insite-users-server-ws 2.0.21 → 2.0.27

package/dist/UsersServer.d.ts

@@ -2,7 +2,7 @@ import type { InSiteWebSocketServer } from "insite-ws/server";
 import type { IncomingTransport } from "insite-ws-transfers/node";
 import type { AbilitiesSchema } from "insite-common";
 import { InSiteCollections } from "insite-db";
-import { type Session, type SessionDoc, Users, type Options as UsersOptions } from "insite-users-server";
+import { type Session, Users, type Options as UsersOptions } from "insite-users-server";
 import { AbilitiesPublication, OrgsExtendedPublication, type OrgsExtendedPublicationOptions, OrgsPublication, type OrgsPublicationOptions, RolesPublication, type RolesPublicationOptions, SessionsPublication, UserPublication, type UserPublicationOptions, UsersExtendedPublication, type UsersExtendedPublicationOptions, UsersPublication, type UsersPublicationOptions } from "./publications";
 import { WSSCWithUser } from "./WSSCWithUser";
 export type Options<AS extends AbilitiesSchema> = {
@@ -19,16 +19,13 @@ export type Options<AS extends AbilitiesSchema> = {
         publication?: OrgsPublicationOptions;
         extendedPublication?: OrgsExtendedPublicationOptions;
     };
-    getSessionProps?: (wssc: WSSCWithUser<AS>) => Partial<SessionDoc>;
-    incomingTransport?: IncomingTransport;
+    incomingTransport?: IncomingTransport<WSSCWithUser<AS>>;
 };
 export declare class UsersServer<AS extends AbilitiesSchema> {
+    #private;
     constructor(options: Options<AS>);
-    private userWsMap;
-    private sessionsWsMap;
     wss: Options<AS>["wss"];
     users: Users<AS>;
-    getSessionProps: Options<AS>["getSessionProps"];
     incomingTransport: Options<AS>["incomingTransport"];
     abilitiesPublication: AbilitiesPublication<AS>;
     rolesPublication: RolesPublication<AS>;
@@ -39,26 +36,8 @@ export declare class UsersServer<AS extends AbilitiesSchema> {
     orgsExtendedPublication: OrgsExtendedPublication<AS>;
     sessionsPublication: SessionsPublication<AS>;
     init?: ((options: Options<AS>) => Promise<this>) | undefined;
-    private initPromise;
     whenReady(): Promise<this>;
-    getDefaultSessionProps({ userAgent, remoteAddress }: WSSCWithUser<AS>): {
-        userAgent: string;
-        remoteAddress: string;
-    };
     setSession(wssc: WSSCWithUser<AS>, session: null | Session<AS> | string | undefined, shouldProlong?: boolean): void;
-    private login;
-    private logout;
-    private handleRolesUpdate;
-    private handleRolesRoleUpdate;
-    private handleUserCreate;
-    private handleUserIsOnline;
-    private handleSessionDelete;
-    private handleOrgsUpdate;
-    private handleOrgsOrgUpdate;
-    private handleUserPermissionsChange;
-    private handleClientRequestLogin;
-    private handleClientRequestLogout;
-    private handleClientClosed;
     static init<IAS extends AbilitiesSchema>(options: Options<IAS>): Promise<UsersServer<IAS>>;
 }
 //# sourceMappingURL=UsersServer.d.ts.map

package/dist/UsersServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UsersServer.d.ts","sourceRoot":"","sources":["../src/UsersServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAoB,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAWpF,OAAO,KAAK,EAAa,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAqC,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EASN,KAAK,OAAO,EACZ,KAAK,UAAU,EAGf,KAAK,EACL,KAAK,OAAO,IAAI,YAAY,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,eAAe,EACf,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,eAAe,EACf,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9C,MAAM,MAAM,OAAO,CAAC,EAAE,SAAS,eAAe,IAAI;IACjD,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IACpC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,mBAAmB,CAAC,EAAE,+BAA+B,CAAC;IACtD,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,KAAK,CAAC,EAAE;QACP,WAAW,CAAC,EAAE,uBAAuB,CAAC;KACtC,CAAC;IACF,IAAI,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,sBAAsB,CAAC;QACrC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC;KACrD,CAAC;IACF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACtC,CAAC;AAGF,qBAAa,WAAW,CAAC,EAAE,SAAS,eAAe;gBACtC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IAKhC,OAAO,CAAC,SAAS,CAAkD;IACnE,OAAO,CAAC,aAAa,CAAgD;IAErE,GAAG,EAAG,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,EAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,eAAe,EAAG,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACjD,iBAAiB,EAAG,OAAO,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAErD,oBAAoB,EAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChD,gBAAgB,EAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxC,gBAAgB,EAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxC,wBAAwB,EAAG,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACxD,eAAe,EAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,eAAe,EAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,uBAAuB,EAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACtD,mBAAmB,EAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9C,IAAI,CAAC,aAAmB,OAAO,CAAC,EAAE,CAAC,gCAoWjC;IAEF,OAAO,CAAC,WAAW,CAAC;IAEpB,SAAS;IAIT,sBAAsB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;;;;IAOrE,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO;IAqC5G,OAAO,CAAC,KAAK,CAUX;IAEF,OAAO,CAAC,MAAM,CAMZ;IAEF,OAAO,CAAC,iBAAiB,CACa;IAEtC,OAAO,CAAC,qBAAqB,CACa;IAE1C,OAAO,CAAC,gBAAgB,CAC+B;IAEvD,OAAO,CAAC,kBAAkB,CASxB;IAEF,OAAO,CAAC,mBAAmB,CAMzB;IAEF,OAAO,CAAC,gBAAgB,CAKtB;IAEF,OAAO,CAAC,mBAAmB,CAMzB;IAEF,OAAO,CAAC,2BAA2B,CAMjC;IAEF,OAAO,CAAC,wBAAwB,CACG;IAEnC,OAAO,CAAC,yBAAyB,CACd;IAEnB,OAAO,CAAC,kBAAkB,CAIxB;IAGF,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;CAM9D"}
+{"version":3,"file":"UsersServer.d.ts","sourceRoot":"","sources":["../src/UsersServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAoB,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAWpF,OAAO,KAAK,EAAa,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAqC,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EASN,KAAK,OAAO,EAGZ,KAAK,EACL,KAAK,OAAO,IAAI,YAAY,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,eAAe,EACf,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,eAAe,EACf,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9C,MAAM,MAAM,OAAO,CAAC,EAAE,SAAS,eAAe,IAAI;IACjD,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IACpC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,mBAAmB,CAAC,EAAE,+BAA+B,CAAC;IACtD,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,KAAK,CAAC,EAAE;QACP,WAAW,CAAC,EAAE,uBAAuB,CAAC;KACtC,CAAC;IACF,IAAI,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,sBAAsB,CAAC;QACrC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC;KACrD,CAAC;IACF,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;CACxD,CAAC;AAGF,qBAAa,WAAW,CAAC,EAAE,SAAS,eAAe;;gBACtC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IAQhC,GAAG,EAAG,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,EAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,iBAAiB,EAAG,OAAO,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAErD,oBAAoB,EAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChD,gBAAgB,EAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxC,gBAAgB,EAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxC,wBAAwB,EAAG,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACxD,eAAe,EAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,eAAe,EAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACtC,uBAAuB,EAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACtD,mBAAmB,EAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9C,IAAI,CAAC,aAAmB,OAAO,CAAC,EAAE,CAAC,gCAqWjC;IAIF,SAAS;IAaT,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO;IAmH5G,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;CAM9D"}

package/dist/WSSCWithUser.d.ts

@@ -1,8 +1,10 @@
 import { InSiteWebSocketServer, InSiteWebSocketServerClient } from "insite-ws/server";
 import type { AbilitiesSchema } from "insite-common";
-import type { Session, User } from "insite-users-server";
+import type { Session, SessionDoc, User } from "insite-users-server";
 export declare class WSSCWithUser<AS extends AbilitiesSchema> extends InSiteWebSocketServerClient {
     wss: InSiteWebSocketServer<WSSCWithUser<AS>>;
+    isRejected?: boolean;
+    sessionProps?: Partial<SessionDoc>;
     user?: User<AS>;
     lastUserId?: string;
     session?: Session<AS>;

package/dist/WSSCWithUser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WSSCWithUser.d.ts","sourceRoot":"","sources":["../src/WSSCWithUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAGzD,qBAAa,YAAY,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,2BAA2B;IAChF,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACtB"}
+{"version":3,"file":"WSSCWithUser.d.ts","sourceRoot":"","sources":["../src/WSSCWithUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAGrE,qBAAa,YAAY,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,2BAA2B;IAChF,GAAG,EAAE,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACtB"}

package/dist/index.js

@@ -1,2 +1,2 @@
-import{_ids as X,Err as h,includesAll as w,isEmpty as F,removeAll as N,union as Y,without as _}from"@nesvet/n";import{Binary as Z}from"insite-db";import{Users as B}from"insite-users-server";import{CollectionMapPublication as O,Publication as z}from"insite-subscriptions-server/ws";import{_ids as K,includesAny as V,intersection as k,pick as E}from"@nesvet/n";var x=class extends z{constructor(e){super("abilities",{fetch(t){return t.user?.abilities.inSite?.sections?.includes("users")?{abilities:e.getSchemeFor(t.user)}:null}})}},R=class extends O{constructor(e,t={}){let{projection:a={title:1,description:1},sort:u={_o:1},transform:c}=t;Object.assign(a,{involves:1,abilities:1}),super(e.collection,"roles",n=>n.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:n.user.slaveRoleIds}},projection:a,sort:u},n=>{let{involves:l,abilities:S,inheritedAbilities:p,displayTitle:d,_o:y}=e.get(n._id);Object.assign(n,{...n.involves?{ownInvolves:n.involves,involves:K(l),abilities:S,inheritedAbilities:p}:{},...a.title?{displayTitle:d}:{},_o:y}),c?.(n)})}},$=new WeakMap,W=class extends z{constructor(e,t={}){let{fieldsToUpdate:a=[],projection:u,transform:c}=t;for(let n of["email","name","name.first","name.middle","name.last","org","job","avatar"])(!u||u[n]!==0)&&a.push(n);super("user",{onSubscribe(n){let[{user:l}]=n.args;if(l){let{_id:S}=l,p=d=>{if("documentKey"in d&&d.documentKey._id===S)switch(d.operationType){case"update":if(!V(Object.keys(d.updateDescription.updatedFields),a))break;case"replace":case"delete":n.changed(d)}};e.collection.changeListeners.add(p),$.set(n,p)}},fetch({user:n,session:l},S){if(n){let p=E(n,["_id","email","name","initials","displayLabel","job","avatarUrl","abilities","slaveIds"]);if(Object.assign(p,{orgId:n.org._id,sessionId:S?l?._id:void 0,isOnline:!0}),u)for(let d in u)u[d]&&d in n?Object.assign(p,{[d]:n[d]}):delete p[d];return c?.(p),p}return null},onUnsubscribe(n){let l=$.get(n);l&&e.collection.changeListeners.delete(l)}})}},I=class extends O{constructor(e,t={}){let{projection:a={email:1,name:1,org:1,job:1,avatar:1},sort:u={"name.last":1},transform:c}=t;super(e.collection,"users",n=>n.user?.abilities.login&&{query:{},projection:a,sort:u},n=>{let l=e.get(n._id);Object.assign(n,E(l,["initials","displayLabel","avatarUrl","isOnline"]),{orgId:n.org}),delete n.org,delete n.avatar,c?.(n)})}},C=class extends O{constructor(e,t={}){let{projection:a={_id:1},sort:u,triggers:c=[],transform:n}=t;c.includes("roles")||c.push("roles"),super(e.collection,"users.extended",l=>l.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:l.user.slaveIds}},projection:a,sort:u,triggers:c},(l,[S])=>{let p=e.get(l._id);Object.assign(l,{roleIds:k(p.ownRoleIds,S.user.slaveRoleIds)}),n?.(l)})}},j=class extends O{constructor(e){super(e.collection,"users.people.sessions",(t,a)=>t.user?.abilities.inSite?.sections?.includes("users")&&t.user.permissiveIds.includes(a)&&{query:{user:a},projection:{remoteAddress:1,isOnline:1,prolongedAt:1},sort:{prolongedAt:-1}})}},D=class extends O{constructor(e,t={}){let{projection:a={title:1},sort:u={title:1},transform:c}=t;super(e.collection,"orgs",n=>n.user?.abilities.login&&{query:{},projection:a,sort:u},n=>{let l=e.get(n._id);Object.assign(n,E(l,["initials","displayLabel"])),c?.(n)})}},q=class extends O{constructor(e,t={}){let{projection:a={note:1},sort:u={_o:1},triggers:c=[],transform:n}=t;c.includes("owners")||c.push("owners"),super(e.collection,"orgs.extended",l=>l.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:l.user.slaveIds}},projection:a,sort:u,triggers:c},(l,[S])=>{let p=e.get(l._id),{ownerIds:d,slaveOrgs:y,_o:T}=p;Object.assign(l,{owners:k(d,S.user.slaveIds),slaveOrgs:K(k(y,S.user.slaveOrgs)),_o:T}),n?.(l)})}};var M={email:/^[^\s@]{1,63}@[^\s@]{1,63}\.[^\s@]{1,63}$/,role:/^[\d_a-z-]{1,64}$/};var ee=["image/webp"],se=1024*512,G=class g{constructor(e){this.initPromise=this.init(e)}userWsMap=new WeakMap;sessionsWsMap=new WeakMap;wss;users;getSessionProps;incomingTransport;abilitiesPublication;rolesPublication;usersPublication;usersExtendedPublication;userPublication;orgsPublication;orgsExtendedPublication;sessionsPublication;init=async e=>{let{wss:t,collections:a,users:u,publication:c,extendedPublication:n,userPublication:l,roles:S={},orgs:p={},getSessionProps:d,incomingTransport:y}=e,{publication:T}=S,{publication:J,extendedPublication:Q}=p;this.wss=t,this.users=u instanceof B?u:await B.init(a,u),this.getSessionProps=d,this.incomingTransport=y;for(let s of this.users.values())this.handleUserCreate(s);if(this.abilitiesPublication=new x(this.users.abilitiesMap),this.rolesPublication=new R(this.users.roles,T),this.usersPublication=new I(this.users,c),this.usersExtendedPublication=new C(this.users,n),this.userPublication=new W(this.users,l),this.orgsPublication=new D(this.users.orgs,J),this.orgsExtendedPublication=new q(this.users.orgs,Q),this.sessionsPublication=new j(this.users.sessions),this.users.on("roles-update",this.handleRolesUpdate),this.users.on("roles-role-update",this.handleRolesRoleUpdate),this.users.on("user-create",this.handleUserCreate),this.users.on("user-is-online",this.handleUserIsOnline),this.users.on("session-delete",this.handleSessionDelete),this.users.on("orgs-update",this.handleOrgsUpdate),this.users.on("orgs-org-update",this.handleOrgsOrgUpdate),this.users.on("user-permissions-change",this.handleUserPermissionsChange),this.wss.onRequest("login",this.handleClientRequestLogin),this.wss.onRequest("logout",this.handleClientRequestLogout),this.wss.on("client-closed",this.handleClientClosed),this.wss.onRequest("users.people.check-email",(s,i)=>{if(s.user?.abilities.inSite?.sections?.includes("users")){if(!M.email.test(i))throw new h("Not email","notemail");if(this.users.byEmail.has(i))throw new h("Email already exists","exists")}}),this.wss.onRequest("users.people.add",async(s,{roles:i,org:o,...r})=>{if(s.user?.abilities.inSite?.sections?.includes("users")){if(!i.length)throw new h("Roles shouldn't be empty","emptyroles");if(!w(s.user.slaveRoleIds,i))throw new h("Can't assign role the user is not involved in","forbiddenrole");if(o&&!s.user.slaveIds.includes(o))throw new h("Can't assign org the user is not master of","forbiddenorg");await this.users.new({roles:i,org:o,...r})}}),this.wss.onRequest("users.people.change-password",async(s,i,o)=>{if(s.user?.abilities.inSite?.sections?.includes("users")&&s.user.permissiveIds.includes(i)){if(typeof o!="string")throw new h("Type of password is incorrect","wrongpasswordtype");if(!o)throw new h("Password can't be empty","emptypassword");await this.users.changePassword(i,o)}}),this.wss.onRequest("users.people.update",async(s,i,o)=>{if(s.user?.abilities.inSite?.sections?.includes("users")&&s.user.permissiveIds.includes(i)){if(o.roles){if(!o.roles.length)throw new h("Roles can't be empty","emptyroles");if(!w(s.user.slaveRoleIds,o.roles))throw new h("Can't assign role the user is not involved in","forbiddenrole");let r=this.users.get(i);r&&(o.roles=r.isRoot?["root"]:this.users.roles.cleanUpIds(_(r.ownRoleIds,s.user.slaveRoleIds).concat(o.roles)))}if(o.org&&!s.user.slaveIds.includes(o.org))throw new h("Can't assign org the user is not master of","forbiddenorg");F(o)||await this.users.collection.updateOne({_id:i},{$set:o})}}),this.wss.onRequest("users.people.delete",async(s,i)=>{s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveIds.includes(i)&&await this.users.collection.deleteOne({_id:i})}),this.wss.onRequest("users.people.destroy-session",async(s,i)=>{s.user?.abilities.inSite?.sections?.includes("users")&&s.user.permissiveIds.includes(this.users.bySessionId.get(i)?._id)&&await this.users.sessions.collection.deleteOne({_id:i})}),this.incomingTransport){let s=i=>({begin:async(o,r)=>(!i||await i(o,r))&&ee.includes(r.metadata.type)&&r.size<=se,end:async(o,{data:r,metadata:{type:b,_id:A}})=>{let m=Z.createFromBase64(r.slice(r.indexOf(","))),v=Date.now().toString(36);await Promise.all([this.users.avatars.collection.replaceOne({_id:A},{type:b,size:m.length(),ts:v,data:m},{upsert:!0}),this.users.collection.updateOne({_id:A},{$set:{avatar:v}})])}});this.incomingTransport.on("users.people.avatar",s((i,{metadata:{_id:o}})=>i.user?.abilities.inSite?.sections?.includes("users")&&i.user.permissiveIds.includes(o))),this.incomingTransport.on("user.avatar",s((i,o)=>i.user&&i.user._id===o.metadata._id))}let L=async s=>{await Promise.all([this.users.avatars.collection.deleteOne({_id:s}),this.users.collection.updateOne({_id:s},{$set:{avatar:null}})])};return this.wss.onRequest("users.people.delete-avatar",async(s,i)=>s.user?.abilities.inSite?.sections?.includes("users")&&s.user.permissiveIds.includes(i)&&await L(i)),this.wss.onRequest("user.delete-avatar",async(s,i)=>s.user&&s.user._id===i&&await L(i)),this.wss.onRequest("users.orgs.add",async(s,i)=>{if(s.user?.abilities.inSite?.sections?.includes("users")){if(!i.title)throw new h("Title can't be empty","emptytitle");await this.users.orgs.new(i,s.user._id)}}),this.wss.onRequest("users.orgs.update",async(s,i,o)=>{if(s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveIds.includes(i)){if(o.title!==void 0&&!o.title)throw new h("Title can't be empty","emptytitle");if(o.owners){if(!w(s.user.slaveIds,o.owners))throw new h("Can't assign owners the user is not master of","forbiddenowners");let r=this.users.orgs.get(i);r&&(o.owners=this.users.sortIds(Y(_(r.ownerIds,s.user.slaveIds),_(o.owners,[r._id,...X(r.slaveOrgs)]))))}F(o)||await this.users.orgs.collection.updateOne({_id:i},{$set:o})}}),this.wss.onRequest("users.orgs.delete",async(s,i)=>{s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveIds.includes(i)&&await this.users.orgs.collectionDelete(i)}),this.wss.onRequest("users.roles.check-id",(s,i)=>{if(s.user?.abilities.inSite?.sections?.includes("users")){if(!M.role.test(i))throw new h("Role ID is incorrect","notroleid");if(this.users.roles.has(i))throw new h("Role ID already exists","exists")}}),this.wss.onRequest("users.roles.add",async(s,i)=>{s.user?.abilities.inSite?.sections?.includes("users")&&await this.users.roles.new(i)}),this.wss.onRequest("users.roles.update",async(s,i,{abilities:o,...r})=>{if(s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveRoleIds.includes(i)){if(r.involves)if(w(s.user.slaveRoleIds,r.involves)){N(r.involves,[i]);let b=this.users.roles.get(i);if(b)for(let A of r.involves)this.users.roles.get(A)?.involves.has(b)&&N(r.involves,[A]);r.involves=this.users.roles.cleanUpIds(r.involves)}else throw new h("Can't assign role the user is not involved in","forbiddenrole");await this.users.roles.collection.updateOne({_id:i},{$set:r})}}),this.wss.onRequest("users.roles.set-ability",async(s,i,o,r,b)=>{if(s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveRoleIds.includes(i)&&s.user.abilities[o]){let A=this.users.roles.get(i);if(A){let m=structuredClone(A.ownAbilities),v;if(r){m[o]||(m[o]={});let P=this.users.abilitiesMap.get(o)?.params?.find(f=>f._id===r);if(P){let f=s.user.abilities[o],U=m[o];P.type==="number"?f[r]>=b&&(U[r]=b,v=!0):P.type==="items"&&f[r]&&w(f[r],b)&&(U[r]=b,v=!0)}}else b?m[o]=this.users.abilitiesMap.getMinimumOf(o):function P(f){if(f&&(delete m[f._id],f.subAbilities))for(let U of f.subAbilities)m[U._id]&&P(U)}(this.users.abilitiesMap.get(o)),v=!0;v&&await this.users.roles.collection.updateOne({_id:i},{$set:{abilities:m}})}}}),this.wss.on("client-message:users.roles.delete",async(s,i)=>{s.user?.abilities.inSite?.sections?.includes("users")&&s.user.slaveRoleIds.includes(i)&&await this.users.roles.collectionDelete(i)}),this};initPromise;whenReady(){return this.initPromise}getDefaultSessionProps({userAgent:e,remoteAddress:t}){return{userAgent:e,remoteAddress:t}}setSession(e,t,a){t===null?t=void 0:typeof t=="string"&&(t=this.users.sessions.get(t)),e.session!==t&&(e.session&&this.sessionsWsMap.delete(e.session),t?(e.session=t,e.user=t.user,e.lastUserId=t.user._id,this.userWsMap.get(t.user)?.add(e),this.sessionsWsMap.set(t,e),a&&t.prolong({...this.getDefaultSessionProps(e),...this.getSessionProps?.(e),isOnline:!0})):(delete e.session,delete e.user,this.userWsMap.get(e.user)?.delete(e)),this.wss.emit("client-session",e,a))}login=async(e,t,a)=>{let u=await this.users.login(t,a,{...this.getDefaultSessionProps(e),...this.getSessionProps?.(e),isOnline:!0});u&&this.setSession(e,u)};logout=e=>{e.session&&(this.users.logout(e.session),this.setSession(e,null))};handleRolesUpdate=()=>this.rolesPublication.flushInitial();handleRolesRoleUpdate=(e,t)=>t&&this.rolesPublication.skip(t);handleUserCreate=e=>this.userWsMap.set(e,new Set);handleUserIsOnline=({_id:e,isOnline:t})=>{let a={_id:e,isOnline:t};for(let u of this.usersPublication.subscriptions){let[c]=u.args;c.user&&c.user._id!==e&&u.handler([["u",a,!0]])}};handleSessionDelete=e=>{let t=this.sessionsWsMap.get(e);t&&this.setSession(t,null)};handleOrgsUpdate=()=>{this.orgsPublication.flushInitial(),this.orgsExtendedPublication.flushInitial()};handleOrgsOrgUpdate=(e,t)=>{t&&(this.orgsPublication.skip(t),this.orgsExtendedPublication.skip(t))};handleUserPermissionsChange=e=>{let t=this.userWsMap.get(e);t&&this.wss.emit("should-renew-subscriptions",[...t])};handleClientRequestLogin=(e,t,a)=>this.login(e,t,a);handleClientRequestLogout=e=>this.logout(e);handleClientClosed=e=>{e.session?.offline(),this.setSession(e,null)};static init(e){return new g(e).whenReady()}};import{InSiteWebSocketServerClient as ie}from"insite-ws/server";var H=class extends ie{user;lastUserId;session};export{G as UsersServer,H as WSSCWithUser};
+function I(l){if(l instanceof Set){let e=[];for(let t of l)e.push(t._id);return e}return l.map(e=>e._id)}function O(){}function Z(l,e=0,t={}){let{leading:o=!1,trailing:u=!0}=t,{maxWait:p=1/0}=t,n,c,m,d,f,b,g,U,R=async()=>{let a=Date.now();a>=m?(n=void 0,m=void 0,clearTimeout(c),typeof g=="function"&&await g(),r.resolve(U),r.promise.isResolved=!0,b=o):(clearTimeout(n),n=setTimeout(R,m-a))},i=Number.isFinite(p)?()=>{g===s&&(g=!1),s(),c=setTimeout(i,p)}:null;async function s(){return U=await l.apply(d,f)}o&&typeof o=="boolean"&&(o=s),b=o,u&&typeof u=="boolean"&&(u=s),g=u;let r=Object.assign(function(...a){return f=a,d=this,m=Date.now()+e,g=u,r.promise.isResolved&&(r.promise=Object.assign(new Promise(S=>{r.resolve=S,typeof b=="function"&&(b(),b=!1,g===s&&(g=!1)),n||(n=setTimeout(R,e),i&&(c=setTimeout(i,p)))}),{isResolved:!1})),r.promise},{callback:l,promise:Object.assign(Promise.resolve(),{isResolved:!0}),resolve:O,run:s,clear:async a=>{clearTimeout(n),n=void 0,clearTimeout(c),r.promise.isResolved=!0,r.resolve(a?await s():U)}});return r}Z.noop=Object.assign(()=>{},{callback:O,promise:Object.assign(Promise.resolve(),{isResolved:!0}),resolve:O,run:O,clear:O});var h=class extends Error{constructor(e,t=null,o){super(e),t&&typeof t=="object"&&(o=t,t=null),this.tag=t,o&&Object.assign(this,o)}name="Err-or";tag};function C(l){for(let e in l)return!1;return!0}function z(l,e,t,o,u=!0){return Array.isArray(l)&&(l=l.length),typeof o!="string"&&(u=o??!0,o=t),(u?`${l}\xA0`:"")+z.raw(l,e,t,o)}z.raw=(l,e,t,o=t)=>{l=Math.abs(l);let u=l%10,p=l%100;return u===1&&p!==11?e:u>=2&&u<=4&&!(p>=12&&p<=15)?t:o};function P(l,e){return(e instanceof Set?[...e]:e).every(l instanceof Set?t=>l.has(t):t=>l.includes(t))}function G(l,e){return(e instanceof Set?[...e]:e).some(l instanceof Set?t=>l.has(t):t=>l.includes(t))}function T(l,...e){let t=[];e:for(let o of l){for(let u of e)if(u instanceof Set?!u.has(o):!u.includes(o))continue e;t.push(o)}return t}function $(l,e){let t={};for(let o of e)o in l&&(t[o]=l[o]);return t}function N(l,e){let t,o=0;for(let u of e)for(;(t=l.indexOf(u))>-1;)l.splice(t,1),o++;return o}function H(...l){return[...new Set(l.flat())]}function D(l,e){return l.filter(t=>!e.includes(t))}import{Binary as ee}from"insite-db";import{Users as Q}from"insite-users-server";import{CollectionMapPublication as w,Publication as X}from"insite-subscriptions-server/ws";var E=class extends X{constructor(e){super("abilities",{fetch(t){return t.user?.abilities.inSite?.sections?.includes("users")?{abilities:e.getSchemeFor(t.user)}:null}})}},M=class extends w{constructor(e,t={}){let{projection:o={title:1,description:1},sort:u={_o:1},transform:p}=t;Object.assign(o,{involves:1,abilities:1}),super(e.collection,"roles",n=>n.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:n.user.slaveRoleIds}},projection:o,sort:u},n=>{let{involves:c,abilities:m,inheritedAbilities:d,displayTitle:f,_o:b}=e.get(n._id);Object.assign(n,{...n.involves?{ownInvolves:n.involves,involves:I(c),abilities:m,inheritedAbilities:d}:{},...o.title?{displayTitle:f}:{},_o:b}),p?.(n)})}},J=new WeakMap,k=class extends X{constructor(e,t={}){let{fieldsToUpdate:o=[],projection:u,transform:p}=t;for(let n of["email","name","name.first","name.middle","name.last","org","job","avatar"])(!u||u[n]!==0)&&o.push(n);super("user",{onSubscribe(n){let[{user:c}]=n.args;if(c){let{_id:m}=c,d=f=>{if("documentKey"in f&&f.documentKey._id===m)switch(f.operationType){case"update":if(!G(Object.keys(f.updateDescription.updatedFields),o))break;case"replace":case"delete":n.changed(f)}};e.collection.changeListeners.add(d),J.set(n,d)}},fetch({user:n,session:c},m){if(n){let d=$(n,["_id","email","name","initials","displayLabel","job","avatarUrl","abilities","slaveIds"]);if(Object.assign(d,{orgId:n.org._id,sessionId:m?c?._id:void 0,isOnline:!0}),u)for(let f in u)u[f]&&f in n?Object.assign(d,{[f]:n[f]}):delete d[f];return p?.(d),d}return null},onUnsubscribe(n){let c=J.get(n);c&&e.collection.changeListeners.delete(c)}})}},q=class extends w{constructor(e,t={}){let{projection:o={email:1,name:1,org:1,job:1,avatar:1},sort:u={"name.last":1},transform:p}=t;super(e.collection,"users",n=>n.user?.abilities.login&&{query:{},projection:o,sort:u},n=>{let c=e.get(n._id);Object.assign(n,$(c,["initials","displayLabel","avatarUrl","isOnline"]),{orgId:n.org}),delete n.org,delete n.avatar,p?.(n)})}},_=class extends w{constructor(e,t={}){let{projection:o={_id:1},sort:u,triggers:p=[],transform:n}=t;p.includes("roles")||p.push("roles"),super(e.collection,"users.extended",c=>c.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:c.user.slaveIds}},projection:o,sort:u,triggers:p},(c,[m])=>{let d=e.get(c._id);Object.assign(c,{roleIds:T(d.ownRoleIds,m.user.slaveRoleIds)}),n?.(c)})}},L=class extends w{constructor(e){super(e.collection,"users.people.sessions",(t,o)=>t.user?.abilities.inSite?.sections?.includes("users")&&t.user.permissiveIds.includes(o)&&{query:{user:o},projection:{remoteAddress:1,isOnline:1,prolongedAt:1},sort:{prolongedAt:-1}})}},B=class extends w{constructor(e,t={}){let{projection:o={title:1},sort:u={title:1},transform:p}=t;super(e.collection,"orgs",n=>n.user?.abilities.login&&{query:{},projection:o,sort:u},n=>{let c=e.get(n._id);Object.assign(n,$(c,["initials","displayLabel"])),p?.(n)})}},F=class extends w{constructor(e,t={}){let{projection:o={note:1},sort:u={_o:1},triggers:p=[],transform:n}=t;p.includes("owners")||p.push("owners"),super(e.collection,"orgs.extended",c=>c.user?.abilities.inSite?.sections?.includes("users")&&{query:{_id:{$in:c.user.slaveIds}},projection:o,sort:u,triggers:p},(c,[m])=>{let d=e.get(c._id),{ownerIds:f,slaveOrgs:b,_o:g}=d;Object.assign(c,{owners:T(f,m.user.slaveIds),slaveOrgs:I(T(b,m.user.slaveOrgs)),_o:g}),n?.(c)})}};var K={email:/^[^\s@]{1,63}@[^\s@]{1,63}\.[^\s@]{1,63}$/,role:/^[\d_a-z-]{1,64}$/};var te=["image/webp"],se=1024*512,V=class l{constructor(e){this.#s=this.init(e)}#e=new WeakMap;#t=new WeakMap;wss;users;incomingTransport;abilitiesPublication;rolesPublication;usersPublication;usersExtendedPublication;userPublication;orgsPublication;orgsExtendedPublication;sessionsPublication;init=async e=>{let{wss:t,collections:o,users:u,publication:p,extendedPublication:n,userPublication:c,roles:m={},orgs:d={},incomingTransport:f}=e,{publication:b}=m,{publication:g,extendedPublication:U}=d;this.wss=t,this.users=u instanceof Q?u:await Q.init(o,u),this.incomingTransport=f;for(let i of this.users.values())this.#o(i);if(this.abilitiesPublication=new E(this.users.abilitiesMap),this.rolesPublication=new M(this.users.roles,b),this.usersPublication=new q(this.users,p),this.usersExtendedPublication=new _(this.users,n),this.userPublication=new k(this.users,c),this.orgsPublication=new B(this.users.orgs,g),this.orgsExtendedPublication=new F(this.users.orgs,U),this.sessionsPublication=new L(this.users.sessions),this.users.on("roles-update",this.#l),this.users.on("roles-role-update",this.#u),this.users.on("user-create",this.#o),this.users.on("user-is-online",this.#a),this.users.on("session-delete",this.#c),this.users.on("orgs-update",this.#p),this.users.on("orgs-org-update",this.#f),this.users.on("user-permissions-change",this.#d),this.wss.onRequest("login",this.#h),this.wss.onRequest("logout",this.#m),this.wss.on("client-closed",this.#g),this.wss.onRequest("users.people.check-email",(i,s)=>{if(i.user?.abilities.inSite?.sections?.includes("users")){if(!K.email.test(s))throw new h("Not email","notemail");if(this.users.byEmail.has(s))throw new h("Email already exists","exists")}}),this.wss.onRequest("users.people.add",async(i,{roles:s,org:r,...a})=>{if(i.user?.abilities.inSite?.sections?.includes("users")){if(!s.length)throw new h("Roles shouldn't be empty","emptyroles");if(!P(i.user.slaveRoleIds,s))throw new h("Can't assign role the user is not involved in","forbiddenrole");if(r&&!i.user.slaveIds.includes(r))throw new h("Can't assign org the user is not master of","forbiddenorg");await this.users.new({roles:s,org:r,...a})}}),this.wss.onRequest("users.people.change-password",async(i,s,r)=>{if(i.user?.abilities.inSite?.sections?.includes("users")&&i.user.permissiveIds.includes(s)){if(typeof r!="string")throw new h("Type of password is incorrect","wrongpasswordtype");if(!r)throw new h("Password can't be empty","emptypassword");await this.users.changePassword(s,r)}}),this.wss.onRequest("users.people.update",async(i,s,r)=>{if(i.user?.abilities.inSite?.sections?.includes("users")&&i.user.permissiveIds.includes(s)){if(r.roles){if(!r.roles.length)throw new h("Roles can't be empty","emptyroles");if(!P(i.user.slaveRoleIds,r.roles))throw new h("Can't assign role the user is not involved in","forbiddenrole");let a=this.users.get(s);a&&(r.roles=a.isRoot?["root"]:this.users.roles.cleanUpIds(D(a.ownRoleIds,i.user.slaveRoleIds).concat(r.roles)))}if(r.org&&!i.user.slaveIds.includes(r.org))throw new h("Can't assign org the user is not master of","forbiddenorg");C(r)||await this.users.collection.updateOne({_id:s},{$set:r})}}),this.wss.onRequest("users.people.delete",async(i,s)=>{i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveIds.includes(s)&&await this.users.collection.deleteOne({_id:s})}),this.wss.onRequest("users.people.destroy-session",async(i,s)=>{i.user?.abilities.inSite?.sections?.includes("users")&&i.user.permissiveIds.includes(this.users.bySessionId.get(s)?._id)&&await this.users.sessions.collection.deleteOne({_id:s})}),this.incomingTransport){let i=s=>({begin:async(r,a)=>(!s||await s(r,a))&&te.includes(a.metadata.type)&&a.size<=se,end:async(r,{data:a,metadata:{type:S,_id:y}})=>{let x=ee.createFromBase64(a.slice(a.indexOf(","))),v=Date.now().toString(36);await Promise.all([this.users.avatars.collection.replaceOne({_id:y},{type:S,size:x.length(),ts:v,data:x},{upsert:!0}),this.users.collection.updateOne({_id:y},{$set:{avatar:v}})])}});this.incomingTransport.on("users.people.avatar",i((s,{metadata:{_id:r}})=>s.user?.abilities.inSite?.sections?.includes("users")&&s.user.permissiveIds.includes(r))),this.incomingTransport.on("user.avatar",i((s,r)=>s.user&&s.user._id===r.metadata._id))}let R=async i=>{await Promise.all([this.users.avatars.collection.deleteOne({_id:i}),this.users.collection.updateOne({_id:i},{$set:{avatar:null}})])};return this.wss.onRequest("users.people.delete-avatar",async(i,s)=>i.user?.abilities.inSite?.sections?.includes("users")&&i.user.permissiveIds.includes(s)&&await R(s)),this.wss.onRequest("user.delete-avatar",async(i,s)=>i.user&&i.user._id===s&&await R(s)),this.wss.onRequest("users.orgs.add",async(i,s)=>{if(i.user?.abilities.inSite?.sections?.includes("users")){if(!s.title)throw new h("Title can't be empty","emptytitle");await this.users.orgs.new(s,i.user._id)}}),this.wss.onRequest("users.orgs.update",async(i,s,r)=>{if(i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveIds.includes(s)){if(r.title!==void 0&&!r.title)throw new h("Title can't be empty","emptytitle");if(r.owners){if(!P(i.user.slaveIds,r.owners))throw new h("Can't assign owners the user is not master of","forbiddenowners");let a=this.users.orgs.get(s);a&&(r.owners=this.users.sortIds(H(D(a.ownerIds,i.user.slaveIds),D(r.owners,[a._id,...I(a.slaveOrgs)]))))}C(r)||await this.users.orgs.collection.updateOne({_id:s},{$set:r})}}),this.wss.onRequest("users.orgs.delete",async(i,s)=>{i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveIds.includes(s)&&await this.users.orgs.collectionDelete(s)}),this.wss.onRequest("users.roles.check-id",(i,s)=>{if(i.user?.abilities.inSite?.sections?.includes("users")){if(!K.role.test(s))throw new h("Role ID is incorrect","notroleid");if(this.users.roles.has(s))throw new h("Role ID already exists","exists")}}),this.wss.onRequest("users.roles.add",async(i,s)=>{i.user?.abilities.inSite?.sections?.includes("users")&&await this.users.roles.new(s)}),this.wss.onRequest("users.roles.update",async(i,s,{abilities:r,...a})=>{if(i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveRoleIds.includes(s)){if(a.involves)if(P(i.user.slaveRoleIds,a.involves)){N(a.involves,[s]);let S=this.users.roles.get(s);if(S)for(let y of a.involves)this.users.roles.get(y)?.involves.has(S)&&N(a.involves,[y]);a.involves=this.users.roles.cleanUpIds(a.involves)}else throw new h("Can't assign role the user is not involved in","forbiddenrole");await this.users.roles.collection.updateOne({_id:s},{$set:a})}}),this.wss.onRequest("users.roles.set-ability",async(i,s,r,a,S)=>{if(i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveRoleIds.includes(s)&&i.user.abilities[r]){let y=this.users.roles.get(s);if(y){let x=structuredClone(y.ownAbilities),v;if(a){x[r]||(x[r]={});let j=this.users.abilitiesMap.get(r)?.params?.find(A=>A._id===a);if(j){let A=i.user.abilities[r],W=x[r];j.type==="number"?A[a]>=S&&(W[a]=S,v=!0):j.type==="items"&&A[a]&&P(A[a],S)&&(W[a]=S,v=!0)}}else S?x[r]=this.users.abilitiesMap.getMinimumOf(r):function j(A){if(A&&(delete x[A._id],A.subAbilities))for(let W of A.subAbilities)x[W._id]&&j(W)}(this.users.abilitiesMap.get(r)),v=!0;v&&await this.users.roles.collection.updateOne({_id:s},{$set:{abilities:x}})}}}),this.wss.on("client-message:users.roles.delete",async(i,s)=>{i.user?.abilities.inSite?.sections?.includes("users")&&i.user.slaveRoleIds.includes(s)&&await this.users.roles.collectionDelete(s)}),this};#s;whenReady(){return this.#s}#i({userAgent:e,remoteAddress:t,sessionProps:o}){return{userAgent:e,remoteAddress:t,...o,isOnline:!0}}setSession(e,t,o){t===null?t=void 0:typeof t=="string"&&(t=this.users.sessions.get(t)),e.session!==t&&(e.session&&this.#t.delete(e.session),t&&!e.isRejected?(e.session=t,e.user=t.user,e.lastUserId=t.user._id,this.#e.get(t.user)?.add(e),this.#t.set(t,e),o&&t.prolong(this.#i(e))):(delete e.session,delete e.user,this.#e.get(e.user)?.delete(e)),this.wss.emit("client-session",e,o))}#r=async(e,t,o)=>{if(!e.isRejected){let u=await this.users.login(t,o,this.#i(e));u&&this.setSession(e,u)}};#n=e=>{e.session&&(this.users.logout(e.session),this.setSession(e,null))};#l=()=>this.rolesPublication.flushInitial();#u=(e,t)=>t&&this.rolesPublication.skip(t);#o=e=>this.#e.set(e,new Set);#a=({_id:e,isOnline:t})=>{let o={_id:e,isOnline:t};for(let u of this.usersPublication.subscriptions){let[p]=u.args;p.user&&p.user._id!==e&&u.handler([["u",o,!0]])}};#c=e=>{let t=this.#t.get(e);t&&this.setSession(t,null)};#p=()=>{this.orgsPublication.flushInitial(),this.orgsExtendedPublication.flushInitial()};#f=(e,t)=>{t&&(this.orgsPublication.skip(t),this.orgsExtendedPublication.skip(t))};#d=e=>{let t=this.#e.get(e);t&&this.wss.emit("should-renew-subscriptions",[...t])};#h=(e,t,o)=>this.#r(e,t,o);#m=e=>this.#n(e);#g=e=>{e.session?.offline(),this.setSession(e,null)};static init(e){return new l(e).whenReady()}};import{InSiteWebSocketServerClient as ie}from"insite-ws/server";var Y=class extends ie{isRejected;sessionProps;user;lastUserId;session};export{V as UsersServer,Y as WSSCWithUser};
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/UsersServer.ts", "../src/publications.ts", "../src/regexps.ts", "../src/WSSCWithUser.ts"],
-  "sourcesContent": ["import type { InSiteWebSocketServer } from \"insite-ws/server\";\nimport type { IncomingTransfer, IncomingTransport } from \"insite-ws-transfers/node\";\nimport {\n\t_ids,\n\tErr,\n\tincludesAll,\n\tisEmpty,\n\tremoveAll,\n\tStringKey,\n\tunion,\n\twithout\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport { Binary, type ChangeStreamDocument, InSiteCollections } from \"insite-db\";\nimport {\n\ttype AbilityParamItems,\n\ttype AbilityParamNumber,\n\ttype AbilityWithParams,\n\ttype GenericAbilities,\n\ttype Org,\n\ttype OrgDoc,\n\ttype Role,\n\ttype RoleDoc,\n\ttype Session,\n\ttype SessionDoc,\n\ttype User,\n\ttype UserDoc,\n\tUsers,\n\ttype Options as UsersOptions\n} from \"insite-users-server\";\nimport {\n\tAbilitiesPublication,\n\tOrgsExtendedPublication,\n\ttype OrgsExtendedPublicationOptions,\n\tOrgsPublication,\n\ttype OrgsPublicationOptions,\n\tRolesPublication,\n\ttype RolesPublicationOptions,\n\tSessionsPublication,\n\tUserPublication,\n\ttype UserPublicationOptions,\n\tUsersExtendedPublication,\n\ttype UsersExtendedPublicationOptions,\n\tUsersPublication,\n\ttype UsersPublicationOptions\n} from \"./publications\";\nimport { regexps } from \"./regexps\";\nimport { WSSCWithUser } from \"./WSSCWithUser\";\n\nconst avatarTypesAccepted = [ \"image/webp\" ];\nconst maxAvatarSize = 1024 * 512;\n\nexport type Options<AS extends AbilitiesSchema> = {\n\twss: InSiteWebSocketServer<WSSCWithUser<AS>>;\n\tcollections?: InSiteCollections;\n\tusers: Users<AS> | UsersOptions<AS>;\n\tpublication?: UsersPublicationOptions;\n\textendedPublication?: UsersExtendedPublicationOptions;\n\tuserPublication?: UserPublicationOptions;\n\troles?: {\n\t\tpublication?: RolesPublicationOptions;\n\t};\n\torgs?: {\n\t\tpublication?: OrgsPublicationOptions;\n\t\textendedPublication?: OrgsExtendedPublicationOptions;\n\t};\n\tgetSessionProps?: (wssc: WSSCWithUser<AS>) => Partial<SessionDoc>;\n\tincomingTransport?: IncomingTransport;\n};\n\n\nexport class UsersServer<AS extends AbilitiesSchema> {\n\tconstructor(options: Options<AS>) {\n\t\tthis.initPromise = this.init!(options);\n\t\t\n\t}\n\t\n\tprivate userWsMap = new WeakMap<User<AS>, Set<WSSCWithUser<AS>>>();\n\tprivate sessionsWsMap = new WeakMap<Session<AS>, WSSCWithUser<AS>>();\n\t\n\twss!: Options<AS>[\"wss\"];\n\tusers!: Users<AS>;\n\tgetSessionProps!: Options<AS>[\"getSessionProps\"];\n\tincomingTransport!: Options<AS>[\"incomingTransport\"];\n\t\n\tabilitiesPublication!: AbilitiesPublication<AS>;\n\trolesPublication!: RolesPublication<AS>;\n\tusersPublication!: UsersPublication<AS>;\n\tusersExtendedPublication!: UsersExtendedPublication<AS>;\n\tuserPublication!: UserPublication<AS>;\n\torgsPublication!: OrgsPublication<AS>;\n\torgsExtendedPublication!: OrgsExtendedPublication<AS>;\n\tsessionsPublication!: SessionsPublication<AS>;\n\t\n\tinit? = async (options: Options<AS>) => {\n\t\t\n\t\tconst {\n\t\t\twss,\n\t\t\tcollections,\n\t\t\tusers,\n\t\t\tpublication: publicationOptions,\n\t\t\textendedPublication: extendedPublicationOptions,\n\t\t\tuserPublication: userPublicationOptions,\n\t\t\troles: rolesOptions = {},\n\t\t\torgs: orgsOptions = {},\n\t\t\tgetSessionProps,\n\t\t\tincomingTransport\n\t\t} = options;\n\t\t\n\t\tconst {\n\t\t\tpublication: rolesPublicationOptions\n\t\t} = rolesOptions;\n\t\t\n\t\tconst {\n\t\t\tpublication: orgsPublicationOptions,\n\t\t\textendedPublication: orgsExtendedPublicationOptions\n\t\t} = orgsOptions;\n\t\t\n\t\tthis.wss = wss;\n\t\tthis.users = users instanceof Users ? users : await Users.init(collections!, users);\n\t\tthis.getSessionProps = getSessionProps;\n\t\tthis.incomingTransport = incomingTransport;\n\t\t\n\t\tfor (const user of this.users.values())\n\t\t\tthis.handleUserCreate(user);\n\t\t\n\t\tthis.abilitiesPublication = new AbilitiesPublication<AS>(this.users.abilitiesMap);\n\t\tthis.rolesPublication = new RolesPublication<AS>(this.users.roles, rolesPublicationOptions);\n\t\tthis.usersPublication = new UsersPublication<AS>(this.users, publicationOptions);\n\t\tthis.usersExtendedPublication = new UsersExtendedPublication<AS>(this.users, extendedPublicationOptions);\n\t\tthis.userPublication = new UserPublication<AS>(this.users, userPublicationOptions);\n\t\tthis.orgsPublication = new OrgsPublication<AS>(this.users.orgs, orgsPublicationOptions);\n\t\tthis.orgsExtendedPublication = new OrgsExtendedPublication<AS>(this.users.orgs, orgsExtendedPublicationOptions);\n\t\tthis.sessionsPublication = new SessionsPublication<AS>(this.users.sessions);\n\t\t\n\t\tthis.users.on(\"roles-update\", this.handleRolesUpdate);\n\t\tthis.users.on(\"roles-role-update\", this.handleRolesRoleUpdate);\n\t\tthis.users.on(\"user-create\", this.handleUserCreate);\n\t\tthis.users.on(\"user-is-online\", this.handleUserIsOnline);\n\t\tthis.users.on(\"session-delete\", this.handleSessionDelete);\n\t\tthis.users.on(\"orgs-update\", this.handleOrgsUpdate);\n\t\tthis.users.on(\"orgs-org-update\", this.handleOrgsOrgUpdate);\n\t\tthis.users.on(\"user-permissions-change\", this.handleUserPermissionsChange);\n\t\t\n\t\tthis.wss.onRequest(\"login\", this.handleClientRequestLogin);\n\t\tthis.wss.onRequest(\"logout\", this.handleClientRequestLogout);\n\t\tthis.wss.on(\"client-closed\", this.handleClientClosed);\n\t\t\n\t\t\n\t\t/*\n\t\t * Handlers\n\t\t */\n\t\t\n\t\t/* Users */\n\t\t\n\t\tthis.wss.onRequest(\"users.people.check-email\", (wssc, email: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!regexps.email.test(email))\n\t\t\t\t\tthrow new Err(\"Not email\", \"notemail\");\n\t\t\t\t\n\t\t\t\tif (this.users.byEmail.has(email))\n\t\t\t\t\tthrow new Err(\"Email already exists\", \"exists\");\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.add\", async (wssc, { roles, org, ...rest }: Omit<UserDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!roles.length)\n\t\t\t\t\tthrow new Err(\"Roles shouldn't be empty\", \"emptyroles\");\n\t\t\t\t\n\t\t\t\tif (!includesAll(wssc.user.slaveRoleIds, roles))\n\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\n\t\t\t\tif (org && !wssc.user.slaveIds.includes(org))\n\t\t\t\t\tthrow new Err(\"Can't assign org the user is not master of\", \"forbiddenorg\");\n\t\t\t\t\n\t\t\t\tawait this.users.new({ roles, org, ...rest });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.change-password\", async (wssc, _id: string, newPassword: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(_id)) {\n\t\t\t\tif (typeof newPassword != \"string\")\n\t\t\t\t\tthrow new Err(\"Type of password is incorrect\", \"wrongpasswordtype\");\n\t\t\t\t\n\t\t\t\tif (!newPassword)\n\t\t\t\t\tthrow new Err(\"Password can't be empty\", \"emptypassword\");\n\t\t\t\t\n\t\t\t\tawait this.users.changePassword(_id, newPassword);\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.update\", async (wssc, _id: string, updates: Omit<UserDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(_id)) {\n\t\t\t\tif (updates.roles) {\n\t\t\t\t\tif (!updates.roles.length)\n\t\t\t\t\t\tthrow new Err(\"Roles can't be empty\", \"emptyroles\");\n\t\t\t\t\t\n\t\t\t\t\tif (!includesAll(wssc.user.slaveRoleIds, updates.roles))\n\t\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\t\n\t\t\t\t\tconst user = this.users.get(_id);\n\t\t\t\t\t\n\t\t\t\t\tif (user)\n\t\t\t\t\t\tupdates.roles =\n\t\t\t\t\t\t\tuser.isRoot ?\n\t\t\t\t\t\t\t\t[ \"root\" ] :\n\t\t\t\t\t\t\t\tthis.users.roles.cleanUpIds(\n\t\t\t\t\t\t\t\t\twithout(user.ownRoleIds, wssc.user.slaveRoleIds).concat(updates.roles)\n\t\t\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (updates.org && !wssc.user.slaveIds.includes(updates.org))\n\t\t\t\t\tthrow new Err(\"Can't assign org the user is not master of\", \"forbiddenorg\");\n\t\t\t\t\n\t\t\t\tif (!isEmpty(updates))\n\t\t\t\t\tawait this.users.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.delete\", async (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id))\n\t\t\t\tawait this.users.collection.deleteOne({ _id });\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Sessions */\n\t\t\n\t\tthis.wss.onRequest(\"users.people.destroy-session\", async (wssc, sessionId: string) => {\n\t\t\tif (\n\t\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\t\twssc.user.permissiveIds.includes(this.users.bySessionId.get(sessionId)?._id)\n\t\t\t)\n\t\t\t\tawait this.users.sessions.collection.deleteOne({ _id: sessionId });\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Avatars */\n\t\t\n\t\tif (this.incomingTransport) {\n\t\t\tconst getAvatarTransferProps = (check?: (wssc: WSSCWithUser<AS>, transfer: IncomingTransfer) => boolean | Promise<boolean | undefined> | undefined) => ({\n\t\t\t\t\n\t\t\t\tbegin: async (wssc: WSSCWithUser<AS>, transfer: IncomingTransfer) => (\n\t\t\t\t\t(!check || await check(wssc, transfer)) &&\n\t\t\t\t\tavatarTypesAccepted.includes(transfer.metadata.type as string) &&\n\t\t\t\t\ttransfer.size <= maxAvatarSize\n\t\t\t\t),\n\t\t\t\t\n\t\t\t\tend: async (wssc: WSSCWithUser<AS>, { data, metadata: { type, _id } }: IncomingTransfer) => {\n\t\t\t\t\tconst binaryData = Binary.createFromBase64((data as string).slice((data as string).indexOf(\",\")));\n\t\t\t\t\t\n\t\t\t\t\tconst ts = Date.now().toString(36);\n\t\t\t\t\t\n\t\t\t\t\tawait Promise.all([\n\t\t\t\t\t\tthis.users.avatars.collection.replaceOne({ _id: _id as string }, {\n\t\t\t\t\t\t\ttype: type as string,\n\t\t\t\t\t\t\tsize: binaryData.length(),\n\t\t\t\t\t\t\tts,\n\t\t\t\t\t\t\tdata: binaryData\n\t\t\t\t\t\t}, { upsert: true }),\n\t\t\t\t\t\tthis.users.collection.updateOne({ _id: _id as string }, { $set: { avatar: ts } })\n\t\t\t\t\t]);\n\t\t\t\t\t\n\t\t\t\t}\n\t\t\t\t\n\t\t\t});\n\t\t\t\n\t\t\tthis.incomingTransport.on(\"users.people.avatar\", getAvatarTransferProps(\n\t\t\t\t(wssc: WSSCWithUser<AS>, { metadata: { _id } }: IncomingTransfer) =>\n\t\t\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\t\t\twssc.user.permissiveIds.includes(_id as string)\n\t\t\t));\n\t\t\t\n\t\t\tthis.incomingTransport.on(\"user.avatar\", getAvatarTransferProps(\n\t\t\t\t(wssc: WSSCWithUser<AS>, transfer: IncomingTransfer) =>\n\t\t\t\t\twssc.user &&\n\t\t\t\t\twssc.user._id === transfer.metadata._id\n\t\t\t));\n\t\t}\n\t\t\n\t\tconst deleteAvatar = async (_id: string) => {\n\t\t\t\n\t\t\tawait Promise.all([\n\t\t\t\tthis.users.avatars.collection.deleteOne({ _id }),\n\t\t\t\tthis.users.collection.updateOne({ _id }, { $set: { avatar: null } })\n\t\t\t]);\n\t\t\t\n\t\t};\n\t\t\n\t\tthis.wss.onRequest(\"users.people.delete-avatar\", async (wssc, _id: string) =>\n\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\twssc.user.permissiveIds.includes(_id) &&\n\t\t\tawait deleteAvatar(_id)\n\t\t);\n\t\t\n\t\tthis.wss.onRequest(\"user.delete-avatar\", async (wssc, _id: string) =>\n\t\t\twssc.user &&\n\t\t\twssc.user._id === _id &&\n\t\t\tawait deleteAvatar(_id)\n\t\t);\n\t\t\n\t\t\n\t\t/* Orgs */\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.add\", async (wssc, org: Omit<OrgDoc, \"_id\" | \"createdAt\" | \"owners\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!org.title)\n\t\t\t\t\tthrow new Err(\"Title can't be empty\", \"emptytitle\");\n\t\t\t\t\n\t\t\t\tawait this.users.orgs.new(org, wssc.user._id);\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.update\", async (wssc, _id, updates: Omit<OrgDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id)) {\n\t\t\t\tif (updates.title !== undefined && !updates.title)\n\t\t\t\t\tthrow new Err(\"Title can't be empty\", \"emptytitle\");\n\t\t\t\t\n\t\t\t\tif (updates.owners) {\n\t\t\t\t\tif (!includesAll(wssc.user.slaveIds, updates.owners))\n\t\t\t\t\t\tthrow new Err(\"Can't assign owners the user is not master of\", \"forbiddenowners\");\n\t\t\t\t\t\n\t\t\t\t\tconst org = this.users.orgs.get(_id);\n\t\t\t\t\t\n\t\t\t\t\tif (org)\n\t\t\t\t\t\tupdates.owners =\n\t\t\t\t\t\t\tthis.users.sortIds(\n\t\t\t\t\t\t\t\tunion(\n\t\t\t\t\t\t\t\t\twithout(org.ownerIds, wssc.user.slaveIds),\n\t\t\t\t\t\t\t\t\twithout(updates.owners, [ org._id, ..._ids(org.slaveOrgs) ])\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (!isEmpty(updates))\n\t\t\t\t\tawait this.users.orgs.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.delete\", async (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id))\n\t\t\t\tawait this.users.orgs.collectionDelete(_id);\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Roles */\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.check-id\", (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!regexps.role.test(_id))\n\t\t\t\t\tthrow new Err(\"Role ID is incorrect\", \"notroleid\");\n\t\t\t\t\n\t\t\t\tif (this.users.roles.has(_id))\n\t\t\t\t\tthrow new Err(\"Role ID already exists\", \"exists\");\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.add\", async (wssc, role: Omit<RoleDoc, \"abilities\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\"))\n\t\t\t\tawait this.users.roles.new(role);\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.update\", async (wssc, _id: string, { abilities, ...updates }: Omit<RoleDoc, \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id)) {\n\t\t\t\tif (updates.involves)\n\t\t\t\t\tif (includesAll(wssc.user.slaveRoleIds, updates.involves)) {\n\t\t\t\t\t\tremoveAll(updates.involves, [ _id ]);\n\t\t\t\t\t\t\n\t\t\t\t\t\tconst role = this.users.roles.get(_id);\n\t\t\t\t\t\tif (role)\n\t\t\t\t\t\t\tfor (const involvedRoleId of updates.involves)\n\t\t\t\t\t\t\t\tif (this.users.roles.get(involvedRoleId)?.involves.has(role))\n\t\t\t\t\t\t\t\t\tremoveAll(updates.involves, [ involvedRoleId ]);\n\t\t\t\t\t\t\n\t\t\t\t\t\tupdates.involves = this.users.roles.cleanUpIds(updates.involves);\n\t\t\t\t\t} else\n\t\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\n\t\t\t\tawait this.users.roles.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.set-ability\", async (wssc, _id: string, abilityId: StringKey<Abilities<AS>>, paramId: string, value: unknown) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id) && wssc.user.abilities[abilityId]) {\n\t\t\t\tconst role = this.users.roles.get(_id);\n\t\t\t\tif (role) {\n\t\t\t\t\tconst abilities = structuredClone(role.ownAbilities) as GenericAbilities;\n\t\t\t\t\tlet shouldUpdate;\n\t\t\t\t\t\n\t\t\t\t\tif (paramId) {\n\t\t\t\t\t\tif (!abilities[abilityId])\n\t\t\t\t\t\t\tabilities[abilityId] = {};\n\t\t\t\t\t\tconst param = this.users.abilitiesMap.get(abilityId)?.params?.find(anotherParam => anotherParam._id === paramId);\n\t\t\t\t\t\tif (param) {\n\t\t\t\t\t\t\tconst userAbilityWithParams = wssc.user.abilities[abilityId] as AbilityWithParams;\n\t\t\t\t\t\t\tconst abilityWithParams = abilities[abilityId] as AbilityWithParams;\n\t\t\t\t\t\t\tif (param.type === \"number\") {\n\t\t\t\t\t\t\t\tif ((userAbilityWithParams[paramId] as AbilityParamNumber) >= (value as number)) {\n\t\t\t\t\t\t\t\t\tabilityWithParams[paramId] = value as number;\n\t\t\t\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} else if (param.type === \"items\" && userAbilityWithParams[paramId] && includesAll(userAbilityWithParams[paramId] as AbilityParamItems, value as string[])) {\n\t\t\t\t\t\t\t\tabilityWithParams[paramId] = value as string[];\n\t\t\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\tif (value)\n\t\t\t\t\t\t\tabilities[abilityId] = this.users.abilitiesMap.getMinimumOf(abilityId);\n\t\t\t\t\t\telse\n\t\t\t\t\t\t\t(function resolve(schema) {\n\t\t\t\t\t\t\t\tif (schema) {\n\t\t\t\t\t\t\t\t\tdelete abilities[schema._id];\n\t\t\t\t\t\t\t\t\tif (schema.subAbilities)\n\t\t\t\t\t\t\t\t\t\tfor (const subSchema of schema.subAbilities)\n\t\t\t\t\t\t\t\t\t\t\tif (abilities[subSchema._id])\n\t\t\t\t\t\t\t\t\t\t\t\tresolve(subSchema);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t})(this.users.abilitiesMap.get(abilityId));\n\t\t\t\t\t\t\n\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (shouldUpdate)\n\t\t\t\t\t\tawait this.users.roles.collection.updateOne({ _id }, { $set: { abilities } });\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.on(\"client-message:users.roles.delete\", async (wssc: WSSCWithUser<AS>, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id))\n\t\t\t\tawait this.users.roles.collectionDelete(_id);\n\t\t\t\n\t\t});\n\t\t\n\t\treturn this;\n\t};\n\t\n\tprivate initPromise;\n\t\n\twhenReady() {\n\t\treturn this.initPromise;\n\t}\n\t\n\tgetDefaultSessionProps({ userAgent, remoteAddress }: WSSCWithUser<AS>) {\n\t\treturn {\n\t\t\tuserAgent,\n\t\t\tremoteAddress\n\t\t};\n\t}\n\t\n\tsetSession(wssc: WSSCWithUser<AS>, session: null | Session<AS> | string | undefined, shouldProlong?: boolean) {\n\t\tif (session === null)\n\t\t\tsession = undefined;\n\t\telse if (typeof session == \"string\")\n\t\t\tsession = this.users.sessions.get(session);\n\t\t\n\t\tif (wssc.session !== session) {\n\t\t\tif (wssc.session)\n\t\t\t\tthis.sessionsWsMap.delete(wssc.session);\n\t\t\t\n\t\t\tif (session) {\n\t\t\t\twssc.session = session;\n\t\t\t\twssc.user = session.user;\n\t\t\t\twssc.lastUserId = session.user._id;\n\t\t\t\t\n\t\t\t\tthis.userWsMap.get(session.user)?.add(wssc);\n\t\t\t\tthis.sessionsWsMap.set(session, wssc);\n\t\t\t\t\n\t\t\t\tif (shouldProlong)\n\t\t\t\t\tsession.prolong({\n\t\t\t\t\t\t...this.getDefaultSessionProps(wssc),\n\t\t\t\t\t\t...this.getSessionProps?.(wssc),\n\t\t\t\t\t\tisOnline: true\n\t\t\t\t\t});\n\t\t\t\t\n\t\t\t} else {\n\t\t\t\tdelete wssc.session;\n\t\t\t\tdelete wssc.user;\n\t\t\t\t\n\t\t\t\tthis.userWsMap.get(wssc.user!)?.delete(wssc);\n\t\t\t}\n\t\t\t\n\t\t\tthis.wss.emit(\"client-session\", wssc, shouldProlong);\n\t\t}\n\t\t\n\t}\n\t\n\tprivate login = async (wssc: WSSCWithUser<AS>, email: string, password: string) => {\n\t\tconst session = await this.users.login(email, password, {\n\t\t\t...this.getDefaultSessionProps(wssc),\n\t\t\t...this.getSessionProps?.(wssc),\n\t\t\tisOnline: true\n\t\t});\n\t\t\n\t\tif (session)\n\t\t\tthis.setSession(wssc, session);\n\t\t\n\t};\n\t\n\tprivate logout = (wssc: WSSCWithUser<AS>) => {\n\t\tif (wssc.session) {\n\t\t\tthis.users.logout(wssc.session);\n\t\t\tthis.setSession(wssc, null);\n\t\t}\n\t\t\n\t};\n\t\n\tprivate handleRolesUpdate = () =>\n\t\tthis.rolesPublication.flushInitial();\n\t\n\tprivate handleRolesRoleUpdate = (role: Role<AS>, next: ChangeStreamDocument<RoleDoc>) =>\n\t\tnext && this.rolesPublication.skip(next);\n\t\n\tprivate handleUserCreate = (user: User<AS>) =>\n\t\tthis.userWsMap.set(user, new Set<WSSCWithUser<AS>>());\n\t\n\tprivate handleUserIsOnline = ({ _id, isOnline }: User<AS>) => {\n\t\tconst updates = { _id, isOnline };\n\t\t\n\t\tfor (const usersSubscription of this.usersPublication.subscriptions) {\n\t\t\tconst [ wssc ] = usersSubscription.args;\n\t\t\tif (wssc.user && wssc.user._id !== _id)\n\t\t\t\tusersSubscription.handler([ [ \"u\"/* update */, updates, true ] ]);\n\t\t}\n\t\t\n\t};\n\t\n\tprivate handleSessionDelete = (session: Session<AS>) => {\n\t\tconst wssc = this.sessionsWsMap.get(session);\n\t\t\n\t\tif (wssc)\n\t\t\tthis.setSession(wssc, null);\n\t\t\n\t};\n\t\n\tprivate handleOrgsUpdate = () => {\n\t\t\n\t\tthis.orgsPublication.flushInitial();\n\t\tthis.orgsExtendedPublication.flushInitial();\n\t\t\n\t};\n\t\n\tprivate handleOrgsOrgUpdate = (org: Org<AS>, next: ChangeStreamDocument<OrgDoc>) => {\n\t\tif (next) {\n\t\t\tthis.orgsPublication.skip(next);\n\t\t\tthis.orgsExtendedPublication.skip(next);\n\t\t}\n\t\t\n\t};\n\t\n\tprivate handleUserPermissionsChange = (user: User<AS>) => {\n\t\tconst webSockets = this.userWsMap.get(user);\n\t\t\n\t\tif (webSockets)\n\t\t\tthis.wss.emit(\"should-renew-subscriptions\", [ ...webSockets ]);\n\t\t\n\t};\n\t\n\tprivate handleClientRequestLogin = (wssc: WSSCWithUser<AS>, email: string, password: string) =>\n\t\tthis.login(wssc, email, password);\n\t\n\tprivate handleClientRequestLogout = (wssc: WSSCWithUser<AS>) =>\n\t\tthis.logout(wssc);\n\t\n\tprivate handleClientClosed = (wssc: WSSCWithUser<AS>) => {\n\t\twssc.session?.offline();\n\t\tthis.setSession(wssc, null);\n\t\t\n\t};\n\t\n\t\n\tstatic init<IAS extends AbilitiesSchema>(options: Options<IAS>) {\n\t\tconst usersServer = new UsersServer(options);\n\t\t\n\t\treturn usersServer.whenReady();\n\t}\n\t\n}\n", "import {\n\tCollectionMapPublication,\n\tProjection,\n\tPublication,\n\tSubscriptionHandle\n} from \"insite-subscriptions-server/ws\";\nimport {\n\t_ids,\n\tincludesAny,\n\tintersection,\n\tpick\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport { ChangeStreamDocument, Sort } from \"insite-db\";\nimport type {\n\tAbilitiesMap,\n\tOrgDoc,\n\tOrgs,\n\tRoleDoc,\n\tRoles,\n\tSessionDoc,\n\tSessions,\n\tUserDoc,\n\tUsers\n} from \"insite-users-server\";\n\n\nexport class AbilitiesPublication<AS extends AbilitiesSchema> extends Publication<AS> {\n\tconstructor(abilitiesMap: AbilitiesMap<AS>) {\n\t\tsuper(\"abilities\", {\n\t\t\t\n\t\t\tfetch(wssc) {\n\t\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\"))\n\t\t\t\t\treturn { abilities: abilitiesMap.getSchemeFor(wssc.user) };\n\t\t\t\t\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\t\n\t\t});\n\t}\n}\n\n\nexport type RolesPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (roleDoc: object) => void;\n};\n\nexport class RolesPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, RoleDoc> {\n\tconstructor(roles: Roles<AS>, options: RolesPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { title: 1, description: 1 },\n\t\t\tsort = { _o: 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tObject.assign(projection, { involves: 1, abilities: 1 });\n\t\t\n\t\tsuper(roles.collection, \"roles\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveRoleIds } },\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, roleDoc => {\n\t\t\tconst { involves, abilities, inheritedAbilities, displayTitle, _o } = roles.get(roleDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(roleDoc, {\n\t\t\t\t...roleDoc.involves ? {\n\t\t\t\t\townInvolves: roleDoc.involves,\n\t\t\t\t\tinvolves: _ids(involves),\n\t\t\t\t\tabilities,\n\t\t\t\t\tinheritedAbilities\n\t\t\t\t} : {},\n\t\t\t\t...projection.title ? { displayTitle } : {},\n\t\t\t\t_o\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(roleDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n\n\nconst userSubscriptionChangeListenerMap = new WeakMap<SubscriptionHandle, (next: ChangeStreamDocument<UserDoc>) => void>();\n\nexport type UserPublicationOptions = {\n\tfieldsToUpdate?: string[];\n\tprojection?: Projection;\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UserPublication<AS extends AbilitiesSchema> extends Publication<AS> {\n\tconstructor(users: Users<AS>, options: UserPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tfieldsToUpdate = [],\n\t\t\tprojection,\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tfor (const key of [\n\t\t\t\"email\",\n\t\t\t\"name\",\n\t\t\t\"name.first\",\n\t\t\t\"name.middle\",\n\t\t\t\"name.last\",\n\t\t\t\"org\",\n\t\t\t\"job\",\n\t\t\t\"avatar\"\n\t\t] as const)\n\t\t\tif (!projection || projection[key] !== 0)\n\t\t\t\tfieldsToUpdate.push(key);\n\t\t\n\t\tsuper(\"user\", {\n\t\t\t\n\t\t\tonSubscribe(subscription) {\n\t\t\t\tconst [ { user } ] = subscription.args;\n\t\t\t\t\n\t\t\t\tif (user) {\n\t\t\t\t\tconst { _id } = user;\n\t\t\t\t\t\n\t\t\t\t\tconst changeListener = (next: ChangeStreamDocument<UserDoc>) => {\n\t\t\t\t\t\tif (\"documentKey\" in next && next.documentKey._id === _id)\n\t\t\t\t\t\t\tswitch (next.operationType) {\n\t\t\t\t\t\t\t\tcase \"update\":\n\t\t\t\t\t\t\t\t\tif (!includesAny(Object.keys(next.updateDescription.updatedFields!), fieldsToUpdate))\n\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tcase \"replace\":// eslint-disable-line no-fallthrough\n\t\t\t\t\t\t\t\tcase \"delete\":\n\t\t\t\t\t\t\t\t\tsubscription.changed(next);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t};\n\t\t\t\t\t\n\t\t\t\t\tusers.collection.changeListeners.add(changeListener);\n\t\t\t\t\t\n\t\t\t\t\tuserSubscriptionChangeListenerMap.set(subscription, changeListener);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t},\n\t\t\t\n\t\t\tfetch({ user, session }, isSessionIdRequired) {\n\t\t\t\tif (user) {\n\t\t\t\t\tconst userDoc = pick(user, [\n\t\t\t\t\t\t\"_id\",\n\t\t\t\t\t\t\"email\",\n\t\t\t\t\t\t\"name\",\n\t\t\t\t\t\t\"initials\",\n\t\t\t\t\t\t\"displayLabel\",\n\t\t\t\t\t\t\"job\",\n\t\t\t\t\t\t\"avatarUrl\",\n\t\t\t\t\t\t\"abilities\",\n\t\t\t\t\t\t\"slaveIds\"\n\t\t\t\t\t]);\n\t\t\t\t\t\n\t\t\t\t\tObject.assign(userDoc, {\n\t\t\t\t\t\torgId: user.org._id,\n\t\t\t\t\t\tsessionId: isSessionIdRequired ? session?._id : undefined,\n\t\t\t\t\t\tisOnline: true\n\t\t\t\t\t});\n\t\t\t\t\t\n\t\t\t\t\tif (projection)\n\t\t\t\t\t\tfor (const key in projection)\n\t\t\t\t\t\t\tif (projection[key] && key in user)\n\t\t\t\t\t\t\t\tObject.assign(userDoc, { [key]: user[key as keyof typeof user] });\n\t\t\t\t\t\t\telse\n\t\t\t\t\t\t\t\tdelete userDoc[key as keyof typeof userDoc];\n\t\t\t\t\t\n\t\t\t\t\ttransform?.(userDoc);\n\t\t\t\t\t\n\t\t\t\t\treturn userDoc;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\treturn null;\n\t\t\t},\n\t\t\t\n\t\t\tonUnsubscribe(subscription) {\n\t\t\t\tconst changeListener = userSubscriptionChangeListenerMap.get(subscription);\n\t\t\t\t\n\t\t\t\tif (changeListener)\n\t\t\t\t\tusers.collection.changeListeners.delete(changeListener);\n\t\t\t\t\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport type UsersPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UsersPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, UserDoc> {\n\tconstructor(users: Users<AS>, options: UsersPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { email: 1, name: 1, org: 1, job: 1, avatar: 1 },\n\t\t\tsort = { \"name.last\": 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tsuper(users.collection, \"users\", wssc => wssc.user?.abilities.login && {\n\t\t\tquery: {},\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, userDoc => {\n\t\t\t\n\t\t\tconst user = users.get(userDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(\n\t\t\t\tuserDoc,\n\t\t\t\tpick(user, [\n\t\t\t\t\t\"initials\",\n\t\t\t\t\t\"displayLabel\",\n\t\t\t\t\t\"avatarUrl\",\n\t\t\t\t\t\"isOnline\"\n\t\t\t\t]),\n\t\t\t\t{ orgId: userDoc.org }\n\t\t\t);\n\t\t\t\n\t\t\tdelete userDoc.org;\n\t\t\tdelete userDoc.avatar;\n\t\t\t\n\t\t\ttransform?.(userDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport type UsersExtendedPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttriggers?: string[];\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UsersExtendedPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, UserDoc> {\n\tconstructor(users: Users<AS>, options: UsersExtendedPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { _id: 1 },\n\t\t\tsort,\n\t\t\ttriggers = [],\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tif (!triggers.includes(\"roles\"))\n\t\t\ttriggers.push(\"roles\");\n\t\t\n\t\tsuper(users.collection, \"users.extended\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveIds } },\n\t\t\tprojection,\n\t\t\tsort,\n\t\t\ttriggers\n\t\t}, (userDoc, [ wssc ]) => {\n\t\t\tconst user = users.get(userDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(userDoc, {\n\t\t\t\troleIds: intersection(user.ownRoleIds, wssc.user!.slaveRoleIds)\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(userDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport class SessionsPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, SessionDoc, [ userId: string ]> {\n\tconstructor(sessions: Sessions<AS>) {\n\t\tsuper(sessions.collection, \"users.people.sessions\", (wssc, userId) =>\n\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(userId) && {\n\t\t\t\tquery: { user: userId },\n\t\t\t\tprojection: { remoteAddress: 1, isOnline: 1, prolongedAt: 1 },\n\t\t\t\tsort: { prolongedAt: -1 }\n\t\t\t}\n\t\t);\n\t}\n}\n\n\nexport type OrgsPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (orgDoc: object) => void;\n};\n\nexport class OrgsPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, OrgDoc> {\n\tconstructor(orgs: Orgs, options: OrgsPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { title: 1 },\n\t\t\tsort = { title: 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tsuper(orgs.collection, \"orgs\", wssc => wssc.user?.abilities.login && {\n\t\t\tquery: {},\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, orgDoc => {\n\t\t\tconst org = orgs.get(orgDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(orgDoc, pick(org, [ \"initials\", \"displayLabel\" ]));\n\t\t\t\n\t\t\ttransform?.(orgDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n\n\nexport type OrgsExtendedPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttriggers?: string[];\n\ttransform?: (orgDoc: object) => void;\n};\n\nexport class OrgsExtendedPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, OrgDoc> {\n\tconstructor(orgs: Orgs<AS>, options: OrgsExtendedPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { note: 1 },\n\t\t\tsort = { _o: 1 },\n\t\t\ttriggers = [],\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tif (!triggers.includes(\"owners\"))\n\t\t\ttriggers.push(\"owners\");\n\t\t\n\t\tsuper(orgs.collection, \"orgs.extended\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveIds } },\n\t\t\tprojection,\n\t\t\tsort,\n\t\t\ttriggers\n\t\t}, (orgDoc, [ wssc ]) => {\n\t\t\tconst org = orgs.get(orgDoc._id)!;\n\t\t\t\n\t\t\tconst { ownerIds, slaveOrgs, _o } = org;\n\t\t\t\n\t\t\tObject.assign(orgDoc, {\n\t\t\t\towners: intersection(ownerIds, wssc.user!.slaveIds),\n\t\t\t\tslaveOrgs: _ids(intersection(slaveOrgs, wssc.user!.slaveOrgs)),\n\t\t\t\t_o\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(orgDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n", "export const regexps = {\n\temail: /^[^\\s@]{1,63}@[^\\s@]{1,63}\\.[^\\s@]{1,63}$/,\n\trole: /^[\\d_a-z-]{1,64}$/\n};\n", "import { InSiteWebSocketServer, InSiteWebSocketServerClient } from \"insite-ws/server\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport type { Session, User } from \"insite-users-server\";\n\n\nexport class WSSCWithUser<AS extends AbilitiesSchema> extends InSiteWebSocketServerClient {\n\tdeclare wss: InSiteWebSocketServer<WSSCWithUser<AS>>;\n\tuser?: User<AS>;\n\tlastUserId?: string;\n\tsession?: Session<AS>;\n}\n"],
-  "mappings": "AAEA,OACC,QAAAA,EACA,OAAAC,EACA,eAAAC,EACA,WAAAC,EACA,aAAAC,EAEA,SAAAC,EACA,WAAAC,MACM,YAEP,OAAS,UAAAC,MAA4D,YACrE,OAaC,SAAAC,MAEM,sBC7BP,OACC,4BAAAC,EAEA,eAAAC,MAEM,iCACP,OACC,QAAAC,EACA,eAAAC,EACA,gBAAAC,EACA,QAAAC,MACM,YAgBA,IAAMC,EAAN,cAA+DL,CAAgB,CACrF,YAAYM,EAAgC,CAC3C,MAAM,YAAa,CAElB,MAAMC,EAAM,CACX,OAAIA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EACnD,CAAE,UAAWD,EAAa,aAAaC,EAAK,IAAI,CAAE,EAEnD,IACR,CAED,CAAC,CACF,CACD,EASaC,EAAN,cAA2DT,CAAsC,CACvG,YAAYU,EAAkBC,EAAmC,CAAC,EAAG,CAEpE,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,EAAG,YAAa,CAAE,EACxC,KAAAC,EAAO,CAAE,GAAI,CAAE,EACf,UAAAC,CACD,EAAIH,EAEJ,OAAO,OAAOC,EAAY,CAAE,SAAU,EAAG,UAAW,CAAE,CAAC,EAEvD,MAAMF,EAAM,WAAY,QAASF,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CACpG,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,YAAa,CAAE,EAC9C,WAAAI,EACA,KAAAC,CACD,EAAGE,GAAW,CACb,GAAM,CAAE,SAAAC,EAAU,UAAAC,EAAW,mBAAAC,EAAoB,aAAAC,EAAc,GAAAC,CAAG,EAAIV,EAAM,IAAIK,EAAQ,GAAG,EAE3F,OAAO,OAAOA,EAAS,CACtB,GAAGA,EAAQ,SAAW,CACrB,YAAaA,EAAQ,SACrB,SAAUb,EAAKc,CAAQ,EACvB,UAAAC,EACA,mBAAAC,CACD,EAAI,CAAC,EACL,GAAGN,EAAW,MAAQ,CAAE,aAAAO,CAAa,EAAI,CAAC,EAC1C,GAAAC,CACD,CAAC,EAEDN,IAAYC,CAAO,CAEpB,CAAC,CAEF,CAED,EAGMM,EAAoC,IAAI,QAQjCC,EAAN,cAA0DrB,CAAgB,CAChF,YAAYsB,EAAkBZ,EAAkC,CAAC,EAAG,CAEnE,GAAM,CACL,eAAAa,EAAiB,CAAC,EAClB,WAAAZ,EACA,UAAAE,CACD,EAAIH,EAEJ,QAAWc,IAAO,CACjB,QACA,OACA,aACA,cACA,YACA,MACA,MACA,QACD,GACK,CAACb,GAAcA,EAAWa,CAAG,IAAM,IACtCD,EAAe,KAAKC,CAAG,EAEzB,MAAM,OAAQ,CAEb,YAAYC,EAAc,CACzB,GAAM,CAAE,CAAE,KAAAC,CAAK,CAAE,EAAID,EAAa,KAElC,GAAIC,EAAM,CACT,GAAM,CAAE,IAAAC,CAAI,EAAID,EAEVE,EAAkBC,GAAwC,CAC/D,GAAI,gBAAiBA,GAAQA,EAAK,YAAY,MAAQF,EACrD,OAAQE,EAAK,cAAe,CAC3B,IAAK,SACJ,GAAI,CAAC3B,EAAY,OAAO,KAAK2B,EAAK,kBAAkB,aAAc,EAAGN,CAAc,EAClF,MAEF,IAAK,UACL,IAAK,SACJE,EAAa,QAAQI,CAAI,CAC3B,CAEF,EAEAP,EAAM,WAAW,gBAAgB,IAAIM,CAAc,EAEnDR,EAAkC,IAAIK,EAAcG,CAAc,CACnE,CAED,EAEA,MAAM,CAAE,KAAAF,EAAM,QAAAI,CAAQ,EAAGC,EAAqB,CAC7C,GAAIL,EAAM,CACT,IAAMM,EAAU5B,EAAKsB,EAAM,CAC1B,MACA,QACA,OACA,WACA,eACA,MACA,YACA,YACA,UACD,CAAC,EAQD,GANA,OAAO,OAAOM,EAAS,CACtB,MAAON,EAAK,IAAI,IAChB,UAAWK,EAAsBD,GAAS,IAAM,OAChD,SAAU,EACX,CAAC,EAEGnB,EACH,QAAWa,KAAOb,EACbA,EAAWa,CAAG,GAAKA,KAAOE,EAC7B,OAAO,OAAOM,EAAS,CAAE,CAACR,CAAG,EAAGE,EAAKF,CAAwB,CAAE,CAAC,EAEhE,OAAOQ,EAAQR,CAA2B,EAE7C,OAAAX,IAAYmB,CAAO,EAEZA,CACR,CAEA,OAAO,IACR,EAEA,cAAcP,EAAc,CAC3B,IAAMG,EAAiBR,EAAkC,IAAIK,CAAY,EAErEG,GACHN,EAAM,WAAW,gBAAgB,OAAOM,CAAc,CAExD,CAED,CAAC,CAEF,CACD,EASaK,EAAN,cAA2DlC,CAAsC,CACvG,YAAYuB,EAAkBZ,EAAmC,CAAC,EAAG,CAEpE,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,EAAG,KAAM,EAAG,IAAK,EAAG,IAAK,EAAG,OAAQ,CAAE,EAC5D,KAAAC,EAAO,CAAE,YAAa,CAAE,EACxB,UAAAC,CACD,EAAIH,EAEJ,MAAMY,EAAM,WAAY,QAASf,GAAQA,EAAK,MAAM,UAAU,OAAS,CACtE,MAAO,CAAC,EACR,WAAAI,EACA,KAAAC,CACD,EAAGoB,GAAW,CAEb,IAAMN,EAAOJ,EAAM,IAAIU,EAAQ,GAAG,EAElC,OAAO,OACNA,EACA5B,EAAKsB,EAAM,CACV,WACA,eACA,YACA,UACD,CAAC,EACD,CAAE,MAAOM,EAAQ,GAAI,CACtB,EAEA,OAAOA,EAAQ,IACf,OAAOA,EAAQ,OAEfnB,IAAYmB,CAAO,CAEpB,CAAC,CAEF,CACD,EAUaE,EAAN,cAAmEnC,CAAsC,CAC/G,YAAYuB,EAAkBZ,EAA2C,CAAC,EAAG,CAE5E,GAAM,CACL,WAAAC,EAAa,CAAE,IAAK,CAAE,EACtB,KAAAC,EACA,SAAAuB,EAAW,CAAC,EACZ,UAAAtB,CACD,EAAIH,EAECyB,EAAS,SAAS,OAAO,GAC7BA,EAAS,KAAK,OAAO,EAEtB,MAAMb,EAAM,WAAY,iBAAkBf,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CAC7G,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,QAAS,CAAE,EAC1C,WAAAI,EACA,KAAAC,EACA,SAAAuB,CACD,EAAG,CAACH,EAAS,CAAEzB,CAAK,IAAM,CACzB,IAAMmB,EAAOJ,EAAM,IAAIU,EAAQ,GAAG,EAElC,OAAO,OAAOA,EAAS,CACtB,QAAS7B,EAAauB,EAAK,WAAYnB,EAAK,KAAM,YAAY,CAC/D,CAAC,EAEDM,IAAYmB,CAAO,CAEpB,CAAC,CAEF,CACD,EAGaI,EAAN,cAA8DrC,CAA6D,CACjI,YAAYsC,EAAwB,CACnC,MAAMA,EAAS,WAAY,wBAAyB,CAAC9B,EAAM+B,IAC1D/B,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAAS+B,CAAM,GAAK,CACvG,MAAO,CAAE,KAAMA,CAAO,EACtB,WAAY,CAAE,cAAe,EAAG,SAAU,EAAG,YAAa,CAAE,EAC5D,KAAM,CAAE,YAAa,EAAG,CACzB,CACD,CACD,CACD,EASaC,EAAN,cAA0DxC,CAAqC,CACrG,YAAYyC,EAAY9B,EAAkC,CAAC,EAAG,CAE7D,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,CAAE,EACxB,KAAAC,EAAO,CAAE,MAAO,CAAE,EAClB,UAAAC,CACD,EAAIH,EAEJ,MAAM8B,EAAK,WAAY,OAAQjC,GAAQA,EAAK,MAAM,UAAU,OAAS,CACpE,MAAO,CAAC,EACR,WAAAI,EACA,KAAAC,CACD,EAAG6B,GAAU,CACZ,IAAMC,EAAMF,EAAK,IAAIC,EAAO,GAAG,EAE/B,OAAO,OAAOA,EAAQrC,EAAKsC,EAAK,CAAE,WAAY,cAAe,CAAC,CAAC,EAE/D7B,IAAY4B,CAAM,CAEnB,CAAC,CAEF,CAED,EAUaE,EAAN,cAAkE5C,CAAqC,CAC7G,YAAYyC,EAAgB9B,EAA0C,CAAC,EAAG,CAEzE,GAAM,CACL,WAAAC,EAAa,CAAE,KAAM,CAAE,EACvB,KAAAC,EAAO,CAAE,GAAI,CAAE,EACf,SAAAuB,EAAW,CAAC,EACZ,UAAAtB,CACD,EAAIH,EAECyB,EAAS,SAAS,QAAQ,GAC9BA,EAAS,KAAK,QAAQ,EAEvB,MAAMK,EAAK,WAAY,gBAAiBjC,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CAC3G,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,QAAS,CAAE,EAC1C,WAAAI,EACA,KAAAC,EACA,SAAAuB,CACD,EAAG,CAACM,EAAQ,CAAElC,CAAK,IAAM,CACxB,IAAMmC,EAAMF,EAAK,IAAIC,EAAO,GAAG,EAEzB,CAAE,SAAAG,EAAU,UAAAC,EAAW,GAAA1B,CAAG,EAAIuB,EAEpC,OAAO,OAAOD,EAAQ,CACrB,OAAQtC,EAAayC,EAAUrC,EAAK,KAAM,QAAQ,EAClD,UAAWN,EAAKE,EAAa0C,EAAWtC,EAAK,KAAM,SAAS,CAAC,EAC7D,GAAAY,CACD,CAAC,EAEDN,IAAY4B,CAAM,CAEnB,CAAC,CAEF,CAED,EChXO,IAAMK,EAAU,CACtB,MAAO,4CACP,KAAM,mBACP,EF8CA,IAAMC,GAAsB,CAAE,YAAa,EACrCC,GAAgB,KAAO,IAqBhBC,EAAN,MAAMC,CAAwC,CACpD,YAAYC,EAAsB,CACjC,KAAK,YAAc,KAAK,KAAMA,CAAO,CAEtC,CAEQ,UAAY,IAAI,QAChB,cAAgB,IAAI,QAE5B,IACA,MACA,gBACA,kBAEA,qBACA,iBACA,iBACA,yBACA,gBACA,gBACA,wBACA,oBAEA,KAAQ,MAAOA,GAAyB,CAEvC,GAAM,CACL,IAAAC,EACA,YAAAC,EACA,MAAAC,EACA,YAAaC,EACb,oBAAqBC,EACrB,gBAAiBC,EACjB,MAAOC,EAAe,CAAC,EACvB,KAAMC,EAAc,CAAC,EACrB,gBAAAC,EACA,kBAAAC,CACD,EAAIV,EAEE,CACL,YAAaW,CACd,EAAIJ,EAEE,CACL,YAAaK,EACb,oBAAqBC,CACtB,EAAIL,EAEJ,KAAK,IAAMP,EACX,KAAK,MAAQE,aAAiBW,EAAQX,EAAQ,MAAMW,EAAM,KAAKZ,EAAcC,CAAK,EAClF,KAAK,gBAAkBM,EACvB,KAAK,kBAAoBC,EAEzB,QAAWK,KAAQ,KAAK,MAAM,OAAO,EACpC,KAAK,iBAAiBA,CAAI,EAyH3B,GAvHA,KAAK,qBAAuB,IAAIC,EAAyB,KAAK,MAAM,YAAY,EAChF,KAAK,iBAAmB,IAAIC,EAAqB,KAAK,MAAM,MAAON,CAAuB,EAC1F,KAAK,iBAAmB,IAAIO,EAAqB,KAAK,MAAOd,CAAkB,EAC/E,KAAK,yBAA2B,IAAIe,EAA6B,KAAK,MAAOd,CAA0B,EACvG,KAAK,gBAAkB,IAAIe,EAAoB,KAAK,MAAOd,CAAsB,EACjF,KAAK,gBAAkB,IAAIe,EAAoB,KAAK,MAAM,KAAMT,CAAsB,EACtF,KAAK,wBAA0B,IAAIU,EAA4B,KAAK,MAAM,KAAMT,CAA8B,EAC9G,KAAK,oBAAsB,IAAIU,EAAwB,KAAK,MAAM,QAAQ,EAE1E,KAAK,MAAM,GAAG,eAAgB,KAAK,iBAAiB,EACpD,KAAK,MAAM,GAAG,oBAAqB,KAAK,qBAAqB,EAC7D,KAAK,MAAM,GAAG,cAAe,KAAK,gBAAgB,EAClD,KAAK,MAAM,GAAG,iBAAkB,KAAK,kBAAkB,EACvD,KAAK,MAAM,GAAG,iBAAkB,KAAK,mBAAmB,EACxD,KAAK,MAAM,GAAG,cAAe,KAAK,gBAAgB,EAClD,KAAK,MAAM,GAAG,kBAAmB,KAAK,mBAAmB,EACzD,KAAK,MAAM,GAAG,0BAA2B,KAAK,2BAA2B,EAEzE,KAAK,IAAI,UAAU,QAAS,KAAK,wBAAwB,EACzD,KAAK,IAAI,UAAU,SAAU,KAAK,yBAAyB,EAC3D,KAAK,IAAI,GAAG,gBAAiB,KAAK,kBAAkB,EASpD,KAAK,IAAI,UAAU,2BAA4B,CAACC,EAAMC,IAAkB,CACvE,GAAID,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACE,EAAQ,MAAM,KAAKD,CAAK,EAC5B,MAAM,IAAIE,EAAI,YAAa,UAAU,EAEtC,GAAI,KAAK,MAAM,QAAQ,IAAIF,CAAK,EAC/B,MAAM,IAAIE,EAAI,uBAAwB,QAAQ,CAChD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,mBAAoB,MAAOH,EAAM,CAAE,MAAAI,EAAO,IAAAC,EAAK,GAAGC,CAAK,IAA0C,CACnH,GAAIN,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACI,EAAM,OACV,MAAM,IAAID,EAAI,2BAA4B,YAAY,EAEvD,GAAI,CAACI,EAAYP,EAAK,KAAK,aAAcI,CAAK,EAC7C,MAAM,IAAID,EAAI,gDAAiD,eAAe,EAE/E,GAAIE,GAAO,CAACL,EAAK,KAAK,SAAS,SAASK,CAAG,EAC1C,MAAM,IAAIF,EAAI,6CAA8C,cAAc,EAE3E,MAAM,KAAK,MAAM,IAAI,CAAE,MAAAC,EAAO,IAAAC,EAAK,GAAGC,CAAK,CAAC,CAC7C,CAED,CAAC,EAED,KAAK,IAAI,UAAU,+BAAgC,MAAON,EAAMQ,EAAaC,IAAwB,CACpG,GAAIT,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAASQ,CAAG,EAAG,CACtG,GAAI,OAAOC,GAAe,SACzB,MAAM,IAAIN,EAAI,gCAAiC,mBAAmB,EAEnE,GAAI,CAACM,EACJ,MAAM,IAAIN,EAAI,0BAA2B,eAAe,EAEzD,MAAM,KAAK,MAAM,eAAeK,EAAKC,CAAW,CACjD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,sBAAuB,MAAOT,EAAMQ,EAAaE,IAAgD,CACnH,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAASQ,CAAG,EAAG,CACtG,GAAIE,EAAQ,MAAO,CAClB,GAAI,CAACA,EAAQ,MAAM,OAClB,MAAM,IAAIP,EAAI,uBAAwB,YAAY,EAEnD,GAAI,CAACI,EAAYP,EAAK,KAAK,aAAcU,EAAQ,KAAK,EACrD,MAAM,IAAIP,EAAI,gDAAiD,eAAe,EAE/E,IAAMZ,EAAO,KAAK,MAAM,IAAIiB,CAAG,EAE3BjB,IACHmB,EAAQ,MACPnB,EAAK,OACJ,CAAE,MAAO,EACT,KAAK,MAAM,MAAM,WAChBoB,EAAQpB,EAAK,WAAYS,EAAK,KAAK,YAAY,EAAE,OAAOU,EAAQ,KAAK,CACtE,EACJ,CAEA,GAAIA,EAAQ,KAAO,CAACV,EAAK,KAAK,SAAS,SAASU,EAAQ,GAAG,EAC1D,MAAM,IAAIP,EAAI,6CAA8C,cAAc,EAEtES,EAAQF,CAAO,GACnB,MAAM,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAF,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CAClE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,sBAAuB,MAAOV,EAAMQ,IAAgB,CAClER,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,GAC9F,MAAM,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAA,CAAI,CAAC,CAE/C,CAAC,EAKD,KAAK,IAAI,UAAU,+BAAgC,MAAOR,EAAMa,IAAsB,CAEpFb,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAAS,KAAK,MAAM,YAAY,IAAIa,CAAS,GAAG,GAAG,GAE3E,MAAM,KAAK,MAAM,SAAS,WAAW,UAAU,CAAE,IAAKA,CAAU,CAAC,CAEnE,CAAC,EAKG,KAAK,kBAAmB,CAC3B,IAAMC,EAA0BC,IAAwH,CAEvJ,MAAO,MAAOf,EAAwBgB,KACpC,CAACD,GAAS,MAAMA,EAAMf,EAAMgB,CAAQ,IACrC5C,GAAoB,SAAS4C,EAAS,SAAS,IAAc,GAC7DA,EAAS,MAAQ3C,GAGlB,IAAK,MAAO2B,EAAwB,CAAE,KAAAiB,EAAM,SAAU,CAAE,KAAAC,EAAM,IAAAV,CAAI,CAAE,IAAwB,CAC3F,IAAMW,EAAaC,EAAO,iBAAkBH,EAAgB,MAAOA,EAAgB,QAAQ,GAAG,CAAC,CAAC,EAE1FI,EAAK,KAAK,IAAI,EAAE,SAAS,EAAE,EAEjC,MAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,QAAQ,WAAW,WAAW,CAAE,IAAKb,CAAc,EAAG,CAChE,KAAMU,EACN,KAAMC,EAAW,OAAO,EACxB,GAAAE,EACA,KAAMF,CACP,EAAG,CAAE,OAAQ,EAAK,CAAC,EACnB,KAAK,MAAM,WAAW,UAAU,CAAE,IAAKX,CAAc,EAAG,CAAE,KAAM,CAAE,OAAQa,CAAG,CAAE,CAAC,CACjF,CAAC,CAEF,CAED,GAEA,KAAK,kBAAkB,GAAG,sBAAuBP,EAChD,CAACd,EAAwB,CAAE,SAAU,CAAE,IAAAQ,CAAI,CAAE,IAC5CR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAASQ,CAAa,CAChD,CAAC,EAED,KAAK,kBAAkB,GAAG,cAAeM,EACxC,CAACd,EAAwBgB,IACxBhB,EAAK,MACLA,EAAK,KAAK,MAAQgB,EAAS,SAAS,GACtC,CAAC,CACF,CAEA,IAAMM,EAAe,MAAOd,GAAgB,CAE3C,MAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,QAAQ,WAAW,UAAU,CAAE,IAAAA,CAAI,CAAC,EAC/C,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAA,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQ,IAAK,CAAE,CAAC,CACpE,CAAC,CAEF,EAEA,YAAK,IAAI,UAAU,6BAA8B,MAAOR,EAAMQ,IAC7DR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAASQ,CAAG,GACpC,MAAMc,EAAad,CAAG,CACvB,EAEA,KAAK,IAAI,UAAU,qBAAsB,MAAOR,EAAMQ,IACrDR,EAAK,MACLA,EAAK,KAAK,MAAQQ,GAClB,MAAMc,EAAad,CAAG,CACvB,EAKA,KAAK,IAAI,UAAU,iBAAkB,MAAOR,EAAMK,IAAsD,CACvG,GAAIL,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACK,EAAI,MACR,MAAM,IAAIF,EAAI,uBAAwB,YAAY,EAEnD,MAAM,KAAK,MAAM,KAAK,IAAIE,EAAKL,EAAK,KAAK,GAAG,CAC7C,CAED,CAAC,EAED,KAAK,IAAI,UAAU,oBAAqB,MAAOA,EAAMQ,EAAKE,IAA+C,CACxG,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,EAAG,CACjG,GAAIE,EAAQ,QAAU,QAAa,CAACA,EAAQ,MAC3C,MAAM,IAAIP,EAAI,uBAAwB,YAAY,EAEnD,GAAIO,EAAQ,OAAQ,CACnB,GAAI,CAACH,EAAYP,EAAK,KAAK,SAAUU,EAAQ,MAAM,EAClD,MAAM,IAAIP,EAAI,gDAAiD,iBAAiB,EAEjF,IAAME,EAAM,KAAK,MAAM,KAAK,IAAIG,CAAG,EAE/BH,IACHK,EAAQ,OACP,KAAK,MAAM,QACVa,EACCZ,EAAQN,EAAI,SAAUL,EAAK,KAAK,QAAQ,EACxCW,EAAQD,EAAQ,OAAQ,CAAEL,EAAI,IAAK,GAAGmB,EAAKnB,EAAI,SAAS,CAAE,CAAC,CAC5D,CACD,EACH,CAEKO,EAAQF,CAAO,GACnB,MAAM,KAAK,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAF,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CACvE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,oBAAqB,MAAOV,EAAMQ,IAAgB,CAChER,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,GAC9F,MAAM,KAAK,MAAM,KAAK,iBAAiBA,CAAG,CAE5C,CAAC,EAKD,KAAK,IAAI,UAAU,uBAAwB,CAACR,EAAMQ,IAAgB,CACjE,GAAIR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACE,EAAQ,KAAK,KAAKM,CAAG,EACzB,MAAM,IAAIL,EAAI,uBAAwB,WAAW,EAElD,GAAI,KAAK,MAAM,MAAM,IAAIK,CAAG,EAC3B,MAAM,IAAIL,EAAI,yBAA0B,QAAQ,CAClD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,kBAAmB,MAAOH,EAAMyB,IAAmD,CACjGzB,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAC1D,MAAM,KAAK,MAAM,MAAM,IAAIyB,CAAI,CAEjC,CAAC,EAED,KAAK,IAAI,UAAU,qBAAsB,MAAOzB,EAAMQ,EAAa,CAAE,UAAAkB,EAAW,GAAGhB,CAAQ,IAAkC,CAC5H,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,EAAG,CACrG,GAAIE,EAAQ,SACX,GAAIH,EAAYP,EAAK,KAAK,aAAcU,EAAQ,QAAQ,EAAG,CAC1DiB,EAAUjB,EAAQ,SAAU,CAAEF,CAAI,CAAC,EAEnC,IAAMiB,EAAO,KAAK,MAAM,MAAM,IAAIjB,CAAG,EACrC,GAAIiB,EACH,QAAWG,KAAkBlB,EAAQ,SAChC,KAAK,MAAM,MAAM,IAAIkB,CAAc,GAAG,SAAS,IAAIH,CAAI,GAC1DE,EAAUjB,EAAQ,SAAU,CAAEkB,CAAe,CAAC,EAEjDlB,EAAQ,SAAW,KAAK,MAAM,MAAM,WAAWA,EAAQ,QAAQ,CAChE,KACC,OAAM,IAAIP,EAAI,gDAAiD,eAAe,EAEhF,MAAM,KAAK,MAAM,MAAM,WAAW,UAAU,CAAE,IAAAK,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CACvE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,0BAA2B,MAAOV,EAAMQ,EAAaqB,EAAqCC,EAAiBC,IAAmB,CAChJ,GAAI/B,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,GAAKR,EAAK,KAAK,UAAU6B,CAAS,EAAG,CACvI,IAAMJ,EAAO,KAAK,MAAM,MAAM,IAAIjB,CAAG,EACrC,GAAIiB,EAAM,CACT,IAAMC,EAAY,gBAAgBD,EAAK,YAAY,EAC/CO,EAEJ,GAAIF,EAAS,CACPJ,EAAUG,CAAS,IACvBH,EAAUG,CAAS,EAAI,CAAC,GACzB,IAAMI,EAAQ,KAAK,MAAM,aAAa,IAAIJ,CAAS,GAAG,QAAQ,KAAKK,GAAgBA,EAAa,MAAQJ,CAAO,EAC/G,GAAIG,EAAO,CACV,IAAME,EAAwBnC,EAAK,KAAK,UAAU6B,CAAS,EACrDO,EAAoBV,EAAUG,CAAS,EACzCI,EAAM,OAAS,SACbE,EAAsBL,CAAO,GAA6BC,IAC9DK,EAAkBN,CAAO,EAAIC,EAC7BC,EAAe,IAENC,EAAM,OAAS,SAAWE,EAAsBL,CAAO,GAAKvB,EAAY4B,EAAsBL,CAAO,EAAwBC,CAAiB,IACxJK,EAAkBN,CAAO,EAAIC,EAC7BC,EAAe,GAEjB,CACD,MACKD,EACHL,EAAUG,CAAS,EAAI,KAAK,MAAM,aAAa,aAAaA,CAAS,EAEpE,SAASQ,EAAQC,EAAQ,CACzB,GAAIA,IACH,OAAOZ,EAAUY,EAAO,GAAG,EACvBA,EAAO,cACV,QAAWC,KAAaD,EAAO,aAC1BZ,EAAUa,EAAU,GAAG,GAC1BF,EAAQE,CAAS,CAGtB,EAAG,KAAK,MAAM,aAAa,IAAIV,CAAS,CAAC,EAE1CG,EAAe,GAGZA,GACH,MAAM,KAAK,MAAM,MAAM,WAAW,UAAU,CAAE,IAAAxB,CAAI,EAAG,CAAE,KAAM,CAAE,UAAAkB,CAAU,CAAE,CAAC,CAC9E,CACD,CAED,CAAC,EAED,KAAK,IAAI,GAAG,oCAAqC,MAAO1B,EAAwBQ,IAAgB,CAC3FR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,GAClG,MAAM,KAAK,MAAM,MAAM,iBAAiBA,CAAG,CAE7C,CAAC,EAEM,IACR,EAEQ,YAER,WAAY,CACX,OAAO,KAAK,WACb,CAEA,uBAAuB,CAAE,UAAAgC,EAAW,cAAAC,CAAc,EAAqB,CACtE,MAAO,CACN,UAAAD,EACA,cAAAC,CACD,CACD,CAEA,WAAWzC,EAAwB0C,EAAkDC,EAAyB,CACzGD,IAAY,KACfA,EAAU,OACF,OAAOA,GAAW,WAC1BA,EAAU,KAAK,MAAM,SAAS,IAAIA,CAAO,GAEtC1C,EAAK,UAAY0C,IAChB1C,EAAK,SACR,KAAK,cAAc,OAAOA,EAAK,OAAO,EAEnC0C,GACH1C,EAAK,QAAU0C,EACf1C,EAAK,KAAO0C,EAAQ,KACpB1C,EAAK,WAAa0C,EAAQ,KAAK,IAE/B,KAAK,UAAU,IAAIA,EAAQ,IAAI,GAAG,IAAI1C,CAAI,EAC1C,KAAK,cAAc,IAAI0C,EAAS1C,CAAI,EAEhC2C,GACHD,EAAQ,QAAQ,CACf,GAAG,KAAK,uBAAuB1C,CAAI,EACnC,GAAG,KAAK,kBAAkBA,CAAI,EAC9B,SAAU,EACX,CAAC,IAGF,OAAOA,EAAK,QACZ,OAAOA,EAAK,KAEZ,KAAK,UAAU,IAAIA,EAAK,IAAK,GAAG,OAAOA,CAAI,GAG5C,KAAK,IAAI,KAAK,iBAAkBA,EAAM2C,CAAa,EAGrD,CAEQ,MAAQ,MAAO3C,EAAwBC,EAAe2C,IAAqB,CAClF,IAAMF,EAAU,MAAM,KAAK,MAAM,MAAMzC,EAAO2C,EAAU,CACvD,GAAG,KAAK,uBAAuB5C,CAAI,EACnC,GAAG,KAAK,kBAAkBA,CAAI,EAC9B,SAAU,EACX,CAAC,EAEG0C,GACH,KAAK,WAAW1C,EAAM0C,CAAO,CAE/B,EAEQ,OAAU1C,GAA2B,CACxCA,EAAK,UACR,KAAK,MAAM,OAAOA,EAAK,OAAO,EAC9B,KAAK,WAAWA,EAAM,IAAI,EAG5B,EAEQ,kBAAoB,IAC3B,KAAK,iBAAiB,aAAa,EAE5B,sBAAwB,CAACyB,EAAgBoB,IAChDA,GAAQ,KAAK,iBAAiB,KAAKA,CAAI,EAEhC,iBAAoBtD,GAC3B,KAAK,UAAU,IAAIA,EAAM,IAAI,GAAuB,EAE7C,mBAAqB,CAAC,CAAE,IAAAiB,EAAK,SAAAsC,CAAS,IAAgB,CAC7D,IAAMpC,EAAU,CAAE,IAAAF,EAAK,SAAAsC,CAAS,EAEhC,QAAWC,KAAqB,KAAK,iBAAiB,cAAe,CACpE,GAAM,CAAE/C,CAAK,EAAI+C,EAAkB,KAC/B/C,EAAK,MAAQA,EAAK,KAAK,MAAQQ,GAClCuC,EAAkB,QAAQ,CAAE,CAAE,IAAiBrC,EAAS,EAAK,CAAE,CAAC,CAClE,CAED,EAEQ,oBAAuBgC,GAAyB,CACvD,IAAM1C,EAAO,KAAK,cAAc,IAAI0C,CAAO,EAEvC1C,GACH,KAAK,WAAWA,EAAM,IAAI,CAE5B,EAEQ,iBAAmB,IAAM,CAEhC,KAAK,gBAAgB,aAAa,EAClC,KAAK,wBAAwB,aAAa,CAE3C,EAEQ,oBAAsB,CAACK,EAAcwC,IAAuC,CAC/EA,IACH,KAAK,gBAAgB,KAAKA,CAAI,EAC9B,KAAK,wBAAwB,KAAKA,CAAI,EAGxC,EAEQ,4BAA+BtD,GAAmB,CACzD,IAAMyD,EAAa,KAAK,UAAU,IAAIzD,CAAI,EAEtCyD,GACH,KAAK,IAAI,KAAK,6BAA8B,CAAE,GAAGA,CAAW,CAAC,CAE/D,EAEQ,yBAA2B,CAAChD,EAAwBC,EAAe2C,IAC1E,KAAK,MAAM5C,EAAMC,EAAO2C,CAAQ,EAEzB,0BAA6B5C,GACpC,KAAK,OAAOA,CAAI,EAET,mBAAsBA,GAA2B,CACxDA,EAAK,SAAS,QAAQ,EACtB,KAAK,WAAWA,EAAM,IAAI,CAE3B,EAGA,OAAO,KAAkCxB,EAAuB,CAG/D,OAFoB,IAAID,EAAYC,CAAO,EAExB,UAAU,CAC9B,CAED,EGhlBA,OAAgC,+BAAAyE,OAAmC,mBAK5D,IAAMC,EAAN,cAAuDD,EAA4B,CAEzF,KACA,WACA,OACD",
-  "names": ["_ids", "Err", "includesAll", "isEmpty", "removeAll", "union", "without", "Binary", "Users", "CollectionMapPublication", "Publication", "_ids", "includesAny", "intersection", "pick", "AbilitiesPublication", "abilitiesMap", "wssc", "RolesPublication", "roles", "options", "projection", "sort", "transform", "roleDoc", "involves", "abilities", "inheritedAbilities", "displayTitle", "_o", "userSubscriptionChangeListenerMap", "UserPublication", "users", "fieldsToUpdate", "key", "subscription", "user", "_id", "changeListener", "next", "session", "isSessionIdRequired", "userDoc", "UsersPublication", "UsersExtendedPublication", "triggers", "SessionsPublication", "sessions", "userId", "OrgsPublication", "orgs", "orgDoc", "org", "OrgsExtendedPublication", "ownerIds", "slaveOrgs", "regexps", "avatarTypesAccepted", "maxAvatarSize", "UsersServer", "_UsersServer", "options", "wss", "collections", "users", "publicationOptions", "extendedPublicationOptions", "userPublicationOptions", "rolesOptions", "orgsOptions", "getSessionProps", "incomingTransport", "rolesPublicationOptions", "orgsPublicationOptions", "orgsExtendedPublicationOptions", "Users", "user", "AbilitiesPublication", "RolesPublication", "UsersPublication", "UsersExtendedPublication", "UserPublication", "OrgsPublication", "OrgsExtendedPublication", "SessionsPublication", "wssc", "email", "regexps", "Err", "roles", "org", "rest", "includesAll", "_id", "newPassword", "updates", "without", "isEmpty", "sessionId", "getAvatarTransferProps", "check", "transfer", "data", "type", "binaryData", "Binary", "ts", "deleteAvatar", "union", "_ids", "role", "abilities", "removeAll", "involvedRoleId", "abilityId", "paramId", "value", "shouldUpdate", "param", "anotherParam", "userAbilityWithParams", "abilityWithParams", "resolve", "schema", "subSchema", "userAgent", "remoteAddress", "session", "shouldProlong", "password", "next", "isOnline", "usersSubscription", "webSockets", "InSiteWebSocketServerClient", "WSSCWithUser"]
+  "sources": ["../../../../@nesvet/npm/n/src/_ids.ts", "../../../../@nesvet/npm/n/src/noop.ts", "../../../../@nesvet/npm/n/src/debounce.ts", "../../../../@nesvet/npm/n/src/Err.ts", "../../../../@nesvet/npm/n/src/isEmpty.ts", "../../../../@nesvet/npm/n/src/howmuch.ts", "../../../../@nesvet/npm/n/src/includesAll.ts", "../../../../@nesvet/npm/n/src/includesAny.ts", "../../../../@nesvet/npm/n/src/intersection.ts", "../../../../@nesvet/npm/n/src/pick.ts", "../../../../@nesvet/npm/n/src/removeAll.ts", "../../../../@nesvet/npm/n/src/union.ts", "../../../../@nesvet/npm/n/src/without.ts", "../src/UsersServer.ts", "../src/publications.ts", "../src/regexps.ts", "../src/WSSCWithUser.ts"],
+  "sourcesContent": ["type ObjectWithId = { _id: string };\n\nexport function _ids(iterable: ObjectWithId[] | Set<ObjectWithId>): string[] {\n\tif (iterable instanceof Set) {\n\t\tconst ids = [];\n\t\tfor (const object of iterable)\n\t\t\tids.push(object._id);\n\t\t\n\t\treturn ids;\n\t}\n\t\n\treturn iterable.map(object => object._id);\n}\n", "export function noop() { /**/ }\n", "import { noop } from \"./noop.js\";\n\n\ntype Callback<Result> = (...args: unknown[]) => Result;\ntype FunctionOrBoolean = (() => unknown) | boolean;\ntype Options = { leading?: FunctionOrBoolean; maxWait?: number; trailing?: FunctionOrBoolean };\ntype NumberOrUndefined = number | undefined;\n\ntype DebouncedFunction<Result> = {\n\t(this: unknown, ..._args: unknown[]): Promise<Result>;\n};\n\nexport type Debounced<Result> = {\n\tcallback: Callback<Result>;\n\tpromise: {\n\t\tisResolved: boolean;\n\t} & Promise<unknown>;\n\tresolve: (value: Result) => void;\n\trun(): Promise<Result>;\n\tclear(shouldRun?: boolean): Promise<void>;\n} & DebouncedFunction<Result>;\n\n\nexport function debounce<Result>(callback: Callback<Result>, limit = 0, options: Options = {}) {\n\tlet { leading = false, trailing = true } = options;\n\tconst { maxWait = Infinity } = options;\n\t\n\tlet timeout: NumberOrUndefined;\n\tlet maxWaitTimeout: NumberOrUndefined;\n\tlet end: NumberOrUndefined;\n\tlet context: unknown;\n\tlet args: unknown[];\n\tlet initial: FunctionOrBoolean;\n\tlet final: FunctionOrBoolean;\n\tlet result: Result;\n\t\n\tconst expired = async () => {\n\t\t\n\t\tconst n = Date.now();\n\t\t\n\t\tif (n >= end!) {\n\t\t\ttimeout = undefined;\n\t\t\tend = undefined;\n\t\t\tclearTimeout(maxWaitTimeout);\n\t\t\tif (typeof final == \"function\")\n\t\t\t\tawait final();\n\t\t\tdebounced.resolve(result);\n\t\t\tdebounced.promise.isResolved = true;\n\t\t\tinitial = leading;\n\t\t} else {\n\t\t\tclearTimeout(timeout);\n\t\t\ttimeout = setTimeout(expired, end! - n);\n\t\t}\n\t\t\n\t};\n\t\n\tconst maxWaitExpired = Number.isFinite(maxWait) ? () => {\n\t\t\n\t\tif (final === run)\n\t\t\tfinal = false;\n\t\trun();\n\t\tmaxWaitTimeout = setTimeout(maxWaitExpired as TimerHandler, maxWait);\n\t\t\n\t} : null;\n\t\n\tasync function run() {\n\t\treturn (result = await callback.apply(context, args));\n\t}\n\t\n\tif (leading && typeof leading == \"boolean\")\n\t\tleading = run;\n\tinitial = leading;\n\t\n\tif (trailing && typeof trailing == \"boolean\")\n\t\ttrailing = run;\n\tfinal = trailing;\n\t\n\tconst debounced: Debounced<Result> = Object.assign(function (..._args) {\n\t\targs = _args;\n\t\tcontext = this;// eslint-disable-line no-invalid-this\n\t\t\n\t\tend = Date.now() + limit;\n\t\tfinal = trailing;\n\t\t\n\t\tif (debounced.promise.isResolved)\n\t\t\tdebounced.promise = Object.assign(new Promise(resolve => {\n\t\t\t\tdebounced.resolve = resolve;\n\t\t\t\t\n\t\t\t\tif (typeof initial == \"function\") {\n\t\t\t\t\tinitial();\n\t\t\t\t\tinitial = false;\n\t\t\t\t\tif (final === run)\n\t\t\t\t\t\tfinal = false;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (!timeout) {\n\t\t\t\t\ttimeout = setTimeout(expired, limit);\n\t\t\t\t\tif (maxWaitExpired)\n\t\t\t\t\t\tmaxWaitTimeout = setTimeout(maxWaitExpired, maxWait);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t}), {\n\t\t\t\tisResolved: false\n\t\t\t});\n\t\t\n\t\treturn debounced.promise;\n\t} as DebouncedFunction<Result>, {\n\t\tcallback,\n\t\tpromise: Object.assign(Promise.resolve(), {\n\t\t\tisResolved: true\n\t\t}),\n\t\tresolve: noop,\n\t\trun,\n\t\tclear: async (shouldRun?: boolean) => {\n\t\t\t\n\t\t\tclearTimeout(timeout);\n\t\t\ttimeout = undefined;\n\t\t\t\n\t\t\tclearTimeout(maxWaitTimeout);\n\t\t\t\n\t\t\tdebounced.promise.isResolved = true;\n\t\t\tdebounced.resolve(shouldRun ? await run() : result);\n\t\t\t\n\t\t}\n\t});\n\t\n\treturn debounced;\n}\n\n\ndebounce.noop = Object.assign(() => { /**/ }, {\n\tcallback: noop,\n\tpromise: Object.assign(Promise.resolve(), {\n\t\tisResolved: true\n\t}),\n\tresolve: noop,\n\trun: noop,\n\tclear: noop\n}) as unknown as Debounced<void>;\n\n\nexport function throttle<Result>(callback: Callback<Result>, limit?: number, options?: Options) {\n\treturn debounce(callback, limit, {\n\t\tmaxWait: limit,\n\t\tleading: true,\n\t\ttrailing: true,\n\t\t...options\n\t});\n}\n", "// eslint-disable-next-line unicorn/prevent-abbreviations, unicorn/custom-error-definition\nexport class Err extends Error {\n\tconstructor(message: string, tag: null | string = null, payload?: object) {\n\t\tsuper(message);\n\t\t\n\t\tif (tag && typeof tag == \"object\") {\n\t\t\tpayload = tag;\n\t\t\ttag = null;\n\t\t}\n\t\t\n\t\tthis.tag = tag;\n\t\t\n\t\tif (payload)\n\t\t\tObject.assign(this, payload);\n\t\t\n\t}\n\t\n\tname = \"Err-or\";// eslint-disable-line unicorn/custom-error-definition\n\t\n\ttag: null | string;\n\t\n}\n", "export function isEmpty(object: object) {\n\t// eslint-disable-next-line guard-for-in, no-unreachable-loop\n\tfor (const _ in object)\n\t\treturn false;\n\t\n\treturn true;\n}\n", "export function howmuch(number: [] | number, one: string, two: string, five: boolean | string, shouldPrintNumber = true) {\n\tif (Array.isArray(number))\n\t\tnumber = number.length;\n\t\n\tif (typeof five != \"string\") {\n\t\tshouldPrintNumber = five ?? true;\n\t\tfive = two;\n\t}\n\t\n\t\n\treturn (shouldPrintNumber ? `${number}\u00A0` : \"\") + howmuch.raw(number, one, two, five);\n}\n\nhowmuch.raw = (number: number, one: string, two: string, five = two) => {\n\tnumber = Math.abs(number);\n\tconst u = number % 10;\n\tconst d = number % 100;\n\t\n\treturn (\n\t\t(u === 1 && d !== 11) ?\n\t\t\tone :\n\t\t\t((u >= 2 && u <= 4) && !(d >= 12 && d <= 15)) ?\n\t\t\t\ttwo :\n\t\t\t\tfive\n\t);\n};\n", "export function includesAll<I>(iterable: I[] | Set<I>, items: I[] | Set<I>) {\n\treturn (\n\t\t(items instanceof Set ? [ ...items ] : items)\n\t\t\t.every(\n\t\t\t\titerable instanceof Set ?\n\t\t\t\t\titem => iterable.has(item) :\n\t\t\t\t\titem => iterable.includes(item)\n\t\t\t)\n\t);\n}\n", "export function includesAny<I>(iterable: I[] | Set<I>, items: I[] | Set<I>) {\n\treturn (\n\t\t(items instanceof Set ? [ ...items ] : items)\n\t\t\t.some(\n\t\t\t\titerable instanceof Set ?\n\t\t\t\t\titem => iterable.has(item) :\n\t\t\t\t\titem => iterable.includes(item)\n\t\t\t)\n\t);\n}\n", "export function intersection<I>(firstIterable: I[] | Set<I>, ...otherIterables: (I[] | Set<I>)[]): I[] {\n\t\n\tconst intersectionArray = [];\n\t\n\tmainLoop: for (const item of firstIterable) {\n\t\tfor (const otherIterable of otherIterables)\n\t\t\tif (otherIterable instanceof Set ? !otherIterable.has(item) : !otherIterable.includes(item))\n\t\t\t\tcontinue mainLoop;\n\t\tintersectionArray.push(item);\n\t}\n\t\n\treturn intersectionArray;\n}\n", "export function pick<O extends object, K extends keyof O>(object: O, keys: K[]) {\n\t\n\tconst picked: Partial<Pick<O, K>> = {};\n\t\n\tfor (const key of keys)\n\t\tif (key in object)\n\t\t\tpicked[key] = object[key];\n\t\n\treturn picked as Pick<O, K>;\n}\n", "export function removeAll<Item>(array: Item[], items: Item[]): number {\n\t\n\tlet i,\n\t\tremoved = 0;\n\t\n\tfor (const item of items)\n\t\twhile ((i = array.indexOf(item)) > -1) {\n\t\t\tarray.splice(i, 1);\n\t\t\tremoved++;\n\t\t}\n\t\n\treturn removed;\n}\n", "export function union<I>(...iterables: I[][]): I[] {\n\treturn [ ...new Set(iterables.flat()) ];\n}\n", "export function without<I>(array: I[], arrayToExclude: I[]): I[] {\n\treturn array.filter(item => !arrayToExclude.includes(item));\n}\n", "import type { InSiteWebSocketServer } from \"insite-ws/server\";\nimport type { IncomingTransfer, IncomingTransport } from \"insite-ws-transfers/node\";\nimport {\n\t_ids,\n\tErr,\n\tincludesAll,\n\tisEmpty,\n\tremoveAll,\n\tStringKey,\n\tunion,\n\twithout\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport { Binary, type ChangeStreamDocument, InSiteCollections } from \"insite-db\";\nimport {\n\ttype AbilityParamItems,\n\ttype AbilityParamNumber,\n\ttype AbilityWithParams,\n\ttype GenericAbilities,\n\ttype Org,\n\ttype OrgDoc,\n\ttype Role,\n\ttype RoleDoc,\n\ttype Session,\n\ttype User,\n\ttype UserDoc,\n\tUsers,\n\ttype Options as UsersOptions\n} from \"insite-users-server\";\nimport {\n\tAbilitiesPublication,\n\tOrgsExtendedPublication,\n\ttype OrgsExtendedPublicationOptions,\n\tOrgsPublication,\n\ttype OrgsPublicationOptions,\n\tRolesPublication,\n\ttype RolesPublicationOptions,\n\tSessionsPublication,\n\tUserPublication,\n\ttype UserPublicationOptions,\n\tUsersExtendedPublication,\n\ttype UsersExtendedPublicationOptions,\n\tUsersPublication,\n\ttype UsersPublicationOptions\n} from \"./publications\";\nimport { regexps } from \"./regexps\";\nimport { WSSCWithUser } from \"./WSSCWithUser\";\n\nconst avatarTypesAccepted = [ \"image/webp\" ];\nconst maxAvatarSize = 1024 * 512;\n\nexport type Options<AS extends AbilitiesSchema> = {\n\twss: InSiteWebSocketServer<WSSCWithUser<AS>>;\n\tcollections?: InSiteCollections;\n\tusers: Users<AS> | UsersOptions<AS>;\n\tpublication?: UsersPublicationOptions;\n\textendedPublication?: UsersExtendedPublicationOptions;\n\tuserPublication?: UserPublicationOptions;\n\troles?: {\n\t\tpublication?: RolesPublicationOptions;\n\t};\n\torgs?: {\n\t\tpublication?: OrgsPublicationOptions;\n\t\textendedPublication?: OrgsExtendedPublicationOptions;\n\t};\n\tincomingTransport?: IncomingTransport<WSSCWithUser<AS>>;\n};\n\n\nexport class UsersServer<AS extends AbilitiesSchema> {\n\tconstructor(options: Options<AS>) {\n\t\tthis.#initPromise = this.init!(options);\n\t\t\n\t}\n\t\n\t#userWsMap = new WeakMap<User<AS>, Set<WSSCWithUser<AS>>>();\n\t#sessionsWsMap = new WeakMap<Session<AS>, WSSCWithUser<AS>>();\n\t\n\twss!: Options<AS>[\"wss\"];\n\tusers!: Users<AS>;\n\tincomingTransport!: Options<AS>[\"incomingTransport\"];\n\t\n\tabilitiesPublication!: AbilitiesPublication<AS>;\n\trolesPublication!: RolesPublication<AS>;\n\tusersPublication!: UsersPublication<AS>;\n\tusersExtendedPublication!: UsersExtendedPublication<AS>;\n\tuserPublication!: UserPublication<AS>;\n\torgsPublication!: OrgsPublication<AS>;\n\torgsExtendedPublication!: OrgsExtendedPublication<AS>;\n\tsessionsPublication!: SessionsPublication<AS>;\n\t\n\tinit? = async (options: Options<AS>) => {\n\t\t\n\t\tconst {\n\t\t\twss,\n\t\t\tcollections,\n\t\t\tusers,\n\t\t\tpublication: publicationOptions,\n\t\t\textendedPublication: extendedPublicationOptions,\n\t\t\tuserPublication: userPublicationOptions,\n\t\t\troles: rolesOptions = {},\n\t\t\torgs: orgsOptions = {},\n\t\t\tincomingTransport\n\t\t} = options;\n\t\t\n\t\tconst {\n\t\t\tpublication: rolesPublicationOptions\n\t\t} = rolesOptions;\n\t\t\n\t\tconst {\n\t\t\tpublication: orgsPublicationOptions,\n\t\t\textendedPublication: orgsExtendedPublicationOptions\n\t\t} = orgsOptions;\n\t\t\n\t\tthis.wss = wss;\n\t\tthis.users = users instanceof Users ? users : await Users.init(collections!, users);\n\t\tthis.incomingTransport = incomingTransport;\n\t\t\n\t\tfor (const user of this.users.values())\n\t\t\tthis.#handleUserCreate(user);\n\t\t\n\t\tthis.abilitiesPublication = new AbilitiesPublication<AS>(this.users.abilitiesMap);\n\t\tthis.rolesPublication = new RolesPublication<AS>(this.users.roles, rolesPublicationOptions);\n\t\tthis.usersPublication = new UsersPublication<AS>(this.users, publicationOptions);\n\t\tthis.usersExtendedPublication = new UsersExtendedPublication<AS>(this.users, extendedPublicationOptions);\n\t\tthis.userPublication = new UserPublication<AS>(this.users, userPublicationOptions);\n\t\tthis.orgsPublication = new OrgsPublication<AS>(this.users.orgs, orgsPublicationOptions);\n\t\tthis.orgsExtendedPublication = new OrgsExtendedPublication<AS>(this.users.orgs, orgsExtendedPublicationOptions);\n\t\tthis.sessionsPublication = new SessionsPublication<AS>(this.users.sessions);\n\t\t\n\t\tthis.users.on(\"roles-update\", this.#handleRolesUpdate);\n\t\tthis.users.on(\"roles-role-update\", this.#handleRolesRoleUpdate);\n\t\tthis.users.on(\"user-create\", this.#handleUserCreate);\n\t\tthis.users.on(\"user-is-online\", this.#handleUserIsOnline);\n\t\tthis.users.on(\"session-delete\", this.#handleSessionDelete);\n\t\tthis.users.on(\"orgs-update\", this.#handleOrgsUpdate);\n\t\tthis.users.on(\"orgs-org-update\", this.#handleOrgsOrgUpdate);\n\t\tthis.users.on(\"user-permissions-change\", this.#handleUserPermissionsChange);\n\t\t\n\t\tthis.wss.onRequest(\"login\", this.#handleClientRequestLogin);\n\t\tthis.wss.onRequest(\"logout\", this.#handleClientRequestLogout);\n\t\tthis.wss.on(\"client-closed\", this.#handleClientClosed);\n\t\t\n\t\t\n\t\t/*\n\t\t * Handlers\n\t\t */\n\t\t\n\t\t/* Users */\n\t\t\n\t\tthis.wss.onRequest(\"users.people.check-email\", (wssc, email: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!regexps.email.test(email))\n\t\t\t\t\tthrow new Err(\"Not email\", \"notemail\");\n\t\t\t\t\n\t\t\t\tif (this.users.byEmail.has(email))\n\t\t\t\t\tthrow new Err(\"Email already exists\", \"exists\");\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.add\", async (wssc, { roles, org, ...rest }: Omit<UserDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!roles.length)\n\t\t\t\t\tthrow new Err(\"Roles shouldn't be empty\", \"emptyroles\");\n\t\t\t\t\n\t\t\t\tif (!includesAll(wssc.user.slaveRoleIds, roles))\n\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\n\t\t\t\tif (org && !wssc.user.slaveIds.includes(org))\n\t\t\t\t\tthrow new Err(\"Can't assign org the user is not master of\", \"forbiddenorg\");\n\t\t\t\t\n\t\t\t\tawait this.users.new({ roles, org, ...rest });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.change-password\", async (wssc, _id: string, newPassword: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(_id)) {\n\t\t\t\tif (typeof newPassword != \"string\")\n\t\t\t\t\tthrow new Err(\"Type of password is incorrect\", \"wrongpasswordtype\");\n\t\t\t\t\n\t\t\t\tif (!newPassword)\n\t\t\t\t\tthrow new Err(\"Password can't be empty\", \"emptypassword\");\n\t\t\t\t\n\t\t\t\tawait this.users.changePassword(_id, newPassword);\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.update\", async (wssc, _id: string, updates: Omit<UserDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(_id)) {\n\t\t\t\tif (updates.roles) {\n\t\t\t\t\tif (!updates.roles.length)\n\t\t\t\t\t\tthrow new Err(\"Roles can't be empty\", \"emptyroles\");\n\t\t\t\t\t\n\t\t\t\t\tif (!includesAll(wssc.user.slaveRoleIds, updates.roles))\n\t\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\t\n\t\t\t\t\tconst user = this.users.get(_id);\n\t\t\t\t\t\n\t\t\t\t\tif (user)\n\t\t\t\t\t\tupdates.roles =\n\t\t\t\t\t\t\tuser.isRoot ?\n\t\t\t\t\t\t\t\t[ \"root\" ] :\n\t\t\t\t\t\t\t\tthis.users.roles.cleanUpIds(\n\t\t\t\t\t\t\t\t\twithout(user.ownRoleIds, wssc.user.slaveRoleIds).concat(updates.roles)\n\t\t\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (updates.org && !wssc.user.slaveIds.includes(updates.org))\n\t\t\t\t\tthrow new Err(\"Can't assign org the user is not master of\", \"forbiddenorg\");\n\t\t\t\t\n\t\t\t\tif (!isEmpty(updates))\n\t\t\t\t\tawait this.users.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.people.delete\", async (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id))\n\t\t\t\tawait this.users.collection.deleteOne({ _id });\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Sessions */\n\t\t\n\t\tthis.wss.onRequest(\"users.people.destroy-session\", async (wssc, sessionId: string) => {\n\t\t\tif (\n\t\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\t\twssc.user.permissiveIds.includes(this.users.bySessionId.get(sessionId)?._id)\n\t\t\t)\n\t\t\t\tawait this.users.sessions.collection.deleteOne({ _id: sessionId });\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Avatars */\n\t\t\n\t\tif (this.incomingTransport) {\n\t\t\tconst getAvatarTransferProps = (check?: (wssc: WSSCWithUser<AS>, transfer: IncomingTransfer<WSSCWithUser<AS>>) => boolean | Promise<boolean | undefined> | undefined) => ({\n\t\t\t\t\n\t\t\t\tbegin: async (wssc: WSSCWithUser<AS>, transfer: IncomingTransfer<WSSCWithUser<AS>>) => (\n\t\t\t\t\t(!check || await check(wssc, transfer)) &&\n\t\t\t\t\tavatarTypesAccepted.includes(transfer.metadata.type as string) &&\n\t\t\t\t\ttransfer.size <= maxAvatarSize\n\t\t\t\t),\n\t\t\t\t\n\t\t\t\tend: async (wssc: WSSCWithUser<AS>, { data, metadata: { type, _id } }: IncomingTransfer<WSSCWithUser<AS>>) => {\n\t\t\t\t\tconst binaryData = Binary.createFromBase64((data as string).slice((data as string).indexOf(\",\")));\n\t\t\t\t\t\n\t\t\t\t\tconst ts = Date.now().toString(36);\n\t\t\t\t\t\n\t\t\t\t\tawait Promise.all([\n\t\t\t\t\t\tthis.users.avatars.collection.replaceOne({ _id: _id as string }, {\n\t\t\t\t\t\t\ttype: type as string,\n\t\t\t\t\t\t\tsize: binaryData.length(),\n\t\t\t\t\t\t\tts,\n\t\t\t\t\t\t\tdata: binaryData\n\t\t\t\t\t\t}, { upsert: true }),\n\t\t\t\t\t\tthis.users.collection.updateOne({ _id: _id as string }, { $set: { avatar: ts } })\n\t\t\t\t\t]);\n\t\t\t\t\t\n\t\t\t\t}\n\t\t\t\t\n\t\t\t});\n\t\t\t\n\t\t\tthis.incomingTransport.on(\"users.people.avatar\", getAvatarTransferProps(\n\t\t\t\t(wssc, { metadata: { _id } }) =>\n\t\t\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\t\t\twssc.user.permissiveIds.includes(_id as string)\n\t\t\t));\n\t\t\t\n\t\t\tthis.incomingTransport.on(\"user.avatar\", getAvatarTransferProps(\n\t\t\t\t(wssc, transfer) =>\n\t\t\t\t\twssc.user &&\n\t\t\t\t\twssc.user._id === transfer.metadata._id\n\t\t\t));\n\t\t}\n\t\t\n\t\tconst deleteAvatar = async (_id: string) => {\n\t\t\t\n\t\t\tawait Promise.all([\n\t\t\t\tthis.users.avatars.collection.deleteOne({ _id }),\n\t\t\t\tthis.users.collection.updateOne({ _id }, { $set: { avatar: null } })\n\t\t\t]);\n\t\t\t\n\t\t};\n\t\t\n\t\tthis.wss.onRequest(\"users.people.delete-avatar\", async (wssc, _id: string) =>\n\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") &&\n\t\t\twssc.user.permissiveIds.includes(_id) &&\n\t\t\tawait deleteAvatar(_id)\n\t\t);\n\t\t\n\t\tthis.wss.onRequest(\"user.delete-avatar\", async (wssc, _id: string) =>\n\t\t\twssc.user &&\n\t\t\twssc.user._id === _id &&\n\t\t\tawait deleteAvatar(_id)\n\t\t);\n\t\t\n\t\t\n\t\t/* Orgs */\n\t\t\n\t\t// TODO: Ensure that user becoming an owner of the org created\n\t\t// Otherwise, after org creation, he must have no rights to it, right?\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.add\", async (wssc, org: Omit<OrgDoc, \"_id\" | \"createdAt\" | \"owners\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!org.title)\n\t\t\t\t\tthrow new Err(\"Title can't be empty\", \"emptytitle\");\n\t\t\t\t\n\t\t\t\tawait this.users.orgs.new(org, wssc.user._id);\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.update\", async (wssc, _id, updates: Omit<OrgDoc, \"_id\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id)) {\n\t\t\t\tif (updates.title !== undefined && !updates.title)\n\t\t\t\t\tthrow new Err(\"Title can't be empty\", \"emptytitle\");\n\t\t\t\t\n\t\t\t\tif (updates.owners) {\n\t\t\t\t\tif (!includesAll(wssc.user.slaveIds, updates.owners))\n\t\t\t\t\t\tthrow new Err(\"Can't assign owners the user is not master of\", \"forbiddenowners\");\n\t\t\t\t\t\n\t\t\t\t\tconst org = this.users.orgs.get(_id);\n\t\t\t\t\t\n\t\t\t\t\tif (org)\n\t\t\t\t\t\tupdates.owners =\n\t\t\t\t\t\t\tthis.users.sortIds(\n\t\t\t\t\t\t\t\tunion(\n\t\t\t\t\t\t\t\t\twithout(org.ownerIds, wssc.user.slaveIds),\n\t\t\t\t\t\t\t\t\twithout(updates.owners, [ org._id, ..._ids(org.slaveOrgs) ])\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (!isEmpty(updates))\n\t\t\t\t\tawait this.users.orgs.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.orgs.delete\", async (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveIds.includes(_id))\n\t\t\t\tawait this.users.orgs.collectionDelete(_id);\n\t\t\t\n\t\t});\n\t\t\n\t\t\n\t\t/* Roles */\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.check-id\", (wssc, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\")) {\n\t\t\t\tif (!regexps.role.test(_id))\n\t\t\t\t\tthrow new Err(\"Role ID is incorrect\", \"notroleid\");\n\t\t\t\t\n\t\t\t\tif (this.users.roles.has(_id))\n\t\t\t\t\tthrow new Err(\"Role ID already exists\", \"exists\");\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.add\", async (wssc, role: Omit<RoleDoc, \"abilities\" | \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\"))\n\t\t\t\tawait this.users.roles.new(role);\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.update\", async (wssc, _id: string, { abilities, ...updates }: Omit<RoleDoc, \"createdAt\">) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id)) {\n\t\t\t\tif (updates.involves)\n\t\t\t\t\tif (includesAll(wssc.user.slaveRoleIds, updates.involves)) {\n\t\t\t\t\t\tremoveAll(updates.involves, [ _id ]);\n\t\t\t\t\t\t\n\t\t\t\t\t\tconst role = this.users.roles.get(_id);\n\t\t\t\t\t\tif (role)\n\t\t\t\t\t\t\tfor (const involvedRoleId of updates.involves)\n\t\t\t\t\t\t\t\tif (this.users.roles.get(involvedRoleId)?.involves.has(role))\n\t\t\t\t\t\t\t\t\tremoveAll(updates.involves, [ involvedRoleId ]);\n\t\t\t\t\t\t\n\t\t\t\t\t\tupdates.involves = this.users.roles.cleanUpIds(updates.involves);\n\t\t\t\t\t} else\n\t\t\t\t\t\tthrow new Err(\"Can't assign role the user is not involved in\", \"forbiddenrole\");\n\t\t\t\t\n\t\t\t\tawait this.users.roles.collection.updateOne({ _id }, { $set: updates });\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.onRequest(\"users.roles.set-ability\", async (wssc, _id: string, abilityId: StringKey<Abilities<AS>>, paramId: string, value: unknown) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id) && wssc.user.abilities[abilityId]) {\n\t\t\t\tconst role = this.users.roles.get(_id);\n\t\t\t\tif (role) {\n\t\t\t\t\tconst abilities = structuredClone(role.ownAbilities) as GenericAbilities;\n\t\t\t\t\tlet shouldUpdate;\n\t\t\t\t\t\n\t\t\t\t\tif (paramId) {\n\t\t\t\t\t\tif (!abilities[abilityId])\n\t\t\t\t\t\t\tabilities[abilityId] = {};\n\t\t\t\t\t\tconst param = this.users.abilitiesMap.get(abilityId)?.params?.find(anotherParam => anotherParam._id === paramId);\n\t\t\t\t\t\tif (param) {\n\t\t\t\t\t\t\tconst userAbilityWithParams = wssc.user.abilities[abilityId] as AbilityWithParams;\n\t\t\t\t\t\t\tconst abilityWithParams = abilities[abilityId] as AbilityWithParams;\n\t\t\t\t\t\t\tif (param.type === \"number\") {\n\t\t\t\t\t\t\t\tif ((userAbilityWithParams[paramId] as AbilityParamNumber) >= (value as number)) {\n\t\t\t\t\t\t\t\t\tabilityWithParams[paramId] = value as number;\n\t\t\t\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} else if (param.type === \"items\" && userAbilityWithParams[paramId] && includesAll(userAbilityWithParams[paramId] as AbilityParamItems, value as string[])) {\n\t\t\t\t\t\t\t\tabilityWithParams[paramId] = value as string[];\n\t\t\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\tif (value)\n\t\t\t\t\t\t\tabilities[abilityId] = this.users.abilitiesMap.getMinimumOf(abilityId);\n\t\t\t\t\t\telse\n\t\t\t\t\t\t\t(function resolve(schema) {\n\t\t\t\t\t\t\t\tif (schema) {\n\t\t\t\t\t\t\t\t\tdelete abilities[schema._id];\n\t\t\t\t\t\t\t\t\tif (schema.subAbilities)\n\t\t\t\t\t\t\t\t\t\tfor (const subSchema of schema.subAbilities)\n\t\t\t\t\t\t\t\t\t\t\tif (abilities[subSchema._id])\n\t\t\t\t\t\t\t\t\t\t\t\tresolve(subSchema);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t})(this.users.abilitiesMap.get(abilityId));\n\t\t\t\t\t\t\n\t\t\t\t\t\tshouldUpdate = true;\n\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (shouldUpdate)\n\t\t\t\t\t\tawait this.users.roles.collection.updateOne({ _id }, { $set: { abilities } });\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t\tthis.wss.on(\"client-message:users.roles.delete\", async (wssc: WSSCWithUser<AS>, _id: string) => {\n\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.slaveRoleIds.includes(_id))\n\t\t\t\tawait this.users.roles.collectionDelete(_id);\n\t\t\t\n\t\t});\n\t\t\n\t\treturn this;\n\t};\n\t\n\t#initPromise;\n\t\n\twhenReady() {\n\t\treturn this.#initPromise;\n\t}\n\t\n\t#makeSessionProps({ userAgent, remoteAddress, sessionProps }: WSSCWithUser<AS>) {\n\t\treturn {\n\t\t\tuserAgent,\n\t\t\tremoteAddress,\n\t\t\t...sessionProps,\n\t\t\tisOnline: true\n\t\t};\n\t}\n\t\n\tsetSession(wssc: WSSCWithUser<AS>, session: null | Session<AS> | string | undefined, shouldProlong?: boolean) {\n\t\tif (session === null)\n\t\t\tsession = undefined;\n\t\telse if (typeof session == \"string\")\n\t\t\tsession = this.users.sessions.get(session);\n\t\t\n\t\tif (wssc.session !== session) {\n\t\t\tif (wssc.session)\n\t\t\t\tthis.#sessionsWsMap.delete(wssc.session);\n\t\t\t\n\t\t\tif (session && !wssc.isRejected) {\n\t\t\t\twssc.session = session;\n\t\t\t\twssc.user = session.user;\n\t\t\t\twssc.lastUserId = session.user._id;\n\t\t\t\t\n\t\t\t\tthis.#userWsMap.get(session.user)?.add(wssc);\n\t\t\t\tthis.#sessionsWsMap.set(session, wssc);\n\t\t\t\t\n\t\t\t\tif (shouldProlong)\n\t\t\t\t\tsession.prolong(this.#makeSessionProps(wssc));\n\t\t\t\t\n\t\t\t} else {\n\t\t\t\tdelete wssc.session;\n\t\t\t\tdelete wssc.user;\n\t\t\t\t\n\t\t\t\tthis.#userWsMap.get(wssc.user!)?.delete(wssc);\n\t\t\t}\n\t\t\t\n\t\t\tthis.wss.emit(\"client-session\", wssc, shouldProlong);\n\t\t}\n\t\t\n\t}\n\t\n\t#login = async (wssc: WSSCWithUser<AS>, email: string, password: string) => {\n\t\tif (!wssc.isRejected) {\n\t\t\tconst session = await this.users.login(email, password, this.#makeSessionProps(wssc));\n\t\t\t\n\t\t\tif (session)\n\t\t\t\tthis.setSession(wssc, session);\n\t\t}\n\t\t\n\t};\n\t\n\t#logout = (wssc: WSSCWithUser<AS>) => {\n\t\tif (wssc.session) {\n\t\t\tthis.users.logout(wssc.session);\n\t\t\tthis.setSession(wssc, null);\n\t\t}\n\t\t\n\t};\n\t\n\t#handleRolesUpdate = () =>\n\t\tthis.rolesPublication.flushInitial();\n\t\n\t#handleRolesRoleUpdate = (role: Role<AS>, next: ChangeStreamDocument<RoleDoc>) =>\n\t\tnext && this.rolesPublication.skip(next);\n\t\n\t#handleUserCreate = (user: User<AS>) =>\n\t\tthis.#userWsMap.set(user, new Set<WSSCWithUser<AS>>());\n\t\n\t#handleUserIsOnline = ({ _id, isOnline }: User<AS>) => {\n\t\tconst updates = { _id, isOnline };\n\t\t\n\t\tfor (const usersSubscription of this.usersPublication.subscriptions) {\n\t\t\tconst [ wssc ] = usersSubscription.args;\n\t\t\tif (wssc.user && wssc.user._id !== _id)\n\t\t\t\tusersSubscription.handler([ [ \"u\"/* update */, updates, true ] ]);\n\t\t}\n\t\t\n\t};\n\t\n\t#handleSessionDelete = (session: Session<AS>) => {\n\t\tconst wssc = this.#sessionsWsMap.get(session);\n\t\t\n\t\tif (wssc)\n\t\t\tthis.setSession(wssc, null);\n\t\t\n\t};\n\t\n\t#handleOrgsUpdate = () => {\n\t\t\n\t\tthis.orgsPublication.flushInitial();\n\t\tthis.orgsExtendedPublication.flushInitial();\n\t\t\n\t};\n\t\n\t#handleOrgsOrgUpdate = (org: Org<AS>, next: ChangeStreamDocument<OrgDoc>) => {\n\t\tif (next) {\n\t\t\tthis.orgsPublication.skip(next);\n\t\t\tthis.orgsExtendedPublication.skip(next);\n\t\t}\n\t\t\n\t};\n\t\n\t#handleUserPermissionsChange = (user: User<AS>) => {\n\t\tconst webSockets = this.#userWsMap.get(user);\n\t\t\n\t\tif (webSockets)\n\t\t\tthis.wss.emit(\"should-renew-subscriptions\", [ ...webSockets ]);\n\t\t\n\t};\n\t\n\t#handleClientRequestLogin = (wssc: WSSCWithUser<AS>, email: string, password: string) =>\n\t\tthis.#login(wssc, email, password);\n\t\n\t#handleClientRequestLogout = (wssc: WSSCWithUser<AS>) =>\n\t\tthis.#logout(wssc);\n\t\n\t#handleClientClosed = (wssc: WSSCWithUser<AS>) => {\n\t\twssc.session?.offline();\n\t\tthis.setSession(wssc, null);\n\t\t\n\t};\n\t\n\t\n\tstatic init<IAS extends AbilitiesSchema>(options: Options<IAS>) {\n\t\tconst usersServer = new UsersServer(options);\n\t\t\n\t\treturn usersServer.whenReady();\n\t}\n\t\n}\n", "import {\n\tCollectionMapPublication,\n\tProjection,\n\tPublication,\n\tSubscriptionHandle\n} from \"insite-subscriptions-server/ws\";\nimport {\n\t_ids,\n\tincludesAny,\n\tintersection,\n\tpick\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport { ChangeStreamDocument, Sort } from \"insite-db\";\nimport type {\n\tAbilitiesMap,\n\tOrgDoc,\n\tOrgs,\n\tRoleDoc,\n\tRoles,\n\tSessionDoc,\n\tSessions,\n\tUserDoc,\n\tUsers\n} from \"insite-users-server\";\n\n\nexport class AbilitiesPublication<AS extends AbilitiesSchema> extends Publication<AS> {\n\tconstructor(abilitiesMap: AbilitiesMap<AS>) {\n\t\tsuper(\"abilities\", {\n\t\t\t\n\t\t\tfetch(wssc) {\n\t\t\t\tif (wssc.user?.abilities.inSite?.sections?.includes(\"users\"))\n\t\t\t\t\treturn { abilities: abilitiesMap.getSchemeFor(wssc.user) };\n\t\t\t\t\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\t\n\t\t});\n\t}\n}\n\n\nexport type RolesPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (roleDoc: object) => void;\n};\n\nexport class RolesPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, RoleDoc> {\n\tconstructor(roles: Roles<AS>, options: RolesPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { title: 1, description: 1 },\n\t\t\tsort = { _o: 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tObject.assign(projection, { involves: 1, abilities: 1 });\n\t\t\n\t\tsuper(roles.collection, \"roles\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveRoleIds } },\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, roleDoc => {\n\t\t\tconst { involves, abilities, inheritedAbilities, displayTitle, _o } = roles.get(roleDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(roleDoc, {\n\t\t\t\t...roleDoc.involves ? {\n\t\t\t\t\townInvolves: roleDoc.involves,\n\t\t\t\t\tinvolves: _ids(involves),\n\t\t\t\t\tabilities,\n\t\t\t\t\tinheritedAbilities\n\t\t\t\t} : {},\n\t\t\t\t...projection.title ? { displayTitle } : {},\n\t\t\t\t_o\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(roleDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n\n\nconst userSubscriptionChangeListenerMap = new WeakMap<SubscriptionHandle, (next: ChangeStreamDocument<UserDoc>) => void>();\n\nexport type UserPublicationOptions = {\n\tfieldsToUpdate?: string[];\n\tprojection?: Projection;\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UserPublication<AS extends AbilitiesSchema> extends Publication<AS> {\n\tconstructor(users: Users<AS>, options: UserPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tfieldsToUpdate = [],\n\t\t\tprojection,\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tfor (const key of [\n\t\t\t\"email\",\n\t\t\t\"name\",\n\t\t\t\"name.first\",\n\t\t\t\"name.middle\",\n\t\t\t\"name.last\",\n\t\t\t\"org\",\n\t\t\t\"job\",\n\t\t\t\"avatar\"\n\t\t] as const)\n\t\t\tif (!projection || projection[key] !== 0)\n\t\t\t\tfieldsToUpdate.push(key);\n\t\t\n\t\tsuper(\"user\", {\n\t\t\t\n\t\t\tonSubscribe(subscription) {\n\t\t\t\tconst [ { user } ] = subscription.args;\n\t\t\t\t\n\t\t\t\tif (user) {\n\t\t\t\t\tconst { _id } = user;\n\t\t\t\t\t\n\t\t\t\t\tconst changeListener = (next: ChangeStreamDocument<UserDoc>) => {\n\t\t\t\t\t\tif (\"documentKey\" in next && next.documentKey._id === _id)\n\t\t\t\t\t\t\tswitch (next.operationType) {\n\t\t\t\t\t\t\t\tcase \"update\":\n\t\t\t\t\t\t\t\t\tif (!includesAny(Object.keys(next.updateDescription.updatedFields!), fieldsToUpdate))\n\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tcase \"replace\":// eslint-disable-line no-fallthrough\n\t\t\t\t\t\t\t\tcase \"delete\":\n\t\t\t\t\t\t\t\t\tsubscription.changed(next);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t};\n\t\t\t\t\t\n\t\t\t\t\tusers.collection.changeListeners.add(changeListener);\n\t\t\t\t\t\n\t\t\t\t\tuserSubscriptionChangeListenerMap.set(subscription, changeListener);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t},\n\t\t\t\n\t\t\tfetch({ user, session }, isSessionIdRequired) {\n\t\t\t\tif (user) {\n\t\t\t\t\tconst userDoc = pick(user, [\n\t\t\t\t\t\t\"_id\",\n\t\t\t\t\t\t\"email\",\n\t\t\t\t\t\t\"name\",\n\t\t\t\t\t\t\"initials\",\n\t\t\t\t\t\t\"displayLabel\",\n\t\t\t\t\t\t\"job\",\n\t\t\t\t\t\t\"avatarUrl\",\n\t\t\t\t\t\t\"abilities\",\n\t\t\t\t\t\t\"slaveIds\"\n\t\t\t\t\t]);\n\t\t\t\t\t\n\t\t\t\t\tObject.assign(userDoc, {\n\t\t\t\t\t\torgId: user.org._id,\n\t\t\t\t\t\tsessionId: isSessionIdRequired ? session?._id : undefined,\n\t\t\t\t\t\tisOnline: true\n\t\t\t\t\t});\n\t\t\t\t\t\n\t\t\t\t\tif (projection)\n\t\t\t\t\t\tfor (const key in projection)\n\t\t\t\t\t\t\tif (projection[key] && key in user)\n\t\t\t\t\t\t\t\tObject.assign(userDoc, { [key]: user[key as keyof typeof user] });\n\t\t\t\t\t\t\telse\n\t\t\t\t\t\t\t\tdelete userDoc[key as keyof typeof userDoc];\n\t\t\t\t\t\n\t\t\t\t\ttransform?.(userDoc);\n\t\t\t\t\t\n\t\t\t\t\treturn userDoc;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\treturn null;\n\t\t\t},\n\t\t\t\n\t\t\tonUnsubscribe(subscription) {\n\t\t\t\tconst changeListener = userSubscriptionChangeListenerMap.get(subscription);\n\t\t\t\t\n\t\t\t\tif (changeListener)\n\t\t\t\t\tusers.collection.changeListeners.delete(changeListener);\n\t\t\t\t\n\t\t\t}\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport type UsersPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UsersPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, UserDoc> {\n\tconstructor(users: Users<AS>, options: UsersPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { email: 1, name: 1, org: 1, job: 1, avatar: 1 },\n\t\t\tsort = { \"name.last\": 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tsuper(users.collection, \"users\", wssc => wssc.user?.abilities.login && {\n\t\t\tquery: {},\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, userDoc => {\n\t\t\t\n\t\t\tconst user = users.get(userDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(\n\t\t\t\tuserDoc,\n\t\t\t\tpick(user, [\n\t\t\t\t\t\"initials\",\n\t\t\t\t\t\"displayLabel\",\n\t\t\t\t\t\"avatarUrl\",\n\t\t\t\t\t\"isOnline\"\n\t\t\t\t]),\n\t\t\t\t{ orgId: userDoc.org }\n\t\t\t);\n\t\t\t\n\t\t\tdelete userDoc.org;\n\t\t\tdelete userDoc.avatar;\n\t\t\t\n\t\t\ttransform?.(userDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport type UsersExtendedPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttriggers?: string[];\n\ttransform?: (userDoc: object) => void;\n};\n\nexport class UsersExtendedPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, UserDoc> {\n\tconstructor(users: Users<AS>, options: UsersExtendedPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { _id: 1 },\n\t\t\tsort,\n\t\t\ttriggers = [],\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tif (!triggers.includes(\"roles\"))\n\t\t\ttriggers.push(\"roles\");\n\t\t\n\t\tsuper(users.collection, \"users.extended\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveIds } },\n\t\t\tprojection,\n\t\t\tsort,\n\t\t\ttriggers\n\t\t}, (userDoc, [ wssc ]) => {\n\t\t\tconst user = users.get(userDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(userDoc, {\n\t\t\t\troleIds: intersection(user.ownRoleIds, wssc.user!.slaveRoleIds)\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(userDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n}\n\n\nexport class SessionsPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, SessionDoc, [ userId: string ]> {\n\tconstructor(sessions: Sessions<AS>) {\n\t\tsuper(sessions.collection, \"users.people.sessions\", (wssc, userId) =>\n\t\t\twssc.user?.abilities.inSite?.sections?.includes(\"users\") && wssc.user.permissiveIds.includes(userId) && {\n\t\t\t\tquery: { user: userId },\n\t\t\t\tprojection: { remoteAddress: 1, isOnline: 1, prolongedAt: 1 },\n\t\t\t\tsort: { prolongedAt: -1 }\n\t\t\t}\n\t\t);\n\t}\n}\n\n\nexport type OrgsPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttransform?: (orgDoc: object) => void;\n};\n\nexport class OrgsPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, OrgDoc> {\n\tconstructor(orgs: Orgs, options: OrgsPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { title: 1 },\n\t\t\tsort = { title: 1 },\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tsuper(orgs.collection, \"orgs\", wssc => wssc.user?.abilities.login && {\n\t\t\tquery: {},\n\t\t\tprojection,\n\t\t\tsort\n\t\t}, orgDoc => {\n\t\t\tconst org = orgs.get(orgDoc._id)!;\n\t\t\t\n\t\t\tObject.assign(orgDoc, pick(org, [ \"initials\", \"displayLabel\" ]));\n\t\t\t\n\t\t\ttransform?.(orgDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n\n\nexport type OrgsExtendedPublicationOptions = {\n\tprojection?: Projection;\n\tsort?: Sort;\n\ttriggers?: string[];\n\ttransform?: (orgDoc: object) => void;\n};\n\nexport class OrgsExtendedPublication<AS extends AbilitiesSchema> extends CollectionMapPublication<AS, OrgDoc> {\n\tconstructor(orgs: Orgs<AS>, options: OrgsExtendedPublicationOptions = {}) {\n\t\t\n\t\tconst {\n\t\t\tprojection = { note: 1 },\n\t\t\tsort = { _o: 1 },\n\t\t\ttriggers = [],\n\t\t\ttransform\n\t\t} = options;\n\t\t\n\t\tif (!triggers.includes(\"owners\"))\n\t\t\ttriggers.push(\"owners\");\n\t\t\n\t\tsuper(orgs.collection, \"orgs.extended\", wssc => wssc.user?.abilities.inSite?.sections?.includes(\"users\") && {\n\t\t\tquery: { _id: { $in: wssc.user.slaveIds } },\n\t\t\tprojection,\n\t\t\tsort,\n\t\t\ttriggers\n\t\t}, (orgDoc, [ wssc ]) => {\n\t\t\tconst org = orgs.get(orgDoc._id)!;\n\t\t\t\n\t\t\tconst { ownerIds, slaveOrgs, _o } = org;\n\t\t\t\n\t\t\tObject.assign(orgDoc, {\n\t\t\t\towners: intersection(ownerIds, wssc.user!.slaveIds),\n\t\t\t\tslaveOrgs: _ids(intersection(slaveOrgs, wssc.user!.slaveOrgs)),\n\t\t\t\t_o\n\t\t\t});\n\t\t\t\n\t\t\ttransform?.(orgDoc);\n\t\t\t\n\t\t});\n\t\t\n\t}\n\t\n}\n", "export const regexps = {\n\temail: /^[^\\s@]{1,63}@[^\\s@]{1,63}\\.[^\\s@]{1,63}$/,\n\trole: /^[\\d_a-z-]{1,64}$/\n};\n", "import { InSiteWebSocketServer, InSiteWebSocketServerClient } from \"insite-ws/server\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport type { Session, SessionDoc, User } from \"insite-users-server\";\n\n\nexport class WSSCWithUser<AS extends AbilitiesSchema> extends InSiteWebSocketServerClient {\n\tdeclare wss: InSiteWebSocketServer<WSSCWithUser<AS>>;\n\tisRejected?: boolean;\n\tsessionProps?: Partial<SessionDoc>;\n\tuser?: User<AS>;\n\tlastUserId?: string;\n\tsession?: Session<AS>;\n}\n"],
+  "mappings": "AAEM,SAAUA,EAAKC,EAA4C,CAChE,GAAIA,aAAoB,IAAK,CAC5B,IAAMC,EAAM,CAAA,EACZ,QAAWC,KAAUF,EACpBC,EAAI,KAAKC,EAAO,GAAG,EAEpB,OAAOD,CACR,CAEA,OAAOD,EAAS,IAAIE,GAAUA,EAAO,GAAG,CACzC,CCZM,SAAUC,GAAI,CAAU,CCuBxB,SAAUC,EAAiBC,EAA4BC,EAAQ,EAAGC,EAAmB,CAAA,EAAE,CAC5F,GAAI,CAAE,QAAAC,EAAU,GAAO,SAAAC,EAAW,EAAI,EAAKF,EACrC,CAAE,QAAAG,EAAU,GAAQ,EAAKH,EAE3BI,EACAC,EACAC,EACAC,EACAC,EACAC,EACAC,EACAC,EAEEC,EAAU,SAAW,CAE1B,IAAMC,EAAI,KAAK,IAAG,EAEdA,GAAKP,GACRF,EAAU,OACVE,EAAM,OACN,aAAaD,CAAc,EACvB,OAAOK,GAAS,YACnB,MAAMA,EAAK,EACZI,EAAU,QAAQH,CAAM,EACxBG,EAAU,QAAQ,WAAa,GAC/BL,EAAUR,IAEV,aAAaG,CAAO,EACpBA,EAAU,WAAWQ,EAASN,EAAOO,CAAC,EAGxC,EAEME,EAAiB,OAAO,SAASZ,CAAO,EAAI,IAAK,CAElDO,IAAUM,IACbN,EAAQ,IACTM,EAAG,EACHX,EAAiB,WAAWU,EAAgCZ,CAAO,CAEpE,EAAI,KAEJ,eAAea,GAAG,CACjB,OAAQL,EAAS,MAAMb,EAAS,MAAMS,EAASC,CAAI,CACpD,CAEIP,GAAW,OAAOA,GAAW,YAChCA,EAAUe,GACXP,EAAUR,EAENC,GAAY,OAAOA,GAAY,YAClCA,EAAWc,GACZN,EAAQR,EAER,IAAMY,EAA+B,OAAO,OAAO,YAAaG,EAAK,CACpE,OAAAT,EAAOS,EACPV,EAAU,KAEVD,EAAM,KAAK,IAAG,EAAKP,EACnBW,EAAQR,EAEJY,EAAU,QAAQ,aACrBA,EAAU,QAAU,OAAO,OAAO,IAAI,QAAQI,GAAU,CACvDJ,EAAU,QAAUI,EAEhB,OAAOT,GAAW,aACrBA,EAAO,EACPA,EAAU,GACNC,IAAUM,IACbN,EAAQ,KAGLN,IACJA,EAAU,WAAWQ,EAASb,CAAK,EAC/BgB,IACHV,EAAiB,WAAWU,EAAgBZ,CAAO,GAGtD,CAAC,EAAG,CACH,WAAY,GACZ,GAEKW,EAAU,OAClB,EAAgC,CAC/B,SAAAhB,EACA,QAAS,OAAO,OAAO,QAAQ,QAAO,EAAI,CACzC,WAAY,GACZ,EACD,QAASqB,EACT,IAAAH,EACA,MAAO,MAAOI,GAAuB,CAEpC,aAAahB,CAAO,EACpBA,EAAU,OAEV,aAAaC,CAAc,EAE3BS,EAAU,QAAQ,WAAa,GAC/BA,EAAU,QAAQM,EAAY,MAAMJ,EAAG,EAAKL,CAAM,CAEnD,EACA,EAED,OAAOG,CACR,CAGAjB,EAAS,KAAO,OAAO,OAAO,IAAK,CAAQ,EAAG,CAC7C,SAAUsB,EACV,QAAS,OAAO,OAAO,QAAQ,QAAO,EAAI,CACzC,WAAY,GACZ,EACD,QAASA,EACT,IAAKA,EACL,MAAOA,EACP,ECzIK,IAAOE,EAAP,cAAmB,KAAK,CAC7B,YAAYC,EAAiBC,EAAqB,KAAMC,EAAgB,CACvE,MAAMF,CAAO,EAETC,GAAO,OAAOA,GAAO,WACxBC,EAAUD,EACVA,EAAM,MAGP,KAAK,IAAMA,EAEPC,GACH,OAAO,OAAO,KAAMA,CAAO,CAE7B,CAEA,KAAO,SAEP,KCnBK,SAAUC,EAAQC,EAAc,CAErC,QAAWC,KAAKD,EACf,MAAO,GAER,MAAO,EACR,CCNM,SAAUE,EAAQC,EAAqBC,EAAaC,EAAaC,EAAwBC,EAAoB,GAAI,CACtH,OAAI,MAAM,QAAQJ,CAAM,IACvBA,EAASA,EAAO,QAEb,OAAOG,GAAQ,WAClBC,EAAoBD,GAAQ,GAC5BA,EAAOD,IAIAE,EAAoB,GAAGJ,CAAM,OAAM,IAAMD,EAAQ,IAAIC,EAAQC,EAAKC,EAAKC,CAAI,CACpF,CAEAJ,EAAQ,IAAM,CAACC,EAAgBC,EAAaC,EAAaC,EAAOD,IAAO,CACtEF,EAAS,KAAK,IAAIA,CAAM,EACxB,IAAM,EAAIA,EAAS,GACbK,EAAIL,EAAS,IAEnB,OACE,IAAM,GAAKK,IAAM,GACjBJ,EACE,GAAK,GAAK,GAAK,GAAM,EAAEI,GAAK,IAAMA,GAAK,IACxCH,EACAC,CAEJ,ECzBM,SAAUG,EAAeC,EAAwBC,EAAmB,CACzE,OACEA,aAAiB,IAAM,CAAE,GAAGA,CAAK,EAAKA,GACrC,MACAD,aAAoB,IACnBE,GAAQF,EAAS,IAAIE,CAAI,EACzBA,GAAQF,EAAS,SAASE,CAAI,CAAC,CAGpC,CCTM,SAAUC,EAAeC,EAAwBC,EAAmB,CACzE,OACEA,aAAiB,IAAM,CAAE,GAAGA,CAAK,EAAKA,GACrC,KACAD,aAAoB,IACnBE,GAAQF,EAAS,IAAIE,CAAI,EACzBA,GAAQF,EAAS,SAASE,CAAI,CAAC,CAGpC,CCTM,SAAUC,EAAgBC,KAAgCC,EAAgC,CAE/F,IAAMC,EAAoB,CAAA,EAE1BC,EAAU,QAAWC,KAAQJ,EAAe,CAC3C,QAAWK,KAAiBJ,EAC3B,GAAII,aAAyB,IAAM,CAACA,EAAc,IAAID,CAAI,EAAI,CAACC,EAAc,SAASD,CAAI,EACzF,SAASD,EACXD,EAAkB,KAAKE,CAAI,CAC5B,CAEA,OAAOF,CACR,CCZM,SAAUI,EAA0CC,EAAWC,EAAS,CAE7E,IAAMC,EAA8B,CAAA,EAEpC,QAAWC,KAAOF,EACbE,KAAOH,IACVE,EAAOC,CAAG,EAAIH,EAAOG,CAAG,GAE1B,OAAOD,CACR,CCTM,SAAUE,EAAgBC,EAAeC,EAAa,CAE3D,IAAIC,EACHC,EAAU,EAEX,QAAWC,KAAQH,EAClB,MAAQC,EAAIF,EAAM,QAAQI,CAAI,GAAK,IAClCJ,EAAM,OAAOE,EAAG,CAAC,EACjBC,IAGF,OAAOA,CACR,CCZM,SAAUE,KAAYC,EAAgB,CAC3C,MAAO,CAAE,GAAG,IAAI,IAAIA,EAAU,KAAI,CAAE,CAAC,CACtC,CCFM,SAAUC,EAAWC,EAAYC,EAAmB,CACzD,OAAOD,EAAM,OAAOE,GAAQ,CAACD,EAAe,SAASC,CAAI,CAAC,CAC3D,CCWA,OAAS,UAAAC,OAA4D,YACrE,OAYC,SAAAC,MAEM,sBC5BP,OACC,4BAAAC,EAEA,eAAAC,MAEM,iCAsBA,IAAMC,EAAN,cAA+DC,CAAgB,CACrF,YAAYC,EAAgC,CAC3C,MAAM,YAAa,CAElB,MAAMC,EAAM,CACX,OAAIA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EACnD,CAAE,UAAWD,EAAa,aAAaC,EAAK,IAAI,CAAE,EAEnD,IACR,CAED,CAAC,CACF,CACD,EASaC,EAAN,cAA2DC,CAAsC,CACvG,YAAYC,EAAkBC,EAAmC,CAAC,EAAG,CAEpE,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,EAAG,YAAa,CAAE,EACxC,KAAAC,EAAO,CAAE,GAAI,CAAE,EACf,UAAAC,CACD,EAAIH,EAEJ,OAAO,OAAOC,EAAY,CAAE,SAAU,EAAG,UAAW,CAAE,CAAC,EAEvD,MAAMF,EAAM,WAAY,QAASH,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CACpG,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,YAAa,CAAE,EAC9C,WAAAK,EACA,KAAAC,CACD,EAAGE,GAAW,CACb,GAAM,CAAE,SAAAC,EAAU,UAAAC,EAAW,mBAAAC,EAAoB,aAAAC,EAAc,GAAAC,CAAG,EAAIV,EAAM,IAAIK,EAAQ,GAAG,EAE3F,OAAO,OAAOA,EAAS,CACtB,GAAGA,EAAQ,SAAW,CACrB,YAAaA,EAAQ,SACrB,SAAUM,EAAKL,CAAQ,EACvB,UAAAC,EACA,mBAAAC,CACD,EAAI,CAAC,EACL,GAAGN,EAAW,MAAQ,CAAE,aAAAO,CAAa,EAAI,CAAC,EAC1C,GAAAC,CACD,CAAC,EAEDN,IAAYC,CAAO,CAEpB,CAAC,CAEF,CAED,EAGMO,EAAoC,IAAI,QAQjCC,EAAN,cAA0DlB,CAAgB,CAChF,YAAYmB,EAAkBb,EAAkC,CAAC,EAAG,CAEnE,GAAM,CACL,eAAAc,EAAiB,CAAC,EAClB,WAAAb,EACA,UAAAE,CACD,EAAIH,EAEJ,QAAWe,IAAO,CACjB,QACA,OACA,aACA,cACA,YACA,MACA,MACA,QACD,GACK,CAACd,GAAcA,EAAWc,CAAG,IAAM,IACtCD,EAAe,KAAKC,CAAG,EAEzB,MAAM,OAAQ,CAEb,YAAYC,EAAc,CACzB,GAAM,CAAE,CAAE,KAAAC,CAAK,CAAE,EAAID,EAAa,KAElC,GAAIC,EAAM,CACT,GAAM,CAAE,IAAAC,CAAI,EAAID,EAEVE,EAAkBC,GAAwC,CAC/D,GAAI,gBAAiBA,GAAQA,EAAK,YAAY,MAAQF,EACrD,OAAQE,EAAK,cAAe,CAC3B,IAAK,SACJ,GAAI,CAACC,EAAY,OAAO,KAAKD,EAAK,kBAAkB,aAAc,EAAGN,CAAc,EAClF,MAEF,IAAK,UACL,IAAK,SACJE,EAAa,QAAQI,CAAI,CAC3B,CAEF,EAEAP,EAAM,WAAW,gBAAgB,IAAIM,CAAc,EAEnDR,EAAkC,IAAIK,EAAcG,CAAc,CACnE,CAED,EAEA,MAAM,CAAE,KAAAF,EAAM,QAAAK,CAAQ,EAAGC,EAAqB,CAC7C,GAAIN,EAAM,CACT,IAAMO,EAAUC,EAAKR,EAAM,CAC1B,MACA,QACA,OACA,WACA,eACA,MACA,YACA,YACA,UACD,CAAC,EAQD,GANA,OAAO,OAAOO,EAAS,CACtB,MAAOP,EAAK,IAAI,IAChB,UAAWM,EAAsBD,GAAS,IAAM,OAChD,SAAU,EACX,CAAC,EAEGrB,EACH,QAAWc,KAAOd,EACbA,EAAWc,CAAG,GAAKA,KAAOE,EAC7B,OAAO,OAAOO,EAAS,CAAE,CAACT,CAAG,EAAGE,EAAKF,CAAwB,CAAE,CAAC,EAEhE,OAAOS,EAAQT,CAA2B,EAE7C,OAAAZ,IAAYqB,CAAO,EAEZA,CACR,CAEA,OAAO,IACR,EAEA,cAAcR,EAAc,CAC3B,IAAMG,EAAiBR,EAAkC,IAAIK,CAAY,EAErEG,GACHN,EAAM,WAAW,gBAAgB,OAAOM,CAAc,CAExD,CAED,CAAC,CAEF,CACD,EASaO,EAAN,cAA2D5B,CAAsC,CACvG,YAAYe,EAAkBb,EAAmC,CAAC,EAAG,CAEpE,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,EAAG,KAAM,EAAG,IAAK,EAAG,IAAK,EAAG,OAAQ,CAAE,EAC5D,KAAAC,EAAO,CAAE,YAAa,CAAE,EACxB,UAAAC,CACD,EAAIH,EAEJ,MAAMa,EAAM,WAAY,QAASjB,GAAQA,EAAK,MAAM,UAAU,OAAS,CACtE,MAAO,CAAC,EACR,WAAAK,EACA,KAAAC,CACD,EAAGsB,GAAW,CAEb,IAAMP,EAAOJ,EAAM,IAAIW,EAAQ,GAAG,EAElC,OAAO,OACNA,EACAC,EAAKR,EAAM,CACV,WACA,eACA,YACA,UACD,CAAC,EACD,CAAE,MAAOO,EAAQ,GAAI,CACtB,EAEA,OAAOA,EAAQ,IACf,OAAOA,EAAQ,OAEfrB,IAAYqB,CAAO,CAEpB,CAAC,CAEF,CACD,EAUaG,EAAN,cAAmE7B,CAAsC,CAC/G,YAAYe,EAAkBb,EAA2C,CAAC,EAAG,CAE5E,GAAM,CACL,WAAAC,EAAa,CAAE,IAAK,CAAE,EACtB,KAAAC,EACA,SAAA0B,EAAW,CAAC,EACZ,UAAAzB,CACD,EAAIH,EAEC4B,EAAS,SAAS,OAAO,GAC7BA,EAAS,KAAK,OAAO,EAEtB,MAAMf,EAAM,WAAY,iBAAkBjB,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CAC7G,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,QAAS,CAAE,EAC1C,WAAAK,EACA,KAAAC,EACA,SAAA0B,CACD,EAAG,CAACJ,EAAS,CAAE5B,CAAK,IAAM,CACzB,IAAMqB,EAAOJ,EAAM,IAAIW,EAAQ,GAAG,EAElC,OAAO,OAAOA,EAAS,CACtB,QAASK,EAAaZ,EAAK,WAAYrB,EAAK,KAAM,YAAY,CAC/D,CAAC,EAEDO,IAAYqB,CAAO,CAEpB,CAAC,CAEF,CACD,EAGaM,EAAN,cAA8DhC,CAA6D,CACjI,YAAYiC,EAAwB,CACnC,MAAMA,EAAS,WAAY,wBAAyB,CAACnC,EAAMoC,IAC1DpC,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAASoC,CAAM,GAAK,CACvG,MAAO,CAAE,KAAMA,CAAO,EACtB,WAAY,CAAE,cAAe,EAAG,SAAU,EAAG,YAAa,CAAE,EAC5D,KAAM,CAAE,YAAa,EAAG,CACzB,CACD,CACD,CACD,EASaC,EAAN,cAA0DnC,CAAqC,CACrG,YAAYoC,EAAYlC,EAAkC,CAAC,EAAG,CAE7D,GAAM,CACL,WAAAC,EAAa,CAAE,MAAO,CAAE,EACxB,KAAAC,EAAO,CAAE,MAAO,CAAE,EAClB,UAAAC,CACD,EAAIH,EAEJ,MAAMkC,EAAK,WAAY,OAAQtC,GAAQA,EAAK,MAAM,UAAU,OAAS,CACpE,MAAO,CAAC,EACR,WAAAK,EACA,KAAAC,CACD,EAAGiC,GAAU,CACZ,IAAMC,EAAMF,EAAK,IAAIC,EAAO,GAAG,EAE/B,OAAO,OAAOA,EAAQV,EAAKW,EAAK,CAAE,WAAY,cAAe,CAAC,CAAC,EAE/DjC,IAAYgC,CAAM,CAEnB,CAAC,CAEF,CAED,EAUaE,EAAN,cAAkEvC,CAAqC,CAC7G,YAAYoC,EAAgBlC,EAA0C,CAAC,EAAG,CAEzE,GAAM,CACL,WAAAC,EAAa,CAAE,KAAM,CAAE,EACvB,KAAAC,EAAO,CAAE,GAAI,CAAE,EACf,SAAA0B,EAAW,CAAC,EACZ,UAAAzB,CACD,EAAIH,EAEC4B,EAAS,SAAS,QAAQ,GAC9BA,EAAS,KAAK,QAAQ,EAEvB,MAAMM,EAAK,WAAY,gBAAiBtC,GAAQA,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAK,CAC3G,MAAO,CAAE,IAAK,CAAE,IAAKA,EAAK,KAAK,QAAS,CAAE,EAC1C,WAAAK,EACA,KAAAC,EACA,SAAA0B,CACD,EAAG,CAACO,EAAQ,CAAEvC,CAAK,IAAM,CACxB,IAAMwC,EAAMF,EAAK,IAAIC,EAAO,GAAG,EAEzB,CAAE,SAAAG,EAAU,UAAAC,EAAW,GAAA9B,CAAG,EAAI2B,EAEpC,OAAO,OAAOD,EAAQ,CACrB,OAAQN,EAAaS,EAAU1C,EAAK,KAAM,QAAQ,EAClD,UAAWc,EAAKmB,EAAaU,EAAW3C,EAAK,KAAM,SAAS,CAAC,EAC7D,GAAAa,CACD,CAAC,EAEDN,IAAYgC,CAAM,CAEnB,CAAC,CAEF,CAED,EChXO,IAAMK,EAAU,CACtB,MAAO,4CACP,KAAM,mBACP,EF6CA,IAAMC,GAAsB,CAAE,YAAa,EACrCC,GAAgB,KAAO,IAoBhBC,EAAN,MAAMC,CAAwC,CACpD,YAAYC,EAAsB,CACjC,KAAKC,GAAe,KAAK,KAAMD,CAAO,CAEvC,CAEAE,GAAa,IAAI,QACjBC,GAAiB,IAAI,QAErB,IACA,MACA,kBAEA,qBACA,iBACA,iBACA,yBACA,gBACA,gBACA,wBACA,oBAEA,KAAQ,MAAOH,GAAyB,CAEvC,GAAM,CACL,IAAAI,EACA,YAAAC,EACA,MAAAC,EACA,YAAaC,EACb,oBAAqBC,EACrB,gBAAiBC,EACjB,MAAOC,EAAe,CAAC,EACvB,KAAMC,EAAc,CAAC,EACrB,kBAAAC,CACD,EAAIZ,EAEE,CACL,YAAaa,CACd,EAAIH,EAEE,CACL,YAAaI,EACb,oBAAqBC,CACtB,EAAIJ,EAEJ,KAAK,IAAMP,EACX,KAAK,MAAQE,aAAiBU,EAAQV,EAAQ,MAAMU,EAAM,KAAKX,EAAcC,CAAK,EAClF,KAAK,kBAAoBM,EAEzB,QAAWK,KAAQ,KAAK,MAAM,OAAO,EACpC,KAAKC,GAAkBD,CAAI,EAyH5B,GAvHA,KAAK,qBAAuB,IAAIE,EAAyB,KAAK,MAAM,YAAY,EAChF,KAAK,iBAAmB,IAAIC,EAAqB,KAAK,MAAM,MAAOP,CAAuB,EAC1F,KAAK,iBAAmB,IAAIQ,EAAqB,KAAK,MAAOd,CAAkB,EAC/E,KAAK,yBAA2B,IAAIe,EAA6B,KAAK,MAAOd,CAA0B,EACvG,KAAK,gBAAkB,IAAIe,EAAoB,KAAK,MAAOd,CAAsB,EACjF,KAAK,gBAAkB,IAAIe,EAAoB,KAAK,MAAM,KAAMV,CAAsB,EACtF,KAAK,wBAA0B,IAAIW,EAA4B,KAAK,MAAM,KAAMV,CAA8B,EAC9G,KAAK,oBAAsB,IAAIW,EAAwB,KAAK,MAAM,QAAQ,EAE1E,KAAK,MAAM,GAAG,eAAgB,KAAKC,EAAkB,EACrD,KAAK,MAAM,GAAG,oBAAqB,KAAKC,EAAsB,EAC9D,KAAK,MAAM,GAAG,cAAe,KAAKV,EAAiB,EACnD,KAAK,MAAM,GAAG,iBAAkB,KAAKW,EAAmB,EACxD,KAAK,MAAM,GAAG,iBAAkB,KAAKC,EAAoB,EACzD,KAAK,MAAM,GAAG,cAAe,KAAKC,EAAiB,EACnD,KAAK,MAAM,GAAG,kBAAmB,KAAKC,EAAoB,EAC1D,KAAK,MAAM,GAAG,0BAA2B,KAAKC,EAA4B,EAE1E,KAAK,IAAI,UAAU,QAAS,KAAKC,EAAyB,EAC1D,KAAK,IAAI,UAAU,SAAU,KAAKC,EAA0B,EAC5D,KAAK,IAAI,GAAG,gBAAiB,KAAKC,EAAmB,EASrD,KAAK,IAAI,UAAU,2BAA4B,CAACC,EAAMC,IAAkB,CACvE,GAAID,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACE,EAAQ,MAAM,KAAKD,CAAK,EAC5B,MAAM,IAAIE,EAAI,YAAa,UAAU,EAEtC,GAAI,KAAK,MAAM,QAAQ,IAAIF,CAAK,EAC/B,MAAM,IAAIE,EAAI,uBAAwB,QAAQ,CAChD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,mBAAoB,MAAOH,EAAM,CAAE,MAAAI,EAAO,IAAAC,EAAK,GAAGC,CAAK,IAA0C,CACnH,GAAIN,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACI,EAAM,OACV,MAAM,IAAID,EAAI,2BAA4B,YAAY,EAEvD,GAAI,CAACI,EAAYP,EAAK,KAAK,aAAcI,CAAK,EAC7C,MAAM,IAAID,EAAI,gDAAiD,eAAe,EAE/E,GAAIE,GAAO,CAACL,EAAK,KAAK,SAAS,SAASK,CAAG,EAC1C,MAAM,IAAIF,EAAI,6CAA8C,cAAc,EAE3E,MAAM,KAAK,MAAM,IAAI,CAAE,MAAAC,EAAO,IAAAC,EAAK,GAAGC,CAAK,CAAC,CAC7C,CAED,CAAC,EAED,KAAK,IAAI,UAAU,+BAAgC,MAAON,EAAMQ,EAAaC,IAAwB,CACpG,GAAIT,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAASQ,CAAG,EAAG,CACtG,GAAI,OAAOC,GAAe,SACzB,MAAM,IAAIN,EAAI,gCAAiC,mBAAmB,EAEnE,GAAI,CAACM,EACJ,MAAM,IAAIN,EAAI,0BAA2B,eAAe,EAEzD,MAAM,KAAK,MAAM,eAAeK,EAAKC,CAAW,CACjD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,sBAAuB,MAAOT,EAAMQ,EAAaE,IAAgD,CACnH,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,cAAc,SAASQ,CAAG,EAAG,CACtG,GAAIE,EAAQ,MAAO,CAClB,GAAI,CAACA,EAAQ,MAAM,OAClB,MAAM,IAAIP,EAAI,uBAAwB,YAAY,EAEnD,GAAI,CAACI,EAAYP,EAAK,KAAK,aAAcU,EAAQ,KAAK,EACrD,MAAM,IAAIP,EAAI,gDAAiD,eAAe,EAE/E,IAAMvB,EAAO,KAAK,MAAM,IAAI4B,CAAG,EAE3B5B,IACH8B,EAAQ,MACP9B,EAAK,OACJ,CAAE,MAAO,EACT,KAAK,MAAM,MAAM,WAChB+B,EAAQ/B,EAAK,WAAYoB,EAAK,KAAK,YAAY,EAAE,OAAOU,EAAQ,KAAK,CACtE,EACJ,CAEA,GAAIA,EAAQ,KAAO,CAACV,EAAK,KAAK,SAAS,SAASU,EAAQ,GAAG,EAC1D,MAAM,IAAIP,EAAI,6CAA8C,cAAc,EAEtES,EAAQF,CAAO,GACnB,MAAM,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAF,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CAClE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,sBAAuB,MAAOV,EAAMQ,IAAgB,CAClER,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,GAC9F,MAAM,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAA,CAAI,CAAC,CAE/C,CAAC,EAKD,KAAK,IAAI,UAAU,+BAAgC,MAAOR,EAAMa,IAAsB,CAEpFb,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAAS,KAAK,MAAM,YAAY,IAAIa,CAAS,GAAG,GAAG,GAE3E,MAAM,KAAK,MAAM,SAAS,WAAW,UAAU,CAAE,IAAKA,CAAU,CAAC,CAEnE,CAAC,EAKG,KAAK,kBAAmB,CAC3B,IAAMC,EAA0BC,IAA0I,CAEzK,MAAO,MAAOf,EAAwBgB,KACpC,CAACD,GAAS,MAAMA,EAAMf,EAAMgB,CAAQ,IACrCzD,GAAoB,SAASyD,EAAS,SAAS,IAAc,GAC7DA,EAAS,MAAQxD,GAGlB,IAAK,MAAOwC,EAAwB,CAAE,KAAAiB,EAAM,SAAU,CAAE,KAAAC,EAAM,IAAAV,CAAI,CAAE,IAA0C,CAC7G,IAAMW,EAAaC,GAAO,iBAAkBH,EAAgB,MAAOA,EAAgB,QAAQ,GAAG,CAAC,CAAC,EAE1FI,EAAK,KAAK,IAAI,EAAE,SAAS,EAAE,EAEjC,MAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,QAAQ,WAAW,WAAW,CAAE,IAAKb,CAAc,EAAG,CAChE,KAAMU,EACN,KAAMC,EAAW,OAAO,EACxB,GAAAE,EACA,KAAMF,CACP,EAAG,CAAE,OAAQ,EAAK,CAAC,EACnB,KAAK,MAAM,WAAW,UAAU,CAAE,IAAKX,CAAc,EAAG,CAAE,KAAM,CAAE,OAAQa,CAAG,CAAE,CAAC,CACjF,CAAC,CAEF,CAED,GAEA,KAAK,kBAAkB,GAAG,sBAAuBP,EAChD,CAACd,EAAM,CAAE,SAAU,CAAE,IAAAQ,CAAI,CAAE,IAC1BR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAASQ,CAAa,CAChD,CAAC,EAED,KAAK,kBAAkB,GAAG,cAAeM,EACxC,CAACd,EAAMgB,IACNhB,EAAK,MACLA,EAAK,KAAK,MAAQgB,EAAS,SAAS,GACtC,CAAC,CACF,CAEA,IAAMM,EAAe,MAAOd,GAAgB,CAE3C,MAAM,QAAQ,IAAI,CACjB,KAAK,MAAM,QAAQ,WAAW,UAAU,CAAE,IAAAA,CAAI,CAAC,EAC/C,KAAK,MAAM,WAAW,UAAU,CAAE,IAAAA,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQ,IAAK,CAAE,CAAC,CACpE,CAAC,CAEF,EAEA,YAAK,IAAI,UAAU,6BAA8B,MAAOR,EAAMQ,IAC7DR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GACvDA,EAAK,KAAK,cAAc,SAASQ,CAAG,GACpC,MAAMc,EAAad,CAAG,CACvB,EAEA,KAAK,IAAI,UAAU,qBAAsB,MAAOR,EAAMQ,IACrDR,EAAK,MACLA,EAAK,KAAK,MAAQQ,GAClB,MAAMc,EAAad,CAAG,CACvB,EAQA,KAAK,IAAI,UAAU,iBAAkB,MAAOR,EAAMK,IAAsD,CACvG,GAAIL,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACK,EAAI,MACR,MAAM,IAAIF,EAAI,uBAAwB,YAAY,EAEnD,MAAM,KAAK,MAAM,KAAK,IAAIE,EAAKL,EAAK,KAAK,GAAG,CAC7C,CAED,CAAC,EAED,KAAK,IAAI,UAAU,oBAAqB,MAAOA,EAAMQ,EAAKE,IAA+C,CACxG,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,EAAG,CACjG,GAAIE,EAAQ,QAAU,QAAa,CAACA,EAAQ,MAC3C,MAAM,IAAIP,EAAI,uBAAwB,YAAY,EAEnD,GAAIO,EAAQ,OAAQ,CACnB,GAAI,CAACH,EAAYP,EAAK,KAAK,SAAUU,EAAQ,MAAM,EAClD,MAAM,IAAIP,EAAI,gDAAiD,iBAAiB,EAEjF,IAAME,EAAM,KAAK,MAAM,KAAK,IAAIG,CAAG,EAE/BH,IACHK,EAAQ,OACP,KAAK,MAAM,QACVa,EACCZ,EAAQN,EAAI,SAAUL,EAAK,KAAK,QAAQ,EACxCW,EAAQD,EAAQ,OAAQ,CAAEL,EAAI,IAAK,GAAGmB,EAAKnB,EAAI,SAAS,CAAE,CAAC,CAC5D,CACD,EACH,CAEKO,EAAQF,CAAO,GACnB,MAAM,KAAK,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAF,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CACvE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,oBAAqB,MAAOV,EAAMQ,IAAgB,CAChER,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,SAAS,SAASQ,CAAG,GAC9F,MAAM,KAAK,MAAM,KAAK,iBAAiBA,CAAG,CAE5C,CAAC,EAKD,KAAK,IAAI,UAAU,uBAAwB,CAACR,EAAMQ,IAAgB,CACjE,GAAIR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,EAAG,CAC7D,GAAI,CAACE,EAAQ,KAAK,KAAKM,CAAG,EACzB,MAAM,IAAIL,EAAI,uBAAwB,WAAW,EAElD,GAAI,KAAK,MAAM,MAAM,IAAIK,CAAG,EAC3B,MAAM,IAAIL,EAAI,yBAA0B,QAAQ,CAClD,CAED,CAAC,EAED,KAAK,IAAI,UAAU,kBAAmB,MAAOH,EAAMyB,IAAmD,CACjGzB,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAC1D,MAAM,KAAK,MAAM,MAAM,IAAIyB,CAAI,CAEjC,CAAC,EAED,KAAK,IAAI,UAAU,qBAAsB,MAAOzB,EAAMQ,EAAa,CAAE,UAAAkB,EAAW,GAAGhB,CAAQ,IAAkC,CAC5H,GAAIV,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,EAAG,CACrG,GAAIE,EAAQ,SACX,GAAIH,EAAYP,EAAK,KAAK,aAAcU,EAAQ,QAAQ,EAAG,CAC1DiB,EAAUjB,EAAQ,SAAU,CAAEF,CAAI,CAAC,EAEnC,IAAMiB,EAAO,KAAK,MAAM,MAAM,IAAIjB,CAAG,EACrC,GAAIiB,EACH,QAAWG,KAAkBlB,EAAQ,SAChC,KAAK,MAAM,MAAM,IAAIkB,CAAc,GAAG,SAAS,IAAIH,CAAI,GAC1DE,EAAUjB,EAAQ,SAAU,CAAEkB,CAAe,CAAC,EAEjDlB,EAAQ,SAAW,KAAK,MAAM,MAAM,WAAWA,EAAQ,QAAQ,CAChE,KACC,OAAM,IAAIP,EAAI,gDAAiD,eAAe,EAEhF,MAAM,KAAK,MAAM,MAAM,WAAW,UAAU,CAAE,IAAAK,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,CACvE,CAED,CAAC,EAED,KAAK,IAAI,UAAU,0BAA2B,MAAOV,EAAMQ,EAAaqB,EAAqCC,EAAiBC,IAAmB,CAChJ,GAAI/B,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,GAAKR,EAAK,KAAK,UAAU6B,CAAS,EAAG,CACvI,IAAMJ,EAAO,KAAK,MAAM,MAAM,IAAIjB,CAAG,EACrC,GAAIiB,EAAM,CACT,IAAMC,EAAY,gBAAgBD,EAAK,YAAY,EAC/CO,EAEJ,GAAIF,EAAS,CACPJ,EAAUG,CAAS,IACvBH,EAAUG,CAAS,EAAI,CAAC,GACzB,IAAMI,EAAQ,KAAK,MAAM,aAAa,IAAIJ,CAAS,GAAG,QAAQ,KAAKK,GAAgBA,EAAa,MAAQJ,CAAO,EAC/G,GAAIG,EAAO,CACV,IAAME,EAAwBnC,EAAK,KAAK,UAAU6B,CAAS,EACrDO,EAAoBV,EAAUG,CAAS,EACzCI,EAAM,OAAS,SACbE,EAAsBL,CAAO,GAA6BC,IAC9DK,EAAkBN,CAAO,EAAIC,EAC7BC,EAAe,IAENC,EAAM,OAAS,SAAWE,EAAsBL,CAAO,GAAKvB,EAAY4B,EAAsBL,CAAO,EAAwBC,CAAiB,IACxJK,EAAkBN,CAAO,EAAIC,EAC7BC,EAAe,GAEjB,CACD,MACKD,EACHL,EAAUG,CAAS,EAAI,KAAK,MAAM,aAAa,aAAaA,CAAS,EAEpE,SAASQ,EAAQC,EAAQ,CACzB,GAAIA,IACH,OAAOZ,EAAUY,EAAO,GAAG,EACvBA,EAAO,cACV,QAAWC,KAAaD,EAAO,aAC1BZ,EAAUa,EAAU,GAAG,GAC1BF,EAAQE,CAAS,CAGtB,EAAG,KAAK,MAAM,aAAa,IAAIV,CAAS,CAAC,EAE1CG,EAAe,GAGZA,GACH,MAAM,KAAK,MAAM,MAAM,WAAW,UAAU,CAAE,IAAAxB,CAAI,EAAG,CAAE,KAAM,CAAE,UAAAkB,CAAU,CAAE,CAAC,CAC9E,CACD,CAED,CAAC,EAED,KAAK,IAAI,GAAG,oCAAqC,MAAO1B,EAAwBQ,IAAgB,CAC3FR,EAAK,MAAM,UAAU,QAAQ,UAAU,SAAS,OAAO,GAAKA,EAAK,KAAK,aAAa,SAASQ,CAAG,GAClG,MAAM,KAAK,MAAM,MAAM,iBAAiBA,CAAG,CAE7C,CAAC,EAEM,IACR,EAEA5C,GAEA,WAAY,CACX,OAAO,KAAKA,EACb,CAEA4E,GAAkB,CAAE,UAAAC,EAAW,cAAAC,EAAe,aAAAC,CAAa,EAAqB,CAC/E,MAAO,CACN,UAAAF,EACA,cAAAC,EACA,GAAGC,EACH,SAAU,EACX,CACD,CAEA,WAAW3C,EAAwB4C,EAAkDC,EAAyB,CACzGD,IAAY,KACfA,EAAU,OACF,OAAOA,GAAW,WAC1BA,EAAU,KAAK,MAAM,SAAS,IAAIA,CAAO,GAEtC5C,EAAK,UAAY4C,IAChB5C,EAAK,SACR,KAAKlC,GAAe,OAAOkC,EAAK,OAAO,EAEpC4C,GAAW,CAAC5C,EAAK,YACpBA,EAAK,QAAU4C,EACf5C,EAAK,KAAO4C,EAAQ,KACpB5C,EAAK,WAAa4C,EAAQ,KAAK,IAE/B,KAAK/E,GAAW,IAAI+E,EAAQ,IAAI,GAAG,IAAI5C,CAAI,EAC3C,KAAKlC,GAAe,IAAI8E,EAAS5C,CAAI,EAEjC6C,GACHD,EAAQ,QAAQ,KAAKJ,GAAkBxC,CAAI,CAAC,IAG7C,OAAOA,EAAK,QACZ,OAAOA,EAAK,KAEZ,KAAKnC,GAAW,IAAImC,EAAK,IAAK,GAAG,OAAOA,CAAI,GAG7C,KAAK,IAAI,KAAK,iBAAkBA,EAAM6C,CAAa,EAGrD,CAEAC,GAAS,MAAO9C,EAAwBC,EAAe8C,IAAqB,CAC3E,GAAI,CAAC/C,EAAK,WAAY,CACrB,IAAM4C,EAAU,MAAM,KAAK,MAAM,MAAM3C,EAAO8C,EAAU,KAAKP,GAAkBxC,CAAI,CAAC,EAEhF4C,GACH,KAAK,WAAW5C,EAAM4C,CAAO,CAC/B,CAED,EAEAI,GAAWhD,GAA2B,CACjCA,EAAK,UACR,KAAK,MAAM,OAAOA,EAAK,OAAO,EAC9B,KAAK,WAAWA,EAAM,IAAI,EAG5B,EAEAV,GAAqB,IACpB,KAAK,iBAAiB,aAAa,EAEpCC,GAAyB,CAACkC,EAAgBwB,IACzCA,GAAQ,KAAK,iBAAiB,KAAKA,CAAI,EAExCpE,GAAqBD,GACpB,KAAKf,GAAW,IAAIe,EAAM,IAAI,GAAuB,EAEtDY,GAAsB,CAAC,CAAE,IAAAgB,EAAK,SAAA0C,CAAS,IAAgB,CACtD,IAAMxC,EAAU,CAAE,IAAAF,EAAK,SAAA0C,CAAS,EAEhC,QAAWC,KAAqB,KAAK,iBAAiB,cAAe,CACpE,GAAM,CAAEnD,CAAK,EAAImD,EAAkB,KAC/BnD,EAAK,MAAQA,EAAK,KAAK,MAAQQ,GAClC2C,EAAkB,QAAQ,CAAE,CAAE,IAAiBzC,EAAS,EAAK,CAAE,CAAC,CAClE,CAED,EAEAjB,GAAwBmD,GAAyB,CAChD,IAAM5C,EAAO,KAAKlC,GAAe,IAAI8E,CAAO,EAExC5C,GACH,KAAK,WAAWA,EAAM,IAAI,CAE5B,EAEAN,GAAoB,IAAM,CAEzB,KAAK,gBAAgB,aAAa,EAClC,KAAK,wBAAwB,aAAa,CAE3C,EAEAC,GAAuB,CAACU,EAAc4C,IAAuC,CACxEA,IACH,KAAK,gBAAgB,KAAKA,CAAI,EAC9B,KAAK,wBAAwB,KAAKA,CAAI,EAGxC,EAEArD,GAAgChB,GAAmB,CAClD,IAAMwE,EAAa,KAAKvF,GAAW,IAAIe,CAAI,EAEvCwE,GACH,KAAK,IAAI,KAAK,6BAA8B,CAAE,GAAGA,CAAW,CAAC,CAE/D,EAEAvD,GAA4B,CAACG,EAAwBC,EAAe8C,IACnE,KAAKD,GAAO9C,EAAMC,EAAO8C,CAAQ,EAElCjD,GAA8BE,GAC7B,KAAKgD,GAAQhD,CAAI,EAElBD,GAAuBC,GAA2B,CACjDA,EAAK,SAAS,QAAQ,EACtB,KAAK,WAAWA,EAAM,IAAI,CAE3B,EAGA,OAAO,KAAkCrC,EAAuB,CAG/D,OAFoB,IAAID,EAAYC,CAAO,EAExB,UAAU,CAC9B,CAED,EG1kBA,OAAgC,+BAAA0F,OAAmC,mBAK5D,IAAMC,EAAN,cAAuDD,EAA4B,CAEzF,WACA,aACA,KACA,WACA,OACD",
+  "names": ["_ids", "iterable", "ids", "object", "noop", "debounce", "callback", "limit", "options", "leading", "trailing", "maxWait", "timeout", "maxWaitTimeout", "end", "context", "args", "initial", "final", "result", "expired", "n", "debounced", "maxWaitExpired", "run", "_args", "resolve", "noop", "shouldRun", "Err", "message", "tag", "payload", "isEmpty", "object", "_", "howmuch", "number", "one", "two", "five", "shouldPrintNumber", "d", "includesAll", "iterable", "items", "item", "includesAny", "iterable", "items", "item", "intersection", "firstIterable", "otherIterables", "intersectionArray", "mainLoop", "item", "otherIterable", "pick", "object", "keys", "picked", "key", "removeAll", "array", "items", "i", "removed", "item", "union", "iterables", "without", "array", "arrayToExclude", "item", "Binary", "Users", "CollectionMapPublication", "Publication", "AbilitiesPublication", "Publication", "abilitiesMap", "wssc", "RolesPublication", "CollectionMapPublication", "roles", "options", "projection", "sort", "transform", "roleDoc", "involves", "abilities", "inheritedAbilities", "displayTitle", "_o", "_ids", "userSubscriptionChangeListenerMap", "UserPublication", "users", "fieldsToUpdate", "key", "subscription", "user", "_id", "changeListener", "next", "includesAny", "session", "isSessionIdRequired", "userDoc", "pick", "UsersPublication", "UsersExtendedPublication", "triggers", "intersection", "SessionsPublication", "sessions", "userId", "OrgsPublication", "orgs", "orgDoc", "org", "OrgsExtendedPublication", "ownerIds", "slaveOrgs", "regexps", "avatarTypesAccepted", "maxAvatarSize", "UsersServer", "_UsersServer", "options", "#initPromise", "#userWsMap", "#sessionsWsMap", "wss", "collections", "users", "publicationOptions", "extendedPublicationOptions", "userPublicationOptions", "rolesOptions", "orgsOptions", "incomingTransport", "rolesPublicationOptions", "orgsPublicationOptions", "orgsExtendedPublicationOptions", "Users", "user", "#handleUserCreate", "AbilitiesPublication", "RolesPublication", "UsersPublication", "UsersExtendedPublication", "UserPublication", "OrgsPublication", "OrgsExtendedPublication", "SessionsPublication", "#handleRolesUpdate", "#handleRolesRoleUpdate", "#handleUserIsOnline", "#handleSessionDelete", "#handleOrgsUpdate", "#handleOrgsOrgUpdate", "#handleUserPermissionsChange", "#handleClientRequestLogin", "#handleClientRequestLogout", "#handleClientClosed", "wssc", "email", "regexps", "Err", "roles", "org", "rest", "includesAll", "_id", "newPassword", "updates", "without", "isEmpty", "sessionId", "getAvatarTransferProps", "check", "transfer", "data", "type", "binaryData", "Binary", "ts", "deleteAvatar", "union", "_ids", "role", "abilities", "removeAll", "involvedRoleId", "abilityId", "paramId", "value", "shouldUpdate", "param", "anotherParam", "userAbilityWithParams", "abilityWithParams", "resolve", "schema", "subSchema", "#makeSessionProps", "userAgent", "remoteAddress", "sessionProps", "session", "shouldProlong", "#login", "password", "#logout", "next", "isOnline", "usersSubscription", "webSockets", "InSiteWebSocketServerClient", "WSSCWithUser"]
 }

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "insite-users-server-ws",
-  "version": "2.0.21",
+  "version": "2.0.27",
   "description": "inSite users server side WebSocket API",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
-  "packageManager": "bun@1.1.33",
+  "packageManager": "bun@1.1.36",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
     "build": "bun .conveyer.js",
@@ -27,16 +27,16 @@
     "@nesvet/n": "^1.1.7",
     "insite-common": "^2.0.0",
     "insite-db": "^2.0.3",
-    "insite-subscriptions-server": "^2.0.13",
-    "insite-users-server": "^2.0.81",
-    "insite-ws": "^2.0.17",
-    "insite-ws-transfers": "^2.0.10"
+    "insite-subscriptions-server": "^2.0.19",
+    "insite-users-server": "^2.0.99",
+    "insite-ws": "^2.0.18",
+    "insite-ws-transfers": "^2.0.16"
   },
   "devDependencies": {
     "@nesvet/conveyer": "^2.2.5",
     "@nesvet/eslint-config": "^2.0.34",
-    "@types/node": "^22.8.4",
-    "@types/ws": "^8.5.12",
-    "typescript": "^5.6.3"
+    "@types/node": "^22.10.2",
+    "@types/ws": "^8.5.13",
+    "typescript": "^5.7.2"
   }
 }