@fdm-monster/server 1.5.4 → 1.6.0-rc2

package/dist/services/orm/refresh-token.service.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "RefreshTokenService", {
+    enumerable: true,
+    get: function() {
+        return RefreshTokenService;
+    }
+});
+const _baseservice = require("./base.service");
+const _entities = require("../../entities");
+const _refreshtokendto = require("../interfaces/refresh-token.dto");
+const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
+const _uuid = require("uuid");
+const _serverconstants = require("../../server.constants");
+const _typeorm = require("typeorm");
+const _authorizationconstants = require("../../constants/authorization.constants");
+class RefreshTokenService extends (0, _baseservice.BaseService)(_entities.RefreshToken, _refreshtokendto.RefreshTokenDto) {
+    settingsStore;
+    logger;
+    constructor({ typeormService, settingsStore, loggerFactory }){
+        super({
+            typeormService
+        });
+        this.settingsStore = settingsStore;
+        this.logger = loggerFactory(RefreshTokenService.name);
+    }
+    toDto(entity) {
+        return {
+            id: entity.id,
+            userId: entity.userId,
+            expiresAt: entity.expiresAt,
+            refreshAttemptsUsed: entity.refreshAttemptsUsed
+        };
+    }
+    async getRefreshToken(refreshToken, throwNotFoundError = true) {
+        const entity = await this.repository.findOneBy({
+            refreshToken
+        });
+        if (!entity) {
+            if (throwNotFoundError) {
+                throw new _runtimeexceptions.AuthenticationError(`The entity ${_entities.RefreshToken.name} '${refreshToken}' was not found.`, _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredRefreshToken);
+            }
+            return null;
+        }
+        return entity;
+    }
+    async createRefreshTokenForUserId(userId) {
+        const { refreshTokenExpiry } = await this.settingsStore.getCredentialSettings();
+        const refreshToken = (0, _uuid.v4)();
+        const timespan = refreshTokenExpiry ?? _serverconstants.AppConstants.DEFAULT_REFRESH_TOKEN_EXPIRY;
+        if (!refreshTokenExpiry) {
+            this.logger.warn(`Refresh token expiry not set in Settings:credentials, using default ${timespan} seconds}`);
+        }
+        await this.create({
+            userId,
+            expiresAt: Date.now() + timespan * 1000,
+            refreshToken,
+            refreshAttemptsUsed: 0
+        });
+        return refreshToken;
+    }
+    async updateRefreshTokenAttempts(refreshToken, refreshAttemptsUsed) {
+        await this.getRefreshToken(refreshToken, true);
+        await this.repository.update({
+            refreshToken
+        }, {
+            refreshAttemptsUsed
+        });
+    }
+    async purgeAllOutdatedRefreshTokens() {
+        const result = await this.repository.delete({
+            expiresAt: (0, _typeorm.LessThan)(Date.now())
+        });
+        if (result.affected) {
+            this.logger.debug(`Removed ${result.affected} outdated refresh tokens`);
+        }
+    }
+    async deleteRefreshTokenByUserId(userId) {
+        const result = await this.repository.delete({
+            userId
+        });
+        if (result.affected) {
+            this.logger.debug(`Removed ${result.affected} login refresh tokens for user ${userId}`);
+        }
+    }
+    async deleteRefreshToken(refreshToken) {
+        const result = await this.repository.delete({
+            refreshToken
+        });
+        if (result.affected) {
+            this.logger.debug(`Removed ${result.affected} login refresh tokens`);
+        }
+    }
+    async purgeOutdatedRefreshTokensByUserId(userId) {
+        const result = await this.repository.delete({
+            userId,
+            expiresAt: (0, _typeorm.LessThan)(Date.now())
+        });
+        if (result.affected) {
+            this.logger.debug(`Removed ${result.affected} outdated login refresh tokens for user ${userId}`);
+        }
+    }
+}
+
+//# sourceMappingURL=refresh-token.service.js.map

package/dist/services/orm/refresh-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/services/orm/refresh-token.service.ts"],"names":["RefreshTokenService","BaseService","RefreshToken","RefreshTokenDto","settingsStore","logger","constructor","typeormService","loggerFactory","name","toDto","entity","id","userId","expiresAt","refreshAttemptsUsed","getRefreshToken","refreshToken","throwNotFoundError","repository","findOneBy","AuthenticationError","AUTH_ERROR_REASON","InvalidOrExpiredRefreshToken","createRefreshTokenForUserId","refreshTokenExpiry","getCredentialSettings","uuidv4","timespan","AppConstants","DEFAULT_REFRESH_TOKEN_EXPIRY","warn","create","Date","now","updateRefreshTokenAttempts","update","purgeAllOutdatedRefreshTokens","result","delete","LessThan","affected","debug","deleteRefreshTokenByUserId","deleteRefreshToken","purgeOutdatedRefreshTokensByUserId"],"mappings":";;;;+BAeaA;;;eAAAA;;;6BAfe;0BACC;iCAGG;mCACuB;sBAE1B;iCACA;yBAIJ;wCACS;AAE3B,MAAMA,4BACHC,IAAAA,wBAAW,EAACC,sBAAY,EAAEC,gCAAe;IAGzCC,cAA6B;IAC7BC,OAAsB;IAE9BC,YAAY,EACVC,cAAc,EACdH,aAAa,EACbI,aAAa,EAKd,CAAE;QACD,KAAK,CAAC;YAAED;QAAe;QACvB,IAAI,CAACH,aAAa,GAAGA;QACrB,IAAI,CAACC,MAAM,GAAGG,cAAcR,oBAAoBS,IAAI;IACtD;IAEAC,MAAMC,MAAoB,EAAiC;QACzD,OAAO;YACLC,IAAID,OAAOC,EAAE;YACbC,QAAQF,OAAOE,MAAM;YACrBC,WAAWH,OAAOG,SAAS;YAG3BC,qBAAqBJ,OAAOI,mBAAmB;QACjD;IACF;IAEA,MAAMC,gBAAgBC,YAAoB,EAAEC,qBAAqB,IAAI,EAAgC;QACnG,MAAMP,SAAS,MAAM,IAAI,CAACQ,UAAU,CAACC,SAAS,CAAC;YAAEH;QAAa;QAC9D,IAAI,CAACN,QAAQ;YACX,IAAIO,oBAAoB;gBACtB,MAAM,IAAIG,sCAAmB,CAC3B,CAAC,WAAW,EAAEnB,sBAAY,CAACO,IAAI,CAAC,EAAE,EAAEQ,aAAa,gBAAgB,CAAC,EAClEK,yCAAiB,CAACC,4BAA4B;YAElD;YACA,OAAO;QACT;QAEA,OAAOZ;IACT;IAEA,MAAMa,4BAA4BX,MAAoB,EAAmB;QACvE,MAAM,EAAEY,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAACrB,aAAa,CAACsB,qBAAqB;QAC7E,MAAMT,eAAeU,IAAAA,QAAM;QAE3B,MAAMC,WAAWH,sBAAsBI,6BAAY,CAACC,4BAA4B;QAChF,IAAI,CAACL,oBAAoB;YACvB,IAAI,CAACpB,MAAM,CAAC0B,IAAI,CAAC,CAAC,oEAAoE,EAAEH,SAAS,SAAS,CAAC;QAC7G;QAEA,MAAM,IAAI,CAACI,MAAM,CAAC;YAChBnB;YACAC,WAAWmB,KAAKC,GAAG,KAAKN,WAAW;YACnCX;YACAF,qBAAqB;QACvB;QAEA,OAAOE;IACT;IAEA,MAAMkB,2BAA2BlB,YAAoB,EAAEF,mBAA2B,EAAiB;QACjG,MAAM,IAAI,CAACC,eAAe,CAACC,cAAc;QAEzC,MAAM,IAAI,CAACE,UAAU,CAACiB,MAAM,CAAC;YAAEnB;QAAa,GAAG;YAAEF;QAAoB;IACvE;IAEA,MAAMsB,gCAA+C;QACnD,MAAMC,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CzB,WAAW0B,IAAAA,iBAAQ,EAACP,KAAKC,GAAG;QAC9B;QAEA,IAAII,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACpC,MAAM,CAACqC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,wBAAwB,CAAC;QACxE;IACF;IAEA,MAAME,2BAA2B9B,MAAoB,EAAiB;QACpE,MAAMyB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1C1B;QACF;QAEA,IAAIyB,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACpC,MAAM,CAACqC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,+BAA+B,EAAE5B,OAAO,CAAC;QACxF;IACF;IAEA,MAAM+B,mBAAmB3B,YAAoB,EAAiB;QAC5D,MAAMqB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1CtB;QACF;QAEA,IAAIqB,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACpC,MAAM,CAACqC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,qBAAqB,CAAC;QACrE;IACF;IAEA,MAAMI,mCAAmChC,MAAoB,EAAiB;QAC5E,MAAMyB,SAAS,MAAM,IAAI,CAACnB,UAAU,CAACoB,MAAM,CAAC;YAC1C1B;YACAC,WAAW0B,IAAAA,iBAAQ,EAACP,KAAKC,GAAG;QAC9B;QAEA,IAAII,OAAOG,QAAQ,EAAE;YACnB,IAAI,CAACpC,MAAM,CAACqC,KAAK,CAAC,CAAC,QAAQ,EAAEJ,OAAOG,QAAQ,CAAC,wCAAwC,EAAE5B,OAAO,CAAC;QACjG;IACF;AACF"}

package/dist/services/orm/role.service.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "RoleService", {
+    enumerable: true,
+    get: function() {
+        return RoleService;
+    }
+});
+const _baseservice = require("./base.service");
+const _entities = require("../../entities");
+const _roledto = require("../interfaces/role.dto");
+const _lodash = require("lodash");
+const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
+const _authorizationconstants = require("../../constants/authorization.constants");
+class RoleService extends (0, _baseservice.BaseService)(_entities.Role, _roledto.RoleDto) {
+    settingsStore;
+    appDefaultRole;
+    appDefaultRoleNoLogin;
+    logger;
+    constructor({ loggerFactory, appDefaultRole, appDefaultRoleNoLogin, settingsStore, typeormService }){
+        super({
+            typeormService
+        });
+        this.logger = loggerFactory(RoleService.name);
+        this.settingsStore = settingsStore;
+        this.appDefaultRole = appDefaultRole;
+        this.appDefaultRoleNoLogin = appDefaultRoleNoLogin;
+    }
+    _roles = [];
+    get roles() {
+        return this._roles;
+    }
+    async getAppDefaultRole() {
+        if (await this.settingsStore.getLoginRequired()) {
+            return this.appDefaultRole;
+        }
+        return this.appDefaultRoleNoLogin;
+    }
+    async getAppDefaultRoleIds() {
+        if (!this._roles?.length) {
+            await this.syncRoles();
+        }
+        const guestRole = this.getRoleByName(await this.getAppDefaultRole());
+        return [
+            guestRole.id
+        ];
+    }
+    toDto(role) {
+        return {
+            id: role.id,
+            name: role.name
+        };
+    }
+    getRolesPermissions(roles) {
+        let permissions = [];
+        if (!roles?.length) return [];
+        for (let role of roles){
+            const normalizedRole = this.normalizeRoleIdOrName(role);
+            const rolePermissions = this.getRolePermissions(normalizedRole);
+            permissions = (0, _lodash.union)(permissions, rolePermissions);
+        }
+        return permissions;
+    }
+    authorizeRoles(requiredRoles, assignedRoles, subset) {
+        let isAuthorized = false;
+        if (!requiredRoles?.length) return true;
+        requiredRoles.forEach((rr)=>{
+            const result = this.authorizeRole(rr, assignedRoles);
+            isAuthorized = subset ? isAuthorized || result : isAuthorized && result;
+        });
+        return isAuthorized;
+    }
+    authorizeRole(requiredRole, assignedRoles) {
+        return !!assignedRoles.find((ar)=>{
+            const normalizedRole = this.normalizeRoleIdOrName(ar);
+            if (!normalizedRole) return false;
+            return normalizedRole === requiredRole;
+        });
+    }
+    getManyRoles(roleIds) {
+        return roleIds.map((roleId)=>this.getRole(roleId));
+    }
+    getRole(roleId) {
+        const role = this._roles.find((r)=>r.id === roleId);
+        if (!role) throw new _runtimeexceptions.NotFoundException(`Role Id '${roleId}' not found`);
+        return role;
+    }
+    getRoleByName(roleName) {
+        const role = this._roles.find((r)=>r.name === roleName);
+        if (!role) throw new _runtimeexceptions.NotFoundException(`Role by name ${roleName} not found`);
+        return role;
+    }
+    getRolePermissions(role) {
+        const normalizedRole = this.normalizeRoleIdOrName(role);
+        return _authorizationconstants.ROLE_PERMS[normalizedRole];
+    }
+    async getSynchronizedRoleByName(roleName) {
+        if (!this._roles?.length) {
+            await this.syncRoles();
+        }
+        return this.getRoleByName(roleName);
+    }
+    normalizeRoleIdOrName(assignedRole) {
+        const roleInstance = this.roles.find((r)=>r.id === assignedRole || r.name === assignedRole);
+        if (!roleInstance) {
+            console.warn(`The role by ID ${assignedRole} did not exist in definition. Skipping.`);
+            return;
+        }
+        return roleInstance.name;
+    }
+    async syncRoles() {
+        this._roles = [];
+        for (let roleName of Object.values(_authorizationconstants.ROLES)){
+            const storedRole = await this.repository.findOneBy({
+                name: roleName
+            });
+            if (!storedRole) {
+                const newRole = await this.create({
+                    name: roleName
+                });
+                this._roles.push(newRole);
+            } else {
+                this._roles.push(storedRole);
+            }
+        }
+    }
+}
+
+//# sourceMappingURL=role.service.js.map

package/dist/services/orm/role.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/services/orm/role.service.ts"],"names":["RoleService","BaseService","Role","RoleDto","settingsStore","appDefaultRole","appDefaultRoleNoLogin","logger","constructor","loggerFactory","typeormService","name","_roles","roles","getAppDefaultRole","getLoginRequired","getAppDefaultRoleIds","length","syncRoles","guestRole","getRoleByName","id","toDto","role","getRolesPermissions","permissions","normalizedRole","normalizeRoleIdOrName","rolePermissions","getRolePermissions","union","authorizeRoles","requiredRoles","assignedRoles","subset","isAuthorized","forEach","rr","result","authorizeRole","requiredRole","find","ar","getManyRoles","roleIds","map","roleId","getRole","r","NotFoundException","roleName","ROLE_PERMS","getSynchronizedRoleByName","assignedRole","roleInstance","console","warn","Object","values","ROLES","storedRole","repository","findOneBy","newRole","create","push"],"mappings":";;;;+BAaaA;;;eAAAA;;;6BAbe;0BAGP;yBAKG;wBACF;mCACY;wCACA;AAE3B,MAAMA,oBAAoBC,IAAAA,wBAAW,EAACC,cAAI,EAAEC,gBAAO;IACxDC,cAA6B;IAC7BC,eAAwB;IACxBC,sBAA8B;IACtBC,OAAsB;IAE9BC,YAAY,EACVC,aAAa,EACbJ,cAAc,EACdC,qBAAqB,EACrBF,aAAa,EACbM,cAAc,EAOf,CAAE;QACD,KAAK,CAAC;YAAEA;QAAe;QACvB,IAAI,CAACH,MAAM,GAAGE,cAAcT,YAAYW,IAAI;QAC5C,IAAI,CAACP,aAAa,GAAGA;QACrB,IAAI,CAACC,cAAc,GAAGA;QACtB,IAAI,CAACC,qBAAqB,GAAGA;IAC/B;IAEQM,SAAiB,EAAE,CAAC;IAE5B,IAAIC,QAAQ;QACV,OAAO,IAAI,CAACD,MAAM;IACpB;IAEA,MAAME,oBAAqC;QACzC,IAAI,MAAM,IAAI,CAACV,aAAa,CAACW,gBAAgB,IAAI;YAC/C,OAAO,IAAI,CAACV,cAAc;QAC5B;QACA,OAAO,IAAI,CAACC,qBAAqB;IACnC;IAEA,MAAMU,uBAA0C;QAC9C,IAAI,CAAC,IAAI,CAACJ,MAAM,EAAEK,QAAQ;YACxB,MAAM,IAAI,CAACC,SAAS;QACtB;QAEA,MAAMC,YAAY,IAAI,CAACC,aAAa,CAAC,MAAM,IAAI,CAACN,iBAAiB;QACjE,OAAO;YAACK,UAAUE,EAAE;SAAC;IACvB;IAEAC,MAAMC,IAAU,EAAyB;QACvC,OAAO;YACLF,IAAIE,KAAKF,EAAE;YACXV,MAAMY,KAAKZ,IAAI;QACjB;IACF;IAEAa,oBAAoBX,KAAgC,EAAY;QAC9D,IAAIY,cAAwB,EAAE;QAC9B,IAAI,CAACZ,OAAOI,QAAQ,OAAO,EAAE;QAE7B,KAAK,IAAIM,QAAQV,MAAO;YACtB,MAAMa,iBAAiB,IAAI,CAACC,qBAAqB,CAACJ;YAClD,MAAMK,kBAAkB,IAAI,CAACC,kBAAkB,CAACH;YAChDD,cAAcK,IAAAA,aAAK,EAACL,aAAaG;QACnC;QAEA,OAAOH;IACT;IAEAM,eAAeC,aAAwC,EAAEC,aAAwC,EAAEC,MAAe,EAAW;QAC3H,IAAIC,eAAe;QAEnB,IAAI,CAACH,eAAef,QAAQ,OAAO;QACnCe,cAAcI,OAAO,CAAC,CAACC;YACrB,MAAMC,SAAS,IAAI,CAACC,aAAa,CAACF,IAAIJ;YACtCE,eAAeD,SAASC,gBAAgBG,SAASH,gBAAgBG;QACnE;QAEA,OAAOH;IACT;IAEAI,cAAcC,YAAmC,EAAEP,aAAwC,EAAW;QACpG,OAAO,CAAC,CAACA,cAAcQ,IAAI,CAAC,CAACC;YAC3B,MAAMhB,iBAAiB,IAAI,CAACC,qBAAqB,CAACe;YAClD,IAAI,CAAChB,gBAAgB,OAAO;YAC5B,OAAOA,mBAAmBc;QAC5B;IACF;IAEAG,aAAaC,OAAuB,EAAU;QAC5C,OAAOA,QAAQC,GAAG,CAAC,CAACC,SAAW,IAAI,CAACC,OAAO,CAACD;IAC9C;IAEAC,QAAQD,MAAoB,EAAQ;QAClC,MAAMvB,OAAO,IAAI,CAACX,MAAM,CAAC6B,IAAI,CAAC,CAACO,IAAMA,EAAE3B,EAAE,KAAKyB;QAC9C,IAAI,CAACvB,MAAM,MAAM,IAAI0B,oCAAiB,CAAC,CAAC,SAAS,EAAEH,OAAO,WAAW,CAAC;QAEtE,OAAOvB;IACT;IAEAH,cAAc8B,QAAgB,EAAQ;QACpC,MAAM3B,OAAO,IAAI,CAACX,MAAM,CAAC6B,IAAI,CAAC,CAACO,IAAMA,EAAErC,IAAI,KAAKuC;QAChD,IAAI,CAAC3B,MAAM,MAAM,IAAI0B,oCAAiB,CAAC,CAAC,aAAa,EAAEC,SAAS,UAAU,CAAC;QAE3E,OAAO3B;IACT;IAEAM,mBAAmBN,IAA2B,EAAY;QACxD,MAAMG,iBAAiB,IAAI,CAACC,qBAAqB,CAACJ;QAClD,OAAO4B,kCAAU,CAACzB,eAAe;IACnC;IAEA,MAAM0B,0BAA0BF,QAAgB,EAAiB;QAC/D,IAAI,CAAC,IAAI,CAACtC,MAAM,EAAEK,QAAQ;YACxB,MAAM,IAAI,CAACC,SAAS;QACtB;QAEA,OAAO,IAAI,CAACE,aAAa,CAAC8B;IAC5B;IAEAvB,sBAAsB0B,YAAmC,EAAsB;QAC7E,MAAMC,eAAe,IAAI,CAACzC,KAAK,CAAC4B,IAAI,CAAC,CAACO,IAAMA,EAAE3B,EAAE,KAAKgC,gBAAgBL,EAAErC,IAAI,KAAK0C;QAChF,IAAI,CAACC,cAAc;YACjBC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEH,aAAa,uCAAuC,CAAC;YACpF;QACF;QAEA,OAAOC,aAAa3C,IAAI;IAC1B;IAEA,MAAMO,YAA2B;QAC/B,IAAI,CAACN,MAAM,GAAG,EAAE;QAChB,KAAK,IAAIsC,YAAYO,OAAOC,MAAM,CAACC,6BAAK,EAAG;YACzC,MAAMC,aAAa,MAAM,IAAI,CAACC,UAAU,CAACC,SAAS,CAAC;gBAAEnD,MAAMuC;YAAS;YACpE,IAAI,CAACU,YAAY;gBACf,MAAMG,UAAU,MAAM,IAAI,CAACC,MAAM,CAAC;oBAChCrD,MAAMuC;gBACR;gBACA,IAAI,CAACtC,MAAM,CAACqD,IAAI,CAACF;YACnB,OAAO;gBACL,IAAI,CAACnD,MAAM,CAACqD,IAAI,CAACL;YACnB;QACF;IACF;AACF"}

package/dist/services/orm/settings.service.js

@@ -0,0 +1,208 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "SettingsService2", {
+    enumerable: true,
+    get: function() {
+        return SettingsService2;
+    }
+});
+const _entities = require("../../entities");
+const _serversettingsconstants = require("../../constants/server-settings.constants");
+const _baseservice = require("./base.service");
+const _settingsdto = require("../interfaces/settings.dto");
+const _runtimeexceptions = require("../../exceptions/runtime.exceptions");
+const _serverconstants = require("../../server.constants");
+const _validators = require("../../handlers/validators");
+const _settingsservicevalidation = require("../validators/settings-service.validation");
+class SettingsService2 extends (0, _baseservice.BaseService)(_entities.Settings, _settingsdto.SettingsDto) {
+    configService;
+    constructor({ configService, typeormService }){
+        super({
+            typeormService
+        });
+        this.configService = configService;
+    }
+    toDto(entity) {
+        return {
+            [_serversettingsconstants.serverSettingsKey]: entity[_serversettingsconstants.serverSettingsKey],
+            [_serversettingsconstants.frontendSettingKey]: entity[_serversettingsconstants.frontendSettingKey],
+            [_serversettingsconstants.fileCleanSettingKey]: entity[_serversettingsconstants.fileCleanSettingKey],
+            [_serversettingsconstants.wizardSettingKey]: entity[_serversettingsconstants.wizardSettingKey],
+            [_serversettingsconstants.timeoutSettingKey]: entity[_serversettingsconstants.timeoutSettingKey]
+        };
+    }
+    async getOrCreate() {
+        let settings = await this.get();
+        if (!settings) {
+            const settings = await this.create({
+                [_serversettingsconstants.serverSettingsKey]: (0, _serversettingsconstants.getDefaultServerSettings)(),
+                [_serversettingsconstants.credentialSettingsKey]: (0, _serversettingsconstants.getDefaultCredentialSettings)(),
+                [_serversettingsconstants.wizardSettingKey]: (0, _serversettingsconstants.getDefaultWizardSettings)(),
+                [_serversettingsconstants.fileCleanSettingKey]: (0, _serversettingsconstants.getDefaultFileCleanSettings)(),
+                [_serversettingsconstants.frontendSettingKey]: (0, _serversettingsconstants.getDefaultFrontendSettings)(),
+                [_serversettingsconstants.timeoutSettingKey]: (0, _serversettingsconstants.getDefaultTimeout)()
+            });
+            return settings;
+        } else {
+            settings = this.migrateSettingsRuntime(settings);
+        }
+        return settings;
+    }
+    async getServerSettings() {
+        const settings = await this.getOrCreate();
+        return settings[_serversettingsconstants.serverSettingsKey];
+    }
+    async patchServerSettings(serverSettingsPartial) {
+        const entity = await this.getOrCreate();
+        if (!entity[_serversettingsconstants.serverSettingsKey]) {
+            throw new Error("No existing server settings found, cant patch");
+        }
+        const newServerSettings = {
+            ...entity[_serversettingsconstants.serverSettingsKey],
+            ...serverSettingsPartial
+        };
+        return await this.updateServerSettings(newServerSettings);
+    }
+    async updateServerSettings(serverSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.serverSettingsKey] = serverSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async updateCredentialSettings(credentialSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.credentialSettingsKey] = credentialSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async updateFileCleanSettings(fileCleanSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.fileCleanSettingKey] = fileCleanSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async updateFrontendSettings(frontendSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.frontendSettingKey] = frontendSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async updateTimeoutSettings(timeoutSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.timeoutSettingKey] = timeoutSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async patchWizardSettings(wizardSettingsPartial) {
+        const entity = await this.getOrCreate();
+        if (!entity[_serversettingsconstants.wizardSettingKey]) {
+            throw new Error("No existing wizard settings found, cant patch");
+        }
+        const newWizardSettings = {
+            ...entity[_serversettingsconstants.wizardSettingKey],
+            ...wizardSettingsPartial
+        };
+        return await this.updateWizardSettings(newWizardSettings);
+    }
+    async updateWizardSettings(wizardSettings) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.wizardSettingKey] = wizardSettings;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async get() {
+        const settingsList = await this.repository.find({
+            take: 1
+        });
+        return settingsList?.length ? settingsList[0] : null;
+    }
+    migrateSettingsRuntime(knownSettings) {
+        const entity = knownSettings;
+        if (!entity[_serversettingsconstants.fileCleanSettingKey]) {
+            entity[_serversettingsconstants.fileCleanSettingKey] = (0, _serversettingsconstants.getDefaultFileCleanSettings)();
+        }
+        if (!entity[_serversettingsconstants.wizardSettingKey]) {
+            entity[_serversettingsconstants.wizardSettingKey] = (0, _serversettingsconstants.getDefaultWizardSettings)();
+        }
+        if (!entity[_serversettingsconstants.timeoutSettingKey]) {
+            entity[_serversettingsconstants.timeoutSettingKey] = (0, _serversettingsconstants.getDefaultTimeout)();
+        }
+        if (!entity[_serversettingsconstants.serverSettingsKey]) {
+            entity[_serversettingsconstants.serverSettingsKey] = (0, _serversettingsconstants.getDefaultServerSettings)();
+        }
+        if (!entity[_serversettingsconstants.credentialSettingsKey]) {
+            entity[_serversettingsconstants.credentialSettingsKey] = (0, _serversettingsconstants.getDefaultCredentialSettings)();
+        }
+        if (!this.isWhiteListSettingEnabled()) {
+            entity.server.whitelistEnabled = false;
+            entity.server.whitelistedIpAddresses = (0, _serversettingsconstants.getDefaultWhitelistIpAddresses)();
+        } else if (!entity.server.whitelistedIpAddresses?.length) {
+            entity.server.whitelistedIpAddresses = (0, _serversettingsconstants.getDefaultWhitelistIpAddresses)();
+        }
+        if (!entity[_serversettingsconstants.frontendSettingKey]) {
+            entity[_serversettingsconstants.frontendSettingKey] = (0, _serversettingsconstants.getDefaultFrontendSettings)();
+        }
+        return entity;
+    }
+    async patchCredentialSettings(patchUpdate) {
+        const entity = await this.getOrCreate();
+        if (!entity[_serversettingsconstants.credentialSettingsKey]) {
+            throw new Error("No existing wizard settings found, cant patch");
+        }
+        const newCredentialSettings = {
+            ...entity[_serversettingsconstants.credentialSettingsKey],
+            ...patchUpdate
+        };
+        return await this.updateCredentialSettings(newCredentialSettings);
+    }
+    async patchFileCleanSettings(patchUpdate) {
+        const entity = await this.getOrCreate();
+        if (!entity[_serversettingsconstants.fileCleanSettingKey]) {
+            throw new Error("No existing wizard settings found, cant patch");
+        }
+        const newFileCleanSettings = {
+            ...entity[_serversettingsconstants.fileCleanSettingKey],
+            ...patchUpdate
+        };
+        return await this.updateFileCleanSettings(newFileCleanSettings);
+    }
+    async setLoginRequired(enabled) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.serverSettingsKey].loginRequired = enabled;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async setRegistrationEnabled(enabled) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.serverSettingsKey].registration = enabled;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async setSentryDiagnosticsEnabled(enabled) {
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.serverSettingsKey].sentryDiagnosticsEnabled = enabled;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    async setWhitelist(enabled, ipAddresses) {
+        if (!this.isWhiteListSettingEnabled()) {
+            throw new _runtimeexceptions.BadRequestException("Whitelist settings are not enabled");
+        }
+        await (0, _validators.validateInput)({
+            whitelistEnabled: enabled,
+            whitelistedIpAddresses: ipAddresses
+        }, _settingsservicevalidation.whitelistSettingUpdateRules);
+        const entity = await this.getOrCreate();
+        entity[_serversettingsconstants.serverSettingsKey].whitelistEnabled = enabled;
+        entity[_serversettingsconstants.serverSettingsKey].whitelistedIpAddresses = ipAddresses;
+        await this.update(entity.id, entity);
+        return entity;
+    }
+    isWhiteListSettingEnabled() {
+        return this.configService.get(_serverconstants.AppConstants.ENABLE_EXPERIMENTAL_WHITELIST_SETTINGS, "false") === "true";
+    }
+}
+
+//# sourceMappingURL=settings.service.js.map

package/dist/services/orm/settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/services/orm/settings.service.ts"],"names":["SettingsService2","BaseService","Settings","SettingsDto","configService","constructor","typeormService","toDto","entity","serverSettingsKey","frontendSettingKey","fileCleanSettingKey","wizardSettingKey","timeoutSettingKey","getOrCreate","settings","get","create","getDefaultServerSettings","credentialSettingsKey","getDefaultCredentialSettings","getDefaultWizardSettings","getDefaultFileCleanSettings","getDefaultFrontendSettings","getDefaultTimeout","migrateSettingsRuntime","getServerSettings","patchServerSettings","serverSettingsPartial","Error","newServerSettings","updateServerSettings","serverSettings","update","id","updateCredentialSettings","credentialSettings","updateFileCleanSettings","fileCleanSettings","updateFrontendSettings","frontendSettings","updateTimeoutSettings","timeoutSettings","patchWizardSettings","wizardSettingsPartial","newWizardSettings","updateWizardSettings","wizardSettings","settingsList","repository","find","take","length","knownSettings","isWhiteListSettingEnabled","server","whitelistEnabled","whitelistedIpAddresses","getDefaultWhitelistIpAddresses","patchCredentialSettings","patchUpdate","newCredentialSettings","patchFileCleanSettings","newFileCleanSettings","setLoginRequired","enabled","loginRequired","setRegistrationEnabled","registration","setSentryDiagnosticsEnabled","sentryDiagnosticsEnabled","setWhitelist","ipAddresses","BadRequestException","validateInput","whitelistSettingUpdateRules","AppConstants","ENABLE_EXPERIMENTAL_WHITELIST_SETTINGS"],"mappings":";;;;+BAoCaA;;;eAAAA;;;0BApCY;yCAelB;6BACqB;6BASrB;mCAI6B;iCACP;4BAGC;2CACc;AAErC,MAAMA,yBAAyBC,IAAAA,wBAAW,EAACC,kBAAQ,EAAEC,wBAAW;IACrEC,cAA8B;IAE9BC,YAAY,EAAED,aAAa,EAAEE,cAAc,EAAqE,CAAE;QAChH,KAAK,CAAC;YAAEA;QAAe;QACvB,IAAI,CAACF,aAAa,GAAGA;IACvB;IAEAG,MAAMC,MAAgB,EAA6B;QACjD,OAAO;YACL,CAACC,0CAAiB,CAAC,EAAED,MAAM,CAACC,0CAAiB,CAAC;YAC9C,CAACC,2CAAkB,CAAC,EAAEF,MAAM,CAACE,2CAAkB,CAAC;YAChD,CAACC,4CAAmB,CAAC,EAAEH,MAAM,CAACG,4CAAmB,CAAC;YAClD,CAACC,yCAAgB,CAAC,EAAEJ,MAAM,CAACI,yCAAgB,CAAC;YAC5C,CAACC,0CAAiB,CAAC,EAAEL,MAAM,CAACK,0CAAiB,CAAC;QAChD;IACF;IAEA,MAAMC,cAAc;QAClB,IAAIC,WAAW,MAAM,IAAI,CAACC,GAAG;QAE7B,IAAI,CAACD,UAAU;YACb,MAAMA,WAAW,MAAM,IAAI,CAACE,MAAM,CAAC;gBACjC,CAACR,0CAAiB,CAAC,EAAES,IAAAA,iDAAwB;gBAC7C,CAACC,8CAAqB,CAAC,EAAEC,IAAAA,qDAA4B;gBACrD,CAACR,yCAAgB,CAAC,EAAES,IAAAA,iDAAwB;gBAC5C,CAACV,4CAAmB,CAAC,EAAEW,IAAAA,oDAA2B;gBAClD,CAACZ,2CAAkB,CAAC,EAAEa,IAAAA,mDAA0B;gBAChD,CAACV,0CAAiB,CAAC,EAAEW,IAAAA,0CAAiB;YACxC;YACA,OAAOT;QACT,OAAO;YACLA,WAAW,IAAI,CAACU,sBAAsB,CAACV;QACzC;QAEA,OAAOA;IACT;IAEA,MAAMW,oBAAoB;QACxB,MAAMX,WAAW,MAAM,IAAI,CAACD,WAAW;QACvC,OAAOC,QAAQ,CAACN,0CAAiB,CAAC;IACpC;IAEA,MAAMkB,oBAAoBC,qBAAwC,EAAE;QAClE,MAAMpB,SAAS,MAAM,IAAI,CAACM,WAAW;QACrC,IAAI,CAACN,MAAM,CAACC,0CAAiB,CAAC,EAAE;YAC9B,MAAM,IAAIoB,MAAM;QAClB;QAEA,MAAMC,oBAAoB;YACxB,GAAGtB,MAAM,CAACC,0CAAiB,CAAC;YAC5B,GAAGmB,qBAAqB;QAC1B;QAEA,OAAO,MAAM,IAAI,CAACG,oBAAoB,CAACD;IACzC;IAEA,MAAMC,qBAAqBC,cAAiC,EAAE;QAC5D,MAAMxB,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACC,0CAAiB,CAAC,GAAGuB;QAC5B,MAAM,IAAI,CAACC,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM2B,yBAAyBC,kBAAyC,EAAE;QACxE,MAAM5B,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACW,8CAAqB,CAAC,GAAGiB;QAChC,MAAM,IAAI,CAACH,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM6B,wBAAwBC,iBAAuC,EAAE;QACrE,MAAM9B,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACG,4CAAmB,CAAC,GAAG2B;QAC9B,MAAM,IAAI,CAACL,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM+B,uBAAuBC,gBAAqC,EAAE;QAClE,MAAMhC,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACE,2CAAkB,CAAC,GAAG8B;QAC7B,MAAM,IAAI,CAACP,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAMiC,sBAAsBC,eAAmC,EAAE;QAC/D,MAAMlC,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACK,0CAAiB,CAAC,GAAG6B;QAC5B,MAAM,IAAI,CAACT,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAMmC,oBAAoBC,qBAAwC,EAAE;QAClE,MAAMpC,SAAS,MAAM,IAAI,CAACM,WAAW;QACrC,IAAI,CAACN,MAAM,CAACI,yCAAgB,CAAC,EAAE;YAC7B,MAAM,IAAIiB,MAAM;QAClB;QAEA,MAAMgB,oBAAoB;YACxB,GAAGrC,MAAM,CAACI,yCAAgB,CAAC;YAC3B,GAAGgC,qBAAqB;QAC1B;QAEA,OAAO,MAAM,IAAI,CAACE,oBAAoB,CAACD;IACzC;IAEA,MAAMC,qBAAqBC,cAAiC,EAAE;QAC5D,MAAMvC,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACI,yCAAgB,CAAC,GAAGmC;QAC3B,MAAM,IAAI,CAACd,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAMQ,MAAM;QACV,MAAMgC,eAAe,MAAM,IAAI,CAACC,UAAU,CAACC,IAAI,CAAC;YAAEC,MAAM;QAAE;QAC1D,OAAOH,cAAcI,SAASJ,YAAY,CAAC,EAAE,GAAG;IAClD;IAEAvB,uBAAuB4B,aAAuB,EAAY;QACxD,MAAM7C,SAAS6C;QACf,IAAI,CAAC7C,MAAM,CAACG,4CAAmB,CAAC,EAAE;YAChCH,MAAM,CAACG,4CAAmB,CAAC,GAAGW,IAAAA,oDAA2B;QAC3D;QAGA,IAAI,CAACd,MAAM,CAACI,yCAAgB,CAAC,EAAE;YAC7BJ,MAAM,CAACI,yCAAgB,CAAC,GAAGS,IAAAA,iDAAwB;QACrD;QACA,IAAI,CAACb,MAAM,CAACK,0CAAiB,CAAC,EAAE;YAC9BL,MAAM,CAACK,0CAAiB,CAAC,GAAGW,IAAAA,0CAAiB;QAC/C;QACA,IAAI,CAAChB,MAAM,CAACC,0CAAiB,CAAC,EAAE;YAC9BD,MAAM,CAACC,0CAAiB,CAAC,GAAGS,IAAAA,iDAAwB;QACtD;QACA,IAAI,CAACV,MAAM,CAACW,8CAAqB,CAAC,EAAE;YAClCX,MAAM,CAACW,8CAAqB,CAAC,GAAGC,IAAAA,qDAA4B;QAC9D;QACA,IAAI,CAAC,IAAI,CAACkC,yBAAyB,IAAI;YACrC9C,OAAO+C,MAAM,CAACC,gBAAgB,GAAG;YACjChD,OAAO+C,MAAM,CAACE,sBAAsB,GAAGC,IAAAA,uDAA8B;QACvE,OAAO,IAAI,CAAClD,OAAO+C,MAAM,CAACE,sBAAsB,EAAEL,QAAQ;YACxD5C,OAAO+C,MAAM,CAACE,sBAAsB,GAAGC,IAAAA,uDAA8B;QACvE;QACA,IAAI,CAAClD,MAAM,CAACE,2CAAkB,CAAC,EAAE;YAC/BF,MAAM,CAACE,2CAAkB,CAAC,GAAGa,IAAAA,mDAA0B;QACzD;QAEA,OAAOf;IACT;IAEA,MAAMmD,wBAAwBC,WAAyC,EAAqB;QAC1F,MAAMpD,SAAS,MAAM,IAAI,CAACM,WAAW;QACrC,IAAI,CAACN,MAAM,CAACW,8CAAqB,CAAC,EAAE;YAClC,MAAM,IAAIU,MAAM;QAClB;QAEA,MAAMgC,wBAAwB;YAC5B,GAAGrD,MAAM,CAACW,8CAAqB,CAAC;YAChC,GAAGyC,WAAW;QAChB;QAEA,OAAO,MAAM,IAAI,CAACzB,wBAAwB,CAAC0B;IAC7C;IAEA,MAAMC,uBAAuBF,WAA0C,EAAqB;QAC1F,MAAMpD,SAAS,MAAM,IAAI,CAACM,WAAW;QACrC,IAAI,CAACN,MAAM,CAACG,4CAAmB,CAAC,EAAE;YAChC,MAAM,IAAIkB,MAAM;QAClB;QAEA,MAAMkC,uBAAuB;YAC3B,GAAGvD,MAAM,CAACG,4CAAmB,CAAC;YAC9B,GAAGiD,WAAW;QAChB;QAEA,OAAO,MAAM,IAAI,CAACvB,uBAAuB,CAAC0B;IAC5C;IAEA,MAAMC,iBAAiBC,OAAgB,EAAqB;QAC1D,MAAMzD,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACC,0CAAiB,CAAC,CAACyD,aAAa,GAAGD;QAC1C,MAAM,IAAI,CAAChC,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM2D,uBAAuBF,OAAgB,EAAqB;QAChE,MAAMzD,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACC,0CAAiB,CAAC,CAAC2D,YAAY,GAAGH;QACzC,MAAM,IAAI,CAAChC,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM6D,4BAA4BJ,OAAgB,EAAqB;QACrE,MAAMzD,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACC,0CAAiB,CAAC,CAAC6D,wBAAwB,GAAGL;QACrD,MAAM,IAAI,CAAChC,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA,MAAM+D,aAAaN,OAAgB,EAAEO,WAAqB,EAAqB;QAC7E,IAAI,CAAC,IAAI,CAAClB,yBAAyB,IAAI;YACrC,MAAM,IAAImB,sCAAmB,CAAC;QAChC;QACA,MAAMC,IAAAA,yBAAa,EACjB;YACElB,kBAAkBS;YAClBR,wBAAwBe;QAC1B,GACAG,sDAA2B;QAG7B,MAAMnE,SAAS,MAAM,IAAI,CAACM,WAAW;QACrCN,MAAM,CAACC,0CAAiB,CAAC,CAAC+C,gBAAgB,GAAGS;QAC7CzD,MAAM,CAACC,0CAAiB,CAAC,CAACgD,sBAAsB,GAAGe;QACnD,MAAM,IAAI,CAACvC,MAAM,CAACzB,OAAO0B,EAAE,EAAE1B;QAC7B,OAAOA;IACT;IAEA8C,4BAA4B;QAC1B,OAAO,IAAI,CAAClD,aAAa,CAACY,GAAG,CAAC4D,6BAAY,CAACC,sCAAsC,EAAE,aAAa;IAClG;AACF"}

package/dist/services/orm/user-role.service.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "UserRoleService", {
+    enumerable: true,
+    get: function() {
+        return UserRoleService;
+    }
+});
+const _baseservice = require("./base.service");
+const _userroleentity = require("../../entities/user-role.entity");
+const _userroledto = require("../interfaces/user-role.dto");
+const _typeorm = require("typeorm");
+class UserRoleService extends (0, _baseservice.BaseService)(_userroleentity.UserRole, _userroledto.UserRoleDto) {
+    toDto(entity) {
+        return {
+            id: entity.id,
+            roleId: entity.roleId,
+            userId: entity.userId,
+            createdAt: entity.createdAt
+        };
+    }
+    async setUserRoles(userId, roleIds) {
+        const previousRoles = await this.listUserRoles(userId);
+        const previousIds = previousRoles.map((p)=>p.roleId);
+        const deletedRoleIds = previousIds.filter((p)=>!roleIds.includes(p));
+        await this.deleteManyUserRoles(userId, deletedRoleIds);
+        const createdRoleIds = roleIds.filter((r)=>!previousIds.includes(r));
+        for (let roleId of createdRoleIds){
+            await this.create({
+                roleId,
+                userId
+            });
+        }
+    }
+    deleteManyUserRoles(userId, roleIds) {
+        return this.repository.delete({
+            userId,
+            roleId: (0, _typeorm.In)(roleIds)
+        });
+    }
+    listByRoleId(roleId) {
+        return this.repository.findBy({
+            roleId
+        });
+    }
+    async listUserRoles(userId) {
+        return this.repository.findBy({
+            userId
+        });
+    }
+}
+
+//# sourceMappingURL=user-role.service.js.map

package/dist/services/orm/user-role.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/services/orm/user-role.service.ts"],"names":["UserRoleService","BaseService","UserRole","UserRoleDto","toDto","entity","id","roleId","userId","createdAt","setUserRoles","roleIds","previousRoles","listUserRoles","previousIds","map","p","deletedRoleIds","filter","includes","deleteManyUserRoles","createdRoleIds","r","create","repository","delete","In","listByRoleId","findBy"],"mappings":";;;;+BAKaA;;;eAAAA;;;6BALe;gCACH;6BACG;yBACT;AAEZ,MAAMA,wBAAwBC,IAAAA,wBAAW,EAACC,wBAAQ,EAAEC,wBAAW;IACpEC,MAAMC,MAAgB,EAAe;QACnC,OAAO;YACLC,IAAID,OAAOC,EAAE;YACbC,QAAQF,OAAOE,MAAM;YACrBC,QAAQH,OAAOG,MAAM;YACrBC,WAAWJ,OAAOI,SAAS;QAC7B;IACF;IAEA,MAAMC,aAAaF,MAAc,EAAEG,OAAiB,EAAE;QACpD,MAAMC,gBAAgB,MAAM,IAAI,CAACC,aAAa,CAACL;QAC/C,MAAMM,cAAcF,cAAcG,GAAG,CAAC,CAACC,IAAMA,EAAET,MAAM;QAErD,MAAMU,iBAAiBH,YAAYI,MAAM,CAAC,CAACF,IAAM,CAACL,QAAQQ,QAAQ,CAACH;QACnE,MAAM,IAAI,CAACI,mBAAmB,CAACZ,QAAQS;QACvC,MAAMI,iBAAiBV,QAAQO,MAAM,CAAC,CAACI,IAAM,CAACR,YAAYK,QAAQ,CAACG;QACnE,KAAK,IAAIf,UAAUc,eAAgB;YACjC,MAAM,IAAI,CAACE,MAAM,CAAC;gBAChBhB;gBACAC;YACF;QACF;IACF;IAEAY,oBAAoBZ,MAAc,EAAEG,OAAiB,EAAE;QACrD,OAAO,IAAI,CAACa,UAAU,CAACC,MAAM,CAAC;YAC5BjB;YACAD,QAAQmB,IAAAA,WAAE,EAACf;QACb;IACF;IAEAgB,aAAapB,MAAc,EAAE;QAC3B,OAAO,IAAI,CAACiB,UAAU,CAACI,MAAM,CAAC;YAAErB;QAAO;IACzC;IAEA,MAAMM,cAAcL,MAAc,EAAE;QAClC,OAAO,IAAI,CAACgB,UAAU,CAACI,MAAM,CAAC;YAAEpB;QAAO;IACzC;AACF"}