@prenta/core 7.7.1 → 7.7.2

package/dist/api/routes/users/handlers/users-detail.js

@@ -0,0 +1,525 @@
+import { createPasswordReset } from '../../../../auth/reset.js';
+import { getUserDetail, listUserSessions, listUserActivity, getUserPermissionView, transferContentOwnership, } from '../../../../auth/user-admin.js';
+import { isOwnerRole } from '../../../../auth/roles.js';
+import { logEvent } from '../../../../security/audit.js';
+import { getPrentaConfig } from '../../../../config/runtime.js';
+import { guardedDb } from '../../../guarded-db.js';
+import { json, errorResponse, internalError, hasModel, modelNotAvailable, requirePasswordReauth, requireAuth, ADMIN_ROLES, requireRole, revokeUserApiKeys, teamOptionsFor, isEmailConfiguredAsync, clientIp, } from '../../../route-helpers.js';
+import { transferContentBodySchema, validateBody } from '../../../validate-body.js';
+const db = guardedDb;
+// ---------------------------------------------------------------------------
+// User detail drawer routes (overview / security / sessions / activity /
+// permissions) + per-user security actions.
+// ---------------------------------------------------------------------------
+/**
+ * Load the target user for a security action and run the guards common to all
+ * of them. Returns either the user row or an error Response. `requireOwner`
+ * is set true for actions where acting on an Owner is owner-only; `blockSelf`
+ * for actions a user must not perform on their own account.
+ */
+async function loadActionTarget(auth, id, { blockSelf = false } = {}) {
+    const d = db();
+    if (!hasModel(d, 'user'))
+        return { error: modelNotAvailable('user') };
+    const user = await d.user.findUnique({ where: { id } });
+    if (!user)
+        return { error: errorResponse('User not found', 404) };
+    if (blockSelf && auth.session.userId === id) {
+        return { error: errorResponse('You cannot perform this action on your own account.', 400) };
+    }
+    // Acting on an Owner is Owner-only.
+    if (isOwnerRole(user.role) && auth.session.role !== 'OWNER') {
+        return { error: errorResponse('Only an Owner can manage another Owner.', 403) };
+    }
+    return { user };
+}
+/** Whether deactivating/suspending/locking `userId` would remove the last Owner. */
+async function wouldOrphanOwnership(user, userId) {
+    if (!isOwnerRole(user.role))
+        return false;
+    const otherOwners = await db().user.count({
+        where: { role: 'OWNER', isActive: true, id: { not: userId } },
+    });
+    return otherOwners === 0;
+}
+export async function getUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        const opts = teamOptionsFor(auth.session);
+        const detail = await getUserDetail(d, params.id, {
+            workspaceDomain: opts.workspaceDomain,
+            currentUserId: auth.session.userId,
+        });
+        if (!detail)
+            return errorResponse('User not found', 404);
+        return json({ data: detail });
+    }
+    catch (err) {
+        return internalError(err, 'user detail');
+    }
+}
+export async function getUserSessions(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'session'))
+            return modelNotAvailable('session');
+        // Mark "this device" only when an admin views their own sessions.
+        const currentSessionId = auth.session.userId === params.id ? auth.session.sessionId : undefined;
+        const sessions = await listUserSessions(d, params.id, currentSessionId);
+        return json({ data: sessions });
+    }
+    catch (err) {
+        return internalError(err, 'user sessions');
+    }
+}
+export async function deleteUserSession(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'session'))
+            return modelNotAvailable('session');
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const session = await d.session.findUnique({ where: { id: params.sessionId } });
+        if (!session || session.userId !== params.id) {
+            return errorResponse('Session not found', 404);
+        }
+        await d.session.update({
+            where: { id: params.sessionId },
+            data: { revokedAt: new Date() },
+        });
+        await logEvent({
+            event: 'session_revoked',
+            userId: auth.session.userId,
+            ipAddress: clientIp(request),
+            userAgent: request.headers.get('user-agent') ?? undefined,
+            details: { targetUserId: params.id, sessionId: params.sessionId },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'revoke session');
+    }
+}
+export async function revokeUserSessions(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'session'))
+            return modelNotAvailable('session');
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        // When an admin revokes their own sessions, keep the current one so the
+        // action doesn't log them out mid-flow (the UI offers a separate path for
+        // that). For any other user, revoke everything.
+        const keepCurrent = auth.session.userId === params.id;
+        await d.session.updateMany({
+            where: {
+                userId: params.id,
+                revokedAt: null,
+                ...(keepCurrent ? { id: { not: auth.session.sessionId } } : {}),
+            },
+            data: { revokedAt: new Date() },
+        });
+        await logEvent({
+            event: 'sessions_revoked_all',
+            userId: auth.session.userId,
+            ipAddress: clientIp(request),
+            userAgent: request.headers.get('user-agent') ?? undefined,
+            details: { targetUserId: params.id, keptCurrent: keepCurrent },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'revoke all sessions');
+    }
+}
+export async function getUserActivity(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'auditLog'))
+            return json({ data: [] });
+        const url = new URL(request.url);
+        const limit = Number(url.searchParams.get('limit') ?? '50');
+        const events = await listUserActivity(d, params.id, Number.isFinite(limit) ? limit : 50);
+        return json({ data: events });
+    }
+    catch (err) {
+        return internalError(err, 'user activity');
+    }
+}
+export async function getUserPermissions(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        const user = await d.user.findUnique({
+            where: { id: params.id },
+            select: { role: true },
+        });
+        if (!user)
+            return errorResponse('User not found', 404);
+        return json({ data: getUserPermissionView(user.role) });
+    }
+    catch (err) {
+        return internalError(err, 'user permissions');
+    }
+}
+// Send a password reset email to the user. Admins never set or see passwords;
+// this triggers the standard single-use, expiring, hashed-token reset flow.
+export async function postUserPasswordReset(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const user = target.user;
+        // SSO/OAuth-only accounts have no local password to reset.
+        if (!user.passwordHash) {
+            return errorResponse('This account signs in with an external identity provider and has no password to reset.', 409);
+        }
+        // Resetting an Admin/Owner password is high-impact — require reauth.
+        if (isOwnerRole(user.role) || String(user.role).toUpperCase() === 'ADMIN') {
+            const reauthErr = await requirePasswordReauth(request, auth.session.userId);
+            if (reauthErr)
+                return reauthErr;
+        }
+        if (!(await isEmailConfiguredAsync(db()))) {
+            return errorResponse('Email is not configured, so a reset link cannot be sent. Configure an email provider first.', 409);
+        }
+        const cmsConfig = getPrentaConfig();
+        const siteUrl = process.env.NEXT_PUBLIC_SITE_URL ?? new URL(request.url).origin;
+        await createPasswordReset(db(), user.email, {
+            siteUrl,
+            // Split-login installs serve the reset screen on the login mount.
+            adminPath: cmsConfig?.admin?.loginPath ?? cmsConfig?.admin?.path ?? '/admin',
+            platform: cmsConfig?.platform,
+        });
+        await logEvent({
+            event: 'password_reset_sent',
+            userId: auth.session.userId,
+            ipAddress: clientIp(request),
+            userAgent: request.headers.get('user-agent') ?? undefined,
+            details: { targetUserId: user.id, targetEmail: user.email },
+        });
+        return json({ data: { success: true, emailed: true } });
+    }
+    catch (err) {
+        return internalError(err, 'admin password reset');
+    }
+}
+// Toggle "must reset password on next login". Body: { enabled: boolean }.
+export async function postUserForcePasswordReset(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const body = (await request.json().catch(() => ({})));
+        const enabled = body.enabled !== false;
+        await db().user.update({
+            where: { id: params.id },
+            data: { forcePasswordReset: enabled },
+        });
+        await logEvent({
+            event: enabled ? 'force_password_reset_enabled' : 'force_password_reset_cleared',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id },
+        });
+        return json({ data: { success: true, forcePasswordReset: enabled } });
+    }
+    catch (err) {
+        return internalError(err, 'force password reset');
+    }
+}
+// Reset MFA enrollment: clears the TOTP secret + backup codes and revokes the
+// user's sessions. High-impact — requires reauth and protects the last Owner.
+export async function postUserMfaReset(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const user = target.user;
+        const reauthErr = await requirePasswordReauth(request, auth.session.userId);
+        if (reauthErr)
+            return reauthErr;
+        // Don't strip the last Owner's MFA — that would leave the most privileged
+        // account with the weakest protection and no recovery-safe path.
+        if (isOwnerRole(user.role) && (await wouldOrphanOwnership(user, user.id))) {
+            return errorResponse('Cannot reset MFA for the last Owner. Add another Owner first.', 409);
+        }
+        const d = db();
+        await d.user.update({
+            where: { id: user.id },
+            data: { totpEnabled: false, totpSecret: null, backupCodes: null },
+        });
+        if (hasModel(d, 'session')) {
+            await d.session.updateMany({
+                where: { userId: user.id, revokedAt: null },
+                data: { revokedAt: new Date() },
+            });
+        }
+        await logEvent({
+            event: 'mfa_reset',
+            userId: auth.session.userId,
+            ipAddress: clientIp(request),
+            userAgent: request.headers.get('user-agent') ?? undefined,
+            details: { targetUserId: user.id, targetEmail: user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'mfa reset');
+    }
+}
+// Require the user to enrol MFA before next access. Body: { required: boolean }.
+export async function postUserRequireMfa(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const body = (await request.json().catch(() => ({})));
+        const required = body.required !== false;
+        await db().user.update({
+            where: { id: params.id },
+            data: { mfaRequired: required },
+        });
+        await logEvent({
+            event: required ? 'mfa_required' : 'mfa_requirement_cleared',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id },
+        });
+        return json({ data: { success: true, mfaRequired: required } });
+    }
+    catch (err) {
+        return internalError(err, 'require mfa');
+    }
+}
+export async function suspendUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id, { blockSelf: true });
+        if (target.error)
+            return target.error;
+        if (await wouldOrphanOwnership(target.user, params.id)) {
+            return errorResponse('Cannot suspend the last Owner.', 409);
+        }
+        const d = db();
+        await d.user.update({ where: { id: params.id }, data: { suspendedAt: new Date() } });
+        if (hasModel(d, 'session')) {
+            await d.session.updateMany({
+                where: { userId: params.id, revokedAt: null },
+                data: { revokedAt: new Date() },
+            });
+        }
+        await revokeUserApiKeys(d, params.id);
+        await logEvent({
+            event: 'user_suspended',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id, targetEmail: target.user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'suspend user');
+    }
+}
+export async function reactivateUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        // Reactivate restores access from any non-active lifecycle state.
+        await db().user.update({
+            where: { id: params.id },
+            data: { suspendedAt: null, lockedAt: null, isActive: true, failedLoginCount: 0 },
+        });
+        await logEvent({
+            event: 'user_reactivated',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id, targetEmail: target.user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'reactivate user');
+    }
+}
+export async function lockUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id, { blockSelf: true });
+        if (target.error)
+            return target.error;
+        if (await wouldOrphanOwnership(target.user, params.id)) {
+            return errorResponse('Cannot lock the last Owner.', 409);
+        }
+        const d = db();
+        await d.user.update({ where: { id: params.id }, data: { lockedAt: new Date() } });
+        if (hasModel(d, 'session')) {
+            await d.session.updateMany({
+                where: { userId: params.id, revokedAt: null },
+                data: { revokedAt: new Date() },
+            });
+        }
+        await revokeUserApiKeys(d, params.id);
+        await logEvent({
+            event: 'user_locked',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id, targetEmail: target.user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'lock user');
+    }
+}
+export async function unlockUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        await db().user.update({
+            where: { id: params.id },
+            data: { lockedAt: null, failedLoginCount: 0 },
+        });
+        await logEvent({
+            event: 'user_unlocked',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id, targetEmail: target.user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err, 'unlock user');
+    }
+}
+// Reassign all content owned by :id to another active user. Used before
+// removing someone so their documents/media/templates survive with a real
+// owner. Body: { toUserId }.
+export async function transferUserContent(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const target = await loadActionTarget(auth, params.id);
+        if (target.error)
+            return target.error;
+        const parsed = await validateBody(request, transferContentBodySchema);
+        if (!parsed.ok)
+            return parsed.error;
+        const { toUserId } = parsed.data;
+        if (toUserId === params.id) {
+            return errorResponse('Choose a different user to receive the content.', 400);
+        }
+        const recipient = await db().user.findUnique({ where: { id: toUserId } });
+        if (!recipient)
+            return errorResponse('Recipient not found.', 404);
+        if (recipient.isActive === false || recipient.suspendedAt || recipient.lockedAt) {
+            return errorResponse('Content can only be transferred to an active user.', 409);
+        }
+        const counts = await transferContentOwnership(db(), params.id, toUserId);
+        await logEvent({
+            event: 'content_ownership_transferred',
+            userId: auth.session.userId,
+            details: {
+                fromUserId: params.id,
+                toUserId,
+                documents: counts.documents,
+                media: counts.media,
+                templates: counts.templates,
+                total: counts.total,
+            },
+        });
+        return json({ data: { success: true, ...counts } });
+    }
+    catch (err) {
+        return internalError(err, 'transfer content ownership');
+    }
+}
+//# sourceMappingURL=users-detail.js.map

package/dist/api/routes/users/handlers/users-detail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-detail.js","sourceRoot":"","sources":["../../../../../src/api/routes/users/handlers/users-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EACL,IAAI,EACJ,aAAa,EACb,aAAa,EACb,QAAQ,EACR,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,QAAQ,GAET,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAEnF,MAAM,EAAE,GAAG,SAAS,CAAA;AAEpB,8EAA8E;AAC9E,yEAAyE;AACzE,4CAA4C;AAC5C,8EAA8E;AAC9E;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAA8B,EAC9B,EAAU,EACV,EAAE,SAAS,GAAG,KAAK,KAA8B,EAAE;IAEnD,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;IACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAA;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAA;IACjE,IAAI,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,qDAAqD,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7F,CAAC;IACD,oCAAoC;IACpC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,yCAAyC,EAAE,GAAG,CAAC,EAAE,CAAA;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,oBAAoB,CAAC,IAAS,EAAE,MAAc;IAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,WAAW,GAAG,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;KAC9D,CAAC,CAAA;IACF,OAAO,WAAW,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAgB,EAAE,MAA8B;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE1D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,EAAG,EAAE;YAChD,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QACxD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAEhE,kEAAkE;QAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAG,EAAE,gBAAgB,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAEhE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,aAAa,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAU,EAAE;YAChC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YACzD,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;SAClE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAEhE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,wEAAwE;QACxE,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAA;QACrD,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YACzB,KAAK,EAAE;gBACL,MAAM,EAAE,MAAM,CAAC,EAAG;gBAClB,SAAS,EAAE,IAAI;gBACf,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE;YACD,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YACzD,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE;SAC/D,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;IAClD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACzF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACvB,CAAC,CAAA;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QACtD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QAExB,2DAA2D;QAC3D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,aAAa,CAClB,wFAAwF,EACxF,GAAG,CACJ,CAAA;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1E,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC3E,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;QACjC,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,aAAa,CAClB,6FAA6F,EAC7F,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAC/E,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE;YAC1C,OAAO;YACP,kEAAkE;YAClE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ;YAC5E,QAAQ,EAAE,SAAS,EAAE,QAAe;SACrC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YACzD,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE;SAC5D,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA0B,CAAA;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAA;QACtC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,IAAI,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE;SACtC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,8BAA8B;YAChF,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE;SACrC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QAExB,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC3E,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;QAE/B,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,aAAa,CAAC,+DAA+D,EAAE,GAAG,CAAC,CAAA;QAC5F,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAClB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACtB,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SAClE,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;aAChC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YACzD,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE;SAC5D,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2B,CAAA;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAA;QACxC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;SAChC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,yBAAyB;YAC5D,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE;SACrC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACrC,IAAI,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;YACxD,OAAO,aAAa,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QACrF,IAAI,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAG,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC9C,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;aAChC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACtC,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,kEAAkE;QAClE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE;SACjF,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACrC,IAAI,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;YACxD,OAAO,aAAa,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAClF,IAAI,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAG,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC9C,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;aAChC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACtC,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE;SAC9C,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAErC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAA;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAChC,IAAI,QAAQ,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAA;QAC9E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS;YAAE,OAAO,aAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAA;QACjE,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YAChF,OAAO,aAAa,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAA;QACjF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,QAAQ,CAAC,CAAA;QACzE,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,+BAA+B;YACtC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE;gBACP,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,QAAQ;gBACR,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;SACF,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAA;IACzD,CAAC;AACH,CAAC"}

package/dist/api/routes/users.d.ts

@@ -1,3 +1,7 @@
 import type { ApiRouter } from '../router.js';
+/**
+ * User, invite, and API-key routes. Handlers live under `./users/handlers`.
+ * Request behavior is unchanged.
+ */
 export declare function registerUserRoutes(router: ApiRouter): void;
 //# sourceMappingURL=users.d.ts.map

package/dist/api/routes/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/api/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAuD7C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2rC1D"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../../src/api/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAoC7C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA+B1D"}