@sync-in/server 1.3.0

package/server/applications/users/services/users-manager.service.js

@@ -0,0 +1,424 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "UsersManager", {
+    enumerable: true,
+    get: function() {
+        return UsersManager;
+    }
+});
+const _common = require("@nestjs/common");
+const _bcryptjs = /*#__PURE__*/ _interop_require_default(require("bcryptjs"));
+const _nodefs = require("node:fs");
+const _nodepath = /*#__PURE__*/ _interop_require_default(require("node:path"));
+const _promises = require("node:stream/promises");
+const _functions = require("../../../common/functions");
+const _image = require("../../../common/image");
+const _configconstants = require("../../../configuration/config.constants");
+const _files = require("../../files/utils/files");
+const _member = require("../constants/member");
+const _user = require("../constants/user");
+const _usermodel = require("../models/user.model");
+const _adminusersmanagerservice = require("./admin-users-manager.service");
+const _usersqueriesservice = require("./users-queries.service");
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let UsersManager = class UsersManager {
+    async fromUserId(id) {
+        const user = await this.usersQueries.from(id);
+        return user ? new _usermodel.UserModel(user, true) : null;
+    }
+    async findUser(loginOrEmail, removePassword = true) {
+        const user = await this.usersQueries.from(null, loginOrEmail);
+        return user ? new _usermodel.UserModel(user, removePassword) : null;
+    }
+    async logUser(user, password, ip) {
+        if (user.role === _user.USER_ROLE.LINK) {
+            this.logger.error(`${this.logUser.name} - guest link account ${user} is not authorized to login`);
+            throw new _common.HttpException('Account is not allowed', _common.HttpStatus.FORBIDDEN);
+        }
+        if (!user.isActive || user.passwordAttempts >= _user.USER_MAX_PASSWORD_ATTEMPTS) {
+            this.updateAccesses(user, ip, false).catch((e)=>this.logger.error(`${this.logUser.name} - ${e}`));
+            this.logger.error(`${this.logUser.name} - user account *${user.login}* is locked`);
+            throw new _common.HttpException('Account locked', _common.HttpStatus.FORBIDDEN);
+        }
+        const authSuccess = await (0, _functions.comparePassword)(password, user.password);
+        this.updateAccesses(user, ip, authSuccess).catch((e)=>this.logger.error(`${this.logUser.name} - ${e}`));
+        if (authSuccess) {
+            await user.makePaths();
+            return user;
+        }
+        this.logger.warn(`${this.logUser.name} - bad password for *${user.login}*`);
+        return null;
+    }
+    async me(authUser) {
+        const user = await this.fromUserId(authUser.id);
+        if (!user) {
+            throw new _common.HttpException(`User *${authUser.login} (${authUser.id}) not found`, _common.HttpStatus.NOT_FOUND);
+        }
+        user.impersonated = !!authUser.impersonatedFromId;
+        user.clientId = authUser.clientId;
+        return {
+            user: user
+        };
+    }
+    async compareUserPassword(userId, password) {
+        return this.usersQueries.compareUserPassword(userId, password);
+    }
+    async updateLanguage(user, userLanguageDto) {
+        if (!userLanguageDto.language) userLanguageDto.language = null;
+        if (!await this.usersQueries.updateUserOrGuest(user.id, userLanguageDto)) {
+            throw new _common.HttpException('Unable to update language', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async updatePassword(user, userPasswordDto) {
+        const r = await this.usersQueries.selectUserProperties(user.id, [
+            'password'
+        ]);
+        if (!r) {
+            throw new _common.HttpException('Unable to check password', _common.HttpStatus.NOT_FOUND);
+        }
+        if (!await (0, _functions.comparePassword)(userPasswordDto.oldPassword, r.password)) {
+            throw new _common.HttpException('Password mismatch', _common.HttpStatus.BAD_REQUEST);
+        }
+        const hash = await _bcryptjs.default.hash(userPasswordDto.newPassword, 10);
+        if (!await this.usersQueries.updateUserOrGuest(user.id, {
+            password: hash
+        })) {
+            throw new _common.HttpException('Unable to update password', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async updateNotification(user, userNotificationDto) {
+        if (!await this.usersQueries.updateUserOrGuest(user.id, userNotificationDto)) {
+            throw new _common.HttpException('Unable to update notification', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async updateAvatar(req) {
+        const part = await req.file({
+            limits: {
+                fileSize: this.maxAvatarUploadSize
+            }
+        });
+        if (!part.mimetype.startsWith('image/')) {
+            throw new _common.HttpException('Unsupported file type', _common.HttpStatus.BAD_REQUEST);
+        }
+        const dstPath = _nodepath.default.join(req.user.tmpPath, this.userAvatarFileName);
+        try {
+            await (0, _promises.pipeline)(part.file, (0, _nodefs.createWriteStream)(dstPath));
+        } catch (e) {
+            this.logger.error(`${this.updateAvatar.name} - ${e}`);
+            throw new _common.HttpException('Unable to upload avatar', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        if (part.file.truncated) {
+            this.logger.warn(`${this.updateAvatar.name} - image is too large`);
+            throw new _common.HttpException('Image is too large (5MB max)', _common.HttpStatus.PAYLOAD_TOO_LARGE);
+        }
+        try {
+            await (0, _files.moveFiles)(dstPath, _nodepath.default.join(req.user.homePath, this.userAvatarFileName), true);
+        } catch (e) {
+            this.logger.error(`${this.updateAvatar.name} - ${e}`);
+            throw new _common.HttpException('Unable to create avatar', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async updateAccesses(user, ip, success) {
+        const passwordAttempts = success ? 0 : Math.min(user.passwordAttempts + 1, _user.USER_MAX_PASSWORD_ATTEMPTS);
+        await this.usersQueries.updateUserOrGuest(user.id, {
+            lastAccess: user.currentAccess,
+            currentAccess: new Date(),
+            lastIp: user.currentIp,
+            currentIp: ip,
+            passwordAttempts: passwordAttempts,
+            isActive: user.isActive && passwordAttempts < _user.USER_MAX_PASSWORD_ATTEMPTS
+        });
+    }
+    async getAvatar(userLogin, generate = false, generateIsNotExists) {
+        const avatarPath = _nodepath.default.join(_usermodel.UserModel.getHomePath(userLogin), this.userAvatarFileName);
+        const avatarExists = await (0, _files.isPathExists)(avatarPath);
+        if (!avatarExists && generateIsNotExists) {
+            generate = true;
+        }
+        if (!generate) {
+            return [
+                avatarExists ? avatarPath : this.defaultAvatarFilePath,
+                avatarExists ? _image.pngMimeType : _image.svgMimeType
+            ];
+        }
+        if (!await (0, _files.isPathExists)(_usermodel.UserModel.getHomePath(userLogin))) {
+            throw new _common.HttpException(`Home path for user *${userLogin}* does not exist`, _common.HttpStatus.FORBIDDEN);
+        }
+        const user = await this.findUser(userLogin);
+        if (!user) {
+            throw new _common.HttpException(`avatar not found`, _common.HttpStatus.NOT_FOUND);
+        }
+        const avatarFile = (0, _nodefs.createWriteStream)(avatarPath);
+        const avatarStream = (0, _image.generateAvatar)(user.getInitials());
+        try {
+            await (0, _promises.pipeline)(avatarStream, avatarFile);
+        } catch (e) {
+            this.logger.error(`${this.updateAvatar.name} - ${e}`);
+            throw new _common.HttpException('Unable to create avatar', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        if (generateIsNotExists) {
+            return [
+                avatarPath,
+                _image.pngMimeType
+            ];
+        }
+    }
+    async getAvatarBase64(userLogin) {
+        const userAvatarPath = _nodepath.default.join(_usermodel.UserModel.getHomePath(userLogin), this.userAvatarFileName);
+        return (0, _image.convertImageToBase64)(await (0, _files.isPathExists)(userAvatarPath) ? userAvatarPath : this.defaultAvatarFilePath);
+    }
+    setOnlineStatus(user, onlineStatus) {
+        this.usersQueries.setOnlineStatus(user.id, onlineStatus).catch((e)=>this.logger.error(`${this.setOnlineStatus.name} - ${e}`));
+    }
+    getOnlineUsers(userIds) {
+        return this.usersQueries.getOnlineUsers(userIds);
+    }
+    async usersWhitelist(userId) {
+        return this.usersQueries.usersWhitelist(userId);
+    }
+    async browseGroups(user, name) {
+        if (name) {
+            const group = await this.usersQueries.groupFromName(user.id, name);
+            if (!group) {
+                throw new _common.HttpException('Group not found', _common.HttpStatus.NOT_FOUND);
+            }
+            return {
+                parentGroup: group,
+                members: await this.usersQueries.browseGroupMembers(group.id)
+            };
+        }
+        return {
+            parentGroup: undefined,
+            members: await this.usersQueries.browseRootGroups(user.id)
+        };
+    }
+    async getGroup(user, groupId, withMembers = true, asAdmin = false) {
+        const group = withMembers ? await this.usersQueries.getGroupWithMembers(user.id, groupId, asAdmin) : await this.usersQueries.getGroup(user.id, groupId, asAdmin);
+        if (!group) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        return group;
+    }
+    async createPersonalGroup(user, userCreateOrUpdateGroupDto) {
+        if (!userCreateOrUpdateGroupDto.name) {
+            this.logger.error(`${this.createPersonalGroup.name} - missing group name : ${JSON.stringify(userCreateOrUpdateGroupDto)}`);
+            throw new _common.HttpException('Group name is missing', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (await this.usersQueries.checkGroupNameExists(userCreateOrUpdateGroupDto.name)) {
+            throw new _common.HttpException('Name already used', _common.HttpStatus.BAD_REQUEST);
+        }
+        try {
+            const groupId = await this.usersQueries.createPersonalGroup(user.id, userCreateOrUpdateGroupDto);
+            this.logger.log(`${this.createPersonalGroup.name} - group (${groupId}) was created : ${JSON.stringify(userCreateOrUpdateGroupDto)}`);
+            // clear user whitelists
+            this.usersQueries.clearWhiteListCaches([
+                user.id
+            ]);
+            return this.getGroup(user, groupId, false);
+        } catch (e) {
+            this.logger.error(`${this.createPersonalGroup.name} - group was not created : ${JSON.stringify(userCreateOrUpdateGroupDto)} : ${e}`);
+            throw new _common.HttpException('Unable to create group', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async updatePersonalGroup(user, groupId, userCreateOrUpdateGroupDto) {
+        if (!Object.keys(userCreateOrUpdateGroupDto).length) {
+            throw new _common.HttpException('No changes to update', _common.HttpStatus.BAD_REQUEST);
+        }
+        const currentGroup = await this.getGroup(user, groupId, false, user.isAdmin);
+        if (currentGroup.type !== _member.MEMBER_TYPE.PGROUP) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        if (userCreateOrUpdateGroupDto.name && await this.usersQueries.checkGroupNameExists(userCreateOrUpdateGroupDto.name)) {
+            throw new _common.HttpException('Name already used', _common.HttpStatus.BAD_REQUEST);
+        }
+        try {
+            await this.usersQueries.updateGroup(groupId, userCreateOrUpdateGroupDto);
+        } catch (e) {
+            throw new _common.HttpException(e.message, _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        return this.getGroup(user, groupId, false, user.isAdmin);
+    }
+    async addUsersToGroup(user, groupId, userIds) {
+        const currentGroup = await this.getGroup(user, groupId);
+        // only users can be added to users groups
+        // guests and users can be added to personal groups
+        const userWhiteList = await this.usersQueries.usersWhitelist(user.id, currentGroup.type === _member.MEMBER_TYPE.GROUP ? _user.USER_ROLE.USER : undefined);
+        // ignore user ids that are already group members & filter on user ids allowed to current user
+        userIds = userIds.filter((id)=>!currentGroup.members.find((m)=>m.id === id)).filter((id)=>userWhiteList.indexOf(id) > -1);
+        if (!userIds.length) {
+            throw new _common.HttpException('No users to add to group', _common.HttpStatus.BAD_REQUEST);
+        }
+        return this.usersQueries.updateGroupMembers(groupId, {
+            add: userIds.map((id)=>({
+                    id: id,
+                    groupRole: _user.USER_GROUP_ROLE.MEMBER
+                }))
+        });
+    }
+    async updateUserFromPersonalGroup(user, groupId, userId, updateUserFromGroupDto) {
+        const currentGroup = await this.getGroup(user, groupId);
+        if (currentGroup.type !== _member.MEMBER_TYPE.PGROUP) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        const userToUpdate = currentGroup.members.find((m)=>m.id === userId);
+        if (!userToUpdate) {
+            throw new _common.HttpException('User was not found', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (userToUpdate.groupRole !== updateUserFromGroupDto.role) {
+            if (userToUpdate.groupRole === _user.USER_GROUP_ROLE.MANAGER) {
+                if (currentGroup.members.filter((m)=>m.groupRole === _user.USER_GROUP_ROLE.MANAGER).length === 1) {
+                    throw new _common.HttpException('Group must have at least one manager', _common.HttpStatus.BAD_REQUEST);
+                }
+            }
+            return this.adminUsersManager.updateUserFromGroup(groupId, userId, updateUserFromGroupDto);
+        }
+    }
+    async removeUserFromGroup(user, groupId, userId) {
+        const currentGroup = await this.getGroup(user, groupId);
+        const userToRemove = currentGroup.members.find((m)=>m.id === userId);
+        if (!userToRemove) {
+            throw new _common.HttpException('User was not found', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (userToRemove.groupRole === _user.USER_GROUP_ROLE.MANAGER) {
+            if (currentGroup.type === _member.MEMBER_TYPE.GROUP) {
+                throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+            }
+            if (currentGroup.members.filter((m)=>m.groupRole === _user.USER_GROUP_ROLE.MANAGER).length === 1) {
+                throw new _common.HttpException('Group must have at least one manager', _common.HttpStatus.BAD_REQUEST);
+            }
+        }
+        return this.usersQueries.updateGroupMembers(groupId, {
+            remove: [
+                userId
+            ]
+        });
+    }
+    async leavePersonalGroup(user, groupId) {
+        const currentGroup = await this.usersQueries.getGroupWithMembers(user.id, groupId, true);
+        if (!currentGroup || currentGroup.type === _member.MEMBER_TYPE.GROUP || !currentGroup.members.find((m)=>m.id === user.id)) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        const userWhoLeaves = currentGroup.members.find((m)=>m.id === user.id);
+        if (!userWhoLeaves) {
+            throw new _common.HttpException('User was not found', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (userWhoLeaves.groupRole === _user.USER_GROUP_ROLE.MANAGER) {
+            if (currentGroup.members.filter((m)=>m.groupRole === _user.USER_GROUP_ROLE.MANAGER).length === 1) {
+                throw new _common.HttpException('Group must have at least one manager', _common.HttpStatus.BAD_REQUEST);
+            }
+        }
+        try {
+            await this.usersQueries.updateGroupMembers(groupId, {
+                remove: [
+                    user.id
+                ]
+            });
+            this.logger.log(`${this.leavePersonalGroup.name} - user (${user.id}) has left group (${groupId})`);
+        } catch (e) {
+            this.logger.error(`${this.leavePersonalGroup.name} - user (${user.id}) has not left group (${groupId}) : ${e}`);
+            throw new _common.HttpException(e.message, _common.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+    }
+    async deletePersonalGroup(user, groupId) {
+        if (!await this.usersQueries.canDeletePersonalGroup(user.id, groupId)) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        if (await this.usersQueries.deletePersonalGroup(groupId)) {
+            this.logger.log(`${this.deletePersonalGroup.name} - group (${groupId}) was deleted`);
+        } else {
+            this.logger.warn(`${this.deletePersonalGroup.name} - group (${groupId}) does not exist`);
+            throw new _common.HttpException('Unable to delete group', _common.HttpStatus.BAD_REQUEST);
+        }
+    }
+    listGuests(user) {
+        return this.usersQueries.listGuests(null, user.id);
+    }
+    async getGuest(user, guestId) {
+        const guest = await this.usersQueries.listGuests(guestId, user.id);
+        this.adminUsersManager.checkUser(guest, true);
+        return guest;
+    }
+    async createGuest(user, createGuestDto) {
+        // filter managers that are allowed for current user
+        const userWhiteList = await this.usersQueries.usersWhitelist(user.id, _user.USER_ROLE.USER);
+        createGuestDto.managers = createGuestDto.managers.filter((id)=>userWhiteList.indexOf(id) > -1);
+        if (createGuestDto.managers.indexOf(user.id) === -1) {
+            // force user as manager during creation
+            createGuestDto.managers.push(user.id);
+        }
+        // clear user whitelists
+        this.usersQueries.clearWhiteListCaches([
+            user.id
+        ]);
+        return this.adminUsersManager.createUserOrGuest(createGuestDto, _user.USER_ROLE.GUEST, true);
+    }
+    async updateGuest(user, guestId, updateGuestDto) {
+        if (!Object.keys(updateGuestDto).length) {
+            throw new _common.HttpException('No changes to update', _common.HttpStatus.BAD_REQUEST);
+        }
+        if (updateGuestDto.managers) {
+            // filter managers that are allowed for current user
+            const userWhiteList = await this.usersQueries.usersWhitelist(user.id, _user.USER_ROLE.USER);
+            updateGuestDto.managers = updateGuestDto.managers.filter((id)=>userWhiteList.indexOf(id) > -1);
+            if (!updateGuestDto.managers.length) {
+                throw new _common.HttpException('Guest must have at least one manager', _common.HttpStatus.BAD_REQUEST);
+            }
+        }
+        if (!await this.usersQueries.isGuestManager(user.id, guestId)) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        const guest = await this.adminUsersManager.updateUserOrGuest(guestId, updateGuestDto, _user.USER_ROLE.GUEST);
+        return guest.managers.find((m)=>m.id === user.id) ? guest : null;
+    }
+    async deleteGuest(user, guestId) {
+        const guest = await this.usersQueries.isGuestManager(user.id, guestId);
+        if (!guest) {
+            throw new _common.HttpException('You are not allowed to do this action', _common.HttpStatus.FORBIDDEN);
+        }
+        // guest has no space but a temporary directory
+        return this.adminUsersManager.deleteUserOrGuest(guest.id, guest.login, {
+            deleteSpace: true,
+            isGuest: true
+        });
+    }
+    searchMembers(user, searchMembersDto) {
+        return this.usersQueries.searchUsersOrGroups(searchMembersDto, user.id);
+    }
+    constructor(usersQueries, adminUsersManager){
+        this.usersQueries = usersQueries;
+        this.adminUsersManager = adminUsersManager;
+        this.defaultAvatarFilePath = _nodepath.default.join(_configconstants.STATIC_ASSETS_PATH, 'avatar.svg');
+        this.userAvatarFileName = 'avatar.png';
+        this.maxAvatarUploadSize = 1024 * 1024 * 5;
+        this.logger = new _common.Logger(UsersManager.name);
+    }
+};
+UsersManager = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _usersqueriesservice.UsersQueries === "undefined" ? Object : _usersqueriesservice.UsersQueries,
+        typeof _adminusersmanagerservice.AdminUsersManager === "undefined" ? Object : _adminusersmanagerservice.AdminUsersManager
+    ])
+], UsersManager);
+
+//# sourceMappingURL=users-manager.service.js.map

package/server/applications/users/services/users-manager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../backend/src/applications/users/services/users-manager.service.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { MultipartFile } from '@fastify/multipart'\nimport { HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport bcrypt from 'bcryptjs'\nimport { PNGStream } from 'canvas'\nimport { WriteStream } from 'fs'\nimport { createWriteStream } from 'node:fs'\nimport path from 'node:path'\nimport { pipeline } from 'node:stream/promises'\nimport { FastifyAuthenticatedRequest } from '../../../authentication/interfaces/auth-request.interface'\nimport { JwtIdentityPayload } from '../../../authentication/interfaces/jwt-payload.interface'\nimport { comparePassword } from '../../../common/functions'\nimport { convertImageToBase64, generateAvatar, pngMimeType, svgMimeType } from '../../../common/image'\nimport { STATIC_ASSETS_PATH } from '../../../configuration/config.constants'\nimport { isPathExists, moveFiles } from '../../files/utils/files'\nimport { MEMBER_TYPE } from '../constants/member'\nimport { USER_GROUP_ROLE, USER_MAX_PASSWORD_ATTEMPTS, USER_ONLINE_STATUS, USER_ROLE } from '../constants/user'\nimport { UserCreateOrUpdateGroupDto } from '../dto/create-or-update-group.dto'\nimport { CreateUserDto, UpdateUserDto, UpdateUserFromGroupDto } from '../dto/create-or-update-user.dto'\nimport { SearchMembersDto } from '../dto/search-members.dto'\nimport { UserLanguageDto, UserNotificationDto, UserPasswordDto } from '../dto/user-properties.dto'\nimport type { GroupBrowse } from '../interfaces/group-browse.interface'\nimport type { GroupMember, GroupWithMembers } from '../interfaces/group-member'\nimport type { GuestUser } from '../interfaces/guest-user.interface'\nimport type { Member } from '../interfaces/member.interface'\nimport type { UserOnline } from '../interfaces/websocket.interface'\nimport { UserModel } from '../models/user.model'\nimport type { Group } from '../schemas/group.interface'\nimport type { UserGroup } from '../schemas/user-group.interface'\nimport type { User } from '../schemas/user.interface'\nimport { AdminUsersManager } from './admin-users-manager.service'\nimport { UsersQueries } from './users-queries.service'\n\n@Injectable()\nexport class UsersManager {\n  private readonly defaultAvatarFilePath = path.join(STATIC_ASSETS_PATH, 'avatar.svg')\n  private readonly userAvatarFileName = 'avatar.png'\n  private readonly maxAvatarUploadSize = 1024 * 1024 * 5\n  private readonly logger = new Logger(UsersManager.name)\n\n  constructor(\n    private readonly usersQueries: UsersQueries,\n    private readonly adminUsersManager: AdminUsersManager\n  ) {}\n\n  async fromUserId(id: number): Promise<UserModel> {\n    const user: User = await this.usersQueries.from(id)\n    return user ? new UserModel(user, true) : null\n  }\n\n  async findUser(loginOrEmail: string, removePassword: false): Promise<UserModel>\n  async findUser(loginOrEmail: string, removePassword?: true): Promise<Omit<UserModel, 'password'>>\n  async findUser(loginOrEmail: string, removePassword: boolean = true): Promise<Omit<UserModel, 'password'>> {\n    const user: User = await this.usersQueries.from(null, loginOrEmail)\n    return user ? new UserModel(user, removePassword) : null\n  }\n\n  async logUser(user: UserModel, password: string, ip: string): Promise<UserModel> {\n    if (user.role === USER_ROLE.LINK) {\n      this.logger.error(`${this.logUser.name} - guest link account ${user} is not authorized to login`)\n      throw new HttpException('Account is not allowed', HttpStatus.FORBIDDEN)\n    }\n    if (!user.isActive || user.passwordAttempts >= USER_MAX_PASSWORD_ATTEMPTS) {\n      this.updateAccesses(user, ip, false).catch((e: Error) => this.logger.error(`${this.logUser.name} - ${e}`))\n      this.logger.error(`${this.logUser.name} - user account *${user.login}* is locked`)\n      throw new HttpException('Account locked', HttpStatus.FORBIDDEN)\n    }\n    const authSuccess: boolean = await comparePassword(password, user.password)\n    this.updateAccesses(user, ip, authSuccess).catch((e: Error) => this.logger.error(`${this.logUser.name} - ${e}`))\n    if (authSuccess) {\n      await user.makePaths()\n      return user\n    }\n    this.logger.warn(`${this.logUser.name} - bad password for *${user.login}*`)\n    return null\n  }\n\n  async me(authUser: UserModel): Promise<{ user: Omit<UserModel, 'password'> }> {\n    const user = await this.fromUserId(authUser.id)\n    if (!user) {\n      throw new HttpException(`User *${authUser.login} (${authUser.id}) not found`, HttpStatus.NOT_FOUND)\n    }\n    user.impersonated = !!authUser.impersonatedFromId\n    user.clientId = authUser.clientId\n    return { user: user }\n  }\n\n  async compareUserPassword(userId: number, password: string): Promise<boolean> {\n    return this.usersQueries.compareUserPassword(userId, password)\n  }\n\n  async updateLanguage(user: UserModel, userLanguageDto: UserLanguageDto) {\n    if (!userLanguageDto.language) userLanguageDto.language = null\n    if (!(await this.usersQueries.updateUserOrGuest(user.id, userLanguageDto))) {\n      throw new HttpException('Unable to update language', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async updatePassword(user: UserModel, userPasswordDto: UserPasswordDto) {\n    const r = await this.usersQueries.selectUserProperties(user.id, ['password'])\n    if (!r) {\n      throw new HttpException('Unable to check password', HttpStatus.NOT_FOUND)\n    }\n    if (!(await comparePassword(userPasswordDto.oldPassword, r.password))) {\n      throw new HttpException('Password mismatch', HttpStatus.BAD_REQUEST)\n    }\n    const hash = await bcrypt.hash(userPasswordDto.newPassword, 10)\n    if (!(await this.usersQueries.updateUserOrGuest(user.id, { password: hash }))) {\n      throw new HttpException('Unable to update password', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async updateNotification(user: UserModel, userNotificationDto: UserNotificationDto) {\n    if (!(await this.usersQueries.updateUserOrGuest(user.id, userNotificationDto))) {\n      throw new HttpException('Unable to update notification', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async updateAvatar(req: FastifyAuthenticatedRequest) {\n    const part: MultipartFile = await req.file({ limits: { fileSize: this.maxAvatarUploadSize } })\n    if (!part.mimetype.startsWith('image/')) {\n      throw new HttpException('Unsupported file type', HttpStatus.BAD_REQUEST)\n    }\n    const dstPath = path.join(req.user.tmpPath, this.userAvatarFileName)\n    try {\n      await pipeline(part.file, createWriteStream(dstPath))\n    } catch (e) {\n      this.logger.error(`${this.updateAvatar.name} - ${e}`)\n      throw new HttpException('Unable to upload avatar', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n    if (part.file.truncated) {\n      this.logger.warn(`${this.updateAvatar.name} - image is too large`)\n      throw new HttpException('Image is too large (5MB max)', HttpStatus.PAYLOAD_TOO_LARGE)\n    }\n    try {\n      await moveFiles(dstPath, path.join(req.user.homePath, this.userAvatarFileName), true)\n    } catch (e) {\n      this.logger.error(`${this.updateAvatar.name} - ${e}`)\n      throw new HttpException('Unable to create avatar', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async updateAccesses(user: UserModel, ip: string, success: boolean) {\n    const passwordAttempts = success ? 0 : Math.min(user.passwordAttempts + 1, USER_MAX_PASSWORD_ATTEMPTS)\n    await this.usersQueries.updateUserOrGuest(user.id, {\n      lastAccess: user.currentAccess,\n      currentAccess: new Date(),\n      lastIp: user.currentIp,\n      currentIp: ip,\n      passwordAttempts: passwordAttempts,\n      isActive: user.isActive && passwordAttempts < USER_MAX_PASSWORD_ATTEMPTS\n    })\n  }\n\n  async getAvatar(userLogin: string, generate: true, generateIsNotExists?: boolean): Promise<undefined>\n  async getAvatar(userLogin: string, generate?: false, generateIsNotExists?: boolean): Promise<[path: string, mime: string]>\n  async getAvatar(userLogin: string, generate: boolean = false, generateIsNotExists?: boolean): Promise<[path: string, mime: string]> {\n    const avatarPath = path.join(UserModel.getHomePath(userLogin), this.userAvatarFileName)\n    const avatarExists = await isPathExists(avatarPath)\n    if (!avatarExists && generateIsNotExists) {\n      generate = true\n    }\n    if (!generate) {\n      return [avatarExists ? avatarPath : this.defaultAvatarFilePath, avatarExists ? pngMimeType : svgMimeType]\n    }\n    if (!(await isPathExists(UserModel.getHomePath(userLogin)))) {\n      throw new HttpException(`Home path for user *${userLogin}* does not exist`, HttpStatus.FORBIDDEN)\n    }\n    const user: Partial<UserModel> = await this.findUser(userLogin)\n    if (!user) {\n      throw new HttpException(`avatar not found`, HttpStatus.NOT_FOUND)\n    }\n    const avatarFile: WriteStream = createWriteStream(avatarPath)\n    const avatarStream: PNGStream = generateAvatar(user.getInitials())\n    try {\n      await pipeline(avatarStream, avatarFile)\n    } catch (e) {\n      this.logger.error(`${this.updateAvatar.name} - ${e}`)\n      throw new HttpException('Unable to create avatar', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n    if (generateIsNotExists) {\n      return [avatarPath, pngMimeType]\n    }\n  }\n\n  async getAvatarBase64(userLogin: string): Promise<string> {\n    const userAvatarPath = path.join(UserModel.getHomePath(userLogin), this.userAvatarFileName)\n    return convertImageToBase64((await isPathExists(userAvatarPath)) ? userAvatarPath : this.defaultAvatarFilePath)\n  }\n\n  setOnlineStatus(user: JwtIdentityPayload, onlineStatus: USER_ONLINE_STATUS) {\n    this.usersQueries.setOnlineStatus(user.id, onlineStatus).catch((e: Error) => this.logger.error(`${this.setOnlineStatus.name} - ${e}`))\n  }\n\n  getOnlineUsers(userIds: number[]): Promise<UserOnline[]> {\n    return this.usersQueries.getOnlineUsers(userIds)\n  }\n\n  async usersWhitelist(userId: number): Promise<number[]> {\n    return this.usersQueries.usersWhitelist(userId)\n  }\n\n  async browseGroups(user: UserModel, name: string): Promise<GroupBrowse> {\n    if (name) {\n      const group: Pick<Group, 'id' | 'name' | 'type'> & { role: UserGroup['role'] } = await this.usersQueries.groupFromName(user.id, name)\n      if (!group) {\n        throw new HttpException('Group not found', HttpStatus.NOT_FOUND)\n      }\n      return { parentGroup: group, members: await this.usersQueries.browseGroupMembers(group.id) }\n    }\n    return { parentGroup: undefined, members: await this.usersQueries.browseRootGroups(user.id) }\n  }\n\n  async getGroup(user: UserModel, groupId: number, withMembers?: true, asAdmin?: boolean): Promise<GroupWithMembers>\n  async getGroup(user: UserModel, groupId: number, withMembers: false, asAdmin?: boolean): Promise<GroupMember>\n  async getGroup(user: UserModel, groupId: number, withMembers = true, asAdmin = false): Promise<GroupMember | GroupWithMembers> {\n    const group = withMembers\n      ? await this.usersQueries.getGroupWithMembers(user.id, groupId, asAdmin)\n      : await this.usersQueries.getGroup(user.id, groupId, asAdmin)\n    if (!group) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    return group\n  }\n\n  async createPersonalGroup(user: UserModel, userCreateOrUpdateGroupDto: UserCreateOrUpdateGroupDto): Promise<GroupMember> {\n    if (!userCreateOrUpdateGroupDto.name) {\n      this.logger.error(`${this.createPersonalGroup.name} - missing group name : ${JSON.stringify(userCreateOrUpdateGroupDto)}`)\n      throw new HttpException('Group name is missing', HttpStatus.BAD_REQUEST)\n    }\n    if (await this.usersQueries.checkGroupNameExists(userCreateOrUpdateGroupDto.name)) {\n      throw new HttpException('Name already used', HttpStatus.BAD_REQUEST)\n    }\n    try {\n      const groupId: number = await this.usersQueries.createPersonalGroup(user.id, userCreateOrUpdateGroupDto)\n      this.logger.log(`${this.createPersonalGroup.name} - group (${groupId}) was created : ${JSON.stringify(userCreateOrUpdateGroupDto)}`)\n      // clear user whitelists\n      this.usersQueries.clearWhiteListCaches([user.id])\n      return this.getGroup(user, groupId, false)\n    } catch (e) {\n      this.logger.error(`${this.createPersonalGroup.name} - group was not created : ${JSON.stringify(userCreateOrUpdateGroupDto)} : ${e}`)\n      throw new HttpException('Unable to create group', HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async updatePersonalGroup(user: UserModel, groupId: number, userCreateOrUpdateGroupDto: UserCreateOrUpdateGroupDto): Promise<GroupMember> {\n    if (!Object.keys(userCreateOrUpdateGroupDto).length) {\n      throw new HttpException('No changes to update', HttpStatus.BAD_REQUEST)\n    }\n    const currentGroup: GroupMember = await this.getGroup(user, groupId, false, user.isAdmin)\n    if (currentGroup.type !== MEMBER_TYPE.PGROUP) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    if (userCreateOrUpdateGroupDto.name && (await this.usersQueries.checkGroupNameExists(userCreateOrUpdateGroupDto.name))) {\n      throw new HttpException('Name already used', HttpStatus.BAD_REQUEST)\n    }\n    try {\n      await this.usersQueries.updateGroup(groupId, userCreateOrUpdateGroupDto)\n    } catch (e) {\n      throw new HttpException(e.message, HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n    return this.getGroup(user, groupId, false, user.isAdmin)\n  }\n\n  async addUsersToGroup(user: UserModel, groupId: number, userIds: number[]): Promise<void> {\n    const currentGroup: GroupWithMembers = await this.getGroup(user, groupId)\n    // only users can be added to users groups\n    // guests and users can be added to personal groups\n    const userWhiteList: number[] = await this.usersQueries.usersWhitelist(\n      user.id,\n      currentGroup.type === MEMBER_TYPE.GROUP ? USER_ROLE.USER : undefined\n    )\n    // ignore user ids that are already group members & filter on user ids allowed to current user\n    userIds = userIds.filter((id) => !currentGroup.members.find((m) => m.id === id)).filter((id) => userWhiteList.indexOf(id) > -1)\n    if (!userIds.length) {\n      throw new HttpException('No users to add to group', HttpStatus.BAD_REQUEST)\n    }\n    return this.usersQueries.updateGroupMembers(groupId, { add: userIds.map((id) => ({ id: id, groupRole: USER_GROUP_ROLE.MEMBER })) })\n  }\n\n  async updateUserFromPersonalGroup(user: UserModel, groupId: number, userId: number, updateUserFromGroupDto: UpdateUserFromGroupDto): Promise<void> {\n    const currentGroup: GroupWithMembers = await this.getGroup(user, groupId)\n    if (currentGroup.type !== MEMBER_TYPE.PGROUP) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    const userToUpdate = currentGroup.members.find((m) => m.id === userId)\n    if (!userToUpdate) {\n      throw new HttpException('User was not found', HttpStatus.BAD_REQUEST)\n    }\n    if (userToUpdate.groupRole !== updateUserFromGroupDto.role) {\n      if (userToUpdate.groupRole === USER_GROUP_ROLE.MANAGER) {\n        if (currentGroup.members.filter((m) => m.groupRole === USER_GROUP_ROLE.MANAGER).length === 1) {\n          throw new HttpException('Group must have at least one manager', HttpStatus.BAD_REQUEST)\n        }\n      }\n      return this.adminUsersManager.updateUserFromGroup(groupId, userId, updateUserFromGroupDto)\n    }\n  }\n\n  async removeUserFromGroup(user: UserModel, groupId: number, userId: number): Promise<void> {\n    const currentGroup: GroupWithMembers = await this.getGroup(user, groupId)\n    const userToRemove = currentGroup.members.find((m) => m.id === userId)\n    if (!userToRemove) {\n      throw new HttpException('User was not found', HttpStatus.BAD_REQUEST)\n    }\n    if (userToRemove.groupRole === USER_GROUP_ROLE.MANAGER) {\n      if (currentGroup.type === MEMBER_TYPE.GROUP) {\n        throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n      }\n      if (currentGroup.members.filter((m) => m.groupRole === USER_GROUP_ROLE.MANAGER).length === 1) {\n        throw new HttpException('Group must have at least one manager', HttpStatus.BAD_REQUEST)\n      }\n    }\n    return this.usersQueries.updateGroupMembers(groupId, { remove: [userId] })\n  }\n\n  async leavePersonalGroup(user: UserModel, groupId: number): Promise<void> {\n    const currentGroup: GroupWithMembers = await this.usersQueries.getGroupWithMembers(user.id, groupId, true)\n    if (!currentGroup || currentGroup.type === MEMBER_TYPE.GROUP || !currentGroup.members.find((m) => m.id === user.id)) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    const userWhoLeaves = currentGroup.members.find((m) => m.id === user.id)\n    if (!userWhoLeaves) {\n      throw new HttpException('User was not found', HttpStatus.BAD_REQUEST)\n    }\n    if (userWhoLeaves.groupRole === USER_GROUP_ROLE.MANAGER) {\n      if (currentGroup.members.filter((m) => m.groupRole === USER_GROUP_ROLE.MANAGER).length === 1) {\n        throw new HttpException('Group must have at least one manager', HttpStatus.BAD_REQUEST)\n      }\n    }\n    try {\n      await this.usersQueries.updateGroupMembers(groupId, { remove: [user.id] })\n      this.logger.log(`${this.leavePersonalGroup.name} - user (${user.id}) has left group (${groupId})`)\n    } catch (e) {\n      this.logger.error(`${this.leavePersonalGroup.name} - user (${user.id}) has not left group (${groupId}) : ${e}`)\n      throw new HttpException(e.message, HttpStatus.INTERNAL_SERVER_ERROR)\n    }\n  }\n\n  async deletePersonalGroup(user: UserModel, groupId: number): Promise<void> {\n    if (!(await this.usersQueries.canDeletePersonalGroup(user.id, groupId))) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    if (await this.usersQueries.deletePersonalGroup(groupId)) {\n      this.logger.log(`${this.deletePersonalGroup.name} - group (${groupId}) was deleted`)\n    } else {\n      this.logger.warn(`${this.deletePersonalGroup.name} - group (${groupId}) does not exist`)\n      throw new HttpException('Unable to delete group', HttpStatus.BAD_REQUEST)\n    }\n  }\n\n  listGuests(user: UserModel): Promise<GuestUser[]> {\n    return this.usersQueries.listGuests(null, user.id)\n  }\n\n  async getGuest(user: UserModel, guestId: number): Promise<GuestUser> {\n    const guest: GuestUser = await this.usersQueries.listGuests(guestId, user.id)\n    this.adminUsersManager.checkUser(guest, true)\n    return guest\n  }\n\n  async createGuest(user: UserModel, createGuestDto: CreateUserDto): Promise<GuestUser> {\n    // filter managers that are allowed for current user\n    const userWhiteList = await this.usersQueries.usersWhitelist(user.id, USER_ROLE.USER)\n    createGuestDto.managers = createGuestDto.managers.filter((id) => userWhiteList.indexOf(id) > -1)\n    if (createGuestDto.managers.indexOf(user.id) === -1) {\n      // force user as manager during creation\n      createGuestDto.managers.push(user.id)\n    }\n    // clear user whitelists\n    this.usersQueries.clearWhiteListCaches([user.id])\n    return this.adminUsersManager.createUserOrGuest(createGuestDto, USER_ROLE.GUEST, true)\n  }\n\n  async updateGuest(user: UserModel, guestId: number, updateGuestDto: UpdateUserDto): Promise<GuestUser> {\n    if (!Object.keys(updateGuestDto).length) {\n      throw new HttpException('No changes to update', HttpStatus.BAD_REQUEST)\n    }\n    if (updateGuestDto.managers) {\n      // filter managers that are allowed for current user\n      const userWhiteList = await this.usersQueries.usersWhitelist(user.id, USER_ROLE.USER)\n      updateGuestDto.managers = updateGuestDto.managers.filter((id) => userWhiteList.indexOf(id) > -1)\n      if (!updateGuestDto.managers.length) {\n        throw new HttpException('Guest must have at least one manager', HttpStatus.BAD_REQUEST)\n      }\n    }\n    if (!(await this.usersQueries.isGuestManager(user.id, guestId))) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    const guest = await this.adminUsersManager.updateUserOrGuest(guestId, updateGuestDto, USER_ROLE.GUEST)\n    return guest.managers.find((m) => m.id === user.id) ? guest : null\n  }\n\n  async deleteGuest(user: UserModel, guestId: number): Promise<void> {\n    const guest = await this.usersQueries.isGuestManager(user.id, guestId)\n    if (!guest) {\n      throw new HttpException('You are not allowed to do this action', HttpStatus.FORBIDDEN)\n    }\n    // guest has no space but a temporary directory\n    return this.adminUsersManager.deleteUserOrGuest(guest.id, guest.login, { deleteSpace: true, isGuest: true })\n  }\n\n  searchMembers(user: UserModel, searchMembersDto: SearchMembersDto): Promise<Member[]> {\n    return this.usersQueries.searchUsersOrGroups(searchMembersDto, user.id)\n  }\n}\n"],"names":["UsersManager","fromUserId","id","user","usersQueries","from","UserModel","findUser","loginOrEmail","removePassword","logUser","password","ip","role","USER_ROLE","LINK","logger","error","name","HttpException","HttpStatus","FORBIDDEN","isActive","passwordAttempts","USER_MAX_PASSWORD_ATTEMPTS","updateAccesses","catch","e","login","authSuccess","comparePassword","makePaths","warn","me","authUser","NOT_FOUND","impersonated","impersonatedFromId","clientId","compareUserPassword","userId","updateLanguage","userLanguageDto","language","updateUserOrGuest","INTERNAL_SERVER_ERROR","updatePassword","userPasswordDto","r","selectUserProperties","oldPassword","BAD_REQUEST","hash","bcrypt","newPassword","updateNotification","userNotificationDto","updateAvatar","req","part","file","limits","fileSize","maxAvatarUploadSize","mimetype","startsWith","dstPath","path","join","tmpPath","userAvatarFileName","pipeline","createWriteStream","truncated","PAYLOAD_TOO_LARGE","moveFiles","homePath","success","Math","min","lastAccess","currentAccess","Date","lastIp","currentIp","getAvatar","userLogin","generate","generateIsNotExists","avatarPath","getHomePath","avatarExists","isPathExists","defaultAvatarFilePath","pngMimeType","svgMimeType","avatarFile","avatarStream","generateAvatar","getInitials","getAvatarBase64","userAvatarPath","convertImageToBase64","setOnlineStatus","onlineStatus","getOnlineUsers","userIds","usersWhitelist","browseGroups","group","groupFromName","parentGroup","members","browseGroupMembers","undefined","browseRootGroups","getGroup","groupId","withMembers","asAdmin","getGroupWithMembers","createPersonalGroup","userCreateOrUpdateGroupDto","JSON","stringify","checkGroupNameExists","log","clearWhiteListCaches","updatePersonalGroup","Object","keys","length","currentGroup","isAdmin","type","MEMBER_TYPE","PGROUP","updateGroup","message","addUsersToGroup","userWhiteList","GROUP","USER","filter","find","m","indexOf","updateGroupMembers","add","map","groupRole","USER_GROUP_ROLE","MEMBER","updateUserFromPersonalGroup","updateUserFromGroupDto","userToUpdate","MANAGER","adminUsersManager","updateUserFromGroup","removeUserFromGroup","userToRemove","remove","leavePersonalGroup","userWhoLeaves","deletePersonalGroup","canDeletePersonalGroup","listGuests","getGuest","guestId","guest","checkUser","createGuest","createGuestDto","managers","push","createUserOrGuest","GUEST","updateGuest","updateGuestDto","isGuestManager","deleteGuest","deleteUserOrGuest","deleteSpace","isGuest","searchMembers","searchMembersDto","searchUsersOrGroups","STATIC_ASSETS_PATH","Logger"],"mappings":"AAAA;;;;CAIC;;;;+BAmCYA;;;eAAAA;;;wBAhCiD;iEAC3C;wBAGe;iEACjB;0BACQ;2BAGO;uBAC+C;iCAC5C;uBACK;wBACZ;sBAC+D;2BAUjE;0CAIQ;qCACL;;;;;;;;;;;;;;;AAGtB,IAAA,AAAMA,eAAN,MAAMA;IAWX,MAAMC,WAAWC,EAAU,EAAsB;QAC/C,MAAMC,OAAa,MAAM,IAAI,CAACC,YAAY,CAACC,IAAI,CAACH;QAChD,OAAOC,OAAO,IAAIG,oBAAS,CAACH,MAAM,QAAQ;IAC5C;IAIA,MAAMI,SAASC,YAAoB,EAAEC,iBAA0B,IAAI,EAAwC;QACzG,MAAMN,OAAa,MAAM,IAAI,CAACC,YAAY,CAACC,IAAI,CAAC,MAAMG;QACtD,OAAOL,OAAO,IAAIG,oBAAS,CAACH,MAAMM,kBAAkB;IACtD;IAEA,MAAMC,QAAQP,IAAe,EAAEQ,QAAgB,EAAEC,EAAU,EAAsB;QAC/E,IAAIT,KAAKU,IAAI,KAAKC,eAAS,CAACC,IAAI,EAAE;YAChC,IAAI,CAACC,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACP,OAAO,CAACQ,IAAI,CAAC,sBAAsB,EAAEf,KAAK,2BAA2B,CAAC;YAChG,MAAM,IAAIgB,qBAAa,CAAC,0BAA0BC,kBAAU,CAACC,SAAS;QACxE;QACA,IAAI,CAAClB,KAAKmB,QAAQ,IAAInB,KAAKoB,gBAAgB,IAAIC,gCAA0B,EAAE;YACzE,IAAI,CAACC,cAAc,CAACtB,MAAMS,IAAI,OAAOc,KAAK,CAAC,CAACC,IAAa,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACP,OAAO,CAACQ,IAAI,CAAC,GAAG,EAAES,GAAG;YACxG,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACP,OAAO,CAACQ,IAAI,CAAC,iBAAiB,EAAEf,KAAKyB,KAAK,CAAC,WAAW,CAAC;YACjF,MAAM,IAAIT,qBAAa,CAAC,kBAAkBC,kBAAU,CAACC,SAAS;QAChE;QACA,MAAMQ,cAAuB,MAAMC,IAAAA,0BAAe,EAACnB,UAAUR,KAAKQ,QAAQ;QAC1E,IAAI,CAACc,cAAc,CAACtB,MAAMS,IAAIiB,aAAaH,KAAK,CAAC,CAACC,IAAa,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACP,OAAO,CAACQ,IAAI,CAAC,GAAG,EAAES,GAAG;QAC9G,IAAIE,aAAa;YACf,MAAM1B,KAAK4B,SAAS;YACpB,OAAO5B;QACT;QACA,IAAI,CAACa,MAAM,CAACgB,IAAI,CAAC,GAAG,IAAI,CAACtB,OAAO,CAACQ,IAAI,CAAC,qBAAqB,EAAEf,KAAKyB,KAAK,CAAC,CAAC,CAAC;QAC1E,OAAO;IACT;IAEA,MAAMK,GAAGC,QAAmB,EAAkD;QAC5E,MAAM/B,OAAO,MAAM,IAAI,CAACF,UAAU,CAACiC,SAAShC,EAAE;QAC9C,IAAI,CAACC,MAAM;YACT,MAAM,IAAIgB,qBAAa,CAAC,CAAC,MAAM,EAAEe,SAASN,KAAK,CAAC,EAAE,EAAEM,SAAShC,EAAE,CAAC,WAAW,CAAC,EAAEkB,kBAAU,CAACe,SAAS;QACpG;QACAhC,KAAKiC,YAAY,GAAG,CAAC,CAACF,SAASG,kBAAkB;QACjDlC,KAAKmC,QAAQ,GAAGJ,SAASI,QAAQ;QACjC,OAAO;YAAEnC,MAAMA;QAAK;IACtB;IAEA,MAAMoC,oBAAoBC,MAAc,EAAE7B,QAAgB,EAAoB;QAC5E,OAAO,IAAI,CAACP,YAAY,CAACmC,mBAAmB,CAACC,QAAQ7B;IACvD;IAEA,MAAM8B,eAAetC,IAAe,EAAEuC,eAAgC,EAAE;QACtE,IAAI,CAACA,gBAAgBC,QAAQ,EAAED,gBAAgBC,QAAQ,GAAG;QAC1D,IAAI,CAAE,MAAM,IAAI,CAACvC,YAAY,CAACwC,iBAAiB,CAACzC,KAAKD,EAAE,EAAEwC,kBAAmB;YAC1E,MAAM,IAAIvB,qBAAa,CAAC,6BAA6BC,kBAAU,CAACyB,qBAAqB;QACvF;IACF;IAEA,MAAMC,eAAe3C,IAAe,EAAE4C,eAAgC,EAAE;QACtE,MAAMC,IAAI,MAAM,IAAI,CAAC5C,YAAY,CAAC6C,oBAAoB,CAAC9C,KAAKD,EAAE,EAAE;YAAC;SAAW;QAC5E,IAAI,CAAC8C,GAAG;YACN,MAAM,IAAI7B,qBAAa,CAAC,4BAA4BC,kBAAU,CAACe,SAAS;QAC1E;QACA,IAAI,CAAE,MAAML,IAAAA,0BAAe,EAACiB,gBAAgBG,WAAW,EAAEF,EAAErC,QAAQ,GAAI;YACrE,MAAM,IAAIQ,qBAAa,CAAC,qBAAqBC,kBAAU,CAAC+B,WAAW;QACrE;QACA,MAAMC,OAAO,MAAMC,iBAAM,CAACD,IAAI,CAACL,gBAAgBO,WAAW,EAAE;QAC5D,IAAI,CAAE,MAAM,IAAI,CAAClD,YAAY,CAACwC,iBAAiB,CAACzC,KAAKD,EAAE,EAAE;YAAES,UAAUyC;QAAK,IAAK;YAC7E,MAAM,IAAIjC,qBAAa,CAAC,6BAA6BC,kBAAU,CAACyB,qBAAqB;QACvF;IACF;IAEA,MAAMU,mBAAmBpD,IAAe,EAAEqD,mBAAwC,EAAE;QAClF,IAAI,CAAE,MAAM,IAAI,CAACpD,YAAY,CAACwC,iBAAiB,CAACzC,KAAKD,EAAE,EAAEsD,sBAAuB;YAC9E,MAAM,IAAIrC,qBAAa,CAAC,iCAAiCC,kBAAU,CAACyB,qBAAqB;QAC3F;IACF;IAEA,MAAMY,aAAaC,GAAgC,EAAE;QACnD,MAAMC,OAAsB,MAAMD,IAAIE,IAAI,CAAC;YAAEC,QAAQ;gBAAEC,UAAU,IAAI,CAACC,mBAAmB;YAAC;QAAE;QAC5F,IAAI,CAACJ,KAAKK,QAAQ,CAACC,UAAU,CAAC,WAAW;YACvC,MAAM,IAAI9C,qBAAa,CAAC,yBAAyBC,kBAAU,CAAC+B,WAAW;QACzE;QACA,MAAMe,UAAUC,iBAAI,CAACC,IAAI,CAACV,IAAIvD,IAAI,CAACkE,OAAO,EAAE,IAAI,CAACC,kBAAkB;QACnE,IAAI;YACF,MAAMC,IAAAA,kBAAQ,EAACZ,KAAKC,IAAI,EAAEY,IAAAA,yBAAiB,EAACN;QAC9C,EAAE,OAAOvC,GAAG;YACV,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACwC,YAAY,CAACvC,IAAI,CAAC,GAAG,EAAES,GAAG;YACpD,MAAM,IAAIR,qBAAa,CAAC,2BAA2BC,kBAAU,CAACyB,qBAAqB;QACrF;QACA,IAAIc,KAAKC,IAAI,CAACa,SAAS,EAAE;YACvB,IAAI,CAACzD,MAAM,CAACgB,IAAI,CAAC,GAAG,IAAI,CAACyB,YAAY,CAACvC,IAAI,CAAC,qBAAqB,CAAC;YACjE,MAAM,IAAIC,qBAAa,CAAC,gCAAgCC,kBAAU,CAACsD,iBAAiB;QACtF;QACA,IAAI;YACF,MAAMC,IAAAA,gBAAS,EAACT,SAASC,iBAAI,CAACC,IAAI,CAACV,IAAIvD,IAAI,CAACyE,QAAQ,EAAE,IAAI,CAACN,kBAAkB,GAAG;QAClF,EAAE,OAAO3C,GAAG;YACV,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACwC,YAAY,CAACvC,IAAI,CAAC,GAAG,EAAES,GAAG;YACpD,MAAM,IAAIR,qBAAa,CAAC,2BAA2BC,kBAAU,CAACyB,qBAAqB;QACrF;IACF;IAEA,MAAMpB,eAAetB,IAAe,EAAES,EAAU,EAAEiE,OAAgB,EAAE;QAClE,MAAMtD,mBAAmBsD,UAAU,IAAIC,KAAKC,GAAG,CAAC5E,KAAKoB,gBAAgB,GAAG,GAAGC,gCAA0B;QACrG,MAAM,IAAI,CAACpB,YAAY,CAACwC,iBAAiB,CAACzC,KAAKD,EAAE,EAAE;YACjD8E,YAAY7E,KAAK8E,aAAa;YAC9BA,eAAe,IAAIC;YACnBC,QAAQhF,KAAKiF,SAAS;YACtBA,WAAWxE;YACXW,kBAAkBA;YAClBD,UAAUnB,KAAKmB,QAAQ,IAAIC,mBAAmBC,gCAA0B;QAC1E;IACF;IAIA,MAAM6D,UAAUC,SAAiB,EAAEC,WAAoB,KAAK,EAAEC,mBAA6B,EAAyC;QAClI,MAAMC,aAAatB,iBAAI,CAACC,IAAI,CAAC9D,oBAAS,CAACoF,WAAW,CAACJ,YAAY,IAAI,CAAChB,kBAAkB;QACtF,MAAMqB,eAAe,MAAMC,IAAAA,mBAAY,EAACH;QACxC,IAAI,CAACE,gBAAgBH,qBAAqB;YACxCD,WAAW;QACb;QACA,IAAI,CAACA,UAAU;YACb,OAAO;gBAACI,eAAeF,aAAa,IAAI,CAACI,qBAAqB;gBAAEF,eAAeG,kBAAW,GAAGC,kBAAW;aAAC;QAC3G;QACA,IAAI,CAAE,MAAMH,IAAAA,mBAAY,EAACtF,oBAAS,CAACoF,WAAW,CAACJ,aAAc;YAC3D,MAAM,IAAInE,qBAAa,CAAC,CAAC,oBAAoB,EAAEmE,UAAU,gBAAgB,CAAC,EAAElE,kBAAU,CAACC,SAAS;QAClG;QACA,MAAMlB,OAA2B,MAAM,IAAI,CAACI,QAAQ,CAAC+E;QACrD,IAAI,CAACnF,MAAM;YACT,MAAM,IAAIgB,qBAAa,CAAC,CAAC,gBAAgB,CAAC,EAAEC,kBAAU,CAACe,SAAS;QAClE;QACA,MAAM6D,aAA0BxB,IAAAA,yBAAiB,EAACiB;QAClD,MAAMQ,eAA0BC,IAAAA,qBAAc,EAAC/F,KAAKgG,WAAW;QAC/D,IAAI;YACF,MAAM5B,IAAAA,kBAAQ,EAAC0B,cAAcD;QAC/B,EAAE,OAAOrE,GAAG;YACV,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACwC,YAAY,CAACvC,IAAI,CAAC,GAAG,EAAES,GAAG;YACpD,MAAM,IAAIR,qBAAa,CAAC,2BAA2BC,kBAAU,CAACyB,qBAAqB;QACrF;QACA,IAAI2C,qBAAqB;YACvB,OAAO;gBAACC;gBAAYK,kBAAW;aAAC;QAClC;IACF;IAEA,MAAMM,gBAAgBd,SAAiB,EAAmB;QACxD,MAAMe,iBAAiBlC,iBAAI,CAACC,IAAI,CAAC9D,oBAAS,CAACoF,WAAW,CAACJ,YAAY,IAAI,CAAChB,kBAAkB;QAC1F,OAAOgC,IAAAA,2BAAoB,EAAC,AAAC,MAAMV,IAAAA,mBAAY,EAACS,kBAAmBA,iBAAiB,IAAI,CAACR,qBAAqB;IAChH;IAEAU,gBAAgBpG,IAAwB,EAAEqG,YAAgC,EAAE;QAC1E,IAAI,CAACpG,YAAY,CAACmG,eAAe,CAACpG,KAAKD,EAAE,EAAEsG,cAAc9E,KAAK,CAAC,CAACC,IAAa,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACsF,eAAe,CAACrF,IAAI,CAAC,GAAG,EAAES,GAAG;IACtI;IAEA8E,eAAeC,OAAiB,EAAyB;QACvD,OAAO,IAAI,CAACtG,YAAY,CAACqG,cAAc,CAACC;IAC1C;IAEA,MAAMC,eAAenE,MAAc,EAAqB;QACtD,OAAO,IAAI,CAACpC,YAAY,CAACuG,cAAc,CAACnE;IAC1C;IAEA,MAAMoE,aAAazG,IAAe,EAAEe,IAAY,EAAwB;QACtE,IAAIA,MAAM;YACR,MAAM2F,QAA2E,MAAM,IAAI,CAACzG,YAAY,CAAC0G,aAAa,CAAC3G,KAAKD,EAAE,EAAEgB;YAChI,IAAI,CAAC2F,OAAO;gBACV,MAAM,IAAI1F,qBAAa,CAAC,mBAAmBC,kBAAU,CAACe,SAAS;YACjE;YACA,OAAO;gBAAE4E,aAAaF;gBAAOG,SAAS,MAAM,IAAI,CAAC5G,YAAY,CAAC6G,kBAAkB,CAACJ,MAAM3G,EAAE;YAAE;QAC7F;QACA,OAAO;YAAE6G,aAAaG;YAAWF,SAAS,MAAM,IAAI,CAAC5G,YAAY,CAAC+G,gBAAgB,CAAChH,KAAKD,EAAE;QAAE;IAC9F;IAIA,MAAMkH,SAASjH,IAAe,EAAEkH,OAAe,EAAEC,cAAc,IAAI,EAAEC,UAAU,KAAK,EAA2C;QAC7H,MAAMV,QAAQS,cACV,MAAM,IAAI,CAAClH,YAAY,CAACoH,mBAAmB,CAACrH,KAAKD,EAAE,EAAEmH,SAASE,WAC9D,MAAM,IAAI,CAACnH,YAAY,CAACgH,QAAQ,CAACjH,KAAKD,EAAE,EAAEmH,SAASE;QACvD,IAAI,CAACV,OAAO;YACV,MAAM,IAAI1F,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,OAAOwF;IACT;IAEA,MAAMY,oBAAoBtH,IAAe,EAAEuH,0BAAsD,EAAwB;QACvH,IAAI,CAACA,2BAA2BxG,IAAI,EAAE;YACpC,IAAI,CAACF,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACwG,mBAAmB,CAACvG,IAAI,CAAC,wBAAwB,EAAEyG,KAAKC,SAAS,CAACF,6BAA6B;YACzH,MAAM,IAAIvG,qBAAa,CAAC,yBAAyBC,kBAAU,CAAC+B,WAAW;QACzE;QACA,IAAI,MAAM,IAAI,CAAC/C,YAAY,CAACyH,oBAAoB,CAACH,2BAA2BxG,IAAI,GAAG;YACjF,MAAM,IAAIC,qBAAa,CAAC,qBAAqBC,kBAAU,CAAC+B,WAAW;QACrE;QACA,IAAI;YACF,MAAMkE,UAAkB,MAAM,IAAI,CAACjH,YAAY,CAACqH,mBAAmB,CAACtH,KAAKD,EAAE,EAAEwH;YAC7E,IAAI,CAAC1G,MAAM,CAAC8G,GAAG,CAAC,GAAG,IAAI,CAACL,mBAAmB,CAACvG,IAAI,CAAC,UAAU,EAAEmG,QAAQ,gBAAgB,EAAEM,KAAKC,SAAS,CAACF,6BAA6B;YACnI,wBAAwB;YACxB,IAAI,CAACtH,YAAY,CAAC2H,oBAAoB,CAAC;gBAAC5H,KAAKD,EAAE;aAAC;YAChD,OAAO,IAAI,CAACkH,QAAQ,CAACjH,MAAMkH,SAAS;QACtC,EAAE,OAAO1F,GAAG;YACV,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACwG,mBAAmB,CAACvG,IAAI,CAAC,2BAA2B,EAAEyG,KAAKC,SAAS,CAACF,4BAA4B,GAAG,EAAE/F,GAAG;YACnI,MAAM,IAAIR,qBAAa,CAAC,0BAA0BC,kBAAU,CAACyB,qBAAqB;QACpF;IACF;IAEA,MAAMmF,oBAAoB7H,IAAe,EAAEkH,OAAe,EAAEK,0BAAsD,EAAwB;QACxI,IAAI,CAACO,OAAOC,IAAI,CAACR,4BAA4BS,MAAM,EAAE;YACnD,MAAM,IAAIhH,qBAAa,CAAC,wBAAwBC,kBAAU,CAAC+B,WAAW;QACxE;QACA,MAAMiF,eAA4B,MAAM,IAAI,CAAChB,QAAQ,CAACjH,MAAMkH,SAAS,OAAOlH,KAAKkI,OAAO;QACxF,IAAID,aAAaE,IAAI,KAAKC,mBAAW,CAACC,MAAM,EAAE;YAC5C,MAAM,IAAIrH,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,IAAIqG,2BAA2BxG,IAAI,IAAK,MAAM,IAAI,CAACd,YAAY,CAACyH,oBAAoB,CAACH,2BAA2BxG,IAAI,GAAI;YACtH,MAAM,IAAIC,qBAAa,CAAC,qBAAqBC,kBAAU,CAAC+B,WAAW;QACrE;QACA,IAAI;YACF,MAAM,IAAI,CAAC/C,YAAY,CAACqI,WAAW,CAACpB,SAASK;QAC/C,EAAE,OAAO/F,GAAG;YACV,MAAM,IAAIR,qBAAa,CAACQ,EAAE+G,OAAO,EAAEtH,kBAAU,CAACyB,qBAAqB;QACrE;QACA,OAAO,IAAI,CAACuE,QAAQ,CAACjH,MAAMkH,SAAS,OAAOlH,KAAKkI,OAAO;IACzD;IAEA,MAAMM,gBAAgBxI,IAAe,EAAEkH,OAAe,EAAEX,OAAiB,EAAiB;QACxF,MAAM0B,eAAiC,MAAM,IAAI,CAAChB,QAAQ,CAACjH,MAAMkH;QACjE,0CAA0C;QAC1C,mDAAmD;QACnD,MAAMuB,gBAA0B,MAAM,IAAI,CAACxI,YAAY,CAACuG,cAAc,CACpExG,KAAKD,EAAE,EACPkI,aAAaE,IAAI,KAAKC,mBAAW,CAACM,KAAK,GAAG/H,eAAS,CAACgI,IAAI,GAAG5B;QAE7D,8FAA8F;QAC9FR,UAAUA,QAAQqC,MAAM,CAAC,CAAC7I,KAAO,CAACkI,aAAapB,OAAO,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKA,KAAK6I,MAAM,CAAC,CAAC7I,KAAO0I,cAAcM,OAAO,CAAChJ,MAAM,CAAC;QAC7H,IAAI,CAACwG,QAAQyB,MAAM,EAAE;YACnB,MAAM,IAAIhH,qBAAa,CAAC,4BAA4BC,kBAAU,CAAC+B,WAAW;QAC5E;QACA,OAAO,IAAI,CAAC/C,YAAY,CAAC+I,kBAAkB,CAAC9B,SAAS;YAAE+B,KAAK1C,QAAQ2C,GAAG,CAAC,CAACnJ,KAAQ,CAAA;oBAAEA,IAAIA;oBAAIoJ,WAAWC,qBAAe,CAACC,MAAM;gBAAC,CAAA;QAAI;IACnI;IAEA,MAAMC,4BAA4BtJ,IAAe,EAAEkH,OAAe,EAAE7E,MAAc,EAAEkH,sBAA8C,EAAiB;QACjJ,MAAMtB,eAAiC,MAAM,IAAI,CAAChB,QAAQ,CAACjH,MAAMkH;QACjE,IAAIe,aAAaE,IAAI,KAAKC,mBAAW,CAACC,MAAM,EAAE;YAC5C,MAAM,IAAIrH,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,MAAMsI,eAAevB,aAAapB,OAAO,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKsC;QAC/D,IAAI,CAACmH,cAAc;YACjB,MAAM,IAAIxI,qBAAa,CAAC,sBAAsBC,kBAAU,CAAC+B,WAAW;QACtE;QACA,IAAIwG,aAAaL,SAAS,KAAKI,uBAAuB7I,IAAI,EAAE;YAC1D,IAAI8I,aAAaL,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAE;gBACtD,IAAIxB,aAAapB,OAAO,CAAC+B,MAAM,CAAC,CAACE,IAAMA,EAAEK,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAEzB,MAAM,KAAK,GAAG;oBAC5F,MAAM,IAAIhH,qBAAa,CAAC,wCAAwCC,kBAAU,CAAC+B,WAAW;gBACxF;YACF;YACA,OAAO,IAAI,CAAC0G,iBAAiB,CAACC,mBAAmB,CAACzC,SAAS7E,QAAQkH;QACrE;IACF;IAEA,MAAMK,oBAAoB5J,IAAe,EAAEkH,OAAe,EAAE7E,MAAc,EAAiB;QACzF,MAAM4F,eAAiC,MAAM,IAAI,CAAChB,QAAQ,CAACjH,MAAMkH;QACjE,MAAM2C,eAAe5B,aAAapB,OAAO,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKsC;QAC/D,IAAI,CAACwH,cAAc;YACjB,MAAM,IAAI7I,qBAAa,CAAC,sBAAsBC,kBAAU,CAAC+B,WAAW;QACtE;QACA,IAAI6G,aAAaV,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAE;YACtD,IAAIxB,aAAaE,IAAI,KAAKC,mBAAW,CAACM,KAAK,EAAE;gBAC3C,MAAM,IAAI1H,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;YACvF;YACA,IAAI+G,aAAapB,OAAO,CAAC+B,MAAM,CAAC,CAACE,IAAMA,EAAEK,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAEzB,MAAM,KAAK,GAAG;gBAC5F,MAAM,IAAIhH,qBAAa,CAAC,wCAAwCC,kBAAU,CAAC+B,WAAW;YACxF;QACF;QACA,OAAO,IAAI,CAAC/C,YAAY,CAAC+I,kBAAkB,CAAC9B,SAAS;YAAE4C,QAAQ;gBAACzH;aAAO;QAAC;IAC1E;IAEA,MAAM0H,mBAAmB/J,IAAe,EAAEkH,OAAe,EAAiB;QACxE,MAAMe,eAAiC,MAAM,IAAI,CAAChI,YAAY,CAACoH,mBAAmB,CAACrH,KAAKD,EAAE,EAAEmH,SAAS;QACrG,IAAI,CAACe,gBAAgBA,aAAaE,IAAI,KAAKC,mBAAW,CAACM,KAAK,IAAI,CAACT,aAAapB,OAAO,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKC,KAAKD,EAAE,GAAG;YACnH,MAAM,IAAIiB,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,MAAM8I,gBAAgB/B,aAAapB,OAAO,CAACgC,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKC,KAAKD,EAAE;QACvE,IAAI,CAACiK,eAAe;YAClB,MAAM,IAAIhJ,qBAAa,CAAC,sBAAsBC,kBAAU,CAAC+B,WAAW;QACtE;QACA,IAAIgH,cAAcb,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAE;YACvD,IAAIxB,aAAapB,OAAO,CAAC+B,MAAM,CAAC,CAACE,IAAMA,EAAEK,SAAS,KAAKC,qBAAe,CAACK,OAAO,EAAEzB,MAAM,KAAK,GAAG;gBAC5F,MAAM,IAAIhH,qBAAa,CAAC,wCAAwCC,kBAAU,CAAC+B,WAAW;YACxF;QACF;QACA,IAAI;YACF,MAAM,IAAI,CAAC/C,YAAY,CAAC+I,kBAAkB,CAAC9B,SAAS;gBAAE4C,QAAQ;oBAAC9J,KAAKD,EAAE;iBAAC;YAAC;YACxE,IAAI,CAACc,MAAM,CAAC8G,GAAG,CAAC,GAAG,IAAI,CAACoC,kBAAkB,CAAChJ,IAAI,CAAC,SAAS,EAAEf,KAAKD,EAAE,CAAC,kBAAkB,EAAEmH,QAAQ,CAAC,CAAC;QACnG,EAAE,OAAO1F,GAAG;YACV,IAAI,CAACX,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACiJ,kBAAkB,CAAChJ,IAAI,CAAC,SAAS,EAAEf,KAAKD,EAAE,CAAC,sBAAsB,EAAEmH,QAAQ,IAAI,EAAE1F,GAAG;YAC9G,MAAM,IAAIR,qBAAa,CAACQ,EAAE+G,OAAO,EAAEtH,kBAAU,CAACyB,qBAAqB;QACrE;IACF;IAEA,MAAMuH,oBAAoBjK,IAAe,EAAEkH,OAAe,EAAiB;QACzE,IAAI,CAAE,MAAM,IAAI,CAACjH,YAAY,CAACiK,sBAAsB,CAAClK,KAAKD,EAAE,EAAEmH,UAAW;YACvE,MAAM,IAAIlG,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,IAAI,MAAM,IAAI,CAACjB,YAAY,CAACgK,mBAAmB,CAAC/C,UAAU;YACxD,IAAI,CAACrG,MAAM,CAAC8G,GAAG,CAAC,GAAG,IAAI,CAACsC,mBAAmB,CAAClJ,IAAI,CAAC,UAAU,EAAEmG,QAAQ,aAAa,CAAC;QACrF,OAAO;YACL,IAAI,CAACrG,MAAM,CAACgB,IAAI,CAAC,GAAG,IAAI,CAACoI,mBAAmB,CAAClJ,IAAI,CAAC,UAAU,EAAEmG,QAAQ,gBAAgB,CAAC;YACvF,MAAM,IAAIlG,qBAAa,CAAC,0BAA0BC,kBAAU,CAAC+B,WAAW;QAC1E;IACF;IAEAmH,WAAWnK,IAAe,EAAwB;QAChD,OAAO,IAAI,CAACC,YAAY,CAACkK,UAAU,CAAC,MAAMnK,KAAKD,EAAE;IACnD;IAEA,MAAMqK,SAASpK,IAAe,EAAEqK,OAAe,EAAsB;QACnE,MAAMC,QAAmB,MAAM,IAAI,CAACrK,YAAY,CAACkK,UAAU,CAACE,SAASrK,KAAKD,EAAE;QAC5E,IAAI,CAAC2J,iBAAiB,CAACa,SAAS,CAACD,OAAO;QACxC,OAAOA;IACT;IAEA,MAAME,YAAYxK,IAAe,EAAEyK,cAA6B,EAAsB;QACpF,oDAAoD;QACpD,MAAMhC,gBAAgB,MAAM,IAAI,CAACxI,YAAY,CAACuG,cAAc,CAACxG,KAAKD,EAAE,EAAEY,eAAS,CAACgI,IAAI;QACpF8B,eAAeC,QAAQ,GAAGD,eAAeC,QAAQ,CAAC9B,MAAM,CAAC,CAAC7I,KAAO0I,cAAcM,OAAO,CAAChJ,MAAM,CAAC;QAC9F,IAAI0K,eAAeC,QAAQ,CAAC3B,OAAO,CAAC/I,KAAKD,EAAE,MAAM,CAAC,GAAG;YACnD,wCAAwC;YACxC0K,eAAeC,QAAQ,CAACC,IAAI,CAAC3K,KAAKD,EAAE;QACtC;QACA,wBAAwB;QACxB,IAAI,CAACE,YAAY,CAAC2H,oBAAoB,CAAC;YAAC5H,KAAKD,EAAE;SAAC;QAChD,OAAO,IAAI,CAAC2J,iBAAiB,CAACkB,iBAAiB,CAACH,gBAAgB9J,eAAS,CAACkK,KAAK,EAAE;IACnF;IAEA,MAAMC,YAAY9K,IAAe,EAAEqK,OAAe,EAAEU,cAA6B,EAAsB;QACrG,IAAI,CAACjD,OAAOC,IAAI,CAACgD,gBAAgB/C,MAAM,EAAE;YACvC,MAAM,IAAIhH,qBAAa,CAAC,wBAAwBC,kBAAU,CAAC+B,WAAW;QACxE;QACA,IAAI+H,eAAeL,QAAQ,EAAE;YAC3B,oDAAoD;YACpD,MAAMjC,gBAAgB,MAAM,IAAI,CAACxI,YAAY,CAACuG,cAAc,CAACxG,KAAKD,EAAE,EAAEY,eAAS,CAACgI,IAAI;YACpFoC,eAAeL,QAAQ,GAAGK,eAAeL,QAAQ,CAAC9B,MAAM,CAAC,CAAC7I,KAAO0I,cAAcM,OAAO,CAAChJ,MAAM,CAAC;YAC9F,IAAI,CAACgL,eAAeL,QAAQ,CAAC1C,MAAM,EAAE;gBACnC,MAAM,IAAIhH,qBAAa,CAAC,wCAAwCC,kBAAU,CAAC+B,WAAW;YACxF;QACF;QACA,IAAI,CAAE,MAAM,IAAI,CAAC/C,YAAY,CAAC+K,cAAc,CAAChL,KAAKD,EAAE,EAAEsK,UAAW;YAC/D,MAAM,IAAIrJ,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,MAAMoJ,QAAQ,MAAM,IAAI,CAACZ,iBAAiB,CAACjH,iBAAiB,CAAC4H,SAASU,gBAAgBpK,eAAS,CAACkK,KAAK;QACrG,OAAOP,MAAMI,QAAQ,CAAC7B,IAAI,CAAC,CAACC,IAAMA,EAAE/I,EAAE,KAAKC,KAAKD,EAAE,IAAIuK,QAAQ;IAChE;IAEA,MAAMW,YAAYjL,IAAe,EAAEqK,OAAe,EAAiB;QACjE,MAAMC,QAAQ,MAAM,IAAI,CAACrK,YAAY,CAAC+K,cAAc,CAAChL,KAAKD,EAAE,EAAEsK;QAC9D,IAAI,CAACC,OAAO;YACV,MAAM,IAAItJ,qBAAa,CAAC,yCAAyCC,kBAAU,CAACC,SAAS;QACvF;QACA,+CAA+C;QAC/C,OAAO,IAAI,CAACwI,iBAAiB,CAACwB,iBAAiB,CAACZ,MAAMvK,EAAE,EAAEuK,MAAM7I,KAAK,EAAE;YAAE0J,aAAa;YAAMC,SAAS;QAAK;IAC5G;IAEAC,cAAcrL,IAAe,EAAEsL,gBAAkC,EAAqB;QACpF,OAAO,IAAI,CAACrL,YAAY,CAACsL,mBAAmB,CAACD,kBAAkBtL,KAAKD,EAAE;IACxE;IA5WA,YACE,AAAiBE,YAA0B,EAC3C,AAAiByJ,iBAAoC,CACrD;aAFiBzJ,eAAAA;aACAyJ,oBAAAA;aAPFhE,wBAAwB1B,iBAAI,CAACC,IAAI,CAACuH,mCAAkB,EAAE;aACtDrH,qBAAqB;aACrBP,sBAAsB,OAAO,OAAO;aACpC/C,SAAS,IAAI4K,cAAM,CAAC5L,aAAakB,IAAI;IAKnD;AA0WL"}