@rpcbase/server 0.624.0 → 0.625.0

package/dist/fileReferences-C6gDuRO3.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fileReferences-C6gDuRO3.js","names":["withTransaction","ObjectId","Db","getFileReferencesCollectionName","UploadAccessScope","UploadDeduplication","UploadFileReference","_id","blobId","filename","mimeType","totalSize","accessScope","isPublic","userId","ownerKeyHash","deduplicationKey","createdAt","Date","CreateUploadFileReferenceOptions","tenantId","bucketName","findUploadFileReference","db","referenceId","Promise","collection","findOne","createUploadFileReference","session","filesystemDb","filesystem","Error","filesCollection","referencesCollection","claim","updateOne","$inc","matchedCount","insertOne","toHexString","claimUploadFileReference","deduplication","Omit","$exists","$set","key","deleteUploadFileReference","deleted","blobDeleted","reference","findOneAndDelete","chunksCollection","remainingReferences","countDocuments","variants","find","projection","toArray","fileIds","map","variant","filter","value","deleteMany","$in","files_id"],"sources":["../src/uploads/api/file-uploads/fileReferences.ts"],"sourcesContent":["import { withTransaction } from \"@rpcbase/db\"\nimport { ObjectId, type Db } from \"mongodb\"\n\nimport {\n  getFileReferencesCollectionName,\n  type UploadAccessScope,\n  type UploadDeduplication,\n} from \"./shared\"\n\n\nexport type UploadFileReference = {\n  _id: ObjectId\n  blobId: ObjectId\n  filename: string\n  mimeType: string\n  totalSize: number\n  accessScope: UploadAccessScope\n  isPublic: boolean\n  userId?: string\n  ownerKeyHash?: string\n  deduplicationKey: string\n  createdAt: Date\n}\n\ntype CreateUploadFileReferenceOptions = {\n  tenantId: string\n  bucketName: string\n  blobId: ObjectId\n  filename: string\n  mimeType: string\n  totalSize: number\n  accessScope: UploadAccessScope\n  userId?: string\n  ownerKeyHash?: string\n  deduplicationKey: string\n}\n\nexport const findUploadFileReference = async (\n  db: Db,\n  bucketName: string,\n  referenceId: ObjectId,\n): Promise<UploadFileReference | null> => {\n  return await db.collection<UploadFileReference>(getFileReferencesCollectionName(bucketName)).findOne({\n    _id: referenceId,\n  })\n}\n\nexport const createUploadFileReference = async ({\n  tenantId,\n  bucketName,\n  blobId,\n  filename,\n  mimeType,\n  totalSize,\n  accessScope,\n  userId,\n  ownerKeyHash,\n  deduplicationKey,\n}: CreateUploadFileReferenceOptions): Promise<string | null> => {\n  return await withTransaction(tenantId, async ({ session, db }) => {\n    const filesystemDb = db.filesystem.db\n    if (!filesystemDb) throw new Error(\"filesystem_db_unavailable\")\n\n    const filesCollection = filesystemDb.collection(`${bucketName}.files`)\n    const referencesCollection = filesystemDb.collection<UploadFileReference>(\n      getFileReferencesCollectionName(bucketName),\n    )\n    const claim = await filesCollection.updateOne(\n      {\n        _id: blobId,\n        \"metadata.deduplication.key\": deduplicationKey,\n      },\n      {\n        $inc: { \"metadata.referenceCount\": 1 },\n      },\n      { session },\n    )\n    if (claim.matchedCount !== 1) return null\n\n    const referenceId = new ObjectId()\n    await referencesCollection.insertOne(\n      {\n        _id: referenceId,\n        blobId,\n        filename,\n        mimeType,\n        totalSize,\n        accessScope,\n        isPublic: accessScope === \"public\",\n        ...(userId ? { userId } : {}),\n        ...(ownerKeyHash ? { ownerKeyHash } : {}),\n        deduplicationKey,\n        createdAt: new Date(),\n      },\n      { session },\n    )\n\n    return referenceId.toHexString()\n  })\n}\n\nexport const claimUploadFileReference = async ({\n  tenantId,\n  bucketName,\n  blobId,\n  filename,\n  mimeType,\n  totalSize,\n  accessScope,\n  userId,\n  ownerKeyHash,\n  deduplication,\n}: Omit<CreateUploadFileReferenceOptions, \"deduplicationKey\"> & {\n  deduplication: UploadDeduplication\n}): Promise<string | null> => {\n  return await withTransaction(tenantId, async ({ session, db }) => {\n    const filesystemDb = db.filesystem.db\n    if (!filesystemDb) throw new Error(\"filesystem_db_unavailable\")\n\n    const filesCollection = filesystemDb.collection(`${bucketName}.files`)\n    const referencesCollection = filesystemDb.collection<UploadFileReference>(\n      getFileReferencesCollectionName(bucketName),\n    )\n    const claim = await filesCollection.updateOne(\n      {\n        _id: blobId,\n        \"metadata.deduplication.key\": { $exists: false },\n      },\n      {\n        $set: {\n          \"metadata.deduplication\": deduplication,\n          \"metadata.referenceCount\": 1,\n        },\n      },\n      { session },\n    )\n    if (claim.matchedCount !== 1) return null\n\n    const referenceId = new ObjectId()\n    await referencesCollection.insertOne(\n      {\n        _id: referenceId,\n        blobId,\n        filename,\n        mimeType,\n        totalSize,\n        accessScope,\n        isPublic: accessScope === \"public\",\n        ...(userId ? { userId } : {}),\n        ...(ownerKeyHash ? { ownerKeyHash } : {}),\n        deduplicationKey: deduplication.key,\n        createdAt: new Date(),\n      },\n      { session },\n    )\n\n    return referenceId.toHexString()\n  })\n}\n\nexport const deleteUploadFileReference = async ({\n  tenantId,\n  bucketName,\n  referenceId,\n}: {\n  tenantId: string\n  bucketName: string\n  referenceId: ObjectId\n}): Promise<{ deleted: boolean; blobDeleted: boolean }> => {\n  return await withTransaction(tenantId, async ({ session, db }) => {\n    const filesystemDb = db.filesystem.db\n    if (!filesystemDb) throw new Error(\"filesystem_db_unavailable\")\n\n    const referencesCollection = filesystemDb.collection<UploadFileReference>(\n      getFileReferencesCollectionName(bucketName),\n    )\n    const reference = await referencesCollection.findOneAndDelete(\n      { _id: referenceId },\n      { session },\n    )\n    if (!reference) return { deleted: false, blobDeleted: false }\n\n    const filesCollection = filesystemDb.collection(`${bucketName}.files`)\n    const chunksCollection = filesystemDb.collection(`${bucketName}.chunks`)\n    const remainingReferences = await referencesCollection.countDocuments(\n      { blobId: reference.blobId },\n      { session },\n    )\n\n    if (remainingReferences > 0) {\n      await filesCollection.updateOne(\n        { _id: reference.blobId },\n        { $set: { \"metadata.referenceCount\": remainingReferences } },\n        { session },\n      )\n      return { deleted: true, blobDeleted: false }\n    }\n\n    const variants = await filesCollection.find(\n      { \"metadata.variantOf\": reference.blobId.toHexString() },\n      { projection: { _id: 1 }, session },\n    ).toArray()\n    const fileIds = [\n      reference.blobId,\n      ...variants\n        .map((variant) => variant._id)\n        .filter((value): value is ObjectId => value instanceof ObjectId),\n    ]\n\n    await filesCollection.deleteMany(\n      { _id: { $in: fileIds } },\n      { session },\n    )\n    await chunksCollection.deleteMany(\n      { files_id: { $in: fileIds } },\n      { session },\n    )\n\n    return { deleted: true, blobDeleted: true }\n  })\n}\n"],"mappings":";;;;AAqCA,IAAasB,0BAA0B,OACrCC,IACAF,YACAG,gBACwC;CACxC,OAAO,MAAMD,GAAGG,WAAgCvB,gCAAgCkB,UAAU,CAAC,CAAC,CAACM,QAAQ,EACnGpB,KAAKiB,YACP,CAAC;AACH;AAEA,IAAaI,4BAA4B,OAAO,EAC9CR,UACAC,YACAb,QACAC,UACAC,UACAC,WACAC,aACAE,QACAC,cACAC,uBAC8D;CAC9D,OAAO,MAAMhB,gBAAgBoB,UAAU,OAAO,EAAES,SAASN,SAAS;EAChE,MAAMO,eAAeP,GAAGQ,WAAWR;EACnC,IAAI,CAACO,cAAc,MAAM,IAAIE,MAAM,2BAA2B;EAE9D,MAAMC,kBAAkBH,aAAaJ,WAAW,GAAGL,WAAU,OAAQ;EACrE,MAAMa,uBAAuBJ,aAAaJ,WACxCvB,gCAAgCkB,UAAU,CAC5C;EAWA,KAAIc,MAVgBF,gBAAgBG,UAClC;GACE7B,KAAKC;GACL,8BAA8BQ;EAChC,GACA,EACEqB,MAAM,EAAE,2BAA2B,EAAE,EACvC,GACA,EAAER,QAAQ,CACZ,EAAA,CACUS,iBAAiB,GAAG,OAAO;EAErC,MAAMd,cAAc,IAAIvB,SAAS;EACjC,MAAMiC,qBAAqBK,UACzB;GACEhC,KAAKiB;GACLhB;GACAC;GACAC;GACAC;GACAC;GACAC,UAAUD,gBAAgB;GAC1B,GAAIE,SAAS,EAAEA,OAAO,IAAI,CAAC;GAC3B,GAAIC,eAAe,EAAEA,aAAa,IAAI,CAAC;GACvCC;GACAC,2BAAW,IAAIC,KAAK;EACtB,GACA,EAAEW,QAAQ,CACZ;EAEA,OAAOL,YAAYgB,YAAY;CACjC,CAAC;AACH;AAEA,IAAaC,2BAA2B,OAAO,EAC7CrB,UACAC,YACAb,QACAC,UACAC,UACAC,WACAC,aACAE,QACAC,cACA2B,oBAG4B;CAC5B,OAAO,MAAM1C,gBAAgBoB,UAAU,OAAO,EAAES,SAASN,SAAS;EAChE,MAAMO,eAAeP,GAAGQ,WAAWR;EACnC,IAAI,CAACO,cAAc,MAAM,IAAIE,MAAM,2BAA2B;EAE9D,MAAMC,kBAAkBH,aAAaJ,WAAW,GAAGL,WAAU,OAAQ;EACrE,MAAMa,uBAAuBJ,aAAaJ,WACxCvB,gCAAgCkB,UAAU,CAC5C;EAcA,KAAIc,MAbgBF,gBAAgBG,UAClC;GACE7B,KAAKC;GACL,8BAA8B,EAAEoC,SAAS,MAAM;EACjD,GACA,EACEC,MAAM;GACJ,0BAA0BH;GAC1B,2BAA2B;EAC7B,EACF,GACA,EAAEb,QAAQ,CACZ,EAAA,CACUS,iBAAiB,GAAG,OAAO;EAErC,MAAMd,cAAc,IAAIvB,SAAS;EACjC,MAAMiC,qBAAqBK,UACzB;GACEhC,KAAKiB;GACLhB;GACAC;GACAC;GACAC;GACAC;GACAC,UAAUD,gBAAgB;GAC1B,GAAIE,SAAS,EAAEA,OAAO,IAAI,CAAC;GAC3B,GAAIC,eAAe,EAAEA,aAAa,IAAI,CAAC;GACvCC,kBAAkB0B,cAAcI;GAChC7B,2BAAW,IAAIC,KAAK;EACtB,GACA,EAAEW,QAAQ,CACZ;EAEA,OAAOL,YAAYgB,YAAY;CACjC,CAAC;AACH;AAEA,IAAaO,4BAA4B,OAAO,EAC9C3B,UACAC,YACAG,kBAKyD;CACzD,OAAO,MAAMxB,gBAAgBoB,UAAU,OAAO,EAAES,SAASN,SAAS;EAChE,MAAMO,eAAeP,GAAGQ,WAAWR;EACnC,IAAI,CAACO,cAAc,MAAM,IAAIE,MAAM,2BAA2B;EAE9D,MAAME,uBAAuBJ,aAAaJ,WACxCvB,gCAAgCkB,UAAU,CAC5C;EACA,MAAM6B,YAAY,MAAMhB,qBAAqBiB,iBAC3C,EAAE5C,KAAKiB,YAAY,GACnB,EAAEK,QAAQ,CACZ;EACA,IAAI,CAACqB,WAAW,OAAO;GAAEF,SAAS;GAAOC,aAAa;EAAM;EAE5D,MAAMhB,kBAAkBH,aAAaJ,WAAW,GAAGL,WAAU,OAAQ;EACrE,MAAM+B,mBAAmBtB,aAAaJ,WAAW,GAAGL,WAAU,QAAS;EACvE,MAAMgC,sBAAsB,MAAMnB,qBAAqBoB,eACrD,EAAE9C,QAAQ0C,UAAU1C,OAAO,GAC3B,EAAEqB,QAAQ,CACZ;EAEA,IAAIwB,sBAAsB,GAAG;GAC3B,MAAMpB,gBAAgBG,UACpB,EAAE7B,KAAK2C,UAAU1C,OAAO,GACxB,EAAEqC,MAAM,EAAE,2BAA2BQ,oBAAoB,EAAE,GAC3D,EAAExB,QAAQ,CACZ;GACA,OAAO;IAAEmB,SAAS;IAAMC,aAAa;GAAM;EAC7C;EAEA,MAAMM,WAAW,MAAMtB,gBAAgBuB,KACrC,EAAE,sBAAsBN,UAAU1C,OAAOgC,YAAY,EAAE,GACvD;GAAEiB,YAAY,EAAElD,KAAK,EAAE;GAAGsB;EAAQ,CACpC,CAAC,CAAC6B,QAAQ;EACV,MAAMC,UAAU,CACdT,UAAU1C,QACV,GAAG+C,SACAK,KAAKC,YAAYA,QAAQtD,GAAG,CAAC,CAC7BuD,QAAQC,UAA6BA,iBAAiB9D,QAAQ,CAAC;EAGpE,MAAMgC,gBAAgB+B,WACpB,EAAEzD,KAAK,EAAE0D,KAAKN,QAAQ,EAAE,GACxB,EAAE9B,QAAQ,CACZ;EACA,MAAMuB,iBAAiBY,WACrB,EAAEE,UAAU,EAAED,KAAKN,QAAQ,EAAE,GAC7B,EAAE9B,QAAQ,CACZ;EAEA,OAAO;GAAEmB,SAAS;GAAMC,aAAa;EAAK;CAC5C,CAAC;AACH"}

package/dist/handler-B61RAoQK.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-B61RAoQK.js","names":["ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","deleteUploadFileReference","findUploadFileReference","getBucketName","getTenantId","getUploadKeyHash","getUserId","resolveStoredUploadAccessScope","SessionUser","DeleteResponsePayload","ok","error","resolveHeaderString","value","normalized","trim","isFileNotFoundError","message","Error","String","includes","deleteGridFsFile","bucket","fileId","Promise","delete","deleteFile","Record","_payload","ctx","tenantId","res","status","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","userId","uploadKeyHash","reference","referenceMetadata","metadataUserId","ownerKeyHash","accessScope","authorizedByUser","Boolean","authorizedByKey","authorizedByTenant","referenceId","file","find","_id","limit","toArray","metadata","rawMetadata","fileMetadata","deduplication","variants","toHexString","variantIds","map","variant","filter","id","variantId","ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","findUploadFileReference","getBucketName","getTenantId","getUploadKeyHash","getUserId","resolveStoredUploadAccessScope","SessionUser","resolveHeaderString","value","normalized","trim","escapeHeaderFilename","filename","replace","parseRequestedWidth","parsed","Number","isFinite","Math","floor","resolveImageVariants","file","Record","metadata","image","variants","resolveVariantFileId","variant","fileId","selectVariantFileId","requestedWidth","requestedVariant","aliasWidth","toLowerCase","variantFileId","String","targetWidth","widths","Object","keys","map","width","filter","isInteger","sort","a","b","selectedWidth","reduce","selected","selectedDistance","abs","distance","getFile","_payload","ctx","Promise","tenantId","res","status","end","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","bucket","reference","blobObjectId","blobId","find","_id","limit","toArray","rawMetadata","fileMetadata","accessScope","userId","uploadKeyHash","metadataUserId","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","query","w","variantFileObjectId","variantFile","selectedFileObjectId","selectedFile","mimeTypeFromMetadata","mimeType","filenameFromDb","filenameSafe","cacheControl","md5","uploadDate","Date","etagValue","toHexString","length","getTime","etag","ifNoneMatch","headers","candidates","split","includes","setHeader","flushHeaders","method","stream","openDownloadStream","on","destroy","pipe","ROUTE"],"sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport {\n  deleteUploadFileReference,\n  findUploadFileReference,\n} from \"../../file-uploads/fileReferences\"\nimport {\n  getBucketName,\n  getTenantId,\n  getUploadKeyHash,\n  getUserId,\n  resolveStoredUploadAccessScope,\n  type SessionUser,\n} from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst isFileNotFoundError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes(\"FileNotFound\")\n}\n\nconst deleteGridFsFile = async (bucket: GridFSBucket, fileId: ObjectId): Promise<void> => {\n  try {\n    await bucket.delete(fileId)\n  } catch (error) {\n    if (!isFileNotFoundError(error)) throw error\n  }\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId)\n  if (reference) {\n    const referenceMetadata = reference as unknown as Record<string, unknown>\n    const metadataUserId = resolveHeaderString(reference.userId)\n    const ownerKeyHash = resolveHeaderString(reference.ownerKeyHash)\n    const accessScope = resolveStoredUploadAccessScope(referenceMetadata)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n    const authorizedByTenant = accessScope === \"tenant\" && Boolean(userId)\n\n    if (!authorizedByUser && !authorizedByKey && !authorizedByTenant) {\n      ctx.res.status(401)\n      return { ok: false, error: \"unauthorized\" }\n    }\n\n    try {\n      await deleteUploadFileReference({\n        tenantId,\n        bucketName,\n        referenceId: fileObjectId,\n      })\n    } catch {\n      ctx.res.status(500)\n      return { ok: false, error: \"delete_failed\" }\n    }\n\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n  const rawMetadata = (file as any)?.metadata\n  const fileMetadata = rawMetadata && typeof rawMetadata === \"object\"\n    ? rawMetadata as Record<string, unknown>\n    : {}\n  const accessScope = resolveStoredUploadAccessScope(fileMetadata)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n  const authorizedByTenant = accessScope === \"tenant\" && Boolean(userId)\n\n  if (!authorizedByUser && !authorizedByKey && !authorizedByTenant) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  if (fileMetadata.deduplication && typeof fileMetadata.deduplication === \"object\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"file_reference_required\" }\n  }\n\n  try {\n    const variants = await bucket.find({ \"metadata.variantOf\": fileObjectId.toHexString() }).toArray()\n    const variantIds = variants\n      .map((variant) => (variant as any)?._id)\n      .filter((id): id is ObjectId => id instanceof ObjectId)\n\n    await deleteGridFsFile(bucket, fileObjectId)\n    for (const variantId of variantIds) {\n      await deleteGridFsFile(bucket, variantId)\n    }\n  } catch {\n    ctx.res.status(500)\n    return { ok: false, error: \"delete_failed\" }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { findUploadFileReference } from \"../../file-uploads/fileReferences\"\nimport {\n  getBucketName,\n  getTenantId,\n  getUploadKeyHash,\n  getUserId,\n  resolveStoredUploadAccessScope,\n  type SessionUser,\n} from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nconst parseRequestedWidth = (value: unknown): number | null => {\n  if (typeof value !== \"string\") return null\n  const parsed = Number(value.trim())\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nconst resolveImageVariants = (file: unknown): Record<string, unknown> | null => {\n  const metadata = (file as any)?.metadata\n  if (!metadata || typeof metadata !== \"object\") return null\n  const image = (metadata as Record<string, unknown>).image\n  if (!image || typeof image !== \"object\") return null\n  const variants = (image as Record<string, unknown>).variants\n  if (!variants || typeof variants !== \"object\") return null\n  return variants as Record<string, unknown>\n}\n\nconst resolveVariantFileId = (variant: unknown): ObjectId | null => {\n  if (!variant || typeof variant !== \"object\") return null\n  const fileId = (variant as Record<string, unknown>).fileId\n  if (typeof fileId !== \"string\") return null\n  try {\n    return new ObjectId(fileId)\n  } catch {\n    return null\n  }\n}\n\nconst selectVariantFileId = (file: unknown, requestedWidth: number | null, requestedVariant: unknown): ObjectId | null => {\n  const variants = resolveImageVariants(file)\n  if (!variants) return null\n\n  let aliasWidth: number | null = null\n  if (typeof requestedVariant === \"string\") {\n    const normalized = requestedVariant.trim().toLowerCase()\n    aliasWidth = normalized === \"thumb\" ? 320 : normalized === \"small\" ? 640 : normalized === \"medium\" ? 960 : normalized === \"large\" ? 1600 : null\n    if (aliasWidth) {\n      const variantFileId = resolveVariantFileId(variants[String(aliasWidth)])\n      if (variantFileId) return variantFileId\n    }\n  }\n\n  const targetWidth = aliasWidth ?? requestedWidth\n  if (!targetWidth) return null\n\n  const widths = Object.keys(variants)\n    .map((width) => Number(width))\n    .filter((width) => Number.isInteger(width) && width > 0)\n    .sort((a, b) => a - b)\n\n  const selectedWidth = widths.reduce<number | null>((selected, width) => {\n    if (selected === null) return width\n\n    const selectedDistance = Math.abs(selected - targetWidth)\n    const distance = Math.abs(width - targetWidth)\n    if (distance < selectedDistance) return width\n    if (distance === selectedDistance && width > selected) return width\n    return selected\n  }, null)\n  return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null\n}\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n  const reference = await findUploadFileReference(nativeDb, bucketName, fileObjectId)\n  const blobObjectId = reference?.blobId ?? fileObjectId\n\n  const [file] = await bucket.find({ _id: blobObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const rawMetadata = reference ?? (file as any)?.metadata\n  const fileMetadata = rawMetadata && typeof rawMetadata === \"object\"\n    ? rawMetadata as Record<string, unknown>\n    : {}\n  const accessScope = resolveStoredUploadAccessScope(fileMetadata)\n  if (accessScope !== \"public\") {\n    const userId = getUserId(ctx)\n    if (accessScope === \"tenant\") {\n      if (!userId) {\n        ctx.res.status(401).end()\n        return {}\n      }\n    } else {\n      const uploadKeyHash = getUploadKeyHash(ctx)\n      const metadataUserId = resolveHeaderString(fileMetadata.userId)\n      const ownerKeyHash = resolveHeaderString(fileMetadata.ownerKeyHash)\n\n      const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n      const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n      if (!authorizedByUser && !authorizedByKey) {\n        ctx.res.status(401).end()\n        return {}\n      }\n    }\n  }\n\n  const requestedWidth = parseRequestedWidth((ctx.req.query as any)?.w)\n  const variantFileObjectId = selectVariantFileId(file, requestedWidth, (ctx.req.query as any)?.variant)\n  const [variantFile] = variantFileObjectId\n    ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray()\n    : []\n  const selectedFileObjectId = variantFile ? variantFileObjectId as ObjectId : blobObjectId\n  const selectedFile = variantFile ?? file\n\n  const mimeTypeFromMetadata = resolveHeaderString((selectedFile as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString(reference?.filename ?? (selectedFile as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((selectedFile as any)?.md5)\n  const uploadDate = (selectedFile as any)?.uploadDate instanceof Date ? (selectedFile as any).uploadDate : null\n  const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String((selectedFile as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((selectedFile as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(selectedFileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const ROUTE = \"/api/rb/files/:fileId\"\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.ROUTE, getFile)\n  api.delete(Files.ROUTE, deleteFile)\n}\n"],"mappings":";;;;;AAuBA,IAAMe,yBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,uBAAuBL,UAA4B;CAEvD,QADgBA,iBAAiBO,QAAQP,MAAMM,UAAUE,OAAOR,KAAK,EAAA,CACtDS,SAAS,cAAc;AACxC;AAEA,IAAMC,mBAAmB,OAAOC,QAAsBC,WAAoC;CACxF,IAAI;EACF,MAAMD,OAAOG,OAAOF,MAAM;CAC5B,SAASZ,OAAO;EACd,IAAI,CAACK,oBAAoBL,KAAK,GAAG,MAAMA;CACzC;AACF;AAEA,IAAae,aAAoF,OAC/FE,UACAC,QACmC;CACnC,MAAMC,WAAW1B,YAAYyB,GAAG;CAChC,IAAI,CAACC,UAAU;EACbD,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMsB,YAAYd,OAAOU,IAAIK,IAAIC,QAAQZ,UAAU,EAAE,CAAC,CAACR,KAAK;CAC5D,IAAIqB;CACJ,IAAI;EACFA,eAAe,IAAIpC,SAASiC,SAAS;CACvC,QAAQ;EACNJ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAGA,MAAM2B,YAAWD,MADEvC,sBAAsBgC,QAAQ,EAAA,CAC3BS;CACtB,IAAI,CAACD,UAAU;EACbT,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAA4B;CACzD;CAEA,MAAM6B,aAAarC,cAAc;CACjC,MAAMmB,SAAS,IAAIvB,aAAauC,UAAU,EAAEE,WAAW,CAAC;CAExD,MAAMC,SAASnC,UAAUuB,GAAG;CAC5B,MAAMa,gBAAgBrC,iBAAiBwB,GAAG;CAC1C,IAAI,CAACY,UAAU,CAACC,eAAe;EAC7Bb,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMgC,YAAY,MAAMzC,wBAAwBoC,UAAUE,YAAYJ,YAAY;CAClF,IAAIO,WAAW;EACb,MAAMC,oBAAoBD;EAC1B,MAAME,iBAAiBjC,sBAAoB+B,UAAUF,MAAM;EAC3D,MAAMK,eAAelC,sBAAoB+B,UAAUG,YAAY;EAC/D,MAAMC,cAAcxC,+BAA+BqC,iBAAiB;EAMpE,IAAI,CAJqBK,QAAQR,UAAUI,kBAAkBJ,WAAWI,cAInEG,KAAoB,CAHDC,QAAQP,iBAAiBI,gBAAgBJ,kBAAkBI,YAGzDI,KAAmB,EAFlBH,gBAAgB,YAAYE,QAAQR,MAAM,IAEH;GAChEZ,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEtB,IAAI;IAAOC,OAAO;GAAe;EAC5C;EAEA,IAAI;GACF,MAAMV,0BAA0B;IAC9B6B;IACAU;IACAY,aAAahB;GACf,CAAC;EACH,QAAQ;GACNP,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEtB,IAAI;IAAOC,OAAO;GAAgB;EAC7C;EAEAkB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO,EAAEtB,IAAI,KAAK;CACpB;CAEA,MAAM,CAAC2C,QAAQ,MAAM/B,OAAOgC,KAAK,EAAEC,KAAKnB,aAAa,CAAC,CAAC,CAACoB,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACJ,MAAM;EACTxB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO,EAAEtB,IAAI,KAAK;CACpB;CAEA,MAAMmC,iBAAiBjC,sBAAqByC,MAAcK,UAAUjB,MAAM;CAC1E,MAAMK,eAAelC,sBAAqByC,MAAcK,UAAUZ,YAAY;CAC9E,MAAMa,cAAeN,MAAcK;CACnC,MAAME,eAAeD,eAAe,OAAOA,gBAAgB,WACvDA,cACA,CAAC;CACL,MAAMZ,cAAcxC,+BAA+BqD,YAAY;CAM/D,IAAI,CAJqBX,QAAQR,UAAUI,kBAAkBJ,WAAWI,cAInEG,KAAoB,CAHDC,QAAQP,iBAAiBI,gBAAgBJ,kBAAkBI,YAGzDI,KAAmB,EAFlBH,gBAAgB,YAAYE,QAAQR,MAAM,IAEH;EAChEZ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,IAAIiD,aAAaC,iBAAiB,OAAOD,aAAaC,kBAAkB,UAAU;EAChFhC,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,IAAI;EAEF,MAAMqD,cAAaF,MADIxC,OAAOgC,KAAK,EAAE,sBAAsBlB,aAAa2B,YAAY,EAAE,CAAC,CAAC,CAACN,QAAQ,EAAA,CAE9FQ,KAAKC,YAAaA,SAAiBX,GAAG,CAAC,CACvCY,QAAQC,OAAuBA,cAAcpE,QAAQ;EAExD,MAAMqB,iBAAiBC,QAAQc,YAAY;EAC3C,KAAK,MAAMiC,aAAaL,YACtB,MAAM3C,iBAAiBC,QAAQ+C,SAAS;CAE5C,QAAQ;EACNxC,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAgB;CAC7C;CAEAkB,IAAIE,IAAIC,OAAO,GAAG;CAClB,OAAO,EAAEtB,IAAI,KAAK;AACpB;;;AC3IA,IAAMuE,uBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,wBAAwBC,aAA6BA,SAASC,QAAQ,UAAU,GAAG;AAEzF,IAAMC,uBAAuBN,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMO,SAASC,OAAOR,MAAME,KAAK,CAAC;CAClC,IAAI,CAACM,OAAOC,SAASF,MAAM,KAAKA,UAAU,GAAG,OAAO;CACpD,OAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,IAAMK,wBAAwBC,SAAkD;CAC9E,MAAME,WAAYF,MAAcE;CAChC,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,MAAMC,QAASD,SAAqCC;CACpD,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMC,WAAYD,MAAkCC;CACpD,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,OAAOA;AACT;AAEA,IAAMC,wBAAwBC,YAAsC;CAClE,IAAI,CAACA,WAAW,OAAOA,YAAY,UAAU,OAAO;CACpD,MAAMC,SAAUD,QAAoCC;CACpD,IAAI,OAAOA,WAAW,UAAU,OAAO;CACvC,IAAI;EACF,OAAO,IAAI7B,SAAS6B,MAAM;CAC5B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAMC,uBAAuBR,MAAeS,gBAA+BC,qBAA+C;CACxH,MAAMN,WAAWL,qBAAqBC,IAAI;CAC1C,IAAI,CAACI,UAAU,OAAO;CAEtB,IAAIO,aAA4B;CAChC,IAAI,OAAOD,qBAAqB,UAAU;EACxC,MAAMtB,aAAasB,iBAAiBrB,KAAK,CAAC,CAACuB,YAAY;EACvDD,aAAavB,eAAe,UAAU,MAAMA,eAAe,UAAU,MAAMA,eAAe,WAAW,MAAMA,eAAe,UAAU,OAAO;EAC3I,IAAIuB,YAAY;GACd,MAAME,gBAAgBR,qBAAqBD,SAASU,OAAOH,UAAU,EAAE;GACvE,IAAIE,eAAe,OAAOA;EAC5B;CACF;CAEA,MAAME,cAAcJ,cAAcF;CAClC,IAAI,CAACM,aAAa,OAAO;CAOzB,MAAMW,gBALST,OAAOC,KAAKd,QAAQ,CAAC,CACjCe,KAAKC,UAAUzB,OAAOyB,KAAK,CAAC,CAAC,CAC7BC,QAAQD,UAAUzB,OAAO2B,UAAUF,KAAK,KAAKA,QAAQ,CAAC,CAAC,CACvDG,MAAMC,GAAGC,MAAMD,IAAIC,CAEAT,CAAAA,CAAOW,QAAuBC,UAAUR,UAAU;EACtE,IAAIQ,aAAa,MAAM,OAAOR;EAE9B,MAAMS,mBAAmBhC,KAAKiC,IAAIF,WAAWb,WAAW;EACxD,MAAMgB,WAAWlC,KAAKiC,IAAIV,QAAQL,WAAW;EAC7C,IAAIgB,WAAWF,kBAAkB,OAAOT;EACxC,IAAIW,aAAaF,oBAAoBT,QAAQQ,UAAU,OAAOR;EAC9D,OAAOQ;CACT,GAAG,IAAI;CACP,OAAOF,gBAAgBrB,qBAAqBD,SAASU,OAAOY,aAAa,EAAE,IAAI;AACjF;AAEA,IAAaM,UAAiF,OAC5FC,UACAC,QACmC;CACnC,MAAME,WAAWvD,YAAYqD,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMC,YAAY1B,OAAOoB,IAAIO,IAAIC,QAAQnC,UAAU,EAAE,CAAC,CAAClB,KAAK;CAC5D,IAAIsD;CACJ,IAAI;EACFA,eAAe,IAAIjE,SAAS8D,SAAS;CACvC,QAAQ;EACNN,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAGA,MAAMM,YAAWD,MADEpE,sBAAsB4D,QAAQ,EAAA,CAC3BU;CACtB,IAAI,CAACD,UAAU;EACbX,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMQ,aAAanE,cAAc;CACjC,MAAMoE,SAAS,IAAIvE,aAAaoE,UAAU,EAAEE,WAAW,CAAC;CACxD,MAAME,YAAY,MAAMtE,wBAAwBkE,UAAUE,YAAYJ,YAAY;CAClF,MAAMO,eAAeD,WAAWE,UAAUR;CAE1C,MAAM,CAAC3C,QAAQ,MAAMgD,OAAOI,KAAK,EAAEC,KAAKH,aAAa,CAAC,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACvD,MAAM;EACTkC,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMiB,cAAcP,aAAcjD,MAAcE;CAChD,MAAMuD,eAAeD,eAAe,OAAOA,gBAAgB,WACvDA,cACA,CAAC;CACL,MAAME,cAAc1E,+BAA+ByE,YAAY;CAC/D,IAAIC,gBAAgB,UAAU;EAC5B,MAAMC,SAAS5E,UAAUmD,GAAG;EAC5B,IAAIwB,gBAAgB;OACd,CAACC,QAAQ;IACXzB,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;IACxB,OAAO,CAAC;GACV;SACK;GACL,MAAMqB,gBAAgB9E,iBAAiBoD,GAAG;GAC1C,MAAM2B,iBAAiB3E,oBAAoBuE,aAAaE,MAAM;GAC9D,MAAMG,eAAe5E,oBAAoBuE,aAAaK,YAAY;GAKlE,IAAI,CAHqBE,QAAQL,UAAUE,kBAAkBF,WAAWE,cAGnEE,KAAoB,CAFDC,QAAQJ,iBAAiBE,gBAAgBF,kBAAkBE,YAEzDG,GAAiB;IACzC/B,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;IACxB,OAAO,CAAC;GACV;EACF;CACF;CAGA,MAAM6B,sBAAsB5D,oBAAoBR,MADzBP,oBAAqByC,IAAIO,IAAIyB,OAAeC,CACb1D,GAAiByB,IAAIO,IAAIyB,OAAe5D,OAAO;CACrG,MAAM,CAAC+D,eAAeD,sBAClB,MAAMpB,OAAOI,KAAK,EAAEC,KAAKe,oBAAoB,CAAC,CAAC,CAACd,MAAM,CAAC,CAAC,CAACC,QAAQ,IACjE,CAAA;CACJ,MAAMe,uBAAuBD,cAAcD,sBAAkClB;CAC7E,MAAMqB,eAAeF,eAAerE;CAGpC,MAAMyE,WADuBvF,oBAAqBqF,cAAsBrE,UAAUuE,QACjED,KAAwB;CAGzC,MAAMG,eAAerF,qBAFEJ,oBAAoB+D,WAAW1D,YAAagF,cAAsBhF,QACxEmF,KAAkBlC,SACe;CAElD,MAAMoC,eAAe;CACrB,MAAMC,MAAM3F,oBAAqBqF,cAAsBM,GAAG;CAC1D,MAAMC,aAAcP,cAAsBO,sBAAsBC,OAAQR,aAAqBO,aAAa;CAC1G,MAAME,YAAYH,OAAO,GAAGP,qBAAqBW,YAAY,EAAC,GAAInE,OAAQyD,cAAsBW,UAAU,CAAC,EAAC,GAAIpE,OAAOgE,YAAYK,QAAQ,KAAK,CAAC;CACjJ,MAAMC,OAAOP,MAAM,IAAIG,UAAS,KAAM,MAAMA,UAAS;CACrD,MAAMK,cAAcnG,oBAAqBgD,IAAIO,IAAI6C,UAAkB,gBAAgB;CACnF,IAAID,aAAa;EACf,MAAME,aAAaF,YAAYG,MAAM,GAAG,CAAC,CAACrE,KAAKhC,UAAUA,MAAME,KAAK,CAAC,CAAC,CAACgC,OAAO2C,OAAO;EACrF,IAAIuB,WAAWE,SAAS,GAAG,KAAKF,WAAWE,SAASL,IAAI,GAAG;GACzDlD,IAAIG,IAAIC,OAAO,GAAG;GAClBJ,IAAIG,IAAIqD,UAAU,iBAAiBd,YAAY;GAC/C1C,IAAIG,IAAIqD,UAAU,QAAQN,IAAI;GAC9BlD,IAAIG,IAAIE,IAAI;GACZ,OAAO,CAAC;EACV;CACF;CAEAL,IAAIG,IAAIC,OAAO,GAAG;CAClBJ,IAAIG,IAAIqD,UAAU,gBAAgBjB,QAAQ;CAC1CvC,IAAIG,IAAIqD,UAAU,kBAAkB5E,OAAQyD,cAAsBW,UAAU,CAAC,CAAC;CAC9EhD,IAAIG,IAAIqD,UAAU,uBAAuB,qBAAqBf,aAAY,EAAG;CAC7EzC,IAAIG,IAAIqD,UAAU,iBAAiBd,YAAY;CAC/C1C,IAAIG,IAAIqD,UAAU,QAAQN,IAAI;CAC9BlD,IAAIG,IAAIqD,UAAU,0BAA0B,SAAS;CACrD,IAAIjB,aAAa,iBACfvC,IAAIG,IAAIqD,UACN,2BACA,6FACF;CAEFxD,IAAIG,IAAIsD,aAAa;CAErB,IAAIzD,IAAIO,IAAImD,WAAW,QAAQ;EAC7B1D,IAAIG,IAAIE,IAAI;EACZ,OAAO,CAAC;CACV;CAEA,MAAMsD,SAAS7C,OAAO8C,mBAAmBxB,oBAAoB;CAE7DuB,OAAOE,GAAG,eAAe;EACvB,IAAI;GACF7D,IAAIG,IAAI2D,QAAQ;EAClB,QAAQ,CACN;CAEJ,CAAC;CAEDH,OAAOI,KAAK/D,IAAIG,GAAG;CACnB,OAAO,CAAC;AACV;;;ACpNA,IAAa6D,QAAQ;;;ACQrB,IAAA,mBAAgB,QAAa;CAC3B,IAAI,IAAI,OAAa,OAAO;CAC5B,IAAI,OAAO,OAAa,UAAU;AACpC"}

package/dist/handler-BhpoyxI4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-BhpoyxI4.js","names":["z","ROUTE","requestSchema","object","sinceSeq","number","int","min","default","limit","max","modelNames","array","string","optional","RequestPayload","infer","responseSchema","ok","boolean","needsFullResync","earliestSeq","latestSeq","changes","seq","modelName","op","enum","docId","ResponsePayload","Api","ApiHandler","Ctx","models","ZRBRtsChangeOp","IRBRtsChange","IRBRtsCounter","LoadModelCtx","buildAbilityFromSession","AclSubjectType","Model","Changes","SessionUser","id","currentTenantId","signedInTenants","RtsCounterDoc","RtsChangeDoc","getTenantId","ctx","sessionTenantId","req","session","user","trim","ensureAuthorized","tenantId","userId","normalizedCurrentTenantId","getModelCtx","_ctx","isRtsChangeRecord","value","obj","Partial","isOp","safeParse","op","success","seq","modelName","changesHandler","RequestPayload","ResponsePayload","payload","Promise","parsed","requestSchema","res","status","ok","latestSeq","changes","ability","modelCtx","RtsChange","RtsCounter","all","get","counter","findOne","_id","lean","Number","sinceSeq","limit","modelNames","data","requestedModelNames","Array","isArray","length","map","m","String","filter","Boolean","allowedModelNames","can","from","Set","distinct","earliestSeq","earliest","$in","sort","undefined","needsFullResync","selector","Record","$gt","find","docId","c","api","post","ROUTE"],"sources":["../src/rts/api/changes/index.ts","../src/rts/api/changes/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/rts/changes\"\n\nexport const requestSchema = z.object({\n  sinceSeq: z.number().int().min(0).default(0),\n  limit: z.number().int().min(1).max(5000).default(2000),\n  modelNames: z.array(z.string().min(1)).optional(),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  ok: z.boolean(),\n  needsFullResync: z.boolean().optional(),\n  earliestSeq: z.number().int().min(0).optional(),\n  latestSeq: z.number().int().min(0),\n  changes: z.array(z.object({\n    seq: z.number().int().min(1),\n    modelName: z.string().min(1),\n    op: z.enum([\"delete\", \"reset_model\"]),\n    docId: z.string().optional(),\n  })),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models, ZRBRtsChangeOp, type IRBRtsChange, type IRBRtsCounter, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, type AclSubjectType } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport * as Changes from \"./index\"\n\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype RtsCounterDoc = IRBRtsCounter\ntype RtsChangeDoc = IRBRtsChange\n\nconst getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const sessionTenantId = ctx.req.session?.user?.currentTenantId\n  if (typeof sessionTenantId === \"string\" && sessionTenantId.trim()) return sessionTenantId.trim()\n\n  return null\n}\n\nconst ensureAuthorized = (ctx: Ctx<SessionUser>, tenantId: string): string | null => {\n  const userId = ctx.req.session?.user?.id\n  if (!userId) return null\n\n  const currentTenantId = ctx.req.session?.user?.currentTenantId\n  const normalizedCurrentTenantId = typeof currentTenantId === \"string\" ? currentTenantId.trim() : \"\"\n\n  if (!normalizedCurrentTenantId || normalizedCurrentTenantId !== tenantId) return null\n  return userId\n}\n\nconst getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nconst isRtsChangeRecord = (value: unknown): value is RtsChangeDoc => {\n  if (!value || typeof value !== \"object\") return false\n  const obj = value as Partial<RtsChangeDoc>\n  const isOp = ZRBRtsChangeOp.safeParse(obj.op).success\n  return typeof obj.seq === \"number\" && typeof obj.modelName === \"string\" && isOp\n}\n\nconst changesHandler: ApiHandler<Changes.RequestPayload, Changes.ResponsePayload, SessionUser> = async(\n  payload,\n  ctx,\n): Promise<Changes.ResponsePayload> => {\n  const parsed = Changes.requestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const userId = ensureAuthorized(ctx, tenantId)\n  if (!userId) {\n    ctx.res.status(401)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId, session: ctx.req.session })\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [RtsChange, RtsCounter] = await Promise.all([\n    models.get(\"RBRtsChange\", modelCtx) as Promise<Model<RtsChangeDoc>>,\n    models.get(\"RBRtsCounter\", modelCtx) as Promise<Model<RtsCounterDoc>>,\n  ])\n\n  const counter = await RtsCounter.findOne({ _id: \"rts\" }, { seq: 1 }).lean()\n  const latestSeq = Number(counter?.seq ?? 0) || 0\n\n  const { sinceSeq, limit, modelNames } = parsed.data\n\n  const requestedModelNames = Array.isArray(modelNames) && modelNames.length\n    ? modelNames.map((m) => String(m)).filter(Boolean)\n    : null\n\n  const allowedModelNames = requestedModelNames\n    ? requestedModelNames.filter((m) => ability.can(\"read\", m as AclSubjectType))\n    : Array.from(\n      new Set(\n        (await RtsChange.distinct(\"modelName\"))\n          .map((m) => String(m))\n          .filter(Boolean)\n          .filter((m) => ability.can(\"read\", m as AclSubjectType)),\n      ),\n    )\n\n  let earliestSeq: number | undefined\n  if (allowedModelNames.length) {\n    const earliest = await RtsChange.findOne({ modelName: { $in: allowedModelNames } }, { seq: 1 }).sort({ seq: 1 }).lean()\n    earliestSeq = earliest?.seq ? Number(earliest.seq) : undefined\n  }\n\n  const needsFullResync = typeof earliestSeq === \"number\" && sinceSeq < earliestSeq - 1\n\n  const selector: Record<string, unknown> = { seq: { $gt: sinceSeq }, modelName: { $in: allowedModelNames } }\n\n  const changes = await RtsChange\n    .find(selector, { _id: 0, seq: 1, modelName: 1, op: 1, docId: 1 })\n    .sort({ seq: 1 })\n    .limit(limit)\n    .lean()\n\n  return {\n    ok: true,\n    needsFullResync: needsFullResync || undefined,\n    earliestSeq,\n    latestSeq,\n    changes: Array.isArray(changes)\n      ? changes\n        .filter(isRtsChangeRecord)\n        .filter((c) => ability.can(\"read\", c.modelName as AclSubjectType))\n        .map((c) => ({\n          seq: Number(c.seq),\n          modelName: String(c.modelName),\n          op: c.op,\n          docId: c.docId ? String(c.docId) : undefined,\n        }))\n      : [],\n  }\n}\n\nexport default (api: Api<SessionUser>) => {\n  api.post(Changes.ROUTE, changesHandler)\n}\n"],"mappings":";;;;AAGA,IAAaC,QAAQ;AAErB,IAAaC,gBAAgBF,OAAS;CACpCI,UAAUJ,OAAS,CAAC,CAACM,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,QAAQ,CAAC;CAC3CC,OAAOT,OAAS,CAAC,CAACM,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACG,IAAI,GAAI,CAAC,CAACF,QAAQ,GAAI;CACrDG,YAAYX,MAAQA,OAAS,CAAC,CAACO,IAAI,CAAC,CAAC,CAAC,CAACO,SAAS;AAClD,CAAC;AAI6Bd,OAAS;CACrCkB,IAAIlB,QAAU;CACdoB,iBAAiBpB,QAAU,CAAC,CAACc,SAAS;CACtCO,aAAarB,OAAS,CAAC,CAACM,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACO,SAAS;CAC9CQ,WAAWtB,OAAS,CAAC,CAACM,IAAI,CAAC,CAACC,IAAI,CAAC;CACjCgB,SAASvB,MAAQA,OAAS;EACxBwB,KAAKxB,OAAS,CAAC,CAACM,IAAI,CAAC,CAACC,IAAI,CAAC;EAC3BkB,WAAWzB,OAAS,CAAC,CAACO,IAAI,CAAC;EAC3BmB,IAAI1B,MAAO,CAAC,UAAU,aAAa,CAAC;EACpC4B,OAAO5B,OAAS,CAAC,CAACc,SAAS;CAC7B,CAAC,CAAC;AACJ,CAAC;;;ACPD,IAAMkC,eAAeC,QAAyC;CAC5D,MAAMC,kBAAkBD,IAAIE,IAAIC,SAASC,MAAMT;CAC/C,IAAI,OAAOM,oBAAoB,YAAYA,gBAAgBI,KAAK,GAAG,OAAOJ,gBAAgBI,KAAK;CAE/F,OAAO;AACT;AAEA,IAAMC,oBAAoBN,KAAuBO,aAAoC;CACnF,MAAMC,SAASR,IAAIE,IAAIC,SAASC,MAAMV;CACtC,IAAI,CAACc,QAAQ,OAAO;CAEpB,MAAMb,kBAAkBK,IAAIE,IAAIC,SAASC,MAAMT;CAC/C,MAAMc,4BAA4B,OAAOd,oBAAoB,WAAWA,gBAAgBU,KAAK,IAAI;CAEjG,IAAI,CAACI,6BAA6BA,8BAA8BF,UAAU,OAAO;CACjF,OAAOC;AACT;AAEA,IAAME,eAAeC,MAAwBJ,cAAoC,EAC/EL,KAAK,EACHC,SAAS,EACPC,MAAM,EACJT,iBAAiBY,SACnB,EACF,EACF,EACF;AAEA,IAAMK,qBAAqBC,UAA0C;CACnE,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMC,MAAMD;CACZ,MAAMG,OAAO/B,eAAegC,UAAUH,IAAII,EAAE,CAAC,CAACC;CAC9C,OAAO,OAAOL,IAAIM,QAAQ,YAAY,OAAON,IAAIO,cAAc,YAAYL;AAC7E;AAEA,IAAMM,iBAA2F,OAC/FG,SACAzB,QACqC;CACrC,MAAM2B,SAAAA,cAA+BV,UAAUQ,WAAW,CAAC,CAAC;CAC5D,IAAI,CAACE,OAAOR,SAAS;EACnBnB,IAAI6B,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,CAAA;EAAG;CAChD;CAEA,MAAM1B,WAAWR,YAAYC,GAAG;CAChC,IAAI,CAACO,UAAU;EACbP,IAAI6B,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,CAAA;EAAG;CAChD;CAGA,IAAI,CADW3B,iBAAiBN,KAAKO,QAChCC,GAAQ;EACXR,IAAI6B,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,CAAA;EAAG;CAChD;CAEA,MAAMC,UAAU7C,wBAAwB;EAAEkB;EAAUJ,SAASH,IAAIE,IAAIC;CAAQ,CAAC;CAE9E,MAAMgC,WAAWzB,YAAYV,KAAKO,QAAQ;CAE1C,MAAM,CAAC6B,WAAWC,cAAc,MAAMX,QAAQY,IAAI,CAChDtD,OAAOuD,IAAI,eAAeJ,QAAQ,GAClCnD,OAAOuD,IAAI,gBAAgBJ,QAAQ,CAAkC,CACtE;CAED,MAAMK,UAAU,MAAMH,WAAWI,QAAQ,EAAEC,KAAK,MAAM,GAAG,EAAEtB,KAAK,EAAE,CAAC,CAAC,CAACuB,KAAK;CAC1E,MAAMX,YAAYY,OAAOJ,SAASpB,OAAO,CAAC,KAAK;CAE/C,MAAM,EAAEyB,UAAUC,OAAOC,eAAepB,OAAOqB;CAE/C,MAAMC,sBAAsBC,MAAMC,QAAQJ,UAAU,KAAKA,WAAWK,SAChEL,WAAWM,KAAKC,MAAMC,OAAOD,CAAC,CAAC,CAAC,CAACE,OAAOC,OAAO,IAC/C;CAEJ,MAAMC,oBAAoBT,sBACtBA,oBAAoBO,QAAQF,MAAMpB,QAAQyB,IAAI,QAAQL,CAAmB,CAAC,IAC1EJ,MAAMU,KACN,IAAIC,KACD,MAAMzB,UAAU0B,SAAS,WAAW,EAAA,CAClCT,KAAKC,MAAMC,OAAOD,CAAC,CAAC,CAAC,CACrBE,OAAOC,OAAO,CAAC,CACfD,QAAQF,MAAMpB,QAAQyB,IAAI,QAAQL,CAAmB,CAAC,CAC3D,CACF;CAEF,IAAIS;CACJ,IAAIL,kBAAkBN,QAAQ;EAC5B,MAAMY,WAAW,MAAM5B,UAAUK,QAAQ,EAAEpB,WAAW,EAAE4C,KAAKP,kBAAkB,EAAE,GAAG,EAAEtC,KAAK,EAAE,CAAC,CAAC,CAAC8C,KAAK,EAAE9C,KAAK,EAAE,CAAC,CAAC,CAACuB,KAAK;EACtHoB,cAAcC,UAAU5C,MAAMwB,OAAOoB,SAAS5C,GAAG,IAAI+C,KAAAA;CACvD;CAEA,MAAMC,kBAAkB,OAAOL,gBAAgB,YAAYlB,WAAWkB,cAAc;CAEpF,MAAMM,WAAoC;EAAEjD,KAAK,EAAEmD,KAAK1B,SAAS;EAAGxB,WAAW,EAAE4C,KAAKP,kBAAkB;CAAE;CAE1G,MAAMzB,UAAU,MAAMG,UACnBoC,KAAKH,UAAU;EAAE3B,KAAK;EAAGtB,KAAK;EAAGC,WAAW;EAAGH,IAAI;EAAGuD,OAAO;CAAE,CAAC,CAAC,CACjEP,KAAK,EAAE9C,KAAK,EAAE,CAAC,CAAC,CAChB0B,MAAMA,KAAK,CAAC,CACZH,KAAK;CAER,OAAO;EACLZ,IAAI;EACJqC,iBAAiBA,mBAAmBD,KAAAA;EACpCJ;EACA/B;EACAC,SAASiB,MAAMC,QAAQlB,OAAO,IAC1BA,QACCuB,OAAO5C,iBAAiB,CAAC,CACzB4C,QAAQkB,MAAMxC,QAAQyB,IAAI,QAAQe,EAAErD,SAA2B,CAAC,CAAC,CACjEgC,KAAKqB,OAAO;GACXtD,KAAKwB,OAAO8B,EAAEtD,GAAG;GACjBC,WAAWkC,OAAOmB,EAAErD,SAAS;GAC7BH,IAAIwD,EAAExD;GACNuD,OAAOC,EAAED,QAAQlB,OAAOmB,EAAED,KAAK,IAAIN,KAAAA;EACrC,EAAE,IACF,CAAA;CACN;AACF;AAEA,IAAA,mBAAgBQ,QAA0B;CACxCA,IAAIC,KAAKpF,OAAe8B,cAAc;AACxC"}

package/dist/handler-CnYlcu-N.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-CnYlcu-N.js","names":["Ctx","NotificationSessionUser","id","currentTenantId","getSessionUser","ctx","rawSessionUser","req","session","user","userId","trim","tenantId","res","status","z","ListRoute","CreateRoute","MarkReadRoute","MarkReadByUrlRoute","ArchiveRoute","MarkAllReadRoute","SettingsRoute","DigestRunRoute","listRequestSchema","object","includeArchived","boolean","optional","unreadOnly","limit","number","int","min","max","markSeen","ListRequestPayload","infer","notificationDataSchema","record","string","notificationPlatformPayloadSchema","webpush","unknown","fcmOptions","android","apns","passthrough","NotificationPlatformPayload","createRequestStringSchema","trim","notificationUrlModeSchema","enum","notificationContentFieldsSchema","title","body","image","createRequestSchema","topic","tag","url","urlMode","metadata","data","platform","CreateRequestPayload","normalizeNotificationActionUrl","origin","raw","base","URL","parsed","pathname","search","normalizeNotificationActionLink","hash","notificationSchema","id","deliveryId","shape","createdAt","seenAt","readAt","archivedAt","NotificationPayload","listResponseSchema","ok","error","notifications","array","unreadCount","unseenCount","ListResponsePayload","createResponseSchema","CreateResponsePayload","markReadResponseSchema","MarkReadResponsePayload","markReadByUrlRequestSchema","MarkReadByUrlRequestPayload","markReadByUrlResponseSchema","matchedCount","modifiedCount","MarkReadByUrlResponsePayload","archiveResponseSchema","ArchiveResponsePayload","markAllReadResponseSchema","MarkAllReadResponsePayload","digestFrequencySchema","DigestFrequency","topicPreferenceSchema","inApp","emailDigest","push","TopicPreferencePayload","settingsSchema","digestFrequency","topicPreferences","lastDigestSentAt","SettingsPayload","settingsResponseSchema","settings","SettingsResponsePayload","updateSettingsRequestSchema","UpdateSettingsRequestPayload","updateSettingsResponseSchema","UpdateSettingsResponsePayload","digestRunRequestSchema","force","DigestRunRequestPayload","digestRunResponseSchema","sent","skippedReason","DigestRunResponsePayload","Api","ApiHandler","Ctx","models","IRBNotification","IRBNotificationSettings","buildAbilityFromSession","getAccessibleByQuery","createNotification","sendNotificationsDigestForUser","getSessionUser","Notifications","NotificationDoc","_id","NotificationActionDoc","Pick","SettingsDoc","NotificationActionLink","link","urlMode","toIso","value","Date","toISOString","undefined","isRecord","Record","Boolean","Array","isArray","isDuplicateKeyError","error","code","toStringMap","entries","Object","filter","entry","length","fromEntries","getForwardedHeaderValue","raw","split","trim","getRequestOrigin","ctx","protocol","req","headers","host","get","getNotificationActionLinks","notification","links","data","push","linkMode","platformWebpush","platform","webpush","fcmOptions","actionSearchParamsMatchTargetUrl","actionUrl","targetUrl","origin","base","URL","action","target","key","searchParams","from","keys","notificationActionLinkMatchesUrl","normalizeNotificationActionUrl","buildDisabledTopics","settings","topicPreferences","map","pref","topic","enabled","listNotifications","ListRequestPayload","ListResponsePayload","payload","session","ok","ability","tenantId","can","res","status","parsed","listRequestSchema","safeParse","success","userId","includeArchived","unreadOnly","limit","markSeen","SettingsModel","findOne","lean","disabledTopics","NotificationModel","queryFilters","archivedAt","$exists","readAt","$nin","query","$and","notifications","find","sort","createdAt","unseenQueryFilters","seenAt","unseenQuery","unreadQueryFilters","unreadQuery","unreadCount","unseenCount","Promise","all","countDocuments","now","updateMany","$set","listResponseSchema","parse","n","id","String","tag","deliveryId","title","body","image","createNotificationForCurrentUser","CreateRequestPayload","CreateResponsePayload","createRequestSchema","actionLink","url","normalizeNotificationActionLink","created","metadata","createResponseSchema","markRead","MarkReadResponsePayload","_payload","notificationId","params","updateOne","markReadByUrl","MarkReadByUrlRequestPayload","MarkReadByUrlResponsePayload","markReadByUrlRequestSchema","$or","$type","candidates","select","matchingIds","some","markReadByUrlResponseSchema","matchedCount","modifiedCount","result","$in","markAllRead","MarkAllReadResponsePayload","archiveNotification","ArchiveResponsePayload","drawerActive","getSettings","SettingsResponsePayload","digestFrequencyRaw","digestFrequency","DigestFrequency","inApp","emailDigest","settingsResponseSchema","lastDigestSentAt","updateSettings","UpdateSettingsRequestPayload","UpdateSettingsResponsePayload","updateSettingsRequestSchema","nextValues","seen","Set","next","has","add","settingsFilter","updateExistingSettings","findOneAndUpdate","returnDocument","create","updateSettingsResponseSchema","runDigest","DigestRunRequestPayload","DigestRunResponsePayload","digestRunRequestSchema","force","sent","skippedReason","api","post","ListRoute","CreateRoute","MarkReadRoute","MarkReadByUrlRoute","MarkAllReadRoute","ArchiveRoute","SettingsRoute","put","DigestRunRoute"],"sources":["../src/notifications/api/notifications/shared.ts","../src/notifications/api/notifications/index.ts","../src/notifications/api/notifications/handler.ts"],"sourcesContent":["import type { Ctx } from \"@rpcbase/api\"\n\n\ntype NotificationSessionUser = {\n  id?: unknown\n  currentTenantId?: unknown\n}\n\nexport const getSessionUser = (ctx: Ctx) => {\n  const rawSessionUser = (ctx.req.session as { user?: NotificationSessionUser } | null | undefined)?.user\n  const userId = typeof rawSessionUser?.id === \"string\" ? rawSessionUser.id.trim() : \"\"\n  const tenantId = typeof rawSessionUser?.currentTenantId === \"string\" ? rawSessionUser.currentTenantId.trim() : \"\"\n\n  if (!userId) {\n    ctx.res.status(401)\n    return null\n  }\n\n  if (!tenantId) {\n    ctx.res.status(400)\n    return null\n  }\n\n  return { userId, tenantId }\n}\n\n","import { z } from \"zod\"\n\n\nexport const ListRoute = \"/api/rb/notifications\"\nexport const CreateRoute = \"/api/rb/notifications/create\"\nexport const MarkReadRoute = \"/api/rb/notifications/:notificationId/read\"\nexport const MarkReadByUrlRoute = \"/api/rb/notifications/mark-read-by-url\"\nexport const ArchiveRoute = \"/api/rb/notifications/:notificationId/archive\"\nexport const MarkAllReadRoute = \"/api/rb/notifications/mark-all-read\"\nexport const SettingsRoute = \"/api/rb/notifications/settings\"\nexport const DigestRunRoute = \"/api/rb/notifications/digest/run\"\n\nexport const listRequestSchema = z.object({\n  includeArchived: z.boolean().optional(),\n  unreadOnly: z.boolean().optional(),\n  limit: z.number().int().min(1).max(200).optional(),\n  markSeen: z.boolean().optional(),\n})\n\nexport type ListRequestPayload = z.infer<typeof listRequestSchema>\n\nexport const notificationDataSchema = z.record(z.string(), z.string())\n\nexport const notificationPlatformPayloadSchema = z.object({\n  webpush: z.record(z.string(), z.unknown()).optional(),\n  fcmOptions: z.record(z.string(), z.unknown()).optional(),\n  android: z.record(z.string(), z.unknown()).optional(),\n  apns: z.record(z.string(), z.unknown()).optional(),\n}).passthrough()\n\nexport type NotificationPlatformPayload = z.infer<typeof notificationPlatformPayloadSchema>\n\nconst createRequestStringSchema = z.string().trim()\nconst notificationUrlModeSchema = z.enum([\"navigate\", \"merge_current_search\"])\n\nexport const notificationContentFieldsSchema = z.object({\n  title: z.string().min(1),\n  body: z.string().optional(),\n  image: z.string().optional(),\n})\n\nexport const createRequestSchema = z.object({\n  topic: createRequestStringSchema.min(1).optional(),\n  tag: createRequestStringSchema.min(1).optional(),\n  title: createRequestStringSchema.min(1),\n  body: createRequestStringSchema.optional(),\n  image: createRequestStringSchema.optional(),\n  url: createRequestStringSchema.min(1).optional(),\n  urlMode: notificationUrlModeSchema.optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n  data: notificationDataSchema.optional(),\n  platform: notificationPlatformPayloadSchema.optional(),\n})\n\nexport type CreateRequestPayload = z.infer<typeof createRequestSchema>\n\nexport const normalizeNotificationActionUrl = (url: string, origin: string): string | null => {\n  const raw = url.trim()\n  if (!raw) return null\n\n  try {\n    const base = new URL(origin)\n    const parsed = new URL(raw, base)\n    if (parsed.origin !== base.origin) return null\n    return `${parsed.pathname}${parsed.search}`\n  } catch {\n    return null\n  }\n}\n\nexport const normalizeNotificationActionLink = (\n  url: string,\n  origin: string,\n  urlMode: z.infer<typeof notificationUrlModeSchema> = \"navigate\",\n): string | null => {\n  const raw = url.trim()\n  if (!raw) return null\n\n  try {\n    const base = new URL(origin)\n    const parsed = new URL(raw, base)\n    if (parsed.origin !== base.origin) return null\n    if (urlMode === \"navigate\") return `${parsed.pathname}${parsed.search}${parsed.hash}`\n    return `${parsed.search}${parsed.hash}` || null\n  } catch {\n    return null\n  }\n}\n\nexport const notificationSchema = z.object({\n  id: z.string(),\n  topic: z.string().optional(),\n  tag: z.string().optional(),\n  deliveryId: z.string().optional(),\n  title: notificationContentFieldsSchema.shape.title,\n  body: notificationContentFieldsSchema.shape.body,\n  image: notificationContentFieldsSchema.shape.image,\n  data: notificationDataSchema.optional(),\n  platform: notificationPlatformPayloadSchema.optional(),\n  createdAt: z.string(),\n  seenAt: z.string().optional(),\n  readAt: z.string().optional(),\n  archivedAt: z.string().optional(),\n})\n\nexport type NotificationPayload = z.infer<typeof notificationSchema>\n\nexport const listResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  notifications: z.array(notificationSchema).optional(),\n  unreadCount: z.number().int().min(0).optional(),\n  unseenCount: z.number().int().min(0).optional(),\n})\n\nexport type ListResponsePayload = z.infer<typeof listResponseSchema>\n\nexport const createResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  id: z.string().optional(),\n})\n\nexport type CreateResponsePayload = z.infer<typeof createResponseSchema>\n\nexport const markReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkReadResponsePayload = z.infer<typeof markReadResponseSchema>\n\nexport const markReadByUrlRequestSchema = z.object({\n  url: z.string().trim().min(1),\n})\n\nexport type MarkReadByUrlRequestPayload = z.infer<typeof markReadByUrlRequestSchema>\n\nexport const markReadByUrlResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  matchedCount: z.number().int().min(0).optional(),\n  modifiedCount: z.number().int().min(0).optional(),\n})\n\nexport type MarkReadByUrlResponsePayload = z.infer<typeof markReadByUrlResponseSchema>\n\nexport const archiveResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ArchiveResponsePayload = z.infer<typeof archiveResponseSchema>\n\nexport const markAllReadResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type MarkAllReadResponsePayload = z.infer<typeof markAllReadResponseSchema>\n\nexport const digestFrequencySchema = z.enum([\"off\", \"daily\", \"weekly\"])\n\nexport type DigestFrequency = z.infer<typeof digestFrequencySchema>\n\nexport const topicPreferenceSchema = z.object({\n  topic: z.string(),\n  inApp: z.boolean(),\n  emailDigest: z.boolean(),\n  push: z.boolean(),\n})\n\nexport type TopicPreferencePayload = z.infer<typeof topicPreferenceSchema>\n\nexport const settingsSchema = z.object({\n  digestFrequency: digestFrequencySchema,\n  topicPreferences: z.array(topicPreferenceSchema),\n  lastDigestSentAt: z.string().optional(),\n})\n\nexport type SettingsPayload = z.infer<typeof settingsSchema>\n\nexport const settingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type SettingsResponsePayload = z.infer<typeof settingsResponseSchema>\n\nexport const updateSettingsRequestSchema = z.object({\n  digestFrequency: digestFrequencySchema.optional(),\n  topicPreferences: z.array(topicPreferenceSchema).optional(),\n})\n\nexport type UpdateSettingsRequestPayload = z.infer<typeof updateSettingsRequestSchema>\n\nexport const updateSettingsResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  settings: settingsSchema.optional(),\n})\n\nexport type UpdateSettingsResponsePayload = z.infer<typeof updateSettingsResponseSchema>\n\nexport const digestRunRequestSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport type DigestRunRequestPayload = z.infer<typeof digestRunRequestSchema>\n\nexport const digestRunResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  sent: z.boolean().optional(),\n  skippedReason: z.string().optional(),\n})\n\nexport type DigestRunResponsePayload = z.infer<typeof digestRunResponseSchema>\n","import { Api, type ApiHandler, type Ctx } from \"@rpcbase/api\"\nimport { models, type IRBNotification, type IRBNotificationSettings } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery } from \"@rpcbase/db/acl\"\n\nimport { createNotification } from \"../../createNotification\"\nimport { sendNotificationsDigestForUser } from \"../../digest\"\nimport { getSessionUser } from \"./shared\"\n\nimport * as Notifications from \"./index\"\n\n\ntype NotificationDoc = IRBNotification & { _id: unknown }\ntype NotificationActionDoc = Pick<NotificationDoc, \"_id\" | \"data\" | \"platform\">\ntype SettingsDoc = IRBNotificationSettings & { _id: unknown }\ntype NotificationActionLink = {\n  link: string\n  urlMode: \"navigate\" | \"merge_current_search\"\n}\n\nconst toIso = (value: unknown): string | undefined => (value instanceof Date ? value.toISOString() : undefined)\nconst isRecord = (value: unknown): value is Record<string, unknown> => Boolean(value) && typeof value === \"object\" && !Array.isArray(value)\nconst isDuplicateKeyError = (error: unknown): boolean =>\n  Boolean(error && typeof error === \"object\" && \"code\" in error && error.code === 11000)\n\nconst toStringMap = (value: unknown): Record<string, string> | undefined => {\n  if (!isRecord(value)) return undefined\n  const entries = Object.entries(value)\n    .filter((entry): entry is [string, string] => typeof entry[1] === \"string\")\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined\n}\n\nconst getForwardedHeaderValue = (value: unknown): string | undefined => {\n  const raw = Array.isArray(value) ? value[0] : value\n  if (typeof raw !== \"string\") return undefined\n  return raw.split(\",\")[0]?.trim() || undefined\n}\n\nconst getRequestOrigin = (ctx: Ctx): string => {\n  const protocol = getForwardedHeaderValue(ctx.req.headers[\"x-forwarded-proto\"]) ?? ctx.req.protocol\n  const host = getForwardedHeaderValue(ctx.req.headers[\"x-forwarded-host\"]) ?? ctx.req.get(\"host\")\n\n  return protocol && host ? `${protocol}://${host}` : \"\"\n}\n\nconst getNotificationActionLinks = (notification: NotificationActionDoc): NotificationActionLink[] => {\n  const links: NotificationActionLink[] = []\n\n  if (typeof notification.data?.link === \"string\") {\n    links.push({\n      link: notification.data.link,\n      urlMode: notification.data.linkMode === \"merge_current_search\" ? \"merge_current_search\" : \"navigate\",\n    })\n  }\n\n  const platformWebpush = notification.platform?.webpush\n  if (platformWebpush && typeof platformWebpush === \"object\" && !Array.isArray(platformWebpush)) {\n    const fcmOptions = (platformWebpush as { fcmOptions?: unknown }).fcmOptions\n    if (fcmOptions && typeof fcmOptions === \"object\" && !Array.isArray(fcmOptions)) {\n      const link = (fcmOptions as { link?: unknown }).link\n      if (typeof link === \"string\") {\n        links.push({ link, urlMode: \"navigate\" })\n      }\n    }\n  }\n\n  return links\n}\n\nconst actionSearchParamsMatchTargetUrl = (actionUrl: string, targetUrl: string, origin: string): boolean => {\n  try {\n    const base = new URL(origin)\n    const action = new URL(actionUrl, base)\n    const target = new URL(targetUrl, base)\n    for (const [key, value] of action.searchParams) {\n      if (target.searchParams.get(key) !== value) return false\n    }\n    return Array.from(action.searchParams.keys()).length > 0\n  } catch {\n    return false\n  }\n}\n\nconst notificationActionLinkMatchesUrl = (\n  action: NotificationActionLink,\n  targetUrl: string,\n  origin: string,\n): boolean => {\n  if (action.urlMode === \"merge_current_search\") {\n    return actionSearchParamsMatchTargetUrl(action.link, targetUrl, origin)\n  }\n\n  return Notifications.normalizeNotificationActionUrl(action.link, origin) === targetUrl\n}\n\nconst buildDisabledTopics = (\n  settings: SettingsDoc | null,\n  key: \"inApp\" | \"emailDigest\",\n): string[] => {\n  const raw = settings?.topicPreferences\n  if (!Array.isArray(raw) || raw.length === 0) return []\n\n  return raw\n    .map((pref) => {\n      if (!pref || typeof pref !== \"object\") return null\n      const topic = typeof (pref as { topic?: unknown }).topic === \"string\" ? (pref as { topic: string }).topic.trim() : \"\"\n      if (!topic) return null\n      const enabled = (pref as Record<string, unknown>)[key] === true\n      return enabled ? null : topic\n    })\n    .filter((topic): topic is string => Boolean(topic))\n}\n\nconst listNotifications: ApiHandler<Notifications.ListRequestPayload, Notifications.ListResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.listRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { userId } = session\n  const includeArchived = parsed.data.includeArchived === true\n  const unreadOnly = parsed.data.unreadOnly === true\n  const limit = parsed.data.limit ?? 50\n  const markSeen = parsed.data.markSeen === true\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (!includeArchived) queryFilters.push({ archivedAt: { $exists: false } })\n  if (unreadOnly) queryFilters.push({ readAt: { $exists: false } })\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const notifications = (await NotificationModel.find(query)\n    .sort({ createdAt: -1 })\n    .limit(limit)\n    .lean()) as NotificationDoc[]\n\n  const unseenQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { seenAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unseenQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unseenQuery: Record<string, unknown> = { $and: unseenQueryFilters }\n\n  const unreadQueryFilters: Record<string, unknown>[] = [\n    { userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"read\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) unreadQueryFilters.push({ topic: { $nin: disabledTopics } })\n  const unreadQuery: Record<string, unknown> = { $and: unreadQueryFilters }\n\n  const [unreadCount, unseenCount] = await Promise.all([\n    NotificationModel.countDocuments(unreadQuery),\n    NotificationModel.countDocuments(unseenQuery),\n  ])\n\n  const now = markSeen ? new Date() : null\n  if (now && unseenCount > 0) {\n    await NotificationModel.updateMany(unseenQuery, { $set: { seenAt: now } })\n  }\n\n  return Notifications.listResponseSchema.parse({\n    ok: true,\n    notifications: notifications.map((n) => ({\n      id: String(n._id),\n      topic: typeof n.topic === \"string\" ? n.topic : undefined,\n      tag: typeof n.tag === \"string\" ? n.tag : undefined,\n      deliveryId: typeof n.deliveryId === \"string\" ? n.deliveryId : undefined,\n      title: typeof n.title === \"string\" ? n.title : \"\",\n      body: typeof n.body === \"string\" ? n.body : undefined,\n      image: typeof n.image === \"string\" ? n.image : undefined,\n      data: toStringMap(n.data),\n      platform: isRecord(n.platform) ? n.platform : undefined,\n      createdAt: toIso(n.createdAt) ?? new Date().toISOString(),\n      seenAt: toIso(n.seenAt) ?? (now && !n.archivedAt && !n.seenAt ? now.toISOString() : undefined),\n      readAt: toIso(n.readAt),\n      archivedAt: toIso(n.archivedAt),\n    })),\n    unreadCount,\n    unseenCount: now ? 0 : unseenCount,\n  })\n}\n\nconst createNotificationForCurrentUser: ApiHandler<Notifications.CreateRequestPayload, Notifications.CreateResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"create\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.createRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const origin = getRequestOrigin(ctx)\n  const actionLink = parsed.data.url\n    ? Notifications.normalizeNotificationActionLink(parsed.data.url, origin, parsed.data.urlMode) ?? undefined\n    : undefined\n  if (parsed.data.url && !actionLink) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const created = await createNotification(ctx, {\n    userId: session.userId,\n    topic: parsed.data.topic,\n    tag: parsed.data.tag,\n    title: parsed.data.title,\n    body: parsed.data.body,\n    image: parsed.data.image,\n    url: actionLink,\n    urlMode: parsed.data.urlMode,\n    metadata: parsed.data.metadata,\n    data: parsed.data.data,\n    platform: parsed.data.platform,\n  }, ability)\n\n  return Notifications.createResponseSchema.parse({ ok: true, id: created.id })\n}\n\nconst markRead: ApiHandler<unknown, Notifications.MarkReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const now = new Date()\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { readAt: now, seenAt: now } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst markReadByUrl: ApiHandler<Notifications.MarkReadByUrlRequestPayload, Notifications.MarkReadByUrlResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.markReadByUrlRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const origin = getRequestOrigin(ctx)\n  const targetUrl = Notifications.normalizeNotificationActionUrl(parsed.data.url, origin)\n  if (!targetUrl) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n  const query: Record<string, unknown> = {\n    $and: [\n      { userId: session.userId },\n      { archivedAt: { $exists: false } },\n      { readAt: { $exists: false } },\n      {\n        $or: [\n          { \"data.link\": { $type: \"string\" } },\n          { \"platform.webpush.fcmOptions.link\": { $type: \"string\" } },\n        ],\n      },\n      getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n    ],\n  }\n\n  const candidates = (await NotificationModel.find(query)\n    .select({ _id: 1, data: 1, platform: 1 })\n    .lean()) as NotificationActionDoc[]\n\n  const matchingIds = candidates\n    .filter((notification) =>\n      getNotificationActionLinks(notification).some((action) =>\n        notificationActionLinkMatchesUrl(action, targetUrl, origin),\n      ),\n    )\n    .map((notification) => notification._id)\n\n  if (matchingIds.length === 0) {\n    return Notifications.markReadByUrlResponseSchema.parse({\n      ok: true,\n      matchedCount: 0,\n      modifiedCount: 0,\n    })\n  }\n\n  const now = new Date()\n  const result = await NotificationModel.updateMany(\n    {\n      $and: [\n        { _id: { $in: matchingIds } },\n        { userId: session.userId },\n        { archivedAt: { $exists: false } },\n        { readAt: { $exists: false } },\n        getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n      ],\n    },\n    { $set: { readAt: now, seenAt: now } },\n  )\n\n  const modifiedCount = typeof result.modifiedCount === \"number\" ? result.modifiedCount : matchingIds.length\n\n  return Notifications.markReadByUrlResponseSchema.parse({\n    ok: true,\n    matchedCount: matchingIds.length,\n    modifiedCount,\n  })\n}\n\nconst markAllRead: ApiHandler<unknown, Notifications.MarkAllReadResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne({ userId: session.userId }).lean()) as SettingsDoc | null\n  const disabledTopics = buildDisabledTopics(settings, \"inApp\")\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  const queryFilters: Record<string, unknown>[] = [\n    { userId: session.userId },\n    { archivedAt: { $exists: false } },\n    { readAt: { $exists: false } },\n    getAccessibleByQuery(ability, \"update\", \"RBNotification\"),\n  ]\n  if (disabledTopics.length > 0) queryFilters.push({ topic: { $nin: disabledTopics } })\n  const query: Record<string, unknown> = { $and: queryFilters }\n\n  const now = new Date()\n  await NotificationModel.updateMany(query, { $set: { readAt: now, seenAt: now } })\n\n  return { ok: true }\n}\n\nconst archiveNotification: ApiHandler<unknown, Notifications.ArchiveResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const notificationId = typeof ctx.req.params.notificationId === \"string\" ? ctx.req.params.notificationId.trim() : \"\"\n  if (!notificationId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"missing_notification_id\" }\n  }\n\n  const NotificationModel = await models.get(\"RBNotification\", { req: ctx.req, ability })\n\n  try {\n    await NotificationModel.updateOne(\n      { $and: [{ _id: notificationId }, { archivedAt: { $exists: false } }, getAccessibleByQuery(ability, \"update\", \"RBNotification\")] },\n      { $set: { archivedAt: new Date(), drawerActive: false } },\n    )\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_notification_id\" }\n  }\n\n  return { ok: true }\n}\n\nconst getSettings: ApiHandler<unknown, Notifications.SettingsResponsePayload> = async(\n  _payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const settings = (await SettingsModel.findOne(\n    { $and: [{ userId: session.userId }, getAccessibleByQuery(ability, \"read\", \"RBNotificationSettings\")] },\n  ).lean()) as SettingsDoc | null\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.settingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst updateSettings: ApiHandler<Notifications.UpdateSettingsRequestPayload, Notifications.UpdateSettingsResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"update\", \"RBNotificationSettings\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.updateSettingsRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const SettingsModel = await models.get(\"RBNotificationSettings\", { req: ctx.req, ability })\n  const nextValues: Record<string, unknown> = {}\n\n  if (parsed.data.digestFrequency) {\n    nextValues.digestFrequency = parsed.data.digestFrequency\n  }\n\n  if (parsed.data.topicPreferences) {\n    const seen = new Set<string>()\n    const next = parsed.data.topicPreferences\n      .map((pref) => ({\n        topic: pref.topic.trim(),\n        inApp: pref.inApp,\n        emailDigest: pref.emailDigest,\n        push: pref.push,\n      }))\n      .filter((pref) => pref.topic.length > 0)\n      .filter((pref) => {\n        if (seen.has(pref.topic)) return false\n        seen.add(pref.topic)\n        return true\n      })\n\n    nextValues.topicPreferences = next\n  }\n\n  const settingsFilter = {\n    $and: [\n      { userId: session.userId },\n      getAccessibleByQuery(ability, \"update\", \"RBNotificationSettings\"),\n    ],\n  }\n  const updateExistingSettings = async (): Promise<SettingsDoc | null> => (\n    await SettingsModel.findOneAndUpdate(\n      settingsFilter,\n      { $set: { userId: session.userId, ...nextValues } },\n      { returnDocument: \"after\" },\n    ).lean()\n  ) as SettingsDoc | null\n\n  let settings = await updateExistingSettings()\n  if (!settings) {\n    try {\n      settings = await SettingsModel.create({\n        userId: session.userId,\n        ...nextValues,\n      }) as unknown as SettingsDoc\n    } catch (error) {\n      if (!isDuplicateKeyError(error)) throw error\n      settings = await updateExistingSettings()\n      if (!settings) throw error\n    }\n  }\n\n  const digestFrequencyRaw = typeof settings?.digestFrequency === \"string\" ? settings.digestFrequency : \"weekly\"\n  const digestFrequency: Notifications.DigestFrequency =\n    digestFrequencyRaw === \"off\" || digestFrequencyRaw === \"daily\" || digestFrequencyRaw === \"weekly\"\n      ? digestFrequencyRaw\n      : \"weekly\"\n\n  const topicPreferences = Array.isArray(settings?.topicPreferences)\n    ? settings!.topicPreferences.map((pref) => ({\n      topic: typeof pref.topic === \"string\" ? pref.topic : \"\",\n      inApp: pref.inApp === true,\n      emailDigest: pref.emailDigest === true,\n      push: pref.push === true,\n    })).filter((pref) => pref.topic.length > 0)\n    : []\n\n  return Notifications.updateSettingsResponseSchema.parse({\n    ok: true,\n    settings: {\n      digestFrequency,\n      topicPreferences,\n      lastDigestSentAt: toIso(settings?.lastDigestSentAt),\n    },\n  })\n}\n\nconst runDigest: ApiHandler<Notifications.DigestRunRequestPayload, Notifications.DigestRunResponsePayload> = async(\n  payload,\n  ctx,\n) => {\n  const session = getSessionUser(ctx)\n  if (!session) {\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId: session.tenantId, session: ctx.req.session })\n  if (!ability.can(\"read\", \"RBNotification\")) {\n    ctx.res.status(403)\n    return { ok: false, error: \"forbidden\" }\n  }\n\n  const parsed = Notifications.digestRunRequestSchema.safeParse(payload)\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const result = await sendNotificationsDigestForUser(ctx, {\n    userId: session.userId,\n    ability,\n    force: parsed.data.force === true,\n  })\n\n  if (!result.ok) {\n    ctx.res.status(500)\n    return { ok: false, error: result.error }\n  }\n\n  return {\n    ok: true,\n    sent: result.sent,\n    ...(result.skippedReason ? { skippedReason: result.skippedReason } : {}),\n  }\n}\n\nexport default (api: Api) => {\n  api.post(Notifications.ListRoute, listNotifications)\n  api.post(Notifications.CreateRoute, createNotificationForCurrentUser)\n  api.post(Notifications.MarkReadRoute, markRead)\n  api.post(Notifications.MarkReadByUrlRoute, markReadByUrl)\n  api.post(Notifications.MarkAllReadRoute, markAllRead)\n  api.post(Notifications.ArchiveRoute, archiveNotification)\n  api.get(Notifications.SettingsRoute, getSettings)\n  api.put(Notifications.SettingsRoute, updateSettings)\n  api.post(Notifications.DigestRunRoute, runDigest)\n}\n"],"mappings":";;;;;AAQA,IAAaI,kBAAkBC,QAAa;CAC1C,MAAMC,iBAAkBD,IAAIE,IAAIC,SAAmEC;CACnG,MAAMC,SAAS,OAAOJ,gBAAgBJ,OAAO,WAAWI,eAAeJ,GAAGS,KAAK,IAAI;CACnF,MAAMC,WAAW,OAAON,gBAAgBH,oBAAoB,WAAWG,eAAeH,gBAAgBQ,KAAK,IAAI;CAE/G,IAAI,CAACD,QAAQ;EACXL,IAAIQ,IAAIC,OAAO,GAAG;EAClB,OAAO;CACT;CAEA,IAAI,CAACF,UAAU;EACbP,IAAIQ,IAAIC,OAAO,GAAG;EAClB,OAAO;CACT;CAEA,OAAO;EAAEJ;EAAQE;CAAS;AAC5B;;;ACrBA,IAAaI,YAAY;AACzB,IAAaC,cAAc;AAC3B,IAAaC,gBAAgB;AAC7B,IAAaC,qBAAqB;AAClC,IAAaC,eAAe;AAC5B,IAAaC,mBAAmB;AAChC,IAAaC,gBAAgB;AAC7B,IAAaC,iBAAiB;AAE9B,IAAaC,oBAAoBT,OAAS;CACxCW,iBAAiBX,QAAU,CAAC,CAACa,SAAS;CACtCC,YAAYd,QAAU,CAAC,CAACa,SAAS;CACjCE,OAAOf,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG,CAAC,CAACN,SAAS;CACjDO,UAAUpB,QAAU,CAAC,CAACa,SAAS;AACjC,CAAC;AAID,IAAaU,yBAAyBvB,OAASA,OAAS,GAAGA,OAAS,CAAC;AAErE,IAAa0B,oCAAoC1B,OAAS;CACxD2B,SAAS3B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACpDgB,YAAY7B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACvDiB,SAAS9B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACpDkB,MAAM/B,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;AACnD,CAAC,CAAC,CAACmB,YAAY;AAIf,IAAME,4BAA4BlC,OAAS,CAAC,CAACmC,KAAK;AAClD,IAAMC,4BAA4BpC,MAAO,CAAC,YAAY,sBAAsB,CAAC;AAE7E,IAAasC,kCAAkCtC,OAAS;CACtDuC,OAAOvC,OAAS,CAAC,CAACkB,IAAI,CAAC;CACvBsB,MAAMxC,OAAS,CAAC,CAACa,SAAS;CAC1B4B,OAAOzC,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAED,IAAa6B,sBAAsB1C,OAAS;CAC1C2C,OAAOT,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CACjD+B,KAAKV,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/C0B,OAAOL,0BAA0BhB,IAAI,CAAC;CACtCsB,MAAMN,0BAA0BrB,SAAS;CACzC4B,OAAOP,0BAA0BrB,SAAS;CAC1CgC,KAAKX,0BAA0BhB,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/CiC,SAASV,0BAA0BvB,SAAS;CAC5CkC,UAAU/C,OAASA,OAAS,GAAGA,QAAU,CAAC,CAAC,CAACa,SAAS;CACrDmC,MAAMzB,uBAAuBV,SAAS;CACtCoC,UAAUvB,kCAAkCb,SAAS;AACvD,CAAC;AAID,IAAasC,kCAAkCN,KAAaO,WAAkC;CAC5F,MAAMC,MAAMR,IAAIV,KAAK;CACrB,IAAI,CAACkB,KAAK,OAAO;CAEjB,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIH,MAAM;EAC3B,MAAMI,SAAS,IAAID,IAAIF,KAAKC,IAAI;EAChC,IAAIE,OAAOJ,WAAWE,KAAKF,QAAQ,OAAO;EAC1C,OAAO,GAAGI,OAAOC,WAAWD,OAAOE;CACrC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAaC,mCACXd,KACAO,QACAN,UAAqD,eACnC;CAClB,MAAMO,MAAMR,IAAIV,KAAK;CACrB,IAAI,CAACkB,KAAK,OAAO;CAEjB,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIH,MAAM;EAC3B,MAAMI,SAAS,IAAID,IAAIF,KAAKC,IAAI;EAChC,IAAIE,OAAOJ,WAAWE,KAAKF,QAAQ,OAAO;EAC1C,IAAIN,YAAY,YAAY,OAAO,GAAGU,OAAOC,WAAWD,OAAOE,SAASF,OAAOI;EAC/E,OAAO,GAAGJ,OAAOE,SAASF,OAAOI,UAAU;CAC7C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAaC,qBAAqB7D,OAAS;CACzC8D,IAAI9D,OAAS;CACb2C,OAAO3C,OAAS,CAAC,CAACa,SAAS;CAC3B+B,KAAK5C,OAAS,CAAC,CAACa,SAAS;CACzBkD,YAAY/D,OAAS,CAAC,CAACa,SAAS;CAChC0B,OAAOD,gCAAgC0B,MAAMzB;CAC7CC,MAAMF,gCAAgC0B,MAAMxB;CAC5CC,OAAOH,gCAAgC0B,MAAMvB;CAC7CO,MAAMzB,uBAAuBV,SAAS;CACtCoC,UAAUvB,kCAAkCb,SAAS;CACrDoD,WAAWjE,OAAS;CACpBkE,QAAQlE,OAAS,CAAC,CAACa,SAAS;CAC5BsD,QAAQnE,OAAS,CAAC,CAACa,SAAS;CAC5BuD,YAAYpE,OAAS,CAAC,CAACa,SAAS;AAClC,CAAC;AAID,IAAayD,qBAAqBtE,OAAS;CACzCuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4D,eAAezE,MAAQ6D,kBAAkB,CAAC,CAAChD,SAAS;CACpD8D,aAAa3E,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;CAC9C+D,aAAa5E,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;AAChD,CAAC;AAID,IAAaiE,uBAAuB9E,OAAS;CAC3CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BiD,IAAI9D,OAAS,CAAC,CAACa,SAAS;AAC1B,CAAC;AAIqCb,OAAS;CAC7CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAID,IAAaqE,6BAA6BlF,OAAS,EACjD6C,KAAK7C,OAAS,CAAC,CAACmC,KAAK,CAAC,CAACjB,IAAI,CAAC,EAC9B,CAAC;AAID,IAAakE,8BAA8BpF,OAAS;CAClDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BwE,cAAcrF,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;CAC/CyE,eAAetF,OAAS,CAAC,CAACiB,IAAI,CAAC,CAACC,IAAI,CAAC,CAAC,CAACL,SAAS;AAClD,CAAC;AAIoCb,OAAS;CAC5CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAIwCb,OAAS;CAChDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;AAC7B,CAAC;AAID,IAAa+E,wBAAwB5F,MAAO;CAAC;CAAO;CAAS;AAAQ,CAAC;AAItE,IAAa8F,wBAAwB9F,OAAS;CAC5C2C,OAAO3C,OAAS;CAChB+F,OAAO/F,QAAU;CACjBgG,aAAahG,QAAU;CACvBiG,MAAMjG,QAAU;AAClB,CAAC;AAID,IAAamG,iBAAiBnG,OAAS;CACrCoG,iBAAiBR;CACjBS,kBAAkBrG,MAAQ8F,qBAAqB;CAC/CQ,kBAAkBtG,OAAS,CAAC,CAACa,SAAS;AACxC,CAAC;AAID,IAAa2F,yBAAyBxG,OAAS;CAC7CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4F,UAAUN,eAAetF,SAAS;AACpC,CAAC;AAID,IAAa8F,8BAA8B3G,OAAS;CAClDoG,iBAAiBR,sBAAsB/E,SAAS;CAChDwF,kBAAkBrG,MAAQ8F,qBAAqB,CAAC,CAACjF,SAAS;AAC5D,CAAC;AAID,IAAagG,+BAA+B7G,OAAS;CACnDuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3B4F,UAAUN,eAAetF,SAAS;AACpC,CAAC;AAID,IAAakG,yBAAyB/G,OAAS,EAC7CgH,OAAOhH,QAAU,CAAC,CAACa,SAAS,EAC9B,CAAC;AAIsCb,OAAS;CAC9CuE,IAAIvE,QAAU;CACdwE,OAAOxE,OAAS,CAAC,CAACa,SAAS;CAC3BsG,MAAMnH,QAAU,CAAC,CAACa,SAAS;CAC3BuG,eAAepH,OAAS,CAAC,CAACa,SAAS;AACrC,CAAC;;;ACrMD,IAAM6H,SAASC,UAAwCA,iBAAiBC,OAAOD,MAAME,YAAY,IAAIC,KAAAA;AACrG,IAAMC,YAAYJ,UAAqDM,QAAQN,KAAK,KAAK,OAAOA,UAAU,YAAY,CAACO,MAAMC,QAAQR,KAAK;AAC1I,IAAMS,uBAAuBC,UAC3BJ,QAAQI,SAAS,OAAOA,UAAU,YAAY,UAAUA,SAASA,MAAMC,SAAS,IAAK;AAEvF,IAAMC,eAAeZ,UAAuD;CAC1E,IAAI,CAACI,SAASJ,KAAK,GAAG,OAAOG,KAAAA;CAC7B,MAAMU,UAAUC,OAAOD,QAAQb,KAAK,CAAC,CAClCe,QAAQC,UAAqC,OAAOA,MAAM,OAAO,QAAQ;CAC5E,OAAOH,QAAQI,SAAS,IAAIH,OAAOI,YAAYL,OAAO,IAAIV,KAAAA;AAC5D;AAEA,IAAMgB,2BAA2BnB,UAAuC;CACtE,MAAMoB,MAAMb,MAAMC,QAAQR,KAAK,IAAIA,MAAM,KAAKA;CAC9C,IAAI,OAAOoB,QAAQ,UAAU,OAAOjB,KAAAA;CACpC,OAAOiB,IAAIC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAEC,KAAK,KAAKnB,KAAAA;AACtC;AAEA,IAAMoB,oBAAoBC,QAAqB;CAC7C,MAAMC,WAAWN,wBAAwBK,IAAIE,IAAIC,QAAQ,oBAAoB,KAAKH,IAAIE,IAAID;CAC1F,MAAMG,OAAOT,wBAAwBK,IAAIE,IAAIC,QAAQ,mBAAmB,KAAKH,IAAIE,IAAIG,IAAI,MAAM;CAE/F,OAAOJ,YAAYG,OAAO,GAAGH,SAAQ,KAAMG,SAAS;AACtD;AAEA,IAAME,8BAA8BC,iBAAkE;CACpG,MAAMC,QAAkC,CAAA;CAExC,IAAI,OAAOD,aAAaE,MAAMpC,SAAS,UACrCmC,MAAME,KAAK;EACTrC,MAAMkC,aAAaE,KAAKpC;EACxBC,SAASiC,aAAaE,KAAKE,aAAa,yBAAyB,yBAAyB;CAC5F,CAAC;CAGH,MAAMC,kBAAkBL,aAAaM,UAAUC;CAC/C,IAAIF,mBAAmB,OAAOA,oBAAoB,YAAY,CAAC7B,MAAMC,QAAQ4B,eAAe,GAAG;EAC7F,MAAMG,aAAcH,gBAA6CG;EACjE,IAAIA,cAAc,OAAOA,eAAe,YAAY,CAAChC,MAAMC,QAAQ+B,UAAU,GAAG;GAC9E,MAAM1C,OAAQ0C,WAAkC1C;GAChD,IAAI,OAAOA,SAAS,UAClBmC,MAAME,KAAK;IAAErC;IAAMC,SAAS;GAAW,CAAC;EAE5C;CACF;CAEA,OAAOkC;AACT;AAEA,IAAMQ,oCAAoCC,WAAmBC,WAAmBC,WAA4B;CAC1G,IAAI;EACF,MAAMC,OAAO,IAAIC,IAAIF,MAAM;EAC3B,MAAMG,SAAS,IAAID,IAAIJ,WAAWG,IAAI;EACtC,MAAMG,SAAS,IAAIF,IAAIH,WAAWE,IAAI;EACtC,KAAK,MAAM,CAACI,KAAKhD,UAAU8C,OAAOG,cAChC,IAAIF,OAAOE,aAAapB,IAAImB,GAAG,MAAMhD,OAAO,OAAO;EAErD,OAAOO,MAAM2C,KAAKJ,OAAOG,aAAaE,KAAK,CAAC,CAAC,CAAClC,SAAS;CACzD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAMmC,oCACJN,QACAJ,WACAC,WACY;CACZ,IAAIG,OAAOhD,YAAY,wBACrB,OAAO0C,iCAAiCM,OAAOjD,MAAM6C,WAAWC,MAAM;CAGxE,OAAOrD,+BAA6CwD,OAAOjD,MAAM8C,MAAM,MAAMD;AAC/E;AAEA,IAAMY,uBACJC,UACAP,QACa;CACb,MAAM5B,MAAMmC,UAAUC;CACtB,IAAI,CAACjD,MAAMC,QAAQY,GAAG,KAAKA,IAAIH,WAAW,GAAG,OAAO,CAAA;CAEpD,OAAOG,IACJqC,KAAKC,SAAS;EACb,IAAI,CAACA,QAAQ,OAAOA,SAAS,UAAU,OAAO;EAC9C,MAAMC,QAAQ,OAAQD,KAA6BC,UAAU,WAAYD,KAA2BC,MAAMrC,KAAK,IAAI;EACnH,IAAI,CAACqC,OAAO,OAAO;EAEnB,OADiBD,KAAiCV,SAAS,OAC1C,OAAOW;CAC1B,CAAC,CAAC,CACD5C,QAAQ4C,UAA2BrD,QAAQqD,KAAK,CAAC;AACtD;AAEA,IAAME,oBAAqG,OACzGG,SACAxC,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;EAC1C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM8D,SAAAA,kBAAyCE,UAAUV,OAAO;CAChE,IAAI,CAACQ,OAAOG,SAAS;EACnBnD,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAM,EAAEkE,WAAWX;CACnB,MAAMY,kBAAkBL,OAAOvC,KAAK4C,oBAAoB;CACxD,MAAMC,aAAaN,OAAOvC,KAAK6C,eAAe;CAC9C,MAAMC,QAAQP,OAAOvC,KAAK8C,SAAS;CACnC,MAAMC,WAAWR,OAAOvC,KAAK+C,aAAa;CAI1C,MAAMI,iBAAiB9B,oBAAoBC,OADnB0B,MADInG,OAAO+C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC,EAAA,CACpDe,QAAQ,EAAEN,OAAO,CAAC,CAAC,CAACO,KAAK,GACV,OAAO;CAE5D,MAAME,oBAAoB,MAAMvG,OAAO+C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CAEtF,MAAMmB,eAA0C,CAC9C,EAAEV,OAAO,GACT1F,qBAAqBiF,SAAS,QAAQ,gBAAgB,CAAC;CAEzD,IAAI,CAACU,iBAAiBS,aAAapD,KAAK,EAAEqD,YAAY,EAAEC,SAAS,MAAM,EAAE,CAAC;CAC1E,IAAIV,YAAYQ,aAAapD,KAAK,EAAEuD,QAAQ,EAAED,SAAS,MAAM,EAAE,CAAC;CAChE,IAAIJ,eAAenE,SAAS,GAAGqE,aAAapD,KAAK,EAAEyB,OAAO,EAAE+B,MAAMN,eAAe,EAAE,CAAC;CACpF,MAAMO,QAAiC,EAAEC,MAAMN,aAAa;CAE5D,MAAMO,gBAAiB,MAAMR,kBAAkBS,KAAKH,KAAK,CAAC,CACvDI,KAAK,EAAEC,WAAW,GAAG,CAAC,CAAC,CACvBjB,MAAMA,KAAK,CAAC,CACZI,KAAK;CAER,MAAMc,qBAAgD;EACpD,EAAErB,OAAO;EACT,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEU,QAAQ,EAAEV,SAAS,MAAM,EAAE;EAC7BtG,qBAAqBiF,SAAS,QAAQ,gBAAgB;CAAC;CAEzD,IAAIiB,eAAenE,SAAS,GAAGgF,mBAAmB/D,KAAK,EAAEyB,OAAO,EAAE+B,MAAMN,eAAe,EAAE,CAAC;CAC1F,MAAMe,cAAuC,EAAEP,MAAMK,mBAAmB;CAExE,MAAMG,qBAAgD;EACpD,EAAExB,OAAO;EACT,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BtG,qBAAqBiF,SAAS,QAAQ,gBAAgB;CAAC;CAEzD,IAAIiB,eAAenE,SAAS,GAAGmF,mBAAmBlE,KAAK,EAAEyB,OAAO,EAAE+B,MAAMN,eAAe,EAAE,CAAC;CAC1F,MAAMiB,cAAuC,EAAET,MAAMQ,mBAAmB;CAExE,MAAM,CAACE,aAAaC,eAAe,MAAMC,QAAQC,IAAI,CACnDpB,kBAAkBqB,eAAeL,WAAW,GAC5ChB,kBAAkBqB,eAAeP,WAAW,CAAC,CAC9C;CAED,MAAMQ,MAAM3B,2BAAW,IAAI/E,KAAK,IAAI;CACpC,IAAI0G,OAAOJ,cAAc,GACvB,MAAMlB,kBAAkBuB,WAAWT,aAAa,EAAEU,MAAM,EAAEX,QAAQS,IAAI,EAAE,CAAC;CAG3E,OAAA,mBAAwCI,MAAM;EAC5C7C,IAAI;EACJ2B,eAAeA,cAAcpC,KAAKuD,OAAO;GACvCC,IAAIC,OAAOF,EAAExH,GAAG;GAChBmE,OAAO,OAAOqD,EAAErD,UAAU,WAAWqD,EAAErD,QAAQxD,KAAAA;GAC/CgH,KAAK,OAAOH,EAAEG,QAAQ,WAAWH,EAAEG,MAAMhH,KAAAA;GACzCiH,YAAY,OAAOJ,EAAEI,eAAe,WAAWJ,EAAEI,aAAajH,KAAAA;GAC9DkH,OAAO,OAAOL,EAAEK,UAAU,WAAWL,EAAEK,QAAQ;GAC/CC,MAAM,OAAON,EAAEM,SAAS,WAAWN,EAAEM,OAAOnH,KAAAA;GAC5CoH,OAAO,OAAOP,EAAEO,UAAU,WAAWP,EAAEO,QAAQpH,KAAAA;GAC/C8B,MAAMrB,YAAYoG,EAAE/E,IAAI;GACxBI,UAAUjC,SAAS4G,EAAE3E,QAAQ,IAAI2E,EAAE3E,WAAWlC,KAAAA;GAC9C6F,WAAWjG,MAAMiH,EAAEhB,SAAS,sBAAK,IAAI/F,KAAK,EAAA,CAAEC,YAAY;GACxDgG,QAAQnG,MAAMiH,EAAEd,MAAM,MAAMS,OAAO,CAACK,EAAEzB,cAAc,CAACyB,EAAEd,SAASS,IAAIzG,YAAY,IAAIC,KAAAA;GACpFsF,QAAQ1F,MAAMiH,EAAEvB,MAAM;GACtBF,YAAYxF,MAAMiH,EAAEzB,UAAU;EAChC,EAAE;EACFe;EACAC,aAAaI,MAAM,IAAIJ;CACzB,CAAC;AACH;AAEA,IAAMiB,mCAAwH,OAC5HxD,SACAxC,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM8D,SAAAA,oBAA2CE,UAAUV,OAAO;CAClE,IAAI,CAACQ,OAAOG,SAAS;EACnBnD,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAMiC,SAASpB,iBAAiBC,GAAG;CACnC,MAAMoG,aAAapD,OAAOvC,KAAK4F,MAC3BvI,gCAA8CkF,OAAOvC,KAAK4F,KAAKlF,QAAQ6B,OAAOvC,KAAKnC,OAAO,KAAKK,KAAAA,IAC/FA,KAAAA;CACJ,IAAIqE,OAAOvC,KAAK4F,OAAO,CAACD,YAAY;EAClCpG,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAMqH,UAAU,MAAM5I,mBAAmBqC,KAAK;EAC5CoD,QAAQX,QAAQW;EAChBjB,OAAOa,OAAOvC,KAAK0B;EACnBwD,KAAK3C,OAAOvC,KAAKkF;EACjBE,OAAO7C,OAAOvC,KAAKoF;EACnBC,MAAM9C,OAAOvC,KAAKqF;EAClBC,OAAO/C,OAAOvC,KAAKsF;EACnBM,KAAKD;EACL9H,SAAS0E,OAAOvC,KAAKnC;EACrBkI,UAAUxD,OAAOvC,KAAK+F;EACtB/F,MAAMuC,OAAOvC,KAAKA;EAClBI,UAAUmC,OAAOvC,KAAKI;CACxB,GAAG8B,OAAO;CAEV,OAAA,qBAA0C4C,MAAM;EAAE7C,IAAI;EAAM+C,IAAIc,QAAQd;CAAG,CAAC;AAC9E;AAEA,IAAMiB,WAAuE,OAC3EE,UACA5G,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM2H,iBAAiB,OAAO7G,IAAIE,IAAI4G,OAAOD,mBAAmB,WAAW7G,IAAIE,IAAI4G,OAAOD,eAAe/G,KAAK,IAAI;CAClH,IAAI,CAAC+G,gBAAgB;EACnB7G,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAA0B;CACvD;CAEA,MAAM2E,oBAAoB,MAAMvG,OAAO+C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CACtF,MAAMwC,sBAAM,IAAI1G,KAAK;CAErB,IAAI;EACF,MAAMoF,kBAAkBkD,UACtB,EAAE3C,MAAM;GAAC,EAAEpG,KAAK6I,eAAe;GAAG,EAAE9C,YAAY,EAAEC,SAAS,MAAM,EAAE;GAAGtG,qBAAqBiF,SAAS,UAAU,gBAAgB;EAAC,EAAE,GACjI,EAAE0C,MAAM;GAAEpB,QAAQkB;GAAKT,QAAQS;EAAI,EAAE,CACvC;CACF,QAAQ;EACNnF,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAA0B;CACvD;CAEA,OAAO,EAAEwD,IAAI,KAAK;AACpB;AAEA,IAAMsE,gBAAmH,OACvHxE,SACAxC,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM8D,SAAAA,2BAAkDE,UAAUV,OAAO;CACzE,IAAI,CAACQ,OAAOG,SAAS;EACnBnD,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAMiC,SAASpB,iBAAiBC,GAAG;CACnC,MAAMkB,YAAYpD,+BAA6CkF,OAAOvC,KAAK4F,KAAKlF,MAAM;CACtF,IAAI,CAACD,WAAW;EACdlB,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAM2E,oBAAoB,MAAMvG,OAAO+C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CACtF,MAAMwB,QAAiC,EACrCC,MAAM;EACJ,EAAEhB,QAAQX,QAAQW,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7B,EACEoD,KAAK,CACH,EAAE,aAAa,EAAEC,OAAO,SAAS,EAAE,GACnC,EAAE,oCAAoC,EAAEA,OAAO,SAAS,EAAE,CAAC,EAE/D;EACA3J,qBAAqBiF,SAAS,UAAU,gBAAgB;CAAC,EAE7D;CAMA,MAAM6E,eAAcF,MAJMzD,kBAAkBS,KAAKH,KAAK,CAAC,CACpDoD,OAAO;EAAEvJ,KAAK;EAAGyC,MAAM;EAAGI,UAAU;CAAE,CAAC,CAAC,CACxC8C,KAAK,EAAA,CAGLpE,QAAQgB,iBACPD,2BAA2BC,YAAY,CAAC,CAACkH,MAAMnG,WAC7CM,iCAAiCN,QAAQJ,WAAWC,MAAM,CAC5D,CACF,CAAC,CACAc,KAAK1B,iBAAiBA,aAAavC,GAAG;CAEzC,IAAIwJ,YAAY/H,WAAW,GACzB,OAAA,4BAAiD8F,MAAM;EACrD7C,IAAI;EACJiF,cAAc;EACdC,eAAe;CACjB,CAAC;CAGH,MAAMzC,sBAAM,IAAI1G,KAAK;CACrB,MAAMoJ,SAAS,MAAMhE,kBAAkBuB,WACrC,EACEhB,MAAM;EACJ,EAAEpG,KAAK,EAAE8J,KAAKN,YAAY,EAAE;EAC5B,EAAEpE,QAAQX,QAAQW,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BtG,qBAAqBiF,SAAS,UAAU,gBAAgB;CAAC,EAE7D,GACA,EAAE0C,MAAM;EAAEpB,QAAQkB;EAAKT,QAAQS;CAAI,EAAE,CACvC;CAEA,MAAMyC,gBAAgB,OAAOC,OAAOD,kBAAkB,WAAWC,OAAOD,gBAAgBJ,YAAY/H;CAEpG,OAAA,4BAAiD8F,MAAM;EACrD7C,IAAI;EACJiF,cAAcH,YAAY/H;EAC1BmI;CACF,CAAC;AACH;AAEA,IAAMG,cAA6E,OACjFnB,UACA5G,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAIA,MAAM0E,iBAAiB9B,oBAAoBC,OADnB0B,MADInG,OAAO+C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC,EAAA,CACpDe,QAAQ,EAAEN,QAAQX,QAAQW,OAAO,CAAC,CAAC,CAACO,KAAK,GAC1B,OAAO;CAE5D,MAAME,oBAAoB,MAAMvG,OAAO+C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CAEtF,MAAMmB,eAA0C;EAC9C,EAAEV,QAAQX,QAAQW,OAAO;EACzB,EAAEW,YAAY,EAAEC,SAAS,MAAM,EAAE;EACjC,EAAEC,QAAQ,EAAED,SAAS,MAAM,EAAE;EAC7BtG,qBAAqBiF,SAAS,UAAU,gBAAgB;CAAC;CAE3D,IAAIiB,eAAenE,SAAS,GAAGqE,aAAapD,KAAK,EAAEyB,OAAO,EAAE+B,MAAMN,eAAe,EAAE,CAAC;CACpF,MAAMO,QAAiC,EAAEC,MAAMN,aAAa;CAE5D,MAAMqB,sBAAM,IAAI1G,KAAK;CACrB,MAAMoF,kBAAkBuB,WAAWjB,OAAO,EAAEkB,MAAM;EAAEpB,QAAQkB;EAAKT,QAAQS;CAAI,EAAE,CAAC;CAEhF,OAAO,EAAEzC,IAAI,KAAK;AACpB;AAEA,IAAMuF,sBAAiF,OACrFrB,UACA5G,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,gBAAgB,GAAG;EAC5C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM2H,iBAAiB,OAAO7G,IAAIE,IAAI4G,OAAOD,mBAAmB,WAAW7G,IAAIE,IAAI4G,OAAOD,eAAe/G,KAAK,IAAI;CAClH,IAAI,CAAC+G,gBAAgB;EACnB7G,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAA0B;CACvD;CAEA,MAAM2E,oBAAoB,MAAMvG,OAAO+C,IAAI,kBAAkB;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CAEtF,IAAI;EACF,MAAMkB,kBAAkBkD,UACtB,EAAE3C,MAAM;GAAC,EAAEpG,KAAK6I,eAAe;GAAG,EAAE9C,YAAY,EAAEC,SAAS,MAAM,EAAE;GAAGtG,qBAAqBiF,SAAS,UAAU,gBAAgB;EAAC,EAAE,GACjI,EAAE0C,MAAM;GAAEtB,4BAAY,IAAItF,KAAK;GAAG0J,cAAc;EAAM,EAAE,CAC1D;CACF,QAAQ;EACNnI,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAA0B;CACvD;CAEA,OAAO,EAAEwD,IAAI,KAAK;AACpB;AAEA,IAAM0F,cAA0E,OAC9ExB,UACA5G,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,QAAQ,wBAAwB,GAAG;EAClD7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAGA,MAAM6C,WAAY,OAAM0B,MADInG,OAAO+C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC,EAAA,CACpDe,QACpC,EAAEU,MAAM,CAAC,EAAEhB,QAAQX,QAAQW,OAAO,GAAG1F,qBAAqBiF,SAAS,QAAQ,wBAAwB,CAAC,EAAE,CACxG,CAAC,CAACgB,KAAK;CAEP,MAAM2E,qBAAqB,OAAOvG,UAAUwG,oBAAoB,WAAWxG,SAASwG,kBAAkB;CACtG,MAAMA,kBACJD,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;CAEN,MAAMtG,mBAAmBjD,MAAMC,QAAQ+C,UAAUC,gBAAgB,IAC7DD,SAAUC,iBAAiBC,KAAKC,UAAU;EAC1CC,OAAO,OAAOD,KAAKC,UAAU,WAAWD,KAAKC,QAAQ;EACrDsG,OAAOvG,KAAKuG,UAAU;EACtBC,aAAaxG,KAAKwG,gBAAgB;EAClChI,MAAMwB,KAAKxB,SAAS;CACtB,EAAE,CAAC,CAACnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,IACxC,CAAA;CAEJ,OAAA,uBAA4C8F,MAAM;EAChD7C,IAAI;EACJX,UAAU;GACRwG;GACAvG;GACA4G,kBAAkBrK,MAAMwD,UAAU6G,gBAAgB;EACpD;CACF,CAAC;AACH;AAEA,IAAMC,iBAAsH,OAC1HrG,SACAxC,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,UAAU,wBAAwB,GAAG;EACpD7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM8D,SAAAA,4BAAmDE,UAAUV,OAAO;CAC1E,IAAI,CAACQ,OAAOG,SAAS;EACnBnD,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAMuE,gBAAgB,MAAMnG,OAAO+C,IAAI,0BAA0B;EAAEH,KAAKF,IAAIE;EAAKyC;CAAQ,CAAC;CAC1F,MAAMsG,aAAsC,CAAC;CAE7C,IAAIjG,OAAOvC,KAAK8H,iBACdU,WAAWV,kBAAkBvF,OAAOvC,KAAK8H;CAG3C,IAAIvF,OAAOvC,KAAKuB,kBAAkB;EAChC,MAAMkH,uBAAO,IAAIC,IAAY;EAe7BF,WAAWjH,mBAdEgB,OAAOvC,KAAKuB,iBACtBC,KAAKC,UAAU;GACdC,OAAOD,KAAKC,MAAMrC,KAAK;GACvB2I,OAAOvG,KAAKuG;GACZC,aAAaxG,KAAKwG;GAClBhI,MAAMwB,KAAKxB;EACb,EAAE,CAAC,CACFnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,CAAC,CACvCF,QAAQ2C,SAAS;GAChB,IAAIgH,KAAKG,IAAInH,KAAKC,KAAK,GAAG,OAAO;GACjC+G,KAAKI,IAAIpH,KAAKC,KAAK;GACnB,OAAO;EACT,CAE4BiH;CAChC;CAEA,MAAMG,iBAAiB,EACrBnF,MAAM,CACJ,EAAEhB,QAAQX,QAAQW,OAAO,GACzB1F,qBAAqBiF,SAAS,UAAU,wBAAwB,CAAC,EAErE;CACA,MAAM6G,yBAAyB,YAC7B,MAAM/F,cAAcgG,iBAClBF,gBACA,EAAElE,MAAM;EAAEjC,QAAQX,QAAQW;EAAQ,GAAG6F;CAAW,EAAE,GAClD,EAAES,gBAAgB,QAAQ,CAC5B,CAAC,CAAC/F,KAAK;CAGT,IAAI5B,WAAW,MAAMyH,uBAAuB;CAC5C,IAAI,CAACzH,UACH,IAAI;EACFA,WAAW,MAAM0B,cAAckG,OAAO;GACpCvG,QAAQX,QAAQW;GAChB,GAAG6F;EACL,CAAC;CACH,SAAS/J,OAAO;EACd,IAAI,CAACD,oBAAoBC,KAAK,GAAG,MAAMA;EACvC6C,WAAW,MAAMyH,uBAAuB;EACxC,IAAI,CAACzH,UAAU,MAAM7C;CACvB;CAGF,MAAMoJ,qBAAqB,OAAOvG,UAAUwG,oBAAoB,WAAWxG,SAASwG,kBAAkB;CACtG,MAAMA,kBACJD,uBAAuB,SAASA,uBAAuB,WAAWA,uBAAuB,WACrFA,qBACA;CAEN,MAAMtG,mBAAmBjD,MAAMC,QAAQ+C,UAAUC,gBAAgB,IAC7DD,SAAUC,iBAAiBC,KAAKC,UAAU;EAC1CC,OAAO,OAAOD,KAAKC,UAAU,WAAWD,KAAKC,QAAQ;EACrDsG,OAAOvG,KAAKuG,UAAU;EACtBC,aAAaxG,KAAKwG,gBAAgB;EAClChI,MAAMwB,KAAKxB,SAAS;CACtB,EAAE,CAAC,CAACnB,QAAQ2C,SAASA,KAAKC,MAAM1C,SAAS,CAAC,IACxC,CAAA;CAEJ,OAAA,6BAAkD8F,MAAM;EACtD7C,IAAI;EACJX,UAAU;GACRwG;GACAvG;GACA4G,kBAAkBrK,MAAMwD,UAAU6G,gBAAgB;EACpD;CACF,CAAC;AACH;AAEA,IAAMiB,YAAuG,OAC3GrH,SACAxC,QACG;CACH,MAAMyC,UAAU5E,eAAemC,GAAG;CAClC,IAAI,CAACyC,SACH,OAAO;EAAEC,IAAI;EAAOxD,OAAO;CAAe;CAG5C,MAAMyD,UAAUlF,wBAAwB;EAAEmF,UAAUH,QAAQG;EAAUH,SAASzC,IAAIE,IAAIuC;CAAQ,CAAC;CAChG,IAAI,CAACE,QAAQE,IAAI,QAAQ,gBAAgB,GAAG;EAC1C7C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAY;CACzC;CAEA,MAAM8D,SAAAA,uBAA8CE,UAAUV,OAAO;CACrE,IAAI,CAACQ,OAAOG,SAAS;EACnBnD,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO;EAAkB;CAC/C;CAEA,MAAM2I,SAAS,MAAMjK,+BAA+BoC,KAAK;EACvDoD,QAAQX,QAAQW;EAChBT;EACAsH,OAAOjH,OAAOvC,KAAKwJ,UAAU;CAC/B,CAAC;CAED,IAAI,CAACpC,OAAOnF,IAAI;EACd1C,IAAI8C,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEL,IAAI;GAAOxD,OAAO2I,OAAO3I;EAAM;CAC1C;CAEA,OAAO;EACLwD,IAAI;EACJwH,MAAMrC,OAAOqC;EACb,GAAIrC,OAAOsC,gBAAgB,EAAEA,eAAetC,OAAOsC,cAAc,IAAI,CAAC;CACxE;AACF;AAEA,IAAA,mBAAgBC,QAAa;CAC3BA,IAAIC,KAAKvM,WAAyBuE,iBAAiB;CACnD+H,IAAIC,KAAKvM,aAA2BkI,gCAAgC;CACpEoE,IAAIC,KAAKvM,eAA6B4I,QAAQ;CAC9C0D,IAAIC,KAAKvM,oBAAkCkJ,aAAa;CACxDoD,IAAIC,KAAKvM,kBAAgCiK,WAAW;CACpDqC,IAAIC,KAAKvM,cAA4BmK,mBAAmB;CACxDmC,IAAI/J,IAAIvC,eAA6BsK,WAAW;CAChDgC,IAAIS,IAAI/M,eAA6B+K,cAAc;CACnDuB,IAAIC,KAAKvM,gBAA8B+L,SAAS;AAClD"}

package/dist/handler-D9cQBJyz.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-D9cQBJyz.js","names":["JSDOM","createDOMPurify","UploadFileProcessor","MAX_SVG_BYTES","window","DOMPurify","normalizeForSniff","raw","replace","trimStart","looksLikeSvgText","text","normalized","startsWith","test","looksLikeSvg","sniff","Buffer","toString","sanitizeSvg","svg","sanitize","USE_PROFILES","svgFilters","sanitizeSvgProcessor","id","maxBytes","match","process","data","mimeType","length","Error","svgText","sanitized","trim","sanitizedBuffer","from","convertHeifToWebpProcessor","sanitizeSvgProcessor","UploadFileProcessorContext","filename","clientMimeType","totalSize","sniff","Buffer","UploadFileProcessorResult","data","mimeType","metadata","Record","UploadFileProcessor","id","maxBytes","match","ctx","process","Promise","uploadProcessors","Object","freeze","getMaxUploadProcessorBytes","reduce","max","processor","Math","selectUploadProcessors","filter","applyUploadProcessors","Omit","applied","currentData","currentFilename","currentMimeType","processorCtx","length","Error","result","trim","assign","push","createHash","ApiHandler","getTenantFilesystemDb","models","GridFSBucket","ObjectId","Model","Uploads","claimUploadFileReference","createUploadFileReference","enqueueUploadPostProcessors","applyUploadProcessors","getMaxUploadProcessorBytes","selectUploadProcessors","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadAccessMetadata","buildUploadsAbility","ensureFilesystemUploadIndexes","ensureUploadIndexes","getBucketName","getModelCtx","getUploadSessionAccessQuery","getTenantId","resolveUploadAccessScope","waitForStreamFinished","stream","NodeJS","WritableStream","Promise","resolve","reject","once","writeToStream","chunk","Buffer","ok","write","onDrain","cleanup","onError","error","off","on","abortUploadStream","abort","destroy","isDuplicateKeyError","code","completeUpload","Record","CompleteResponsePayload","_payload","ctx","tenantId","res","status","uploadId","String","req","params","trim","ability","modelCtx","UploadSession","UploadChunk","all","get","can","existing","findOne","$and","_id","lean","fileId","deduplicated","locked","findOneAndUpdate","$set","$unset","returnDocument","fsDb","nativeDb","db","updateOne","bucketName","bucket","deduplication","lockedUserId","userId","undefined","accessMetadata","unclaimedDeduplication","namespace","algorithm","hash","pipelineVersion","createFileMetadata","storedMimeType","storedSize","additional","mimeType","totalSize","maxProcessorBytes","shouldBufferForProcessing","declaredMimeType","toLowerCase","declaredSvg","filename","endsWith","uploadStream","finalFilename","finalMimeType","finalSize","inlineProcessors","finalMetadata","Error","cursor","find","sort","index","AsyncIterable","close","expectedIndex","sourceBytes","sourceHasher","chunks","bufferedBytes","pendingChunks","sniffParts","sniffBytes","chunkDoc","data","length","update","push","slice","subarray","Math","min","sniff","concat","processors","clientMimeType","some","processor","id","openUploadStream","metadata","pending","chunksTotal","digest","assembled","processed","processedFilename","processedMimeType","applied","processedMetadata","sourceTotalSize","finished","end","uploadedBlobId","resolvedBlobId","returnedFileId","filesCollection","collection","uploadedBlobObjectId","referenceOptions","accessScope","isPublic","ownerKeyHash","lastDuplicateKeyError","attempt","blobId","canonicalFile","key","projection","canonicalReferenceId","deduplicationKey","delete","toHexString","catch","console","deleteMany","message","startsWith","ApiHandler","models","Model","Uploads","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadsAbility","getModelCtx","getUploadSessionAccessQuery","getTenantId","getStatus","Record","StatusResponsePayload","_payload","ctx","Promise","tenantId","res","status","ok","error","uploadId","String","req","params","trim","ability","modelCtx","UploadSession","UploadChunk","all","get","can","session","findOne","$and","_id","lean","receivedDocs","find","index","sort","received","Array","map","doc","filter","n","Number","isInteger","chunkSize","chunksTotal","fileId","z","InitRoute","ChunkRoute","StatusRoute","CompleteRoute","uploadAccessScopeSchema","enum","uploadDeduplicationSchema","object","namespace","string","trim","min","max","regex","algorithm","literal","hash","initRequestSchema","filename","mimeType","isPublic","boolean","optional","accessScope","deduplication","totalSize","number","int","superRefine","value","ctx","undefined","addIssue","code","message","path","InitRequestPayload","infer","initResponseSchema","ok","error","uploadId","uploadKey","chunkSize","chunksTotal","fileId","deduplicated","InitResponsePayload","statusResponseSchema","status","received","array","StatusResponsePayload","completeResponseSchema","CompleteResponsePayload","randomBytes","ApiHandler","getTenantFilesystemDb","models","ObjectId","Model","Uploads","createUploadFileReference","SessionUser","UploadSessionDoc","buildUploadDeduplication","buildUploadsAbility","computeSha256Hex","ensureFilesystemUploadIndexes","ensureUploadIndexes","getBucketName","getChunkSizeBytes","getModelCtx","getSessionTtlMs","getTenantId","getUserId","resolveUploadAccessScope","initUpload","InitRequestPayload","InitResponsePayload","payload","ctx","Promise","tenantId","res","status","ok","error","userId","parsed","initRequestSchema","safeParse","success","filename","mimeType","totalSize","isPublic","deduplication","requestedDeduplication","data","accessScope","uploadKey","toString","ownerKeyHash","Buffer","from","undefined","namespace","hash","fsDb","nativeDb","db","bucketName","existingFile","collection","findOne","key","projection","_id","length","metadata","existingMetadata","Record","existingMimeType","existingSize","fileId","blobId","deduplicationKey","deduplicated","chunkSize","chunksTotal","Math","ceil","ability","modelCtx","UploadSession","get","uploadId","now","Date","expiresAt","create","createdAt","ApiHandler","models","Model","SessionUser","UploadChunkDoc","UploadSessionDoc","buildUploadsAbility","computeSha256Hex","ensureUploadIndexes","getModelCtx","getUploadSessionAccessQuery","getTenantId","normalizeSha256Hex","toBufferPayload","ChunkResponsePayload","ok","error","uploadChunk","Buffer","payload","ctx","Promise","tenantId","res","status","uploadId","String","req","params","trim","indexRaw","index","Number","isInteger","ability","modelCtx","UploadSession","UploadChunk","all","get","can","session","findOne","$and","_id","lean","chunksTotal","data","expectedSize","totalSize","chunkSize","length","checksumHeader","sha256","undefined","expectedSha256","updateOne","$set","size","expiresAt","$setOnInsert","createdAt","Date","upsert","rawBodyParser","limitBytes","maxClientBytesPerSecond","req","res","next","contentType","headers","String","includes","total","chunks","Buffer","done","paused","throttleTimeout","ReturnType","setTimeout","rateBytesPerSecond","cleanup","off","onData","onEnd","onError","onAborted","clearTimeout","finish","error","body","concat","chunk","buffer","isBuffer","from","length","destroy","status","json","ok","push","now","Date","clientKey","getClientKey","state","getClientRateState","waitMs","consumeRateBudget","pause","resume","err","Error","on","ClientRateState","tokens","lastRefillMs","lastSeenMs","MAX_BURST_SECONDS","STALE_CLIENT_MS","clientRateStates","Map","lastCleanupMs","rawClientIp","clientIp","trim","rawIp","ip","maybeCleanupStates","size","key","delete","capacity","existing","get","Math","min","set","bytes","elapsedMs","max","ceil","Api","completeUpload","getStatus","initUpload","uploadChunk","rawBodyParser","getChunkSizeBytes","getMaxClientUploadBytesPerSecond","getRawBodyLimitBytes","SessionUser","Uploads","api","chunkSizeBytes","use","InitRoute","limitBytes","maxClientBytesPerSecond","post","put","ChunkRoute","get","StatusRoute","CompleteRoute"],"sources":["../src/uploads/api/file-uploads/processors/sanitizeSvg.ts","../src/uploads/api/file-uploads/processors/index.ts","../src/uploads/api/file-uploads/handlers/completeUpload.ts","../src/uploads/api/file-uploads/handlers/getStatus.ts","../src/uploads/api/file-uploads/index.ts","../src/uploads/api/file-uploads/handlers/initUpload.ts","../src/uploads/api/file-uploads/handlers/uploadChunk.ts","../src/uploads/api/file-uploads/middleware/rawBodyParser.ts","../src/uploads/api/file-uploads/handler.ts"],"sourcesContent":["import { JSDOM } from \"jsdom\"\nimport createDOMPurify from \"dompurify\"\n\nimport type { UploadFileProcessor } from \"./index\"\n\n\nconst MAX_SVG_BYTES = 128 * 1024\n\nconst window = new JSDOM(\"\").window\nconst DOMPurify = createDOMPurify(window)\n\nconst normalizeForSniff = (raw: string): string => raw.replace(/^\\uFEFF/, \"\").trimStart()\n\nconst looksLikeSvgText = (text: string): boolean => {\n  const normalized = normalizeForSniff(text)\n  if (!normalized.startsWith(\"<\")) return false\n  return /<svg(?:\\s|>)/i.test(normalized)\n}\n\nexport const looksLikeSvg = (sniff: Buffer): boolean => looksLikeSvgText(sniff.toString(\"utf8\"))\n\nexport const sanitizeSvg = (svg: string): string =>\n  DOMPurify.sanitize(svg, {\n    USE_PROFILES: { svg: true, svgFilters: true },\n  })\n\nexport const sanitizeSvgProcessor: UploadFileProcessor = {\n  id: \"sanitize-svg\",\n  maxBytes: MAX_SVG_BYTES,\n  match: ({ sniff }) => looksLikeSvg(sniff),\n  process: (data): { data: Buffer; mimeType: string } => {\n    if (data.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const svgText = data.toString(\"utf8\")\n    if (!looksLikeSvgText(svgText)) {\n      throw new Error(\"svg_invalid\")\n    }\n\n    const sanitized = sanitizeSvg(svgText)\n    if (!sanitized.trim() || !looksLikeSvgText(sanitized)) {\n      throw new Error(\"svg_sanitize_failed\")\n    }\n\n    const sanitizedBuffer = Buffer.from(sanitized, \"utf8\")\n    if (sanitizedBuffer.length > MAX_SVG_BYTES) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    return { data: sanitizedBuffer, mimeType: \"image/svg+xml\" }\n  },\n}\n\n","import { convertHeifToWebpProcessor } from \"./convertHeifToWebp\"\nimport { sanitizeSvgProcessor } from \"./sanitizeSvg\"\n\n\nexport type UploadFileProcessorContext = {\n  filename: string\n  clientMimeType: string\n  totalSize: number\n  sniff: Buffer\n}\n\nexport type UploadFileProcessorResult = {\n  data: Buffer\n  filename?: string\n  mimeType?: string\n  metadata?: Record<string, unknown>\n}\n\nexport type UploadFileProcessor = {\n  id: string\n  maxBytes: number\n  match: (ctx: UploadFileProcessorContext) => boolean\n  process: (data: Buffer, ctx: UploadFileProcessorContext) => Promise<UploadFileProcessorResult> | UploadFileProcessorResult\n}\n\nexport const uploadProcessors = Object.freeze([sanitizeSvgProcessor, convertHeifToWebpProcessor] satisfies UploadFileProcessor[])\n\nexport const getMaxUploadProcessorBytes = (): number =>\n  uploadProcessors.reduce((max, processor) => Math.max(max, processor.maxBytes), 0)\n\nexport const selectUploadProcessors = (ctx: UploadFileProcessorContext): UploadFileProcessor[] =>\n  uploadProcessors.filter((processor) => processor.match(ctx))\n\nexport const applyUploadProcessors = async (\n  data: Buffer,\n  ctx: Omit<UploadFileProcessorContext, \"sniff\" | \"totalSize\">,\n): Promise<{ data: Buffer; filename: string; mimeType: string; applied: string[]; metadata: Record<string, unknown> }> => {\n  let currentData = data\n  let currentFilename = ctx.filename\n  let currentMimeType = ctx.clientMimeType\n  const applied: string[] = []\n  const metadata: Record<string, unknown> = {}\n\n  for (const processor of uploadProcessors) {\n    const processorCtx: UploadFileProcessorContext = {\n      filename: currentFilename,\n      clientMimeType: currentMimeType,\n      totalSize: currentData.length,\n      sniff: currentData,\n    }\n\n    if (!processor.match(processorCtx)) continue\n\n    if (currentData.length > processor.maxBytes) {\n      throw new Error(\"processor_input_too_large\")\n    }\n\n    const result = await processor.process(currentData, processorCtx)\n    currentData = result.data\n    if (typeof result.filename === \"string\" && result.filename.trim()) {\n      currentFilename = result.filename.trim()\n    }\n    if (typeof result.mimeType === \"string\" && result.mimeType.trim()) {\n      currentMimeType = result.mimeType.trim()\n    }\n    if (result.metadata && typeof result.metadata === \"object\") {\n      Object.assign(metadata, result.metadata)\n    }\n    applied.push(processor.id)\n  }\n\n  return {\n    data: currentData,\n    filename: currentFilename,\n    mimeType: currentMimeType,\n    applied,\n    metadata,\n  }\n}\n","import { createHash } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  claimUploadFileReference,\n  createUploadFileReference,\n} from \"../fileReferences\"\nimport { enqueueUploadPostProcessors } from \"../postProcessors\"\nimport { applyUploadProcessors, getMaxUploadProcessorBytes, selectUploadProcessors } from \"../processors\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadAccessMetadata,\n  buildUploadsAbility,\n  ensureFilesystemUploadIndexes,\n  ensureUploadIndexes,\n  getBucketName,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  resolveUploadAccessScope,\n} from \"../shared\"\n\n\nconst waitForStreamFinished = async (stream: NodeJS.WritableStream): Promise<void> => new Promise((resolve, reject) => {\n  stream.once(\"finish\", resolve)\n  stream.once(\"error\", reject)\n})\n\nconst writeToStream = async (stream: NodeJS.WritableStream, chunk: Buffer): Promise<void> => {\n  const ok = stream.write(chunk)\n  if (ok) return\n  await new Promise<void>((resolve, reject) => {\n    const onDrain = () => {\n      cleanup()\n      resolve()\n    }\n\n    const onError = (error: unknown) => {\n      cleanup()\n      reject(error)\n    }\n\n    const cleanup = () => {\n      stream.off(\"drain\", onDrain)\n      stream.off(\"error\", onError)\n    }\n\n    stream.on(\"drain\", onDrain)\n    stream.on(\"error\", onError)\n  })\n}\n\nconst abortUploadStream = async (stream: unknown): Promise<void> => {\n  if (!stream) return\n  if (typeof (stream as { abort?: unknown }).abort === \"function\") {\n    try {\n      await (stream as { abort: () => Promise<void> | void }).abort()\n      return\n    } catch {\n      //\n    }\n  }\n  try {\n    ;(stream as { destroy?: () => void }).destroy?.()\n  } catch {\n    //\n  }\n}\n\nconst isDuplicateKeyError = (error: unknown): boolean => (\n  error !== null &&\n  typeof error === \"object\" &&\n  \"code\" in error &&\n  (error as { code?: unknown }).code === 11000\n)\n\nexport const completeUpload: ApiHandler<Record<string, never>, Uploads.CompleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.CompleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const existing = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!existing) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (existing.status === \"done\" && existing.fileId) {\n    return {\n      ok: true,\n      fileId: existing.fileId,\n      ...(existing.deduplicated ? { deduplicated: true } : {}),\n    }\n  }\n\n  const locked = await UploadSession.findOneAndUpdate(\n    { $and: [{ _id: uploadId }, { status: \"uploading\" }, getUploadSessionAccessQuery(ability, \"update\")] },\n    { $set: { status: \"assembling\" }, $unset: { error: \"\" } },\n    { returnDocument: \"after\" },\n  ).lean()\n\n  if (!locked) {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  await ensureUploadIndexes(modelCtx)\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: \"filesystem_db_unavailable\" } },\n    )\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n  if (locked.deduplication) {\n    await ensureFilesystemUploadIndexes(nativeDb, bucketName)\n  }\n\n  const lockedUserId = typeof locked.userId === \"string\" ? locked.userId : undefined\n  const accessMetadata = buildUploadAccessMetadata(locked)\n  const unclaimedDeduplication = locked.deduplication\n    ? {\n      deduplication: {\n        namespace: locked.deduplication.namespace,\n        algorithm: locked.deduplication.algorithm,\n        hash: locked.deduplication.hash,\n        pipelineVersion: locked.deduplication.pipelineVersion,\n      },\n    }\n    : {}\n  const createFileMetadata = (\n    storedMimeType: string,\n    storedSize: number,\n    additional: Record<string, unknown> = {},\n  ): Record<string, unknown> => ({\n    uploadId,\n    tenantId,\n    mimeType: storedMimeType,\n    totalSize: storedSize,\n    ...additional,\n    ...accessMetadata,\n    ...unclaimedDeduplication,\n  })\n  const maxProcessorBytes = getMaxUploadProcessorBytes()\n  const shouldBufferForProcessing = locked.totalSize <= maxProcessorBytes\n  const declaredMimeType = locked.mimeType.trim().toLowerCase()\n  const declaredSvg = declaredMimeType === \"image/svg+xml\" || locked.filename.trim().toLowerCase().endsWith(\".svg\")\n\n  let uploadStream: NodeJS.WritableStream | null = null\n  let finalFilename = locked.filename\n  let finalMimeType = locked.mimeType\n  let finalSize = locked.totalSize\n  let inlineProcessors: string[] = []\n  let finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n\n  try {\n    if (!shouldBufferForProcessing && declaredSvg) {\n      throw new Error(\"svg_too_large\")\n    }\n\n    const cursor = UploadChunk.find({ uploadId }).sort({ index: 1 }).cursor() as unknown as AsyncIterable<UploadChunkDoc> & {\n      close: () => Promise<void>\n    }\n\n    let expectedIndex = 0\n    let sourceBytes = 0\n    const sourceHasher = locked.deduplication ? createHash(\"sha256\") : null\n    const chunks: Buffer[] = []\n    let bufferedBytes = 0\n\n    const pendingChunks: Buffer[] = []\n    const sniffParts: Buffer[] = []\n    let sniffBytes = 0\n\n    try {\n      for await (const chunkDoc of cursor) {\n        if (chunkDoc.index !== expectedIndex) {\n          throw new Error(\"missing_chunks\")\n        }\n\n        const chunk = chunkDoc.data\n        sourceBytes += chunk.length\n        sourceHasher?.update(chunk)\n\n        if (shouldBufferForProcessing) {\n          chunks.push(chunk)\n          bufferedBytes += chunk.length\n        } else if (!uploadStream) {\n          pendingChunks.push(chunk)\n\n          if (sniffBytes < maxProcessorBytes) {\n            const slice = chunk.subarray(0, Math.min(chunk.length, maxProcessorBytes - sniffBytes))\n            if (slice.length) {\n              sniffParts.push(slice)\n              sniffBytes += slice.length\n            }\n          }\n\n          if (sniffBytes >= maxProcessorBytes) {\n            const sniff = Buffer.concat(sniffParts, sniffBytes)\n            const processors = selectUploadProcessors({\n              filename: locked.filename,\n              clientMimeType: locked.mimeType,\n              totalSize: locked.totalSize,\n              sniff,\n            })\n\n            if (processors.length) {\n              throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n            }\n\n            finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n            uploadStream = bucket.openUploadStream(locked.filename, {\n              metadata: finalMetadata,\n            })\n\n            for (const pending of pendingChunks) {\n              await writeToStream(uploadStream, pending)\n            }\n            pendingChunks.length = 0\n          }\n        } else {\n          await writeToStream(uploadStream, chunk)\n        }\n\n        expectedIndex += 1\n      }\n    } finally {\n      try {\n        await cursor.close()\n      } catch {\n        //\n      }\n    }\n\n    if (expectedIndex !== locked.chunksTotal) {\n      throw new Error(\"missing_chunks\")\n    }\n\n    if (sourceBytes !== locked.totalSize) {\n      throw new Error(\"invalid_source_size\")\n    }\n\n    if (sourceHasher && sourceHasher.digest(\"hex\") !== locked.deduplication?.hash) {\n      throw new Error(\"content_hash_mismatch\")\n    }\n\n    if (shouldBufferForProcessing) {\n      const assembled = Buffer.concat(chunks, bufferedBytes)\n      const {\n        data: processed,\n        filename: processedFilename,\n        mimeType: processedMimeType,\n        applied,\n        metadata: processedMetadata,\n      } = await applyUploadProcessors(assembled, {\n        filename: locked.filename,\n        clientMimeType: locked.mimeType,\n      })\n\n      finalFilename = processedFilename\n      finalMimeType = processedMimeType\n      finalSize = processed.length\n      inlineProcessors = applied\n      finalMetadata = createFileMetadata(processedMimeType, processed.length, {\n        ...(applied.length ? { processors: applied, sourceTotalSize: locked.totalSize } : {}),\n        ...processedMetadata,\n      })\n      uploadStream = bucket.openUploadStream(finalFilename, {\n        metadata: finalMetadata,\n      })\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end(processed)\n      await finished\n    } else {\n      if (!uploadStream) {\n        const sniff = Buffer.concat(sniffParts, sniffBytes)\n        const processors = selectUploadProcessors({\n          filename: locked.filename,\n          clientMimeType: locked.mimeType,\n          totalSize: locked.totalSize,\n          sniff,\n        })\n\n        if (processors.length) {\n          throw new Error(processors.some((processor) => processor.id === \"sanitize-svg\") ? \"svg_too_large\" : \"processor_input_too_large\")\n        }\n\n        finalMetadata = createFileMetadata(locked.mimeType, locked.totalSize)\n        uploadStream = bucket.openUploadStream(locked.filename, {\n          metadata: finalMetadata,\n        })\n\n        for (const pending of pendingChunks) {\n          await writeToStream(uploadStream, pending)\n        }\n        pendingChunks.length = 0\n      }\n\n      const finished = waitForStreamFinished(uploadStream)\n      uploadStream.end()\n      await finished\n    }\n\n    const uploadedBlobId = String((uploadStream as unknown as { id?: unknown }).id ?? \"\")\n    if (!uploadedBlobId) {\n      throw new Error(\"missing_file_id\")\n    }\n\n    let resolvedBlobId = uploadedBlobId\n    let deduplicated = false\n    let returnedFileId: string | null = locked.deduplication ? null : uploadedBlobId\n\n    if (locked.deduplication) {\n      const filesCollection = nativeDb.collection(`${bucketName}.files`)\n      const uploadedBlobObjectId = new ObjectId(uploadedBlobId)\n      const referenceOptions = {\n        tenantId,\n        bucketName,\n        filename: finalFilename,\n        mimeType: finalMimeType,\n        totalSize: finalSize,\n        accessScope: resolveUploadAccessScope({\n          accessScope: locked.accessScope,\n          isPublic: locked.isPublic,\n        }),\n        ...(lockedUserId ? { userId: lockedUserId } : {}),\n        ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n      }\n      let lastDuplicateKeyError: unknown = null\n\n      for (let attempt = 0; attempt < 3 && !returnedFileId; attempt += 1) {\n        try {\n          returnedFileId = await claimUploadFileReference({\n            ...referenceOptions,\n            blobId: uploadedBlobObjectId,\n            deduplication: locked.deduplication,\n          })\n          if (!returnedFileId) throw new Error(\"missing_file_id\")\n          finalMetadata = {\n            ...finalMetadata,\n            deduplication: locked.deduplication,\n          }\n          break\n        } catch (error) {\n          if (!isDuplicateKeyError(error)) throw error\n          lastDuplicateKeyError = error\n        }\n\n        const canonicalFile = await filesCollection.findOne(\n          { \"metadata.deduplication.key\": locked.deduplication.key },\n          { projection: { _id: 1 } },\n        )\n        if (!(canonicalFile?._id instanceof ObjectId)) continue\n\n        const canonicalReferenceId = await createUploadFileReference({\n          ...referenceOptions,\n          blobId: canonicalFile._id,\n          deduplicationKey: locked.deduplication.key,\n        })\n        if (!canonicalReferenceId) continue\n\n        await bucket.delete(uploadedBlobObjectId)\n        resolvedBlobId = canonicalFile._id.toHexString()\n        returnedFileId = canonicalReferenceId\n        deduplicated = true\n      }\n\n      if (!returnedFileId) {\n        await bucket.delete(uploadedBlobObjectId)\n        if (lastDuplicateKeyError) throw lastDuplicateKeyError\n      }\n    }\n    if (!returnedFileId) {\n      throw new Error(\"canonical_file_missing\")\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      {\n        $set: {\n          status: \"done\",\n          fileId: returnedFileId,\n          filename: finalFilename,\n          mimeType: finalMimeType,\n          totalSize: finalSize,\n          ...(deduplicated ? { deduplicated: true } : {}),\n        },\n        $unset: { error: \"\" },\n      },\n    )\n\n    if (!deduplicated) {\n      await enqueueUploadPostProcessors({\n        tenantId,\n        uploadId,\n        fileId: resolvedBlobId,\n        filename: finalFilename,\n        mimeType: finalMimeType,\n        clientMimeType: locked.mimeType,\n        totalSize: finalSize,\n        ...(typeof locked.isPublic === \"boolean\" ? { isPublic: locked.isPublic } : {}),\n        ...(locked.accessScope ? { accessScope: locked.accessScope } : {}),\n        ...(typeof locked.ownerKeyHash === \"string\" ? { ownerKeyHash: locked.ownerKeyHash } : {}),\n        ...(lockedUserId ? { userId: lockedUserId } : {}),\n        inlineProcessors,\n        metadata: finalMetadata,\n      }).catch((error) => {\n        console.error(\"Upload post processor enqueue failed\", {\n          tenantId,\n          uploadId,\n          fileId: resolvedBlobId,\n          error,\n        })\n      })\n    }\n\n    try {\n      await UploadChunk.deleteMany({ uploadId })\n    } catch {\n      //\n    }\n\n    return {\n      ok: true,\n      fileId: returnedFileId,\n      ...(deduplicated ? { deduplicated: true } : {}),\n    }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n\n    await abortUploadStream(uploadStream)\n\n    if (message === \"missing_chunks\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"uploading\" } },\n      )\n      ctx.res.status(409)\n      return { ok: false, error: \"missing_chunks\" }\n    }\n\n    if (message === \"content_hash_mismatch\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"heif_too_large\" || message === \"processor_input_too_large\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(413)\n      return { ok: false, error: message }\n    }\n\n    if (message.startsWith(\"heif_decode_unsupported\")) {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(415)\n      return { ok: false, error: message }\n    }\n\n    if (message === \"svg_invalid\" || message === \"svg_sanitize_failed\") {\n      await UploadSession.updateOne(\n        { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n        { $set: { status: \"error\", error: message } },\n      )\n      ctx.res.status(400)\n      return { ok: false, error: message }\n    }\n\n    await UploadSession.updateOne(\n      { $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] },\n      { $set: { status: \"error\", error: message } },\n    )\n\n    ctx.res.status(500)\n    return { ok: false, error: \"assembly_failed\" }\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n} from \"../shared\"\n\n\nexport const getStatus: ApiHandler<Record<string, never>, Uploads.StatusResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Uploads.StatusResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  if (!uploadId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_upload_id\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"read\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"read\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  const receivedDocs = await UploadChunk.find(\n    { uploadId },\n    { index: 1, _id: 0 },\n  ).sort({ index: 1 }).lean()\n\n  const received = (receivedDocs as unknown as Array<{ index?: unknown }>)\n    .map((doc) => (typeof doc.index === \"number\" ? doc.index : -1))\n    .filter((n) => Number.isInteger(n) && n >= 0)\n\n  return {\n    ok: true,\n    status: session.status,\n    chunkSize: session.chunkSize,\n    chunksTotal: session.chunksTotal,\n    received,\n    ...(session.fileId ? { fileId: session.fileId } : {}),\n  }\n}\n","import { z } from \"zod\"\n\n\nexport const InitRoute = \"/api/rb/file-uploads\"\nexport const ChunkRoute = \"/api/rb/file-uploads/:uploadId/chunks/:index\"\nexport const StatusRoute = \"/api/rb/file-uploads/:uploadId/status\"\nexport const CompleteRoute = \"/api/rb/file-uploads/:uploadId/complete\"\n\nexport const uploadAccessScopeSchema = z.enum([\"owner\", \"tenant\", \"public\"])\n\nexport const uploadDeduplicationSchema = z.object({\n  namespace: z.string().trim().min(1).max(128).regex(/^[a-z0-9][a-z0-9._:-]*$/i),\n  algorithm: z.literal(\"sha256\"),\n  hash: z.string().trim().regex(/^[a-f0-9]{64}$/i),\n})\n\nexport const initRequestSchema = z.object({\n  filename: z.string().min(1),\n  mimeType: z.string().min(1),\n  isPublic: z.boolean().optional(),\n  accessScope: uploadAccessScopeSchema.optional(),\n  deduplication: uploadDeduplicationSchema.optional(),\n  totalSize: z.number().int().min(1),\n}).superRefine((value, ctx) => {\n  if (value.accessScope !== undefined && value.isPublic !== undefined) {\n    ctx.addIssue({\n      code: \"custom\",\n      message: \"accessScope and isPublic are mutually exclusive\",\n      path: [\"accessScope\"],\n    })\n  }\n})\n\nexport type InitRequestPayload = z.infer<typeof initRequestSchema>\n\nexport const initResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  uploadId: z.string().optional(),\n  uploadKey: z.string().optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  fileId: z.string().optional(),\n  deduplicated: z.boolean().optional(),\n})\n\nexport type InitResponsePayload = z.infer<typeof initResponseSchema>\n\nexport const statusResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  status: z.enum([\"uploading\", \"assembling\", \"done\", \"error\"]).optional(),\n  chunkSize: z.number().int().optional(),\n  chunksTotal: z.number().int().optional(),\n  received: z.array(z.number().int().min(0)).optional(),\n  fileId: z.string().optional(),\n})\n\nexport type StatusResponsePayload = z.infer<typeof statusResponseSchema>\n\nexport const completeResponseSchema = z.object({\n  ok: z.boolean(),\n  error: z.string().optional(),\n  fileId: z.string().optional(),\n  deduplicated: z.boolean().optional(),\n})\n\nexport type CompleteResponsePayload = z.infer<typeof completeResponseSchema>\n","import { randomBytes } from \"node:crypto\"\n\nimport { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb, models } from \"@rpcbase/db\"\nimport { ObjectId } from \"mongodb\"\nimport type { Model } from \"mongoose\"\n\nimport * as Uploads from \"../index\"\nimport { createUploadFileReference } from \"../fileReferences\"\nimport {\n  type SessionUser,\n  type UploadSessionDoc,\n  buildUploadDeduplication,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureFilesystemUploadIndexes,\n  ensureUploadIndexes,\n  getBucketName,\n  getChunkSizeBytes,\n  getModelCtx,\n  getSessionTtlMs,\n  getTenantId,\n  getUserId,\n  resolveUploadAccessScope,\n} from \"../shared\"\n\n\nexport const initUpload: ApiHandler<Uploads.InitRequestPayload, Uploads.InitResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<Uploads.InitResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const userId = getUserId(ctx)\n\n  const parsed = Uploads.initRequestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_payload\" }\n  }\n\n  const { filename, mimeType, totalSize, isPublic, deduplication: requestedDeduplication } = parsed.data\n  const accessScope = resolveUploadAccessScope({ accessScope: parsed.data.accessScope, isPublic })\n  if (accessScope === \"tenant\" && !userId) {\n    ctx.res.status(401)\n    return { ok: false, error: \"authentication_required\" }\n  }\n\n  const uploadKey = userId ? null : randomBytes(32).toString(\"base64url\")\n  const ownerKeyHash = uploadKey ? computeSha256Hex(Buffer.from(uploadKey)) : undefined\n  const deduplication = requestedDeduplication\n    ? buildUploadDeduplication({\n      namespace: requestedDeduplication.namespace,\n      hash: requestedDeduplication.hash,\n      filename,\n      mimeType,\n      totalSize,\n      accessScope,\n      ...(userId ? { userId } : {}),\n      ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    })\n    : null\n\n  if (requestedDeduplication && !deduplication) {\n    ctx.res.status(400)\n    return { ok: false, error: \"deduplication_unavailable\" }\n  }\n\n  if (deduplication) {\n    const fsDb = await getTenantFilesystemDb(tenantId)\n    const nativeDb = fsDb.db\n    if (!nativeDb) {\n      ctx.res.status(500)\n      return { ok: false, error: \"filesystem_db_unavailable\" }\n    }\n\n    const bucketName = getBucketName()\n    await ensureFilesystemUploadIndexes(nativeDb, bucketName)\n    const existingFile = await nativeDb.collection(`${bucketName}.files`).findOne(\n      { \"metadata.deduplication.key\": deduplication.key },\n      { projection: { _id: 1, filename: 1, length: 1, metadata: 1 } },\n    )\n    if (existingFile?._id instanceof ObjectId) {\n      const existingMetadata = existingFile.metadata && typeof existingFile.metadata === \"object\"\n        ? existingFile.metadata as Record<string, unknown>\n        : {}\n      const existingMimeType = typeof existingMetadata.mimeType === \"string\"\n        ? existingMetadata.mimeType\n        : mimeType\n      const existingSize = typeof existingFile.length === \"number\"\n        ? existingFile.length\n        : totalSize\n      const fileId = await createUploadFileReference({\n        tenantId,\n        bucketName,\n        blobId: existingFile._id,\n        filename,\n        mimeType: existingMimeType,\n        totalSize: existingSize,\n        accessScope,\n        ...(userId ? { userId } : {}),\n        ...(ownerKeyHash ? { ownerKeyHash } : {}),\n        deduplicationKey: deduplication.key,\n      })\n      if (fileId) {\n        return {\n          ok: true,\n          fileId,\n          deduplicated: true,\n          ...(uploadKey ? { uploadKey } : {}),\n        }\n      }\n    }\n  }\n\n  const chunkSize = getChunkSizeBytes()\n  const chunksTotal = Math.ceil(totalSize / chunkSize)\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const UploadSession = await models.get(\n    \"RBUploadSession\",\n    modelCtx,\n  ) as Model<UploadSessionDoc>\n\n  await ensureUploadIndexes(modelCtx)\n\n  const uploadId = new ObjectId().toString()\n  const now = Date.now()\n  const expiresAt = new Date(now + getSessionTtlMs())\n\n  await UploadSession.create({\n    _id: uploadId,\n    ...(userId ? { userId } : {}),\n    ...(ownerKeyHash ? { ownerKeyHash } : {}),\n    filename,\n    mimeType,\n    isPublic: accessScope === \"public\",\n    accessScope,\n    ...(deduplication ? { deduplication } : {}),\n    totalSize,\n    chunkSize,\n    chunksTotal,\n    status: \"uploading\",\n    createdAt: new Date(now),\n    expiresAt,\n  })\n\n  return {\n    ok: true,\n    uploadId,\n    chunkSize,\n    chunksTotal,\n    ...(uploadKey ? { uploadKey } : {}),\n  }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport type { Model } from \"mongoose\"\n\nimport {\n  type SessionUser,\n  type UploadChunkDoc,\n  type UploadSessionDoc,\n  buildUploadsAbility,\n  computeSha256Hex,\n  ensureUploadIndexes,\n  getModelCtx,\n  getUploadSessionAccessQuery,\n  getTenantId,\n  normalizeSha256Hex,\n  toBufferPayload,\n} from \"../shared\"\n\n\ntype ChunkResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nexport const uploadChunk: ApiHandler<Buffer, ChunkResponsePayload, SessionUser> = async (\n  payload,\n  ctx,\n): Promise<ChunkResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const uploadId = String(ctx.req.params?.uploadId ?? \"\").trim()\n  const indexRaw = String(ctx.req.params?.index ?? \"\").trim()\n  const index = Number(indexRaw)\n\n  if (!uploadId || !Number.isInteger(index) || index < 0) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_ref\" }\n  }\n\n  const ability = buildUploadsAbility(ctx, tenantId)\n  const modelCtx = getModelCtx(ctx, tenantId, ability)\n\n  const [UploadSession, UploadChunk] = await Promise.all([\n    models.get(\"RBUploadSession\", modelCtx) as Promise<Model<UploadSessionDoc>>,\n    models.get(\"RBUploadChunk\", modelCtx) as Promise<Model<UploadChunkDoc>>,\n  ])\n\n  if (!ability.can(\"update\", \"RBUploadSession\")) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const session = await UploadSession.findOne({ $and: [{ _id: uploadId }, getUploadSessionAccessQuery(ability, \"update\")] }).lean()\n  if (!session) {\n    ctx.res.status(404)\n    return { ok: false, error: \"not_found\" }\n  }\n\n  if (session.status !== \"uploading\") {\n    ctx.res.status(409)\n    return { ok: false, error: \"not_uploading\" }\n  }\n\n  if (index >= session.chunksTotal) {\n    ctx.res.status(400)\n    return { ok: false, error: \"index_out_of_range\" }\n  }\n\n  const data = toBufferPayload(payload)\n  if (!data) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_body\" }\n  }\n\n  const expectedSize = index === session.chunksTotal - 1\n    ? session.totalSize - session.chunkSize * (session.chunksTotal - 1)\n    : session.chunkSize\n\n  if (data.length > expectedSize) {\n    ctx.res.status(413)\n    return { ok: false, error: \"chunk_too_large\" }\n  }\n\n  if (data.length !== expectedSize) {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_chunk_size\" }\n  }\n\n  const checksumHeader = ctx.req.get(\"X-Chunk-SHA256\")\n  const sha256 = checksumHeader ? computeSha256Hex(data) : undefined\n\n  if (checksumHeader) {\n    const expectedSha256 = normalizeSha256Hex(checksumHeader)\n    if (sha256 !== expectedSha256) {\n      ctx.res.status(400)\n      return { ok: false, error: \"checksum_mismatch\" }\n    }\n  }\n\n  await ensureUploadIndexes(modelCtx)\n\n  await UploadChunk.updateOne(\n    { uploadId, index },\n    {\n      $set: {\n        uploadId,\n        index,\n        data,\n        size: data.length,\n        sha256,\n        expiresAt: session.expiresAt,\n      },\n      $setOnInsert: {\n        createdAt: new Date(),\n      },\n    },\n    { upsert: true },\n  )\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","export const rawBodyParser = ({\n  limitBytes,\n  maxClientBytesPerSecond,\n}: {\n  limitBytes: number\n  maxClientBytesPerSecond?: number | null\n}) => {\n  return (req: any, res: any, next: any) => {\n    const contentType = typeof req?.headers?.[\"content-type\"] === \"string\"\n      ? String(req.headers[\"content-type\"])\n      : \"\"\n\n    if (!contentType.includes(\"application/octet-stream\")) {\n      next()\n      return\n    }\n\n    let total = 0\n    const chunks: Buffer[] = []\n    let done = false\n    let paused = false\n    let throttleTimeout: ReturnType<typeof setTimeout> | null = null\n\n    const rateBytesPerSecond = typeof maxClientBytesPerSecond === \"number\" && maxClientBytesPerSecond > 0\n      ? maxClientBytesPerSecond\n      : null\n\n    const cleanup = () => {\n      req.off(\"data\", onData)\n      req.off(\"end\", onEnd)\n      req.off(\"error\", onError)\n      req.off(\"aborted\", onAborted)\n      if (throttleTimeout) {\n        clearTimeout(throttleTimeout)\n        throttleTimeout = null\n      }\n    }\n\n    const finish = (error?: unknown) => {\n      if (done) return\n      done = true\n\n      cleanup()\n\n      if (error) {\n        next(error)\n        return\n      }\n\n      req.body = Buffer.concat(chunks, total)\n      next()\n    }\n\n    const onData = (chunk: any) => {\n      if (done) return\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)\n      total += buffer.length\n\n      if (total > limitBytes) {\n        done = true\n        cleanup()\n        req.destroy()\n        res.status(413).json({ ok: false, error: \"chunk_too_large\" })\n        return\n      }\n\n      chunks.push(buffer)\n\n      if (!rateBytesPerSecond) return\n\n      const now = Date.now()\n      const clientKey = getClientKey(req)\n      const state = getClientRateState(clientKey, rateBytesPerSecond, now)\n      const waitMs = consumeRateBudget(state, buffer.length, rateBytesPerSecond, now)\n\n      if (waitMs > 0 && !paused) {\n        paused = true\n        req.pause()\n        throttleTimeout = setTimeout(() => {\n          throttleTimeout = null\n          paused = false\n          if (done) return\n          try {\n            req.resume()\n          } catch {\n            //\n          }\n        }, waitMs)\n      }\n    }\n\n    const onEnd = () => finish()\n    const onError = (err: unknown) => finish(err)\n    const onAborted = () => finish(new Error(\"request_aborted\"))\n\n    req.on(\"data\", onData)\n    req.on(\"end\", onEnd)\n    req.on(\"error\", onError)\n    req.on(\"aborted\", onAborted)\n  }\n}\n\ntype ClientRateState = {\n  tokens: number\n  lastRefillMs: number\n  lastSeenMs: number\n}\n\nconst MAX_BURST_SECONDS = 1\nconst STALE_CLIENT_MS = 15 * 60 * 1000\n\nconst clientRateStates = new Map<string, ClientRateState>()\nlet lastCleanupMs = 0\n\nconst getClientKey = (req: any): string => {\n  const rawClientIp = typeof req?.clientIp === \"string\" ? req.clientIp : \"\"\n  if (rawClientIp.trim()) return rawClientIp.trim()\n  const rawIp = typeof req?.ip === \"string\" ? req.ip : \"\"\n  return rawIp.trim() || \"unknown\"\n}\n\nconst maybeCleanupStates = (now: number) => {\n  if (now - lastCleanupMs < 60_000) return\n  lastCleanupMs = now\n\n  if (clientRateStates.size < 2000) return\n\n  for (const [key, state] of clientRateStates) {\n    if (now - state.lastSeenMs > STALE_CLIENT_MS) {\n      clientRateStates.delete(key)\n    }\n  }\n}\n\nconst getClientRateState = (key: string, rateBytesPerSecond: number, now: number): ClientRateState => {\n  maybeCleanupStates(now)\n\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const existing = clientRateStates.get(key)\n  if (existing) {\n    existing.lastSeenMs = now\n    existing.tokens = Math.min(capacity, existing.tokens)\n    return existing\n  }\n\n  const next: ClientRateState = {\n    tokens: capacity,\n    lastRefillMs: now,\n    lastSeenMs: now,\n  }\n  clientRateStates.set(key, next)\n  return next\n}\n\nconst consumeRateBudget = (\n  state: ClientRateState,\n  bytes: number,\n  rateBytesPerSecond: number,\n  now: number,\n): number => {\n  const capacity = rateBytesPerSecond * MAX_BURST_SECONDS\n  const elapsedMs = Math.max(0, now - state.lastRefillMs)\n\n  if (elapsedMs > 0) {\n    state.tokens = Math.min(capacity, state.tokens + (elapsedMs * rateBytesPerSecond) / 1000)\n    state.lastRefillMs = now\n  }\n\n  state.tokens -= bytes\n\n  if (state.tokens >= 0) return 0\n  return Math.ceil((-state.tokens / rateBytesPerSecond) * 1000)\n}\n","import { Api } from \"@rpcbase/api\"\n\nimport { completeUpload } from \"./handlers/completeUpload\"\nimport { getStatus } from \"./handlers/getStatus\"\nimport { initUpload } from \"./handlers/initUpload\"\nimport { uploadChunk } from \"./handlers/uploadChunk\"\nimport { rawBodyParser } from \"./middleware/rawBodyParser\"\nimport { getChunkSizeBytes, getMaxClientUploadBytesPerSecond, getRawBodyLimitBytes, type SessionUser } from \"./shared\"\n\nimport * as Uploads from \"./index\"\n\n\nexport default (api: Api<SessionUser>) => {\n  const chunkSizeBytes = getChunkSizeBytes()\n  api.use(\n    Uploads.InitRoute,\n    rawBodyParser({\n      limitBytes: getRawBodyLimitBytes(chunkSizeBytes),\n      maxClientBytesPerSecond: getMaxClientUploadBytesPerSecond(),\n    }),\n  )\n\n  api.post(Uploads.InitRoute, initUpload)\n  api.put(Uploads.ChunkRoute, uploadChunk)\n  api.get(Uploads.StatusRoute, getStatus)\n  api.post(Uploads.CompleteRoute, completeUpload)\n}\n"],"mappings":";;;;;;;;;;;AAMA,IAAMG,gBAAgB,MAAM;AAE5B,IAAMC,SAAS,IAAIJ,MAAM,EAAE,CAAC,CAACI;AAC7B,IAAMC,YAAYJ,gBAAgBG,MAAM;AAExC,IAAME,qBAAqBC,QAAwBA,IAAIC,QAAQ,WAAW,EAAE,CAAC,CAACC,UAAU;AAExF,IAAMC,oBAAoBC,SAA0B;CAClD,MAAMC,aAAaN,kBAAkBK,IAAI;CACzC,IAAI,CAACC,WAAWC,WAAW,GAAG,GAAG,OAAO;CACxC,OAAO,gBAAgBC,KAAKF,UAAU;AACxC;AAEA,IAAaG,gBAAgBC,UAA2BN,iBAAiBM,MAAME,SAAS,MAAM,CAAC;AAE/F,IAAaC,eAAeC,QAC1Bf,UAAUgB,SAASD,KAAK,EACtBE,cAAc;CAAEF,KAAK;CAAMG,YAAY;AAAK,EAC9C,CAAC;;;ACCH,IAAamC,mBAAmBC,OAAOC,OAAO,CAACrB;CDE7Cd,IAAI;CACJC,UAAUvB;CACVwB,QAAQ,EAAEX,YAAYD,aAAaC,KAAK;CACxCY,UAAUC,SAA6C;EACrD,IAAIA,KAAKE,SAAS5B,eAChB,MAAM,IAAI6B,MAAM,eAAe;EAGjC,MAAMC,UAAUJ,KAAKX,SAAS,MAAM;EACpC,IAAI,CAACR,iBAAiBuB,OAAO,GAC3B,MAAM,IAAID,MAAM,aAAa;EAG/B,MAAME,YAAYf,YAAYc,OAAO;EACrC,IAAI,CAACC,UAAUC,KAAK,KAAK,CAACzB,iBAAiBwB,SAAS,GAClD,MAAM,IAAIF,MAAM,qBAAqB;EAGvC,MAAMI,kBAAkBnB,OAAOoB,KAAKH,WAAW,MAAM;EACrD,IAAIE,gBAAgBL,SAAS5B,eAC3B,MAAM,IAAI6B,MAAM,eAAe;EAGjC,OAAO;GAAEH,MAAMO;GAAiBN,UAAU;EAAgB;CAC5D;AC1B6CS,GAAsBD,0BAA0B,CAAiC;AAEhI,IAAauB,mCACXH,iBAAiBI,QAAQC,KAAKC,cAAcC,KAAKF,IAAIA,KAAKC,UAAUX,QAAQ,GAAG,CAAC;AAElF,IAAaa,0BAA0BX,QACrCG,iBAAiBS,QAAQH,cAAcA,UAAUV,MAAMC,GAAG,CAAC;AAE7D,IAAaa,wBAAwB,OACnCrB,MACAQ,QACwH;CACxH,IAAIgB,cAAcxB;CAClB,IAAIyB,kBAAkBjB,IAAId;CAC1B,IAAIgC,kBAAkBlB,IAAIb;CAC1B,MAAM4B,UAAoB,CAAA;CAC1B,MAAMrB,WAAoC,CAAC;CAE3C,KAAK,MAAMe,aAAaN,kBAAkB;EACxC,MAAMgB,eAA2C;GAC/CjC,UAAU+B;GACV9B,gBAAgB+B;GAChB9B,WAAW4B,YAAYI;GACvB/B,OAAO2B;EACT;EAEA,IAAI,CAACP,UAAUV,MAAMoB,YAAY,GAAG;EAEpC,IAAIH,YAAYI,SAASX,UAAUX,UACjC,MAAM,IAAIuB,MAAM,2BAA2B;EAG7C,MAAMC,SAAS,MAAMb,UAAUR,QAAQe,aAAaG,YAAY;EAChEH,cAAcM,OAAO9B;EACrB,IAAI,OAAO8B,OAAOpC,aAAa,YAAYoC,OAAOpC,SAASqC,KAAK,GAC9DN,kBAAkBK,OAAOpC,SAASqC,KAAK;EAEzC,IAAI,OAAOD,OAAO7B,aAAa,YAAY6B,OAAO7B,SAAS8B,KAAK,GAC9DL,kBAAkBI,OAAO7B,SAAS8B,KAAK;EAEzC,IAAID,OAAO5B,YAAY,OAAO4B,OAAO5B,aAAa,UAChDU,OAAOoB,OAAO9B,UAAU4B,OAAO5B,QAAQ;EAEzCqB,QAAQU,KAAKhB,UAAUZ,EAAE;CAC3B;CAEA,OAAO;EACLL,MAAMwB;EACN9B,UAAU+B;EACVxB,UAAUyB;EACVH;EACArB;CACF;AACF;;;AChDA,IAAM0D,wBAAwB,OAAOC,WAAiD,IAAIG,SAASC,SAASC,WAAW;CACrHL,OAAOM,KAAK,UAAUF,OAAO;CAC7BJ,OAAOM,KAAK,SAASD,MAAM;AAC7B,CAAC;AAED,IAAME,gBAAgB,OAAOP,QAA+BQ,UAAiC;CAE3F,IADWR,OAAOW,MAAMH,KACpBE,GAAI;CACR,MAAM,IAAIP,SAAeC,SAASC,WAAW;EAC3C,MAAMO,gBAAgB;GACpBC,QAAQ;GACRT,QAAQ;EACV;EAEA,MAAMU,WAAWC,UAAmB;GAClCF,QAAQ;GACRR,OAAOU,KAAK;EACd;EAEA,MAAMF,gBAAgB;GACpBb,OAAOgB,IAAI,SAASJ,OAAO;GAC3BZ,OAAOgB,IAAI,SAASF,OAAO;EAC7B;EAEAd,OAAOiB,GAAG,SAASL,OAAO;EAC1BZ,OAAOiB,GAAG,SAASH,OAAO;CAC5B,CAAC;AACH;AAEA,IAAMI,oBAAoB,OAAOlB,WAAmC;CAClE,IAAI,CAACA,QAAQ;CACb,IAAI,OAAQA,OAA+BmB,UAAU,YACnD,IAAI;EACF,MAAOnB,OAAiDmB,MAAM;EAC9D;CACF,QAAQ,CACN;CAGJ,IAAI;EACD,OAAqCC,UAAU;CAClD,QAAQ,CACN;AAEJ;AAEA,IAAMC,uBAAuBN,UAC3BA,UAAU,QACV,OAAOA,UAAU,YACjB,UAAUA,SACTA,MAA6BO,SAAS;AAGzC,IAAaC,iBAAkG,OAC7GG,UACAC,QAC6C;CAC7C,MAAMC,WAAW/B,YAAY8B,GAAG;CAChC,IAAI,CAACC,UAAU;EACbD,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAiB;CAC9C;CAEA,MAAMgB,WAAWC,OAAOL,IAAIM,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,IAAI,CAACJ,UAAU;EACbJ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAoB;CACjD;CAEA,MAAMqB,UAAU7C,oBAAoBoC,KAAKC,QAAQ;CACjD,MAAMS,WAAW1C,YAAYgC,KAAKC,UAAUQ,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMpC,QAAQqC,IAAI,CACrDhE,OAAOiE,IAAI,mBAAmBJ,QAAQ,GACtC7D,OAAOiE,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,UAAU,iBAAiB,GAAG;EAC7Cf,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAe;CAC5C;CAEA,MAAM4B,WAAW,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,MAAM,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAC/H,IAAI,CAACJ,UAAU;EACbhB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAY;CACzC;CAEA,IAAI4B,SAASb,WAAW,UAAUa,SAASK,QACzC,OAAO;EACLtC,IAAI;EACJsC,QAAQL,SAASK;EACjB,GAAIL,SAASM,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;CACxD;CAGF,MAAMC,SAAS,MAAMZ,cAAca,iBACjC,EAAEN,MAAM;EAAC,EAAEC,KAAKf,SAAS;EAAG,EAAED,QAAQ,YAAY;EAAGlC,4BAA4BwC,SAAS,QAAQ;CAAC,EAAE,GACrG;EAAEgB,MAAM,EAAEtB,QAAQ,aAAa;EAAGuB,QAAQ,EAAEtC,OAAO,GAAG;CAAE,GACxD,EAAEuC,gBAAgB,QAAQ,CAC5B,CAAC,CAACP,KAAK;CAEP,IAAI,CAACG,QAAQ;EACXvB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAgB;CAC7C;CAEA,MAAMtB,oBAAoB4C,QAAQ;CAGlC,MAAMmB,YAAWD,MADEhF,sBAAsBqD,QAAQ,EAAA,CAC3B6B;CACtB,IAAI,CAACD,UAAU;EACb,MAAMlB,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;GAAEtB,QAAQ;GAASf,OAAO;EAA4B,EAAE,CAClE;EACAY,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAkB;CAC/C;CACA,MAAM4C,aAAajE,cAAc;CACjC,MAAMkE,SAAS,IAAInF,aAAa+E,UAAU,EAAEG,WAAW,CAAC;CACxD,IAAIT,OAAOW,eACT,MAAMrE,8BAA8BgE,UAAUG,UAAU;CAG1D,MAAMG,eAAe,OAAOZ,OAAOa,WAAW,WAAWb,OAAOa,SAASC,KAAAA;CACzE,MAAMC,iBAAiB3E,0BAA0B4D,MAAM;CACvD,MAAMgB,yBAAyBhB,OAAOW,gBAClC,EACAA,eAAe;EACbM,WAAWjB,OAAOW,cAAcM;EAChCC,WAAWlB,OAAOW,cAAcO;EAChCC,MAAMnB,OAAOW,cAAcQ;EAC3BC,iBAAiBpB,OAAOW,cAAcS;CACxC,EACF,IACE,CAAC;CACL,MAAMC,sBACJC,gBACAC,YACAC,aAAsC,CAAC,OACV;EAC7B3C;EACAH;EACA+C,UAAUH;EACVI,WAAWH;EACX,GAAGC;EACH,GAAGT;EACH,GAAGC;CACL;CACA,MAAMW,oBAAoB5F,2BAA2B;CACrD,MAAM6F,4BAA4B5B,OAAO0B,aAAaC;CAEtD,MAAMI,cADmB/B,OAAOyB,SAASxC,KAAK,CAAC,CAAC6C,YAC5BD,MAAqB,mBAAmB7B,OAAOgC,SAAS/C,KAAK,CAAC,CAAC6C,YAAY,CAAC,CAACG,SAAS,MAAM;CAEhH,IAAIC,eAA6C;CACjD,IAAIC,gBAAgBnC,OAAOgC;CAC3B,IAAII,gBAAgBpC,OAAOyB;CAC3B,IAAIY,YAAYrC,OAAO0B;CACvB,IAAIY,mBAA6B,CAAA;CACjC,IAAIC,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;CAExE,IAAI;EACF,IAAI,CAACE,6BAA6BG,aAChC,MAAM,IAAIS,MAAM,eAAe;EAGjC,MAAMC,SAASpD,YAAYqD,KAAK,EAAE7D,SAAS,CAAC,CAAC,CAAC8D,KAAK,EAAEC,OAAO,EAAE,CAAC,CAAC,CAACH,OAAO;EAIxE,IAAIM,gBAAgB;EACpB,IAAIC,cAAc;EAClB,MAAMC,eAAejD,OAAOW,gBAAgBxF,WAAW,QAAQ,IAAI;EACnE,MAAM+H,SAAmB,CAAA;EACzB,IAAIC,gBAAgB;EAEpB,MAAMC,gBAA0B,CAAA;EAChC,MAAMC,aAAuB,CAAA;EAC7B,IAAIC,aAAa;EAEjB,IAAI;GACF,WAAW,MAAMC,YAAYd,QAAQ;IACnC,IAAIc,SAASX,UAAUG,eACrB,MAAM,IAAIP,MAAM,gBAAgB;IAGlC,MAAMlF,QAAQiG,SAASC;IACvBR,eAAe1F,MAAMmG;IACrBR,cAAcS,OAAOpG,KAAK;IAE1B,IAAIsE,2BAA2B;KAC7BsB,OAAOS,KAAKrG,KAAK;KACjB6F,iBAAiB7F,MAAMmG;IACzB,OAAO,IAAI,CAACvB,cAAc;KACxBkB,cAAcO,KAAKrG,KAAK;KAExB,IAAIgG,aAAa3B,mBAAmB;MAClC,MAAMiC,QAAQtG,MAAMuG,SAAS,GAAGC,KAAKC,IAAIzG,MAAMmG,QAAQ9B,oBAAoB2B,UAAU,CAAC;MACtF,IAAIM,MAAMH,QAAQ;OAChBJ,WAAWM,KAAKC,KAAK;OACrBN,cAAcM,MAAMH;MACtB;KACF;KAEA,IAAIH,cAAc3B,mBAAmB;MACnC,MAAMqC,QAAQzG,OAAO0G,OAAOZ,YAAYC,UAAU;MAClD,MAAMY,aAAalI,uBAAuB;OACxCgG,UAAUhC,OAAOgC;OACjBmC,gBAAgBnE,OAAOyB;OACvBC,WAAW1B,OAAO0B;OAClBsC;MACF,CAAC;MAED,IAAIE,WAAWT,QACb,MAAM,IAAIjB,MAAM0B,WAAWE,MAAMC,cAAcA,UAAUC,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;MAGjI/B,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;MACpEQ,eAAexB,OAAO6D,iBAAiBvE,OAAOgC,UAAU,EACtDwC,UAAUjC,cACZ,CAAC;MAED,KAAK,MAAMkC,WAAWrB,eACpB,MAAM/F,cAAc6E,cAAcuC,OAAO;MAE3CrB,cAAcK,SAAS;KACzB;IACF,OACE,MAAMpG,cAAc6E,cAAc5E,KAAK;IAGzCyF,iBAAiB;GACnB;EACF,UAAU;GACR,IAAI;IACF,MAAMN,OAAOK,MAAM;GACrB,QAAQ,CACN;EAEJ;EAEA,IAAIC,kBAAkB/C,OAAO0E,aAC3B,MAAM,IAAIlC,MAAM,gBAAgB;EAGlC,IAAIQ,gBAAgBhD,OAAO0B,WACzB,MAAM,IAAIc,MAAM,qBAAqB;EAGvC,IAAIS,gBAAgBA,aAAa0B,OAAO,KAAK,MAAM3E,OAAOW,eAAeQ,MACvE,MAAM,IAAIqB,MAAM,uBAAuB;EAGzC,IAAIZ,2BAA2B;GAE7B,MAAM,EACJ4B,MAAMqB,WACN7C,UAAU8C,mBACVrD,UAAUsD,mBACVC,SACAR,UAAUS,sBACR,MAAMnJ,sBAPQyB,OAAO0G,OAAOf,QAAQC,aAORyB,GAAW;IACzC5C,UAAUhC,OAAOgC;IACjBmC,gBAAgBnE,OAAOyB;GACzB,CAAC;GAEDU,gBAAgB2C;GAChB1C,gBAAgB2C;GAChB1C,YAAYwC,UAAUpB;GACtBnB,mBAAmB0C;GACnBzC,gBAAgBlB,mBAAmB0D,mBAAmBF,UAAUpB,QAAQ;IACtE,GAAIuB,QAAQvB,SAAS;KAAES,YAAYc;KAASE,iBAAiBlF,OAAO0B;IAAU,IAAI,CAAC;IACnF,GAAGuD;GACL,CAAC;GACD/C,eAAexB,OAAO6D,iBAAiBpC,eAAe,EACpDqC,UAAUjC,cACZ,CAAC;GAED,MAAM4C,WAAWtI,sBAAsBqF,YAAY;GACnDA,aAAakD,IAAIP,SAAS;GAC1B,MAAMM;EACR,OAAO;GACL,IAAI,CAACjD,cAAc;IACjB,MAAM8B,QAAQzG,OAAO0G,OAAOZ,YAAYC,UAAU;IAClD,MAAMY,aAAalI,uBAAuB;KACxCgG,UAAUhC,OAAOgC;KACjBmC,gBAAgBnE,OAAOyB;KACvBC,WAAW1B,OAAO0B;KAClBsC;IACF,CAAC;IAED,IAAIE,WAAWT,QACb,MAAM,IAAIjB,MAAM0B,WAAWE,MAAMC,cAAcA,UAAUC,OAAO,cAAc,IAAI,kBAAkB,2BAA2B;IAGjI/B,gBAAgBlB,mBAAmBrB,OAAOyB,UAAUzB,OAAO0B,SAAS;IACpEQ,eAAexB,OAAO6D,iBAAiBvE,OAAOgC,UAAU,EACtDwC,UAAUjC,cACZ,CAAC;IAED,KAAK,MAAMkC,WAAWrB,eACpB,MAAM/F,cAAc6E,cAAcuC,OAAO;IAE3CrB,cAAcK,SAAS;GACzB;GAEA,MAAM0B,WAAWtI,sBAAsBqF,YAAY;GACnDA,aAAakD,IAAI;GACjB,MAAMD;EACR;EAEA,MAAME,iBAAiBvG,OAAQoD,aAA6CoC,MAAM,EAAE;EACpF,IAAI,CAACe,gBACH,MAAM,IAAI7C,MAAM,iBAAiB;EAGnC,IAAI8C,iBAAiBD;EACrB,IAAItF,eAAe;EACnB,IAAIwF,iBAAgCvF,OAAOW,gBAAgB,OAAO0E;EAElE,IAAIrF,OAAOW,eAAe;GACxB,MAAM6E,kBAAkBlF,SAASmF,WAAW,GAAGhF,WAAU,OAAQ;GACjE,MAAMiF,uBAAuB,IAAIlK,SAAS6J,cAAc;GACxD,MAAMM,mBAAmB;IACvBjH;IACA+B;IACAuB,UAAUG;IACVV,UAAUW;IACVV,WAAWW;IACXuD,aAAahJ,yBAAyB;KACpCgJ,aAAa5F,OAAO4F;KACpBC,UAAU7F,OAAO6F;IACnB,CAAC;IACD,GAAIjF,eAAe,EAAEC,QAAQD,aAAa,IAAI,CAAC;IAC/C,GAAI,OAAOZ,OAAO8F,iBAAiB,WAAW,EAAEA,cAAc9F,OAAO8F,aAAa,IAAI,CAAC;GACzF;GACA,IAAIC,wBAAiC;GAErC,KAAK,IAAIC,UAAU,GAAGA,UAAU,KAAK,CAACT,gBAAgBS,WAAW,GAAG;IAClE,IAAI;KACFT,iBAAiB,MAAM5J,yBAAyB;MAC9C,GAAGgK;MACHM,QAAQP;MACR/E,eAAeX,OAAOW;KACxB,CAAC;KACD,IAAI,CAAC4E,gBAAgB,MAAM,IAAI/C,MAAM,iBAAiB;KACtDD,gBAAgB;MACd,GAAGA;MACH5B,eAAeX,OAAOW;KACxB;KACA;IACF,SAAS9C,OAAO;KACd,IAAI,CAACM,oBAAoBN,KAAK,GAAG,MAAMA;KACvCkI,wBAAwBlI;IAC1B;IAEA,MAAMqI,gBAAgB,MAAMV,gBAAgB9F,QAC1C,EAAE,8BAA8BM,OAAOW,cAAcwF,IAAI,GACzD,EAAEC,YAAY,EAAExG,KAAK,EAAE,EAAE,CAC3B;IACA,IAAI,EAAEsG,eAAetG,eAAepE,WAAW;IAE/C,MAAM6K,uBAAuB,MAAMzK,0BAA0B;KAC3D,GAAG+J;KACHM,QAAQC,cAActG;KACtB0G,kBAAkBtG,OAAOW,cAAcwF;IACzC,CAAC;IACD,IAAI,CAACE,sBAAsB;IAE3B,MAAM3F,OAAO6F,OAAOb,oBAAoB;IACxCJ,iBAAiBY,cAActG,IAAI4G,YAAY;IAC/CjB,iBAAiBc;IACjBtG,eAAe;GACjB;GAEA,IAAI,CAACwF,gBAAgB;IACnB,MAAM7E,OAAO6F,OAAOb,oBAAoB;IACxC,IAAIK,uBAAuB,MAAMA;GACnC;EACF;EACA,IAAI,CAACR,gBACH,MAAM,IAAI/C,MAAM,wBAAwB;EAG1C,MAAMpD,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E;GACEgB,MAAM;IACJtB,QAAQ;IACRkB,QAAQyF;IACRvD,UAAUG;IACVV,UAAUW;IACVV,WAAWW;IACX,GAAItC,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;GAC/C;GACAI,QAAQ,EAAEtC,OAAO,GAAG;EACtB,CACF;EAEA,IAAI,CAACkC,cACH,MAAMlE,4BAA4B;GAChC6C;GACAG;GACAiB,QAAQwF;GACRtD,UAAUG;GACVV,UAAUW;GACV+B,gBAAgBnE,OAAOyB;GACvBC,WAAWW;GACX,GAAI,OAAOrC,OAAO6F,aAAa,YAAY,EAAEA,UAAU7F,OAAO6F,SAAS,IAAI,CAAC;GAC5E,GAAI7F,OAAO4F,cAAc,EAAEA,aAAa5F,OAAO4F,YAAY,IAAI,CAAC;GAChE,GAAI,OAAO5F,OAAO8F,iBAAiB,WAAW,EAAEA,cAAc9F,OAAO8F,aAAa,IAAI,CAAC;GACvF,GAAIlF,eAAe,EAAEC,QAAQD,aAAa,IAAI,CAAC;GAC/C0B;GACAkC,UAAUjC;EACZ,CAAC,CAAC,CAACkE,OAAO5I,UAAU;GAClB6I,QAAQ7I,MAAM,wCAAwC;IACpDa;IACAG;IACAiB,QAAQwF;IACRzH;GACF,CAAC;EACH,CAAC;EAGH,IAAI;GACF,MAAMwB,YAAYsH,WAAW,EAAE9H,SAAS,CAAC;EAC3C,QAAQ,CACN;EAGF,OAAO;GACLrB,IAAI;GACJsC,QAAQyF;GACR,GAAIxF,eAAe,EAAEA,cAAc,KAAK,IAAI,CAAC;EAC/C;CACF,SAASlC,OAAO;EACd,MAAM+I,UAAU/I,iBAAiB2E,QAAQ3E,MAAM+I,UAAU9H,OAAOjB,KAAK;EAErE,MAAMG,kBAAkBkE,YAAY;EAEpC,IAAI0E,YAAY,kBAAkB;GAChC,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM,EAAEtB,QAAQ,YAAY,EAAE,CAClC;GACAH,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO;GAAiB;EAC9C;EAEA,IAAI+I,YAAY,yBAAyB;GACvC,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,iBAAiB;GAC/B,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,oBAAoBA,YAAY,6BAA6B;GAC3E,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,QAAQC,WAAW,yBAAyB,GAAG;GACjD,MAAMzH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,IAAIA,YAAY,iBAAiBA,YAAY,uBAAuB;GAClE,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;IAAEtB,QAAQ;IAASf,OAAO+I;GAAQ,EAAE,CAC9C;GACAnI,IAAIE,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEpB,IAAI;IAAOK,OAAO+I;GAAQ;EACrC;EAEA,MAAMxH,cAAcoB,UAClB,EAAEb,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGnC,4BAA4BwC,SAAS,QAAQ,CAAC,EAAE,GAC5E,EAAEgB,MAAM;GAAEtB,QAAQ;GAASf,OAAO+I;EAAQ,EAAE,CAC9C;EAEAnI,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEpB,IAAI;GAAOK,OAAO;EAAkB;CAC/C;AACF;;;ACrgBA,IAAa4J,YAA2F,OACtGG,UACAC,QAC2C;CAC3C,MAAME,WAAWP,YAAYK,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMC,WAAWC,OAAOR,IAAIS,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,IAAI,CAACJ,UAAU;EACbP,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAoB;CACjD;CAEA,MAAMM,UAAUpB,oBAAoBQ,KAAKE,QAAQ;CACjD,MAAMW,WAAWpB,YAAYO,KAAKE,UAAUU,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMd,QAAQe,IAAI,CACrD9B,OAAO+B,IAAI,mBAAmBJ,QAAQ,GACtC3B,OAAO+B,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,QAAQ,iBAAiB,GAAG;EAC3ClB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMa,UAAU,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKf,SAAS,GAAGb,4BAA4BkB,SAAS,MAAM,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAC9H,IAAI,CAACJ,SAAS;EACZnB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAY;CACzC;CAOA,MAAMsB,YAAYJ,MALST,YAAYU,KACrC,EAAElB,SAAS,GACX;EAAEmB,OAAO;EAAGJ,KAAK;CAAE,CACrB,CAAC,CAACK,KAAK,EAAED,OAAO,EAAE,CAAC,CAAC,CAACH,KAAK,EAAA,CAGvBO,KAAKC,QAAS,OAAOA,IAAIL,UAAU,WAAWK,IAAIL,QAAQ,EAAG,CAAC,CAC9DM,QAAQC,MAAMC,OAAOC,UAAUF,CAAC,KAAKA,KAAK,CAAC;CAE9C,OAAO;EACL5B,IAAI;EACJD,QAAQe,QAAQf;EAChBgC,WAAWjB,QAAQiB;EACnBC,aAAalB,QAAQkB;EACrBT;EACA,GAAIT,QAAQmB,SAAS,EAAEA,QAAQnB,QAAQmB,OAAO,IAAI,CAAC;CACrD;AACF;;;ACjEA,IAAaE,YAAY;AACzB,IAAaC,aAAa;AAC1B,IAAaC,cAAc;AAC3B,IAAaC,gBAAgB;AAE7B,IAAaC,0BAA0BL,MAAO;CAAC;CAAS;CAAU;AAAQ,CAAC;AAE3E,IAAaO,4BAA4BP,OAAS;CAChDS,WAAWT,OAAS,CAAC,CAACW,KAAK,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG,CAAC,CAACC,MAAM,0BAA0B;CAC7EC,WAAWf,QAAU,QAAQ;CAC7BiB,MAAMjB,OAAS,CAAC,CAACW,KAAK,CAAC,CAACG,MAAM,iBAAiB;AACjD,CAAC;AAED,IAAaI,oBAAoBlB,OAAS;CACxCmB,UAAUnB,OAAS,CAAC,CAACY,IAAI,CAAC;CAC1BQ,UAAUpB,OAAS,CAAC,CAACY,IAAI,CAAC;CAC1BS,UAAUrB,QAAU,CAAC,CAACuB,SAAS;CAC/BC,aAAanB,wBAAwBkB,SAAS;CAC9CE,eAAelB,0BAA0BgB,SAAS;CAClDG,WAAW1B,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAAChB,IAAI,CAAC;AACnC,CAAC,CAAC,CAACiB,aAAaC,OAAOC,QAAQ;CAC7B,IAAID,MAAMN,gBAAgBQ,KAAAA,KAAaF,MAAMT,aAAaW,KAAAA,GACxDD,IAAIE,SAAS;EACXC,MAAM;EACNC,SAAS;EACTC,MAAM,CAAC,aAAa;CACtB,CAAC;AAEL,CAAC;AAIiCpC,OAAS;CACzCwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3BmB,UAAU1C,OAAS,CAAC,CAACuB,SAAS;CAC9BoB,WAAW3C,OAAS,CAAC,CAACuB,SAAS;CAC/BqB,WAAW5C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACrCsB,aAAa7C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACvCuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;CAC5BwB,cAAc/C,QAAU,CAAC,CAACuB,SAAS;AACrC,CAAC;AAImCvB,OAAS;CAC3CwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3B2B,QAAQlD,MAAO;EAAC;EAAa;EAAc;EAAQ;CAAO,CAAC,CAAC,CAACuB,SAAS;CACtEqB,WAAW5C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACrCsB,aAAa7C,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAACL,SAAS;CACvC4B,UAAUnD,MAAQA,OAAS,CAAC,CAAC4B,IAAI,CAAC,CAAChB,IAAI,CAAC,CAAC,CAAC,CAACW,SAAS;CACpDuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;AAC9B,CAAC;AAIqCvB,OAAS;CAC7CwC,IAAIxC,QAAU;CACdyC,OAAOzC,OAAS,CAAC,CAACuB,SAAS;CAC3BuB,QAAQ9C,OAAS,CAAC,CAACuB,SAAS;CAC5BwB,cAAc/C,QAAU,CAAC,CAACuB,SAAS;AACrC,CAAC;;;ACtCD,IAAauD,aAA+F,OAC1GG,SACAC,QACyC;CACzC,MAAME,WAAWT,YAAYO,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMC,SAASb,UAAUM,GAAG;CAE5B,MAAMQ,SAAAA,kBAAmCE,UAAUX,WAAW,CAAC,CAAC;CAChE,IAAI,CAACS,OAAOG,SAAS;EACnBX,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,MAAM,EAAEM,UAAUC,UAAUC,WAAWC,UAAUC,eAAeC,2BAA2BT,OAAOU;CAClG,MAAMC,cAAcxB,yBAAyB;EAAEwB,aAAaX,OAAOU,KAAKC;EAAaJ;CAAS,CAAC;CAC/F,IAAII,gBAAgB,YAAY,CAACZ,QAAQ;EACvCP,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAA0B;CACvD;CAEA,MAAMc,YAAYb,SAAS,OAAOjC,YAAY,EAAE,CAAC,CAAC+C,SAAS,WAAW;CACtE,MAAMC,eAAeF,YAAYlC,iBAAiBqC,OAAOC,KAAKJ,SAAS,CAAC,IAAIK,KAAAA;CAC5E,MAAMT,gBAAgBC,yBAClBjC,yBAAyB;EACzB0C,WAAWT,uBAAuBS;EAClCC,MAAMV,uBAAuBU;EAC7Bf;EACAC;EACAC;EACAK;EACA,GAAIZ,SAAS,EAAEA,OAAO,IAAI,CAAC;EAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;CACzC,CAAC,IACC;CAEJ,IAAIL,0BAA0B,CAACD,eAAe;EAC5ChB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEC,IAAI;GAAOC,OAAO;EAA4B;CACzD;CAEA,IAAIU,eAAe;EAEjB,MAAMa,YAAWD,MADEpD,sBAAsB0B,QAAQ,EAAA,CAC3B4B;EACtB,IAAI,CAACD,UAAU;GACb7B,IAAIG,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAEC,IAAI;IAAOC,OAAO;GAA4B;EACzD;EAEA,MAAMyB,aAAa1C,cAAc;EACjC,MAAMF,8BAA8B0C,UAAUE,UAAU;EACxD,MAAMC,eAAe,MAAMH,SAASI,WAAW,GAAGF,WAAU,OAAQ,CAAC,CAACG,QACpE,EAAE,8BAA8BlB,cAAcmB,IAAI,GAClD,EAAEC,YAAY;GAAEC,KAAK;GAAGzB,UAAU;GAAG0B,QAAQ;GAAGC,UAAU;EAAE,EAAE,CAChE;EACA,IAAIP,cAAcK,eAAe3D,UAAU;GACzC,MAAM8D,mBAAmBR,aAAaO,YAAY,OAAOP,aAAaO,aAAa,WAC/EP,aAAaO,WACb,CAAC;GACL,MAAMG,mBAAmB,OAAOF,iBAAiB3B,aAAa,WAC1D2B,iBAAiB3B,WACjBA;GACJ,MAAM8B,eAAe,OAAOX,aAAaM,WAAW,WAChDN,aAAaM,SACbxB;GACJ,MAAM8B,SAAS,MAAM/D,0BAA0B;IAC7CqB;IACA6B;IACAc,QAAQb,aAAaK;IACrBzB;IACAC,UAAU6B;IACV5B,WAAW6B;IACXxB;IACA,GAAIZ,SAAS,EAAEA,OAAO,IAAI,CAAC;IAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;IACvCwB,kBAAkB9B,cAAcmB;GAClC,CAAC;GACD,IAAIS,QACF,OAAO;IACLvC,IAAI;IACJuC;IACAG,cAAc;IACd,GAAI3B,YAAY,EAAEA,UAAU,IAAI,CAAC;GACnC;EAEJ;CACF;CAEA,MAAM4B,YAAY1D,kBAAkB;CACpC,MAAM2D,cAAcC,KAAKC,KAAKrC,YAAYkC,SAAS;CAGnD,MAAMK,WAAW9D,YAAYS,KAAKE,UADlBjB,oBAAoBe,KAAKE,QACGkD,CAAO;CAEnD,MAAME,gBAAgB,MAAM7E,OAAO8E,IACjC,mBACAF,QACF;CAEA,MAAMjE,oBAAoBiE,QAAQ;CAElC,MAAMG,WAAW,IAAI9E,SAAS,CAAC,CAAC2C,SAAS;CACzC,MAAMoC,MAAMC,KAAKD,IAAI;CACrB,MAAME,YAAY,IAAID,KAAKD,MAAMjE,gBAAgB,CAAC;CAElD,MAAM8D,cAAcM,OAAO;EACzBvB,KAAKmB;EACL,GAAIjD,SAAS,EAAEA,OAAO,IAAI,CAAC;EAC3B,GAAIe,eAAe,EAAEA,aAAa,IAAI,CAAC;EACvCV;EACAC;EACAE,UAAUI,gBAAgB;EAC1BA;EACA,GAAIH,gBAAgB,EAAEA,cAAc,IAAI,CAAC;EACzCF;EACAkC;EACAC;EACA7C,QAAQ;EACRyD,WAAW,IAAIH,KAAKD,GAAG;EACvBE;CACF,CAAC;CAED,OAAO;EACLtD,IAAI;EACJmD;EACAR;EACAC;EACA,GAAI7B,YAAY,EAAEA,UAAU,IAAI,CAAC;CACnC;AACF;;;ACxIA,IAAa2D,cAAqE,OAChFE,SACAC,QACkC;CAClC,MAAME,WAAWX,YAAYS,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMS,WAAWC,OAAON,IAAIO,IAAIC,QAAQH,YAAY,EAAE,CAAC,CAACI,KAAK;CAC7D,MAAMC,WAAWJ,OAAON,IAAIO,IAAIC,QAAQG,SAAS,EAAE,CAAC,CAACF,KAAK;CAC1D,MAAME,QAAQC,OAAOF,QAAQ;CAE7B,IAAI,CAACL,YAAY,CAACO,OAAOC,UAAUF,KAAK,KAAKA,QAAQ,GAAG;EACtDX,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAoB;CACjD;CAEA,MAAMkB,UAAU5B,oBAAoBc,KAAKE,QAAQ;CACjD,MAAMa,WAAW1B,YAAYW,KAAKE,UAAUY,OAAO;CAEnD,MAAM,CAACE,eAAeC,eAAe,MAAMhB,QAAQiB,IAAI,CACrDrC,OAAOsC,IAAI,mBAAmBJ,QAAQ,GACtClC,OAAOsC,IAAI,iBAAiBJ,QAAQ,CAAmC,CACxE;CAED,IAAI,CAACD,QAAQM,IAAI,UAAU,iBAAiB,GAAG;EAC7CpB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMyB,UAAU,MAAML,cAAcM,QAAQ,EAAEC,MAAM,CAAC,EAAEC,KAAKnB,SAAS,GAAGf,4BAA4BwB,SAAS,QAAQ,CAAC,EAAE,CAAC,CAAC,CAACW,KAAK;CAChI,IAAI,CAACJ,SAAS;EACZrB,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAY;CACzC;CAEA,IAAIyB,QAAQjB,WAAW,aAAa;EAClCJ,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAgB;CAC7C;CAEA,IAAIe,SAASU,QAAQK,aAAa;EAChC1B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAqB;CAClD;CAEA,MAAM+B,OAAOlC,gBAAgBM,OAAO;CACpC,IAAI,CAAC4B,MAAM;EACT3B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAMgC,eAAejB,UAAUU,QAAQK,cAAc,IACjDL,QAAQQ,YAAYR,QAAQS,aAAaT,QAAQK,cAAc,KAC/DL,QAAQS;CAEZ,IAAIH,KAAKI,SAASH,cAAc;EAC9B5B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAEA,IAAI+B,KAAKI,WAAWH,cAAc;EAChC5B,IAAIG,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAET,IAAI;GAAOC,OAAO;EAAqB;CAClD;CAEA,MAAMoC,iBAAiBhC,IAAIO,IAAIY,IAAI,gBAAgB;CACnD,MAAMc,SAASD,iBAAiB7C,iBAAiBwC,IAAI,IAAIO,KAAAA;CAEzD,IAAIF;MAEEC,WADmBzC,mBAAmBwC,cAC3BG,GAAgB;GAC7BnC,IAAIG,IAAIC,OAAO,GAAG;GAClB,OAAO;IAAET,IAAI;IAAOC,OAAO;GAAoB;EACjD;;CAGF,MAAMR,oBAAoB2B,QAAQ;CAElC,MAAME,YAAYmB,UAChB;EAAE/B;EAAUM;CAAM,GAClB;EACE0B,MAAM;GACJhC;GACAM;GACAgB;GACAW,MAAMX,KAAKI;GACXE;GACAM,WAAWlB,QAAQkB;EACrB;EACAC,cAAc,EACZC,2BAAW,IAAIC,KAAK,EACtB;CACF,GACA,EAAEC,QAAQ,KAAK,CACjB;CAEA3C,IAAIG,IAAIC,OAAO,GAAG;CAClB,OAAO,EAAET,IAAI,KAAK;AACpB;;;AC7HA,IAAaiD,iBAAiB,EAC5BC,YACAC,8BAII;CACJ,QAAQC,KAAUC,KAAUC,SAAc;EAKxC,IAAI,EAJgB,OAAOF,KAAKI,UAAU,oBAAoB,WAC1DC,OAAOL,IAAII,QAAQ,eAAe,IAClC,GAAA,CAEaE,SAAS,0BAA0B,GAAG;GACrDJ,KAAK;GACL;EACF;EAEA,IAAIK,QAAQ;EACZ,MAAMC,SAAmB,CAAA;EACzB,IAAIE,OAAO;EACX,IAAIC,SAAS;EACb,IAAIC,kBAAwD;EAE5D,MAAMG,qBAAqB,OAAOhB,4BAA4B,YAAYA,0BAA0B,IAChGA,0BACA;EAEJ,MAAMiB,gBAAgB;GACpBhB,IAAIiB,IAAI,QAAQC,MAAM;GACtBlB,IAAIiB,IAAI,OAAOE,KAAK;GACpBnB,IAAIiB,IAAI,SAASG,OAAO;GACxBpB,IAAIiB,IAAI,WAAWI,SAAS;GAC5B,IAAIT,iBAAiB;IACnBU,aAAaV,eAAe;IAC5BA,kBAAkB;GACpB;EACF;EAEA,MAAMW,UAAUC,UAAoB;GAClC,IAAId,MAAM;GACVA,OAAO;GAEPM,QAAQ;GAER,IAAIQ,OAAO;IACTtB,KAAKsB,KAAK;IACV;GACF;GAEAxB,IAAIyB,OAAOhB,OAAOiB,OAAOlB,QAAQD,KAAK;GACtCL,KAAK;EACP;EAEA,MAAMgB,UAAUS,UAAe;GAC7B,IAAIjB,MAAM;GACV,MAAMkB,SAASnB,OAAOoB,SAASF,KAAK,IAAIA,QAAQlB,OAAOqB,KAAKH,KAAK;GACjEpB,SAASqB,OAAOG;GAEhB,IAAIxB,QAAQT,YAAY;IACtBY,OAAO;IACPM,QAAQ;IACRhB,IAAIgC,QAAQ;IACZ/B,IAAIgC,OAAO,GAAG,CAAC,CAACC,KAAK;KAAEC,IAAI;KAAOX,OAAO;IAAkB,CAAC;IAC5D;GACF;GAEAhB,OAAO4B,KAAKR,MAAM;GAElB,IAAI,CAACb,oBAAoB;GAEzB,MAAMsB,MAAMC,KAAKD,IAAI;GAGrB,MAAMM,SAASC,kBADDF,mBADIF,aAAaxC,GACEuC,GAAWxB,oBAAoBsB,GAC/BI,GAAOb,OAAOG,QAAQhB,oBAAoBsB,GAAG;GAE9E,IAAIM,SAAS,KAAK,CAAChC,QAAQ;IACzBA,SAAS;IACTX,IAAI6C,MAAM;IACVjC,kBAAkBE,iBAAiB;KACjCF,kBAAkB;KAClBD,SAAS;KACT,IAAID,MAAM;KACV,IAAI;MACFV,IAAI8C,OAAO;KACb,QAAQ,CACN;IAEJ,GAAGH,MAAM;GACX;EACF;EAEA,MAAMxB,cAAcI,OAAO;EAC3B,MAAMH,WAAW2B,QAAiBxB,OAAOwB,GAAG;EAC5C,MAAM1B,kBAAkBE,uBAAO,IAAIyB,MAAM,iBAAiB,CAAC;EAE3DhD,IAAIiD,GAAG,QAAQ/B,MAAM;EACrBlB,IAAIiD,GAAG,OAAO9B,KAAK;EACnBnB,IAAIiD,GAAG,SAAS7B,OAAO;EACvBpB,IAAIiD,GAAG,WAAW5B,SAAS;CAC7B;AACF;AAQA,IAAMiC,oBAAoB;AAC1B,IAAMC,kBAAkB,MAAU;AAElC,IAAMC,mCAAmB,IAAIC,IAA6B;AAC1D,IAAIC,gBAAgB;AAEpB,IAAMlB,gBAAgBxC,QAAqB;CACzC,MAAM2D,cAAc,OAAO3D,KAAK4D,aAAa,WAAW5D,IAAI4D,WAAW;CACvE,IAAID,YAAYE,KAAK,GAAG,OAAOF,YAAYE,KAAK;CAEhD,QADc,OAAO7D,KAAK+D,OAAO,WAAW/D,IAAI+D,KAAK,GAAA,CACxCF,KAAK,KAAK;AACzB;AAEA,IAAMG,sBAAsB3B,QAAgB;CAC1C,IAAIA,MAAMqB,gBAAgB,KAAQ;CAClCA,gBAAgBrB;CAEhB,IAAImB,iBAAiBS,OAAO,KAAM;CAElC,KAAK,MAAM,CAACC,KAAKzB,UAAUe,kBACzB,IAAInB,MAAMI,MAAMY,aAAaE,iBAC3BC,iBAAiBW,OAAOD,GAAG;AAGjC;AAEA,IAAMxB,sBAAsBwB,KAAanD,oBAA4BsB,QAAiC;CACpG2B,mBAAmB3B,GAAG;CAEtB,MAAM+B,WAAWrD,qBAAqBuC;CACtC,MAAMe,WAAWb,iBAAiBc,IAAIJ,GAAG;CACzC,IAAIG,UAAU;EACZA,SAAShB,aAAahB;EACtBgC,SAASlB,SAASoB,KAAKC,IAAIJ,UAAUC,SAASlB,MAAM;EACpD,OAAOkB;CACT;CAEA,MAAMnE,OAAwB;EAC5BiD,QAAQiB;EACRhB,cAAcf;EACdgB,YAAYhB;CACd;CACAmB,iBAAiBiB,IAAIP,KAAKhE,IAAI;CAC9B,OAAOA;AACT;AAEA,IAAM0C,qBACJH,OACAiC,OACA3D,oBACAsB,QACW;CACX,MAAM+B,WAAWrD,qBAAqBuC;CACtC,MAAMqB,YAAYJ,KAAKK,IAAI,GAAGvC,MAAMI,MAAMW,YAAY;CAEtD,IAAIuB,YAAY,GAAG;EACjBlC,MAAMU,SAASoB,KAAKC,IAAIJ,UAAU3B,MAAMU,SAAUwB,YAAY5D,qBAAsB,GAAI;EACxF0B,MAAMW,eAAef;CACvB;CAEAI,MAAMU,UAAUuB;CAEhB,IAAIjC,MAAMU,UAAU,GAAG,OAAO;CAC9B,OAAOoB,KAAKM,KAAM,CAACpC,MAAMU,SAASpC,qBAAsB,GAAI;AAC9D;;;AChKA,IAAA,mBAAgB0E,QAA0B;CACxC,MAAMC,iBAAiBN,kBAAkB;CACzCK,IAAIE,IACFH,WACAL,cAAc;EACZU,YAAYP,qBAAqBI,cAAc;EAC/CI,yBAAyBT,iCAAiC;CAC5D,CAAC,CACH;CAEAI,IAAIM,KAAKP,WAAmBP,UAAU;CACtCQ,IAAIO,IAAIR,YAAoBN,WAAW;CACvCO,IAAIS,IAAIV,aAAqBR,SAAS;CACtCS,IAAIM,KAAKP,eAAuBT,cAAc;AAChD"}