@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/user-data/user-data-plan.service.d.ts

@@ -0,0 +1,62 @@
+import { type OnModuleInit } from '@nestjs/common';
+import { type UserPurgePlan } from './purge/user-purge';
+import { type ResolvedUserDataModuleOptions } from './user-data.options';
+/**
+ * One `org` model the offboarding and the factory reset delete, in order.
+ *
+ * @stability experimental
+ */
+export interface OrgDataStep {
+    /** The model. */
+    readonly model: string;
+    /** Its client delegate. */
+    readonly delegate: string;
+    /** Its organization column. */
+    readonly orgField: string;
+    /** What the factory reset does with it. */
+    readonly factoryReset: 'delete' | 'keep';
+}
+/**
+ * The storage-object model of the org data plan.
+ *
+ * @stability experimental
+ */
+export interface OrgStorageStep {
+    /** The model. */
+    readonly model: string;
+    /** Its client delegate. */
+    readonly delegate: string;
+    /** Its organization column. */
+    readonly orgField: string;
+}
+/**
+ * The org data plan: every `org` model of the model-ownership registry except
+ * the storage-object model (the media step deletes it), children first.
+ *
+ * @stability experimental
+ */
+export interface OrgDataPlan {
+    /** In delete order. */
+    readonly steps: readonly OrgDataStep[];
+    /** The storage-object model and its organization column, when registered. */
+    readonly storage?: OrgStorageStep;
+}
+/**
+ * Builds and holds the per-user purge plan and the org data plan.
+ *
+ * @stability experimental
+ */
+export declare class UserDataPlanService implements OnModuleInit {
+    private readonly options;
+    private readonly logger;
+    private userPlan?;
+    private orgPlan?;
+    constructor(options: ResolvedUserDataModuleOptions);
+    /** Plans at bootstrap; throws (failing startup) when no plan exists. */
+    onModuleInit(): void;
+    /** The per-user purge plan. */
+    user(): UserPurgePlan;
+    /** The org data plan. */
+    org(): OrgDataPlan;
+}
+//# sourceMappingURL=user-data-plan.service.d.ts.map

package/dist/user-data/user-data-plan.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-plan.service.d.ts","sourceRoot":"","sources":["../../src/user-data/user-data-plan.service.ts"],"names":[],"mappings":"AAKA,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI/E,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAqB,KAAK,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAG5F;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2CAA2C;IAC3C,QAAQ,CAAC,YAAY,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;CACnC;AAED;;;;GAIG;AACH,qBACa,mBAAoB,YAAW,YAAY;IAKf,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAC,CAAc;gBAE0B,OAAO,EAAE,6BAA6B;IAE9F,wEAAwE;IACxE,YAAY,IAAI,IAAI;IASpB,+BAA+B;IAC/B,IAAI,IAAI,aAAa;IASrB,yBAAyB;IACzB,GAAG,IAAI,WAAW;CAoBnB"}

package/dist/user-data/user-data-plan.service.js

@@ -0,0 +1,84 @@
+"use strict";
+// The purge plans, computed once at bootstrap (issue #743, PP-9.1). A cycle in
+// the delete order, a hint naming an unknown category or a model the schema
+// lacks fails startup here, naming the models, instead of failing a user's
+// purge halfway.
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var UserDataPlanService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserDataPlanService = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../core/index");
+const purge_planner_1 = require("./purge/purge-planner");
+const user_purge_1 = require("./purge/user-purge");
+const user_data_options_1 = require("./user-data.options");
+const user_data_registries_1 = require("./user-data.registries");
+/**
+ * Builds and holds the per-user purge plan and the org data plan.
+ *
+ * @stability experimental
+ */
+let UserDataPlanService = UserDataPlanService_1 = class UserDataPlanService {
+    options;
+    logger = new common_1.Logger(UserDataPlanService_1.name);
+    userPlan;
+    orgPlan;
+    constructor(options) {
+        this.options = options;
+    }
+    /** Plans at bootstrap; throws (failing startup) when no plan exists. */
+    onModuleInit() {
+        const user = this.user();
+        const org = this.org();
+        this.logger.log(`User purge plan: ${user.steps.length} inline model(s), ${user.delegated.length} delegated, ${user.kept.length} kept; ` +
+            `org data plan: ${org.steps.length} model(s)`);
+    }
+    /** The per-user purge plan. */
+    user() {
+        return (this.userPlan ??= (0, user_purge_1.planUserPurge)({
+            datamodel: this.options.datamodel(),
+            owned: index_1.userOwnedModelRegistry.list(),
+            hint: (model) => user_data_registries_1.userDataModelRegistry.get(model),
+            categories: user_data_registries_1.userDataCategoryRegistry.list(),
+        }));
+    }
+    /** The org data plan. */
+    org() {
+        if (this.orgPlan)
+            return this.orgPlan;
+        const datamodel = this.options.datamodel();
+        const storageModel = (0, user_data_registries_1.storageObjectModelHint)()?.model;
+        const models = (0, index_1.modelsOfKind)('org')
+            .map((def) => def.model)
+            .filter((name) => name !== storageModel && datamodel.some((entry) => entry.name === name));
+        const steps = (0, purge_planner_1.orderForDeletion)(models, datamodel).map((model) => ({
+            model,
+            delegate: (0, purge_planner_1.delegateName)(model),
+            orgField: (0, index_1.orgFieldOf)(model) ?? 'orgId',
+            factoryReset: user_data_registries_1.userDataModelRegistry.get(model)?.factoryReset ?? 'delete',
+        }));
+        const storageOrgField = storageModel ? (0, index_1.orgFieldOf)(storageModel) : undefined;
+        const storage = storageModel && storageOrgField && (0, purge_planner_1.hasField)(storageModel, storageOrgField, datamodel)
+            ? { model: storageModel, delegate: (0, purge_planner_1.delegateName)(storageModel), orgField: storageOrgField }
+            : undefined;
+        return (this.orgPlan = { steps, ...(storage ? { storage } : {}) });
+    }
+};
+exports.UserDataPlanService = UserDataPlanService;
+exports.UserDataPlanService = UserDataPlanService = UserDataPlanService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(user_data_options_1.USER_DATA_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], UserDataPlanService);
+//# sourceMappingURL=user-data-plan.service.js.map

package/dist/user-data/user-data-plan.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data-plan.service.js","sourceRoot":"","sources":["../../src/user-data/user-data-plan.service.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,iBAAiB;;;;;;;;;;;;;;;;AAEjB,2CAA+E;AAE/E,yCAAiF;AACjF,yDAAiF;AACjF,mDAAuE;AACvE,2DAA4F;AAC5F,iEAAiH;AA6CjH;;;;GAIG;AAEI,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAK0B;IAJvC,MAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IACvD,QAAQ,CAAiB;IACzB,OAAO,CAAe;IAE9B,YAAwD,OAAsC;QAAtC,YAAO,GAAP,OAAO,CAA+B;IAAG,CAAC;IAElG,wEAAwE;IACxE,YAAY;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,oBAAoB,IAAI,CAAC,KAAK,CAAC,MAAM,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,eAAe,IAAI,CAAC,IAAI,CAAC,MAAM,SAAS;YACrH,kBAAkB,GAAG,CAAC,KAAK,CAAC,MAAM,WAAW,CAChD,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAA,0BAAa,EAAC;YACtC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACnC,KAAK,EAAE,8BAAsB,CAAC,IAAI,EAAE;YACpC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,4CAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YACjD,UAAU,EAAE,+CAAwB,CAAC,IAAI,EAAE;SAC5C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,yBAAyB;IACzB,GAAG;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAA,6CAAsB,GAAE,EAAE,KAAK,CAAC;QACrD,MAAM,MAAM,GAAG,IAAA,oBAAY,EAAC,KAAK,CAAC;aAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;aACvB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAA,gCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChE,KAAK;YACL,QAAQ,EAAE,IAAA,4BAAY,EAAC,KAAK,CAAC;YAC7B,QAAQ,EAAE,IAAA,kBAAU,EAAC,KAAK,CAAC,IAAI,OAAO;YACtC,YAAY,EAAE,4CAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,YAAY,IAAK,QAAkB;SACpF,CAAC,CAAC,CAAC;QACJ,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,IAAA,kBAAU,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,OAAO,GACX,YAAY,IAAI,eAAe,IAAI,IAAA,wBAAQ,EAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC;YACnF,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAA,4BAAY,EAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE;YAC1F,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;CACF,CAAA;AAhDY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAME,WAAA,IAAA,eAAM,EAAC,qCAAiB,CAAC,CAAA;;GAL3B,mBAAmB,CAgD/B"}

package/dist/user-data/user-data.controller.d.ts

@@ -0,0 +1,142 @@
+import { type Type } from '@nestjs/common';
+declare const UserDataSummaryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    categories: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        label: import("zod").ZodString;
+        description: import("zod").ZodString;
+        content: import("zod").ZodBoolean;
+        count: import("zod").ZodNumber;
+        bytes: import("zod").ZodNullable<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>>;
+    scopes: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        label: import("zod").ZodString;
+        description: import("zod").ZodString;
+        layer: import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").UserDataScopeLayerEnum>;
+        confirmation: import("zod").ZodString;
+        categories: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    kept: import("zod").ZodArray<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class UserDataSummaryDto extends UserDataSummaryDto_base {
+}
+declare const UserDataDeletionRequestDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    scope: import("zod").ZodString;
+    confirmation: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class UserDataDeletionRequestDto extends UserDataDeletionRequestDto_base {
+}
+declare const UserDataJobStartedDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    jobId: import("zod").ZodString;
+    status: import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").UserDataJobStatusEnum>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class UserDataJobStartedDto extends UserDataJobStartedDto_base {
+}
+declare const UserDataDeletionStatusDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    jobId: import("zod").ZodString;
+    status: import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").UserDataJobStatusEnum>;
+    scope: import("zod").ZodString;
+    result: import("zod").ZodNullable<import("zod").ZodObject<{
+        categories: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
+        models: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
+        storageObjectsDeleted: import("zod").ZodDefault<import("zod").ZodNumber>;
+        storageObjectsFailed: import("zod").ZodDefault<import("zod").ZodNumber>;
+        cancelledJobs: import("zod").ZodDefault<import("zod").ZodNumber>;
+        delegatedJobs: import("zod").ZodDefault<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>>;
+    error: import("zod").ZodNullable<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class UserDataDeletionStatusDto extends UserDataDeletionStatusDto_base {
+}
+declare const FactoryResetRequestDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    confirmation: import("zod").ZodLiteral<"FACTORY RESET">;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class FactoryResetRequestDto extends FactoryResetRequestDto_base {
+}
+declare const FactoryResetSummaryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    disabledReason: import("zod").ZodNullable<import("zod").ZodString>;
+    otherUsers: import("zod").ZodNumber;
+    organizations: import("zod").ZodNumber;
+    storageObjects: import("zod").ZodNumber;
+    jobs: import("zod").ZodNumber;
+    categories: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        label: import("zod").ZodString;
+        count: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strip>>;
+    deleted: import("zod").ZodArray<import("zod").ZodString>;
+    kept: import("zod").ZodArray<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class FactoryResetSummaryDto extends FactoryResetSummaryDto_base {
+}
+declare const FactoryResetStatusDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    jobId: import("zod").ZodString;
+    status: import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").UserDataJobStatusEnum>;
+    result: import("zod").ZodNullable<import("zod").ZodObject<{
+        counts: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
+    }, import("zod/v4/core").$strip>>;
+    error: import("zod").ZodNullable<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class FactoryResetStatusDto extends FactoryResetStatusDto_base {
+}
+declare const OrgOffboardingRequestDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    confirmation: import("zod").ZodString;
+    userDisposition: import("zod").ZodDefault<import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").OffboardingUserDispositionEnum>>;
+    skipExport: import("zod").ZodOptional<import("zod").ZodObject<{
+        reason: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class OrgOffboardingRequestDto extends OrgOffboardingRequestDto_base {
+}
+declare const OrgOffboardingSummaryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    org: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        name: import("zod").ZodString;
+        slug: import("zod").ZodString;
+        isDefault: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>;
+    blockedReason: import("zod").ZodNullable<import("zod").ZodString>;
+    models: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>;
+    members: import("zod").ZodNumber;
+    invites: import("zod").ZodNumber;
+    storageObjects: import("zod").ZodNumber;
+    usersLeftWithoutOrg: import("zod").ZodNumber;
+    preconditions: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        label: import("zod").ZodString;
+        passed: import("zod").ZodBoolean;
+        message: import("zod").ZodNullable<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class OrgOffboardingSummaryDto extends OrgOffboardingSummaryDto_base {
+}
+declare const OrgOffboardingStatusDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    jobId: import("zod").ZodString;
+    status: import("zod").ZodEnum<import("@marinoscar/platform-contract/user-data").UserDataJobStatusEnum>;
+    result: import("zod").ZodNullable<import("zod").ZodObject<{
+        counts: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodNumber>>;
+    }, import("zod/v4/core").$strip>>;
+    error: import("zod").ZodNullable<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** @stability experimental */
+export declare class OrgOffboardingStatusDto extends OrgOffboardingStatusDto_base {
+}
+/**
+ * Builds the three controllers. `UserDataModule.forRoot()` calls it.
+ *
+ * @returns the controller classes, in OpenAPI path order.
+ *
+ * @stability experimental
+ */
+export declare function createUserDataControllers(): Type<unknown>[];
+export {};
+//# sourceMappingURL=user-data.controller.d.ts.map

package/dist/user-data/user-data.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data.controller.d.ts","sourceRoot":"","sources":["../../src/user-data/user-data.controller.ts"],"names":[],"mappings":"AAaA,OAAO,EAA2E,KAAK,IAAI,EAAE,MAAM,gBAAgB,CAAC;;;;;;;;;;;;;;;;;;;;AAyBpH,8BAA8B;AAC9B,qBAAa,kBAAmB,SAAQ,uBAAmC;CAAG;;;;;AAC9E,8BAA8B;AAC9B,qBAAa,0BAA2B,SAAQ,+BAA2C;CAAG;;;;;AAC9F,8BAA8B;AAC9B,qBAAa,qBAAsB,SAAQ,0BAAsC;CAAG;;;;;;;;;;;;;;;AACpF,8BAA8B;AAC9B,qBAAa,yBAA0B,SAAQ,8BAA0C;CAAG;;;;AAC5F,8BAA8B;AAC9B,qBAAa,sBAAuB,SAAQ,2BAAuC;CAAG;;;;;;;;;;;;;;;AACtF,8BAA8B;AAC9B,qBAAa,sBAAuB,SAAQ,2BAAuC;CAAG;;;;;;;;;AACtF,8BAA8B;AAC9B,qBAAa,qBAAsB,SAAQ,0BAAsC;CAAG;;;;;;;;AACpF,8BAA8B;AAC9B,qBAAa,wBAAyB,SAAQ,6BAAyC;CAAG;;;;;;;;;;;;;;;;;;;;;AAC1F,8BAA8B;AAC9B,qBAAa,wBAAyB,SAAQ,6BAAyC;CAAG;;;;;;;;;AAC1F,8BAA8B;AAC9B,qBAAa,uBAAwB,SAAQ,4BAAwC;CAAG;AAMxF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CA2J3D"}

package/dist/user-data/user-data.controller.js

@@ -0,0 +1,302 @@
+"use strict";
+// =============================================================================
+// The user-data slice's routes (issue #743, PP-9.1)
+// =============================================================================
+//
+//   /api/user-data/summary, /deletions, /deletions/:jobId       user_settings:write
+//   /api/admin/factory-reset/summary, /, /:jobId                 system:factory_reset
+//   /api/admin/orgs/:orgId/offboarding/summary, /, /:jobId       orgs:offboard
+//
+// Every route declares its exact permission; every body is a zod DTO built
+// from `@marinoscar/platform-contract/user-data`. The request routes answer
+// `202` with the job (a new one, or the one already in flight).
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgOffboardingStatusDto = exports.OrgOffboardingSummaryDto = exports.OrgOffboardingRequestDto = exports.FactoryResetStatusDto = exports.FactoryResetSummaryDto = exports.FactoryResetRequestDto = exports.UserDataDeletionStatusDto = exports.UserDataJobStartedDto = exports.UserDataDeletionRequestDto = exports.UserDataSummaryDto = void 0;
+exports.createUserDataControllers = createUserDataControllers;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const user_data_1 = require("@marinoscar/platform-contract/user-data");
+const nestjs_zod_1 = require("nestjs-zod");
+const index_1 = require("../core/index");
+const index_2 = require("../identity/index");
+const user_data_service_1 = require("./user-data.service");
+/** @stability experimental */
+class UserDataSummaryDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.userDataSummarySchema) {
+}
+exports.UserDataSummaryDto = UserDataSummaryDto;
+/** @stability experimental */
+class UserDataDeletionRequestDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.userDataDeletionRequestSchema) {
+}
+exports.UserDataDeletionRequestDto = UserDataDeletionRequestDto;
+/** @stability experimental */
+class UserDataJobStartedDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.userDataJobStartedSchema) {
+}
+exports.UserDataJobStartedDto = UserDataJobStartedDto;
+/** @stability experimental */
+class UserDataDeletionStatusDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.userDataDeletionStatusSchema) {
+}
+exports.UserDataDeletionStatusDto = UserDataDeletionStatusDto;
+/** @stability experimental */
+class FactoryResetRequestDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.factoryResetRequestSchema) {
+}
+exports.FactoryResetRequestDto = FactoryResetRequestDto;
+/** @stability experimental */
+class FactoryResetSummaryDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.factoryResetSummarySchema) {
+}
+exports.FactoryResetSummaryDto = FactoryResetSummaryDto;
+/** @stability experimental */
+class FactoryResetStatusDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.factoryResetStatusSchema) {
+}
+exports.FactoryResetStatusDto = FactoryResetStatusDto;
+/** @stability experimental */
+class OrgOffboardingRequestDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.orgOffboardingRequestSchema) {
+}
+exports.OrgOffboardingRequestDto = OrgOffboardingRequestDto;
+/** @stability experimental */
+class OrgOffboardingSummaryDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.orgOffboardingSummarySchema) {
+}
+exports.OrgOffboardingSummaryDto = OrgOffboardingSummaryDto;
+/** @stability experimental */
+class OrgOffboardingStatusDto extends (0, nestjs_zod_1.createZodDto)(user_data_1.orgOffboardingStatusSchema) {
+}
+exports.OrgOffboardingStatusDto = OrgOffboardingStatusDto;
+const USER = user_data_1.USER_DATA_PERMISSION;
+const FACTORY = user_data_1.FACTORY_RESET_PERMISSION;
+const OFFBOARD = user_data_1.ORG_OFFBOARD_PERMISSION;
+/**
+ * Builds the three controllers. `UserDataModule.forRoot()` calls it.
+ *
+ * @returns the controller classes, in OpenAPI path order.
+ *
+ * @stability experimental
+ */
+function createUserDataControllers() {
+    let UserDataController = class UserDataController {
+        service;
+        constructor(service) {
+            this.service = service;
+        }
+        summary(user) {
+            return this.service.summary(user.id);
+        }
+        request(user, body) {
+            return this.service.requestDeletion(user.id, body);
+        }
+        status(user, jobId) {
+            return this.service.status(user.id, jobId);
+        }
+    };
+    __decorate([
+        (0, common_1.Get)('summary'),
+        (0, index_2.Auth)({ permissions: [USER] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'What a data deletion would delete',
+            description: 'Per registered category: the rows the caller owns (in every organization) and, for files, the stored bytes. ' +
+                'Plus every scope the caller may request, with its exact confirmation phrase and resolved categories. Read-only. ' +
+                `Requires \`${user_data_1.USER_DATA_PERMISSION}\` (every role holds it).`,
+        }),
+        (0, index_1.ApiDataResponse)(UserDataSummaryDto, { description: 'Categories and scopes.' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object]),
+        __metadata("design:returntype", void 0)
+    ], UserDataController.prototype, "summary", null);
+    __decorate([
+        (0, common_1.Post)('deletions'),
+        (0, common_1.HttpCode)(common_1.HttpStatus.ACCEPTED),
+        (0, index_2.Auth)({ permissions: [USER] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Delete my data (one scope)',
+            description: `Queues \`user.data.purge\` for the caller and the scope. \`confirmation\` must be the scope's exact phrase ` +
+                `(\`everything\`: \`${user_data_1.USER_DATA_EVERYTHING_CONFIRMATION}\`); anything else is a 400 \`CONFIRMATION_MISMATCH\`, an ` +
+                'unknown scope a 400 `UNKNOWN_SCOPE`. One purge per user at a time: a second request returns the job in flight. ' +
+                'The account, its sign-in identities, roles, memberships, the session and the audit log are kept. The `everything` ' +
+                'scope deletes personal access tokens, so a CLI using a `pat_` token gets 401 afterwards.',
+        }),
+        (0, index_1.ApiDataResponse)(UserDataJobStartedDto, { status: 202, description: 'The purge job.' }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: '`CONFIRMATION_MISMATCH` or `UNKNOWN_SCOPE` (in `details.reason`)' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __param(1, (0, common_1.Body)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object, UserDataDeletionRequestDto]),
+        __metadata("design:returntype", void 0)
+    ], UserDataController.prototype, "request", null);
+    __decorate([
+        (0, common_1.Get)('deletions/:jobId'),
+        (0, index_2.Auth)({ permissions: [USER] }),
+        (0, swagger_1.ApiParam)({ name: 'jobId', format: 'uuid' }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Status of my data deletion',
+            description: '`result` when succeeded (counts per category and model), `error` when failed. 404 unless it is the caller\'s own purge job.',
+        }),
+        (0, index_1.ApiDataResponse)(UserDataDeletionStatusDto, { description: 'The job status.' }),
+        (0, swagger_1.ApiResponse)({ status: 404, description: 'Not the caller\'s purge job' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __param(1, (0, common_1.Param)('jobId', new common_1.ParseUUIDPipe())),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object, String]),
+        __metadata("design:returntype", void 0)
+    ], UserDataController.prototype, "status", null);
+    UserDataController = __decorate([
+        (0, swagger_1.ApiTags)('User data'),
+        (0, common_1.Controller)('user-data'),
+        __metadata("design:paramtypes", [user_data_service_1.UserDataService])
+    ], UserDataController);
+    let FactoryResetController = class FactoryResetController {
+        service;
+        constructor(service) {
+            this.service = service;
+        }
+        summary(user) {
+            return this.service.summary(user.id);
+        }
+        request(user, _body) {
+            return this.service.request(user.id);
+        }
+        status(jobId) {
+            return this.service.status(jobId);
+        }
+    };
+    __decorate([
+        (0, common_1.Get)('summary'),
+        (0, index_2.Auth)({ permissions: [FACTORY] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'What a factory reset would delete',
+            description: 'Deployment-wide counts: other users, organizations other than the default one, storage objects outside the ' +
+                'prefixes that survive, job rows and rows per user-data category. `disabledReason` is ' +
+                '`FACTORY_RESET_DISABLED_IN_SAAS` in `DEPLOYMENT_MODE=saas`. Read-only. Requires `system:factory_reset` (Admin only).',
+        }),
+        (0, index_1.ApiDataResponse)(FactoryResetSummaryDto, { description: 'The summary.' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object]),
+        __metadata("design:returntype", void 0)
+    ], FactoryResetController.prototype, "summary", null);
+    __decorate([
+        (0, common_1.Post)(),
+        (0, common_1.HttpCode)(common_1.HttpStatus.ACCEPTED),
+        (0, index_2.Auth)({ permissions: [FACTORY] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Factory reset the deployment',
+            description: `Queues \`admin.factory_reset\`. \`confirmation\` must be exactly \`${user_data_1.FACTORY_RESET_CONFIRMATION}\` (400 otherwise). ` +
+                'Deletes every other user and all application data; keeps the caller, roles, configuration, backups (runs, archives ' +
+                'and linked jobs) and the audit log. One per deployment at a time: a second request returns the job in flight. ' +
+                '403 `FACTORY_RESET_DISABLED_IN_SAAS` in SaaS mode. Take a backup first.',
+        }),
+        (0, index_1.ApiDataResponse)(UserDataJobStartedDto, { status: 202, description: 'The reset job.' }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: 'Wrong phrase' }),
+        (0, swagger_1.ApiResponse)({ status: 403, description: '`FACTORY_RESET_DISABLED_IN_SAAS`, or the permission is missing' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __param(1, (0, common_1.Body)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object, FactoryResetRequestDto]),
+        __metadata("design:returntype", void 0)
+    ], FactoryResetController.prototype, "request", null);
+    __decorate([
+        (0, common_1.Get)(':jobId'),
+        (0, index_2.Auth)({ permissions: [FACTORY] }),
+        (0, swagger_1.ApiParam)({ name: 'jobId', format: 'uuid' }),
+        (0, swagger_1.ApiOperation)({ summary: 'Status of a factory reset', description: '`result.counts` when succeeded, `error` when failed. 404 for another job type.' }),
+        (0, index_1.ApiDataResponse)(FactoryResetStatusDto, { description: 'The job status.' }),
+        (0, swagger_1.ApiResponse)({ status: 404, description: 'Not a factory reset job' }),
+        __param(0, (0, common_1.Param)('jobId', new common_1.ParseUUIDPipe())),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [String]),
+        __metadata("design:returntype", void 0)
+    ], FactoryResetController.prototype, "status", null);
+    FactoryResetController = __decorate([
+        (0, swagger_1.ApiTags)('Factory reset'),
+        (0, common_1.Controller)('admin/factory-reset'),
+        __metadata("design:paramtypes", [user_data_service_1.FactoryResetService])
+    ], FactoryResetController);
+    let OrgOffboardingController = class OrgOffboardingController {
+        service;
+        constructor(service) {
+            this.service = service;
+        }
+        summary(orgId) {
+            return this.service.summary(orgId);
+        }
+        request(user, orgId, body) {
+            return this.service.request(user.id, orgId, body);
+        }
+        status(orgId, jobId) {
+            return this.service.status(orgId, jobId);
+        }
+    };
+    __decorate([
+        (0, common_1.Get)('summary'),
+        (0, index_2.Auth)({ permissions: [OFFBOARD] }),
+        (0, swagger_1.ApiParam)({ name: 'orgId', format: 'uuid' }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'What offboarding an organization would delete',
+            description: 'Org-owned rows per model, members, invites, storage objects, the members left without any organization, and every ' +
+                'registered precondition with its verdict. 409 `OFFBOARDING_REQUIRES_MULTI_ORG` in single-organization mode; ' +
+                '`blockedReason` is `DEFAULT_ORG_NOT_OFFBOARDABLE` for the default organization. Requires `orgs:offboard` (Admin only).',
+        }),
+        (0, index_1.ApiDataResponse)(OrgOffboardingSummaryDto, { description: 'The summary.' }),
+        (0, swagger_1.ApiResponse)({ status: 409, description: '`OFFBOARDING_REQUIRES_MULTI_ORG`' }),
+        __param(0, (0, common_1.Param)('orgId', new common_1.ParseUUIDPipe())),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [String]),
+        __metadata("design:returntype", void 0)
+    ], OrgOffboardingController.prototype, "summary", null);
+    __decorate([
+        (0, common_1.Post)(),
+        (0, common_1.HttpCode)(common_1.HttpStatus.ACCEPTED),
+        (0, index_2.Auth)({ permissions: [OFFBOARD] }),
+        (0, swagger_1.ApiParam)({ name: 'orgId', format: 'uuid' }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Offboard an organization',
+            description: "Queues `org.offboard`: deletes the organization's rows and objects, invites, memberships and the organization. " +
+                "`confirmation` must be the organization's slug (400 `CONFIRMATION_MISMATCH`). `userDisposition` decides about members " +
+                'left without any organization: `keep` (default) or `purge` (their data and account are deleted). A failing ' +
+                'precondition answers 409 `OFFBOARDING_PRECONDITION_FAILED` (`details.preconditions`) unless `skipExport.reason` is ' +
+                'given, which the audit event records. 409 `OFFBOARDING_REQUIRES_MULTI_ORG` in single mode, `DEFAULT_ORG_NOT_OFFBOARDABLE` ' +
+                'for the default organization.',
+        }),
+        (0, index_1.ApiDataResponse)(UserDataJobStartedDto, { status: 202, description: 'The offboarding job.' }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: '`CONFIRMATION_MISMATCH`' }),
+        (0, swagger_1.ApiResponse)({ status: 409, description: 'Single mode, the default organization, or a failing precondition' }),
+        __param(0, (0, index_2.CurrentUser)()),
+        __param(1, (0, common_1.Param)('orgId', new common_1.ParseUUIDPipe())),
+        __param(2, (0, common_1.Body)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object, String, OrgOffboardingRequestDto]),
+        __metadata("design:returntype", void 0)
+    ], OrgOffboardingController.prototype, "request", null);
+    __decorate([
+        (0, common_1.Get)(':jobId'),
+        (0, index_2.Auth)({ permissions: [OFFBOARD] }),
+        (0, swagger_1.ApiParam)({ name: 'orgId', format: 'uuid' }),
+        (0, swagger_1.ApiParam)({ name: 'jobId', format: 'uuid' }),
+        (0, swagger_1.ApiOperation)({ summary: 'Status of an offboarding', description: '`result.counts` when succeeded, `error` when failed. 404 for another job.' }),
+        (0, index_1.ApiDataResponse)(OrgOffboardingStatusDto, { description: 'The job status.' }),
+        (0, swagger_1.ApiResponse)({ status: 404, description: 'Not an offboarding job of this organization' }),
+        __param(0, (0, common_1.Param)('orgId', new common_1.ParseUUIDPipe())),
+        __param(1, (0, common_1.Param)('jobId', new common_1.ParseUUIDPipe())),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [String, String]),
+        __metadata("design:returntype", void 0)
+    ], OrgOffboardingController.prototype, "status", null);
+    OrgOffboardingController = __decorate([
+        (0, swagger_1.ApiTags)('Organization offboarding'),
+        (0, common_1.Controller)('admin/orgs/:orgId/offboarding'),
+        __metadata("design:paramtypes", [user_data_service_1.OrgOffboardingService])
+    ], OrgOffboardingController);
+    return [UserDataController, FactoryResetController, OrgOffboardingController];
+}
+//# sourceMappingURL=user-data.controller.js.map

package/dist/user-data/user-data.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-data.controller.js","sourceRoot":"","sources":["../../src/user-data/user-data.controller.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oDAAoD;AACpD,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,gEAAgE;AAChE,gFAAgF;;;;;;;;;;;;;;;AA2DhF,8DA2JC;AApND,2CAAoH;AACpH,6CAA+E;AAC/E,uEAgBiD;AACjD,2CAA0C;AAE1C,yCAAgD;AAChD,6CAA6F;AAC7F,2DAAkG;AAElG,8BAA8B;AAC9B,MAAa,kBAAmB,SAAQ,IAAA,yBAAY,EAAC,iCAAqB,CAAC;CAAG;AAA9E,gDAA8E;AAC9E,8BAA8B;AAC9B,MAAa,0BAA2B,SAAQ,IAAA,yBAAY,EAAC,yCAA6B,CAAC;CAAG;AAA9F,gEAA8F;AAC9F,8BAA8B;AAC9B,MAAa,qBAAsB,SAAQ,IAAA,yBAAY,EAAC,oCAAwB,CAAC;CAAG;AAApF,sDAAoF;AACpF,8BAA8B;AAC9B,MAAa,yBAA0B,SAAQ,IAAA,yBAAY,EAAC,wCAA4B,CAAC;CAAG;AAA5F,8DAA4F;AAC5F,8BAA8B;AAC9B,MAAa,sBAAuB,SAAQ,IAAA,yBAAY,EAAC,qCAAyB,CAAC;CAAG;AAAtF,wDAAsF;AACtF,8BAA8B;AAC9B,MAAa,sBAAuB,SAAQ,IAAA,yBAAY,EAAC,qCAAyB,CAAC;CAAG;AAAtF,wDAAsF;AACtF,8BAA8B;AAC9B,MAAa,qBAAsB,SAAQ,IAAA,yBAAY,EAAC,oCAAwB,CAAC;CAAG;AAApF,sDAAoF;AACpF,8BAA8B;AAC9B,MAAa,wBAAyB,SAAQ,IAAA,yBAAY,EAAC,uCAA2B,CAAC;CAAG;AAA1F,4DAA0F;AAC1F,8BAA8B;AAC9B,MAAa,wBAAyB,SAAQ,IAAA,yBAAY,EAAC,uCAA2B,CAAC;CAAG;AAA1F,4DAA0F;AAC1F,8BAA8B;AAC9B,MAAa,uBAAwB,SAAQ,IAAA,yBAAY,EAAC,sCAA0B,CAAC;CAAG;AAAxF,0DAAwF;AAExF,MAAM,IAAI,GAAG,gCAAsC,CAAC;AACpD,MAAM,OAAO,GAAG,oCAA0C,CAAC;AAC3D,MAAM,QAAQ,GAAG,mCAAyC,CAAC;AAE3D;;;;;;GAMG;AACH,SAAgB,yBAAyB;IACvC,IAEM,kBAAkB,GAFxB,MAEM,kBAAkB;QACO;QAA7B,YAA6B,OAAwB;YAAxB,YAAO,GAAP,OAAO,CAAiB;QAAG,CAAC;QAYzD,OAAO,CAAgB,IAAiB;YACtC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAgBD,OAAO,CAAgB,IAAiB,EAAU,IAAgC;YAChF,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAA+C,CAAC,CAAC;QAChG,CAAC;QAWD,MAAM,CAAgB,IAAiB,EAAuC,KAAa;YACzF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;KACF,CAAA;IAlCC;QAVC,IAAA,YAAG,EAAC,SAAS,CAAC;QACd,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EACT,8GAA8G;gBAC9G,kHAAkH;gBAClH,cAAc,gCAAoB,2BAA2B;SAChE,CAAC;QACD,IAAA,uBAAe,EAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QACtE,WAAA,IAAA,mBAAW,GAAE,CAAA;;;;qDAErB;IAgBD;QAdC,IAAA,aAAI,EAAC,WAAW,CAAC;QACjB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,QAAQ,CAAC;QAC7B,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,4BAA4B;YACrC,WAAW,EACT,6GAA6G;gBAC7G,sBAAsB,6CAAiC,4DAA4D;gBACnH,iHAAiH;gBACjH,oHAAoH;gBACpH,0FAA0F;SAC7F,CAAC;QACD,IAAA,uBAAe,EAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACtF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;QACrG,WAAA,IAAA,mBAAW,GAAE,CAAA;QAAqB,WAAA,IAAA,aAAI,GAAE,CAAA;;iDAAO,0BAA0B;;qDAEjF;IAWD;QATC,IAAA,YAAG,EAAC,kBAAkB,CAAC;QACvB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,6HAA6H;SAC3I,CAAC;QACD,IAAA,uBAAe,EAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;QAC9E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;QACjE,WAAA,IAAA,mBAAW,GAAE,CAAA;QAAqB,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;;;;oDAE5E;IA9CG,kBAAkB;QAFvB,IAAA,iBAAO,EAAC,WAAW,CAAC;QACpB,IAAA,mBAAU,EAAC,WAAW,CAAC;yCAEgB,mCAAe;OADjD,kBAAkB,CA+CvB;IAED,IAEM,sBAAsB,GAF5B,MAEM,sBAAsB;QACG;QAA7B,YAA6B,OAA4B;YAA5B,YAAO,GAAP,OAAO,CAAqB;QAAG,CAAC;QAY7D,OAAO,CAAgB,IAAiB;YACtC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAgBD,OAAO,CAAgB,IAAiB,EAAU,KAA6B;YAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAQD,MAAM,CAAsC,KAAa;YACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;KACF,CAAA;IA/BC;QAVC,IAAA,YAAG,EAAC,SAAS,CAAC;QACd,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EACT,6GAA6G;gBAC7G,uFAAuF;gBACvF,sHAAsH;SACzH,CAAC;QACD,IAAA,uBAAe,EAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAChE,WAAA,IAAA,mBAAW,GAAE,CAAA;;;;yDAErB;IAgBD;QAdC,IAAA,aAAI,GAAE;QACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,QAAQ,CAAC;QAC7B,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,8BAA8B;YACvC,WAAW,EACT,sEAAsE,sCAA0B,sBAAsB;gBACtH,qHAAqH;gBACrH,gHAAgH;gBAChH,yEAAyE;SAC5E,CAAC;QACD,IAAA,uBAAe,EAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACtF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QACzD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC;QACnG,WAAA,IAAA,mBAAW,GAAE,CAAA;QAAqB,WAAA,IAAA,aAAI,GAAE,CAAA;;iDAAQ,sBAAsB;;yDAE9E;IAQD;QANC,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,WAAW,EAAE,gFAAgF,EAAE,CAAC;QACrJ,IAAA,uBAAe,EAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;QAC1E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QAC7D,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;;;;wDAE1C;IA3CG,sBAAsB;QAF3B,IAAA,iBAAO,EAAC,eAAe,CAAC;QACxB,IAAA,mBAAU,EAAC,qBAAqB,CAAC;yCAEM,uCAAmB;OADrD,sBAAsB,CA4C3B;IAED,IAEM,wBAAwB,GAF9B,MAEM,wBAAwB;QACC;QAA7B,YAA6B,OAA8B;YAA9B,YAAO,GAAP,OAAO,CAAuB;QAAG,CAAC;QAc/D,OAAO,CAAsC,KAAa;YACxD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAmBD,OAAO,CAAgB,IAAiB,EAAuC,KAAa,EAAU,IAA8B;YAClI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAa,CAAC,CAAC;QAC7D,CAAC;QASD,MAAM,CAAsC,KAAa,EAAuC,KAAa;YAC3G,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;KACF,CAAA;IAnCC;QAZC,IAAA,YAAG,EAAC,SAAS,CAAC;QACd,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,+CAA+C;YACxD,WAAW,EACT,oHAAoH;gBACpH,8GAA8G;gBAC9G,wHAAwH;SAC3H,CAAC;QACD,IAAA,uBAAe,EAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAC1E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;QACrE,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;;;;2DAE3C;IAmBD;QAjBC,IAAA,aAAI,GAAE;QACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,QAAQ,CAAC;QAC7B,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,0BAA0B;YACnC,WAAW,EACT,iHAAiH;gBACjH,wHAAwH;gBACxH,6GAA6G;gBAC7G,qHAAqH;gBACrH,4HAA4H;gBAC5H,+BAA+B;SAClC,CAAC;QACD,IAAA,uBAAe,EAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;QAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QACpE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;QACrG,WAAA,IAAA,mBAAW,GAAE,CAAA;QAAqB,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;QAAiB,WAAA,IAAA,aAAI,GAAE,CAAA;;yDAAO,wBAAwB;;2DAEnI;IASD;QAPC,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC;QAC/I,IAAA,uBAAe,EAAC,uBAAuB,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;QAC5E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;QACjF,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;QAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;;;;0DAE9F;IAjDG,wBAAwB;QAF7B,IAAA,iBAAO,EAAC,0BAA0B,CAAC;QACnC,IAAA,mBAAU,EAAC,+BAA+B,CAAC;yCAEJ,yCAAqB;OADvD,wBAAwB,CAkD7B;IAED,OAAO,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;AAChF,CAAC"}