@rpcbase/server 0.486.0 → 0.487.0

package/dist/handler-BwK8qxLn.js

@@ -435,3 +435,4 @@ const handler = (api) => {
 export {
   handler as default
 };
+//# sourceMappingURL=handler-BwK8qxLn.js.map

package/dist/handler-BwK8qxLn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-BwK8qxLn.js","sources":["../src/notifications/api/notifications/shared.ts","../src/notifications/api/notifications/index.ts","../src/notifications/api/notifications/handler.ts"],"sourcesContent":["import type { Ctx } from \"@rpcbase/api\"\n\n\ntype NotificationSessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport const getSessionUser = (ctx: Ctx) => {\n  const rawSessionUser = (ctx.req.session as { user?: NotificationSessionUser } | null | undefined)?.user\n  const userId = typeof rawSessionUser?.id === \"string\" ? rawSessionUser.id.trim() : \"\"\n  const tenantId = typeof rawSessionUser?.currentTenantId === \"string\" ? rawSessionUser.currentTenantId.trim() : \"\"\n\n  if (!userId) {\n    ctx.res.status(401)\n    return null\n  }\n\n  if (!tenantId) {\n    ctx.res.status(400)\n    return null\n  }\n\n  return { userId, tenantId }\n}\n\n","import { z } from \"zod\"\n\n\nexport const ListRoute = \"/api/rb/notifications\"\nexport const CreateRoute = \"/api/rb/notifications/create\"\nexport const MarkReadRoute = \"/api/rb/notifications/:notificationId/read\"\nexport const ArchiveRoute = \"/api/rb/notifications/:notificationId/archive\"\nexport const MarkAllReadRoute = \"/api/rb/notifications/mark-all-read\"\nexport const SettingsRoute = \"/api/rb/notifications/settings\"\nexport const DigestRunRoute = \"/api/rb/notifications/digest/run\"\n\nexport const listRequestSchema = z.object({\n  includeArchived: z.boolean().optional(),\n  unreadOnly: z.boolean().optional(),\n  limit: z.number().int().min(1).max(200).optional(),\n  markSeen: z.boolean().optional(),\n})\n\nexport type ListRequestPayload = z.infer<typeof listRequestSchema>\n\nexport const createRequestSchema = z.object({\n  topic: z.string().trim().min(1).optional(),\n  title: z.string().trim().min(1),\n  body: z.string().trim().optional(),\n  url: z.string().trim().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type CreateRequestPayload = z.infer<typeof createRequestSchema>\n\nexport const notificationSchema = z.object({\n  id: z.string(),\n  topic: z.string().optional(),\n  title: z.string(),\n  body: z.string().optional(),\n  url: z.string().optional(),\n  createdAt: z.string(),\n  seenAt: z.string().optional(),\n  readAt: z.string().optional(),\n  archivedAt: z.string().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type NotificationPayload = z.infer<typeof notificationSchema>\n\nexport const listResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  notifications: z.array(notificationSchema).optional(),\n  unreadCount: z.number().int().min(0).optional(),\n  unseenCount: z.number().int().min(0).optional(),\n})\n\nexport type ListResponsePayload = z.infer<typeof listResponseSchema>\n\nexport const createResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  id: z.string().optional(),\n})\n\nexport type CreateResponsePayload = z.infer<typeof createResponseSchema>\n\nexport const markReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkReadResponsePayload = z.infer<typeof markReadResponseSchema>\n\nexport const archiveResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ArchiveResponsePayload = z.infer<typeof archiveResponseSchema>\n\nexport const markAllReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkAllReadResponsePayload = z.infer<typeof markAllReadResponseSchema>\n\nexport const digestFrequencySchema = z.enum([\"off\", \"daily\", \"weekly\"])\n\nexport type DigestFrequency = z.infer<typeof digestFrequencySchema>\n\nexport const topicPreferenceSchema = z.object({\n  topic: z.string(),\n  inApp: z.boolean(),\n  emailDigest: z.boolean(),\n  push: z.boolean(),\n})\n\nexport type TopicPreferencePayload = z.infer<typeof topicPreferenceSchema>\n\nexport const settingsSchema = z.object({\n  digestFrequency: digestFrequencySchema,\n  topicPreferences: z.array(topicPreferenceSchema),\n  lastDigestSentAt: z.string().optional(),\n})\n\nexport type SettingsPayload = z.infer<typeof settingsSchema>\n\nexport const settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type SettingsResponsePayload = z.infer<typeof settingsResponseSchema>\n\nexport const updateSettingsRequestSchema = z.object({\n  digestFrequency: digestFrequencySchema.optional(),\n  topicPreferences: z.array(topicPreferenceSchema).optional(),\n})\n\nexport type UpdateSettingsRequestPayload = z.infer<typeof updateSettingsRequestSchema>\n\nexport const updateSettingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type UpdateSettingsResponsePayload = z.infer<typeof updateSettingsResponseSchema>\n\nexport const digestRunRequestSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport type DigestRunRequestPayload = z.infer<typeof digestRunRequestSchema>\n\nexport const digestRunResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  sent: z.boolean().optional(),\n  skippedReason: z.string().optional(),\n})\n\nexport type DigestRunResponsePayload = z.infer<typeof digestRunResponseSchema>\n","import { Api, type ApiHandler } from \"@rpcbase/api\"\nimport { models, type IRBNotification, type IRBNotificationSettings } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery } from \"@rpcbase/db/acl\"\n\nimport { createNotification } from \"../../createNotification\"\nimport { sendNotificationsDigestForUser } from \"../../digest\"\nimport { getSessionUser } from \"./shared\"\n\nimport * as Notifications from \"./index\"\n\n\ntype NotificationDoc = IRBNotification & { _id: unknown }\ntype SettingsDoc = IRBNotificationSettings & { _id: unknown }\n\nconst toIso = (value: unknown): string | undefined => (value instanceof Date ? value.toISOString() : undefined)\n\nconst buildDisabledTopics = (\n  settings: SettingsDoc | null,\n  key: \"inApp\" | \"emailDigest\",\n): string[] => {\n  const raw = settings?.topicPreferences\n  if (!Array.isArray(raw) || raw.length === 0) return []\n\n  return raw\n    .map((pref) => {\n      if (!pref || typeof pref !== \"object\") return null\n      const topic = typeof (pref as { topic?: unknown }).topic === \"string\" ? (pref as { topic: string }).topic.trim() : \"\"\n      if (!topic) return null\n      const enabled = (pref as Record<string, unknown>)[key] === true\n      return enabled ? null : topic\n    })\n    .filter((topic): topic is string => Boolean(topic))\n}\n\nconst listNotifications: ApiHandler<Notifications.ListRequestPayload, Notifications.ListResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.listRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { userId } = session\n  const includeArchived = parsed.data.includeArchived === true\n  const unreadOnly = parsed.data.unreadOnly === true\n  const limit = parsed.data.limit ?? 50\n  const markSeen = parsed.data.markSeen === true\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", ctx)\n  const settings = (await SettingsModel.findOne({ userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", ctx)\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (!includeArchived) queryFilters.push({ archivedAt: { $exists: false } })\n  if (unreadOnly) queryFilters.push({ readAt: { $exists: false } })\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const notifications = (await NotificationModel.find(query)\n    .sort({ createdAt: -1 })\n    .limit(limit)\n    .lean()) as NotificationDoc[]\n\n  const unseenQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { seenAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unseenQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unseenQuery: Record<string, unknown> = { $and: unseenQueryFilters }\n\n  const unreadQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unreadQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unreadQuery: Record<string, unknown> = { $and: unreadQueryFilters }\n\n  const [unreadCount, unseenCount] = await Promise.all([\n    NotificationModel.countDocuments(unreadQuery),\n    NotificationModel.countDocuments(unseenQuery),\n  ])\n\n  const now = markSeen ? new Date() : null\n  if (now && unseenCount > 0) {\n    await NotificationModel.updateMany(unseenQuery, { $set: { seenAt: now } })\n  }\n\n  return Notifications.listResponseSchema.parse({\n    ok: true,\n    notifications: notifications.map((n) => ({\n      id: String(n._id),\n      topic: typeof n.topic === \"string\" ? n.topic : undefined,\n      title: typeof n.title === \"string\" ? n.title : \"\",\n      body: typeof n.body === \"string\" ? n.body : undefined,\n      url: typeof n.url === \"string\" ? n.url : undefined,\n      createdAt: toIso(n.createdAt) ?? new Date().toISOString(),\n      seenAt: toIso(n.seenAt) ?? (now && !n.archivedAt && !n.seenAt ? now.toISOString() : undefined),\n      readAt: toIso(n.readAt),\n      archivedAt: toIso(n.archivedAt),\n      metadata: typeof n.metadata === \"object\" && n.metadata !== null ? (n.metadata as Record<string, unknown>) : undefined,\n    })),\n    unreadCount,\n    unseenCount: now ? 0 : unseenCount,\n  })\n}\n\nconst createNotificationForCurrentUser: ApiHandler<Notifications.CreateRequestPayload, Notifications.CreateResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"create\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.createRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const created = await createNotification(ctx, {\n    userId: session.userId,\n    topic: parsed.data.topic,\n    title: parsed.data.title,\n    body: parsed.data.body,\n    url: parsed.data.url,\n    metadata: parsed.data.metadata,\n  })\n\n  return Notifications.createResponseSchema.parse({ ok: true, id: created.id })\n}\n\nconst markRead: ApiHandler<unknown, Notifications.MarkReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", ctx)\n  const now = new Date()\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { readAt: now, seenAt: now } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst markAllRead: ApiHandler<unknown, Notifications.MarkAllReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", ctx)\n  const settings = (await SettingsModel.findOne({ userId: session.userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", ctx)\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId: session.userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const now = new Date()\n  await NotificationModel.updateMany(query, { $set: { readAt: now, seenAt: now } })\n\n  return { ok: true }\n}\n\nconst archiveNotification: ApiHandler<unknown, Notifications.ArchiveResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", ctx)\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { archivedAt: new Date() } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst getSettings: ApiHandler<unknown, Notifications.SettingsResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", ctx)\n  const settings = (await SettingsModel.findOne(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"read\", \"RBNotificationSettings\")] },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.settingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst updateSettings: ApiHandler<Notifications.UpdateSettingsRequestPayload, Notifications.UpdateSettingsResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.updateSettingsRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", ctx)\n  const nextValues: Record<string, unknown> = {}\n\n  if (parsed.data.digestFrequency) {\n    nextValues.digestFrequency = parsed.data.digestFrequency\n  }\n\n  if (parsed.data.topicPreferences) {\n    const seen = new Set<string>()\n    const next = parsed.data.topicPreferences\n      .map((pref) => ({\n        topic: pref.topic.trim(),\n        inApp: pref.inApp,\n        emailDigest: pref.emailDigest,\n        push: pref.push,\n      }))\n      .filter((pref) => pref.topic.length > 0)\n      .filter((pref) => {\n        if (seen.has(pref.topic)) return false\n        seen.add(pref.topic)\n        return true\n      })\n\n    nextValues.topicPreferences = next\n  }\n\n  const ops: Record<string, unknown> = {\n    $setOnInsert: { userId: session.userId },\n  }\n\n  if (Object.keys(nextValues).length > 0) {\n    ops.$set = nextValues\n  }\n\n  const settings = (await SettingsModel.findOneAndUpdate(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"update\", \"RBNotificationSettings\")] },\n    ops,\n    { upsert: true, new: true, setDefaultsOnInsert: true },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.updateSettingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst runDigest: ApiHandler<Notifications.DigestRunRequestPayload, Notifications.DigestRunResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.digestRunRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const result = await sendNotificationsDigestForUser(ctx, {\n    userId: session.userId,\n    force: parsed.data.force === true,\n  })\n\n  if (!result.ok) {\n    ctx.res.status(500)\n    return { ok: false, error: result.error }\n  }\n\n  return {\n    ok: true,\n    sent: result.sent,\n    ...(result.skippedReason ? { skippedReason: result.skippedReason } : {}),\n  }\n}\n\nexport default (api: Api) => {\n  api.post(Notifications.ListRoute, listNotifications)\n  api.post(Notifications.CreateRoute, createNotificationForCurrentUser)\n  api.post(Notifications.MarkReadRoute, markRead)\n  api.post(Notifications.MarkAllReadRoute, markAllRead)\n  api.post(Notifications.ArchiveRoute, archiveNotification)\n  api.get(Notifications.SettingsRoute, getSettings)\n  api.put(Notifications.SettingsRoute, updateSettings)\n  api.post(Notifications.DigestRunRoute, runDigest)\n}\n"],"names":["z.object","z.boolean","z.number","z.string","z.record","z.unknown","z.array","z.enum","Notifications.listRequestSchema","Notifications.listResponseSchema","Notifications.createRequestSchema","Notifications.createResponseSchema","Notifications.settingsResponseSchema","Notifications.updateSettingsRequestSchema","Notifications.updateSettingsResponseSchema","Notifications.digestRunRequestSchema","Notifications.ListRoute","Notifications.CreateRoute","Notifications.MarkReadRoute","Notifications.MarkAllReadRoute","Notifications.ArchiveRoute","Notifications.SettingsRoute","Notifications.DigestRunRoute"],"mappings":";;;;AAQO,MAAM,iBAAiB,CAAC,QAAa;AAC1C,QAAM,iBAAkB,IAAI,IAAI,SAAmE;AACnG,QAAM,SAAS,OAAO,gBAAgB,OAAO,WAAW,eAAe,GAAG,SAAS;AACnF,QAAM,WAAW,OAAO,gBAAgB,oBAAoB,WAAW,eAAe,gBAAgB,SAAS;AAE/G,MAAI,CAAC,QAAQ;AACX,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,QAAQ,SAAA;AACnB;ACrBO,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,MAAM,oBAAoBA,OAAS;AAAA,EACxC,iBAAiBC,QAAE,EAAU,SAAA;AAAA,EAC7B,YAAYA,QAAE,EAAU,SAAA;AAAA,EACxB,OAAOC,SAAW,MAAM,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAA;AAAA,EACxC,UAAUD,QAAE,EAAU,SAAA;AACxB,CAAC;AAIM,MAAM,sBAAsBD,OAAS;AAAA,EAC1C,OAAOG,OAAE,EAAS,OAAO,IAAI,CAAC,EAAE,SAAA;AAAA,EAChC,OAAOA,OAAE,EAAS,KAAA,EAAO,IAAI,CAAC;AAAA,EAC9B,MAAMA,OAAE,EAAS,KAAA,EAAO,SAAA;AAAA,EACxB,KAAKA,OAAE,EAAS,KAAA,EAAO,SAAA;AAAA,EACvB,UAAUC,OAASD,OAAE,GAAUE,QAAE,CAAS,EAAE,SAAA;AAC9C,CAAC;AAIM,MAAM,qBAAqBL,OAAS;AAAA,EACzC,IAAIG,OAAE;AAAA,EACN,OAAOA,OAAE,EAAS,SAAA;AAAA,EAClB,OAAOA,OAAE;AAAA,EACT,MAAMA,OAAE,EAAS,SAAA;AAAA,EACjB,KAAKA,OAAE,EAAS,SAAA;AAAA,EAChB,WAAWA,OAAE;AAAA,EACb,QAAQA,OAAE,EAAS,SAAA;AAAA,EACnB,QAAQA,OAAE,EAAS,SAAA;AAAA,EACnB,YAAYA,OAAE,EAAS,SAAA;AAAA,EACvB,UAAUC,OAASD,OAAE,GAAUE,QAAE,CAAS,EAAE,SAAA;AAC9C,CAAC;AAIM,MAAM,qBAAqBL,OAAS;AAAA,EACzC,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AAAA,EAClB,eAAeG,MAAQ,kBAAkB,EAAE,SAAA;AAAA,EAC3C,aAAaJ,OAAE,EAAS,MAAM,IAAI,CAAC,EAAE,SAAA;AAAA,EACrC,aAAaA,OAAE,EAAS,MAAM,IAAI,CAAC,EAAE,SAAA;AACvC,CAAC;AAIM,MAAM,uBAAuBF,OAAS;AAAA,EAC3C,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AAAA,EAClB,IAAIA,OAAE,EAAS,SAAA;AACjB,CAAC;AAIqCH,OAAS;AAAA,EAC7C,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AACpB,CAAC;AAIoCH,OAAS;AAAA,EAC5C,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AACpB,CAAC;AAIwCH,OAAS;AAAA,EAChD,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AACpB,CAAC;AAIM,MAAM,wBAAwBI,MAAO,CAAC,OAAO,SAAS,QAAQ,CAAC;AAI/D,MAAM,wBAAwBP,OAAS;AAAA,EAC5C,OAAOG,OAAE;AAAA,EACT,OAAOF,QAAE;AAAA,EACT,aAAaA,QAAE;AAAA,EACf,MAAMA,QAAE;AACV,CAAC;AAIM,MAAM,iBAAiBD,OAAS;AAAA,EACrC,iBAAiB;AAAA,EACjB,kBAAkBM,MAAQ,qBAAqB;AAAA,EAC/C,kBAAkBH,OAAE,EAAS,SAAA;AAC/B,CAAC;AAIM,MAAM,yBAAyBH,OAAS;AAAA,EAC7C,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AAAA,EAClB,UAAU,eAAe,SAAA;AAC3B,CAAC;AAIM,MAAM,8BAA8BH,OAAS;AAAA,EAClD,iBAAiB,sBAAsB,SAAA;AAAA,EACvC,kBAAkBM,MAAQ,qBAAqB,EAAE,SAAA;AACnD,CAAC;AAIM,MAAM,+BAA+BN,OAAS;AAAA,EACnD,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AAAA,EAClB,UAAU,eAAe,SAAA;AAC3B,CAAC;AAIM,MAAM,yBAAyBH,OAAS;AAAA,EAC7C,OAAOC,QAAE,EAAU,SAAA;AACrB,CAAC;AAIsCD,OAAS;AAAA,EAC9C,IAAIC,QAAE;AAAA,EACN,OAAOE,OAAE,EAAS,SAAA;AAAA,EAClB,MAAMF,QAAE,EAAU,SAAA;AAAA,EAClB,eAAeE,OAAE,EAAS,SAAA;AAC5B,CAAC;AC7HD,MAAM,QAAQ,CAAC,UAAwC,iBAAiB,OAAO,MAAM,gBAAgB;AAErG,MAAM,sBAAsB,CAC1B,UACA,QACa;AACb,QAAM,MAAM,UAAU;AACtB,MAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,EAAG,QAAO,CAAA;AAEpD,SAAO,IACJ,IAAI,CAAC,SAAS;AACb,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,QAAQ,OAAQ,KAA6B,UAAU,WAAY,KAA2B,MAAM,SAAS;AACnH,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,UAAW,KAAiC,GAAG,MAAM;AAC3D,WAAO,UAAU,OAAO;AAAA,EAC1B,CAAC,EACA,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AACtD;AAEA,MAAM,oBAAqG,OACzG,SACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,QAAQ,gBAAgB,GAAG;AAC1C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,SAASK,kBAAgC,UAAU,OAAO;AAChE,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,EAAE,WAAW;AACnB,QAAM,kBAAkB,OAAO,KAAK,oBAAoB;AACxD,QAAM,aAAa,OAAO,KAAK,eAAe;AAC9C,QAAM,QAAQ,OAAO,KAAK,SAAS;AACnC,QAAM,WAAW,OAAO,KAAK,aAAa;AAE1C,QAAM,gBAAgB,MAAM,OAAO,IAAI,0BAA0B,GAAG;AACpE,QAAM,WAAY,MAAM,cAAc,QAAQ,EAAE,OAAA,CAAQ,EAAE,KAAA;AAC1D,QAAM,iBAAiB,oBAAoB,UAAU,OAAO;AAE5D,QAAM,oBAAoB,MAAM,OAAO,IAAI,kBAAkB,GAAG;AAEhE,QAAM,eAA0C;AAAA,IAC9C,EAAE,OAAA;AAAA,IACF,qBAAqB,SAAS,QAAQ,gBAAgB;AAAA,EAAA;AAExD,MAAI,CAAC,gBAAiB,cAAa,KAAK,EAAE,YAAY,EAAE,SAAS,MAAA,GAAS;AAC1E,MAAI,yBAAyB,KAAK,EAAE,QAAQ,EAAE,SAAS,MAAA,GAAS;AAChE,MAAI,eAAe,SAAS,EAAG,cAAa,KAAK,EAAE,OAAO,EAAE,MAAM,eAAA,GAAkB;AACpF,QAAM,QAAiC,EAAE,MAAM,aAAA;AAE/C,QAAM,gBAAiB,MAAM,kBAAkB,KAAK,KAAK,EACtD,KAAK,EAAE,WAAW,IAAI,EACtB,MAAM,KAAK,EACX,KAAA;AAEH,QAAM,qBAAgD;AAAA,IACpD,EAAE,OAAA;AAAA,IACF,EAAE,YAAY,EAAE,SAAS,QAAM;AAAA,IAC/B,EAAE,QAAQ,EAAE,SAAS,QAAM;AAAA,IAC3B,qBAAqB,SAAS,QAAQ,gBAAgB;AAAA,EAAA;AAExD,MAAI,eAAe,SAAS,EAAG,oBAAmB,KAAK,EAAE,OAAO,EAAE,MAAM,eAAA,GAAkB;AAC1F,QAAM,cAAuC,EAAE,MAAM,mBAAA;AAErD,QAAM,qBAAgD;AAAA,IACpD,EAAE,OAAA;AAAA,IACF,EAAE,YAAY,EAAE,SAAS,QAAM;AAAA,IAC/B,EAAE,QAAQ,EAAE,SAAS,QAAM;AAAA,IAC3B,qBAAqB,SAAS,QAAQ,gBAAgB;AAAA,EAAA;AAExD,MAAI,eAAe,SAAS,EAAG,oBAAmB,KAAK,EAAE,OAAO,EAAE,MAAM,eAAA,GAAkB;AAC1F,QAAM,cAAuC,EAAE,MAAM,mBAAA;AAErD,QAAM,CAAC,aAAa,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,kBAAkB,eAAe,WAAW;AAAA,IAC5C,kBAAkB,eAAe,WAAW;AAAA,EAAA,CAC7C;AAED,QAAM,MAAM,WAAW,oBAAI,KAAA,IAAS;AACpC,MAAI,OAAO,cAAc,GAAG;AAC1B,UAAM,kBAAkB,WAAW,aAAa,EAAE,MAAM,EAAE,QAAQ,IAAA,GAAO;AAAA,EAC3E;AAEA,SAAOC,mBAAiC,MAAM;AAAA,IAC5C,IAAI;AAAA,IACJ,eAAe,cAAc,IAAI,CAAC,OAAO;AAAA,MACvC,IAAI,OAAO,EAAE,GAAG;AAAA,MAChB,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AAAA,MAC/C,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AAAA,MAC/C,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,MAC5C,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM;AAAA,MACzC,WAAW,MAAM,EAAE,SAAS,MAAK,oBAAI,KAAA,GAAO,YAAA;AAAA,MAC5C,QAAQ,MAAM,EAAE,MAAM,MAAM,OAAO,CAAC,EAAE,cAAc,CAAC,EAAE,SAAS,IAAI,gBAAgB;AAAA,MACpF,QAAQ,MAAM,EAAE,MAAM;AAAA,MACtB,YAAY,MAAM,EAAE,UAAU;AAAA,MAC9B,UAAU,OAAO,EAAE,aAAa,YAAY,EAAE,aAAa,OAAQ,EAAE,WAAuC;AAAA,IAAA,EAC5G;AAAA,IACF;AAAA,IACA,aAAa,MAAM,IAAI;AAAA,EAAA,CACxB;AACH;AAEA,MAAM,mCAAwH,OAC5H,SACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,UAAU,gBAAgB,GAAG;AAC5C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,SAASC,oBAAkC,UAAU,OAAO;AAClE,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,MAAM,mBAAmB,KAAK;AAAA,IAC5C,QAAQ,QAAQ;AAAA,IAChB,OAAO,OAAO,KAAK;AAAA,IACnB,OAAO,OAAO,KAAK;AAAA,IACnB,MAAM,OAAO,KAAK;AAAA,IAClB,KAAK,OAAO,KAAK;AAAA,IACjB,UAAU,OAAO,KAAK;AAAA,EAAA,CACvB;AAED,SAAOC,qBAAmC,MAAM,EAAE,IAAI,MAAM,IAAI,QAAQ,IAAI;AAC9E;AAEA,MAAM,WAAuE,OAC3E,UACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,UAAU,gBAAgB,GAAG;AAC5C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,iBAAiB,OAAO,IAAI,IAAI,OAAO,mBAAmB,WAAW,IAAI,IAAI,OAAO,eAAe,KAAA,IAAS;AAClH,MAAI,CAAC,gBAAgB;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,0BAAA;AAAA,EAC7B;AAEA,QAAM,oBAAoB,MAAM,OAAO,IAAI,kBAAkB,GAAG;AAChE,QAAM,0BAAU,KAAA;AAEhB,MAAI;AACF,UAAM,kBAAkB;AAAA,MACtB,EAAE,MAAM,CAAC,EAAE,KAAK,eAAA,GAAkB,EAAE,YAAY,EAAE,SAAS,MAAA,KAAW,qBAAqB,SAAS,UAAU,gBAAgB,CAAC,EAAA;AAAA,MAC/H,EAAE,MAAM,EAAE,QAAQ,KAAK,QAAQ,MAAI;AAAA,IAAE;AAAA,EAEzC,QAAQ;AACN,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,0BAAA;AAAA,EAC7B;AAEA,SAAO,EAAE,IAAI,KAAA;AACf;AAEA,MAAM,cAA6E,OACjF,UACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,UAAU,gBAAgB,GAAG;AAC5C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,gBAAgB,MAAM,OAAO,IAAI,0BAA0B,GAAG;AACpE,QAAM,WAAY,MAAM,cAAc,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,EAAE,KAAA;AAC1E,QAAM,iBAAiB,oBAAoB,UAAU,OAAO;AAE5D,QAAM,oBAAoB,MAAM,OAAO,IAAI,kBAAkB,GAAG;AAEhE,QAAM,eAA0C;AAAA,IAC9C,EAAE,QAAQ,QAAQ,OAAA;AAAA,IAClB,EAAE,YAAY,EAAE,SAAS,QAAM;AAAA,IAC/B,EAAE,QAAQ,EAAE,SAAS,QAAM;AAAA,IAC3B,qBAAqB,SAAS,UAAU,gBAAgB;AAAA,EAAA;AAE1D,MAAI,eAAe,SAAS,EAAG,cAAa,KAAK,EAAE,OAAO,EAAE,MAAM,eAAA,GAAkB;AACpF,QAAM,QAAiC,EAAE,MAAM,aAAA;AAE/C,QAAM,0BAAU,KAAA;AAChB,QAAM,kBAAkB,WAAW,OAAO,EAAE,MAAM,EAAE,QAAQ,KAAK,QAAQ,IAAA,GAAO;AAEhF,SAAO,EAAE,IAAI,KAAA;AACf;AAEA,MAAM,sBAAiF,OACrF,UACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,UAAU,gBAAgB,GAAG;AAC5C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,iBAAiB,OAAO,IAAI,IAAI,OAAO,mBAAmB,WAAW,IAAI,IAAI,OAAO,eAAe,KAAA,IAAS;AAClH,MAAI,CAAC,gBAAgB;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,0BAAA;AAAA,EAC7B;AAEA,QAAM,oBAAoB,MAAM,OAAO,IAAI,kBAAkB,GAAG;AAEhE,MAAI;AACF,UAAM,kBAAkB;AAAA,MACtB,EAAE,MAAM,CAAC,EAAE,KAAK,eAAA,GAAkB,EAAE,YAAY,EAAE,SAAS,MAAA,KAAW,qBAAqB,SAAS,UAAU,gBAAgB,CAAC,EAAA;AAAA,MAC/H,EAAE,MAAM,EAAE,YAAY,oBAAI,KAAA,IAAO;AAAA,IAAE;AAAA,EAEvC,QAAQ;AACN,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,0BAAA;AAAA,EAC7B;AAEA,SAAO,EAAE,IAAI,KAAA;AACf;AAEA,MAAM,cAA0E,OAC9E,UACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,QAAQ,wBAAwB,GAAG;AAClD,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,gBAAgB,MAAM,OAAO,IAAI,0BAA0B,GAAG;AACpE,QAAM,WAAY,MAAM,cAAc;AAAA,IACpC,EAAE,MAAM,CAAC,EAAE,QAAQ,QAAQ,UAAU,qBAAqB,SAAS,QAAQ,wBAAwB,CAAC,EAAA;AAAA,EAAE,EACtG,KAAA;AAEF,QAAM,qBAAqB,OAAO,UAAU,oBAAoB,WAAW,SAAS,kBAAkB;AACtG,QAAM,kBACJ,uBAAuB,SAAS,uBAAuB,WAAW,uBAAuB,WACrF,qBACA;AAEN,QAAM,mBAAmB,MAAM,QAAQ,UAAU,gBAAgB,IAC7D,SAAU,iBAAiB,IAAI,CAAC,UAAU;AAAA,IAC1C,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,IACrD,OAAO,KAAK,UAAU;AAAA,IACtB,aAAa,KAAK,gBAAgB;AAAA,IAClC,MAAM,KAAK,SAAS;AAAA,EAAA,EACpB,EAAE,OAAO,CAAC,SAAS,KAAK,MAAM,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOC,uBAAqC,MAAM;AAAA,IAChD,IAAI;AAAA,IACJ,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA,kBAAkB,MAAM,UAAU,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM,iBAAsH,OAC1H,SACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,UAAU,wBAAwB,GAAG;AACpD,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,SAASC,4BAA0C,UAAU,OAAO;AAC1E,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,gBAAgB,MAAM,OAAO,IAAI,0BAA0B,GAAG;AACpE,QAAM,aAAsC,CAAA;AAE5C,MAAI,OAAO,KAAK,iBAAiB;AAC/B,eAAW,kBAAkB,OAAO,KAAK;AAAA,EAC3C;AAEA,MAAI,OAAO,KAAK,kBAAkB;AAChC,UAAM,2BAAW,IAAA;AACjB,UAAM,OAAO,OAAO,KAAK,iBACtB,IAAI,CAAC,UAAU;AAAA,MACd,OAAO,KAAK,MAAM,KAAA;AAAA,MAClB,OAAO,KAAK;AAAA,MACZ,aAAa,KAAK;AAAA,MAClB,MAAM,KAAK;AAAA,IAAA,EACX,EACD,OAAO,CAAC,SAAS,KAAK,MAAM,SAAS,CAAC,EACtC,OAAO,CAAC,SAAS;AAChB,UAAI,KAAK,IAAI,KAAK,KAAK,EAAG,QAAO;AACjC,WAAK,IAAI,KAAK,KAAK;AACnB,aAAO;AAAA,IACT,CAAC;AAEH,eAAW,mBAAmB;AAAA,EAChC;AAEA,QAAM,MAA+B;AAAA,IACnC,cAAc,EAAE,QAAQ,QAAQ,OAAA;AAAA,EAAO;AAGzC,MAAI,OAAO,KAAK,UAAU,EAAE,SAAS,GAAG;AACtC,QAAI,OAAO;AAAA,EACb;AAEA,QAAM,WAAY,MAAM,cAAc;AAAA,IACpC,EAAE,MAAM,CAAC,EAAE,QAAQ,QAAQ,UAAU,qBAAqB,SAAS,UAAU,wBAAwB,CAAC,EAAA;AAAA,IACtG;AAAA,IACA,EAAE,QAAQ,MAAM,KAAK,MAAM,qBAAqB,KAAA;AAAA,EAAK,EACrD,KAAA;AAEF,QAAM,qBAAqB,OAAO,UAAU,oBAAoB,WAAW,SAAS,kBAAkB;AACtG,QAAM,kBACJ,uBAAuB,SAAS,uBAAuB,WAAW,uBAAuB,WACrF,qBACA;AAEN,QAAM,mBAAmB,MAAM,QAAQ,UAAU,gBAAgB,IAC7D,SAAU,iBAAiB,IAAI,CAAC,UAAU;AAAA,IAC1C,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,IACrD,OAAO,KAAK,UAAU;AAAA,IACtB,aAAa,KAAK,gBAAgB;AAAA,IAClC,MAAM,KAAK,SAAS;AAAA,EAAA,EACpB,EAAE,OAAO,CAAC,SAAS,KAAK,MAAM,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOC,6BAA2C,MAAM;AAAA,IACtD,IAAI;AAAA,IACJ,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA,kBAAkB,MAAM,UAAU,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM,YAAuG,OAC3G,SACA,QACG;AACH,QAAM,UAAU,eAAe,GAAG;AAClC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,QAAQ,UAAU,SAAS,IAAI,IAAI,SAAS;AAChG,MAAI,CAAC,QAAQ,IAAI,QAAQ,gBAAgB,GAAG;AAC1C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,SAASC,uBAAqC,UAAU,OAAO;AACrE,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,SAAS,MAAM,+BAA+B,KAAK;AAAA,IACvD,QAAQ,QAAQ;AAAA,IAChB,OAAO,OAAO,KAAK,UAAU;AAAA,EAAA,CAC9B;AAED,MAAI,CAAC,OAAO,IAAI;AACd,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,OAAO,MAAA;AAAA,EACpC;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM,OAAO;AAAA,IACb,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAA,IAAkB,CAAA;AAAA,EAAC;AAE1E;AAEA,MAAA,UAAe,CAAC,QAAa;AAC3B,MAAI,KAAKC,WAAyB,iBAAiB;AACnD,MAAI,KAAKC,aAA2B,gCAAgC;AACpE,MAAI,KAAKC,eAA6B,QAAQ;AAC9C,MAAI,KAAKC,kBAAgC,WAAW;AACpD,MAAI,KAAKC,cAA4B,mBAAmB;AACxD,MAAI,IAAIC,eAA6B,WAAW;AAChD,MAAI,IAAIA,eAA6B,cAAc;AACnD,MAAI,KAAKC,gBAA8B,SAAS;AAClD;"}

package/dist/handler-CedzJJg0.js

@@ -111,3 +111,4 @@ const handler = (api) => {
 export {
   handler as default
 };
+//# sourceMappingURL=handler-CedzJJg0.js.map

package/dist/handler-CedzJJg0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-CedzJJg0.js","sources":["../src/rts/api/changes/index.ts","../src/rts/api/changes/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/rts/changes\"\n\nexport const requestSchema = z.object({\n  sinceSeq: z.number().int().min(0).default(0),\n  limit: z.number().int().min(1).max(5000).default(2000),\n  modelNames: z.array(z.string().min(1)).optional(),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  ok: z.boolean(),\n  needsFullResync: z.boolean().optional(),\n  earliestSeq: z.number().int().min(0).optional(),\n  latestSeq: z.number().int().min(0),\n  changes: z.array(z.object({\n    seq: z.number().int().min(1),\n    modelName: z.string().min(1),\n    op: z.enum([\"delete\", \"reset_model\"]),\n    docId: z.string().optional(),\n  })),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models, ZRBRtsChangeOp, type IRBRtsChange, type IRBRtsCounter, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, type AclSubjectType } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport * as Changes from \"./index\"\n\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype RtsCounterDoc = IRBRtsCounter\ntype RtsChangeDoc = IRBRtsChange\n\nconst getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(raw) ? raw[0] : raw\n  if (typeof queryTenantId === \"string\" && queryTenantId.trim()) return queryTenantId.trim()\n\n  const sessionTenantId = ctx.req.session?.user?.currentTenantId\n  if (typeof sessionTenantId === \"string\" && sessionTenantId.trim()) return sessionTenantId.trim()\n\n  return null\n}\n\nconst ensureAuthorized = (ctx: Ctx<SessionUser>, tenantId: string): string | null => {\n  const userId = ctx.req.session?.user?.id\n  if (!userId) return null\n\n  const signedInTenants = ctx.req.session?.user?.signedInTenants\n  const currentTenantId = ctx.req.session?.user?.currentTenantId\n\n  const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId)\n\n  const normalizedCurrentTenantId = typeof currentTenantId === \"string\" ? currentTenantId.trim() : \"\"\n  const hasTenantAccessFromCurrent = Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId\n\n  if (!hasTenantAccessFromList && !hasTenantAccessFromCurrent) return null\n  return userId\n}\n\nconst getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nconst isRtsChangeRecord = (value: unknown): value is RtsChangeDoc => {\n  if (!value || typeof value !== \"object\") return false\n  const obj = value as Partial<RtsChangeDoc>\n  const isOp = ZRBRtsChangeOp.safeParse(obj.op).success\n  return typeof obj.seq === \"number\" && typeof obj.modelName === \"string\" && isOp\n}\n\nconst changesHandler: ApiHandler<Changes.RequestPayload, Changes.ResponsePayload, SessionUser> = async(\n  payload,\n  ctx,\n): Promise<Changes.ResponsePayload> => {\n  const parsed = Changes.requestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const userId = ensureAuthorized(ctx, tenantId)\n  if (!userId) {\n    ctx.res.status(401)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId, session: ctx.req.session })\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [RtsChange, RtsCounter] = await Promise.all([\n    models.get(\"RBRtsChange\", modelCtx) as Promise<Model<RtsChangeDoc>>,\n    models.get(\"RBRtsCounter\", modelCtx) as Promise<Model<RtsCounterDoc>>,\n  ])\n\n  const counter = await RtsCounter.findOne({ _id: \"rts\" }, { seq: 1 }).lean()\n  const latestSeq = Number(counter?.seq ?? 0) || 0\n\n  const { sinceSeq, limit, modelNames } = parsed.data\n\n  const requestedModelNames = Array.isArray(modelNames) && modelNames.length\n    ? modelNames.map((m) => String(m)).filter(Boolean)\n    : null\n\n  const allowedModelNames = requestedModelNames\n    ? requestedModelNames.filter((m) => ability.can(\"read\", m as AclSubjectType))\n    : Array.from(\n      new Set(\n        (await RtsChange.distinct(\"modelName\"))\n          .map((m) => String(m))\n          .filter(Boolean)\n          .filter((m) => ability.can(\"read\", m as AclSubjectType)),\n      ),\n    )\n\n  let earliestSeq: number | undefined\n  if (allowedModelNames.length) {\n    const earliest = await RtsChange.findOne({ modelName: { $in: allowedModelNames } }, { seq: 1 }).sort({ seq: 1 }).lean()\n    earliestSeq = earliest?.seq ? Number(earliest.seq) : undefined\n  }\n\n  const needsFullResync = typeof earliestSeq === \"number\" && sinceSeq < earliestSeq - 1\n\n  const selector: Record<string, unknown> = { seq: { $gt: sinceSeq }, modelName: { $in: allowedModelNames } }\n\n  const changes = await RtsChange\n    .find(selector, { _id: 0, seq: 1, modelName: 1, op: 1, docId: 1 })\n    .sort({ seq: 1 })\n    .limit(limit)\n    .lean()\n\n  return {\n    ok: true,\n    needsFullResync: needsFullResync || undefined,\n    earliestSeq,\n    latestSeq,\n    changes: Array.isArray(changes)\n      ? changes\n        .filter(isRtsChangeRecord)\n        .filter((c) => ability.can(\"read\", c.modelName as AclSubjectType))\n        .map((c) => ({\n          seq: Number(c.seq),\n          modelName: String(c.modelName),\n          op: c.op,\n          docId: c.docId ? String(c.docId) : undefined,\n        }))\n      : [],\n  }\n}\n\nexport default (api: Api<SessionUser>) => {\n  api.post(Changes.Route, changesHandler)\n}\n"],"names":["z.object","z.number","z.array","z.string","z.boolean","z.enum","Changes.requestSchema","Changes.Route"],"mappings":";;;AAGO,MAAM,QAAQ;AAEd,MAAM,gBAAgBA,OAAS;AAAA,EACpC,UAAUC,OAAE,EAAS,IAAA,EAAM,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC3C,OAAOA,OAAE,EAAS,IAAA,EAAM,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,QAAQ,GAAI;AAAA,EACrD,YAAYC,MAAQC,OAAE,EAAS,IAAI,CAAC,CAAC,EAAE,SAAA;AACzC,CAAC;AAI6BH,OAAS;AAAA,EACrC,IAAII,QAAE;AAAA,EACN,iBAAiBA,QAAE,EAAU,SAAA;AAAA,EAC7B,aAAaH,OAAE,EAAS,MAAM,IAAI,CAAC,EAAE,SAAA;AAAA,EACrC,WAAWA,OAAE,EAAS,IAAA,EAAM,IAAI,CAAC;AAAA,EACjC,SAASC,MAAQF,OAAS;AAAA,IACxB,KAAKC,OAAE,EAAS,IAAA,EAAM,IAAI,CAAC;AAAA,IAC3B,WAAWE,OAAE,EAAS,IAAI,CAAC;AAAA,IAC3B,IAAIE,MAAO,CAAC,UAAU,aAAa,CAAC;AAAA,IACpC,OAAOF,OAAE,EAAS,SAAA;AAAA,EAAS,CAC5B,CAAC;AACJ,CAAC;ACPD,MAAM,cAAc,CAAC,QAAyC;AAC5D,QAAM,MAAM,IAAI,IAAI,QAAQ,cAAc;AAC1C,QAAM,gBAAgB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AACpD,MAAI,OAAO,kBAAkB,YAAY,cAAc,OAAQ,QAAO,cAAc,KAAA;AAEpF,QAAM,kBAAkB,IAAI,IAAI,SAAS,MAAM;AAC/C,MAAI,OAAO,oBAAoB,YAAY,gBAAgB,OAAQ,QAAO,gBAAgB,KAAA;AAE1F,SAAO;AACT;AAEA,MAAM,mBAAmB,CAAC,KAAuB,aAAoC;AACnF,QAAM,SAAS,IAAI,IAAI,SAAS,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,kBAAkB,IAAI,IAAI,SAAS,MAAM;AAC/C,QAAM,kBAAkB,IAAI,IAAI,SAAS,MAAM;AAE/C,QAAM,0BAA0B,MAAM,QAAQ,eAAe,KAAK,gBAAgB,SAAS,QAAQ;AAEnG,QAAM,4BAA4B,OAAO,oBAAoB,WAAW,gBAAgB,SAAS;AACjG,QAAM,6BAA6B,QAAQ,yBAAyB,KAAK,8BAA8B;AAEvG,MAAI,CAAC,2BAA2B,CAAC,2BAA4B,QAAO;AACpE,SAAO;AACT;AAEA,MAAM,cAAc,CAAC,MAAwB,cAAoC;AAAA,EAC/E,KAAK;AAAA,IACH,SAAS;AAAA,MACP,MAAM;AAAA,QACJ,iBAAiB;AAAA,MAAA;AAAA,IACnB;AAAA,EACF;AAEJ;AAEA,MAAM,oBAAoB,CAAC,UAA0C;AACnE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,MAAM;AACZ,QAAM,OAAO,eAAe,UAAU,IAAI,EAAE,EAAE;AAC9C,SAAO,OAAO,IAAI,QAAQ,YAAY,OAAO,IAAI,cAAc,YAAY;AAC7E;AAEA,MAAM,iBAA2F,OAC/F,SACA,QACqC;AACrC,QAAM,SAASG,cAAsB,UAAU,WAAW,CAAA,CAAE;AAC5D,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,WAAW,GAAG,SAAS,GAAC;AAAA,EAC9C;AAEA,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,WAAW,GAAG,SAAS,GAAC;AAAA,EAC9C;AAEA,QAAM,SAAS,iBAAiB,KAAK,QAAQ;AAC7C,MAAI,CAAC,QAAQ;AACX,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,WAAW,GAAG,SAAS,GAAC;AAAA,EAC9C;AAEA,QAAM,UAAU,wBAAwB,EAAE,UAAU,SAAS,IAAI,IAAI,SAAS;AAE9E,QAAM,WAAW,YAAY,KAAK,QAAQ;AAE1C,QAAM,CAAC,WAAW,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA,IAChD,OAAO,IAAI,eAAe,QAAQ;AAAA,IAClC,OAAO,IAAI,gBAAgB,QAAQ;AAAA,EAAA,CACpC;AAED,QAAM,UAAU,MAAM,WAAW,QAAQ,EAAE,KAAK,MAAA,GAAS,EAAE,KAAK,EAAA,CAAG,EAAE,KAAA;AACrE,QAAM,YAAY,OAAO,SAAS,OAAO,CAAC,KAAK;AAE/C,QAAM,EAAE,UAAU,OAAO,WAAA,IAAe,OAAO;AAE/C,QAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,WAAW,SAChE,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO,OAAO,IAC/C;AAEJ,QAAM,oBAAoB,sBACtB,oBAAoB,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ,CAAmB,CAAC,IAC1E,MAAM;AAAA,IACN,IAAI;AAAA,OACD,MAAM,UAAU,SAAS,WAAW,GAClC,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,EACpB,OAAO,OAAO,EACd,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ,CAAmB,CAAC;AAAA,IAAA;AAAA,EAC3D;AAGJ,MAAI;AACJ,MAAI,kBAAkB,QAAQ;AAC5B,UAAM,WAAW,MAAM,UAAU,QAAQ,EAAE,WAAW,EAAE,KAAK,kBAAA,EAAkB,GAAK,EAAE,KAAK,EAAA,CAAG,EAAE,KAAK,EAAE,KAAK,EAAA,CAAG,EAAE,KAAA;AACjH,kBAAc,UAAU,MAAM,OAAO,SAAS,GAAG,IAAI;AAAA,EACvD;AAEA,QAAM,kBAAkB,OAAO,gBAAgB,YAAY,WAAW,cAAc;AAEpF,QAAM,WAAoC,EAAE,KAAK,EAAE,KAAK,SAAA,GAAY,WAAW,EAAE,KAAK,oBAAkB;AAExG,QAAM,UAAU,MAAM,UACnB,KAAK,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,WAAW,GAAG,IAAI,GAAG,OAAO,GAAG,EAChE,KAAK,EAAE,KAAK,EAAA,CAAG,EACf,MAAM,KAAK,EACX,KAAA;AAEH,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,iBAAiB,mBAAmB;AAAA,IACpC;AAAA,IACA;AAAA,IACA,SAAS,MAAM,QAAQ,OAAO,IAC1B,QACC,OAAO,iBAAiB,EACxB,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ,EAAE,SAA2B,CAAC,EAChE,IAAI,CAAC,OAAO;AAAA,MACX,KAAK,OAAO,EAAE,GAAG;AAAA,MACjB,WAAW,OAAO,EAAE,SAAS;AAAA,MAC7B,IAAI,EAAE;AAAA,MACN,OAAO,EAAE,QAAQ,OAAO,EAAE,KAAK,IAAI;AAAA,IAAA,EACnC,IACF,CAAA;AAAA,EAAC;AAET;AAEA,MAAA,UAAe,CAAC,QAA0B;AACxC,MAAI,KAAKC,OAAe,cAAc;AACxC;"}

package/dist/handler-Cohj3cz3.js

@@ -173,3 +173,4 @@ const handler = (api) => {
 export {
   handler as default
 };
+//# sourceMappingURL=handler-Cohj3cz3.js.map

package/dist/handler-Cohj3cz3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-Cohj3cz3.js","sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n  if (!authorizedByUser && !authorizedByKey) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  try {\n    await bucket.delete(fileObjectId)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    if (!message.includes(\"FileNotFound\")) {\n      ctx.res.status(500)\n      return { ok: false, error: \"delete_failed\" }\n    }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst resolveHeaderBoolean = (value: unknown): boolean | null => {\n  if (typeof value === \"boolean\") return value\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim().toLowerCase()\n  if (!normalized) return null\n  if (normalized === \"true\") return true\n  if (normalized === \"false\") return false\n  return null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const isPublic = resolveHeaderBoolean((file as any)?.metadata?.isPublic) ?? false\n  if (!isPublic) {\n    const userId = getUserId(ctx)\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n    const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n    if (!authorizedByUser && !authorizedByKey) {\n      ctx.res.status(401).end()\n      return {}\n    }\n  }\n\n  const mimeTypeFromMetadata = resolveHeaderString((file as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString((file as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((file as any)?.md5)\n  const uploadDate = (file as any)?.uploadDate instanceof Date ? (file as any).uploadDate : null\n  const etagValue = md5 ?? `${fileObjectId.toHexString()}-${String((file as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((file as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(fileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const Route = \"/api/rb/files/:fileId\"\n\nexport const GetRoute = Route\nexport const DeleteRoute = Route\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.GetRoute, getFile)\n  api.delete(Files.DeleteRoute, deleteFile)\n}\n"],"names":["resolveHeaderString","Files.GetRoute","Files.DeleteRoute"],"mappings":";;;AAYA,MAAMA,wBAAsB,CAAC,UAAkC;AAC7D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEO,MAAM,aAAoF,OAC/F,UACA,QACmC;AACnC,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,EAC7B;AAEA,QAAM,YAAY,OAAO,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,KAAA;AACvD,MAAI;AACJ,MAAI;AACF,mBAAe,IAAI,SAAS,SAAS;AAAA,EACvC,QAAQ;AACN,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,OAAO,MAAM,sBAAsB,QAAQ;AACjD,QAAM,WAAW,KAAK;AACtB,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,4BAAA;AAAA,EAC7B;AAEA,QAAM,aAAa,cAAA;AACnB,QAAM,SAAS,IAAI,aAAa,UAAU,EAAE,YAAY;AAExD,QAAM,SAAS,UAAU,GAAG;AAC5B,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,MAAI,CAAC,UAAU,CAAC,eAAe;AAC7B,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,CAAC,IAAI,IAAI,MAAM,OAAO,KAAK,EAAE,KAAK,aAAA,CAAc,EAAE,MAAM,CAAC,EAAE,QAAA;AACjE,MAAI,CAAC,MAAM;AACT,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,KAAA;AAAA,EACf;AAEA,QAAM,iBAAiBA,sBAAqB,MAAc,UAAU,MAAM;AAC1E,QAAM,eAAeA,sBAAqB,MAAc,UAAU,YAAY;AAE9E,QAAM,mBAAmB,QAAQ,UAAU,kBAAkB,WAAW,cAAc;AACtF,QAAM,kBAAkB,QAAQ,iBAAiB,gBAAgB,kBAAkB,YAAY;AAE/F,MAAI,CAAC,oBAAoB,CAAC,iBAAiB;AACzC,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,MAAI;AACF,UAAM,OAAO,OAAO,YAAY;AAAA,EAClC,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAI,CAAC,QAAQ,SAAS,cAAc,GAAG;AACrC,UAAI,IAAI,OAAO,GAAG;AAClB,aAAO,EAAE,IAAI,OAAO,OAAO,gBAAA;AAAA,IAC7B;AAAA,EACF;AAEA,MAAI,IAAI,OAAO,GAAG;AAClB,SAAO,EAAE,IAAI,KAAA;AACf;AC5EA,MAAM,sBAAsB,CAAC,UAAkC;AAC7D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA;AACzB,SAAO,aAAa,aAAa;AACnC;AAEA,MAAM,uBAAuB,CAAC,UAAmC;AAC/D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,aAAa,MAAM,KAAA,EAAO,YAAA;AAChC,MAAI,CAAC,WAAY,QAAO;AACxB,MAAI,eAAe,OAAQ,QAAO;AAClC,MAAI,eAAe,QAAS,QAAO;AACnC,SAAO;AACT;AAEA,MAAM,uBAAuB,CAAC,aAA6B,SAAS,QAAQ,UAAU,GAAG;AAElF,MAAM,UAAiF,OAC5F,UACA,QACmC;AACnC,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG,EAAE,IAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,YAAY,OAAO,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,KAAA;AACvD,MAAI;AACJ,MAAI;AACF,mBAAe,IAAI,SAAS,SAAS;AAAA,EACvC,QAAQ;AACN,QAAI,IAAI,OAAO,GAAG,EAAE,IAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,OAAO,MAAM,sBAAsB,QAAQ;AACjD,QAAM,WAAW,KAAK;AACtB,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG,EAAE,IAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,aAAa,cAAA;AACnB,QAAM,SAAS,IAAI,aAAa,UAAU,EAAE,YAAY;AAExD,QAAM,CAAC,IAAI,IAAI,MAAM,OAAO,KAAK,EAAE,KAAK,aAAA,CAAc,EAAE,MAAM,CAAC,EAAE,QAAA;AACjE,MAAI,CAAC,MAAM;AACT,QAAI,IAAI,OAAO,GAAG,EAAE,IAAA;AACpB,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,WAAW,qBAAsB,MAAc,UAAU,QAAQ,KAAK;AAC5E,MAAI,CAAC,UAAU;AACb,UAAM,SAAS,UAAU,GAAG;AAC5B,UAAM,gBAAgB,iBAAiB,GAAG;AAC1C,UAAM,iBAAiB,oBAAqB,MAAc,UAAU,MAAM;AAC1E,UAAM,eAAe,oBAAqB,MAAc,UAAU,YAAY;AAE9E,UAAM,mBAAmB,QAAQ,UAAU,kBAAkB,WAAW,cAAc;AACtF,UAAM,kBAAkB,QAAQ,iBAAiB,gBAAgB,kBAAkB,YAAY;AAE/F,QAAI,CAAC,oBAAoB,CAAC,iBAAiB;AACzC,UAAI,IAAI,OAAO,GAAG,EAAE,IAAA;AACpB,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA,QAAM,uBAAuB,oBAAqB,MAAc,UAAU,QAAQ;AAClF,QAAM,WAAW,wBAAwB;AACzC,QAAM,iBAAiB,oBAAqB,MAAc,QAAQ;AAClE,QAAM,WAAW,kBAAkB;AACnC,QAAM,eAAe,qBAAqB,QAAQ;AAElD,QAAM,eAAe;AACrB,QAAM,MAAM,oBAAqB,MAAc,GAAG;AAClD,QAAM,aAAc,MAAc,sBAAsB,OAAQ,KAAa,aAAa;AAC1F,QAAM,YAAY,OAAO,GAAG,aAAa,YAAA,CAAa,IAAI,OAAQ,MAAc,UAAU,CAAC,CAAC,IAAI,OAAO,YAAY,QAAA,KAAa,CAAC,CAAC;AAClI,QAAM,OAAO,MAAM,IAAI,SAAS,MAAM,MAAM,SAAS;AACrD,QAAM,cAAc,oBAAqB,IAAI,IAAI,UAAkB,eAAe,CAAC;AACnF,MAAI,aAAa;AACf,UAAM,aAAa,YAAY,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAA,CAAM,EAAE,OAAO,OAAO;AACrF,QAAI,WAAW,SAAS,GAAG,KAAK,WAAW,SAAS,IAAI,GAAG;AACzD,UAAI,IAAI,OAAO,GAAG;AAClB,UAAI,IAAI,UAAU,iBAAiB,YAAY;AAC/C,UAAI,IAAI,UAAU,QAAQ,IAAI;AAC9B,UAAI,IAAI,IAAA;AACR,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AAEA,MAAI,IAAI,OAAO,GAAG;AAClB,MAAI,IAAI,UAAU,gBAAgB,QAAQ;AAC1C,MAAI,IAAI,UAAU,kBAAkB,OAAQ,MAAc,UAAU,CAAC,CAAC;AACtE,MAAI,IAAI,UAAU,uBAAuB,qBAAqB,YAAY,GAAG;AAC7E,MAAI,IAAI,UAAU,iBAAiB,YAAY;AAC/C,MAAI,IAAI,UAAU,QAAQ,IAAI;AAC9B,MAAI,IAAI,UAAU,0BAA0B,SAAS;AACrD,MAAI,aAAa,iBAAiB;AAChC,QAAI,IAAI;AAAA,MACN;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AACA,MAAI,IAAI,aAAA;AAER,MAAI,IAAI,IAAI,WAAW,QAAQ;AAC7B,QAAI,IAAI,IAAA;AACR,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,SAAS,OAAO,mBAAmB,YAAY;AAErD,SAAO,GAAG,SAAS,MAAM;AACvB,QAAI;AACF,UAAI,IAAI,QAAA;AAAA,IACV,QAAQ;AAAA,IAER;AAAA,EACF,CAAC;AAED,SAAO,KAAK,IAAI,GAAG;AACnB,SAAO,CAAA;AACT;ACnIO,MAAM,QAAQ;AAEd,MAAM,WAAW;AACjB,MAAM,cAAc;ACK3B,MAAA,UAAe,CAAC,QAAa;AAC3B,MAAI,IAAIC,UAAgB,OAAO;AAC/B,MAAI,OAAOC,aAAmB,UAAU;AAC1C;"}

package/dist/handler-qCAUmVgd.js

@@ -681,3 +681,4 @@ const handler = (api) => {
 export {
   handler as default
 };
+//# sourceMappingURL=handler-qCAUmVgd.js.map

package/dist/handler-qCAUmVgd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-qCAUmVgd.js","sources":["../src/uploads/api/file-uploads/processors/sanitizeSvg.ts","../src/uploads/api/file-uploads/processors/index.ts","../src/uploads/api/file-uploads/handlers/completeUpload.ts","../src/uploads/api/file-uploads/handlers/getStatus.ts","../src/uploads/api/file-uploads/index.ts","../src/uploads/api/file-uploads/handlers/initUpload.ts","../src/uploads/api/file-uploads/handlers/uploadChunk.ts","../src/uploads/api/file-uploads/middleware/rawBodyParser.ts","../src/uploads/api/file-uploads/handler.ts"],"sourcesContent":["import { JSDOM } from \"jsdom\"\nimport createDOMPurify from \"dompurify\"\n\nimport type { UploadFileProcessor } from \"./index\"\n\n\nconst MAX_SVG_BYTES = 128 * 1024\n\nconst window = new JSDOM(\"\").window\nconst DOMPurify = createDOMPurify(window)\n\nconst normalizeForSniff = (raw: string): string => raw.replace(/^\\uFEFF/, \"\").trimStart()\n\nconst looksLikeSvgText = (text: string): boolean => {\n  const normalized = normalizeForSniff(text)\n  if (!normalized.startsWith(\"<\")) return false\n  return /<svg(?:\\s|>)/i.test(normalized)\n}\n\nexport const looksLikeSvg = (sniff: Buffer): boolean => looksLikeSvgText(sniff.toString(\"utf8\"))\n\nexport const sanitizeSvg = (svg: string): string =>\n  DOMPurify.sanitize(svg, {\n    USE_PROFILES: { svg: true, svgFilters: true },\n  })\n\nexport const sanitizeSvgProcessor: UploadFileProcessor = {\n  id: \"sanitize-svg\",\n  maxBytes: MAX_SVG_BYTES,\n  match: ({ sniff }) => looksLikeSvg(sniff),\n  process: (data): { data: Buffer; mimeType: string } => {\n    if (data.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const svgText = data.toString(\"utf8\")\n    if (!looksLikeSvgText(svgText)) {\n      throw new Error(\"svg_invalid\")\n    }\n\n    const sanitized = sanitizeSvg(svgText)\n    if (!sanitized.trim() || !looksLikeSvgText(sanitized)) {\n      throw new Error(\"svg_sanitize_failed\")\n    }\n\n    const sanitizedBuffer = Buffer.from(sanitized, \"utf8\")\n    if (sanitizedBuffer.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    return { data: sanitizedBuffer, mimeType: \"image/svg+xml\" }\n  },\n}\n\n","import { sanitizeSvgProcessor } from \"./sanitizeSvg\"\n\n\nexport type UploadFileProcessorContext = {\n  filename: string\n  clientMimeType: string\n  totalSize: number\n  sniff: Buffer\n}\n\nexport type UploadFileProcessorResult = {\n  data: Buffer\n  mimeType?: string\n}\n\nexport type UploadFileProcessor = {\n  id: string\n  maxBytes: number\n  match: (ctx: UploadFileProcessorContext) => boolean\n  process: (data: Buffer, ctx: UploadFileProcessorContext) => Promise<UploadFileProcessorResult> | UploadFileProcessorResult\n}\n\nexport const uploadProcessors = Object.freeze([sanitizeSvgProcessor] satisfies UploadFileProcessor[])\n\nexport const getMaxUploadProcessorBytes = (): number =>\n  uploadProcessors.reduce((max, processor) => Math.max(max, processor.maxBytes), 0)\n\nexport const selectUploadProcessors = (ctx: UploadFileProcessorContext): UploadFileProcessor[] =>\n  uploadProcessors.filter((processor) => processor.match(ctx))\n\nexport const applyUploadProcessors = async (\n  data: Buffer,\n  ctx: Omit<UploadFileProcessorContext, \"sniff\" | \"totalSize\">,\n): Promise<{ data: Buffer; mimeType: string; applied: string[] }> => {\n  let currentData = data\n  let currentMimeType = ctx.clientMimeType\n  const applied: string[] = []\n\n  for (const processor of uploadProcessors) {\n    const processorCtx: UploadFileProcessorContext = {\n      filename: ctx.filename,\n      clientMimeType: currentMimeType,\n      totalSize: currentData.length,\n      sniff: currentData,\n    }\n\n    if (!processor.match(processorCtx)) continue\n\n    if (currentData.length > processor.maxBytes) {\n      throw new Error(\"processor_input_too_large\")\n    }\n\n    const result = await processor.process(currentData, processorCtx)\n    currentData = result.data\n    if (typeof result.mimeType === \"string\" && result.mimeType.trim()) {\n      currentMimeType = result.mimeType.trim()\n    }\n    applied.push(processor.id)\n  }\n\n  return {\n    data: currentData,\n    mimeType: currentMimeType,\n    applied,\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { GridFSBucket } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport { applyUploadProcessors, getMaxUploadProcessorBytes, selectUploadProcessors } from \"../processors\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  ensureUploadIndexes,\n  getBucketName,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nconst waitForStreamFinished = async (stream: NodeJS.WritableStream): Promise<void> => new Promise((resolve, reject) => {\n  stream.once(\"finish\", resolve)\n  stream.once(\"error\", reject)\n})\n\nconst writeToStream = async (stream: NodeJS.WritableStream, chunk: Buffer): Promise<void> => {\n  const ok = stream.write(chunk)\n  if (ok) return\n  await new Promise<void>((resolve, reject) => {\n    const onDrain = () => {\n      cleanup()\n      resolve()\n    }\n\n    const onError = (error: unknown) => {\n      cleanup()\n      reject(error)\n    }\n\n    const cleanup = () => {\n      stream.off(\"drain\", onDrain)\n      stream.off(\"error\", onError)\n    }\n\n    stream.on(\"drain\", onDrain)\n    stream.on(\"error\", onError)\n  })\n}\n\nconst abortUploadStream = async (stream: unknown): Promise<void> => {\n  if (!stream) return\n  if (typeof (stream as { abort?: unknown }).abort === \"function\") {\n    try {\n      await (stream as { abort: () => Promise<void> | void }).abort()\n      return\n    } catch {\n      //\n    }\n  }\n  try {\n    ;(stream as { destroy?: () => void }).destroy?.()\n  } catch {\n    //\n  }\n}\n\nexport const completeUpload: ApiHandler<Record<string, never>, Uploads.CompleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.CompleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const existing = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!existing) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (existing.status === \"done\" && existing.fileId) {\n    return { ok: true, fileId: existing.fileId }\n  }\n\n  const locked = await UploadSession.findOneAndUpdate(\n    { $and: [{ _id: uploadId }, { status: \"uploading\" }, getUploadSessionAccessQuery(ability, \"update\")] },\n    { $set: { status: \"assembling\" }, $unset: { error: \"\" } },\n    { new: true },\n  ).lean()\n\n  if (!locked) {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: \"filesystem_db_unavailable\" } },\n    )\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const lockedUserId = typeof locked.userId === \"string\" ? locked.userId : undefined\n  const maxProcessorBytes = getMaxUploadProcessorBytes()\n  const shouldBufferForProcessing = locked.totalSize <= maxProcessorBytes\n  const declaredMimeType = locked.mimeType.trim().toLowerCase()\n  const declaredSvg = declaredMimeType === \"image/svg+xml\" || locked.filename.trim().toLowerCase().endsWith(\".svg\")\n\n  let uploadStream: NodeJS.WritableStream | null = null\n\n  try {\n    if (!shouldBufferForProcessing && declaredSvg) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const cursor = UploadChunk.find({ uploadId }).sort({ index: 1 }).cursor() as unknown as AsyncIterable<UploadChunkDoc> & {\n      close: () => Promise<void>\n    }\n\n    let expectedIndex = 0\n    const chunks: Buffer[] = []\n    let bufferedBytes = 0\n\n    const pendingChunks: Buffer[] = []\n    const sniffParts: Buffer[] = []\n    let sniffBytes = 0\n\n    try {\n      for await (const chunkDoc of cursor) {\n        if (chunkDoc.index !== expectedIndex) {\n          throw new Error(\"missing_chunks\")\n        }\n\n        const chunk = chunkDoc.data\n\n        if (shouldBufferForProcessing) {\n          chunks.push(chunk)\n          bufferedBytes += chunk.length\n        } else if (!uploadStream) {\n          pendingChunks.push(chunk)\n\n          if (sniffBytes < maxProcessorBytes) {\n            const slice = chunk.subarray(0, Math.min(chunk.length, maxProcessorBytes - sniffBytes))\n            if (slice.length) {\n              sniffParts.push(slice)\n              sniffBytes += slice.length\n            }\n          }\n\n          if (sniffBytes >= maxProcessorBytes) {\n            const sniff = Buffer.concat(sniffParts, sniffBytes)\n            const processors = selectUploadProcessors({\n              filename: locked.filename,\n              clientMimeType: locked.mimeType,\n              totalSize: locked.totalSize,\n              sniff,\n            })\n\n            if (processors.length) {\n              throw new Error(\"svg_too_large\")\n            }\n\n            uploadStream = bucket.openUploadStream(locked.filename, {\n              metadata: {\n                uploadId,\n                tenantId,\n                mimeType: locked.mimeType,\n                totalSize: locked.totalSize,\n                ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n                ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n                ...(lockedUserId ? { userId: lockedUserId } : {}),\n              },\n            })\n\n            for (const pending of pendingChunks) {\n              await writeToStream(uploadStream, pending)\n            }\n            pendingChunks.length = 0\n          }\n        } else {\n          await writeToStream(uploadStream, chunk)\n        }\n\n        expectedIndex += 1\n      }\n    } finally {\n      try {\n        await cursor.close()\n      } catch {\n        //\n      }\n    }\n\n    if (expectedIndex !== locked.chunksTotal) {\n      throw new Error(\"missing_chunks\")\n    }\n\n    if (shouldBufferForProcessing) {\n      const assembled = Buffer.concat(chunks, bufferedBytes)\n      const { data: processed, mimeType: processedMimeType, applied } = await applyUploadProcessors(assembled, {\n        filename: locked.filename,\n        clientMimeType: locked.mimeType,\n      })\n\n      uploadStream = bucket.openUploadStream(locked.filename, {\n        metadata: {\n          uploadId,\n          tenantId,\n          mimeType: processedMimeType,\n          totalSize: locked.totalSize,\n          ...(applied.length ? { processors: applied, processedSize: processed.length } : {}),\n          ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n          ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n          ...(lockedUserId ? { userId: lockedUserId } : {}),\n        },\n      })\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end(processed)\n      await finished\n    } else {\n      if (!uploadStream) {\n        const sniff = Buffer.concat(sniffParts, sniffBytes)\n        const processors = selectUploadProcessors({\n          filename: locked.filename,\n          clientMimeType: locked.mimeType,\n          totalSize: locked.totalSize,\n          sniff,\n        })\n\n        if (processors.length) {\n          throw new Error(\"svg_too_large\")\n        }\n\n        uploadStream = bucket.openUploadStream(locked.filename, {\n          metadata: {\n            uploadId,\n            tenantId,\n            mimeType: locked.mimeType,\n            totalSize: locked.totalSize,\n            ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n            ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n            ...(lockedUserId ? { userId: lockedUserId } : {}),\n          },\n        })\n\n        for (const pending of pendingChunks) {\n          await writeToStream(uploadStream, pending)\n        }\n        pendingChunks.length = 0\n      }\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end()\n      await finished\n    }\n\n    const fileId = String((uploadStream as unknown as { id?: unknown }).id ?? \"\")\n    if (!fileId) {\n      throw new Error(\"missing_file_id\")\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"done\", fileId }, $unset: { error: \"\" } },\n    )\n\n    try {\n      await UploadChunk.deleteMany({ uploadId })\n    } catch {\n      //\n    }\n\n    return { ok: true, fileId }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n\n    await abortUploadStream(uploadStream)\n\n    if (message === \"missing_chunks\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"uploading\" } },\n      )\n      ctx.res.status(409)\n      return { ok: false, error: \"missing_chunks\" }\n    }\n\n    if (message === \"svg_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_invalid\" || message === \"svg_sanitize_failed\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: message } },\n    )\n\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nexport const getStatus: ApiHandler<Record<string, never>, Uploads.StatusResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.StatusResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  if (!ability.can(\"read\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  const receivedDocs = await UploadChunk.find(\n    { uploadId },\n    { index: 1, _id: 0 },\n  ).sort({ index: 1 }).lean()\n\n  const received = (receivedDocs as unknown as Array<{ index?: unknown }>)\n    .map((doc) => (typeof doc.index === \"number\" ? doc.index : -1))\n    .filter((n) => Number.isInteger(n) && n >= 0)\n\n  return {\n    ok: true,\n    status: session.status,\n    chunkSize: session.chunkSize,\n    chunksTotal: session.chunksTotal,\n    received,\n    ...(session.fileId ? { fileId: session.fileId } : {}),\n  }\n}\n","import { z } from \"zod\"\n\n\nexport const InitRoute = \"/api/rb/file-uploads\"\nexport const ChunkRoute = \"/api/rb/file-uploads/:uploadId/chunks/:index\"\nexport const StatusRoute = \"/api/rb/file-uploads/:uploadId/status\"\nexport const CompleteRoute = \"/api/rb/file-uploads/:uploadId/complete\"\n\nexport const initRequestSchema = z.object({\n  filename: z.string().min(1),\n  mimeType: z.string().min(1),\n  isPublic: z.boolean().optional(),\n  totalSize: z.number().int().min(1),\n})\n\nexport type InitRequestPayload = z.infer<typeof initRequestSchema>\n\nexport const initResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  uploadId: z.string().optional(),\n  uploadKey: z.string().optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n})\n\nexport type InitResponsePayload = z.infer<typeof initResponseSchema>\n\nexport const statusResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  status: z.enum([\"uploading\", \"assembling\", \"done\", \"error\"]).optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  received: z.array(z.number().int().min(0)).optional(),\n  fileId: z.string().optional(),\n})\n\nexport type StatusResponsePayload = z.infer<typeof statusResponseSchema>\n\nexport const completeResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  fileId: z.string().optional(),\n})\n\nexport type CompleteResponsePayload = z.infer<typeof completeResponseSchema>\n","import { randomBytes } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport { ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getChunkSizeBytes,\n  getModelCtx,\n  getSessionTtlMs,\n  getTenantId,\n  getUserId,\n} from \"../shared\"\n\n\nexport const initUpload: ApiHandler<Uploads.InitRequestPayload, Uploads.InitResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<Uploads.InitResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const userId = getUserId(ctx)\n\n  const parsed = Uploads.initRequestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const chunkSize = getChunkSizeBytes()\n  const { filename, mimeType, totalSize, isPublic } = parsed.data\n  const chunksTotal = Math.ceil(totalSize / chunkSize)\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const uploadId = new ObjectId().toString()\n  const now = Date.now()\n  const expiresAt = new Date(now + getSessionTtlMs())\n\n  const uploadKey = userId ? null : randomBytes(32).toString(\"base64url\")\n  const ownerKeyHash = uploadKey ? computeSha256Hex(Buffer.from(uploadKey)) : undefined\n\n  await UploadSession.create({\n    _id: uploadId,\n    ...(userId ? { userId } : {}),\n    ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    filename,\n    mimeType,\n    ...(typeof isPublic === \"boolean\" ? { isPublic } : {}),\n    totalSize,\n    chunkSize,\n    chunksTotal,\n    status: \"uploading\",\n    createdAt: new Date(now),\n    expiresAt,\n  })\n\n  return {\n    ok: true,\n    uploadId,\n    chunkSize,\n    chunksTotal,\n    ...(uploadKey ? { uploadKey } : {}),\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  normalizeSha256Hex,\n  toBufferPayload,\n} from \"../shared\"\n\n\ntype ChunkResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nexport const uploadChunk: ApiHandler<Buffer, ChunkResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<ChunkResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  const indexRaw = String(ctx.req.params?.index ?? \"\").trim()\n  const index = Number(indexRaw)\n\n  if (!uploadId || !Number.isInteger(index) || index < 0) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_ref\" }\n  }\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (session.status !== \"uploading\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  if (index >= session.chunksTotal) {\n    ctx.res.status(400)\n    return { ok: false, error: \"index_out_of_range\" }\n  }\n\n  const data = toBufferPayload(payload)\n  if (!data) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_body\" }\n  }\n\n  const expectedSize = index === session.chunksTotal - 1\n    ? session.totalSize - session.chunkSize * (session.chunksTotal - 1)\n    : session.chunkSize\n\n  if (data.length > expectedSize) {\n    ctx.res.status(413)\n    return { ok: false, error: \"chunk_too_large\" }\n  }\n\n  if (data.length !== expectedSize) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_size\" }\n  }\n\n  const checksumHeader = ctx.req.get(\"X-Chunk-SHA256\")\n  const sha256 = checksumHeader ? computeSha256Hex(data) : undefined\n\n  if (checksumHeader) {\n    const expectedSha256 = normalizeSha256Hex(checksumHeader)\n    if (sha256 !== expectedSha256) {\n      ctx.res.status(400)\n      return { ok: false, error: \"checksum_mismatch\" }\n    }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  await UploadChunk.updateOne(\n    { uploadId, index },\n    {\n      $set: {\n        uploadId,\n        index,\n        data,\n        size: data.length,\n        sha256,\n        expiresAt: session.expiresAt,\n      },\n      $setOnInsert: {\n        createdAt: new Date(),\n      },\n    },\n    { upsert: true },\n  )\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","export const rawBodyParser = ({\n  limitBytes,\n  maxClientBytesPerSecond,\n}: {\n  limitBytes: number\n  maxClientBytesPerSecond?: number | null\n}) => {\n  return (req: any, res: any, next: any) => {\n    const contentType = typeof req?.headers?.[\"content-type\"] === \"string\"\n      ? String(req.headers[\"content-type\"])\n      : \"\"\n\n    if (!contentType.includes(\"application/octet-stream\")) {\n      next()\n      return\n    }\n\n    let total = 0\n    const chunks: Buffer[] = []\n    let done = false\n    let paused = false\n    let throttleTimeout: ReturnType<typeof setTimeout> | null = null\n\n    const rateBytesPerSecond = typeof maxClientBytesPerSecond === \"number\" && maxClientBytesPerSecond > 0\n      ? maxClientBytesPerSecond\n      : null\n\n    const cleanup = () => {\n      req.off(\"data\", onData)\n      req.off(\"end\", onEnd)\n      req.off(\"error\", onError)\n      req.off(\"aborted\", onAborted)\n      if (throttleTimeout) {\n        clearTimeout(throttleTimeout)\n        throttleTimeout = null\n      }\n    }\n\n    const finish = (error?: unknown) => {\n      if (done) return\n      done = true\n\n      cleanup()\n\n      if (error) {\n        next(error)\n        return\n      }\n\n      req.body = Buffer.concat(chunks, total)\n      next()\n    }\n\n    const onData = (chunk: any) => {\n      if (done) return\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n      total += buffer.length\n\n      if (total > limitBytes) {\n        done = true\n        cleanup()\n        req.destroy()\n        res.status(413).json({ ok: false, error: \"chunk_too_large\" })\n        return\n      }\n\n      chunks.push(buffer)\n\n      if (!rateBytesPerSecond) return\n\n      const now = Date.now()\n      const clientKey = getClientKey(req)\n      const state = getClientRateState(clientKey, rateBytesPerSecond, now)\n      const waitMs = consumeRateBudget(state, buffer.length, rateBytesPerSecond, now)\n\n      if (waitMs > 0 && !paused) {\n        paused = true\n        req.pause()\n        throttleTimeout = setTimeout(() => {\n          throttleTimeout = null\n          paused = false\n          if (done) return\n          try {\n            req.resume()\n          } catch {\n            //\n          }\n        }, waitMs)\n      }\n    }\n\n    const onEnd = () => finish()\n    const onError = (err: unknown) => finish(err)\n    const onAborted = () => finish(new Error(\"request_aborted\"))\n\n    req.on(\"data\", onData)\n    req.on(\"end\", onEnd)\n    req.on(\"error\", onError)\n    req.on(\"aborted\", onAborted)\n  }\n}\n\ntype ClientRateState = {\n  tokens: number\n  lastRefillMs: number\n  lastSeenMs: number\n}\n\nconst MAX_BURST_SECONDS = 1\nconst STALE_CLIENT_MS = 15 * 60 * 1000\n\nconst clientRateStates = new Map<string, ClientRateState>()\nlet lastCleanupMs = 0\n\nconst getClientKey = (req: any): string => {\n  const rawClientIp = typeof req?.clientIp === \"string\" ? req.clientIp : \"\"\n  if (rawClientIp.trim()) return rawClientIp.trim()\n  const rawIp = typeof req?.ip === \"string\" ? req.ip : \"\"\n  return rawIp.trim() || \"unknown\"\n}\n\nconst maybeCleanupStates = (now: number) => {\n  if (now - lastCleanupMs < 60_000) return\n  lastCleanupMs = now\n\n  if (clientRateStates.size < 2000) return\n\n  for (const [key, state] of clientRateStates) {\n    if (now - state.lastSeenMs > STALE_CLIENT_MS) {\n      clientRateStates.delete(key)\n    }\n  }\n}\n\nconst getClientRateState = (key: string, rateBytesPerSecond: number, now: number): ClientRateState => {\n  maybeCleanupStates(now)\n\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const existing = clientRateStates.get(key)\n  if (existing) {\n    existing.lastSeenMs = now\n    existing.tokens = Math.min(capacity, existing.tokens)\n    return existing\n  }\n\n  const next: ClientRateState = {\n    tokens: capacity,\n    lastRefillMs: now,\n    lastSeenMs: now,\n  }\n  clientRateStates.set(key, next)\n  return next\n}\n\nconst consumeRateBudget = (\n  state: ClientRateState,\n  bytes: number,\n  rateBytesPerSecond: number,\n  now: number,\n): number => {\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const elapsedMs = Math.max(0, now - state.lastRefillMs)\n\n  if (elapsedMs > 0) {\n    state.tokens = Math.min(capacity, state.tokens + (elapsedMs * rateBytesPerSecond) / 1000)\n    state.lastRefillMs = now\n  }\n\n  state.tokens -= bytes\n\n  if (state.tokens >= 0) return 0\n  return Math.ceil((-state.tokens / rateBytesPerSecond) * 1000)\n}\n","import { Api } from \"@rpcbase/api\"\n\nimport { completeUpload } from \"./handlers/completeUpload\"\nimport { getStatus } from \"./handlers/getStatus\"\nimport { initUpload } from \"./handlers/initUpload\"\nimport { uploadChunk } from \"./handlers/uploadChunk\"\nimport { rawBodyParser } from \"./middleware/rawBodyParser\"\nimport { getChunkSizeBytes, getMaxClientUploadBytesPerSecond, getRawBodyLimitBytes, type SessionUser } from \"./shared\"\n\nimport * as Uploads from \"./index\"\n\n\nexport default (api: Api<SessionUser>) => {\n  const chunkSizeBytes = getChunkSizeBytes()\n  api.use(\n    Uploads.InitRoute,\n    rawBodyParser({\n      limitBytes: getRawBodyLimitBytes(chunkSizeBytes),\n      maxClientBytesPerSecond: getMaxClientUploadBytesPerSecond(),\n    }),\n  )\n\n  api.post(Uploads.InitRoute, initUpload)\n  api.put(Uploads.ChunkRoute, uploadChunk)\n  api.get(Uploads.StatusRoute, getStatus)\n  api.post(Uploads.CompleteRoute, completeUpload)\n}\n"],"names":["z.object","z.string","z.boolean","z.number","z.enum","z.array","Uploads.initRequestSchema","Uploads.InitRoute","Uploads.ChunkRoute","Uploads.StatusRoute","Uploads.CompleteRoute"],"mappings":";;;;;;;AAMA,MAAM,gBAAgB,MAAM;AAE5B,MAAM,SAAS,IAAI,MAAM,EAAE,EAAE;AAC7B,MAAM,YAAY,gBAAgB,MAAM;AAExC,MAAM,oBAAoB,CAAC,QAAwB,IAAI,QAAQ,WAAW,EAAE,EAAE,UAAA;AAE9E,MAAM,mBAAmB,CAAC,SAA0B;AAClD,QAAM,aAAa,kBAAkB,IAAI;AACzC,MAAI,CAAC,WAAW,WAAW,GAAG,EAAG,QAAO;AACxC,SAAO,gBAAgB,KAAK,UAAU;AACxC;AAEO,MAAM,eAAe,CAAC,UAA2B,iBAAiB,MAAM,SAAS,MAAM,CAAC;AAExF,MAAM,cAAc,CAAC,QAC1B,UAAU,SAAS,KAAK;AAAA,EACtB,cAAc,EAAE,KAAK,MAAM,YAAY,KAAA;AACzC,CAAC;AAEI,MAAM,uBAA4C;AAAA,EACvD,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,OAAO,CAAC,EAAE,YAAY,aAAa,KAAK;AAAA,EACxC,SAAS,CAAC,SAA6C;AACrD,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,IAAI,MAAM,eAAe;AAAA,IACjC;AAEA,UAAM,UAAU,KAAK,SAAS,MAAM;AACpC,QAAI,CAAC,iBAAiB,OAAO,GAAG;AAC9B,YAAM,IAAI,MAAM,aAAa;AAAA,IAC/B;AAEA,UAAM,YAAY,YAAY,OAAO;AACrC,QAAI,CAAC,UAAU,KAAA,KAAU,CAAC,iBAAiB,SAAS,GAAG;AACrD,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAEA,UAAM,kBAAkB,OAAO,KAAK,WAAW,MAAM;AACrD,QAAI,gBAAgB,SAAS,eAAe;AAC1C,YAAM,IAAI,MAAM,eAAe;AAAA,IACjC;AAEA,WAAO,EAAE,MAAM,iBAAiB,UAAU,gBAAA;AAAA,EAC5C;AACF;AC9BO,MAAM,mBAAmB,OAAO,OAAO,CAAC,oBAAoB,CAAiC;AAE7F,MAAM,6BAA6B,MACxC,iBAAiB,OAAO,CAAC,KAAK,cAAc,KAAK,IAAI,KAAK,UAAU,QAAQ,GAAG,CAAC;AAE3E,MAAM,yBAAyB,CAAC,QACrC,iBAAiB,OAAO,CAAC,cAAc,UAAU,MAAM,GAAG,CAAC;AAEtD,MAAM,wBAAwB,OACnC,MACA,QACmE;AACnE,MAAI,cAAc;AAClB,MAAI,kBAAkB,IAAI;AAC1B,QAAM,UAAoB,CAAA;AAE1B,aAAW,aAAa,kBAAkB;AACxC,UAAM,eAA2C;AAAA,MAC/C,UAAU,IAAI;AAAA,MACd,gBAAgB;AAAA,MAChB,WAAW,YAAY;AAAA,MACvB,OAAO;AAAA,IAAA;AAGT,QAAI,CAAC,UAAU,MAAM,YAAY,EAAG;AAEpC,QAAI,YAAY,SAAS,UAAU,UAAU;AAC3C,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,UAAM,SAAS,MAAM,UAAU,QAAQ,aAAa,YAAY;AAChE,kBAAc,OAAO;AACrB,QAAI,OAAO,OAAO,aAAa,YAAY,OAAO,SAAS,QAAQ;AACjE,wBAAkB,OAAO,SAAS,KAAA;AAAA,IACpC;AACA,YAAQ,KAAK,UAAU,EAAE;AAAA,EAC3B;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,IACV;AAAA,EAAA;AAEJ;AC7CA,MAAM,wBAAwB,OAAO,WAAiD,IAAI,QAAQ,CAAC,SAAS,WAAW;AACrH,SAAO,KAAK,UAAU,OAAO;AAC7B,SAAO,KAAK,SAAS,MAAM;AAC7B,CAAC;AAED,MAAM,gBAAgB,OAAO,QAA+B,UAAiC;AAC3F,QAAM,KAAK,OAAO,MAAM,KAAK;AAC7B,MAAI,GAAI;AACR,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAM,UAAU,MAAM;AACpB,cAAA;AACA,cAAA;AAAA,IACF;AAEA,UAAM,UAAU,CAAC,UAAmB;AAClC,cAAA;AACA,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,UAAU,MAAM;AACpB,aAAO,IAAI,SAAS,OAAO;AAC3B,aAAO,IAAI,SAAS,OAAO;AAAA,IAC7B;AAEA,WAAO,GAAG,SAAS,OAAO;AAC1B,WAAO,GAAG,SAAS,OAAO;AAAA,EAC5B,CAAC;AACH;AAEA,MAAM,oBAAoB,OAAO,WAAmC;AAClE,MAAI,CAAC,OAAQ;AACb,MAAI,OAAQ,OAA+B,UAAU,YAAY;AAC/D,QAAI;AACF,YAAO,OAAiD,MAAA;AACxD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI;AACF;AAAE,WAAoC,UAAA;AAAA,EACxC,QAAQ;AAAA,EAER;AACF;AAEO,MAAM,iBAAkG,OAC7G,UACA,QAC6C;AAC7C,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,OAAO,IAAI,IAAI,QAAQ,YAAY,EAAE,EAAE,KAAA;AACxD,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,oBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,YAAY,KAAK,QAAQ;AAE1C,QAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACrD,OAAO,IAAI,mBAAmB,QAAQ;AAAA,IACtC,OAAO,IAAI,iBAAiB,QAAQ;AAAA,EAAA,CACrC;AAED,QAAM,UAAU,oBAAoB,KAAK,QAAQ;AACjD,MAAI,CAAC,QAAQ,IAAI,UAAU,iBAAiB,GAAG;AAC7C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,MAAM,cAAc,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,MAAM,CAAC,EAAA,CAAG,EAAE,KAAA;AAC1H,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,MAAI,SAAS,WAAW,UAAU,SAAS,QAAQ;AACjD,WAAO,EAAE,IAAI,MAAM,QAAQ,SAAS,OAAA;AAAA,EACtC;AAEA,QAAM,SAAS,MAAM,cAAc;AAAA,IACjC,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,EAAE,QAAQ,eAAe,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,IACnG,EAAE,MAAM,EAAE,QAAQ,aAAA,GAAgB,QAAQ,EAAE,OAAO,KAAG;AAAA,IACtD,EAAE,KAAK,KAAA;AAAA,EAAK,EACZ,KAAA;AAEF,MAAI,CAAC,QAAQ;AACX,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,gBAAA;AAAA,EAC7B;AAEA,QAAM,oBAAoB,eAAe,WAAW;AAEpD,QAAM,OAAO,MAAM,sBAAsB,QAAQ;AACjD,QAAM,WAAW,KAAK;AACtB,MAAI,CAAC,UAAU;AACb,UAAM,cAAc;AAAA,MAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,MAC1E,EAAE,MAAM,EAAE,QAAQ,SAAS,OAAO,8BAA4B;AAAA,IAAE;AAElE,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AACA,QAAM,aAAa,cAAA;AACnB,QAAM,SAAS,IAAI,aAAa,UAAU,EAAE,YAAY;AAExD,QAAM,eAAe,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACzE,QAAM,oBAAoB,2BAAA;AAC1B,QAAM,4BAA4B,OAAO,aAAa;AACtD,QAAM,mBAAmB,OAAO,SAAS,KAAA,EAAO,YAAA;AAChD,QAAM,cAAc,qBAAqB,mBAAmB,OAAO,SAAS,OAAO,YAAA,EAAc,SAAS,MAAM;AAEhH,MAAI,eAA6C;AAEjD,MAAI;AACF,QAAI,CAAC,6BAA6B,aAAa;AAC7C,YAAM,IAAI,MAAM,eAAe;AAAA,IACjC;AAEA,UAAM,SAAS,YAAY,KAAK,EAAE,SAAA,CAAU,EAAE,KAAK,EAAE,OAAO,EAAA,CAAG,EAAE,OAAA;AAIjE,QAAI,gBAAgB;AACpB,UAAM,SAAmB,CAAA;AACzB,QAAI,gBAAgB;AAEpB,UAAM,gBAA0B,CAAA;AAChC,UAAM,aAAuB,CAAA;AAC7B,QAAI,aAAa;AAEjB,QAAI;AACF,uBAAiB,YAAY,QAAQ;AACnC,YAAI,SAAS,UAAU,eAAe;AACpC,gBAAM,IAAI,MAAM,gBAAgB;AAAA,QAClC;AAEA,cAAM,QAAQ,SAAS;AAEvB,YAAI,2BAA2B;AAC7B,iBAAO,KAAK,KAAK;AACjB,2BAAiB,MAAM;AAAA,QACzB,WAAW,CAAC,cAAc;AACxB,wBAAc,KAAK,KAAK;AAExB,cAAI,aAAa,mBAAmB;AAClC,kBAAM,QAAQ,MAAM,SAAS,GAAG,KAAK,IAAI,MAAM,QAAQ,oBAAoB,UAAU,CAAC;AACtF,gBAAI,MAAM,QAAQ;AAChB,yBAAW,KAAK,KAAK;AACrB,4BAAc,MAAM;AAAA,YACtB;AAAA,UACF;AAEA,cAAI,cAAc,mBAAmB;AACnC,kBAAM,QAAQ,OAAO,OAAO,YAAY,UAAU;AAClD,kBAAM,aAAa,uBAAuB;AAAA,cACxC,UAAU,OAAO;AAAA,cACjB,gBAAgB,OAAO;AAAA,cACvB,WAAW,OAAO;AAAA,cAClB;AAAA,YAAA,CACD;AAED,gBAAI,WAAW,QAAQ;AACrB,oBAAM,IAAI,MAAM,eAAe;AAAA,YACjC;AAEA,2BAAe,OAAO,iBAAiB,OAAO,UAAU;AAAA,cACtD,UAAU;AAAA,gBACR;AAAA,gBACA;AAAA,gBACA,UAAU,OAAO;AAAA,gBACjB,WAAW,OAAO;AAAA,gBAClB,GAAI,OAAO,OAAO,aAAa,YAAY,EAAE,UAAU,OAAO,SAAA,IAAa,CAAA;AAAA,gBAC3E,GAAI,OAAO,OAAO,iBAAiB,WAAW,EAAE,cAAc,OAAO,aAAA,IAAiB,CAAA;AAAA,gBACtF,GAAI,eAAe,EAAE,QAAQ,iBAAiB,CAAA;AAAA,cAAC;AAAA,YACjD,CACD;AAED,uBAAW,WAAW,eAAe;AACnC,oBAAM,cAAc,cAAc,OAAO;AAAA,YAC3C;AACA,0BAAc,SAAS;AAAA,UACzB;AAAA,QACF,OAAO;AACL,gBAAM,cAAc,cAAc,KAAK;AAAA,QACzC;AAEA,yBAAiB;AAAA,MACnB;AAAA,IACF,UAAA;AACE,UAAI;AACF,cAAM,OAAO,MAAA;AAAA,MACf,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,QAAI,kBAAkB,OAAO,aAAa;AACxC,YAAM,IAAI,MAAM,gBAAgB;AAAA,IAClC;AAEA,QAAI,2BAA2B;AAC7B,YAAM,YAAY,OAAO,OAAO,QAAQ,aAAa;AACrD,YAAM,EAAE,MAAM,WAAW,UAAU,mBAAmB,QAAA,IAAY,MAAM,sBAAsB,WAAW;AAAA,QACvG,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,MAAA,CACxB;AAED,qBAAe,OAAO,iBAAiB,OAAO,UAAU;AAAA,QACtD,UAAU;AAAA,UACR;AAAA,UACA;AAAA,UACA,UAAU;AAAA,UACV,WAAW,OAAO;AAAA,UAClB,GAAI,QAAQ,SAAS,EAAE,YAAY,SAAS,eAAe,UAAU,OAAA,IAAW,CAAA;AAAA,UAChF,GAAI,OAAO,OAAO,aAAa,YAAY,EAAE,UAAU,OAAO,SAAA,IAAa,CAAA;AAAA,UAC3E,GAAI,OAAO,OAAO,iBAAiB,WAAW,EAAE,cAAc,OAAO,aAAA,IAAiB,CAAA;AAAA,UACtF,GAAI,eAAe,EAAE,QAAQ,iBAAiB,CAAA;AAAA,QAAC;AAAA,MACjD,CACD;AAED,YAAM,WAAW,sBAAsB,YAAY;AACnD,mBAAa,IAAI,SAAS;AAC1B,YAAM;AAAA,IACR,OAAO;AACL,UAAI,CAAC,cAAc;AACjB,cAAM,QAAQ,OAAO,OAAO,YAAY,UAAU;AAClD,cAAM,aAAa,uBAAuB;AAAA,UACxC,UAAU,OAAO;AAAA,UACjB,gBAAgB,OAAO;AAAA,UACvB,WAAW,OAAO;AAAA,UAClB;AAAA,QAAA,CACD;AAED,YAAI,WAAW,QAAQ;AACrB,gBAAM,IAAI,MAAM,eAAe;AAAA,QACjC;AAEA,uBAAe,OAAO,iBAAiB,OAAO,UAAU;AAAA,UACtD,UAAU;AAAA,YACR;AAAA,YACA;AAAA,YACA,UAAU,OAAO;AAAA,YACjB,WAAW,OAAO;AAAA,YAClB,GAAI,OAAO,OAAO,aAAa,YAAY,EAAE,UAAU,OAAO,SAAA,IAAa,CAAA;AAAA,YAC3E,GAAI,OAAO,OAAO,iBAAiB,WAAW,EAAE,cAAc,OAAO,aAAA,IAAiB,CAAA;AAAA,YACtF,GAAI,eAAe,EAAE,QAAQ,iBAAiB,CAAA;AAAA,UAAC;AAAA,QACjD,CACD;AAED,mBAAW,WAAW,eAAe;AACnC,gBAAM,cAAc,cAAc,OAAO;AAAA,QAC3C;AACA,sBAAc,SAAS;AAAA,MACzB;AAEA,YAAM,WAAW,sBAAsB,YAAY;AACnD,mBAAa,IAAA;AACb,YAAM;AAAA,IACR;AAEA,UAAM,SAAS,OAAQ,aAA6C,MAAM,EAAE;AAC5E,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,cAAc;AAAA,MAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,MAC1E,EAAE,MAAM,EAAE,QAAQ,QAAQ,OAAA,GAAU,QAAQ,EAAE,OAAO,GAAA,EAAG;AAAA,IAAE;AAG5D,QAAI;AACF,YAAM,YAAY,WAAW,EAAE,UAAU;AAAA,IAC3C,QAAQ;AAAA,IAER;AAEA,WAAO,EAAE,IAAI,MAAM,OAAA;AAAA,EACrB,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAErE,UAAM,kBAAkB,YAAY;AAEpC,QAAI,YAAY,kBAAkB;AAChC,YAAM,cAAc;AAAA,QAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,QAC1E,EAAE,MAAM,EAAE,QAAQ,cAAY;AAAA,MAAE;AAElC,UAAI,IAAI,OAAO,GAAG;AAClB,aAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,IAC7B;AAEA,QAAI,YAAY,iBAAiB;AAC/B,YAAM,cAAc;AAAA,QAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,QAC1E,EAAE,MAAM,EAAE,QAAQ,SAAS,OAAO,UAAQ;AAAA,MAAE;AAE9C,UAAI,IAAI,OAAO,GAAG;AAClB,aAAO,EAAE,IAAI,OAAO,OAAO,QAAA;AAAA,IAC7B;AAEA,QAAI,YAAY,iBAAiB,YAAY,uBAAuB;AAClE,YAAM,cAAc;AAAA,QAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,QAC1E,EAAE,MAAM,EAAE,QAAQ,SAAS,OAAO,UAAQ;AAAA,MAAE;AAE9C,UAAI,IAAI,OAAO,GAAG;AAClB,aAAO,EAAE,IAAI,OAAO,OAAO,QAAA;AAAA,IAC7B;AAEA,UAAM,cAAc;AAAA,MAClB,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA;AAAA,MAC1E,EAAE,MAAM,EAAE,QAAQ,SAAS,OAAO,UAAQ;AAAA,IAAE;AAG9C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AACF;ACvUO,MAAM,YAA2F,OACtG,UACA,QAC2C;AAC3C,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,OAAO,IAAI,IAAI,QAAQ,YAAY,EAAE,EAAE,KAAA;AACxD,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,oBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,YAAY,KAAK,QAAQ;AAE1C,QAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACrD,OAAO,IAAI,mBAAmB,QAAQ;AAAA,IACtC,OAAO,IAAI,iBAAiB,QAAQ;AAAA,EAAA,CACrC;AAED,QAAM,UAAU,oBAAoB,KAAK,QAAQ;AACjD,MAAI,CAAC,QAAQ,IAAI,QAAQ,iBAAiB,GAAG;AAC3C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,MAAM,cAAc,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,MAAM,CAAC,EAAA,CAAG,EAAE,KAAA;AACzH,MAAI,CAAC,SAAS;AACZ,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,QAAM,eAAe,MAAM,YAAY;AAAA,IACrC,EAAE,SAAA;AAAA,IACF,EAAE,OAAO,GAAG,KAAK,EAAA;AAAA,EAAE,EACnB,KAAK,EAAE,OAAO,EAAA,CAAG,EAAE,KAAA;AAErB,QAAM,WAAY,aACf,IAAI,CAAC,QAAS,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,EAAG,EAC7D,OAAO,CAAC,MAAM,OAAO,UAAU,CAAC,KAAK,KAAK,CAAC;AAE9C,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAA,IAAW,CAAA;AAAA,EAAC;AAEvD;ACjEO,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,cAAc;AACpB,MAAM,gBAAgB;AAEtB,MAAM,oBAAoBA,OAAS;AAAA,EACxC,UAAUC,OAAE,EAAS,IAAI,CAAC;AAAA,EAC1B,UAAUA,OAAE,EAAS,IAAI,CAAC;AAAA,EAC1B,UAAUC,QAAE,EAAU,SAAA;AAAA,EACtB,WAAWC,OAAE,EAAS,IAAA,EAAM,IAAI,CAAC;AACnC,CAAC;AAIiCH,OAAS;AAAA,EACzC,IAAIE,QAAE;AAAA,EACN,OAAOD,OAAE,EAAS,SAAA;AAAA,EAClB,UAAUA,OAAE,EAAS,SAAA;AAAA,EACrB,WAAWA,OAAE,EAAS,SAAA;AAAA,EACtB,WAAWE,OAAE,EAAS,IAAA,EAAM,SAAA;AAAA,EAC5B,aAAaA,OAAE,EAAS,IAAA,EAAM,SAAA;AAChC,CAAC;AAImCH,OAAS;AAAA,EAC3C,IAAIE,QAAE;AAAA,EACN,OAAOD,OAAE,EAAS,SAAA;AAAA,EAClB,QAAQG,MAAO,CAAC,aAAa,cAAc,QAAQ,OAAO,CAAC,EAAE,SAAA;AAAA,EAC7D,WAAWD,OAAE,EAAS,IAAA,EAAM,SAAA;AAAA,EAC5B,aAAaA,OAAE,EAAS,IAAA,EAAM,SAAA;AAAA,EAC9B,UAAUE,MAAQF,SAAW,IAAA,EAAM,IAAI,CAAC,CAAC,EAAE,SAAA;AAAA,EAC3C,QAAQF,OAAE,EAAS,SAAA;AACrB,CAAC;AAIqCD,OAAS;AAAA,EAC7C,IAAIE,QAAE;AAAA,EACN,OAAOD,OAAE,EAAS,SAAA;AAAA,EAClB,QAAQA,OAAE,EAAS,SAAA;AACrB,CAAC;ACtBM,MAAM,aAA+F,OAC1G,SACA,QACyC;AACzC,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,EAC7B;AAEA,QAAM,SAAS,UAAU,GAAG;AAE5B,QAAM,SAASK,kBAA0B,UAAU,WAAW,CAAA,CAAE;AAChE,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,QAAM,YAAY,kBAAA;AAClB,QAAM,EAAE,UAAU,UAAU,WAAW,SAAA,IAAa,OAAO;AAC3D,QAAM,cAAc,KAAK,KAAK,YAAY,SAAS;AAEnD,QAAM,WAAW,YAAY,KAAK,QAAQ;AAE1C,QAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACrD,OAAO,IAAI,mBAAmB,QAAQ;AAAA,IACtC,OAAO,IAAI,iBAAiB,QAAQ;AAAA,EAAA,CACrC;AAED,QAAM,oBAAoB,eAAe,WAAW;AAEpD,QAAM,WAAW,IAAI,SAAA,EAAW,SAAA;AAChC,QAAM,MAAM,KAAK,IAAA;AACjB,QAAM,YAAY,IAAI,KAAK,MAAM,iBAAiB;AAElD,QAAM,YAAY,SAAS,OAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AACtE,QAAM,eAAe,YAAY,iBAAiB,OAAO,KAAK,SAAS,CAAC,IAAI;AAE5E,QAAM,cAAc,OAAO;AAAA,IACzB,KAAK;AAAA,IACL,GAAI,SAAS,EAAE,OAAA,IAAW,CAAA;AAAA,IAC1B,GAAI,eAAe,EAAE,aAAA,IAAiB,CAAA;AAAA,IACtC;AAAA,IACA;AAAA,IACA,GAAI,OAAO,aAAa,YAAY,EAAE,SAAA,IAAa,CAAA;AAAA,IACnD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,WAAW,IAAI,KAAK,GAAG;AAAA,IACvB;AAAA,EAAA,CACD;AAED,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,YAAY,EAAE,cAAc,CAAA;AAAA,EAAC;AAErC;AC1DO,MAAM,cAAqE,OAChF,SACA,QACkC;AAClC,QAAM,WAAW,YAAY,GAAG;AAChC,MAAI,CAAC,UAAU;AACb,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,OAAO,IAAI,IAAI,QAAQ,YAAY,EAAE,EAAE,KAAA;AACxD,QAAM,WAAW,OAAO,IAAI,IAAI,QAAQ,SAAS,EAAE,EAAE,KAAA;AACrD,QAAM,QAAQ,OAAO,QAAQ;AAE7B,MAAI,CAAC,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GAAG;AACtD,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,oBAAA;AAAA,EAC7B;AAEA,QAAM,WAAW,YAAY,KAAK,QAAQ;AAE1C,QAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACrD,OAAO,IAAI,mBAAmB,QAAQ;AAAA,IACtC,OAAO,IAAI,iBAAiB,QAAQ;AAAA,EAAA,CACrC;AAED,QAAM,UAAU,oBAAoB,KAAK,QAAQ;AACjD,MAAI,CAAC,QAAQ,IAAI,UAAU,iBAAiB,GAAG;AAC7C,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,UAAU,MAAM,cAAc,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,SAAA,GAAY,4BAA4B,SAAS,QAAQ,CAAC,EAAA,CAAG,EAAE,KAAA;AAC3H,MAAI,CAAC,SAAS;AACZ,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,YAAA;AAAA,EAC7B;AAEA,MAAI,QAAQ,WAAW,aAAa;AAClC,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,gBAAA;AAAA,EAC7B;AAEA,MAAI,SAAS,QAAQ,aAAa;AAChC,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,qBAAA;AAAA,EAC7B;AAEA,QAAM,OAAO,gBAAgB,OAAO;AACpC,MAAI,CAAC,MAAM;AACT,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,eAAA;AAAA,EAC7B;AAEA,QAAM,eAAe,UAAU,QAAQ,cAAc,IACjD,QAAQ,YAAY,QAAQ,aAAa,QAAQ,cAAc,KAC/D,QAAQ;AAEZ,MAAI,KAAK,SAAS,cAAc;AAC9B,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,kBAAA;AAAA,EAC7B;AAEA,MAAI,KAAK,WAAW,cAAc;AAChC,QAAI,IAAI,OAAO,GAAG;AAClB,WAAO,EAAE,IAAI,OAAO,OAAO,qBAAA;AAAA,EAC7B;AAEA,QAAM,iBAAiB,IAAI,IAAI,IAAI,gBAAgB;AACnD,QAAM,SAAS,iBAAiB,iBAAiB,IAAI,IAAI;AAEzD,MAAI,gBAAgB;AAClB,UAAM,iBAAiB,mBAAmB,cAAc;AACxD,QAAI,WAAW,gBAAgB;AAC7B,UAAI,IAAI,OAAO,GAAG;AAClB,aAAO,EAAE,IAAI,OAAO,OAAO,oBAAA;AAAA,IAC7B;AAAA,EACF;AAEA,QAAM,oBAAoB,eAAe,WAAW;AAEpD,QAAM,YAAY;AAAA,IAChB,EAAE,UAAU,MAAA;AAAA,IACZ;AAAA,MACE,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,KAAK;AAAA,QACX;AAAA,QACA,WAAW,QAAQ;AAAA,MAAA;AAAA,MAErB,cAAc;AAAA,QACZ,+BAAe,KAAA;AAAA,MAAK;AAAA,IACtB;AAAA,IAEF,EAAE,QAAQ,KAAA;AAAA,EAAK;AAGjB,MAAI,IAAI,OAAO,GAAG;AAClB,SAAO,EAAE,IAAI,KAAA;AACf;AC7HO,MAAM,gBAAgB,CAAC;AAAA,EAC5B;AAAA,EACA;AACF,MAGM;AACJ,SAAO,CAAC,KAAU,KAAU,SAAc;AACxC,UAAM,cAAc,OAAO,KAAK,UAAU,cAAc,MAAM,WAC1D,OAAO,IAAI,QAAQ,cAAc,CAAC,IAClC;AAEJ,QAAI,CAAC,YAAY,SAAS,0BAA0B,GAAG;AACrD,WAAA;AACA;AAAA,IACF;AAEA,QAAI,QAAQ;AACZ,UAAM,SAAmB,CAAA;AACzB,QAAI,OAAO;AACX,QAAI,SAAS;AACb,QAAI,kBAAwD;AAE5D,UAAM,qBAAqB,OAAO,4BAA4B,YAAY,0BAA0B,IAChG,0BACA;AAEJ,UAAM,UAAU,MAAM;AACpB,UAAI,IAAI,QAAQ,MAAM;AACtB,UAAI,IAAI,OAAO,KAAK;AACpB,UAAI,IAAI,SAAS,OAAO;AACxB,UAAI,IAAI,WAAW,SAAS;AAC5B,UAAI,iBAAiB;AACnB,qBAAa,eAAe;AAC5B,0BAAkB;AAAA,MACpB;AAAA,IACF;AAEA,UAAM,SAAS,CAAC,UAAoB;AAClC,UAAI,KAAM;AACV,aAAO;AAEP,cAAA;AAEA,UAAI,OAAO;AACT,aAAK,KAAK;AACV;AAAA,MACF;AAEA,UAAI,OAAO,OAAO,OAAO,QAAQ,KAAK;AACtC,WAAA;AAAA,IACF;AAEA,UAAM,SAAS,CAAC,UAAe;AAC7B,UAAI,KAAM;AACV,YAAM,SAAS,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AACjE,eAAS,OAAO;AAEhB,UAAI,QAAQ,YAAY;AACtB,eAAO;AACP,gBAAA;AACA,YAAI,QAAA;AACJ,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,OAAO,mBAAmB;AAC5D;AAAA,MACF;AAEA,aAAO,KAAK,MAAM;AAElB,UAAI,CAAC,mBAAoB;AAEzB,YAAM,MAAM,KAAK,IAAA;AACjB,YAAM,YAAY,aAAa,GAAG;AAClC,YAAM,QAAQ,mBAAmB,WAAW,oBAAoB,GAAG;AACnE,YAAM,SAAS,kBAAkB,OAAO,OAAO,QAAQ,oBAAoB,GAAG;AAE9E,UAAI,SAAS,KAAK,CAAC,QAAQ;AACzB,iBAAS;AACT,YAAI,MAAA;AACJ,0BAAkB,WAAW,MAAM;AACjC,4BAAkB;AAClB,mBAAS;AACT,cAAI,KAAM;AACV,cAAI;AACF,gBAAI,OAAA;AAAA,UACN,QAAQ;AAAA,UAER;AAAA,QACF,GAAG,MAAM;AAAA,MACX;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,OAAA;AACpB,UAAM,UAAU,CAAC,QAAiB,OAAO,GAAG;AAC5C,UAAM,YAAY,MAAM,OAAO,IAAI,MAAM,iBAAiB,CAAC;AAE3D,QAAI,GAAG,QAAQ,MAAM;AACrB,QAAI,GAAG,OAAO,KAAK;AACnB,QAAI,GAAG,SAAS,OAAO;AACvB,QAAI,GAAG,WAAW,SAAS;AAAA,EAC7B;AACF;AAQA,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB,KAAK,KAAK;AAElC,MAAM,uCAAuB,IAAA;AAC7B,IAAI,gBAAgB;AAEpB,MAAM,eAAe,CAAC,QAAqB;AACzC,QAAM,cAAc,OAAO,KAAK,aAAa,WAAW,IAAI,WAAW;AACvE,MAAI,YAAY,KAAA,EAAQ,QAAO,YAAY,KAAA;AAC3C,QAAM,QAAQ,OAAO,KAAK,OAAO,WAAW,IAAI,KAAK;AACrD,SAAO,MAAM,UAAU;AACzB;AAEA,MAAM,qBAAqB,CAAC,QAAgB;AAC1C,MAAI,MAAM,gBAAgB,IAAQ;AAClC,kBAAgB;AAEhB,MAAI,iBAAiB,OAAO,IAAM;AAElC,aAAW,CAAC,KAAK,KAAK,KAAK,kBAAkB;AAC3C,QAAI,MAAM,MAAM,aAAa,iBAAiB;AAC5C,uBAAiB,OAAO,GAAG;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,MAAM,qBAAqB,CAAC,KAAa,oBAA4B,QAAiC;AACpG,qBAAmB,GAAG;AAEtB,QAAM,WAAW,qBAAqB;AACtC,QAAM,WAAW,iBAAiB,IAAI,GAAG;AACzC,MAAI,UAAU;AACZ,aAAS,aAAa;AACtB,aAAS,SAAS,KAAK,IAAI,UAAU,SAAS,MAAM;AACpD,WAAO;AAAA,EACT;AAEA,QAAM,OAAwB;AAAA,IAC5B,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,YAAY;AAAA,EAAA;AAEd,mBAAiB,IAAI,KAAK,IAAI;AAC9B,SAAO;AACT;AAEA,MAAM,oBAAoB,CACxB,OACA,OACA,oBACA,QACW;AACX,QAAM,WAAW,qBAAqB;AACtC,QAAM,YAAY,KAAK,IAAI,GAAG,MAAM,MAAM,YAAY;AAEtD,MAAI,YAAY,GAAG;AACjB,UAAM,SAAS,KAAK,IAAI,UAAU,MAAM,SAAU,YAAY,qBAAsB,GAAI;AACxF,UAAM,eAAe;AAAA,EACvB;AAEA,QAAM,UAAU;AAEhB,MAAI,MAAM,UAAU,EAAG,QAAO;AAC9B,SAAO,KAAK,KAAM,CAAC,MAAM,SAAS,qBAAsB,GAAI;AAC9D;AChKA,MAAA,UAAe,CAAC,QAA0B;AACxC,QAAM,iBAAiB,kBAAA;AACvB,MAAI;AAAA,IACFC;AAAAA,IACA,cAAc;AAAA,MACZ,YAAY,qBAAqB,cAAc;AAAA,MAC/C,yBAAyB,iCAAA;AAAA,IAAiC,CAC3D;AAAA,EAAA;AAGH,MAAI,KAAKA,WAAmB,UAAU;AACtC,MAAI,IAAIC,YAAoB,WAAW;AACvC,MAAI,IAAIC,aAAqB,SAAS;AACtC,MAAI,KAAKC,eAAuB,cAAc;AAChD;"}