@vitnode/core 1.2.0-canary.74 → 1.2.0-canary.76

package/dist/src/api/modules/admin/staff/routes/delete.route.d.ts

@@ -0,0 +1,40 @@
+import { Route } from "../../../../lib/route.js";
+import { z } from "@hono/zod-openapi";
+//#region src/api/modules/admin/staff/routes/delete.route.d.ts
+declare const deleteStaffAdminRoute: Route<"@vitnode/core", {
+  method: "delete";
+  description: string;
+  path: "/entry/{type}/{id}";
+  request: {
+    params: z.ZodObject<{
+      type: z.ZodEnum<{
+        admin: "admin";
+        moderator: "moderator";
+      }>;
+      id: z.ZodString;
+    }, z.core.$strip>;
+  };
+  responses: {
+    200: {
+      description: string;
+    };
+    403: {
+      description: string;
+    };
+    404: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            error: z.ZodString;
+          }, z.core.$strip>;
+        };
+      };
+      description: string;
+    };
+  };
+} & {
+  path: string;
+}>;
+//#endregion
+export { deleteStaffAdminRoute };
+//# sourceMappingURL=delete.route.d.ts.map

package/dist/src/api/modules/admin/staff/routes/delete.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.route.d.ts","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/delete.route.ts"],"mappings":";;;cAoBa"}

package/dist/src/api/modules/admin/staff/routes/delete.route.js

@@ -0,0 +1,2 @@
+import{CONFIG_PLUGIN as e}from"../../../../../config.js";import{core_admin_permissions as t}from"../../../../../database/admins.js";import{core_moderators_permissions as n}from"../../../../../database/moderators.js";import{assertStaffPermission as r,getUserRoleIds as i}from"../../../../lib/check-staff-permission.js";import{buildRoute as a}from"../../../../lib/route.js";import{staffPermissionModuleByType as o,staffTypeSchema as s}from"../lib/schema.js";import{HTTPException as c}from"hono/http-exception";import{z as l}from"@hono/zod-openapi";import{eq as u}from"drizzle-orm";const d={admin:t,moderator:n},f=a({pluginId:e.pluginId,route:{method:`delete`,description:`Remove a staff entry (Admin only)`,path:`/entry/{type}/{id}`,request:{params:l.object({type:s,id:l.string().openapi({example:`1`})})},responses:{200:{description:`Staff entry removed`},403:{description:`Access Denied`},404:{content:{"application/json":{schema:l.object({error:l.string()})}},description:`Staff entry not found`}}},handler:async t=>{let{type:n,id:a}=t.req.valid(`param`);await r(t,{type:`admin`,plugin:e.pluginId,module:o[n],permission:`can_delete`});let s=Number(a);if(!Number.isInteger(s))return t.json({error:`Staff entry not found`},404);let l=d[n],[f]=await t.get(`db`).select({protected:l.protected,userId:l.userId,roleId:l.roleId}).from(l).where(u(l.id,s)).limit(1);if(!f)return t.json({error:`Staff entry not found`},404);if(f.protected)throw new c(403,{message:`Forbidden`});let p=t.get(`admin`)?.user,m=p?await i(t,p):[];if(p!=null&&(f.userId!=null&&f.userId===p.id||f.roleId!=null&&m.includes(f.roleId)))throw new c(403,{message:`You cannot remove your own staff permissions.`});return await t.get(`db`).delete(l).where(u(l.id,s)),t.body(null,200)}});export{f as deleteStaffAdminRoute};
+//# sourceMappingURL=delete.route.js.map

package/dist/src/api/modules/admin/staff/routes/delete.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/delete.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport {\n  assertStaffPermission,\n  getUserRoleIds,\n} from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { staffPermissionModuleByType, staffTypeSchema } from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const deleteStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"delete\",\n    description: \"Remove a staff entry (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        description: \"Staff entry removed\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_delete\",\n    });\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        protected: table.protected,\n        userId: table.userId,\n        roleId: table.roleId,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n    // Protected entries are managed by the system and cannot be removed.\n    if (entry.protected) {\n      throw new HTTPException(403, { message: \"Forbidden\" });\n    }\n\n    // An admin cannot remove the entry that governs their own access - their own\n    // user entry or an entry for any role they belong to (primary or secondary).\n    const currentUser = c.get(\"admin\")?.user;\n    const currentUserRoleIds = currentUser\n      ? await getUserRoleIds(c, currentUser)\n      : [];\n    const isSelf =\n      currentUser != null &&\n      ((entry.userId != null && entry.userId === currentUser.id) ||\n        (entry.roleId != null && currentUserRoleIds.includes(entry.roleId)));\n    if (isSelf) {\n      throw new HTTPException(403, {\n        message: \"You cannot remove your own staff permissions.\",\n      });\n    }\n\n    await c.get(\"db\").delete(table).where(eq(table.id, entryId));\n\n    return c.body(null, 200);\n  },\n});\n"],"mappings":"mkBAeA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAwB,EAAW,CAC9C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,SACR,YAAa,oCACb,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,YAAa,qBACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,YACd,CAAC,EAED,IAAM,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GACpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,UAAW,EAAM,UACjB,OAAQ,EAAM,OACd,OAAQ,EAAM,MAChB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAI,EAAM,UACR,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,EAKvD,IAAM,EAAc,EAAE,IAAI,OAAO,CAAC,EAAE,KAC9B,EAAqB,EACvB,MAAM,EAAe,EAAG,CAAW,EACnC,CAAC,EAKL,GAHE,GAAe,OACb,EAAM,QAAU,MAAQ,EAAM,SAAW,EAAY,IACpD,EAAM,QAAU,MAAQ,EAAmB,SAAS,EAAM,MAAM,GAEnE,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,+CACX,CAAC,EAKH,OAFA,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAK,CAAC,CAAC,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,EAEpD,EAAE,KAAK,KAAM,GAAG,CACzB,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/moderators.route.d.ts

@@ -0,0 +1,80 @@
+import { Route } from "../../../../lib/route.js";
+//#region src/api/modules/admin/staff/routes/moderators.route.d.ts
+declare const listModeratorsStaffAdminRoute: Route<"@vitnode/core", {
+  method: "get";
+  description: string;
+  path: "/moderators";
+  request: {
+    query: import("zod").ZodObject<{
+      cursor: import("zod").ZodOptional<import("zod").ZodString>;
+      first: import("zod").ZodOptional<import("zod").ZodString>;
+      last: import("zod").ZodOptional<import("zod").ZodString>;
+      order: import("zod").ZodOptional<import("zod").ZodEnum<{
+        asc: "asc";
+        desc: "desc";
+      }>>;
+      orderBy: import("zod").ZodOptional<import("zod").ZodEnum<{
+        id: "id";
+        createdAt: "createdAt";
+        updatedAt: "updatedAt";
+      }>>;
+    }, import("zod/v4/core").$strip>;
+  };
+  responses: {
+    200: {
+      content: {
+        "application/json": {
+          schema: import("zod").ZodObject<{
+            edges: import("zod").ZodArray<import("zod").ZodObject<{
+              id: import("zod").ZodNumber;
+              createdAt: import("zod").ZodDate;
+              updatedAt: import("zod").ZodDate;
+              unrestricted: import("zod").ZodBoolean;
+              protected: import("zod").ZodBoolean;
+              self: import("zod").ZodBoolean;
+              role: import("zod").ZodNullable<import("zod").ZodObject<{
+                id: import("zod").ZodNumber;
+                color: import("zod").ZodNullable<import("zod").ZodString>;
+                name: import("zod").ZodArray<import("zod").ZodObject<{
+                  name: import("zod").ZodString;
+                  languageCode: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+              }, import("zod/v4/core").$strip>>;
+              user: import("zod").ZodNullable<import("zod").ZodObject<{
+                id: import("zod").ZodNumber;
+                name: import("zod").ZodString;
+                nameCode: import("zod").ZodString;
+                avatarColor: import("zod").ZodString;
+                role: import("zod").ZodObject<{
+                  id: import("zod").ZodNumber;
+                  color: import("zod").ZodNullable<import("zod").ZodString>;
+                  name: import("zod").ZodArray<import("zod").ZodObject<{
+                    name: import("zod").ZodString;
+                    languageCode: import("zod").ZodString;
+                  }, import("zod/v4/core").$strip>>;
+                }, import("zod/v4/core").$strip>;
+              }, import("zod/v4/core").$strip>>;
+            }, import("zod/v4/core").$strip>>;
+            pageInfo: import("zod").ZodObject<{
+              totalCount: import("zod").ZodNumber;
+              count: import("zod").ZodNumber;
+              hasNextPage: import("zod").ZodBoolean;
+              hasPreviousPage: import("zod").ZodBoolean;
+              startCursor: import("zod").ZodNullable<import("zod").ZodNumber>;
+              endCursor: import("zod").ZodNullable<import("zod").ZodNumber>;
+            }, import("zod/v4/core").$strip>;
+          }, import("zod/v4/core").$strip>;
+        };
+      };
+      description: string;
+    };
+    403: {
+      description: string;
+    };
+  };
+} & {
+  path: string;
+}>;
+//#endregion
+export { listModeratorsStaffAdminRoute };
+//# sourceMappingURL=moderators.route.d.ts.map

package/dist/src/api/modules/admin/staff/routes/moderators.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderators.route.d.ts","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/moderators.route.ts"],"mappings":";;cAQa,+BAAA"}

package/dist/src/api/modules/admin/staff/routes/moderators.route.js

@@ -0,0 +1,2 @@
+import{CONFIG_PLUGIN as e}from"../../../../../config.js";import{core_moderators_permissions as t}from"../../../../../database/moderators.js";import{buildRoute as n}from"../../../../lib/route.js";import{withPagination as r}from"../../../../lib/with-pagination.js";import{resolveStaffEdges as i}from"../lib/resolve-staff-edges.js";import{staffListAdminQuery as a,staffListAdminSchema as o}from"../lib/schema.js";const s=n({pluginId:e.pluginId,adminStaffPermission:{module:`staff_moderators`,permission:`can_view`},route:{method:`get`,description:`Get list of moderators staff (Admin only)`,path:`/moderators`,request:{query:a},responses:{200:{content:{"application/json":{schema:o}},description:`List of moderators staff`},403:{description:`Access Denied`}}},handler:async e=>{let n=e.req.valid(`query`),a=await r({params:{query:n},primaryCursor:t.id,query:async({limit:n,where:r,orderBy:i})=>await e.get(`db`).select({id:t.id,roleId:t.roleId,userId:t.userId,createdAt:t.createdAt,updatedAt:t.updatedAt,data:t.data,protected:t.protected}).from(t).where(r).orderBy(i).limit(n),table:t,orderBy:{column:n.orderBy?t[n.orderBy]:t.updatedAt,order:n.order??`desc`},c:e});return e.json({pageInfo:a.pageInfo,edges:await i(e,a.edges)})}});export{s as listModeratorsStaffAdminRoute};
+//# sourceMappingURL=moderators.route.js.map

package/dist/src/api/modules/admin/staff/routes/moderators.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderators.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/moderators.route.ts"],"sourcesContent":["import { buildRoute } from \"@/api/lib/route\";\nimport { withPagination } from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { resolveStaffEdges } from \"../lib/resolve-staff-edges\";\nimport { staffListAdminQuery, staffListAdminSchema } from \"../lib/schema\";\n\nexport const listModeratorsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"staff_moderators\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get list of moderators staff (Admin only)\",\n    path: \"/moderators\",\n    request: {\n      query: staffListAdminQuery,\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: staffListAdminSchema,\n          },\n        },\n        description: \"List of moderators staff\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      primaryCursor: core_moderators_permissions.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_moderators_permissions.id,\n            roleId: core_moderators_permissions.roleId,\n            userId: core_moderators_permissions.userId,\n            createdAt: core_moderators_permissions.createdAt,\n            updatedAt: core_moderators_permissions.updatedAt,\n            data: core_moderators_permissions.data,\n            protected: core_moderators_permissions.protected,\n          })\n          .from(core_moderators_permissions)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_moderators_permissions,\n      orderBy: {\n        column: query.orderBy\n          ? core_moderators_permissions[query.orderBy]\n          : core_moderators_permissions.updatedAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    return c.json({\n      pageInfo: data.pageInfo,\n      edges: await resolveStaffEdges(c, data.edges),\n    });\n  },\n});\n"],"mappings":"0ZAQA,MAAa,EAAgC,EAAW,CACtD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,mBAAoB,WAAY,UAAW,EAC3E,MAAO,CACL,OAAQ,MACR,YAAa,4CACb,KAAM,cACN,QAAS,CACP,MAAO,CACT,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,EACA,YAAa,0BACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAE3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,cAAe,EAA4B,GAC3C,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAA4B,GAChC,OAAQ,EAA4B,OACpC,OAAQ,EAA4B,OACpC,UAAW,EAA4B,UACvC,UAAW,EAA4B,UACvC,KAAM,EAA4B,KAClC,UAAW,EAA4B,SACzC,CAAC,CAAC,CACD,KAAK,CAA2B,CAAC,CACjC,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAA4B,EAAM,SAClC,EAA4B,UAChC,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAED,OAAO,EAAE,KAAK,CACZ,SAAU,EAAK,SACf,MAAO,MAAM,EAAkB,EAAG,EAAK,KAAK,CAC9C,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/permission-catalog.route.d.ts

@@ -0,0 +1,36 @@
+import { Route } from "../../../../lib/route.js";
+import { z } from "@hono/zod-openapi";
+//#region src/api/modules/admin/staff/routes/permission-catalog.route.d.ts
+declare const permissionCatalogStaffAdminRoute: Route<"@vitnode/core", {
+  method: "get";
+  description: string;
+  path: "/permission-catalog";
+  responses: {
+    200: {
+      content: {
+        "application/json": {
+          schema: z.ZodArray<z.ZodObject<{
+            pluginId: z.ZodString;
+            admin: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+              permission: z.ZodString;
+              dependsOn: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>>;
+            moderator: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+              permission: z.ZodString;
+              dependsOn: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>>;
+          }, z.core.$strip>>;
+        };
+      };
+      description: string;
+    };
+    403: {
+      description: string;
+    };
+  };
+} & {
+  path: string;
+}>;
+//#endregion
+export { permissionCatalogStaffAdminRoute };
+//# sourceMappingURL=permission-catalog.route.d.ts.map

package/dist/src/api/modules/admin/staff/routes/permission-catalog.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-catalog.route.d.ts","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/permission-catalog.route.ts"],"mappings":";;;cAea"}

package/dist/src/api/modules/admin/staff/routes/permission-catalog.route.js

@@ -0,0 +1,2 @@
+import{CONFIG_PLUGIN as e}from"../../../../../config.js";import{buildRoute as t}from"../../../../lib/route.js";import{z as n}from"@hono/zod-openapi";const r=n.record(n.string(),n.array(n.object({permission:n.string(),dependsOn:n.array(n.string())}))),i=t({pluginId:e.pluginId,route:{method:`get`,description:`Get the staff permission catalog declared by every plugin (Admin only)`,path:`/permission-catalog`,responses:{200:{content:{"application/json":{schema:n.array(n.object({pluginId:n.string(),admin:r,moderator:r}))}},description:`Staff permission catalog`},403:{description:`Access Denied`}}},handler:e=>e.json(e.get(`core`).permissionStaff,200)});export{i as permissionCatalogStaffAdminRoute};
+//# sourceMappingURL=permission-catalog.route.js.map

package/dist/src/api/modules/admin/staff/routes/permission-catalog.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-catalog.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/permission-catalog.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nconst permissionStaffModulesSchema = z.record(\n  z.string(),\n  z.array(\n    z.object({\n      permission: z.string(),\n      dependsOn: z.array(z.string()),\n    }),\n  ),\n);\n\nexport const permissionCatalogStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description:\n      \"Get the staff permission catalog declared by every plugin (Admin only)\",\n    path: \"/permission-catalog\",\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.array(\n              z.object({\n                pluginId: z.string(),\n                admin: permissionStaffModulesSchema,\n                moderator: permissionStaffModulesSchema,\n              }),\n            ),\n          },\n        },\n        description: \"Staff permission catalog\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: c => {\n    return c.json(c.get(\"core\").permissionStaff, 200);\n  },\n});\n"],"mappings":"qJAKA,MAAM,EAA+B,EAAE,OACrC,EAAE,OAAO,EACT,EAAE,MACA,EAAE,OAAO,CACP,WAAY,EAAE,OAAO,EACrB,UAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAC/B,CAAC,CACH,CACF,EAEa,EAAmC,EAAW,CACzD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YACE,yEACF,KAAM,sBACN,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,MACR,EAAE,OAAO,CACP,SAAU,EAAE,OAAO,EACnB,MAAO,EACP,UAAW,CACb,CAAC,CACH,CACF,CACF,EACA,YAAa,0BACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,GACA,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,gBAAiB,GAAG,CAEpD,CAAC"}

package/dist/src/api/modules/admin/staff/routes/show-permissions.route.d.ts

@@ -0,0 +1,79 @@
+import { Route } from "../../../../lib/route.js";
+import { z } from "@hono/zod-openapi";
+//#region src/api/modules/admin/staff/routes/show-permissions.route.d.ts
+declare const showPermissionsStaffAdminRoute: Route<"@vitnode/core", {
+  method: "get";
+  description: string;
+  path: "/entry/{type}/{id}";
+  request: {
+    params: z.ZodObject<{
+      type: z.ZodEnum<{
+        admin: "admin";
+        moderator: "moderator";
+      }>;
+      id: z.ZodString;
+    }, z.core.$strip>;
+  };
+  responses: {
+    200: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            id: z.ZodNumber;
+            createdAt: z.ZodDate;
+            updatedAt: z.ZodDate;
+            unrestricted: z.ZodBoolean;
+            protected: z.ZodBoolean;
+            self: z.ZodBoolean;
+            role: z.ZodNullable<z.ZodObject<{
+              id: z.ZodNumber;
+              color: z.ZodNullable<z.ZodString>;
+              name: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                languageCode: z.ZodString;
+              }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            user: z.ZodNullable<z.ZodObject<{
+              id: z.ZodNumber;
+              name: z.ZodString;
+              nameCode: z.ZodString;
+              avatarColor: z.ZodString;
+              role: z.ZodObject<{
+                id: z.ZodNumber;
+                color: z.ZodNullable<z.ZodString>;
+                name: z.ZodArray<z.ZodObject<{
+                  name: z.ZodString;
+                  languageCode: z.ZodString;
+                }, z.core.$strip>>;
+              }, z.core.$strip>;
+            }, z.core.$strip>>;
+            permissions: z.ZodArray<z.ZodObject<{
+              plugin: z.ZodString;
+              module: z.ZodString;
+              permission: z.ZodString;
+            }, z.core.$strip>>;
+          }, z.core.$strip>;
+        };
+      };
+      description: string;
+    };
+    403: {
+      description: string;
+    };
+    404: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            error: z.ZodString;
+          }, z.core.$strip>;
+        };
+      };
+      description: string;
+    };
+  };
+} & {
+  path: string;
+}>;
+//#endregion
+export { showPermissionsStaffAdminRoute };
+//# sourceMappingURL=show-permissions.route.d.ts.map

package/dist/src/api/modules/admin/staff/routes/show-permissions.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"show-permissions.route.d.ts","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/show-permissions.route.ts"],"mappings":";;;cAsBa"}

package/dist/src/api/modules/admin/staff/routes/show-permissions.route.js

@@ -0,0 +1,2 @@
+import{CONFIG_PLUGIN as e}from"../../../../../config.js";import{core_admin_permissions as t}from"../../../../../database/admins.js";import{core_moderators_permissions as n}from"../../../../../database/moderators.js";import{assertStaffPermission as r}from"../../../../lib/check-staff-permission.js";import{buildRoute as i}from"../../../../lib/route.js";import{resolveStaffEdges as a}from"../lib/resolve-staff-edges.js";import{permissionsStaffArgsSchema as o,staffEntrySchema as s,staffPermissionModuleByType as c,staffTypeSchema as l}from"../lib/schema.js";import{z as u}from"@hono/zod-openapi";import{eq as d}from"drizzle-orm";const f={admin:t,moderator:n},p=i({pluginId:e.pluginId,route:{method:`get`,description:`Get a single staff entry with its granted permissions (Admin only)`,path:`/entry/{type}/{id}`,request:{params:u.object({type:l,id:u.string().openapi({example:`1`})})},responses:{200:{content:{"application/json":{schema:s.extend({permissions:u.array(o)})}},description:`Staff entry`},403:{description:`Access Denied`},404:{content:{"application/json":{schema:u.object({error:u.string()})}},description:`Staff entry not found`}}},handler:async t=>{let{type:n,id:i}=t.req.valid(`param`);await r(t,{type:`admin`,plugin:e.pluginId,module:c[n],permission:`can_edit`});let o=Number(i);if(!Number.isInteger(o))return t.json({error:`Staff entry not found`},404);let s=f[n],[l]=await t.get(`db`).select({id:s.id,roleId:s.roleId,userId:s.userId,createdAt:s.createdAt,updatedAt:s.updatedAt,data:s.data,protected:s.protected}).from(s).where(d(s.id,o)).limit(1);if(!l)return t.json({error:`Staff entry not found`},404);let[u]=await a(t,[l]);return t.json({...u,permissions:l.data?.permissions??[]},200)}});export{p as showPermissionsStaffAdminRoute};
+//# sourceMappingURL=show-permissions.route.js.map

package/dist/src/api/modules/admin/staff/routes/show-permissions.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"show-permissions.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/show-permissions.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\n\nimport { assertStaffPermission } from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { resolveStaffEdges } from \"../lib/resolve-staff-edges\";\nimport {\n  permissionsStaffArgsSchema,\n  staffEntrySchema,\n  staffPermissionModuleByType,\n  staffTypeSchema,\n} from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const showPermissionsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description:\n      \"Get a single staff entry with its granted permissions (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: staffEntrySchema.extend({\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n        description: \"Staff entry\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_edit\",\n    });\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        id: table.id,\n        roleId: table.roleId,\n        userId: table.userId,\n        createdAt: table.createdAt,\n        updatedAt: table.updatedAt,\n        data: table.data,\n        protected: table.protected,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const [resolved] = await resolveStaffEdges(c, [entry]);\n\n    return c.json(\n      {\n        ...resolved,\n        permissions: entry.data?.permissions ?? [],\n      },\n      200,\n    );\n  },\n});\n"],"mappings":"mnBAiBA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAiC,EAAW,CACvD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YACE,qEACF,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAiB,OAAO,CAC9B,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,EACA,YAAa,aACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,UACd,CAAC,EAED,IAAM,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GACpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAM,GACV,OAAQ,EAAM,OACd,OAAQ,EAAM,OACd,UAAW,EAAM,UACjB,UAAW,EAAM,UACjB,KAAM,EAAM,KACZ,UAAW,EAAM,SACnB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAM,CAAC,GAAY,MAAM,EAAkB,EAAG,CAAC,CAAK,CAAC,EAErD,OAAO,EAAE,KACP,CACE,GAAG,EACH,YAAa,EAAM,MAAM,aAAe,CAAC,CAC3C,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/update-permissions.route.d.ts

@@ -0,0 +1,66 @@
+import { Route } from "../../../../lib/route.js";
+import { z } from "@hono/zod-openapi";
+//#region src/api/modules/admin/staff/routes/update-permissions.route.d.ts
+declare const updatePermissionsStaffAdminRoute: Route<"@vitnode/core", {
+  method: "patch";
+  description: string;
+  path: "/entry/{type}/{id}";
+  request: {
+    params: z.ZodObject<{
+      type: z.ZodEnum<{
+        admin: "admin";
+        moderator: "moderator";
+      }>;
+      id: z.ZodString;
+    }, z.core.$strip>;
+    body: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            unrestricted: z.ZodBoolean;
+            permissions: z.ZodArray<z.ZodObject<{
+              plugin: z.ZodString;
+              module: z.ZodString;
+              permission: z.ZodString;
+            }, z.core.$strip>>;
+          }, z.core.$strip>;
+        };
+      };
+    };
+  };
+  responses: {
+    200: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            unrestricted: z.ZodBoolean;
+            permissions: z.ZodArray<z.ZodObject<{
+              plugin: z.ZodString;
+              module: z.ZodString;
+              permission: z.ZodString;
+            }, z.core.$strip>>;
+          }, z.core.$strip>;
+        };
+      };
+      description: string;
+    };
+    403: {
+      description: string;
+    };
+    404: {
+      content: {
+        "application/json": {
+          schema: z.ZodObject<{
+            error: z.ZodString;
+          }, z.core.$strip>;
+        };
+      };
+      description: string;
+    };
+  };
+} & {
+  path: string;
+}>;
+//#endregion
+export { updatePermissionsStaffAdminRoute };
+//# sourceMappingURL=update-permissions.route.d.ts.map

package/dist/src/api/modules/admin/staff/routes/update-permissions.route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-permissions.route.d.ts","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/update-permissions.route.ts"],"mappings":";;;cA2Ba"}

package/dist/src/api/modules/admin/staff/routes/update-permissions.route.js

@@ -0,0 +1,2 @@
+import{CONFIG_PLUGIN as e}from"../../../../../config.js";import{core_admin_permissions as t}from"../../../../../database/admins.js";import{core_moderators_permissions as n}from"../../../../../database/moderators.js";import{staffPermissionKey as r}from"../../../../lib/staff-permission.js";import{assertStaffPermission as i,getUserRoleIds as a}from"../../../../lib/check-staff-permission.js";import{buildRoute as o}from"../../../../lib/route.js";import{permissionsStaffArgsSchema as s,staffPermissionModuleByType as c,staffTypeSchema as l}from"../lib/schema.js";import{HTTPException as u}from"hono/http-exception";import{z as d}from"@hono/zod-openapi";import{eq as f}from"drizzle-orm";const p={admin:t,moderator:n},m=o({pluginId:e.pluginId,route:{method:`patch`,description:`Update the granted permissions of a staff entry (Admin only)`,path:`/entry/{type}/{id}`,request:{params:d.object({type:l,id:d.string().openapi({example:`1`})}),body:{content:{"application/json":{schema:d.object({unrestricted:d.boolean(),permissions:d.array(s)})}}}},responses:{200:{content:{"application/json":{schema:d.object({unrestricted:d.boolean(),permissions:d.array(s)})}},description:`Updated permissions`},403:{description:`Access Denied`},404:{content:{"application/json":{schema:d.object({error:d.string()})}},description:`Staff entry not found`}}},handler:async t=>{let{type:n,id:o}=t.req.valid(`param`);await i(t,{type:`admin`,plugin:e.pluginId,module:c[n],permission:`can_edit`});let{unrestricted:s,permissions:l}=t.req.valid(`json`),d=Number(o);if(!Number.isInteger(d))return t.json({error:`Staff entry not found`},404);let m=p[n],[h]=await t.get(`db`).select({protected:m.protected,userId:m.userId,roleId:m.roleId}).from(m).where(f(m.id,d)).limit(1);if(!h)return t.json({error:`Staff entry not found`},404);if(h.protected)throw new u(403,{message:`Forbidden`});let g=t.get(`admin`)?.user,_=g?await a(t,g):[];if(g!=null&&(h.userId!=null&&h.userId===g.id||h.roleId!=null&&_.includes(h.roleId)))throw new u(403,{message:`You cannot edit your own staff permissions.`});let v=new Set,y=new Map;for(let e of t.get(`core`).permissionStaff)for(let[t,i]of Object.entries(e[n]))for(let n of i){let i=r({plugin:e.pluginId,module:t,permission:n.permission});v.add(i),y.set(i,n.dependsOn.map(n=>r({plugin:e.pluginId,module:t,permission:n})))}let b=new Set,x=new Map;if(!s){for(let e of l){let t=r(e);!v.has(t)||b.has(t)||(b.add(t),x.set(t,e))}let e=!0;for(;e;){e=!1;for(let t of x.keys())(y.get(t)??[]).some(e=>!x.has(e))&&(x.delete(t),e=!0)}}let S=[...x.values()],[C]=await t.get(`db`).update(m).set({data:{unrestricted:s,permissions:S}}).where(f(m.id,d)).returning({id:m.id});return C?t.json({unrestricted:s,permissions:S},200):t.json({error:`Staff entry not found`},404)}});export{m as updatePermissionsStaffAdminRoute};
+//# sourceMappingURL=update-permissions.route.js.map

package/dist/src/api/modules/admin/staff/routes/update-permissions.route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-permissions.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/update-permissions.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport type { PermissionsStaffArgs } from \"@/api/lib/permission-staff\";\n\nimport {\n  assertStaffPermission,\n  getUserRoleIds,\n} from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { staffPermissionKey } from \"@/api/lib/staff-permission\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport {\n  permissionsStaffArgsSchema,\n  staffPermissionModuleByType,\n  staffTypeSchema,\n} from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const updatePermissionsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"patch\",\n    description: \"Update the granted permissions of a staff entry (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n      body: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              unrestricted: z.boolean(),\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              unrestricted: z.boolean(),\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n        description: \"Updated permissions\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_edit\",\n    });\n\n    const { unrestricted, permissions } = c.req.valid(\"json\");\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        protected: table.protected,\n        userId: table.userId,\n        roleId: table.roleId,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n    // Protected entries are managed by the system and cannot be edited.\n    if (entry.protected) {\n      throw new HTTPException(403, { message: \"Forbidden\" });\n    }\n\n    // An admin cannot edit the entry that governs their own access - their own\n    // user entry or an entry for any role they belong to (primary or\n    // secondary). This stops them from escalating their own permissions.\n    const currentUser = c.get(\"admin\")?.user;\n    const currentUserRoleIds = currentUser\n      ? await getUserRoleIds(c, currentUser)\n      : [];\n    const isSelf =\n      currentUser != null &&\n      ((entry.userId != null && entry.userId === currentUser.id) ||\n        (entry.roleId != null && currentUserRoleIds.includes(entry.roleId)));\n    if (isSelf) {\n      throw new HTTPException(403, {\n        message: \"You cannot edit your own staff permissions.\",\n      });\n    }\n\n    // Only persist permissions that actually exist in the catalog for this\n    // staff type - silently drops anything unknown/forged. Also record each\n    // permission's dependencies (the keys of the permissions it `dependsOn`\n    // within the same module) so we can drop grants whose gate is missing.\n    const allowed = new Set<string>();\n    const dependencies = new Map<string, string[]>();\n    for (const plugin of c.get(\"core\").permissionStaff) {\n      for (const [module, modulePermissions] of Object.entries(plugin[type])) {\n        for (const entry of modulePermissions) {\n          const key = staffPermissionKey({\n            plugin: plugin.pluginId,\n            module,\n            permission: entry.permission,\n          });\n          allowed.add(key);\n          dependencies.set(\n            key,\n            entry.dependsOn.map(dependency =>\n              staffPermissionKey({\n                plugin: plugin.pluginId,\n                module,\n                permission: dependency,\n              }),\n            ),\n          );\n        }\n      }\n    }\n\n    const seen = new Set<string>();\n    const granted = new Map<string, PermissionsStaffArgs>();\n    // When unrestricted, the explicit list is irrelevant - store none.\n    if (!unrestricted) {\n      for (const permission of permissions) {\n        const key = staffPermissionKey(permission);\n        if (!allowed.has(key) || seen.has(key)) continue;\n        seen.add(key);\n        granted.set(key, permission);\n      }\n\n      // Drop any granted permission whose dependencies aren't all granted too,\n      // repeating until stable so a broken chain (a → b → c) collapses fully.\n      let changed = true;\n      while (changed) {\n        changed = false;\n        for (const key of granted.keys()) {\n          const deps = dependencies.get(key) ?? [];\n          if (deps.some(dependency => !granted.has(dependency))) {\n            granted.delete(key);\n            changed = true;\n          }\n        }\n      }\n    }\n\n    const sanitized: PermissionsStaffArgs[] = [...granted.values()];\n\n    const [updated] = await c\n      .get(\"db\")\n      .update(table)\n      .set({ data: { unrestricted, permissions: sanitized } })\n      .where(eq(table.id, entryId))\n      .returning({ id: table.id });\n\n    if (!updated) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    return c.json({ unrestricted, permissions: sanitized }, 200);\n  },\n});\n"],"mappings":"4qBAsBA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAmC,EAAW,CACzD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,QACR,YAAa,+DACb,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,EACD,KAAM,CACJ,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,aAAc,EAAE,QAAQ,EACxB,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,aAAc,EAAE,QAAQ,EACxB,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,EACA,YAAa,qBACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,UACd,CAAC,EAED,GAAM,CAAE,eAAc,eAAgB,EAAE,IAAI,MAAM,MAAM,EAElD,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GAEpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,UAAW,EAAM,UACjB,OAAQ,EAAM,OACd,OAAQ,EAAM,MAChB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAI,EAAM,UACR,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,EAMvD,IAAM,EAAc,EAAE,IAAI,OAAO,CAAC,EAAE,KAC9B,EAAqB,EACvB,MAAM,EAAe,EAAG,CAAW,EACnC,CAAC,EAKL,GAHE,GAAe,OACb,EAAM,QAAU,MAAQ,EAAM,SAAW,EAAY,IACpD,EAAM,QAAU,MAAQ,EAAmB,SAAS,EAAM,MAAM,GAEnE,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,6CACX,CAAC,EAOH,IAAM,EAAU,IAAI,IACd,EAAe,IAAI,IACzB,IAAK,IAAM,KAAU,EAAE,IAAI,MAAM,CAAC,CAAC,gBACjC,IAAK,GAAM,CAAC,EAAQ,KAAsB,OAAO,QAAQ,EAAO,EAAK,EACnE,IAAK,IAAM,KAAS,EAAmB,CACrC,IAAM,EAAM,EAAmB,CAC7B,OAAQ,EAAO,SACf,SACA,WAAY,EAAM,UACpB,CAAC,EACD,EAAQ,IAAI,CAAG,EACf,EAAa,IACX,EACA,EAAM,UAAU,IAAI,GAClB,EAAmB,CACjB,OAAQ,EAAO,SACf,SACA,WAAY,CACd,CAAC,CACH,CACF,CACF,CAIJ,IAAM,EAAO,IAAI,IACX,EAAU,IAAI,IAEpB,GAAI,CAAC,EAAc,CACjB,IAAK,IAAM,KAAc,EAAa,CACpC,IAAM,EAAM,EAAmB,CAAU,EACrC,CAAC,EAAQ,IAAI,CAAG,GAAK,EAAK,IAAI,CAAG,IACrC,EAAK,IAAI,CAAG,EACZ,EAAQ,IAAI,EAAK,CAAU,EAC7B,CAIA,IAAI,EAAU,GACd,KAAO,GAAS,CACd,EAAU,GACV,IAAK,IAAM,KAAO,EAAQ,KAAK,GAChB,EAAa,IAAI,CAAG,GAAK,CAAC,EAAA,CAC9B,KAAK,GAAc,CAAC,EAAQ,IAAI,CAAU,CAAC,IAClD,EAAQ,OAAO,CAAG,EAClB,EAAU,GAGhB,CACF,CAEA,IAAM,EAAoC,CAAC,GAAG,EAAQ,OAAO,CAAC,EAExD,CAAC,GAAW,MAAM,EACrB,IAAI,IAAI,CAAC,CACT,OAAO,CAAK,CAAC,CACb,IAAI,CAAE,KAAM,CAAE,eAAc,YAAa,CAAU,CAAE,CAAC,CAAC,CACvD,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,UAAU,CAAE,GAAI,EAAM,EAAG,CAAC,EAM7B,OAJK,EAIE,EAAE,KAAK,CAAE,eAAc,YAAa,CAAU,EAAG,GAAG,EAHlD,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,CAIzD,CACF,CAAC"}