@tinyrack/issuary-server 0.31.0 → 0.32.2

package/dist/services/admin-console.service.js

@@ -1,5 +1,7 @@
 import { TermsContentEntitySchema } from '../entities/terms-content.entity.js';
 import { e } from '../schemas/error.js';
+import { lockOAuthClient } from './client-security.js';
+import { lockTermsPolicy } from './terms-policy.service.js';
 function clientResponse(client) {
     const type = client.clientSecretHash
         ? 'confidential'
@@ -157,88 +159,114 @@ export class AdminConsoleService {
         return { client: clientResponse(client), client_secret: secret };
     }
     async updateClient(id, input) {
-        const client = await this.mikro.oauthClient.findOne({ id }, { populate: ['clientSecretHash'] });
-        if (!client)
-            return null;
-        this.ensureClientEditable(client);
-        client.name = input.name;
-        client.redirectUris = input.redirectUris;
-        client.postLogoutRedirectUris = input.postLogoutRedirectUris;
-        client.webOrigins = input.webOrigins;
-        client.grantTypes = input.grantTypes;
-        client.responseTypes = input.responseTypes;
-        client.scopes = input.scopes;
-        client.skipConsent = input.skipConsent;
-        await this.mikro.em.flush();
-        return { client: clientResponse(client) };
+        return this.mikro.em.transactional(async () => {
+            const client = await lockOAuthClient(this.mikro.em, id);
+            if (client)
+                await this.mikro.em.populate(client, ['clientSecretHash']);
+            if (!client)
+                return null;
+            this.ensureClientEditable(client);
+            client.name = input.name;
+            client.redirectUris = input.redirectUris;
+            client.postLogoutRedirectUris = input.postLogoutRedirectUris;
+            client.webOrigins = input.webOrigins;
+            client.grantTypes = input.grantTypes;
+            client.responseTypes = input.responseTypes;
+            client.scopes = input.scopes;
+            client.skipConsent = input.skipConsent;
+            await this.mikro.em.flush();
+            return { client: clientResponse(client) };
+        });
     }
     async rotateClientSecret(id) {
-        const client = await this.mikro.oauthClient.findOne({ id }, { populate: ['clientSecretHash'] });
-        if (!client)
-            return null;
-        this.ensureClientEditable(client);
-        if (!client.clientSecretHash)
-            return null;
-        const secret = `${crypto.randomUUID()}${crypto.randomUUID()}`;
-        client.clientSecretHash =
-            await this.securityService.hashClientSecret(secret);
-        await this.mikro.em.flush();
-        return { client: clientResponse(client), client_secret: secret };
+        return this.mikro.em.transactional(async () => {
+            const client = await lockOAuthClient(this.mikro.em, id);
+            if (client)
+                await this.mikro.em.populate(client, ['clientSecretHash']);
+            if (!client)
+                return null;
+            this.ensureClientEditable(client);
+            if (!client.clientSecretHash)
+                return null;
+            const secret = `${crypto.randomUUID()}${crypto.randomUUID()}`;
+            client.clientSecretHash =
+                await this.securityService.hashClientSecret(secret);
+            await this.mikro.em.flush();
+            return { client: clientResponse(client), client_secret: secret };
+        });
     }
     async setClientsEnabled(ids, filter, enabled) {
-        if (ids) {
-            const clients = await this.mikro.oauthClient.find({ id: { $in: ids } });
+        return this.mikro.em.transactional(async () => {
+            if (ids) {
+                const clients = await this.mikro.oauthClient.find({ id: { $in: ids } });
+                for (const client of clients.sort((a, b) => a.id.localeCompare(b.id))) {
+                    const fresh = await lockOAuthClient(this.mikro.em, client.id);
+                    if (!fresh)
+                        throw new e.OAuthClientNotFound.Error();
+                    this.ensureClientEditable(fresh);
+                }
+                return this.applyStatus(clients, enabled, (client) => client.enabled, (client) => {
+                    client.enabled = enabled;
+                });
+            }
+            const where = {
+                deletedAt: null,
+                managed_by: 'database',
+            };
+            if (filter?.managedBy)
+                where['managed_by'] = filter.managedBy;
+            if (filter?.enabled !== undefined)
+                where['enabled'] = filter.enabled;
+            const query = filter?.query?.trim();
+            if (query)
+                where['$or'] = [
+                    { name: { $like: `%${query}%` } },
+                    { clientId: { $like: `%${query}%` } },
+                ];
+            const clients = await this.mikro.oauthClient.find(where, {
+                orderBy: { id: 'ASC' },
+            });
             for (const client of clients)
-                this.ensureClientEditable(client);
+                await lockOAuthClient(this.mikro.em, client.id);
             return this.applyStatus(clients, enabled, (client) => client.enabled, (client) => {
                 client.enabled = enabled;
             });
-        }
-        const where = {
-            deletedAt: null,
-            managed_by: 'database',
-        };
-        if (filter?.managedBy)
-            where['managed_by'] = filter.managedBy;
-        if (filter?.enabled !== undefined)
-            where['enabled'] = filter.enabled;
-        const query = filter?.query?.trim();
-        if (query)
-            where['$or'] = [
-                { name: { $like: `%${query}%` } },
-                { clientId: { $like: `%${query}%` } },
-            ];
-        const clients = await this.mikro.oauthClient.find(where);
-        return this.applyStatus(clients, enabled, (client) => client.enabled, (client) => {
-            client.enabled = enabled;
         });
     }
     async deleteClient(id) {
-        const client = await this.mikro.oauthClient.findOne({ id }, { populate: ['clientSecretHash'] });
-        if (!client)
-            return null;
-        if (client.managed_by === 'config') {
-            throw new e.OAuthClientNotEditable.Error();
-        }
-        if (!client.deletedAt) {
-            client.deletedAt = new Date();
-            client.tokenEpoch = crypto.randomUUID();
-            await this.mikro.em.flush();
-        }
-        return { client: clientResponse(client) };
+        return this.mikro.em.transactional(async () => {
+            const client = await lockOAuthClient(this.mikro.em, id);
+            if (client)
+                await this.mikro.em.populate(client, ['clientSecretHash']);
+            if (!client)
+                return null;
+            if (client.managed_by === 'config') {
+                throw new e.OAuthClientNotEditable.Error();
+            }
+            if (!client.deletedAt) {
+                client.deletedAt = new Date();
+                client.tokenEpoch = crypto.randomUUID();
+                await this.mikro.em.flush();
+            }
+            return { client: clientResponse(client) };
+        });
     }
     async restoreClient(id) {
-        const client = await this.mikro.oauthClient.findOne({ id }, { populate: ['clientSecretHash'] });
-        if (!client)
-            return null;
-        if (client.managed_by === 'config') {
-            throw new e.OAuthClientNotEditable.Error();
-        }
-        if (client.deletedAt) {
-            client.deletedAt = null;
-            await this.mikro.em.flush();
-        }
-        return { client: clientResponse(client) };
+        return this.mikro.em.transactional(async () => {
+            const client = await lockOAuthClient(this.mikro.em, id);
+            if (client)
+                await this.mikro.em.populate(client, ['clientSecretHash']);
+            if (!client)
+                return null;
+            if (client.managed_by === 'config') {
+                throw new e.OAuthClientNotEditable.Error();
+            }
+            if (client.deletedAt) {
+                client.deletedAt = null;
+                await this.mikro.em.flush();
+            }
+            return { client: clientResponse(client) };
+        });
     }
     async listTerms(params) {
         const where = {};
@@ -268,42 +296,51 @@ export class AdminConsoleService {
         };
     }
     async createTerm(input) {
-        const term = this.mikro.terms.create({
-            id: input.id,
-            required: input.required,
-            consentMode: input.consentMode,
-            version: input.version,
-            managed_by: 'database',
-            archivedAt: null,
+        return this.mikro.em.transactional(async () => {
+            await lockTermsPolicy(this.mikro.em, 'write');
+            const term = this.mikro.terms.create({
+                id: input.id,
+                required: input.required,
+                consentMode: input.consentMode,
+                version: input.version,
+                managed_by: 'database',
+                archivedAt: null,
+            });
+            this.replaceTermContents(this.mikro.em, term, input.contents);
+            await this.mikro.em.persist(term).flush();
+            return { term: termResponse(term) };
         });
-        this.replaceTermContents(this.mikro.em, term, input.contents);
-        await this.mikro.em.persist(term).flush();
-        return { term: termResponse(term) };
     }
     async updateTerm(id, input) {
-        const term = await this.mikro.terms.findOne({ id }, { populate: ['contents'] });
-        if (!term || term.managed_by === 'config')
-            return null;
-        term.required = input.required;
-        term.consentMode = input.consentMode;
-        term.version = input.version;
-        for (const content of term.contents.getItems())
-            this.mikro.em.remove(content);
-        term.contents.removeAll();
-        this.replaceTermContents(this.mikro.em, term, input.contents);
-        await this.mikro.em.flush();
-        return { term: termResponse(term) };
+        return this.mikro.em.transactional(async () => {
+            await lockTermsPolicy(this.mikro.em, 'write');
+            const term = await this.mikro.terms.findOne({ id }, { populate: ['contents'] });
+            if (!term || term.managed_by === 'config')
+                return null;
+            term.required = input.required;
+            term.consentMode = input.consentMode;
+            term.version = input.version;
+            for (const content of term.contents.getItems())
+                this.mikro.em.remove(content);
+            term.contents.removeAll();
+            this.replaceTermContents(this.mikro.em, term, input.contents);
+            await this.mikro.em.flush();
+            return { term: termResponse(term) };
+        });
     }
     async setTermsArchived(ids, filter, archived) {
-        const where = ids ? { id: { $in: ids } } : {};
-        if (filter?.managedBy)
-            where['managed_by'] = filter.managedBy;
-        const query = filter?.query?.trim();
-        if (query)
-            where['id'] = { $like: `%${query}%` };
-        const terms = await this.mikro.terms.find(where);
-        return this.applyStatus(terms, archived, (term) => Boolean(term.archivedAt), (term) => {
-            term.archivedAt = archived ? new Date() : null;
+        return this.mikro.em.transactional(async () => {
+            await lockTermsPolicy(this.mikro.em, 'write');
+            const where = ids ? { id: { $in: ids } } : {};
+            if (filter?.managedBy)
+                where['managed_by'] = filter.managedBy;
+            const query = filter?.query?.trim();
+            if (query)
+                where['id'] = { $like: `%${query}%` };
+            const terms = await this.mikro.terms.find(where);
+            return this.applyStatus(terms, archived, (term) => Boolean(term.archivedAt), (term) => {
+                term.archivedAt = archived ? new Date() : null;
+            });
         });
     }
     async search(query) {

package/dist/services/admin-console.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-console.service.js","sourceRoot":"","sources":["../../src/services/admin-console.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AA2CxC,SAAS,cAAc,CAAC,MAiBvB;IACC,MAAM,IAAI,GAA8B,MAAM,CAAC,gBAAgB;QAC7D,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,yBAAyB,EAAE,MAAM,CAAC,sBAAsB;QACxD,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAiBrB;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,KAAK,CAAe;IACpB,eAAe,CAAkB;IACjC,MAAM,CAAuB;IAE9C,YACE,KAAmB,EACnB,eAAgC,EAChC,MAA4B;QAE5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,CACJ,WAAW,EACX,MAAM,EACN,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACd,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAChD,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACjD,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP,YAAY,EAAE,WAAW;gBACzB,MAAM;gBACN,cAAc,EAAE,aAAa;gBAC7B,cAAc,EAAE,aAAa;aAC9B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE;gBACxD,cAAc,EAAE;oBACd,cAAc,EAAE,aAAa;oBAC7B,UAAU,EAAE,cAAc;oBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,aAAa,EAAE,CAAC,CAAC;iBACpD;aACF;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACpD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAC3C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;gBACzC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;aAC7C;SACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,MAGC;QAED,MAAM,KAAK,GACT,MAAM,CAAC,eAAe,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QACjE,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAChC,KAAK,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;gBACjC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE;YACxE,QAAQ,EAAE,CAAC,kBAAkB,CAAC;YAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ;YAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,EAAE;SAC7C,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAuB;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC;YACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,cAAc;YAC3B,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YAC3C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,MAAM;gBACtB,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBACrD,CAAC,CAAC,IAAI;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,EAAU,EACV,KAAkD;QAElD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CACjD,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACzB,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACzC,MAAM,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;QAC7D,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACrC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACrC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC3C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CACjD,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,gBAAgB;YACrB,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,GAAyB,EACzB,MAAkC,EAClC,OAAgB;QAEhB,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,OAAO,EACP,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAC1B,CAAC,MAAM,EAAE,EAAE;gBACT,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YAC3B,CAAC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAA4B;YACrC,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,UAAU;SACvB,CAAC;QACF,IAAI,MAAM,EAAE,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,KAAK;YACP,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;gBACjC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;aACtC,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,OAAO,EACP,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAC1B,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC,CACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,EAAU;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CACjD,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,EAAU;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CACjD,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CACnC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,MAIC;QAED,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvE,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;QAClE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC/B,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK;YACP,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;gBAC/B,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE,EAAE;aACjD,CAAC;QACJ,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE;YAChE,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ;YAC3C,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,EAAE;SAC3C,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAqB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACnC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,KAAiC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CACzC,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAC3B,CAAC;QACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;YAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,GAAyB,EACzB,MAAkC,EAClC,QAAiB;QAEjB,MAAM,KAAK,GAA4B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,EAAE,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,WAAW,CACrB,KAAK,EACL,QAAQ,EACR,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAClC,CAAC,IAAI,EAAE,EAAE;YACP,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC,CACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAClB,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EACjE,EAAE,KAAK,EAAE,CAAC,EAAE,CACb;YACD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CACzB;gBACE,SAAS,EAAE,IAAI;gBACf,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAClE,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAC7C;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CACnB;gBACE,GAAG,EAAE;oBACH,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACxB,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;iBAC1C;aACF,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CACrC;SACF,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,IAAI;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,EAAE;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO;aACvB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAEM,MAAM;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;aAChD;YACD,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,gBAAgB;oBACpB,MAAM,EAAE;wBACN,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;wBAC9C,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;wBAC5C,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;qBAChD;iBACF;gBACD;oBACE,EAAE,EAAE,cAAc;oBAClB,MAAM,EAAE;wBACN,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;wBACpC,2BAA2B,EACzB,MAAM,CAAC,YAAY,CAAC,2BAA2B;wBACjD,sBAAsB,EAAE,MAAM,CAAC,YAAY,CAAC,sBAAsB;qBACnE;iBACF;gBACD;oBACE,EAAE,EAAE,UAAU;oBACd,MAAM,EAAE;wBACN,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAClD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAClD,mBAAmB,EACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB;qBACtD;iBACF;gBACD;oBACE,EAAE,EAAE,QAAQ;oBACZ,MAAM,EAAE;wBACN,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;wBAChD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;wBAClD,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO;qBACzD;iBACF;gBACD;oBACE,EAAE,EAAE,mBAAmB;oBACvB,MAAM,EAAE;wBACN,UAAU,EAAE,MAAM,CAAC,kBAAkB,CAAC,GAAG,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CACpC;qBACF;iBACF;gBACD;oBACE,EAAE,EAAE,SAAS;oBACb,MAAM,EAAE;wBACN,wBAAwB,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO;wBACzD,0BAA0B,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS;qBAC9D;iBACF;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,MAAM,EAAE;wBACN,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB;wBAC1C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;wBACrC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB;qBACxC;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,EAAiB,EACjB,IAAkB,EAClB,QAAiC;QAEjC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,EAAE;gBAClD,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAU,EACV,OAAgB,EAChB,OAA6B,EAC7B,MAAyB;QAEzB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAA0B,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBAAE,MAAM,GAAG,QAAQ,CAAC;iBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,MAAM,GAAG,WAAW,CAAC;YACzD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IAEO,oBAAoB,CAAC,MAG5B;QACC,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"admin-console.service.js","sourceRoot":"","sources":["../../src/services/admin-console.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAyC5D,SAAS,cAAc,CAAC,MAiBvB;IACC,MAAM,IAAI,GAA8B,MAAM,CAAC,gBAAgB;QAC7D,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,yBAAyB,EAAE,MAAM,CAAC,sBAAsB;QACxD,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAiBrB;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,KAAK,CAAe;IACpB,eAAe,CAAkB;IACjC,MAAM,CAAuB;IAE9C,YACE,KAAmB,EACnB,eAAgC,EAChC,MAA4B;QAE5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,CACJ,WAAW,EACX,MAAM,EACN,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACd,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAChD,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YACjD,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP,YAAY,EAAE,WAAW;gBACzB,MAAM;gBACN,cAAc,EAAE,aAAa;gBAC7B,cAAc,EAAE,aAAa;aAC9B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE;gBACxD,cAAc,EAAE;oBACd,cAAc,EAAE,aAAa;oBAC7B,UAAU,EAAE,cAAc;oBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,aAAa,EAAE,CAAC,CAAC;iBACpD;aACF;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACpD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAC3C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;gBACzC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;aAC7C;SACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,MAGC;QAED,MAAM,KAAK,GACT,MAAM,CAAC,eAAe,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QACjE,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAChC,KAAK,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;gBACjC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE;YACxE,QAAQ,EAAE,CAAC,kBAAkB,CAAC;YAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ;YAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,EAAE;SAC7C,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAuB;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC;YACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,cAAc;YAC3B,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YAC3C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,MAAM;gBACtB,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBACrD,CAAC,CAAC,IAAI;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,EAAU,EACV,KAAkD;QAElD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YACzC,MAAM,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;YAC7D,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YACrC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;YACrC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAC3C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC7B,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACvC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YAC9D,MAAM,CAAC,gBAAgB;gBACrB,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,GAAyB,EACzB,MAAkC,EAClC,OAAgB;QAEhB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACtE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC9D,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;oBACpD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,OAAO,EACP,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAC1B,CAAC,MAAM,EAAE,EAAE;oBACT,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC3B,CAAC,CACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAA4B;gBACrC,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,UAAU;aACvB,CAAC;YACF,IAAI,MAAM,EAAE,SAAS;gBAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;YAC9D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;YACrE,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACpC,IAAI,KAAK;gBACP,KAAK,CAAC,KAAK,CAAC,GAAG;oBACb,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;oBACjC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;iBACtC,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE;gBACvD,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACvB,CAAC,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,OAAO;gBAC1B,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,WAAW,CACrB,OAAO,EACP,OAAO,EACP,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAC1B,CAAC,MAAM,EAAE,EAAE;gBACT,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YAC3B,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,EAAU;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC9B,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,EAAU;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;gBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,MAIC;QAED,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvE,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;QAClE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC/B,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK;YACP,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE;gBAC/B,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE,EAAE;aACjD,CAAC;QACJ,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE;YAChE,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ;YAC3C,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,EAAE;SAC3C,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;YAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAqB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,UAAU;gBACtB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,KAAiC;QACnE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CACzC,EAAE,EAAE,EAAE,EACN,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAC3B,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,GAAyB,EACzB,MAAkC,EAClC,QAAiB;QAEjB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAA4B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,MAAM,EAAE,SAAS;gBAAE,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACpC,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,WAAW,CACrB,KAAK,EACL,QAAQ,EACR,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAClC,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAClB,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EACjE,EAAE,KAAK,EAAE,CAAC,EAAE,CACb;YACD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CACzB;gBACE,SAAS,EAAE,IAAI;gBACf,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAClE,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAC7C;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CACnB;gBACE,GAAG,EAAE;oBACH,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACxB,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;iBAC1C;aACF,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CACrC;SACF,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,GAAG;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,IAAI;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,EAAE;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO;aACvB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAEM,MAAM;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;aAChD;YACD,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,gBAAgB;oBACpB,MAAM,EAAE;wBACN,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;wBAC9C,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;wBAC5C,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;qBAChD;iBACF;gBACD;oBACE,EAAE,EAAE,cAAc;oBAClB,MAAM,EAAE;wBACN,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;wBACpC,2BAA2B,EACzB,MAAM,CAAC,YAAY,CAAC,2BAA2B;wBACjD,sBAAsB,EAAE,MAAM,CAAC,YAAY,CAAC,sBAAsB;qBACnE;iBACF;gBACD;oBACE,EAAE,EAAE,UAAU;oBACd,MAAM,EAAE;wBACN,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAClD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU;wBAClD,mBAAmB,EACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB;qBACtD;iBACF;gBACD;oBACE,EAAE,EAAE,QAAQ;oBACZ,MAAM,EAAE;wBACN,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;wBAChD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;wBAClD,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO;qBACzD;iBACF;gBACD;oBACE,EAAE,EAAE,mBAAmB;oBACvB,MAAM,EAAE;wBACN,UAAU,EAAE,MAAM,CAAC,kBAAkB,CAAC,GAAG,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CACpC;qBACF;iBACF;gBACD;oBACE,EAAE,EAAE,SAAS;oBACb,MAAM,EAAE;wBACN,wBAAwB,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO;wBACzD,0BAA0B,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS;qBAC9D;iBACF;gBACD;oBACE,EAAE,EAAE,WAAW;oBACf,MAAM,EAAE;wBACN,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB;wBAC1C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;wBACrC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB;qBACxC;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,EAAiB,EACjB,IAAkB,EAClB,QAAiC;QAEjC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,EAAE;gBAClD,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAU,EACV,OAAgB,EAChB,OAA6B,EAC7B,MAAyB;QAEzB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAA0B,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBAAE,MAAM,GAAG,QAAQ,CAAC;iBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,MAAM,GAAG,WAAW,CAAC;YACzD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IAEO,oBAAoB,CAAC,MAG5B;QACC,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}

package/dist/services/auth-budget.service.d.ts

@@ -0,0 +1,6 @@
+import type { MikroService } from './mikro.service.js';
+import type { SecurityService } from './security.service.js';
+/** Shared, atomic fixed-window budgets. No process-local locks or raw PII keys. */
+export declare function consumeAuthBudget(mikro: MikroService, security: SecurityService, key: string, limit: number, windowSeconds: number): Promise<number | null>;
+export declare function clearAuthBudget(mikro: MikroService, security: SecurityService, key: string, windowSeconds: number, requestedAt: number): Promise<void>;
+//# sourceMappingURL=auth-budget.service.d.ts.map

package/dist/services/auth-budget.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-budget.service.d.ts","sourceRoot":"","sources":["../../src/services/auth-budget.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAsBxB;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/services/auth-budget.service.js

@@ -0,0 +1,30 @@
+import { raw, UniqueConstraintViolationException } from '@mikro-orm/core';
+import { AuthBudgetEntitySchema } from '../entities/auth-budget.entity.js';
+/** Shared, atomic fixed-window budgets. No process-local locks or raw PII keys. */
+export async function consumeAuthBudget(mikro, security, key, limit, windowSeconds) {
+    const windowMs = windowSeconds * 1000;
+    const now = Date.now();
+    const bucket = Math.floor(now / windowMs);
+    const expires = (bucket + 1) * windowMs;
+    const id = await security.hashOpaqueToken('auth-budget', `${key}:${bucket}`);
+    try {
+        await mikro.em.insert(AuthBudgetEntitySchema, {
+            id,
+            attempts: 1,
+            expires_at: new Date(expires),
+        });
+        return null;
+    }
+    catch (error) {
+        if (!(error instanceof UniqueConstraintViolationException))
+            throw error;
+    }
+    const changed = await mikro.em.nativeUpdate(AuthBudgetEntitySchema, { id, attempts: { $lt: limit } }, { attempts: raw('attempts + 1') });
+    return changed === 1 ? null : Math.max(1, Math.ceil((expires - now) / 1000));
+}
+export async function clearAuthBudget(mikro, security, key, windowSeconds, requestedAt) {
+    const bucket = Math.floor(requestedAt / (windowSeconds * 1000));
+    const id = await security.hashOpaqueToken('auth-budget', `${key}:${bucket}`);
+    await mikro.em.nativeDelete(AuthBudgetEntitySchema, { id });
+}
+//# sourceMappingURL=auth-budget.service.js.map

package/dist/services/auth-budget.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-budget.service.js","sourceRoot":"","sources":["../../src/services/auth-budget.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAI3E,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EACnB,QAAyB,EACzB,GAAW,EACX,KAAa,EACb,aAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,aAAa,EAAE,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,EAAE;YAC5C,EAAE;YACF,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,kCAAkC,CAAC;YAAE,MAAM,KAAK,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,YAAY,CACzC,sBAAsB,EACtB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAChC,EAAE,QAAQ,EAAE,GAAG,CAAS,cAAc,CAAC,EAAE,CAC1C,CAAC;IACF,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,QAAyB,EACzB,GAAW,EACX,aAAqB,EACrB,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,aAAa,EAAE,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/services/authentication-epoch.d.ts

@@ -0,0 +1,5 @@
+import type { EntityManager } from '@mikro-orm/core';
+import type { UserEntity } from '../entities/user.entity.js';
+/** Called while the user's write lock is held. Expiry is secondary to epoch equality. */
+export declare function invalidateUserAuthentication(em: EntityManager, user: UserEntity): Promise<void>;
+//# sourceMappingURL=authentication-epoch.d.ts.map

package/dist/services/authentication-epoch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-epoch.d.ts","sourceRoot":"","sources":["../../src/services/authentication-epoch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D,yFAAyF;AACzF,wBAAsB,4BAA4B,CAChD,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/services/authentication-epoch.js

@@ -0,0 +1,22 @@
+import { EmailVerificationEntitySchema } from '../entities/email-verification.entity.js';
+import { PasswordResetEntitySchema } from '../entities/password-reset.entity.js';
+import { PendingOAuthRegistrationEntitySchema } from '../entities/pending-oauth-registration.entity.js';
+import { UserOAuthEntitySchema } from '../entities/user-oauth.entity.js';
+/** Called while the user's write lock is held. Expiry is secondary to epoch equality. */
+export async function invalidateUserAuthentication(em, user) {
+    const identities = await em.find(UserOAuthEntitySchema, { user: user.sub });
+    await em.nativeDelete(PendingOAuthRegistrationEntitySchema, {
+        $or: [
+            { userInfo: { email: user.email } },
+            ...identities.map((identity) => ({
+                providerId: identity.provider_name,
+                userInfo: { id: identity.provider_user_id },
+            })),
+        ],
+    });
+    user.token_epoch = crypto.randomUUID();
+    user.sessions_invalidated_at = new Date();
+    await em.nativeUpdate(EmailVerificationEntitySchema, { user: user.sub, verified: false }, { revoked_at: new Date() });
+    await em.nativeUpdate(PasswordResetEntitySchema, { user: user.sub, used: false }, { revoked_at: new Date() });
+}
+//# sourceMappingURL=authentication-epoch.js.map

package/dist/services/authentication-epoch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-epoch.js","sourceRoot":"","sources":["../../src/services/authentication-epoch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,kDAAkD,CAAC;AAExG,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,EAAiB,EACjB,IAAgB;IAEhB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,YAAY,CAAC,oCAAoC,EAAE;QAC1D,GAAG,EAAE;YACH,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE;YACnC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC/B,UAAU,EAAE,QAAQ,CAAC,aAAa;gBAClC,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,gBAAgB,EAAE;aAC5C,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,CAAC,uBAAuB,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1C,MAAM,EAAE,CAAC,YAAY,CACnB,6BAA6B,EAC7B,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EACnC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC3B,CAAC;IACF,MAAM,EAAE,CAAC,YAAY,CACnB,yBAAyB,EACzB,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAC/B,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC3B,CAAC;AACJ,CAAC"}

package/dist/services/authorization-browser.service.d.ts

@@ -0,0 +1,18 @@
+import type { AppEnv } from '../lib/app-env.js';
+import type { AuthorizeResult } from './oauth-authorize.service.js';
+export interface AuthorizationProof {
+    userSub: string;
+    userEpoch: string;
+    clientId: string;
+    clientEpoch: string;
+    redirectUri: string;
+    responseType: string;
+    scopes: string[];
+}
+export declare function completeBrowserAuthorization(c: {
+    var: AppEnv['Variables'];
+    req: {
+        path: string;
+    };
+}, proof: AuthorizationProof, operation: () => Promise<AuthorizeResult>): Promise<AuthorizeResult>;
+//# sourceMappingURL=authorization-browser.service.d.ts.map

package/dist/services/authorization-browser.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-browser.service.d.ts","sourceRoot":"","sources":["../../src/services/authorization-browser.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,4BAA4B,CAChD,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACtD,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GACxC,OAAO,CAAC,eAAe,CAAC,CAqC1B"}

package/dist/services/authorization-browser.service.js

@@ -0,0 +1,28 @@
+import { UserEntity } from '../entities/user.entity.js';
+import { e } from '../schemas/error.js';
+import { withBrowserSecurity } from './browser-security.service.js';
+import { lockOAuthClient } from './client-security.js';
+export async function completeBrowserAuthorization(c, proof, operation) {
+    return withBrowserSecurity(c, async () => {
+        const { mikro, oauthClientService } = c.var.services;
+        const user = await mikro.em.findOneOrFail(UserEntity, { sub: proof.userSub }, { refresh: true });
+        if (user.deleted_at ||
+            user.token_epoch !== proof.userEpoch ||
+            c.var.session.authorization.security?.grants[proof.userSub] !==
+                proof.userEpoch)
+            throw new e.Unauthorized.Error();
+        const client = await lockOAuthClient(mikro.em, proof.clientId);
+        if (!client ||
+            client.deletedAt ||
+            !client.enabled ||
+            (client.tokenEpoch ?? '') !== proof.clientEpoch)
+            throw new e.Unauthorized.Error();
+        const current = await oauthClientService.findByClientId(client.clientId);
+        oauthClientService.validateRedirectUri(current, proof.redirectUri);
+        oauthClientService.validateResponseType(current, proof.responseType);
+        oauthClientService.validateGrantType(current, proof.responseType === 'code' ? 'authorization_code' : 'implicit');
+        oauthClientService.validateScopes(current, proof.scopes);
+        return operation();
+    }, { targets: [proof.userSub], termsPolicy: 'read' });
+}
+//# sourceMappingURL=authorization-browser.service.js.map

package/dist/services/authorization-browser.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-browser.service.js","sourceRoot":"","sources":["../../src/services/authorization-browser.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAavD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,CAAsD,EACtD,KAAyB,EACzB,SAAyC;IAEzC,OAAO,mBAAmB,CACxB,CAAC,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,aAAa,CACvC,UAAU,EACV,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,EACtB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,IACE,IAAI,CAAC,UAAU;YACf,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS;YACpC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzD,KAAK,CAAC,SAAS;YAEjB,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IACE,CAAC,MAAM;YACP,MAAM,CAAC,SAAS;YAChB,CAAC,MAAM,CAAC,OAAO;YACf,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,WAAW;YAE/C,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzE,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACnE,kBAAkB,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACrE,kBAAkB,CAAC,iBAAiB,CAClC,OAAO,EACP,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAClE,CAAC;QACF,kBAAkB,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,SAAS,EAAE,CAAC;IACrB,CAAC,EACD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAClD,CAAC;AACJ,CAAC"}

package/dist/services/browser-security.service.d.ts

@@ -0,0 +1,14 @@
+import type { AppEnv } from '../lib/app-env.js';
+import { type TermsPolicyAccess } from './terms-policy.service.js';
+/** Credential preparation must finish before entering this transaction. */
+export declare function withBrowserSecurity<T>(c: {
+    var: AppEnv['Variables'];
+    req: {
+        path: string;
+    };
+}, operation: () => Promise<T>, options?: {
+    stage?: 'setup' | 'mfa';
+    targets?: string[];
+    termsPolicy?: TermsPolicyAccess;
+}): Promise<T>;
+//# sourceMappingURL=browser-security.service.d.ts.map

package/dist/services/browser-security.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-security.service.d.ts","sourceRoot":"","sources":["../../src/services/browser-security.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AAGnC,2EAA2E;AAC3E,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACtD,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CAC5B,GACL,OAAO,CAAC,CAAC,CAAC,CAmGZ"}

package/dist/services/browser-security.service.js

@@ -0,0 +1,85 @@
+import { raw } from '@mikro-orm/core';
+import { BrowserSessionEntitySchema } from '../entities/browser-session.entity.js';
+import { UserEntity } from '../entities/user.entity.js';
+import { e } from '../schemas/error.js';
+import { lockTermsPolicy, } from './terms-policy.service.js';
+import { isSecurityConflict } from './user-security.service.js';
+/** Credential preparation must finish before entering this transaction. */
+export async function withBrowserSecurity(c, operation, options = {}) {
+    const { session, services } = c.var;
+    const original = session.authorization;
+    const subject = options.stage === 'setup'
+        ? (original.pending2FASetup ?? original.user)
+        : options.stage === 'mfa'
+            ? original.pending2FAUser
+            : original.user;
+    if (!subject)
+        throw new e.Unauthorized.Error();
+    const epoch = original.security?.grants[subject.sub];
+    if (!epoch)
+        throw new e.Unauthorized.Error();
+    try {
+        return await session.atomic(async () => {
+            const em = services.mikro.em;
+            if (options.termsPolicy)
+                await lockTermsPolicy(em, options.termsPolicy);
+            for (const sub of [
+                ...new Set([subject.sub, ...(options.targets ?? [])]),
+            ].sort()) {
+                const changed = await em.nativeUpdate(UserEntity, { sub }, { security_revision: raw('security_revision + 1') });
+                if (changed !== 1) {
+                    if (sub !== subject.sub)
+                        throw new e.UserNotFound.Error();
+                    throw new e.Unauthorized.Error();
+                }
+            }
+            const user = await em.findOneOrFail(UserEntity, { sub: subject.sub }, { refresh: true });
+            if (user.deleted_at || user.token_epoch !== epoch)
+                throw new e.Unauthorized.Error();
+            if (c.req.path.startsWith('/api/admin/') && user.role !== 'admin')
+                throw new e.Forbidden.Error();
+            const locked = await em.nativeUpdate(BrowserSessionEntitySchema, {
+                id: session.id,
+                revision: session.revision,
+                expires_at: { $gt: new Date() },
+            }, { revision: session.revision });
+            if (locked !== 1)
+                throw new e.Unauthorized.Error();
+            const current = await em.findOneOrFail(BrowserSessionEntitySchema, { id: session.id }, { refresh: true });
+            if (current.data.security?.grants[subject.sub] !== epoch)
+                throw new e.Unauthorized.Error();
+            if (options.stage &&
+                subject !== original.user &&
+                (current.data.security?.pendingExpiresAt ?? 0) <= Date.now())
+                throw new e.Unauthorized.Error();
+            const security = current.data.security;
+            if (original.oauth && (security?.oauthExpiresAt ?? 0) <= Date.now())
+                throw new e.Unauthorized.Error();
+            if (original.passkey_challenge &&
+                (security?.challengeExpiresAt ?? 0) <= Date.now())
+                throw new e.Unauthorized.Error();
+            // Password-only enrollment authority ends once any factor is enrolled,
+            // including when another browser finishes while this request is waiting.
+            if (options.stage === 'setup' &&
+                original.pending2FASetup &&
+                (await services.userService.userRegistered2FAMethods(subject.sub))
+                    .length > 0)
+                throw new e.Unauthorized.Error();
+            const result = await operation();
+            const after = await em.findOneOrFail(UserEntity, { sub: subject.sub }, { refresh: true });
+            if (after.deleted_at || after.token_epoch !== epoch) {
+                session.clearAuthSessions();
+                session.set('accounts', session
+                    .get('accounts')
+                    ?.filter((account) => account.sub !== subject.sub));
+            }
+            return result;
+        });
+    }
+    catch (error) {
+        if (isSecurityConflict(error))
+            throw new e.ConcurrentSecurityChange.Error();
+        throw error;
+    }
+}
+//# sourceMappingURL=browser-security.service.js.map