@rpcbase/server 0.609.0 → 0.610.0

package/dist/rts/index.js

@@ -1,4 +1,4 @@
-import { a as resolveRtsQueryDependencyModelNames, c as runRtsQuery, i as normalizeRtsQueryOptions, l as syncAuthenticatedSessionFromRequest, s as runRtsCount, t as RTS_QUERY_WINDOW_MAX_COUNT } from "../queryWindow-DP8zD0lb.js";
+import { a as resolveRtsQueryDependencyModelNames, c as runRtsQuery, i as normalizeRtsQueryOptions, l as syncAuthenticatedSessionFromRequest, s as runRtsCount, t as RTS_QUERY_WINDOW_MAX_COUNT } from "../queryWindow-DNQxuY_M.js";
 import { models } from "@rpcbase/db";
 import { randomUUID } from "node:crypto";
 import { buildAbilityFromSession } from "@rpcbase/db/acl";

package/dist/rts/queryExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAsE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMrH,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAOzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAkCD,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAE/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAOvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAuBxD,CAAA;AA0ZD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,sHAS/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,wBAAwB,CAAC,EAAE,OAAO,CAAA;CACnC,KAAG,OAAO,CAAC,cAAc,CAwEzB,CAAA;AAwDD,eAAO,MAAM,WAAW,GAAU,+DAM/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,CAUjB,CAAA"}
+{"version":3,"file":"queryExecutor.d.ts","sourceRoot":"","sources":["../../src/rts/queryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAsE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAMrH,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAOzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,iBAAiB,GACjB,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAA;AAErC,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,UAAU,CAAC,EAAE,cAAc,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAkCD,eAAO,MAAM,yBAAyB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAEjE,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAE/D,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,OAOvE,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,KAAK,OAAO,EACZ,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAuBxD,CAAA;AA6ZD,eAAO,MAAM,wBAAwB,GAAI,SAAS,eAAe,GAAG,SAAS,KAAG,eAiB/E,CAAA;AAED,eAAO,MAAM,mCAAmC,GAAU,iEAMvD;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,EAAE,CAiBnB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,sHAS/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,eAAe,CAAA;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,wBAAwB,CAAC,EAAE,OAAO,CAAA;CACnC,KAAG,OAAO,CAAC,cAAc,CA8EzB,CAAA;AA8DD,eAAO,MAAM,WAAW,GAAU,+DAM/B;IACD,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,UAAU,CAAA;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAG,OAAO,CAAC,MAAM,CAWjB,CAAA"}

package/dist/{shared-Zt17vuAT.js → shared-BX-oLc9O.js}

@@ -1,4 +1,5 @@
 import { extname } from "node:path";
+import { models } from "@rpcbase/db";
 import { createHash } from "node:crypto";
 import { buildAbilityFromSession, getAccessibleByQuery } from "@rpcbase/db/acl";
 //#region src/uploads/api/file-uploads/shared.ts
@@ -50,7 +51,8 @@ var toBufferPayload = (payload) => {
 	if (payload instanceof Uint8Array) return Buffer.from(payload);
 	return null;
 };
-var ensureUploadIndexes = async (UploadSession, UploadChunk) => {
+var ensureUploadIndexes = async (modelCtx) => {
+	const [UploadSession, UploadChunk] = await Promise.all([models.getUnsafe("RBUploadSession", modelCtx), models.getUnsafe("RBUploadChunk", modelCtx)]);
 	const dbName = String(UploadSession?.db?.name ?? "");
 	if (dbName && ensuredIndexDbNames.has(dbName)) return;
 	await Promise.all([UploadSession.createIndexes(), UploadChunk.createIndexes()]);
@@ -128,4 +130,4 @@ var getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(abil
 //#endregion
 export { getUserId as _, ensureFilesystemUploadIndexes as a, resolveUploadAccessScope as b, getChunkSizeBytes as c, getModelCtx as d, getRawBodyLimitBytes as f, getUploadSessionAccessQuery as g, getUploadKeyHash as h, computeSha256Hex as i, getFileReferencesCollectionName as l, getTenantId as m, buildUploadDeduplication as n, ensureUploadIndexes as o, getSessionTtlMs as p, buildUploadsAbility as r, getBucketName as s, buildUploadAccessMetadata as t, getMaxClientUploadBytesPerSecond as u, normalizeSha256Hex as v, toBufferPayload as x, resolveStoredUploadAccessScope as y };
 
-//# sourceMappingURL=shared-Zt17vuAT.js.map
+//# sourceMappingURL=shared-BX-oLc9O.js.map

package/dist/shared-BX-oLc9O.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-BX-oLc9O.js","names":["createHash","timingSafeEqual","extname","Ctx","models","IRBUploadChunk","IRBUploadSession","LoadModelCtx","buildAbilityFromSession","getAccessibleByQuery","AppAbility","Db","Model","SessionUser","id","currentTenantId","UploadSessionDoc","UploadChunkDoc","Omit","data","Buffer","DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","UploadAccessScope","UploadDeduplication","NonNullable","UPLOAD_DEDUPLICATION_PIPELINE_VERSION","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getFileReferencesCollectionName","bucketName","getUserId","ctx","raw","req","session","user","getTenantId","rawSession","sessionTenantId","computeSha256Hex","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","isBuffer","Uint8Array","from","ensureUploadIndexes","modelCtx","Promise","UploadSession","UploadChunk","all","getUnsafe","dbName","String","db","name","has","createIndexes","add","ensureFilesystemUploadIndexes","collection","createIndex","unique","partialFilterExpression","$type","blobId","resolveUploadAccessScope","accessScope","isPublic","resolveStoredUploadAccessScope","metadata","Record","buildUploadDeduplication","namespace","hash","filename","mimeType","totalSize","userId","ownerKeyHash","ownerPartition","normalizedNamespace","normalizedHash","normalizedMimeType","normalizedExtension","key","JSON","stringify","algorithm","pipelineVersion","buildUploadAccessMetadata","Pick","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","getUploadSessionAccessQuery","action","timingSafeEqualHex","left","right","length","getOwnershipSelector"],"sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\nimport { extname } from \"node:path\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  models,\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Db } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nexport type UploadAccessScope = \"owner\" | \"tenant\" | \"public\"\nexport type UploadDeduplication = NonNullable<IRBUploadSession[\"deduplication\"]>\n\nconst UPLOAD_DEDUPLICATION_PIPELINE_VERSION = 1\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getFileReferencesCollectionName = (bucketName: string): string => `${bucketName}.references`\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n  return sessionTenantId || null\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  modelCtx: LoadModelCtx,\n): Promise<void> => {\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.getUnsafe(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.getUnsafe(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nexport const ensureFilesystemUploadIndexes = async (db: Db, bucketName: string): Promise<void> => {\n  await Promise.all([\n    db.collection(`${bucketName}.files`).createIndex(\n      { \"metadata.deduplication.key\": 1 },\n      {\n        name: \"rb_upload_deduplication_key_unique\",\n        unique: true,\n        partialFilterExpression: { \"metadata.deduplication.key\": { $type: \"string\" } },\n      },\n    ),\n    db.collection(getFileReferencesCollectionName(bucketName)).createIndex(\n      { blobId: 1 },\n      { name: \"rb_upload_file_reference_blob\" },\n    ),\n  ])\n}\n\nexport const resolveUploadAccessScope = ({\n  accessScope,\n  isPublic,\n}: {\n  accessScope?: UploadAccessScope\n  isPublic?: boolean\n}): UploadAccessScope => accessScope ?? (isPublic ? \"public\" : \"owner\")\n\nexport const resolveStoredUploadAccessScope = (metadata: Record<string, unknown>): UploadAccessScope => {\n  const accessScope = metadata.accessScope\n  if (accessScope === \"owner\" || accessScope === \"tenant\" || accessScope === \"public\") {\n    return accessScope\n  }\n  return metadata.isPublic === true || String(metadata.isPublic).trim().toLowerCase() === \"true\" ? \"public\" : \"owner\"\n}\n\nexport const buildUploadDeduplication = ({\n  namespace,\n  hash,\n  filename,\n  mimeType,\n  totalSize,\n  accessScope,\n  userId,\n  ownerKeyHash,\n}: {\n  namespace: string\n  hash: string\n  filename: string\n  mimeType: string\n  totalSize: number\n  accessScope: UploadAccessScope\n  userId?: string\n  ownerKeyHash?: string\n}): UploadDeduplication | null => {\n  const ownerPartition = accessScope === \"owner\"\n    ? userId\n      ? `user:${userId}`\n      : ownerKeyHash\n        ? `key:${ownerKeyHash}`\n        : null\n    : accessScope\n  if (!ownerPartition) return null\n\n  const normalizedNamespace = namespace.trim()\n  const normalizedHash = normalizeSha256Hex(hash)\n  const normalizedMimeType = mimeType.trim().toLowerCase()\n  const normalizedExtension = extname(filename.trim()).toLowerCase()\n  const key = computeSha256Hex(Buffer.from(JSON.stringify([\n    UPLOAD_DEDUPLICATION_PIPELINE_VERSION,\n    normalizedNamespace,\n    normalizedHash,\n    totalSize,\n    normalizedMimeType,\n    normalizedExtension,\n    accessScope,\n    ownerPartition,\n  ])))\n\n  return {\n    namespace: normalizedNamespace,\n    algorithm: \"sha256\",\n    hash: normalizedHash,\n    key,\n    pipelineVersion: UPLOAD_DEDUPLICATION_PIPELINE_VERSION,\n  }\n}\n\nexport const buildUploadAccessMetadata = (\n  session: Pick<UploadSessionDoc, \"accessScope\" | \"isPublic\" | \"userId\" | \"ownerKeyHash\">,\n): Record<string, unknown> => {\n  const accessScope = resolveUploadAccessScope({\n    accessScope: session.accessScope,\n    isPublic: session.isPublic,\n  })\n\n  return {\n    accessScope,\n    isPublic: accessScope === \"public\",\n    ...(typeof session.ownerKeyHash === \"string\" ? { ownerKeyHash: session.ownerKeyHash } : {}),\n    ...(typeof session.userId === \"string\" ? { userId: session.userId } : {}),\n  }\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"mappings":";;;;;AAuBA,IAAMqB,2BAA2B,IAAI,OAAO;AAC5C,IAAMC,uBAAuB,KAAK,OAAO;AAEzC,IAAMC,sCAAsC,KAAK,OAAO;AAExD,IAAMC,wBAAwB,OAAU;AAExC,IAAMC,sCAAsB,IAAIC,IAAY;AAK5C,IAAMI,wCAAwC;AAE9C,IAAMC,4BAA4BC,aAAqC;CACrE,IAAI,OAAOA,aAAa,UAAU,OAAO;CACzC,MAAMC,aAAaD,SAASE,KAAK;CACjC,IAAI,CAACD,YAAY,OAAO;CACxB,MAAME,SAASC,OAAOH,UAAU;CAChC,IAAI,CAACG,OAAOC,SAASF,MAAM,KAAKA,UAAU,GAAG,OAAO;CACpD,OAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,IAAaK,0BAAkC;CAE7C,MAAMK,WADad,yBAAyBW,QAAQC,IAAIC,0BACvCH,KAAcpB;CAC/B,OAAOiB,KAAKQ,IAAIxB,sBAAsBuB,QAAQ;AAChD;AAEA,IAAaE,yCAAwD;CAEnE,OADmBhB,yBAAyBW,QAAQC,IAAIK,qCACjDP,KAAclB;AACvB;AAEA,IAAa0B,wBAAgC;CAE3C,QADmBlB,yBAAyBW,QAAQC,IAAIQ,uBAAuB,KAAK3B,yBAChE;AACtB;AAEA,IAAa4B,wBAAwBC,mBAAmCA,iBAAiB,OAAO;AAEhG,IAAaC,uBAA+BZ,QAAQC,IAAIY,6BAA6B,GAAA,CAAIrB,KAAK,KAAK;AAEnG,IAAasB,mCAAmCC,eAA+B,GAAGA,WAAU;AAE5F,IAAaC,aAAaC,QAAyC;CACjE,MAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAMjD;CACnC,IAAI,OAAO8C,QAAQ,UAAU,OAAO;CACpC,MAAM3B,aAAa2B,IAAI1B,KAAK;CAC5B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAa+B,eAAeL,QAAyC;CACnE,MAAMM,aAAaN,IAAIE,IAAIC,SAASC,MAAMhD;CAE1C,QADwB,OAAOkD,eAAe,WAAWA,WAAW/B,KAAK,IAAI,OACnD;AAC5B;AAEA,IAAaiC,oBAAoBhD,SAAyBnB,WAAW,QAAQ,CAAC,CAACoE,OAAOjD,IAAI,CAAC,CAACkD,OAAO,KAAK;AAExG,IAAaC,sBAAsBC,UAA0BA,MAAMrC,KAAK,CAAC,CAACsC,YAAY;AAEtF,IAAaC,eAAeC,MAAwBC,UAAkBC,aAAwC;CAC5Gf,KAAK,EACHC,SAAS,EACPC,MAAM,EACJhD,iBAAiB4D,SACnB,EACF,EACF;CACAC;AACF;AAEA,IAAaC,mBAAmBC,YAAoC;CAClE,IAAI1D,OAAO2D,SAASD,OAAO,GAAG,OAAOA;CACrC,IAAIA,mBAAmBE,YAAY,OAAO5D,OAAO6D,KAAKH,OAAO;CAC7D,OAAO;AACT;AAEA,IAAaI,sBAAsB,OACjCC,aACkB;CAClB,MAAM,CAACE,eAAeC,eAAe,MAAMF,QAAQG,IAAI,CACrDnF,OAAOoF,UAAU,mBAAmBL,QAAQ,GAC5C/E,OAAOoF,UAAU,iBAAiBL,QAAQ,CAAmC,CAC9E;CACD,MAAMM,SAASC,OAAQL,eAA0DM,IAAIC,QAAQ,EAAE;CAC/F,IAAIH,UAAUhE,oBAAoBoE,IAAIJ,MAAM,GAAG;CAE/C,MAAML,QAAQG,IAAI,CAChBF,cAAcS,cAAc,GAC5BR,YAAYQ,cAAc,CAAC,CAC5B;CAED,IAAIL,QAAQhE,oBAAoBsE,IAAIN,MAAM;AAC5C;AAEA,IAAaO,gCAAgC,OAAOL,IAAQlC,eAAsC;CAChG,MAAM2B,QAAQG,IAAI,CAChBI,GAAGM,WAAW,GAAGxC,WAAU,OAAQ,CAAC,CAACyC,YACnC,EAAE,8BAA8B,EAAE,GAClC;EACEN,MAAM;EACNO,QAAQ;EACRC,yBAAyB,EAAE,8BAA8B,EAAEC,OAAO,SAAS,EAAE;CAC/E,CACF,GACAV,GAAGM,WAAWzC,gCAAgCC,UAAU,CAAC,CAAC,CAACyC,YACzD,EAAEI,QAAQ,EAAE,GACZ,EAAEV,MAAM,gCAAgC,CAC1C,CAAC,CACF;AACH;AAEA,IAAaW,4BAA4B,EACvCC,aACAC,eAIuBD,gBAAgBC,WAAW,WAAW;AAE/D,IAAaC,kCAAkCC,aAAyD;CACtG,MAAMH,cAAcG,SAASH;CAC7B,IAAIA,gBAAgB,WAAWA,gBAAgB,YAAYA,gBAAgB,UACzE,OAAOA;CAET,OAAOG,SAASF,aAAa,QAAQf,OAAOiB,SAASF,QAAQ,CAAC,CAACvE,KAAK,CAAC,CAACsC,YAAY,MAAM,SAAS,WAAW;AAC9G;AAEA,IAAaqC,4BAA4B,EACvCC,WACAC,MACAC,UACAC,UACAC,WACAV,aACAW,QACAC,mBAUgC;CAChC,MAAMC,iBAAiBb,gBAAgB,UACnCW,SACE,QAAQA,WACRC,eACE,OAAOA,iBACP,OACJZ;CACJ,IAAI,CAACa,gBAAgB,OAAO;CAE5B,MAAMC,sBAAsBR,UAAU5E,KAAK;CAC3C,MAAMqF,iBAAiBjD,mBAAmByC,IAAI;CAC9C,MAAMS,qBAAqBP,SAAS/E,KAAK,CAAC,CAACsC,YAAY;CACvD,MAAMiD,sBAAsBvH,QAAQ8G,SAAS9E,KAAK,CAAC,CAAC,CAACsC,YAAY;CAYjE,OAAO;EACLsC,WAAWQ;EACXO,WAAW;EACXd,MAAMQ;EACNG,KAfUvD,iBAAiB/C,OAAO6D,KAAK0C,KAAKC,UAAU;GACtD9F;GACAwF;GACAC;GACAL;GACAM;GACAC;GACAjB;GACAa;EAAc,CACf,CAAC,CAMAK;EACAI,iBAAiBhG;CACnB;AACF;AAEA,IAAaiG,6BACXjE,YAC4B;CAC5B,MAAM0C,cAAcD,yBAAyB;EAC3CC,aAAa1C,QAAQ0C;EACrBC,UAAU3C,QAAQ2C;CACpB,CAAC;CAED,OAAO;EACLD;EACAC,UAAUD,gBAAgB;EAC1B,GAAI,OAAO1C,QAAQsD,iBAAiB,WAAW,EAAEA,cAActD,QAAQsD,aAAa,IAAI,CAAC;EACzF,GAAI,OAAOtD,QAAQqD,WAAW,WAAW,EAAEA,QAAQrD,QAAQqD,OAAO,IAAI,CAAC;CACzE;AACF;AAEA,IAAMc,sBAAsBrE,QAAgC;CAC1D,IAAI,OAAOA,QAAQ,UAAU,OAAO;CACpC,MAAM3B,aAAa2B,IAAI1B,KAAK;CAC5B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAaiG,oBAAoBvE,QAAyC;CACxE,MAAMwE,YAAYF,mBAAmBtE,IAAIE,IAAIuE,IAAI,cAAc,CAAC;CAChE,IAAI,CAACD,WAAW,OAAO;CACvB,OAAOhE,iBAAiB/C,OAAO6D,KAAKkD,SAAS,CAAC;AAChD;AAEA,IAAaE,uBAAuB1E,KAAuBgB,aAAiC;CAC1F,MAAM2D,gBAAgBJ,iBAAiBvE,GAAG;CAC1C,MAAM4E,SAASD,gBAAgB,EAAEA,cAAc,IAAIE,KAAAA;CACnD,OAAOhI,wBAAwB;EAAEmE;EAAUb,SAASH,IAAIE,IAAIC;EAASyE;CAAO,CAAC;AAC/E;AAEA,IAAaE,+BACX7D,SACA8D,WAC4BjI,qBAAqBmE,SAAS8D,QAAQ,iBAAiB"}

package/dist/uploads/api/file-uploads/handlers/initUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/initUpload.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AAEnC,OAAO,EACL,KAAK,WAAW,EAejB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAqIvG,CAAA"}
+{"version":3,"file":"initUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/initUpload.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AAEnC,OAAO,EACL,KAAK,WAAW,EAcjB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAqIvG,CAAA"}

package/dist/uploads/api/file-uploads/shared.d.ts

@@ -2,7 +2,6 @@ import { Ctx } from '@rpcbase/api';
 import { IRBUploadChunk, IRBUploadSession, LoadModelCtx } from '@rpcbase/db';
 import { AppAbility } from '@rpcbase/db/acl';
 import { Db } from 'mongodb';
-import { Model } from 'mongoose';
 export type SessionUser = {
     id?: string;
     currentTenantId?: string;
@@ -25,7 +24,7 @@ export declare const computeSha256Hex: (data: Buffer) => string;
 export declare const normalizeSha256Hex: (value: string) => string;
 export declare const getModelCtx: (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility) => LoadModelCtx;
 export declare const toBufferPayload: (payload: unknown) => Buffer | null;
-export declare const ensureUploadIndexes: (UploadSession: Model<UploadSessionDoc>, UploadChunk: Model<UploadChunkDoc>) => Promise<void>;
+export declare const ensureUploadIndexes: (modelCtx: LoadModelCtx) => Promise<void>;
 export declare const ensureFilesystemUploadIndexes: (db: Db, bucketName: string) => Promise<void>;
 export declare const resolveUploadAccessScope: ({ accessScope, isPublic, }: {
     accessScope?: UploadAccessScope;

package/dist/uploads/api/file-uploads/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAW5E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAC7D,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAA;AAahF,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,+BAA+B,GAAI,YAAY,MAAM,KAAG,MAAoC,CAAA;AAEzG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAI5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,EAAE,UAAU,UAAU,KAAG,YAS3F,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAED,eAAO,MAAM,6BAA6B,GAAU,IAAI,EAAE,EAAE,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CAe5F,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,4BAGtC;IACD,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,KAAG,iBAAmE,CAAA;AAEvE,eAAO,MAAM,8BAA8B,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,iBAMlF,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,wFAStC;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,KAAG,mBAAmB,GAAG,IAgCzB,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,SAAS,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,CAAC,KACtF,MAAM,CAAC,MAAM,EAAE,OAAO,CAYxB,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,UAI7E,CAAA;AAED,eAAO,MAAM,2BAA2B,GACtC,SAAS,UAAU,EACnB,QAAQ,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6D,CAAA;AAWtF,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAIjC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAW5E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAC7D,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAA;AAahF,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,+BAA+B,GAAI,YAAY,MAAM,KAAG,MAAoC,CAAA;AAEzG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAI5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,EAAE,UAAU,UAAU,KAAG,YAS3F,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,UAAU,YAAY,KACrB,OAAO,CAAC,IAAI,CAcd,CAAA;AAED,eAAO,MAAM,6BAA6B,GAAU,IAAI,EAAE,EAAE,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CAe5F,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,4BAGtC;IACD,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,KAAG,iBAAmE,CAAA;AAEvE,eAAO,MAAM,8BAA8B,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,iBAMlF,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,wFAStC;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,KAAG,mBAAmB,GAAG,IAgCzB,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,SAAS,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,CAAC,KACtF,MAAM,CAAC,MAAM,EAAE,OAAO,CAYxB,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,UAI7E,CAAA;AAED,eAAO,MAAM,2BAA2B,GACtC,SAAS,UAAU,EACnB,QAAQ,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6D,CAAA;AAWtF,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}

package/dist/uploads/worker.js

@@ -1,5 +1,5 @@
 import { o as registerUploadPostProcessor, s as registerUploadPostProcessorTask } from "../postProcessors-iffHvje4.js";
-import { s as getBucketName } from "../shared-Zt17vuAT.js";
+import { s as getBucketName } from "../shared-BX-oLc9O.js";
 import { n as registerConvertHeifToWebpTask } from "../convertHeifToWebp-BT1n72DQ.js";
 import { GridFSBucket, ObjectId } from "mongodb";
 import { getTenantFilesystemDb } from "@rpcbase/db";

package/dist/uploads.js

@@ -1,8 +1,8 @@
 import { a as getUploadProcessors, c as registerUploadProcessor, d as unregisterUploadProcessor, f as uploadPostProcessorTaskName, i as getUploadPostProcessors, l as runUploadPostProcessors, n as clearUploadProcessors, o as registerUploadPostProcessor, r as enqueueUploadPostProcessors, s as registerUploadPostProcessorTask, t as clearUploadPostProcessors, u as unregisterUploadPostProcessor } from "./postProcessors-iffHvje4.js";
 //#region src/uploads/routes.ts
 var routes = Object.entries({ .../* #__PURE__ */ Object.assign({
-	"./api/file-uploads/handler.ts": () => import("./handler-CqSlSCdd.js"),
-	"./api/files/handler.ts": () => import("./handler-C63qGUhq.js")
+	"./api/file-uploads/handler.ts": () => import("./handler-D9cQBJyz.js"),
+	"./api/files/handler.ts": () => import("./handler-B61RAoQK.js")
 }) }).reduce((acc, [path, mod]) => {
 	acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
 	return acc;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.609.0",
+  "version": "0.610.0",
   "type": "module",
   "files": [
     "dist"

package/dist/handler-BgcIWWMc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-BgcIWWMc.js","names":["Ctx","NotificationSessionUser","id","currentTenantId","getSessionUser","ctx","rawSessionUser","req","session","user","userId","trim","tenantId","res","status","z","ListRoute","CreateRoute","MarkReadRoute","MarkReadByUrlRoute","ArchiveRoute","MarkAllReadRoute","SettingsRoute","DigestRunRoute","listRequestSchema","object","includeArchived","boolean","optional","unreadOnly","limit","number","int","min","max","markSeen","ListRequestPayload","infer","notificationDataSchema","record","string","notificationPlatformPayloadSchema","webpush","unknown","fcmOptions","android","apns","passthrough","NotificationPlatformPayload","createRequestStringSchema","trim","notificationUrlModeSchema","enum","notificationContentFieldsSchema","title","body","image","createRequestSchema","topic","tag","url","urlMode","metadata","data","platform","CreateRequestPayload","normalizeNotificationActionUrl","origin","raw","base","URL","parsed","pathname","search","normalizeNotificationActionLink","hash","notificationSchema","id","deliveryId","shape","createdAt","seenAt","readAt","archivedAt","NotificationPayload","listResponseSchema","ok","error","notifications","array","unreadCount","unseenCount","ListResponsePayload","createResponseSchema","CreateResponsePayload","markReadResponseSchema","MarkReadResponsePayload","markReadByUrlRequestSchema","MarkReadByUrlRequestPayload","markReadByUrlResponseSchema","matchedCount","modifiedCount","MarkReadByUrlResponsePayload","archiveResponseSchema","ArchiveResponsePayload","markAllReadResponseSchema","MarkAllReadResponsePayload","digestFrequencySchema","DigestFrequency","topicPreferenceSchema","inApp","emailDigest","push","TopicPreferencePayload","settingsSchema","digestFrequency","topicPreferences","lastDigestSentAt","SettingsPayload","settingsResponseSchema","settings","SettingsResponsePayload","updateSettingsRequestSchema","UpdateSettingsRequestPayload","updateSettingsResponseSchema","UpdateSettingsResponsePayload","digestRunRequestSchema","force","DigestRunRequestPayload","digestRunResponseSchema","sent","skippedReason","DigestRunResponsePayload","Api","ApiHandler","Ctx","models","IRBNotification","IRBNotificationSettings","buildAbilityFromSession","getAccessibleByQuery","createNotification","sendNotificationsDigestForUser","getSessionUser","Notifications","NotificationDoc","_id","NotificationActionDoc","Pick","SettingsDoc","NotificationActionLink","link","urlMode","toIso","value","Date","toISOString","undefined","isRecord","Record","Boolean","Array","isArray","toStringMap","entries","Object","filter","entry","length","fromEntries","getForwardedHeaderValue","raw","split","trim","getRequestOrigin","ctx","protocol","req","headers","host","get","getNotificationActionLinks","notification","links","data","push","linkMode","platformWebpush","platform","webpush","fcmOptions","actionSearchParamsMatchTargetUrl","actionUrl","targetUrl","origin","base","URL","action","target","key","searchParams","from","keys","notificationActionLinkMatchesUrl","normalizeNotificationActionUrl","buildDisabledTopics","settings","topicPreferences","map","pref","topic","enabled","listNotifications","ListRequestPayload","ListResponsePayload","payload","session","ok","error","ability","tenantId","can","res","status","parsed","listRequestSchema","safeParse","success","userId","includeArchived","unreadOnly","limit","markSeen","SettingsModel","findOne","lean","disabledTopics","NotificationModel","queryFilters","archivedAt","$exists","readAt","$nin","query","$and","notifications","find","sort","createdAt","unseenQueryFilters","seenAt","unseenQuery","unreadQueryFilters","unreadQuery","unreadCount","unseenCount","Promise","all","countDocuments","now","updateMany","$set","listResponseSchema","parse","n","id","String","tag","deliveryId","title","body","image","createNotificationForCurrentUser","CreateRequestPayload","CreateResponsePayload","createRequestSchema","actionLink","url","normalizeNotificationActionLink","created","metadata","createResponseSchema","markRead","MarkReadResponsePayload","_payload","notificationId","params","updateOne","markReadByUrl","MarkReadByUrlRequestPayload","MarkReadByUrlResponsePayload","markReadByUrlRequestSchema","$or","$type","candidates","select","matchingIds","some","markReadByUrlResponseSchema","matchedCount","modifiedCount","result","$in","markAllRead","MarkAllReadResponsePayload","archiveNotification","ArchiveResponsePayload","drawerActive","getSettings","SettingsResponsePayload","digestFrequencyRaw","digestFrequency","DigestFrequency","inApp","emailDigest","settingsResponseSchema","lastDigestSentAt","updateSettings","UpdateSettingsRequestPayload","UpdateSettingsResponsePayload","updateSettingsRequestSchema","nextValues","seen","Set","next","has","add","ops","$setOnInsert","findOneAndUpdate","upsert","returnDocument","setDefaultsOnInsert","updateSettingsResponseSchema","runDigest","DigestRunRequestPayload","DigestRunResponsePayload","digestRunRequestSchema","force","sent","skippedReason","api","post","ListRoute","CreateRoute","MarkReadRoute","MarkReadByUrlRoute","MarkAllReadRoute","ArchiveRoute","SettingsRoute","put","DigestRunRoute"],"sources":["../src/notifications/api/notifications/shared.ts","../src/notifications/api/notifications/index.ts","../src/notifications/api/notifications/handler.ts"],"sourcesContent":["import type { Ctx } from \"@rpcbase/api\"\n\n\ntype NotificationSessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport const getSessionUser = (ctx: Ctx) => {\n  const rawSessionUser = (ctx.req.session as { user?: NotificationSessionUser } | null | undefined)?.user\n  const userId = typeof rawSessionUser?.id === \"string\" ? rawSessionUser.id.trim() : \"\"\n  const tenantId = typeof rawSessionUser?.currentTenantId === \"string\" ? rawSessionUser.currentTenantId.trim() : \"\"\n\n  if (!userId) {\n    ctx.res.status(401)\n    return null\n  }\n\n  if (!tenantId) {\n    ctx.res.status(400)\n    return null\n  }\n\n  return { userId, tenantId }\n}\n\n","import { z } from \"zod\"\n\n\nexport const ListRoute = \"/api/rb/notifications\"\nexport const CreateRoute = \"/api/rb/notifications/create\"\nexport const MarkReadRoute = \"/api/rb/notifications/:notificationId/read\"\nexport const MarkReadByUrlRoute = \"/api/rb/notifications/mark-read-by-url\"\nexport const ArchiveRoute = \"/api/rb/notifications/:notificationId/archive\"\nexport const MarkAllReadRoute = \"/api/rb/notifications/mark-all-read\"\nexport const SettingsRoute = \"/api/rb/notifications/settings\"\nexport const DigestRunRoute = \"/api/rb/notifications/digest/run\"\n\nexport const listRequestSchema = z.object({\n  includeArchived: z.boolean().optional(),\n  unreadOnly: z.boolean().optional(),\n  limit: z.number().int().min(1).max(200).optional(),\n  markSeen: z.boolean().optional(),\n})\n\nexport type ListRequestPayload = z.infer<typeof listRequestSchema>\n\nexport const notificationDataSchema = z.record(z.string(), z.string())\n\nexport const notificationPlatformPayloadSchema = z.object({\n  webpush: z.record(z.string(), z.unknown()).optional(),\n  fcmOptions: z.record(z.string(), z.unknown()).optional(),\n  android: z.record(z.string(), z.unknown()).optional(),\n  apns: z.record(z.string(), z.unknown()).optional(),\n}).passthrough()\n\nexport type NotificationPlatformPayload = z.infer<typeof notificationPlatformPayloadSchema>\n\nconst createRequestStringSchema = z.string().trim()\nconst notificationUrlModeSchema = z.enum([\"navigate\", \"merge_current_search\"])\n\nexport const notificationContentFieldsSchema = z.object({\n  title: z.string().min(1),\n  body: z.string().optional(),\n  image: z.string().optional(),\n})\n\nexport const createRequestSchema = z.object({\n  topic: createRequestStringSchema.min(1).optional(),\n  tag: createRequestStringSchema.min(1).optional(),\n  title: createRequestStringSchema.min(1),\n  body: createRequestStringSchema.optional(),\n  image: createRequestStringSchema.optional(),\n  url: createRequestStringSchema.min(1).optional(),\n  urlMode: notificationUrlModeSchema.optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n  data: notificationDataSchema.optional(),\n  platform: notificationPlatformPayloadSchema.optional(),\n})\n\nexport type CreateRequestPayload = z.infer<typeof createRequestSchema>\n\nexport const normalizeNotificationActionUrl = (url: string, origin: string): string | null => {\n  const raw = url.trim()\n  if (!raw) return null\n\n  try {\n    const base = new URL(origin)\n    const parsed = new URL(raw, base)\n    if (parsed.origin !== base.origin) return null\n    return `${parsed.pathname}${parsed.search}`\n  } catch {\n    return null\n  }\n}\n\nexport const normalizeNotificationActionLink = (\n  url: string,\n  origin: string,\n  urlMode: z.infer<typeof notificationUrlModeSchema> = \"navigate\",\n): string | null => {\n  const raw = url.trim()\n  if (!raw) return null\n\n  try {\n    const base = new URL(origin)\n    const parsed = new URL(raw, base)\n    if (parsed.origin !== base.origin) return null\n    if (urlMode === \"navigate\") return `${parsed.pathname}${parsed.search}${parsed.hash}`\n    return `${parsed.search}${parsed.hash}` || null\n  } catch {\n    return null\n  }\n}\n\nexport const notificationSchema = z.object({\n  id: z.string(),\n  topic: z.string().optional(),\n  tag: z.string().optional(),\n  deliveryId: z.string().optional(),\n  title: notificationContentFieldsSchema.shape.title,\n  body: notificationContentFieldsSchema.shape.body,\n  image: notificationContentFieldsSchema.shape.image,\n  data: notificationDataSchema.optional(),\n  platform: notificationPlatformPayloadSchema.optional(),\n  createdAt: z.string(),\n  seenAt: z.string().optional(),\n  readAt: z.string().optional(),\n  archivedAt: z.string().optional(),\n})\n\nexport type NotificationPayload = z.infer<typeof notificationSchema>\n\nexport const listResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  notifications: z.array(notificationSchema).optional(),\n  unreadCount: z.number().int().min(0).optional(),\n  unseenCount: z.number().int().min(0).optional(),\n})\n\nexport type ListResponsePayload = z.infer<typeof listResponseSchema>\n\nexport const createResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  id: z.string().optional(),\n})\n\nexport type CreateResponsePayload = z.infer<typeof createResponseSchema>\n\nexport const markReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkReadResponsePayload = z.infer<typeof markReadResponseSchema>\n\nexport const markReadByUrlRequestSchema = z.object({\n  url: z.string().trim().min(1),\n})\n\nexport type MarkReadByUrlRequestPayload = z.infer<typeof markReadByUrlRequestSchema>\n\nexport const markReadByUrlResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  matchedCount: z.number().int().min(0).optional(),\n  modifiedCount: z.number().int().min(0).optional(),\n})\n\nexport type MarkReadByUrlResponsePayload = z.infer<typeof markReadByUrlResponseSchema>\n\nexport const archiveResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ArchiveResponsePayload = z.infer<typeof archiveResponseSchema>\n\nexport const markAllReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkAllReadResponsePayload = z.infer<typeof markAllReadResponseSchema>\n\nexport const digestFrequencySchema = z.enum([\"off\", \"daily\", \"weekly\"])\n\nexport type DigestFrequency = z.infer<typeof digestFrequencySchema>\n\nexport const topicPreferenceSchema = z.object({\n  topic: z.string(),\n  inApp: z.boolean(),\n  emailDigest: z.boolean(),\n  push: z.boolean(),\n})\n\nexport type TopicPreferencePayload = z.infer<typeof topicPreferenceSchema>\n\nexport const settingsSchema = z.object({\n  digestFrequency: digestFrequencySchema,\n  topicPreferences: z.array(topicPreferenceSchema),\n  lastDigestSentAt: z.string().optional(),\n})\n\nexport type SettingsPayload = z.infer<typeof settingsSchema>\n\nexport const settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type SettingsResponsePayload = z.infer<typeof settingsResponseSchema>\n\nexport const updateSettingsRequestSchema = z.object({\n  digestFrequency: digestFrequencySchema.optional(),\n  topicPreferences: z.array(topicPreferenceSchema).optional(),\n})\n\nexport type UpdateSettingsRequestPayload = z.infer<typeof updateSettingsRequestSchema>\n\nexport const updateSettingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type UpdateSettingsResponsePayload = z.infer<typeof updateSettingsResponseSchema>\n\nexport const digestRunRequestSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport type DigestRunRequestPayload = z.infer<typeof digestRunRequestSchema>\n\nexport const digestRunResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  sent: z.boolean().optional(),\n  skippedReason: z.string().optional(),\n})\n\nexport type DigestRunResponsePayload = z.infer<typeof digestRunResponseSchema>\n","import { Api, type ApiHandler, type Ctx } from \"@rpcbase/api\"\nimport { models, type IRBNotification, type IRBNotificationSettings } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery } from \"@rpcbase/db/acl\"\n\nimport { createNotification } from \"../../createNotification\"\nimport { sendNotificationsDigestForUser } from \"../../digest\"\nimport { getSessionUser } from \"./shared\"\n\nimport * as Notifications from \"./index\"\n\n\ntype NotificationDoc = IRBNotification & { _id: unknown }\ntype NotificationActionDoc = Pick<NotificationDoc, \"_id\" | \"data\" | \"platform\">\ntype SettingsDoc = IRBNotificationSettings & { _id: unknown }\ntype NotificationActionLink = {\n  link: string\n  urlMode: \"navigate\" | \"merge_current_search\"\n}\n\nconst toIso = (value: unknown): string | undefined => (value instanceof Date ? value.toISOString() : undefined)\nconst isRecord = (value: unknown): value is Record<string, unknown> => Boolean(value) && typeof value === \"object\" && !Array.isArray(value)\n\nconst toStringMap = (value: unknown): Record<string, string> | undefined => {\n  if (!isRecord(value)) return undefined\n  const entries = Object.entries(value)\n    .filter((entry): entry is [string, string] => typeof entry[1] === \"string\")\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined\n}\n\nconst getForwardedHeaderValue = (value: unknown): string | undefined => {\n  const raw = Array.isArray(value) ? value[0] : value\n  if (typeof raw !== \"string\") return undefined\n  return raw.split(\",\")[0]?.trim() || undefined\n}\n\nconst getRequestOrigin = (ctx: Ctx): string => {\n  const protocol = getForwardedHeaderValue(ctx.req.headers[\"x-forwarded-proto\"]) ?? ctx.req.protocol\n  const host = getForwardedHeaderValue(ctx.req.headers[\"x-forwarded-host\"]) ?? ctx.req.get(\"host\")\n\n  return protocol && host ? `${protocol}://${host}` : \"\"\n}\n\nconst getNotificationActionLinks = (notification: NotificationActionDoc): NotificationActionLink[] => {\n  const links: NotificationActionLink[] = []\n\n  if (typeof notification.data?.link === \"string\") {\n    links.push({\n      link: notification.data.link,\n      urlMode: notification.data.linkMode === \"merge_current_search\" ? \"merge_current_search\" : \"navigate\",\n    })\n  }\n\n  const platformWebpush = notification.platform?.webpush\n  if (platformWebpush && typeof platformWebpush === \"object\" && !Array.isArray(platformWebpush)) {\n    const fcmOptions = (platformWebpush as { fcmOptions?: unknown }).fcmOptions\n    if (fcmOptions && typeof fcmOptions === \"object\" && !Array.isArray(fcmOptions)) {\n      const link = (fcmOptions as { link?: unknown }).link\n      if (typeof link === \"string\") {\n        links.push({ link, urlMode: \"navigate\" })\n      }\n    }\n  }\n\n  return links\n}\n\nconst actionSearchParamsMatchTargetUrl = (actionUrl: string, targetUrl: string, origin: string): boolean => {\n  try {\n    const base = new URL(origin)\n    const action = new URL(actionUrl, base)\n    const target = new URL(targetUrl, base)\n    for (const [key, value] of action.searchParams) {\n      if (target.searchParams.get(key) !== value) return false\n    }\n    return Array.from(action.searchParams.keys()).length > 0\n  } catch {\n    return false\n  }\n}\n\nconst notificationActionLinkMatchesUrl = (\n  action: NotificationActionLink,\n  targetUrl: string,\n  origin: string,\n): boolean => {\n  if (action.urlMode === \"merge_current_search\") {\n    return actionSearchParamsMatchTargetUrl(action.link, targetUrl, origin)\n  }\n\n  return Notifications.normalizeNotificationActionUrl(action.link, origin) === targetUrl\n}\n\nconst buildDisabledTopics = (\n  settings: SettingsDoc | null,\n  key: \"inApp\" | \"emailDigest\",\n): string[] => {\n  const raw = settings?.topicPreferences\n  if (!Array.isArray(raw) || raw.length === 0) return []\n\n  return raw\n    .map((pref) => {\n      if (!pref || typeof pref !== \"object\") return null\n      const topic = typeof (pref as { topic?: unknown }).topic === \"string\" ? (pref as { topic: string }).topic.trim() : \"\"\n      if (!topic) return null\n      const enabled = (pref as Record<string, unknown>)[key] === true\n      return enabled ? null : topic\n    })\n    .filter((topic): topic is string => Boolean(topic))\n}\n\nconst listNotifications: ApiHandler<Notifications.ListRequestPayload, Notifications.ListResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.listRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { userId } = session\n  const includeArchived = parsed.data.includeArchived === true\n  const unreadOnly = parsed.data.unreadOnly === true\n  const limit = parsed.data.limit ?? 50\n  const markSeen = parsed.data.markSeen === true\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (!includeArchived) queryFilters.push({ archivedAt: { $exists: false } })\n  if (unreadOnly) queryFilters.push({ readAt: { $exists: false } })\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const notifications = (await NotificationModel.find(query)\n    .sort({ createdAt: -1 })\n    .limit(limit)\n    .lean()) as NotificationDoc[]\n\n  const unseenQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { seenAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unseenQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unseenQuery: Record<string, unknown> = { $and: unseenQueryFilters }\n\n  const unreadQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unreadQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unreadQuery: Record<string, unknown> = { $and: unreadQueryFilters }\n\n  const [unreadCount, unseenCount] = await Promise.all([\n    NotificationModel.countDocuments(unreadQuery),\n    NotificationModel.countDocuments(unseenQuery),\n  ])\n\n  const now = markSeen ? new Date() : null\n  if (now && unseenCount > 0) {\n    await NotificationModel.updateMany(unseenQuery, { $set: { seenAt: now } })\n  }\n\n  return Notifications.listResponseSchema.parse({\n    ok: true,\n    notifications: notifications.map((n) => ({\n      id: String(n._id),\n      topic: typeof n.topic === \"string\" ? n.topic : undefined,\n      tag: typeof n.tag === \"string\" ? n.tag : undefined,\n      deliveryId: typeof n.deliveryId === \"string\" ? n.deliveryId : undefined,\n      title: typeof n.title === \"string\" ? n.title : \"\",\n      body: typeof n.body === \"string\" ? n.body : undefined,\n      image: typeof n.image === \"string\" ? n.image : undefined,\n      data: toStringMap(n.data),\n      platform: isRecord(n.platform) ? n.platform : undefined,\n      createdAt: toIso(n.createdAt) ?? new Date().toISOString(),\n      seenAt: toIso(n.seenAt) ?? (now && !n.archivedAt && !n.seenAt ? now.toISOString() : undefined),\n      readAt: toIso(n.readAt),\n      archivedAt: toIso(n.archivedAt),\n    })),\n    unreadCount,\n    unseenCount: now ? 0 : unseenCount,\n  })\n}\n\nconst createNotificationForCurrentUser: ApiHandler<Notifications.CreateRequestPayload, Notifications.CreateResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"create\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.createRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const origin = getRequestOrigin(ctx)\n  const actionLink = parsed.data.url\n    ? Notifications.normalizeNotificationActionLink(parsed.data.url, origin, parsed.data.urlMode) ?? undefined\n    : undefined\n  if (parsed.data.url && !actionLink) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const created = await createNotification(ctx, {\n    userId: session.userId,\n    topic: parsed.data.topic,\n    tag: parsed.data.tag,\n    title: parsed.data.title,\n    body: parsed.data.body,\n    image: parsed.data.image,\n    url: actionLink,\n    urlMode: parsed.data.urlMode,\n    metadata: parsed.data.metadata,\n    data: parsed.data.data,\n    platform: parsed.data.platform,\n  }, ability)\n\n  return Notifications.createResponseSchema.parse({ ok: true, id: created.id })\n}\n\nconst markRead: ApiHandler<unknown, Notifications.MarkReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const now = new Date()\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { readAt: now, seenAt: now } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst markReadByUrl: ApiHandler<Notifications.MarkReadByUrlRequestPayload, Notifications.MarkReadByUrlResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.markReadByUrlRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const origin = getRequestOrigin(ctx)\n  const targetUrl = Notifications.normalizeNotificationActionUrl(parsed.data.url, origin)\n  if (!targetUrl) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const query: Record<string, unknown> = {\n    $and: [\n      { userId: session.userId },\n      { archivedAt: { $exists: false } },\n      { readAt: { $exists: false } },\n      {\n        $or: [\n          { \"data.link\": { $type: \"string\" } },\n          { \"platform.webpush.fcmOptions.link\": { $type: \"string\" } },\n        ],\n      },\n      getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n    ],\n  }\n\n  const candidates = (await NotificationModel.find(query)\n    .select({ _id: 1, data: 1, platform: 1 })\n    .lean()) as NotificationActionDoc[]\n\n  const matchingIds = candidates\n    .filter((notification) =>\n      getNotificationActionLinks(notification).some((action) =>\n        notificationActionLinkMatchesUrl(action, targetUrl, origin),\n      ),\n    )\n    .map((notification) => notification._id)\n\n  if (matchingIds.length === 0) {\n    return Notifications.markReadByUrlResponseSchema.parse({\n      ok: true,\n      matchedCount: 0,\n      modifiedCount: 0,\n    })\n  }\n\n  const now = new Date()\n  const result = await NotificationModel.updateMany(\n    {\n      $and: [\n        { _id: { $in: matchingIds } },\n        { userId: session.userId },\n        { archivedAt: { $exists: false } },\n        { readAt: { $exists: false } },\n        getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n      ],\n    },\n    { $set: { readAt: now, seenAt: now } },\n  )\n\n  const modifiedCount = typeof result.modifiedCount === \"number\" ? result.modifiedCount : matchingIds.length\n\n  return Notifications.markReadByUrlResponseSchema.parse({\n    ok: true,\n    matchedCount: matchingIds.length,\n    modifiedCount,\n  })\n}\n\nconst markAllRead: ApiHandler<unknown, Notifications.MarkAllReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId: session.userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId: session.userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const now = new Date()\n  await NotificationModel.updateMany(query, { $set: { readAt: now, seenAt: now } })\n\n  return { ok: true }\n}\n\nconst archiveNotification: ApiHandler<unknown, Notifications.ArchiveResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { archivedAt: new Date(), drawerActive: false } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst getSettings: ApiHandler<unknown, Notifications.SettingsResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"read\", \"RBNotificationSettings\")] },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.settingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst updateSettings: ApiHandler<Notifications.UpdateSettingsRequestPayload, Notifications.UpdateSettingsResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.updateSettingsRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const nextValues: Record<string, unknown> = {}\n\n  if (parsed.data.digestFrequency) {\n    nextValues.digestFrequency = parsed.data.digestFrequency\n  }\n\n  if (parsed.data.topicPreferences) {\n    const seen = new Set<string>()\n    const next = parsed.data.topicPreferences\n      .map((pref) => ({\n        topic: pref.topic.trim(),\n        inApp: pref.inApp,\n        emailDigest: pref.emailDigest,\n        push: pref.push,\n      }))\n      .filter((pref) => pref.topic.length > 0)\n      .filter((pref) => {\n        if (seen.has(pref.topic)) return false\n        seen.add(pref.topic)\n        return true\n      })\n\n    nextValues.topicPreferences = next\n  }\n\n  const ops: Record<string, unknown> = {\n    $setOnInsert: { userId: session.userId },\n  }\n\n  if (Object.keys(nextValues).length > 0) {\n    ops.$set = nextValues\n  }\n\n  const settings = (await SettingsModel.findOneAndUpdate(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"update\", \"RBNotificationSettings\")] },\n    ops,\n    { upsert: true, returnDocument: \"after\", setDefaultsOnInsert: true },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.updateSettingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst runDigest: ApiHandler<Notifications.DigestRunRequestPayload, Notifications.DigestRunResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.digestRunRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const result = await sendNotificationsDigestForUser(ctx, {\n    userId: session.userId,\n    ability,\n    force: parsed.data.force === true,\n  })\n\n  if (!result.ok) {\n    ctx.res.status(500)\n    return { ok: false, error: result.error }\n  }\n\n  return {\n    ok: true,\n    sent: result.sent,\n    ...(result.skippedReason ? { skippedReason: result.skippedReason } : {}),\n  }\n}\n\nexport default (api: Api) => {\n  api.post(Notifications.ListRoute, listNotifications)\n  api.post(Notifications.CreateRoute, createNotificationForCurrentUser)\n  api.post(Notifications.MarkReadRoute, markRead)\n  api.post(Notifications.MarkReadByUrlRoute, markReadByUrl)\n  api.post(Notifications.MarkAllReadRoute, markAllRead)\n  api.post(Notifications.ArchiveRoute, archiveNotification)\n  api.get(Notifications.SettingsRoute, getSettings)\n  api.put(Notifications.SettingsRoute, updateSettings)\n  api.post(Notifications.DigestRunRoute, runDigest)\n}\n"],"mappings":";;;;;AAQA,IAAaI,kBAAkBC,QAAa;CAC1C,MAAMC,iBAAkBD,IAAIE,IAAIC,SAAmEC;CACnG,MAAMC,SAAS,OAAOJ,gBAAgBJ,OAAO,WAAWI,eAAeJ,GAAGS,KAAK,IAAI;CACnF,MAAMC,WAAW,OAAON,gBAAgBH,oBAAoB,WAAWG,eAAeH,gBAAgBQ,KAAK,IAAI;CAE/G,IAAI,CAACD,QAAQ;EACXL,IAAIQ,IAAIC,OAAO,GAAG;EAClB,OAAO;CACT;CAEA,IAAI,CAACF,UAAU;EACbP,IAAIQ,IAAIC,OAAO,GAAG;EAClB,OAAO;CACT;CAEA,OAAO;EAAEJ;EAAQE;CAAS;AAC5B;;;ACrBA,IAAaI,YAAY;AACzB,IAAaC,cAAc;AAC3B,IAAaC,gBAAgB;AAC7B,IAAaC,qBAAqB;AAClC,IAAaC,eAAe;AAC5B,IAAaC,mBAAmB;AAChC,IAAaC,gBAAgB;AAC7B,IAAaC,iBAAiB;AAE9B,IAAaC,oBAAoBT,OAAS;CACxCW,iBAAiBX,QAAU,CAAC,CAACa,SAAS;CACtCC,YAAYd,QAAU,CAAC,CAACa,SAAS;CACjCE,OAAOf,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG,CAAC,CAACN,SAAS;CACjDO,UAAUpB,QAAU,CAAC,CAACa,SAAS;AACjC,CAAC;AAID,IAAaU,yBAAyBvB,OAASA,OAAS,GAAGA,OAAS,CAAC;AAErE,IAAa0B,oCAAoC1B,OAAS;CACxD2B,SAAS3B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACpDgB,YAAY7B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACvDiB,SAAS9B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACpDkB,MAAM/B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;AACnD,CAAC,CAAC,CAACmB,YAAY;AAIf,IAAME,4BAA4BlC,OAAS,CAAC,CAACmC,KAAK;AAClD,IAAMC,4BAA4BpC,MAAO,CAAC,YAAY,sBAAsB,CAAC;AAE7E,IAAasC,kCAAkCtC,OAAS;CACtDuC,OAAOvC,OAAS,CAAC,CAACkB,IAAI,CAAC;CACvBsB,MAAMxC,OAAS,CAAC,CAACa,SAAS;CAC1B4B,OAAOzC,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAED,IAAa6B,sBAAsB1C,OAAS;CAC1C2C,OAAOT,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CACjD+B,KAAKV,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/C0B,OAAOL,0BAA0BhB,IAAI,CAAC;CACtCsB,MAAMN,0BAA0BrB,SAAS;CACzC4B,OAAOP,0BAA0BrB,SAAS;CAC1CgC,KAAKX,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/CiC,SAASV,0BAA0BvB,SAAS;CAC5CkC,UAAU/C,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACrDmC,MAAMzB,uBAAuBV,SAAS;CACtCoC,UAAUvB,kCAAkCb,SAAS;AACvD,CAAC;AAID,IAAasC,kCAAkCN,KAAaO,WAAkC;CAC5F,MAAMC,MAAMR,IAAIV,KAAK;CACrB,IAAI,CAACkB,KAAK,OAAO;CAEjB,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIH,MAAM;EAC3B,MAAMI,SAAS,IAAID,IAAIF,KAAKC,IAAI;EAChC,IAAIE,OAAOJ,WAAWE,KAAKF,QAAQ,OAAO;EAC1C,OAAO,GAAGI,OAAOC,WAAWD,OAAOE;CACrC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAaC,mCACXd,KACAO,QACAN,UAAqD,eACnC;CAClB,MAAMO,MAAMR,IAAIV,KAAK;CACrB,IAAI,CAACkB,KAAK,OAAO;CAEjB,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIH,MAAM;EAC3B,MAAMI,SAAS,IAAID,IAAIF,KAAKC,IAAI;EAChC,IAAIE,OAAOJ,WAAWE,KAAKF,QAAQ,OAAO;EAC1C,IAAIN,YAAY,YAAY,OAAO,GAAGU,OAAOC,WAAWD,OAAOE,SAASF,OAAOI;EAC/E,OAAO,GAAGJ,OAAOE,SAASF,OAAOI,UAAU;CAC7C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAaC,qBAAqB7D,OAAS;CACzC8D,IAAI9D,OAAS;CACb2C,OAAO3C,OAAS,CAAC,CAACa,SAAS;CAC3B+B,KAAK5C,OAAS,CAAC,CAACa,SAAS;CACzBkD,YAAY/D,OAAS,CAAC,CAACa,SAAS;CAChC0B,OAAOD,gCAAgC0B,MAAMzB;CAC7CC,MAAMF,gCAAgC0B,MAAMxB;CAC5CC,OAAOH,gCAAgC0B,MAAMvB;CAC7CO,MAAMzB,uBAAuBV,SAAS;CACtCoC,UAAUvB,kCAAkCb,SAAS;CACrDoD,WAAWjE,OAAS;CACpBkE,QAAQlE,OAAS,CAAC,CAACa,SAAS;CAC5BsD,QAAQnE,OAAS,CAAC,CAACa,SAAS;CAC5BuD,YAAYpE,OAAS,CAAC,CAACa,SAAS;AAClC,CAAC;AAID,IAAayD,qBAAqBtE,OAAS;CACzCuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4D,eAAezE,MAAQ6D,kBAAkB,CAAC,CAAChD,SAAS;CACpD8D,aAAa3E,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;CAC9C+D,aAAa5E,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;AAChD,CAAC;AAID,IAAaiE,uBAAuB9E,OAAS;CAC3CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BiD,IAAI9D,OAAS,CAAC,CAACa,SAAS;AAC1B,CAAC;AAIqCb,OAAS;CAC7CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAID,IAAaqE,6BAA6BlF,OAAS,EACjD6C,KAAK7C,OAAS,CAAC,CAACmC,KAAK,CAAC,CAACjB,IAAI,CAAC,EAC9B,CAAC;AAID,IAAakE,8BAA8BpF,OAAS;CAClDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BwE,cAAcrF,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/CyE,eAAetF,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;AAClD,CAAC;AAIoCb,OAAS;CAC5CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAIwCb,OAAS;CAChDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAID,IAAa+E,wBAAwB5F,MAAO;CAAC;CAAO;CAAS;AAAQ,CAAC;AAItE,IAAa8F,wBAAwB9F,OAAS;CAC5C2C,OAAO3C,OAAS;CAChB+F,OAAO/F,QAAU;CACjBgG,aAAahG,QAAU;CACvBiG,MAAMjG,QAAU;AAClB,CAAC;AAID,IAAamG,iBAAiBnG,OAAS;CACrCoG,iBAAiBR;CACjBS,kBAAkBrG,MAAQ8F,qBAAqB;CAC/CQ,kBAAkBtG,OAAS,CAAC,CAACa,SAAS;AACxC,CAAC;AAID,IAAa2F,yBAAyBxG,OAAS;CAC7CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4F,UAAUN,eAAetF,SAAS;AACpC,CAAC;AAID,IAAa8F,8BAA8B3G,OAAS;CAClDoG,iBAAiBR,sBAAsB/E,SAAS;CAChDwF,kBAAkBrG,MAAQ8F,qBAAqB,CAAC,CAACjF,SAAS;AAC5D,CAAC;AAID,IAAagG,+BAA+B7G,OAAS;CACnDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4F,UAAUN,eAAetF,SAAS;AACpC,CAAC;AAID,IAAakG,yBAAyB/G,OAAS,EAC7CgH,OAAOhH,QAAU,CAAC,CAACa,SAAS,EAC9B,CAAC;AAIsCb,OAAS;CAC9CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BsG,MAAMnH,QAAU,CAAC,CAACa,SAAS;CAC3BuG,eAAepH,OAAS,CAAC,CAACa,SAAS;AACrC,CAAC;;;ACrMD,IAAM6H,SAASC,UAAwCA,iBAAiBC,OAAOD,MAAME,YAAY,IAAIC,KAAAA;AACrG,IAAMC,YAAYJ,UAAqDM,QAAQN,KAAK,KAAK,OAAOA,UAAU,YAAY,CAACO,MAAMC,QAAQR,KAAK;AAE1I,IAAMS,eAAeT,UAAuD;CAC1E,IAAI,CAACI,SAASJ,KAAK,GAAG,OAAOG,KAAAA;CAC7B,MAAMO,UAAUC,OAAOD,QAAQV,KAAK,CAAC,CAClCY,QAAQC,UAAqC,OAAOA,MAAM,OAAO,QAAQ;CAC5E,OAAOH,QAAQI,SAAS,IAAIH,OAAOI,YAAYL,OAAO,IAAIP,KAAAA;AAC5D;AAEA,IAAMa,2BAA2BhB,UAAuC;CACtE,MAAMiB,MAAMV,MAAMC,QAAQR,KAAK,IAAIA,MAAM,KAAKA;CAC9C,IAAI,OAAOiB,QAAQ,UAAU,OAAOd,KAAAA;CACpC,OAAOc,IAAIC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAEC,KAAK,KAAKhB,KAAAA;AACtC;AAEA,IAAMiB,oBAAoBC,QAAqB;CAC7C,MAAMC,WAAWN,wBAAwBK,IAAIE,IAAIC,QAAQ,oBAAoB,KAAKH,IAAIE,IAAID;CAC1F,MAAMG,OAAOT,wBAAwBK,IAAIE,IAAIC,QAAQ,mBAAmB,KAAKH,IAAIE,IAAIG,IAAI,MAAM;CAE/F,OAAOJ,YAAYG,OAAO,GAAGH,SAAQ,KAAMG,SAAS;AACtD;AAEA,IAAME,8BAA8BC,iBAAkE;CACpG,MAAMC,QAAkC,CAAA;CAExC,IAAI,OAAOD,aAAaE,MAAMjC,SAAS,UACrCgC,MAAME,KAAK;EACTlC,MAAM+B,aAAaE,KAAKjC;EACxBC,SAAS8B,aAAaE,KAAKE,aAAa,yBAAyB,yBAAyB;CAC5F,CAAC;CAGH,MAAMC,kBAAkBL,aAAaM,UAAUC;CAC/C,IAAIF,mBAAmB,OAAOA,oBAAoB,YAAY,CAAC1B,MAAMC,QAAQyB,eAAe,GAAG;EAC7F,MAAMG,aAAcH,gBAA6CG;EACjE,IAAIA,cAAc,OAAOA,eAAe,YAAY,CAAC7B,MAAMC,QAAQ4B,UAAU,GAAG;GAC9E,MAAMvC,OAAQuC,WAAkCvC;GAChD,IAAI,OAAOA,SAAS,UAClBgC,MAAME,KAAK;IAAElC;IAAMC,SAAS;GAAW,CAAC;EAE5C;CACF;CAEA,OAAO+B;AACT;AAEA,IAAMQ,oCAAoCC,WAAmBC,WAAmBC,WAA4B;CAC1G,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIF,MAAM;EAC3B,MAAMG,SAAS,IAAID,IAAIJ,WAAWG,IAAI;EACtC,MAAMG,SAAS,IAAIF,IAAIH,WAAWE,IAAI;EACtC,KAAK,MAAM,CAACI,KAAK7C,UAAU2C,OAAOG,cAChC,IAAIF,OAAOE,aAAapB,IAAImB,GAAG,MAAM7C,OAAO,OAAO;EAErD,OAAOO,MAAMwC,KAAKJ,OAAOG,aAAaE,KAAK,CAAC,CAAC,CAAClC,SAAS;CACzD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAMmC,oCACJN,QACAJ,WACAC,WACY;CACZ,IAAIG,OAAO7C,YAAY,wBACrB,OAAOuC,iCAAiCM,OAAO9C,MAAM0C,WAAWC,MAAM;CAGxE,OAAOlD,+BAA6CqD,OAAO9C,MAAM2C,MAAM,MAAMD;AAC/E;AAEA,IAAMY,uBACJC,UACAP,QACa;CACb,MAAM5B,MAAMmC,UAAUC;CACtB,IAAI,CAAC9C,MAAMC,QAAQS,GAAG,KAAKA,IAAIH,WAAW,GAAG,OAAO,CAAA;CAEpD,OAAOG,IACJqC,KAAKC,SAAS;EACb,IAAI,CAACA,QAAQ,OAAOA,SAAS,UAAU,OAAO;EAC9C,MAAMC,QAAQ,OAAQD,KAA6BC,UAAU,WAAYD,KAA2BC,MAAMrC,KAAK,IAAI;EACnH,IAAI,CAACqC,OAAO,OAAO;EAEnB,OADiBD,KAAiCV,SAAS,OAC1C,OAAOW;CAC1B,CAAC,CAAC,CACD5C,QAAQ4C,UAA2BlD,QAAQkD,KAAK,CAAC;AACtD;AAEA,IAAME,oBAAqG,OACzGG,SACAxC,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;EAC1C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMM,SAAAA,kBAAyCE,UAAUX,OAAO;CAChE,IAAI,CAACS,OAAOG,SAAS;EACnBpD,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAM,EAAEU,WAAWZ;CACnB,MAAMa,kBAAkBL,OAAOxC,KAAK6C,oBAAoB;CACxD,MAAMC,aAAaN,OAAOxC,KAAK8C,eAAe;CAC9C,MAAMC,QAAQP,OAAOxC,KAAK+C,SAAS;CACnC,MAAMC,WAAWR,OAAOxC,KAAKgD,aAAa;CAI1C,MAAMI,iBAAiB/B,oBAAoBC,OADnB2B,MADIjG,OAAO4C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC,EAAA,CACpDe,QAAQ,EAAEN,OAAO,CAAC,CAAC,CAACO,KAAK,GACV,OAAO;CAE5D,MAAME,oBAAoB,MAAMrG,OAAO4C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CAEtF,MAAMmB,eAA0C,CAC9C,EAAEV,OAAO,GACTxF,qBAAqB+E,SAAS,QAAQ,gBAAgB,CAAC;CAEzD,IAAI,CAACU,iBAAiBS,aAAarD,KAAK,EAAEsD,YAAY,EAAEC,SAAS,MAAM,EAAE,CAAC;CAC1E,IAAIV,YAAYQ,aAAarD,KAAK,EAAEwD,QAAQ,EAAED,SAAS,MAAM,EAAE,CAAC;CAChE,IAAIJ,eAAepE,SAAS,GAAGsE,aAAarD,KAAK,EAAEyB,OAAO,EAAEgC,MAAMN,eAAe,EAAE,CAAC;CACpF,MAAMO,QAAiC,EAAEC,MAAMN,aAAa;CAE5D,MAAMO,gBAAiB,MAAMR,kBAAkBS,KAAKH,KAAK,CAAC,CACvDI,KAAK,EAAEC,WAAW,GAAG,CAAC,CAAC,CACvBjB,MAAMA,KAAK,CAAC,CACZI,KAAK;CAER,MAAMc,qBAAgD;EACpD,EAAErB,OAAO;EACT,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEU,QAAQ,EAAEV,SAAS,MAAM,EAAE;EAC7BpG,qBAAqB+E,SAAS,QAAQ,gBAAgB;CAAC;CAEzD,IAAIiB,eAAepE,SAAS,GAAGiF,mBAAmBhE,KAAK,EAAEyB,OAAO,EAAEgC,MAAMN,eAAe,EAAE,CAAC;CAC1F,MAAMe,cAAuC,EAAEP,MAAMK,mBAAmB;CAExE,MAAMG,qBAAgD;EACpD,EAAExB,OAAO;EACT,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BpG,qBAAqB+E,SAAS,QAAQ,gBAAgB;CAAC;CAEzD,IAAIiB,eAAepE,SAAS,GAAGoF,mBAAmBnE,KAAK,EAAEyB,OAAO,EAAEgC,MAAMN,eAAe,EAAE,CAAC;CAC1F,MAAMiB,cAAuC,EAAET,MAAMQ,mBAAmB;CAExE,MAAM,CAACE,aAAaC,eAAe,MAAMC,QAAQC,IAAI,CACnDpB,kBAAkBqB,eAAeL,WAAW,GAC5ChB,kBAAkBqB,eAAeP,WAAW,CAAC,CAC9C;CAED,MAAMQ,MAAM3B,2BAAW,IAAI7E,KAAK,IAAI;CACpC,IAAIwG,OAAOJ,cAAc,GACvB,MAAMlB,kBAAkBuB,WAAWT,aAAa,EAAEU,MAAM,EAAEX,QAAQS,IAAI,EAAE,CAAC;CAG3E,OAAA,mBAAwCI,MAAM;EAC5C9C,IAAI;EACJ4B,eAAeA,cAAcrC,KAAKwD,OAAO;GACvCC,IAAIC,OAAOF,EAAEtH,GAAG;GAChBgE,OAAO,OAAOsD,EAAEtD,UAAU,WAAWsD,EAAEtD,QAAQrD,KAAAA;GAC/C8G,KAAK,OAAOH,EAAEG,QAAQ,WAAWH,EAAEG,MAAM9G,KAAAA;GACzC+G,YAAY,OAAOJ,EAAEI,eAAe,WAAWJ,EAAEI,aAAa/G,KAAAA;GAC9DgH,OAAO,OAAOL,EAAEK,UAAU,WAAWL,EAAEK,QAAQ;GAC/CC,MAAM,OAAON,EAAEM,SAAS,WAAWN,EAAEM,OAAOjH,KAAAA;GAC5CkH,OAAO,OAAOP,EAAEO,UAAU,WAAWP,EAAEO,QAAQlH,KAAAA;GAC/C2B,MAAMrB,YAAYqG,EAAEhF,IAAI;GACxBI,UAAU9B,SAAS0G,EAAE5E,QAAQ,IAAI4E,EAAE5E,WAAW/B,KAAAA;GAC9C2F,WAAW/F,MAAM+G,EAAEhB,SAAS,sBAAK,IAAI7F,KAAK,EAAA,CAAEC,YAAY;GACxD8F,QAAQjG,MAAM+G,EAAEd,MAAM,MAAMS,OAAO,CAACK,EAAEzB,cAAc,CAACyB,EAAEd,SAASS,IAAIvG,YAAY,IAAIC,KAAAA;GACpFoF,QAAQxF,MAAM+G,EAAEvB,MAAM;GACtBF,YAAYtF,MAAM+G,EAAEzB,UAAU;EAChC,EAAE;EACFe;EACAC,aAAaI,MAAM,IAAIJ;CACzB,CAAC;AACH;AAEA,IAAMiB,mCAAwH,OAC5HzD,SACAxC,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMM,SAAAA,oBAA2CE,UAAUX,OAAO;CAClE,IAAI,CAACS,OAAOG,SAAS;EACnBpD,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAMxB,SAASpB,iBAAiBC,GAAG;CACnC,MAAMqG,aAAapD,OAAOxC,KAAK6F,MAC3BrI,gCAA8CgF,OAAOxC,KAAK6F,KAAKnF,QAAQ8B,OAAOxC,KAAKhC,OAAO,KAAKK,KAAAA,IAC/FA,KAAAA;CACJ,IAAImE,OAAOxC,KAAK6F,OAAO,CAACD,YAAY;EAClCrG,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAM6D,UAAU,MAAM1I,mBAAmBkC,KAAK;EAC5CqD,QAAQZ,QAAQY;EAChBlB,OAAOc,OAAOxC,KAAK0B;EACnByD,KAAK3C,OAAOxC,KAAKmF;EACjBE,OAAO7C,OAAOxC,KAAKqF;EACnBC,MAAM9C,OAAOxC,KAAKsF;EAClBC,OAAO/C,OAAOxC,KAAKuF;EACnBM,KAAKD;EACL5H,SAASwE,OAAOxC,KAAKhC;EACrBgI,UAAUxD,OAAOxC,KAAKgG;EACtBhG,MAAMwC,OAAOxC,KAAKA;EAClBI,UAAUoC,OAAOxC,KAAKI;CACxB,GAAG+B,OAAO;CAEV,OAAA,qBAA0C4C,MAAM;EAAE9C,IAAI;EAAMgD,IAAIc,QAAQd;CAAG,CAAC;AAC9E;AAEA,IAAMiB,WAAuE,OAC3EE,UACA7G,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMmE,iBAAiB,OAAO9G,IAAIE,IAAI6G,OAAOD,mBAAmB,WAAW9G,IAAIE,IAAI6G,OAAOD,eAAehH,KAAK,IAAI;CAClH,IAAI,CAACgH,gBAAgB;EACnB9G,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,MAAMmB,oBAAoB,MAAMrG,OAAO4C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CACtF,MAAMwC,sBAAM,IAAIxG,KAAK;CAErB,IAAI;EACF,MAAMkF,kBAAkBkD,UACtB,EAAE3C,MAAM;GAAC,EAAElG,KAAK2I,eAAe;GAAG,EAAE9C,YAAY,EAAEC,SAAS,MAAM,EAAE;GAAGpG,qBAAqB+E,SAAS,UAAU,gBAAgB;EAAC,EAAE,GACjI,EAAE0C,MAAM;GAAEpB,QAAQkB;GAAKT,QAAQS;EAAI,EAAE,CACvC;CACF,QAAQ;EACNpF,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,OAAO,EAAED,IAAI,KAAK;AACpB;AAEA,IAAMuE,gBAAmH,OACvHzE,SACAxC,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMM,SAAAA,2BAAkDE,UAAUX,OAAO;CACzE,IAAI,CAACS,OAAOG,SAAS;EACnBpD,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAMxB,SAASpB,iBAAiBC,GAAG;CACnC,MAAMkB,YAAYjD,+BAA6CgF,OAAOxC,KAAK6F,KAAKnF,MAAM;CACtF,IAAI,CAACD,WAAW;EACdlB,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAMmB,oBAAoB,MAAMrG,OAAO4C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CACtF,MAAMwB,QAAiC,EACrCC,MAAM;EACJ,EAAEhB,QAAQZ,QAAQY,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7B,EACEoD,KAAK,CACH,EAAE,aAAa,EAAEC,OAAO,SAAS,EAAE,GACnC,EAAE,oCAAoC,EAAEA,OAAO,SAAS,EAAE,CAAC,EAE/D;EACAzJ,qBAAqB+E,SAAS,UAAU,gBAAgB;CAAC,EAE7D;CAMA,MAAM6E,eAAcF,MAJMzD,kBAAkBS,KAAKH,KAAK,CAAC,CACpDoD,OAAO;EAAErJ,KAAK;EAAGsC,MAAM;EAAGI,UAAU;CAAE,CAAC,CAAC,CACxC+C,KAAK,EAAA,CAGLrE,QAAQgB,iBACPD,2BAA2BC,YAAY,CAAC,CAACmH,MAAMpG,WAC7CM,iCAAiCN,QAAQJ,WAAWC,MAAM,CAC5D,CACF,CAAC,CACAc,KAAK1B,iBAAiBA,aAAapC,GAAG;CAEzC,IAAIsJ,YAAYhI,WAAW,GACzB,OAAA,4BAAiD+F,MAAM;EACrD9C,IAAI;EACJkF,cAAc;EACdC,eAAe;CACjB,CAAC;CAGH,MAAMzC,sBAAM,IAAIxG,KAAK;CACrB,MAAMkJ,SAAS,MAAMhE,kBAAkBuB,WACrC,EACEhB,MAAM;EACJ,EAAElG,KAAK,EAAE4J,KAAKN,YAAY,EAAE;EAC5B,EAAEpE,QAAQZ,QAAQY,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BpG,qBAAqB+E,SAAS,UAAU,gBAAgB;CAAC,EAE7D,GACA,EAAE0C,MAAM;EAAEpB,QAAQkB;EAAKT,QAAQS;CAAI,EAAE,CACvC;CAEA,MAAMyC,gBAAgB,OAAOC,OAAOD,kBAAkB,WAAWC,OAAOD,gBAAgBJ,YAAYhI;CAEpG,OAAA,4BAAiD+F,MAAM;EACrD9C,IAAI;EACJkF,cAAcH,YAAYhI;EAC1BoI;CACF,CAAC;AACH;AAEA,IAAMG,cAA6E,OACjFnB,UACA7G,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAIA,MAAMkB,iBAAiB/B,oBAAoBC,OADnB2B,MADIjG,OAAO4C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC,EAAA,CACpDe,QAAQ,EAAEN,QAAQZ,QAAQY,OAAO,CAAC,CAAC,CAACO,KAAK,GAC1B,OAAO;CAE5D,MAAME,oBAAoB,MAAMrG,OAAO4C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CAEtF,MAAMmB,eAA0C;EAC9C,EAAEV,QAAQZ,QAAQY,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BpG,qBAAqB+E,SAAS,UAAU,gBAAgB;CAAC;CAE3D,IAAIiB,eAAepE,SAAS,GAAGsE,aAAarD,KAAK,EAAEyB,OAAO,EAAEgC,MAAMN,eAAe,EAAE,CAAC;CACpF,MAAMO,QAAiC,EAAEC,MAAMN,aAAa;CAE5D,MAAMqB,sBAAM,IAAIxG,KAAK;CACrB,MAAMkF,kBAAkBuB,WAAWjB,OAAO,EAAEkB,MAAM;EAAEpB,QAAQkB;EAAKT,QAAQS;CAAI,EAAE,CAAC;CAEhF,OAAO,EAAE1C,IAAI,KAAK;AACpB;AAEA,IAAMwF,sBAAiF,OACrFrB,UACA7G,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMmE,iBAAiB,OAAO9G,IAAIE,IAAI6G,OAAOD,mBAAmB,WAAW9G,IAAIE,IAAI6G,OAAOD,eAAehH,KAAK,IAAI;CAClH,IAAI,CAACgH,gBAAgB;EACnB9G,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,MAAMmB,oBAAoB,MAAMrG,OAAO4C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CAEtF,IAAI;EACF,MAAMkB,kBAAkBkD,UACtB,EAAE3C,MAAM;GAAC,EAAElG,KAAK2I,eAAe;GAAG,EAAE9C,YAAY,EAAEC,SAAS,MAAM,EAAE;GAAGpG,qBAAqB+E,SAAS,UAAU,gBAAgB;EAAC,EAAE,GACjI,EAAE0C,MAAM;GAAEtB,4BAAY,IAAIpF,KAAK;GAAGwJ,cAAc;EAAM,EAAE,CAC1D;CACF,QAAQ;EACNpI,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,OAAO,EAAED,IAAI,KAAK;AACpB;AAEA,IAAM2F,cAA0E,OAC9ExB,UACA7G,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,QAAQ,wBAAwB,GAAG;EAClD9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAGA,MAAMZ,WAAY,OAAM2B,MADIjG,OAAO4C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC,EAAA,CACpDe,QACpC,EAAEU,MAAM,CAAC,EAAEhB,QAAQZ,QAAQY,OAAO,GAAGxF,qBAAqB+E,SAAS,QAAQ,wBAAwB,CAAC,EAAE,CACxG,CAAC,CAACgB,KAAK;CAEP,MAAM2E,qBAAqB,OAAOxG,UAAUyG,oBAAoB,WAAWzG,SAASyG,kBAAkB;CACtG,MAAMA,kBACJD,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;CAEN,MAAMvG,mBAAmB9C,MAAMC,QAAQ4C,UAAUC,gBAAgB,IAC7DD,SAAUC,iBAAiBC,KAAKC,UAAU;EAC1CC,OAAO,OAAOD,KAAKC,UAAU,WAAWD,KAAKC,QAAQ;EACrDuG,OAAOxG,KAAKwG,UAAU;EACtBC,aAAazG,KAAKyG,gBAAgB;EAClCjI,MAAMwB,KAAKxB,SAAS;CACtB,EAAE,CAAC,CAACnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,IACxC,CAAA;CAEJ,OAAA,uBAA4C+F,MAAM;EAChD9C,IAAI;EACJX,UAAU;GACRyG;GACAxG;GACA6G,kBAAkBnK,MAAMqD,UAAU8G,gBAAgB;EACpD;CACF,CAAC;AACH;AAEA,IAAMC,iBAAsH,OAC1HtG,SACAxC,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,UAAU,wBAAwB,GAAG;EACpD9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMM,SAAAA,4BAAmDE,UAAUX,OAAO;CAC1E,IAAI,CAACS,OAAOG,SAAS;EACnBpD,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAMe,gBAAgB,MAAMjG,OAAO4C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAK0C;CAAQ,CAAC;CAC1F,MAAMsG,aAAsC,CAAC;CAE7C,IAAIjG,OAAOxC,KAAK+H,iBACdU,WAAWV,kBAAkBvF,OAAOxC,KAAK+H;CAG3C,IAAIvF,OAAOxC,KAAKuB,kBAAkB;EAChC,MAAMmH,uBAAO,IAAIC,IAAY;EAe7BF,WAAWlH,mBAdEiB,OAAOxC,KAAKuB,iBACtBC,KAAKC,UAAU;GACdC,OAAOD,KAAKC,MAAMrC,KAAK;GACvB4I,OAAOxG,KAAKwG;GACZC,aAAazG,KAAKyG;GAClBjI,MAAMwB,KAAKxB;EACb,EAAE,CAAC,CACFnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,CAAC,CACvCF,QAAQ2C,SAAS;GAChB,IAAIiH,KAAKG,IAAIpH,KAAKC,KAAK,GAAG,OAAO;GACjCgH,KAAKI,IAAIrH,KAAKC,KAAK;GACnB,OAAO;EACT,CAE4BkH;CAChC;CAEA,MAAMG,MAA+B,EACnCC,cAAc,EAAEpG,QAAQZ,QAAQY,OAAO,EACzC;CAEA,IAAI/D,OAAOqC,KAAKuH,UAAU,CAAC,CAACzJ,SAAS,GACnC+J,IAAIlE,OAAO4D;CAGb,MAAMnH,WAAY,MAAM2B,cAAcgG,iBACpC,EAAErF,MAAM,CAAC,EAAEhB,QAAQZ,QAAQY,OAAO,GAAGxF,qBAAqB+E,SAAS,UAAU,wBAAwB,CAAC,EAAE,GACxG4G,KACA;EAAEG,QAAQ;EAAMC,gBAAgB;EAASC,qBAAqB;CAAK,CACrE,CAAC,CAACjG,KAAK;CAEP,MAAM2E,qBAAqB,OAAOxG,UAAUyG,oBAAoB,WAAWzG,SAASyG,kBAAkB;CACtG,MAAMA,kBACJD,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;CAEN,MAAMvG,mBAAmB9C,MAAMC,QAAQ4C,UAAUC,gBAAgB,IAC7DD,SAAUC,iBAAiBC,KAAKC,UAAU;EAC1CC,OAAO,OAAOD,KAAKC,UAAU,WAAWD,KAAKC,QAAQ;EACrDuG,OAAOxG,KAAKwG,UAAU;EACtBC,aAAazG,KAAKyG,gBAAgB;EAClCjI,MAAMwB,KAAKxB,SAAS;CACtB,EAAE,CAAC,CAACnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,IACxC,CAAA;CAEJ,OAAA,6BAAkD+F,MAAM;EACtD9C,IAAI;EACJX,UAAU;GACRyG;GACAxG;GACA6G,kBAAkBnK,MAAMqD,UAAU8G,gBAAgB;EACpD;CACF,CAAC;AACH;AAEA,IAAMkB,YAAuG,OAC3GvH,SACAxC,QACG;CACH,MAAMyC,UAAUzE,eAAegC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOC,OAAO;CAAe;CAG5C,MAAMC,UAAUhF,wBAAwB;EAAEiF,UAAUJ,QAAQI;EAAUJ,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACG,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;EAC1C9C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,MAAMM,SAAAA,uBAA8CE,UAAUX,OAAO;CACrE,IAAI,CAACS,OAAOG,SAAS;EACnBpD,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAMmF,SAAS,MAAM/J,+BAA+BiC,KAAK;EACvDqD,QAAQZ,QAAQY;EAChBT;EACAuH,OAAOlH,OAAOxC,KAAK0J,UAAU;CAC/B,CAAC;CAED,IAAI,CAACrC,OAAOpF,IAAI;EACd1C,IAAI+C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEN,IAAI;GAAOC,OAAOmF,OAAOnF;EAAM;CAC1C;CAEA,OAAO;EACLD,IAAI;EACJ0H,MAAMtC,OAAOsC;EACb,GAAItC,OAAOuC,gBAAgB,EAAEA,eAAevC,OAAOuC,cAAc,IAAI,CAAC;CACxE;AACF;AAEA,IAAA,mBAAgBC,QAAa;CAC3BA,IAAIC,KAAKtM,WAAyBoE,iBAAiB;CACnDiI,IAAIC,KAAKtM,aAA2BgI,gCAAgC;CACpEqE,IAAIC,KAAKtM,eAA6B0I,QAAQ;CAC9C2D,IAAIC,KAAKtM,oBAAkCgJ,aAAa;CACxDqD,IAAIC,KAAKtM,kBAAgC+J,WAAW;CACpDsC,IAAIC,KAAKtM,cAA4BiK,mBAAmB;CACxDoC,IAAIjK,IAAIpC,eAA6BoK,WAAW;CAChDiC,IAAIS,IAAI9M,eAA6B6K,cAAc;CACnDwB,IAAIC,KAAKtM,gBAA8B8L,SAAS;AAClD"}

package/dist/handler-CqSlSCdd.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-CqSlSCdd.js","names":["JSDOM","createDOMPurify","UploadFileProcessor","MAX_SVG_BYTES","window","DOMPurify","normalizeForSniff","raw","replace","trimStart","looksLikeSvgText","text","normalized","startsWith","test","looksLikeSvg","sniff","Buffer","toString","sanitizeSvg","svg","sanitize","USE_PROFILES","svgFilters","sanitizeSvgProcessor","id","maxBytes","match","process","data","mimeType","length","Error","svgText","sanitized","trim","sanitizedBuffer","from","convertHeifToWebpProcessor","sanitizeSvgProcessor","UploadFileProcessorContext","filename","clientMimeType","totalSize","sniff","Buffer","UploadFileProcessorResult","data","mimeType","metadata","Record","UploadFileProcessor","id","maxBytes","match","ctx","process","Promise","uploadProcessors","Object","freeze","getMaxUploadProcessorBytes","reduce","max","processor","Math","selectUploadProcessors","filter","applyUploadProcessors","Omit","applied","currentData","currentFilename","currentMimeType","processorCtx","length","Error","result","trim","assign","push","createHash","ApiHandler","getTenantFilesystemDb","models","GridFSBucket","ObjectId","Model","Uploads","claimUploadFileReference","createUploadFileReference","enqueueUploadPostProcessors","applyUploadProcessors","getMaxUploadProcessorBytes","selectUploadProcessors","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadAccessMetadata","buildUploadsAbility","ensureFilesystemUploadIndexes","ensureUploadIndexes","getBucketName","getModelCtx","getUploadSessionAccessQuery","getTenantId","resolveUploadAccessScope","waitForStreamFinished","stream","NodeJS","WritableStream","Promise","resolve","reject","once","writeToStream","chunk","Buffer","ok","write","onDrain","cleanup","onError","error","off","on","abortUploadStream","abort","destroy","isDuplicateKeyError","code","completeUpload","Record","CompleteResponsePayload","_payload","ctx","tenantId","res","status","uploadId","String","req","params","trim","ability","modelCtx","UploadSession","UploadChunk","all","get","can","existing","findOne","$and","_id","lean","fileId","deduplicated","locked","findOneAndUpdate","$set","$unset","returnDocument","fsDb","nativeDb","db","updateOne","bucketName","bucket","deduplication","lockedUserId","userId","undefined","accessMetadata","unclaimedDeduplication","namespace","algorithm","hash","pipelineVersion","createFileMetadata","storedMimeType","storedSize","additional","mimeType","totalSize","maxProcessorBytes","shouldBufferForProcessing","declaredMimeType","toLowerCase","declaredSvg","filename","endsWith","uploadStream","finalFilename","finalMimeType","finalSize","inlineProcessors","finalMetadata","Error","cursor","find","sort","index","AsyncIterable","close","expectedIndex","sourceBytes","sourceHasher","chunks","bufferedBytes","pendingChunks","sniffParts","sniffBytes","chunkDoc","data","length","update","push","slice","subarray","Math","min","sniff","concat","processors","clientMimeType","some","processor","id","openUploadStream","metadata","pending","chunksTotal","digest","assembled","processed","processedFilename","processedMimeType","applied","processedMetadata","sourceTotalSize","finished","end","uploadedBlobId","resolvedBlobId","returnedFileId","filesCollection","collection","uploadedBlobObjectId","referenceOptions","accessScope","isPublic","ownerKeyHash","lastDuplicateKeyError","attempt","blobId","canonicalFile","key","projection","canonicalReferenceId","deduplicationKey","delete","toHexString","catch","console","deleteMany","message","startsWith","ApiHandler","models","Model","Uploads","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadsAbility","getModelCtx","getUploadSessionAccessQuery","getTenantId","getStatus","Record","StatusResponsePayload","_payload","ctx","Promise","tenantId","res","status","ok","error","uploadId","String","req","params","trim","ability","modelCtx","UploadSession","UploadChunk","all","get","can","session","findOne","$and","_id","lean","receivedDocs","find","index","sort","received","Array","map","doc","filter","n","Number","isInteger","chunkSize","chunksTotal","fileId","z","InitRoute","ChunkRoute","StatusRoute","CompleteRoute","uploadAccessScopeSchema","enum","uploadDeduplicationSchema","object","namespace","string","trim","min","max","regex","algorithm","literal","hash","initRequestSchema","filename","mimeType","isPublic","boolean","optional","accessScope","deduplication","totalSize","number","int","superRefine","value","ctx","undefined","addIssue","code","message","path","InitRequestPayload","infer","initResponseSchema","ok","error","uploadId","uploadKey","chunkSize","chunksTotal","fileId","deduplicated","InitResponsePayload","statusResponseSchema","status","received","array","StatusResponsePayload","completeResponseSchema","CompleteResponsePayload","randomBytes","ApiHandler","getTenantFilesystemDb","models","ObjectId","Model","Uploads","createUploadFileReference","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadDeduplication","buildUploadsAbility","computeSha256Hex","ensureFilesystemUploadIndexes","ensureUploadIndexes","getBucketName","getChunkSizeBytes","getModelCtx","getSessionTtlMs","getTenantId","getUserId","resolveUploadAccessScope","initUpload","InitRequestPayload","InitResponsePayload","payload","ctx","Promise","tenantId","res","status","ok","error","userId","parsed","initRequestSchema","safeParse","success","filename","mimeType","totalSize","isPublic","deduplication","requestedDeduplication","data","accessScope","uploadKey","toString","ownerKeyHash","Buffer","from","undefined","namespace","hash","fsDb","nativeDb","db","bucketName","existingFile","collection","findOne","key","projection","_id","length","metadata","existingMetadata","Record","existingMimeType","existingSize","fileId","blobId","deduplicationKey","deduplicated","chunkSize","chunksTotal","Math","ceil","ability","modelCtx","UploadSession","UploadChunk","all","get","uploadId","now","Date","expiresAt","create","createdAt","ApiHandler","models","Model","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadsAbility","computeSha256Hex","ensureUploadIndexes","getModelCtx","getUploadSessionAccessQuery","getTenantId","normalizeSha256Hex","toBufferPayload","ChunkResponsePayload","ok","error","uploadChunk","Buffer","payload","ctx","Promise","tenantId","res","status","uploadId","String","req","params","trim","indexRaw","index","Number","isInteger","ability","modelCtx","UploadSession","UploadChunk","all","get","can","session","findOne","$and","_id","lean","chunksTotal","data","expectedSize","totalSize","chunkSize","length","checksumHeader","sha256","undefined","expectedSha256","updateOne","$set","size","expiresAt","$setOnInsert","createdAt","Date","upsert","rawBodyParser","limitBytes","maxClientBytesPerSecond","req","res","next","contentType","headers","String","includes","total","chunks","Buffer","done","paused","throttleTimeout","ReturnType","setTimeout","rateBytesPerSecond","cleanup","off","onData","onEnd","onError","onAborted","clearTimeout","finish","error","body","concat","chunk","buffer","isBuffer","from","length","destroy","status","json","ok","push","now","Date","clientKey","getClientKey","state","getClientRateState","waitMs","consumeRateBudget","pause","resume","err","Error","on","ClientRateState","tokens","lastRefillMs","lastSeenMs","MAX_BURST_SECONDS","STALE_CLIENT_MS","clientRateStates","Map","lastCleanupMs","rawClientIp","clientIp","trim","rawIp","ip","maybeCleanupStates","size","key","delete","capacity","existing","get","Math","min","set","bytes","elapsedMs","max","ceil","Api","completeUpload","getStatus","initUpload","uploadChunk","rawBodyParser","getChunkSizeBytes","getMaxClientUploadBytesPerSecond","getRawBodyLimitBytes","SessionUser","Uploads","api","chunkSizeBytes","use","InitRoute","limitBytes","maxClientBytesPerSecond","post","put","ChunkRoute","get","StatusRoute","CompleteRoute"],"sources":["../src/uploads/api/file-uploads/processors/sanitizeSvg.ts","../src/uploads/api/file-uploads/processors/index.ts","../src/uploads/api/file-uploads/handlers/completeUpload.ts","../src/uploads/api/file-uploads/handlers/getStatus.ts","../src/uploads/api/file-uploads/index.ts","../src/uploads/api/file-uploads/handlers/initUpload.ts","../src/uploads/api/file-uploads/handlers/uploadChunk.ts","../src/uploads/api/file-uploads/middleware/rawBodyParser.ts","../src/uploads/api/file-uploads/handler.ts"],"sourcesContent":["import { JSDOM } from \"jsdom\"\nimport createDOMPurify from \"dompurify\"\n\nimport type { UploadFileProcessor } from \"./index\"\n\n\nconst MAX_SVG_BYTES = 128 * 1024\n\nconst window = new JSDOM(\"\").window\nconst DOMPurify = createDOMPurify(window)\n\nconst normalizeForSniff = (raw: string): string => raw.replace(/^\\uFEFF/, \"\").trimStart()\n\nconst looksLikeSvgText = (text: string): boolean => {\n  const normalized = normalizeForSniff(text)\n  if (!normalized.startsWith(\"<\")) return false\n  return /<svg(?:\\s|>)/i.test(normalized)\n}\n\nexport const looksLikeSvg = (sniff: Buffer): boolean => looksLikeSvgText(sniff.toString(\"utf8\"))\n\nexport const sanitizeSvg = (svg: string): string =>\n  DOMPurify.sanitize(svg, {\n    USE_PROFILES: { svg: true, svgFilters: true },\n  })\n\nexport const sanitizeSvgProcessor: UploadFileProcessor = {\n  id: \"sanitize-svg\",\n  maxBytes: MAX_SVG_BYTES,\n  match: ({ sniff }) => looksLikeSvg(sniff),\n  process: (data): { data: Buffer; mimeType: string } => {\n    if (data.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const svgText = data.toString(\"utf8\")\n    if (!looksLikeSvgText(svgText)) {\n      throw new Error(\"svg_invalid\")\n    }\n\n    const sanitized = sanitizeSvg(svgText)\n    if (!sanitized.trim() || !looksLikeSvgText(sanitized)) {\n      throw new Error(\"svg_sanitize_failed\")\n    }\n\n    const sanitizedBuffer = Buffer.from(sanitized, \"utf8\")\n    if (sanitizedBuffer.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    return { data: sanitizedBuffer, mimeType: \"image/svg+xml\" }\n  },\n}\n\n","import { convertHeifToWebpProcessor } from \"./convertHeifToWebp\"\nimport { sanitizeSvgProcessor } from \"./sanitizeSvg\"\n\n\nexport type UploadFileProcessorContext = {\n  filename: string\n  clientMimeType: string\n  totalSize: number\n  sniff: Buffer\n}\n\nexport type UploadFileProcessorResult = {\n  data: Buffer\n  filename?: string\n  mimeType?: string\n  metadata?: Record<string, unknown>\n}\n\nexport type UploadFileProcessor = {\n  id: string\n  maxBytes: number\n  match: (ctx: UploadFileProcessorContext) => boolean\n  process: (data: Buffer, ctx: UploadFileProcessorContext) => Promise<UploadFileProcessorResult> | UploadFileProcessorResult\n}\n\nexport const uploadProcessors = Object.freeze([sanitizeSvgProcessor, convertHeifToWebpProcessor] satisfies UploadFileProcessor[])\n\nexport const getMaxUploadProcessorBytes = (): number =>\n  uploadProcessors.reduce((max, processor) => Math.max(max, processor.maxBytes), 0)\n\nexport const selectUploadProcessors = (ctx: UploadFileProcessorContext): UploadFileProcessor[] =>\n  uploadProcessors.filter((processor) => processor.match(ctx))\n\nexport const applyUploadProcessors = async (\n  data: Buffer,\n  ctx: Omit<UploadFileProcessorContext, \"sniff\" | \"totalSize\">,\n): Promise<{ data: Buffer; filename: string; mimeType: string; applied: string[]; metadata: Record<string, unknown> }> => {\n  let currentData = data\n  let currentFilename = ctx.filename\n  let currentMimeType = ctx.clientMimeType\n  const applied: string[] = []\n  const metadata: Record<string, unknown> = {}\n\n  for (const processor of uploadProcessors) {\n    const processorCtx: UploadFileProcessorContext = {\n      filename: currentFilename,\n      clientMimeType: currentMimeType,\n      totalSize: currentData.length,\n      sniff: currentData,\n    }\n\n    if (!processor.match(processorCtx)) continue\n\n    if (currentData.length > processor.maxBytes) {\n      throw new Error(\"processor_input_too_large\")\n    }\n\n    const result = await processor.process(currentData, processorCtx)\n    currentData = result.data\n    if (typeof result.filename === \"string\" && result.filename.trim()) {\n      currentFilename = result.filename.trim()\n    }\n    if (typeof result.mimeType === \"string\" && result.mimeType.trim()) {\n      currentMimeType = result.mimeType.trim()\n    }\n    if (result.metadata && typeof result.metadata === \"object\") {\n      Object.assign(metadata, result.metadata)\n    }\n    applied.push(processor.id)\n  }\n\n  return {\n    data: currentData,\n    filename: currentFilename,\n    mimeType: currentMimeType,\n    applied,\n    metadata,\n  }\n}\n","import { createHash } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  claimUploadFileReference,\n  createUploadFileReference,\n} from \"../fileReferences\"\nimport { enqueueUploadPostProcessors } from \"../postProcessors\"\nimport { applyUploadProcessors, getMaxUploadProcessorBytes, selectUploadProcessors } from \"../processors\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadAccessMetadata,\n  buildUploadsAbility,\n  ensureFilesystemUploadIndexes,\n  ensureUploadIndexes,\n  getBucketName,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  resolveUploadAccessScope,\n} from \"../shared\"\n\n\nconst waitForStreamFinished = async (stream: NodeJS.WritableStream): Promise<void> => new Promise((resolve, reject) => {\n  stream.once(\"finish\", resolve)\n  stream.once(\"error\", reject)\n})\n\nconst writeToStream = async (stream: NodeJS.WritableStream, chunk: Buffer): Promise<void> => {\n  const ok = stream.write(chunk)\n  if (ok) return\n  await new Promise<void>((resolve, reject) => {\n    const onDrain = () => {\n      cleanup()\n      resolve()\n    }\n\n    const onError = (error: unknown) => {\n      cleanup()\n      reject(error)\n    }\n\n    const cleanup = () => {\n      stream.off(\"drain\", onDrain)\n      stream.off(\"error\", onError)\n    }\n\n    stream.on(\"drain\", onDrain)\n    stream.on(\"error\", onError)\n  })\n}\n\nconst abortUploadStream = async (stream: unknown): Promise<void> => {\n  if (!stream) return\n  if (typeof (stream as { abort?: unknown }).abort === \"function\") {\n    try {\n      await (stream as { abort: () => Promise<void> | void }).abort()\n      return\n    } catch {\n      //\n    }\n  }\n  try {\n    ;(stream as { destroy?: () => void }).destroy?.()\n  } catch {\n    //\n  }\n}\n\nconst isDuplicateKeyError = (error: unknown): boolean => (\n  error !== null &&\n  typeof error === \"object\" &&\n  \"code\" in error &&\n  (error as { code?: unknown }).code === 11000\n)\n\nexport const completeUpload: ApiHandler<Record<string, never>, Uploads.CompleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.CompleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const existing = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!existing) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (existing.status === \"done\" && existing.fileId) {\n    return {\n      ok: true,\n      fileId: existing.fileId,\n      ...(existing.deduplicated ? { deduplicated: true } : {}),\n    }\n  }\n\n  const locked = await UploadSession.findOneAndUpdate(\n    { $and: [{ _id: uploadId }, { status: \"uploading\" }, getUploadSessionAccessQuery(ability, \"update\")] },\n    { $set: { status: \"assembling\" }, $unset: { error: \"\" } },\n    { returnDocument: \"after\" },\n  ).lean()\n\n  if (!locked) {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: \"filesystem_db_unavailable\" } },\n    )\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n  if (locked.deduplication) {\n    await ensureFilesystemUploadIndexes(nativeDb, bucketName)\n  }\n\n  const lockedUserId = typeof locked.userId === \"string\" ? locked.userId : undefined\n  const accessMetadata = buildUploadAccessMetadata(locked)\n  const unclaimedDeduplication = locked.deduplication\n    ? {\n      deduplication: {\n        namespace: locked.deduplication.namespace,\n        algorithm: locked.deduplication.algorithm,\n        hash: locked.deduplication.hash,\n        pipelineVersion: locked.deduplication.pipelineVersion,\n      },\n    }\n    : {}\n  const createFileMetadata = (\n    storedMimeType: string,\n    storedSize: number,\n    additional: Record<string, unknown> = {},\n  ): Record<string, unknown> => ({\n    uploadId,\n    tenantId,\n    mimeType: storedMimeType,\n    totalSize: storedSize,\n    ...additional,\n    ...accessMetadata,\n    ...unclaimedDeduplication,\n  })\n  const maxProcessorBytes = getMaxUploadProcessorBytes()\n  const shouldBufferForProcessing = locked.totalSize <= maxProcessorBytes\n  const declaredMimeType = locked.mimeType.trim().toLowerCase()\n  const declaredSvg = declaredMimeType === \"image/svg+xml\" || locked.filename.trim().toLowerCase().endsWith(\".svg\")\n\n  let uploadStream: NodeJS.WritableStream | null = null\n  let finalFilename = locked.filename\n  let finalMimeType = locked.mimeType\n  let finalSize = locked.totalSize\n  let inlineProcessors: string[] = []\n  let finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n\n  try {\n    if (!shouldBufferForProcessing && declaredSvg) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const cursor = UploadChunk.find({ uploadId }).sort({ index: 1 }).cursor() as unknown as AsyncIterable<UploadChunkDoc> & {\n      close: () => Promise<void>\n    }\n\n    let expectedIndex = 0\n    let sourceBytes = 0\n    const sourceHasher = locked.deduplication ? createHash(\"sha256\") : null\n    const chunks: Buffer[] = []\n    let bufferedBytes = 0\n\n    const pendingChunks: Buffer[] = []\n    const sniffParts: Buffer[] = []\n    let sniffBytes = 0\n\n    try {\n      for await (const chunkDoc of cursor) {\n        if (chunkDoc.index !== expectedIndex) {\n          throw new Error(\"missing_chunks\")\n        }\n\n        const chunk = chunkDoc.data\n        sourceBytes += chunk.length\n        sourceHasher?.update(chunk)\n\n        if (shouldBufferForProcessing) {\n          chunks.push(chunk)\n          bufferedBytes += chunk.length\n        } else if (!uploadStream) {\n          pendingChunks.push(chunk)\n\n          if (sniffBytes < maxProcessorBytes) {\n            const slice = chunk.subarray(0, Math.min(chunk.length, maxProcessorBytes - sniffBytes))\n            if (slice.length) {\n              sniffParts.push(slice)\n              sniffBytes += slice.length\n            }\n          }\n\n          if (sniffBytes >= maxProcessorBytes) {\n            const sniff = Buffer.concat(sniffParts, sniffBytes)\n            const processors = selectUploadProcessors({\n              filename: locked.filename,\n              clientMimeType: locked.mimeType,\n              totalSize: locked.totalSize,\n              sniff,\n            })\n\n            if (processors.length) {\n              throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n            }\n\n            finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n            uploadStream = bucket.openUploadStream(locked.filename, {\n              metadata: finalMetadata,\n            })\n\n            for (const pending of pendingChunks) {\n              await writeToStream(uploadStream, pending)\n            }\n            pendingChunks.length = 0\n          }\n        } else {\n          await writeToStream(uploadStream, chunk)\n        }\n\n        expectedIndex += 1\n      }\n    } finally {\n      try {\n        await cursor.close()\n      } catch {\n        //\n      }\n    }\n\n    if (expectedIndex !== locked.chunksTotal) {\n      throw new Error(\"missing_chunks\")\n    }\n\n    if (sourceBytes !== locked.totalSize) {\n      throw new Error(\"invalid_source_size\")\n    }\n\n    if (sourceHasher && sourceHasher.digest(\"hex\") !== locked.deduplication?.hash) {\n      throw new Error(\"content_hash_mismatch\")\n    }\n\n    if (shouldBufferForProcessing) {\n      const assembled = Buffer.concat(chunks, bufferedBytes)\n      const {\n        data: processed,\n        filename: processedFilename,\n        mimeType: processedMimeType,\n        applied,\n        metadata: processedMetadata,\n      } = await applyUploadProcessors(assembled, {\n        filename: locked.filename,\n        clientMimeType: locked.mimeType,\n      })\n\n      finalFilename = processedFilename\n      finalMimeType = processedMimeType\n      finalSize = processed.length\n      inlineProcessors = applied\n      finalMetadata = createFileMetadata(processedMimeType, processed.length, {\n        ...(applied.length ? { processors: applied, sourceTotalSize: locked.totalSize } : {}),\n        ...processedMetadata,\n      })\n      uploadStream = bucket.openUploadStream(finalFilename, {\n        metadata: finalMetadata,\n      })\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end(processed)\n      await finished\n    } else {\n      if (!uploadStream) {\n        const sniff = Buffer.concat(sniffParts, sniffBytes)\n        const processors = selectUploadProcessors({\n          filename: locked.filename,\n          clientMimeType: locked.mimeType,\n          totalSize: locked.totalSize,\n          sniff,\n        })\n\n        if (processors.length) {\n          throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n        }\n\n        finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n        uploadStream = bucket.openUploadStream(locked.filename, {\n          metadata: finalMetadata,\n        })\n\n        for (const pending of pendingChunks) {\n          await writeToStream(uploadStream, pending)\n        }\n        pendingChunks.length = 0\n      }\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end()\n      await finished\n    }\n\n    const uploadedBlobId = String((uploadStream as unknown as { id?: unknown }).id ?? \"\")\n    if (!uploadedBlobId) {\n      throw new Error(\"missing_file_id\")\n    }\n\n    let resolvedBlobId = uploadedBlobId\n    let deduplicated = false\n    let returnedFileId: string | null = locked.deduplication ? null : uploadedBlobId\n\n    if (locked.deduplication) {\n      const filesCollection = nativeDb.collection(`${bucketName}.files`)\n      const uploadedBlobObjectId = new ObjectId(uploadedBlobId)\n      const referenceOptions = {\n        tenantId,\n        bucketName,\n        filename: finalFilename,\n        mimeType: finalMimeType,\n        totalSize: finalSize,\n        accessScope: resolveUploadAccessScope({\n          accessScope: locked.accessScope,\n          isPublic: locked.isPublic,\n        }),\n        ...(lockedUserId ? { userId: lockedUserId } : {}),\n        ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n      }\n      let lastDuplicateKeyError: unknown = null\n\n      for (let attempt = 0; attempt < 3 && !returnedFileId; attempt += 1) {\n        try {\n          returnedFileId = await claimUploadFileReference({\n            ...referenceOptions,\n            blobId: uploadedBlobObjectId,\n            deduplication: locked.deduplication,\n          })\n          if (!returnedFileId) throw new Error(\"missing_file_id\")\n          finalMetadata = {\n            ...finalMetadata,\n            deduplication: locked.deduplication,\n          }\n          break\n        } catch (error) {\n          if (!isDuplicateKeyError(error)) throw error\n          lastDuplicateKeyError = error\n        }\n\n        const canonicalFile = await filesCollection.findOne(\n          { \"metadata.deduplication.key\": locked.deduplication.key },\n          { projection: { _id: 1 } },\n        )\n        if (!(canonicalFile?._id instanceof ObjectId)) continue\n\n        const canonicalReferenceId = await createUploadFileReference({\n          ...referenceOptions,\n          blobId: canonicalFile._id,\n          deduplicationKey: locked.deduplication.key,\n        })\n        if (!canonicalReferenceId) continue\n\n        await bucket.delete(uploadedBlobObjectId)\n        resolvedBlobId = canonicalFile._id.toHexString()\n        returnedFileId = canonicalReferenceId\n        deduplicated = true\n      }\n\n      if (!returnedFileId) {\n        await bucket.delete(uploadedBlobObjectId)\n        if (lastDuplicateKeyError) throw lastDuplicateKeyError\n      }\n    }\n    if (!returnedFileId) {\n      throw new Error(\"canonical_file_missing\")\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      {\n        $set: {\n          status: \"done\",\n          fileId: returnedFileId,\n          filename: finalFilename,\n          mimeType: finalMimeType,\n          totalSize: finalSize,\n          ...(deduplicated ? { deduplicated: true } : {}),\n        },\n        $unset: { error: \"\" },\n      },\n    )\n\n    if (!deduplicated) {\n      await enqueueUploadPostProcessors({\n        tenantId,\n        uploadId,\n        fileId: resolvedBlobId,\n        filename: finalFilename,\n        mimeType: finalMimeType,\n        clientMimeType: locked.mimeType,\n        totalSize: finalSize,\n        ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n        ...(locked.accessScope ? { accessScope: locked.accessScope } : {}),\n        ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n        ...(lockedUserId ? { userId: lockedUserId } : {}),\n        inlineProcessors,\n        metadata: finalMetadata,\n      }).catch((error) => {\n        console.error(\"Upload post processor enqueue failed\", {\n          tenantId,\n          uploadId,\n          fileId: resolvedBlobId,\n          error,\n        })\n      })\n    }\n\n    try {\n      await UploadChunk.deleteMany({ uploadId })\n    } catch {\n      //\n    }\n\n    return {\n      ok: true,\n      fileId: returnedFileId,\n      ...(deduplicated ? { deduplicated: true } : {}),\n    }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n\n    await abortUploadStream(uploadStream)\n\n    if (message === \"missing_chunks\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"uploading\" } },\n      )\n      ctx.res.status(409)\n      return { ok: false, error: \"missing_chunks\" }\n    }\n\n    if (message === \"content_hash_mismatch\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"heif_too_large\" || message === \"processor_input_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message.startsWith(\"heif_decode_unsupported\")) {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(415)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_invalid\" || message === \"svg_sanitize_failed\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: message } },\n    )\n\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nexport const getStatus: ApiHandler<Record<string, never>, Uploads.StatusResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.StatusResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"read\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  const receivedDocs = await UploadChunk.find(\n    { uploadId },\n    { index: 1, _id: 0 },\n  ).sort({ index: 1 }).lean()\n\n  const received = (receivedDocs as unknown as Array<{ index?: unknown }>)\n    .map((doc) => (typeof doc.index === \"number\" ? doc.index : -1))\n    .filter((n) => Number.isInteger(n) && n >= 0)\n\n  return {\n    ok: true,\n    status: session.status,\n    chunkSize: session.chunkSize,\n    chunksTotal: session.chunksTotal,\n    received,\n    ...(session.fileId ? { fileId: session.fileId } : {}),\n  }\n}\n","import { z } from \"zod\"\n\n\nexport const InitRoute = \"/api/rb/file-uploads\"\nexport const ChunkRoute = \"/api/rb/file-uploads/:uploadId/chunks/:index\"\nexport const StatusRoute = \"/api/rb/file-uploads/:uploadId/status\"\nexport const CompleteRoute = \"/api/rb/file-uploads/:uploadId/complete\"\n\nexport const uploadAccessScopeSchema = z.enum([\"owner\", \"tenant\", \"public\"])\n\nexport const uploadDeduplicationSchema = z.object({\n  namespace: z.string().trim().min(1).max(128).regex(/^[a-z0-9][a-z0-9._:-]*$/i),\n  algorithm: z.literal(\"sha256\"),\n  hash: z.string().trim().regex(/^[a-f0-9]{64}$/i),\n})\n\nexport const initRequestSchema = z.object({\n  filename: z.string().min(1),\n  mimeType: z.string().min(1),\n  isPublic: z.boolean().optional(),\n  accessScope: uploadAccessScopeSchema.optional(),\n  deduplication: uploadDeduplicationSchema.optional(),\n  totalSize: z.number().int().min(1),\n}).superRefine((value, ctx) => {\n  if (value.accessScope !== undefined && value.isPublic !== undefined) {\n    ctx.addIssue({\n      code: \"custom\",\n      message: \"accessScope and isPublic are mutually exclusive\",\n      path: [\"accessScope\"],\n    })\n  }\n})\n\nexport type InitRequestPayload = z.infer<typeof initRequestSchema>\n\nexport const initResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  uploadId: z.string().optional(),\n  uploadKey: z.string().optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  fileId: z.string().optional(),\n  deduplicated: z.boolean().optional(),\n})\n\nexport type InitResponsePayload = z.infer<typeof initResponseSchema>\n\nexport const statusResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  status: z.enum([\"uploading\", \"assembling\", \"done\", \"error\"]).optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  received: z.array(z.number().int().min(0)).optional(),\n  fileId: z.string().optional(),\n})\n\nexport type StatusResponsePayload = z.infer<typeof statusResponseSchema>\n\nexport const completeResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  fileId: z.string().optional(),\n  deduplicated: z.boolean().optional(),\n})\n\nexport type CompleteResponsePayload = z.infer<typeof completeResponseSchema>\n","import { randomBytes } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport { createUploadFileReference } from \"../fileReferences\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadDeduplication,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureFilesystemUploadIndexes,\n  ensureUploadIndexes,\n  getBucketName,\n  getChunkSizeBytes,\n  getModelCtx,\n  getSessionTtlMs,\n  getTenantId,\n  getUserId,\n  resolveUploadAccessScope,\n} from \"../shared\"\n\n\nexport const initUpload: ApiHandler<Uploads.InitRequestPayload, Uploads.InitResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<Uploads.InitResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const userId = getUserId(ctx)\n\n  const parsed = Uploads.initRequestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { filename, mimeType, totalSize, isPublic, deduplication: requestedDeduplication } = parsed.data\n  const accessScope = resolveUploadAccessScope({ accessScope: parsed.data.accessScope, isPublic })\n  if (accessScope === \"tenant\" && !userId) {\n    ctx.res.status(401)\n    return { ok: false, error: \"authentication_required\" }\n  }\n\n  const uploadKey = userId ? null : randomBytes(32).toString(\"base64url\")\n  const ownerKeyHash = uploadKey ? computeSha256Hex(Buffer.from(uploadKey)) : undefined\n  const deduplication = requestedDeduplication\n    ? buildUploadDeduplication({\n      namespace: requestedDeduplication.namespace,\n      hash: requestedDeduplication.hash,\n      filename,\n      mimeType,\n      totalSize,\n      accessScope,\n      ...(userId ? { userId } : {}),\n      ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    })\n    : null\n\n  if (requestedDeduplication && !deduplication) {\n    ctx.res.status(400)\n    return { ok: false, error: \"deduplication_unavailable\" }\n  }\n\n  if (deduplication) {\n    const fsDb = await getTenantFilesystemDb(tenantId)\n    const nativeDb = fsDb.db\n    if (!nativeDb) {\n      ctx.res.status(500)\n      return { ok: false, error: \"filesystem_db_unavailable\" }\n    }\n\n    const bucketName = getBucketName()\n    await ensureFilesystemUploadIndexes(nativeDb, bucketName)\n    const existingFile = await nativeDb.collection(`${bucketName}.files`).findOne(\n      { \"metadata.deduplication.key\": deduplication.key },\n      { projection: { _id: 1, filename: 1, length: 1, metadata: 1 } },\n    )\n    if (existingFile?._id instanceof ObjectId) {\n      const existingMetadata = existingFile.metadata && typeof existingFile.metadata === \"object\"\n        ? existingFile.metadata as Record<string, unknown>\n        : {}\n      const existingMimeType = typeof existingMetadata.mimeType === \"string\"\n        ? existingMetadata.mimeType\n        : mimeType\n      const existingSize = typeof existingFile.length === \"number\"\n        ? existingFile.length\n        : totalSize\n      const fileId = await createUploadFileReference({\n        tenantId,\n        bucketName,\n        blobId: existingFile._id,\n        filename,\n        mimeType: existingMimeType,\n        totalSize: existingSize,\n        accessScope,\n        ...(userId ? { userId } : {}),\n        ...(ownerKeyHash ? { ownerKeyHash } : {}),\n        deduplicationKey: deduplication.key,\n      })\n      if (fileId) {\n        return {\n          ok: true,\n          fileId,\n          deduplicated: true,\n          ...(uploadKey ? { uploadKey } : {}),\n        }\n      }\n    }\n  }\n\n  const chunkSize = getChunkSizeBytes()\n  const chunksTotal = Math.ceil(totalSize / chunkSize)\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  const uploadId = new ObjectId().toString()\n  const now = Date.now()\n  const expiresAt = new Date(now + getSessionTtlMs())\n\n  await UploadSession.create({\n    _id: uploadId,\n    ...(userId ? { userId } : {}),\n    ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    filename,\n    mimeType,\n    isPublic: accessScope === \"public\",\n    accessScope,\n    ...(deduplication ? { deduplication } : {}),\n    totalSize,\n    chunkSize,\n    chunksTotal,\n    status: \"uploading\",\n    createdAt: new Date(now),\n    expiresAt,\n  })\n\n  return {\n    ok: true,\n    uploadId,\n    chunkSize,\n    chunksTotal,\n    ...(uploadKey ? { uploadKey } : {}),\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  normalizeSha256Hex,\n  toBufferPayload,\n} from \"../shared\"\n\n\ntype ChunkResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nexport const uploadChunk: ApiHandler<Buffer, ChunkResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<ChunkResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  const indexRaw = String(ctx.req.params?.index ?? \"\").trim()\n  const index = Number(indexRaw)\n\n  if (!uploadId || !Number.isInteger(index) || index < 0) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_ref\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (session.status !== \"uploading\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  if (index >= session.chunksTotal) {\n    ctx.res.status(400)\n    return { ok: false, error: \"index_out_of_range\" }\n  }\n\n  const data = toBufferPayload(payload)\n  if (!data) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_body\" }\n  }\n\n  const expectedSize = index === session.chunksTotal - 1\n    ? session.totalSize - session.chunkSize * (session.chunksTotal - 1)\n    : session.chunkSize\n\n  if (data.length > expectedSize) {\n    ctx.res.status(413)\n    return { ok: false, error: \"chunk_too_large\" }\n  }\n\n  if (data.length !== expectedSize) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_size\" }\n  }\n\n  const checksumHeader = ctx.req.get(\"X-Chunk-SHA256\")\n  const sha256 = checksumHeader ? computeSha256Hex(data) : undefined\n\n  if (checksumHeader) {\n    const expectedSha256 = normalizeSha256Hex(checksumHeader)\n    if (sha256 !== expectedSha256) {\n      ctx.res.status(400)\n      return { ok: false, error: \"checksum_mismatch\" }\n    }\n  }\n\n  await ensureUploadIndexes(UploadSession, UploadChunk)\n\n  await UploadChunk.updateOne(\n    { uploadId, index },\n    {\n      $set: {\n        uploadId,\n        index,\n        data,\n        size: data.length,\n        sha256,\n        expiresAt: session.expiresAt,\n      },\n      $setOnInsert: {\n        createdAt: new Date(),\n      },\n    },\n    { upsert: true },\n  )\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","export const rawBodyParser = ({\n  limitBytes,\n  maxClientBytesPerSecond,\n}: {\n  limitBytes: number\n  maxClientBytesPerSecond?: number | null\n}) => {\n  return (req: any, res: any, next: any) => {\n    const contentType = typeof req?.headers?.[\"content-type\"] === \"string\"\n      ? String(req.headers[\"content-type\"])\n      : \"\"\n\n    if (!contentType.includes(\"application/octet-stream\")) {\n      next()\n      return\n    }\n\n    let total = 0\n    const chunks: Buffer[] = []\n    let done = false\n    let paused = false\n    let throttleTimeout: ReturnType<typeof setTimeout> | null = null\n\n    const rateBytesPerSecond = typeof maxClientBytesPerSecond === \"number\" && maxClientBytesPerSecond > 0\n      ? maxClientBytesPerSecond\n      : null\n\n    const cleanup = () => {\n      req.off(\"data\", onData)\n      req.off(\"end\", onEnd)\n      req.off(\"error\", onError)\n      req.off(\"aborted\", onAborted)\n      if (throttleTimeout) {\n        clearTimeout(throttleTimeout)\n        throttleTimeout = null\n      }\n    }\n\n    const finish = (error?: unknown) => {\n      if (done) return\n      done = true\n\n      cleanup()\n\n      if (error) {\n        next(error)\n        return\n      }\n\n      req.body = Buffer.concat(chunks, total)\n      next()\n    }\n\n    const onData = (chunk: any) => {\n      if (done) return\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n      total += buffer.length\n\n      if (total > limitBytes) {\n        done = true\n        cleanup()\n        req.destroy()\n        res.status(413).json({ ok: false, error: \"chunk_too_large\" })\n        return\n      }\n\n      chunks.push(buffer)\n\n      if (!rateBytesPerSecond) return\n\n      const now = Date.now()\n      const clientKey = getClientKey(req)\n      const state = getClientRateState(clientKey, rateBytesPerSecond, now)\n      const waitMs = consumeRateBudget(state, buffer.length, rateBytesPerSecond, now)\n\n      if (waitMs > 0 && !paused) {\n        paused = true\n        req.pause()\n        throttleTimeout = setTimeout(() => {\n          throttleTimeout = null\n          paused = false\n          if (done) return\n          try {\n            req.resume()\n          } catch {\n            //\n          }\n        }, waitMs)\n      }\n    }\n\n    const onEnd = () => finish()\n    const onError = (err: unknown) => finish(err)\n    const onAborted = () => finish(new Error(\"request_aborted\"))\n\n    req.on(\"data\", onData)\n    req.on(\"end\", onEnd)\n    req.on(\"error\", onError)\n    req.on(\"aborted\", onAborted)\n  }\n}\n\ntype ClientRateState = {\n  tokens: number\n  lastRefillMs: number\n  lastSeenMs: number\n}\n\nconst MAX_BURST_SECONDS = 1\nconst STALE_CLIENT_MS = 15 * 60 * 1000\n\nconst clientRateStates = new Map<string, ClientRateState>()\nlet lastCleanupMs = 0\n\nconst getClientKey = (req: any): string => {\n  const rawClientIp = typeof req?.clientIp === \"string\" ? req.clientIp : \"\"\n  if (rawClientIp.trim()) return rawClientIp.trim()\n  const rawIp = typeof req?.ip === \"string\" ? req.ip : \"\"\n  return rawIp.trim() || \"unknown\"\n}\n\nconst maybeCleanupStates = (now: number) => {\n  if (now - lastCleanupMs < 60_000) return\n  lastCleanupMs = now\n\n  if (clientRateStates.size < 2000) return\n\n  for (const [key, state] of clientRateStates) {\n    if (now - state.lastSeenMs > STALE_CLIENT_MS) {\n      clientRateStates.delete(key)\n    }\n  }\n}\n\nconst getClientRateState = (key: string, rateBytesPerSecond: number, now: number): ClientRateState => {\n  maybeCleanupStates(now)\n\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const existing = clientRateStates.get(key)\n  if (existing) {\n    existing.lastSeenMs = now\n    existing.tokens = Math.min(capacity, existing.tokens)\n    return existing\n  }\n\n  const next: ClientRateState = {\n    tokens: capacity,\n    lastRefillMs: now,\n    lastSeenMs: now,\n  }\n  clientRateStates.set(key, next)\n  return next\n}\n\nconst consumeRateBudget = (\n  state: ClientRateState,\n  bytes: number,\n  rateBytesPerSecond: number,\n  now: number,\n): number => {\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const elapsedMs = Math.max(0, now - state.lastRefillMs)\n\n  if (elapsedMs > 0) {\n    state.tokens = Math.min(capacity, state.tokens + (elapsedMs * rateBytesPerSecond) / 1000)\n    state.lastRefillMs = now\n  }\n\n  state.tokens -= bytes\n\n  if (state.tokens >= 0) return 0\n  return Math.ceil((-state.tokens / rateBytesPerSecond) * 1000)\n}\n","import { Api } from \"@rpcbase/api\"\n\nimport { completeUpload } from \"./handlers/completeUpload\"\nimport { getStatus } from \"./handlers/getStatus\"\nimport { initUpload } from \"./handlers/initUpload\"\nimport { uploadChunk } from \"./handlers/uploadChunk\"\nimport { rawBodyParser } from \"./middleware/rawBodyParser\"\nimport { getChunkSizeBytes, getMaxClientUploadBytesPerSecond, getRawBodyLimitBytes, type SessionUser } from \"./shared\"\n\nimport * as Uploads from \"./index\"\n\n\nexport default (api: Api<SessionUser>) => {\n  const chunkSizeBytes = getChunkSizeBytes()\n  api.use(\n    Uploads.InitRoute,\n    rawBodyParser({\n      limitBytes: getRawBodyLimitBytes(chunkSizeBytes),\n      maxClientBytesPerSecond: getMaxClientUploadBytesPerSecond(),\n    }),\n  )\n\n  api.post(Uploads.InitRoute, initUpload)\n  api.put(Uploads.ChunkRoute, uploadChunk)\n  api.get(Uploads.StatusRoute, getStatus)\n  api.post(Uploads.CompleteRoute, completeUpload)\n}\n"],"mappings":";;;;;;;;;;;AAMA,IAAMG,gBAAgB,MAAM;AAE5B,IAAMC,SAAS,IAAIJ,MAAM,EAAE,CAAC,CAACI;AAC7B,IAAMC,YAAYJ,gBAAgBG,MAAM;AAExC,IAAME,qBAAqBC,QAAwBA,IAAIC,QAAQ,WAAW,EAAE,CAAC,CAACC,UAAU;AAExF,IAAMC,oBAAoBC,SAA0B;CAClD,MAAMC,aAAaN,kBAAkBK,IAAI;CACzC,IAAI,CAACC,WAAWC,WAAW,GAAG,GAAG,OAAO;CACxC,OAAO,gBAAgBC,KAAKF,UAAU;AACxC;AAEA,IAAaG,gBAAgBC,UAA2BN,iBAAiBM,MAAME,SAAS,MAAM,CAAC;AAE/F,IAAaC,eAAeC,QAC1Bf,UAAUgB,SAASD,KAAK,EACtBE,cAAc;CAAEF,KAAK;CAAMG,YAAY;AAAK,EAC9C,CAAC;;;ACCH,IAAamC,mBAAmBC,OAAOC,OAAO,CAACrB;CDE7Cd,IAAI;CACJC,UAAUvB;CACVwB,QAAQ,EAAEX,YAAYD,aAAaC,KAAK;CACxCY,UAAUC,SAA6C;EACrD,IAAIA,KAAKE,SAAS5B,eAChB,MAAM,IAAI6B,MAAM,eAAe;EAGjC,MAAMC,UAAUJ,KAAKX,SAAS,MAAM;EACpC,IAAI,CAACR,iBAAiBuB,OAAO,GAC3B,MAAM,IAAID,MAAM,aAAa;EAG/B,MAAME,YAAYf,YAAYc,OAAO;EACrC,IAAI,CAACC,UAAUC,KAAK,KAAK,CAACzB,iBAAiBwB,SAAS,GAClD,MAAM,IAAIF,MAAM,qBAAqB;EAGvC,MAAMI,kBAAkBnB,OAAOoB,KAAKH,WAAW,MAAM;EACrD,IAAIE,gBAAgBL,SAAS5B,eAC3B,MAAM,IAAI6B,MAAM,eAAe;EAGjC,OAAO;GAAEH,MAAMO;GAAiBN,UAAU;EAAgB;CAC5D;AC1B6CS,GAAsBD,0BAA0B,CAAiC;AAEhI,IAAauB,mCACXH,iBAAiBI,QAAQC,KAAKC,cAAcC,KAAKF,IAAIA,KAAKC,UAAUX,QAAQ,GAAG,CAAC;AAElF,IAAaa,0BAA0BX,QACrCG,iBAAiBS,QAAQH,cAAcA,UAAUV,MAAMC,GAAG,CAAC;AAE7D,IAAaa,wBAAwB,OACnCrB,MACAQ,QACwH;CACxH,IAAIgB,cAAcxB;CAClB,IAAIyB,kBAAkBjB,IAAId;CAC1B,IAAIgC,kBAAkBlB,IAAIb;CAC1B,MAAM4B,UAAoB,CAAA;CAC1B,MAAMrB,WAAoC,CAAC;CAE3C,KAAK,MAAMe,aAAaN,kBAAkB;EACxC,MAAMgB,eAA2C;GAC/CjC,UAAU+B;GACV9B,gBAAgB+B;GAChB9B,WAAW4B,YAAYI;GACvB/B,OAAO2B;EACT;EAEA,IAAI,CAACP,UAAUV,MAAMoB,YAAY,GAAG;EAEpC,IAAIH,YAAYI,SAASX,UAAUX,UACjC,MAAM,IAAIuB,MAAM,2BAA2B;EAG7C,MAAMC,SAAS,MAAMb,UAAUR,QAAQe,aAAaG,YAAY;EAChEH,cAAcM,OAAO9B;EACrB,IAAI,OAAO8B,OAAOpC,aAAa,YAAYoC,OAAOpC,SAASqC,KAAK,GAC9DN,kBAAkBK,OAAOpC,SAASqC,KAAK;EAEzC,IAAI,OAAOD,OAAO7B,aAAa,YAAY6B,OAAO7B,SAAS8B,KAAK,GAC9DL,kBAAkBI,OAAO7B,SAAS8B,KAAK;EAEzC,IAAID,OAAO5B,YAAY,OAAO4B,OAAO5B,aAAa,UAChDU,OAAOoB,OAAO9B,UAAU4B,OAAO5B,QAAQ;EAEzCqB,QAAQU,KAAKhB,UAAUZ,EAAE;CAC3B;CAEA,OAAO;EACLL,MAAMwB;EACN9B,UAAU+B;EACVxB,UAAUyB;EACVH;EACArB;CACF;AACF;;;AChDA,IAAM0D,wBAAwB,OAAOC,WAAiD,IAAIG,SAASC,SAASC,WAAW;CACrHL,OAAOM,KAAK,UAAUF,OAAO;CAC7BJ,OAAOM,KAAK,SAASD,MAAM;AAC7B,CAAC;AAED,IAAME,gBAAgB,OAAOP,QAA+BQ,UAAiC;CAE3F,IADWR,OAAOW,MAAMH,KACpBE,GAAI;CACR,MAAM,IAAIP,SAAeC,SAASC,WAAW;EAC3C,MAAMO,gBAAgB;GACpBC,QAAQ;GACRT,QAAQ;EACV;EAEA,MAAMU,WAAWC,UAAmB;GAClCF,QAAQ;GACRR,OAAOU,KAAK;EACd;EAEA,MAAMF,gBAAgB;GACpBb,OAAOgB,IAAI,SAASJ,OAAO;GAC3BZ,OAAOgB,IAAI,SAASF,OAAO;EAC7B;EAEAd,OAAOiB,GAAG,SAASL,OAAO;EAC1BZ,OAAOiB,GAAG,SAASH,OAAO;CAC5B,CAAC;AACH;AAEA,IAAMI,oBAAoB,OAAOlB,WAAmC;CAClE,IAAI,CAACA,QAAQ;CACb,IAAI,OAAQA,OAA+BmB,UAAU,YACnD,IAAI;EACF,MAAOnB,OAAiDmB,MAAM;EAC9D;CACF,QAAQ,CACN;CAGJ,IAAI;EACD,OAAqCC,UAAU;CAClD,QAAQ,CACN;AAEJ;AAEA,IAAMC,uBAAuBN,UAC3BA,UAAU,QACV,OAAOA,UAAU,YACjB,UAAUA,SACTA,MAA6BO,SAAS;AAGzC,IAAaC,iBAAkG,OAC7GG,UACAC,QAC6C;CAC7C,MAAMC,WAAW/B,YAAY8B,GAAG;CAChC,IAAI,CAACC,UAAU;EACbD,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAiB;CAC9C;CAEA,MAAMgB,WAAWC,OAAOL,IAAIM,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,IAAI,CAACJ,UAAU;EACbJ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAoB;CACjD;CAEA,MAAMqB,UAAU7C,oBAAoBoC,KAAKC,QAAQ;CACjD,MAAMS,WAAW1C,YAAYgC,KAAKC,UAAUQ,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMpC,QAAQqC,IAAI,CACrDhE,OAAOiE,IAAI,mBAAmBJ,QAAQ,GACtC7D,OAAOiE,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,UAAU,iBAAiB,GAAG;EAC7Cf,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAe;CAC5C;CAEA,MAAM4B,WAAW,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,MAAM,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAC/H,IAAI,CAACJ,UAAU;EACbhB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAY;CACzC;CAEA,IAAI4B,SAASb,WAAW,UAAUa,SAASK,QACzC,OAAO;EACLtC,IAAI;EACJsC,QAAQL,SAASK;EACjB,GAAIL,SAASM,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;CACxD;CAGF,MAAMC,SAAS,MAAMZ,cAAca,iBACjC,EAAEN,MAAM;EAAC,EAAEC,KAAKf,SAAS;EAAG,EAAED,QAAQ,YAAY;EAAGlC,4BAA4BwC,SAAS,QAAQ;CAAC,EAAE,GACrG;EAAEgB,MAAM,EAAEtB,QAAQ,aAAa;EAAGuB,QAAQ,EAAEtC,OAAO,GAAG;CAAE,GACxD,EAAEuC,gBAAgB,QAAQ,CAC5B,CAAC,CAACP,KAAK;CAEP,IAAI,CAACG,QAAQ;EACXvB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAgB;CAC7C;CAEA,MAAMtB,oBAAoB6C,eAAeC,WAAW;CAGpD,MAAMiB,YAAWD,MADEhF,sBAAsBqD,QAAQ,EAAA,CAC3B6B;CACtB,IAAI,CAACD,UAAU;EACb,MAAMlB,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;GAAEtB,QAAQ;GAASf,OAAO;EAA4B,EAAE,CAClE;EACAY,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAkB;CAC/C;CACA,MAAM4C,aAAajE,cAAc;CACjC,MAAMkE,SAAS,IAAInF,aAAa+E,UAAU,EAAEG,WAAW,CAAC;CACxD,IAAIT,OAAOW,eACT,MAAMrE,8BAA8BgE,UAAUG,UAAU;CAG1D,MAAMG,eAAe,OAAOZ,OAAOa,WAAW,WAAWb,OAAOa,SAASC,KAAAA;CACzE,MAAMC,iBAAiB3E,0BAA0B4D,MAAM;CACvD,MAAMgB,yBAAyBhB,OAAOW,gBAClC,EACAA,eAAe;EACbM,WAAWjB,OAAOW,cAAcM;EAChCC,WAAWlB,OAAOW,cAAcO;EAChCC,MAAMnB,OAAOW,cAAcQ;EAC3BC,iBAAiBpB,OAAOW,cAAcS;CACxC,EACF,IACE,CAAC;CACL,MAAMC,sBACJC,gBACAC,YACAC,aAAsC,CAAC,OACV;EAC7B3C;EACAH;EACA+C,UAAUH;EACVI,WAAWH;EACX,GAAGC;EACH,GAAGT;EACH,GAAGC;CACL;CACA,MAAMW,oBAAoB5F,2BAA2B;CACrD,MAAM6F,4BAA4B5B,OAAO0B,aAAaC;CAEtD,MAAMI,cADmB/B,OAAOyB,SAASxC,KAAK,CAAC,CAAC6C,YAC5BD,MAAqB,mBAAmB7B,OAAOgC,SAAS/C,KAAK,CAAC,CAAC6C,YAAY,CAAC,CAACG,SAAS,MAAM;CAEhH,IAAIC,eAA6C;CACjD,IAAIC,gBAAgBnC,OAAOgC;CAC3B,IAAII,gBAAgBpC,OAAOyB;CAC3B,IAAIY,YAAYrC,OAAO0B;CACvB,IAAIY,mBAA6B,CAAA;CACjC,IAAIC,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;CAExE,IAAI;EACF,IAAI,CAACE,6BAA6BG,aAChC,MAAM,IAAIS,MAAM,eAAe;EAGjC,MAAMC,SAASpD,YAAYqD,KAAK,EAAE7D,SAAS,CAAC,CAAC,CAAC8D,KAAK,EAAEC,OAAO,EAAE,CAAC,CAAC,CAACH,OAAO;EAIxE,IAAIM,gBAAgB;EACpB,IAAIC,cAAc;EAClB,MAAMC,eAAejD,OAAOW,gBAAgBxF,WAAW,QAAQ,IAAI;EACnE,MAAM+H,SAAmB,CAAA;EACzB,IAAIC,gBAAgB;EAEpB,MAAMC,gBAA0B,CAAA;EAChC,MAAMC,aAAuB,CAAA;EAC7B,IAAIC,aAAa;EAEjB,IAAI;GACF,WAAW,MAAMC,YAAYd,QAAQ;IACnC,IAAIc,SAASX,UAAUG,eACrB,MAAM,IAAIP,MAAM,gBAAgB;IAGlC,MAAMlF,QAAQiG,SAASC;IACvBR,eAAe1F,MAAMmG;IACrBR,cAAcS,OAAOpG,KAAK;IAE1B,IAAIsE,2BAA2B;KAC7BsB,OAAOS,KAAKrG,KAAK;KACjB6F,iBAAiB7F,MAAMmG;IACzB,OAAO,IAAI,CAACvB,cAAc;KACxBkB,cAAcO,KAAKrG,KAAK;KAExB,IAAIgG,aAAa3B,mBAAmB;MAClC,MAAMiC,QAAQtG,MAAMuG,SAAS,GAAGC,KAAKC,IAAIzG,MAAMmG,QAAQ9B,oBAAoB2B,UAAU,CAAC;MACtF,IAAIM,MAAMH,QAAQ;OAChBJ,WAAWM,KAAKC,KAAK;OACrBN,cAAcM,MAAMH;MACtB;KACF;KAEA,IAAIH,cAAc3B,mBAAmB;MACnC,MAAMqC,QAAQzG,OAAO0G,OAAOZ,YAAYC,UAAU;MAClD,MAAMY,aAAalI,uBAAuB;OACxCgG,UAAUhC,OAAOgC;OACjBmC,gBAAgBnE,OAAOyB;OACvBC,WAAW1B,OAAO0B;OAClBsC;MACF,CAAC;MAED,IAAIE,WAAWT,QACb,MAAM,IAAIjB,MAAM0B,WAAWE,MAAMC,cAAcA,UAAUC,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;MAGjI/B,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;MACpEQ,eAAexB,OAAO6D,iBAAiBvE,OAAOgC,UAAU,EACtDwC,UAAUjC,cACZ,CAAC;MAED,KAAK,MAAMkC,WAAWrB,eACpB,MAAM/F,cAAc6E,cAAcuC,OAAO;MAE3CrB,cAAcK,SAAS;KACzB;IACF,OACE,MAAMpG,cAAc6E,cAAc5E,KAAK;IAGzCyF,iBAAiB;GACnB;EACF,UAAU;GACR,IAAI;IACF,MAAMN,OAAOK,MAAM;GACrB,QAAQ,CACN;EAEJ;EAEA,IAAIC,kBAAkB/C,OAAO0E,aAC3B,MAAM,IAAIlC,MAAM,gBAAgB;EAGlC,IAAIQ,gBAAgBhD,OAAO0B,WACzB,MAAM,IAAIc,MAAM,qBAAqB;EAGvC,IAAIS,gBAAgBA,aAAa0B,OAAO,KAAK,MAAM3E,OAAOW,eAAeQ,MACvE,MAAM,IAAIqB,MAAM,uBAAuB;EAGzC,IAAIZ,2BAA2B;GAE7B,MAAM,EACJ4B,MAAMqB,WACN7C,UAAU8C,mBACVrD,UAAUsD,mBACVC,SACAR,UAAUS,sBACR,MAAMnJ,sBAPQyB,OAAO0G,OAAOf,QAAQC,aAORyB,GAAW;IACzC5C,UAAUhC,OAAOgC;IACjBmC,gBAAgBnE,OAAOyB;GACzB,CAAC;GAEDU,gBAAgB2C;GAChB1C,gBAAgB2C;GAChB1C,YAAYwC,UAAUpB;GACtBnB,mBAAmB0C;GACnBzC,gBAAgBlB,mBAAmB0D,mBAAmBF,UAAUpB,QAAQ;IACtE,GAAIuB,QAAQvB,SAAS;KAAES,YAAYc;KAASE,iBAAiBlF,OAAO0B;IAAU,IAAI,CAAC;IACnF,GAAGuD;GACL,CAAC;GACD/C,eAAexB,OAAO6D,iBAAiBpC,eAAe,EACpDqC,UAAUjC,cACZ,CAAC;GAED,MAAM4C,WAAWtI,sBAAsBqF,YAAY;GACnDA,aAAakD,IAAIP,SAAS;GAC1B,MAAMM;EACR,OAAO;GACL,IAAI,CAACjD,cAAc;IACjB,MAAM8B,QAAQzG,OAAO0G,OAAOZ,YAAYC,UAAU;IAClD,MAAMY,aAAalI,uBAAuB;KACxCgG,UAAUhC,OAAOgC;KACjBmC,gBAAgBnE,OAAOyB;KACvBC,WAAW1B,OAAO0B;KAClBsC;IACF,CAAC;IAED,IAAIE,WAAWT,QACb,MAAM,IAAIjB,MAAM0B,WAAWE,MAAMC,cAAcA,UAAUC,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;IAGjI/B,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;IACpEQ,eAAexB,OAAO6D,iBAAiBvE,OAAOgC,UAAU,EACtDwC,UAAUjC,cACZ,CAAC;IAED,KAAK,MAAMkC,WAAWrB,eACpB,MAAM/F,cAAc6E,cAAcuC,OAAO;IAE3CrB,cAAcK,SAAS;GACzB;GAEA,MAAM0B,WAAWtI,sBAAsBqF,YAAY;GACnDA,aAAakD,IAAI;GACjB,MAAMD;EACR;EAEA,MAAME,iBAAiBvG,OAAQoD,aAA6CoC,MAAM,EAAE;EACpF,IAAI,CAACe,gBACH,MAAM,IAAI7C,MAAM,iBAAiB;EAGnC,IAAI8C,iBAAiBD;EACrB,IAAItF,eAAe;EACnB,IAAIwF,iBAAgCvF,OAAOW,gBAAgB,OAAO0E;EAElE,IAAIrF,OAAOW,eAAe;GACxB,MAAM6E,kBAAkBlF,SAASmF,WAAW,GAAGhF,WAAU,OAAQ;GACjE,MAAMiF,uBAAuB,IAAIlK,SAAS6J,cAAc;GACxD,MAAMM,mBAAmB;IACvBjH;IACA+B;IACAuB,UAAUG;IACVV,UAAUW;IACVV,WAAWW;IACXuD,aAAahJ,yBAAyB;KACpCgJ,aAAa5F,OAAO4F;KACpBC,UAAU7F,OAAO6F;IACnB,CAAC;IACD,GAAIjF,eAAe,EAAEC,QAAQD,aAAa,IAAI,CAAC;IAC/C,GAAI,OAAOZ,OAAO8F,iBAAiB,WAAW,EAAEA,cAAc9F,OAAO8F,aAAa,IAAI,CAAC;GACzF;GACA,IAAIC,wBAAiC;GAErC,KAAK,IAAIC,UAAU,GAAGA,UAAU,KAAK,CAACT,gBAAgBS,WAAW,GAAG;IAClE,IAAI;KACFT,iBAAiB,MAAM5J,yBAAyB;MAC9C,GAAGgK;MACHM,QAAQP;MACR/E,eAAeX,OAAOW;KACxB,CAAC;KACD,IAAI,CAAC4E,gBAAgB,MAAM,IAAI/C,MAAM,iBAAiB;KACtDD,gBAAgB;MACd,GAAGA;MACH5B,eAAeX,OAAOW;KACxB;KACA;IACF,SAAS9C,OAAO;KACd,IAAI,CAACM,oBAAoBN,KAAK,GAAG,MAAMA;KACvCkI,wBAAwBlI;IAC1B;IAEA,MAAMqI,gBAAgB,MAAMV,gBAAgB9F,QAC1C,EAAE,8BAA8BM,OAAOW,cAAcwF,IAAI,GACzD,EAAEC,YAAY,EAAExG,KAAK,EAAE,EAAE,CAC3B;IACA,IAAI,EAAEsG,eAAetG,eAAepE,WAAW;IAE/C,MAAM6K,uBAAuB,MAAMzK,0BAA0B;KAC3D,GAAG+J;KACHM,QAAQC,cAActG;KACtB0G,kBAAkBtG,OAAOW,cAAcwF;IACzC,CAAC;IACD,IAAI,CAACE,sBAAsB;IAE3B,MAAM3F,OAAO6F,OAAOb,oBAAoB;IACxCJ,iBAAiBY,cAActG,IAAI4G,YAAY;IAC/CjB,iBAAiBc;IACjBtG,eAAe;GACjB;GAEA,IAAI,CAACwF,gBAAgB;IACnB,MAAM7E,OAAO6F,OAAOb,oBAAoB;IACxC,IAAIK,uBAAuB,MAAMA;GACnC;EACF;EACA,IAAI,CAACR,gBACH,MAAM,IAAI/C,MAAM,wBAAwB;EAG1C,MAAMpD,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E;GACEgB,MAAM;IACJtB,QAAQ;IACRkB,QAAQyF;IACRvD,UAAUG;IACVV,UAAUW;IACVV,WAAWW;IACX,GAAItC,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;GAC/C;GACAI,QAAQ,EAAEtC,OAAO,GAAG;EACtB,CACF;EAEA,IAAI,CAACkC,cACH,MAAMlE,4BAA4B;GAChC6C;GACAG;GACAiB,QAAQwF;GACRtD,UAAUG;GACVV,UAAUW;GACV+B,gBAAgBnE,OAAOyB;GACvBC,WAAWW;GACX,GAAI,OAAOrC,OAAO6F,aAAa,YAAY,EAAEA,UAAU7F,OAAO6F,SAAS,IAAI,CAAC;GAC5E,GAAI7F,OAAO4F,cAAc,EAAEA,aAAa5F,OAAO4F,YAAY,IAAI,CAAC;GAChE,GAAI,OAAO5F,OAAO8F,iBAAiB,WAAW,EAAEA,cAAc9F,OAAO8F,aAAa,IAAI,CAAC;GACvF,GAAIlF,eAAe,EAAEC,QAAQD,aAAa,IAAI,CAAC;GAC/C0B;GACAkC,UAAUjC;EACZ,CAAC,CAAC,CAACkE,OAAO5I,UAAU;GAClB6I,QAAQ7I,MAAM,wCAAwC;IACpDa;IACAG;IACAiB,QAAQwF;IACRzH;GACF,CAAC;EACH,CAAC;EAGH,IAAI;GACF,MAAMwB,YAAYsH,WAAW,EAAE9H,SAAS,CAAC;EAC3C,QAAQ,CACN;EAGF,OAAO;GACLrB,IAAI;GACJsC,QAAQyF;GACR,GAAIxF,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;EAC/C;CACF,SAASlC,OAAO;EACd,MAAM+I,UAAU/I,iBAAiB2E,QAAQ3E,MAAM+I,UAAU9H,OAAOjB,KAAK;EAErE,MAAMG,kBAAkBkE,YAAY;EAEpC,IAAI0E,YAAY,kBAAkB;GAChC,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM,EAAEtB,QAAQ,YAAY,EAAE,CAClC;GACAH,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO;GAAiB;EAC9C;EAEA,IAAI+I,YAAY,yBAAyB;GACvC,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,iBAAiB;GAC/B,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,oBAAoBA,YAAY,6BAA6B;GAC3E,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,QAAQC,WAAW,yBAAyB,GAAG;GACjD,MAAMzH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,iBAAiBA,YAAY,uBAAuB;GAClE,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;GAAEtB,QAAQ;GAASf,OAAO+I;EAAQ,EAAE,CAC9C;EAEAnI,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAkB;CAC/C;AACF;;;ACrgBA,IAAa4J,YAA2F,OACtGG,UACAC,QAC2C;CAC3C,MAAME,WAAWP,YAAYK,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMC,WAAWC,OAAOR,IAAIS,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,IAAI,CAACJ,UAAU;EACbP,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAoB;CACjD;CAEA,MAAMM,UAAUpB,oBAAoBQ,KAAKE,QAAQ;CACjD,MAAMW,WAAWpB,YAAYO,KAAKE,UAAUU,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMd,QAAQe,IAAI,CACrD9B,OAAO+B,IAAI,mBAAmBJ,QAAQ,GACtC3B,OAAO+B,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,QAAQ,iBAAiB,GAAG;EAC3ClB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMa,UAAU,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGb,4BAA4BkB,SAAS,MAAM,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAC9H,IAAI,CAACJ,SAAS;EACZnB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAY;CACzC;CAOA,MAAMsB,YAAYJ,MALST,YAAYU,KACrC,EAAElB,SAAS,GACX;EAAEmB,OAAO;EAAGJ,KAAK;CAAE,CACrB,CAAC,CAACK,KAAK,EAAED,OAAO,EAAE,CAAC,CAAC,CAACH,KAAK,EAAA,CAGvBO,KAAKC,QAAS,OAAOA,IAAIL,UAAU,WAAWK,IAAIL,QAAQ,EAAG,CAAC,CAC9DM,QAAQC,MAAMC,OAAOC,UAAUF,CAAC,KAAKA,KAAK,CAAC;CAE9C,OAAO;EACL5B,IAAI;EACJD,QAAQe,QAAQf;EAChBgC,WAAWjB,QAAQiB;EACnBC,aAAalB,QAAQkB;EACrBT;EACA,GAAIT,QAAQmB,SAAS,EAAEA,QAAQnB,QAAQmB,OAAO,IAAI,CAAC;CACrD;AACF;;;ACjEA,IAAaE,YAAY;AACzB,IAAaC,aAAa;AAC1B,IAAaC,cAAc;AAC3B,IAAaC,gBAAgB;AAE7B,IAAaC,0BAA0BL,MAAO;CAAC;CAAS;CAAU;AAAQ,CAAC;AAE3E,IAAaO,4BAA4BP,OAAS;CAChDS,WAAWT,OAAS,CAAC,CAACW,KAAK,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG,CAAC,CAACC,MAAM,0BAA0B;CAC7EC,WAAWf,QAAU,QAAQ;CAC7BiB,MAAMjB,OAAS,CAAC,CAACW,KAAK,CAAC,CAACG,MAAM,iBAAiB;AACjD,CAAC;AAED,IAAaI,oBAAoBlB,OAAS;CACxCmB,UAAUnB,OAAS,CAAC,CAACY,IAAI,CAAC;CAC1BQ,UAAUpB,OAAS,CAAC,CAACY,IAAI,CAAC;CAC1BS,UAAUrB,QAAU,CAAC,CAACuB,SAAS;CAC/BC,aAAanB,wBAAwBkB,SAAS;CAC9CE,eAAelB,0BAA0BgB,SAAS;CAClDG,WAAW1B,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAAChB,IAAI,CAAC;AACnC,CAAC,CAAC,CAACiB,aAAaC,OAAOC,QAAQ;CAC7B,IAAID,MAAMN,gBAAgBQ,KAAAA,KAAaF,MAAMT,aAAaW,KAAAA,GACxDD,IAAIE,SAAS;EACXC,MAAM;EACNC,SAAS;EACTC,MAAM,CAAC,aAAa;CACtB,CAAC;AAEL,CAAC;AAIiCpC,OAAS;CACzCwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3BmB,UAAU1C,OAAS,CAAC,CAACuB,SAAS;CAC9BoB,WAAW3C,OAAS,CAAC,CAACuB,SAAS;CAC/BqB,WAAW5C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACrCsB,aAAa7C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACvCuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;CAC5BwB,cAAc/C,QAAU,CAAC,CAACuB,SAAS;AACrC,CAAC;AAImCvB,OAAS;CAC3CwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3B2B,QAAQlD,MAAO;EAAC;EAAa;EAAc;EAAQ;CAAO,CAAC,CAAC,CAACuB,SAAS;CACtEqB,WAAW5C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACrCsB,aAAa7C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACvC4B,UAAUnD,MAAQA,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAAChB,IAAI,CAAC,CAAC,CAAC,CAACW,SAAS;CACpDuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;AAC9B,CAAC;AAIqCvB,OAAS;CAC7CwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3BuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;CAC5BwB,cAAc/C,QAAU,CAAC,CAACuB,SAAS;AACrC,CAAC;;;ACrCD,IAAawD,aAA+F,OAC1GG,SACAC,QACyC;CACzC,MAAME,WAAWT,YAAYO,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMC,SAASb,UAAUM,GAAG;CAE5B,MAAMQ,SAAAA,kBAAmCE,UAAUX,WAAW,CAAC,CAAC;CAChE,IAAI,CAACS,OAAOG,SAAS;EACnBX,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAM,EAAEM,UAAUC,UAAUC,WAAWC,UAAUC,eAAeC,2BAA2BT,OAAOU;CAClG,MAAMC,cAAcxB,yBAAyB;EAAEwB,aAAaX,OAAOU,KAAKC;EAAaJ;CAAS,CAAC;CAC/F,IAAII,gBAAgB,YAAY,CAACZ,QAAQ;EACvCP,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,MAAMc,YAAYb,SAAS,OAAOlC,YAAY,EAAE,CAAC,CAACgD,SAAS,WAAW;CACtE,MAAMC,eAAeF,YAAYlC,iBAAiBqC,OAAOC,KAAKJ,SAAS,CAAC,IAAIK,KAAAA;CAC5E,MAAMT,gBAAgBC,yBAClBjC,yBAAyB;EACzB0C,WAAWT,uBAAuBS;EAClCC,MAAMV,uBAAuBU;EAC7Bf;EACAC;EACAC;EACAK;EACA,GAAIZ,SAAS,EAAEA,OAAO,IAAI,CAAC;EAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;CACzC,CAAC,IACC;CAEJ,IAAIL,0BAA0B,CAACD,eAAe;EAC5ChB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAA4B;CACzD;CAEA,IAAIU,eAAe;EAEjB,MAAMa,YAAWD,MADErD,sBAAsB2B,QAAQ,EAAA,CAC3B4B;EACtB,IAAI,CAACD,UAAU;GACb7B,IAAIG,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEC,IAAI;IAAOC,OAAO;GAA4B;EACzD;EAEA,MAAMyB,aAAa1C,cAAc;EACjC,MAAMF,8BAA8B0C,UAAUE,UAAU;EACxD,MAAMC,eAAe,MAAMH,SAASI,WAAW,GAAGF,WAAU,OAAQ,CAAC,CAACG,QACpE,EAAE,8BAA8BlB,cAAcmB,IAAI,GAClD,EAAEC,YAAY;GAAEC,KAAK;GAAGzB,UAAU;GAAG0B,QAAQ;GAAGC,UAAU;EAAE,EAAE,CAChE;EACA,IAAIP,cAAcK,eAAe5D,UAAU;GACzC,MAAM+D,mBAAmBR,aAAaO,YAAY,OAAOP,aAAaO,aAAa,WAC/EP,aAAaO,WACb,CAAC;GACL,MAAMG,mBAAmB,OAAOF,iBAAiB3B,aAAa,WAC1D2B,iBAAiB3B,WACjBA;GACJ,MAAM8B,eAAe,OAAOX,aAAaM,WAAW,WAChDN,aAAaM,SACbxB;GACJ,MAAM8B,SAAS,MAAMhE,0BAA0B;IAC7CsB;IACA6B;IACAc,QAAQb,aAAaK;IACrBzB;IACAC,UAAU6B;IACV5B,WAAW6B;IACXxB;IACA,GAAIZ,SAAS,EAAEA,OAAO,IAAI,CAAC;IAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;IACvCwB,kBAAkB9B,cAAcmB;GAClC,CAAC;GACD,IAAIS,QACF,OAAO;IACLvC,IAAI;IACJuC;IACAG,cAAc;IACd,GAAI3B,YAAY,EAAEA,UAAU,IAAI,CAAC;GACnC;EAEJ;CACF;CAEA,MAAM4B,YAAY1D,kBAAkB;CACpC,MAAM2D,cAAcC,KAAKC,KAAKrC,YAAYkC,SAAS;CAGnD,MAAMK,WAAW9D,YAAYS,KAAKE,UADlBjB,oBAAoBe,KAAKE,QACGkD,CAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMtD,QAAQuD,IAAI,CACrDhF,OAAOiF,IAAI,mBAAmBJ,QAAQ,GACtC7E,OAAOiF,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,MAAMjE,oBAAoBkE,eAAeC,WAAW;CAEpD,MAAMG,WAAW,IAAIjF,SAAS,CAAC,CAAC4C,SAAS;CACzC,MAAMsC,MAAMC,KAAKD,IAAI;CACrB,MAAME,YAAY,IAAID,KAAKD,MAAMnE,gBAAgB,CAAC;CAElD,MAAM8D,cAAcQ,OAAO;EACzBzB,KAAKqB;EACL,GAAInD,SAAS,EAAEA,OAAO,IAAI,CAAC;EAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;EACvCV;EACAC;EACAE,UAAUI,gBAAgB;EAC1BA;EACA,GAAIH,gBAAgB,EAAEA,cAAc,IAAI,CAAC;EACzCF;EACAkC;EACAC;EACA7C,QAAQ;EACR2D,WAAW,IAAIH,KAAKD,GAAG;EACvBE;CACF,CAAC;CAED,OAAO;EACLxD,IAAI;EACJqD;EACAV;EACAC;EACA,GAAI7B,YAAY,EAAEA,UAAU,IAAI,CAAC;CACnC;AACF;;;ACzIA,IAAa6D,cAAqE,OAChFE,SACAC,QACkC;CAClC,MAAME,WAAWX,YAAYS,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMS,WAAWC,OAAON,IAAIO,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,MAAMC,WAAWJ,OAAON,IAAIO,IAAIC,QAAQG,SAAS,EAAE,CAAC,CAACF,KAAK;CAC1D,MAAME,QAAQC,OAAOF,QAAQ;CAE7B,IAAI,CAACL,YAAY,CAACO,OAAOC,UAAUF,KAAK,KAAKA,QAAQ,GAAG;EACtDX,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAoB;CACjD;CAEA,MAAMkB,UAAU5B,oBAAoBc,KAAKE,QAAQ;CACjD,MAAMa,WAAW1B,YAAYW,KAAKE,UAAUY,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMhB,QAAQiB,IAAI,CACrDrC,OAAOsC,IAAI,mBAAmBJ,QAAQ,GACtClC,OAAOsC,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,UAAU,iBAAiB,GAAG;EAC7CpB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMyB,UAAU,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKnB,SAAS,GAAGf,4BAA4BwB,SAAS,QAAQ,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAChI,IAAI,CAACJ,SAAS;EACZrB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,IAAIyB,QAAQjB,WAAW,aAAa;EAClCJ,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAgB;CAC7C;CAEA,IAAIe,SAASU,QAAQK,aAAa;EAChC1B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAqB;CAClD;CAEA,MAAM+B,OAAOlC,gBAAgBM,OAAO;CACpC,IAAI,CAAC4B,MAAM;EACT3B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMgC,eAAejB,UAAUU,QAAQK,cAAc,IACjDL,QAAQQ,YAAYR,QAAQS,aAAaT,QAAQK,cAAc,KAC/DL,QAAQS;CAEZ,IAAIH,KAAKI,SAASH,cAAc;EAC9B5B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,IAAI+B,KAAKI,WAAWH,cAAc;EAChC5B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAqB;CAClD;CAEA,MAAMoC,iBAAiBhC,IAAIO,IAAIY,IAAI,gBAAgB;CACnD,MAAMc,SAASD,iBAAiB7C,iBAAiBwC,IAAI,IAAIO,KAAAA;CAEzD,IAAIF;MAEEC,WADmBzC,mBAAmBwC,cAC3BG,GAAgB;GAC7BnC,IAAIG,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAET,IAAI;IAAOC,OAAO;GAAoB;EACjD;;CAGF,MAAMR,oBAAoB4B,eAAeC,WAAW;CAEpD,MAAMA,YAAYmB,UAChB;EAAE/B;EAAUM;CAAM,GAClB;EACE0B,MAAM;GACJhC;GACAM;GACAgB;GACAW,MAAMX,KAAKI;GACXE;GACAM,WAAWlB,QAAQkB;EACrB;EACAC,cAAc,EACZC,2BAAW,IAAIC,KAAK,EACtB;CACF,GACA,EAAEC,QAAQ,KAAK,CACjB;CAEA3C,IAAIG,IAAIC,OAAO,GAAG;CAClB,OAAO,EAAET,IAAI,KAAK;AACpB;;;AC7HA,IAAaiD,iBAAiB,EAC5BC,YACAC,8BAII;CACJ,QAAQC,KAAUC,KAAUC,SAAc;EAKxC,IAAI,EAJgB,OAAOF,KAAKI,UAAU,oBAAoB,WAC1DC,OAAOL,IAAII,QAAQ,eAAe,IAClC,GAAA,CAEaE,SAAS,0BAA0B,GAAG;GACrDJ,KAAK;GACL;EACF;EAEA,IAAIK,QAAQ;EACZ,MAAMC,SAAmB,CAAA;EACzB,IAAIE,OAAO;EACX,IAAIC,SAAS;EACb,IAAIC,kBAAwD;EAE5D,MAAMG,qBAAqB,OAAOhB,4BAA4B,YAAYA,0BAA0B,IAChGA,0BACA;EAEJ,MAAMiB,gBAAgB;GACpBhB,IAAIiB,IAAI,QAAQC,MAAM;GACtBlB,IAAIiB,IAAI,OAAOE,KAAK;GACpBnB,IAAIiB,IAAI,SAASG,OAAO;GACxBpB,IAAIiB,IAAI,WAAWI,SAAS;GAC5B,IAAIT,iBAAiB;IACnBU,aAAaV,eAAe;IAC5BA,kBAAkB;GACpB;EACF;EAEA,MAAMW,UAAUC,UAAoB;GAClC,IAAId,MAAM;GACVA,OAAO;GAEPM,QAAQ;GAER,IAAIQ,OAAO;IACTtB,KAAKsB,KAAK;IACV;GACF;GAEAxB,IAAIyB,OAAOhB,OAAOiB,OAAOlB,QAAQD,KAAK;GACtCL,KAAK;EACP;EAEA,MAAMgB,UAAUS,UAAe;GAC7B,IAAIjB,MAAM;GACV,MAAMkB,SAASnB,OAAOoB,SAASF,KAAK,IAAIA,QAAQlB,OAAOqB,KAAKH,KAAK;GACjEpB,SAASqB,OAAOG;GAEhB,IAAIxB,QAAQT,YAAY;IACtBY,OAAO;IACPM,QAAQ;IACRhB,IAAIgC,QAAQ;IACZ/B,IAAIgC,OAAO,GAAG,CAAC,CAACC,KAAK;KAAEC,IAAI;KAAOX,OAAO;IAAkB,CAAC;IAC5D;GACF;GAEAhB,OAAO4B,KAAKR,MAAM;GAElB,IAAI,CAACb,oBAAoB;GAEzB,MAAMsB,MAAMC,KAAKD,IAAI;GAGrB,MAAMM,SAASC,kBADDF,mBADIF,aAAaxC,GACEuC,GAAWxB,oBAAoBsB,GAC/BI,GAAOb,OAAOG,QAAQhB,oBAAoBsB,GAAG;GAE9E,IAAIM,SAAS,KAAK,CAAChC,QAAQ;IACzBA,SAAS;IACTX,IAAI6C,MAAM;IACVjC,kBAAkBE,iBAAiB;KACjCF,kBAAkB;KAClBD,SAAS;KACT,IAAID,MAAM;KACV,IAAI;MACFV,IAAI8C,OAAO;KACb,QAAQ,CACN;IAEJ,GAAGH,MAAM;GACX;EACF;EAEA,MAAMxB,cAAcI,OAAO;EAC3B,MAAMH,WAAW2B,QAAiBxB,OAAOwB,GAAG;EAC5C,MAAM1B,kBAAkBE,uBAAO,IAAIyB,MAAM,iBAAiB,CAAC;EAE3DhD,IAAIiD,GAAG,QAAQ/B,MAAM;EACrBlB,IAAIiD,GAAG,OAAO9B,KAAK;EACnBnB,IAAIiD,GAAG,SAAS7B,OAAO;EACvBpB,IAAIiD,GAAG,WAAW5B,SAAS;CAC7B;AACF;AAQA,IAAMiC,oBAAoB;AAC1B,IAAMC,kBAAkB,MAAU;AAElC,IAAMC,mCAAmB,IAAIC,IAA6B;AAC1D,IAAIC,gBAAgB;AAEpB,IAAMlB,gBAAgBxC,QAAqB;CACzC,MAAM2D,cAAc,OAAO3D,KAAK4D,aAAa,WAAW5D,IAAI4D,WAAW;CACvE,IAAID,YAAYE,KAAK,GAAG,OAAOF,YAAYE,KAAK;CAEhD,QADc,OAAO7D,KAAK+D,OAAO,WAAW/D,IAAI+D,KAAK,GAAA,CACxCF,KAAK,KAAK;AACzB;AAEA,IAAMG,sBAAsB3B,QAAgB;CAC1C,IAAIA,MAAMqB,gBAAgB,KAAQ;CAClCA,gBAAgBrB;CAEhB,IAAImB,iBAAiBS,OAAO,KAAM;CAElC,KAAK,MAAM,CAACC,KAAKzB,UAAUe,kBACzB,IAAInB,MAAMI,MAAMY,aAAaE,iBAC3BC,iBAAiBW,OAAOD,GAAG;AAGjC;AAEA,IAAMxB,sBAAsBwB,KAAanD,oBAA4BsB,QAAiC;CACpG2B,mBAAmB3B,GAAG;CAEtB,MAAM+B,WAAWrD,qBAAqBuC;CACtC,MAAMe,WAAWb,iBAAiBc,IAAIJ,GAAG;CACzC,IAAIG,UAAU;EACZA,SAAShB,aAAahB;EACtBgC,SAASlB,SAASoB,KAAKC,IAAIJ,UAAUC,SAASlB,MAAM;EACpD,OAAOkB;CACT;CAEA,MAAMnE,OAAwB;EAC5BiD,QAAQiB;EACRhB,cAAcf;EACdgB,YAAYhB;CACd;CACAmB,iBAAiBiB,IAAIP,KAAKhE,IAAI;CAC9B,OAAOA;AACT;AAEA,IAAM0C,qBACJH,OACAiC,OACA3D,oBACAsB,QACW;CACX,MAAM+B,WAAWrD,qBAAqBuC;CACtC,MAAMqB,YAAYJ,KAAKK,IAAI,GAAGvC,MAAMI,MAAMW,YAAY;CAEtD,IAAIuB,YAAY,GAAG;EACjBlC,MAAMU,SAASoB,KAAKC,IAAIJ,UAAU3B,MAAMU,SAAUwB,YAAY5D,qBAAsB,GAAI;EACxF0B,MAAMW,eAAef;CACvB;CAEAI,MAAMU,UAAUuB;CAEhB,IAAIjC,MAAMU,UAAU,GAAG,OAAO;CAC9B,OAAOoB,KAAKM,KAAM,CAACpC,MAAMU,SAASpC,qBAAsB,GAAI;AAC9D;;;AChKA,IAAA,mBAAgB0E,QAA0B;CACxC,MAAMC,iBAAiBN,kBAAkB;CACzCK,IAAIE,IACFH,WACAL,cAAc;EACZU,YAAYP,qBAAqBI,cAAc;EAC/CI,yBAAyBT,iCAAiC;CAC5D,CAAC,CACH;CAEAI,IAAIM,KAAKP,WAAmBP,UAAU;CACtCQ,IAAIO,IAAIR,YAAoBN,WAAW;CACvCO,IAAIS,IAAIV,aAAqBR,SAAS;CACtCS,IAAIM,KAAKP,eAAuBT,cAAc;AAChD"}