@solidxai/core 0.1.17-beta.0 → 0.1.17-beta.2

package/CLAUDE.md

@@ -0,0 +1,26 @@
+# This is the SolidX API project.
+This is included as a dependency in consuming projects.
+
+# SolidX UI
+# The corresponding UI project is at the below path:
+ /Users/oswald/projects/Solid_Starters/solid-core-ui
+
+# SolidX Docs
+# The documentation project is at the below path:
+/Users/oswald/projects/solidxai-docs
+
+# SolidX Agent
+# The agent project which has the skills for helping users configure, build and use SolidX is at the below path:
+/Users/oswald/projects/Solid_Starters/agent
+
+# SolidX Control Plane Commands
+# The control plane commands for managing SolidX instances are in the below path:
+/Users/oswald/projects/Solid_Starters/solidctl
+
+# Testing reference project 
+# This is the reference library management project that is used for testing and development of SolidX features. It is located at the below path:
+/Users/oswald/projects/Solid_Starters/solid-library-management
+
+# Code Builder project
+# This is the project that contains the code builder which generates code based on user input and templates. It is located at the below path:
+/Users/oswald/projects/Solid_Starters/solid-code-builder

package/dist/constants/media-file-types.d.ts

@@ -5,6 +5,8 @@ export type MediaFileTypeDefinition = {
     mimeType: string;
     extension: string;
 };
+export declare const DANGEROUS_EXTENSIONS: Set<string>;
+export declare const DANGEROUS_MIME_TYPES: Set<string>;
 export declare const MEDIA_FILE_TYPES: MediaFileTypeDefinition[];
 export declare const MEDIA_TYPE_TO_EXTENSIONS: Record<MediaCategory, string[]>;
 export declare const IMAGE_EXTENSIONS: string[];
@@ -14,8 +16,6 @@ export declare const DOCUMENT_EXTENSIONS: string[];
 export declare const PDF_EXTENSION = "pdf";
 export declare const EXTENSION_TO_MIME_TYPE: Record<string, string>;
 export declare const MIME_TO_MEDIA_TYPE: Record<string, MediaCategory>;
-export declare const DANGEROUS_EXTENSIONS: Set<string>;
-export declare const DANGEROUS_MIME_TYPES: Set<string>;
 export declare function normalizeUploadedFileName(fileName?: string | null): string;
 export declare function getLowercaseFileExtension(fileName?: string | null): string | undefined;
 export declare function getLowercaseFileExtensionSegments(fileName?: string | null): string[];

package/dist/constants/media-file-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-file-types.d.ts","sourceRoot":"","sources":["../../src/constants/media-file-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEzE,eAAO,MAAM,gBAAgB,qDAAsD,CAAC;AAEpF,MAAM,MAAM,uBAAuB,GAAG;IAClC,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAIF,eAAO,MAAM,gBAAgB,EAAE,uBAAuB,EAkDrD,CAAC;AAUF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAKzC,CAAC;AAE7B,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,mBAAmB,UAAgC,CAAC;AACjE,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAK1B,CAAC;AAEjC,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAKtB,CAAC;AAOxC,eAAO,MAAM,oBAAoB,aAK/B,CAAC;AAQH,eAAO,MAAM,oBAAoB,aAE/B,CAAC;AAuCH,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAmB1E;AAOD,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAStF;AAWD,wBAAgB,iCAAiC,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAGpF;AAGD,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAE1E;AAQD,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAO5E;AAUD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAatB,CAAC;AAE1C,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAE3D,CAAC;AAMF,eAAO,MAAM,sBAAsB,aAKjC,CAAC"}
+{"version":3,"file":"media-file-types.d.ts","sourceRoot":"","sources":["../../src/constants/media-file-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEzE,eAAO,MAAM,gBAAgB,qDAAsD,CAAC;AAEpF,MAAM,MAAM,uBAAuB,GAAG;IAClC,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAyBF,eAAO,MAAM,oBAAoB,aAIhC,CAAC;AA0BF,eAAO,MAAM,oBAAoB,aAIhC,CAAC;AAQF,eAAO,MAAM,gBAAgB,EAAE,uBAAuB,EAwDrD,CAAC;AAUF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAKzC,CAAC;AAE7B,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,UAAiC,CAAC;AAC/D,eAAO,MAAM,mBAAmB,UAAgC,CAAC;AACjE,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAK1B,CAAC;AAEjC,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAKtB,CAAC;AAuCxC,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAmB1E;AAOD,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAStF;AAWD,wBAAgB,iCAAiC,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE,CAGpF;AAGD,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAE1E;AAQD,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAO5E;AAUD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAatB,CAAC;AAE1C,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAE3D,CAAC;AAWF,eAAO,MAAM,sBAAsB,aAKjC,CAAC"}

package/dist/constants/media-file-types.js

@@ -1,12 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.INLINE_SAFE_EXTENSIONS = exports.EXT_TO_MEDIA_TYPE = exports.EXT_TO_MEDIA_TYPES = exports.DANGEROUS_MIME_TYPES = exports.DANGEROUS_EXTENSIONS = exports.MIME_TO_MEDIA_TYPE = exports.EXTENSION_TO_MIME_TYPE = exports.PDF_EXTENSION = exports.DOCUMENT_EXTENSIONS = exports.VIDEO_EXTENSIONS = exports.AUDIO_EXTENSIONS = exports.IMAGE_EXTENSIONS = exports.MEDIA_TYPE_TO_EXTENSIONS = exports.MEDIA_FILE_TYPES = exports.MEDIA_CATEGORIES = void 0;
+exports.INLINE_SAFE_EXTENSIONS = exports.EXT_TO_MEDIA_TYPE = exports.EXT_TO_MEDIA_TYPES = exports.MIME_TO_MEDIA_TYPE = exports.EXTENSION_TO_MIME_TYPE = exports.PDF_EXTENSION = exports.DOCUMENT_EXTENSIONS = exports.VIDEO_EXTENSIONS = exports.AUDIO_EXTENSIONS = exports.IMAGE_EXTENSIONS = exports.MEDIA_TYPE_TO_EXTENSIONS = exports.MEDIA_FILE_TYPES = exports.DANGEROUS_MIME_TYPES = exports.DANGEROUS_EXTENSIONS = exports.MEDIA_CATEGORIES = void 0;
 exports.normalizeUploadedFileName = normalizeUploadedFileName;
 exports.getLowercaseFileExtension = getLowercaseFileExtension;
 exports.getLowercaseFileExtensionSegments = getLowercaseFileExtensionSegments;
 exports.getUploadedFileName = getUploadedFileName;
 exports.isDangerousMediaFile = isDangerousMediaFile;
 exports.MEDIA_CATEGORIES = ['image', 'audio', 'video', 'file', 'pdf'];
+const DEFAULT_DANGEROUS_EXTENSIONS = [
+    'html', 'htm', 'xhtml', 'svg', 'xml',
+    'js', 'mjs', 'php', 'phtml', 'jsp', 'asp', 'aspx',
+    'exe', 'sh', 'bat', 'cmd', 'ps1', 'jar', 'dll',
+    'msi', 'msix', 'msp', 'com', 'scr', 'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'pif', 'reg',
+];
+const parseExtensionList = (raw) => raw.split(',').map(ext => ext.toLowerCase().trim().replace(/^\./, '')).filter(Boolean);
+const configuredDangerousExtensions = parseExtensionList(process.env.AB_DANGEROUS_EXTENSIONS ?? '');
+exports.DANGEROUS_EXTENSIONS = new Set(configuredDangerousExtensions.length > 0
+    ? configuredDangerousExtensions
+    : DEFAULT_DANGEROUS_EXTENSIONS);
+const DANGEROUS_MIME_TYPES_BY_EXTENSION = {
+    html: ['text/html'],
+    htm: ['text/html'],
+    xhtml: ['application/xhtml+xml'],
+    svg: ['image/svg+xml'],
+};
+exports.DANGEROUS_MIME_TYPES = new Set(Object.entries(DANGEROUS_MIME_TYPES_BY_EXTENSION)
+    .filter(([extension]) => exports.DANGEROUS_EXTENSIONS.has(extension))
+    .flatMap(([, mimeTypes]) => mimeTypes));
 exports.MEDIA_FILE_TYPES = [
     { mediaType: 'image', mimeType: 'image/png', extension: 'png' },
     { mediaType: 'image', mimeType: 'image/jpeg', extension: 'jpg' },
@@ -18,6 +38,9 @@ exports.MEDIA_FILE_TYPES = [
     { mediaType: 'image', mimeType: 'image/tiff', extension: 'tiff' },
     { mediaType: 'image', mimeType: 'image/heic', extension: 'heic' },
     { mediaType: 'image', mimeType: 'image/heif', extension: 'heif' },
+    ...(exports.DANGEROUS_EXTENSIONS.has('svg')
+        ? []
+        : [{ mediaType: 'image', mimeType: 'image/svg+xml', extension: 'svg' }]),
     { mediaType: 'audio', mimeType: 'audio/mpeg', extension: 'mp3' },
     { mediaType: 'audio', mimeType: 'audio/mp3', extension: 'mp3' },
     { mediaType: 'audio', mimeType: 'audio/wav', extension: 'wav' },
@@ -84,15 +107,6 @@ exports.MIME_TO_MEDIA_TYPE = exports.MEDIA_FILE_TYPES.reduce((acc, fileType) =>
     }
     return acc;
 }, {});
-exports.DANGEROUS_EXTENSIONS = new Set([
-    'html', 'htm', 'xhtml', 'svg', 'xml',
-    'js', 'mjs', 'php', 'phtml', 'jsp', 'asp', 'aspx',
-    'exe', 'sh', 'bat', 'cmd', 'ps1', 'jar', 'dll',
-    'msi', 'msix', 'msp', 'com', 'scr', 'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'pif', 'reg',
-]);
-exports.DANGEROUS_MIME_TYPES = new Set([
-    'image/svg+xml', 'text/html', 'application/xhtml+xml',
-]);
 function decodePercentEncodingSafely(name) {
     let decoded = name;
     for (let i = 0; i < 3; i++) {

package/dist/constants/media-file-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"media-file-types.js","sourceRoot":"","sources":["../../src/constants/media-file-types.ts"],"names":[],"mappings":";;;AA8JA,8DAmBC;AAOD,8DASC;AAWD,8EAGC;AAUD,kDAEC;AAQD,oDAOC;AAxOY,QAAA,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAUvE,QAAA,gBAAgB,GAA8B;IACvD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IAEjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IAEjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACrE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACrE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE;IACtE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAE/D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE;IACjE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,EAAE;IACtE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,yEAAyE,EAAE,SAAS,EAAE,MAAM,EAAE;IAC7H,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7E,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,mEAAmE,EAAE,SAAS,EAAE,MAAM,EAAE;IACvH,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK,EAAE;IAClF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,2EAA2E,EAAE,SAAS,EAAE,MAAM,EAAE;IAC/H,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACpE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;IACjF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;IACjF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,6BAA6B,EAAE,SAAS,EAAE,IAAI,EAAE;IAE/E,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;CACtE,CAAC;AAEF,MAAM,sBAAsB,GAAG,GAAoC,EAAE,CAAC,CAAC;IACnE,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,EAAE;CACV,CAAC,CAAC;AAEU,QAAA,wBAAwB,GAAoC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAC/G,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAEhB,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,mBAAmB,GAAG,gCAAwB,CAAC,IAAI,CAAC;AACpD,QAAA,aAAa,GAAG,KAAK,CAAC;AAEtB,QAAA,sBAAsB,GAA2B,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACpG,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAA4B,CAAC,CAAC;AAEpB,QAAA,kBAAkB,GAAkC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACvG,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAAmC,CAAC,CAAC;AAO3B,QAAA,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACxC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IACpC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACjD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC9C,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;CAC7F,CAAC,CAAC;AAQU,QAAA,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACxC,eAAe,EAAE,WAAW,EAAE,uBAAuB;CACxD,CAAC,CAAC;AAQH,SAAS,2BAA2B,CAAC,IAAY;IAC7C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACD,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAgBD,SAAgB,yBAAyB,CAAC,QAAwB;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACd,CAAC;IAED,IAAI,IAAI,GAAG,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAOD,SAAgB,yBAAyB,CAAC,QAAwB;IAC9D,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAEjD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAWD,SAAgB,iCAAiC,CAAC,QAAwB;IACtE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAUD,SAAgB,mBAAmB,CAAC,IAA8B;IAC9D,OAAO,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AACtD,CAAC;AAQD,SAAgB,oBAAoB,CAAC,IAA8B;IAC/D,MAAM,QAAQ,GAAG,iCAAiC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,4BAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,4BAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC;AAUY,QAAA,kBAAkB,GAAoC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAEzG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAGD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAGD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAAqC,CAAC,CAAC;AAE7B,QAAA,iBAAiB,GAAkC;IAC5D,GAAG,MAAM,CAAC,WAAW,CAAC,wBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;CACtG,CAAC;AAMW,QAAA,sBAAsB,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG,wBAAgB;IACnB,GAAG,wBAAgB;IACnB,GAAG,wBAAgB;IACnB,qBAAa;CAChB,CAAC,CAAC","sourcesContent":["export type MediaCategory = 'image' | 'audio' | 'video' | 'file' | 'pdf';\n\nexport const MEDIA_CATEGORIES = ['image', 'audio', 'video', 'file', 'pdf'] as const;\n\nexport type MediaFileTypeDefinition = {\n    mediaType: MediaCategory;\n    mimeType: string;\n    extension: string;\n};\n\n// Single source of truth for every supported media extension, its canonical MIME type,\n// and the coarse media category used across validation and UI metadata.\nexport const MEDIA_FILE_TYPES: MediaFileTypeDefinition[] = [\n    { mediaType: 'image', mimeType: 'image/png', extension: 'png' },\n    { mediaType: 'image', mimeType: 'image/jpeg', extension: 'jpg' },\n    { mediaType: 'image', mimeType: 'image/jpg', extension: 'jpg' },\n    { mediaType: 'image', mimeType: 'image/jpeg', extension: 'jpeg' },\n    { mediaType: 'image', mimeType: 'image/webp', extension: 'webp' },\n    { mediaType: 'image', mimeType: 'image/gif', extension: 'gif' },\n    { mediaType: 'image', mimeType: 'image/bmp', extension: 'bmp' },\n    { mediaType: 'image', mimeType: 'image/tiff', extension: 'tiff' },\n    { mediaType: 'image', mimeType: 'image/heic', extension: 'heic' },\n    { mediaType: 'image', mimeType: 'image/heif', extension: 'heif' },\n\n    { mediaType: 'audio', mimeType: 'audio/mpeg', extension: 'mp3' },\n    { mediaType: 'audio', mimeType: 'audio/mp3', extension: 'mp3' },\n    { mediaType: 'audio', mimeType: 'audio/wav', extension: 'wav' },\n    { mediaType: 'audio', mimeType: 'audio/x-wav', extension: 'wav' },\n    { mediaType: 'audio', mimeType: 'audio/ogg', extension: 'ogg' },\n    { mediaType: 'audio', mimeType: 'audio/aac', extension: 'aac' },\n    { mediaType: 'audio', mimeType: 'audio/mp4', extension: 'm4a' },\n    { mediaType: 'audio', mimeType: 'audio/x-m4a', extension: 'm4a' },\n    { mediaType: 'audio', mimeType: 'audio/flac', extension: 'flac' },\n    { mediaType: 'audio', mimeType: 'audio/webm', extension: 'webm' },\n\n    { mediaType: 'video', mimeType: 'video/mp4', extension: 'mp4' },\n    { mediaType: 'video', mimeType: 'video/quicktime', extension: 'mov' },\n    { mediaType: 'video', mimeType: 'video/x-msvideo', extension: 'avi' },\n    { mediaType: 'video', mimeType: 'video/x-matroska', extension: 'mkv' },\n    { mediaType: 'video', mimeType: 'video/mpeg', extension: 'mpeg' },\n    { mediaType: 'video', mimeType: 'video/mpeg', extension: 'mpg' },\n    { mediaType: 'video', mimeType: 'video/3gpp', extension: '3gp' },\n    { mediaType: 'video', mimeType: 'video/3gpp2', extension: '3g2' },\n    { mediaType: 'video', mimeType: 'video/webm', extension: 'webm' },\n    { mediaType: 'video', mimeType: 'video/ogg', extension: 'ogg' },\n\n    { mediaType: 'file', mimeType: 'text/plain', extension: 'txt' },\n    { mediaType: 'file', mimeType: 'text/markdown', extension: 'md' },\n    { mediaType: 'file', mimeType: 'text/csv', extension: 'csv' },\n    { mediaType: 'file', mimeType: 'application/json', extension: 'json' },\n    { mediaType: 'file', mimeType: 'application/msword', extension: 'doc' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', extension: 'docx' },\n    { mediaType: 'file', mimeType: 'application/vnd.ms-excel', extension: 'xls' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', extension: 'xlsx' },\n    { mediaType: 'file', mimeType: 'application/vnd.ms-powerpoint', extension: 'ppt' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.presentationml.presentation', extension: 'pptx' },\n    { mediaType: 'file', mimeType: 'application/zip', extension: 'zip' },\n    { mediaType: 'file', mimeType: 'application/x-zip-compressed', extension: 'zip' },\n    { mediaType: 'file', mimeType: 'application/x-rar-compressed', extension: 'rar' },\n    { mediaType: 'file', mimeType: 'application/x-7z-compressed', extension: '7z' },\n\n    { mediaType: 'pdf', mimeType: 'application/pdf', extension: 'pdf' },\n];\n\nconst createMediaTypeBuckets = (): Record<MediaCategory, string[]> => ({\n    image: [],\n    audio: [],\n    video: [],\n    file: [],\n    pdf: [],\n});\n\nexport const MEDIA_TYPE_TO_EXTENSIONS: Record<MediaCategory, string[]> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!acc[fileType.mediaType].includes(fileType.extension)) {\n        acc[fileType.mediaType].push(fileType.extension);\n    }\n    return acc;\n}, createMediaTypeBuckets());\n\nexport const IMAGE_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.image;\nexport const AUDIO_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.audio;\nexport const VIDEO_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.video;\nexport const DOCUMENT_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.file;\nexport const PDF_EXTENSION = 'pdf';\n\nexport const EXTENSION_TO_MIME_TYPE: Record<string, string> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!(fileType.extension in acc)) {\n        acc[fileType.extension] = fileType.mimeType;\n    }\n    return acc;\n}, {} as Record<string, string>);\n\nexport const MIME_TO_MEDIA_TYPE: Record<string, MediaCategory> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!(fileType.mimeType in acc)) {\n        acc[fileType.mimeType] = fileType.mediaType;\n    }\n    return acc;\n}, {} as Record<string, MediaCategory>);\n\n/**\n * Extensions that must never be accepted as media uploads, regardless of declared mimetype or\n * admin-configured mediaTypes allowlist. Checked before any other resolution so a spoofed\n * Content-Type (e.g. application/octet-stream on an .html file) can't bypass this.\n */\nexport const DANGEROUS_EXTENSIONS = new Set([\n    'html', 'htm', 'xhtml', 'svg', 'xml',\n    'js', 'mjs', 'php', 'phtml', 'jsp', 'asp', 'aspx',\n    'exe', 'sh', 'bat', 'cmd', 'ps1', 'jar', 'dll',\n    'msi', 'msix', 'msp', 'com', 'scr', 'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'pif', 'reg',\n]);\n\n\n/**\n * Mimetypes that are never safe to accept, regardless of extension. These render as active\n * content in a browser (svg can carry <script>), so they are rejected even when the filename\n * looks harmless. Kept alongside DANGEROUS_EXTENSIONS so upload paths check both.\n */\nexport const DANGEROUS_MIME_TYPES = new Set([\n    'image/svg+xml', 'text/html', 'application/xhtml+xml',\n]);\n\n/**\n * Percent-decodes a filename, repeating a bounded number of times so a double-encoded payload\n * (`%252e` -> `%2e` -> `.`) survives a single pass through a proxy/framework that already\n * decoded once. Malformed escape sequences are left as-is rather than thrown, since this runs\n * on attacker-controlled input and a literal `%` in a filename (`100%done.pdf`) is legal.\n */\nfunction decodePercentEncodingSafely(name: string): string {\n    let decoded = name;\n    for (let i = 0; i < 3; i++) {\n        let next: string;\n        try {\n            next = decodeURIComponent(decoded);\n        } catch {\n            return decoded;\n        }\n        if (next === decoded) {\n            return decoded;\n        }\n        decoded = next;\n    }\n    return decoded;\n}\n\n/**\n * Reduces a client-supplied name to the name that will actually be resolved on disk, so\n * extension checks can't be dodged by decorating it. Each step defends a known bypass:\n *\n *  - `evil.exe%2e`         -> percent-encoding a trailing dot (or anything else) hides the real\n *                             extension from naive string matching; decode before inspecting it.\n *  - `../../evil.exe`      -> only the final path segment is the file name.\n *  - `evil.exe\\0.png`      -> a NUL truncates the name at the syscall/filesystem layer, so\n *                             anything after it is invisible to the OS but visible to naive\n *                             validation.\n *  - `evil.exe::$DATA`     -> NTFS alternate data stream suffix; the file on disk is evil.exe.\n *  - `evil.exe.` / `.exe ` -> Windows silently strips trailing dots and spaces when resolving\n *                             a path, so these land on disk as evil.exe.\n */\nexport function normalizeUploadedFileName(fileName?: string | null): string {\n    if (!fileName) {\n        return '';\n    }\n\n    let name = decodePercentEncodingSafely(String(fileName));\n    name = name.split(/[/\\\\]/).pop() ?? '';\n\n    const nulIndex = name.indexOf('\\0');\n    if (nulIndex >= 0) {\n        name = name.slice(0, nulIndex);\n    }\n\n    const streamIndex = name.indexOf(':');\n    if (streamIndex >= 0) {\n        name = name.slice(0, streamIndex);\n    }\n\n    return name.replace(/[\\s.]+$/, '');\n}\n\n/**\n * The effective extension - what the OS/browser will treat the file as. Used for media\n * category resolution and inline-safety decisions. Always normalizes first, so\n * `evil.exe.` resolves to `exe` rather than to nothing.\n */\nexport function getLowercaseFileExtension(fileName?: string | null): string | undefined {\n    const name = normalizeUploadedFileName(fileName);\n\n    const lastDotIndex = name.lastIndexOf('.');\n    if (lastDotIndex < 0 || lastDotIndex === name.length - 1) {\n        return undefined;\n    }\n\n    return name.slice(lastDotIndex + 1).toLowerCase();\n}\n\n/**\n * Every dot-delimited segment after the stem, lowercased. The danger check uses this rather\n * than only the effective extension so a dangerous type buried in a double extension\n * (`evil.exe.png`, `shell.php.jpg`) is still caught - several servers and browsers resolve\n * such names by an earlier segment than the last one.\n *\n * The stem is skipped so an innocuous file that merely starts with a keyword (`exe.png`)\n * isn't rejected.\n */\nexport function getLowercaseFileExtensionSegments(fileName?: string | null): string[] {\n    const segments = normalizeUploadedFileName(fileName).toLowerCase().split('.');\n    return segments.slice(1).filter(segment => segment.length > 0);\n}\n\n/** Minimal shape of an uploaded file, so this module stays free of framework imports. */\nexport interface UploadedFileLike {\n    mimetype?: string;\n    originalname?: string;\n    filename?: string;\n}\n\n/** originalname is the client-supplied name; filename is multer's on-disk name. */\nexport function getUploadedFileName(file?: UploadedFileLike | null): string {\n    return file?.originalname ?? file?.filename ?? '';\n}\n\n/**\n * Single predicate for \"must never be stored\". Shared by every upload entry point\n * (MediaFieldCrudManager, chatter attachments) so the rules can't drift between them.\n * Extensions are checked before mimetype so a spoofed Content-Type (e.g.\n * application/octet-stream, or image/png, on an .html file) can't bypass it.\n */\nexport function isDangerousMediaFile(file?: UploadedFileLike | null): boolean {\n    const segments = getLowercaseFileExtensionSegments(getUploadedFileName(file));\n    if (segments.some(segment => DANGEROUS_EXTENSIONS.has(segment))) {\n        return true;\n    }\n\n    return DANGEROUS_MIME_TYPES.has((file?.mimetype || '').toLowerCase().trim());\n}\n\n/**\n * Single source of truth for extension -> coarse media category. Shared by upload-time\n * validation (MediaFieldCrudManager) and serve-time header hardening (ServeStaticModule), so\n * both agree on which extensions belong to which category and neither drifts out of sync.\n * Some extensions, such as ogg and webm, are valid for more than one category.\n * Keep every matching category instead of allowing a later entry to overwrite an earlier one.\n */\n// Example: { ogg: ['audio', 'video'], mp3: ['audio'], jpg: ['image'] }\nexport const EXT_TO_MEDIA_TYPES: Record<string, MediaCategory[]> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    // Create an empty category list the first time we see an extension.\n    if (!acc[fileType.extension]) {\n        acc[fileType.extension] = [];\n    }\n\n    // Add the category for this extension, but do not add duplicates.\n    if (!acc[fileType.extension].includes(fileType.mediaType)) {\n        acc[fileType.extension].push(fileType.mediaType);\n    }\n\n    // Return the map so the next media definition can be added to it.\n    return acc;\n}, {} as Record<string, MediaCategory[]>);\n\nexport const EXT_TO_MEDIA_TYPE: Record<string, MediaCategory> = {\n    ...Object.fromEntries(MEDIA_FILE_TYPES.map((fileType) => [fileType.extension, fileType.mediaType])),\n};\n\n/**\n * Extensions safe to serve inline with their natural Content-Type; everything else served from\n * media-files-storage is forced to application/octet-stream + Content-Disposition: attachment.\n */\nexport const INLINE_SAFE_EXTENSIONS = new Set<string>([\n    ...IMAGE_EXTENSIONS,\n    ...AUDIO_EXTENSIONS,\n    ...VIDEO_EXTENSIONS,\n    PDF_EXTENSION,\n]);\n"]}
+{"version":3,"file":"media-file-types.js","sourceRoot":"","sources":["../../src/constants/media-file-types.ts"],"names":[],"mappings":";;;AA6MA,8DAmBC;AAOD,8DASC;AAWD,8EAGC;AAUD,kDAEC;AAQD,oDAOC;AAvRY,QAAA,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAmBpF,MAAM,4BAA4B,GAAG;IACjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IACpC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACjD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC9C,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;CAC7F,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAY,EAAE,CACjD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAE3F,MAAM,6BAA6B,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;AAEvF,QAAA,oBAAoB,GAAG,IAAI,GAAG,CACvC,6BAA6B,CAAC,MAAM,GAAG,CAAC;IACpC,CAAC,CAAC,6BAA6B;IAC/B,CAAC,CAAC,4BAA4B,CACrC,CAAC;AAaF,MAAM,iCAAiC,GAA6B;IAChE,IAAI,EAAE,CAAC,WAAW,CAAC;IACnB,GAAG,EAAE,CAAC,WAAW,CAAC;IAClB,KAAK,EAAE,CAAC,uBAAuB,CAAC;IAChC,GAAG,EAAE,CAAC,eAAe,CAAC;CACzB,CAAC;AAQW,QAAA,oBAAoB,GAAG,IAAI,GAAG,CACvC,MAAM,CAAC,OAAO,CAAC,iCAAiC,CAAC;KAC5C,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,4BAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;KAC5D,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAC7C,CAAC;AAQW,QAAA,gBAAgB,GAA8B;IACvD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IAIjE,GAAG,CAAC,4BAAoB,CAAC,GAAG,CAAC,KAAK,CAAC;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAA6B,CAAC,CAAC;IAEvG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IAEjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACrE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACrE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE;IACtE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAChE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IACjE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE;IAE/D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE;IACjE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7D,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,EAAE;IACtE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,yEAAyE,EAAE,SAAS,EAAE,MAAM,EAAE;IAC7H,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7E,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,mEAAmE,EAAE,SAAS,EAAE,MAAM,EAAE;IACvH,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK,EAAE;IAClF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,2EAA2E,EAAE,SAAS,EAAE,MAAM,EAAE;IAC/H,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;IACpE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;IACjF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE;IACjF,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,6BAA6B,EAAE,SAAS,EAAE,IAAI,EAAE;IAE/E,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;CACtE,CAAC;AAEF,MAAM,sBAAsB,GAAG,GAAoC,EAAE,CAAC,CAAC;IACnE,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,EAAE;CACV,CAAC,CAAC;AAEU,QAAA,wBAAwB,GAAoC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAC/G,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAEhB,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,gBAAgB,GAAG,gCAAwB,CAAC,KAAK,CAAC;AAClD,QAAA,mBAAmB,GAAG,gCAAwB,CAAC,IAAI,CAAC;AACpD,QAAA,aAAa,GAAG,KAAK,CAAC;AAEtB,QAAA,sBAAsB,GAA2B,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACpG,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAA4B,CAAC,CAAC;AAEpB,QAAA,kBAAkB,GAAkC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACvG,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAAmC,CAAC,CAAC;AAQxC,SAAS,2BAA2B,CAAC,IAAY;IAC7C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACD,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAgBD,SAAgB,yBAAyB,CAAC,QAAwB;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACd,CAAC;IAED,IAAI,IAAI,GAAG,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAOD,SAAgB,yBAAyB,CAAC,QAAwB;IAC9D,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAEjD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAWD,SAAgB,iCAAiC,CAAC,QAAwB;IACtE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAUD,SAAgB,mBAAmB,CAAC,IAA8B;IAC9D,OAAO,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AACtD,CAAC;AAQD,SAAgB,oBAAoB,CAAC,IAA8B;IAC/D,MAAM,QAAQ,GAAG,iCAAiC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,4BAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,4BAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC;AAUY,QAAA,kBAAkB,GAAoC,wBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IAEzG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAGD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAGD,OAAO,GAAG,CAAC;AACf,CAAC,EAAE,EAAqC,CAAC,CAAC;AAE7B,QAAA,iBAAiB,GAAkC;IAC5D,GAAG,MAAM,CAAC,WAAW,CAAC,wBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;CACtG,CAAC;AAWW,QAAA,sBAAsB,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG,wBAAgB;IACnB,GAAG,wBAAgB;IACnB,GAAG,wBAAgB;IACnB,qBAAa;CAChB,CAAC,CAAC","sourcesContent":["export type MediaCategory = 'image' | 'audio' | 'video' | 'file' | 'pdf';\n\nexport const MEDIA_CATEGORIES = ['image', 'audio', 'video', 'file', 'pdf'] as const;\n\nexport type MediaFileTypeDefinition = {\n    mediaType: MediaCategory;\n    mimeType: string;\n    extension: string;\n};\n\n/**\n * Extensions that must never be accepted as media uploads, regardless of declared mimetype or\n * admin-configured mediaTypes allowlist. Checked before any other resolution so a spoofed\n * Content-Type (e.g. application/octet-stream on an .html file) can't bypass this.\n *\n * The default list below. A deployment can replace it wholesale via AB_DANGEROUS_EXTENSIONS\n * (comma-separated) - e.g. to accept svg uploads, which some clients legitimately need. This\n * replaces rather than narrows the list: whatever is set there becomes the entire denylist, so\n * anything left out of it becomes an accepted upload type. See default-settings-provider.service.ts\n * for the read-only \"dangerousExtensions\" setting that surfaces the effective list to admins.\n */\nconst DEFAULT_DANGEROUS_EXTENSIONS = [\n    'html', 'htm', 'xhtml', 'svg', 'xml',\n    'js', 'mjs', 'php', 'phtml', 'jsp', 'asp', 'aspx',\n    'exe', 'sh', 'bat', 'cmd', 'ps1', 'jar', 'dll',\n    'msi', 'msix', 'msp', 'com', 'scr', 'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'pif', 'reg',\n];\n\nconst parseExtensionList = (raw: string): string[] =>\n    raw.split(',').map(ext => ext.toLowerCase().trim().replace(/^\\./, '')).filter(Boolean);\n\nconst configuredDangerousExtensions = parseExtensionList(process.env.AB_DANGEROUS_EXTENSIONS ?? '');\n\nexport const DANGEROUS_EXTENSIONS = new Set(\n    configuredDangerousExtensions.length > 0\n        ? configuredDangerousExtensions\n        : DEFAULT_DANGEROUS_EXTENSIONS\n);\n\n/**\n * The mimetype gate must track the extension gate: a .svg upload arrives as image/svg+xml, so\n * removing svg from DANGEROUS_EXTENSIONS while image/svg+xml stayed on a separate literal would\n * still reject the upload at isDangerousMediaFile's second check - with a message pointing at\n * nothing the operator changed. Deriving from a single mapping keeps the two in sync.\n *\n * Only browser-rendered types appear here, which is why the resulting set is short (a handful of\n * entries against dozens of dangerous extensions): everything else is dangerous once downloaded\n * and run, and the mimetype sent for those is typically application/octet-stream, which must stay\n * allowed. When adding a browser-renderable extension to the denylist above, add it here too.\n */\nconst DANGEROUS_MIME_TYPES_BY_EXTENSION: Record<string, string[]> = {\n    html: ['text/html'],\n    htm: ['text/html'],\n    xhtml: ['application/xhtml+xml'],\n    svg: ['image/svg+xml'],\n};\n\n/**\n * Mimetypes that are never safe to accept, regardless of extension. These render as active\n * content in a browser (svg can carry <script>), so they are rejected even when the filename\n * looks harmless. Kept in sync with DANGEROUS_EXTENSIONS via DANGEROUS_MIME_TYPES_BY_EXTENSION\n * above, rather than maintained separately.\n */\nexport const DANGEROUS_MIME_TYPES = new Set(\n    Object.entries(DANGEROUS_MIME_TYPES_BY_EXTENSION)\n        .filter(([extension]) => DANGEROUS_EXTENSIONS.has(extension))\n        .flatMap(([, mimeTypes]) => mimeTypes)\n);\n\n// The set of media extensions the system currently recognises - its canonical MIME type, and the\n// coarse media category used across validation and UI metadata. Membership here means\n// \"resolvable\", not \"safe\": svg is included only when DANGEROUS_EXTENSIONS has been configured to\n// allow it (see below), since accepting it as an upload also makes it eligible for the inline-safe\n// serving path (INLINE_SAFE_EXTENSIONS further down) - safe there only because of the\n// Content-Security-Policy applied when serving it (solid-core.module.ts, media.controller.ts).\nexport const MEDIA_FILE_TYPES: MediaFileTypeDefinition[] = [\n    { mediaType: 'image', mimeType: 'image/png', extension: 'png' },\n    { mediaType: 'image', mimeType: 'image/jpeg', extension: 'jpg' },\n    { mediaType: 'image', mimeType: 'image/jpg', extension: 'jpg' },\n    { mediaType: 'image', mimeType: 'image/jpeg', extension: 'jpeg' },\n    { mediaType: 'image', mimeType: 'image/webp', extension: 'webp' },\n    { mediaType: 'image', mimeType: 'image/gif', extension: 'gif' },\n    { mediaType: 'image', mimeType: 'image/bmp', extension: 'bmp' },\n    { mediaType: 'image', mimeType: 'image/tiff', extension: 'tiff' },\n    { mediaType: 'image', mimeType: 'image/heic', extension: 'heic' },\n    { mediaType: 'image', mimeType: 'image/heif', extension: 'heif' },\n    // Only a media type when explicitly unblocked via AB_DANGEROUS_EXTENSIONS - see the file\n    // header comment. Hardcoded to svg specifically: unblocking e.g. html must not make html a\n    // media type, since it isn't a format the product supports as an upload.\n    ...(DANGEROUS_EXTENSIONS.has('svg')\n        ? []\n        : [{ mediaType: 'image', mimeType: 'image/svg+xml', extension: 'svg' } as MediaFileTypeDefinition]),\n\n    { mediaType: 'audio', mimeType: 'audio/mpeg', extension: 'mp3' },\n    { mediaType: 'audio', mimeType: 'audio/mp3', extension: 'mp3' },\n    { mediaType: 'audio', mimeType: 'audio/wav', extension: 'wav' },\n    { mediaType: 'audio', mimeType: 'audio/x-wav', extension: 'wav' },\n    { mediaType: 'audio', mimeType: 'audio/ogg', extension: 'ogg' },\n    { mediaType: 'audio', mimeType: 'audio/aac', extension: 'aac' },\n    { mediaType: 'audio', mimeType: 'audio/mp4', extension: 'm4a' },\n    { mediaType: 'audio', mimeType: 'audio/x-m4a', extension: 'm4a' },\n    { mediaType: 'audio', mimeType: 'audio/flac', extension: 'flac' },\n    { mediaType: 'audio', mimeType: 'audio/webm', extension: 'webm' },\n\n    { mediaType: 'video', mimeType: 'video/mp4', extension: 'mp4' },\n    { mediaType: 'video', mimeType: 'video/quicktime', extension: 'mov' },\n    { mediaType: 'video', mimeType: 'video/x-msvideo', extension: 'avi' },\n    { mediaType: 'video', mimeType: 'video/x-matroska', extension: 'mkv' },\n    { mediaType: 'video', mimeType: 'video/mpeg', extension: 'mpeg' },\n    { mediaType: 'video', mimeType: 'video/mpeg', extension: 'mpg' },\n    { mediaType: 'video', mimeType: 'video/3gpp', extension: '3gp' },\n    { mediaType: 'video', mimeType: 'video/3gpp2', extension: '3g2' },\n    { mediaType: 'video', mimeType: 'video/webm', extension: 'webm' },\n    { mediaType: 'video', mimeType: 'video/ogg', extension: 'ogg' },\n\n    { mediaType: 'file', mimeType: 'text/plain', extension: 'txt' },\n    { mediaType: 'file', mimeType: 'text/markdown', extension: 'md' },\n    { mediaType: 'file', mimeType: 'text/csv', extension: 'csv' },\n    { mediaType: 'file', mimeType: 'application/json', extension: 'json' },\n    { mediaType: 'file', mimeType: 'application/msword', extension: 'doc' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', extension: 'docx' },\n    { mediaType: 'file', mimeType: 'application/vnd.ms-excel', extension: 'xls' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', extension: 'xlsx' },\n    { mediaType: 'file', mimeType: 'application/vnd.ms-powerpoint', extension: 'ppt' },\n    { mediaType: 'file', mimeType: 'application/vnd.openxmlformats-officedocument.presentationml.presentation', extension: 'pptx' },\n    { mediaType: 'file', mimeType: 'application/zip', extension: 'zip' },\n    { mediaType: 'file', mimeType: 'application/x-zip-compressed', extension: 'zip' },\n    { mediaType: 'file', mimeType: 'application/x-rar-compressed', extension: 'rar' },\n    { mediaType: 'file', mimeType: 'application/x-7z-compressed', extension: '7z' },\n\n    { mediaType: 'pdf', mimeType: 'application/pdf', extension: 'pdf' },\n];\n\nconst createMediaTypeBuckets = (): Record<MediaCategory, string[]> => ({\n    image: [],\n    audio: [],\n    video: [],\n    file: [],\n    pdf: [],\n});\n\nexport const MEDIA_TYPE_TO_EXTENSIONS: Record<MediaCategory, string[]> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!acc[fileType.mediaType].includes(fileType.extension)) {\n        acc[fileType.mediaType].push(fileType.extension);\n    }\n    return acc;\n}, createMediaTypeBuckets());\n\nexport const IMAGE_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.image;\nexport const AUDIO_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.audio;\nexport const VIDEO_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.video;\nexport const DOCUMENT_EXTENSIONS = MEDIA_TYPE_TO_EXTENSIONS.file;\nexport const PDF_EXTENSION = 'pdf';\n\nexport const EXTENSION_TO_MIME_TYPE: Record<string, string> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!(fileType.extension in acc)) {\n        acc[fileType.extension] = fileType.mimeType;\n    }\n    return acc;\n}, {} as Record<string, string>);\n\nexport const MIME_TO_MEDIA_TYPE: Record<string, MediaCategory> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    if (!(fileType.mimeType in acc)) {\n        acc[fileType.mimeType] = fileType.mediaType;\n    }\n    return acc;\n}, {} as Record<string, MediaCategory>);\n\n/**\n * Percent-decodes a filename, repeating a bounded number of times so a double-encoded payload\n * (`%252e` -> `%2e` -> `.`) survives a single pass through a proxy/framework that already\n * decoded once. Malformed escape sequences are left as-is rather than thrown, since this runs\n * on attacker-controlled input and a literal `%` in a filename (`100%done.pdf`) is legal.\n */\nfunction decodePercentEncodingSafely(name: string): string {\n    let decoded = name;\n    for (let i = 0; i < 3; i++) {\n        let next: string;\n        try {\n            next = decodeURIComponent(decoded);\n        } catch {\n            return decoded;\n        }\n        if (next === decoded) {\n            return decoded;\n        }\n        decoded = next;\n    }\n    return decoded;\n}\n\n/**\n * Reduces a client-supplied name to the name that will actually be resolved on disk, so\n * extension checks can't be dodged by decorating it. Each step defends a known bypass:\n *\n *  - `evil.exe%2e`         -> percent-encoding a trailing dot (or anything else) hides the real\n *                             extension from naive string matching; decode before inspecting it.\n *  - `../../evil.exe`      -> only the final path segment is the file name.\n *  - `evil.exe\\0.png`      -> a NUL truncates the name at the syscall/filesystem layer, so\n *                             anything after it is invisible to the OS but visible to naive\n *                             validation.\n *  - `evil.exe::$DATA`     -> NTFS alternate data stream suffix; the file on disk is evil.exe.\n *  - `evil.exe.` / `.exe ` -> Windows silently strips trailing dots and spaces when resolving\n *                             a path, so these land on disk as evil.exe.\n */\nexport function normalizeUploadedFileName(fileName?: string | null): string {\n    if (!fileName) {\n        return '';\n    }\n\n    let name = decodePercentEncodingSafely(String(fileName));\n    name = name.split(/[/\\\\]/).pop() ?? '';\n\n    const nulIndex = name.indexOf('\\0');\n    if (nulIndex >= 0) {\n        name = name.slice(0, nulIndex);\n    }\n\n    const streamIndex = name.indexOf(':');\n    if (streamIndex >= 0) {\n        name = name.slice(0, streamIndex);\n    }\n\n    return name.replace(/[\\s.]+$/, '');\n}\n\n/**\n * The effective extension - what the OS/browser will treat the file as. Used for media\n * category resolution and inline-safety decisions. Always normalizes first, so\n * `evil.exe.` resolves to `exe` rather than to nothing.\n */\nexport function getLowercaseFileExtension(fileName?: string | null): string | undefined {\n    const name = normalizeUploadedFileName(fileName);\n\n    const lastDotIndex = name.lastIndexOf('.');\n    if (lastDotIndex < 0 || lastDotIndex === name.length - 1) {\n        return undefined;\n    }\n\n    return name.slice(lastDotIndex + 1).toLowerCase();\n}\n\n/**\n * Every dot-delimited segment after the stem, lowercased. The danger check uses this rather\n * than only the effective extension so a dangerous type buried in a double extension\n * (`evil.exe.png`, `shell.php.jpg`) is still caught - several servers and browsers resolve\n * such names by an earlier segment than the last one.\n *\n * The stem is skipped so an innocuous file that merely starts with a keyword (`exe.png`)\n * isn't rejected.\n */\nexport function getLowercaseFileExtensionSegments(fileName?: string | null): string[] {\n    const segments = normalizeUploadedFileName(fileName).toLowerCase().split('.');\n    return segments.slice(1).filter(segment => segment.length > 0);\n}\n\n/** Minimal shape of an uploaded file, so this module stays free of framework imports. */\nexport interface UploadedFileLike {\n    mimetype?: string;\n    originalname?: string;\n    filename?: string;\n}\n\n/** originalname is the client-supplied name; filename is multer's on-disk name. */\nexport function getUploadedFileName(file?: UploadedFileLike | null): string {\n    return file?.originalname ?? file?.filename ?? '';\n}\n\n/**\n * Single predicate for \"must never be stored\". Shared by every upload entry point\n * (MediaFieldCrudManager, chatter attachments) so the rules can't drift between them.\n * Extensions are checked before mimetype so a spoofed Content-Type (e.g.\n * application/octet-stream, or image/png, on an .html file) can't bypass it.\n */\nexport function isDangerousMediaFile(file?: UploadedFileLike | null): boolean {\n    const segments = getLowercaseFileExtensionSegments(getUploadedFileName(file));\n    if (segments.some(segment => DANGEROUS_EXTENSIONS.has(segment))) {\n        return true;\n    }\n\n    return DANGEROUS_MIME_TYPES.has((file?.mimetype || '').toLowerCase().trim());\n}\n\n/**\n * Single source of truth for extension -> coarse media category. Shared by upload-time\n * validation (MediaFieldCrudManager) and serve-time header hardening (ServeStaticModule), so\n * both agree on which extensions belong to which category and neither drifts out of sync.\n * Some extensions, such as ogg and webm, are valid for more than one category.\n * Keep every matching category instead of allowing a later entry to overwrite an earlier one.\n */\n// Example: { ogg: ['audio', 'video'], mp3: ['audio'], jpg: ['image'] }\nexport const EXT_TO_MEDIA_TYPES: Record<string, MediaCategory[]> = MEDIA_FILE_TYPES.reduce((acc, fileType) => {\n    // Create an empty category list the first time we see an extension.\n    if (!acc[fileType.extension]) {\n        acc[fileType.extension] = [];\n    }\n\n    // Add the category for this extension, but do not add duplicates.\n    if (!acc[fileType.extension].includes(fileType.mediaType)) {\n        acc[fileType.extension].push(fileType.mediaType);\n    }\n\n    // Return the map so the next media definition can be added to it.\n    return acc;\n}, {} as Record<string, MediaCategory[]>);\n\nexport const EXT_TO_MEDIA_TYPE: Record<string, MediaCategory> = {\n    ...Object.fromEntries(MEDIA_FILE_TYPES.map((fileType) => [fileType.extension, fileType.mediaType])),\n};\n\n/**\n * Extensions safe to serve inline with their natural Content-Type; everything else served from\n * media-files-storage is forced to application/octet-stream + Content-Disposition: attachment.\n *\n * svg is included here only when it's an accepted media type (see MEDIA_FILE_TYPES above) - and\n * even then it's inline-safe only because both serve paths (ServeStaticModule in\n * solid-core.module.ts, and the signed-URL download in media.controller.ts) attach a\n * Content-Security-Policy to svg responses that neutralizes any embedded script.\n */\nexport const INLINE_SAFE_EXTENSIONS = new Set<string>([\n    ...IMAGE_EXTENSIONS,\n    ...AUDIO_EXTENSIONS,\n    ...VIDEO_EXTENSIONS,\n    PDF_EXTENSION,\n]);\n"]}

package/dist/controllers/media.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/media.controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAMnC,qBAIa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,YAAY;IAKlD,MAAM,CAAS,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOzK,UAAU,CAAS,UAAU,EAAE,cAAc,EAAE,EAAmB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAO,EAAkC,mBAAmB,EAAE,sBAAsB;IAQvL,MAAM,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOlM,aAAa,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IASzM,MAAM,CAAkB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAU,SAAS,EAAE,cAAc,EAAkC,mBAAmB,EAAE,sBAAsB;IAQnK,WAAW,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;;;;IAM9G,OAAO,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;;;;IAe5G,QAAQ,CAAU,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAQzG,QAAQ,CAAc,EAAE,EAAE,MAAM,EAAwB,WAAW,EAAE,MAAM,EAAS,GAAG,EAAE,QAAQ,EAAkC,mBAAmB,EAAE,sBAAsB;IAuB9K,OAAO,CAAc,EAAE,EAAE,MAAM,EAAW,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAMjI,UAAU,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;IAM7G,MAAM,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;CAKlH"}
+{"version":3,"file":"media.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/media.controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAMnC,qBAIa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,YAAY;IAKlD,MAAM,CAAS,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOzK,UAAU,CAAS,UAAU,EAAE,cAAc,EAAE,EAAmB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAO,EAAkC,mBAAmB,EAAE,sBAAsB;IAQvL,MAAM,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOlM,aAAa,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,cAAc,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IASzM,MAAM,CAAkB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAU,SAAS,EAAE,cAAc,EAAkC,mBAAmB,EAAE,sBAAsB;IAQnK,WAAW,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;;;;IAM9G,OAAO,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;;;;IAe5G,QAAQ,CAAU,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAQzG,QAAQ,CAAc,EAAE,EAAE,MAAM,EAAwB,WAAW,EAAE,MAAM,EAAS,GAAG,EAAE,QAAQ,EAAkC,mBAAmB,EAAE,sBAAsB;IAsC9K,OAAO,CAAc,EAAE,EAAE,MAAM,EAAW,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAMjI,UAAU,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;IAM7G,MAAM,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;CAKlH"}

package/dist/controllers/media.controller.js

@@ -58,14 +58,19 @@ let MediaController = class MediaController {
     async download(id, disposition, res, solidRequestContext) {
         const media = await this.service.findOne(+id, {}, solidRequestContext);
         const { stream, fileName, mimeType } = await this.service.fileDownloadStream(media);
-        const isInlineSafe = media_file_types_1.INLINE_SAFE_EXTENSIONS.has((0, media_file_types_1.getLowercaseFileExtension)(fileName) ?? '');
+        const ext = (0, media_file_types_1.getLowercaseFileExtension)(fileName) ?? '';
+        const isInlineSafe = media_file_types_1.INLINE_SAFE_EXTENSIONS.has(ext);
         const requestedInline = disposition !== 'attachment';
+        const effectiveMimeType = isInlineSafe ? (media_file_types_1.EXTENSION_TO_MIME_TYPE[ext] ?? mimeType) : 'application/octet-stream';
         (0, file_download_helper_1.setFileDownloadHeaders)(res, {
             fileName,
-            mimeType: isInlineSafe ? mimeType : 'application/octet-stream',
+            mimeType: effectiveMimeType,
             disposition: requestedInline && isInlineSafe ? 'inline' : 'attachment',
             crossOriginResourcePolicy: true,
         });
+        if (ext === 'svg') {
+            res.setHeader("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; img-src data:; sandbox");
+        }
         stream.pipe(res);
     }
     async findOne(id, query, solidRequestContext) {

package/dist/controllers/media.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"media.controller.js","sourceRoot":"","sources":["../../src/controllers/media.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoI;AACpI,+DAA+D;AAC/D,6CAAmE;AACnE,iEAAqD;AACrD,4DAAoD;AACpD,+DAA2D;AAC3D,mGAA8F;AAC9F,iFAA4E;AAC5E,+DAA2D;AAC3D,6DAA0D;AAE1D,oEAAmG;AACnG,0EAA0E;AAE1E,4EAAkE;AAM3D,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;IAAG,CAAC;IAKtD,MAAM,CAAS,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QACvK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAKD,UAAU,CAAS,UAA4B,EAAmB,aAAsC,EAAE,EAAkC,mBAA2C;QACrL,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAMD,MAAM,CAAc,EAAU,EAAU,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QAChM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAKD,aAAa,CAAc,EAAU,EAAU,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QACvM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAOD,MAAM,CAAkB,KAAiC,EAAU,SAAyB,EAAkC,mBAA2C;QAErK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAKK,AAAN,KAAK,CAAC,WAAW,CAAS,GAAa,EAAkC,mBAA2C;QAClH,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAkC,mBAA2C;QAChH,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAaK,AAAN,KAAK,CAAC,QAAQ,CAAU,KAAU,EAAkC,mBAA2C;QAC7G,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CAAc,EAAU,EAAwB,WAAmB,EAAS,GAAa,EAAkC,mBAA2C;QAClL,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACvE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAMpF,MAAM,YAAY,GAAG,yCAAsB,CAAC,GAAG,CAAC,IAAA,4CAAyB,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,eAAe,GAAG,WAAW,KAAK,YAAY,CAAC;QAErD,IAAA,6CAAsB,EAAC,GAAG,EAAE;YAC1B,QAAQ;YACR,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,0BAA0B;YAC9D,WAAW,EAAE,eAAe,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;YACtE,yBAAyB,EAAE,IAAI;SAChC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAW,KAAU,EAAkC,mBAA2C;QACrI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IAIK,AAAN,KAAK,CAAC,UAAU,CAAS,GAAa,EAAkC,mBAA2C;QACjH,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAkC,mBAA2C;QAC/G,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC;CAGF,CAAA;AAlHY,0CAAe;AAM1B;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,GAAE;IACN,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;6CAExK;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC3B,WAAA,IAAA,aAAI,GAAE,CAAA;IAAgC,WAAA,IAAA,sBAAa,GAAE,CAAA;IAA4C,WAAA,IAAA,8DAA4B,GAAE,CAAA;;mDAAsB,kDAAsB;;iDAEtL;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;6CAEjM;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,KAAK,CAAC;IACZ,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IACxB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;oDAExM;AAOD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAA9F,KAAK,EAA0C,iCAAc,EAAuD,kDAAsB;;6CAGxK;AAKK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,eAAe,CAAC;;IACH,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;kDAEnH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,cAAc,CAAC;;IACL,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;8CAEjH;AAaK;IAXL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,wCAAe,EAAE,CAAC;IAC7E,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,YAAG,GAAE;;IACU,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;+CAE9G;AAMK;IAJL,IAAA,qBAAI,EAAC,yBAAQ,CAAC,cAAc,CAAC;IAC7B,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,6FAA6F,EAAE,CAAC;IACrK,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,0QAA0Q,EAAE,CAAC;IAC3W,IAAA,YAAG,EAAC,cAAc,CAAC;;IACJ,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;IAAuB,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6DAAsB,kDAAsB;;+CAmBnL;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;;IACI,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAAsB,kDAAsB;;8CAEtI;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,OAAO,CAAC;;IACE,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;iDAElH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,KAAK,CAAC;;IACA,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;6CAEhH;0BA/GU,eAAe;IAJ3B,IAAA,iBAAO,EAAC,YAAY,CAAC;IACrB,IAAA,mBAAU,EAAC,OAAO,CAAC;qCAIoB,4BAAY;GADvC,eAAe,CAkH3B","sourcesContent":["import { Body, Controller, Delete, Get, Param, Patch, Post, Put, Query, Res, UploadedFiles, UseInterceptors } from '@nestjs/common';\nimport { AnyFilesInterceptor } from \"@nestjs/platform-express\";\nimport { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';\nimport { Auth } from 'src/decorators/auth.decorator';\nimport { AuthType } from 'src/enums/auth-type.enum';\nimport { CreateMediaDto } from 'src/dtos/create-media.dto';\nimport { SolidRequestContextDecorator } from 'src/decorators/solid-request-context.decorator';\nimport { SolidRequestContextDto } from 'src/dtos/solid-request-context.dto';\nimport { UpdateMediaDto } from 'src/dtos/update-media.dto';\nimport { MediaService } from 'src/services/media.service';\nimport { Response } from 'express';\nimport { getLowercaseFileExtension, INLINE_SAFE_EXTENSIONS } from 'src/constants/media-file-types';\nimport { setFileDownloadHeaders } from 'src/helpers/file-download.helper';\n\nimport { ShowSoftDeleted } from '../enums/show-soft-deleted.enum';\n\n@ApiTags('Solid Core')\n@Controller('media')\n// @UseGuards(ThrottlerGuard)\n// @SkipThrottle({ short: true, login: true, burst: true, sustained: true }) //Skip all\nexport class MediaController {\n  constructor(private readonly service: MediaService) {}\n\n  @ApiBearerAuth(\"jwt\")\n  @Post()\n  @UseInterceptors(AnyFilesInterceptor())\n  create(@Body() createDto: CreateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.create(createDto, files, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk')\n  @UseInterceptors(AnyFilesInterceptor())\n  insertMany(@Body() createDtos: CreateMediaDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = [], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.insertMany(createDtos, filesArray, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Put(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  update(@Param('id') id: number, @Body() updateDto: UpdateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, false, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, true, solidRequestContext);\n  }\n\n  // @Public()\n  // @SkipThrottle({ short: false, login: true, burst: true, sustained: true }) //Enable the short throttle only\n  @ApiBearerAuth(\"jwt\")\n  @Post('/upload')\n  @UseInterceptors(AnyFilesInterceptor())\n  upload(@UploadedFiles() files: Array<Express.Multer.File>, @Body() createDto: CreateMediaDto, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n      // this.logger.log(`Creating a new model: ${JSON.stringify(createDto)}`);\n      return this.service.upload(createDto, files, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk-recover')\n  async recoverMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.recoverMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Get('/recover/:id')\n  async recover(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.recover(id, solidRequestContext);\n  }\n    \n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })\n  @ApiQuery({ name: 'limit', required: false, type: Number })\n  @ApiQuery({ name: 'offset', required: false, type: Number })\n  @ApiQuery({ name: 'fields', required: false, type: Array })\n  @ApiQuery({ name: 'sort', required: false, type: Array }) \n  @ApiQuery({ name: 'groupBy', required: false, type: Array })\n  @ApiQuery({ name: 'populate', required: false, type: Array })\n  @ApiQuery({ name: 'populateMedia', required: false, type: Array })\n  @ApiQuery({ name: 'filters', required: false, type: Array })\n  @Get()\n  async findMany(@Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.find(query, solidRequestContext);\n  }\n\n  @Auth(AuthType.MediaSignedUrl)\n  @ApiQuery({ name: 'token', required: true, type: String, description: \"Short-lived signed token obtained from a private Media record's URL - not entered manually.\" })\n  @ApiQuery({ name: 'disposition', required: false, enum: ['inline', 'attachment'], description: \"'inline' (default) renders/previews in the browser, matching public media - it applies only to types safe to render inline (images, audio, video, pdf); anything else is always downloaded. Pass 'attachment' to force a browser download (e.g. from a download button).\" })\n  @Get(':id/download')\n  async download(@Param('id') id: string, @Query('disposition') disposition: string, @Res() res: Response, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    const media = await this.service.findOne(+id, {}, solidRequestContext);\n    const { stream, fileName, mimeType } = await this.service.fileDownloadStream(media);\n\n    // Mirror the static-serve hardening in SolidCoreModule: only a small allowlist of media\n    // types is ever safe to render inline. Anything else is forced to download rather than be\n    // displayed/executed, regardless of the mimetype the record was stored with - nosniff\n    // alone would not help here, since it faithfully honours a declared text/html.\n    const isInlineSafe = INLINE_SAFE_EXTENSIONS.has(getLowercaseFileExtension(fileName) ?? '');\n    const requestedInline = disposition !== 'attachment';\n\n    setFileDownloadHeaders(res, {\n      fileName,\n      mimeType: isInlineSafe ? mimeType : 'application/octet-stream',\n      disposition: requestedInline && isInlineSafe ? 'inline' : 'attachment',\n      crossOriginResourcePolicy: true,\n    });\n\n    stream.pipe(res);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Get(':id')\n  async findOne(@Param('id') id: string, @Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.findOne(+id, query, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete('/bulk')\n  async deleteMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.deleteMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete(':id')\n  async delete(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.delete(id, solidRequestContext);\n  }\n\n\n}\n"]}
+{"version":3,"file":"media.controller.js","sourceRoot":"","sources":["../../src/controllers/media.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoI;AACpI,+DAA+D;AAC/D,6CAAmE;AACnE,iEAAqD;AACrD,4DAAoD;AACpD,+DAA2D;AAC3D,mGAA8F;AAC9F,iFAA4E;AAC5E,+DAA2D;AAC3D,6DAA0D;AAE1D,oEAA2H;AAC3H,0EAA0E;AAE1E,4EAAkE;AAM3D,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;IAAG,CAAC;IAKtD,MAAM,CAAS,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QACvK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAKD,UAAU,CAAS,UAA4B,EAAmB,aAAsC,EAAE,EAAkC,mBAA2C;QACrL,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAMD,MAAM,CAAc,EAAU,EAAU,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QAChM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAKD,aAAa,CAAc,EAAU,EAAU,SAAyB,EAAmB,KAAiC,EAAkC,mBAA2C;QACvM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAOD,MAAM,CAAkB,KAAiC,EAAU,SAAyB,EAAkC,mBAA2C;QAErK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAKK,AAAN,KAAK,CAAC,WAAW,CAAS,GAAa,EAAkC,mBAA2C;QAClH,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAkC,mBAA2C;QAChH,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAaK,AAAN,KAAK,CAAC,QAAQ,CAAU,KAAU,EAAkC,mBAA2C;QAC7G,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CAAc,EAAU,EAAwB,WAAmB,EAAS,GAAa,EAAkC,mBAA2C;QAClL,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACvE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAMpF,MAAM,GAAG,GAAG,IAAA,4CAAyB,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,yCAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,WAAW,KAAK,YAAY,CAAC;QAMrD,MAAM,iBAAiB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,yCAAsB,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;QAEhH,IAAA,6CAAsB,EAAC,GAAG,EAAE;YAC1B,QAAQ;YACR,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,eAAe,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;YACtE,yBAAyB,EAAE,IAAI;SAChC,CAAC,CAAC;QAMH,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,uEAAuE,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAW,KAAU,EAAkC,mBAA2C;QACrI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IAIK,AAAN,KAAK,CAAC,UAAU,CAAS,GAAa,EAAkC,mBAA2C;QACjH,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAkC,mBAA2C;QAC/G,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC;CAGF,CAAA;AAjIY,0CAAe;AAM1B;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,GAAE;IACN,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;6CAExK;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC3B,WAAA,IAAA,aAAI,GAAE,CAAA;IAAgC,WAAA,IAAA,sBAAa,GAAE,CAAA;IAA4C,WAAA,IAAA,8DAA4B,GAAE,CAAA;;mDAAsB,kDAAsB;;iDAEtL;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;6CAEjM;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,KAAK,CAAC;IACZ,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IACxB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAnG,iCAAc,EAA0B,KAAK,EAA4E,kDAAsB;;oDAExM;AAOD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,aAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAA9F,KAAK,EAA0C,iCAAc,EAAuD,kDAAsB;;6CAGxK;AAKK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,eAAe,CAAC;;IACH,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;kDAEnH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,cAAc,CAAC;;IACL,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;8CAEjH;AAaK;IAXL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,wCAAe,EAAE,CAAC;IAC7E,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,YAAG,GAAE;;IACU,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;+CAE9G;AAMK;IAJL,IAAA,qBAAI,EAAC,yBAAQ,CAAC,cAAc,CAAC;IAC7B,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,6FAA6F,EAAE,CAAC;IACrK,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,0QAA0Q,EAAE,CAAC;IAC3W,IAAA,YAAG,EAAC,cAAc,CAAC;;IACJ,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;IAAuB,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6DAAsB,kDAAsB;;+CAkCnL;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;;IACI,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAAsB,kDAAsB;;8CAEtI;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,OAAO,CAAC;;IACE,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;iDAElH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,KAAK,CAAC;;IACA,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;6CAEhH;0BA9HU,eAAe;IAJ3B,IAAA,iBAAO,EAAC,YAAY,CAAC;IACrB,IAAA,mBAAU,EAAC,OAAO,CAAC;qCAIoB,4BAAY;GADvC,eAAe,CAiI3B","sourcesContent":["import { Body, Controller, Delete, Get, Param, Patch, Post, Put, Query, Res, UploadedFiles, UseInterceptors } from '@nestjs/common';\nimport { AnyFilesInterceptor } from \"@nestjs/platform-express\";\nimport { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';\nimport { Auth } from 'src/decorators/auth.decorator';\nimport { AuthType } from 'src/enums/auth-type.enum';\nimport { CreateMediaDto } from 'src/dtos/create-media.dto';\nimport { SolidRequestContextDecorator } from 'src/decorators/solid-request-context.decorator';\nimport { SolidRequestContextDto } from 'src/dtos/solid-request-context.dto';\nimport { UpdateMediaDto } from 'src/dtos/update-media.dto';\nimport { MediaService } from 'src/services/media.service';\nimport { Response } from 'express';\nimport { EXTENSION_TO_MIME_TYPE, getLowercaseFileExtension, INLINE_SAFE_EXTENSIONS } from 'src/constants/media-file-types';\nimport { setFileDownloadHeaders } from 'src/helpers/file-download.helper';\n\nimport { ShowSoftDeleted } from '../enums/show-soft-deleted.enum';\n\n@ApiTags('Solid Core')\n@Controller('media')\n// @UseGuards(ThrottlerGuard)\n// @SkipThrottle({ short: true, login: true, burst: true, sustained: true }) //Skip all\nexport class MediaController {\n  constructor(private readonly service: MediaService) {}\n\n  @ApiBearerAuth(\"jwt\")\n  @Post()\n  @UseInterceptors(AnyFilesInterceptor())\n  create(@Body() createDto: CreateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.create(createDto, files, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk')\n  @UseInterceptors(AnyFilesInterceptor())\n  insertMany(@Body() createDtos: CreateMediaDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = [], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.insertMany(createDtos, filesArray, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Put(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  update(@Param('id') id: number, @Body() updateDto: UpdateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, false, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateMediaDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, true, solidRequestContext);\n  }\n\n  // @Public()\n  // @SkipThrottle({ short: false, login: true, burst: true, sustained: true }) //Enable the short throttle only\n  @ApiBearerAuth(\"jwt\")\n  @Post('/upload')\n  @UseInterceptors(AnyFilesInterceptor())\n  upload(@UploadedFiles() files: Array<Express.Multer.File>, @Body() createDto: CreateMediaDto, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n      // this.logger.log(`Creating a new model: ${JSON.stringify(createDto)}`);\n      return this.service.upload(createDto, files, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk-recover')\n  async recoverMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.recoverMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Get('/recover/:id')\n  async recover(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.recover(id, solidRequestContext);\n  }\n    \n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })\n  @ApiQuery({ name: 'limit', required: false, type: Number })\n  @ApiQuery({ name: 'offset', required: false, type: Number })\n  @ApiQuery({ name: 'fields', required: false, type: Array })\n  @ApiQuery({ name: 'sort', required: false, type: Array }) \n  @ApiQuery({ name: 'groupBy', required: false, type: Array })\n  @ApiQuery({ name: 'populate', required: false, type: Array })\n  @ApiQuery({ name: 'populateMedia', required: false, type: Array })\n  @ApiQuery({ name: 'filters', required: false, type: Array })\n  @Get()\n  async findMany(@Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.find(query, solidRequestContext);\n  }\n\n  @Auth(AuthType.MediaSignedUrl)\n  @ApiQuery({ name: 'token', required: true, type: String, description: \"Short-lived signed token obtained from a private Media record's URL - not entered manually.\" })\n  @ApiQuery({ name: 'disposition', required: false, enum: ['inline', 'attachment'], description: \"'inline' (default) renders/previews in the browser, matching public media - it applies only to types safe to render inline (images, audio, video, pdf); anything else is always downloaded. Pass 'attachment' to force a browser download (e.g. from a download button).\" })\n  @Get(':id/download')\n  async download(@Param('id') id: string, @Query('disposition') disposition: string, @Res() res: Response, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    const media = await this.service.findOne(+id, {}, solidRequestContext);\n    const { stream, fileName, mimeType } = await this.service.fileDownloadStream(media);\n\n    // Mirror the static-serve hardening in SolidCoreModule: only a small allowlist of media\n    // types is ever safe to render inline. Anything else is forced to download rather than be\n    // displayed/executed, regardless of the mimetype the record was stored with - nosniff\n    // alone would not help here, since it faithfully honours a declared text/html.\n    const ext = getLowercaseFileExtension(fileName) ?? '';\n    const isInlineSafe = INLINE_SAFE_EXTENSIONS.has(ext);\n    const requestedInline = disposition !== 'attachment';\n\n    // The served mimetype is derived from the extension rather than trusting the stored\n    // mimeType (which is the client-declared Content-Type at upload time, and so is spoofable):\n    // a file named logo.png could otherwise have been uploaded with Content-Type: image/svg+xml\n    // and stored that way, which would bypass an extension-only check below.\n    const effectiveMimeType = isInlineSafe ? (EXTENSION_TO_MIME_TYPE[ext] ?? mimeType) : 'application/octet-stream';\n\n    setFileDownloadHeaders(res, {\n      fileName,\n      mimeType: effectiveMimeType,\n      disposition: requestedInline && isInlineSafe ? 'inline' : 'attachment',\n      crossOriginResourcePolicy: true,\n    });\n\n    // See the matching comment in solid-core.module.ts's setHeaders: <img>/CSS never execute\n    // svg script, but a direct navigation to this URL would, so pin it to a locked-down\n    // document. Keyed on the extension (which now drives effectiveMimeType above too), not on\n    // the stored mimeType, so the spoofed-Content-Type case above is covered as well.\n    if (ext === 'svg') {\n      res.setHeader(\"Content-Security-Policy\", \"default-src 'none'; style-src 'unsafe-inline'; img-src data:; sandbox\");\n    }\n\n    stream.pipe(res);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Get(':id')\n  async findOne(@Param('id') id: string, @Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.findOne(+id, query, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete('/bulk')\n  async deleteMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.deleteMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete(':id')\n  async delete(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.delete(id, solidRequestContext);\n  }\n\n\n}\n"]}

package/dist/controllers/user.controller.d.ts

@@ -8,6 +8,7 @@ import { SolidRequestContextDto } from '../dtos/solid-request-context.dto';
 import { UpdateUserProfileDto } from '../dtos/update-user-profile.dto';
 export declare class UserController {
     private readonly service;
+    private readonly logger;
     constructor(service: UserService);
     create(createDto: CreateUserDto, files: Array<Express.Multer.File>, solidRequestContext: SolidRequestContextDto): Promise<import("..").User>;
     insertMany(createDtos: CreateUserDto[], filesArray: Express.Multer.File[][], solidRequestContext: SolidRequestContextDto): Promise<import("..").User[]>;

package/dist/controllers/user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/user.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,qBAEa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,WAAW;IAKjD,MAAM,CAAS,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOxK,UAAU,CAAS,UAAU,EAAE,aAAa,EAAE,EAAmB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAO,EAAkC,mBAAmB,EAAE,sBAAsB;IAQtL,MAAM,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOjM,UAAU,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,GAAG,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAQ3L,aAAa,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAiBlM,QAAQ,CAAU,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAOzG,uBAAuB,CAAU,KAAK,EAAE,GAAG,EAAgB,UAAU,EAAE,cAAc;IAOrF,OAAO,CAAc,EAAE,EAAE,MAAM,EAAW,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAKjI,UAAU,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;IAM7G,MAAM,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;IAOjH,aAAa,CAAS,eAAe,EAAE,kBAAkB;IAOzD,cAAc,CAAS,mBAAmB,EAAE,sBAAsB;IAOlE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAOhD,gBAAgB,CACZ,SAAS,EAAE,oBAAoB,EACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAClB,mBAAmB,EAAE,sBAAsB,EAC7D,IAAI,EAAE,cAAc;CAIrC"}
+{"version":3,"file":"user.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/user.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,qBAEa,cAAc;IAGb,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAE7B,OAAO,EAAE,WAAW;IAsBjD,MAAM,CAAS,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAiBxK,UAAU,CAAS,UAAU,EAAE,aAAa,EAAE,EAAmB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAO,EAAkC,mBAAmB,EAAE,sBAAsB;IAatL,MAAM,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAOjM,UAAU,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,GAAG,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAQ3L,aAAa,CAAc,EAAE,EAAE,MAAM,EAAU,SAAS,EAAE,aAAa,EAAmB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAkC,mBAAmB,EAAE,sBAAsB;IAiBlM,QAAQ,CAAU,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAOzG,uBAAuB,CAAU,KAAK,EAAE,GAAG,EAAgB,UAAU,EAAE,cAAc;IAOrF,OAAO,CAAc,EAAE,EAAE,MAAM,EAAW,KAAK,EAAE,GAAG,EAAkC,mBAAmB,EAAE,sBAAsB;IAKjI,UAAU,CAAS,GAAG,EAAE,MAAM,EAAE,EAAkC,mBAAmB,EAAE,sBAAsB;IAM7G,MAAM,CAAc,EAAE,EAAE,MAAM,EAAkC,mBAAmB,EAAE,sBAAsB;IAOjH,aAAa,CAAS,eAAe,EAAE,kBAAkB;IAOzD,cAAc,CAAS,mBAAmB,EAAE,sBAAsB;IAOlE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAOhD,gBAAgB,CACZ,SAAS,EAAE,oBAAoB,EACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAClB,mBAAmB,EAAE,sBAAsB,EAC7D,IAAI,EAAE,cAAc;CAIrC"}

package/dist/controllers/user.controller.js

@@ -11,6 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
+var UserController_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserController = void 0;
 const openapi = require("@nestjs/swagger");
@@ -26,14 +27,21 @@ const active_user_decorator_1 = require("../decorators/active-user.decorator");
 const solid_request_context_decorator_1 = require("../decorators/solid-request-context.decorator");
 const solid_request_context_dto_1 = require("../dtos/solid-request-context.dto");
 const update_user_profile_dto_1 = require("../dtos/update-user-profile.dto");
-let UserController = class UserController {
+let UserController = UserController_1 = class UserController {
     constructor(service) {
         this.service = service;
+        this.logger = new common_1.Logger(UserController_1.name);
     }
     create(createDto, files, solidRequestContext) {
+        this.logger.warn(`Deprecated endpoint POST /user was called (username="${createDto?.username}"). ` +
+            'This bypasses role assignment entirely and is scheduled for removal. ' +
+            'Use POST /iam/register-private or the extension model\'s own create endpoint.');
         return this.service.create(createDto, files, solidRequestContext);
     }
     insertMany(createDtos, filesArray = [], solidRequestContext) {
+        this.logger.warn(`Deprecated endpoint POST /user/bulk was called (count=${createDtos?.length ?? 0}, ` +
+            `usernames=${createDtos?.map(dto => dto.username).join(', ')}). ` +
+            'This bypasses role assignment entirely and is scheduled for removal.');
         return this.service.insertMany(createDtos, filesArray, solidRequestContext);
     }
     update(id, updateDto, files, solidRequestContext) {
@@ -75,6 +83,10 @@ let UserController = class UserController {
 };
 exports.UserController = UserController;
 __decorate([
+    (0, swagger_1.ApiOperation)({
+        deprecated: true,
+        description: 'Deprecated: creates a user with no role assignment, not even the default. Use POST /iam/register-private, or the extension model\'s own create endpoint, instead. Scheduled for removal in a future major version.',
+    }),
     (0, swagger_1.ApiBearerAuth)("jwt"),
     (0, common_1.Post)(),
     (0, common_1.UseInterceptors)((0, platform_express_1.AnyFilesInterceptor)()),
@@ -87,6 +99,10 @@ __decorate([
     __metadata("design:returntype", void 0)
 ], UserController.prototype, "create", null);
 __decorate([
+    (0, swagger_1.ApiOperation)({
+        deprecated: true,
+        description: 'Deprecated: creates users with no role assignment, not even the default. Use the extension model\'s own bulk-create endpoint, or repeated calls to POST /iam/register-private, instead. Scheduled for removal in a future major version.',
+    }),
     (0, swagger_1.ApiBearerAuth)("jwt"),
     (0, common_1.Post)('/bulk'),
     (0, common_1.UseInterceptors)((0, platform_express_1.AnyFilesInterceptor)()),
@@ -241,7 +257,7 @@ __decorate([
         solid_request_context_dto_1.SolidRequestContextDto, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "updateOwnProfile", null);
-exports.UserController = UserController = __decorate([
+exports.UserController = UserController = UserController_1 = __decorate([
     (0, swagger_1.ApiTags)('Solid Core'),
     (0, common_1.Controller)('user'),
     __metadata("design:paramtypes", [user_service_1.UserService])

package/dist/controllers/user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.controller.js","sourceRoot":"","sources":["../../src/controllers/user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA+H;AAC/H,+DAA+D;AAC/D,6CAAyF;AACzF,2DAAuD;AACvD,6DAAwD;AACxD,6DAAwD;AACxD,yEAAmE;AACnE,mFAA4E;AAC5E,+EAAiE;AAEjE,mGAA8F;AAC9F,iFAA4E;AAC5E,6EAAwE;AAIjE,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAA6B,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;IAAI,CAAC;IAKtD,MAAM,CAAS,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QACtK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAKD,UAAU,CAAS,UAA2B,EAAmB,aAAsC,EAAE,EAAkC,mBAA2C;QACpL,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAMD,MAAM,CAAc,EAAU,EAAU,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QAC/L,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAKD,UAAU,CAAc,EAAU,EAAU,SAAc,EAAmB,KAAiC,EAAkC,mBAA2C;QACzL,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IAMD,aAAa,CAAc,EAAU,EAAU,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QACtM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAeK,AAAN,KAAK,CAAC,QAAQ,CAAU,KAAU,EAAkC,mBAA2C;QAC7G,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAKK,AAAN,KAAK,CAAC,uBAAuB,CAAU,KAAU,EAAgB,UAA0B;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjE,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAW,KAAU,EAAkC,mBAA2C;QACrI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAS,GAAa,EAAkC,mBAA2C;QACjH,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAkC,mBAA2C;QAC/G,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAKD,aAAa,CAAS,eAAmC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC;IAKD,cAAc,CAAS,mBAA2C;QAChE,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IAKD,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAKK,AAAN,KAAK,CAAC,gBAAgB,CACZ,SAA+B,EACtB,KAAiC,EAClB,mBAA2C,EAC7D,IAAoB;QAElC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACpF,CAAC;CACF,CAAA;AAlHY,wCAAc;AAMzB;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,GAAE;IACN,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;4CAEvK;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC3B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA+B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAA4C,WAAA,IAAA,8DAA4B,GAAE,CAAA;;mDAAsB,kDAAsB;;gDAErL;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;4CAEhM;AAKD;IAFC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,2BAA2B,CAAC;;IACvB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAAkB,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAA3D,KAAK,EAA4E,kDAAsB;;gDAE1L;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,KAAK,CAAC;IACZ,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IACxB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;mDAEvM;AAeK;IAZL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,YAAG,GAAE;;IACU,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;8CAE9G;AAKK;IAHL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,IAAA,YAAG,EAAC,qBAAqB,CAAC;;IACI,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,kCAAU,GAAE,CAAA;;;;6DAE/D;AAKK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;;IACI,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAAsB,kDAAsB;;6CAEtI;AAGK;IADL,IAAA,eAAM,EAAC,OAAO,CAAC;;IACE,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;gDAElH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,KAAK,CAAC;;IACA,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;4CAEhH;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,aAAI,EAAC,OAAO,CAAC;;IACC,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAkB,0CAAkB;;mDAExD;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,aAAI,EAAC,YAAY,CAAC;;IACH,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAsB,mDAAsB;;oDAEjE;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,eAAM,EAAC,OAAO,CAAC;;;;;wDAGf;AAKK;IAHL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAEpC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,sBAAa,GAAE,CAAA;IACf,WAAA,IAAA,8DAA4B,GAAE,CAAA;IAC9B,WAAA,IAAA,kCAAU,GAAE,CAAA;;qCAHM,8CAAoB;QACf,KAAK;QACwB,kDAAsB;;sDAI5E;yBAjHU,cAAc;IAF1B,IAAA,iBAAO,EAAC,YAAY,CAAC;IACrB,IAAA,mBAAU,EAAC,MAAM,CAAC;qCAEqB,0BAAW;GADtC,cAAc,CAkH1B","sourcesContent":["import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch } from '@nestjs/common';\nimport { AnyFilesInterceptor } from \"@nestjs/platform-express\";\nimport { ApiBearerAuth, ApiForbiddenResponse, ApiQuery, ApiTags } from '@nestjs/swagger';\nimport { UserService } from '../services/user.service';\nimport { CreateUserDto } from '../dtos/create-user.dto';\nimport { UpdateUserDto } from '../dtos/update-user.dto';\nimport { MutateUserRolesDto } from '../dtos/mutate-user-roles.dto';\nimport { MutateUserRolesBulkDto } from '../dtos/mutate-user-roles-list.dto';\nimport { ActiveUser } from '../decorators/active-user.decorator';\nimport { ActiveUserData } from '../interfaces/active-user-data.interface';\nimport { SolidRequestContextDecorator } from 'src/decorators/solid-request-context.decorator';\nimport { SolidRequestContextDto } from 'src/dtos/solid-request-context.dto';\nimport { UpdateUserProfileDto } from 'src/dtos/update-user-profile.dto';\n\n@ApiTags('Solid Core')\n@Controller('user') //FIXME: Change this to the model plural name \nexport class UserController {\n  constructor(private readonly service: UserService) { }\n\n  @ApiBearerAuth(\"jwt\")\n  @Post()\n  @UseInterceptors(AnyFilesInterceptor())\n  create(@Body() createDto: CreateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.create(createDto, files, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk')\n  @UseInterceptors(AnyFilesInterceptor())\n  insertMany(@Body() createDtos: CreateUserDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = [], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.insertMany(createDtos, filesArray, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Put(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  update(@Param('id') id: number, @Body() updateDto: UpdateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, false, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id/update-user-and-roles')\n  updateUser(@Param('id') id: number, @Body() updateDto: any, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.updateUser(id, updateDto, files, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, true, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'showSoftDeleted', required: false, type: Boolean })\n  @ApiQuery({ name: 'showOnlySoftDeleted', required: false, type: Boolean })\n  @ApiQuery({ name: 'limit', required: false, type: Number })\n  @ApiQuery({ name: 'offset', required: false, type: Number })\n  @ApiQuery({ name: 'fields', required: false, type: Array })\n  @ApiQuery({ name: 'sort', required: false, type: Array })\n  @ApiQuery({ name: 'groupBy', required: false, type: Array })\n  @ApiQuery({ name: 'populate', required: false, type: Array })\n  @ApiQuery({ name: 'populateMedia', required: false, type: Array })\n  @ApiQuery({ name: 'filters', required: false, type: Array })\n  @Get()\n  async findMany(@Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.find(query, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'permissionNames', required: false, type: Array })\n  @Get('/permissions-exists')\n  async checkIfPermissionExists(@Query() query: any, @ActiveUser() activeUser: ActiveUserData) {\n    return this.service.checkIfPermissionExists(query, activeUser);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Get(':id')\n  async findOne(@Param('id') id: string, @Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.findOne(+id, query, solidRequestContext);\n  }\n\n  @Delete('/bulk')\n  async deleteMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.deleteMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete(':id')\n  async delete(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.delete(id, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Post('roles')\n  addRoleToUser(@Body() mutateUserRoles: MutateUserRolesDto) {\n    return this.service.addRoleToUser(mutateUserRoles.username, mutateUserRoles.roleName);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Post('roles/bulk')\n  addRolesToUser(@Body() mutateUserRolesBulk: MutateUserRolesBulkDto) {\n    return this.service.addRolesToUser(mutateUserRolesBulk.username, mutateUserRolesBulk.roleNames);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Delete('roles')\n  removeRoleFromUser(userEmail: string, roleName: string) {\n    return this.service.removeRoleFromUser(userEmail, roleName);\n  }\n\n  @ApiBearerAuth('jwt')\n  @Post('/profile')\n  @UseInterceptors(AnyFilesInterceptor())\n  async updateOwnProfile(\n    @Body() updateDto: UpdateUserProfileDto,\n    @UploadedFiles() files: Array<Express.Multer.File>,\n    @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto,\n    @ActiveUser() user: ActiveUserData,\n  ) {\n    return this.service.update(user.sub, updateDto, files, true, solidRequestContext);\n  }\n}\n"]}
+{"version":3,"file":"user.controller.js","sourceRoot":"","sources":["../../src/controllers/user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,2CAAuI;AACvI,+DAA+D;AAC/D,6CAAuG;AACvG,2DAAuD;AACvD,6DAAwD;AACxD,6DAAwD;AACxD,yEAAmE;AACnE,mFAA4E;AAC5E,+EAAiE;AAEjE,mGAA8F;AAC9F,iFAA4E;AAC5E,6EAAwE;AAIjE,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAA6B,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;QAFhC,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAEL,CAAC;IAsBtD,MAAM,CAAS,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QACtK,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wDAAwD,SAAS,EAAE,QAAQ,MAAM;YACjF,uEAAuE;YACvE,+EAA+E,CAChF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAUD,UAAU,CAAS,UAA2B,EAAmB,aAAsC,EAAE,EAAkC,mBAA2C;QACpL,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yDAAyD,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI;YACpF,aAAa,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACjE,sEAAsE,CACvE,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAMD,MAAM,CAAc,EAAU,EAAU,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QAC/L,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAKD,UAAU,CAAc,EAAU,EAAU,SAAc,EAAmB,KAAiC,EAAkC,mBAA2C;QACzL,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IAMD,aAAa,CAAc,EAAU,EAAU,SAAwB,EAAmB,KAAiC,EAAkC,mBAA2C;QACtM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9E,CAAC;IAeK,AAAN,KAAK,CAAC,QAAQ,CAAU,KAAU,EAAkC,mBAA2C;QAC7G,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAKK,AAAN,KAAK,CAAC,uBAAuB,CAAU,KAAU,EAAgB,UAA0B;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjE,CAAC;IAKK,AAAN,KAAK,CAAC,OAAO,CAAc,EAAU,EAAW,KAAU,EAAkC,mBAA2C;QACrI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAS,GAAa,EAAkC,mBAA2C;QACjH,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAc,EAAU,EAAkC,mBAA2C;QAC/G,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAKD,aAAa,CAAS,eAAmC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC;IAKD,cAAc,CAAS,mBAA2C;QAChE,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IAKD,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAKK,AAAN,KAAK,CAAC,gBAAgB,CACZ,SAA+B,EACtB,KAAiC,EAClB,mBAA2C,EAC7D,IAAoB;QAElC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACpF,CAAC;CACF,CAAA;AApJY,wCAAc;AAyBzB;IAPC,IAAA,sBAAY,EAAC;QACZ,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,oNAAoN;KAClO,CAAC;IACD,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,GAAE;IACN,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qCAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;4CAOvK;AAUD;IAPC,IAAA,sBAAY,EAAC;QACZ,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,0OAA0O;KACxP,CAAC;IACD,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC3B,WAAA,IAAA,aAAI,GAAE,CAAA;IAA+B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAA4C,WAAA,IAAA,8DAA4B,GAAE,CAAA;;mDAAsB,kDAAsB;;gDAOrL;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAC/B,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;4CAEhM;AAKD;IAFC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,2BAA2B,CAAC;;IACvB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAAkB,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAA3D,KAAK,EAA4E,kDAAsB;;gDAE1L;AAMD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,cAAK,EAAC,KAAK,CAAC;IACZ,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IACxB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,aAAI,GAAE,CAAA;IAA4B,WAAA,IAAA,sBAAa,GAAE,CAAA;IAAqC,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAlG,+BAAa,EAA0B,KAAK,EAA4E,kDAAsB;;mDAEvM;AAeK;IAZL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAA,YAAG,GAAE;;IACU,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;8CAE9G;AAKK;IAHL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,IAAA,YAAG,EAAC,qBAAqB,CAAC;;IACI,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,kCAAU,GAAE,CAAA;;;;6DAE/D;AAKK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,YAAG,EAAC,KAAK,CAAC;;IACI,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;qDAAsB,kDAAsB;;6CAEtI;AAGK;IADL,IAAA,eAAM,EAAC,OAAO,CAAC;;IACE,WAAA,IAAA,aAAI,GAAE,CAAA;IAAiB,WAAA,IAAA,8DAA4B,GAAE,CAAA;;4CAAsB,kDAAsB;;gDAElH;AAIK;IAFL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,eAAM,EAAC,KAAK,CAAC;;IACA,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IAAc,WAAA,IAAA,8DAA4B,GAAE,CAAA;;6CAAsB,kDAAsB;;4CAEhH;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,aAAI,EAAC,OAAO,CAAC;;IACC,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAkB,0CAAkB;;mDAExD;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,aAAI,EAAC,YAAY,CAAC;;IACH,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAsB,mDAAsB;;oDAEjE;AAKD;IAHC,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACnD,IAAA,eAAM,EAAC,OAAO,CAAC;;;;;wDAGf;AAKK;IAHL,IAAA,uBAAa,EAAC,KAAK,CAAC;IACpB,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,wBAAe,EAAC,IAAA,sCAAmB,GAAE,CAAC;;IAEpC,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,sBAAa,GAAE,CAAA;IACf,WAAA,IAAA,8DAA4B,GAAE,CAAA;IAC9B,WAAA,IAAA,kCAAU,GAAE,CAAA;;qCAHM,8CAAoB;QACf,KAAK;QACwB,kDAAsB;;sDAI5E;yBAnJU,cAAc;IAF1B,IAAA,iBAAO,EAAC,YAAY,CAAC;IACrB,IAAA,mBAAU,EAAC,MAAM,CAAC;qCAIqB,0BAAW;GAHtC,cAAc,CAoJ1B","sourcesContent":["import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch, Logger } from '@nestjs/common';\nimport { AnyFilesInterceptor } from \"@nestjs/platform-express\";\nimport { ApiBearerAuth, ApiForbiddenResponse, ApiOperation, ApiQuery, ApiTags } from '@nestjs/swagger';\nimport { UserService } from '../services/user.service';\nimport { CreateUserDto } from '../dtos/create-user.dto';\nimport { UpdateUserDto } from '../dtos/update-user.dto';\nimport { MutateUserRolesDto } from '../dtos/mutate-user-roles.dto';\nimport { MutateUserRolesBulkDto } from '../dtos/mutate-user-roles-list.dto';\nimport { ActiveUser } from '../decorators/active-user.decorator';\nimport { ActiveUserData } from '../interfaces/active-user-data.interface';\nimport { SolidRequestContextDecorator } from 'src/decorators/solid-request-context.decorator';\nimport { SolidRequestContextDto } from 'src/dtos/solid-request-context.dto';\nimport { UpdateUserProfileDto } from 'src/dtos/update-user-profile.dto';\n\n@ApiTags('Solid Core')\n@Controller('user') //FIXME: Change this to the model plural name\nexport class UserController {\n  private readonly logger = new Logger(UserController.name);\n\n  constructor(private readonly service: UserService) { }\n\n  /**\n   * @deprecated Bypasses `AuthenticationService.signUp`, so it never runs\n   * `initializeRolesForNewUser` - a user created here gets no role at all, not even\n   * the \"Internal User\" baseline, and none of the SignupIntent dispatch introduced\n   * alongside the extension-user provider work applies. Use `POST /iam/register-private`\n   * (an authenticated core user, with roles you name) or the extension model's own\n   * generated create endpoint instead.\n   *\n   * A workspace-wide search (frontends and backend callers across every consuming app\n   * in this monorepo) found no caller as of 2026-09-11. Kept for one deprecation cycle\n   * in case an external caller exists outside this workspace - the warning below is\n   * how that would surface - before being removed in a future major version.\n   */\n  @ApiOperation({\n    deprecated: true,\n    description: 'Deprecated: creates a user with no role assignment, not even the default. Use POST /iam/register-private, or the extension model\\'s own create endpoint, instead. Scheduled for removal in a future major version.',\n  })\n  @ApiBearerAuth(\"jwt\")\n  @Post()\n  @UseInterceptors(AnyFilesInterceptor())\n  create(@Body() createDto: CreateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    this.logger.warn(\n      `Deprecated endpoint POST /user was called (username=\"${createDto?.username}\"). ` +\n      'This bypasses role assignment entirely and is scheduled for removal. ' +\n      'Use POST /iam/register-private or the extension model\\'s own create endpoint.',\n    );\n    return this.service.create(createDto, files, solidRequestContext);\n  }\n\n  /** @deprecated See {@link create} - same gap, applied per row. */\n  @ApiOperation({\n    deprecated: true,\n    description: 'Deprecated: creates users with no role assignment, not even the default. Use the extension model\\'s own bulk-create endpoint, or repeated calls to POST /iam/register-private, instead. Scheduled for removal in a future major version.',\n  })\n  @ApiBearerAuth(\"jwt\")\n  @Post('/bulk')\n  @UseInterceptors(AnyFilesInterceptor())\n  insertMany(@Body() createDtos: CreateUserDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = [], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    this.logger.warn(\n      `Deprecated endpoint POST /user/bulk was called (count=${createDtos?.length ?? 0}, ` +\n      `usernames=${createDtos?.map(dto => dto.username).join(', ')}). ` +\n      'This bypasses role assignment entirely and is scheduled for removal.',\n    );\n    return this.service.insertMany(createDtos, filesArray, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Put(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  update(@Param('id') id: number, @Body() updateDto: UpdateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, false, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id/update-user-and-roles')\n  updateUser(@Param('id') id: number, @Body() updateDto: any, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.updateUser(id, updateDto, files, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Patch(':id')\n  @UseInterceptors(AnyFilesInterceptor())\n  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateUserDto, @UploadedFiles() files: Array<Express.Multer.File>, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.update(id, updateDto, files, true, solidRequestContext);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'showSoftDeleted', required: false, type: Boolean })\n  @ApiQuery({ name: 'showOnlySoftDeleted', required: false, type: Boolean })\n  @ApiQuery({ name: 'limit', required: false, type: Number })\n  @ApiQuery({ name: 'offset', required: false, type: Number })\n  @ApiQuery({ name: 'fields', required: false, type: Array })\n  @ApiQuery({ name: 'sort', required: false, type: Array })\n  @ApiQuery({ name: 'groupBy', required: false, type: Array })\n  @ApiQuery({ name: 'populate', required: false, type: Array })\n  @ApiQuery({ name: 'populateMedia', required: false, type: Array })\n  @ApiQuery({ name: 'filters', required: false, type: Array })\n  @Get()\n  async findMany(@Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.find(query, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiQuery({ name: 'permissionNames', required: false, type: Array })\n  @Get('/permissions-exists')\n  async checkIfPermissionExists(@Query() query: any, @ActiveUser() activeUser: ActiveUserData) {\n    return this.service.checkIfPermissionExists(query, activeUser);\n  }\n\n\n  @ApiBearerAuth(\"jwt\")\n  @Get(':id')\n  async findOne(@Param('id') id: string, @Query() query: any, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.findOne(+id, query, solidRequestContext);\n  }\n\n  @Delete('/bulk')\n  async deleteMany(@Body() ids: number[], @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.deleteMany(ids, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @Delete(':id')\n  async delete(@Param('id') id: number, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {\n    return this.service.delete(id, solidRequestContext);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Post('roles')\n  addRoleToUser(@Body() mutateUserRoles: MutateUserRolesDto) {\n    return this.service.addRoleToUser(mutateUserRoles.username, mutateUserRoles.roleName);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Post('roles/bulk')\n  addRolesToUser(@Body() mutateUserRolesBulk: MutateUserRolesBulkDto) {\n    return this.service.addRolesToUser(mutateUserRolesBulk.username, mutateUserRolesBulk.roleNames);\n  }\n\n  @ApiBearerAuth(\"jwt\")\n  @ApiForbiddenResponse({ description: 'Forbidden.' })\n  @Delete('roles')\n  removeRoleFromUser(userEmail: string, roleName: string) {\n    return this.service.removeRoleFromUser(userEmail, roleName);\n  }\n\n  @ApiBearerAuth('jwt')\n  @Post('/profile')\n  @UseInterceptors(AnyFilesInterceptor())\n  async updateOwnProfile(\n    @Body() updateDto: UpdateUserProfileDto,\n    @UploadedFiles() files: Array<Express.Multer.File>,\n    @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto,\n    @ActiveUser() user: ActiveUserData,\n  ) {\n    return this.service.update(user.sub, updateDto, files, true, solidRequestContext);\n  }\n}\n"]}

package/dist/services/authentication.service.d.ts

@@ -28,7 +28,6 @@ import { MetadataValidationService } from "./metadata-validation.service";
 import { UserService } from "./user.service";
 import { SmsFactory } from "../factories/sms.factory";
 import { WhatsAppFactory } from "../factories/whatsapp.factory";
-import { SolidRegistry } from "../helpers/solid-registry";
 export declare class AuthenticationService {
     private readonly userService;
     private readonly userRepository;
@@ -48,9 +47,8 @@ export declare class AuthenticationService {
     private readonly ssoCodeStorage;
     private readonly metadataValidationService;
     private readonly dataSource;
-    private readonly solidRegistry;
     private readonly logger;
-    constructor(userService: UserService, userRepository: UserRepository, hashingService: HashingService, jwtService: JwtService, activeSessionStorage: ActiveSessionStorageService, accessTokenDenylist: AccessTokenDenylistService, refreshTokenIdsStorage: RefreshTokenIdsStorageService, httpService: HttpService, mailServiceFactory: MailFactory, smsFactory: SmsFactory, whatsAppFactory: WhatsAppFactory, eventEmitter: EventEmitter2, settingService: SettingService, roleMetadataService: RoleMetadataService, userActivityHistoryService: UserActivityHistoryService, ssoCodeStorage: SsoCodeStorageService, metadataValidationService: MetadataValidationService, dataSource: DataSource, solidRegistry: SolidRegistry);
+    constructor(userService: UserService, userRepository: UserRepository, hashingService: HashingService, jwtService: JwtService, activeSessionStorage: ActiveSessionStorageService, accessTokenDenylist: AccessTokenDenylistService, refreshTokenIdsStorage: RefreshTokenIdsStorageService, httpService: HttpService, mailServiceFactory: MailFactory, smsFactory: SmsFactory, whatsAppFactory: WhatsAppFactory, eventEmitter: EventEmitter2, settingService: SettingService, roleMetadataService: RoleMetadataService, userActivityHistoryService: UserActivityHistoryService, ssoCodeStorage: SsoCodeStorageService, metadataValidationService: MetadataValidationService, dataSource: DataSource);
     private getCompanyLogo;
     resolveUser(username: string, email: string): Promise<User>;
     private resolveUserForPasswordSignIn;
@@ -78,7 +76,7 @@ export declare class AuthenticationService {
     private validateOtpRegistrationInput;
     private findExistingRegistrationUser;
     private resolvePasswordlessValidationSource;
-    private upsertUserWithRegistrationVerificationTokens;
+    private resolveUserForOtpRegistration;
     private createUser;
     private assignRegistrationOtp;
     private notifyUserOnOtpInitiateRegistration;

package/dist/services/authentication.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.service.d.ts","sourceRoot":"","sources":["../../src/services/authentication.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAOhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAEL,6BAA6B,EAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAmE3D,qBACa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAG1C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IA1BhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAG9C,WAAW,EAAE,WAAW,EAExB,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,0BAA0B,EAC/C,sBAAsB,EAAE,6BAA6B,EACrD,WAAW,EAAE,WAAW,EAExB,kBAAkB,EAAE,WAAW,EAE/B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa,EAC3B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,0BAA0B,EAAE,0BAA0B,EACtD,cAAc,EAAE,qBAAqB,EACrC,yBAAyB,EAAE,yBAAyB,EAGpD,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;YAKjC,cAAc;IAItB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;YASnC,4BAA4B;IAoBpC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM;IAcrD,8BAA8B,CAAC,KAAK,EAAE,MAAM;YAOpC,4BAA4B;YAmB5B,wBAAwB;IAWhC,MAAM,CACV,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1C,UAAU,GAAE,cAAqB,EACjC,MAAM,GAAE,YAA4C,GACnD,OAAO,CAAC,IAAI,CAAC;IAgBhB,OAAO,CAAC,kBAAkB;YAoCZ,aAAa;YAqEb,6BAA6B;YAoD7B,2BAA2B;IAqCnC,sBAAsB,CAAC,CAAC,SAAS,IAAI,EACzC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,EAChC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;YAKC,iBAAiB;YAwEjB,gBAAgB;IA8B9B,gBAAgB,CAAC,MAAM,GAAE,MAAU,GAAG,MAAM;YAiB9B,+BAA+B;YAkC/B,qBAAqB;YAQrB,mBAAmB;YAQnB,kBAAkB;IAqEhC,OAAO,CAAC,+BAA+B;IAUjC,uBAAuB,CAAC,SAAS,EAAE,YAAY;;;IAoCrD,OAAO,CAAC,4BAA4B;YAsBtB,4BAA4B;IAa1C,OAAO,CAAC,mCAAmC;YAM7B,4CAA4C;YAiD5C,UAAU;YAqBV,qBAAqB;YAqCrB,mCAAmC;IA+HjD,OAAO,CAAC,4BAA4B;YAkCtB,yBAAyB;IAajC,sBAAsB,CAAC,gBAAgB,EAAE,gBAAgB;;;;YAoCjD,gCAAgC;IAe9C,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,wBAAwB;YAMlB,uDAAuD;YAwBvD,GAAG;IAWjB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,gBAAgB;IAclB,MAAM,CAAC,SAAS,EAAE,SAAS;;;;;;;;;;;;IA6BjC,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,UAAU;IAWZ,gBAAgB,CAAC,SAAS,EAAE,YAAY;;;;;;;;;;IAmB9C,OAAO,CAAC,gBAAgB;YA2BV,4BAA4B;YAkB5B,gBAAgB;YAqBhB,cAAc;IAsB5B,OAAO,CAAC,qBAAqB;YAcf,6BAA6B;IAwHrC,eAAe,CAAC,gBAAgB,EAAE,gBAAgB;;;;;;;;;;;;IA2CxD,OAAO,CAAC,gBAAgB;YAqBV,aAAa;IA2B3B,OAAO,CAAC,gBAAgB;YAMV,uBAAuB;IAK/B,cAAc,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,cAAc;YA0Dd,2BAA2B;IAiBnC,sBAAsB,CAC1B,yBAAyB,EAAE,yBAAyB;;;;;;;;;;;YAsDxC,0BAA0B;IA8DlC,qBAAqB,CACzB,wBAAwB,EAAE,wBAAwB;;;;;;;YA6DtC,2BAA2B;IAoEnC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM;;;;IA4B5C,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;IA2BtE,oBAAoB,CACxB,IAAI,EAAE,IAAI,EACV,oBAAoB,CAAC,EAAE,MAAM,EAC7B,SAAS,CAAC,EAAE,MAAM;IA8Bd,aAAa,CAAC,eAAe,EAAE,eAAe;;;;YA2EtC,SAAS;IAuBjB,uBAAuB,CAAC,IAAI,EAAE,IAAI;IAyBlC,iBAAiB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAqCpC,yBAAyB,CAAC,IAAI,EAAE,IAAI;IAiCpC,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtC,0BAA0B,CAAC,IAAI,EAAE,IAAI;IA0BrC,oBAAoB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCvC,yCAAyC,CAAC,IAAI,EAAE,IAAI;IA0CpD,mCAAmC,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtD,gBAAgB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;YAkC3B,iCAAiC;IAO/C,OAAO,CAAC,6BAA6B;IAQrC,OAAO,CAAC,mBAAmB;YAab,uBAAuB;YAQvB,mBAAmB;IAa3B,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,UAAQ;;;YAyFvC,eAAe;YA0Bf,oBAAoB;IA4B5B,2BAA2B,CAC/B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;YAiB/C,2BAA2B;IAyBnC,YAAY,CAAC,MAAM,EAAE,MAAM;IAS3B,EAAE,CAAC,UAAU,EAAE,cAAc;;;;;;;;;;IAwC7B,eAAe,CACnB,UAAU,EAAE,cAAc,EAC1B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBzB,eAAe,CAAC,IAAI,EAAE,MAAM;;;;;;;;;;;;CAYnC"}
+{"version":3,"file":"authentication.service.d.ts","sourceRoot":"","sources":["../../src/services/authentication.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAOhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAEL,6BAA6B,EAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAmEjE,qBACa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAG1C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAzB7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAG9C,WAAW,EAAE,WAAW,EAExB,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,0BAA0B,EAC/C,sBAAsB,EAAE,6BAA6B,EACrD,WAAW,EAAE,WAAW,EAExB,kBAAkB,EAAE,WAAW,EAE/B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa,EAC3B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,0BAA0B,EAAE,0BAA0B,EACtD,cAAc,EAAE,qBAAqB,EACrC,yBAAyB,EAAE,yBAAyB,EAGpD,UAAU,EAAE,UAAU;YAK3B,cAAc;IAItB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;YASnC,4BAA4B;IAoBpC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM;IAcrD,8BAA8B,CAAC,KAAK,EAAE,MAAM;YAOpC,4BAA4B;YAmB5B,wBAAwB;IAWhC,MAAM,CACV,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1C,UAAU,GAAE,cAAqB,EACjC,MAAM,GAAE,YAA4C,GACnD,OAAO,CAAC,IAAI,CAAC;IAgBhB,OAAO,CAAC,kBAAkB;YAqCZ,aAAa;YAqEb,6BAA6B;YAoD7B,2BAA2B;IAqCnC,sBAAsB,CAAC,CAAC,SAAS,IAAI,EACzC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,EAChC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;YAKC,iBAAiB;YAwEjB,gBAAgB;IA8B9B,gBAAgB,CAAC,MAAM,GAAE,MAAU,GAAG,MAAM;YAiB9B,+BAA+B;YAkC/B,qBAAqB;YAQrB,mBAAmB;YAQnB,kBAAkB;IAqEhC,OAAO,CAAC,+BAA+B;IAUjC,uBAAuB,CAAC,SAAS,EAAE,YAAY;;;IAoCrD,OAAO,CAAC,4BAA4B;YAsBtB,4BAA4B;IAa1C,OAAO,CAAC,mCAAmC;YAM7B,6BAA6B;YAoD7B,UAAU;YAqBV,qBAAqB;YAqCrB,mCAAmC;IA+HjD,OAAO,CAAC,4BAA4B;YAkCtB,yBAAyB;IAajC,sBAAsB,CAAC,gBAAgB,EAAE,gBAAgB;;;;YAoCjD,gCAAgC;IAe9C,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,wBAAwB;YAMlB,uDAAuD;YAwBvD,GAAG;IAWjB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,gBAAgB;IAclB,MAAM,CAAC,SAAS,EAAE,SAAS;;;;;;;;;;;;IA6BjC,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,UAAU;IAWZ,gBAAgB,CAAC,SAAS,EAAE,YAAY;;;;;;;;;;IAmB9C,OAAO,CAAC,gBAAgB;YA2BV,4BAA4B;YAkB5B,gBAAgB;YAqBhB,cAAc;IAsB5B,OAAO,CAAC,qBAAqB;YAcf,6BAA6B;IAwHrC,eAAe,CAAC,gBAAgB,EAAE,gBAAgB;;;;;;;;;;;;IA2CxD,OAAO,CAAC,gBAAgB;YAqBV,aAAa;IA2B3B,OAAO,CAAC,gBAAgB;YAMV,uBAAuB;IAK/B,cAAc,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,cAAc;YA0Dd,2BAA2B;IAiBnC,sBAAsB,CAC1B,yBAAyB,EAAE,yBAAyB;;;;;;;;;;;YAsDxC,0BAA0B;IA8DlC,qBAAqB,CACzB,wBAAwB,EAAE,wBAAwB;;;;;;;YA6DtC,2BAA2B;IAoEnC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM;;;;IA4B5C,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;IA2BtE,oBAAoB,CACxB,IAAI,EAAE,IAAI,EACV,oBAAoB,CAAC,EAAE,MAAM,EAC7B,SAAS,CAAC,EAAE,MAAM;IA8Bd,aAAa,CAAC,eAAe,EAAE,eAAe;;;;YA2EtC,SAAS;IAuBjB,uBAAuB,CAAC,IAAI,EAAE,IAAI;IAyBlC,iBAAiB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAqCpC,yBAAyB,CAAC,IAAI,EAAE,IAAI;IAiCpC,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtC,0BAA0B,CAAC,IAAI,EAAE,IAAI;IA0BrC,oBAAoB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCvC,yCAAyC,CAAC,IAAI,EAAE,IAAI;IA0CpD,mCAAmC,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtD,gBAAgB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;YAkC3B,iCAAiC;IAO/C,OAAO,CAAC,6BAA6B;IAQrC,OAAO,CAAC,mBAAmB;YAab,uBAAuB;YAQvB,mBAAmB;IAa3B,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,UAAQ;;;YAyFvC,eAAe;YA0Bf,oBAAoB;IA4B5B,2BAA2B,CAC/B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;YAiB/C,2BAA2B;IAyBnC,YAAY,CAAC,MAAM,EAAE,MAAM;IAS3B,EAAE,CAAC,UAAU,EAAE,cAAc;;;;;;;;;;IAwC7B,eAAe,CACnB,UAAU,EAAE,cAAc,EAC1B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBzB,eAAe,CAAC,IAAI,EAAE,MAAM;;;;;;;;;;;;CAYnC"}