@nocobase/app-plugin-projects 0.0.0-stage → 0.1.0-beta.2

package/dist/server/domains/approvals/approval.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.store.js","sourceRoot":"","sources":["../../../../server/domains/approvals/approval.store.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAoBtD,MAAM,QAAQ,GAAG,CAAC,IAAwB,EAAE,EAAE,CAC5C,IAAI,CAAC,UAAU,CAAiB,iBAAiB,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAI,KAA4B,EAAgB,EAAE,CACtE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAEjE,MAAM,UAAU,WAAW,CACzB,IAAwB,EACxB,EAAU;IAEV,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAwB,EACxB,OAAe;IAEf,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;QACtC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,QAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,GAAG,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;YAChC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SACvD,CAAC;QACJ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAwB,EACxB,OAAe,EACf,KAAa;IAEb,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,GAAG,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;SACjC,CAAC;QACJ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;QAC9C,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAwB,EACxB,KAAa;IAEb,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;QAC9C,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,GAAoD;IAEpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;QAC7B,MAAM,EAAE;YACN,GAAG,GAAG;YACN,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrC,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACjD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf;KACF,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,EAAU,EACV,MAIC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QAC7C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QACjC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;KACtD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;AACjC,CAAC"}

package/dist/server/domains/approvals/index.d.ts

@@ -0,0 +1,4 @@
+export { createApprovalService, type ApprovalService, type ApprovedMoves, type NewApprovalRequest, } from './approval.service.js';
+export { createApprovalRoutes } from './approval.routes.js';
+export type { ApprovalRecord } from './approval.store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/domains/approvals/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/domains/approvals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server/domains/approvals/index.js

@@ -0,0 +1,3 @@
+export { createApprovalService, } from './approval.service.js';
+export { createApprovalRoutes } from './approval.routes.js';
+//# sourceMappingURL=index.js.map

package/dist/server/domains/approvals/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/domains/approvals/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAItB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/server/domains/attachments/attachment.routes.d.ts

@@ -0,0 +1,13 @@
+import type { Hono } from 'hono';
+import { type Attachment } from '../../../shared/attachments.js';
+import { type ViewerEnv } from '../../access/request.js';
+import type { AttachmentService } from './attachment.service.js';
+/** `filename*` per RFC 5987, so any name survives; the plain `filename` is an ASCII fallback. */
+export declare function contentDisposition(kind: 'inline' | 'attachment', filename: string): string;
+/** The headers a file is served with: inline only for a safe image, unless a download is asked for. */
+export declare function contentHeaders(attachment: Attachment, download: boolean): Record<string, string>;
+/** Under `/api/projects/attachments`. */
+export declare function createAttachmentRoutes(attachments: AttachmentService): Hono<ViewerEnv>;
+/** Under `/api/projects/issues`: `GET /{issueId}/attachments` and `POST /{issueId}/attachments` (one file). */
+export declare function createIssueAttachmentRoutes(attachments: AttachmentService): Hono<ViewerEnv>;
+//# sourceMappingURL=attachment.routes.d.ts.map

package/dist/server/domains/attachments/attachment.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.routes.d.ts","sourceRoot":"","sources":["../../../../server/domains/attachments/attachment.routes.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,EAEL,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAkBnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AA8CjE,iGAAiG;AACjG,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,QAAQ,GAAG,YAAY,EAC7B,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR;AAID,uGAAuG;AACvG,wBAAgB,cAAc,CAC5B,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,OAAO,GAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcxB;AAED,yCAAyC;AACzC,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,iBAAiB,GAC7B,IAAI,CAAC,SAAS,CAAC,CAiJjB;AAED,+GAA+G;AAC/G,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,iBAAiB,GAC7B,IAAI,CAAC,SAAS,CAAC,CA2EjB"}

package/dist/server/domains/attachments/attachment.routes.js

@@ -0,0 +1,209 @@
+/**
+ * `/api/projects/attachments` and `/api/projects/issues/{issueId}/attachments` (`shared/attachments.ts`). Every path
+ * acts as the signed-in person; the service decides what they may read and change.
+ */
+import { ApiError, apiErrorHandler, apiErrorResponse, apiErrorResponses, apiValidator, cliRoute, dataResponse, describeRoute, emptyResponse, listResponse, } from '@nocobase/app-server/router';
+import { bodyLimit } from 'hono/body-limit';
+import { ATTACHMENT_SIZE_MAX, } from '../../../shared/attachments.js';
+import { viewerOf } from '../../access/request.js';
+import { invalid } from '../../kernel/errors.js';
+import { boundedList, domainRouter, PROJECTS_DOMAIN, tags, personOrRunSecurity, } from '../../kernel/http.js';
+import { AttachmentContentQuery, IssueAttachmentsQuery, AttachmentParams, AttachmentSchema, BoundedListMeta, IssueParams, singleFileBody, } from '../../routes/schemas.js';
+/** Room for the multipart envelope around one file. */
+const ENVELOPE = 64 * 1024;
+const sizeLimit = bodyLimit({
+    maxSize: ATTACHMENT_SIZE_MAX + ENVELOPE,
+    onError: (context) => apiErrorHandler(new ApiError({
+        status: 'INVALID_ARGUMENT',
+        reason: 'FILE_TOO_LARGE',
+        domain: PROJECTS_DOMAIN,
+        message: `A file may have at most ${ATTACHMENT_SIZE_MAX} bytes.`,
+        metadata: { maxBytes: ATTACHMENT_SIZE_MAX },
+        httpStatus: 413,
+    }), context),
+});
+const uploadErrors = {
+    400: apiErrorResponse(400, 'When the body is not multipart with one `file` (`INVALID_FILE`), or the application stores no files (`FAILED_PRECONDITION`, `FILES_UNAVAILABLE`).'),
+    413: apiErrorResponse(413, `When the file is over ${ATTACHMENT_SIZE_MAX} bytes (\`FILE_TOO_LARGE\`).`),
+};
+/** The one `file` of a multipart body; 400 `INVALID_FILE` otherwise. */
+async function fileOf(context) {
+    let body;
+    try {
+        body = await context.req.parseBody();
+    }
+    catch {
+        throw invalid('INVALID_FILE', 'Send one file as multipart form data.');
+    }
+    const file = body.file;
+    if (!(file instanceof File))
+        throw invalid('INVALID_FILE', 'Send one file as `file`.');
+    return file;
+}
+/** `filename*` per RFC 5987, so any name survives; the plain `filename` is an ASCII fallback. */
+export function contentDisposition(kind, filename) {
+    const ascii = filename.replace(/[^\x20-\x7e]|["\\]/gu, '_') || 'file';
+    const encoded = encodeURIComponent(filename).replace(/['()*]/gu, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+    return `${kind}; filename="${ascii}"; filename*=UTF-8''${encoded}`;
+}
+const MIME = /^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/iu;
+/** The headers a file is served with: inline only for a safe image, unless a download is asked for. */
+export function contentHeaders(attachment, download) {
+    const inline = attachment.previewable && !download;
+    const type = attachment.mimeType.split(';')[0]?.trim() ?? '';
+    return {
+        'Content-Type': MIME.test(type) ? type : 'application/octet-stream',
+        'Content-Length': String(attachment.size),
+        'Content-Disposition': contentDisposition(inline ? 'inline' : 'attachment', attachment.filename),
+        'X-Content-Type-Options': 'nosniff',
+        'Content-Security-Policy': "sandbox; default-src 'none'",
+        'Cache-Control': 'private, no-store',
+    };
+}
+/** Under `/api/projects/attachments`. */
+export function createAttachmentRoutes(attachments) {
+    const routes = domainRouter();
+    routes.post('/', describeRoute({
+        tags,
+        summary: 'Upload a file',
+        operationId: 'projectsUploadAttachment',
+        security: personOrRunSecurity,
+        ...cliRoute({
+            command: 'attachment upload',
+            action: 'pm.attachments/upload',
+        }),
+        description: `Needs \`upload\` on \`pm.attachments\`. One file as the \`file\` field of a multipart body, at most ${ATTACHMENT_SIZE_MAX} bytes. The upload is attached to nothing until it is sent with a comment (\`attachmentIds\`); one left so for 24 hours is purged.`,
+        requestBody: singleFileBody,
+        responses: {
+            201: dataResponse(AttachmentSchema),
+            ...apiErrorResponses,
+            ...uploadErrors,
+        },
+    }), sizeLimit, async (context) => context.json({
+        data: await attachments.upload(viewerOf(context), await fileOf(context)),
+    }, 201));
+    routes.get('/:attachmentId', describeRoute({
+        tags,
+        summary: 'Get a file',
+        operationId: 'projectsGetAttachment',
+        ...cliRoute({
+            command: 'attachment get',
+            flags: { attachmentId: { name: 'file' } },
+        }),
+        description: 'Readable by whoever sees its issue; an upload attached to nothing by its uploader only.',
+        responses: {
+            200: dataResponse(AttachmentSchema),
+            ...apiErrorResponses,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', AttachmentParams), async (context) => context.json({
+        data: await attachments.get(viewerOf(context), context.req.valid('param').attachmentId),
+    }));
+    routes.get('/:attachmentId/content', describeRoute({
+        tags,
+        summary: 'Download a file',
+        operationId: 'projectsDownloadAttachment',
+        security: personOrRunSecurity,
+        ...cliRoute({
+            command: 'issue attachment download',
+            flags: {
+                attachmentId: {
+                    name: 'file',
+                    description: 'The file id; `issue attachment list` gives them.',
+                },
+                download: { hidden: true },
+            },
+            action: 'pm.issues/view',
+        }),
+        description: 'The file’s bytes. A safe raster image is served inline unless `download=true`; anything else, SVG and HTML included, as a download. Always with `X-Content-Type-Options: nosniff`, `Content-Security-Policy: sandbox` and `Cache-Control: private, no-store`.',
+        responses: {
+            200: {
+                description: 'The bytes, with the type the uploader declared (`application/octet-stream` when it is not a valid media type) and a `Content-Disposition` naming the file.',
+                content: {
+                    'application/octet-stream': {
+                        schema: { type: 'string', format: 'binary' },
+                    },
+                },
+            },
+            ...apiErrorResponses,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', AttachmentParams), apiValidator('query', AttachmentContentQuery), async (context) => {
+        const { attachment, body } = await attachments.content(viewerOf(context), context.req.valid('param').attachmentId);
+        return new Response(body, {
+            status: 200,
+            headers: contentHeaders(attachment, context.req.valid('query').download),
+        });
+    });
+    routes.delete('/:attachmentId', describeRoute({
+        tags,
+        summary: 'Delete a file',
+        operationId: 'projectsDeleteAttachment',
+        security: personOrRunSecurity,
+        ...cliRoute({
+            command: 'attachment delete',
+            flags: { attachmentId: { name: 'file' } },
+            action: 'pm.attachments/upload',
+            confirm: 'Delete this file?',
+        }),
+        description: 'An issue’s own file, by its uploader or by whoever may moderate comments on the issue; a comment’s files go with the comment.',
+        responses: {
+            204: emptyResponse(),
+            ...apiErrorResponses,
+            400: apiErrorResponse(400, 'When the file was sent with a comment (`COMMENT_ATTACHMENT`).'),
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', AttachmentParams), async (context) => {
+        await attachments.remove(viewerOf(context), context.req.valid('param').attachmentId);
+        return context.body(null, 204);
+    });
+    return routes;
+}
+/** Under `/api/projects/issues`: `GET /{issueId}/attachments` and `POST /{issueId}/attachments` (one file). */
+export function createIssueAttachmentRoutes(attachments) {
+    const routes = domainRouter();
+    routes.get('/:issueId/attachments', describeRoute({
+        tags,
+        summary: 'List an issue’s files',
+        operationId: 'projectsListIssueAttachments',
+        security: personOrRunSecurity,
+        ...cliRoute({
+            command: 'issue attachment list',
+            flags: {
+                issueId: { name: 'issue' },
+                comments: { description: 'Its comments’ files too.' },
+            },
+            columns: ['id', 'filename', 'size', 'mimeType', 'commentId'],
+            action: 'pm.issues/view',
+        }),
+        description: 'The issue’s own files, oldest first; with `comments=true`, then the files of its comments that are not deleted (each with its `commentId`). `issueId` is an id or an identifier.',
+        responses: {
+            200: listResponse(AttachmentSchema, BoundedListMeta),
+            ...apiErrorResponses,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', IssueParams), apiValidator('query', IssueAttachmentsQuery), async (context) => context.json(boundedList(await attachments.list(viewerOf(context), context.req.valid('param').issueId, { comments: context.req.valid('query').comments === 'true' }))));
+    routes.post('/:issueId/attachments', describeRoute({
+        tags,
+        summary: 'Attach a file to an issue',
+        operationId: 'projectsUploadIssueAttachment',
+        ...cliRoute({
+            command: 'issue attachment add',
+            flags: { issueId: { name: 'issue' } },
+            action: 'pm.attachments/upload',
+            examples: ['issue attachment add PM-12 --file design.png'],
+        }),
+        description: `Needs \`upload\` on \`pm.attachments\` and \`edit\` on the issue. One file as the \`file\` field of a multipart body, at most ${ATTACHMENT_SIZE_MAX} bytes.`,
+        requestBody: singleFileBody,
+        responses: {
+            201: dataResponse(AttachmentSchema),
+            ...apiErrorResponses,
+            ...uploadErrors,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', IssueParams), sizeLimit, async (context) => context.json({
+        data: await attachments.uploadToIssue(viewerOf(context), context.req.valid('param').issueId, await fileOf(context)),
+    }, 201));
+    return routes;
+}
+//# sourceMappingURL=attachment.routes.js.map

package/dist/server/domains/attachments/attachment.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.routes.js","sourceRoot":"","sources":["../../../../server/domains/attachments/attachment.routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EACL,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,IAAI,EACJ,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,uDAAuD;AACvD,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3B,MAAM,SAAS,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,mBAAmB,GAAG,QAAQ;IACvC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CACnB,eAAe,CACb,IAAI,QAAQ,CAAC;QACX,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,2BAA2B,mBAAmB,SAAS;QAChE,QAAQ,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE;QAC3C,UAAU,EAAE,GAAG;KAChB,CAAC,EACF,OAAO,CACR;CACJ,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG;IACnB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,mJAAmJ,CACpJ;IACD,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,yBAAyB,mBAAmB,8BAA8B,CAC3E;CACF,CAAC;AAEF,wEAAwE;AACxE,KAAK,UAAU,MAAM,CAAC,OAAgB;IACpC,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC;QACzB,MAAM,OAAO,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAChC,IAA6B,EAC7B,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;IACtE,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAClD,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9D,CAAC;IACF,OAAO,GAAG,IAAI,eAAe,KAAK,uBAAuB,OAAO,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,IAAI,GAAG,4DAA4D,CAAC;AAE1E,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAC5B,UAAsB,EACtB,QAAiB;IAEjB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B;QACnE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,qBAAqB,EAAE,kBAAkB,CACvC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,EAChC,UAAU,CAAC,QAAQ,CACpB;QACD,wBAAwB,EAAE,SAAS;QACnC,yBAAyB,EAAE,6BAA6B;QACxD,eAAe,EAAE,mBAAmB;KACrC,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,sBAAsB,CACpC,WAA8B;IAE9B,MAAM,MAAM,GAAG,YAAY,EAAa,CAAC;IACzC,MAAM,CAAC,IAAI,CACT,GAAG,EACH,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,mBAAmB;QAC7B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;QACF,WAAW,EAAE,uGAAuG,mBAAmB,oIAAoI;QAC3Q,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,iBAAiB;YACpB,GAAG,YAAY;SAChB;KACF,CAAC,EACF,SAAS,EACT,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CACV;QACE,IAAI,EAAE,MAAM,WAAW,CAAC,MAAM,CAC5B,QAAQ,CAAC,OAAO,CAAC,EACjB,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB;KACF,EACD,GAAG,CACJ,CACJ,CAAC;IACF,MAAM,CAAC,GAAG,CACR,gBAAgB,EAChB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,uBAAuB;QACpC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;SAC1C,CAAC;QACF,WAAW,EACT,yFAAyF;QAC3F,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,WAAW,CAAC,GAAG,CACzB,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CACxC;KACF,CAAC,CACL,CAAC;IACF,MAAM,CAAC,GAAG,CACR,wBAAwB,EACxB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,mBAAmB;QAC7B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,2BAA2B;YACpC,KAAK,EAAE;gBACL,YAAY,EAAE;oBACZ,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,kDAAkD;iBAChE;gBACD,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aAC3B;YACD,MAAM,EAAE,gBAAgB;SACzB,CAAC;QACF,WAAW,EACT,+PAA+P;QACjQ,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EACT,4JAA4J;gBAC9J,OAAO,EAAE;oBACP,0BAA0B,EAAE;wBAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;qBAC7C;iBACF;aACF;YACD,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,YAAY,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAC7C,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,CACpD,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CACxC,CAAC;QACF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,cAAc,CACrB,UAAU,EACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CACpC;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,MAAM,CAAC,MAAM,CACX,gBAAgB,EAChB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,mBAAmB;QAC7B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QACF,WAAW,EACT,+HAA+H;QACjI,SAAS,EAAE;YACT,GAAG,EAAE,aAAa,EAAE;YACpB,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,+DAA+D,CAChE;YACD,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,WAAW,CAAC,MAAM,CACtB,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CACxC,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,2BAA2B,CACzC,WAA8B;IAE9B,MAAM,MAAM,GAAG,YAAY,EAAa,CAAC;IACzC,MAAM,CAAC,GAAG,CACR,uBAAuB,EACvB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,mBAAmB;QAC7B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE;gBACL,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC1B,QAAQ,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;aACtD;YACD,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC;YAC5D,MAAM,EAAE,gBAAgB;SACzB,CAAC;QACF,WAAW,EACT,kLAAkL;QACpL,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,EAAE,eAAe,CAAC;YACpD,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,EAClC,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC5C,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CACV,WAAW,CACT,MAAM,WAAW,CAAC,IAAI,CACpB,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAClC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAC7D,CACF,CACF,CACJ,CAAC;IACF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,2BAA2B;QACpC,WAAW,EAAE,+BAA+B;QAC5C,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,sBAAsB;YAC/B,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YACrC,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,CAAC,8CAA8C,CAAC;SAC3D,CAAC;QACF,WAAW,EAAE,iIAAiI,mBAAmB,SAAS;QAC1K,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,iBAAiB;YACpB,GAAG,YAAY;YACf,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,EAClC,SAAS,EACT,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CACV;QACE,IAAI,EAAE,MAAM,WAAW,CAAC,aAAa,CACnC,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAClC,MAAM,MAAM,CAAC,OAAO,CAAC,CACtB;KACF,EACD,GAAG,CACJ,CACJ,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/domains/attachments/attachment.service.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Files on issues and comments (`shared/attachments.ts`): uploading, attaching, listing, reading, removing, and
+ * purging what nothing holds any longer. The bytes go through `AttachmentStorage` (the file plugin and Drive); the
+ * rows are `pmAttachments`.
+ *
+ * An upload is the uploader's: a person's (`user` and their id) or, for an agent working on an issue, the agent's own
+ * principal. Only the uploader may read an upload attached to nothing, attach it, or discard it. Attaching happens in
+ * the caller's transaction: the comment service sends a comment's files with it (`attach`), the plan service gives an
+ * intake's files to the issues it created. Attaching to an issue records `attachment_added`; a comment's files are
+ * counted on its `comment_added` instead. Removing an issue's file records `attachment_removed`.
+ *
+ * A comment's files are not removed with its row (a deletion may be part of a plan that rolls back): once the comment
+ * is deleted they are no longer listed or served, and the purge deletes them with the uploads attached to nothing for
+ * `ORPHAN_HOURS`.
+ */
+import type { DatabaseConnection } from '@nocobase/db';
+import { type Attachment } from '../../../shared/attachments.js';
+import type { Issue } from '../../../shared/issues.js';
+import { type Viewer } from '../../access/viewer.js';
+import type { ActivityRecorder } from '../../kernel/activity.js';
+import type { Actor } from '../../kernel/actor.js';
+import type { KindRegistry } from '../../kernel/kinds.js';
+import type { Tx, TxRunner } from '../../kernel/tx.js';
+import type { AttachmentStorage } from './attachment.storage.js';
+import { type AttachmentRecord, type UploaderRef } from './attachment.store.js';
+export interface AttachmentContent {
+    readonly attachment: Attachment;
+    readonly body: ReadableStream<Uint8Array>;
+}
+export interface AttachmentService {
+    /** An upload of the viewer's, attached to nothing yet. */
+    upload(viewer: Viewer, file: File): Promise<Attachment>;
+    /** Uploads a file straight onto the issue (its own files). */
+    uploadToIssue(viewer: Viewer, issueIdOrKey: string, file: File): Promise<Attachment>;
+    /** The issue's own files, oldest first; with `comments`, then its live comments' files. */
+    list(viewer: Viewer, issueIdOrKey: string, options?: {
+        readonly comments?: boolean;
+    }): Promise<Attachment[]>;
+    /** One file the viewer may read, by id; 404 otherwise. */
+    get(viewer: Viewer, id: string): Promise<Attachment>;
+    /** A file's bytes; 404 unless the viewer may read it. */
+    content(viewer: Viewer, id: string): Promise<AttachmentContent>;
+    remove(viewer: Viewer, id: string): Promise<void>;
+    /** Deletes the viewer's own uploads attached to nothing (a comment that failed); others are left alone. */
+    discard(viewer: Viewer, ids: readonly string[]): Promise<void>;
+    /** Deletes uploads attached to nothing for `ORPHAN_HOURS`, and deleted comments' files; answers how many. */
+    purge(at?: Date): Promise<number>;
+}
+/** What the comment and plan services use, inside their transactions. */
+export interface AttachmentLinks {
+    /**
+     * Attaches `ids` (checked: 1 to `ATTACHMENTS_PER_REQUEST_MAX` distinct ids of `uploader`'s uploads attached to
+     * nothing) to the issue, or to one of its comments. Answers the rows, in the order named. 400 `INVALID_FIELD` or
+     * `INVALID_ATTACHMENT` otherwise, and nothing is attached.
+     */
+    attach(tx: Tx, uploader: UploaderRef, target: {
+        readonly issueId: string;
+        readonly commentId: string | null;
+    }, ids: unknown): Promise<AttachmentRecord[]>;
+    /** The files of these comments, by comment id; a deleted comment's are left out by the caller. */
+    ofComments(conn: DatabaseConnection, commentIds: readonly string[]): Promise<ReadonlyMap<string, readonly Attachment[]>>;
+    /** The issue's own files as `viewer` sees them (who may remove which). */
+    ofIssue(conn: DatabaseConnection, viewer: Viewer | null, issue: Issue): Promise<Attachment[]>;
+}
+export interface AttachmentDeps {
+    readonly tx: TxRunner;
+    readonly activity: ActivityRecorder;
+    readonly kinds: KindRegistry;
+    readonly storage: AttachmentStorage;
+    /** The application's public base path (`/app`, or empty), for the content URLs. */
+    readonly basePath: () => string;
+    /** File ids an open plan still needs (an intake's files), kept by the purge. */
+    readonly keep?: (conn: DatabaseConnection) => Promise<ReadonlySet<string>>;
+    readonly now?: () => Date;
+}
+/** Who uploads as the viewer: the actor they act as (an agent working on an issue uploads as itself). */
+export declare function uploaderOf(actor: Actor, userId: string): UploaderRef;
+export declare function requireUploader(viewer: Viewer): void;
+/** The `attachmentIds` of a request: absent or empty is none; otherwise 1 to the maximum distinct strings. */
+export declare function readAttachmentIds(value: unknown): string[];
+export declare function createAttachmentService(deps: AttachmentDeps): {
+    readonly service: AttachmentService;
+    readonly links: AttachmentLinks;
+};
+//# sourceMappingURL=attachment.service.d.ts.map

package/dist/server/domains/attachments/attachment.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.service.d.ts","sourceRoot":"","sources":["../../../../server/domains/attachments/attachment.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAA0B,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AASvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAWL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAK/B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,8DAA8D;IAC9D,aAAa,CACX,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,2FAA2F;IAC3F,IAAI,CACF,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACzB,0DAA0D;IAC1D,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,yDAAyD;IACzD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,2GAA2G;IAC3G,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,6GAA6G;IAC7G,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CACJ,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EACvE,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/B,kGAAkG;IAClG,UAAU,CACR,IAAI,EAAE,kBAAkB,EACxB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC;IACvD,0EAA0E;IAC1E,OAAO,CACL,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,yGAAyG;AACzG,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAEpE;AAKD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAOpD;AAED,8GAA8G;AAC9G,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAc1D;AAaD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,cAAc,GAAG;IAC7D,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC,CAkRA"}

package/dist/server/domains/attachments/attachment.service.js

@@ -0,0 +1,253 @@
+import { ATTACHMENTS_PER_REQUEST_MAX, ATTACHMENT_SIZE_MAX, ORPHAN_HOURS, isInlinePreviewable, } from '../../../shared/attachments.js';
+import { requireAction, scopeOf } from '../../access/viewer.js';
+import { conflict, forbidden, invalid, notFound } from '../../kernel/errors.js';
+import { findComment } from '../comments/comment.store.js';
+import { canSee, findIssue, managesIssue, requireEditor, requireVisible, } from '../issues/index.js';
+import { attachRows, commentAttachments, deleteAttachment, deleteIfUnattached, findAttachment, findAttachments, issueAttachments, liveCommentAttachments, ofDeletedComments, unattached, } from './attachment.store.js';
+/** Rows the purge looks at per pass. */
+const PURGE_BATCH = 500;
+/** Who uploads as the viewer: the actor they act as (an agent working on an issue uploads as itself). */
+export function uploaderOf(actor, userId) {
+    return { type: actor.type, id: actor.id ?? userId };
+}
+const sameUploader = (row, uploader) => row.uploaderType === uploader.type && row.uploaderId === uploader.id;
+export function requireUploader(viewer) {
+    requireAction(viewer, 'pm.attachments', 'upload', 'You may not attach files.');
+}
+/** The `attachmentIds` of a request: absent or empty is none; otherwise 1 to the maximum distinct strings. */
+export function readAttachmentIds(value) {
+    if (value === undefined || value === null)
+        return [];
+    if (!Array.isArray(value) ||
+        !value.every((item) => typeof item === 'string' && !!item))
+        throw invalid('INVALID_FIELD', 'attachmentIds must be a list of file ids.');
+    const ids = [...new Set(value)];
+    if (ids.length > ATTACHMENTS_PER_REQUEST_MAX)
+        throw invalid('INVALID_FIELD', `At most ${ATTACHMENTS_PER_REQUEST_MAX} files at a time.`);
+    return ids;
+}
+function checkSize(file) {
+    if (file.size > ATTACHMENT_SIZE_MAX)
+        throw invalid('FILE_TOO_LARGE', `A file may have at most ${ATTACHMENT_SIZE_MAX} bytes.`, { maxBytes: ATTACHMENT_SIZE_MAX });
+}
+const iso = (value) => new Date(value).toISOString();
+export function createAttachmentService(deps) {
+    const now = deps.now ?? (() => new Date());
+    function contentPath(id) {
+        const base = deps.basePath().replace(/\/+$/u, '');
+        return `${base}/api/projects/attachments/${encodeURIComponent(id)}/content`;
+    }
+    async function views(conn, rows, canDelete) {
+        const name = await deps.kinds.nameAll(conn, rows.map((row) => ({ type: row.uploaderType, id: row.uploaderId })));
+        return rows.map((row) => ({
+            id: row.id,
+            filename: row.filename,
+            ext: row.ext,
+            mimeType: row.mimeType,
+            size: Number(row.size),
+            issueId: row.issueId,
+            commentId: row.commentId,
+            uploader: {
+                type: row.uploaderType,
+                id: row.uploaderId,
+                name: name(row.uploaderType, row.uploaderId),
+            },
+            createdAt: iso(row.createdAt),
+            contentUrl: contentPath(row.id),
+            downloadUrl: `${contentPath(row.id)}?download=true`,
+            previewable: isInlinePreviewable(row.mimeType, row.ext),
+            canDelete: canDelete(row),
+        }));
+    }
+    async function view(conn, row, canDelete = false) {
+        const [one] = await views(conn, [row], () => canDelete);
+        if (!one)
+            throw notFound('Attachment');
+        return one;
+    }
+    /** Whether the viewer may remove an issue's own file. */
+    async function mayRemove(conn, viewer, issue, row) {
+        if (row.commentId !== null)
+            return false;
+        if (sameUploader(row, uploaderOf(viewer.actor, viewer.userId)) &&
+            scopeOf(viewer, 'pm.issues', 'edit') !== 'none')
+            return true;
+        return managesIssue(conn, viewer, issue, 'moderate-comments');
+    }
+    /** The row and its issue (null while attached to nothing), when the viewer may read it; 404 otherwise. */
+    async function readable(conn, viewer, id) {
+        const row = await findAttachment(conn, id);
+        if (!row)
+            throw notFound('Attachment');
+        if (row.issueId === null) {
+            if (!sameUploader(row, uploaderOf(viewer.actor, viewer.userId)))
+                throw notFound('Attachment');
+            return { row, issue: null };
+        }
+        const issue = await findIssue(conn, row.issueId);
+        if (!issue || !(await canSee(conn, viewer, issue)))
+            throw notFound('Attachment');
+        if (row.commentId !== null) {
+            const comment = await findComment(conn, row.commentId);
+            if (!comment || comment.deletedAt)
+                throw notFound('Attachment');
+        }
+        return { row, issue };
+    }
+    async function store(viewer, file) {
+        requireUploader(viewer);
+        checkSize(file);
+        return deps.storage.store(file, uploaderOf(viewer.actor, viewer.userId));
+    }
+    const links = {
+        async attach(tx, uploader, target, value) {
+            const ids = readAttachmentIds(value);
+            if (ids.length === 0)
+                return [];
+            const rows = await findAttachments(tx.conn, ids);
+            const ordered = ids.map((id) => {
+                const row = rows.find((candidate) => candidate.id === id);
+                if (!row || row.issueId !== null || !sameUploader(row, uploader))
+                    throw invalid('INVALID_ATTACHMENT', `File ${id} is not an upload of yours attached to nothing.`, { fileId: id });
+                return row;
+            });
+            await attachRows(tx.conn, ids, target);
+            return ordered;
+        },
+        async ofComments(conn, commentIds) {
+            const rows = await commentAttachments(conn, commentIds);
+            const mapped = await views(conn, rows, () => false);
+            const byComment = new Map();
+            for (const attachment of mapped) {
+                const key = attachment.commentId ?? '';
+                byComment.set(key, [...(byComment.get(key) ?? []), attachment]);
+            }
+            return byComment;
+        },
+        async ofIssue(conn, viewer, issue) {
+            const rows = await issueAttachments(conn, issue.id);
+            const removable = new Set();
+            if (viewer)
+                for (const row of rows)
+                    if (await mayRemove(conn, viewer, issue, row))
+                        removable.add(row.id);
+            return views(conn, rows, (row) => removable.has(row.id));
+        },
+    };
+    const service = {
+        async upload(viewer, file) {
+            const id = await store(viewer, file);
+            const conn = deps.tx.read();
+            const row = await findAttachment(conn, id);
+            if (!row)
+                throw notFound('Attachment');
+            return view(conn, row, true);
+        },
+        async uploadToIssue(viewer, issueIdOrKey, file) {
+            const issue = await requireVisible(deps.tx.read(), viewer, issueIdOrKey);
+            requireEditor(viewer);
+            const id = await store(viewer, file);
+            return deps.tx.run(async (tx) => {
+                const [row] = await links.attach(tx, uploaderOf(viewer.actor, viewer.userId), { issueId: issue.id, commentId: null }, [id]);
+                await deps.activity.record(tx.conn, {
+                    issueId: issue.id,
+                    actor: viewer.actor,
+                    action: 'attachment_added',
+                    details: {
+                        attachmentIds: [id],
+                        filenames: [row?.filename ?? ''],
+                    },
+                });
+                tx.emit({ type: 'issue.changed', issueId: issue.id });
+                const attached = await findAttachment(tx.conn, id);
+                if (!attached)
+                    throw notFound('Attachment');
+                return view(tx.conn, attached, await mayRemove(tx.conn, viewer, issue, attached));
+            });
+        },
+        async list(viewer, issueIdOrKey, options = {}) {
+            const conn = deps.tx.read();
+            const issue = await requireVisible(conn, viewer, issueIdOrKey);
+            const own = await links.ofIssue(conn, viewer, issue);
+            if (!options.comments)
+                return own;
+            // A comment's files go with the comment: none of them is removed on its own.
+            return [
+                ...own,
+                ...(await views(conn, await liveCommentAttachments(conn, issue.id), () => false)),
+            ];
+        },
+        async get(viewer, id) {
+            const conn = deps.tx.read();
+            const { row, issue } = await readable(conn, viewer, id);
+            return view(conn, row, issue ? await mayRemove(conn, viewer, issue, row) : true);
+        },
+        async content(viewer, id) {
+            const conn = deps.tx.read();
+            const { row } = await readable(conn, viewer, id);
+            return {
+                attachment: await view(conn, row),
+                body: await deps.storage.stream(row),
+            };
+        },
+        async remove(viewer, id) {
+            const removed = await deps.tx.run(async (tx) => {
+                const { row, issue } = await readable(tx.conn, viewer, id);
+                if (!issue) {
+                    await deleteAttachment(tx.conn, row.id);
+                    return row;
+                }
+                if (row.commentId !== null)
+                    throw conflict('COMMENT_ATTACHMENT', "A comment's files go with the comment: delete the comment instead.");
+                if (!(await mayRemove(tx.conn, viewer, issue, row)))
+                    throw forbidden("Only its uploader, the issue's owner, the project lead or an administrator may remove this file.");
+                await deleteAttachment(tx.conn, row.id);
+                await deps.activity.record(tx.conn, {
+                    issueId: issue.id,
+                    actor: viewer.actor,
+                    action: 'attachment_removed',
+                    details: { attachmentId: row.id, filename: row.filename },
+                });
+                tx.emit({ type: 'issue.changed', issueId: issue.id });
+                return row;
+            });
+            await deps.storage.remove(removed);
+        },
+        async discard(viewer, ids) {
+            const uploader = uploaderOf(viewer.actor, viewer.userId);
+            const conn = deps.tx.read();
+            for (const row of await findAttachments(conn, ids)) {
+                if (row.issueId !== null || !sameUploader(row, uploader))
+                    continue;
+                if (await deleteIfUnattached(conn, row.id))
+                    await deps.storage.remove(row);
+            }
+        },
+        async purge(at = now()) {
+            const conn = deps.tx.read();
+            const cutoff = at.getTime() - ORPHAN_HOURS * 60 * 60 * 1000;
+            const keep = (await deps.keep?.(conn)) ?? new Set();
+            let purged = 0;
+            // The age is compared here rather than in the query: dialects store the timestamp differently.
+            for (const row of await unattached(conn, PURGE_BATCH)) {
+                if (new Date(row.createdAt).getTime() >= cutoff)
+                    break;
+                if (keep.has(row.id))
+                    continue;
+                // Attached meanwhile: the row survived, so its bytes stay.
+                if (!(await deleteIfUnattached(conn, row.id)))
+                    continue;
+                await deps.storage.remove(row);
+                purged += 1;
+            }
+            for (const row of await ofDeletedComments(conn, PURGE_BATCH)) {
+                await deleteAttachment(conn, row.id);
+                await deps.storage.remove(row);
+                purged += 1;
+            }
+            return purged;
+        },
+    };
+    return { service, links };
+}
+//# sourceMappingURL=attachment.service.js.map

package/dist/server/domains/attachments/attachment.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.service.js","sourceRoot":"","sources":["../../../../server/domains/attachments/attachment.service.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAe,MAAM,wBAAwB,CAAC;AAG7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGhF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,MAAM,EACN,SAAS,EACT,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,GAGX,MAAM,uBAAuB,CAAC;AAE/B,wCAAwC;AACxC,MAAM,WAAW,GAAG,GAAG,CAAC;AAuExB,yGAAyG;AACzG,MAAM,UAAU,UAAU,CAAC,KAAY,EAAE,MAAc;IACrD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,GAAqB,EAAE,QAAqB,EAAE,EAAE,CACpE,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;AAEvE,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,aAAa,CACX,MAAM,EACN,gBAAgB,EAChB,QAAQ,EACR,2BAA2B,CAC5B,CAAC;AACJ,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;QAE1E,MAAM,OAAO,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,GAAG,2BAA2B;QAC1C,MAAM,OAAO,CACX,eAAe,EACf,WAAW,2BAA2B,mBAAmB,CAC1D,CAAC;IACJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB;QACjC,MAAM,OAAO,CACX,gBAAgB,EAChB,2BAA2B,mBAAmB,SAAS,EACvD,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAClC,CAAC;AACN,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,KAAoB,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAEpE,MAAM,UAAU,uBAAuB,CAAC,IAAoB;IAI1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,SAAS,WAAW,CAAC,EAAU;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,GAAG,IAAI,6BAA6B,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC;IAC9E,CAAC;IAED,KAAK,UAAU,KAAK,CAClB,IAAwB,EACxB,IAAiC,EACjC,SAA6C;QAE7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CACnC,IAAI,EACJ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CACpE,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,CAAC,YAAY;gBACtB,EAAE,EAAE,GAAG,CAAC,UAAU;gBAClB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC;aAC7C;YACD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAC7B,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,WAAW,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB;YACnD,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC;YACvD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,UAAU,IAAI,CACjB,IAAwB,EACxB,GAAqB,EACrB,SAAS,GAAG,KAAK;QAEjB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yDAAyD;IACzD,KAAK,UAAU,SAAS,CACtB,IAAwB,EACxB,MAAc,EACd,KAAY,EACZ,GAAqB;QAErB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzC,IACE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1D,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,MAAM;YAE/C,OAAO,IAAI,CAAC;QACd,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAChE,CAAC;IAED,0GAA0G;IAC1G,KAAK,UAAU,QAAQ,CACrB,IAAwB,EACxB,MAAc,EACd,EAAU;QAKV,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7D,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC/B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,MAAc,EAAE,IAAU;QAC7C,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,KAAK,GAAoB;QAC7B,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;YACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;oBAC9D,MAAM,OAAO,CACX,oBAAoB,EACpB,QAAQ,EAAE,iDAAiD,EAC3D,EAAE,MAAM,EAAE,EAAE,EAAE,CACf,CAAC;gBACJ,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU;YAC/B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;YAClD,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;gBACvC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK;YAC/B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;YACpC,IAAI,MAAM;gBACR,KAAK,MAAM,GAAG,IAAI,IAAI;oBACpB,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC;wBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC;IAEF,MAAM,OAAO,GAAsB;QACjC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;YACvB,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI;YAC5C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YACzE,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,CAC9B,EAAE,EACF,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EACvC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EACtC,CAAC,EAAE,CAAC,CACL,CAAC;gBACF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;oBAClC,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,MAAM,EAAE,kBAAkB;oBAC1B,OAAO,EAAE;wBACP,aAAa,EAAE,CAAC,EAAE,CAAC;wBACnB,SAAS,EAAE,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;qBACjC;iBACF,CAAC,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,QAAQ;oBAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC5C,OAAO,IAAI,CACT,EAAE,CAAC,IAAI,EACP,QAAQ,EACR,MAAM,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAClD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,EAAE;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC;YAClC,6EAA6E;YAC7E,OAAO;gBACL,GAAG,GAAG;gBACN,GAAG,CAAC,MAAM,KAAK,CACb,IAAI,EACJ,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5C,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CACT,IAAI,EACJ,GAAG,EACH,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,OAAO;gBACL,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;gBACjC,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;aACrC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC7C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACxC,OAAO,GAAG,CAAC;gBACb,CAAC;gBACD,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;oBACxB,MAAM,QAAQ,CACZ,oBAAoB,EACpB,oEAAoE,CACrE,CAAC;gBACJ,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBACjD,MAAM,SAAS,CACb,kGAAkG,CACnG,CAAC;gBACJ,MAAM,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;oBAClC,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,MAAM,EAAE,oBAAoB;oBAC5B,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;iBAC1D,CAAC,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;YACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;oBAAE,SAAS;gBACnE,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC5D,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,+FAA+F;YAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBACtD,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM;oBAAE,MAAM;gBACvD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC/B,2DAA2D;gBAC3D,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,SAAS;gBACxD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC7D,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}