@sync-in/server 1.9.3 → 1.10.0

package/server/applications/files/modules/collabora-online/collabora-online.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../backend/src/applications/files/modules/collabora-online/collabora-online.routes.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport const COLLABORA_ONLINE_ROUTE = {\n  BASE: '/wopi',\n  FILES: 'files',\n  CONTENTS: 'contents',\n  SETTINGS: 'settings'\n} as const\n\nexport const API_COLLABORA_ONLINE_SETTINGS = `${COLLABORA_ONLINE_ROUTE.BASE}/${COLLABORA_ONLINE_ROUTE.SETTINGS}`\nexport const API_COLLABORA_ONLINE_FILES = `${COLLABORA_ONLINE_ROUTE.BASE}/${COLLABORA_ONLINE_ROUTE.FILES}`\n"],"names":["API_COLLABORA_ONLINE_FILES","API_COLLABORA_ONLINE_SETTINGS","COLLABORA_ONLINE_ROUTE","BASE","FILES","CONTENTS","SETTINGS"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAUYA;eAAAA;;QADAC;eAAAA;;QAPAC;eAAAA;;;AAAN,MAAMA,yBAAyB;IACpCC,MAAM;IACNC,OAAO;IACPC,UAAU;IACVC,UAAU;AACZ;AAEO,MAAML,gCAAgC,GAAGC,uBAAuBC,IAAI,CAAC,CAAC,EAAED,uBAAuBI,QAAQ,EAAE;AACzG,MAAMN,6BAA6B,GAAGE,uBAAuBC,IAAI,CAAC,CAAC,EAAED,uBAAuBE,KAAK,EAAE"}

package/server/applications/files/modules/collabora-online/collabora-online.strategy.js

@@ -0,0 +1,59 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "CollaboraOnlineStrategy", {
+    enumerable: true,
+    get: function() {
+        return CollaboraOnlineStrategy;
+    }
+});
+const _common = require("@nestjs/common");
+const _passport = require("@nestjs/passport");
+const _nestjspino = require("nestjs-pino");
+const _passportjwt = require("passport-jwt");
+const _authtokenaccessstrategy = require("../../../../authentication/guards/auth-token-access.strategy");
+const _configenvironment = require("../../../../configuration/config.environment");
+const _usermodel = require("../../../users/models/user.model");
+const _collaboraonlineconstants = require("./collabora-online.constants");
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+let CollaboraOnlineStrategy = class CollaboraOnlineStrategy extends (0, _passport.PassportStrategy)(_passportjwt.Strategy, 'filesCollaboraOnlineToken') {
+    validate(jwtPayload) {
+        this.logger.assign({
+            user: jwtPayload.identity.login
+        });
+        return new _usermodel.UserModel(jwtPayload.identity);
+    }
+    constructor(logger){
+        super({
+            jwtFromRequest: _passportjwt.ExtractJwt.fromExtractors([
+                _authtokenaccessstrategy.AuthTokenAccessStrategy.extractJWTFromCookie,
+                _passportjwt.ExtractJwt.fromUrlQueryParameter(_collaboraonlineconstants.COLLABORA_TOKEN_QUERY_PARAM_NAME)
+            ]),
+            secretOrKey: _configenvironment.configuration.auth.token.access.secret,
+            ignoreExpiration: false,
+            passReqToCallback: false
+        }), this.logger = logger;
+    }
+};
+CollaboraOnlineStrategy = _ts_decorate([
+    (0, _common.Injectable)(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _nestjspino.PinoLogger === "undefined" ? Object : _nestjspino.PinoLogger
+    ])
+], CollaboraOnlineStrategy);
+
+//# sourceMappingURL=collabora-online.strategy.js.map

package/server/applications/files/modules/collabora-online/collabora-online.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../backend/src/applications/files/modules/collabora-online/collabora-online.strategy.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Injectable } from '@nestjs/common'\nimport { AbstractStrategy, PassportStrategy } from '@nestjs/passport'\nimport { PinoLogger } from 'nestjs-pino'\nimport { ExtractJwt, Strategy } from 'passport-jwt'\nimport { AuthTokenAccessStrategy } from '../../../../authentication/guards/auth-token-access.strategy'\nimport { JwtPayload } from '../../../../authentication/interfaces/jwt-payload.interface'\nimport { configuration } from '../../../../configuration/config.environment'\nimport { UserModel } from '../../../users/models/user.model'\nimport { COLLABORA_TOKEN_QUERY_PARAM_NAME } from './collabora-online.constants'\n\n@Injectable()\nexport class CollaboraOnlineStrategy extends PassportStrategy(Strategy, 'filesCollaboraOnlineToken') implements AbstractStrategy {\n  constructor(private readonly logger: PinoLogger) {\n    super({\n      jwtFromRequest: ExtractJwt.fromExtractors([\n        AuthTokenAccessStrategy.extractJWTFromCookie,\n        ExtractJwt.fromUrlQueryParameter(COLLABORA_TOKEN_QUERY_PARAM_NAME)\n      ]),\n      secretOrKey: configuration.auth.token.access.secret,\n      ignoreExpiration: false,\n      passReqToCallback: false\n    })\n  }\n\n  validate(jwtPayload: JwtPayload): UserModel {\n    this.logger.assign({ user: jwtPayload.identity.login })\n    return new UserModel(jwtPayload.identity)\n  }\n}\n"],"names":["CollaboraOnlineStrategy","PassportStrategy","Strategy","validate","jwtPayload","logger","assign","user","identity","login","UserModel","jwtFromRequest","ExtractJwt","fromExtractors","AuthTokenAccessStrategy","extractJWTFromCookie","fromUrlQueryParameter","COLLABORA_TOKEN_QUERY_PARAM_NAME","secretOrKey","configuration","auth","token","access","secret","ignoreExpiration","passReqToCallback"],"mappings":"AAAA;;;;CAIC;;;;+BAaYA;;;eAAAA;;;wBAXc;0BACwB;4BACxB;6BACU;yCACG;mCAEV;2BACJ;0CACuB;;;;;;;;;;AAG1C,IAAA,AAAMA,0BAAN,MAAMA,gCAAgCC,IAAAA,0BAAgB,EAACC,qBAAQ,EAAE;IAatEC,SAASC,UAAsB,EAAa;QAC1C,IAAI,CAACC,MAAM,CAACC,MAAM,CAAC;YAAEC,MAAMH,WAAWI,QAAQ,CAACC,KAAK;QAAC;QACrD,OAAO,IAAIC,oBAAS,CAACN,WAAWI,QAAQ;IAC1C;IAfA,YAAY,AAAiBH,MAAkB,CAAE;QAC/C,KAAK,CAAC;YACJM,gBAAgBC,uBAAU,CAACC,cAAc,CAAC;gBACxCC,gDAAuB,CAACC,oBAAoB;gBAC5CH,uBAAU,CAACI,qBAAqB,CAACC,0DAAgC;aAClE;YACDC,aAAaC,gCAAa,CAACC,IAAI,CAACC,KAAK,CAACC,MAAM,CAACC,MAAM;YACnDC,kBAAkB;YAClBC,mBAAmB;QACrB,SAT2BpB,SAAAA;IAU7B;AAMF"}

package/server/applications/files/modules/collabora-online/collabora-online.utils.js

@@ -0,0 +1,28 @@
+/*
+ * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>
+ * This file is part of Sync-in | The open source file sync and share solution
+ * See the LICENSE file for licensing details
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "COLLABORA_ONLINE_TO_SPACE_SEGMENTS", {
+    enumerable: true,
+    get: function() {
+        return COLLABORA_ONLINE_TO_SPACE_SEGMENTS;
+    }
+});
+const _routes = require("../../../spaces/utils/routes");
+function COLLABORA_ONLINE_TO_SPACE_SEGMENTS(req) {
+    if (req.user.spaceUrl) {
+        // `spaceUrl` and `dbFileHash` are set when the authentication token is provided via a query parameter by the Collabora Server
+        if (req.user.dbFileHash === req.params.dbFileHash) {
+            return req.user.spaceUrl.split('/');
+        }
+        throw new Error('Collabora Online - DB File Hash mismatch');
+    } else {
+        return (0, _routes.PATH_TO_SPACE_SEGMENTS)(req.params['*']);
+    }
+}
+
+//# sourceMappingURL=collabora-online.utils.js.map

package/server/applications/files/modules/collabora-online/collabora-online.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../backend/src/applications/files/modules/collabora-online/collabora-online.utils.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { PATH_TO_SPACE_SEGMENTS } from '../../../spaces/utils/routes'\nimport type { FastifyCollaboraOnlineSpaceRequest } from './collabora-online.interface'\n\nexport function COLLABORA_ONLINE_TO_SPACE_SEGMENTS(req: FastifyCollaboraOnlineSpaceRequest): string[] {\n  if (req.user.spaceUrl) {\n    // `spaceUrl` and `dbFileHash` are set when the authentication token is provided via a query parameter by the Collabora Server\n    if (req.user.dbFileHash === req.params.dbFileHash) {\n      return req.user.spaceUrl.split('/')\n    }\n    throw new Error('Collabora Online - DB File Hash mismatch')\n  } else {\n    return PATH_TO_SPACE_SEGMENTS(req.params['*'])\n  }\n}\n"],"names":["COLLABORA_ONLINE_TO_SPACE_SEGMENTS","req","user","spaceUrl","dbFileHash","params","split","Error","PATH_TO_SPACE_SEGMENTS"],"mappings":"AAAA;;;;CAIC;;;;+BAKeA;;;eAAAA;;;wBAHuB;AAGhC,SAASA,mCAAmCC,GAAuC;IACxF,IAAIA,IAAIC,IAAI,CAACC,QAAQ,EAAE;QACrB,8HAA8H;QAC9H,IAAIF,IAAIC,IAAI,CAACE,UAAU,KAAKH,IAAII,MAAM,CAACD,UAAU,EAAE;YACjD,OAAOH,IAAIC,IAAI,CAACC,QAAQ,CAACG,KAAK,CAAC;QACjC;QACA,MAAM,IAAIC,MAAM;IAClB,OAAO;QACL,OAAOC,IAAAA,8BAAsB,EAACP,IAAII,MAAM,CAAC,IAAI;IAC/C;AACF"}

package/server/applications/files/{decorators → modules/only-office}/only-office-environment.decorator.js

@@ -21,12 +21,12 @@ _export(exports, {
     }
 });
 const _common = require("@nestjs/common");
-const _spaceguard = require("../../spaces/guards/space.guard");
-const _onlyoffice = require("../constants/only-office");
-const _filesonlyofficeguard = require("../guards/files-only-office.guard");
-const OnlyOfficeContext = ()=>(0, _common.SetMetadata)(_onlyoffice.ONLY_OFFICE_CONTEXT, true);
+const _spaceguard = require("../../../spaces/guards/space.guard");
+const _onlyofficeconstants = require("./only-office.constants");
+const _onlyofficeguard = require("./only-office.guard");
+const OnlyOfficeContext = ()=>(0, _common.SetMetadata)(_onlyofficeconstants.ONLY_OFFICE_CONTEXT, true);
 const OnlyOfficeEnvironment = ()=>{
-    return (0, _common.applyDecorators)(OnlyOfficeContext(), (0, _common.UseGuards)(_filesonlyofficeguard.FilesOnlyOfficeGuard, _spaceguard.SpaceGuard));
+    return (0, _common.applyDecorators)(OnlyOfficeContext(), (0, _common.UseGuards)(_onlyofficeguard.OnlyOfficeGuard, _spaceguard.SpaceGuard));
 };
 
 //# sourceMappingURL=only-office-environment.decorator.js.map

package/server/applications/files/modules/only-office/only-office-environment.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../backend/src/applications/files/modules/only-office/only-office-environment.decorator.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { applyDecorators, SetMetadata, UseGuards } from '@nestjs/common'\nimport { SpaceGuard } from '../../../spaces/guards/space.guard'\nimport { ONLY_OFFICE_CONTEXT } from './only-office.constants'\nimport { OnlyOfficeGuard } from './only-office.guard'\n\nexport const OnlyOfficeContext = () => SetMetadata(ONLY_OFFICE_CONTEXT, true)\nexport const OnlyOfficeEnvironment = () => {\n  return applyDecorators(OnlyOfficeContext(), UseGuards(OnlyOfficeGuard, SpaceGuard))\n}\n"],"names":["OnlyOfficeContext","OnlyOfficeEnvironment","SetMetadata","ONLY_OFFICE_CONTEXT","applyDecorators","UseGuards","OnlyOfficeGuard","SpaceGuard"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAOYA;eAAAA;;QACAC;eAAAA;;;wBAN2C;4BAC7B;qCACS;iCACJ;AAEzB,MAAMD,oBAAoB,IAAME,IAAAA,mBAAW,EAACC,wCAAmB,EAAE;AACjE,MAAMF,wBAAwB;IACnC,OAAOG,IAAAA,uBAAe,EAACJ,qBAAqBK,IAAAA,iBAAS,EAACC,gCAAe,EAAEC,sBAAU;AACnF"}

package/server/applications/files/{services/files-only-office-manager.service.js → modules/only-office/only-office-manager.service.js}

@@ -6,10 +6,10 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-Object.defineProperty(exports, "FilesOnlyOfficeManager", {
+Object.defineProperty(exports, "OnlyOfficeManager", {
     enumerable: true,
     get: function() {
-        return FilesOnlyOfficeManager;
+        return OnlyOfficeManager;
     }
 });
 const _axios = require("@nestjs/axios");
@@ -19,22 +19,21 @@ const _https = /*#__PURE__*/ _interop_require_default(require("https"));
 const _nodecrypto = /*#__PURE__*/ _interop_require_default(require("node:crypto"));
 const _nodeos = /*#__PURE__*/ _interop_require_default(require("node:os"));
 const _nodepath = /*#__PURE__*/ _interop_require_default(require("node:path"));
-const _functions = require("../../../common/functions");
-const _configenvironment = require("../../../configuration/config.environment");
-const _cacheservice = require("../../../infrastructure/cache/services/cache.service");
-const _contextmanagerservice = require("../../../infrastructure/context/services/context-manager.service");
-const _applicationsconstants = require("../../applications.constants");
-const _spaces = require("../../spaces/constants/spaces");
-const _permissions = require("../../spaces/utils/permissions");
-const _avatar = require("../../users/utils/avatar");
-const _webdav = require("../../webdav/constants/webdav");
-const _cache = require("../constants/cache");
-const _onlyoffice = require("../constants/only-office");
-const _operations = require("../constants/operations");
-const _routes = require("../constants/routes");
-const _files = require("../utils/files");
-const _fileslockmanagerservice = require("./files-lock-manager.service");
-const _filesqueriesservice = require("./files-queries.service");
+const _functions = require("../../../../common/functions");
+const _configenvironment = require("../../../../configuration/config.environment");
+const _cacheservice = require("../../../../infrastructure/cache/services/cache.service");
+const _contextmanagerservice = require("../../../../infrastructure/context/services/context-manager.service");
+const _applicationsconstants = require("../../../applications.constants");
+const _spaces = require("../../../spaces/constants/spaces");
+const _permissions = require("../../../spaces/utils/permissions");
+const _avatar = require("../../../users/utils/avatar");
+const _webdav = require("../../../webdav/constants/webdav");
+const _operations = require("../../constants/operations");
+const _filelockerror = require("../../models/file-lock-error");
+const _fileslockmanagerservice = require("../../services/files-lock-manager.service");
+const _files = require("../../utils/files");
+const _onlyofficeconstants = require("./only-office.constants");
+const _onlyofficeroutes = require("./only-office.routes");
 function _interop_require_default(obj) {
     return obj && obj.__esModule ? obj : {
         default: obj
@@ -49,74 +48,77 @@ function _ts_decorate(decorators, target, key, desc) {
 function _ts_metadata(k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
-    getStatus() {
-        return {
-            enabled: _configenvironment.configuration.applications.files.onlyoffice.enabled
-        };
-    }
-    async getSettings(user, space, mode, req) {
+let OnlyOfficeManager = class OnlyOfficeManager {
+    async getSettings(user, space, req) {
         if (!await (0, _files.isPathExists)(space.realPath)) {
-            throw new _common.HttpException('Document not found', _common.HttpStatus.NOT_FOUND);
+            throw new _common.HttpException('Document not found', _common.HttpStatus.BAD_REQUEST);
         }
         if (await (0, _files.isPathIsDir)(space.realPath)) {
             throw new _common.HttpException('Document must be a file', _common.HttpStatus.BAD_REQUEST);
         }
         const fileExtension = _nodepath.default.extname(space.realPath).slice(1);
-        if (!_onlyoffice.ONLY_OFFICE_EXTENSIONS.VIEWABLE.has(fileExtension) && !_onlyoffice.ONLY_OFFICE_EXTENSIONS.EDITABLE.has(fileExtension)) {
+        if (!_onlyofficeconstants.ONLY_OFFICE_EXTENSIONS.has(fileExtension)) {
             throw new _common.HttpException('Document not supported', _common.HttpStatus.BAD_REQUEST);
         }
-        if (mode === _operations.FILE_MODE.EDIT && (!_onlyoffice.ONLY_OFFICE_EXTENSIONS.EDITABLE.has(fileExtension) || !(0, _permissions.haveSpaceEnvPermissions)(space, _spaces.SPACE_OPERATION.MODIFY))) {
-            mode = _operations.FILE_MODE.VIEW;
-        }
+        let hasLock = false;
+        let mode = (0, _permissions.haveSpaceEnvPermissions)(space, _spaces.SPACE_OPERATION.MODIFY) ? _operations.FILE_MODE.EDIT : _operations.FILE_MODE.VIEW;
         if (mode === _operations.FILE_MODE.EDIT) {
-            // check lock conflicts
+            // Check lock conflicts
             try {
                 await this.filesLockManager.checkConflicts(space.dbFile, _webdav.DEPTH.RESOURCE, {
                     userId: user.id,
+                    app: _onlyofficeconstants.ONLY_OFFICE_APP_LOCK,
                     lockScope: _webdav.LOCK_SCOPE.SHARED
                 });
-            } catch  {
-                throw new _common.HttpException('The file is locked', _common.HttpStatus.LOCKED);
+            } catch (e) {
+                if (e instanceof _filelockerror.LockConflict) {
+                    hasLock = this.filesLockManager.convertLockToFileLockProps(e.lock);
+                    mode = _operations.FILE_MODE.VIEW;
+                } else {
+                    this.logger.error(`${this.getSettings.name} - ${e}`);
+                    throw new _common.HttpException('Unable to check file lock', _common.HttpStatus.INTERNAL_SERVER_ERROR);
+                }
             }
         }
         const isMobile = this.mobileRegex.test(req.headers['user-agent']);
-        const fileProps = await (0, _files.getProps)(space.realPath, space.dbFile.path);
-        const fileId = (await this.filesQueries.getSpaceFileId(fileProps, space.dbFile) || fileProps.id).toString();
-        const userToken = await this.genUserToken(user);
-        const fileUrl = this.getDocumentUrl(space, userToken);
-        const callBackUrl = this.getCallBackUrl(space, userToken, fileId);
-        const config = await this.genConfiguration(user, space, mode, fileId, fileUrl, fileExtension, callBackUrl, isMobile);
+        const authToken = await this.genAuthToken(user);
+        const fileUrl = this.buildUrl(_onlyofficeroutes.API_ONLY_OFFICE_DOCUMENT, space.url, authToken);
+        const callBackUrl = this.buildUrl(_onlyofficeroutes.API_ONLY_OFFICE_CALLBACK, space.url, authToken);
+        const config = await this.genConfiguration(user, space, mode, fileUrl, fileExtension, callBackUrl, isMobile, hasLock);
         config.config.token = await this.genPayloadToken(config.config);
         return config;
     }
-    async callBack(user, space, token, fileId) {
+    async callBack(user, space, token) {
         const callBackData = await this.jwt.verifyAsync(token, {
             secret: _configenvironment.configuration.applications.files.onlyoffice.secret
         });
         try {
             switch(callBackData.status){
                 case 1:
+                    // users connect / disconnect
                     await this.checkFileLock(user, space, callBackData);
                     this.logger.debug(`document is being edited : ${space.url}`);
                     break;
                 case 2:
+                    // No active users on the document
                     await this.checkFileLock(user, space, callBackData);
                     if (callBackData.notmodified) {
                         this.logger.debug(`document was edited but closed with no changes : ${space.url}`);
                     } else {
-                        this.logger.debug(`document was edited but not saved (let's do it) : ${space.url}`);
+                        this.logger.debug(`document was edited and closed but not saved (let's do it) : ${space.url}`);
                         await this.saveDocument(space, callBackData.url);
                     }
-                    await this.removeDocumentKey(fileId, space);
+                    await this.removeFileLock(user.id, space);
+                    await this.removeDocumentKey(space);
                     break;
                 case 3:
                     this.logger.error(`document cannot be saved, an error has occurred (try to save it) : ${space.url}`);
                     await this.saveDocument(space, callBackData.url);
                     break;
                 case 4:
+                    // No active users on the document
                     await this.removeFileLock(user.id, space);
-                    await this.removeDocumentKey(fileId, space);
+                    await this.removeDocumentKey(space);
                     this.logger.debug(`document was closed with no changes : ${space.url}`);
                     break;
                 case 6:
@@ -140,10 +142,12 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
             error: 0
         };
     }
-    async genConfiguration(user, space, mode, fileId, fileUrl, fileExtension, callBackUrl, isMobile) {
-        const documentType = _onlyoffice.ONLY_OFFICE_EXTENSIONS.EDITABLE.get(fileExtension) || _onlyoffice.ONLY_OFFICE_EXTENSIONS.VIEWABLE.get(fileExtension);
+    async genConfiguration(user, space, mode, fileUrl, fileExtension, callBackUrl, isMobile, hasLock) {
+        const canEdit = mode === _operations.FILE_MODE.EDIT;
+        const documentType = _onlyofficeconstants.ONLY_OFFICE_EXTENSIONS.get(fileExtension);
         return {
-            documentServerUrl: this.externalOnlyOfficeServer || `${this.contextManager.headerOriginUrl()}${_onlyoffice.ONLY_OFFICE_INTERNAL_URI}`,
+            hasLock: hasLock,
+            documentServerUrl: this.externalOnlyOfficeServer || `${this.contextManager.headerOriginUrl()}${_onlyofficeconstants.ONLY_OFFICE_INTERNAL_URI}`,
             config: {
                 type: isMobile ? 'mobile' : 'desktop',
                 height: '100%',
@@ -152,15 +156,15 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
                 document: {
                     title: _nodepath.default.basename(space.relativeUrl),
                     fileType: fileExtension,
-                    key: await this.getDocumentKey(fileId),
+                    key: await this.getDocumentKey(space),
                     permissions: {
                         download: true,
-                        edit: mode === _operations.FILE_MODE.EDIT,
+                        edit: canEdit,
                         changeHistory: false,
-                        comment: true,
-                        fillForms: true,
+                        comment: canEdit,
+                        fillForms: canEdit,
                         print: true,
-                        review: mode === _operations.FILE_MODE.EDIT
+                        review: canEdit
                     },
                     url: fileUrl
                 },
@@ -199,13 +203,10 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
             }
         };
     }
-    getDocumentUrl(space, token) {
-        // user refresh token is used here for long session
-        return `${this.contextManager.headerOriginUrl()}${_routes.API_FILES_ONLY_OFFICE_DOCUMENT}/${space.url}?${_onlyoffice.ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME}=${token}`;
-    }
-    getCallBackUrl(space, token, fileId) {
-        // user refresh token is used here for long session
-        return `${this.contextManager.headerOriginUrl()}${_routes.API_FILES_ONLY_OFFICE_CALLBACK}/${space.url}?fid=${fileId}&${_onlyoffice.ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME}=${token}`;
+    buildUrl(basePath, spaceUrl, token) {
+        const url = new URL(`${basePath}/${spaceUrl}`, this.contextManager.headerOriginUrl());
+        url.searchParams.set(_onlyofficeconstants.ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME, token);
+        return url.toString();
     }
     genPayloadToken(payload) {
         return this.jwt.signAsync(payload, {
@@ -213,8 +214,8 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
             expiresIn: 60
         });
     }
-    genUserToken(user) {
-        // use refresh expiration to allow long session
+    genAuthToken(user) {
+        // use refresh expiration to allow long sessions
         return this.jwt.signAsync({
             identity: {
                 id: user.id,
@@ -233,23 +234,28 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
     async checkFileLock(user, space, callBackData) {
         for (const action of callBackData.actions){
             if (action.type === 0) {
-                // disconnect
-                await this.removeFileLock(parseInt(action.userid), space);
+                // Disconnect
+                // Remove the lock if no other users are active on the document
+                if (!Array.isArray(callBackData.users)) {
+                    await this.removeFileLock(parseInt(action.userid), space);
+                }
             } else if (action.type === 1) {
-                // connect
-                await this.genFileLock(user, space);
+                // Connect
+                // Create the lock if it's the first user to open the document
+                if (Array.isArray(callBackData.users) && callBackData.users.length === 1) {
+                    await this.createFileLock(user, space);
+                }
             }
         }
     }
-    async genFileLock(user, space) {
-        const [ok, _fileLock] = await this.filesLockManager.create(user, space.dbFile, _webdav.DEPTH.RESOURCE, {
-            lockroot: null,
-            locktoken: null,
-            lockscope: _webdav.LOCK_SCOPE.SHARED,
-            owner: `OnlyOffice - ${user.fullName} (${user.email})`
+    async createFileLock(user, space) {
+        const [ok, _fileLock] = await this.filesLockManager.create(user, space.dbFile, _onlyofficeconstants.ONLY_OFFICE_APP_LOCK, _webdav.DEPTH.RESOURCE, {
+            lockRoot: null,
+            lockToken: null,
+            lockScope: _webdav.LOCK_SCOPE.SHARED
         }, this.expiration);
         if (!ok) {
-            throw new Error('document is locked');
+            throw new _common.HttpException('The file is locked', _common.HttpStatus.LOCKED);
         }
     }
     async removeFileLock(userId, space) {
@@ -259,20 +265,21 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
             }
         }
     }
-    async removeDocumentKey(fileId, space) {
+    async removeDocumentKey(space) {
         if (!await this.filesLockManager.isPathLocked(space.dbFile)) {
-            const cacheKey = this.getCacheKey(fileId);
+            const cacheKey = this.getCacheKey(space.dbFile);
             const r = await this.cache.del(cacheKey);
             this.logger.debug(`${this.removeDocumentKey.name} - ${cacheKey} ${r ? '' : 'not'} removed`);
         }
     }
-    async getDocumentKey(fileId) {
-        const cacheKey = this.getCacheKey(fileId);
+    async getDocumentKey(space) {
+        // Uniq key to identify the document in OnlyOffice
+        const cacheKey = this.getCacheKey(space.dbFile);
         const existingDocKey = await this.cache.get(cacheKey);
         if (existingDocKey) {
             return existingDocKey;
         }
-        const docKey = (0, _functions.generateShortUUID)(64);
+        const docKey = (0, _files.genEtag)(null, space.realPath, false);
         await this.cache.set(cacheKey, docKey, this.expiration);
         this.logger.debug(`${this.getDocumentKey.name} - ${cacheKey} (${docKey}) created`);
         return docKey;
@@ -282,15 +289,15 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
       https://onlyoffice-server.com/cache/files/data/-33120641_7158/output.pptx/output.pptx
       ?md5=duFHKC-5d47s-RRcYn3hAw&expires=1739400549&shardkey=-33120641&filename=output.pptx
      */ const urlParams = new URLSearchParams(url.split('?').at(-1));
-        // it is not the md5 of the file but a md5 generated by the combination of the elements of the url
+        // it is not the md5 of the file but the md5 generated by the combination of the elements of the url
         const md5 = urlParams.get('md5');
         const tmpFilePath = await (0, _files.uniqueFilePathFromDir)(_nodepath.default.join(_nodeos.default.tmpdir(), `${md5}-${urlParams.get('filename')}`));
-        // convert remote file to the local file with the current extension if these extensions aren't equal
+        // convert the remote file to the local file with the current extension if these extensions aren't equal
         const localExtension = _nodepath.default.extname(space.realPath).slice(1);
         const remoteExtension = _nodepath.default.extname(urlParams.get('filename')).slice(1);
         let downloadUrl;
-        if (localExtension !== remoteExtension && !_onlyoffice.ONLY_OFFICE_CONVERT_EXTENSIONS.ALLOW_AUTO.has(localExtension)) {
-            if (_onlyoffice.ONLY_OFFICE_CONVERT_EXTENSIONS.FROM.has(remoteExtension) && _onlyoffice.ONLY_OFFICE_CONVERT_EXTENSIONS.TO.has(localExtension)) {
+        if (localExtension !== remoteExtension && !_onlyofficeconstants.ONLY_OFFICE_CONVERT_EXTENSIONS.ALLOW_AUTO.has(localExtension)) {
+            if (_onlyofficeconstants.ONLY_OFFICE_CONVERT_EXTENSIONS.FROM.has(remoteExtension) && _onlyofficeconstants.ONLY_OFFICE_CONVERT_EXTENSIONS.TO.has(localExtension)) {
                 downloadUrl = await this.convertDocument(urlParams.get('shardkey'), url, remoteExtension, localExtension, space.url);
             } else {
                 throw new Error(`document cannot be converted from ${remoteExtension} -> ${localExtension} : ${space.url}`);
@@ -315,18 +322,17 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
         }
         // try to verify the downloaded size
         const contentLength = parseInt(res.headers['content-length'], 10);
-        if (!isNaN(contentLength)) {
-            if (contentLength === 0) {
-                this.logger.debug(`${this.saveDocument.name} - content length is 0 : ${space.url}`);
-                return;
-            }
+        if (!isNaN(contentLength) && contentLength !== 0) {
             const tmpFileSize = await (0, _files.fileSize)(tmpFilePath);
             if (tmpFileSize !== contentLength) {
                 throw new Error(`document size differs (${tmpFileSize} != ${contentLength})`);
             }
+        } else if (contentLength === 0) {
+            this.logger.warn(`${this.saveDocument.name} - content length is 0 : ${space.url}`);
         }
-        // copy contents to avoid inode changes (fileId in some cases)
+        // copy contents to avoid inode changes (`file.id` in some cases)
         try {
+            // todo: versioning
             await (0, _files.copyFileContent)(tmpFilePath, space.realPath);
             await (0, _files.removeFiles)(tmpFilePath);
         } catch (e) {
@@ -358,24 +364,23 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
             throw new Error(`convert failed with status : ${e.response.status}`);
         }
         if (result.error) {
-            throw new Error(`convert failed with reason : ${_onlyoffice.ONLY_OFFICE_CONVERT_ERROR.get(result.error)}`);
+            throw new Error(`convert failed with reason : ${_onlyofficeconstants.ONLY_OFFICE_CONVERT_ERROR.get(result.error)}`);
         }
         if (result.endConvert) {
             this.logger.log(`${this.convertDocument.name} - ${fileType} -> ${outputType} : ${spaceUrl}`);
             return result.fileUrl;
         }
     }
-    getCacheKey(fileId) {
-        return `${_cache.CACHE_ONLY_OFFICE}|${fileId}`;
+    getCacheKey(dbFile) {
+        return `${_onlyofficeconstants.ONLY_OFFICE_CACHE_KEY}|${(0, _files.genUniqHashFromFileDBProps)(dbFile)}`;
     }
-    constructor(http, contextManager, cache, jwt, filesLockManager, filesQueries){
+    constructor(http, contextManager, cache, jwt, filesLockManager){
         this.http = http;
         this.contextManager = contextManager;
         this.cache = cache;
         this.jwt = jwt;
         this.filesLockManager = filesLockManager;
-        this.filesQueries = filesQueries;
-        this.logger = new _common.Logger(FilesOnlyOfficeManager.name);
+        this.logger = new _common.Logger(OnlyOfficeManager.name);
         this.externalOnlyOfficeServer = _configenvironment.configuration.applications.files.onlyoffice.externalServer || null;
         this.rejectUnauthorized = !_configenvironment.configuration.applications.files.onlyoffice?.verifySSL;
         this.convertUrl = this.externalOnlyOfficeServer ? `${this.externalOnlyOfficeServer}/ConvertService.ashx` : null;
@@ -383,7 +388,7 @@ let FilesOnlyOfficeManager = class FilesOnlyOfficeManager {
         this.mobileRegex = /android|webos|iphone|ipad|ipod|blackberry|windows phone|opera mini|iemobile|mobile/i;
     }
 };
-FilesOnlyOfficeManager = _ts_decorate([
+OnlyOfficeManager = _ts_decorate([
     (0, _common.Injectable)(),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
@@ -391,9 +396,8 @@ FilesOnlyOfficeManager = _ts_decorate([
         typeof _contextmanagerservice.ContextManager === "undefined" ? Object : _contextmanagerservice.ContextManager,
         typeof _cacheservice.Cache === "undefined" ? Object : _cacheservice.Cache,
         typeof _jwt.JwtService === "undefined" ? Object : _jwt.JwtService,
-        typeof _fileslockmanagerservice.FilesLockManager === "undefined" ? Object : _fileslockmanagerservice.FilesLockManager,
-        typeof _filesqueriesservice.FilesQueries === "undefined" ? Object : _filesqueriesservice.FilesQueries
+        typeof _fileslockmanagerservice.FilesLockManager === "undefined" ? Object : _fileslockmanagerservice.FilesLockManager
     ])
-], FilesOnlyOfficeManager);
+], OnlyOfficeManager);
 
-//# sourceMappingURL=files-only-office-manager.service.js.map
+//# sourceMappingURL=only-office-manager.service.js.map

package/server/applications/files/modules/only-office/only-office-manager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../backend/src/applications/files/modules/only-office/only-office-manager.service.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { HttpService } from '@nestjs/axios'\nimport { HttpException, HttpStatus, Injectable, Logger } from '@nestjs/common'\nimport { JwtService } from '@nestjs/jwt'\nimport { AxiosResponse } from 'axios'\nimport https from 'https'\nimport crypto from 'node:crypto'\nimport os from 'node:os'\nimport path from 'node:path'\nimport { JwtIdentityPayload } from '../../../../authentication/interfaces/jwt-payload.interface'\nimport { convertHumanTimeToSeconds } from '../../../../common/functions'\nimport { configuration } from '../../../../configuration/config.environment'\nimport { Cache } from '../../../../infrastructure/cache/services/cache.service'\nimport { ContextManager } from '../../../../infrastructure/context/services/context-manager.service'\nimport { HTTP_METHOD } from '../../../applications.constants'\nimport { SPACE_OPERATION } from '../../../spaces/constants/spaces'\nimport { FastifySpaceRequest } from '../../../spaces/interfaces/space-request.interface'\nimport type { SpaceEnv } from '../../../spaces/models/space-env.model'\nimport { haveSpaceEnvPermissions } from '../../../spaces/utils/permissions'\nimport type { UserModel } from '../../../users/models/user.model'\nimport { getAvatarBase64 } from '../../../users/utils/avatar'\nimport { DEPTH, LOCK_SCOPE } from '../../../webdav/constants/webdav'\nimport { FILE_MODE } from '../../constants/operations'\nimport type { FileDBProps } from '../../interfaces/file-db-props.interface'\nimport { FileLockOptions } from '../../interfaces/file-lock.interface'\nimport { FileLockProps } from '../../interfaces/file-props.interface'\nimport { LockConflict } from '../../models/file-lock-error'\nimport { FilesLockManager } from '../../services/files-lock-manager.service'\nimport {\n  copyFileContent,\n  fileSize,\n  genEtag,\n  genUniqHashFromFileDBProps,\n  isPathExists,\n  isPathIsDir,\n  removeFiles,\n  uniqueFilePathFromDir,\n  writeFromStream\n} from '../../utils/files'\nimport {\n  ONLY_OFFICE_APP_LOCK,\n  ONLY_OFFICE_CACHE_KEY,\n  ONLY_OFFICE_CONVERT_ERROR,\n  ONLY_OFFICE_CONVERT_EXTENSIONS,\n  ONLY_OFFICE_EXTENSIONS,\n  ONLY_OFFICE_INTERNAL_URI,\n  ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME\n} from './only-office.constants'\nimport { OnlyOfficeReqDto } from './only-office.dtos'\nimport { OnlyOfficeCallBack, OnlyOfficeConfig, OnlyOfficeConvertForm } from './only-office.interface'\nimport { API_ONLY_OFFICE_CALLBACK, API_ONLY_OFFICE_DOCUMENT } from './only-office.routes'\n\n@Injectable()\nexport class OnlyOfficeManager {\n  private logger = new Logger(OnlyOfficeManager.name)\n  private readonly externalOnlyOfficeServer = configuration.applications.files.onlyoffice.externalServer || null\n  private readonly rejectUnauthorized: boolean = !configuration.applications.files.onlyoffice?.verifySSL\n  private readonly convertUrl = this.externalOnlyOfficeServer ? `${this.externalOnlyOfficeServer}/ConvertService.ashx` : null\n  private readonly expiration = convertHumanTimeToSeconds(configuration.auth.token.refresh.expiration)\n  private readonly mobileRegex: RegExp = /android|webos|iphone|ipad|ipod|blackberry|windows phone|opera mini|iemobile|mobile/i\n\n  constructor(\n    private readonly http: HttpService,\n    private readonly contextManager: ContextManager,\n    private readonly cache: Cache,\n    private readonly jwt: JwtService,\n    private readonly filesLockManager: FilesLockManager\n  ) {}\n\n  async getSettings(user: UserModel, space: SpaceEnv, req: FastifySpaceRequest): Promise<OnlyOfficeReqDto> {\n    if (!(await isPathExists(space.realPath))) {\n      throw new HttpException('Document not found', HttpStatus.BAD_REQUEST)\n    }\n    if (await isPathIsDir(space.realPath)) {\n      throw new HttpException('Document must be a file', HttpStatus.BAD_REQUEST)\n    }\n    const fileExtension = path.extname(space.realPath).slice(1)\n    if (!ONLY_OFFICE_EXTENSIONS.has(fileExtension)) {\n      throw new HttpException('Document not supported', HttpStatus.BAD_REQUEST)\n    }\n    let hasLock: false | FileLockProps = false\n    let mode: FILE_MODE = haveSpaceEnvPermissions(space, SPACE_OPERATION.MODIFY) ? FILE_MODE.EDIT : FILE_MODE.VIEW\n    if (mode === FILE_MODE.EDIT) {\n      // Check lock conflicts\n      try {\n        await this.filesLockManager.checkConflicts(space.dbFile, DEPTH.RESOURCE, {\n          userId: user.id,\n          app: ONLY_OFFICE_APP_LOCK,\n          lockScope: LOCK_SCOPE.SHARED\n        })\n      } catch (e) {\n        if (e instanceof LockConflict) {\n          hasLock = this.filesLockManager.convertLockToFileLockProps(e.lock)\n          mode = FILE_MODE.VIEW\n        } else {\n          this.logger.error(`${this.getSettings.name} - ${e}`)\n          throw new HttpException('Unable to check file lock', HttpStatus.INTERNAL_SERVER_ERROR)\n        }\n      }\n    }\n    const isMobile: boolean = this.mobileRegex.test(req.headers['user-agent'])\n    const authToken: string = await this.genAuthToken(user)\n    const fileUrl = this.buildUrl(API_ONLY_OFFICE_DOCUMENT, space.url, authToken)\n    const callBackUrl = this.buildUrl(API_ONLY_OFFICE_CALLBACK, space.url, authToken)\n    const config: OnlyOfficeReqDto = await this.genConfiguration(user, space, mode, fileUrl, fileExtension, callBackUrl, isMobile, hasLock)\n    config.config.token = await this.genPayloadToken(config.config)\n    return config\n  }\n\n  async callBack(user: UserModel, space: SpaceEnv, token: string) {\n    const callBackData: OnlyOfficeCallBack = await this.jwt.verifyAsync(token, { secret: configuration.applications.files.onlyoffice.secret })\n    try {\n      switch (callBackData.status) {\n        case 1:\n          // users connect / disconnect\n          await this.checkFileLock(user, space, callBackData)\n          this.logger.debug(`document is being edited : ${space.url}`)\n          break\n        case 2:\n          // No active users on the document\n          await this.checkFileLock(user, space, callBackData)\n          if (callBackData.notmodified) {\n            this.logger.debug(`document was edited but closed with no changes : ${space.url}`)\n          } else {\n            this.logger.debug(`document was edited and closed but not saved (let's do it) : ${space.url}`)\n            await this.saveDocument(space, callBackData.url)\n          }\n          await this.removeFileLock(user.id, space)\n          await this.removeDocumentKey(space)\n          break\n        case 3:\n          this.logger.error(`document cannot be saved, an error has occurred (try to save it) : ${space.url}`)\n          await this.saveDocument(space, callBackData.url)\n          break\n        case 4:\n          // No active users on the document\n          await this.removeFileLock(user.id, space)\n          await this.removeDocumentKey(space)\n          this.logger.debug(`document was closed with no changes : ${space.url}`)\n          break\n        case 6:\n          this.logger.debug(`document is edited but save was requested : ${space.url}`)\n          await this.saveDocument(space, callBackData.url)\n          break\n        case 7:\n          this.logger.error(`document cannot be force saved, an error has occurred (try to save it) : ${space.url}`)\n          await this.saveDocument(space, callBackData.url)\n          break\n        default:\n          this.logger.error('unhandled case')\n      }\n    } catch (e) {\n      this.logger.error(`${this.callBack.name} - ${e.message} : ${space.url}`)\n      return { error: e.message }\n    }\n    return { error: 0 }\n  }\n\n  private async genConfiguration(\n    user: UserModel,\n    space: SpaceEnv,\n    mode: FILE_MODE,\n    fileUrl: string,\n    fileExtension: string,\n    callBackUrl: string,\n    isMobile: boolean,\n    hasLock: false | FileLockProps\n  ): Promise<OnlyOfficeReqDto> {\n    const canEdit = mode === FILE_MODE.EDIT\n    const documentType = ONLY_OFFICE_EXTENSIONS.get(fileExtension)\n    return {\n      hasLock: hasLock,\n      documentServerUrl: this.externalOnlyOfficeServer || `${this.contextManager.headerOriginUrl()}${ONLY_OFFICE_INTERNAL_URI}`,\n      config: {\n        type: isMobile ? 'mobile' : 'desktop',\n        height: '100%',\n        width: '100%',\n        documentType: documentType,\n        document: {\n          title: path.basename(space.relativeUrl),\n          fileType: fileExtension,\n          key: await this.getDocumentKey(space),\n          permissions: {\n            download: true,\n            edit: canEdit,\n            changeHistory: false,\n            comment: canEdit,\n            fillForms: canEdit,\n            print: true,\n            review: canEdit\n          },\n          url: fileUrl\n        },\n        editorConfig: {\n          mode: mode,\n          lang: 'en',\n          region: 'en',\n          callbackUrl: callBackUrl,\n          user: { id: user.id.toString(), name: `${user.fullName} (${user.email})`, image: await getAvatarBase64(user.login) },\n          coEditing: {\n            mode: 'fast',\n            change: true\n          },\n          embedded: {\n            embedUrl: fileUrl,\n            saveUrl: fileUrl,\n            shareUrl: fileUrl,\n            toolbarDocked: 'top'\n          },\n          customization: {\n            about: false,\n            autosave: false,\n            forcesave: true,\n            zoom: documentType === 'slide' ? 60 : 90,\n            help: false,\n            features: { featuresTips: false },\n            plugins: false\n          }\n        }\n      }\n    }\n  }\n\n  private buildUrl(basePath: string, spaceUrl: string, token: string): string {\n    const url = new URL(`${basePath}/${spaceUrl}`, this.contextManager.headerOriginUrl())\n    url.searchParams.set(ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME, token)\n    return url.toString()\n  }\n\n  private genPayloadToken(payload: OnlyOfficeConfig | OnlyOfficeConvertForm): Promise<string> {\n    return this.jwt.signAsync(payload, { secret: configuration.applications.files.onlyoffice.secret, expiresIn: 60 })\n  }\n\n  private genAuthToken(user: UserModel): Promise<string> {\n    // use refresh expiration to allow long sessions\n    return this.jwt.signAsync(\n      {\n        identity: {\n          id: user.id,\n          login: user.login,\n          email: user.email,\n          fullName: user.fullName,\n          language: user.language,\n          role: user.role,\n          applications: user.applications\n        } satisfies JwtIdentityPayload\n      },\n      {\n        secret: configuration.auth.token.access.secret,\n        expiresIn: this.expiration\n      }\n    )\n  }\n\n  private async checkFileLock(user: UserModel, space: SpaceEnv, callBackData: OnlyOfficeCallBack) {\n    for (const action of callBackData.actions) {\n      if (action.type === 0) {\n        // Disconnect\n        // Remove the lock if no other users are active on the document\n        if (!Array.isArray(callBackData.users)) {\n          await this.removeFileLock(parseInt(action.userid), space)\n        }\n      } else if (action.type === 1) {\n        // Connect\n        // Create the lock if it's the first user to open the document\n        if (Array.isArray(callBackData.users) && callBackData.users.length === 1) {\n          await this.createFileLock(user, space)\n        }\n      }\n    }\n  }\n\n  private async createFileLock(user: UserModel, space: SpaceEnv): Promise<void> {\n    const [ok, _fileLock] = await this.filesLockManager.create(\n      user,\n      space.dbFile,\n      ONLY_OFFICE_APP_LOCK,\n      DEPTH.RESOURCE,\n      {\n        lockRoot: null,\n        lockToken: null,\n        lockScope: LOCK_SCOPE.SHARED\n      } satisfies FileLockOptions,\n      this.expiration\n    )\n    if (!ok) {\n      throw new HttpException('The file is locked', HttpStatus.LOCKED)\n    }\n  }\n\n  private async removeFileLock(userId: number, space: SpaceEnv): Promise<void> {\n    for (const lock of await this.filesLockManager.getLocksByPath(space.dbFile)) {\n      if (lock.owner.id === userId) {\n        await this.filesLockManager.removeLock(lock.key)\n      }\n    }\n  }\n\n  private async removeDocumentKey(space: SpaceEnv): Promise<void> {\n    if (!(await this.filesLockManager.isPathLocked(space.dbFile))) {\n      const cacheKey = this.getCacheKey(space.dbFile)\n      const r = await this.cache.del(cacheKey)\n      this.logger.debug(`${this.removeDocumentKey.name} - ${cacheKey} ${r ? '' : 'not'} removed`)\n    }\n  }\n\n  private async getDocumentKey(space: SpaceEnv): Promise<string> {\n    // Uniq key to identify the document in OnlyOffice\n    const cacheKey = this.getCacheKey(space.dbFile)\n    const existingDocKey: string = await this.cache.get(cacheKey)\n    if (existingDocKey) {\n      return existingDocKey\n    }\n    const docKey = genEtag(null, space.realPath, false)\n    await this.cache.set(cacheKey, docKey, this.expiration)\n    this.logger.debug(`${this.getDocumentKey.name} - ${cacheKey} (${docKey}) created`)\n    return docKey\n  }\n\n  private async saveDocument(space: SpaceEnv, url: string): Promise<void> {\n    /* url format:\n      https://onlyoffice-server.com/cache/files/data/-33120641_7158/output.pptx/output.pptx\n      ?md5=duFHKC-5d47s-RRcYn3hAw&expires=1739400549&shardkey=-33120641&filename=output.pptx\n     */\n    const urlParams = new URLSearchParams(url.split('?').at(-1))\n    // it is not the md5 of the file but the md5 generated by the combination of the elements of the url\n    const md5: string = urlParams.get('md5')\n    const tmpFilePath = await uniqueFilePathFromDir(path.join(os.tmpdir(), `${md5}-${urlParams.get('filename')}`))\n\n    // convert the remote file to the local file with the current extension if these extensions aren't equal\n    const localExtension = path.extname(space.realPath).slice(1)\n    const remoteExtension = path.extname(urlParams.get('filename')).slice(1)\n\n    let downloadUrl: string\n    if (localExtension !== remoteExtension && !ONLY_OFFICE_CONVERT_EXTENSIONS.ALLOW_AUTO.has(localExtension)) {\n      if (ONLY_OFFICE_CONVERT_EXTENSIONS.FROM.has(remoteExtension) && ONLY_OFFICE_CONVERT_EXTENSIONS.TO.has(localExtension)) {\n        downloadUrl = await this.convertDocument(urlParams.get('shardkey'), url, remoteExtension, localExtension, space.url)\n      } else {\n        throw new Error(`document cannot be converted from ${remoteExtension} -> ${localExtension} : ${space.url}`)\n      }\n    } else {\n      downloadUrl = url\n    }\n\n    // download file\n    let res: AxiosResponse\n    try {\n      res = await this.http.axiosRef({\n        method: HTTP_METHOD.GET,\n        url: downloadUrl,\n        responseType: 'stream',\n        httpsAgent: new https.Agent({ rejectUnauthorized: this.rejectUnauthorized })\n      })\n      await writeFromStream(tmpFilePath, res.data)\n    } catch (e) {\n      throw new Error(`unable to get document : ${e.message}`)\n    }\n\n    // try to verify the downloaded size\n    const contentLength = parseInt(res.headers['content-length'], 10)\n    if (!isNaN(contentLength) && contentLength !== 0) {\n      const tmpFileSize = await fileSize(tmpFilePath)\n      if (tmpFileSize !== contentLength) {\n        throw new Error(`document size differs (${tmpFileSize} != ${contentLength})`)\n      }\n    } else if (contentLength === 0) {\n      this.logger.warn(`${this.saveDocument.name} - content length is 0 : ${space.url}`)\n    }\n    // copy contents to avoid inode changes (`file.id` in some cases)\n    try {\n      // todo: versioning\n      await copyFileContent(tmpFilePath, space.realPath)\n      await removeFiles(tmpFilePath)\n    } catch (e) {\n      throw new Error(`unable to save document : ${e.message}`)\n    }\n  }\n\n  private async convertDocument(id: string, url: string, fileType: string, outputType: string, spaceUrl: string): Promise<string> {\n    const key: string = `${id}-${crypto.randomBytes(20).toString('hex')}`.slice(0, 20).replace('-', '_')\n    const payload: OnlyOfficeConvertForm = {\n      key: key,\n      url: url,\n      filetype: fileType,\n      outputtype: outputType,\n      async: false\n    }\n    payload.token = await this.genPayloadToken(payload)\n    let result: { fileUrl?: string; fileType?: string; endConvert?: boolean; error?: number }\n    try {\n      const res: AxiosResponse = await this.http.axiosRef({\n        method: HTTP_METHOD.POST,\n        url: this.convertUrl,\n        data: payload,\n        httpsAgent: new https.Agent({ rejectUnauthorized: this.rejectUnauthorized })\n      })\n      result = res.data\n    } catch (e) {\n      throw new Error(`convert failed with status : ${e.response.status}`)\n    }\n    if (result.error) {\n      throw new Error(`convert failed with reason : ${ONLY_OFFICE_CONVERT_ERROR.get(result.error)}`)\n    }\n    if (result.endConvert) {\n      this.logger.log(`${this.convertDocument.name} - ${fileType} -> ${outputType} : ${spaceUrl}`)\n      return result.fileUrl\n    }\n  }\n\n  private getCacheKey(dbFile: FileDBProps): string {\n    return `${ONLY_OFFICE_CACHE_KEY}|${genUniqHashFromFileDBProps(dbFile)}`\n  }\n}\n"],"names":["OnlyOfficeManager","getSettings","user","space","req","isPathExists","realPath","HttpException","HttpStatus","BAD_REQUEST","isPathIsDir","fileExtension","path","extname","slice","ONLY_OFFICE_EXTENSIONS","has","hasLock","mode","haveSpaceEnvPermissions","SPACE_OPERATION","MODIFY","FILE_MODE","EDIT","VIEW","filesLockManager","checkConflicts","dbFile","DEPTH","RESOURCE","userId","id","app","ONLY_OFFICE_APP_LOCK","lockScope","LOCK_SCOPE","SHARED","e","LockConflict","convertLockToFileLockProps","lock","logger","error","name","INTERNAL_SERVER_ERROR","isMobile","mobileRegex","test","headers","authToken","genAuthToken","fileUrl","buildUrl","API_ONLY_OFFICE_DOCUMENT","url","callBackUrl","API_ONLY_OFFICE_CALLBACK","config","genConfiguration","token","genPayloadToken","callBack","callBackData","jwt","verifyAsync","secret","configuration","applications","files","onlyoffice","status","checkFileLock","debug","notmodified","saveDocument","removeFileLock","removeDocumentKey","message","canEdit","documentType","get","documentServerUrl","externalOnlyOfficeServer","contextManager","headerOriginUrl","ONLY_OFFICE_INTERNAL_URI","type","height","width","document","title","basename","relativeUrl","fileType","key","getDocumentKey","permissions","download","edit","changeHistory","comment","fillForms","print","review","editorConfig","lang","region","callbackUrl","toString","fullName","email","image","getAvatarBase64","login","coEditing","change","embedded","embedUrl","saveUrl","shareUrl","toolbarDocked","customization","about","autosave","forcesave","zoom","help","features","featuresTips","plugins","basePath","spaceUrl","URL","searchParams","set","ONLY_OFFICE_TOKEN_QUERY_PARAM_NAME","payload","signAsync","expiresIn","identity","language","role","auth","access","expiration","action","actions","Array","isArray","users","parseInt","userid","length","createFileLock","ok","_fileLock","create","lockRoot","lockToken","LOCKED","getLocksByPath","owner","removeLock","isPathLocked","cacheKey","getCacheKey","r","cache","del","existingDocKey","docKey","genEtag","urlParams","URLSearchParams","split","at","md5","tmpFilePath","uniqueFilePathFromDir","join","os","tmpdir","localExtension","remoteExtension","downloadUrl","ONLY_OFFICE_CONVERT_EXTENSIONS","ALLOW_AUTO","FROM","TO","convertDocument","Error","res","http","axiosRef","method","HTTP_METHOD","GET","responseType","httpsAgent","https","Agent","rejectUnauthorized","writeFromStream","data","contentLength","isNaN","tmpFileSize","fileSize","warn","copyFileContent","removeFiles","outputType","crypto","randomBytes","replace","filetype","outputtype","async","result","POST","convertUrl","response","ONLY_OFFICE_CONVERT_ERROR","endConvert","log","ONLY_OFFICE_CACHE_KEY","genUniqHashFromFileDBProps","Logger","externalServer","verifySSL","convertHumanTimeToSeconds","refresh"],"mappings":"AAAA;;;;CAIC;;;;+BAsDYA;;;eAAAA;;;uBApDe;wBACkC;qBACnC;8DAET;mEACC;+DACJ;iEACE;2BAEyB;mCACZ;8BACR;uCACS;uCACH;wBACI;6BAGQ;wBAER;wBACE;4BACR;+BAIG;yCACI;uBAW1B;qCASA;kCAG4D;;;;;;;;;;;;;;;AAG5D,IAAA,AAAMA,oBAAN,MAAMA;IAgBX,MAAMC,YAAYC,IAAe,EAAEC,KAAe,EAAEC,GAAwB,EAA6B;QACvG,IAAI,CAAE,MAAMC,IAAAA,mBAAY,EAACF,MAAMG,QAAQ,GAAI;YACzC,MAAM,IAAIC,qBAAa,CAAC,sBAAsBC,kBAAU,CAACC,WAAW;QACtE;QACA,IAAI,MAAMC,IAAAA,kBAAW,EAACP,MAAMG,QAAQ,GAAG;YACrC,MAAM,IAAIC,qBAAa,CAAC,2BAA2BC,kBAAU,CAACC,WAAW;QAC3E;QACA,MAAME,gBAAgBC,iBAAI,CAACC,OAAO,CAACV,MAAMG,QAAQ,EAAEQ,KAAK,CAAC;QACzD,IAAI,CAACC,2CAAsB,CAACC,GAAG,CAACL,gBAAgB;YAC9C,MAAM,IAAIJ,qBAAa,CAAC,0BAA0BC,kBAAU,CAACC,WAAW;QAC1E;QACA,IAAIQ,UAAiC;QACrC,IAAIC,OAAkBC,IAAAA,oCAAuB,EAAChB,OAAOiB,uBAAe,CAACC,MAAM,IAAIC,qBAAS,CAACC,IAAI,GAAGD,qBAAS,CAACE,IAAI;QAC9G,IAAIN,SAASI,qBAAS,CAACC,IAAI,EAAE;YAC3B,uBAAuB;YACvB,IAAI;gBACF,MAAM,IAAI,CAACE,gBAAgB,CAACC,cAAc,CAACvB,MAAMwB,MAAM,EAAEC,aAAK,CAACC,QAAQ,EAAE;oBACvEC,QAAQ5B,KAAK6B,EAAE;oBACfC,KAAKC,yCAAoB;oBACzBC,WAAWC,kBAAU,CAACC,MAAM;gBAC9B;YACF,EAAE,OAAOC,GAAG;gBACV,IAAIA,aAAaC,2BAAY,EAAE;oBAC7BrB,UAAU,IAAI,CAACQ,gBAAgB,CAACc,0BAA0B,CAACF,EAAEG,IAAI;oBACjEtB,OAAOI,qBAAS,CAACE,IAAI;gBACvB,OAAO;oBACL,IAAI,CAACiB,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACzC,WAAW,CAAC0C,IAAI,CAAC,GAAG,EAAEN,GAAG;oBACnD,MAAM,IAAI9B,qBAAa,CAAC,6BAA6BC,kBAAU,CAACoC,qBAAqB;gBACvF;YACF;QACF;QACA,MAAMC,WAAoB,IAAI,CAACC,WAAW,CAACC,IAAI,CAAC3C,IAAI4C,OAAO,CAAC,aAAa;QACzE,MAAMC,YAAoB,MAAM,IAAI,CAACC,YAAY,CAAChD;QAClD,MAAMiD,UAAU,IAAI,CAACC,QAAQ,CAACC,0CAAwB,EAAElD,MAAMmD,GAAG,EAAEL;QACnE,MAAMM,cAAc,IAAI,CAACH,QAAQ,CAACI,0CAAwB,EAAErD,MAAMmD,GAAG,EAAEL;QACvE,MAAMQ,SAA2B,MAAM,IAAI,CAACC,gBAAgB,CAACxD,MAAMC,OAAOe,MAAMiC,SAASxC,eAAe4C,aAAaV,UAAU5B;QAC/HwC,OAAOA,MAAM,CAACE,KAAK,GAAG,MAAM,IAAI,CAACC,eAAe,CAACH,OAAOA,MAAM;QAC9D,OAAOA;IACT;IAEA,MAAMI,SAAS3D,IAAe,EAAEC,KAAe,EAAEwD,KAAa,EAAE;QAC9D,MAAMG,eAAmC,MAAM,IAAI,CAACC,GAAG,CAACC,WAAW,CAACL,OAAO;YAAEM,QAAQC,gCAAa,CAACC,YAAY,CAACC,KAAK,CAACC,UAAU,CAACJ,MAAM;QAAC;QACxI,IAAI;YACF,OAAQH,aAAaQ,MAAM;gBACzB,KAAK;oBACH,6BAA6B;oBAC7B,MAAM,IAAI,CAACC,aAAa,CAACrE,MAAMC,OAAO2D;oBACtC,IAAI,CAACrB,MAAM,CAAC+B,KAAK,CAAC,CAAC,2BAA2B,EAAErE,MAAMmD,GAAG,EAAE;oBAC3D;gBACF,KAAK;oBACH,kCAAkC;oBAClC,MAAM,IAAI,CAACiB,aAAa,CAACrE,MAAMC,OAAO2D;oBACtC,IAAIA,aAAaW,WAAW,EAAE;wBAC5B,IAAI,CAAChC,MAAM,CAAC+B,KAAK,CAAC,CAAC,iDAAiD,EAAErE,MAAMmD,GAAG,EAAE;oBACnF,OAAO;wBACL,IAAI,CAACb,MAAM,CAAC+B,KAAK,CAAC,CAAC,6DAA6D,EAAErE,MAAMmD,GAAG,EAAE;wBAC7F,MAAM,IAAI,CAACoB,YAAY,CAACvE,OAAO2D,aAAaR,GAAG;oBACjD;oBACA,MAAM,IAAI,CAACqB,cAAc,CAACzE,KAAK6B,EAAE,EAAE5B;oBACnC,MAAM,IAAI,CAACyE,iBAAiB,CAACzE;oBAC7B;gBACF,KAAK;oBACH,IAAI,CAACsC,MAAM,CAACC,KAAK,CAAC,CAAC,mEAAmE,EAAEvC,MAAMmD,GAAG,EAAE;oBACnG,MAAM,IAAI,CAACoB,YAAY,CAACvE,OAAO2D,aAAaR,GAAG;oBAC/C;gBACF,KAAK;oBACH,kCAAkC;oBAClC,MAAM,IAAI,CAACqB,cAAc,CAACzE,KAAK6B,EAAE,EAAE5B;oBACnC,MAAM,IAAI,CAACyE,iBAAiB,CAACzE;oBAC7B,IAAI,CAACsC,MAAM,CAAC+B,KAAK,CAAC,CAAC,sCAAsC,EAAErE,MAAMmD,GAAG,EAAE;oBACtE;gBACF,KAAK;oBACH,IAAI,CAACb,MAAM,CAAC+B,KAAK,CAAC,CAAC,4CAA4C,EAAErE,MAAMmD,GAAG,EAAE;oBAC5E,MAAM,IAAI,CAACoB,YAAY,CAACvE,OAAO2D,aAAaR,GAAG;oBAC/C;gBACF,KAAK;oBACH,IAAI,CAACb,MAAM,CAACC,KAAK,CAAC,CAAC,yEAAyE,EAAEvC,MAAMmD,GAAG,EAAE;oBACzG,MAAM,IAAI,CAACoB,YAAY,CAACvE,OAAO2D,aAAaR,GAAG;oBAC/C;gBACF;oBACE,IAAI,CAACb,MAAM,CAACC,KAAK,CAAC;YACtB;QACF,EAAE,OAAOL,GAAG;YACV,IAAI,CAACI,MAAM,CAACC,KAAK,CAAC,GAAG,IAAI,CAACmB,QAAQ,CAAClB,IAAI,CAAC,GAAG,EAAEN,EAAEwC,OAAO,CAAC,GAAG,EAAE1E,MAAMmD,GAAG,EAAE;YACvE,OAAO;gBAAEZ,OAAOL,EAAEwC,OAAO;YAAC;QAC5B;QACA,OAAO;YAAEnC,OAAO;QAAE;IACpB;IAEA,MAAcgB,iBACZxD,IAAe,EACfC,KAAe,EACfe,IAAe,EACfiC,OAAe,EACfxC,aAAqB,EACrB4C,WAAmB,EACnBV,QAAiB,EACjB5B,OAA8B,EACH;QAC3B,MAAM6D,UAAU5D,SAASI,qBAAS,CAACC,IAAI;QACvC,MAAMwD,eAAehE,2CAAsB,CAACiE,GAAG,CAACrE;QAChD,OAAO;YACLM,SAASA;YACTgE,mBAAmB,IAAI,CAACC,wBAAwB,IAAI,GAAG,IAAI,CAACC,cAAc,CAACC,eAAe,KAAKC,6CAAwB,EAAE;YACzH5B,QAAQ;gBACN6B,MAAMzC,WAAW,WAAW;gBAC5B0C,QAAQ;gBACRC,OAAO;gBACPT,cAAcA;gBACdU,UAAU;oBACRC,OAAO9E,iBAAI,CAAC+E,QAAQ,CAACxF,MAAMyF,WAAW;oBACtCC,UAAUlF;oBACVmF,KAAK,MAAM,IAAI,CAACC,cAAc,CAAC5F;oBAC/B6F,aAAa;wBACXC,UAAU;wBACVC,MAAMpB;wBACNqB,eAAe;wBACfC,SAAStB;wBACTuB,WAAWvB;wBACXwB,OAAO;wBACPC,QAAQzB;oBACV;oBACAxB,KAAKH;gBACP;gBACAqD,cAAc;oBACZtF,MAAMA;oBACNuF,MAAM;oBACNC,QAAQ;oBACRC,aAAapD;oBACbrD,MAAM;wBAAE6B,IAAI7B,KAAK6B,EAAE,CAAC6E,QAAQ;wBAAIjE,MAAM,GAAGzC,KAAK2G,QAAQ,CAAC,EAAE,EAAE3G,KAAK4G,KAAK,CAAC,CAAC,CAAC;wBAAEC,OAAO,MAAMC,IAAAA,uBAAe,EAAC9G,KAAK+G,KAAK;oBAAE;oBACnHC,WAAW;wBACThG,MAAM;wBACNiG,QAAQ;oBACV;oBACAC,UAAU;wBACRC,UAAUlE;wBACVmE,SAASnE;wBACToE,UAAUpE;wBACVqE,eAAe;oBACjB;oBACAC,eAAe;wBACbC,OAAO;wBACPC,UAAU;wBACVC,WAAW;wBACXC,MAAM9C,iBAAiB,UAAU,KAAK;wBACtC+C,MAAM;wBACNC,UAAU;4BAAEC,cAAc;wBAAM;wBAChCC,SAAS;oBACX;gBACF;YACF;QACF;IACF;IAEQ7E,SAAS8E,QAAgB,EAAEC,QAAgB,EAAExE,KAAa,EAAU;QAC1E,MAAML,MAAM,IAAI8E,IAAI,GAAGF,SAAS,CAAC,EAAEC,UAAU,EAAE,IAAI,CAAChD,cAAc,CAACC,eAAe;QAClF9B,IAAI+E,YAAY,CAACC,GAAG,CAACC,uDAAkC,EAAE5E;QACzD,OAAOL,IAAIsD,QAAQ;IACrB;IAEQhD,gBAAgB4E,OAAiD,EAAmB;QAC1F,OAAO,IAAI,CAACzE,GAAG,CAAC0E,SAAS,CAACD,SAAS;YAAEvE,QAAQC,gCAAa,CAACC,YAAY,CAACC,KAAK,CAACC,UAAU,CAACJ,MAAM;YAAEyE,WAAW;QAAG;IACjH;IAEQxF,aAAahD,IAAe,EAAmB;QACrD,gDAAgD;QAChD,OAAO,IAAI,CAAC6D,GAAG,CAAC0E,SAAS,CACvB;YACEE,UAAU;gBACR5G,IAAI7B,KAAK6B,EAAE;gBACXkF,OAAO/G,KAAK+G,KAAK;gBACjBH,OAAO5G,KAAK4G,KAAK;gBACjBD,UAAU3G,KAAK2G,QAAQ;gBACvB+B,UAAU1I,KAAK0I,QAAQ;gBACvBC,MAAM3I,KAAK2I,IAAI;gBACf1E,cAAcjE,KAAKiE,YAAY;YACjC;QACF,GACA;YACEF,QAAQC,gCAAa,CAAC4E,IAAI,CAACnF,KAAK,CAACoF,MAAM,CAAC9E,MAAM;YAC9CyE,WAAW,IAAI,CAACM,UAAU;QAC5B;IAEJ;IAEA,MAAczE,cAAcrE,IAAe,EAAEC,KAAe,EAAE2D,YAAgC,EAAE;QAC9F,KAAK,MAAMmF,UAAUnF,aAAaoF,OAAO,CAAE;YACzC,IAAID,OAAO3D,IAAI,KAAK,GAAG;gBACrB,aAAa;gBACb,+DAA+D;gBAC/D,IAAI,CAAC6D,MAAMC,OAAO,CAACtF,aAAauF,KAAK,GAAG;oBACtC,MAAM,IAAI,CAAC1E,cAAc,CAAC2E,SAASL,OAAOM,MAAM,GAAGpJ;gBACrD;YACF,OAAO,IAAI8I,OAAO3D,IAAI,KAAK,GAAG;gBAC5B,UAAU;gBACV,8DAA8D;gBAC9D,IAAI6D,MAAMC,OAAO,CAACtF,aAAauF,KAAK,KAAKvF,aAAauF,KAAK,CAACG,MAAM,KAAK,GAAG;oBACxE,MAAM,IAAI,CAACC,cAAc,CAACvJ,MAAMC;gBAClC;YACF;QACF;IACF;IAEA,MAAcsJ,eAAevJ,IAAe,EAAEC,KAAe,EAAiB;QAC5E,MAAM,CAACuJ,IAAIC,UAAU,GAAG,MAAM,IAAI,CAAClI,gBAAgB,CAACmI,MAAM,CACxD1J,MACAC,MAAMwB,MAAM,EACZM,yCAAoB,EACpBL,aAAK,CAACC,QAAQ,EACd;YACEgI,UAAU;YACVC,WAAW;YACX5H,WAAWC,kBAAU,CAACC,MAAM;QAC9B,GACA,IAAI,CAAC4G,UAAU;QAEjB,IAAI,CAACU,IAAI;YACP,MAAM,IAAInJ,qBAAa,CAAC,sBAAsBC,kBAAU,CAACuJ,MAAM;QACjE;IACF;IAEA,MAAcpF,eAAe7C,MAAc,EAAE3B,KAAe,EAAiB;QAC3E,KAAK,MAAMqC,QAAQ,CAAA,MAAM,IAAI,CAACf,gBAAgB,CAACuI,cAAc,CAAC7J,MAAMwB,MAAM,CAAA,EAAG;YAC3E,IAAIa,KAAKyH,KAAK,CAAClI,EAAE,KAAKD,QAAQ;gBAC5B,MAAM,IAAI,CAACL,gBAAgB,CAACyI,UAAU,CAAC1H,KAAKsD,GAAG;YACjD;QACF;IACF;IAEA,MAAclB,kBAAkBzE,KAAe,EAAiB;QAC9D,IAAI,CAAE,MAAM,IAAI,CAACsB,gBAAgB,CAAC0I,YAAY,CAAChK,MAAMwB,MAAM,GAAI;YAC7D,MAAMyI,WAAW,IAAI,CAACC,WAAW,CAAClK,MAAMwB,MAAM;YAC9C,MAAM2I,IAAI,MAAM,IAAI,CAACC,KAAK,CAACC,GAAG,CAACJ;YAC/B,IAAI,CAAC3H,MAAM,CAAC+B,KAAK,CAAC,GAAG,IAAI,CAACI,iBAAiB,CAACjC,IAAI,CAAC,GAAG,EAAEyH,SAAS,CAAC,EAAEE,IAAI,KAAK,MAAM,QAAQ,CAAC;QAC5F;IACF;IAEA,MAAcvE,eAAe5F,KAAe,EAAmB;QAC7D,kDAAkD;QAClD,MAAMiK,WAAW,IAAI,CAACC,WAAW,CAAClK,MAAMwB,MAAM;QAC9C,MAAM8I,iBAAyB,MAAM,IAAI,CAACF,KAAK,CAACvF,GAAG,CAACoF;QACpD,IAAIK,gBAAgB;YAClB,OAAOA;QACT;QACA,MAAMC,SAASC,IAAAA,cAAO,EAAC,MAAMxK,MAAMG,QAAQ,EAAE;QAC7C,MAAM,IAAI,CAACiK,KAAK,CAACjC,GAAG,CAAC8B,UAAUM,QAAQ,IAAI,CAAC1B,UAAU;QACtD,IAAI,CAACvG,MAAM,CAAC+B,KAAK,CAAC,GAAG,IAAI,CAACuB,cAAc,CAACpD,IAAI,CAAC,GAAG,EAAEyH,SAAS,EAAE,EAAEM,OAAO,SAAS,CAAC;QACjF,OAAOA;IACT;IAEA,MAAchG,aAAavE,KAAe,EAAEmD,GAAW,EAAiB;QACtE;;;KAGC,GACD,MAAMsH,YAAY,IAAIC,gBAAgBvH,IAAIwH,KAAK,CAAC,KAAKC,EAAE,CAAC,CAAC;QACzD,oGAAoG;QACpG,MAAMC,MAAcJ,UAAU5F,GAAG,CAAC;QAClC,MAAMiG,cAAc,MAAMC,IAAAA,4BAAqB,EAACtK,iBAAI,CAACuK,IAAI,CAACC,eAAE,CAACC,MAAM,IAAI,GAAGL,IAAI,CAAC,EAAEJ,UAAU5F,GAAG,CAAC,aAAa;QAE5G,wGAAwG;QACxG,MAAMsG,iBAAiB1K,iBAAI,CAACC,OAAO,CAACV,MAAMG,QAAQ,EAAEQ,KAAK,CAAC;QAC1D,MAAMyK,kBAAkB3K,iBAAI,CAACC,OAAO,CAAC+J,UAAU5F,GAAG,CAAC,aAAalE,KAAK,CAAC;QAEtE,IAAI0K;QACJ,IAAIF,mBAAmBC,mBAAmB,CAACE,mDAA8B,CAACC,UAAU,CAAC1K,GAAG,CAACsK,iBAAiB;YACxG,IAAIG,mDAA8B,CAACE,IAAI,CAAC3K,GAAG,CAACuK,oBAAoBE,mDAA8B,CAACG,EAAE,CAAC5K,GAAG,CAACsK,iBAAiB;gBACrHE,cAAc,MAAM,IAAI,CAACK,eAAe,CAACjB,UAAU5F,GAAG,CAAC,aAAa1B,KAAKiI,iBAAiBD,gBAAgBnL,MAAMmD,GAAG;YACrH,OAAO;gBACL,MAAM,IAAIwI,MAAM,CAAC,kCAAkC,EAAEP,gBAAgB,IAAI,EAAED,eAAe,GAAG,EAAEnL,MAAMmD,GAAG,EAAE;YAC5G;QACF,OAAO;YACLkI,cAAclI;QAChB;QAEA,gBAAgB;QAChB,IAAIyI;QACJ,IAAI;YACFA,MAAM,MAAM,IAAI,CAACC,IAAI,CAACC,QAAQ,CAAC;gBAC7BC,QAAQC,kCAAW,CAACC,GAAG;gBACvB9I,KAAKkI;gBACLa,cAAc;gBACdC,YAAY,IAAIC,cAAK,CAACC,KAAK,CAAC;oBAAEC,oBAAoB,IAAI,CAACA,kBAAkB;gBAAC;YAC5E;YACA,MAAMC,IAAAA,sBAAe,EAACzB,aAAac,IAAIY,IAAI;QAC7C,EAAE,OAAOtK,GAAG;YACV,MAAM,IAAIyJ,MAAM,CAAC,yBAAyB,EAAEzJ,EAAEwC,OAAO,EAAE;QACzD;QAEA,oCAAoC;QACpC,MAAM+H,gBAAgBtD,SAASyC,IAAI/I,OAAO,CAAC,iBAAiB,EAAE;QAC9D,IAAI,CAAC6J,MAAMD,kBAAkBA,kBAAkB,GAAG;YAChD,MAAME,cAAc,MAAMC,IAAAA,eAAQ,EAAC9B;YACnC,IAAI6B,gBAAgBF,eAAe;gBACjC,MAAM,IAAId,MAAM,CAAC,uBAAuB,EAAEgB,YAAY,IAAI,EAAEF,cAAc,CAAC,CAAC;YAC9E;QACF,OAAO,IAAIA,kBAAkB,GAAG;YAC9B,IAAI,CAACnK,MAAM,CAACuK,IAAI,CAAC,GAAG,IAAI,CAACtI,YAAY,CAAC/B,IAAI,CAAC,yBAAyB,EAAExC,MAAMmD,GAAG,EAAE;QACnF;QACA,iEAAiE;QACjE,IAAI;YACF,mBAAmB;YACnB,MAAM2J,IAAAA,sBAAe,EAAChC,aAAa9K,MAAMG,QAAQ;YACjD,MAAM4M,IAAAA,kBAAW,EAACjC;QACpB,EAAE,OAAO5I,GAAG;YACV,MAAM,IAAIyJ,MAAM,CAAC,0BAA0B,EAAEzJ,EAAEwC,OAAO,EAAE;QAC1D;IACF;IAEA,MAAcgH,gBAAgB9J,EAAU,EAAEuB,GAAW,EAAEuC,QAAgB,EAAEsH,UAAkB,EAAEhF,QAAgB,EAAmB;QAC9H,MAAMrC,MAAc,GAAG/D,GAAG,CAAC,EAAEqL,mBAAM,CAACC,WAAW,CAAC,IAAIzG,QAAQ,CAAC,QAAQ,CAAC9F,KAAK,CAAC,GAAG,IAAIwM,OAAO,CAAC,KAAK;QAChG,MAAM9E,UAAiC;YACrC1C,KAAKA;YACLxC,KAAKA;YACLiK,UAAU1H;YACV2H,YAAYL;YACZM,OAAO;QACT;QACAjF,QAAQ7E,KAAK,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC4E;QAC3C,IAAIkF;QACJ,IAAI;YACF,MAAM3B,MAAqB,MAAM,IAAI,CAACC,IAAI,CAACC,QAAQ,CAAC;gBAClDC,QAAQC,kCAAW,CAACwB,IAAI;gBACxBrK,KAAK,IAAI,CAACsK,UAAU;gBACpBjB,MAAMnE;gBACN8D,YAAY,IAAIC,cAAK,CAACC,KAAK,CAAC;oBAAEC,oBAAoB,IAAI,CAACA,kBAAkB;gBAAC;YAC5E;YACAiB,SAAS3B,IAAIY,IAAI;QACnB,EAAE,OAAOtK,GAAG;YACV,MAAM,IAAIyJ,MAAM,CAAC,6BAA6B,EAAEzJ,EAAEwL,QAAQ,CAACvJ,MAAM,EAAE;QACrE;QACA,IAAIoJ,OAAOhL,KAAK,EAAE;YAChB,MAAM,IAAIoJ,MAAM,CAAC,6BAA6B,EAAEgC,8CAAyB,CAAC9I,GAAG,CAAC0I,OAAOhL,KAAK,GAAG;QAC/F;QACA,IAAIgL,OAAOK,UAAU,EAAE;YACrB,IAAI,CAACtL,MAAM,CAACuL,GAAG,CAAC,GAAG,IAAI,CAACnC,eAAe,CAAClJ,IAAI,CAAC,GAAG,EAAEkD,SAAS,IAAI,EAAEsH,WAAW,GAAG,EAAEhF,UAAU;YAC3F,OAAOuF,OAAOvK,OAAO;QACvB;IACF;IAEQkH,YAAY1I,MAAmB,EAAU;QAC/C,OAAO,GAAGsM,0CAAqB,CAAC,CAAC,EAAEC,IAAAA,iCAA0B,EAACvM,SAAS;IACzE;IA9VA,YACE,AAAiBqK,IAAiB,EAClC,AAAiB7G,cAA8B,EAC/C,AAAiBoF,KAAY,EAC7B,AAAiBxG,GAAe,EAChC,AAAiBtC,gBAAkC,CACnD;aALiBuK,OAAAA;aACA7G,iBAAAA;aACAoF,QAAAA;aACAxG,MAAAA;aACAtC,mBAAAA;aAZXgB,SAAS,IAAI0L,cAAM,CAACnO,kBAAkB2C,IAAI;aACjCuC,2BAA2BhB,gCAAa,CAACC,YAAY,CAACC,KAAK,CAACC,UAAU,CAAC+J,cAAc,IAAI;aACzF3B,qBAA8B,CAACvI,gCAAa,CAACC,YAAY,CAACC,KAAK,CAACC,UAAU,EAAEgK;aAC5ET,aAAa,IAAI,CAAC1I,wBAAwB,GAAG,GAAG,IAAI,CAACA,wBAAwB,CAAC,oBAAoB,CAAC,GAAG;aACtG8D,aAAasF,IAAAA,oCAAyB,EAACpK,gCAAa,CAAC4E,IAAI,CAACnF,KAAK,CAAC4K,OAAO,CAACvF,UAAU;aAClFlG,cAAsB;IAQpC;AAyVL"}