what
+ * we have.
+ *
+ * @throws on cycle, naming the plugins involved
+ * @throws on a `requires` entry that genuinely cannot be resolved
+ *         (i.e. neither in the input set nor declared as
+ *         "already-loaded"). The caller controls "already loaded"
+ *         via `alreadyLoaded`.
+ */
+export declare function topoSortPlugins(plugins: CrowiPlugin[], alreadyLoaded?: ReadonlySet<string>): CrowiPlugin[];

package/dist/plugin/topo-sort.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.topoSortPlugins = topoSortPlugins;
+/**
+ * Topologically sort the loaded plugins so each plugin's `requires`
+ * are processed (registered) before the plugin itself. A `requires`
+ * entry that points at a plugin not in the input set is ignored
+ * (already-loaded core defaults / sibling plugins): we only sort what
+ * we have.
+ *
+ * @throws on cycle, naming the plugins involved
+ * @throws on a `requires` entry that genuinely cannot be resolved
+ *         (i.e. neither in the input set nor declared as
+ *         "already-loaded"). The caller controls "already loaded"
+ *         via `alreadyLoaded`.
+ */
+function topoSortPlugins(plugins, alreadyLoaded = new Set()) {
+    const byName = new Map();
+    for (const p of plugins) {
+        if (byName.has(p.name)) {
+            throw new Error(`Plugin '${p.name}' loaded twice — duplicate npm package?`);
+        }
+        byName.set(p.name, p);
+    }
+    // Validate `requires` references resolve.
+    for (const p of plugins) {
+        for (const dep of p.requires ?? []) {
+            if (!byName.has(dep) && !alreadyLoaded.has(dep)) {
+                throw new Error(`Plugin '${p.name}' requires '${dep}', which is not installed.`);
+            }
+        }
+    }
+    // Standard DFS topo with cycle detection.
+    const visited = new Set();
+    const visiting = new Set();
+    const order = [];
+    const visit = (name, trail) => {
+        if (visited.has(name))
+            return;
+        if (visiting.has(name)) {
+            throw new Error(`Plugin dependency cycle detected: ${[...trail, name].join(' → ')}`);
+        }
+        const plugin = byName.get(name);
+        if (!plugin)
+            return; // already-loaded dep, not in this batch
+        visiting.add(name);
+        for (const dep of plugin.requires ?? []) {
+            visit(dep, [...trail, name]);
+        }
+        visiting.delete(name);
+        visited.add(name);
+        order.push(plugin);
+    };
+    for (const p of plugins) {
+        visit(p.name, []);
+    }
+    return order;
+}
+//# sourceMappingURL=topo-sort.js.map

package/dist/plugin/topo-sort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topo-sort.js","sourceRoot":"","sources":["../../src/plugin/topo-sort.ts"],"names":[],"mappings":";;AAeA,0CA4CC;AAzDD;;;;;;;;;;;;GAYG;AACH,SAAgB,eAAe,CAAC,OAAsB,EAAE,gBAAqC,IAAI,GAAG,EAAE;IACpG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,yCAAyC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,eAAe,GAAG,4BAA4B,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAe,EAAQ,EAAE;QACpD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,wCAAwC;QAC7D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACxC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/presence/attach.d.ts

@@ -0,0 +1,36 @@
+import type { Server as HttpServer } from 'node:http';
+import type Crowi from '../crowi';
+/**
+ * Public surface returned from `attachPresenceServer`. The api boot
+ * keeps the handle so SIGINT teardown can drain sockets and tear down
+ * the presence pub/sub subscriber.
+ */
+export interface AttachedPresence {
+    /** Detach + tear down. Idempotent; safe to call from a SIGINT handler. */
+    shutdown(): Promise<void>;
+}
+/**
+ * Wire the RFC-0005 `/presence` WebSocket into the api's existing
+ * Express http.Server, using the `ws` library's `noServer` mode — same
+ * process, same event loop, same Mongoose connection, same Redis
+ * client as `/collab`.
+ *
+ * Connection lifecycle:
+ *   1. Upgrade filter accepts `/presence` / `/presence/*`.
+ *   2. Verify the `?token=` presence JWT (signature + issuer).
+ *   3. Verify `token.pageId` matches the `/presence/<pageId>` path
+ *      segment when one is present.
+ *   4. Re-check read permission against Mongo (the token was minted up
+ *      to 5 min ago — grants can be revoked in between).
+ *   5. `presence.join` registers the viewer; the page's viewer list is
+ *      broadcast to every connected client (this instance + others via
+ *      Redis pub/sub).
+ *   6. Client heartbeats every 15s refresh the Redis TTL; a heartbeat
+ *      past the permission-cache window re-checks read grant and
+ *      disconnects a revoked viewer.
+ *   7. On close, `presence.leave` removes the viewer and re-broadcasts.
+ *
+ * Boot order: call after `setupModels`. The api's `Crowi.start`
+ * invokes this right before `server.listen`, next to `attachCollabServer`.
+ */
+export declare function attachPresenceServer(httpServer: HttpServer, crowi: Crowi): Promise<AttachedPresence>;

package/dist/presence/attach.js

@@ -0,0 +1,399 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.attachPresenceServer = attachPresenceServer;
+const debug_1 = __importDefault(require("debug"));
+const ws_1 = require("ws");
+const api_contract_1 = require("@crowi/api-contract");
+const presence_token_1 = require("../util/presence-token");
+const presence_1 = require("../service/presence");
+const debug = (0, debug_1.default)('crowi:presence:attach');
+/**
+ * Path namespace the presence WebSocket answers on. The browser dials
+ * `/presence/<pageId>?token=<presenceToken>`; the upgrade filter
+ * accepts both the bare `/presence` and `/presence/...` so the design
+ * mirrors `collab/attach.ts` exactly (sibling upgrade handlers — collab
+ * at `/collab`, presence at `/presence` — coexist on one listener).
+ */
+const PRESENCE_PATH = '/presence';
+/**
+ * WebSocket close codes the presence handler uses. 4401 / 4403 are in
+ * the 4000–4999 application-private range; 1001 ("going away") is the
+ * standard code for a graceful server shutdown.
+ */
+const WS_CLOSE = {
+    INVALID_TOKEN: 4401,
+    NO_ACCESS: 4403,
+    SHUTDOWN: 1001,
+};
+/** Split a request URL into its pathname and raw query string. */
+const splitUrl = (rawUrl) => {
+    const queryIdx = rawUrl.indexOf('?');
+    return queryIdx < 0 ? { pathname: rawUrl, query: '' } : { pathname: rawUrl.slice(0, queryIdx), query: rawUrl.slice(queryIdx + 1) };
+};
+/**
+ * Per-connection read-permission cache TTL. After a viewer's read
+ * grant is confirmed once, subsequent heartbeats skip the Mongo lookup
+ * for this long; a heartbeat after the window re-checks, so a mid-
+ * session permission revocation is detected within ~60s + one
+ * heartbeat interval. RFC-0005 §"Permission boundary".
+ */
+const PERMISSION_CACHE_TTL_MS = 60_000;
+/**
+ * Grace window between asking sockets to close politely and force-
+ * terminating stragglers on shutdown. Mirrors `collab/attach.ts`.
+ */
+const SHUTDOWN_DRAIN_MS = 500;
+/**
+ * Wire the RFC-0005 `/presence` WebSocket into the api's existing
+ * Express http.Server, using the `ws` library's `noServer` mode — same
+ * process, same event loop, same Mongoose connection, same Redis
+ * client as `/collab`.
+ *
+ * Connection lifecycle:
+ *   1. Upgrade filter accepts `/presence` / `/presence/*`.
+ *   2. Verify the `?token=` presence JWT (signature + issuer).
+ *   3. Verify `token.pageId` matches the `/presence/<pageId>` path
+ *      segment when one is present.
+ *   4. Re-check read permission against Mongo (the token was minted up
+ *      to 5 min ago — grants can be revoked in between).
+ *   5. `presence.join` registers the viewer; the page's viewer list is
+ *      broadcast to every connected client (this instance + others via
+ *      Redis pub/sub).
+ *   6. Client heartbeats every 15s refresh the Redis TTL; a heartbeat
+ *      past the permission-cache window re-checks read grant and
+ *      disconnects a revoked viewer.
+ *   7. On close, `presence.leave` removes the viewer and re-broadcasts.
+ *
+ * Boot order: call after `setupModels`. The api's `Crowi.start`
+ * invokes this right before `server.listen`, next to `attachCollabServer`.
+ */
+async function attachPresenceServer(httpServer, crowi) {
+    const presenceTokenUtil = (0, presence_token_1.createPresenceTokenUtil)();
+    const presence = await (0, presence_1.getPresenceService)(crowi);
+    const Page = crowi.model('Page');
+    const User = crowi.model('User');
+    // `noServer: true` — the upgrade handshake is owned by the api
+    // process; we forward only `/presence/*` upgrades here.
+    const wss = new ws_1.WebSocketServer({ noServer: true });
+    // Every live connection, keyed by socket. Used to broadcast a page's
+    // viewer list to exactly its connected clients and to drain on
+    // shutdown.
+    const connections = new Map();
+    /** Send a JSON message to one socket; ignore a dead socket. */
+    const sendJson = (ws, payload) => {
+        if (ws.readyState !== ws.OPEN)
+            return;
+        try {
+            ws.send(JSON.stringify(payload));
+        }
+        catch (err) {
+            debug('send failed: %s', err.message);
+        }
+    };
+    /**
+     * Broadcast the current viewer list of `pageId` to every locally-
+     * connected client for that page. Triggered by `presence`'s change
+     * events (local writes + cross-instance pub/sub).
+     */
+    const broadcastViewers = async (pageId) => {
+        // Collect the local sockets watching this page before the await so
+        // a concurrent close doesn't matter — `sendJson` no-ops on a
+        // non-OPEN socket.
+        const targets = [];
+        for (const conn of connections.values()) {
+            if (conn.pageId === pageId)
+                targets.push(conn.ws);
+        }
+        if (targets.length === 0)
+            return;
+        let viewers;
+        try {
+            viewers = await presence.listViewers(pageId);
+        }
+        catch (err) {
+            console.warn(`[crowi:presence] listViewers failed for page ${pageId}:`, err.message);
+            return;
+        }
+        const message = { type: 'viewers', viewers };
+        for (const ws of targets) {
+            sendJson(ws, message);
+        }
+    };
+    // Subscribe to viewer-list changes (local + cross-instance). The
+    // unsubscribe fn is invoked on shutdown.
+    const unsubscribe = presence.onViewersChanged((pageId) => {
+        void broadcastViewers(pageId);
+    });
+    /**
+     * Re-verify that `userId` still has read grant on `pageId`. Returns
+     * `false` when the page vanished or the grant was revoked. A throw
+     * is treated as "no permission" (fail-closed).
+     */
+    const hasReadPermission = async (pageId, userId) => {
+        try {
+            const page = await Page.findById(pageId).exec();
+            if (!page)
+                return false;
+            // `isGrantedFor` takes a user-like object; load the connecting
+            // user so OWNER / GROUP grants resolve against the real record.
+            const userDoc = (await User.findById(userId).exec());
+            if (!userDoc)
+                return false;
+            return page.isGrantedFor(userDoc);
+        }
+        catch (err) {
+            debug('permission re-check threw for page=%s user=%s: %s', pageId, userId, err.message);
+            return false;
+        }
+    };
+    /** Load the connecting user's denormalised identity for the hash. */
+    const loadViewerIdentity = async (userId) => {
+        const userDoc = (await User.findById(userId).exec());
+        if (!userDoc)
+            return null;
+        return {
+            userId,
+            username: userDoc.username ?? '',
+            displayName: userDoc.name ?? userDoc.username ?? '',
+            avatarUrl: userDoc.image ?? null,
+        };
+    };
+    /**
+     * Wire one freshly-upgraded `ws.WebSocket`. Authentication runs
+     * inline: a bad token / page mismatch / revoked grant closes the
+     * socket immediately. A clean connection is added to `connections`
+     * and gets the first viewer-list broadcast.
+     */
+    const wireConnection = async (ws, request) => {
+        const { pathname, query } = splitUrl(request.url ?? '');
+        const token = new URLSearchParams(query).get('token') ?? '';
+        // 1. token present + verifies (signature, issuer, schema).
+        const claims = token.length > 0 ? presenceTokenUtil.verifyPresenceToken(token) : null;
+        if (!claims) {
+            debug('reject: presence token missing / invalid');
+            ws.close(WS_CLOSE.INVALID_TOKEN, 'invalid token');
+            return;
+        }
+        // 2. `/presence/<pageId>` path segment, when present, must match
+        //    the token. The bare `/presence` form is also accepted (the
+        //    token is the authoritative pageId source).
+        const pathSegment = pathname.startsWith(`${PRESENCE_PATH}/`) ? pathname.slice(PRESENCE_PATH.length + 1) : '';
+        if (pathSegment.length > 0 && pathSegment !== claims.pageId) {
+            debug('reject: path pageId %s != token pageId %s', pathSegment, claims.pageId);
+            ws.close(WS_CLOSE.INVALID_TOKEN, 'invalid token');
+            return;
+        }
+        // The token verified, so userId / pageId are known. Register the
+        // close + error handlers NOW, before the async permission / identity
+        // round-trips below. A socket that closes *during* those awaits (a
+        // fast client navigation, React's dev double-mount) would otherwise
+        // fire `'close'` into the void — the handler being attached only
+        // after the awaits — leaving a phantom `connections` entry whose
+        // `'close'` never runs. That phantom poisons the multi-tab
+        // `userStillConnected` check in `handleClose`, so a later *real*
+        // disconnect skips `presence.leave` and the viewer is stuck in the
+        // hash for every other client on the page.
+        const conn = {
+            ws,
+            userId: claims.userId,
+            pageId: claims.pageId,
+            permittedUntil: 0,
+        };
+        let closed = false;
+        ws.on('close', () => {
+            closed = true;
+            void handleClose(conn);
+        });
+        ws.on('error', (err) => {
+            // A single bad socket must not crash the api process.
+            console.error('[crowi:presence] websocket error', err);
+        });
+        // 3. re-check read permission (token was minted up to 5 min ago).
+        const permitted = await hasReadPermission(claims.pageId, claims.userId);
+        if (!permitted) {
+            debug('reject: user %s lost read grant on page %s', claims.userId, claims.pageId);
+            ws.close(WS_CLOSE.NO_ACCESS, 'no access');
+            return;
+        }
+        const identity = await loadViewerIdentity(claims.userId);
+        if (!identity) {
+            debug('reject: connecting user %s not found', claims.userId);
+            ws.close(WS_CLOSE.NO_ACCESS, 'no access');
+            return;
+        }
+        // The socket closed while permission / identity were resolving —
+        // the close handler has already run; do not register a viewer.
+        if (closed) {
+            debug('presence socket closed during setup user=%s page=%s', conn.userId, conn.pageId);
+            return;
+        }
+        conn.permittedUntil = Date.now() + PERMISSION_CACHE_TTL_MS;
+        connections.set(ws, conn);
+        ws.on('message', (data) => {
+            void handleClientMessage(conn, data);
+        });
+        // Register the viewer. `join` publishes a viewer-list change, which
+        // flows back through `onViewersChanged` → `broadcastViewers`, so
+        // this socket (and every other on the page) gets the fresh list.
+        try {
+            await presence.join(conn.pageId, identity);
+        }
+        catch (err) {
+            console.warn(`[crowi:presence] join failed for page ${conn.pageId}:`, err.message);
+        }
+        // The socket closed while `join` was in flight — the close handler
+        // ran before the viewer entry existed, so reconcile now to remove
+        // the entry `join` just wrote.
+        if (closed) {
+            debug('presence socket closed during join user=%s page=%s', conn.userId, conn.pageId);
+            void handleClose(conn);
+            return;
+        }
+        debug('presence connected user=%s page=%s', conn.userId, conn.pageId);
+    };
+    /**
+     * Handle a client → server frame. The only valid message is
+     * `{ type: 'heartbeat' }`; anything else is ignored (forward-compat).
+     */
+    const handleClientMessage = async (conn, data) => {
+        let parsedJson;
+        try {
+            const text = data instanceof ArrayBuffer ? Buffer.from(data).toString('utf8') : data.toString('utf8');
+            parsedJson = JSON.parse(text);
+        }
+        catch {
+            debug('ignore: non-JSON client frame on page %s', conn.pageId);
+            return;
+        }
+        const message = api_contract_1.PresenceClientMessageSchema.safeParse(parsedJson);
+        if (!message.success) {
+            debug('ignore: unrecognised client message on page %s', conn.pageId);
+            return;
+        }
+        // Heartbeat: re-verify read grant if the cache window lapsed, then
+        // refresh the Redis TTL.
+        if (Date.now() >= conn.permittedUntil) {
+            const stillPermitted = await hasReadPermission(conn.pageId, conn.userId);
+            if (!stillPermitted) {
+                debug('heartbeat: user %s lost grant on page %s — disconnecting', conn.userId, conn.pageId);
+                conn.ws.close(WS_CLOSE.NO_ACCESS, 'no access');
+                return;
+            }
+            conn.permittedUntil = Date.now() + PERMISSION_CACHE_TTL_MS;
+        }
+        try {
+            const present = await presence.heartbeat(conn.pageId, conn.userId);
+            if (!present) {
+                // Swept while the socket was briefly idle — re-register.
+                const identity = await loadViewerIdentity(conn.userId);
+                if (identity)
+                    await presence.join(conn.pageId, identity);
+            }
+        }
+        catch (err) {
+            debug('heartbeat failed for page %s: %s', conn.pageId, err.message);
+        }
+    };
+    /** Handle a socket close — remove the viewer and re-broadcast. */
+    const handleClose = async (conn) => {
+        connections.delete(conn.ws);
+        // Only `leave` when no *other* socket for the same user-page pair
+        // remains — multi-tab dedup: closing one of three tabs must not
+        // remove the user from the viewer list.
+        let userStillConnected = false;
+        for (const other of connections.values()) {
+            if (other.userId === conn.userId && other.pageId === conn.pageId) {
+                userStillConnected = true;
+                break;
+            }
+        }
+        if (userStillConnected) {
+            debug('close: user %s still has another tab on page %s — keep viewer', conn.userId, conn.pageId);
+            return;
+        }
+        try {
+            await presence.leave(conn.pageId, conn.userId);
+        }
+        catch (err) {
+            debug('leave failed for page %s: %s', conn.pageId, err.message);
+        }
+    };
+    /**
+     * `'upgrade'` handler. Path-filter first so the sibling `/collab`
+     * handler keeps its slot; `socket.destroy()` is intentionally NOT
+     * called on a no-match so Node moves on to the next listener.
+     */
+    const upgradeHandler = (request, socket, head) => {
+        const { pathname } = splitUrl(request.url ?? '');
+        if (pathname !== PRESENCE_PATH && !pathname.startsWith(`${PRESENCE_PATH}/`)) {
+            return; // not ours — let other upgrade handlers try.
+        }
+        wss.handleUpgrade(request, socket, head, (ws) => {
+            void wireConnection(ws, request);
+        });
+    };
+    httpServer.on('upgrade', upgradeHandler);
+    debug('presence attached to http.Server (path=%s)', PRESENCE_PATH);
+    let didShutdown = false;
+    return {
+        async shutdown() {
+            if (didShutdown)
+                return;
+            didShutdown = true;
+            // 1. Refuse new upgrades.
+            try {
+                httpServer.off('upgrade', upgradeHandler);
+            }
+            catch {
+                // best-effort — server may already be tearing down.
+            }
+            // 2. Stop reacting to viewer-list changes.
+            try {
+                unsubscribe();
+            }
+            catch {
+                // best-effort
+            }
+            // 3. Politely close every live socket.
+            for (const conn of connections.values()) {
+                try {
+                    conn.ws.close(WS_CLOSE.SHUTDOWN, 'server shutting down');
+                }
+                catch {
+                    // ignore — best-effort
+                }
+            }
+            // 4. Brief drain so close frames flush.
+            if (connections.size > 0) {
+                await new Promise((resolveDrain) => setTimeout(resolveDrain, SHUTDOWN_DRAIN_MS));
+            }
+            // 5. Force-terminate stragglers.
+            try {
+                for (const conn of connections.values()) {
+                    try {
+                        conn.ws.terminate();
+                    }
+                    catch {
+                        // ignore
+                    }
+                }
+                connections.clear();
+                wss.close();
+            }
+            catch (err) {
+                console.error('[crowi:presence] wss.close failed during shutdown:', err);
+            }
+            // 6. Tear down the presence service's pub/sub subscriber.
+            try {
+                await presence.shutdown();
+            }
+            catch (err) {
+                console.error('[crowi:presence] presence.shutdown failed:', err);
+            }
+        },
+    };
+}
+//# sourceMappingURL=attach.js.map

package/dist/presence/attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.js","sourceRoot":"","sources":["../../src/presence/attach.ts"],"names":[],"mappings":";;;;;AA0GA,oDA+UC;AAvbD,kDAA0B;AAC1B,2BAAoE;AACpE,sDAAkE;AAKlE,4DAAkE;AAClE,mDAAgF;AAEhF,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,uBAAuB,CAAC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC;;;;GAIG;AACH,MAAM,QAAQ,GAAG;IACf,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;CACN,CAAC;AAEX,kEAAkE;AAClE,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAuC,EAAE;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;AACrI,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;GAGG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AA6B9B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACI,KAAK,UAAU,oBAAoB,CAAC,UAAsB,EAAE,KAAY;IAC7E,MAAM,iBAAiB,GAAG,IAAA,wCAAuB,GAAE,CAAC;IACpD,MAAM,QAAQ,GAAoB,MAAM,IAAA,6BAAkB,EAAC,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAiC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,+DAA+D;IAC/D,wDAAwD;IACxD,MAAM,GAAG,GAAG,IAAI,oBAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,qEAAqE;IACrE,+DAA+D;IAC/D,YAAY;IACZ,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IAE/D,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,CAAC,EAAe,EAAE,OAAgB,EAAQ,EAAE;QAC3D,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;YAAE,OAAO;QACtC,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,iBAAiB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QAC/D,mEAAmE;QACnE,6DAA6D;QAC7D,mBAAmB;QACnB,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,OAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,gDAAgD,MAAM,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,CAAC;QACtD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,iEAAiE;IACjE,yCAAyC;IACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,MAAc,EAAE,EAAE;QAC/D,KAAK,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAc,EAAE,MAAc,EAAoB,EAAE;QACnF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxB,+DAA+D;YAC/D,gEAAgE;YAChE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAwB,CAAC;YAC5E,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,mDAAmD,EAAE,MAAM,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACnG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,qEAAqE;IACrE,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC5E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,WAAW,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE;YACnD,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;SACjC,CAAC;IACJ,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,cAAc,GAAG,KAAK,EAAE,EAAe,EAAE,OAAwB,EAAiB,EAAE;QACxF,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAE5D,2DAA2D;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAClD,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,gEAAgE;QAChE,gDAAgD;QAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5D,KAAK,CAAC,2CAA2C,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/E,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,iEAAiE;QACjE,iEAAiE;QACjE,2DAA2D;QAC3D,iEAAiE;QACjE,mEAAmE;QACnE,2CAA2C;QAC3C,MAAM,IAAI,GAAuB;YAC/B,EAAE;YACF,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,CAAC;SAClB,CAAC;QACF,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,sDAAsD;YACtD,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,kEAAkE;QAClE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,KAAK,CAAC,4CAA4C,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClF,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,sCAAsC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,+DAA+D;QAC/D,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,qDAAqD,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAC;QAC3D,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1B,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAA0B,EAAE,EAAE;YAC9C,KAAK,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,iEAAiE;QACjE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,MAAM,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChG,CAAC;QAED,mEAAmE;QACnE,kEAAkE;QAClE,+BAA+B;QAC/B,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,oDAAoD,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACtF,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,KAAK,CAAC,oCAAoC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,mBAAmB,GAAG,KAAK,EAAE,IAAwB,EAAE,IAA0B,EAAiB,EAAE;QACxG,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtG,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,0CAA0C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,0CAA2B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,CAAC,gDAAgD,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,yBAAyB;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,KAAK,CAAC,0DAA0D,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5F,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvD,IAAI,QAAQ;oBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,kCAAkC,EAAE,IAAI,CAAC,MAAM,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,kEAAkE;IAClE,MAAM,WAAW,GAAG,KAAK,EAAE,IAAwB,EAAiB,EAAE;QACpE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5B,kEAAkE;QAClE,gEAAgE;QAChE,wCAAwC;QACxC,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjE,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACvB,KAAK,CAAC,+DAA+D,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC,MAAM,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,cAAc,GAAG,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY,EAAQ,EAAE;QACtF,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,6CAA6C;QACvD,CAAC;QACD,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC9C,KAAK,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACzC,KAAK,CAAC,4CAA4C,EAAE,aAAa,CAAC,CAAC;IAEnE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,IAAI,WAAW;gBAAE,OAAO;YACxB,WAAW,GAAG,IAAI,CAAC;YAEnB,0BAA0B;YAC1B,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC;gBACH,WAAW,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YAED,uCAAuC;YACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACzF,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxC,IAAI,CAAC;wBACH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;oBACtB,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;YAC3E,CAAC;YAED,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}