@rpcbase/server 0.557.0 → 0.559.0

package/dist/{handler-0rPClEv4.js.map → handler-D58VS91o.js.map}

@@ -1 +1 @@
-{"version":3,"file":"handler-0rPClEv4.js","sources":["../src/notifications/api/notifications/shared.ts","../src/notifications/api/notifications/index.ts","../src/notifications/api/notifications/handler.ts"],"sourcesContent":["import type { Ctx } from \"@rpcbase/api\"\n\n\ntype NotificationSessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport const getSessionUser = (ctx: Ctx) => {\n  const rawSessionUser = (ctx.req.session as { user?: NotificationSessionUser } | null | undefined)?.user\n  const userId = typeof rawSessionUser?.id === \"string\" ? rawSessionUser.id.trim() : \"\"\n  const tenantId = typeof rawSessionUser?.currentTenantId === \"string\" ? rawSessionUser.currentTenantId.trim() : \"\"\n\n  if (!userId) {\n    ctx.res.status(401)\n    return null\n  }\n\n  if (!tenantId) {\n    ctx.res.status(400)\n    return null\n  }\n\n  return { userId, tenantId }\n}\n\n","import { z } from \"zod\"\n\n\nexport const ListRoute = \"/api/rb/notifications\"\nexport const CreateRoute = \"/api/rb/notifications/create\"\nexport const MarkReadRoute = \"/api/rb/notifications/:notificationId/read\"\nexport const ArchiveRoute = \"/api/rb/notifications/:notificationId/archive\"\nexport const MarkAllReadRoute = \"/api/rb/notifications/mark-all-read\"\nexport const SettingsRoute = \"/api/rb/notifications/settings\"\nexport const DigestRunRoute = \"/api/rb/notifications/digest/run\"\n\nexport const listRequestSchema = z.object({\n  includeArchived: z.boolean().optional(),\n  unreadOnly: z.boolean().optional(),\n  limit: z.number().int().min(1).max(200).optional(),\n  markSeen: z.boolean().optional(),\n})\n\nexport type ListRequestPayload = z.infer<typeof listRequestSchema>\n\nexport const createRequestSchema = z.object({\n  topic: z.string().trim().min(1).optional(),\n  title: z.string().trim().min(1),\n  body: z.string().trim().optional(),\n  url: z.string().trim().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type CreateRequestPayload = z.infer<typeof createRequestSchema>\n\nexport const notificationSchema = z.object({\n  id: z.string(),\n  topic: z.string().optional(),\n  title: z.string(),\n  body: z.string().optional(),\n  url: z.string().optional(),\n  createdAt: z.string(),\n  seenAt: z.string().optional(),\n  readAt: z.string().optional(),\n  archivedAt: z.string().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type NotificationPayload = z.infer<typeof notificationSchema>\n\nexport const listResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  notifications: z.array(notificationSchema).optional(),\n  unreadCount: z.number().int().min(0).optional(),\n  unseenCount: z.number().int().min(0).optional(),\n})\n\nexport type ListResponsePayload = z.infer<typeof listResponseSchema>\n\nexport const createResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  id: z.string().optional(),\n})\n\nexport type CreateResponsePayload = z.infer<typeof createResponseSchema>\n\nexport const markReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkReadResponsePayload = z.infer<typeof markReadResponseSchema>\n\nexport const archiveResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ArchiveResponsePayload = z.infer<typeof archiveResponseSchema>\n\nexport const markAllReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkAllReadResponsePayload = z.infer<typeof markAllReadResponseSchema>\n\nexport const digestFrequencySchema = z.enum([\"off\", \"daily\", \"weekly\"])\n\nexport type DigestFrequency = z.infer<typeof digestFrequencySchema>\n\nexport const topicPreferenceSchema = z.object({\n  topic: z.string(),\n  inApp: z.boolean(),\n  emailDigest: z.boolean(),\n  push: z.boolean(),\n})\n\nexport type TopicPreferencePayload = z.infer<typeof topicPreferenceSchema>\n\nexport const settingsSchema = z.object({\n  digestFrequency: digestFrequencySchema,\n  topicPreferences: z.array(topicPreferenceSchema),\n  lastDigestSentAt: z.string().optional(),\n})\n\nexport type SettingsPayload = z.infer<typeof settingsSchema>\n\nexport const settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type SettingsResponsePayload = z.infer<typeof settingsResponseSchema>\n\nexport const updateSettingsRequestSchema = z.object({\n  digestFrequency: digestFrequencySchema.optional(),\n  topicPreferences: z.array(topicPreferenceSchema).optional(),\n})\n\nexport type UpdateSettingsRequestPayload = z.infer<typeof updateSettingsRequestSchema>\n\nexport const updateSettingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type UpdateSettingsResponsePayload = z.infer<typeof updateSettingsResponseSchema>\n\nexport const digestRunRequestSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport type DigestRunRequestPayload = z.infer<typeof digestRunRequestSchema>\n\nexport const digestRunResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  sent: z.boolean().optional(),\n  skippedReason: z.string().optional(),\n})\n\nexport type DigestRunResponsePayload = z.infer<typeof digestRunResponseSchema>\n","import { Api, type ApiHandler } from \"@rpcbase/api\"\nimport { models, type IRBNotification, type IRBNotificationSettings } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery } from \"@rpcbase/db/acl\"\n\nimport { createNotification } from \"../../createNotification\"\nimport { sendNotificationsDigestForUser } from \"../../digest\"\nimport { getSessionUser } from \"./shared\"\n\nimport * as Notifications from \"./index\"\n\n\ntype NotificationDoc = IRBNotification & { _id: unknown }\ntype SettingsDoc = IRBNotificationSettings & { _id: unknown }\n\nconst toIso = (value: unknown): string | undefined => (value instanceof Date ? value.toISOString() : undefined)\n\nconst buildDisabledTopics = (\n  settings: SettingsDoc | null,\n  key: \"inApp\" | \"emailDigest\",\n): string[] => {\n  const raw = settings?.topicPreferences\n  if (!Array.isArray(raw) || raw.length === 0) return []\n\n  return raw\n    .map((pref) => {\n      if (!pref || typeof pref !== \"object\") return null\n      const topic = typeof (pref as { topic?: unknown }).topic === \"string\" ? (pref as { topic: string }).topic.trim() : \"\"\n      if (!topic) return null\n      const enabled = (pref as Record<string, unknown>)[key] === true\n      return enabled ? null : topic\n    })\n    .filter((topic): topic is string => Boolean(topic))\n}\n\nconst listNotifications: ApiHandler<Notifications.ListRequestPayload, Notifications.ListResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.listRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { userId } = session\n  const includeArchived = parsed.data.includeArchived === true\n  const unreadOnly = parsed.data.unreadOnly === true\n  const limit = parsed.data.limit ?? 50\n  const markSeen = parsed.data.markSeen === true\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (!includeArchived) queryFilters.push({ archivedAt: { $exists: false } })\n  if (unreadOnly) queryFilters.push({ readAt: { $exists: false } })\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const notifications = (await NotificationModel.find(query)\n    .sort({ createdAt: -1 })\n    .limit(limit)\n    .lean()) as NotificationDoc[]\n\n  const unseenQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { seenAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unseenQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unseenQuery: Record<string, unknown> = { $and: unseenQueryFilters }\n\n  const unreadQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unreadQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unreadQuery: Record<string, unknown> = { $and: unreadQueryFilters }\n\n  const [unreadCount, unseenCount] = await Promise.all([\n    NotificationModel.countDocuments(unreadQuery),\n    NotificationModel.countDocuments(unseenQuery),\n  ])\n\n  const now = markSeen ? new Date() : null\n  if (now && unseenCount > 0) {\n    await NotificationModel.updateMany(unseenQuery, { $set: { seenAt: now } })\n  }\n\n  return Notifications.listResponseSchema.parse({\n    ok: true,\n    notifications: notifications.map((n) => ({\n      id: String(n._id),\n      topic: typeof n.topic === \"string\" ? n.topic : undefined,\n      title: typeof n.title === \"string\" ? n.title : \"\",\n      body: typeof n.body === \"string\" ? n.body : undefined,\n      url: typeof n.url === \"string\" ? n.url : undefined,\n      createdAt: toIso(n.createdAt) ?? new Date().toISOString(),\n      seenAt: toIso(n.seenAt) ?? (now && !n.archivedAt && !n.seenAt ? now.toISOString() : undefined),\n      readAt: toIso(n.readAt),\n      archivedAt: toIso(n.archivedAt),\n      metadata: typeof n.metadata === \"object\" && n.metadata !== null ? (n.metadata as Record<string, unknown>) : undefined,\n    })),\n    unreadCount,\n    unseenCount: now ? 0 : unseenCount,\n  })\n}\n\nconst createNotificationForCurrentUser: ApiHandler<Notifications.CreateRequestPayload, Notifications.CreateResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"create\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.createRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const created = await createNotification(ctx, {\n    userId: session.userId,\n    topic: parsed.data.topic,\n    title: parsed.data.title,\n    body: parsed.data.body,\n    url: parsed.data.url,\n    metadata: parsed.data.metadata,\n  }, ability)\n\n  return Notifications.createResponseSchema.parse({ ok: true, id: created.id })\n}\n\nconst markRead: ApiHandler<unknown, Notifications.MarkReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const now = new Date()\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { readAt: now, seenAt: now } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst markAllRead: ApiHandler<unknown, Notifications.MarkAllReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId: session.userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId: session.userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const now = new Date()\n  await NotificationModel.updateMany(query, { $set: { readAt: now, seenAt: now } })\n\n  return { ok: true }\n}\n\nconst archiveNotification: ApiHandler<unknown, Notifications.ArchiveResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { archivedAt: new Date() } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst getSettings: ApiHandler<unknown, Notifications.SettingsResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"read\", \"RBNotificationSettings\")] },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.settingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst updateSettings: ApiHandler<Notifications.UpdateSettingsRequestPayload, Notifications.UpdateSettingsResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.updateSettingsRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const nextValues: Record<string, unknown> = {}\n\n  if (parsed.data.digestFrequency) {\n    nextValues.digestFrequency = parsed.data.digestFrequency\n  }\n\n  if (parsed.data.topicPreferences) {\n    const seen = new Set<string>()\n    const next = parsed.data.topicPreferences\n      .map((pref) => ({\n        topic: pref.topic.trim(),\n        inApp: pref.inApp,\n        emailDigest: pref.emailDigest,\n        push: pref.push,\n      }))\n      .filter((pref) => pref.topic.length > 0)\n      .filter((pref) => {\n        if (seen.has(pref.topic)) return false\n        seen.add(pref.topic)\n        return true\n      })\n\n    nextValues.topicPreferences = next\n  }\n\n  const ops: Record<string, unknown> = {\n    $setOnInsert: { userId: session.userId },\n  }\n\n  if (Object.keys(nextValues).length > 0) {\n    ops.$set = nextValues\n  }\n\n  const settings = (await SettingsModel.findOneAndUpdate(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"update\", \"RBNotificationSettings\")] },\n    ops,\n    { upsert: true, returnDocument: \"after\", setDefaultsOnInsert: true },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.updateSettingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst runDigest: ApiHandler<Notifications.DigestRunRequestPayload, Notifications.DigestRunResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.digestRunRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const result = await sendNotificationsDigestForUser(ctx, {\n    userId: session.userId,\n    ability,\n    force: parsed.data.force === true,\n  })\n\n  if (!result.ok) {\n    ctx.res.status(500)\n    return { ok: false, error: result.error }\n  }\n\n  return {\n    ok: true,\n    sent: result.sent,\n    ...(result.skippedReason ? { skippedReason: result.skippedReason } : {}),\n  }\n}\n\nexport default (api: Api) => {\n  api.post(Notifications.ListRoute, listNotifications)\n  api.post(Notifications.CreateRoute, createNotificationForCurrentUser)\n  api.post(Notifications.MarkReadRoute, markRead)\n  api.post(Notifications.MarkAllReadRoute, markAllRead)\n  api.post(Notifications.ArchiveRoute, archiveNotification)\n  api.get(Notifications.SettingsRoute, getSettings)\n  api.put(Notifications.SettingsRoute, updateSettings)\n  api.post(Notifications.DigestRunRoute, runDigest)\n}\n"],"names":["getSessionUser","ctx","rawSessionUser","req","session","user","userId","id","trim","tenantId","currentTenantId","res","status","ListRoute","CreateRoute","MarkReadRoute","ArchiveRoute","MarkAllReadRoute","SettingsRoute","DigestRunRoute","listRequestSchema","z","includeArchived","boolean","optional","unreadOnly","limit","int","min","max","markSeen","createRequestSchema","topic","string","title","body","url","metadata","unknown","notificationSchema","createdAt","seenAt","readAt","archivedAt","listResponseSchema","ok","error","notifications","unreadCount","number","unseenCount","createResponseSchema","digestFrequencySchema","topicPreferenceSchema","inApp","emailDigest","push","settingsSchema","digestFrequency","topicPreferences","lastDigestSentAt","settingsResponseSchema","settings","updateSettingsRequestSchema","updateSettingsResponseSchema","digestRunRequestSchema","force","sent","skippedReason","toIso","value","Date","toISOString","undefined","buildDisabledTopics","key","raw","Array","isArray","length","map","pref","enabled","filter","Boolean","listNotifications","payload","ability","buildAbilityFromSession","can","parsed","Notifications","safeParse","success","data","SettingsModel","models","get","findOne","lean","disabledTopics","NotificationModel","queryFilters","getAccessibleByQuery","$exists","$nin","query","$and","find","sort","unseenQueryFilters","unseenQuery","unreadQueryFilters","unreadQuery","Promise","all","countDocuments","now","updateMany","$set","parse","n","String","_id","createNotificationForCurrentUser","created","createNotification","markRead","_payload","notificationId","params","updateOne","markAllRead","archiveNotification","getSettings","digestFrequencyRaw","updateSettings","nextValues","seen","Set","next","has","add","ops","$setOnInsert","Object","keys","findOneAndUpdate","upsert","returnDocument","setDefaultsOnInsert","runDigest","result","sendNotificationsDigestForUser","api","post","put"],"mappings":";;;;AAQO,MAAMA,iBAAiBA,CAACC,QAAa;AAC1C,QAAMC,iBAAkBD,IAAIE,IAAIC,SAAmEC;AACnG,QAAMC,SAAS,OAAOJ,gBAAgBK,OAAO,WAAWL,eAAeK,GAAGC,SAAS;AACnF,QAAMC,WAAW,OAAOP,gBAAgBQ,oBAAoB,WAAWR,eAAeQ,gBAAgBF,SAAS;AAE/G,MAAI,CAACF,QAAQ;AACXL,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,CAACH,UAAU;AACbR,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IAAEN;AAAAA,IAAQG;AAAAA,EAAAA;AACnB;ACrBO,MAAMI,YAAY;AAClB,MAAMC,cAAc;AACpB,MAAMC,gBAAgB;AACtB,MAAMC,eAAe;AACrB,MAAMC,mBAAmB;AACzB,MAAMC,gBAAgB;AACtB,MAAMC,iBAAiB;AAEvB,MAAMC,oBAAoBC,OAAS;AAAA,EACxCC,iBAAiBD,QAAEE,EAAUC,SAAAA;AAAAA,EAC7BC,YAAYJ,QAAEE,EAAUC,SAAAA;AAAAA,EACxBE,OAAOL,SAAWM,MAAMC,IAAI,CAAC,EAAEC,IAAI,GAAG,EAAEL,SAAAA;AAAAA,EACxCM,UAAUT,QAAEE,EAAUC,SAAAA;AACxB,CAAC;AAIM,MAAMO,sBAAsBV,OAAS;AAAA,EAC1CW,OAAOX,OAAEY,EAASzB,OAAOoB,IAAI,CAAC,EAAEJ,SAAAA;AAAAA,EAChCU,OAAOb,OAAEY,EAASzB,KAAAA,EAAOoB,IAAI,CAAC;AAAA,EAC9BO,MAAMd,OAAEY,EAASzB,KAAAA,EAAOgB,SAAAA;AAAAA,EACxBY,KAAKf,OAAEY,EAASzB,KAAAA,EAAOgB,SAAAA;AAAAA,EACvBa,UAAUhB,OAASA,OAAEY,GAAUZ,QAAEiB,CAAS,EAAEd,SAAAA;AAC9C,CAAC;AAIM,MAAMe,qBAAqBlB,OAAS;AAAA,EACzCd,IAAIc,OAAEY;AAAAA,EACND,OAAOX,OAAEY,EAAST,SAAAA;AAAAA,EAClBU,OAAOb,OAAEY;AAAAA,EACTE,MAAMd,OAAEY,EAAST,SAAAA;AAAAA,EACjBY,KAAKf,OAAEY,EAAST,SAAAA;AAAAA,EAChBgB,WAAWnB,OAAEY;AAAAA,EACbQ,QAAQpB,OAAEY,EAAST,SAAAA;AAAAA,EACnBkB,QAAQrB,OAAEY,EAAST,SAAAA;AAAAA,EACnBmB,YAAYtB,OAAEY,EAAST,SAAAA;AAAAA,EACvBa,UAAUhB,OAASA,OAAEY,GAAUZ,QAAEiB,CAAS,EAAEd,SAAAA;AAC9C,CAAC;AAIM,MAAMoB,qBAAqBvB,OAAS;AAAA,EACzCwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBuB,eAAe1B,MAAQkB,kBAAkB,EAAEf,SAAAA;AAAAA,EAC3CwB,aAAa3B,OAAE4B,EAAStB,MAAMC,IAAI,CAAC,EAAEJ,SAAAA;AAAAA,EACrC0B,aAAa7B,OAAE4B,EAAStB,MAAMC,IAAI,CAAC,EAAEJ,SAAAA;AACvC,CAAC;AAIM,MAAM2B,uBAAuB9B,OAAS;AAAA,EAC3CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBjB,IAAIc,OAAEY,EAAST,SAAAA;AACjB,CAAC;AAIqCH,OAAS;AAAA,EAC7CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIoCH,OAAS;AAAA,EAC5CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIwCH,OAAS;AAAA,EAChDwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIM,MAAM4B,wBAAwB/B,MAAO,CAAC,OAAO,SAAS,QAAQ,CAAC;AAI/D,MAAMgC,wBAAwBhC,OAAS;AAAA,EAC5CW,OAAOX,OAAEY;AAAAA,EACTqB,OAAOjC,QAAEE;AAAAA,EACTgC,aAAalC,QAAEE;AAAAA,EACfiC,MAAMnC,QAAEE;AACV,CAAC;AAIM,MAAMkC,iBAAiBpC,OAAS;AAAA,EACrCqC,iBAAiBN;AAAAA,EACjBO,kBAAkBtC,MAAQgC,qBAAqB;AAAA,EAC/CO,kBAAkBvC,OAAEY,EAAST,SAAAA;AAC/B,CAAC;AAIM,MAAMqC,yBAAyBxC,OAAS;AAAA,EAC7CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBsC,UAAUL,eAAejC,SAAAA;AAC3B,CAAC;AAIM,MAAMuC,8BAA8B1C,OAAS;AAAA,EAClDqC,iBAAiBN,sBAAsB5B,SAAAA;AAAAA,EACvCmC,kBAAkBtC,MAAQgC,qBAAqB,EAAE7B,SAAAA;AACnD,CAAC;AAIM,MAAMwC,+BAA+B3C,OAAS;AAAA,EACnDwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBsC,UAAUL,eAAejC,SAAAA;AAC3B,CAAC;AAIM,MAAMyC,yBAAyB5C,OAAS;AAAA,EAC7C6C,OAAO7C,QAAEE,EAAUC,SAAAA;AACrB,CAAC;AAIsCH,OAAS;AAAA,EAC9CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClB2C,MAAM9C,QAAEE,EAAUC,SAAAA;AAAAA,EAClB4C,eAAe/C,OAAEY,EAAST,SAAAA;AAC5B,CAAC;AC7HD,MAAM6C,QAAQA,CAACC,UAAwCA,iBAAiBC,OAAOD,MAAME,gBAAgBC;AAErG,MAAMC,sBAAsBA,CAC1BZ,UACAa,QACa;AACb,QAAMC,MAAMd,UAAUH;AACtB,MAAI,CAACkB,MAAMC,QAAQF,GAAG,KAAKA,IAAIG,WAAW,EAAG,QAAO,CAAA;AAEpD,SAAOH,IACJI,IAAKC,CAAAA,SAAS;AACb,QAAI,CAACA,QAAQ,OAAOA,SAAS,SAAU,QAAO;AAC9C,UAAMjD,QAAQ,OAAQiD,KAA6BjD,UAAU,WAAYiD,KAA2BjD,MAAMxB,SAAS;AACnH,QAAI,CAACwB,MAAO,QAAO;AACnB,UAAMkD,UAAWD,KAAiCN,GAAG,MAAM;AAC3D,WAAOO,UAAU,OAAOlD;AAAAA,EAC1B,CAAC,EACAmD,OAAO,CAACnD,UAA2BoD,QAAQpD,KAAK,CAAC;AACtD;AAEA,MAAMqD,oBAAqG,OACzGC,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;AAC1CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,kBAAgCC,UAAUN,OAAO;AAChE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM;AAAA,IAAExC;AAAAA,EAAAA,IAAWF;AACnB,QAAMkB,kBAAkBoE,OAAOI,KAAKxE,oBAAoB;AACxD,QAAMG,aAAaiE,OAAOI,KAAKrE,eAAe;AAC9C,QAAMC,QAAQgE,OAAOI,KAAKpE,SAAS;AACnC,QAAMI,WAAW4D,OAAOI,KAAKhE,aAAa;AAE1C,QAAMiE,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QAAQ;AAAA,IAAE5F;AAAAA,EAAAA,CAAQ,EAAE6F,KAAAA;AAC1D,QAAMC,iBAAiB1B,oBAAoBZ,UAAU,OAAO;AAE5D,QAAMuC,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,QAAMe,eAA0C,CAC9C;AAAA,IAAEhG;AAAAA,EAAAA,GACFiG,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAI,CAACjE,gBAAiBgF,cAAa9C,KAAK;AAAA,IAAEb,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,CAAG;AAC1E,MAAI/E,yBAAyB+B,KAAK;AAAA,IAAEd,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,CAAG;AAChE,MAAIJ,eAAerB,SAAS,EAAGuB,cAAa9C,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AACpF,QAAMM,QAAiC;AAAA,IAAEC,MAAML;AAAAA,EAAAA;AAE/C,QAAMvD,gBAAiB,MAAMsD,kBAAkBO,KAAKF,KAAK,EACtDG,KAAK;AAAA,IAAErE,WAAW;AAAA,EAAA,CAAI,EACtBd,MAAMA,KAAK,EACXyE,KAAAA;AAEH,QAAMW,qBAAgD,CACpD;AAAA,IAAExG;AAAAA,EAAAA,GACF;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE/D,QAAQ;AAAA,MAAE+D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAIa,eAAerB,SAAS,EAAG+B,oBAAmBtD,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AAC1F,QAAMW,cAAuC;AAAA,IAAEJ,MAAMG;AAAAA,EAAAA;AAErD,QAAME,qBAAgD,CACpD;AAAA,IAAE1G;AAAAA,EAAAA,GACF;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE9D,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAIa,eAAerB,SAAS,EAAGiC,oBAAmBxD,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AAC1F,QAAMa,cAAuC;AAAA,IAAEN,MAAMK;AAAAA,EAAAA;AAErD,QAAM,CAAChE,aAAaE,WAAW,IAAI,MAAMgE,QAAQC,IAAI,CACnDd,kBAAkBe,eAAeH,WAAW,GAC5CZ,kBAAkBe,eAAeL,WAAW,CAAC,CAC9C;AAED,QAAMM,MAAMvF,WAAW,oBAAIyC,KAAAA,IAAS;AACpC,MAAI8C,OAAOnE,cAAc,GAAG;AAC1B,UAAMmD,kBAAkBiB,WAAWP,aAAa;AAAA,MAAEQ,MAAM;AAAA,QAAE9E,QAAQ4E;AAAAA,MAAAA;AAAAA,IAAI,CAAG;AAAA,EAC3E;AAEA,SAAO1B,mBAAiC6B,MAAM;AAAA,IAC5C3E,IAAI;AAAA,IACJE,eAAeA,cAAciC,IAAKyC,CAAAA,OAAO;AAAA,MACvClH,IAAImH,OAAOD,EAAEE,GAAG;AAAA,MAChB3F,OAAO,OAAOyF,EAAEzF,UAAU,WAAWyF,EAAEzF,QAAQyC;AAAAA,MAC/CvC,OAAO,OAAOuF,EAAEvF,UAAU,WAAWuF,EAAEvF,QAAQ;AAAA,MAC/CC,MAAM,OAAOsF,EAAEtF,SAAS,WAAWsF,EAAEtF,OAAOsC;AAAAA,MAC5CrC,KAAK,OAAOqF,EAAErF,QAAQ,WAAWqF,EAAErF,MAAMqC;AAAAA,MACzCjC,WAAW6B,MAAMoD,EAAEjF,SAAS,MAAK,oBAAI+B,KAAAA,GAAOC,YAAAA;AAAAA,MAC5C/B,QAAQ4B,MAAMoD,EAAEhF,MAAM,MAAM4E,OAAO,CAACI,EAAE9E,cAAc,CAAC8E,EAAEhF,SAAS4E,IAAI7C,gBAAgBC;AAAAA,MACpF/B,QAAQ2B,MAAMoD,EAAE/E,MAAM;AAAA,MACtBC,YAAY0B,MAAMoD,EAAE9E,UAAU;AAAA,MAC9BN,UAAU,OAAOoF,EAAEpF,aAAa,YAAYoF,EAAEpF,aAAa,OAAQoF,EAAEpF,WAAuCoC;AAAAA,IAAAA,EAC5G;AAAA,IACFzB;AAAAA,IACAE,aAAamE,MAAM,IAAInE;AAAAA,EAAAA,CACxB;AACH;AAEA,MAAM0E,mCAAwH,OAC5HtC,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,oBAAkCC,UAAUN,OAAO;AAClE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM+E,UAAU,MAAMC,mBAAmB7H,KAAK;AAAA,IAC5CK,QAAQF,QAAQE;AAAAA,IAChB0B,OAAO0D,OAAOI,KAAK9D;AAAAA,IACnBE,OAAOwD,OAAOI,KAAK5D;AAAAA,IACnBC,MAAMuD,OAAOI,KAAK3D;AAAAA,IAClBC,KAAKsD,OAAOI,KAAK1D;AAAAA,IACjBC,UAAUqD,OAAOI,KAAKzD;AAAAA,EAAAA,GACrBkD,OAAO;AAEV,SAAOI,qBAAmC6B,MAAM;AAAA,IAAE3E,IAAI;AAAA,IAAMtC,IAAIsH,QAAQtH;AAAAA,EAAAA,CAAI;AAC9E;AAEA,MAAMwH,WAAuE,OAC3EC,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMmF,iBAAiB,OAAOhI,IAAIE,IAAI+H,OAAOD,mBAAmB,WAAWhI,IAAIE,IAAI+H,OAAOD,eAAezH,KAAAA,IAAS;AAClH,MAAI,CAACyH,gBAAgB;AACnBhI,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMuD,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AACtF,QAAM8B,0BAAU9C,KAAAA;AAEhB,MAAI;AACF,UAAM8B,kBAAkB8B,UACtB;AAAA,MAAExB,MAAM,CAAC;AAAA,QAAEgB,KAAKM;AAAAA,MAAAA,GAAkB;AAAA,QAAEtF,YAAY;AAAA,UAAE6D,SAAS;AAAA,QAAA;AAAA,MAAM,GAAKD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAAA,IAAA,GAC/H;AAAA,MAAEgC,MAAM;AAAA,QAAE7E,QAAQ2E;AAAAA,QAAK5E,QAAQ4E;AAAAA,MAAAA;AAAAA,IAAI,CACrC;AAAA,EACF,QAAQ;AACNpH,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,SAAO;AAAA,IAAED,IAAI;AAAA,EAAA;AACf;AAEA,MAAMuF,cAA6E,OACjFJ,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QAAQ;AAAA,IAAE5F,QAAQF,QAAQE;AAAAA,EAAAA,CAAQ,EAAE6F,KAAAA;AAC1E,QAAMC,iBAAiB1B,oBAAoBZ,UAAU,OAAO;AAE5D,QAAMuC,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,QAAMe,eAA0C,CAC9C;AAAA,IAAEhG,QAAQF,QAAQE;AAAAA,EAAAA,GAClB;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE9D,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAE3D,MAAIa,eAAerB,SAAS,EAAGuB,cAAa9C,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AACpF,QAAMM,QAAiC;AAAA,IAAEC,MAAML;AAAAA,EAAAA;AAE/C,QAAMe,0BAAU9C,KAAAA;AAChB,QAAM8B,kBAAkBiB,WAAWZ,OAAO;AAAA,IAAEa,MAAM;AAAA,MAAE7E,QAAQ2E;AAAAA,MAAK5E,QAAQ4E;AAAAA,IAAAA;AAAAA,EAAI,CAAG;AAEhF,SAAO;AAAA,IAAExE,IAAI;AAAA,EAAA;AACf;AAEA,MAAMwF,sBAAiF,OACrFL,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMmF,iBAAiB,OAAOhI,IAAIE,IAAI+H,OAAOD,mBAAmB,WAAWhI,IAAIE,IAAI+H,OAAOD,eAAezH,KAAAA,IAAS;AAClH,MAAI,CAACyH,gBAAgB;AACnBhI,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMuD,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,MAAI;AACF,UAAMc,kBAAkB8B,UACtB;AAAA,MAAExB,MAAM,CAAC;AAAA,QAAEgB,KAAKM;AAAAA,MAAAA,GAAkB;AAAA,QAAEtF,YAAY;AAAA,UAAE6D,SAAS;AAAA,QAAA;AAAA,MAAM,GAAKD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAAA,IAAA,GAC/H;AAAA,MAAEgC,MAAM;AAAA,QAAE5E,gCAAgB4B,KAAAA;AAAAA,MAAK;AAAA,IAAE,CACnC;AAAA,EACF,QAAQ;AACNtE,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,SAAO;AAAA,IAAED,IAAI;AAAA,EAAA;AACf;AAEA,MAAMyF,cAA0E,OAC9EN,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,wBAAwB,GAAG;AAClDxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QACpC;AAAA,IAAES,MAAM,CAAC;AAAA,MAAErG,QAAQF,QAAQE;AAAAA,IAAAA,GAAUiG,qBAAqBhB,SAAS,QAAQ,wBAAwB,CAAC;AAAA,EAAA,CACtG,EAAEY,KAAAA;AAEF,QAAMoC,qBAAqB,OAAOzE,UAAUJ,oBAAoB,WAAWI,SAASJ,kBAAkB;AACtG,QAAMA,kBACJ6E,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;AAEN,QAAM5E,mBAAmBkB,MAAMC,QAAQhB,UAAUH,gBAAgB,IAC7DG,SAAUH,iBAAiBqB,IAAKC,CAAAA,UAAU;AAAA,IAC1CjD,OAAO,OAAOiD,KAAKjD,UAAU,WAAWiD,KAAKjD,QAAQ;AAAA,IACrDsB,OAAO2B,KAAK3B,UAAU;AAAA,IACtBC,aAAa0B,KAAK1B,gBAAgB;AAAA,IAClCC,MAAMyB,KAAKzB,SAAS;AAAA,EAAA,EACpB,EAAE2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOY,uBAAqC6B,MAAM;AAAA,IAChD3E,IAAI;AAAA,IACJiB,UAAU;AAAA,MACRJ;AAAAA,MACAC;AAAAA,MACAC,kBAAkBS,MAAMP,UAAUF,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM4E,iBAAsH,OAC1HlD,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,wBAAwB,GAAG;AACpDxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,4BAA0CC,UAAUN,OAAO;AAC1E,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMkD,aAAsC,CAAA;AAE5C,MAAI/C,OAAOI,KAAKpC,iBAAiB;AAC/B+E,eAAW/E,kBAAkBgC,OAAOI,KAAKpC;AAAAA,EAC3C;AAEA,MAAIgC,OAAOI,KAAKnC,kBAAkB;AAChC,UAAM+E,2BAAWC,IAAAA;AACjB,UAAMC,OAAOlD,OAAOI,KAAKnC,iBACtBqB,IAAKC,CAAAA,UAAU;AAAA,MACdjD,OAAOiD,KAAKjD,MAAMxB,KAAAA;AAAAA,MAClB8C,OAAO2B,KAAK3B;AAAAA,MACZC,aAAa0B,KAAK1B;AAAAA,MAClBC,MAAMyB,KAAKzB;AAAAA,IAAAA,EACX,EACD2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,EACtCI,OAAQF,CAAAA,SAAS;AAChB,UAAIyD,KAAKG,IAAI5D,KAAKjD,KAAK,EAAG,QAAO;AACjC0G,WAAKI,IAAI7D,KAAKjD,KAAK;AACnB,aAAO;AAAA,IACT,CAAC;AAEHyG,eAAW9E,mBAAmBiF;AAAAA,EAChC;AAEA,QAAMG,MAA+B;AAAA,IACnCC,cAAc;AAAA,MAAE1I,QAAQF,QAAQE;AAAAA,IAAAA;AAAAA,EAAO;AAGzC,MAAI2I,OAAOC,KAAKT,UAAU,EAAE1D,SAAS,GAAG;AACtCgE,QAAIxB,OAAOkB;AAAAA,EACb;AAEA,QAAM3E,WAAY,MAAMiC,cAAcoD,iBACpC;AAAA,IAAExC,MAAM,CAAC;AAAA,MAAErG,QAAQF,QAAQE;AAAAA,IAAAA,GAAUiG,qBAAqBhB,SAAS,UAAU,wBAAwB,CAAC;AAAA,EAAA,GACtGwD,KACA;AAAA,IAAEK,QAAQ;AAAA,IAAMC,gBAAgB;AAAA,IAASC,qBAAqB;AAAA,EAAA,CAChE,EAAEnD,KAAAA;AAEF,QAAMoC,qBAAqB,OAAOzE,UAAUJ,oBAAoB,WAAWI,SAASJ,kBAAkB;AACtG,QAAMA,kBACJ6E,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;AAEN,QAAM5E,mBAAmBkB,MAAMC,QAAQhB,UAAUH,gBAAgB,IAC7DG,SAAUH,iBAAiBqB,IAAKC,CAAAA,UAAU;AAAA,IAC1CjD,OAAO,OAAOiD,KAAKjD,UAAU,WAAWiD,KAAKjD,QAAQ;AAAA,IACrDsB,OAAO2B,KAAK3B,UAAU;AAAA,IACtBC,aAAa0B,KAAK1B,gBAAgB;AAAA,IAClCC,MAAMyB,KAAKzB,SAAS;AAAA,EAAA,EACpB,EAAE2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOY,6BAA2C6B,MAAM;AAAA,IACtD3E,IAAI;AAAA,IACJiB,UAAU;AAAA,MACRJ;AAAAA,MACAC;AAAAA,MACAC,kBAAkBS,MAAMP,UAAUF,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM2F,YAAuG,OAC3GjE,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;AAC1CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,uBAAqCC,UAAUN,OAAO;AACrE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM0G,SAAS,MAAMC,+BAA+BxJ,KAAK;AAAA,IACvDK,QAAQF,QAAQE;AAAAA,IAChBiF;AAAAA,IACArB,OAAOwB,OAAOI,KAAK5B,UAAU;AAAA,EAAA,CAC9B;AAED,MAAI,CAACsF,OAAO3G,IAAI;AACd5C,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO0G,OAAO1G;AAAAA,IAAAA;AAAAA,EACpC;AAEA,SAAO;AAAA,IACLD,IAAI;AAAA,IACJsB,MAAMqF,OAAOrF;AAAAA,IACb,GAAIqF,OAAOpF,gBAAgB;AAAA,MAAEA,eAAeoF,OAAOpF;AAAAA,IAAAA,IAAkB,CAAA;AAAA,EAAC;AAE1E;AAEA,MAAA,UAAe,CAACsF,QAAa;AAC3BA,MAAIC,KAAKhE,WAAyBN,iBAAiB;AACnDqE,MAAIC,KAAKhE,aAA2BiC,gCAAgC;AACpE8B,MAAIC,KAAKhE,eAA6BoC,QAAQ;AAC9C2B,MAAIC,KAAKhE,kBAAgCyC,WAAW;AACpDsB,MAAIC,KAAKhE,cAA4B0C,mBAAmB;AACxDqB,MAAIzD,IAAIN,eAA6B2C,WAAW;AAChDoB,MAAIE,IAAIjE,eAA6B6C,cAAc;AACnDkB,MAAIC,KAAKhE,gBAA8B4D,SAAS;AAClD;"}
+{"version":3,"file":"handler-D58VS91o.js","sources":["../src/notifications/api/notifications/shared.ts","../src/notifications/api/notifications/index.ts","../src/notifications/api/notifications/handler.ts"],"sourcesContent":["import type { Ctx } from \"@rpcbase/api\"\n\n\ntype NotificationSessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport const getSessionUser = (ctx: Ctx) => {\n  const rawSessionUser = (ctx.req.session as { user?: NotificationSessionUser } | null | undefined)?.user\n  const userId = typeof rawSessionUser?.id === \"string\" ? rawSessionUser.id.trim() : \"\"\n  const tenantId = typeof rawSessionUser?.currentTenantId === \"string\" ? rawSessionUser.currentTenantId.trim() : \"\"\n\n  if (!userId) {\n    ctx.res.status(401)\n    return null\n  }\n\n  if (!tenantId) {\n    ctx.res.status(400)\n    return null\n  }\n\n  return { userId, tenantId }\n}\n\n","import { z } from \"zod\"\n\n\nexport const ListRoute = \"/api/rb/notifications\"\nexport const CreateRoute = \"/api/rb/notifications/create\"\nexport const MarkReadRoute = \"/api/rb/notifications/:notificationId/read\"\nexport const ArchiveRoute = \"/api/rb/notifications/:notificationId/archive\"\nexport const MarkAllReadRoute = \"/api/rb/notifications/mark-all-read\"\nexport const SettingsRoute = \"/api/rb/notifications/settings\"\nexport const DigestRunRoute = \"/api/rb/notifications/digest/run\"\n\nexport const listRequestSchema = z.object({\n  includeArchived: z.boolean().optional(),\n  unreadOnly: z.boolean().optional(),\n  limit: z.number().int().min(1).max(200).optional(),\n  markSeen: z.boolean().optional(),\n})\n\nexport type ListRequestPayload = z.infer<typeof listRequestSchema>\n\nexport const createRequestSchema = z.object({\n  topic: z.string().trim().min(1).optional(),\n  title: z.string().trim().min(1),\n  body: z.string().trim().optional(),\n  url: z.string().trim().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type CreateRequestPayload = z.infer<typeof createRequestSchema>\n\nexport const notificationSchema = z.object({\n  id: z.string(),\n  topic: z.string().optional(),\n  title: z.string(),\n  body: z.string().optional(),\n  url: z.string().optional(),\n  createdAt: z.string(),\n  seenAt: z.string().optional(),\n  readAt: z.string().optional(),\n  archivedAt: z.string().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type NotificationPayload = z.infer<typeof notificationSchema>\n\nexport const listResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  notifications: z.array(notificationSchema).optional(),\n  unreadCount: z.number().int().min(0).optional(),\n  unseenCount: z.number().int().min(0).optional(),\n})\n\nexport type ListResponsePayload = z.infer<typeof listResponseSchema>\n\nexport const createResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  id: z.string().optional(),\n})\n\nexport type CreateResponsePayload = z.infer<typeof createResponseSchema>\n\nexport const markReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkReadResponsePayload = z.infer<typeof markReadResponseSchema>\n\nexport const archiveResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ArchiveResponsePayload = z.infer<typeof archiveResponseSchema>\n\nexport const markAllReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkAllReadResponsePayload = z.infer<typeof markAllReadResponseSchema>\n\nexport const digestFrequencySchema = z.enum([\"off\", \"daily\", \"weekly\"])\n\nexport type DigestFrequency = z.infer<typeof digestFrequencySchema>\n\nexport const topicPreferenceSchema = z.object({\n  topic: z.string(),\n  inApp: z.boolean(),\n  emailDigest: z.boolean(),\n  push: z.boolean(),\n})\n\nexport type TopicPreferencePayload = z.infer<typeof topicPreferenceSchema>\n\nexport const settingsSchema = z.object({\n  digestFrequency: digestFrequencySchema,\n  topicPreferences: z.array(topicPreferenceSchema),\n  lastDigestSentAt: z.string().optional(),\n})\n\nexport type SettingsPayload = z.infer<typeof settingsSchema>\n\nexport const settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type SettingsResponsePayload = z.infer<typeof settingsResponseSchema>\n\nexport const updateSettingsRequestSchema = z.object({\n  digestFrequency: digestFrequencySchema.optional(),\n  topicPreferences: z.array(topicPreferenceSchema).optional(),\n})\n\nexport type UpdateSettingsRequestPayload = z.infer<typeof updateSettingsRequestSchema>\n\nexport const updateSettingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type UpdateSettingsResponsePayload = z.infer<typeof updateSettingsResponseSchema>\n\nexport const digestRunRequestSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport type DigestRunRequestPayload = z.infer<typeof digestRunRequestSchema>\n\nexport const digestRunResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  sent: z.boolean().optional(),\n  skippedReason: z.string().optional(),\n})\n\nexport type DigestRunResponsePayload = z.infer<typeof digestRunResponseSchema>\n","import { Api, type ApiHandler } from \"@rpcbase/api\"\nimport { models, type IRBNotification, type IRBNotificationSettings } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery } from \"@rpcbase/db/acl\"\n\nimport { createNotification } from \"../../createNotification\"\nimport { sendNotificationsDigestForUser } from \"../../digest\"\nimport { getSessionUser } from \"./shared\"\n\nimport * as Notifications from \"./index\"\n\n\ntype NotificationDoc = IRBNotification & { _id: unknown }\ntype SettingsDoc = IRBNotificationSettings & { _id: unknown }\n\nconst toIso = (value: unknown): string | undefined => (value instanceof Date ? value.toISOString() : undefined)\n\nconst buildDisabledTopics = (\n  settings: SettingsDoc | null,\n  key: \"inApp\" | \"emailDigest\",\n): string[] => {\n  const raw = settings?.topicPreferences\n  if (!Array.isArray(raw) || raw.length === 0) return []\n\n  return raw\n    .map((pref) => {\n      if (!pref || typeof pref !== \"object\") return null\n      const topic = typeof (pref as { topic?: unknown }).topic === \"string\" ? (pref as { topic: string }).topic.trim() : \"\"\n      if (!topic) return null\n      const enabled = (pref as Record<string, unknown>)[key] === true\n      return enabled ? null : topic\n    })\n    .filter((topic): topic is string => Boolean(topic))\n}\n\nconst listNotifications: ApiHandler<Notifications.ListRequestPayload, Notifications.ListResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.listRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { userId } = session\n  const includeArchived = parsed.data.includeArchived === true\n  const unreadOnly = parsed.data.unreadOnly === true\n  const limit = parsed.data.limit ?? 50\n  const markSeen = parsed.data.markSeen === true\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (!includeArchived) queryFilters.push({ archivedAt: { $exists: false } })\n  if (unreadOnly) queryFilters.push({ readAt: { $exists: false } })\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const notifications = (await NotificationModel.find(query)\n    .sort({ createdAt: -1 })\n    .limit(limit)\n    .lean()) as NotificationDoc[]\n\n  const unseenQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { seenAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unseenQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unseenQuery: Record<string, unknown> = { $and: unseenQueryFilters }\n\n  const unreadQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unreadQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unreadQuery: Record<string, unknown> = { $and: unreadQueryFilters }\n\n  const [unreadCount, unseenCount] = await Promise.all([\n    NotificationModel.countDocuments(unreadQuery),\n    NotificationModel.countDocuments(unseenQuery),\n  ])\n\n  const now = markSeen ? new Date() : null\n  if (now && unseenCount > 0) {\n    await NotificationModel.updateMany(unseenQuery, { $set: { seenAt: now } })\n  }\n\n  return Notifications.listResponseSchema.parse({\n    ok: true,\n    notifications: notifications.map((n) => ({\n      id: String(n._id),\n      topic: typeof n.topic === \"string\" ? n.topic : undefined,\n      title: typeof n.title === \"string\" ? n.title : \"\",\n      body: typeof n.body === \"string\" ? n.body : undefined,\n      url: typeof n.url === \"string\" ? n.url : undefined,\n      createdAt: toIso(n.createdAt) ?? new Date().toISOString(),\n      seenAt: toIso(n.seenAt) ?? (now && !n.archivedAt && !n.seenAt ? now.toISOString() : undefined),\n      readAt: toIso(n.readAt),\n      archivedAt: toIso(n.archivedAt),\n      metadata: typeof n.metadata === \"object\" && n.metadata !== null ? (n.metadata as Record<string, unknown>) : undefined,\n    })),\n    unreadCount,\n    unseenCount: now ? 0 : unseenCount,\n  })\n}\n\nconst createNotificationForCurrentUser: ApiHandler<Notifications.CreateRequestPayload, Notifications.CreateResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"create\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.createRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const created = await createNotification(ctx, {\n    userId: session.userId,\n    topic: parsed.data.topic,\n    title: parsed.data.title,\n    body: parsed.data.body,\n    url: parsed.data.url,\n    metadata: parsed.data.metadata,\n  }, ability)\n\n  return Notifications.createResponseSchema.parse({ ok: true, id: created.id })\n}\n\nconst markRead: ApiHandler<unknown, Notifications.MarkReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const now = new Date()\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { readAt: now, seenAt: now } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst markAllRead: ApiHandler<unknown, Notifications.MarkAllReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId: session.userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId: session.userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const now = new Date()\n  await NotificationModel.updateMany(query, { $set: { readAt: now, seenAt: now } })\n\n  return { ok: true }\n}\n\nconst archiveNotification: ApiHandler<unknown, Notifications.ArchiveResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { archivedAt: new Date() } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst getSettings: ApiHandler<unknown, Notifications.SettingsResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"read\", \"RBNotificationSettings\")] },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.settingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst updateSettings: ApiHandler<Notifications.UpdateSettingsRequestPayload, Notifications.UpdateSettingsResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.updateSettingsRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const nextValues: Record<string, unknown> = {}\n\n  if (parsed.data.digestFrequency) {\n    nextValues.digestFrequency = parsed.data.digestFrequency\n  }\n\n  if (parsed.data.topicPreferences) {\n    const seen = new Set<string>()\n    const next = parsed.data.topicPreferences\n      .map((pref) => ({\n        topic: pref.topic.trim(),\n        inApp: pref.inApp,\n        emailDigest: pref.emailDigest,\n        push: pref.push,\n      }))\n      .filter((pref) => pref.topic.length > 0)\n      .filter((pref) => {\n        if (seen.has(pref.topic)) return false\n        seen.add(pref.topic)\n        return true\n      })\n\n    nextValues.topicPreferences = next\n  }\n\n  const ops: Record<string, unknown> = {\n    $setOnInsert: { userId: session.userId },\n  }\n\n  if (Object.keys(nextValues).length > 0) {\n    ops.$set = nextValues\n  }\n\n  const settings = (await SettingsModel.findOneAndUpdate(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"update\", \"RBNotificationSettings\")] },\n    ops,\n    { upsert: true, returnDocument: \"after\", setDefaultsOnInsert: true },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.updateSettingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst runDigest: ApiHandler<Notifications.DigestRunRequestPayload, Notifications.DigestRunResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.digestRunRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const result = await sendNotificationsDigestForUser(ctx, {\n    userId: session.userId,\n    ability,\n    force: parsed.data.force === true,\n  })\n\n  if (!result.ok) {\n    ctx.res.status(500)\n    return { ok: false, error: result.error }\n  }\n\n  return {\n    ok: true,\n    sent: result.sent,\n    ...(result.skippedReason ? { skippedReason: result.skippedReason } : {}),\n  }\n}\n\nexport default (api: Api) => {\n  api.post(Notifications.ListRoute, listNotifications)\n  api.post(Notifications.CreateRoute, createNotificationForCurrentUser)\n  api.post(Notifications.MarkReadRoute, markRead)\n  api.post(Notifications.MarkAllReadRoute, markAllRead)\n  api.post(Notifications.ArchiveRoute, archiveNotification)\n  api.get(Notifications.SettingsRoute, getSettings)\n  api.put(Notifications.SettingsRoute, updateSettings)\n  api.post(Notifications.DigestRunRoute, runDigest)\n}\n"],"names":["getSessionUser","ctx","rawSessionUser","req","session","user","userId","id","trim","tenantId","currentTenantId","res","status","ListRoute","CreateRoute","MarkReadRoute","ArchiveRoute","MarkAllReadRoute","SettingsRoute","DigestRunRoute","listRequestSchema","z","includeArchived","boolean","optional","unreadOnly","limit","int","min","max","markSeen","createRequestSchema","topic","string","title","body","url","metadata","unknown","notificationSchema","createdAt","seenAt","readAt","archivedAt","listResponseSchema","ok","error","notifications","unreadCount","number","unseenCount","createResponseSchema","digestFrequencySchema","topicPreferenceSchema","inApp","emailDigest","push","settingsSchema","digestFrequency","topicPreferences","lastDigestSentAt","settingsResponseSchema","settings","updateSettingsRequestSchema","updateSettingsResponseSchema","digestRunRequestSchema","force","sent","skippedReason","toIso","value","Date","toISOString","undefined","buildDisabledTopics","key","raw","Array","isArray","length","map","pref","enabled","filter","Boolean","listNotifications","payload","ability","buildAbilityFromSession","can","parsed","Notifications","safeParse","success","data","SettingsModel","models","get","findOne","lean","disabledTopics","NotificationModel","queryFilters","getAccessibleByQuery","$exists","$nin","query","$and","find","sort","unseenQueryFilters","unseenQuery","unreadQueryFilters","unreadQuery","Promise","all","countDocuments","now","updateMany","$set","parse","n","String","_id","createNotificationForCurrentUser","created","createNotification","markRead","_payload","notificationId","params","updateOne","markAllRead","archiveNotification","getSettings","digestFrequencyRaw","updateSettings","nextValues","seen","Set","next","has","add","ops","$setOnInsert","Object","keys","findOneAndUpdate","upsert","returnDocument","setDefaultsOnInsert","runDigest","result","sendNotificationsDigestForUser","api","post","put"],"mappings":";;;;AAQO,MAAMA,iBAAiBA,CAACC,QAAa;AAC1C,QAAMC,iBAAkBD,IAAIE,IAAIC,SAAmEC;AACnG,QAAMC,SAAS,OAAOJ,gBAAgBK,OAAO,WAAWL,eAAeK,GAAGC,SAAS;AACnF,QAAMC,WAAW,OAAOP,gBAAgBQ,oBAAoB,WAAWR,eAAeQ,gBAAgBF,SAAS;AAE/G,MAAI,CAACF,QAAQ;AACXL,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,CAACH,UAAU;AACbR,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IAAEN;AAAAA,IAAQG;AAAAA,EAAAA;AACnB;ACrBO,MAAMI,YAAY;AAClB,MAAMC,cAAc;AACpB,MAAMC,gBAAgB;AACtB,MAAMC,eAAe;AACrB,MAAMC,mBAAmB;AACzB,MAAMC,gBAAgB;AACtB,MAAMC,iBAAiB;AAEvB,MAAMC,oBAAoBC,OAAS;AAAA,EACxCC,iBAAiBD,QAAEE,EAAUC,SAAAA;AAAAA,EAC7BC,YAAYJ,QAAEE,EAAUC,SAAAA;AAAAA,EACxBE,OAAOL,SAAWM,MAAMC,IAAI,CAAC,EAAEC,IAAI,GAAG,EAAEL,SAAAA;AAAAA,EACxCM,UAAUT,QAAEE,EAAUC,SAAAA;AACxB,CAAC;AAIM,MAAMO,sBAAsBV,OAAS;AAAA,EAC1CW,OAAOX,OAAEY,EAASzB,OAAOoB,IAAI,CAAC,EAAEJ,SAAAA;AAAAA,EAChCU,OAAOb,OAAEY,EAASzB,KAAAA,EAAOoB,IAAI,CAAC;AAAA,EAC9BO,MAAMd,OAAEY,EAASzB,KAAAA,EAAOgB,SAAAA;AAAAA,EACxBY,KAAKf,OAAEY,EAASzB,KAAAA,EAAOgB,SAAAA;AAAAA,EACvBa,UAAUhB,OAASA,OAAEY,GAAUZ,QAAEiB,CAAS,EAAEd,SAAAA;AAC9C,CAAC;AAIM,MAAMe,qBAAqBlB,OAAS;AAAA,EACzCd,IAAIc,OAAEY;AAAAA,EACND,OAAOX,OAAEY,EAAST,SAAAA;AAAAA,EAClBU,OAAOb,OAAEY;AAAAA,EACTE,MAAMd,OAAEY,EAAST,SAAAA;AAAAA,EACjBY,KAAKf,OAAEY,EAAST,SAAAA;AAAAA,EAChBgB,WAAWnB,OAAEY;AAAAA,EACbQ,QAAQpB,OAAEY,EAAST,SAAAA;AAAAA,EACnBkB,QAAQrB,OAAEY,EAAST,SAAAA;AAAAA,EACnBmB,YAAYtB,OAAEY,EAAST,SAAAA;AAAAA,EACvBa,UAAUhB,OAASA,OAAEY,GAAUZ,QAAEiB,CAAS,EAAEd,SAAAA;AAC9C,CAAC;AAIM,MAAMoB,qBAAqBvB,OAAS;AAAA,EACzCwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBuB,eAAe1B,MAAQkB,kBAAkB,EAAEf,SAAAA;AAAAA,EAC3CwB,aAAa3B,OAAE4B,EAAStB,MAAMC,IAAI,CAAC,EAAEJ,SAAAA;AAAAA,EACrC0B,aAAa7B,OAAE4B,EAAStB,MAAMC,IAAI,CAAC,EAAEJ,SAAAA;AACvC,CAAC;AAIM,MAAM2B,uBAAuB9B,OAAS;AAAA,EAC3CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBjB,IAAIc,OAAEY,EAAST,SAAAA;AACjB,CAAC;AAIqCH,OAAS;AAAA,EAC7CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIoCH,OAAS;AAAA,EAC5CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIwCH,OAAS;AAAA,EAChDwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AACpB,CAAC;AAIM,MAAM4B,wBAAwB/B,MAAO,CAAC,OAAO,SAAS,QAAQ,CAAC;AAI/D,MAAMgC,wBAAwBhC,OAAS;AAAA,EAC5CW,OAAOX,OAAEY;AAAAA,EACTqB,OAAOjC,QAAEE;AAAAA,EACTgC,aAAalC,QAAEE;AAAAA,EACfiC,MAAMnC,QAAEE;AACV,CAAC;AAIM,MAAMkC,iBAAiBpC,OAAS;AAAA,EACrCqC,iBAAiBN;AAAAA,EACjBO,kBAAkBtC,MAAQgC,qBAAqB;AAAA,EAC/CO,kBAAkBvC,OAAEY,EAAST,SAAAA;AAC/B,CAAC;AAIM,MAAMqC,yBAAyBxC,OAAS;AAAA,EAC7CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBsC,UAAUL,eAAejC,SAAAA;AAC3B,CAAC;AAIM,MAAMuC,8BAA8B1C,OAAS;AAAA,EAClDqC,iBAAiBN,sBAAsB5B,SAAAA;AAAAA,EACvCmC,kBAAkBtC,MAAQgC,qBAAqB,EAAE7B,SAAAA;AACnD,CAAC;AAIM,MAAMwC,+BAA+B3C,OAAS;AAAA,EACnDwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClBsC,UAAUL,eAAejC,SAAAA;AAC3B,CAAC;AAIM,MAAMyC,yBAAyB5C,OAAS;AAAA,EAC7C6C,OAAO7C,QAAEE,EAAUC,SAAAA;AACrB,CAAC;AAIsCH,OAAS;AAAA,EAC9CwB,IAAIxB,QAAEE;AAAAA,EACNuB,OAAOzB,OAAEY,EAAST,SAAAA;AAAAA,EAClB2C,MAAM9C,QAAEE,EAAUC,SAAAA;AAAAA,EAClB4C,eAAe/C,OAAEY,EAAST,SAAAA;AAC5B,CAAC;AC7HD,MAAM6C,QAAQA,CAACC,UAAwCA,iBAAiBC,OAAOD,MAAME,gBAAgBC;AAErG,MAAMC,sBAAsBA,CAC1BZ,UACAa,QACa;AACb,QAAMC,MAAMd,UAAUH;AACtB,MAAI,CAACkB,MAAMC,QAAQF,GAAG,KAAKA,IAAIG,WAAW,EAAG,QAAO,CAAA;AAEpD,SAAOH,IACJI,IAAKC,CAAAA,SAAS;AACb,QAAI,CAACA,QAAQ,OAAOA,SAAS,SAAU,QAAO;AAC9C,UAAMjD,QAAQ,OAAQiD,KAA6BjD,UAAU,WAAYiD,KAA2BjD,MAAMxB,SAAS;AACnH,QAAI,CAACwB,MAAO,QAAO;AACnB,UAAMkD,UAAWD,KAAiCN,GAAG,MAAM;AAC3D,WAAOO,UAAU,OAAOlD;AAAAA,EAC1B,CAAC,EACAmD,OAAO,CAACnD,UAA2BoD,QAAQpD,KAAK,CAAC;AACtD;AAEA,MAAMqD,oBAAqG,OACzGC,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;AAC1CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,kBAAgCC,UAAUN,OAAO;AAChE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM;AAAA,IAAExC;AAAAA,EAAAA,IAAWF;AACnB,QAAMkB,kBAAkBoE,OAAOI,KAAKxE,oBAAoB;AACxD,QAAMG,aAAaiE,OAAOI,KAAKrE,eAAe;AAC9C,QAAMC,QAAQgE,OAAOI,KAAKpE,SAAS;AACnC,QAAMI,WAAW4D,OAAOI,KAAKhE,aAAa;AAE1C,QAAMiE,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QAAQ;AAAA,IAAE5F;AAAAA,EAAAA,CAAQ,EAAE6F,KAAAA;AAC1D,QAAMC,iBAAiB1B,oBAAoBZ,UAAU,OAAO;AAE5D,QAAMuC,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,QAAMe,eAA0C,CAC9C;AAAA,IAAEhG;AAAAA,EAAAA,GACFiG,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAI,CAACjE,gBAAiBgF,cAAa9C,KAAK;AAAA,IAAEb,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,CAAG;AAC1E,MAAI/E,yBAAyB+B,KAAK;AAAA,IAAEd,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,CAAG;AAChE,MAAIJ,eAAerB,SAAS,EAAGuB,cAAa9C,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AACpF,QAAMM,QAAiC;AAAA,IAAEC,MAAML;AAAAA,EAAAA;AAE/C,QAAMvD,gBAAiB,MAAMsD,kBAAkBO,KAAKF,KAAK,EACtDG,KAAK;AAAA,IAAErE,WAAW;AAAA,EAAA,CAAI,EACtBd,MAAMA,KAAK,EACXyE,KAAAA;AAEH,QAAMW,qBAAgD,CACpD;AAAA,IAAExG;AAAAA,EAAAA,GACF;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE/D,QAAQ;AAAA,MAAE+D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAIa,eAAerB,SAAS,EAAG+B,oBAAmBtD,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AAC1F,QAAMW,cAAuC;AAAA,IAAEJ,MAAMG;AAAAA,EAAAA;AAErD,QAAME,qBAAgD,CACpD;AAAA,IAAE1G;AAAAA,EAAAA,GACF;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE9D,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,QAAQ,gBAAgB,CAAC;AAEzD,MAAIa,eAAerB,SAAS,EAAGiC,oBAAmBxD,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AAC1F,QAAMa,cAAuC;AAAA,IAAEN,MAAMK;AAAAA,EAAAA;AAErD,QAAM,CAAChE,aAAaE,WAAW,IAAI,MAAMgE,QAAQC,IAAI,CACnDd,kBAAkBe,eAAeH,WAAW,GAC5CZ,kBAAkBe,eAAeL,WAAW,CAAC,CAC9C;AAED,QAAMM,MAAMvF,WAAW,oBAAIyC,KAAAA,IAAS;AACpC,MAAI8C,OAAOnE,cAAc,GAAG;AAC1B,UAAMmD,kBAAkBiB,WAAWP,aAAa;AAAA,MAAEQ,MAAM;AAAA,QAAE9E,QAAQ4E;AAAAA,MAAAA;AAAAA,IAAI,CAAG;AAAA,EAC3E;AAEA,SAAO1B,mBAAiC6B,MAAM;AAAA,IAC5C3E,IAAI;AAAA,IACJE,eAAeA,cAAciC,IAAKyC,CAAAA,OAAO;AAAA,MACvClH,IAAImH,OAAOD,EAAEE,GAAG;AAAA,MAChB3F,OAAO,OAAOyF,EAAEzF,UAAU,WAAWyF,EAAEzF,QAAQyC;AAAAA,MAC/CvC,OAAO,OAAOuF,EAAEvF,UAAU,WAAWuF,EAAEvF,QAAQ;AAAA,MAC/CC,MAAM,OAAOsF,EAAEtF,SAAS,WAAWsF,EAAEtF,OAAOsC;AAAAA,MAC5CrC,KAAK,OAAOqF,EAAErF,QAAQ,WAAWqF,EAAErF,MAAMqC;AAAAA,MACzCjC,WAAW6B,MAAMoD,EAAEjF,SAAS,MAAK,oBAAI+B,KAAAA,GAAOC,YAAAA;AAAAA,MAC5C/B,QAAQ4B,MAAMoD,EAAEhF,MAAM,MAAM4E,OAAO,CAACI,EAAE9E,cAAc,CAAC8E,EAAEhF,SAAS4E,IAAI7C,gBAAgBC;AAAAA,MACpF/B,QAAQ2B,MAAMoD,EAAE/E,MAAM;AAAA,MACtBC,YAAY0B,MAAMoD,EAAE9E,UAAU;AAAA,MAC9BN,UAAU,OAAOoF,EAAEpF,aAAa,YAAYoF,EAAEpF,aAAa,OAAQoF,EAAEpF,WAAuCoC;AAAAA,IAAAA,EAC5G;AAAA,IACFzB;AAAAA,IACAE,aAAamE,MAAM,IAAInE;AAAAA,EAAAA,CACxB;AACH;AAEA,MAAM0E,mCAAwH,OAC5HtC,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,oBAAkCC,UAAUN,OAAO;AAClE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM+E,UAAU,MAAMC,mBAAmB7H,KAAK;AAAA,IAC5CK,QAAQF,QAAQE;AAAAA,IAChB0B,OAAO0D,OAAOI,KAAK9D;AAAAA,IACnBE,OAAOwD,OAAOI,KAAK5D;AAAAA,IACnBC,MAAMuD,OAAOI,KAAK3D;AAAAA,IAClBC,KAAKsD,OAAOI,KAAK1D;AAAAA,IACjBC,UAAUqD,OAAOI,KAAKzD;AAAAA,EAAAA,GACrBkD,OAAO;AAEV,SAAOI,qBAAmC6B,MAAM;AAAA,IAAE3E,IAAI;AAAA,IAAMtC,IAAIsH,QAAQtH;AAAAA,EAAAA,CAAI;AAC9E;AAEA,MAAMwH,WAAuE,OAC3EC,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMmF,iBAAiB,OAAOhI,IAAIE,IAAI+H,OAAOD,mBAAmB,WAAWhI,IAAIE,IAAI+H,OAAOD,eAAezH,KAAAA,IAAS;AAClH,MAAI,CAACyH,gBAAgB;AACnBhI,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMuD,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AACtF,QAAM8B,0BAAU9C,KAAAA;AAEhB,MAAI;AACF,UAAM8B,kBAAkB8B,UACtB;AAAA,MAAExB,MAAM,CAAC;AAAA,QAAEgB,KAAKM;AAAAA,MAAAA,GAAkB;AAAA,QAAEtF,YAAY;AAAA,UAAE6D,SAAS;AAAA,QAAA;AAAA,MAAM,GAAKD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAAA,IAAA,GAC/H;AAAA,MAAEgC,MAAM;AAAA,QAAE7E,QAAQ2E;AAAAA,QAAK5E,QAAQ4E;AAAAA,MAAAA;AAAAA,IAAI,CACrC;AAAA,EACF,QAAQ;AACNpH,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,SAAO;AAAA,IAAED,IAAI;AAAA,EAAA;AACf;AAEA,MAAMuF,cAA6E,OACjFJ,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QAAQ;AAAA,IAAE5F,QAAQF,QAAQE;AAAAA,EAAAA,CAAQ,EAAE6F,KAAAA;AAC1E,QAAMC,iBAAiB1B,oBAAoBZ,UAAU,OAAO;AAE5D,QAAMuC,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,QAAMe,eAA0C,CAC9C;AAAA,IAAEhG,QAAQF,QAAQE;AAAAA,EAAAA,GAClB;AAAA,IAAEqC,YAAY;AAAA,MAAE6D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC/B;AAAA,IAAE9D,QAAQ;AAAA,MAAE8D,SAAS;AAAA,IAAA;AAAA,EAAM,GAC3BD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAE3D,MAAIa,eAAerB,SAAS,EAAGuB,cAAa9C,KAAK;AAAA,IAAExB,OAAO;AAAA,MAAEyE,MAAML;AAAAA,IAAAA;AAAAA,EAAe,CAAG;AACpF,QAAMM,QAAiC;AAAA,IAAEC,MAAML;AAAAA,EAAAA;AAE/C,QAAMe,0BAAU9C,KAAAA;AAChB,QAAM8B,kBAAkBiB,WAAWZ,OAAO;AAAA,IAAEa,MAAM;AAAA,MAAE7E,QAAQ2E;AAAAA,MAAK5E,QAAQ4E;AAAAA,IAAAA;AAAAA,EAAI,CAAG;AAEhF,SAAO;AAAA,IAAExE,IAAI;AAAA,EAAA;AACf;AAEA,MAAMwF,sBAAiF,OACrFL,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,gBAAgB,GAAG;AAC5CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMmF,iBAAiB,OAAOhI,IAAIE,IAAI+H,OAAOD,mBAAmB,WAAWhI,IAAIE,IAAI+H,OAAOD,eAAezH,KAAAA,IAAS;AAClH,MAAI,CAACyH,gBAAgB;AACnBhI,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMuD,oBAAoB,MAAML,OAAOC,IAAI,kBAAkB;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAEtF,MAAI;AACF,UAAMc,kBAAkB8B,UACtB;AAAA,MAAExB,MAAM,CAAC;AAAA,QAAEgB,KAAKM;AAAAA,MAAAA,GAAkB;AAAA,QAAEtF,YAAY;AAAA,UAAE6D,SAAS;AAAA,QAAA;AAAA,MAAM,GAAKD,qBAAqBhB,SAAS,UAAU,gBAAgB,CAAC;AAAA,IAAA,GAC/H;AAAA,MAAEgC,MAAM;AAAA,QAAE5E,gCAAgB4B,KAAAA;AAAAA,MAAK;AAAA,IAAE,CACnC;AAAA,EACF,QAAQ;AACNtE,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,SAAO;AAAA,IAAED,IAAI;AAAA,EAAA;AACf;AAEA,MAAMyF,cAA0E,OAC9EN,UACA/H,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,wBAAwB,GAAG;AAClDxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMzB,WAAY,MAAMiC,cAAcG,QACpC;AAAA,IAAES,MAAM,CAAC;AAAA,MAAErG,QAAQF,QAAQE;AAAAA,IAAAA,GAAUiG,qBAAqBhB,SAAS,QAAQ,wBAAwB,CAAC;AAAA,EAAA,CACtG,EAAEY,KAAAA;AAEF,QAAMoC,qBAAqB,OAAOzE,UAAUJ,oBAAoB,WAAWI,SAASJ,kBAAkB;AACtG,QAAMA,kBACJ6E,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;AAEN,QAAM5E,mBAAmBkB,MAAMC,QAAQhB,UAAUH,gBAAgB,IAC7DG,SAAUH,iBAAiBqB,IAAKC,CAAAA,UAAU;AAAA,IAC1CjD,OAAO,OAAOiD,KAAKjD,UAAU,WAAWiD,KAAKjD,QAAQ;AAAA,IACrDsB,OAAO2B,KAAK3B,UAAU;AAAA,IACtBC,aAAa0B,KAAK1B,gBAAgB;AAAA,IAClCC,MAAMyB,KAAKzB,SAAS;AAAA,EAAA,EACpB,EAAE2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOY,uBAAqC6B,MAAM;AAAA,IAChD3E,IAAI;AAAA,IACJiB,UAAU;AAAA,MACRJ;AAAAA,MACAC;AAAAA,MACAC,kBAAkBS,MAAMP,UAAUF,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM4E,iBAAsH,OAC1HlD,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,UAAU,wBAAwB,GAAG;AACpDxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,4BAA0CC,UAAUN,OAAO;AAC1E,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMiD,gBAAgB,MAAMC,OAAOC,IAAI,0BAA0B;AAAA,IAAE9F,KAAKF,IAAIE;AAAAA,IAAKoF;AAAAA,EAAAA,CAAS;AAC1F,QAAMkD,aAAsC,CAAA;AAE5C,MAAI/C,OAAOI,KAAKpC,iBAAiB;AAC/B+E,eAAW/E,kBAAkBgC,OAAOI,KAAKpC;AAAAA,EAC3C;AAEA,MAAIgC,OAAOI,KAAKnC,kBAAkB;AAChC,UAAM+E,2BAAWC,IAAAA;AACjB,UAAMC,OAAOlD,OAAOI,KAAKnC,iBACtBqB,IAAKC,CAAAA,UAAU;AAAA,MACdjD,OAAOiD,KAAKjD,MAAMxB,KAAAA;AAAAA,MAClB8C,OAAO2B,KAAK3B;AAAAA,MACZC,aAAa0B,KAAK1B;AAAAA,MAClBC,MAAMyB,KAAKzB;AAAAA,IAAAA,EACX,EACD2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,EACtCI,OAAQF,CAAAA,SAAS;AAChB,UAAIyD,KAAKG,IAAI5D,KAAKjD,KAAK,EAAG,QAAO;AACjC0G,WAAKI,IAAI7D,KAAKjD,KAAK;AACnB,aAAO;AAAA,IACT,CAAC;AAEHyG,eAAW9E,mBAAmBiF;AAAAA,EAChC;AAEA,QAAMG,MAA+B;AAAA,IACnCC,cAAc;AAAA,MAAE1I,QAAQF,QAAQE;AAAAA,IAAAA;AAAAA,EAAO;AAGzC,MAAI2I,OAAOC,KAAKT,UAAU,EAAE1D,SAAS,GAAG;AACtCgE,QAAIxB,OAAOkB;AAAAA,EACb;AAEA,QAAM3E,WAAY,MAAMiC,cAAcoD,iBACpC;AAAA,IAAExC,MAAM,CAAC;AAAA,MAAErG,QAAQF,QAAQE;AAAAA,IAAAA,GAAUiG,qBAAqBhB,SAAS,UAAU,wBAAwB,CAAC;AAAA,EAAA,GACtGwD,KACA;AAAA,IAAEK,QAAQ;AAAA,IAAMC,gBAAgB;AAAA,IAASC,qBAAqB;AAAA,EAAA,CAChE,EAAEnD,KAAAA;AAEF,QAAMoC,qBAAqB,OAAOzE,UAAUJ,oBAAoB,WAAWI,SAASJ,kBAAkB;AACtG,QAAMA,kBACJ6E,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;AAEN,QAAM5E,mBAAmBkB,MAAMC,QAAQhB,UAAUH,gBAAgB,IAC7DG,SAAUH,iBAAiBqB,IAAKC,CAAAA,UAAU;AAAA,IAC1CjD,OAAO,OAAOiD,KAAKjD,UAAU,WAAWiD,KAAKjD,QAAQ;AAAA,IACrDsB,OAAO2B,KAAK3B,UAAU;AAAA,IACtBC,aAAa0B,KAAK1B,gBAAgB;AAAA,IAClCC,MAAMyB,KAAKzB,SAAS;AAAA,EAAA,EACpB,EAAE2B,OAAQF,CAAAA,SAASA,KAAKjD,MAAM+C,SAAS,CAAC,IACxC,CAAA;AAEJ,SAAOY,6BAA2C6B,MAAM;AAAA,IACtD3E,IAAI;AAAA,IACJiB,UAAU;AAAA,MACRJ;AAAAA,MACAC;AAAAA,MACAC,kBAAkBS,MAAMP,UAAUF,gBAAgB;AAAA,IAAA;AAAA,EACpD,CACD;AACH;AAEA,MAAM2F,YAAuG,OAC3GjE,SACArF,QACG;AACH,QAAMG,UAAUJ,eAAeC,GAAG;AAClC,MAAI,CAACG,SAAS;AACZ,WAAO;AAAA,MAAEyC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAMyC,UAAUC,wBAAwB;AAAA,IAAE/E,UAAUL,QAAQK;AAAAA,IAAUL,SAASH,IAAIE,IAAIC;AAAAA,EAAAA,CAAS;AAChG,MAAI,CAACmF,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;AAC1CxF,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM4C,SAASC,uBAAqCC,UAAUN,OAAO;AACrE,MAAI,CAACI,OAAOG,SAAS;AACnB5F,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO;AAAA,IAAA;AAAA,EAC7B;AAEA,QAAM0G,SAAS,MAAMC,+BAA+BxJ,KAAK;AAAA,IACvDK,QAAQF,QAAQE;AAAAA,IAChBiF;AAAAA,IACArB,OAAOwB,OAAOI,KAAK5B,UAAU;AAAA,EAAA,CAC9B;AAED,MAAI,CAACsF,OAAO3G,IAAI;AACd5C,QAAIU,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEiC,IAAI;AAAA,MAAOC,OAAO0G,OAAO1G;AAAAA,IAAAA;AAAAA,EACpC;AAEA,SAAO;AAAA,IACLD,IAAI;AAAA,IACJsB,MAAMqF,OAAOrF;AAAAA,IACb,GAAIqF,OAAOpF,gBAAgB;AAAA,MAAEA,eAAeoF,OAAOpF;AAAAA,IAAAA,IAAkB,CAAA;AAAA,EAAC;AAE1E;AAEA,MAAA,UAAe,CAACsF,QAAa;AAC3BA,MAAIC,KAAKhE,WAAyBN,iBAAiB;AACnDqE,MAAIC,KAAKhE,aAA2BiC,gCAAgC;AACpE8B,MAAIC,KAAKhE,eAA6BoC,QAAQ;AAC9C2B,MAAIC,KAAKhE,kBAAgCyC,WAAW;AACpDsB,MAAIC,KAAKhE,cAA4B0C,mBAAmB;AACxDqB,MAAIzD,IAAIN,eAA6B2C,WAAW;AAChDoB,MAAIE,IAAIjE,eAA6B6C,cAAc;AACnDkB,MAAIC,KAAKhE,gBAA8B4D,SAAS;AAClD;"}

package/dist/index.js

@@ -10,7 +10,7 @@ import { posix, dirname, sep, isAbsolute, relative } from "path";
 import fs, { createReadStream, readFileSync } from "node:fs";
 import { createInterface } from "node:readline";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { g as getDerivedKey, s as syncAuthenticatedSessionMiddleware, r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery, c as runRtsCount } from "./queryExecutor-Bzs0SJym.js";
+import { g as getDerivedKey, s as syncAuthenticatedSessionMiddleware, r as resolveRtsRequestTenantId, i as isRtsRequestAuthorized, b as buildRtsAbilityFromRequest, n as normalizeRtsQueryOptions, a as runRtsQuery, c as runRtsCount } from "./queryExecutor-DW7iAdRY.js";
 import httpProxy from "http-proxy-3";
 import fsPromises from "node:fs/promises";
 import inspector from "node:inspector";
@@ -22,7 +22,7 @@ import { StrictMode, createElement } from "react";
 import { renderToPipeableStream, renderToStaticMarkup } from "react-dom/server";
 import { jsx } from "react/jsx-runtime";
 import { createPath, matchRoutes, parsePath, createStaticRouter, StaticRouterProvider } from "@rpcbase/router";
-import { s } from "./email-DK8uUU4X.js";
+import { s } from "./email-BbPlSkbt.js";
 function getDefaultExportFromCjs(x) {
   return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, "default") ? x["default"] : x;
 }

package/dist/notifications.js

@@ -1,7 +1,7 @@
 import { models } from "@rpcbase/db";
-import { s as sendEmail } from "./email-DK8uUU4X.js";
+import { s as sendEmail } from "./email-BbPlSkbt.js";
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/notifications/handler.ts": () => import("./handler-0rPClEv4.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/notifications/handler.ts": () => import("./handler-D58VS91o.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/notifications/api/")] = mod;
   return acc;

package/dist/{queryExecutor-Bzs0SJym.js → queryExecutor-DW7iAdRY.js}

@@ -533,11 +533,13 @@ const runRtsQuery = async ({
       }
     });
     const totalCount = typeof paginatedResult.totalCount === "number" && Number.isFinite(paginatedResult.totalCount) && paginatedResult.totalCount >= 0 ? Math.floor(paginatedResult.totalCount) : void 0;
+    const approximateTotalCount = totalCount === void 0 ? await runApproximateRtsCount(model, finalQuery).catch(() => void 0) : void 0;
+    const resolvedTotalCount = totalCount ?? approximateTotalCount;
     return {
       data: Array.isArray(paginatedResult.nodes) ? paginatedResult.nodes : [],
       pageInfo: paginatedResult.pageInfo,
-      ...totalCount !== void 0 ? {
-        totalCount
+      ...resolvedTotalCount !== void 0 ? {
+        totalCount: resolvedTotalCount
       } : {}
     };
   }
@@ -577,28 +579,12 @@ const prepareRtsExecution = async ({
     finalQuery
   };
 };
-const runRtsCount = async ({
-  tenantId,
-  ability,
-  modelName,
-  query,
-  allowInternalModels = false
-}) => {
-  const {
-    model,
-    finalQuery
-  } = await prepareRtsExecution({
-    tenantId,
-    ability,
-    modelName,
-    query,
-    allowInternalModels
-  });
-  const unsupportedOperator = findUnsupportedApproxCountOperator(finalQuery);
+const runApproximateRtsCount = async (model, query) => {
+  const unsupportedOperator = findUnsupportedApproxCountOperator(query);
   if (unsupportedOperator) {
     throw new Error(`Approximate RTS count does not support ${unsupportedOperator} queries`);
   }
-  const castedQuery = castApproxCountQuery(model, finalQuery);
+  const castedQuery = castApproxCountQuery(model, query);
   const estimatedTotal = normalizeNonNegativeInteger(await model.estimatedDocumentCount());
   if (estimatedTotal === 0) return 0;
   const sampleSize = Math.min(getApproxCountSampleSize(), estimatedTotal);
@@ -618,6 +604,25 @@ const runRtsCount = async ({
   const estimatedMatches = Math.round(estimatedTotal * sampleMatches / sampleSize);
   return Math.max(0, Math.min(estimatedTotal, estimatedMatches));
 };
+const runRtsCount = async ({
+  tenantId,
+  ability,
+  modelName,
+  query,
+  allowInternalModels = false
+}) => {
+  const {
+    model,
+    finalQuery
+  } = await prepareRtsExecution({
+    tenantId,
+    ability,
+    modelName,
+    query,
+    allowInternalModels
+  });
+  return await runApproximateRtsCount(model, finalQuery);
+};
 export {
   runRtsQuery as a,
   buildRtsAbilityFromRequest as b,
@@ -630,4 +635,4 @@ export {
   resolveRtsRequestTenantId as r,
   syncAuthenticatedSessionMiddleware as s
 };
-//# sourceMappingURL=queryExecutor-Bzs0SJym.js.map
+//# sourceMappingURL=queryExecutor-DW7iAdRY.js.map

package/dist/{queryExecutor-Bzs0SJym.js.map → queryExecutor-DW7iAdRY.js.map}

@@ -1 +1 @@
-{"version":3,"file":"queryExecutor-Bzs0SJym.js","sources":["../src/getDerivedKey.ts","../src/proxyAuth.ts","../src/syncAuthenticatedSession.ts","../src/rts/queryExecutor.ts"],"sourcesContent":["import assert from \"assert\"\nimport { hkdfSync } from \"crypto\"\n\n\nexport const getDerivedKey = (\n  masterKey: string,\n  info: string,\n  length: number = 32, // Default to 256-bit keys\n  salt: string = \"\",\n): string => {\n  assert(masterKey?.length >= 32, \"MASTER_KEY must be 32 chars or longer.\")\n\n  return Buffer.from(hkdfSync(\n    \"sha256\",\n    masterKey,\n    Buffer.from(salt),\n    Buffer.from(info),\n    length,\n  )).toString(\"hex\")\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\"\n\n\nexport const AUTHENTICATED_USER_ID_HEADER = \"rb-authenticated-user-id\"\nexport const AUTHENTICATED_TENANT_ID_HEADER = \"rb-authenticated-tenant-id\"\nexport const PROXY_AUTH_TIMESTAMP_HEADER = \"rb-proxy-auth-timestamp\"\nexport const PROXY_AUTH_SIGNATURE_HEADER = \"rb-proxy-auth-signature\"\n\nconst MAX_PROXY_AUTH_AGE_MS = 5 * 60 * 1000\n\ntype HeadersLike = Record<string, string | string[] | undefined>\n\nconst normalizeString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst getHeaderValue = (headers: HeadersLike | undefined, name: string): string | null => {\n  const value = headers?.[name]\n  if (Array.isArray(value)) return normalizeString(value[0])\n  return normalizeString(value)\n}\n\nconst getProxySharedSecret = (): string | null => {\n  const secret = process.env.RB_PROXY_SHARED_SECRET?.trim()\n  return secret || null\n}\n\nconst timingSafeEqualText = (left: string, right: string): boolean => {\n  const leftBuffer = Buffer.from(left)\n  const rightBuffer = Buffer.from(right)\n  if (leftBuffer.length !== rightBuffer.length) return false\n  return timingSafeEqual(leftBuffer, rightBuffer)\n}\n\nexport const buildProxyAuthSignature = ({\n  userId,\n  tenantId,\n  timestamp,\n  secret,\n}: {\n  userId: string\n  tenantId: string\n  timestamp: string\n  secret: string\n}): string => {\n  return createHmac(\"sha256\", secret)\n    .update(`${timestamp}:${userId}:${tenantId}`)\n    .digest(\"hex\")\n}\n\nexport const getTrustedProxyAuth = (\n  headers: HeadersLike | undefined,\n): { userId: string; tenantId: string } | null => {\n  const userId = getHeaderValue(headers, AUTHENTICATED_USER_ID_HEADER)\n  const tenantId = getHeaderValue(headers, AUTHENTICATED_TENANT_ID_HEADER)\n  const timestamp = getHeaderValue(headers, PROXY_AUTH_TIMESTAMP_HEADER)\n  const signature = getHeaderValue(headers, PROXY_AUTH_SIGNATURE_HEADER)\n  if (!userId || !tenantId || !timestamp || !signature) return null\n\n  const parsedTimestamp = Number(timestamp)\n  if (!Number.isInteger(parsedTimestamp)) return null\n\n  const now = Date.now()\n  if (Math.abs(now - parsedTimestamp) > MAX_PROXY_AUTH_AGE_MS) return null\n\n  const secret = getProxySharedSecret()\n  if (!secret) return null\n\n  const expectedSignature = buildProxyAuthSignature({\n    userId,\n    tenantId,\n    timestamp,\n    secret,\n  })\n\n  if (!timingSafeEqualText(signature, expectedSignature)) return null\n\n  return { userId, tenantId }\n}\n","import type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\n\nimport {\n  getTrustedProxyAuth,\n} from \"./proxyAuth\"\n\n\ntype SessionUserLike = {\n  id?: unknown\n  currentTenantId?: unknown\n  signedInTenants?: unknown\n  tenantRoles?: unknown\n  isEntryGateAuthorized?: unknown\n}\n\ntype RequestLike = {\n  headers?: Record<string, string | string[] | undefined>\n  session?: {\n    user?: SessionUserLike\n  }\n}\n\ntype LoadedUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\nconst normalizeString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst normalizeStringArray = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((entry) => normalizeString(String(entry)))\n    .filter((entry): entry is string => Boolean(entry))\n}\n\nconst normalizeRoles = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((entry) => normalizeString(entry))\n    .filter((entry): entry is string => Boolean(entry))\n}\n\nconst normalizeTenantRoles = (value: unknown): Record<string, string[]> | undefined => {\n  if (!value || typeof value !== \"object\") return undefined\n\n  if (value instanceof Map) {\n    const entries = Array.from(value.entries())\n      .map(([tenantId, roles]) => {\n        const normalizedTenantId = normalizeString(String(tenantId))\n        if (!normalizedTenantId) return null\n        return [normalizedTenantId, normalizeRoles(roles)] as const\n      })\n      .filter((entry): entry is readonly [string, string[]] => Boolean(entry))\n    return entries.length ? Object.fromEntries(entries) : undefined\n  }\n\n  const nextRoles = Object.entries(value as Record<string, unknown>)\n    .map(([tenantId, roles]) => {\n      const normalizedTenantId = normalizeString(tenantId)\n      if (!normalizedTenantId) return null\n      return [normalizedTenantId, normalizeRoles(roles)] as const\n    })\n    .filter((entry): entry is readonly [string, string[]] => Boolean(entry))\n\n  return nextRoles.length ? Object.fromEntries(nextRoles) : undefined\n}\n\nconst isSessionAuthorizedForTenant = (sessionUser: SessionUserLike | undefined, tenantId: string): boolean => {\n  if (!sessionUser) return false\n\n  const signedInTenants = normalizeStringArray(sessionUser.signedInTenants)\n  if (signedInTenants.length > 0) {\n    return signedInTenants.includes(tenantId)\n  }\n\n  const currentTenantId = normalizeString(sessionUser.currentTenantId)\n  return currentTenantId === tenantId\n}\n\nconst loadSessionUser = async (userId: string, tenantId: string): Promise<Record<string, unknown> | null> => {\n  const ctx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", ctx)\n  const user = await User.findById(userId, { tenants: 1, tenantRoles: 1 }).lean() as LoadedUserDoc | null\n  if (!user) return null\n\n  const signedInTenants = normalizeStringArray(user.tenants)\n  if (!signedInTenants.includes(tenantId)) return null\n\n  const tenantRoles = normalizeTenantRoles(user.tenantRoles)\n\n  return {\n    id: userId,\n    currentTenantId: tenantId,\n    signedInTenants,\n    isEntryGateAuthorized: true,\n    ...(tenantRoles ? { tenantRoles } : {}),\n  }\n}\n\nexport const syncAuthenticatedSessionFromRequest = async (req: RequestLike): Promise<void> => {\n  const proxyAuth = getTrustedProxyAuth(req.headers)\n  if (!proxyAuth) return\n\n  const { userId, tenantId } = proxyAuth\n\n  const session = req.session\n  if (!session) return\n\n  const sessionUser = session.user\n  const sessionUserId = normalizeString(sessionUser?.id)\n\n  if (sessionUserId === userId && isSessionAuthorizedForTenant(sessionUser, tenantId)) {\n    const currentTenantId = normalizeString(sessionUser?.currentTenantId)\n    if (currentTenantId === tenantId) return\n\n    const baseUser = sessionUser && typeof sessionUser === \"object\" ? sessionUser as Record<string, unknown> : {}\n    session.user = {\n      ...baseUser,\n      id: userId,\n      currentTenantId: tenantId,\n      isEntryGateAuthorized: true,\n    }\n    return\n  }\n\n  const nextSessionUser = await loadSessionUser(userId, tenantId)\n  if (!nextSessionUser) {\n    if (session.user) {\n      delete session.user\n    }\n    return\n  }\n\n  session.user = nextSessionUser as SessionUserLike\n}\n\nexport const syncAuthenticatedSessionMiddleware: RequestHandler = (req, _res, next) => {\n  void syncAuthenticatedSessionFromRequest(req).then(() => {\n    next()\n  }, next)\n}\n","import type { Request } from \"express\"\nimport type { PaginationPageInfo, PaginationSpec } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport { getDerivedKey } from \"../getDerivedKey\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport type RtsPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: RtsPopulateOption\n}\n\nexport type RtsPopulateOption =\n  | string\n  | RtsPopulateObject\n  | Array<string | RtsPopulateObject>\n\nexport type RtsQueryOptions = {\n  projection?: JsonObject\n  sort?: Record<string, 1 | -1>\n  limit?: number\n  populate?: RtsPopulateOption\n  pagination?: PaginationSpec\n}\n\nexport type RtsQueryResult = {\n  data: unknown[]\n  pageInfo?: PaginationPageInfo\n  totalCount?: number\n}\n\ntype PreparedRtsExecution = {\n  model: Model<any>\n  finalQuery: JsonObject\n}\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\nconst DEFAULT_APPROX_COUNT_SAMPLE_SIZE = 1000\nconst MAX_APPROX_COUNT_SAMPLE_SIZE = 10_000\nconst UNSUPPORTED_APPROX_COUNT_OPERATORS = new Set([\"$text\", \"$near\", \"$nearSphere\", \"$where\"])\nlet paginationCursorSigningSecret: string | null = null\n\nconst getPaginationCursorSigningSecret = (): string => {\n  if (paginationCursorSigningSecret) return paginationCursorSigningSecret\n  const masterKey = process.env.MASTER_KEY?.trim()\n  if (!masterKey) {\n    throw new Error(\"MASTER_KEY must be defined to derive pagination cursor signing secret\")\n  }\n  paginationCursorSigningSecret = getDerivedKey(masterKey, \"pagination_cursor_signing\")\n  return paginationCursorSigningSecret\n}\n\nconst normalizeTenantId = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n  return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n  const sessionUser = req.session?.user as SessionUser | undefined\n  if (!sessionUser) return false\n\n  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n  if (!currentTenantId) return false\n  return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n  req: Request,\n  tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (!sessionUserId) {\n    const currentTenantId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n    if (!currentTenantId || currentTenantId !== tenantId) {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    return {\n      ability: buildAbilityFromSession({ tenantId, session: req.session }),\n      userId: null,\n    }\n  }\n\n  const currentTenantId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n  if (!currentTenantId || currentTenantId !== tenantId) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  return {\n    ability: buildAbilityFromSession({ tenantId, session: req.session }),\n    userId: sessionUserId,\n  }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string, ability: AppAbility): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n    ability,\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n  if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nconst normalizeNonNegativeInteger = (value: unknown): number => {\n  if (typeof value !== \"number\") return 0\n  if (!Number.isFinite(value) || value < 0) return 0\n  return Math.floor(value)\n}\n\nconst getApproxCountSampleSize = (): number => {\n  const raw = process.env.RB_RTS_APPROX_COUNT_SAMPLE_SIZE?.trim() ?? \"\"\n  if (!raw) return DEFAULT_APPROX_COUNT_SAMPLE_SIZE\n\n  const parsed = Number(raw)\n  if (!Number.isFinite(parsed) || parsed <= 0) return DEFAULT_APPROX_COUNT_SAMPLE_SIZE\n  return Math.min(MAX_APPROX_COUNT_SAMPLE_SIZE, Math.floor(parsed))\n}\n\nconst findUnsupportedApproxCountOperator = (value: unknown): string | null => {\n  if (!value || typeof value !== \"object\") return null\n\n  if (Array.isArray(value)) {\n    for (const entry of value) {\n      const unsupportedOperator = findUnsupportedApproxCountOperator(entry)\n      if (unsupportedOperator) return unsupportedOperator\n    }\n    return null\n  }\n\n  for (const [key, nestedValue] of Object.entries(value as Record<string, unknown>)) {\n    if (UNSUPPORTED_APPROX_COUNT_OPERATORS.has(key)) {\n      return key\n    }\n\n    const unsupportedOperator = findUnsupportedApproxCountOperator(nestedValue)\n    if (unsupportedOperator) return unsupportedOperator\n  }\n\n  return null\n}\n\nconst castApproxCountQuery = (model: Model<any>, query: JsonObject): JsonObject => {\n  const castedQuery = model.find(query).cast(model)\n  if (!castedQuery || typeof castedQuery !== \"object\" || Array.isArray(castedQuery)) {\n    return query\n  }\n\n  return castedQuery as JsonObject\n}\n\nconst normalizeString = (value: unknown): string => {\n  return typeof value === \"string\" ? value.trim() : \"\"\n}\n\nconst normalizeObject = (value: unknown): JsonObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  return value as JsonObject\n}\n\nconst normalizePagination = (value: unknown): PaginationSpec | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  return value as PaginationSpec\n}\n\nconst normalizePopulateSelect = (value: unknown): string | JsonObject | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n  return normalizeObject(value)\n}\n\nconst normalizePopulateOptions = (value: unknown): RtsPopulateObject[\"options\"] | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as { sort?: unknown; limit?: unknown }\n  const normalized: RtsPopulateObject[\"options\"] = {}\n\n  if (raw.sort && typeof raw.sort === \"object\" && !Array.isArray(raw.sort)) {\n    normalized.sort = raw.sort as Record<string, 1 | -1>\n  }\n\n  if (typeof raw.limit === \"number\" && Number.isFinite(raw.limit)) {\n    normalized.limit = Math.max(0, Math.floor(Math.abs(raw.limit)))\n  }\n\n  if (!normalized.sort && normalized.limit === undefined) return undefined\n  return normalized\n}\n\nconst normalizePopulateObject = (value: unknown): RtsPopulateObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as Record<string, unknown>\n  const path = normalizeString(raw.path)\n  if (!path) return undefined\n\n  const normalized: RtsPopulateObject = { path }\n\n  const model = normalizeString(raw.model)\n  if (model) normalized.model = model\n\n  const select = normalizePopulateSelect(raw.select)\n  if (select !== undefined) normalized.select = select\n\n  const match = normalizeObject(raw.match)\n  if (match) normalized.match = match\n\n  const nestedPopulate = normalizeRtsPopulateOption(raw.populate)\n  if (nestedPopulate !== undefined) normalized.populate = nestedPopulate\n\n  const options = normalizePopulateOptions(raw.options)\n  if (options) normalized.options = options\n\n  return normalized\n}\n\nconst normalizeRtsPopulateOption = (value: unknown): RtsPopulateOption | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n\n  if (Array.isArray(value)) {\n    const normalized = value\n      .map((entry) => {\n        if (typeof entry === \"string\") {\n          const path = entry.trim()\n          return path || null\n        }\n        return normalizePopulateObject(entry) ?? null\n      })\n      .filter((entry): entry is string | RtsPopulateObject => entry !== null)\n\n    return normalized.length > 0 ? normalized : undefined\n  }\n\n  return normalizePopulateObject(value)\n}\n\nconst normalizeModelName = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst resolvePopulateRefModelName = (\n  model: Model<any>,\n  path: string,\n  explicitModelName: string | null,\n): string | null => {\n  if (explicitModelName) return explicitModelName\n\n  const schema = model.schema as any\n  const schemaPath = typeof schema.path === \"function\" ? schema.path(path) : null\n  const directRef = normalizeModelName(schemaPath?.options?.ref)\n  if (directRef) return directRef\n\n  const arrayRef = normalizeModelName(schemaPath?.caster?.options?.ref)\n  if (arrayRef) return arrayRef\n\n  const virtualPath = typeof schema.virtualpath === \"function\" ? schema.virtualpath(path) : null\n  const virtualRef = normalizeModelName(virtualPath?.options?.ref)\n  if (virtualRef) return virtualRef\n\n  return null\n}\n\nconst mergePopulateMatchWithAcl = (\n  populateMatch: JsonObject | undefined,\n  aclMatch: JsonObject,\n): JsonObject => {\n  if (!populateMatch || Object.keys(populateMatch).length === 0) return aclMatch\n  return { $and: [populateMatch, aclMatch] }\n}\n\ntype PreparedPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: PreparedPopulateOption\n}\n\ntype PreparedPopulateOption =\n  | string\n  | PreparedPopulateObject\n  | Array<string | PreparedPopulateObject>\n\nconst resolvePopulateSpecForModel = async ({\n  tenantId,\n  model,\n  ability,\n  populate,\n  allowInternalModels,\n  modelCache,\n  dependencyModelNames,\n}: {\n  tenantId: string\n  model: Model<any>\n  ability: AppAbility\n  populate: RtsPopulateOption | undefined\n  allowInternalModels: boolean\n  modelCache: Map<string, Model<any>>\n  dependencyModelNames: Set<string>\n}): Promise<PreparedPopulateOption | undefined> => {\n  if (!populate) return undefined\n\n  const getModelCached = async (targetModelName: string): Promise<Model<any>> => {\n    const cached = modelCache.get(targetModelName)\n    if (cached) return cached\n    const loaded = await getTenantModel(tenantId, targetModelName, ability)\n    modelCache.set(targetModelName, loaded)\n    return loaded\n  }\n\n  const resolveOne = async (\n    entry: string | RtsPopulateObject,\n    parentModel: Model<any>,\n  ): Promise<string | PreparedPopulateObject | null> => {\n    if (typeof entry === \"string\") {\n      const path = entry.trim()\n      if (!path) return null\n\n      const refModelName = resolvePopulateRefModelName(parentModel, path, null)\n      if (!refModelName) return path\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      )\n      return {\n        path,\n        match: aclMatch as JsonObject,\n      }\n    }\n\n    const path = entry.path.trim()\n    if (!path) return null\n\n    const explicitModelName = normalizeModelName(entry.model)\n    const refModelName = resolvePopulateRefModelName(parentModel, path, explicitModelName)\n    let nestedModel = parentModel\n\n    const normalizedEntry: PreparedPopulateObject = {\n      path,\n    }\n\n    if (entry.select !== undefined) normalizedEntry.select = entry.select\n    if (entry.options !== undefined) normalizedEntry.options = entry.options\n    if (explicitModelName) normalizedEntry.model = explicitModelName\n    if (entry.match !== undefined) normalizedEntry.match = entry.match\n\n    if (refModelName) {\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n      nestedModel = await getModelCached(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      ) as JsonObject\n      normalizedEntry.match = mergePopulateMatchWithAcl(\n        normalizedEntry.match,\n        aclMatch,\n      )\n    } else if (entry.populate !== undefined) {\n      throw new Error(\"Populate path must reference a model when nested populate is used\")\n    }\n\n    const nestedPopulate = await resolvePopulateSpecForModel({\n      tenantId,\n      model: nestedModel,\n      ability,\n      populate: entry.populate,\n      allowInternalModels,\n      modelCache,\n      dependencyModelNames,\n    })\n    if (nestedPopulate !== undefined) normalizedEntry.populate = nestedPopulate\n\n    return normalizedEntry\n  }\n\n  if (Array.isArray(populate)) {\n    const resolved = await Promise.all(populate.map((entry) => resolveOne(entry, model)))\n    const filtered = resolved.filter((entry): entry is string | PreparedPopulateObject => entry !== null)\n    return filtered.length > 0 ? filtered : undefined\n  }\n\n  const resolved = await resolveOne(populate, model)\n  return resolved ?? undefined\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n  if (!options || typeof options !== \"object\") return {}\n  const normalized: RtsQueryOptions = {}\n\n  if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n    normalized.projection = options.projection\n  }\n\n  if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n    normalized.sort = options.sort\n  }\n\n  normalized.limit = normalizeLimit(options.limit)\n  normalized.populate = normalizeRtsPopulateOption(options.populate)\n  normalized.pagination = normalizePagination(options.pagination)\n\n  return normalized\n}\n\nexport const resolveRtsQueryDependencyModelNames = async ({\n  tenantId,\n  ability,\n  modelName,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<string[]> => {\n  const model = await getTenantModel(tenantId, modelName, ability)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const dependencyModelNames = new Set<string>()\n  await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames,\n  })\n\n  return Array.from(dependencyModelNames)\n}\n\nexport const runRtsQuery = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<RtsQueryResult> => {\n  const { model, finalQuery } = await prepareRtsExecution({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n  const projection = options.projection ?? undefined\n  const sort = options.sort\n  const limit = normalizeLimit(options.limit)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const populate = await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames: new Set<string>(),\n  })\n\n  if (options.pagination) {\n    const paginatedQuery = model.find(finalQuery, projection)\n    if (populate !== undefined) {\n      paginatedQuery.populate(populate as any)\n    }\n\n    const paginatedResult = await paginatedQuery.paginate(options.pagination, {\n      cursor: {\n        signingSecret: getPaginationCursorSigningSecret(),\n      },\n    })\n    const totalCount = typeof paginatedResult.totalCount === \"number\"\n      && Number.isFinite(paginatedResult.totalCount)\n      && paginatedResult.totalCount >= 0\n      ? Math.floor(paginatedResult.totalCount)\n      : undefined\n\n    return {\n      data: Array.isArray(paginatedResult.nodes) ? paginatedResult.nodes : [],\n      pageInfo: paginatedResult.pageInfo,\n      ...(totalCount !== undefined ? { totalCount } : {}),\n    }\n  }\n\n  const queryPromise = model.find(finalQuery, projection)\n  if (populate !== undefined) {\n    queryPromise.populate(populate as any)\n  }\n  if (sort && Object.keys(sort).length) {\n    queryPromise.sort(sort)\n  }\n  queryPromise.limit(limit)\n\n  const data = await queryPromise\n  return { data: Array.isArray(data) ? data : [] }\n}\n\nconst prepareRtsExecution = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  allowInternalModels?: boolean\n}): Promise<PreparedRtsExecution> => {\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n    throw new Error(\"Model not allowed\")\n  }\n\n  if (!ability.can(\"read\", modelName as AclSubjectType)) {\n    throw new Error(\"forbidden\")\n  }\n\n  const model = await getTenantModel(tenantId, modelName, ability)\n  const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n  const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n  return { model, finalQuery }\n}\n\nexport const runRtsCount = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  allowInternalModels?: boolean\n}): Promise<number> => {\n  const { model, finalQuery } = await prepareRtsExecution({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n\n  const unsupportedOperator = findUnsupportedApproxCountOperator(finalQuery)\n  if (unsupportedOperator) {\n    throw new Error(`Approximate RTS count does not support ${unsupportedOperator} queries`)\n  }\n\n  const castedQuery = castApproxCountQuery(model, finalQuery)\n  const estimatedTotal = normalizeNonNegativeInteger(await model.estimatedDocumentCount())\n  if (estimatedTotal === 0) return 0\n\n  const sampleSize = Math.min(getApproxCountSampleSize(), estimatedTotal)\n  const sampleResult = await model.aggregate([\n    { $sample: { size: sampleSize } },\n    { $match: castedQuery },\n    { $count: \"count\" },\n  ]) as Array<{ count?: unknown }>\n  const sampleMatches = normalizeNonNegativeInteger(sampleResult[0]?.count)\n\n  if (sampleSize >= estimatedTotal) {\n    return Math.min(sampleMatches, estimatedTotal)\n  }\n\n  const estimatedMatches = Math.round((estimatedTotal * sampleMatches) / sampleSize)\n  return Math.max(0, Math.min(estimatedTotal, estimatedMatches))\n}\n"],"names":["getDerivedKey","masterKey","info","length","salt","assert","Buffer","from","hkdfSync","toString","AUTHENTICATED_USER_ID_HEADER","AUTHENTICATED_TENANT_ID_HEADER","PROXY_AUTH_TIMESTAMP_HEADER","PROXY_AUTH_SIGNATURE_HEADER","MAX_PROXY_AUTH_AGE_MS","normalizeString","value","normalized","trim","getHeaderValue","headers","name","Array","isArray","getProxySharedSecret","secret","process","env","RB_PROXY_SHARED_SECRET","timingSafeEqualText","left","right","leftBuffer","rightBuffer","timingSafeEqual","buildProxyAuthSignature","userId","tenantId","timestamp","createHmac","update","digest","getTrustedProxyAuth","signature","parsedTimestamp","Number","isInteger","now","Date","Math","abs","expectedSignature","normalizeStringArray","map","entry","String","filter","Boolean","normalizeRoles","normalizeTenantRoles","undefined","Map","entries","roles","normalizedTenantId","Object","fromEntries","nextRoles","isSessionAuthorizedForTenant","sessionUser","signedInTenants","includes","currentTenantId","loadSessionUser","ctx","req","session","User","models","getGlobal","user","findById","tenants","tenantRoles","lean","id","isEntryGateAuthorized","syncAuthenticatedSessionFromRequest","proxyAuth","sessionUserId","baseUser","nextSessionUser","syncAuthenticatedSessionMiddleware","_res","next","then","QUERY_MAX_LIMIT","INTERNAL_MODEL_NAMES","Set","DEFAULT_APPROX_COUNT_SAMPLE_SIZE","MAX_APPROX_COUNT_SAMPLE_SIZE","UNSUPPORTED_APPROX_COUNT_OPERATORS","paginationCursorSigningSecret","getPaginationCursorSigningSecret","MASTER_KEY","Error","normalizeTenantId","getTenantIdFromRequest","resolveRtsRequestTenantId","isRtsRequestAuthorized","buildRtsAbilityFromRequest","ability","buildAbilityFromSession","getTenantModel","modelName","get","normalizeLimit","limit","isFinite","min","normalizeNonNegativeInteger","floor","getApproxCountSampleSize","raw","RB_RTS_APPROX_COUNT_SAMPLE_SIZE","parsed","findUnsupportedApproxCountOperator","unsupportedOperator","key","nestedValue","has","castApproxCountQuery","model","query","castedQuery","find","cast","normalizeObject","normalizePagination","normalizePopulateSelect","normalizePopulateOptions","sort","max","normalizePopulateObject","path","select","match","nestedPopulate","normalizeRtsPopulateOption","populate","options","normalizeModelName","resolvePopulateRefModelName","explicitModelName","schema","schemaPath","directRef","ref","arrayRef","caster","virtualPath","virtualpath","virtualRef","mergePopulateMatchWithAcl","populateMatch","aclMatch","keys","$and","resolvePopulateSpecForModel","allowInternalModels","modelCache","dependencyModelNames","getModelCached","targetModelName","cached","loaded","set","resolveOne","parentModel","refModelName","can","add","getAccessibleByQuery","nestedModel","normalizedEntry","resolved","Promise","all","filtered","normalizeRtsQueryOptions","projection","pagination","resolveRtsQueryDependencyModelNames","runRtsQuery","finalQuery","prepareRtsExecution","paginatedQuery","paginatedResult","paginate","cursor","signingSecret","totalCount","data","nodes","pageInfo","queryPromise","accessQuery","runRtsCount","estimatedTotal","estimatedDocumentCount","sampleSize","sampleResult","aggregate","$sample","size","$match","$count","sampleMatches","count","estimatedMatches","round"],"mappings":";;;;;AAIO,MAAMA,gBAAgBA,CAC3BC,WACAC,MACAC,SAAiB,IACjBC,OAAe,OACJ;AACXC,SAAOJ,WAAWE,UAAU,IAAI,wCAAwC;AAExE,SAAOG,OAAOC,KAAKC,SACjB,UACAP,WACAK,OAAOC,KAAKH,IAAI,GAChBE,OAAOC,KAAKL,IAAI,GAChBC,MACF,CAAC,EAAEM,SAAS,KAAK;AACnB;AChBO,MAAMC,+BAA+B;AACrC,MAAMC,iCAAiC;AACvC,MAAMC,8BAA8B;AACpC,MAAMC,8BAA8B;AAE3C,MAAMC,wBAAwB,IAAI,KAAK;AAIvC,MAAMC,oBAAkBA,CAACC,UAAkC;AACzD,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAME,iBAAiBA,CAACC,SAAkCC,SAAgC;AACxF,QAAML,QAAQI,UAAUC,IAAI;AAC5B,MAAIC,MAAMC,QAAQP,KAAK,UAAUD,kBAAgBC,MAAM,CAAC,CAAC;AACzD,SAAOD,kBAAgBC,KAAK;AAC9B;AAEA,MAAMQ,uBAAuBA,MAAqB;AAChD,QAAMC,SAASC,QAAQC,IAAIC,wBAAwBV,KAAAA;AACnD,SAAOO,UAAU;AACnB;AAEA,MAAMI,sBAAsBA,CAACC,MAAcC,UAA2B;AACpE,QAAMC,aAAa1B,OAAOC,KAAKuB,IAAI;AACnC,QAAMG,cAAc3B,OAAOC,KAAKwB,KAAK;AACrC,MAAIC,WAAW7B,WAAW8B,YAAY9B,OAAQ,QAAO;AACrD,SAAO+B,gBAAgBF,YAAYC,WAAW;AAChD;AAEO,MAAME,0BAA0BA,CAAC;AAAA,EACtCC;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EACAb;AAMF,MAAc;AACZ,SAAOc,WAAW,UAAUd,MAAM,EAC/Be,OAAO,GAAGF,SAAS,IAAIF,MAAM,IAAIC,QAAQ,EAAE,EAC3CI,OAAO,KAAK;AACjB;AAEO,MAAMC,sBAAsBA,CACjCtB,YACgD;AAChD,QAAMgB,SAASjB,eAAeC,SAASV,4BAA4B;AACnE,QAAM2B,WAAWlB,eAAeC,SAAST,8BAA8B;AACvE,QAAM2B,YAAYnB,eAAeC,SAASR,2BAA2B;AACrE,QAAM+B,YAAYxB,eAAeC,SAASP,2BAA2B;AACrE,MAAI,CAACuB,UAAU,CAACC,YAAY,CAACC,aAAa,CAACK,UAAW,QAAO;AAE7D,QAAMC,kBAAkBC,OAAOP,SAAS;AACxC,MAAI,CAACO,OAAOC,UAAUF,eAAe,EAAG,QAAO;AAE/C,QAAMG,MAAMC,KAAKD,IAAAA;AACjB,MAAIE,KAAKC,IAAIH,MAAMH,eAAe,IAAI9B,sBAAuB,QAAO;AAEpE,QAAMW,SAASD,qBAAAA;AACf,MAAI,CAACC,OAAQ,QAAO;AAEpB,QAAM0B,oBAAoBhB,wBAAwB;AAAA,IAChDC;AAAAA,IACAC;AAAAA,IACAC;AAAAA,IACAb;AAAAA,EAAAA,CACD;AAED,MAAI,CAACI,oBAAoBc,WAAWQ,iBAAiB,EAAG,QAAO;AAE/D,SAAO;AAAA,IAAEf;AAAAA,IAAQC;AAAAA,EAAAA;AACnB;ACpDA,MAAMtB,oBAAkBA,CAACC,UAAkC;AACzD,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAMmC,uBAAuBA,CAACpC,UAA6B;AACzD,MAAI,CAACM,MAAMC,QAAQP,KAAK,UAAU,CAAA;AAClC,SAAOA,MACJqC,IAAKC,CAAAA,UAAUvC,kBAAgBwC,OAAOD,KAAK,CAAC,CAAC,EAC7CE,OAAO,CAACF,UAA2BG,QAAQH,KAAK,CAAC;AACtD;AAEA,MAAMI,iBAAiBA,CAAC1C,UAA6B;AACnD,MAAI,CAACM,MAAMC,QAAQP,KAAK,UAAU,CAAA;AAClC,SAAOA,MACJqC,IAAKC,CAAAA,UAAUvC,kBAAgBuC,KAAK,CAAC,EACrCE,OAAO,CAACF,UAA2BG,QAAQH,KAAK,CAAC;AACtD;AAEA,MAAMK,uBAAuBA,CAAC3C,UAAyD;AACrF,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO4C;AAEhD,MAAI5C,iBAAiB6C,KAAK;AACxB,UAAMC,UAAUxC,MAAMf,KAAKS,MAAM8C,SAAS,EACvCT,IAAI,CAAC,CAAChB,UAAU0B,KAAK,MAAM;AAC1B,YAAMC,qBAAqBjD,kBAAgBwC,OAAOlB,QAAQ,CAAC;AAC3D,UAAI,CAAC2B,mBAAoB,QAAO;AAChC,aAAO,CAACA,oBAAoBN,eAAeK,KAAK,CAAC;AAAA,IACnD,CAAC,EACAP,OAAO,CAACF,UAAgDG,QAAQH,KAAK,CAAC;AACzE,WAAOQ,QAAQ3D,SAAS8D,OAAOC,YAAYJ,OAAO,IAAIF;AAAAA,EACxD;AAEA,QAAMO,YAAYF,OAAOH,QAAQ9C,KAAgC,EAC9DqC,IAAI,CAAC,CAAChB,UAAU0B,KAAK,MAAM;AAC1B,UAAMC,qBAAqBjD,kBAAgBsB,QAAQ;AACnD,QAAI,CAAC2B,mBAAoB,QAAO;AAChC,WAAO,CAACA,oBAAoBN,eAAeK,KAAK,CAAC;AAAA,EACnD,CAAC,EACAP,OAAO,CAACF,UAAgDG,QAAQH,KAAK,CAAC;AAEzE,SAAOa,UAAUhE,SAAS8D,OAAOC,YAAYC,SAAS,IAAIP;AAC5D;AAEA,MAAMQ,+BAA+BA,CAACC,aAA0ChC,aAA8B;AAC5G,MAAI,CAACgC,YAAa,QAAO;AAEzB,QAAMC,kBAAkBlB,qBAAqBiB,YAAYC,eAAe;AACxE,MAAIA,gBAAgBnE,SAAS,GAAG;AAC9B,WAAOmE,gBAAgBC,SAASlC,QAAQ;AAAA,EAC1C;AAEA,QAAMmC,kBAAkBzD,kBAAgBsD,YAAYG,eAAe;AACnE,SAAOA,oBAAoBnC;AAC7B;AAEA,MAAMoC,kBAAkB,OAAOrC,QAAgBC,aAA8D;AAC3G,QAAMqC,MAAoB;AAAA,IAAEC,KAAK;AAAA,MAAEC,SAAS;AAAA,IAAA;AAAA,EAAK;AACjD,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUL,GAAG;AACjD,QAAMM,OAAO,MAAMH,KAAKI,SAAS7C,QAAQ;AAAA,IAAE8C,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG,EAAEC,KAAAA;AACzE,MAAI,CAACJ,KAAM,QAAO;AAElB,QAAMV,kBAAkBlB,qBAAqB4B,KAAKE,OAAO;AACzD,MAAI,CAACZ,gBAAgBC,SAASlC,QAAQ,EAAG,QAAO;AAEhD,QAAM8C,cAAcxB,qBAAqBqB,KAAKG,WAAW;AAEzD,SAAO;AAAA,IACLE,IAAIjD;AAAAA,IACJoC,iBAAiBnC;AAAAA,IACjBiC;AAAAA,IACAgB,uBAAuB;AAAA,IACvB,GAAIH,cAAc;AAAA,MAAEA;AAAAA,IAAAA,IAAgB,CAAA;AAAA,EAAC;AAEzC;AAEO,MAAMI,sCAAsC,OAAOZ,QAAoC;AAC5F,QAAMa,YAAY9C,oBAAoBiC,IAAIvD,OAAO;AACjD,MAAI,CAACoE,UAAW;AAEhB,QAAM;AAAA,IAAEpD;AAAAA,IAAQC;AAAAA,EAAAA,IAAamD;AAE7B,QAAMZ,UAAUD,IAAIC;AACpB,MAAI,CAACA,QAAS;AAEd,QAAMP,cAAcO,QAAQI;AAC5B,QAAMS,gBAAgB1E,kBAAgBsD,aAAagB,EAAE;AAErD,MAAII,kBAAkBrD,UAAUgC,6BAA6BC,aAAahC,QAAQ,GAAG;AACnF,UAAMmC,kBAAkBzD,kBAAgBsD,aAAaG,eAAe;AACpE,QAAIA,oBAAoBnC,SAAU;AAElC,UAAMqD,WAAWrB,eAAe,OAAOA,gBAAgB,WAAWA,cAAyC,CAAA;AAC3GO,YAAQI,OAAO;AAAA,MACb,GAAGU;AAAAA,MACHL,IAAIjD;AAAAA,MACJoC,iBAAiBnC;AAAAA,MACjBiD,uBAAuB;AAAA,IAAA;AAEzB;AAAA,EACF;AAEA,QAAMK,kBAAkB,MAAMlB,gBAAgBrC,QAAQC,QAAQ;AAC9D,MAAI,CAACsD,iBAAiB;AACpB,QAAIf,QAAQI,MAAM;AAChB,aAAOJ,QAAQI;AAAAA,IACjB;AACA;AAAA,EACF;AAEAJ,UAAQI,OAAOW;AACjB;AAEO,MAAMC,qCAAqDA,CAACjB,KAAKkB,MAAMC,SAAS;AACrF,OAAKP,oCAAoCZ,GAAG,EAAEoB,KAAK,MAAM;AACvDD,SAAAA;AAAAA,EACF,GAAGA,IAAI;AACT;AC9FA,MAAME,kBAAkB;AACxB,MAAMC,uBAAuB,oBAAIC,IAAI,CAAC,eAAe,cAAc,CAAC;AACpE,MAAMC,mCAAmC;AACzC,MAAMC,+BAA+B;AACrC,MAAMC,yDAAyCH,IAAI,CAAC,SAAS,SAAS,eAAe,QAAQ,CAAC;AAC9F,IAAII,gCAA+C;AAEnD,MAAMC,mCAAmCA,MAAc;AACrD,MAAID,8BAA+B,QAAOA;AAC1C,QAAMrG,YAAYyB,QAAQC,IAAI6E,YAAYtF,KAAAA;AAC1C,MAAI,CAACjB,WAAW;AACd,UAAM,IAAIwG,MAAM,uEAAuE;AAAA,EACzF;AACAH,kCAAgCtG,cAAcC,WAAW,2BAA2B;AACpF,SAAOqG;AACT;AAEA,MAAMI,oBAAoBA,CAAC1F,UAAkC;AAC3D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAM0F,yBAAyBA,CAAChC,QAAgC;AAC9D,SAAO+B,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AAC1F;AAEO,MAAMoC,4BAA4BA,CAACjC,QAAgC;AACxE,SAAOgC,uBAAuBhC,GAAG;AACnC;AAMO,MAAMkC,yBAAyBA,CAAClC,KAActC,aAA8B;AACjF,QAAMgC,cAAcM,IAAIC,SAASI;AACjC,MAAI,CAACX,YAAa,QAAO;AAEzB,QAAMG,kBAAkBkC,kBAAkBrC,YAAYG,eAAe;AACrE,MAAI,CAACA,gBAAiB,QAAO;AAC7B,SAAOA,oBAAoBnC;AAC7B;AAEO,MAAMyE,6BAA6B,OACxCnC,KACAtC,aAC4D;AAC5D,QAAMoD,gBAAgBiB,kBAAmB/B,IAAIC,SAASI,MAAkCK,EAAE;AAC1F,MAAI,CAACI,eAAe;AAClB,UAAMjB,mBAAkBkC,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AACzG,QAAI,CAACA,oBAAmBA,qBAAoBnC,UAAU;AACpD,YAAM,IAAIoE,MAAM,wCAAwC;AAAA,IAC1D;AAEA,WAAO;AAAA,MACLM,SAASC,wBAAwB;AAAA,QAAE3E;AAAAA,QAAUuC,SAASD,IAAIC;AAAAA,MAAAA,CAAS;AAAA,MACnExC,QAAQ;AAAA,IAAA;AAAA,EAEZ;AAEA,QAAMoC,kBAAkBkC,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AACzG,MAAI,CAACA,mBAAmBA,oBAAoBnC,UAAU;AACpD,UAAM,IAAIoE,MAAM,wCAAwC;AAAA,EAC1D;AAEA,SAAO;AAAA,IACLM,SAASC,wBAAwB;AAAA,MAAE3E;AAAAA,MAAUuC,SAASD,IAAIC;AAAAA,IAAAA,CAAS;AAAA,IACnExC,QAAQqD;AAAAA,EAAAA;AAEZ;AAEA,MAAMwB,iBAAiB,OAAO5E,UAAkB6E,WAAmBH,YAA6C;AAC9G,QAAMrC,MAAoB;AAAA,IACxBC,KAAK;AAAA,MACHC,SAAS;AAAA,QACPI,MAAM;AAAA,UACJR,iBAAiBnC;AAAAA,QAAAA;AAAAA,MACnB;AAAA,IACF;AAAA,IAEF0E;AAAAA,EAAAA;AAGF,SAAOjC,OAAOqC,IAAID,WAAWxC,GAAG;AAClC;AAEA,MAAM0C,iBAAiBA,CAACC,UAA2B;AACjD,MAAI,OAAOA,UAAU,SAAU,QAAOrB;AACtC,MAAI,CAACnD,OAAOyE,SAASD,KAAK,EAAG,QAAOrB;AACpC,SAAO/C,KAAKsE,IAAIvB,iBAAiB/C,KAAKC,IAAImE,KAAK,CAAC;AAClD;AAEA,MAAMG,8BAA8BA,CAACxG,UAA2B;AAC9D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC6B,OAAOyE,SAAStG,KAAK,KAAKA,QAAQ,EAAG,QAAO;AACjD,SAAOiC,KAAKwE,MAAMzG,KAAK;AACzB;AAEA,MAAM0G,2BAA2BA,MAAc;AAC7C,QAAMC,MAAMjG,QAAQC,IAAIiG,iCAAiC1G,UAAU;AACnE,MAAI,CAACyG,IAAK,QAAOxB;AAEjB,QAAM0B,SAAShF,OAAO8E,GAAG;AACzB,MAAI,CAAC9E,OAAOyE,SAASO,MAAM,KAAKA,UAAU,EAAG,QAAO1B;AACpD,SAAOlD,KAAKsE,IAAInB,8BAA8BnD,KAAKwE,MAAMI,MAAM,CAAC;AAClE;AAEA,MAAMC,qCAAqCA,CAAC9G,UAAkC;AAC5E,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;AAEhD,MAAIM,MAAMC,QAAQP,KAAK,GAAG;AACxB,eAAWsC,SAAStC,OAAO;AACzB,YAAM+G,sBAAsBD,mCAAmCxE,KAAK;AACpE,UAAIyE,oBAAqB,QAAOA;AAAAA,IAClC;AACA,WAAO;AAAA,EACT;AAEA,aAAW,CAACC,KAAKC,WAAW,KAAKhE,OAAOH,QAAQ9C,KAAgC,GAAG;AACjF,QAAIqF,mCAAmC6B,IAAIF,GAAG,GAAG;AAC/C,aAAOA;AAAAA,IACT;AAEA,UAAMD,sBAAsBD,mCAAmCG,WAAW;AAC1E,QAAIF,oBAAqB,QAAOA;AAAAA,EAClC;AAEA,SAAO;AACT;AAEA,MAAMI,uBAAuBA,CAACC,OAAmBC,UAAkC;AACjF,QAAMC,cAAcF,MAAMG,KAAKF,KAAK,EAAEG,KAAKJ,KAAK;AAChD,MAAI,CAACE,eAAe,OAAOA,gBAAgB,YAAYhH,MAAMC,QAAQ+G,WAAW,GAAG;AACjF,WAAOD;AAAAA,EACT;AAEA,SAAOC;AACT;AAEA,MAAMvH,kBAAkBA,CAACC,UAA2B;AAClD,SAAO,OAAOA,UAAU,WAAWA,MAAME,SAAS;AACpD;AAEA,MAAMuH,kBAAkBA,CAACzH,UAA2C;AAClE,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,SAAO5C;AACT;AAEA,MAAM0H,sBAAsBA,CAAC1H,UAA+C;AAC1E,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,SAAO5C;AACT;AAEA,MAAM2H,0BAA0BA,CAAC3H,UAAoD;AACnF,MAAI,OAAOA,UAAU,UAAU;AAC7B,UAAMC,aAAaD,MAAME,KAAAA;AACzB,WAAOD,cAAc2C;AAAAA,EACvB;AACA,SAAO6E,gBAAgBzH,KAAK;AAC9B;AAEA,MAAM4H,2BAA2BA,CAAC5H,UAA6D;AAC7F,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,QAAM+D,MAAM3G;AACZ,QAAMC,aAA2C,CAAA;AAEjD,MAAI0G,IAAIkB,QAAQ,OAAOlB,IAAIkB,SAAS,YAAY,CAACvH,MAAMC,QAAQoG,IAAIkB,IAAI,GAAG;AACxE5H,eAAW4H,OAAOlB,IAAIkB;AAAAA,EACxB;AAEA,MAAI,OAAOlB,IAAIN,UAAU,YAAYxE,OAAOyE,SAASK,IAAIN,KAAK,GAAG;AAC/DpG,eAAWoG,QAAQpE,KAAK6F,IAAI,GAAG7F,KAAKwE,MAAMxE,KAAKC,IAAIyE,IAAIN,KAAK,CAAC,CAAC;AAAA,EAChE;AAEA,MAAI,CAACpG,WAAW4H,QAAQ5H,WAAWoG,UAAUzD,OAAW,QAAOA;AAC/D,SAAO3C;AACT;AAEA,MAAM8H,0BAA0BA,CAAC/H,UAAkD;AACjF,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,QAAM+D,MAAM3G;AACZ,QAAMgI,OAAOjI,gBAAgB4G,IAAIqB,IAAI;AACrC,MAAI,CAACA,KAAM,QAAOpF;AAElB,QAAM3C,aAAgC;AAAA,IAAE+H;AAAAA,EAAAA;AAExC,QAAMZ,QAAQrH,gBAAgB4G,IAAIS,KAAK;AACvC,MAAIA,kBAAkBA,QAAQA;AAE9B,QAAMa,SAASN,wBAAwBhB,IAAIsB,MAAM;AACjD,MAAIA,WAAWrF,OAAW3C,YAAWgI,SAASA;AAE9C,QAAMC,QAAQT,gBAAgBd,IAAIuB,KAAK;AACvC,MAAIA,kBAAkBA,QAAQA;AAE9B,QAAMC,iBAAiBC,2BAA2BzB,IAAI0B,QAAQ;AAC9D,MAAIF,mBAAmBvF,OAAW3C,YAAWoI,WAAWF;AAExD,QAAMG,UAAUV,yBAAyBjB,IAAI2B,OAAO;AACpD,MAAIA,oBAAoBA,UAAUA;AAElC,SAAOrI;AACT;AAEA,MAAMmI,6BAA6BA,CAACpI,UAAkD;AACpF,MAAI,OAAOA,UAAU,UAAU;AAC7B,UAAMC,aAAaD,MAAME,KAAAA;AACzB,WAAOD,cAAc2C;AAAAA,EACvB;AAEA,MAAItC,MAAMC,QAAQP,KAAK,GAAG;AACxB,UAAMC,aAAaD,MAChBqC,IAAKC,CAAAA,UAAU;AACd,UAAI,OAAOA,UAAU,UAAU;AAC7B,cAAM0F,OAAO1F,MAAMpC,KAAAA;AACnB,eAAO8H,QAAQ;AAAA,MACjB;AACA,aAAOD,wBAAwBzF,KAAK,KAAK;AAAA,IAC3C,CAAC,EACAE,OAAO,CAACF,UAA+CA,UAAU,IAAI;AAExE,WAAOrC,WAAWd,SAAS,IAAIc,aAAa2C;AAAAA,EAC9C;AAEA,SAAOmF,wBAAwB/H,KAAK;AACtC;AAEA,MAAMuI,qBAAqBA,CAACvI,UAAkC;AAC5D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAMuI,8BAA8BA,CAClCpB,OACAY,MACAS,sBACkB;AAClB,MAAIA,kBAAmB,QAAOA;AAE9B,QAAMC,SAAStB,MAAMsB;AACrB,QAAMC,aAAa,OAAOD,OAAOV,SAAS,aAAaU,OAAOV,KAAKA,IAAI,IAAI;AAC3E,QAAMY,YAAYL,mBAAmBI,YAAYL,SAASO,GAAG;AAC7D,MAAID,UAAW,QAAOA;AAEtB,QAAME,WAAWP,mBAAmBI,YAAYI,QAAQT,SAASO,GAAG;AACpE,MAAIC,SAAU,QAAOA;AAErB,QAAME,cAAc,OAAON,OAAOO,gBAAgB,aAAaP,OAAOO,YAAYjB,IAAI,IAAI;AAC1F,QAAMkB,aAAaX,mBAAmBS,aAAaV,SAASO,GAAG;AAC/D,MAAIK,WAAY,QAAOA;AAEvB,SAAO;AACT;AAEA,MAAMC,4BAA4BA,CAChCC,eACAC,aACe;AACf,MAAI,CAACD,iBAAiBnG,OAAOqG,KAAKF,aAAa,EAAEjK,WAAW,EAAG,QAAOkK;AACtE,SAAO;AAAA,IAAEE,MAAM,CAACH,eAAeC,QAAQ;AAAA,EAAA;AACzC;AAmBA,MAAMG,8BAA8B,OAAO;AAAA,EACzCnI;AAAAA,EACA+F;AAAAA,EACArB;AAAAA,EACAsC;AAAAA,EACAoB;AAAAA,EACAC;AAAAA,EACAC;AASF,MAAmD;AACjD,MAAI,CAACtB,SAAU,QAAOzF;AAEtB,QAAMgH,iBAAiB,OAAOC,oBAAiD;AAC7E,UAAMC,SAASJ,WAAWvD,IAAI0D,eAAe;AAC7C,QAAIC,OAAQ,QAAOA;AACnB,UAAMC,SAAS,MAAM9D,eAAe5E,UAAUwI,iBAAiB9D,OAAO;AACtE2D,eAAWM,IAAIH,iBAAiBE,MAAM;AACtC,WAAOA;AAAAA,EACT;AAEA,QAAME,aAAa,OACjB3H,OACA4H,gBACoD;AACpD,QAAI,OAAO5H,UAAU,UAAU;AAC7B,YAAM0F,QAAO1F,MAAMpC,KAAAA;AACnB,UAAI,CAAC8H,MAAM,QAAO;AAElB,YAAMmC,gBAAe3B,4BAA4B0B,aAAalC,OAAM,IAAI;AACxE,UAAI,CAACmC,cAAc,QAAOnC;AAC1B,UAAI,CAACyB,uBAAuBxE,qBAAqBiC,IAAIiD,aAAY,GAAG;AAClE,cAAM,IAAI1E,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAACM,QAAQqE,IAAI,QAAQD,aAA8B,GAAG;AACxD,cAAM,IAAI1E,MAAM,WAAW;AAAA,MAC7B;AAEAkE,2BAAqBU,IAAIF,aAAY;AAErC,YAAMd,WAAWiB,qBACfvE,SACA,QACAoE,aACF;AACA,aAAO;AAAA,QACLnC,MAAAA;AAAAA,QACAE,OAAOmB;AAAAA,MAAAA;AAAAA,IAEX;AAEA,UAAMrB,OAAO1F,MAAM0F,KAAK9H,KAAAA;AACxB,QAAI,CAAC8H,KAAM,QAAO;AAElB,UAAMS,oBAAoBF,mBAAmBjG,MAAM8E,KAAK;AACxD,UAAM+C,eAAe3B,4BAA4B0B,aAAalC,MAAMS,iBAAiB;AACrF,QAAI8B,cAAcL;AAElB,UAAMM,kBAA0C;AAAA,MAC9CxC;AAAAA,IAAAA;AAGF,QAAI1F,MAAM2F,WAAWrF,OAAW4H,iBAAgBvC,SAAS3F,MAAM2F;AAC/D,QAAI3F,MAAMgG,YAAY1F,OAAW4H,iBAAgBlC,UAAUhG,MAAMgG;AACjE,QAAIG,mCAAmCrB,QAAQqB;AAC/C,QAAInG,MAAM4F,UAAUtF,OAAW4H,iBAAgBtC,QAAQ5F,MAAM4F;AAE7D,QAAIiC,cAAc;AAChB,UAAI,CAACV,uBAAuBxE,qBAAqBiC,IAAIiD,YAAY,GAAG;AAClE,cAAM,IAAI1E,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAACM,QAAQqE,IAAI,QAAQD,YAA8B,GAAG;AACxD,cAAM,IAAI1E,MAAM,WAAW;AAAA,MAC7B;AAEAkE,2BAAqBU,IAAIF,YAAY;AACrCI,oBAAc,MAAMX,eAAeO,YAAY;AAE/C,YAAMd,WAAWiB,qBACfvE,SACA,QACAoE,YACF;AACAK,sBAAgBtC,QAAQiB,0BACtBqB,gBAAgBtC,OAChBmB,QACF;AAAA,IACF,WAAW/G,MAAM+F,aAAazF,QAAW;AACvC,YAAM,IAAI6C,MAAM,mEAAmE;AAAA,IACrF;AAEA,UAAM0C,iBAAiB,MAAMqB,4BAA4B;AAAA,MACvDnI;AAAAA,MACA+F,OAAOmD;AAAAA,MACPxE;AAAAA,MACAsC,UAAU/F,MAAM+F;AAAAA,MAChBoB;AAAAA,MACAC;AAAAA,MACAC;AAAAA,IAAAA,CACD;AACD,QAAIxB,mBAAmBvF,OAAW4H,iBAAgBnC,WAAWF;AAE7D,WAAOqC;AAAAA,EACT;AAEA,MAAIlK,MAAMC,QAAQ8H,QAAQ,GAAG;AAC3B,UAAMoC,YAAW,MAAMC,QAAQC,IAAItC,SAAShG,IAAKC,CAAAA,UAAU2H,WAAW3H,OAAO8E,KAAK,CAAC,CAAC;AACpF,UAAMwD,WAAWH,UAASjI,OAAO,CAACF,UAAoDA,UAAU,IAAI;AACpG,WAAOsI,SAASzL,SAAS,IAAIyL,WAAWhI;AAAAA,EAC1C;AAEA,QAAM6H,WAAW,MAAMR,WAAW5B,UAAUjB,KAAK;AACjD,SAAOqD,YAAY7H;AACrB;AAEO,MAAMiI,2BAA2BA,CAACvC,YAA0D;AACjG,MAAI,CAACA,WAAW,OAAOA,YAAY,iBAAiB,CAAA;AACpD,QAAMrI,aAA8B,CAAA;AAEpC,MAAIqI,QAAQwC,cAAc,OAAOxC,QAAQwC,eAAe,YAAY,CAACxK,MAAMC,QAAQ+H,QAAQwC,UAAU,GAAG;AACtG7K,eAAW6K,aAAaxC,QAAQwC;AAAAA,EAClC;AAEA,MAAIxC,QAAQT,QAAQ,OAAOS,QAAQT,SAAS,YAAY,CAACvH,MAAMC,QAAQ+H,QAAQT,IAAI,GAAG;AACpF5H,eAAW4H,OAAOS,QAAQT;AAAAA,EAC5B;AAEA5H,aAAWoG,QAAQD,eAAekC,QAAQjC,KAAK;AAC/CpG,aAAWoI,WAAWD,2BAA2BE,QAAQD,QAAQ;AACjEpI,aAAW8K,aAAarD,oBAAoBY,QAAQyC,UAAU;AAE9D,SAAO9K;AACT;AAEO,MAAM+K,sCAAsC,OAAO;AAAA,EACxD3J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAoC;AAAAA,EACAmB,sBAAsB;AAOxB,MAAyB;AACvB,QAAMrC,QAAQ,MAAMnB,eAAe5E,UAAU6E,WAAWH,OAAO;AAC/D,QAAM2D,iCAAiB7G,IAAAA;AACvB6G,aAAWM,IAAI9D,WAAWkB,KAAK;AAE/B,QAAMuC,2CAA2BzE,IAAAA;AACjC,QAAMsE,4BAA4B;AAAA,IAChCnI;AAAAA,IACA+F;AAAAA,IACArB;AAAAA,IACAsC,UAAUC,QAAQD;AAAAA,IAClBoB;AAAAA,IACAC;AAAAA,IACAC;AAAAA,EAAAA,CACD;AAED,SAAOrJ,MAAMf,KAAKoK,oBAAoB;AACxC;AAEO,MAAMsB,cAAc,OAAO;AAAA,EAChC5J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAiB;AAAAA,EACAmB,sBAAsB;AAQxB,MAA+B;AAC7B,QAAM;AAAA,IAAErC;AAAAA,IAAO8D;AAAAA,EAAAA,IAAe,MAAMC,oBAAoB;AAAA,IACtD9J;AAAAA,IACA0E;AAAAA,IACAG;AAAAA,IACAmB;AAAAA,IACAoC;AAAAA,EAAAA,CACD;AACD,QAAMqB,aAAaxC,QAAQwC,cAAclI;AACzC,QAAMiF,OAAOS,QAAQT;AACrB,QAAMxB,QAAQD,eAAekC,QAAQjC,KAAK;AAC1C,QAAMqD,iCAAiB7G,IAAAA;AACvB6G,aAAWM,IAAI9D,WAAWkB,KAAK;AAE/B,QAAMiB,WAAW,MAAMmB,4BAA4B;AAAA,IACjDnI;AAAAA,IACA+F;AAAAA,IACArB;AAAAA,IACAsC,UAAUC,QAAQD;AAAAA,IAClBoB;AAAAA,IACAC;AAAAA,IACAC,0CAA0BzE,IAAAA;AAAAA,EAAY,CACvC;AAED,MAAIoD,QAAQyC,YAAY;AACtB,UAAMK,iBAAiBhE,MAAMG,KAAK2D,YAAYJ,UAAU;AACxD,QAAIzC,aAAazF,QAAW;AAC1BwI,qBAAe/C,SAASA,QAAe;AAAA,IACzC;AAEA,UAAMgD,kBAAkB,MAAMD,eAAeE,SAAShD,QAAQyC,YAAY;AAAA,MACxEQ,QAAQ;AAAA,QACNC,eAAejG,iCAAAA;AAAAA,MAAiC;AAAA,IAClD,CACD;AACD,UAAMkG,aAAa,OAAOJ,gBAAgBI,eAAe,YACpD5J,OAAOyE,SAAS+E,gBAAgBI,UAAU,KAC1CJ,gBAAgBI,cAAc,IAC/BxJ,KAAKwE,MAAM4E,gBAAgBI,UAAU,IACrC7I;AAEJ,WAAO;AAAA,MACL8I,MAAMpL,MAAMC,QAAQ8K,gBAAgBM,KAAK,IAAIN,gBAAgBM,QAAQ,CAAA;AAAA,MACrEC,UAAUP,gBAAgBO;AAAAA,MAC1B,GAAIH,eAAe7I,SAAY;AAAA,QAAE6I;AAAAA,MAAAA,IAAe,CAAA;AAAA,IAAC;AAAA,EAErD;AAEA,QAAMI,eAAezE,MAAMG,KAAK2D,YAAYJ,UAAU;AACtD,MAAIzC,aAAazF,QAAW;AAC1BiJ,iBAAaxD,SAASA,QAAe;AAAA,EACvC;AACA,MAAIR,QAAQ5E,OAAOqG,KAAKzB,IAAI,EAAE1I,QAAQ;AACpC0M,iBAAahE,KAAKA,IAAI;AAAA,EACxB;AACAgE,eAAaxF,MAAMA,KAAK;AAExB,QAAMqF,OAAO,MAAMG;AACnB,SAAO;AAAA,IAAEH,MAAMpL,MAAMC,QAAQmL,IAAI,IAAIA,OAAO,CAAA;AAAA,EAAA;AAC9C;AAEA,MAAMP,sBAAsB,OAAO;AAAA,EACjC9J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAoC,sBAAsB;AAOxB,MAAqC;AACnC,MAAI,CAACA,uBAAuBxE,qBAAqBiC,IAAIhB,SAAS,GAAG;AAC/D,UAAM,IAAIT,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAACM,QAAQqE,IAAI,QAAQlE,SAA2B,GAAG;AACrD,UAAM,IAAIT,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM2B,QAAQ,MAAMnB,eAAe5E,UAAU6E,WAAWH,OAAO;AAC/D,QAAM+F,cAAcxB,qBAAqBvE,SAAS,QAAQG,SAA2C;AACrG,QAAMgF,aAAyB;AAAA,IAAE3B,MAAM,CAAClC,OAAOyE,WAAW;AAAA,EAAA;AAE1D,SAAO;AAAA,IAAE1E;AAAAA,IAAO8D;AAAAA,EAAAA;AAClB;AAEO,MAAMa,cAAc,OAAO;AAAA,EAChC1K;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAoC,sBAAsB;AAOxB,MAAuB;AACrB,QAAM;AAAA,IAAErC;AAAAA,IAAO8D;AAAAA,EAAAA,IAAe,MAAMC,oBAAoB;AAAA,IACtD9J;AAAAA,IACA0E;AAAAA,IACAG;AAAAA,IACAmB;AAAAA,IACAoC;AAAAA,EAAAA,CACD;AAED,QAAM1C,sBAAsBD,mCAAmCoE,UAAU;AACzE,MAAInE,qBAAqB;AACvB,UAAM,IAAItB,MAAM,0CAA0CsB,mBAAmB,UAAU;AAAA,EACzF;AAEA,QAAMO,cAAcH,qBAAqBC,OAAO8D,UAAU;AAC1D,QAAMc,iBAAiBxF,4BAA4B,MAAMY,MAAM6E,wBAAwB;AACvF,MAAID,mBAAmB,EAAG,QAAO;AAEjC,QAAME,aAAajK,KAAKsE,IAAIG,yBAAAA,GAA4BsF,cAAc;AACtE,QAAMG,eAAe,MAAM/E,MAAMgF,UAAU,CACzC;AAAA,IAAEC,SAAS;AAAA,MAAEC,MAAMJ;AAAAA,IAAAA;AAAAA,EAAW,GAC9B;AAAA,IAAEK,QAAQjF;AAAAA,EAAAA,GACV;AAAA,IAAEkF,QAAQ;AAAA,EAAA,CAAS,CACpB;AACD,QAAMC,gBAAgBjG,4BAA4B2F,aAAa,CAAC,GAAGO,KAAK;AAExE,MAAIR,cAAcF,gBAAgB;AAChC,WAAO/J,KAAKsE,IAAIkG,eAAeT,cAAc;AAAA,EAC/C;AAEA,QAAMW,mBAAmB1K,KAAK2K,MAAOZ,iBAAiBS,gBAAiBP,UAAU;AACjF,SAAOjK,KAAK6F,IAAI,GAAG7F,KAAKsE,IAAIyF,gBAAgBW,gBAAgB,CAAC;AAC/D;"}
+{"version":3,"file":"queryExecutor-DW7iAdRY.js","sources":["../src/getDerivedKey.ts","../src/proxyAuth.ts","../src/syncAuthenticatedSession.ts","../src/rts/queryExecutor.ts"],"sourcesContent":["import assert from \"assert\"\nimport { hkdfSync } from \"crypto\"\n\n\nexport const getDerivedKey = (\n  masterKey: string,\n  info: string,\n  length: number = 32, // Default to 256-bit keys\n  salt: string = \"\",\n): string => {\n  assert(masterKey?.length >= 32, \"MASTER_KEY must be 32 chars or longer.\")\n\n  return Buffer.from(hkdfSync(\n    \"sha256\",\n    masterKey,\n    Buffer.from(salt),\n    Buffer.from(info),\n    length,\n  )).toString(\"hex\")\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\"\n\n\nexport const AUTHENTICATED_USER_ID_HEADER = \"rb-authenticated-user-id\"\nexport const AUTHENTICATED_TENANT_ID_HEADER = \"rb-authenticated-tenant-id\"\nexport const PROXY_AUTH_TIMESTAMP_HEADER = \"rb-proxy-auth-timestamp\"\nexport const PROXY_AUTH_SIGNATURE_HEADER = \"rb-proxy-auth-signature\"\n\nconst MAX_PROXY_AUTH_AGE_MS = 5 * 60 * 1000\n\ntype HeadersLike = Record<string, string | string[] | undefined>\n\nconst normalizeString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst getHeaderValue = (headers: HeadersLike | undefined, name: string): string | null => {\n  const value = headers?.[name]\n  if (Array.isArray(value)) return normalizeString(value[0])\n  return normalizeString(value)\n}\n\nconst getProxySharedSecret = (): string | null => {\n  const secret = process.env.RB_PROXY_SHARED_SECRET?.trim()\n  return secret || null\n}\n\nconst timingSafeEqualText = (left: string, right: string): boolean => {\n  const leftBuffer = Buffer.from(left)\n  const rightBuffer = Buffer.from(right)\n  if (leftBuffer.length !== rightBuffer.length) return false\n  return timingSafeEqual(leftBuffer, rightBuffer)\n}\n\nexport const buildProxyAuthSignature = ({\n  userId,\n  tenantId,\n  timestamp,\n  secret,\n}: {\n  userId: string\n  tenantId: string\n  timestamp: string\n  secret: string\n}): string => {\n  return createHmac(\"sha256\", secret)\n    .update(`${timestamp}:${userId}:${tenantId}`)\n    .digest(\"hex\")\n}\n\nexport const getTrustedProxyAuth = (\n  headers: HeadersLike | undefined,\n): { userId: string; tenantId: string } | null => {\n  const userId = getHeaderValue(headers, AUTHENTICATED_USER_ID_HEADER)\n  const tenantId = getHeaderValue(headers, AUTHENTICATED_TENANT_ID_HEADER)\n  const timestamp = getHeaderValue(headers, PROXY_AUTH_TIMESTAMP_HEADER)\n  const signature = getHeaderValue(headers, PROXY_AUTH_SIGNATURE_HEADER)\n  if (!userId || !tenantId || !timestamp || !signature) return null\n\n  const parsedTimestamp = Number(timestamp)\n  if (!Number.isInteger(parsedTimestamp)) return null\n\n  const now = Date.now()\n  if (Math.abs(now - parsedTimestamp) > MAX_PROXY_AUTH_AGE_MS) return null\n\n  const secret = getProxySharedSecret()\n  if (!secret) return null\n\n  const expectedSignature = buildProxyAuthSignature({\n    userId,\n    tenantId,\n    timestamp,\n    secret,\n  })\n\n  if (!timingSafeEqualText(signature, expectedSignature)) return null\n\n  return { userId, tenantId }\n}\n","import type { RequestHandler } from \"express\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\n\nimport {\n  getTrustedProxyAuth,\n} from \"./proxyAuth\"\n\n\ntype SessionUserLike = {\n  id?: unknown\n  currentTenantId?: unknown\n  signedInTenants?: unknown\n  tenantRoles?: unknown\n  isEntryGateAuthorized?: unknown\n}\n\ntype RequestLike = {\n  headers?: Record<string, string | string[] | undefined>\n  session?: {\n    user?: SessionUserLike\n  }\n}\n\ntype LoadedUserDoc = {\n  tenants?: unknown\n  tenantRoles?: unknown\n}\n\nconst normalizeString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst normalizeStringArray = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((entry) => normalizeString(String(entry)))\n    .filter((entry): entry is string => Boolean(entry))\n}\n\nconst normalizeRoles = (value: unknown): string[] => {\n  if (!Array.isArray(value)) return []\n  return value\n    .map((entry) => normalizeString(entry))\n    .filter((entry): entry is string => Boolean(entry))\n}\n\nconst normalizeTenantRoles = (value: unknown): Record<string, string[]> | undefined => {\n  if (!value || typeof value !== \"object\") return undefined\n\n  if (value instanceof Map) {\n    const entries = Array.from(value.entries())\n      .map(([tenantId, roles]) => {\n        const normalizedTenantId = normalizeString(String(tenantId))\n        if (!normalizedTenantId) return null\n        return [normalizedTenantId, normalizeRoles(roles)] as const\n      })\n      .filter((entry): entry is readonly [string, string[]] => Boolean(entry))\n    return entries.length ? Object.fromEntries(entries) : undefined\n  }\n\n  const nextRoles = Object.entries(value as Record<string, unknown>)\n    .map(([tenantId, roles]) => {\n      const normalizedTenantId = normalizeString(tenantId)\n      if (!normalizedTenantId) return null\n      return [normalizedTenantId, normalizeRoles(roles)] as const\n    })\n    .filter((entry): entry is readonly [string, string[]] => Boolean(entry))\n\n  return nextRoles.length ? Object.fromEntries(nextRoles) : undefined\n}\n\nconst isSessionAuthorizedForTenant = (sessionUser: SessionUserLike | undefined, tenantId: string): boolean => {\n  if (!sessionUser) return false\n\n  const signedInTenants = normalizeStringArray(sessionUser.signedInTenants)\n  if (signedInTenants.length > 0) {\n    return signedInTenants.includes(tenantId)\n  }\n\n  const currentTenantId = normalizeString(sessionUser.currentTenantId)\n  return currentTenantId === tenantId\n}\n\nconst loadSessionUser = async (userId: string, tenantId: string): Promise<Record<string, unknown> | null> => {\n  const ctx: LoadModelCtx = { req: { session: null } }\n  const User = await models.getGlobal(\"RBUser\", ctx)\n  const user = await User.findById(userId, { tenants: 1, tenantRoles: 1 }).lean() as LoadedUserDoc | null\n  if (!user) return null\n\n  const signedInTenants = normalizeStringArray(user.tenants)\n  if (!signedInTenants.includes(tenantId)) return null\n\n  const tenantRoles = normalizeTenantRoles(user.tenantRoles)\n\n  return {\n    id: userId,\n    currentTenantId: tenantId,\n    signedInTenants,\n    isEntryGateAuthorized: true,\n    ...(tenantRoles ? { tenantRoles } : {}),\n  }\n}\n\nexport const syncAuthenticatedSessionFromRequest = async (req: RequestLike): Promise<void> => {\n  const proxyAuth = getTrustedProxyAuth(req.headers)\n  if (!proxyAuth) return\n\n  const { userId, tenantId } = proxyAuth\n\n  const session = req.session\n  if (!session) return\n\n  const sessionUser = session.user\n  const sessionUserId = normalizeString(sessionUser?.id)\n\n  if (sessionUserId === userId && isSessionAuthorizedForTenant(sessionUser, tenantId)) {\n    const currentTenantId = normalizeString(sessionUser?.currentTenantId)\n    if (currentTenantId === tenantId) return\n\n    const baseUser = sessionUser && typeof sessionUser === \"object\" ? sessionUser as Record<string, unknown> : {}\n    session.user = {\n      ...baseUser,\n      id: userId,\n      currentTenantId: tenantId,\n      isEntryGateAuthorized: true,\n    }\n    return\n  }\n\n  const nextSessionUser = await loadSessionUser(userId, tenantId)\n  if (!nextSessionUser) {\n    if (session.user) {\n      delete session.user\n    }\n    return\n  }\n\n  session.user = nextSessionUser as SessionUserLike\n}\n\nexport const syncAuthenticatedSessionMiddleware: RequestHandler = (req, _res, next) => {\n  void syncAuthenticatedSessionFromRequest(req).then(() => {\n    next()\n  }, next)\n}\n","import type { Request } from \"express\"\nimport type { PaginationPageInfo, PaginationSpec } from \"@rpcbase/api\"\nimport { models, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AclSubjectType, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport { getDerivedKey } from \"../getDerivedKey\"\n\n\ntype JsonObject = Record<string, unknown>\n\ntype SessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport type RtsPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: RtsPopulateOption\n}\n\nexport type RtsPopulateOption =\n  | string\n  | RtsPopulateObject\n  | Array<string | RtsPopulateObject>\n\nexport type RtsQueryOptions = {\n  projection?: JsonObject\n  sort?: Record<string, 1 | -1>\n  limit?: number\n  populate?: RtsPopulateOption\n  pagination?: PaginationSpec\n}\n\nexport type RtsQueryResult = {\n  data: unknown[]\n  pageInfo?: PaginationPageInfo\n  totalCount?: number\n}\n\ntype PreparedRtsExecution = {\n  model: Model<any>\n  finalQuery: JsonObject\n}\n\nconst QUERY_MAX_LIMIT = 4096\nconst INTERNAL_MODEL_NAMES = new Set([\"RBRtsChange\", \"RBRtsCounter\"])\nconst DEFAULT_APPROX_COUNT_SAMPLE_SIZE = 1000\nconst MAX_APPROX_COUNT_SAMPLE_SIZE = 10_000\nconst UNSUPPORTED_APPROX_COUNT_OPERATORS = new Set([\"$text\", \"$near\", \"$nearSphere\", \"$where\"])\nlet paginationCursorSigningSecret: string | null = null\n\nconst getPaginationCursorSigningSecret = (): string => {\n  if (paginationCursorSigningSecret) return paginationCursorSigningSecret\n  const masterKey = process.env.MASTER_KEY?.trim()\n  if (!masterKey) {\n    throw new Error(\"MASTER_KEY must be defined to derive pagination cursor signing secret\")\n  }\n  paginationCursorSigningSecret = getDerivedKey(masterKey, \"pagination_cursor_signing\")\n  return paginationCursorSigningSecret\n}\n\nconst normalizeTenantId = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst getTenantIdFromRequest = (req: Request): string | null => {\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n}\n\nexport const resolveRtsRequestTenantId = (req: Request): string | null => {\n  return getTenantIdFromRequest(req)\n}\n\nexport const resolveRtsRequestUserId = (req: Request): string | null => {\n  return normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n}\n\nexport const isRtsRequestAuthorized = (req: Request, tenantId: string): boolean => {\n  const sessionUser = req.session?.user as SessionUser | undefined\n  if (!sessionUser) return false\n\n  const currentTenantId = normalizeTenantId(sessionUser.currentTenantId)\n  if (!currentTenantId) return false\n  return currentTenantId === tenantId\n}\n\nexport const buildRtsAbilityFromRequest = async (\n  req: Request,\n  tenantId: string,\n): Promise<{ ability: AppAbility; userId: string | null }> => {\n  const sessionUserId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.id)\n  if (!sessionUserId) {\n    const currentTenantId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n    if (!currentTenantId || currentTenantId !== tenantId) {\n      throw new Error(\"Tenant not authorized for this session\")\n    }\n\n    return {\n      ability: buildAbilityFromSession({ tenantId, session: req.session }),\n      userId: null,\n    }\n  }\n\n  const currentTenantId = normalizeTenantId((req.session?.user as SessionUser | undefined)?.currentTenantId)\n  if (!currentTenantId || currentTenantId !== tenantId) {\n    throw new Error(\"Tenant not authorized for this session\")\n  }\n\n  return {\n    ability: buildAbilityFromSession({ tenantId, session: req.session }),\n    userId: sessionUserId,\n  }\n}\n\nconst getTenantModel = async (tenantId: string, modelName: string, ability: AppAbility): Promise<Model<any>> => {\n  const ctx: LoadModelCtx = {\n    req: {\n      session: {\n        user: {\n          currentTenantId: tenantId,\n        },\n      },\n    },\n    ability,\n  }\n\n  return models.get(modelName, ctx)\n}\n\nconst normalizeLimit = (limit?: number): number => {\n  if (typeof limit !== \"number\") return QUERY_MAX_LIMIT\n  if (!Number.isFinite(limit)) return QUERY_MAX_LIMIT\n  return Math.min(QUERY_MAX_LIMIT, Math.abs(limit))\n}\n\nconst normalizeNonNegativeInteger = (value: unknown): number => {\n  if (typeof value !== \"number\") return 0\n  if (!Number.isFinite(value) || value < 0) return 0\n  return Math.floor(value)\n}\n\nconst getApproxCountSampleSize = (): number => {\n  const raw = process.env.RB_RTS_APPROX_COUNT_SAMPLE_SIZE?.trim() ?? \"\"\n  if (!raw) return DEFAULT_APPROX_COUNT_SAMPLE_SIZE\n\n  const parsed = Number(raw)\n  if (!Number.isFinite(parsed) || parsed <= 0) return DEFAULT_APPROX_COUNT_SAMPLE_SIZE\n  return Math.min(MAX_APPROX_COUNT_SAMPLE_SIZE, Math.floor(parsed))\n}\n\nconst findUnsupportedApproxCountOperator = (value: unknown): string | null => {\n  if (!value || typeof value !== \"object\") return null\n\n  if (Array.isArray(value)) {\n    for (const entry of value) {\n      const unsupportedOperator = findUnsupportedApproxCountOperator(entry)\n      if (unsupportedOperator) return unsupportedOperator\n    }\n    return null\n  }\n\n  for (const [key, nestedValue] of Object.entries(value as Record<string, unknown>)) {\n    if (UNSUPPORTED_APPROX_COUNT_OPERATORS.has(key)) {\n      return key\n    }\n\n    const unsupportedOperator = findUnsupportedApproxCountOperator(nestedValue)\n    if (unsupportedOperator) return unsupportedOperator\n  }\n\n  return null\n}\n\nconst castApproxCountQuery = (model: Model<any>, query: JsonObject): JsonObject => {\n  const castedQuery = model.find(query).cast(model)\n  if (!castedQuery || typeof castedQuery !== \"object\" || Array.isArray(castedQuery)) {\n    return query\n  }\n\n  return castedQuery as JsonObject\n}\n\nconst normalizeString = (value: unknown): string => {\n  return typeof value === \"string\" ? value.trim() : \"\"\n}\n\nconst normalizeObject = (value: unknown): JsonObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  return value as JsonObject\n}\n\nconst normalizePagination = (value: unknown): PaginationSpec | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  return value as PaginationSpec\n}\n\nconst normalizePopulateSelect = (value: unknown): string | JsonObject | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n  return normalizeObject(value)\n}\n\nconst normalizePopulateOptions = (value: unknown): RtsPopulateObject[\"options\"] | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as { sort?: unknown; limit?: unknown }\n  const normalized: RtsPopulateObject[\"options\"] = {}\n\n  if (raw.sort && typeof raw.sort === \"object\" && !Array.isArray(raw.sort)) {\n    normalized.sort = raw.sort as Record<string, 1 | -1>\n  }\n\n  if (typeof raw.limit === \"number\" && Number.isFinite(raw.limit)) {\n    normalized.limit = Math.max(0, Math.floor(Math.abs(raw.limit)))\n  }\n\n  if (!normalized.sort && normalized.limit === undefined) return undefined\n  return normalized\n}\n\nconst normalizePopulateObject = (value: unknown): RtsPopulateObject | undefined => {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined\n  const raw = value as Record<string, unknown>\n  const path = normalizeString(raw.path)\n  if (!path) return undefined\n\n  const normalized: RtsPopulateObject = { path }\n\n  const model = normalizeString(raw.model)\n  if (model) normalized.model = model\n\n  const select = normalizePopulateSelect(raw.select)\n  if (select !== undefined) normalized.select = select\n\n  const match = normalizeObject(raw.match)\n  if (match) normalized.match = match\n\n  const nestedPopulate = normalizeRtsPopulateOption(raw.populate)\n  if (nestedPopulate !== undefined) normalized.populate = nestedPopulate\n\n  const options = normalizePopulateOptions(raw.options)\n  if (options) normalized.options = options\n\n  return normalized\n}\n\nconst normalizeRtsPopulateOption = (value: unknown): RtsPopulateOption | undefined => {\n  if (typeof value === \"string\") {\n    const normalized = value.trim()\n    return normalized || undefined\n  }\n\n  if (Array.isArray(value)) {\n    const normalized = value\n      .map((entry) => {\n        if (typeof entry === \"string\") {\n          const path = entry.trim()\n          return path || null\n        }\n        return normalizePopulateObject(entry) ?? null\n      })\n      .filter((entry): entry is string | RtsPopulateObject => entry !== null)\n\n    return normalized.length > 0 ? normalized : undefined\n  }\n\n  return normalizePopulateObject(value)\n}\n\nconst normalizeModelName = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized || null\n}\n\nconst resolvePopulateRefModelName = (\n  model: Model<any>,\n  path: string,\n  explicitModelName: string | null,\n): string | null => {\n  if (explicitModelName) return explicitModelName\n\n  const schema = model.schema as any\n  const schemaPath = typeof schema.path === \"function\" ? schema.path(path) : null\n  const directRef = normalizeModelName(schemaPath?.options?.ref)\n  if (directRef) return directRef\n\n  const arrayRef = normalizeModelName(schemaPath?.caster?.options?.ref)\n  if (arrayRef) return arrayRef\n\n  const virtualPath = typeof schema.virtualpath === \"function\" ? schema.virtualpath(path) : null\n  const virtualRef = normalizeModelName(virtualPath?.options?.ref)\n  if (virtualRef) return virtualRef\n\n  return null\n}\n\nconst mergePopulateMatchWithAcl = (\n  populateMatch: JsonObject | undefined,\n  aclMatch: JsonObject,\n): JsonObject => {\n  if (!populateMatch || Object.keys(populateMatch).length === 0) return aclMatch\n  return { $and: [populateMatch, aclMatch] }\n}\n\ntype PreparedPopulateObject = {\n  path: string\n  model?: string\n  select?: string | JsonObject\n  match?: JsonObject\n  options?: {\n    sort?: Record<string, 1 | -1>\n    limit?: number\n  }\n  populate?: PreparedPopulateOption\n}\n\ntype PreparedPopulateOption =\n  | string\n  | PreparedPopulateObject\n  | Array<string | PreparedPopulateObject>\n\nconst resolvePopulateSpecForModel = async ({\n  tenantId,\n  model,\n  ability,\n  populate,\n  allowInternalModels,\n  modelCache,\n  dependencyModelNames,\n}: {\n  tenantId: string\n  model: Model<any>\n  ability: AppAbility\n  populate: RtsPopulateOption | undefined\n  allowInternalModels: boolean\n  modelCache: Map<string, Model<any>>\n  dependencyModelNames: Set<string>\n}): Promise<PreparedPopulateOption | undefined> => {\n  if (!populate) return undefined\n\n  const getModelCached = async (targetModelName: string): Promise<Model<any>> => {\n    const cached = modelCache.get(targetModelName)\n    if (cached) return cached\n    const loaded = await getTenantModel(tenantId, targetModelName, ability)\n    modelCache.set(targetModelName, loaded)\n    return loaded\n  }\n\n  const resolveOne = async (\n    entry: string | RtsPopulateObject,\n    parentModel: Model<any>,\n  ): Promise<string | PreparedPopulateObject | null> => {\n    if (typeof entry === \"string\") {\n      const path = entry.trim()\n      if (!path) return null\n\n      const refModelName = resolvePopulateRefModelName(parentModel, path, null)\n      if (!refModelName) return path\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      )\n      return {\n        path,\n        match: aclMatch as JsonObject,\n      }\n    }\n\n    const path = entry.path.trim()\n    if (!path) return null\n\n    const explicitModelName = normalizeModelName(entry.model)\n    const refModelName = resolvePopulateRefModelName(parentModel, path, explicitModelName)\n    let nestedModel = parentModel\n\n    const normalizedEntry: PreparedPopulateObject = {\n      path,\n    }\n\n    if (entry.select !== undefined) normalizedEntry.select = entry.select\n    if (entry.options !== undefined) normalizedEntry.options = entry.options\n    if (explicitModelName) normalizedEntry.model = explicitModelName\n    if (entry.match !== undefined) normalizedEntry.match = entry.match\n\n    if (refModelName) {\n      if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(refModelName)) {\n        throw new Error(\"Model not allowed\")\n      }\n      if (!ability.can(\"read\", refModelName as AclSubjectType)) {\n        throw new Error(\"forbidden\")\n      }\n\n      dependencyModelNames.add(refModelName)\n      nestedModel = await getModelCached(refModelName)\n\n      const aclMatch = getAccessibleByQuery(\n        ability,\n        \"read\",\n        refModelName as Exclude<AclSubjectType, \"all\">,\n      ) as JsonObject\n      normalizedEntry.match = mergePopulateMatchWithAcl(\n        normalizedEntry.match,\n        aclMatch,\n      )\n    } else if (entry.populate !== undefined) {\n      throw new Error(\"Populate path must reference a model when nested populate is used\")\n    }\n\n    const nestedPopulate = await resolvePopulateSpecForModel({\n      tenantId,\n      model: nestedModel,\n      ability,\n      populate: entry.populate,\n      allowInternalModels,\n      modelCache,\n      dependencyModelNames,\n    })\n    if (nestedPopulate !== undefined) normalizedEntry.populate = nestedPopulate\n\n    return normalizedEntry\n  }\n\n  if (Array.isArray(populate)) {\n    const resolved = await Promise.all(populate.map((entry) => resolveOne(entry, model)))\n    const filtered = resolved.filter((entry): entry is string | PreparedPopulateObject => entry !== null)\n    return filtered.length > 0 ? filtered : undefined\n  }\n\n  const resolved = await resolveOne(populate, model)\n  return resolved ?? undefined\n}\n\nexport const normalizeRtsQueryOptions = (options: RtsQueryOptions | undefined): RtsQueryOptions => {\n  if (!options || typeof options !== \"object\") return {}\n  const normalized: RtsQueryOptions = {}\n\n  if (options.projection && typeof options.projection === \"object\" && !Array.isArray(options.projection)) {\n    normalized.projection = options.projection\n  }\n\n  if (options.sort && typeof options.sort === \"object\" && !Array.isArray(options.sort)) {\n    normalized.sort = options.sort\n  }\n\n  normalized.limit = normalizeLimit(options.limit)\n  normalized.populate = normalizeRtsPopulateOption(options.populate)\n  normalized.pagination = normalizePagination(options.pagination)\n\n  return normalized\n}\n\nexport const resolveRtsQueryDependencyModelNames = async ({\n  tenantId,\n  ability,\n  modelName,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<string[]> => {\n  const model = await getTenantModel(tenantId, modelName, ability)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const dependencyModelNames = new Set<string>()\n  await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames,\n  })\n\n  return Array.from(dependencyModelNames)\n}\n\nexport const runRtsQuery = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  options,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  options: RtsQueryOptions\n  allowInternalModels?: boolean\n}): Promise<RtsQueryResult> => {\n  const { model, finalQuery } = await prepareRtsExecution({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n  const projection = options.projection ?? undefined\n  const sort = options.sort\n  const limit = normalizeLimit(options.limit)\n  const modelCache = new Map<string, Model<any>>()\n  modelCache.set(modelName, model)\n\n  const populate = await resolvePopulateSpecForModel({\n    tenantId,\n    model,\n    ability,\n    populate: options.populate,\n    allowInternalModels,\n    modelCache,\n    dependencyModelNames: new Set<string>(),\n  })\n\n  if (options.pagination) {\n    const paginatedQuery = model.find(finalQuery, projection)\n    if (populate !== undefined) {\n      paginatedQuery.populate(populate as any)\n    }\n\n    const paginatedResult = await paginatedQuery.paginate(options.pagination, {\n      cursor: {\n        signingSecret: getPaginationCursorSigningSecret(),\n      },\n    })\n    const totalCount = typeof paginatedResult.totalCount === \"number\"\n      && Number.isFinite(paginatedResult.totalCount)\n      && paginatedResult.totalCount >= 0\n      ? Math.floor(paginatedResult.totalCount)\n      : undefined\n    const approximateTotalCount = totalCount === undefined\n      ? await runApproximateRtsCount(model, finalQuery).catch(() => undefined)\n      : undefined\n    const resolvedTotalCount = totalCount ?? approximateTotalCount\n\n    return {\n      data: Array.isArray(paginatedResult.nodes) ? paginatedResult.nodes : [],\n      pageInfo: paginatedResult.pageInfo,\n      ...(resolvedTotalCount !== undefined ? { totalCount: resolvedTotalCount } : {}),\n    }\n  }\n\n  const queryPromise = model.find(finalQuery, projection)\n  if (populate !== undefined) {\n    queryPromise.populate(populate as any)\n  }\n  if (sort && Object.keys(sort).length) {\n    queryPromise.sort(sort)\n  }\n  queryPromise.limit(limit)\n\n  const data = await queryPromise\n  return { data: Array.isArray(data) ? data : [] }\n}\n\nconst prepareRtsExecution = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  allowInternalModels?: boolean\n}): Promise<PreparedRtsExecution> => {\n  if (!allowInternalModels && INTERNAL_MODEL_NAMES.has(modelName)) {\n    throw new Error(\"Model not allowed\")\n  }\n\n  if (!ability.can(\"read\", modelName as AclSubjectType)) {\n    throw new Error(\"forbidden\")\n  }\n\n  const model = await getTenantModel(tenantId, modelName, ability)\n  const accessQuery = getAccessibleByQuery(ability, \"read\", modelName as Exclude<AclSubjectType, \"all\">)\n  const finalQuery: JsonObject = { $and: [query, accessQuery] }\n\n  return { model, finalQuery }\n}\n\nconst runApproximateRtsCount = async (model: Model<any>, query: JsonObject): Promise<number> => {\n  const unsupportedOperator = findUnsupportedApproxCountOperator(query)\n  if (unsupportedOperator) {\n    throw new Error(`Approximate RTS count does not support ${unsupportedOperator} queries`)\n  }\n\n  const castedQuery = castApproxCountQuery(model, query)\n  const estimatedTotal = normalizeNonNegativeInteger(await model.estimatedDocumentCount())\n  if (estimatedTotal === 0) return 0\n\n  const sampleSize = Math.min(getApproxCountSampleSize(), estimatedTotal)\n  const sampleResult = await model.aggregate([\n    { $sample: { size: sampleSize } },\n    { $match: castedQuery },\n    { $count: \"count\" },\n  ]) as Array<{ count?: unknown }>\n  const sampleMatches = normalizeNonNegativeInteger(sampleResult[0]?.count)\n\n  if (sampleSize >= estimatedTotal) {\n    return Math.min(sampleMatches, estimatedTotal)\n  }\n\n  const estimatedMatches = Math.round((estimatedTotal * sampleMatches) / sampleSize)\n  return Math.max(0, Math.min(estimatedTotal, estimatedMatches))\n}\n\nexport const runRtsCount = async ({\n  tenantId,\n  ability,\n  modelName,\n  query,\n  allowInternalModels = false,\n}: {\n  tenantId: string\n  ability: AppAbility\n  modelName: string\n  query: JsonObject\n  allowInternalModels?: boolean\n}): Promise<number> => {\n  const { model, finalQuery } = await prepareRtsExecution({\n    tenantId,\n    ability,\n    modelName,\n    query,\n    allowInternalModels,\n  })\n\n  return await runApproximateRtsCount(model, finalQuery)\n}\n"],"names":["getDerivedKey","masterKey","info","length","salt","assert","Buffer","from","hkdfSync","toString","AUTHENTICATED_USER_ID_HEADER","AUTHENTICATED_TENANT_ID_HEADER","PROXY_AUTH_TIMESTAMP_HEADER","PROXY_AUTH_SIGNATURE_HEADER","MAX_PROXY_AUTH_AGE_MS","normalizeString","value","normalized","trim","getHeaderValue","headers","name","Array","isArray","getProxySharedSecret","secret","process","env","RB_PROXY_SHARED_SECRET","timingSafeEqualText","left","right","leftBuffer","rightBuffer","timingSafeEqual","buildProxyAuthSignature","userId","tenantId","timestamp","createHmac","update","digest","getTrustedProxyAuth","signature","parsedTimestamp","Number","isInteger","now","Date","Math","abs","expectedSignature","normalizeStringArray","map","entry","String","filter","Boolean","normalizeRoles","normalizeTenantRoles","undefined","Map","entries","roles","normalizedTenantId","Object","fromEntries","nextRoles","isSessionAuthorizedForTenant","sessionUser","signedInTenants","includes","currentTenantId","loadSessionUser","ctx","req","session","User","models","getGlobal","user","findById","tenants","tenantRoles","lean","id","isEntryGateAuthorized","syncAuthenticatedSessionFromRequest","proxyAuth","sessionUserId","baseUser","nextSessionUser","syncAuthenticatedSessionMiddleware","_res","next","then","QUERY_MAX_LIMIT","INTERNAL_MODEL_NAMES","Set","DEFAULT_APPROX_COUNT_SAMPLE_SIZE","MAX_APPROX_COUNT_SAMPLE_SIZE","UNSUPPORTED_APPROX_COUNT_OPERATORS","paginationCursorSigningSecret","getPaginationCursorSigningSecret","MASTER_KEY","Error","normalizeTenantId","getTenantIdFromRequest","resolveRtsRequestTenantId","isRtsRequestAuthorized","buildRtsAbilityFromRequest","ability","buildAbilityFromSession","getTenantModel","modelName","get","normalizeLimit","limit","isFinite","min","normalizeNonNegativeInteger","floor","getApproxCountSampleSize","raw","RB_RTS_APPROX_COUNT_SAMPLE_SIZE","parsed","findUnsupportedApproxCountOperator","unsupportedOperator","key","nestedValue","has","castApproxCountQuery","model","query","castedQuery","find","cast","normalizeObject","normalizePagination","normalizePopulateSelect","normalizePopulateOptions","sort","max","normalizePopulateObject","path","select","match","nestedPopulate","normalizeRtsPopulateOption","populate","options","normalizeModelName","resolvePopulateRefModelName","explicitModelName","schema","schemaPath","directRef","ref","arrayRef","caster","virtualPath","virtualpath","virtualRef","mergePopulateMatchWithAcl","populateMatch","aclMatch","keys","$and","resolvePopulateSpecForModel","allowInternalModels","modelCache","dependencyModelNames","getModelCached","targetModelName","cached","loaded","set","resolveOne","parentModel","refModelName","can","add","getAccessibleByQuery","nestedModel","normalizedEntry","resolved","Promise","all","filtered","normalizeRtsQueryOptions","projection","pagination","resolveRtsQueryDependencyModelNames","runRtsQuery","finalQuery","prepareRtsExecution","paginatedQuery","paginatedResult","paginate","cursor","signingSecret","totalCount","approximateTotalCount","runApproximateRtsCount","catch","resolvedTotalCount","data","nodes","pageInfo","queryPromise","accessQuery","estimatedTotal","estimatedDocumentCount","sampleSize","sampleResult","aggregate","$sample","size","$match","$count","sampleMatches","count","estimatedMatches","round","runRtsCount"],"mappings":";;;;;AAIO,MAAMA,gBAAgBA,CAC3BC,WACAC,MACAC,SAAiB,IACjBC,OAAe,OACJ;AACXC,SAAOJ,WAAWE,UAAU,IAAI,wCAAwC;AAExE,SAAOG,OAAOC,KAAKC,SACjB,UACAP,WACAK,OAAOC,KAAKH,IAAI,GAChBE,OAAOC,KAAKL,IAAI,GAChBC,MACF,CAAC,EAAEM,SAAS,KAAK;AACnB;AChBO,MAAMC,+BAA+B;AACrC,MAAMC,iCAAiC;AACvC,MAAMC,8BAA8B;AACpC,MAAMC,8BAA8B;AAE3C,MAAMC,wBAAwB,IAAI,KAAK;AAIvC,MAAMC,oBAAkBA,CAACC,UAAkC;AACzD,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAME,iBAAiBA,CAACC,SAAkCC,SAAgC;AACxF,QAAML,QAAQI,UAAUC,IAAI;AAC5B,MAAIC,MAAMC,QAAQP,KAAK,UAAUD,kBAAgBC,MAAM,CAAC,CAAC;AACzD,SAAOD,kBAAgBC,KAAK;AAC9B;AAEA,MAAMQ,uBAAuBA,MAAqB;AAChD,QAAMC,SAASC,QAAQC,IAAIC,wBAAwBV,KAAAA;AACnD,SAAOO,UAAU;AACnB;AAEA,MAAMI,sBAAsBA,CAACC,MAAcC,UAA2B;AACpE,QAAMC,aAAa1B,OAAOC,KAAKuB,IAAI;AACnC,QAAMG,cAAc3B,OAAOC,KAAKwB,KAAK;AACrC,MAAIC,WAAW7B,WAAW8B,YAAY9B,OAAQ,QAAO;AACrD,SAAO+B,gBAAgBF,YAAYC,WAAW;AAChD;AAEO,MAAME,0BAA0BA,CAAC;AAAA,EACtCC;AAAAA,EACAC;AAAAA,EACAC;AAAAA,EACAb;AAMF,MAAc;AACZ,SAAOc,WAAW,UAAUd,MAAM,EAC/Be,OAAO,GAAGF,SAAS,IAAIF,MAAM,IAAIC,QAAQ,EAAE,EAC3CI,OAAO,KAAK;AACjB;AAEO,MAAMC,sBAAsBA,CACjCtB,YACgD;AAChD,QAAMgB,SAASjB,eAAeC,SAASV,4BAA4B;AACnE,QAAM2B,WAAWlB,eAAeC,SAAST,8BAA8B;AACvE,QAAM2B,YAAYnB,eAAeC,SAASR,2BAA2B;AACrE,QAAM+B,YAAYxB,eAAeC,SAASP,2BAA2B;AACrE,MAAI,CAACuB,UAAU,CAACC,YAAY,CAACC,aAAa,CAACK,UAAW,QAAO;AAE7D,QAAMC,kBAAkBC,OAAOP,SAAS;AACxC,MAAI,CAACO,OAAOC,UAAUF,eAAe,EAAG,QAAO;AAE/C,QAAMG,MAAMC,KAAKD,IAAAA;AACjB,MAAIE,KAAKC,IAAIH,MAAMH,eAAe,IAAI9B,sBAAuB,QAAO;AAEpE,QAAMW,SAASD,qBAAAA;AACf,MAAI,CAACC,OAAQ,QAAO;AAEpB,QAAM0B,oBAAoBhB,wBAAwB;AAAA,IAChDC;AAAAA,IACAC;AAAAA,IACAC;AAAAA,IACAb;AAAAA,EAAAA,CACD;AAED,MAAI,CAACI,oBAAoBc,WAAWQ,iBAAiB,EAAG,QAAO;AAE/D,SAAO;AAAA,IAAEf;AAAAA,IAAQC;AAAAA,EAAAA;AACnB;ACpDA,MAAMtB,oBAAkBA,CAACC,UAAkC;AACzD,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAMmC,uBAAuBA,CAACpC,UAA6B;AACzD,MAAI,CAACM,MAAMC,QAAQP,KAAK,UAAU,CAAA;AAClC,SAAOA,MACJqC,IAAKC,CAAAA,UAAUvC,kBAAgBwC,OAAOD,KAAK,CAAC,CAAC,EAC7CE,OAAO,CAACF,UAA2BG,QAAQH,KAAK,CAAC;AACtD;AAEA,MAAMI,iBAAiBA,CAAC1C,UAA6B;AACnD,MAAI,CAACM,MAAMC,QAAQP,KAAK,UAAU,CAAA;AAClC,SAAOA,MACJqC,IAAKC,CAAAA,UAAUvC,kBAAgBuC,KAAK,CAAC,EACrCE,OAAO,CAACF,UAA2BG,QAAQH,KAAK,CAAC;AACtD;AAEA,MAAMK,uBAAuBA,CAAC3C,UAAyD;AACrF,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO4C;AAEhD,MAAI5C,iBAAiB6C,KAAK;AACxB,UAAMC,UAAUxC,MAAMf,KAAKS,MAAM8C,SAAS,EACvCT,IAAI,CAAC,CAAChB,UAAU0B,KAAK,MAAM;AAC1B,YAAMC,qBAAqBjD,kBAAgBwC,OAAOlB,QAAQ,CAAC;AAC3D,UAAI,CAAC2B,mBAAoB,QAAO;AAChC,aAAO,CAACA,oBAAoBN,eAAeK,KAAK,CAAC;AAAA,IACnD,CAAC,EACAP,OAAO,CAACF,UAAgDG,QAAQH,KAAK,CAAC;AACzE,WAAOQ,QAAQ3D,SAAS8D,OAAOC,YAAYJ,OAAO,IAAIF;AAAAA,EACxD;AAEA,QAAMO,YAAYF,OAAOH,QAAQ9C,KAAgC,EAC9DqC,IAAI,CAAC,CAAChB,UAAU0B,KAAK,MAAM;AAC1B,UAAMC,qBAAqBjD,kBAAgBsB,QAAQ;AACnD,QAAI,CAAC2B,mBAAoB,QAAO;AAChC,WAAO,CAACA,oBAAoBN,eAAeK,KAAK,CAAC;AAAA,EACnD,CAAC,EACAP,OAAO,CAACF,UAAgDG,QAAQH,KAAK,CAAC;AAEzE,SAAOa,UAAUhE,SAAS8D,OAAOC,YAAYC,SAAS,IAAIP;AAC5D;AAEA,MAAMQ,+BAA+BA,CAACC,aAA0ChC,aAA8B;AAC5G,MAAI,CAACgC,YAAa,QAAO;AAEzB,QAAMC,kBAAkBlB,qBAAqBiB,YAAYC,eAAe;AACxE,MAAIA,gBAAgBnE,SAAS,GAAG;AAC9B,WAAOmE,gBAAgBC,SAASlC,QAAQ;AAAA,EAC1C;AAEA,QAAMmC,kBAAkBzD,kBAAgBsD,YAAYG,eAAe;AACnE,SAAOA,oBAAoBnC;AAC7B;AAEA,MAAMoC,kBAAkB,OAAOrC,QAAgBC,aAA8D;AAC3G,QAAMqC,MAAoB;AAAA,IAAEC,KAAK;AAAA,MAAEC,SAAS;AAAA,IAAA;AAAA,EAAK;AACjD,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUL,GAAG;AACjD,QAAMM,OAAO,MAAMH,KAAKI,SAAS7C,QAAQ;AAAA,IAAE8C,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG,EAAEC,KAAAA;AACzE,MAAI,CAACJ,KAAM,QAAO;AAElB,QAAMV,kBAAkBlB,qBAAqB4B,KAAKE,OAAO;AACzD,MAAI,CAACZ,gBAAgBC,SAASlC,QAAQ,EAAG,QAAO;AAEhD,QAAM8C,cAAcxB,qBAAqBqB,KAAKG,WAAW;AAEzD,SAAO;AAAA,IACLE,IAAIjD;AAAAA,IACJoC,iBAAiBnC;AAAAA,IACjBiC;AAAAA,IACAgB,uBAAuB;AAAA,IACvB,GAAIH,cAAc;AAAA,MAAEA;AAAAA,IAAAA,IAAgB,CAAA;AAAA,EAAC;AAEzC;AAEO,MAAMI,sCAAsC,OAAOZ,QAAoC;AAC5F,QAAMa,YAAY9C,oBAAoBiC,IAAIvD,OAAO;AACjD,MAAI,CAACoE,UAAW;AAEhB,QAAM;AAAA,IAAEpD;AAAAA,IAAQC;AAAAA,EAAAA,IAAamD;AAE7B,QAAMZ,UAAUD,IAAIC;AACpB,MAAI,CAACA,QAAS;AAEd,QAAMP,cAAcO,QAAQI;AAC5B,QAAMS,gBAAgB1E,kBAAgBsD,aAAagB,EAAE;AAErD,MAAII,kBAAkBrD,UAAUgC,6BAA6BC,aAAahC,QAAQ,GAAG;AACnF,UAAMmC,kBAAkBzD,kBAAgBsD,aAAaG,eAAe;AACpE,QAAIA,oBAAoBnC,SAAU;AAElC,UAAMqD,WAAWrB,eAAe,OAAOA,gBAAgB,WAAWA,cAAyC,CAAA;AAC3GO,YAAQI,OAAO;AAAA,MACb,GAAGU;AAAAA,MACHL,IAAIjD;AAAAA,MACJoC,iBAAiBnC;AAAAA,MACjBiD,uBAAuB;AAAA,IAAA;AAEzB;AAAA,EACF;AAEA,QAAMK,kBAAkB,MAAMlB,gBAAgBrC,QAAQC,QAAQ;AAC9D,MAAI,CAACsD,iBAAiB;AACpB,QAAIf,QAAQI,MAAM;AAChB,aAAOJ,QAAQI;AAAAA,IACjB;AACA;AAAA,EACF;AAEAJ,UAAQI,OAAOW;AACjB;AAEO,MAAMC,qCAAqDA,CAACjB,KAAKkB,MAAMC,SAAS;AACrF,OAAKP,oCAAoCZ,GAAG,EAAEoB,KAAK,MAAM;AACvDD,SAAAA;AAAAA,EACF,GAAGA,IAAI;AACT;AC9FA,MAAME,kBAAkB;AACxB,MAAMC,uBAAuB,oBAAIC,IAAI,CAAC,eAAe,cAAc,CAAC;AACpE,MAAMC,mCAAmC;AACzC,MAAMC,+BAA+B;AACrC,MAAMC,yDAAyCH,IAAI,CAAC,SAAS,SAAS,eAAe,QAAQ,CAAC;AAC9F,IAAII,gCAA+C;AAEnD,MAAMC,mCAAmCA,MAAc;AACrD,MAAID,8BAA+B,QAAOA;AAC1C,QAAMrG,YAAYyB,QAAQC,IAAI6E,YAAYtF,KAAAA;AAC1C,MAAI,CAACjB,WAAW;AACd,UAAM,IAAIwG,MAAM,uEAAuE;AAAA,EACzF;AACAH,kCAAgCtG,cAAcC,WAAW,2BAA2B;AACpF,SAAOqG;AACT;AAEA,MAAMI,oBAAoBA,CAAC1F,UAAkC;AAC3D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,aAAaA,aAAa;AACnC;AAEA,MAAM0F,yBAAyBA,CAAChC,QAAgC;AAC9D,SAAO+B,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AAC1F;AAEO,MAAMoC,4BAA4BA,CAACjC,QAAgC;AACxE,SAAOgC,uBAAuBhC,GAAG;AACnC;AAMO,MAAMkC,yBAAyBA,CAAClC,KAActC,aAA8B;AACjF,QAAMgC,cAAcM,IAAIC,SAASI;AACjC,MAAI,CAACX,YAAa,QAAO;AAEzB,QAAMG,kBAAkBkC,kBAAkBrC,YAAYG,eAAe;AACrE,MAAI,CAACA,gBAAiB,QAAO;AAC7B,SAAOA,oBAAoBnC;AAC7B;AAEO,MAAMyE,6BAA6B,OACxCnC,KACAtC,aAC4D;AAC5D,QAAMoD,gBAAgBiB,kBAAmB/B,IAAIC,SAASI,MAAkCK,EAAE;AAC1F,MAAI,CAACI,eAAe;AAClB,UAAMjB,mBAAkBkC,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AACzG,QAAI,CAACA,oBAAmBA,qBAAoBnC,UAAU;AACpD,YAAM,IAAIoE,MAAM,wCAAwC;AAAA,IAC1D;AAEA,WAAO;AAAA,MACLM,SAASC,wBAAwB;AAAA,QAAE3E;AAAAA,QAAUuC,SAASD,IAAIC;AAAAA,MAAAA,CAAS;AAAA,MACnExC,QAAQ;AAAA,IAAA;AAAA,EAEZ;AAEA,QAAMoC,kBAAkBkC,kBAAmB/B,IAAIC,SAASI,MAAkCR,eAAe;AACzG,MAAI,CAACA,mBAAmBA,oBAAoBnC,UAAU;AACpD,UAAM,IAAIoE,MAAM,wCAAwC;AAAA,EAC1D;AAEA,SAAO;AAAA,IACLM,SAASC,wBAAwB;AAAA,MAAE3E;AAAAA,MAAUuC,SAASD,IAAIC;AAAAA,IAAAA,CAAS;AAAA,IACnExC,QAAQqD;AAAAA,EAAAA;AAEZ;AAEA,MAAMwB,iBAAiB,OAAO5E,UAAkB6E,WAAmBH,YAA6C;AAC9G,QAAMrC,MAAoB;AAAA,IACxBC,KAAK;AAAA,MACHC,SAAS;AAAA,QACPI,MAAM;AAAA,UACJR,iBAAiBnC;AAAAA,QAAAA;AAAAA,MACnB;AAAA,IACF;AAAA,IAEF0E;AAAAA,EAAAA;AAGF,SAAOjC,OAAOqC,IAAID,WAAWxC,GAAG;AAClC;AAEA,MAAM0C,iBAAiBA,CAACC,UAA2B;AACjD,MAAI,OAAOA,UAAU,SAAU,QAAOrB;AACtC,MAAI,CAACnD,OAAOyE,SAASD,KAAK,EAAG,QAAOrB;AACpC,SAAO/C,KAAKsE,IAAIvB,iBAAiB/C,KAAKC,IAAImE,KAAK,CAAC;AAClD;AAEA,MAAMG,8BAA8BA,CAACxG,UAA2B;AAC9D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC6B,OAAOyE,SAAStG,KAAK,KAAKA,QAAQ,EAAG,QAAO;AACjD,SAAOiC,KAAKwE,MAAMzG,KAAK;AACzB;AAEA,MAAM0G,2BAA2BA,MAAc;AAC7C,QAAMC,MAAMjG,QAAQC,IAAIiG,iCAAiC1G,UAAU;AACnE,MAAI,CAACyG,IAAK,QAAOxB;AAEjB,QAAM0B,SAAShF,OAAO8E,GAAG;AACzB,MAAI,CAAC9E,OAAOyE,SAASO,MAAM,KAAKA,UAAU,EAAG,QAAO1B;AACpD,SAAOlD,KAAKsE,IAAInB,8BAA8BnD,KAAKwE,MAAMI,MAAM,CAAC;AAClE;AAEA,MAAMC,qCAAqCA,CAAC9G,UAAkC;AAC5E,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;AAEhD,MAAIM,MAAMC,QAAQP,KAAK,GAAG;AACxB,eAAWsC,SAAStC,OAAO;AACzB,YAAM+G,sBAAsBD,mCAAmCxE,KAAK;AACpE,UAAIyE,oBAAqB,QAAOA;AAAAA,IAClC;AACA,WAAO;AAAA,EACT;AAEA,aAAW,CAACC,KAAKC,WAAW,KAAKhE,OAAOH,QAAQ9C,KAAgC,GAAG;AACjF,QAAIqF,mCAAmC6B,IAAIF,GAAG,GAAG;AAC/C,aAAOA;AAAAA,IACT;AAEA,UAAMD,sBAAsBD,mCAAmCG,WAAW;AAC1E,QAAIF,oBAAqB,QAAOA;AAAAA,EAClC;AAEA,SAAO;AACT;AAEA,MAAMI,uBAAuBA,CAACC,OAAmBC,UAAkC;AACjF,QAAMC,cAAcF,MAAMG,KAAKF,KAAK,EAAEG,KAAKJ,KAAK;AAChD,MAAI,CAACE,eAAe,OAAOA,gBAAgB,YAAYhH,MAAMC,QAAQ+G,WAAW,GAAG;AACjF,WAAOD;AAAAA,EACT;AAEA,SAAOC;AACT;AAEA,MAAMvH,kBAAkBA,CAACC,UAA2B;AAClD,SAAO,OAAOA,UAAU,WAAWA,MAAME,SAAS;AACpD;AAEA,MAAMuH,kBAAkBA,CAACzH,UAA2C;AAClE,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,SAAO5C;AACT;AAEA,MAAM0H,sBAAsBA,CAAC1H,UAA+C;AAC1E,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,SAAO5C;AACT;AAEA,MAAM2H,0BAA0BA,CAAC3H,UAAoD;AACnF,MAAI,OAAOA,UAAU,UAAU;AAC7B,UAAMC,aAAaD,MAAME,KAAAA;AACzB,WAAOD,cAAc2C;AAAAA,EACvB;AACA,SAAO6E,gBAAgBzH,KAAK;AAC9B;AAEA,MAAM4H,2BAA2BA,CAAC5H,UAA6D;AAC7F,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,QAAM+D,MAAM3G;AACZ,QAAMC,aAA2C,CAAA;AAEjD,MAAI0G,IAAIkB,QAAQ,OAAOlB,IAAIkB,SAAS,YAAY,CAACvH,MAAMC,QAAQoG,IAAIkB,IAAI,GAAG;AACxE5H,eAAW4H,OAAOlB,IAAIkB;AAAAA,EACxB;AAEA,MAAI,OAAOlB,IAAIN,UAAU,YAAYxE,OAAOyE,SAASK,IAAIN,KAAK,GAAG;AAC/DpG,eAAWoG,QAAQpE,KAAK6F,IAAI,GAAG7F,KAAKwE,MAAMxE,KAAKC,IAAIyE,IAAIN,KAAK,CAAC,CAAC;AAAA,EAChE;AAEA,MAAI,CAACpG,WAAW4H,QAAQ5H,WAAWoG,UAAUzD,OAAW,QAAOA;AAC/D,SAAO3C;AACT;AAEA,MAAM8H,0BAA0BA,CAAC/H,UAAkD;AACjF,MAAI,CAACA,SAAS,OAAOA,UAAU,YAAYM,MAAMC,QAAQP,KAAK,EAAG,QAAO4C;AACxE,QAAM+D,MAAM3G;AACZ,QAAMgI,OAAOjI,gBAAgB4G,IAAIqB,IAAI;AACrC,MAAI,CAACA,KAAM,QAAOpF;AAElB,QAAM3C,aAAgC;AAAA,IAAE+H;AAAAA,EAAAA;AAExC,QAAMZ,QAAQrH,gBAAgB4G,IAAIS,KAAK;AACvC,MAAIA,kBAAkBA,QAAQA;AAE9B,QAAMa,SAASN,wBAAwBhB,IAAIsB,MAAM;AACjD,MAAIA,WAAWrF,OAAW3C,YAAWgI,SAASA;AAE9C,QAAMC,QAAQT,gBAAgBd,IAAIuB,KAAK;AACvC,MAAIA,kBAAkBA,QAAQA;AAE9B,QAAMC,iBAAiBC,2BAA2BzB,IAAI0B,QAAQ;AAC9D,MAAIF,mBAAmBvF,OAAW3C,YAAWoI,WAAWF;AAExD,QAAMG,UAAUV,yBAAyBjB,IAAI2B,OAAO;AACpD,MAAIA,oBAAoBA,UAAUA;AAElC,SAAOrI;AACT;AAEA,MAAMmI,6BAA6BA,CAACpI,UAAkD;AACpF,MAAI,OAAOA,UAAU,UAAU;AAC7B,UAAMC,aAAaD,MAAME,KAAAA;AACzB,WAAOD,cAAc2C;AAAAA,EACvB;AAEA,MAAItC,MAAMC,QAAQP,KAAK,GAAG;AACxB,UAAMC,aAAaD,MAChBqC,IAAKC,CAAAA,UAAU;AACd,UAAI,OAAOA,UAAU,UAAU;AAC7B,cAAM0F,OAAO1F,MAAMpC,KAAAA;AACnB,eAAO8H,QAAQ;AAAA,MACjB;AACA,aAAOD,wBAAwBzF,KAAK,KAAK;AAAA,IAC3C,CAAC,EACAE,OAAO,CAACF,UAA+CA,UAAU,IAAI;AAExE,WAAOrC,WAAWd,SAAS,IAAIc,aAAa2C;AAAAA,EAC9C;AAEA,SAAOmF,wBAAwB/H,KAAK;AACtC;AAEA,MAAMuI,qBAAqBA,CAACvI,UAAkC;AAC5D,MAAI,OAAOA,UAAU,SAAU,QAAO;AACtC,QAAMC,aAAaD,MAAME,KAAAA;AACzB,SAAOD,cAAc;AACvB;AAEA,MAAMuI,8BAA8BA,CAClCpB,OACAY,MACAS,sBACkB;AAClB,MAAIA,kBAAmB,QAAOA;AAE9B,QAAMC,SAAStB,MAAMsB;AACrB,QAAMC,aAAa,OAAOD,OAAOV,SAAS,aAAaU,OAAOV,KAAKA,IAAI,IAAI;AAC3E,QAAMY,YAAYL,mBAAmBI,YAAYL,SAASO,GAAG;AAC7D,MAAID,UAAW,QAAOA;AAEtB,QAAME,WAAWP,mBAAmBI,YAAYI,QAAQT,SAASO,GAAG;AACpE,MAAIC,SAAU,QAAOA;AAErB,QAAME,cAAc,OAAON,OAAOO,gBAAgB,aAAaP,OAAOO,YAAYjB,IAAI,IAAI;AAC1F,QAAMkB,aAAaX,mBAAmBS,aAAaV,SAASO,GAAG;AAC/D,MAAIK,WAAY,QAAOA;AAEvB,SAAO;AACT;AAEA,MAAMC,4BAA4BA,CAChCC,eACAC,aACe;AACf,MAAI,CAACD,iBAAiBnG,OAAOqG,KAAKF,aAAa,EAAEjK,WAAW,EAAG,QAAOkK;AACtE,SAAO;AAAA,IAAEE,MAAM,CAACH,eAAeC,QAAQ;AAAA,EAAA;AACzC;AAmBA,MAAMG,8BAA8B,OAAO;AAAA,EACzCnI;AAAAA,EACA+F;AAAAA,EACArB;AAAAA,EACAsC;AAAAA,EACAoB;AAAAA,EACAC;AAAAA,EACAC;AASF,MAAmD;AACjD,MAAI,CAACtB,SAAU,QAAOzF;AAEtB,QAAMgH,iBAAiB,OAAOC,oBAAiD;AAC7E,UAAMC,SAASJ,WAAWvD,IAAI0D,eAAe;AAC7C,QAAIC,OAAQ,QAAOA;AACnB,UAAMC,SAAS,MAAM9D,eAAe5E,UAAUwI,iBAAiB9D,OAAO;AACtE2D,eAAWM,IAAIH,iBAAiBE,MAAM;AACtC,WAAOA;AAAAA,EACT;AAEA,QAAME,aAAa,OACjB3H,OACA4H,gBACoD;AACpD,QAAI,OAAO5H,UAAU,UAAU;AAC7B,YAAM0F,QAAO1F,MAAMpC,KAAAA;AACnB,UAAI,CAAC8H,MAAM,QAAO;AAElB,YAAMmC,gBAAe3B,4BAA4B0B,aAAalC,OAAM,IAAI;AACxE,UAAI,CAACmC,cAAc,QAAOnC;AAC1B,UAAI,CAACyB,uBAAuBxE,qBAAqBiC,IAAIiD,aAAY,GAAG;AAClE,cAAM,IAAI1E,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAACM,QAAQqE,IAAI,QAAQD,aAA8B,GAAG;AACxD,cAAM,IAAI1E,MAAM,WAAW;AAAA,MAC7B;AAEAkE,2BAAqBU,IAAIF,aAAY;AAErC,YAAMd,WAAWiB,qBACfvE,SACA,QACAoE,aACF;AACA,aAAO;AAAA,QACLnC,MAAAA;AAAAA,QACAE,OAAOmB;AAAAA,MAAAA;AAAAA,IAEX;AAEA,UAAMrB,OAAO1F,MAAM0F,KAAK9H,KAAAA;AACxB,QAAI,CAAC8H,KAAM,QAAO;AAElB,UAAMS,oBAAoBF,mBAAmBjG,MAAM8E,KAAK;AACxD,UAAM+C,eAAe3B,4BAA4B0B,aAAalC,MAAMS,iBAAiB;AACrF,QAAI8B,cAAcL;AAElB,UAAMM,kBAA0C;AAAA,MAC9CxC;AAAAA,IAAAA;AAGF,QAAI1F,MAAM2F,WAAWrF,OAAW4H,iBAAgBvC,SAAS3F,MAAM2F;AAC/D,QAAI3F,MAAMgG,YAAY1F,OAAW4H,iBAAgBlC,UAAUhG,MAAMgG;AACjE,QAAIG,mCAAmCrB,QAAQqB;AAC/C,QAAInG,MAAM4F,UAAUtF,OAAW4H,iBAAgBtC,QAAQ5F,MAAM4F;AAE7D,QAAIiC,cAAc;AAChB,UAAI,CAACV,uBAAuBxE,qBAAqBiC,IAAIiD,YAAY,GAAG;AAClE,cAAM,IAAI1E,MAAM,mBAAmB;AAAA,MACrC;AACA,UAAI,CAACM,QAAQqE,IAAI,QAAQD,YAA8B,GAAG;AACxD,cAAM,IAAI1E,MAAM,WAAW;AAAA,MAC7B;AAEAkE,2BAAqBU,IAAIF,YAAY;AACrCI,oBAAc,MAAMX,eAAeO,YAAY;AAE/C,YAAMd,WAAWiB,qBACfvE,SACA,QACAoE,YACF;AACAK,sBAAgBtC,QAAQiB,0BACtBqB,gBAAgBtC,OAChBmB,QACF;AAAA,IACF,WAAW/G,MAAM+F,aAAazF,QAAW;AACvC,YAAM,IAAI6C,MAAM,mEAAmE;AAAA,IACrF;AAEA,UAAM0C,iBAAiB,MAAMqB,4BAA4B;AAAA,MACvDnI;AAAAA,MACA+F,OAAOmD;AAAAA,MACPxE;AAAAA,MACAsC,UAAU/F,MAAM+F;AAAAA,MAChBoB;AAAAA,MACAC;AAAAA,MACAC;AAAAA,IAAAA,CACD;AACD,QAAIxB,mBAAmBvF,OAAW4H,iBAAgBnC,WAAWF;AAE7D,WAAOqC;AAAAA,EACT;AAEA,MAAIlK,MAAMC,QAAQ8H,QAAQ,GAAG;AAC3B,UAAMoC,YAAW,MAAMC,QAAQC,IAAItC,SAAShG,IAAKC,CAAAA,UAAU2H,WAAW3H,OAAO8E,KAAK,CAAC,CAAC;AACpF,UAAMwD,WAAWH,UAASjI,OAAO,CAACF,UAAoDA,UAAU,IAAI;AACpG,WAAOsI,SAASzL,SAAS,IAAIyL,WAAWhI;AAAAA,EAC1C;AAEA,QAAM6H,WAAW,MAAMR,WAAW5B,UAAUjB,KAAK;AACjD,SAAOqD,YAAY7H;AACrB;AAEO,MAAMiI,2BAA2BA,CAACvC,YAA0D;AACjG,MAAI,CAACA,WAAW,OAAOA,YAAY,iBAAiB,CAAA;AACpD,QAAMrI,aAA8B,CAAA;AAEpC,MAAIqI,QAAQwC,cAAc,OAAOxC,QAAQwC,eAAe,YAAY,CAACxK,MAAMC,QAAQ+H,QAAQwC,UAAU,GAAG;AACtG7K,eAAW6K,aAAaxC,QAAQwC;AAAAA,EAClC;AAEA,MAAIxC,QAAQT,QAAQ,OAAOS,QAAQT,SAAS,YAAY,CAACvH,MAAMC,QAAQ+H,QAAQT,IAAI,GAAG;AACpF5H,eAAW4H,OAAOS,QAAQT;AAAAA,EAC5B;AAEA5H,aAAWoG,QAAQD,eAAekC,QAAQjC,KAAK;AAC/CpG,aAAWoI,WAAWD,2BAA2BE,QAAQD,QAAQ;AACjEpI,aAAW8K,aAAarD,oBAAoBY,QAAQyC,UAAU;AAE9D,SAAO9K;AACT;AAEO,MAAM+K,sCAAsC,OAAO;AAAA,EACxD3J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAoC;AAAAA,EACAmB,sBAAsB;AAOxB,MAAyB;AACvB,QAAMrC,QAAQ,MAAMnB,eAAe5E,UAAU6E,WAAWH,OAAO;AAC/D,QAAM2D,iCAAiB7G,IAAAA;AACvB6G,aAAWM,IAAI9D,WAAWkB,KAAK;AAE/B,QAAMuC,2CAA2BzE,IAAAA;AACjC,QAAMsE,4BAA4B;AAAA,IAChCnI;AAAAA,IACA+F;AAAAA,IACArB;AAAAA,IACAsC,UAAUC,QAAQD;AAAAA,IAClBoB;AAAAA,IACAC;AAAAA,IACAC;AAAAA,EAAAA,CACD;AAED,SAAOrJ,MAAMf,KAAKoK,oBAAoB;AACxC;AAEO,MAAMsB,cAAc,OAAO;AAAA,EAChC5J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAiB;AAAAA,EACAmB,sBAAsB;AAQxB,MAA+B;AAC7B,QAAM;AAAA,IAAErC;AAAAA,IAAO8D;AAAAA,EAAAA,IAAe,MAAMC,oBAAoB;AAAA,IACtD9J;AAAAA,IACA0E;AAAAA,IACAG;AAAAA,IACAmB;AAAAA,IACAoC;AAAAA,EAAAA,CACD;AACD,QAAMqB,aAAaxC,QAAQwC,cAAclI;AACzC,QAAMiF,OAAOS,QAAQT;AACrB,QAAMxB,QAAQD,eAAekC,QAAQjC,KAAK;AAC1C,QAAMqD,iCAAiB7G,IAAAA;AACvB6G,aAAWM,IAAI9D,WAAWkB,KAAK;AAE/B,QAAMiB,WAAW,MAAMmB,4BAA4B;AAAA,IACjDnI;AAAAA,IACA+F;AAAAA,IACArB;AAAAA,IACAsC,UAAUC,QAAQD;AAAAA,IAClBoB;AAAAA,IACAC;AAAAA,IACAC,0CAA0BzE,IAAAA;AAAAA,EAAY,CACvC;AAED,MAAIoD,QAAQyC,YAAY;AACtB,UAAMK,iBAAiBhE,MAAMG,KAAK2D,YAAYJ,UAAU;AACxD,QAAIzC,aAAazF,QAAW;AAC1BwI,qBAAe/C,SAASA,QAAe;AAAA,IACzC;AAEA,UAAMgD,kBAAkB,MAAMD,eAAeE,SAAShD,QAAQyC,YAAY;AAAA,MACxEQ,QAAQ;AAAA,QACNC,eAAejG,iCAAAA;AAAAA,MAAiC;AAAA,IAClD,CACD;AACD,UAAMkG,aAAa,OAAOJ,gBAAgBI,eAAe,YACpD5J,OAAOyE,SAAS+E,gBAAgBI,UAAU,KAC1CJ,gBAAgBI,cAAc,IAC/BxJ,KAAKwE,MAAM4E,gBAAgBI,UAAU,IACrC7I;AACJ,UAAM8I,wBAAwBD,eAAe7I,SACzC,MAAM+I,uBAAuBvE,OAAO8D,UAAU,EAAEU,MAAM,MAAMhJ,MAAS,IACrEA;AACJ,UAAMiJ,qBAAqBJ,cAAcC;AAEzC,WAAO;AAAA,MACLI,MAAMxL,MAAMC,QAAQ8K,gBAAgBU,KAAK,IAAIV,gBAAgBU,QAAQ,CAAA;AAAA,MACrEC,UAAUX,gBAAgBW;AAAAA,MAC1B,GAAIH,uBAAuBjJ,SAAY;AAAA,QAAE6I,YAAYI;AAAAA,MAAAA,IAAuB,CAAA;AAAA,IAAC;AAAA,EAEjF;AAEA,QAAMI,eAAe7E,MAAMG,KAAK2D,YAAYJ,UAAU;AACtD,MAAIzC,aAAazF,QAAW;AAC1BqJ,iBAAa5D,SAASA,QAAe;AAAA,EACvC;AACA,MAAIR,QAAQ5E,OAAOqG,KAAKzB,IAAI,EAAE1I,QAAQ;AACpC8M,iBAAapE,KAAKA,IAAI;AAAA,EACxB;AACAoE,eAAa5F,MAAMA,KAAK;AAExB,QAAMyF,OAAO,MAAMG;AACnB,SAAO;AAAA,IAAEH,MAAMxL,MAAMC,QAAQuL,IAAI,IAAIA,OAAO,CAAA;AAAA,EAAA;AAC9C;AAEA,MAAMX,sBAAsB,OAAO;AAAA,EACjC9J;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAoC,sBAAsB;AAOxB,MAAqC;AACnC,MAAI,CAACA,uBAAuBxE,qBAAqBiC,IAAIhB,SAAS,GAAG;AAC/D,UAAM,IAAIT,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI,CAACM,QAAQqE,IAAI,QAAQlE,SAA2B,GAAG;AACrD,UAAM,IAAIT,MAAM,WAAW;AAAA,EAC7B;AAEA,QAAM2B,QAAQ,MAAMnB,eAAe5E,UAAU6E,WAAWH,OAAO;AAC/D,QAAMmG,cAAc5B,qBAAqBvE,SAAS,QAAQG,SAA2C;AACrG,QAAMgF,aAAyB;AAAA,IAAE3B,MAAM,CAAClC,OAAO6E,WAAW;AAAA,EAAA;AAE1D,SAAO;AAAA,IAAE9E;AAAAA,IAAO8D;AAAAA,EAAAA;AAClB;AAEA,MAAMS,yBAAyB,OAAOvE,OAAmBC,UAAuC;AAC9F,QAAMN,sBAAsBD,mCAAmCO,KAAK;AACpE,MAAIN,qBAAqB;AACvB,UAAM,IAAItB,MAAM,0CAA0CsB,mBAAmB,UAAU;AAAA,EACzF;AAEA,QAAMO,cAAcH,qBAAqBC,OAAOC,KAAK;AACrD,QAAM8E,iBAAiB3F,4BAA4B,MAAMY,MAAMgF,wBAAwB;AACvF,MAAID,mBAAmB,EAAG,QAAO;AAEjC,QAAME,aAAapK,KAAKsE,IAAIG,yBAAAA,GAA4ByF,cAAc;AACtE,QAAMG,eAAe,MAAMlF,MAAMmF,UAAU,CACzC;AAAA,IAAEC,SAAS;AAAA,MAAEC,MAAMJ;AAAAA,IAAAA;AAAAA,EAAW,GAC9B;AAAA,IAAEK,QAAQpF;AAAAA,EAAAA,GACV;AAAA,IAAEqF,QAAQ;AAAA,EAAA,CAAS,CACpB;AACD,QAAMC,gBAAgBpG,4BAA4B8F,aAAa,CAAC,GAAGO,KAAK;AAExE,MAAIR,cAAcF,gBAAgB;AAChC,WAAOlK,KAAKsE,IAAIqG,eAAeT,cAAc;AAAA,EAC/C;AAEA,QAAMW,mBAAmB7K,KAAK8K,MAAOZ,iBAAiBS,gBAAiBP,UAAU;AACjF,SAAOpK,KAAK6F,IAAI,GAAG7F,KAAKsE,IAAI4F,gBAAgBW,gBAAgB,CAAC;AAC/D;AAEO,MAAME,cAAc,OAAO;AAAA,EAChC3L;AAAAA,EACA0E;AAAAA,EACAG;AAAAA,EACAmB;AAAAA,EACAoC,sBAAsB;AAOxB,MAAuB;AACrB,QAAM;AAAA,IAAErC;AAAAA,IAAO8D;AAAAA,EAAAA,IAAe,MAAMC,oBAAoB;AAAA,IACtD9J;AAAAA,IACA0E;AAAAA,IACAG;AAAAA,IACAmB;AAAAA,IACAoC;AAAAA,EAAAA,CACD;AAED,SAAO,MAAMkC,uBAAuBvE,OAAO8D,UAAU;AACvD;"}

package/dist/rts/index.js

@@ -2,9 +2,9 @@ import { randomUUID } from "node:crypto";
 import { models } from "@rpcbase/db";
 import { buildAbilityFromSession } from "@rpcbase/db/acl";
 import { WebSocketServer } from "ws";
-import { d as syncAuthenticatedSessionFromRequest, n as normalizeRtsQueryOptions, e as resolveRtsQueryDependencyModelNames, a as runRtsQuery, c as runRtsCount } from "../queryExecutor-Bzs0SJym.js";
+import { d as syncAuthenticatedSessionFromRequest, n as normalizeRtsQueryOptions, e as resolveRtsQueryDependencyModelNames, a as runRtsQuery, c as runRtsCount } from "../queryExecutor-DW7iAdRY.js";
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-TcIyb69f.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("../handler-BqoKvylN.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
   return acc;

package/dist/rts/queryExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAsE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMrH,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAOzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAkCD,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAE/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAOvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAuBxD,CAAA;AA4UD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,cAAc,CA2DzB,CAAA;AA8BD,eAAO,MAAM,WAAW,GAAU,+DAM/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,CAgCjB,CAAA"}
+{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAsE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMrH,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAOzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAkCD,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAE/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAOvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAuBxD,CAAA;AA4UD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,wEAO/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,cAAc,CA+DzB,CAAA;AAwDD,eAAO,MAAM,WAAW,GAAU,+DAM/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,CAUjB,CAAA"}