@rakun-kit/core 1.4.10 → 1.5.0

package/dist/cjs/api/routes/manager/auth/passwordRecovery.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetPasswordHandler = exports.requestPasswordResetHandler = void 0;
+const crypto_1 = require("crypto");
+const internal_content_types_1 = require("../../../../internal-content-types");
+const bootstrapState_1 = require("../../../../bootstrapState");
+const Logger_1 = require("../../../../lib/Logger");
+const errors_1 = require("../../../../lib/errors");
+const mail_1 = require("../../../../mail");
+const orm_1 = require("../../../../orm");
+const authRateLimit_1 = require("../../../utils/authRateLimit");
+const accountRecovery_1 = require("../../../../auth/accountRecovery");
+const passwordResetMailTemplate_1 = require("../../../../auth/passwordResetMailTemplate");
+const authEvents_1 = require("../../../utils/authEvents");
+const hashToken = (token) => (0, crypto_1.createHash)('sha256').update(token).digest('hex');
+const requirePasswordResetConfig = () => {
+    const config = (0, bootstrapState_1.getRakunBootstrapOptions)()?.accountRecovery?.passwordReset;
+    if (!config || !(0, mail_1.hasMailService)()) {
+        (0, errors_1.throwAppError)('FEATURE_UNSUPPORTED', {
+            feature: 'accountRecovery',
+            message: 'Account recovery requires mail and accountRecovery.passwordReset configuration',
+        });
+    }
+    return config;
+};
+const requestPasswordResetHandler = async ({ input, ctx, }) => {
+    const config = requirePasswordResetConfig();
+    const db = await (0, orm_1.getMongoService)();
+    const email = input.email.trim().toLowerCase();
+    (0, authRateLimit_1.assertAuthRateLimit)({
+        key: `password-reset:request:${(0, authRateLimit_1.getRequestRateLimitIdentifier)(ctx)}:${email}`,
+        limit: 5,
+        windowMs: 60 * 60 * 1000,
+    });
+    const user = await db.find(internal_content_types_1.ManagerUser, { email });
+    if (!user)
+        return { ok: true };
+    await db.updateMany(internal_content_types_1.PasswordResetToken, {
+        'user._id': user._id,
+        consumedAt: null,
+    }, { consumedAt: new Date() }, { reason: 'password reset token superseded' });
+    const token = (0, crypto_1.randomBytes)(32).toString('base64url');
+    const expiresAt = new Date(Date.now() +
+        (config.expiresInMs ?? accountRecovery_1.PASSWORD_RESET_DEFAULT_EXPIRES_IN_MS));
+    await db.create(internal_content_types_1.PasswordResetToken, {
+        tokenHash: hashToken(token),
+        user: {
+            _id: user._id,
+            contentType: internal_content_types_1.ManagerUser.name,
+            type: 'existing',
+        },
+        expiresAt,
+        _type: 'PasswordResetToken',
+    }, { reason: 'password reset requested' });
+    await (0, authEvents_1.recordAuthEvent)({
+        type: 'auth.password-reset.requested',
+        outcome: 'success',
+        ctx,
+        actor: { type: 'anonymous' },
+        resource: { type: 'ManagerUser', id: String(user._id) },
+        tags: ['password-reset'],
+        data: { expiresAt: expiresAt.toISOString() },
+    });
+    try {
+        const props = {
+            expiresAt,
+            resetUrl: config.createUrl(token),
+            user: {
+                email: user.email,
+                ...(user.name ? { name: user.name } : {}),
+            },
+        };
+        const template = config.template ?? passwordResetMailTemplate_1.passwordResetMailTemplate;
+        const subject = typeof template.subject === 'function'
+            ? await template.subject(props)
+            : template.subject;
+        const content = await template.render(props);
+        await (0, mail_1.getMailService)().send({
+            to: user.email,
+            subject,
+            ...content,
+            event: {
+                template: 'password-reset',
+                source: '@rakun-kit/core/account-recovery',
+                tags: ['auth', 'account-recovery'],
+            },
+        });
+    }
+    catch (error) {
+        Logger_1.Logger?.error?.('Password reset mail could not be sent', {
+            errorName: error instanceof Error ? error.name : 'UnknownError',
+        });
+    }
+    return { ok: true };
+};
+exports.requestPasswordResetHandler = requestPasswordResetHandler;
+const resetPasswordHandler = async ({ input, ctx, }) => {
+    requirePasswordResetConfig();
+    const db = await (0, orm_1.getMongoService)();
+    const tokenHash = hashToken(input.token);
+    (0, authRateLimit_1.assertAuthRateLimit)({
+        key: `password-reset:consume:${(0, authRateLimit_1.getRequestRateLimitIdentifier)(ctx)}:${tokenHash}`,
+        limit: 8,
+        windowMs: 15 * 60 * 1000,
+    });
+    const record = await db.find(internal_content_types_1.PasswordResetToken, { tokenHash });
+    if (!record ||
+        record.consumedAt ||
+        new Date(record.expiresAt).getTime() <= Date.now()) {
+        (0, errors_1.throwAppError)('CONFLICT', {
+            key: 'INVALID_PASSWORD_RESET_TOKEN',
+            message: 'Password reset token is invalid or expired',
+        });
+    }
+    const claimed = await db.updateMany(internal_content_types_1.PasswordResetToken, {
+        tokenHash,
+        consumedAt: null,
+    }, { consumedAt: new Date() }, { reason: 'password reset token consumed' });
+    if (claimed.updatedCount !== 1) {
+        (0, errors_1.throwAppError)('CONFLICT', {
+            key: 'INVALID_PASSWORD_RESET_TOKEN',
+            message: 'Password reset token is invalid or expired',
+        });
+    }
+    const userId = record.user._id;
+    await db.update(internal_content_types_1.ManagerUser, userId, { password: input.password }, { reason: 'password reset' });
+    await db.delete(internal_content_types_1.Session, { 'user._id': userId }, { reason: 'password reset invalidated sessions' });
+    await db.updateMany(internal_content_types_1.PasswordResetToken, {
+        'user._id': userId,
+        consumedAt: null,
+    }, { consumedAt: new Date() }, { reason: 'password reset completed' });
+    await (0, authEvents_1.recordAuthEvent)({
+        type: 'auth.password-reset.completed',
+        outcome: 'success',
+        ctx,
+        actor: { type: 'anonymous' },
+        resource: { type: 'ManagerUser', id: String(userId) },
+        tags: ['password-reset'],
+        data: {
+            sessionsInvalidated: true,
+            mfaPreserved: true,
+        },
+    });
+    return { ok: true };
+};
+exports.resetPasswordHandler = resetPasswordHandler;
+//# sourceMappingURL=passwordRecovery.js.map

package/dist/cjs/api/routes/manager/auth/passwordRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordRecovery.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/passwordRecovery.ts"],"names":[],"mappings":";;;AAAA,mCAAgD;AAEhD,+EAI2C;AAC3C,+DAAqE;AACrE,mDAA+C;AAC/C,mDAAsD;AACtD,2CAAiE;AACjE,yCAAiD;AAMjD,gEAGqC;AACrC,sEAAuF;AACvF,0FAAsF;AACtF,0DAA2D;AAE3D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAElD,MAAM,0BAA0B,GAAG,GAAG,EAAE;IACtC,MAAM,MAAM,GAAG,IAAA,yCAAwB,GAAE,EAAE,eAAe,EAAE,aAAa,CAAA;IAEzE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,qBAAc,GAAE,EAAE,CAAC;QACjC,IAAA,sBAAa,EAAC,qBAAqB,EAAE;YACnC,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EACL,gFAAgF;SACnF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAEM,MAAM,2BAA2B,GAAG,KAAK,EAAE,EAChD,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAA;IAC3C,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAA;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE9C,IAAA,mCAAmB,EAAC;QAClB,GAAG,EAAE,0BAA0B,IAAA,6CAA6B,EAAC,GAAG,CAAC,IAAI,KAAK,EAAE;QAC5E,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAA;IAEvC,MAAM,EAAE,CAAC,UAAU,CACjB,2CAAkB,EAClB;QACE,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,UAAU,EAAE,IAAI;KACR,EACV,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,EAC1B,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAC9C,CAAA;IAED,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE;QACR,CAAC,MAAM,CAAC,WAAW,IAAI,sDAAoC,CAAC,CAC/D,CAAA;IAED,MAAM,EAAE,CAAC,MAAM,CACb,2CAAkB,EAClB;QACE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;QAC3B,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,oBAAoB;KAC5B,EACD,EAAE,MAAM,EAAE,0BAA0B,EAAE,CACvC,CAAA;IAED,MAAM,IAAA,4BAAe,EAAC;QACpB,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,SAAS;QAClB,GAAG;QACH,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACvD,IAAI,EAAE,CAAC,gBAAgB,CAAC;QACxB,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE;KAC7C,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG;YACZ,SAAS;YACT,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACjC,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C;SACF,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,qDAAyB,CAAA;QAC7D,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU;YACpC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAA;QACtB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE5C,MAAM,IAAA,qBAAc,GAAE,CAAC,IAAI,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,OAAO;YACP,GAAG,OAAO;YACV,KAAK,EAAE;gBACL,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,kCAAkC;gBAC1C,IAAI,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;aACnC;SACF,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,EAAE,KAAK,EAAE,CAAC,uCAAuC,EAAE;YACvD,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;SAChE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAA;AAC9B,CAAC,CAAA;AA9FY,QAAA,2BAA2B,+BA8FvC;AAEM,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,0BAA0B,EAAE,CAAA;IAC5B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAA;IAClC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAExC,IAAA,mCAAmB,EAAC;QAClB,GAAG,EAAE,0BAA0B,IAAA,6CAA6B,EAAC,GAAG,CAAC,IAAI,SAAS,EAAE;QAChF,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,2CAAkB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/D,IACE,CAAC,MAAM;QACP,MAAM,CAAC,UAAU;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAClD,CAAC;QACD,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,GAAG,EAAE,8BAA8B;YACnC,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,CACjC,2CAAkB,EAClB;QACE,SAAS;QACT,UAAU,EAAE,IAAI;KACR,EACV,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,EAC1B,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAC5C,CAAA;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,GAAG,EAAE,8BAA8B;YACnC,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAA;IAC9B,MAAM,EAAE,CAAC,MAAM,CACb,oCAAW,EACX,MAAM,EACN,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC5B,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC7B,CAAA;IACD,MAAM,EAAE,CAAC,MAAM,CACb,gCAAO,EACP,EAAE,UAAU,EAAE,MAAM,EAAE,EACtB,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAClD,CAAA;IACD,MAAM,EAAE,CAAC,UAAU,CACjB,2CAAkB,EAClB;QACE,UAAU,EAAE,MAAM;QAClB,UAAU,EAAE,IAAI;KACR,EACV,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,EAC1B,EAAE,MAAM,EAAE,0BAA0B,EAAE,CACvC,CAAA;IAED,MAAM,IAAA,4BAAe,EAAC;QACpB,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,SAAS;QAClB,GAAG;QACH,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACrD,IAAI,EAAE,CAAC,gBAAgB,CAAC;QACxB,IAAI,EAAE;YACJ,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,IAAI;SACnB;KACF,CAAC,CAAA;IAEF,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAA;AAC9B,CAAC,CAAA;AAlFY,QAAA,oBAAoB,wBAkFhC"}

package/dist/cjs/api/routes/manager/auth/totp/confirmTotp.js

@@ -37,6 +37,8 @@ exports.confirmTotpHandler = void 0;
 const internal_content_types_1 = require("../../../../../internal-content-types");
 const orm_1 = require("../../../../../orm");
 const OTPAuth = __importStar(require("otpauth"));
+const recoveryCodes_1 = require("../../../../utils/recoveryCodes");
+const authEvents_1 = require("../../../../utils/authEvents");
 const confirmTotpHandler = async ({ input, ctx, }) => {
     const db = await (0, orm_1.getMongoService)();
     const user = ctx.getUser();
@@ -57,17 +59,32 @@ const confirmTotpHandler = async ({ input, ctx, }) => {
     if (delta === null) {
         throw new Error("INVALID_TOTP_CODE");
     }
+    const recovery = (0, recoveryCodes_1.generateRecoveryCodes)();
     await db.update(internal_content_types_1.UserMfa, mfa._id, {
         enabled: true,
         preferredMethod: "totp",
         totpSecret: mfa.totpSecretPending,
         totpSecretPending: null,
         totpVerifiedAt: new Date(),
-    });
+        recoveryCodeHashes: recovery.hashes,
+        recoveryCodesGeneratedAt: new Date(),
+    }, { reason: 'mfa totp enabled' });
     await db.update(internal_content_types_1.ManagerUser, user._id, {
         twoFactorEnabled: true,
+    }, { reason: 'mfa-state-sync' });
+    await (0, authEvents_1.recordAuthEvent)({
+        type: 'auth.mfa.enabled',
+        outcome: 'success',
+        ctx,
+        actor: { type: 'manager-user', id: String(user._id) },
+        resource: { type: 'ManagerUser', id: String(user._id) },
+        tags: ['mfa', 'totp'],
+        data: {
+            method: 'totp',
+            recoveryCodeCount: recovery.codes.length,
+        },
     });
-    return { ok: true };
+    return { ok: true, recoveryCodes: recovery.codes };
 };
 exports.confirmTotpHandler = confirmTotpHandler;
 //# sourceMappingURL=confirmTotp.js.map

package/dist/cjs/api/routes/manager/auth/totp/confirmTotp.js.map

@@ -1 +1 @@
-{"version":3,"file":"confirmTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/confirmTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kFAA6E;AAC7E,4CAAqD;AAGrD,iDAAmC;AAE5B,MAAM,kBAAkB,GAAG,KAAK,EAAE,EACvC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACzD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,MAAM;QACvB,UAAU,EAAE,GAAG,CAAC,iBAAiB;QACjC,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI,IAAI,EAAE;KAC3B,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AA3CW,QAAA,kBAAkB,sBA2C7B"}
+{"version":3,"file":"confirmTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/confirmTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kFAA6E;AAC7E,4CAAqD;AAGrD,iDAAmC;AACnC,mEAAuE;AACvE,6DAA8D;AAEvD,MAAM,kBAAkB,GAAG,KAAK,EAAE,EACvC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACzD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,qCAAqB,GAAE,CAAA;IAExC,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,MAAM;QACvB,UAAU,EAAE,GAAG,CAAC,iBAAiB;QACjC,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI,IAAI,EAAE;QAC1B,kBAAkB,EAAE,QAAQ,CAAC,MAAM;QACnC,wBAAwB,EAAE,IAAI,IAAI,EAAE;KACrC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAEnC,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEjC,MAAM,IAAA,4BAAe,EAAC;QACpB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,SAAS;QAClB,GAAG;QACH,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrD,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACvD,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM;YACd,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;SACzC;KACF,CAAC,CAAA;IAEF,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC,CAAC;AA5DW,QAAA,kBAAkB,sBA4D7B"}

package/dist/cjs/api/routes/manager/auth/totp/enrollTotp.js

@@ -62,7 +62,7 @@ const enrollTotpHandler = async ({ ctx, }) => {
             enabled: false,
             preferredMethod: "totp",
             _type: "UserMfa",
-        });
+        }, { reason: 'mfa enrollment started' });
     const bytes = (0, crypto_1.randomBytes)(20);
     const secret = new OTPAuth.Secret({
         buffer: bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength),
@@ -83,7 +83,7 @@ const enrollTotpHandler = async ({ ctx, }) => {
     });
     await db.update(internal_content_types_1.UserMfa, mfa._id, {
         totpSecretPending: secret.base32,
-    });
+    }, { reason: 'mfa totp enrollment refreshed' });
     return {
         otpauthURL,
         qrDataURL,

package/dist/cjs/api/routes/manager/auth/totp/enrollTotp.js.map

@@ -1 +1 @@
-{"version":3,"file":"enrollTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/enrollTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAqC;AAErC,iDAAmC;AACnC,oDAA4B;AAC5B,kFAA6E;AAC7E,sDAA0D;AAC1D,4CAAqD;AAG9C,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,GAAG,GAGJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAG;QACN,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;YAC7B,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,oCAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,MAAM;YACvB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CACxB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CACpC;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,gBAAM,CAAC,SAAS,CAAC,UAAU,EAAE;QACnD,oBAAoB,EAAE,GAAG;QACzB,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;QAChC,iBAAiB,EAAE,MAAM,CAAC,MAAM;KACjC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AA5DW,QAAA,iBAAiB,qBA4D5B"}
+{"version":3,"file":"enrollTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/enrollTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAqC;AAErC,iDAAmC;AACnC,oDAA4B;AAC5B,kFAA6E;AAC7E,sDAA0D;AAC1D,4CAAqD;AAG9C,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,GAAG,GAGJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAG;QACN,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;YAC7B,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,oCAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,MAAM;YACvB,KAAK,EAAE,SAAS;SACjB,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CACxB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CACpC;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,gBAAM,CAAC,SAAS,CAAC,UAAU,EAAE;QACnD,oBAAoB,EAAE,GAAG;QACzB,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;QAChC,iBAAiB,EAAE,MAAM,CAAC,MAAM;KACjC,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAEhD,OAAO;QACL,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AA5DW,QAAA,iBAAiB,qBA4D5B"}

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js

@@ -6,6 +6,8 @@ const share_1 = require("./share");
 const internal_content_types_1 = require("../../../../../internal-content-types");
 const errors_1 = require("../../../../../lib/errors");
 const orm_1 = require("../../../../../orm");
+const recoveryCodes_1 = require("../../../../utils/recoveryCodes");
+const authEvents_1 = require("../../../../utils/authEvents");
 const toBase64URL = (buf) => buf.toString("base64url");
 const webauthnRegisterVerifyHandler = async ({ ctx, input, }) => {
     const db = await (0, orm_1.getMongoService)();
@@ -56,25 +58,52 @@ const webauthnRegisterVerifyHandler = async ({ ctx, input, }) => {
     });
     await db.update(internal_content_types_1.WebAuthnRegChallenge, reg._id, { consumedAt: new Date() });
     let mfa = await db.find(internal_content_types_1.UserMfa, { "user._id": user._id });
+    const wasMfaEnabled = Boolean(mfa?.enabled);
+    const recovery = mfa?.recoveryCodeHashes?.length ? null : (0, recoveryCodes_1.generateRecoveryCodes)();
     if (!mfa) {
         mfa = await db.create(internal_content_types_1.UserMfa, {
             user: { _id: user._id, contentType: internal_content_types_1.ManagerUser.name, type: "existing" },
             enabled: true,
             preferredMethod: "webauthn",
+            recoveryCodeHashes: recovery?.hashes ?? [],
+            recoveryCodesGeneratedAt: new Date(),
             _type: "UserMfa",
-        });
+        }, { reason: 'mfa webauthn enabled' });
     }
     else {
         await db.update(internal_content_types_1.UserMfa, mfa._id, {
             enabled: true,
             preferredMethod: "webauthn",
             totpSecretPending: null,
-        });
+            ...(recovery
+                ? {
+                    recoveryCodeHashes: recovery.hashes,
+                    recoveryCodesGeneratedAt: new Date(),
+                }
+                : {}),
+        }, { reason: 'mfa webauthn enabled' });
     }
     await db.update(internal_content_types_1.ManagerUser, user._id, {
         twoFactorEnabled: true,
+    }, { reason: 'mfa-state-sync' });
+    await (0, authEvents_1.recordAuthEvent)({
+        type: wasMfaEnabled
+            ? 'auth.mfa.method-registered'
+            : 'auth.mfa.enabled',
+        outcome: 'success',
+        ctx,
+        actor: { type: 'manager-user', id: String(user._id) },
+        resource: { type: 'ManagerUser', id: String(user._id) },
+        tags: ['mfa', 'webauthn'],
+        data: {
+            method: 'webauthn',
+            recoveryCodesGenerated: Boolean(recovery),
+        },
     });
-    return { ok: true };
+    return {
+        ok: true,
+        recoveryCodes: recovery?.codes ?? [],
+    };
 };
 exports.webauthnRegisterVerifyHandler = webauthnRegisterVerifyHandler;
 //# sourceMappingURL=webauthnRegisterVerify.js.map

package/dist/cjs/api/routes/manager/auth/webauthn/webauthnRegisterVerify.js.map

@@ -1 +1 @@
-{"version":3,"file":"webauthnRegisterVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterVerify.ts"],"names":[],"mappings":";;;AAAA,mDAGgC;AAEhC,mCAA+C;AAC/C,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAGrD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAExD,MAAM,6BAA6B,GAAG,KAAK,EAAE,EAClD,GAAG,EACH,KAAK,GAQN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,6CAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1D,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,uCAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,UAAU;QAChB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IAEL,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,mCAA0B,EAAC;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,GAAG,CAAC,SAAS;QAChC,cAAc,EAAE,cAAM;QACtB,YAAY,EAAE,aAAK;QACnB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC7D,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC;IAE5E,MAAM,EAAE,CAAC,MAAM,CAAC,2CAAkB,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,GAAG,OAAO;QACrD,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,2DAA2D;QAC3D,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,SAAS,EAAE,IAAA,aAAK,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,6CAAoB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3E,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;YAC7B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;YACxE,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AAzFW,QAAA,6BAA6B,iCAyFxC"}
+{"version":3,"file":"webauthnRegisterVerify.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/webauthn/webauthnRegisterVerify.ts"],"names":[],"mappings":";;;AAAA,mDAGgC;AAEhC,mCAA+C;AAC/C,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAErD,mEAAuE;AACvE,6DAA8D;AAE9D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAExD,MAAM,6BAA6B,GAAG,KAAK,EAAE,EAClD,GAAG,EACH,KAAK,GAQN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,6CAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1D,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,uCAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,UAAU;QAChB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IAEL,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,mCAA0B,EAAC;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,GAAG,CAAC,SAAS;QAChC,cAAc,EAAE,cAAM;QACtB,YAAY,EAAE,aAAK;QACnB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC7D,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC;IAE5E,MAAM,EAAE,CAAC,MAAM,CAAC,2CAAkB,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK,GAAG,OAAO;QACrD,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxE,2DAA2D;QAC3D,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,SAAS,EAAE,IAAA,aAAK,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,MAAM,CAAC,6CAAoB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3E,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAC3C,MAAM,QAAQ,GACZ,GAAG,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,qCAAqB,GAAE,CAAA;IAClE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;YAC7B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,oCAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;YACxE,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,EAAE;YAC1C,wBAAwB,EAAE,IAAI,IAAI,EAAE;YACpC,KAAK,EAAE,SAAS;SACjB,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE,GAAG,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,UAAU;YAC3B,iBAAiB,EAAE,IAAI;YACvB,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC;oBACE,kBAAkB,EAAE,QAAQ,CAAC,MAAM;oBACnC,wBAAwB,EAAE,IAAI,IAAI,EAAE;iBACrC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,gBAAgB,EAAE,IAAI;KACvB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEjC,MAAM,IAAA,4BAAe,EAAC;QACpB,IAAI,EAAE,aAAa;YACjB,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,kBAAkB;QACtB,OAAO,EAAE,SAAS;QAClB,GAAG;QACH,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrD,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACvD,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;QACzB,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;YAClB,sBAAsB,EAAE,OAAO,CAAC,QAAQ,CAAC;SAC1C;KACF,CAAC,CAAA;IAEF,OAAO;QACL,EAAE,EAAE,IAAa;QACjB,aAAa,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC,CAAC;AAtHW,QAAA,6BAA6B,iCAsHxC"}

package/dist/cjs/api/routes/manager/comments.js

@@ -1,24 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toggleCommentReactionHandler = exports.createCommentHandler = exports.listCommentsHandler = void 0;
+exports.unreadCommentsCountHandler = exports.markCommentsReadHandler = exports.toggleCommentReactionHandler = exports.createCommentHandler = exports.listCommentsHandler = void 0;
 const internal_content_types_1 = require("../../../internal-content-types");
 const errors_1 = require("../../../lib/errors");
 const orm_1 = require("../../../orm");
 const checkOwnership_1 = require("../../utils/checkOwnership");
 const requireContentType_1 = require("../../utils/requireContentType");
 const users_1 = require("./users");
+const managerNotifications_1 = require("../../utils/managerNotifications");
+const reviews_1 = require("../../utils/reviews");
 const DEFAULT_COMMENT_LIMIT = 100;
 const MAX_COMMENT_LIMIT = 200;
 const REACTION_KEY_SEPARATOR = ":";
 const normalizeReactionEmoji = (emoji) => emoji.trim();
 const requireCommentableDocument = async ({ ctx, contentTypeName, documentId, }) => {
     const contentType = (0, requireContentType_1.requireContentType)(contentTypeName);
-    if (!contentType.comments) {
-        (0, errors_1.throwAppError)("FEATURE_UNSUPPORTED", {
-            feature: "comments",
-            message: `Comments are not enabled for content type ${contentType.name}`,
-        });
-    }
     await (0, checkOwnership_1.checkOwnership)({
         ctx,
         contentType,
@@ -118,6 +114,7 @@ const listCommentsHandler = async ({ input, ctx, }) => {
     });
     const limit = Math.min(input.limit ?? DEFAULT_COMMENT_LIMIT, MAX_COMMENT_LIMIT);
     const db = await (0, orm_1.getMongoService)();
+    const user = ctx.getUser();
     const result = await db.list(internal_content_types_1.ContentComment, {
         filter: {
             contentType: input.contentType,
@@ -128,14 +125,20 @@ const listCommentsHandler = async ({ input, ctx, }) => {
             sort: { createdAt: "asc" },
         },
     });
+    const readState = await db.find(internal_content_types_1.ContentCommentReadState, {
+        "user._id": user._id,
+        contentType: input.contentType,
+        documentId: input.documentId,
+    });
     return {
         totalItems: result.totalItems,
         comments: await resolveComments(result.items),
+        lastReadCommentId: readState?.lastReadCommentId,
     };
 };
 exports.listCommentsHandler = listCommentsHandler;
 const createCommentHandler = async ({ input, ctx, }) => {
-    await requireCommentableDocument({
+    const contentType = await requireCommentableDocument({
         ctx,
         contentTypeName: input.contentType,
         documentId: input.documentId,
@@ -163,6 +166,38 @@ const createCommentHandler = async ({ input, ctx, }) => {
         createdBy: user._id,
         updatedBy: user._id,
     }, { actorId: user._id });
+    const canLoadDocument = typeof db.get === "function";
+    const document = canLoadDocument
+        ? (await db.get(contentType, input.documentId))
+        : undefined;
+    const revisionToken = document
+        ? (0, reviews_1.getDocumentRevisionToken)(document)
+        : undefined;
+    const activeReview = revisionToken
+        ? (await (0, reviews_1.findLatestReview)({
+            contentType: input.contentType,
+            documentId: input.documentId,
+            revisionToken,
+        }))
+        : null;
+    const notificationKinds = new Map(mentionIds.map((id) => [id, "comment_mention"]));
+    if (activeReview &&
+        activeReview.revisionToken === revisionToken &&
+        activeReview.status === "pending") {
+        const reviewAuthorId = (0, reviews_1.getRelationId)(activeReview.author);
+        if (reviewAuthorId)
+            notificationKinds.set(reviewAuthorId, "review_feedback");
+    }
+    await Promise.all(Array.from(notificationKinds.entries()).map(([id, kind]) => (0, managerNotifications_1.createManagerNotification)({
+        userId: id,
+        authorId: user._id,
+        eventId: comment._id,
+        kind,
+        reviewId: kind === "review_feedback" ? activeReview?._id : undefined,
+        contentType: input.contentType,
+        documentId: input.documentId,
+        text: input.text.trim(),
+    })));
     const [resolved] = await resolveComments([comment]);
     return {
         comment: resolved,
@@ -206,4 +241,81 @@ const toggleCommentReactionHandler = async ({ input, ctx, }) => {
     };
 };
 exports.toggleCommentReactionHandler = toggleCommentReactionHandler;
+const markCommentsReadHandler = async ({ input, ctx, }) => {
+    await requireCommentableDocument({
+        ctx,
+        contentTypeName: input.contentType,
+        documentId: input.documentId,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    const user = ctx.getUser();
+    const comment = await db.find(internal_content_types_1.ContentComment, {
+        _id: input.commentId,
+        contentType: input.contentType,
+        documentId: input.documentId,
+    });
+    if (!comment) {
+        (0, errors_1.throwAppError)("NOT_FOUND", {
+            resource: "ContentComment",
+            id: input.commentId,
+        });
+    }
+    await db.upsert(internal_content_types_1.ContentCommentReadState, {
+        "user._id": user._id,
+        contentType: input.contentType,
+        documentId: input.documentId,
+    }, {
+        _type: internal_content_types_1.ContentCommentReadState.name,
+        user: {
+            type: "existing",
+            _id: user._id,
+            contentType: internal_content_types_1.ManagerUser.name,
+        },
+        contentType: input.contentType,
+        documentId: input.documentId,
+        lastReadCommentId: input.commentId,
+        createdBy: user._id,
+        updatedBy: user._id,
+    }, { actorId: user._id });
+    return {
+        lastReadCommentId: input.commentId,
+    };
+};
+exports.markCommentsReadHandler = markCommentsReadHandler;
+const unreadCommentsCountHandler = async ({ input, ctx, }) => {
+    await requireCommentableDocument({
+        ctx,
+        contentTypeName: input.contentType,
+        documentId: input.documentId,
+    });
+    const db = await (0, orm_1.getMongoService)();
+    const user = ctx.getUser();
+    const [commentsResult, readState] = await Promise.all([
+        db.list(internal_content_types_1.ContentComment, {
+            filter: {
+                contentType: input.contentType,
+                documentId: input.documentId,
+            },
+            options: {
+                fields: ["author"],
+                limit: "all",
+                sort: { createdAt: "asc" },
+            },
+        }),
+        db.find(internal_content_types_1.ContentCommentReadState, {
+            "user._id": user._id,
+            contentType: input.contentType,
+            documentId: input.documentId,
+        }),
+    ]);
+    const comments = commentsResult.items;
+    const lastReadIndex = readState?.lastReadCommentId
+        ? comments.findIndex((comment) => comment._id === readState.lastReadCommentId)
+        : -1;
+    const unreadComments = lastReadIndex >= 0 ? comments.slice(lastReadIndex + 1) : comments;
+    return {
+        count: unreadComments.filter((comment) => getRelationId(comment.author) !== user._id).length,
+    };
+};
+exports.unreadCommentsCountHandler = unreadCommentsCountHandler;
 //# sourceMappingURL=comments.js.map

package/dist/cjs/api/routes/manager/comments.js.map

@@ -1 +1 @@
-{"version":3,"file":"comments.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/comments.ts"],"names":[],"mappings":";;;AAAA,4EAA8E;AAC9E,gDAAoD;AACpD,sCAA+C;AAY/C,+DAA4D;AAC5D,uEAAoE;AACpE,mCAGiB;AAgBjB,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAErF,MAAM,0BAA0B,GAAG,KAAK,EAAE,EACxC,GAAG,EACH,eAAe,EACf,UAAU,GAKX,EAAE,EAAE;IACH,MAAM,WAAW,GAAG,IAAA,uCAAkB,EAAC,eAAe,CAAC,CAAC;IAExD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1B,IAAA,sBAAa,EAAC,qBAAqB,EAAE;YACnC,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,6CAA6C,WAAW,CAAC,IAAI,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAA,+BAAc,EAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE,EAAE,UAAU;QACd,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAE,CACvC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK;IAClD,CAAC,CAAC,MAAM,CAAE,KAAwB,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,cAAc,GAAG,CAAC,MAAe,EAAE,EAAE,CACzC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,SAAS,GAAG,CAAC,GAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9D,MAAM,iBAAiB,GAAG,CAAC,EACzB,KAAK,EACL,MAAM,GAIP,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,GAAG,sBAAsB,GAAG,MAAM,EAAE,CAAC;AAE/F,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;IACtE,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAEjE,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,QAAQ,CAAC;IAErB,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAC7C,eAAe,CAAC,MAAM,CAAC;KACpB,GAAG,CAAC,gBAAgB,CAAC;KACrB,MAAM,CACL,CACE,QAAQ,EAIR,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CACvB,CAAC;AAEN,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAC7C,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAa,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,GAAG,EAAkD,CAAC;IACnE,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE;QACvC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAW;QACzC,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC;YACzD,KAAK,EAAE,KAAK;SACb;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,EAAE,QAAyB,EAA4B,EAAE;IACpF,MAAM,OAAO,GAAG,SAAS,CACvB,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;KACzC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAElD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEnE,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAEzD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAED,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAA,2BAAmB,EAAC,QAAQ,CAAC;YAChE,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC5C,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAA,2BAAmB,EAAC,EAAE,CAAC,CACrD;YACD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3E,KAAK;gBACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAA,2BAAmB,EAAC,EAAE,CAAC,CAAC;aACzE,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAA+B,EAAE;IAChC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;QAC3C,MAAM,EAAE;YACN,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B;QACD,OAAO,EAAE;YACP,KAAK;YACL,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAW;SACpC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,eAAe,CAAC,MAAM,CAAC,KAAwB,CAAC;KACjE,CAAC;AACJ,CAAC,CAAC;AA9BW,QAAA,mBAAmB,uBA8B9B;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAgC,EAAE;IACjC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAC7B,uCAAc,EACd;QACE,KAAK,EAAE,uCAAc,CAAC,IAAI;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;SAC9B;QACD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,oCAAW,CAAC,IAAI;SAC9B,CAAC,CAAC;QACH,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACtB,CAAC;IAEF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,OAAwB,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC,CAAC;AA9CW,QAAA,oBAAoB,wBA8C/B;AAEK,MAAM,4BAA4B,GAAG,KAAK,EAAE,EACjD,KAAK,EACL,GAAG,GAIJ,EAAwC,EAAE;IACzC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;QAC5C,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,CAAC,CAAC;IAEZ,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,gBAAgB;YAC1B,EAAE,EAAE,KAAK,CAAC,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAC3B,kBAAkB,CAAE,OAAyB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAChF,CAAC;IACF,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAC7B,uCAAc,EACd,KAAK,CAAC,SAAS,EACf;QACE,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG;KACX,EACV,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACtB,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,OAAwB,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC,CAAC;AApDW,QAAA,4BAA4B,gCAoDvC"}
+{"version":3,"file":"comments.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/comments.ts"],"names":[],"mappings":";;;AAAA,4EAIyC;AACzC,gDAAoD;AACpD,sCAA+C;AAgB/C,+DAA4D;AAC5D,uEAAoE;AACpE,mCAGiB;AACjB,2EAA6E;AAC7E,iDAK6B;AAgB7B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAErF,MAAM,0BAA0B,GAAG,KAAK,EAAE,EACxC,GAAG,EACH,eAAe,EACf,UAAU,GAKX,EAAE,EAAE;IACH,MAAM,WAAW,GAAG,IAAA,uCAAkB,EAAC,eAAe,CAAC,CAAC;IAExD,MAAM,IAAA,+BAAc,EAAC;QACnB,GAAG;QACH,WAAW;QACX,EAAE,EAAE,UAAU;QACd,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAE,CACvC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK;IAClD,CAAC,CAAC,MAAM,CAAE,KAAwB,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,cAAc,GAAG,CAAC,MAAe,EAAE,EAAE,CACzC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,SAAS,GAAG,CAAC,GAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9D,MAAM,iBAAiB,GAAG,CAAC,EACzB,KAAK,EACL,MAAM,GAIP,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,GAAG,sBAAsB,GAAG,MAAM,EAAE,CAAC;AAE/F,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;IACtE,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,EAAE;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAEjE,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,QAAQ,CAAC;IAErB,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAC7C,eAAe,CAAC,MAAM,CAAC;KACpB,GAAG,CAAC,gBAAgB,CAAC;KACrB,MAAM,CACL,CACE,QAAQ,EAIR,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CACvB,CAAC;AAEN,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAE,EAAE,CAC7C,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAa,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,GAAG,EAAkD,CAAC;IACnE,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE;QACvC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAW;QACzC,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC;YACzD,KAAK,EAAE,KAAK;SACb;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,EAAE,QAAyB,EAA4B,EAAE;IACpF,MAAM,OAAO,GAAG,SAAS,CACvB,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;KACzC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAElD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEnE,KAAK,MAAM,QAAQ,IAAI,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAEzD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAED,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAA,2BAAmB,EAAC,QAAQ,CAAC;YAChE,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC5C,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAA,2BAAmB,EAAC,EAAE,CAAC,CACrD;YACD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3E,KAAK;gBACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAA,2BAAmB,EAAC,EAAE,CAAC,CAAC;aACzE,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAA+B,EAAE;IAChC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;QAC3C,MAAM,EAAE;YACN,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B;QACD,OAAO,EAAE;YACP,KAAK;YACL,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAW;SACpC;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gDAAuB,EAAE;QACvD,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,CAAC,CAAC;IAEZ,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,eAAe,CAAC,MAAM,CAAC,KAAwB,CAAC;QAChE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB;KAChD,CAAC;AACJ,CAAC,CAAC;AArCW,QAAA,mBAAmB,uBAqC9B;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAgC,EAAE;IACjC,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC;QACnD,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAC7B,uCAAc,EACd;QACE,KAAK,EAAE,uCAAc,CAAC,IAAI;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;SAC9B;QACD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,oCAAW,CAAC,IAAI;SAC9B,CAAC,CAAC;QACH,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACtB,CAAC;IACF,MAAM,eAAe,GACnB,OAAQ,EAAmC,CAAC,GAAG,KAAK,UAAU,CAAC;IACjE,MAAM,QAAQ,GAAG,eAAe;QAC9B,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAA6B;QAC5E,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,QAAQ;QAC5B,CAAC,CAAC,IAAA,kCAAwB,EAAC,QAAQ,CAAC;QACpC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,aAAa;QAChC,CAAC,CAAE,CAAC,MAAM,IAAA,0BAAgB,EAAC;YACvB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;SACd,CAAC,CAAyB;QAC7B,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAG/B,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACnD,IACE,YAAY;QACZ,YAAY,CAAC,aAAa,KAAK,aAAa;QAC5C,YAAY,CAAC,MAAM,KAAK,SAAS,EACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,uBAAmB,EAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,cAAc;YAAE,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CACzD,IAAA,gDAAyB,EAAC;QACxB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,IAAI;QACJ,QAAQ,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS;QACpE,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;KACxB,CAAC,CACH,CACF,CAAC;IAEF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,OAAwB,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC,CAAC;AAvFW,QAAA,oBAAoB,wBAuF/B;AAEK,MAAM,4BAA4B,GAAG,KAAK,EAAE,EACjD,KAAK,EACL,GAAG,GAIJ,EAAwC,EAAE;IACzC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;QAC5C,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,CAAC,CAAC;IAEZ,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,gBAAgB;YAC1B,EAAE,EAAE,KAAK,CAAC,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAC3B,kBAAkB,CAAE,OAAyB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAChF,CAAC;IACF,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,IAAI,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAC7B,uCAAc,EACd,KAAK,CAAC,SAAS,EACf;QACE,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG;KACX,EACV,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACtB,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,OAAwB,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC,CAAC;AApDW,QAAA,4BAA4B,gCAoDvC;AAEK,MAAM,uBAAuB,GAAG,KAAK,EAAE,EAC5C,KAAK,EACL,GAAG,GAIJ,EAAmC,EAAE;IACpC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;QAC5C,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,CAAC,CAAC;IAEZ,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,QAAQ,EAAE,gBAAgB;YAC1B,EAAE,EAAE,KAAK,CAAC,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CACb,gDAAuB,EACvB;QACE,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;KACpB,EACV;QACE,KAAK,EAAE,gDAAuB,CAAC,IAAI;QACnC,IAAI,EAAE;YACJ,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;SAC9B;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CACtB,CAAC;IAEF,OAAO;QACL,iBAAiB,EAAE,KAAK,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC,CAAC;AAtDW,QAAA,uBAAuB,2BAsDlC;AAEK,MAAM,0BAA0B,GAAG,KAAK,EAAE,EAC/C,KAAK,EACL,GAAG,GAIJ,EAAsC,EAAE;IACvC,MAAM,0BAA0B,CAAC;QAC/B,GAAG;QACH,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,EAAE,CAAC,IAAI,CAAC,uCAAc,EAAE;YACtB,MAAM,EAAE;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;YACD,OAAO,EAAE;gBACP,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAW;aACpC;SACF,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,gDAAuB,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,GAAG;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;SACpB,CAAC;KACZ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAwB,CAAC;IACzD,MAAM,aAAa,GAAG,SAAS,EAAE,iBAAiB;QAChD,CAAC,CAAC,QAAQ,CAAC,SAAS,CAChB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,iBAAiB,CACzD;QACH,CAAC,CAAC,CAAC,CAAC,CAAC;IACP,MAAM,cAAc,GAClB,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEpE,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,MAAM,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,GAAG,CACxD,CAAC,MAAM;KACT,CAAC;AACJ,CAAC,CAAC;AA/CW,QAAA,0BAA0B,8BA+CrC"}