@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/notifications/notifications.controller.js

@@ -0,0 +1,594 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../core/index");
+const index_2 = require("../identity/index");
+const notification_events_1 = require("./notification-events");
+const channel_registry_1 = require("./registry/channel.registry");
+const broadcasts_service_1 = require("./broadcasts/broadcasts.service");
+const notification_channel_dto_1 = require("./dto/notification-channel.dto");
+const notification_policy_1 = require("./notification-policy");
+const notification_policy_service_1 = require("./notification-policy.service");
+const notification_stream_service_1 = require("./notification-stream.service");
+const notification_store_service_1 = require("./notification-store.service");
+const push_subscription_service_1 = require("./push-subscription.service");
+const notification_config_dto_1 = require("./dto/notification-config.dto");
+const notification_event_dto_1 = require("./dto/notification-event.dto");
+const notification_dto_1 = require("./dto/notification.dto");
+const push_subscription_dto_1 = require("./dto/push-subscription.dto");
+// =============================================================================
+// NotificationsController (issues #124/#127, epic #109)
+// =============================================================================
+//
+// #124 shipped one endpoint here: the event registry. #127 adds the browser
+// channel's entire read surface — the live stream and the four calls behind
+// the notification centre.
+//
+// -----------------------------------------------------------------------------
+// EVERY ENDPOINT BELOW IS SCOPED TO THE CALLER, AND THERE IS NO USER ID INPUT
+// -----------------------------------------------------------------------------
+//
+// This is the security property epic #109 hangs on #127, so it is worth
+// stating in the one file where it could be broken by a single added
+// parameter: `@CurrentUser('id')` is the ONLY source of a user id in this
+// controller. Not a path parameter, not a query parameter, not a body field.
+// There is no `GET /notifications?userId=…` to forget to authorise, and no
+// admin variant that takes an id — a route that could name another user is a
+// route somebody has to remember to guard, and #127 chose to have none.
+//
+// The service layer holds the second half of the same guarantee: every
+// statement in `notification-store.service.ts` carries `userId` in its `where`
+// clause rather than checking ownership after the fact. See its header.
+// =============================================================================
+/**
+ * Exported for an app's own unit tests (`@marinoscar/platform-api/notifications/testing`); not an extension point: reach it through `NotificationsModule` and its documented seams.
+ *
+ * @internal
+ */
+let NotificationsController = class NotificationsController {
+    store;
+    streams;
+    policy;
+    pushSubscriptions;
+    constructor(store, 
+    // `streams`, plural, and not `stream`: the handler below is named `stream`
+    // and a field of the same name shadows it on the class.
+    streams, 
+    // The admin policy (#226), for `GET /events` and `GET /config`. Same
+    // reader the dispatcher uses, so the two cannot disagree.
+    policy, 
+    // Push subscription storage (#229), for `GET /config` and the two
+    // `push/subscriptions` endpoints below.
+    pushSubscriptions) {
+        this.store = store;
+        this.streams = streams;
+        this.policy = policy;
+        this.pushSubscriptions = pushSubscriptions;
+    }
+    async listEvents(user) {
+        // THE SAME POLICY THE DISPATCHER WILL APPLY, from the same function (#226).
+        // `resolveChannels` calls `policyChannels` too, which is what makes it
+        // impossible for this matrix to offer a channel delivery would refuse — or
+        // to hide one it would use. See notification-policy.ts.
+        // The caller's organization's policy (#738): the org layer may only
+        // tighten the deployment's, so the matrix offers what delivery would use.
+        const policy = await this.policy.getPolicy(user?.activeOrgId ?? null);
+        // Mapped field by field rather than returned directly, for three reasons:
+        //
+        //   1. `mandatory` is normalised from `boolean | undefined` to `boolean`,
+        //      so no client has to know that absent means "the user is in charge".
+        //   2. `channels` is a FRESH ARRAY out of `policyChannels`. The arrays in
+        //      the registered events are the registry's own state and live for
+        //      the process lifetime; handing out
+        //      the live array would let a serialiser or an interceptor that sorts
+        //      in place reconfigure delivery for every later dispatch.
+        //   3. The response shape is decided here, in code that is about the
+        //      response shape. A spread would make it a consequence of whatever
+        //      the registry happens to hold, so a field added for the dispatcher's
+        //      internal use would silently become public API.
+        //
+        // `declaredChannels` (#521) is the registry's list BEFORE policy, copied
+        // for the same reason as point 2. The admin policy page needs it: listing
+        // events from the filtered `channels` makes a suppressed event disappear,
+        // and with it the only control that could un-suppress it.
+        return (0, notification_events_1.listNotificationEvents)().map((event) => ({
+            key: event.key,
+            label: event.label,
+            description: event.description,
+            channels: (0, notification_policy_1.policyChannels)(event, policy),
+            declaredChannels: [...event.channels],
+            defaultEnabled: event.defaultEnabled,
+            mandatory: event.mandatory === true,
+        }));
+    }
+    listChannels() {
+        return (0, channel_registry_1.describeNotificationChannels)({ broadcastEventKey: broadcasts_service_1.BROADCAST_EVENT_KEY });
+    }
+    /**
+     * What this deployment can do, for the client that has to decide whether to
+     * ask the browser for notification permission.
+     *
+     * ---------------------------------------------------------------------------
+     * `@Auth()` WITH NO PERMISSION, EXACTLY LIKE `GET /events` ABOVE
+     * ---------------------------------------------------------------------------
+     *
+     * Deliberately the same gate, and for the same reason: this is information
+     * every signed-in account needs about its own notifications. A `viewer` holds
+     * `user_settings:read|write` and `storage:read` and nothing else — so gating
+     * this on `system_settings:read` would lock the policy away from precisely the
+     * users it governs, and widening THAT permission to reach it would publish the
+     * entire settings blob to every account. See the DTO, which carries
+     * the full argument and the rejected alternative.
+     */
+    async config(user) {
+        // The policy in force for the caller's active organization (#738).
+        const policy = await this.policy.getPolicy(user?.activeOrgId ?? null);
+        // Both now resolve the ACTIVE key pair through `PushConfigService`
+        // (#355): an admin-configured, enabled one from `/admin/push-config`
+        // when it exists, else neither — there is no env-var fallback (#635).
+        // See `PushSubscriptionService.isEnabled`/`.getVapidPublicKey` for the
+        // one-line delegation and `PushConfigService.resolveActiveVapidConfig`
+        // for the full precedence.
+        const [pushEnabled, vapidPublicKey] = await Promise.all([
+            this.pushSubscriptions.isEnabled(),
+            this.pushSubscriptions.getVapidPublicKey(),
+        ]);
+        return {
+            browserEnabled: policy.browserEnabled,
+            pushEnabled,
+            vapidPublicKey,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // The live stream (#127)
+    // ---------------------------------------------------------------------------
+    /**
+     * Server-Sent Events for the calling user's notifications.
+     *
+     * -----------------------------------------------------------------------------
+     * WHY `@Sse()` AND NOT A HAND-WRITTEN `@Res()` HANDLER
+     * -----------------------------------------------------------------------------
+     *
+     * This app runs the FASTIFY adapter, and the reflex worry is that `@Sse()` is
+     * Express-shaped. It is not, as of the Nest 11 this project pins: the SSE
+     * dispatch in `router-execution-context` unwraps `res.raw ?? res`, so under
+     * Fastify the framework's `SseStream` is piped to the underlying Node
+     * `ServerResponse` — which has the `writeHead`/`flushHeaders` it needs. The
+     * mechanism is the same one Express gets.
+     *
+     * Choosing it over hand-writing frames onto a `@Res()` reply buys, for free
+     * and already tested:
+     *
+     *   * The header set, INCLUDING `X-Accel-Buffering: no` — the response-side
+     *     half of the nginx buffering problem #127 describes. (The `location`
+     *     block with `proxy_buffering off` is still required; that is #127's
+     *     infra half and is not in this commit. Both halves are needed: nginx
+     *     honours the header, but the read timeout is not something a header can
+     *     change.)
+     *   * Correct SSE framing, including multi-line `data:` splitting and
+     *     `: comment` lines — the heartbeat mechanism below.
+     *   * Socket tuning (`setKeepAlive`, `setNoDelay`, `setTimeout(0)`) so Node
+     *     itself does not close an idle stream.
+     *   * Teardown on client disconnect: it unsubscribes the Observable when the
+     *     raw socket emits `close`, which is what runs the registry cleanup in
+     *     `NotificationStreamService.subscribe`.
+     *
+     * A hand-written version would reimplement all of that, and would get the
+     * header set subtly wrong the first time.
+     *
+     * -----------------------------------------------------------------------------
+     * ONE CAVEAT FOR THE WEB CLIENT: `EventSource` CANNOT SEND AN `Authorization`
+     * HEADER
+     * -----------------------------------------------------------------------------
+     *
+     * This route is guarded by the ordinary `@Auth()` — the same
+     * `Authorization: Bearer …` every other endpoint requires. The native
+     * `EventSource` constructor takes no headers, so the browser half of #127
+     * must connect with a fetch-based SSE client (`@microsoft/fetch-event-source`
+     * or equivalent), which supports headers and reconnection both.
+     *
+     * A `?token=` QUERY PARAMETER WAS REJECTED, and should stay rejected. An
+     * access token in a URL is written to the nginx access log, kept in browser
+     * history, and forwarded in `Referer` — turning a 15-minute bearer credential
+     * into something replayable from a log file that is retained for months and
+     * read by people who are not supposed to hold sessions. Making the transport
+     * convenient is not worth putting credentials in logs; the client-side
+     * library is a smaller cost, paid once.
+     *
+     * -----------------------------------------------------------------------------
+     * WHAT ARRIVES, AND WHAT DOES NOT
+     * -----------------------------------------------------------------------------
+     *
+     * `event: notification` frames whose `data` is one `NotificationDto` (minus
+     * `readAt` — it is unread by definition at that instant), plus periodic
+     * `: heartbeat` comment lines that `EventSource` swallows without surfacing.
+     *
+     * NOT A DELIVERY GUARANTEE. Anything published while this connection is down
+     * is gone: there is no buffer, no `Last-Event-ID` handling and no replay.
+     * `EventSource` will reconnect on its own, and THE CLIENT MUST REFETCH
+     * `GET /api/notifications/unread-count` AND `GET /api/notifications` ON EVERY
+     * (RE)CONNECT rather than assuming the gap was filled. That is not a
+     * shortcoming to fix later — it is the design: the `notifications` table is
+     * the source of truth and one indexed query after a reconnect is strictly
+     * more reliable than any replay mechanism built on top of a stream. The same
+     * refetch also covers the multi-replica case documented on
+     * `NotificationStreamService`.
+     */
+    stream(userId) {
+        // THE ENTIRE ISOLATION MECHANISM, IN ONE ARGUMENT. `userId` comes from the
+        // verified JWT and from nowhere else, and `subscribe` registers this
+        // connection under exactly that key. There is no filter to get wrong
+        // because there is nothing to filter — this connection is never written to
+        // by anything except a publish for this user.
+        //
+        // Returned SYNCHRONOUSLY (not `async`), so the Observable's own teardown
+        // function is the complete cleanup story and no `@SseSignal()` is needed:
+        // nothing is allocated before subscription, so nothing can leak if the
+        // client disappears during setup.
+        return this.streams.subscribe(userId);
+    }
+    // ---------------------------------------------------------------------------
+    // The notification centre (#127)
+    // ---------------------------------------------------------------------------
+    async list(userId, query) {
+        return this.store.list(userId, query);
+    }
+    async unreadCount(userId) {
+        return { unreadCount: await this.store.unreadCount(userId) };
+    }
+    /**
+     * `POST`, not `PATCH`, and `/read` rather than a body flag.
+     *
+     * Marking read is an ACTION with one possible outcome, not a partial
+     * replacement of a resource whose fields a client may choose. `PATCH /:id`
+     * with `{ readAt }` would invite a client to send an arbitrary timestamp for
+     * a column that answers "when did they actually see this?"; there is no
+     * legitimate reason for the client to pick that value, so the endpoint does
+     * not accept it.
+     */
+    async markRead(userId, id) {
+        return { unreadCount: await this.store.markRead(userId, id) };
+    }
+    async markAllRead(userId) {
+        return { unreadCount: await this.store.markAllRead(userId) };
+    }
+    // ---------------------------------------------------------------------------
+    // Push subscriptions (#229)
+    // ---------------------------------------------------------------------------
+    async subscribePush(userId, dto, userAgent) {
+        const subscription = await this.pushSubscriptions.subscribe(userId, dto, userAgent);
+        return {
+            id: subscription.id,
+            endpoint: subscription.endpoint,
+            platform: subscription.platform,
+            createdAt: subscription.createdAt.toISOString(),
+        };
+    }
+    /**
+     * `DELETE` with a JSON body — unusual in this codebase's other `DELETE`
+     * endpoints (`allowlist`, `pat`), which identify their target by an `:id`
+     * path segment, but there is no surrogate id here: the client's only handle
+     * on a subscription is the (long, `/`-containing) endpoint URL the browser
+     * gave it, and a body avoids re-encoding that into a path or query segment.
+     * Both Fastify and Nest support a body on `DELETE`; nothing here relies on
+     * `DELETE` being body-less.
+     */
+    async unsubscribePush(userId, dto) {
+        await this.pushSubscriptions.unsubscribe(userId, dto.endpoint);
+    }
+};
+exports.NotificationsController = NotificationsController;
+__decorate([
+    (0, common_1.Get)('events'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List notification events',
+        description: 'The registry of events this application can raise, in the order the ' +
+            'preferences UI should render them. Readable by **any authenticated user** — ' +
+            'every user renders their own preferences against it.\n\n' +
+            'This describes what events *exist*, not what the caller has chosen. An event ' +
+            'with `mandatory: true` cannot be switched off; that is enforced server-side ' +
+            'during delivery, and the flag is here so the UI can show the control disabled ' +
+            'with a reason rather than hiding it.\n\n' +
+            '**`channels` is capability ∩ administrator policy.** An event that can be ' +
+            'delivered over `browser` does not list it while an administrator has browser ' +
+            'notifications switched off deployment-wide, or has suppressed that event, in ' +
+            'system settings — the delivery path applies the identical filter, so a channel ' +
+            'listed here is a channel that will be used and one omitted is one that will not. ' +
+            'A `mandatory` event is the exception: its channels are never filtered, because ' +
+            'its stored notification is the delivery. For those, the policy shows up as ' +
+            '`toast: false` on the SSE stream instead.\n\n' +
+            '**`declaredChannels` is the unfiltered capability** — the channels the event declares ' +
+            'in the registry, before administrator policy. It exists for the administrator’s ' +
+            'notification-policy page, which must keep listing an event whose browser delivery it has ' +
+            'suppressed so the suppression can be undone. Any other client wanting to know what will ' +
+            'be delivered reads `channels`.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_event_dto_1.NotificationEventDto, {
+        isArray: true,
+        description: 'The notification event registry',
+    }),
+    __param(0, (0, index_2.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "listEvents", null);
+__decorate([
+    (0, common_1.Get)('channels'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List notification channels',
+        description: 'Every delivery channel this application registered, in registration order, with ' +
+            'the label to draw, whether a user may toggle it, whether a critical broadcast may ' +
+            'rely on it (`criticalCapable`), whether a broadcast can be sent over it (`broadcastCapable`: ' +
+            'the broadcast events declare it) and whether a new broadcast starts with it selected. ' +
+            'Clients hold no list of channels of their own: the broadcast composer, the ' +
+            'preferences matrix and the administrator\'s channel switches all read this. ' +
+            'Readable by **any authenticated user** (the preferences matrix needs the labels); it ' +
+            'describes what channels *exist* and carries no configuration, no handle and no secret. ' +
+            'Whether an administrator switched one off is `notifications.channels` in system ' +
+            'settings, and the effect shows up in `GET /events` as a channel missing from `channels`.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_channel_dto_1.NotificationChannelDescriptorDto, {
+        isArray: true,
+        description: 'The notification channel registry',
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Array)
+], NotificationsController.prototype, "listChannels", null);
+__decorate([
+    (0, common_1.Get)('config'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Notification capabilities of this deployment',
+        description: 'What this deployment can deliver, for a client deciding whether to ask the browser ' +
+            'for notification permission. Readable by **any authenticated user** — the policy ' +
+            'governs every account, so every account can read it.\n\n' +
+            '`browserEnabled` is the administrator’s deployment-wide switch (system settings). ' +
+            'A client should not prompt for OS notification permission when it is `false`: browser ' +
+            'permission, once denied, cannot be re-prompted, so prompting for a capability this ' +
+            'deployment has switched off spends a one-shot decision for nothing.\n\n' +
+            '**What `false` stops.** For a non-mandatory event, browser delivery stops entirely: ' +
+            'no in-app notification is recorded, so nothing reaches the notification centre, the ' +
+            'unread count or the SSE stream. A `mandatory` event (see `GET /api/notifications/events`) ' +
+            'is still recorded and still reaches the notification centre; only its OS toast is ' +
+            'withheld, signalled as `toast: false` on the SSE stream. Email is unaffected. Per-event ' +
+            'suppression is deliberately not listed here — it applies the same rule to one event, and ' +
+            'a mandatory event’s suppression travels with each notification as `toast` on the SSE ' +
+            'stream, so a long-lived tab holding a cached copy of this response can never re-enable ' +
+            'something an administrator has muted.\n\n' +
+            '`pushEnabled` reflects whether THIS DEPLOYMENT currently has an ACTIVE VAPID key pair — ' +
+            'an admin-configured, enabled key pair from `/admin/push-config` ' +
+            '(`PushConfigService.resolveActiveVapidConfig()`, #355), or `false` if none has been ' +
+            'generated or it is disabled. There is no environment-variable fallback (#635). It says ' +
+            'nothing about this user’s own subscription state. When `true`, ' +
+            '`vapidPublicKey` carries the public key a client needs to call `pushManager.subscribe`; a ' +
+            'client should not attempt that call while `pushEnabled` is `false`.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_config_dto_1.NotificationConfigDto, {
+        description: 'This deployment’s notification capabilities',
+    }),
+    __param(0, (0, index_2.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "config", null);
+__decorate([
+    (0, common_1.Sse)('stream'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiProduces)('text/event-stream'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Stream this user’s notifications (SSE)',
+        description: 'A `text/event-stream` carrying **only the authenticated caller’s** notifications. ' +
+            'There is no parameter that selects a user; the recipient is the bearer of the token.\n\n' +
+            '**Frames.** `event: notification` with a JSON `data` payload matching `Notification` ' +
+            '(without `readAt`, plus `toast` and `pushed`), plus `: heartbeat` comment lines roughly every 25 ' +
+            'seconds so proxies do not reap an idle connection.\n\n' +
+            '**`toast`** is the server’s answer to “may this client raise an OS notification for ' +
+            'this event?”, computed from the administrator’s policy at publish time. `false` means ' +
+            'the bubble is withheld — the notification itself was still recorded and this frame was ' +
+            'still sent, so the bell and the unread count are unaffected. Only a `mandatory` event ' +
+            'can arrive with `toast: false`: a non-mandatory event the policy suppresses is not ' +
+            'recorded or streamed at all. Because it travels with ' +
+            'each event, a tab holding a stale copy of `GET /api/notifications/config` still ' +
+            'honours the current policy.\n\n' +
+            '**`pushed`** is `true` when this notification is also being delivered over Web Push to ' +
+            'this user; a client holding an active push subscription may skip its own OS toast ' +
+            'because the service worker will show one. It is independent of `toast`.\n\n' +
+            '**This is not a delivery guarantee.** Events published while the connection is down are ' +
+            'lost — there is no replay and no `Last-Event-ID` support. `EventSource` reconnects by ' +
+            'itself; the client must then refetch `GET /api/notifications/unread-count` and ' +
+            '`GET /api/notifications`, which is what makes a gap harmless. The durable record is the ' +
+            'notification list, not the stream.\n\n' +
+            '**Client note.** The native `EventSource` cannot send an `Authorization` header. Use a ' +
+            'fetch-based SSE client; a token in the query string is deliberately not supported, ' +
+            'because it would put a live credential into access logs and browser history.',
+    }),
+    (0, swagger_1.ApiOkResponse)({
+        description: 'An open event stream. Terminates when the client disconnects.',
+        content: {
+            'text/event-stream': {
+                schema: {
+                    type: 'string',
+                    example: ': connected\n\nevent: notification\ndata: {"id":"…","eventKey":"security.role_changed",' +
+                        '"title":"Your roles changed","body":"…","link":"/settings","createdAt":"…","toast":true,' +
+                        '"pushed":false}' +
+                        '\n\n: heartbeat\n\n',
+                },
+            },
+        },
+    }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Function)
+], NotificationsController.prototype, "stream", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List this user’s notifications',
+        description: 'The caller’s own notifications, newest first. **Any authenticated user** may read ' +
+            'their own; there is no way to read anybody else’s — the recipient is the bearer of ' +
+            'the token, not a parameter.\n\n' +
+            'This is the durable surface of the browser channel. It is correct regardless of whether ' +
+            'the user ever granted browser-notification permission, and regardless of whether the SSE ' +
+            'stream was connected when the notification was raised.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'page', required: false, type: Number }),
+    (0, swagger_1.ApiQuery)({ name: 'pageSize', required: false, type: Number }),
+    (0, swagger_1.ApiQuery)({
+        name: 'unreadOnly',
+        required: false,
+        enum: ['true', 'false'],
+        description: 'Return only unread notifications. Defaults to `false`.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_dto_1.NotificationDto, {
+        pagination: 'flat',
+        description: 'A page of the caller’s notifications',
+    }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __param(1, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, notification_dto_1.NotificationListQueryDto]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "list", null);
+__decorate([
+    (0, common_1.Get)('unread-count'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Count this user’s unread notifications',
+        description: 'The number behind the bell badge, for the authenticated caller only.\n\n' +
+            'A separate endpoint rather than something derived from a page of `GET /api/notifications`: ' +
+            'a count taken from a page silently caps at `pageSize` and under-reports. Clients should ' +
+            'call this on load and again on every SSE (re)connect, which is how a gap in the stream is ' +
+            'recovered from.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_dto_1.UnreadCountDto, { description: 'The unread count' }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "unreadCount", null);
+__decorate([
+    (0, common_1.Post)(':id/read'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Mark one notification read',
+        description: 'Marks a single notification read and returns the caller’s resulting unread count, ' +
+            'so a click costs one round trip rather than two.\n\n' +
+            '**Idempotent.** Marking an already-read notification succeeds and leaves the original ' +
+            '`readAt` untouched.\n\n' +
+            '**Ownership.** Only the caller’s own notifications can be marked. An id belonging to ' +
+            'another user returns `404`, identical to an id that does not exist — the two are ' +
+            'deliberately indistinguishable so the endpoint cannot be used to probe for valid ids.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, index_1.ApiDataResponse)(notification_dto_1.UnreadCountDto, { description: 'The new unread count' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No such notification for this user' }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __param(1, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "markRead", null);
+__decorate([
+    (0, common_1.Post)('read-all'),
+    (0, index_2.Auth)()
+    // 200, not 204: the response carries the new count, which is the whole
+    // reason a client calls this rather than marking rows one at a time.
+    ,
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Mark all of this user’s notifications read',
+        description: 'Clears the caller’s badge in one call and returns the resulting unread count — ' +
+            'normally `0`, but not assumed to be: a notification arriving between the update and the ' +
+            'count is reported honestly rather than hidden behind a hardcoded zero.\n\n' +
+            'Affects only the caller’s rows. Notifications already read keep their original ' +
+            '`readAt`.',
+    }),
+    (0, index_1.ApiDataResponse)(notification_dto_1.UnreadCountDto, { description: 'The new unread count' }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "markAllRead", null);
+__decorate([
+    (0, common_1.Post)('push/subscriptions'),
+    (0, index_2.Auth)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Register a browser push subscription',
+        description: 'Stores (or refreshes) the caller’s `PushSubscription`, so #230’s sender has something to ' +
+            'push to. Body matches the browser’s `PushSubscription.toJSON()` shape exactly, so the ' +
+            'client can pass that object through unmodified.\n\n' +
+            '**Upserted by `endpoint`, not created unconditionally.** Re-subscribing the same endpoint ' +
+            '(the same browser instance) updates the existing row in place — including moving it to a ' +
+            'different `userId` when the same browser subscribes while signed in as someone else — ' +
+            'rather than creating a duplicate. See `PushSubscriptionService.subscribe`.\n\n' +
+            '`User-Agent` is read from the request header, not a body field, since the browser already ' +
+            'sends it on every request with zero client code required and a client-supplied value could ' +
+            'be spoofed to no benefit.\n\n' +
+            '**`409 Conflict`** when this deployment has no VAPID key pair configured — check ' +
+            '`GET /api/notifications/config`’s `pushEnabled` before ever calling `pushManager.subscribe` ' +
+            'in the first place.',
+    }),
+    (0, index_1.ApiDataResponse)(push_subscription_dto_1.PushSubscriptionResponseDto, {
+        status: 201,
+        description: 'The subscription was stored',
+    }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'Web Push is not enabled on this deployment (no VAPID keys configured)',
+    }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.CREATED),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Headers)('user-agent')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, push_subscription_dto_1.PushSubscribeDto, Object]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "subscribePush", null);
+__decorate([
+    (0, common_1.Delete)('push/subscriptions'),
+    (0, index_2.Auth)(),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Remove a browser push subscription',
+        description: 'Deletes the caller’s own push subscription for the given `endpoint`. Ownership-scoped: ' +
+            'an endpoint that does not exist and one that belongs to a different user return the same ' +
+            '`404`, matching this API’s existing precedent for ownership checks (e.g. ' +
+            '`POST /api/notifications/:id/read`) — the two are deliberately indistinguishable so this ' +
+            'cannot be used to probe which endpoints exist.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 204, description: 'Subscription removed' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No such subscription for this user' }),
+    __param(0, (0, index_2.CurrentUser)('id')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, push_subscription_dto_1.PushUnsubscribeDto]),
+    __metadata("design:returntype", Promise)
+], NotificationsController.prototype, "unsubscribePush", null);
+exports.NotificationsController = NotificationsController = __decorate([
+    (0, swagger_1.ApiTags)('Notifications'),
+    (0, common_1.Controller)('notifications'),
+    __metadata("design:paramtypes", [notification_store_service_1.NotificationStoreService,
+        notification_stream_service_1.NotificationStreamService,
+        notification_policy_service_1.NotificationPolicyService,
+        push_subscription_service_1.PushSubscriptionService])
+], NotificationsController);
+//# sourceMappingURL=notifications.controller.js.map

package/dist/notifications/notifications.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.controller.js","sourceRoot":"","sources":["../../src/notifications/notifications.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAawB;AACxB,6CAQyB;AAGzB,yCAAgD;AAChD,6CAAwE;AACxE,+DAA+D;AAC/D,kEAA2E;AAC3E,wEAAsE;AACtE,6EAA8H;AAC9H,+DAAuD;AACvD,+EAA0E;AAC1E,+EAGuC;AACvC,6EAAwE;AACxE,2EAAsE;AACtE,2EAGuC;AACvC,yEAGsC;AACtC,6DAMgC;AAChC,uEAKqC;AAErC,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,2BAA2B;AAC3B,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAEhF;;;;GAIG;AAGI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAEf;IAGA;IAGA;IAGA;IAVnB,YACmB,KAA+B;IAChD,2EAA2E;IAC3E,wDAAwD;IACvC,OAAkC;IACnD,qEAAqE;IACrE,0DAA0D;IACzC,MAAiC;IAClD,kEAAkE;IAClE,wCAAwC;IACvB,iBAA0C;QAT1C,UAAK,GAAL,KAAK,CAA0B;QAG/B,YAAO,GAAP,OAAO,CAA2B;QAGlC,WAAM,GAAN,MAAM,CAA2B;QAGjC,sBAAiB,GAAjB,iBAAiB,CAAyB;IAC1D,CAAC;IAgCE,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAkB;QAChD,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,wDAAwD;QACxD,oEAAoE;QACpE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC;QAEtE,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,yCAAyC;QACzC,0EAA0E;QAC1E,+DAA+D;QAC/D,qEAAqE;QACrE,wEAAwE;QACxE,2EAA2E;QAC3E,sDAAsD;QACtD,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,0DAA0D;QAC1D,OAAO,IAAA,4CAAsB,GAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,IAAA,oCAAc,EAAC,KAAK,EAAE,MAAM,CAAC;YACvC,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YACrC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAsBD,YAAY;QACV,OAAO,IAAA,+CAA4B,EAAC,EAAE,iBAAiB,EAAE,wCAAmB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IAiCG,AAAN,KAAK,CAAC,MAAM,CAAgB,IAAkB;QAC5C,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC;QAEtE,mEAAmE;QACnE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE;YAClC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE;SAC3C,CAAC,CAAC;QAEH,OAAO;YACL,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,WAAW;YACX,cAAc;SACf,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuEG;IA+CH,MAAM,CAAoB,MAAc;QACtC,2EAA2E;QAC3E,qEAAqE;QACrE,qEAAqE;QACrE,2EAA2E;QAC3E,8CAA8C;QAC9C,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,kCAAkC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,iCAAiC;IACjC,8EAA8E;IA0BxE,AAAN,KAAK,CAAC,IAAI,CACW,MAAc,EACxB,KAA+B;QAExC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAcK,AAAN,KAAK,CAAC,WAAW,CACI,MAAc;QAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;;;;OASG;IAiBG,AAAN,KAAK,CAAC,QAAQ,CACO,MAAc,EACL,EAAU;QAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAiBK,AAAN,KAAK,CAAC,WAAW,CACI,MAAc;QAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IA8BxE,AAAN,KAAK,CAAC,aAAa,CACE,MAAc,EACzB,GAAqB,EACN,SAA6B;QAEpD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CACzD,MAAM,EACN,GAAG,EACH,SAAS,CACV,CAAC;QAEF,OAAO;YACL,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;SAChD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IAeG,AAAN,KAAK,CAAC,eAAe,CACA,MAAc,EACzB,GAAuB;QAE/B,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;CACF,CAAA;AAnfY,0DAAuB;AA4C5B;IA9BL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EACT,sEAAsE;YACtE,8EAA8E;YAC9E,0DAA0D;YAC1D,+EAA+E;YAC/E,8EAA8E;YAC9E,gFAAgF;YAChF,0CAA0C;YAC1C,4EAA4E;YAC5E,+EAA+E;YAC/E,+EAA+E;YAC/E,iFAAiF;YACjF,mFAAmF;YACnF,iFAAiF;YACjF,6EAA6E;YAC7E,+CAA+C;YAC/C,wFAAwF;YACxF,kFAAkF;YAClF,2FAA2F;YAC3F,0FAA0F;YAC1F,gCAAgC;KACnC,CAAC;IACD,IAAA,uBAAe,EAAC,6CAAoB,EAAE;QACrC,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,iCAAiC;KAC/C,CAAC;IACgB,WAAA,IAAA,mBAAW,GAAE,CAAA;;;;yDAoC9B;AAsBD;IApBC,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACT,kFAAkF;YAClF,oFAAoF;YACpF,+FAA+F;YAC/F,wFAAwF;YACxF,6EAA6E;YAC7E,8EAA8E;YAC9E,uFAAuF;YACvF,yFAAyF;YACzF,kFAAkF;YAClF,0FAA0F;KAC7F,CAAC;IACD,IAAA,uBAAe,EAAC,2DAAgC,EAAE;QACjD,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,mCAAmC;KACjD,CAAC;;;;2DAGD;AAkDK;IAhCL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EACT,qFAAqF;YACrF,mFAAmF;YACnF,0DAA0D;YAC1D,oFAAoF;YACpF,wFAAwF;YACxF,qFAAqF;YACrF,yEAAyE;YACzE,sFAAsF;YACtF,sFAAsF;YACtF,4FAA4F;YAC5F,oFAAoF;YACpF,0FAA0F;YAC1F,2FAA2F;YAC3F,uFAAuF;YACvF,yFAAyF;YACzF,2CAA2C;YAC3C,0FAA0F;YAC1F,kEAAkE;YAClE,sFAAsF;YACtF,yFAAyF;YACzF,iEAAiE;YACjE,4FAA4F;YAC5F,qEAAqE;KACxE,CAAC;IACD,IAAA,uBAAe,EAAC,+CAAqB,EAAE;QACtC,WAAW,EAAE,6CAA6C;KAC3D,CAAC;IACY,WAAA,IAAA,mBAAW,GAAE,CAAA;;;;qDAoB1B;AA4HD;IA9CC,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,GAAE;IACN,IAAA,qBAAW,EAAC,mBAAmB,CAAC;IAChC,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EACT,oFAAoF;YACpF,0FAA0F;YAC1F,uFAAuF;YACvF,mGAAmG;YACnG,wDAAwD;YACxD,sFAAsF;YACtF,wFAAwF;YACxF,yFAAyF;YACzF,wFAAwF;YACxF,qFAAqF;YACrF,uDAAuD;YACvD,kFAAkF;YAClF,iCAAiC;YACjC,yFAAyF;YACzF,oFAAoF;YACpF,6EAA6E;YAC7E,0FAA0F;YAC1F,wFAAwF;YACxF,iFAAiF;YACjF,0FAA0F;YAC1F,wCAAwC;YACxC,yFAAyF;YACzF,qFAAqF;YACrF,8EAA8E;KACjF,CAAC;IACD,IAAA,uBAAa,EAAC;QACb,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE;YACP,mBAAmB,EAAE;gBACnB,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,OAAO,EACL,yFAAyF;wBACzF,0FAA0F;wBAC1F,iBAAiB;wBACjB,qBAAqB;iBACxB;aACF;SACF;KACF,CAAC;IACM,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;;;qDAYxB;AA8BK;IAxBL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gCAAgC;QACzC,WAAW,EACT,oFAAoF;YACpF,qFAAqF;YACrF,iCAAiC;YACjC,0FAA0F;YAC1F,2FAA2F;YAC3F,wDAAwD;KAC3D,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7D,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,IAAA,uBAAe,EAAC,kCAAe,EAAE;QAChC,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,sCAAsC;KACpD,CAAC;IAEC,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,cAAK,GAAE,CAAA;;6CAAQ,2CAAwB;;mDAGzC;AAcK;IAZL,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wCAAwC;QACjD,WAAW,EACT,0EAA0E;YAC1E,6FAA6F;YAC7F,0FAA0F;YAC1F,4FAA4F;YAC5F,iBAAiB;KACpB,CAAC;IACD,IAAA,uBAAe,EAAC,iCAAc,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAElE,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;;;0DAGnB;AA4BK;IAhBL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACT,oFAAoF;YACpF,sDAAsD;YACtD,wFAAwF;YACxF,yBAAyB;YACzB,uFAAuF;YACvF,mFAAmF;YACnF,uFAAuF;KAC1F,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,uBAAe,EAAC,iCAAc,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;IACxE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAE7E,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;uDAG5B;AAiBK;IAfL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,YAAI,GAAE;IACP,uEAAuE;IACvE,qEAAqE;;IACpE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACT,iFAAiF;YACjF,0FAA0F;YAC1F,4EAA4E;YAC5E,iFAAiF;YACjF,WAAW;KACd,CAAC;IACD,IAAA,uBAAe,EAAC,iCAAc,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;IAEtE,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;;;0DAGnB;AAkCK;IA5BL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,YAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EACT,2FAA2F;YAC3F,wFAAwF;YACxF,qDAAqD;YACrD,4FAA4F;YAC5F,2FAA2F;YAC3F,wFAAwF;YACxF,gFAAgF;YAChF,4FAA4F;YAC5F,6FAA6F;YAC7F,+BAA+B;YAC/B,mFAAmF;YACnF,8FAA8F;YAC9F,qBAAqB;KACxB,CAAC;IACD,IAAA,uBAAe,EAAC,mDAA2B,EAAE;QAC5C,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,6BAA6B;KAC3C,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,uEAAuE;KACrF,CAAC;IACD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,OAAO,CAAC;IAE1B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CADT,wCAAgB;;4DAe9B;AAyBK;IAdL,IAAA,eAAM,EAAC,oBAAoB,CAAC;IAC5B,IAAA,YAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EACT,yFAAyF;YACzF,2FAA2F;YAC3F,2EAA2E;YAC3E,2FAA2F;YAC3F,gDAAgD;KACnD,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;IACjE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAE7E,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAM,0CAAkB;;8DAGhC;kCAlfU,uBAAuB;IAFnC,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,mBAAU,EAAC,eAAe,CAAC;qCAGA,qDAAwB;QAGtB,uDAAyB;QAG1B,uDAAyB;QAGd,mDAAuB;GAXlD,uBAAuB,CAmfnC"}