@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/storage/objects/objects.service.js

@@ -0,0 +1,642 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ObjectsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ObjectsService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const api_1 = require("@opentelemetry/api");
+const common_2 = require("@nestjs/common");
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = require("node:path");
+const storage_key_prefixes_1 = require("../storage-key-prefixes");
+const storage_key_prefix_registry_1 = require("../storage-key-prefix.registry");
+const profile_image_1 = require("../profile-image/profile-image");
+const mime_type_match_1 = require("../mime-type-match");
+const storage_provider_interface_1 = require("../providers/storage-provider.interface");
+const index_1 = require("../../jobs/index");
+const object_processing_service_1 = require("../processing/object-processing.service");
+const processing_metadata_1 = require("../processing/processing-metadata");
+const storage_object_process_handler_1 = require("../handlers/storage-object-process.handler");
+const storage_job_input_1 = require("../storage-job-input");
+const index_2 = require("../../core/index");
+const storage_db_1 = require("../data/storage-db");
+const storage_options_1 = require("../storage.options");
+/**
+ * Longest transaction recording the parts of a completed multipart upload
+ * (Prisma's default is 5 s; an upload can have 10 000 parts).
+ */
+const CHUNK_RECORD_TIMEOUT_MS = 60_000;
+/**
+ * Records the organization on the active span (`org.id`, #736) for object
+ * create, download and delete. A span attribute only, never a metric label
+ * (cardinality; spec, "Tenancy and access model").
+ */
+function tagSpanWithOrg(orgId) {
+    api_1.trace.getActiveSpan()?.setAttribute('org.id', orgId);
+}
+/** Default for `storage.maxFileSize` when the config carries no usable value (10 GiB). */
+const DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024 * 1024;
+/**
+ * The objects API's logic, in the caller's organization: simple and resumable uploads (org-aware keys), list, metadata, download URL, delete, each audited.
+ *
+ * @stability experimental
+ */
+let ObjectsService = ObjectsService_1 = class ObjectsService {
+    prisma;
+    storageProvider;
+    config;
+    processing;
+    jobs;
+    options;
+    logger = new common_1.Logger(ObjectsService_1.name);
+    constructor(prisma, storageProvider, config, 
+    // #520: post-upload processing is a queue job. These two decide, at
+    // upload time, whether one is needed and queue it — see `settleUpload`.
+    processing, jobs, options) {
+        this.prisma = prisma;
+        this.storageProvider = storageProvider;
+        this.config = config;
+        this.processing = processing;
+        this.jobs = jobs;
+        this.options = options;
+        // The `uploads` key prefix this service builds keys under (#736); a no-op
+        // when `StorageModule.forRoot()` or the app's manifest registered it.
+        (0, storage_key_prefixes_1.ensureStorageSliceKeyPrefixes)();
+    }
+    /** The multipart part size: the forRoot option, else the deployment's `storage.partSize`. */
+    partSize() {
+        return this.options?.partSizeBytes ?? this.config.get('storage.partSize', storage_options_1.DEFAULT_STORAGE_PART_SIZE_BYTES);
+    }
+    /**
+     * The database client scoped to the caller's organization (row-level
+     * security, issue #725): every statement runs with `app.org_id` set, so
+     * another organization's objects are neither visible nor writable.
+     */
+    db(orgId, userId) {
+        return (0, storage_db_1.storageForOrg)(this.prisma, orgId, { userId });
+    }
+    /**
+     * A new upload's key, uploads/<orgId>/<timestamp>/<uuid><ext>, through the
+     * key builder of the prefix registry (#736).
+     */
+    newUploadKey(orgId, filename) {
+        tagSpanWithOrg(orgId);
+        return (0, storage_key_prefix_registry_1.buildObjectKey)('uploads', { orgId }, String(Date.now()), `${(0, node_crypto_1.randomUUID)()}${(0, node_path_1.extname)(filename)}`);
+    }
+    /**
+     * Initialize a resumable multipart upload
+     */
+    async initUpload(dto, userId, orgId) {
+        const { name, size, mimeType } = dto;
+        // Deployment upload limits (#519), before anything touches the provider.
+        this.assertUploadAllowed(mimeType, size);
+        // Get configuration
+        const partSize = this.partSize(); // 10MB default
+        const minPartSize = 5 * 1024 * 1024; // 5MB S3 minimum
+        // Validate part size
+        if (partSize < minPartSize) {
+            throw new common_1.BadRequestException(`Part size must be at least ${minPartSize} bytes`);
+        }
+        // Calculate total parts
+        const totalParts = Math.ceil(size / partSize);
+        if (totalParts > 10000) {
+            throw new common_1.BadRequestException('File too large for multipart upload (exceeds 10,000 parts)');
+        }
+        // Generate storage key: org-aware since #736 (uploads/<orgId>/<timestamp>/
+        // <uuid><ext>`). Rows written before keep their stored key; nothing here
+        // or anywhere rebuilds a key for an existing row.
+        const storageKey = this.newUploadKey(orgId, name);
+        this.logger.log(`Initializing upload for ${name}, ${totalParts} parts`);
+        // Initialize multipart upload with storage provider
+        const { uploadId } = await this.storageProvider.initMultipartUpload(storageKey, { mimeType });
+        // Create StorageObject record
+        const storageObject = await this.db(orgId, userId).storageObject.create({
+            data: {
+                name,
+                size: BigInt(size),
+                mimeType,
+                storageKey,
+                // The LIVE provider kind, not a literal: an operator who selected R2
+                // (or an app backend bound through `StorageModule.forRoot({ provider })`)
+                // must not leave a trail of rows claiming their objects are in S3. It
+                // comes from the same snapshot `getBucket()` answers from, so this pair
+                // names one configuration.
+                storageProvider: this.storageProvider.kind,
+                bucket: this.storageProvider.getBucket(),
+                status: 'pending',
+                s3UploadId: uploadId,
+                uploadedById: userId,
+                orgId,
+            },
+        });
+        // Generate presigned URLs for first batch (up to 10 parts)
+        const urlBatchSize = Math.min(10, totalParts);
+        const presignedUrls = await Promise.all(Array.from({ length: urlBatchSize }, (_, i) => i + 1).map(async (partNumber) => ({
+            partNumber,
+            url: await this.storageProvider.getSignedUploadUrl(storageKey, uploadId, partNumber),
+        })));
+        this.logger.log(`Upload initialized: ${storageObject.id}, uploadId: ${uploadId}`);
+        return {
+            objectId: storageObject.id,
+            uploadId,
+            partSize,
+            totalParts,
+            presignedUrls,
+        };
+    }
+    /**
+     * Get upload status and progress
+     */
+    async getUploadStatus(objectId, userId, orgId) {
+        const storageObject = (await this.db(orgId, userId).storageObject.findUnique({
+            where: { id: objectId },
+            include: { chunks: true },
+        }));
+        if (!storageObject) {
+            throw new common_1.NotFoundException('Upload not found');
+        }
+        // Check ownership
+        if (storageObject.uploadedById !== userId) {
+            throw new common_1.ForbiddenException('You do not own this upload');
+        }
+        const uploadedParts = storageObject.chunks
+            .map((chunk) => chunk.partNumber)
+            .sort((a, b) => a - b);
+        const uploadedBytes = storageObject.chunks.reduce((sum, chunk) => sum + chunk.size, BigInt(0));
+        const partSize = this.partSize();
+        const totalParts = Math.ceil(Number(storageObject.size) / partSize);
+        return {
+            objectId: storageObject.id,
+            status: storageObject.status,
+            uploadedParts,
+            totalParts,
+            uploadedBytes: uploadedBytes.toString(),
+            totalBytes: storageObject.size.toString(),
+        };
+    }
+    /**
+     * Complete multipart upload
+     */
+    async completeUpload(objectId, dto, userId, orgId) {
+        const storageObject = await this.db(orgId, userId).storageObject.findUnique({
+            where: { id: objectId },
+            include: { chunks: true },
+        });
+        if (!storageObject) {
+            throw new common_1.NotFoundException('Upload not found');
+        }
+        // Check ownership
+        if (storageObject.uploadedById !== userId) {
+            throw new common_1.ForbiddenException('You do not own this upload');
+        }
+        if (!storageObject.s3UploadId) {
+            throw new common_1.BadRequestException('Upload ID not found');
+        }
+        const { parts } = dto;
+        this.logger.log(`Completing upload ${objectId} with ${parts.length} parts`);
+        // Record chunks in database: one scoped transaction for all parts (a
+        // scoped client would open one transaction per upsert, and a large upload
+        // has thousands of parts). Each chunk carries its object's org_id, which
+        // the composite foreign key (object_id, org_id) checks.
+        await (0, storage_db_1.storageRunInOrg)(this.prisma, orgId, async (tx) => {
+            for (const part of parts) {
+                await tx.storageObjectChunk.upsert({
+                    where: {
+                        objectId_partNumber: {
+                            objectId,
+                            partNumber: part.partNumber,
+                        },
+                    },
+                    create: {
+                        objectId,
+                        orgId,
+                        partNumber: part.partNumber,
+                        eTag: part.eTag,
+                        size: BigInt(0), // We don't know exact part size from client
+                    },
+                    update: {
+                        eTag: part.eTag,
+                    },
+                });
+            }
+        }, { userId, timeout: CHUNK_RECORD_TIMEOUT_MS });
+        // Complete upload with storage provider
+        await this.storageProvider.completeMultipartUpload(storageObject.storageKey, storageObject.s3UploadId, parts);
+        // `processing`, then either `ready` (no processor applies) or a queued
+        // processing job — in ONE transaction, so the row never reads
+        // `processing` without a job that will settle it.
+        let updated;
+        try {
+            updated = await (0, storage_db_1.storageRunInOrg)(this.prisma, orgId, async (tx) => {
+                const row = await tx.storageObject.update({
+                    where: { id: objectId },
+                    data: { status: 'processing' },
+                });
+                return this.settleUpload(tx, row);
+            }, { userId });
+        }
+        catch (error) {
+            // `enqueueWithin` propagates the dedup conflict rather than collapsing
+            // onto the job in flight (an aborted transaction can run no re-read).
+            // A conflict means a processing job for this object is ALREADY pending
+            // or running — a repeated completion — and that job will settle the
+            // row, so the transaction rolling back is the right result: report the
+            // row as it stands. Anything else stays loud.
+            if (!(0, index_1.isActiveDedupConflict)(error))
+                throw error;
+            this.logger.log(`Upload ${objectId} already has a processing job in flight; not queueing another`);
+            updated = await this.db(orgId, userId).storageObject.findUniqueOrThrow({
+                where: { id: objectId },
+            });
+        }
+        // Create audit event
+        await this.createAuditEvent(userId, orgId, 'storage:upload:complete', objectId, {
+            name: updated.name,
+            size: updated.size.toString(),
+            mimeType: updated.mimeType,
+            partsCount: parts.length,
+        });
+        this.logger.log(`Upload completed: ${objectId}`);
+        return this.mapToResponseDto(updated);
+    }
+    /**
+     * Abort multipart upload
+     */
+    async abortUpload(objectId, userId, orgId) {
+        const storageObject = await this.db(orgId, userId).storageObject.findUnique({
+            where: { id: objectId },
+        });
+        if (!storageObject) {
+            throw new common_1.NotFoundException('Upload not found');
+        }
+        // Check ownership
+        if (storageObject.uploadedById !== userId) {
+            throw new common_1.ForbiddenException('You do not own this upload');
+        }
+        if (!storageObject.s3UploadId) {
+            throw new common_1.BadRequestException('Upload ID not found');
+        }
+        this.logger.log(`Aborting upload ${objectId}`);
+        // Abort with storage provider
+        await this.storageProvider.abortMultipartUpload(storageObject.storageKey, storageObject.s3UploadId);
+        // Delete database records
+        await this.db(orgId, userId).storageObject.delete({
+            where: { id: objectId },
+        });
+        // Create audit event
+        await this.createAuditEvent(userId, orgId, 'storage:upload:abort', objectId, {
+            name: storageObject.name,
+            status: storageObject.status,
+        });
+        this.logger.log(`Upload aborted: ${objectId}`);
+    }
+    /**
+     * Simple upload for smaller files
+     */
+    async simpleUpload(file, userId, orgId) {
+        const { filename, mimetype, file: stream } = file;
+        // Deployment upload limits (#519). The byte count of a streamed multipart
+        // body is unknown until it has been consumed; its size is bounded by the
+        // multipart `fileSize` limit `main.ts` registers (min(100MB, maxFileSize)).
+        try {
+            this.assertUploadAllowed(mimetype);
+        }
+        catch (error) {
+            // Drain the unread file part so the request completes and the 415
+            // reaches the client instead of a stalled connection.
+            stream.resume();
+            throw error;
+        }
+        // Generate storage key (org-aware since #736; see `initUpload`).
+        const storageKey = this.newUploadKey(orgId, filename);
+        this.logger.log(`Simple upload starting: ${filename}`);
+        // Upload to storage
+        const result = await this.storageProvider.upload(storageKey, stream, {
+            mimeType: mimetype,
+        });
+        const storageProvider = this.storageProvider.kind;
+        // We don't know the size until after upload for streams
+        // Use a default size of 0, should be updated in post-processing.
+        // Created and settled (`ready`, or a queued processing job) in ONE
+        // transaction — see `completeUpload`. The object id is new, so no
+        // processing job can already hold its dedup key.
+        const storageObject = await (0, storage_db_1.storageRunInOrg)(this.prisma, orgId, async (tx) => {
+            const created = await tx.storageObject.create({
+                data: {
+                    name: filename,
+                    size: BigInt(0), // Will be updated by post-processing
+                    mimeType: mimetype,
+                    storageKey,
+                    // See `initUpload` — the live provider, never a literal.
+                    storageProvider,
+                    bucket: result.bucket,
+                    status: 'processing',
+                    uploadedById: userId,
+                    orgId,
+                },
+            });
+            return this.settleUpload(tx, created);
+        }, { userId });
+        // Create audit event
+        await this.createAuditEvent(userId, orgId, 'storage:upload:complete', storageObject.id, {
+            name: storageObject.name,
+            mimeType: storageObject.mimeType,
+            uploadType: 'simple',
+        });
+        this.logger.log(`Simple upload completed: ${storageObject.id}`);
+        return this.mapToResponseDto(storageObject);
+    }
+    /**
+     * List user's objects with pagination and filtering
+     */
+    async list(query, userId, orgId) {
+        const { page, pageSize, status, sortBy, sortOrder } = query;
+        const skip = (page - 1) * pageSize;
+        const take = pageSize;
+        const where = {
+            uploadedById: userId,
+            ...(status && { status }),
+        };
+        // Build orderBy clause
+        const orderBy = {};
+        if (sortBy === 'createdAt') {
+            orderBy.createdAt = sortOrder;
+        }
+        else if (sortBy === 'name') {
+            orderBy.name = sortOrder;
+        }
+        else if (sortBy === 'size') {
+            orderBy.size = sortOrder;
+        }
+        const db = this.db(orgId, userId);
+        const [items, totalItems] = await Promise.all([
+            db.storageObject.findMany({
+                where,
+                orderBy,
+                skip,
+                take,
+            }),
+            db.storageObject.count({ where }),
+        ]);
+        const totalPages = Math.ceil(totalItems / pageSize);
+        return {
+            items: items.map((item) => this.mapToResponseDto(item)),
+            meta: {
+                page,
+                pageSize,
+                totalItems,
+                totalPages,
+            },
+        };
+    }
+    /**
+     * Get object by ID with ownership check
+     */
+    async getById(id, userId, orgId) {
+        const object = await this.getObjectWithAuthCheck(id, userId, orgId);
+        return this.mapToResponseDto(object);
+    }
+    /**
+     * Get signed download URL for an object
+     */
+    async getDownloadUrl(id, userId, orgId, expiresIn) {
+        tagSpanWithOrg(orgId);
+        const object = await this.getObjectWithAuthCheck(id, userId, orgId);
+        // Verify status is ready
+        if (object.status !== 'ready') {
+            throw new common_1.BadRequestException(`Object is not ready for download. Current status: ${object.status}`);
+        }
+        const defaultExpiry = this.config.get('storage.signedUrlExpiry', 3600);
+        const expiry = expiresIn || defaultExpiry;
+        const url = await this.storageProvider.getSignedDownloadUrl(object.storageKey, { expiresIn: expiry });
+        this.logger.log(`Generated download URL for object ${id}, expires in ${expiry}s`);
+        return {
+            url,
+            expiresIn: expiry,
+        };
+    }
+    /**
+     * Delete object from storage and database.
+     *
+     * By default only the owner may delete (the same ownership check every other
+     * method applies). A caller holding `storage:delete_any` passes
+     * `canDeleteAny: true`, which lifts the ownership check for every object
+     * EXCEPT another user's profile image: an avatar row is referenced by that
+     * user's `profile.imageObjectId`, and deleting it here would leave the
+     * setting pointing at nothing. Avatars are removed through
+     * `DELETE /api/user-settings/profile-image` by their owner, which clears the
+     * reference in the same operation.
+     *
+     * When the actor is not the owner, the audit event records the owner's id
+     * (`ownerUserId`) so the trail says whose object was removed.
+     */
+    async delete(id, userId, orgId, options = {}) {
+        tagSpanWithOrg(orgId);
+        const object = options.canDeleteAny
+            ? await this.getObjectForDeleteAny(id, userId, orgId)
+            : await this.getObjectWithAuthCheck(id, userId, orgId);
+        this.logger.log(`Deleting object ${id} from storage and database`);
+        // Delete from storage provider
+        await this.storageProvider.delete(object.storageKey);
+        // Delete from database (cascade deletes chunks)
+        await this.db(orgId, userId).storageObject.delete({
+            where: { id },
+        });
+        // Create audit event
+        await this.createAuditEvent(userId, orgId, 'storage:object:delete', id, {
+            name: object.name,
+            size: object.size.toString(),
+            mimeType: object.mimeType,
+            ...(object.uploadedById !== userId
+                ? { ownerUserId: object.uploadedById }
+                : {}),
+        });
+        this.logger.log(`Object deleted: ${id}`);
+    }
+    /**
+     * Update object metadata
+     */
+    async updateMetadata(id, dto, userId, orgId) {
+        const object = await this.getObjectWithAuthCheck(id, userId, orgId);
+        // Merge new metadata with existing
+        const existingMetadata = object.metadata || {};
+        const mergedMetadata = {
+            ...existingMetadata,
+            ...dto.metadata,
+        };
+        // Update in database
+        const updated = await this.db(orgId, userId).storageObject.update({
+            where: { id },
+            data: { metadata: mergedMetadata },
+        });
+        // Create audit event
+        await this.createAuditEvent(userId, orgId, 'storage:object:metadata:update', id, {
+            name: object.name,
+            metadataChanges: dto.metadata,
+        });
+        this.logger.log(`Updated metadata for object ${id}`);
+        return this.mapToResponseDto(updated);
+    }
+    /**
+     * Enforces the deployment's upload limits (#519) for both upload routes.
+     *
+     * - `size` (when known) above `storage.maxFileSize` → 413.
+     * - `mimeType` not matching `storage.allowedMimeTypes` → 415. An empty list
+     *   allows every type; entries are exact types or `type/*` wildcards,
+     *   compared case-insensitively and ignoring parameters.
+     */
+    assertUploadAllowed(mimeType, size) {
+        const configuredMax = this.config.get('storage.maxFileSize');
+        const maxFileSize = typeof configuredMax === 'number' && Number.isFinite(configuredMax) && configuredMax > 0
+            ? configuredMax
+            : DEFAULT_MAX_FILE_SIZE;
+        if (size !== undefined && size > maxFileSize) {
+            throw new common_1.PayloadTooLargeException(`File size ${size} bytes exceeds the maximum upload size of ${maxFileSize} bytes`);
+        }
+        const configuredTypes = this.config.get('storage.allowedMimeTypes');
+        const allowedMimeTypes = Array.isArray(configuredTypes) ? configuredTypes : [];
+        if (allowedMimeTypes.length > 0 &&
+            !(0, mime_type_match_1.mimeTypeMatches)((0, mime_type_match_1.normaliseMimeType)(mimeType), allowedMimeTypes)) {
+            throw new common_1.UnsupportedMediaTypeException(`File type '${mimeType}' is not allowed. Allowed types: ${allowedMimeTypes.join(', ')}`);
+        }
+    }
+    /**
+     * Helper method to get object with ownership check
+     * @private
+     */
+    async getObjectWithAuthCheck(id, userId, orgId) {
+        // Another organization's object is invisible to this client (row-level
+        // security), so it is a 404 here exactly like an id that does not exist.
+        const object = await this.db(orgId, userId).storageObject.findUnique({
+            where: { id },
+        });
+        if (!object) {
+            throw new common_1.NotFoundException('Object not found');
+        }
+        // Check ownership
+        if (object.uploadedById !== userId) {
+            throw new common_1.ForbiddenException('You do not have access to this object');
+        }
+        return object;
+    }
+    /**
+     * Decides, synchronously, what happens to an object whose bytes have just
+     * landed (issue #520). Runs inside the caller's transaction.
+     *
+     *   * No registered processor wants it: mark it `ready` right here, with the
+     *     same processed-metadata stamp a processing run writes. One bounded row
+     *     — readiness stays instant, and does not depend on a worker running
+     *     (`JOBS_WORKER_MODE=off`).
+     *   * Otherwise: queue a `storage.object.process` job for it and leave it
+     *     `processing`. Dedup is by subject, which is right: one object needs
+     *     one processing job in flight, never two.
+     *
+     * Never downloads and never runs a processor — that is the job's work.
+     */
+    async settleUpload(tx, object) {
+        if (!this.processing.appliesTo(object)) {
+            return tx.storageObject.update({
+                where: { id: object.id },
+                data: {
+                    status: 'ready',
+                    metadata: (0, processing_metadata_1.buildProcessedMetadata)(object.metadata, {}),
+                },
+            });
+        }
+        const job = await this.jobs.enqueueWithin(tx, {
+            type: storage_object_process_handler_1.STORAGE_OBJECT_PROCESS_TYPE,
+            reason: 'upload',
+            subjectType: storage_job_input_1.STORAGE_OBJECT_SUBJECT_TYPE,
+            subjectId: object.id,
+            // `orgId` rides in the payload: the handler scopes its database client
+            // with it (a payload without one is a pre-#725 job; see `resolveJobOrgId`).
+            payload: { objectId: object.id, orgId: object.orgId },
+        });
+        this.logger.log(`Queued processing job ${job.id} for object ${object.id}`);
+        return object;
+    }
+    /**
+     * Load an object for a `storage:delete_any` delete: no ownership check,
+     * except that another user's profile image is refused. An object counts as
+     * an avatar when EITHER marker is present (key under `avatars/` or
+     * `metadata.purpose === 'avatar'`), so a row carrying only one of them is
+     * still protected.
+     * @private
+     */
+    async getObjectForDeleteAny(id, userId, orgId) {
+        const object = await this.db(orgId, userId).storageObject.findUnique({
+            where: { id },
+        });
+        if (!object) {
+            throw new common_1.NotFoundException('Object not found');
+        }
+        if (object.uploadedById !== userId && this.isAvatarObject(object)) {
+            throw new common_1.ForbiddenException("This object is another user's profile image and cannot be deleted " +
+                'through the storage API; it is removed by its owner via ' +
+                'DELETE /api/user-settings/profile-image');
+        }
+        return object;
+    }
+    isAvatarObject(object) {
+        const metadata = object.metadata;
+        const purpose = metadata && typeof metadata === 'object' && !Array.isArray(metadata)
+            ? metadata.purpose
+            : undefined;
+        return (object.storageKey.startsWith(storage_key_prefixes_1.AVATARS_KEY_PREFIX) ||
+            purpose === profile_image_1.AVATAR_PURPOSE);
+    }
+    /**
+     * Map Prisma model to response DTO
+     */
+    mapToResponseDto(obj) {
+        return {
+            id: obj.id,
+            name: obj.name,
+            size: obj.size.toString(),
+            mimeType: obj.mimeType,
+            status: obj.status,
+            metadata: obj.metadata,
+            createdAt: obj.createdAt.toISOString(),
+            updatedAt: obj.updatedAt.toISOString(),
+        };
+    }
+    /**
+     * Create audit event for storage operations
+     */
+    async createAuditEvent(userId, orgId, action, objectId, meta) {
+        await this.prisma.auditEvent.create({
+            data: {
+                actorUserId: userId,
+                orgId,
+                action,
+                targetType: 'storage_object',
+                targetId: objectId,
+                meta: (meta ?? undefined),
+            },
+        });
+    }
+};
+exports.ObjectsService = ObjectsService;
+exports.ObjectsService = ObjectsService = ObjectsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_2.Inject)(index_2.PLATFORM_PRISMA)),
+    __param(1, (0, common_2.Inject)(storage_provider_interface_1.STORAGE_PROVIDER)),
+    __param(5, (0, common_1.Optional)()),
+    __param(5, (0, common_2.Inject)(storage_options_1.STORAGE_OPTIONS)),
+    __metadata("design:paramtypes", [Object, Object, config_1.ConfigService,
+        object_processing_service_1.ObjectProcessingService,
+        index_1.JobsService, Object])
+], ObjectsService);
+//# sourceMappingURL=objects.service.js.map

package/dist/storage/objects/objects.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objects.service.js","sourceRoot":"","sources":["../../../src/storage/objects/objects.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,2CAA+C;AAC/C,4CAA2C;AAC3C,2CAAwC;AAExC,6CAAyC;AACzC,yCAAoC;AAEpC,kEAA4F;AAC5F,gFAAgE;AAChE,kEAAgE;AAChE,wDAAwE;AACxE,wFAA2E;AAuB3E,4CAAsE;AACtE,uFAAkF;AAClF,2EAA2E;AAC3E,+FAAyF;AACzF,4DAAmE;AACnE,4CAAmD;AASnD,mDAAoE;AACpE,wDAAyH;AAgBzH;;;GAGG;AACH,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,WAAK,CAAC,aAAa,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,0FAA0F;AAC1F,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AAEI,IAAM,cAAc,sBAApB,MAAM,cAAc;IAImB;IAEzB;IACA;IAGA;IACA;IAKA;IAfF,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAE1D,YAC4C,MAAqB,EAE9C,eAAgC,EAChC,MAAqB;IACtC,oEAAoE;IACpE,wEAAwE;IACvD,UAAmC,EACnC,IAAiB,EAKjB,OAAsC;QAZb,WAAM,GAAN,MAAM,CAAe;QAE9C,oBAAe,GAAf,eAAe,CAAiB;QAChC,WAAM,GAAN,MAAM,CAAe;QAGrB,eAAU,GAAV,UAAU,CAAyB;QACnC,SAAI,GAAJ,IAAI,CAAa;QAKjB,YAAO,GAAP,OAAO,CAA+B;QAEvD,0EAA0E;QAC1E,sEAAsE;QACtE,IAAA,oDAA6B,GAAE,CAAC;IAClC,CAAC;IAED,6FAA6F;IACrF,QAAQ;QACd,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAS,kBAAkB,EAAE,iDAA+B,CAAC,CAAC;IACrH,CAAC;IAED;;;;OAIG;IACK,EAAE,CAAC,KAAa,EAAE,MAAc;QACtC,OAAO,IAAA,0BAAa,EAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,KAAa,EAAE,QAAgB;QAClD,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,IAAA,4CAAc,EAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,IAAA,wBAAU,GAAE,GAAG,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,GAAkB,EAClB,MAAc,EACd,KAAa;QAEb,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAErC,yEAAyE;QACzE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEzC,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe;QACjD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,iBAAiB;QAEtD,qBAAqB;QACrB,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAC3B,8BAA8B,WAAW,QAAQ,CAClD,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;QAE9C,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,4BAAmB,CAC3B,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,IAAI,KAAK,UAAU,QAAQ,CAAC,CAAC;QAExE,oDAAoD;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CACjE,UAAU,EACV,EAAE,QAAQ,EAAE,CACb,CAAC;QAEF,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;YACtE,IAAI,EAAE;gBACJ,IAAI;gBACJ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,QAAQ;gBACR,UAAU;gBACV,qEAAqE;gBACrE,0EAA0E;gBAC1E,sEAAsE;gBACtE,wEAAwE;gBACxE,2BAA2B;gBAC3B,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;gBAC1C,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE;gBACxC,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,MAAM;gBACpB,KAAK;aACN;SACF,CAAC,CAAC;QAEH,2DAA2D;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACvD,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACrB,UAAU;YACV,GAAG,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAChD,UAAU,EACV,QAAQ,EACR,UAAU,CACX;SACF,CAAC,CACH,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,uBAAuB,aAAa,CAAC,EAAE,eAAe,QAAQ,EAAE,CACjE,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,aAAa,CAAC,EAAE;YAC1B,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,MAAc,EACd,KAAa;QAEb,MAAM,aAAa,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YAC3E,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC1B,CAAC,CAA8D,CAAC;QAEjE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM;aACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzB,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAC/C,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAChC,MAAM,CAAC,CAAC,CAAC,CACV,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAEpE,OAAO;YACL,QAAQ,EAAE,aAAa,CAAC,EAAE;YAC1B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,aAAa;YACb,UAAU;YACV,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;YACvC,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,GAAsB,EACtB,MAAc,EACd,KAAa;QAEb,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YAC1E,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,QAAQ,SAAS,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;QAE5E,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,IAAA,4BAAe,EACnB,IAAI,CAAC,MAAM,EACX,KAAK,EACL,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;oBACjC,KAAK,EAAE;wBACL,mBAAmB,EAAE;4BACnB,QAAQ;4BACR,UAAU,EAAE,IAAI,CAAC,UAAU;yBAC5B;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ;wBACR,KAAK;wBACL,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,4CAA4C;qBAC9D;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI,CAAC,IAAI;qBAChB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EACD,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAC7C,CAAC;QAEF,wCAAwC;QACxC,MAAM,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAChD,aAAa,CAAC,UAAU,EACxB,aAAa,CAAC,UAAU,EACxB,KAAK,CACN,CAAC;QAEF,uEAAuE;QACvE,8DAA8D;QAC9D,kDAAkD;QAClD,IAAI,OAAsB,CAAC;QAE3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,4BAAe,EAC7B,IAAI,CAAC,MAAM,EACX,KAAK,EACL,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;oBACxC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;oBACvB,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;iBAC/B,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,8CAA8C;YAC9C,IAAI,CAAC,IAAA,6BAAqB,EAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,UAAU,QAAQ,+DAA+D,CAClF,CAAC;YACF,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC;gBACrE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE;YAC9E,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,KAAK,CAAC,MAAM;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAa;QAC/D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YAC1E,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAE/C,8BAA8B;QAC9B,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAC7C,aAAa,CAAC,UAAU,EACxB,aAAa,CAAC,UAAU,CACzB,CAAC;QAEF,0BAA0B;QAC1B,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE;YAC3E,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,MAAM,EAAE,aAAa,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,IAAmB,EACnB,MAAc,EACd,KAAa;QAEb,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAElD,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kEAAkE;YAClE,sDAAsD;YACtD,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QAEvD,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE;YACnE,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAElD,wDAAwD;QACxD,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,iDAAiD;QACjD,MAAM,aAAa,GAAG,MAAM,IAAA,4BAAe,EACzC,IAAI,CAAC,MAAM,EACX,KAAK,EACL,KAAK,EAAE,EAAE,EAAE,EAAE;YACX,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;gBAC5C,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,qCAAqC;oBACtD,QAAQ,EAAE,QAAQ;oBAClB,UAAU;oBACV,yDAAyD;oBACzD,eAAe;oBACf,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,YAAY;oBACpB,YAAY,EAAE,MAAM;oBACpB,KAAK;iBACN;aACF,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QAEF,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,yBAAyB,EAAE,aAAa,CAAC,EAAE,EAAE;YACtF,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAyB,EACzB,MAAc,EACd,KAAa;QAEb,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAE5D,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC;QAEtB,MAAM,KAAK,GAAG;YACZ,YAAY,EAAE,MAAM;YACpB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,OAAO,GAAQ,EAAE,CAAC;QACxB,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;QAC3B,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACxB,KAAK;gBACL,OAAO;gBACP,IAAI;gBACJ,IAAI;aACL,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;QAEpD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,EAAE;gBACJ,IAAI;gBACJ,QAAQ;gBACR,UAAU;gBACV,UAAU;aACX;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAc,EAAE,KAAa;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,EAAU,EACV,MAAc,EACd,KAAa,EACb,SAAkB;QAElB,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAEpE,yBAAyB;QACzB,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAC3B,qDAAqD,MAAM,CAAC,MAAM,EAAE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CACnC,yBAAyB,EACzB,IAAI,CACL,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,IAAI,aAAa,CAAC;QAE1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CACzD,MAAM,CAAC,UAAU,EACjB,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,gBAAgB,MAAM,GAAG,CAAC,CAAC;QAElF,OAAO;YACL,GAAG;YACH,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,MAAM,CACV,EAAU,EACV,MAAc,EACd,KAAa,EACb,UAAsC,EAAE;QAExC,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC;YACrD,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC;QAEnE,+BAA+B;QAC/B,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAErD,gDAAgD;QAChD,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE;YACtE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,MAAM;gBAChC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,EAAU,EACV,GAAsB,EACtB,MAAc,EACd,KAAa;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAEpE,mCAAmC;QACnC,MAAM,gBAAgB,GAAI,MAAM,CAAC,QAAoC,IAAI,EAAE,CAAC;QAC5E,MAAM,cAAc,GAAG;YACrB,GAAG,gBAAgB;YACnB,GAAG,GAAG,CAAC,QAAQ;SAChB,CAAC;QAEF,qBAAqB;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;YAChE,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAuC,EAAE;SAC5D,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE;YAC/E,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,GAAG,CAAC,QAAQ;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CAAC,QAAgB,EAAE,IAAa;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAS,qBAAqB,CAAC,CAAC;QACrE,MAAM,WAAW,GACf,OAAO,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;YACtF,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,qBAAqB,CAAC;QAE5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,iCAAwB,CAChC,aAAa,IAAI,6CAA6C,WAAW,QAAQ,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAW,0BAA0B,CAAC,CAAC;QAC9E,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAE/E,IACE,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,IAAA,iCAAe,EAAC,IAAA,mCAAiB,EAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,EAC/D,CAAC;YACD,MAAM,IAAI,sCAA6B,CACrC,cAAc,QAAQ,oCAAoC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB,CAClC,EAAU,EACV,MAAc,EACd,KAAa;QAEb,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YACnE,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,kBAAkB;QAClB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,2BAAkB,CAAC,uCAAuC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,YAAY,CACxB,EAAa,EACb,MAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;gBAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;gBACxB,IAAI,EAAE;oBACJ,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,IAAA,4CAAsB,EAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;iBACtD;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAA4D,EAAE;YACtG,IAAI,EAAE,4DAA2B;YACjC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,+CAA2B;YACxC,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,uEAAuE;YACvE,4EAA4E;YAC5E,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;SACtD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,EAAE,eAAe,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,qBAAqB,CAAC,EAAU,EAAE,MAAc,EAAE,KAAa;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YACnE,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,2BAAkB,CAC1B,oEAAoE;gBAClE,0DAA0D;gBAC1D,yCAAyC,CAC5C,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,MAGtB;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,OAAO,GACX,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClE,CAAC,CAAE,QAAoC,CAAC,OAAO;YAC/C,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,yCAAkB,CAAC;YAChD,OAAO,KAAK,8BAAc,CAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAQ;QAC/B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAA0C;YACxD,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAc,EACd,KAAa,EACb,MAAc,EACd,QAAgB,EAChB,IAA8B;QAE9B,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAClC,IAAI,EAAE;gBACJ,WAAW,EAAE,MAAM;gBACnB,KAAK;gBACL,MAAM;gBACN,UAAU,EAAE,gBAAgB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,CAAC,IAAI,IAAI,SAAS,CAAsC;aAC/D;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AApxBY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IACvB,WAAA,IAAA,eAAM,EAAC,6CAAgB,CAAC,CAAA;IASxB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,iCAAe,CAAC,CAAA;qDARC,sBAAa;QAGT,mDAAuB;QAC7B,mBAAW;GAXzB,cAAc,CAoxB1B"}