insite-users-server 2.4.0 → 2.6.0

package/README.md

@@ -1,5 +1,7 @@
 # insite-users-server
 
+[![npm](https://img.shields.io/npm/v/insite-users-server)](https://www.npmjs.com/package/insite-users-server)
+
 Server-side core for users, organizations, roles, sessions, and avatars in the inSite stack. In-memory domain models backed by MongoDB with change streams for real-time sync, role-based abilities, and hierarchical org structure.
 
 Part of [inSite](../../README.md) — uses [insite-db](../db/README.md) and [insite-common](../common/README.md). WebSocket integration via [insite-users-server-ws](../users-server-ws/README.md).
@@ -89,7 +91,7 @@ class Users<AS extends AbilitiesSchema> extends Map<string, User<AS>>
 | `whenReady()` | Returns `Promise<Users>` for init completion |
 | `load(userDoc)` | Loads user from doc into map |
 | `create(newUser)` | Creates user, returns `_id` |
-| `updateUser(_id, updates, byUser?)` | Updates user; `byUser` restricts role changes by subordination |
+| `updateUser(_id, updates, byUser?)` | Updates user; `byUser` restricts role changes by subordination. A non-argon2 `password` is hashed in the same `$set`. Sessions are deleted only when that hash differs from the stored one |
 | `changePassword(_id, newPassword)` | Hashes and updates password, invalidates sessions |
 | `login(email, password, sessionProps)` | Verifies credentials, creates session |
 | `logout(session)` | Deletes session |
@@ -141,7 +143,7 @@ class User<AS extends AbilitiesSchema>
 | `slaves` | `Set<Org<AS> \| User<AS>>` | Union of slaveOrgs and slaveUsers |
 | `slaveIds` | `string[]` | Ids of slaves |
 | `permissiveIds` | `string[]` | Ids user can act on (org, self, slaves) |
-| `sessions` | `Set<Session<AS>>` | Active sessions |
+| `sessions` | `Set<Session<AS>>` | Active sessions. A missing `login.sessionsLimit` does not delete them; an explicit `0` does |
 | `isOnline` | `boolean` | Has at least one online session |
 | `isRoot` | `boolean` | Has root role |
 
@@ -270,7 +272,7 @@ class Session<AS extends AbilitiesSchema>
 | `user` | `User<AS>` | User |
 | `isOnline` | `boolean` | Online flag |
 | `userAgent` | `string` | User agent |
-| `remoteAddress` | `string` | IP |
+| `remoteAddress` | `string` | IPv4, or IPv6 without a zone id |
 | `createdAt` | `number` | Timestamp |
 | `prolongedAt` | `number` | Last prolong timestamp |
 | `expiresAt` | `Date` | Expiry |
@@ -292,7 +294,7 @@ class Avatars
 
 | Method | Description |
 |--------|-------------|
-| `save(_id, type, data)` | Saves base64 data (expects `image/webp`), updates user.avatar |
+| `save(_id, type, data)` | Saves base64 webp up to 512 KiB and updates user.avatar. Another type or a larger body throws |
 | `deleteAvatar(_id)` | Deletes avatar, clears user.avatar |
 
 | Property | Type | Description |

package/dist/index.js

@@ -1,4 +1,4 @@
-import{Err as se}from"@nesvet/n";var P=class extends se{constructor(e,t){typeof e=="object"&&(t=e,e=void 0),super("User lacks ability","lacksability",{...e&&{ability:e},...t})}name="AbilityError"};import{add as oe,assignPath as re,deletePath as ne,empty as ae,getPath as B,intersection as le,pick as ce,setPath as de}from"@nesvet/n";function x(l){return typeof l=="object"}function D(l){return typeof l=="number"}function I(l){return Array.isArray(l)}var F=new Map,S=class extends Map{constructor(e){super();for(let t of e)delete t.top,this.#e.push(t);(function t(i,s,o){for(let r of i){if(F.set(r,s),r.level=o,!s||r.top){if(r.longId=r._id,this.has(r._id))throw new Error(`Top-level ability duplicate: ${r._id}`);this.set(r._id,r)}else r.longId=s?`${s.longId}.${r._id}`:r._id;r.abilities&&t.call(this,r.abilities,r,o+1)}}).call(this,e,null,0)}#e=[];get(e,t){let i=e.split("."),s=t??super.get(i.shift());if(s&&i.length){for(let o of i)if(s=s?.abilities?.find(({_id:r,top:a})=>!a&&r===o),!s)break}return s}getSchema=this.get;getParamSchema(e,t){return this.get(e)?.params?.find(({_id:i})=>i===t)}getDefaultParam(e,t,i){(t===void 0||typeof t=="boolean")&&(i=t);let s=typeof e=="string"?this.getParamSchema(e,t):e;if(s)switch(s.type){case"number":return i?s.max??1/0:s.min??0;case"items":return i?s.items.map(({_id:o})=>o):[]}}getDefaultAbility(e,t=!e){if(typeof e=="string"&&(e=this.get(e)),e){if(e.abilities||e.params){let i={};if(e.params)for(let s of e.params)i[s._id]=this.getDefaultParam(s,t);if(t&&e.abilities)for(let s of e.abilities)s.top||(i[s._id]=this.getDefaultAbility(s,t));return i}return!0}}getDefaultAbilities(e,t=!e){let i=(e?(Array.isArray(e)?e:[e]).map(o=>typeof o=="string"?this.get(o):o).filter(Boolean):[...this.values()]).sort((o,r)=>o.level-r.level),s=new Map;for(let o of i)(function r(a){let n=F.get(a);n&&(r(n),s.has(n)||s.set(n,!1))})(o),t?(function r(a){if(s.has(a)||s.set(a,!0),a.abilities)for(let n of a.abilities)n.top&&r(n)})(o):s.has(o)||s.set(o,!1);return re({},Object.fromEntries([...s].map(([o,r])=>[o.longId,this.getDefaultAbility(o,r)])))}getSchemeFor(e){return e=this.adjust(structuredClone(e)),(function t(i,s){for(let o=0;o<i.length;o++){let r=i[o],a=r.top?e[r._id]:s[r._id];if(a){if(r.params)for(let n of r.params){let d=a[n._id];switch(n.type){case"number":n.max=d;break;case"items":n.items=n.items.filter(({_id:A})=>d.includes(A))}}r.abilities&&(t(r.abilities,a),r.abilities.length||delete r.abilities)}else i.splice(o--,1)}return i})(structuredClone(this.#e),e)}getParam(e,t,i){if(this.getParamSchema(t,i)){let s=B(e,`${t}.${i}`);return this.isParamFits(t,i,s)?s:this.getDefaultParam(t,i)}}setParam(e,t,i,s){let o=this.getParamSchema(t,i);if(!o)throw new Error(`No such ability param: ${t}.${i}`);return de(e,`${t}.${i}`,this.adjustParam(o,s)),e}isParamFits(e,t,i,s){if(i!==void 0){let o=this.getParamSchema(e,t);if(o)switch(o.type){case"number":return D(i)&&(o.min===void 0||i>=o.min)&&(s===void 0?o.max===void 0||i<=o.max:i<=s);case"items":return I(i)&&i.length===new Set(i).size&&(s===void 0?i.every(r=>o.items.find(({_id:a})=>a===r)):i.every(r=>s.includes(r)))}}return!1}adjustParam(e,t){return e.type==="number"?D(t)?Math.max(Math.min(t,e.max??1/0),e.min??0):e.min??0:I(t)?le(e.items.map(i=>i._id),t):[]}adjust(e,t){let i={};for(let[s,o]of Object.entries(e)){let r=this.get(s,t);if(r)if(r.params||r.abilities){let a={};if(r.params)if(x(o))for(let n of r.params)a[n._id]=this.adjustParam(n,o[n._id]);else for(let n of r.params)a[n._id]=this.getDefaultParam(n);r.abilities&&x(o)&&Object.assign(a,this.adjust(ce(o,r.abilities.filter(n=>!n.top).map(n=>n._id)),r)),i[s]=a}else i[s]=!0}return Object.assign(ae(e),i)}merge(e,t,i){i||(this.adjust(e),t=this.adjust(structuredClone(t)));for(let[s,o]of Object.entries(t)){let r=this.get(s,i);if(r&&r.isInheritable!==!1)if(s in e&&(r.params||r.abilities)){let a=e[s],n=o;if(r.params){for(let d of r.params)if(d.isInheritable!==!1)switch(d.type){case"number":a[d._id]=Math.max(a[d._id],n[d._id]);break;case"items":oe(a[d._id],...n[d._id])}}r.abilities&&this.merge(a,n,r)}else e[s]=o}return e}hasAbility(e,t){return!!B(e,t)}setAbility(e,t){let i=typeof t=="string"?this.get(t):t;if(!i)throw new Error(`No such ability: ${t}`);return this.merge(e,this.getDefaultAbilities(i)),e}unsetAbility(e,t){let i=typeof t=="string"?this.get(t):t;if(!i)throw new Error(`No such ability: ${t}`);return(function s(o){if(ne(e,o.longId),o.abilities)for(let r of o.abilities)s(r)})(i),e}};import{Err as pe}from"@nesvet/n";var R=class extends pe{constructor(e,t){super(`User lacks role${Array.isArray(e)?"s":""}`,"lacksroles",{roles:Array.isArray(e)?e:[e],...t})}name="RolesError"};import{deleteProps as H,getAll as Z,intersection as he,reAdd as me,removeAll as T}from"@nesvet/n";var U=new WeakMap,m=class{constructor(e,t){this.#e=e,this._id=t._id,e.set(this._id,this),this.update(t)}#e;_id;ownInvolveIds;ownAbilities;title="";displayTitle="";_o=0;ownInvolves=[];involves=new Set;abilities={};inheritedAbilities={};update({_id:e,involves:t,abilities:i,title:s,...o}){if(Object.assign(this,o),t&&(this.ownInvolveIds=t),i&&(this.ownAbilities=i),s!==void 0&&(this.title=s,this.displayTitle=s||this._id),t||i){let r=[this.ownInvolveIds.join(","),JSON.stringify(this.ownAbilities)].join(`
-`);r!==U.get(this)&&(U.set(this,r),this.#e.users.isInited&&this.#e.update())}}delete(){this.#e.delete(this._id),U.delete(this),this.#e.update()}};var c={_id:/^[\dA-Fa-f]{24}$/,email:/^[^\s@]{1,63}@[^\s@]{1,63}\.[^\s@]{1,63}$/,argon2:/^\$argon2(?:i|d|id)\$v=\d+\$m=\d+,t=\d+,p=\d+(?:\$[\d+/A-Za-z]+){2}$/,sessionId:/^(?:[\dA-Fa-f]{16,32}\$[\dA-Fa-f]{16,32}|[0-9a-f]{24}~[A-Za-z0-9_-]{43})$/,role:/^[\d_a-z-]{1,64}$/,ip:/^(?:\d{1,3}\.){3}\d{1,3}$/};var u={required:["_id","involves","abilities","title","description","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c.role.source,not:{enum:["root"]}},involves:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c.role.source,not:{enum:["root"]}},additionalItems:!1},abilities:{bsonType:"object"},title:{bsonType:"string",maxLength:256},description:{bsonType:"string",maxLength:10240},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};var ue=[[{involves:1}]];function J(){throw new Error("Direct usage of roles collection.deleteOne or .deleteMany is forbidden. Use roles.deleteRole instead.")}var w=class extends Map{constructor(e,t={}){super();let{root:i,...s}=t;this.users=e,this.collections=e.collections,this.abilities=e.abilities,this.root=new m(this,{...i,_id:"root",involves:[],abilities:this.abilities.getDefaultAbilities(),title:"Root",description:"Root",meta:{},createdAt:Date.now()}),this.initOptions=s}users;collections;collection;abilities;root;initOptions;async init(){if(!this.users.isInited){let{schema:e,indexes:t,collection:i}=this.initOptions;e&&(e.required&&T(e.required,u.required),e.properties&&H(e,Object.keys(u.properties)));let s={...u,...e,required:[...u.required,...e?.required??[]],properties:{...u.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("roles",{...i,schema:s}),{deleteOne:J,deleteMany:J}),await this.collection.ensureIndexes([...ue,...t??[]]),await this.#e();for await(let o of this.collection.find())this.abilities.adjust(o.abilities)&&await this.collection.updateOne({_id:o._id},{$set:{abilities:o.abilities}}),this.load(o);this.update(),this.collection.onChange(this.#t),delete this.initOptions}}async#e(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}#t=e=>{switch(e.operationType){case"insert":{new m(this,e.fullDocument);break}case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new m(this,e)}resolve(e,t){t=[e,...t];for(let i of e.ownInvolveIds){let s=this.get(i);if(s){for(let o of t)me(o.involves,s),this.abilities.merge(o.inheritedAbilities,s.abilities);s!==e&&this.resolve(s,t)}}}sorted=[];#i(e,t){return t.involves.size-e.involves.size||(e.title&&t.title?e.title>t.title?1:e.title<t.title?-1:0:e.title?-1:t.title||e._id>t._id?1:e._id<t._id?-1:0)}update(){let e=[...this.values()];this.root.ownInvolveIds=[];for(let s of e)s!==this.root&&!e.some(o=>o.ownInvolveIds.includes(s._id))&&this.root.ownInvolveIds.push(s._id),s.involves.clear(),s.abilities=structuredClone(s.ownAbilities),s.inheritedAbilities={};this.root.involves.add(this.root),this.resolve(this.root,[]);for(let s of e)s.ownInvolves=Z(this,s.ownInvolveIds,!0).sort(this.#i).reverse();let t=[this.root];for(let s=0;s<t.length;s++){let o=t[s];for(let r of o.ownInvolves){let a=t.indexOf(r);~a&&(t.splice(a,1),s--),t.splice(s+1,0,r)}}let i=0;for(let s of t)this.abilities.merge(s.abilities,s.inheritedAbilities),s._o=i++;this.sorted=t,this.users.isInited&&this.users.update(!0)}async create({_id:e,involves:t,title:i,description:s,...o}){return await this.collection.insertOne({_id:e,involves:t||[],abilities:{},title:i??"",description:s??"",meta:{},...H(o,["abilities"]),createdAt:Date.now()}),e}async updateRole(e,t){let i=this.get(e);if(!i)return!1;if(t.involves){T(t.involves,[e]);for(let s of t.involves)this.get(s)?.involves.has(i)&&T(t.involves,[s]);t.involves=this.cleanUpIds(t.involves)}return await this.collection.updateOne({_id:e},{$set:t}),!0}deleteRole(e){let t=typeof e=="string"?e:e._id;return this.collection.bulkWrite([{updateMany:{filter:{involves:t},update:{$pullAll:{involves:[t]}}}},{deleteOne:{filter:{_id:t}}}])}cleanUpIds(e){let t=he(this.sorted,Z(this,e,!0)),i=[];for(let s of t)t.every(o=>o===s||!o.involves.has(s))&&i.push(s._id);return i}async setAbility(e,t,i){let s=this.get(e);return s?(await this.collection.updateOne({_id:e},{$set:{abilities:i?this.abilities.setAbility(s.ownAbilities,t):this.abilities.unsetAbility(s.ownAbilities,t)}}),!0):!1}async setAbilityParam(e,t,i,s){let o=this.get(e);return o?(await this.collection.updateOne({_id:e},{$set:{abilities:this.abilities.setParam(o.ownAbilities,t,i,s)}}),!0):!1}};import{Err as E}from"@nesvet/n";var C=class extends E{constructor(e){super("Unauthorized","unauthorized",e)}name="UnauthorizedError"},j=class extends E{constructor(e,t,i){switch(arguments.length){case 1:i=e,e=void 0;break;case 2:i=t,t=void 0}super("Insubordination attempt","subordination",{...e&&{type:e},...t&&{ids:Array.isArray(t)?t:[t]},...i})}name="SubordinationError"},$=class extends E{constructor(e){super("Insufficient permissions","permissions",e)}name="PermissionError"};import{hash as te,verify as je}from"@node-rs/argon2";import $e from"eventemitter3";import{_ids as Ee,deleteProps as ie,removeAll as Me,StatefulPromise as ke,without as qe}from"@nesvet/n";import{newObjectIdString as Ge}from"insite-db";import{_ids as fe,deleteProps as X,EmptyArray as be,EmptySet as k,removeAll as ye,sort as ge,union as Ae,without as Y}from"@nesvet/n";import{newObjectIdString as Se}from"insite-db";var M=new WeakMap,p=class{constructor(e,t){this.orgs=e,this._id=t._id,e.set(this._id,this),this.update(t)}_id;title="";initials="";displayLabel="";_o=0;orgs;isOrg=!0;ownerOrgs=new Set;ownerUsers=new Set;users=new Set;slaveOrgs=new Set;ownerIds=[];update({_id:e,title:t,owners:i,...s}){if(Object.assign(this,s),t!==void 0&&(this.title=t,this.initials=t?.[0]?.toUpperCase()??"",this.displayLabel=t),i){this.ownerIds=i;let o=this.ownerIds.join(",");o!==M.get(this)&&(M.set(this,o),this.orgs.users.isInited&&this.orgs.update())}}async delete(){this.orgs.delete(this._id),M.delete(this),await this.orgs.replace(this._id),this.orgs.update()}};var f={required:["_id","title","note","owners","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c._id.source},title:{bsonType:"string",maxLength:512},note:{bsonType:"string",maxLength:131072},owners:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c._id.source},additionalItems:!1},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};var we=[[{owners:1}]];function Q(){throw new Error("Direct usage of orgs collection.deleteOne or .deleteMany is forbidden. Use orgs.deleteOrg instead.")}var v=class extends Map{constructor(e,t={}){super(),this.users=e,this.collections=e.collections,this.preinitOptions=t}users;collections;preinitOptions;collection;null;#e=!1;async preinit(){if(!this.#e){this.#e=!0;let{schema:e,indexes:t,null:i,collection:s}=this.preinitOptions;e&&(e.required&&ye(e.required,f.required),e.properties&&X(e,Object.keys(f.properties)));let o={...f,...e,required:[...f.required,...e?.required??[]],properties:{...f.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("orgs",{...s,schema:o}),{deleteOne:Q,deleteMany:Q}),await this.collection.ensureIndexes([...we,...t??[]]),this.null=Object.assign(new p(this,{...i,_id:"",title:"",note:"",owners:[],meta:{},createdAt:Date.now()}),{_id:null,ownerIds:new be,ownerOrgs:new k,ownerUsers:new k,slaveOrgs:new k}),await this.#t();for await(let r of this.collection.find())this.load(r);delete this.preinitOptions}}async#t(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}init(){this.users.isInited||(this.update(),this.collection.onChange(this.#i))}#i=e=>{switch(e.operationType){case"insert":{new p(this,e.fullDocument);break}case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new p(this,e)}#o(e,t){t=[e,...t];for(let i of e.ownerOrgs){this.#o(i,t);for(let s of t)i.slaveOrgs.add(s)}}sorted=[];update(){let e=[...this.values()],t=[];for(let i of e){i.ownerOrgs.clear(),i.ownerUsers.clear(),i.slaveOrgs.clear();for(let s of i.ownerIds){let o=this.get(s);if(o)i.ownerOrgs.add(o);else{let r=this.users.get(s);r&&i.ownerUsers.add(r)}}!i.ownerOrgs.size&&i._id&&t.push(i)}for(let i of e)e.some(s=>s.ownerOrgs.has(i))||this.#o(i,[]);t.sort(this.#s);for(let i of e)ge(i.slaveOrgs,this.#s);for(let i=0;i<t.length;i++){let s=t[i];for(let o of[...s.slaveOrgs].reverse())if(o.ownerOrgs.has(s)){let r=t.indexOf(o);~r&&(t.splice(r,1),i--),t.splice(i+1,0,o)}}for(let i=0,{length:s}=t;i<s;)t[i]._o=i++;this.sorted=t,this.users.isInited&&this.users.update()}#s(e,t){return t.slaveOrgs.size-e.slaveOrgs.size||(e.title>t.title?1:e.title<t.title?-1:0)}async create({title:e,note:t,...i}){let s=Se();return await this.collection.insertOne({_id:s,title:e??"",note:t??"",meta:{},...X(i,["_id"]),createdAt:Date.now()}),s}async updateOrg(e,t,i){let s=this.get(e);return s?(t.owners&&(t.owners=this.users.sortIds(Ae(i?Y(s.ownerIds,i.slaveIds):[],Y(t.owners,[e,...fe(s.slaveOrgs)])))),await this.collection.updateOne({_id:e},{$set:t}),!0):!1}deleteOrg(e){let t=typeof e=="string"?e:e._id;return this.collection.bulkWrite([{updateMany:{filter:{owners:t},update:{$pullAll:{owners:[t]}}}},{deleteOne:{filter:{_id:t}}}])}replaceMap=new Map;replaceHandlers=new Set;async replace(e){let t=this.replaceMap.get(e)??null;t&&this.replaceMap.delete(e);for(let i of this.replaceHandlers)await i(e,t)}};import{randomBytes as ve}from"node:crypto";import{deleteProps as Oe,removeAll as _e}from"@nesvet/n";import{newObjectIdString as Pe}from"insite-db";var b={required:["_id","user","remoteAddress","isOnline","meta","createdAt","prolongedAt","expiresAt"],properties:{_id:{bsonType:"string",pattern:c.sessionId.source},user:{bsonType:"string",pattern:c._id.source},userAgent:{bsonType:"string",maxLength:4096},remoteAddress:{bsonType:"string",pattern:c.ip.source},isOnline:{bsonType:"bool"},meta:{bsonType:"object"},createdAt:{bsonType:"number"},prolongedAt:{bsonType:"number"},expiresAt:{bsonType:"date"}}};var y=class{constructor(e,t){let i=e.users.get(t.user);i?(this.#e=e,this._id=t._id,this.#e.set(this._id,this),this.user=i,this.user.sessions.add(this),this.#e.users.bySessionId.set(this._id,this.user),this.update(t)):e.collection.deleteOne({_id:t._id})}_id;user;isOnline=!1;userAgent;remoteAddress;createdAt;prolongedAt;expiresAt;#e;update({_id:e,user:t,isOnline:i,...s}){i!==void 0&&this.isOnline!==i&&(this.isOnline=i,this.#e.users.isInited&&this.user.isOnline!==this.isOnline&&this.user.updateIsOnlineDebounced()),Object.assign(this,s)}prolong({_id:e,user:t,...i}){let s=Date.now();return i.prolongedAt=s,i.expiresAt=new Date(s+this.#e.collection.expireAfterSeconds*1e3),this.update(i),this.#e.collection.updateOne({_id:this._id},{$set:i})}async online(){if(!this.isOnline){let e={isOnline:!0};this.update(e),await this.#e.collection.updateOne({_id:this._id},{$set:e})}}async offline(){if(this.isOnline){let e={isOnline:!1};this.update(e),await this.#e.collection.updateOne({_id:this._id},{$set:e})}}delete(){this.#e.delete(this._id),this.user.sessions.delete(this),this.#e.users.bySessionId.delete(this._id),this.#e.users.emit("session-delete",this),this.isOnline&&this.user.updateIsOnline()}};var q=3600*24*7,xe=[[{user:1}],[{expiresAt:1},{expireAfterSeconds:q}]],O=class extends Map{constructor(e,t={}){super(),this.users=e,this.collections=e.collections,this.initOptions=t}users;collections;initOptions;collection;async init(){if(!this.users.isInited){let{schema:e,indexes:t,collection:i}=this.initOptions;e&&(e.required&&_e(e.required,b.required),e.properties&&Oe(e,Object.keys(b.properties)));let s={...b,...e,required:[...b.required,...e?.required??[]],properties:{...b.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("sessions",{...i,schema:s}),{expireAfterSeconds:q}),await this.collection.ensureIndexes([...xe,...t??[]]),await this.#e();for await(let o of this.collection.find())this.load(o);this.collection.onChange(this.#t),delete this.initOptions}}async#e(){await this.collection.bulkWrite([{updateMany:{filter:{meta:{$exists:!1}},update:{$set:{meta:{}}}}},{updateMany:{filter:{isOnline:!0},update:{$set:{isOnline:!1}}}}])}#t=e=>{switch(e.operationType){case"insert":this.has(e.documentKey._id)||new y(this,e.fullDocument),this.users.get(e.fullDocument.user)?.trimSessions();break;case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};uid(){return`${Pe()}~${ve(32).toString("base64url")}`}load(e){new y(this,e)}async create(e,t){let i=Date.now(),s={userAgent:"",remoteAddress:"127.0.0.1",isOnline:!0,...t,_id:this.uid(),user:e._id,meta:{},createdAt:i,prolongedAt:i,expiresAt:new Date(i+q*1e3)},o=new y(this,s);return await this.collection.insertOne(s),o}async destroySession(e){let{deletedCount:t}=await this.collection.deleteOne({_id:e});return!!t}};import{Binary as De}from"insite-db";var V={required:["_id","type","size","ts","data","meta"],properties:{_id:{bsonType:"string",pattern:c._id.source},type:{bsonType:"string",maxLength:256},size:{bsonType:"number"},ts:{bsonType:"string",maxLength:10},data:{bsonType:"binData"},meta:{bsonType:"object"}},additionalProperties:!1};var _=class{constructor(e,t={}){this.#e=e,this.collections=e.collections,this.initOptions=t}TYPES_ACCEPTED=["image/webp"];MAX_SIZE=1024*512;#e;collections;collection;initOptions;async init(){if(!this.#e.isInited){let{collection:e}=this.initOptions;this.collection=await this.collections.ensure("users.avatars",{...e,schema:V}),await this.#t()}}async#t(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}async save(e,t,i){let s=De.createFromBase64(i.slice(i.indexOf(","))),o=Date.now().toString(36);await Promise.all([this.collection.replaceOne({_id:e},{type:t,size:s.length(),ts:o,data:s,meta:{}},{upsert:!0}),this.#e.collection.updateOne({_id:e},{$set:{avatar:o}})])}async deleteAvatar(e){let[{deletedCount:t}]=await Promise.all([this.collection.deleteOne({_id:e}),this.#e.collection.updateOne({_id:e},{$set:{avatar:null}})]);return!!t}};var g={required:["_id","email","password","roles","name","org","job","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c._id.source},email:{bsonType:"string",pattern:c.email.source},password:{bsonType:"string",pattern:c.argon2.source},roles:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c.role.source},additionalItems:!1},name:{bsonType:"object",required:["first","middle","last"],properties:{first:{bsonType:"string",maxLength:512},middle:{bsonType:"string",maxLength:512},last:{bsonType:"string",maxLength:512}},additionalProperties:!1},org:{oneOf:[{bsonType:"string",pattern:c._id.source},{bsonType:"null"}]},job:{bsonType:"string",maxLength:512},avatar:{oneOf:[{bsonType:"string",maxLength:10},{bsonType:"null"}]},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};import{_ids as ee,debounce as Ie,empty as Re,hasAny as Ue,removeOne as Te}from"@nesvet/n";var G=new WeakMap,N=new WeakMap,Ce=process.env.INSITE_STATIC_URL??"",h=class{constructor(e,t){this.#e=e,this._id=t._id,e.set(this._id,this),this.update(t),e.isInited&&e.emit("user-create",this)}_id;email;name={first:"",middle:"",last:""};initials="";displayLabel="";org;job="";avatar=null;avatarUrl=null;#e;isUser=!0;isRoot;roles=new Set;ownRoles=[];ownRoleIds=[];slaveRoles=new Set;slaveRoleIds=[];abilities={};slaveOrgs=new Set;slaveUsers=new Set;slaves=new Set;slaveIds=[];permissiveIds=[];sessions=new Set;isOnline=!1;update({_id:e,name:t,email:i,roles:s,org:o,avatar:r,...a}){Object.assign(this,a);let n;i&&this.email!==i&&(this.#e.byEmail.delete(this.email),this.email=i,this.#e.byEmail.set(i,this),n=!0);let d,A;t&&(this.name.first!==t.first||this.name.middle!==t.middle||this.name.last!==t.last)&&(A=this.name.last!==t.last,this.name={first:t.first??"",middle:t.middle??"",last:t.last??""},this.initials=((t.first?.[0]??"")+(t.last?.[0]??"")||this.email[0]).toUpperCase(),d=!0),(n||d)&&(this.displayLabel=`${this.name.first} ${this.name.last}`.trim()||this.name.middle||this.email);let W;if(s){this.ownRoleIds=s;let K=this.ownRoleIds.join(",");K!==G.get(this)&&(G.set(this,K),this.#e.isInited&&(this.updateRoles(),W=!0))}let z;o!==void 0&&this.org?._id!==o&&(this.org?.users.delete(this),this.org=o&&this.#e.orgs.get(o)||this.#e.orgs.null,this.org.users.add(this),z=!0),r!==void 0&&this.avatar!==r&&(this.avatar=r,this.avatarUrl=r&&`${Ce}/avatars/${this._id}-${r}.webp`),this.#e.isInited&&(W||z?(this.updatePermissions(),A&&(this.#e.isSortRequired=!0),this.#e.update()):A&&this.#e.sort())}updateRoles(){this.ownRoles=[],this.roles.clear(),this.slaveRoles.clear(),Re(this.abilities);for(let e of this.ownRoleIds){let t=this.#e.roles.get(e);if(t){this.ownRoles.push(t),this.roles.add(t);for(let i of t.involves)this.roles.add(i),this.slaveRoles.add(i);this.slaveRoleIds=ee(this.slaveRoles),this.#e.abilities.merge(this.abilities,t.abilities)}}this.roles.has(this.#e.roles.root)&&(this.isRoot=!0),this.trimSessions()}updatePermissions(){this.slaveOrgs.clear(),this.slaveUsers.clear(),this.slaves.clear();let e=new Set;for(let s of this.#e.orgs.sorted)if((s.ownerUsers.has(this)||this.isRoot)&&!this.slaveOrgs.has(s)){this.slaveOrgs.add(s),this.slaves.add(s),e.add(s._id);for(let o of s.slaveOrgs)this.slaveOrgs.add(o),this.slaves.add(o),e.add(o._id)}for(let s of new Set([this.org,...this.slaveOrgs,this.#e.orgs.null]))for(let o of s.users)o!==this&&(Ue(this.slaveRoles,o.ownRoles)||!o.ownRoles.length)&&(this.slaveUsers.add(o),this.slaves.add(o),e.add(o._id));this.slaveIds=[...e];let t=[];if(this.org._id){t.push(this.org._id);for(let s of this.org.slaveOrgs)this.slaveOrgs.has(s)||t.push(s._id)}this.permissiveIds=[...t,this._id,...e];let i=[this.permissiveIds.join(","),this.ownRoleIds.join(","),JSON.stringify(this.abilities),this.slaveRoleIds.join(",")].join(`
-`);i!==N.get(this)&&(N.set(this,i),this.#e.isInited&&this.#e.emit("user-permissions-change",this))}trimSessions(){let e=this.abilities.login?.sessionsLimit??0;if(this.sessions.size>e)return this.#e.sessions.collection.deleteMany({_id:{$in:ee([...this.sessions].sort((t,i)=>t.expiresAt.valueOf()-i.expiresAt.valueOf()).slice(0,this.sessions.size-e))}})}updateIsOnline(){let e=!1;for(let t of this.sessions)if(t.isOnline){e=!0;break}this.isOnline!==e&&(this.isOnline=e,this.#e.emit("user-is-online",this))}updateIsOnlineDebounced=Ie(()=>this.updateIsOnline(),500);async delete(){this.org.users.delete(this),this.#e.delete(this._id),this.#e.byEmail.delete(this.email),Te(this.#e.sorted,this),G.delete(this),N.delete(this),await this.#e.replace(this._id),this.#e.update()}};var Ne=[[{email:1},{unique:!0}],[{org:1}]],L=class l extends Map{constructor(e,t){super();let i=new $e;this.#e=i,this._events=i._events,this._eventsCount=i._eventsCount,this.emit=i.emit,this.on=i.on,this.once=i.once,this.addListener=i.addListener,this.off=i.off,this.removeListener=i.removeListener,this.collections=e,this.abilities=new S(t.abilities),this.initOptions=t,this.init()}#e;_events;_eventsCount;emit;on(e,t,i){return this.#e.on(e,t,i),this}once;addListener;off;removeListener;initOptions;collections;abilities;collection;roles;sessions;orgs;avatars;byEmail=new Map;bySessionId=new Map;sorted=[];isSortRequired=!0;#t=!1;async preinit(){if(!this.#t){this.#t=!0;let{indexes:e,schema:t,initialRoot:i,collection:s}=this.initOptions;t&&(t.required&&Me(t.required,g.required),t.properties&&ie(t,Object.keys(g.properties)));let o={...g,...t,required:[...g.required,...t?.required??[]],properties:{...g.properties,...t?.properties}};this.collection=await this.collections.ensure("users",{...s,schema:o}),await this.collection.ensureIndexes([...Ne,...e??[]]),await this.collection.countDocuments({roles:"root"})||await this.create({email:process.env.INSITE_ROOT_EMAIL??"insite@root.email",password:process.env.INSITE_ROOT_PASSWORD??"inSiteRootPassword",name:{first:"Root"},job:"Root",...i,roles:["root"],org:null,meta:{}}),await this.#i();for await(let r of this.collection.find())this.load(r)}}async#i(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}isInited=!1;async init(){if(!this.isInited){let{roles:e,orgs:t,sessions:i,avatars:s,collection:{quiet:o}={}}=this.initOptions;this.roles=new w(this,{...e,collection:{quiet:o,...e?.collection}}),this.orgs=new v(this,{...t,collection:{quiet:o,...t?.collection}}),this.sessions=new O(this,{...i,collection:{quiet:o,...i?.collection}}),this.avatars=new _(this,{...s,collection:{quiet:o,...s?.collection}}),await this.roles.init(),await this.orgs.preinit(),await this.preinit(),this.orgs.init(),await this.avatars.init(),this.update(!0),this.collection.onChange(this.#o),await this.sessions.init(),delete this.initOptions,this.isInited=!0,this.#s.resolve(this)}}#o=e=>{switch(e.operationType){case"insert":new h(this,e.fullDocument);break;case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new h(this,e)}sort(){this.isSortRequired=!1,this.sorted=[...this.values()].sort((e,t)=>e.name.last>t.name.last?1:e.name.last<t.name.last?-1:0)}update(e){if(e)for(let t of this.values())t.updateRoles();for(let t of this.values())t.updatePermissions();this.isSortRequired&&this.sort()}#s=new ke;whenReady(){return this.#s}async create({email:e,password:t,roles:i,name:s,org:o,job:r,...a}){if(this.byEmail.has(e))throw new Error("User exists");let n=Ge();return await this.collection.insertOne({_id:n,email:e,password:await te(t),roles:this.isInited?this.roles.cleanUpIds(i):i,name:{first:s.first??"",middle:s.middle??"",last:s.last??""},org:o??null,job:r??"",meta:{},...ie(a,["_id"]),createdAt:Date.now()}),n}async updateUser(e,t,i){let s=this.get(e);return s?(t.roles&&(t.roles=s.isRoot?["root"]:this.roles.cleanUpIds(i?qe(s.ownRoleIds,i.slaveRoleIds).concat(t.roles):t.roles)),await this.collection.updateOne({_id:e},{$set:t}),!0):!1}async changePassword(e,t){if(!this.has(e))throw new Error("usernotfound");if(!t)throw new Error("emptypasswordisnotallowed");await Promise.all([this.collection.updateOne({_id:e},{$set:{password:await te(t)}}),this.sessions.collection.deleteMany({user:e})])}async login(e,t,i){let s=this.byEmail.get(e);if(!s)throw new Error("usernotfound");if(!await je(s.password,t))throw new Error("incorrectpassword");if(!s.abilities.login)throw new Error("userisnotabletologin");return this.sessions.create(s,i)}logout(e){return e.delete(),this.sessions.collection.deleteOne({_id:e._id})}#r(e,t){return e instanceof h&&t instanceof h?e.name.last&&t.name.last?e.name.last>t.name.last?1:e.name.last<t.name.last?-1:0:!e.name.last&&!t.name.last?e.displayLabel>t.displayLabel?1:e.displayLabel<t.displayLabel?-1:0:e.name.last?-1:1:e instanceof p&&t instanceof p?e.title>t.title?1:e.title<t.title?-1:0:e instanceof p?-1:1}sortIds(e){return Ee(e.map(t=>this.get(t)||this.orgs.get(t)).filter(Boolean).sort(this.#r))}replaceMap=new Map;replaceHandlers=new Set;async replace(e){let t=this.replaceMap.get(e)??null;t&&this.replaceMap.delete(e);for(let i of this.replaceHandlers)await i(e,t)}async deleteUser(e){let{deletedCount:t}=await this.collection.deleteOne({_id:e});return!!t}static init(e,t){return new l(e,t).whenReady()}};export{P as AbilityError,$ as PermissionError,R as RolesError,j as SubordinationError,C as UnauthorizedError,L as Users};
+import{Err as oe}from"@nesvet/n";var x=class extends oe{constructor(e,i){typeof e=="object"&&(i=e,e=void 0),super("User lacks ability","lacksability",{...e&&{ability:e},...i})}name="AbilityError"};import{add as re,assignPath as ne,deletePath as ae,empty as le,getPath as B,intersection as ce,pick as de,setPath as pe}from"@nesvet/n";function D(l){return typeof l=="object"}function I(l){return typeof l=="number"}function R(l){return Array.isArray(l)}var H=new Map,S=class extends Map{constructor(e){super();for(let i of e)delete i.top,this.#e.push(i);(function i(t,s,o){for(let r of t){if(H.set(r,s),r.level=o,!s||r.top){if(r.longId=r._id,this.has(r._id))throw new Error(`Top-level ability duplicate: ${r._id}`);this.set(r._id,r)}else r.longId=s?`${s.longId}.${r._id}`:r._id;r.abilities&&i.call(this,r.abilities,r,o+1)}}).call(this,e,null,0)}#e=[];get(e,i){let t=e.split("."),s=i??super.get(t.shift());if(s&&t.length){for(let o of t)if(s=s?.abilities?.find(({_id:r,top:a})=>!a&&r===o),!s)break}return s}getSchema=this.get;getParamSchema(e,i){return this.get(e)?.params?.find(({_id:t})=>t===i)}getDefaultParam(e,i,t){(i===void 0||typeof i=="boolean")&&(t=i);let s=typeof e=="string"?this.getParamSchema(e,i):e;if(s)switch(s.type){case"number":return t?s.max??1/0:s.min??0;case"items":return t?s.items.map(({_id:o})=>o):[]}}getDefaultAbility(e,i=!e){if(typeof e=="string"&&(e=this.get(e)),e){if(e.abilities||e.params){let t={};if(e.params)for(let s of e.params)t[s._id]=this.getDefaultParam(s,i);if(i&&e.abilities)for(let s of e.abilities)s.top||(t[s._id]=this.getDefaultAbility(s,i));return t}return!0}}getDefaultAbilities(e,i=!e){let t=(e?(Array.isArray(e)?e:[e]).map(o=>typeof o=="string"?this.get(o):o).filter(Boolean):[...this.values()]).sort((o,r)=>o.level-r.level),s=new Map;for(let o of t)(function r(a){let n=H.get(a);n&&(r(n),s.has(n)||s.set(n,!1))})(o),i?(function r(a){if(s.has(a)||s.set(a,!0),a.abilities)for(let n of a.abilities)n.top&&r(n)})(o):s.has(o)||s.set(o,!1);return ne({},Object.fromEntries([...s].map(([o,r])=>[o.longId,this.getDefaultAbility(o,r)])))}getSchemeFor(e){return e=this.adjust(structuredClone(e)),(function i(t,s){for(let o=0;o<t.length;o++){let r=t[o],a=r.top?e[r._id]:s[r._id];if(a){if(r.params)for(let n of r.params){let d=a[n._id];switch(n.type){case"number":n.max=d;break;case"items":n.items=n.items.filter(({_id:A})=>d.includes(A))}}r.abilities&&(i(r.abilities,a),r.abilities.length||delete r.abilities)}else t.splice(o--,1)}return t})(structuredClone(this.#e),e)}getParam(e,i,t){if(this.getParamSchema(i,t)){let s=B(e,`${i}.${t}`);return this.isParamFits(i,t,s)?s:this.getDefaultParam(i,t)}}setParam(e,i,t,s){let o=this.getParamSchema(i,t);if(!o)throw new Error(`No such ability param: ${i}.${t}`);return pe(e,`${i}.${t}`,this.adjustParam(o,s)),e}isParamFits(e,i,t,s){if(t!==void 0){let o=this.getParamSchema(e,i);if(o)switch(o.type){case"number":return I(t)&&(o.min===void 0||t>=o.min)&&(s===void 0?o.max===void 0||t<=o.max:t<=s);case"items":return R(t)&&t.length===new Set(t).size&&(s===void 0?t.every(r=>o.items.find(({_id:a})=>a===r)):t.every(r=>s.includes(r)))}}return!1}adjustParam(e,i){return e.type==="number"?I(i)?Math.max(Math.min(i,e.max??1/0),e.min??0):e.min??0:R(i)?ce(e.items.map(t=>t._id),i):[]}adjust(e,i){let t={};for(let[s,o]of Object.entries(e)){let r=this.get(s,i);if(r)if(r.params||r.abilities){let a={};if(r.params)if(D(o))for(let n of r.params)a[n._id]=this.adjustParam(n,o[n._id]);else for(let n of r.params)a[n._id]=this.getDefaultParam(n);r.abilities&&D(o)&&Object.assign(a,this.adjust(de(o,r.abilities.filter(n=>!n.top).map(n=>n._id)),r)),t[s]=a}else t[s]=!0}return Object.assign(le(e),t)}merge(e,i,t){t||(this.adjust(e),i=this.adjust(structuredClone(i)));for(let[s,o]of Object.entries(i)){let r=this.get(s,t);if(r&&r.isInheritable!==!1)if(s in e&&(r.params||r.abilities)){let a=e[s],n=o;if(r.params){for(let d of r.params)if(d.isInheritable!==!1)switch(d.type){case"number":a[d._id]=Math.max(a[d._id],n[d._id]);break;case"items":re(a[d._id],...n[d._id])}}r.abilities&&this.merge(a,n,r)}else e[s]=o}return e}hasAbility(e,i){return!!B(e,i)}setAbility(e,i){let t=typeof i=="string"?this.get(i):i;if(!t)throw new Error(`No such ability: ${i}`);return this.merge(e,this.getDefaultAbilities(t)),e}unsetAbility(e,i){let t=typeof i=="string"?this.get(i):i;if(!t)throw new Error(`No such ability: ${i}`);return(function s(o){if(ae(e,o.longId),o.abilities)for(let r of o.abilities)s(r)})(t),e}};import{Err as he}from"@nesvet/n";var U=class extends he{constructor(e,i){super(`User lacks role${Array.isArray(e)?"s":""}`,"lacksroles",{roles:Array.isArray(e)?e:[e],...i})}name="RolesError"};import{deleteProps as Z,getAll as J,intersection as me,reAdd as ue,removeAll as C}from"@nesvet/n";var T=new WeakMap,m=class{constructor(e,i){this.#e=e,this._id=i._id,e.set(this._id,this),this.update(i)}#e;_id;ownInvolveIds;ownAbilities;title="";displayTitle="";_o=0;ownInvolves=[];involves=new Set;abilities={};inheritedAbilities={};update({_id:e,involves:i,abilities:t,title:s,...o}){if(Object.assign(this,o),i&&(this.ownInvolveIds=i),t&&(this.ownAbilities=typeof t=="object"?this.#e.abilities.adjust(t):t),s!==void 0&&(this.title=s,this.displayTitle=s||this._id),i||t){let r=[this.ownInvolveIds.join(","),JSON.stringify(this.ownAbilities)].join(`
+`);r!==T.get(this)&&(T.set(this,r),this.#e.users.isInited&&this.#e.update())}}delete(){this.#e.delete(this._id),T.delete(this),this.#e.update()}};var c={_id:/^[\dA-Fa-f]{24}$/,email:/^[^\s@]{1,63}@[^\s@]{1,63}\.[^\s@]{1,63}$/,argon2:/^\$argon2(?:i|d|id)\$v=\d+\$m=\d+,t=\d+,p=\d+(?:\$[\d+/A-Za-z]+){2}$/,sessionId:/^(?:[\dA-Fa-f]{16,32}\$[\dA-Fa-f]{16,32}|[0-9a-f]{24}~[A-Za-z0-9_-]{43})$/,role:/^[\d_a-z-]{1,64}$/,ip:/^(?:(?:\d{1,3}\.){3}\d{1,3}|(?:[\dA-Fa-f]{0,4}:){2,7}[\dA-Fa-f]{0,4})$/};var u={required:["_id","involves","abilities","title","description","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c.role.source,not:{enum:["root"]}},involves:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c.role.source,not:{enum:["root"]}},additionalItems:!1},abilities:{bsonType:"object"},title:{bsonType:"string",maxLength:256},description:{bsonType:"string",maxLength:10240},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};var fe=[[{involves:1}]];function X(){throw new Error("Direct usage of roles collection.deleteOne or .deleteMany is forbidden. Use roles.deleteRole instead.")}var w=class extends Map{constructor(e,i={}){super();let{root:t,...s}=i;this.users=e,this.collections=e.collections,this.abilities=e.abilities,this.root=new m(this,{...t,_id:"root",involves:[],abilities:this.abilities.getDefaultAbilities(),title:"Root",description:"Root",meta:{},createdAt:Date.now()}),this.initOptions=s}users;collections;collection;abilities;root;initOptions;async init(){if(!this.users.isInited){let{schema:e,indexes:i,collection:t}=this.initOptions;e&&(e.required&&C(e.required,u.required),e.properties&&Z(e,Object.keys(u.properties)));let s={...u,...e,required:[...u.required,...e?.required??[]],properties:{...u.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("roles",{...t,schema:s}),{deleteOne:X,deleteMany:X}),await this.collection.ensureIndexes([...fe,...i??[]]),await this.#e();for await(let o of this.collection.find())this.abilities.adjust(o.abilities)&&await this.collection.updateOne({_id:o._id},{$set:{abilities:o.abilities}}),this.load(o);this.update(),this.collection.onChange(this.#i),delete this.initOptions}}async#e(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}#i=e=>{switch(e.operationType){case"insert":{new m(this,e.fullDocument);break}case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new m(this,e)}resolve(e,i){i=[e,...i];for(let t of e.ownInvolveIds){let s=this.get(t);if(s){for(let o of i)ue(o.involves,s),this.abilities.merge(o.inheritedAbilities,s.abilities);s!==e&&this.resolve(s,i)}}}sorted=[];#t(e,i){return i.involves.size-e.involves.size||(e.title&&i.title?e.title>i.title?1:e.title<i.title?-1:0:e.title?-1:i.title||e._id>i._id?1:e._id<i._id?-1:0)}update(){let e=[...this.values()];this.root.ownInvolveIds=[];for(let s of e)s!==this.root&&!e.some(o=>o.ownInvolveIds.includes(s._id))&&this.root.ownInvolveIds.push(s._id),s.involves.clear(),s.abilities=structuredClone(s.ownAbilities),s.inheritedAbilities={};this.root.involves.add(this.root),this.resolve(this.root,[]);for(let s of e)s.ownInvolves=J(this,s.ownInvolveIds,!0).sort(this.#t).reverse();let i=[this.root];for(let s=0;s<i.length;s++){let o=i[s];for(let r of o.ownInvolves){let a=i.indexOf(r);~a&&(i.splice(a,1),s--),i.splice(s+1,0,r)}}let t=0;for(let s of i)this.abilities.merge(s.abilities,s.inheritedAbilities),s._o=t++;this.sorted=i,this.users.isInited&&this.users.update(!0)}async create({_id:e,involves:i,title:t,description:s,...o}){return await this.collection.insertOne({_id:e,involves:i||[],abilities:{},title:t??"",description:s??"",meta:{},...Z(o,["abilities"]),createdAt:Date.now()}),e}async updateRole(e,i){let t=this.get(e);if(!t)return!1;if(i.involves){C(i.involves,[e]);for(let o of i.involves)this.get(o)?.involves.has(t)&&C(i.involves,[o]);i.involves=this.cleanUpIds(i.involves)}let{abilities:s}=i;return s&&typeof s=="object"&&(i.abilities=this.abilities.adjust(s)),await this.collection.updateOne({_id:e},{$set:i}),!0}deleteRole(e){let i=typeof e=="string"?e:e._id;return this.collection.bulkWrite([{updateMany:{filter:{involves:i},update:{$pullAll:{involves:[i]}}}},{deleteOne:{filter:{_id:i}}}])}cleanUpIds(e){let i=me(this.sorted,J(this,e,!0)),t=[];for(let s of i)i.every(o=>o===s||!o.involves.has(s))&&t.push(s._id);return t}async setAbility(e,i,t){let s=this.get(e);return s?(await this.collection.updateOne({_id:e},{$set:{abilities:t?this.abilities.setAbility(s.ownAbilities,i):this.abilities.unsetAbility(s.ownAbilities,i)}}),!0):!1}async setAbilityParam(e,i,t,s){let o=this.get(e);return o?(await this.collection.updateOne({_id:e},{$set:{abilities:this.abilities.setParam(o.ownAbilities,i,t,s)}}),!0):!1}};import{Err as M}from"@nesvet/n";var j=class extends M{constructor(e){super("Unauthorized","unauthorized",e)}name="UnauthorizedError"},$=class extends M{constructor(e,i,t){switch(arguments.length){case 1:t=e,e=void 0;break;case 2:t=i,i=void 0}super("Insubordination attempt","subordination",{...e&&{type:e},...i&&{ids:Array.isArray(i)?i:[i]},...t})}name="SubordinationError"},E=class extends M{constructor(e){super("Insufficient permissions","permissions",e)}name="PermissionError"};import{hash as _,verify as te}from"@node-rs/argon2";import $e from"eventemitter3";import{_ids as Ee,deleteProps as se,removeAll as Me,StatefulPromise as ke,without as qe}from"@nesvet/n";import{newObjectIdString as Ge}from"insite-db";import{_ids as be,deleteProps as Y,EmptyArray as ye,EmptySet as q,removeAll as ge,sort as Ae,union as Se,without as Q}from"@nesvet/n";import{newObjectIdString as we}from"insite-db";var k=new WeakMap,p=class{constructor(e,i){this.orgs=e,this._id=i._id,e.set(this._id,this),this.update(i)}_id;title="";initials="";displayLabel="";_o=0;orgs;isOrg=!0;ownerOrgs=new Set;ownerUsers=new Set;users=new Set;slaveOrgs=new Set;ownerIds=[];update({_id:e,title:i,owners:t,...s}){if(Object.assign(this,s),i!==void 0&&(this.title=i,this.initials=i?.[0]?.toUpperCase()??"",this.displayLabel=i),t){this.ownerIds=t;let o=this.ownerIds.join(",");o!==k.get(this)&&(k.set(this,o),this.orgs.users.isInited&&this.orgs.update())}}async delete(){this.orgs.delete(this._id),k.delete(this),await this.orgs.replace(this._id),this.orgs.update()}};var f={required:["_id","title","note","owners","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c._id.source},title:{bsonType:"string",maxLength:512},note:{bsonType:"string",maxLength:131072},owners:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c._id.source},additionalItems:!1},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};var ve=[[{owners:1}]];function V(){throw new Error("Direct usage of orgs collection.deleteOne or .deleteMany is forbidden. Use orgs.deleteOrg instead.")}var v=class extends Map{constructor(e,i={}){super(),this.users=e,this.collections=e.collections,this.preinitOptions=i}users;collections;preinitOptions;collection;null;#e=!1;async preinit(){if(!this.#e){this.#e=!0;let{schema:e,indexes:i,null:t,collection:s}=this.preinitOptions;e&&(e.required&&ge(e.required,f.required),e.properties&&Y(e,Object.keys(f.properties)));let o={...f,...e,required:[...f.required,...e?.required??[]],properties:{...f.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("orgs",{...s,schema:o}),{deleteOne:V,deleteMany:V}),await this.collection.ensureIndexes([...ve,...i??[]]),this.null=Object.assign(new p(this,{...t,_id:"",title:"",note:"",owners:[],meta:{},createdAt:Date.now()}),{_id:null,ownerIds:new ye,ownerOrgs:new q,ownerUsers:new q,slaveOrgs:new q}),await this.#i();for await(let r of this.collection.find())this.load(r);delete this.preinitOptions}}async#i(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}init(){this.users.isInited||(this.update(),this.collection.onChange(this.#t))}#t=e=>{switch(e.operationType){case"insert":{new p(this,e.fullDocument);break}case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new p(this,e)}#o(e,i){i=[e,...i];for(let t of e.ownerOrgs){this.#o(t,i);for(let s of i)t.slaveOrgs.add(s)}}sorted=[];update(){let e=[...this.values()],i=[];for(let t of e){t.ownerOrgs.clear(),t.ownerUsers.clear(),t.slaveOrgs.clear();for(let s of t.ownerIds){let o=this.get(s);if(o)t.ownerOrgs.add(o);else{let r=this.users.get(s);r&&t.ownerUsers.add(r)}}!t.ownerOrgs.size&&t._id&&i.push(t)}for(let t of e)e.some(s=>s.ownerOrgs.has(t))||this.#o(t,[]);i.sort(this.#s);for(let t of e)Ae(t.slaveOrgs,this.#s);for(let t=0;t<i.length;t++){let s=i[t];for(let o of[...s.slaveOrgs].reverse())if(o.ownerOrgs.has(s)){let r=i.indexOf(o);~r&&(i.splice(r,1),t--),i.splice(t+1,0,o)}}for(let t=0,{length:s}=i;t<s;)i[t]._o=t++;this.sorted=i,this.users.isInited&&this.users.update()}#s(e,i){return i.slaveOrgs.size-e.slaveOrgs.size||(e.title>i.title?1:e.title<i.title?-1:0)}async create({title:e,note:i,...t}){let s=we();return await this.collection.insertOne({_id:s,title:e??"",note:i??"",meta:{},...Y(t,["_id"]),createdAt:Date.now()}),s}async updateOrg(e,i,t){let s=this.get(e);return s?(i.owners&&(i.owners=this.users.sortIds(Se(t?Q(s.ownerIds,t.slaveIds):[],Q(i.owners,[e,...be(s.slaveOrgs)])))),await this.collection.updateOne({_id:e},{$set:i}),!0):!1}deleteOrg(e){let i=typeof e=="string"?e:e._id;return this.collection.bulkWrite([{updateMany:{filter:{owners:i},update:{$pullAll:{owners:[i]}}}},{deleteOne:{filter:{_id:i}}}])}replaceMap=new Map;replaceHandlers=new Set;async replace(e){let i=this.replaceMap.get(e)??null;i&&this.replaceMap.delete(e);for(let t of this.replaceHandlers)await t(e,i)}};import{randomBytes as Oe}from"node:crypto";import{deleteProps as Pe,removeAll as _e}from"@nesvet/n";import{newObjectIdString as xe}from"insite-db";var b={required:["_id","user","remoteAddress","isOnline","meta","createdAt","prolongedAt","expiresAt"],properties:{_id:{bsonType:"string",pattern:c.sessionId.source},user:{bsonType:"string",pattern:c._id.source},userAgent:{bsonType:"string",maxLength:4096},remoteAddress:{bsonType:"string",pattern:c.ip.source},isOnline:{bsonType:"bool"},meta:{bsonType:"object"},createdAt:{bsonType:"number"},prolongedAt:{bsonType:"number"},expiresAt:{bsonType:"date"}}};var y=class{constructor(e,i){let t=e.users.get(i.user);t?(this.#e=e,this._id=i._id,this.#e.set(this._id,this),this.user=t,this.user.sessions.add(this),this.#e.users.bySessionId.set(this._id,this.user),this.update(i)):e.collection.deleteOne({_id:i._id})}_id;user;isOnline=!1;userAgent;remoteAddress;createdAt;prolongedAt;expiresAt;#e;update({_id:e,user:i,isOnline:t,...s}){t!==void 0&&this.isOnline!==t&&(this.isOnline=t,this.#e.users.isInited&&this.user.isOnline!==this.isOnline&&this.user.updateIsOnlineDebounced()),Object.assign(this,s)}prolong({_id:e,user:i,...t}){let s=Date.now();return t.prolongedAt=s,t.expiresAt=new Date(s+this.#e.collection.expireAfterSeconds*1e3),this.update(t),this.#e.collection.updateOne({_id:this._id},{$set:t})}async online(){if(!this.isOnline){let e={isOnline:!0};this.update(e),await this.#e.collection.updateOne({_id:this._id},{$set:e})}}async offline(){if(this.isOnline){let e={isOnline:!1};this.update(e),await this.#e.collection.updateOne({_id:this._id},{$set:e})}}delete(){this.#e.delete(this._id),this.user.sessions.delete(this),this.#e.users.bySessionId.delete(this._id),this.#e.users.emit("session-delete",this),this.isOnline&&this.user.updateIsOnline()}};var G=3600*24*7,De=[[{user:1}],[{expiresAt:1},{expireAfterSeconds:G}]],O=class extends Map{constructor(e,i={}){super(),this.users=e,this.collections=e.collections,this.initOptions=i}users;collections;initOptions;collection;async init(){if(!this.users.isInited){let{schema:e,indexes:i,collection:t}=this.initOptions;e&&(e.required&&_e(e.required,b.required),e.properties&&Pe(e,Object.keys(b.properties)));let s={...b,...e,required:[...b.required,...e?.required??[]],properties:{...b.properties,...e?.properties}};this.collection=Object.assign(await this.collections.ensure("sessions",{...t,schema:s}),{expireAfterSeconds:G}),await this.collection.ensureIndexes([...De,...i??[]]),await this.#e();for await(let o of this.collection.find())this.load(o);this.collection.onChange(this.#i),delete this.initOptions}}async#e(){await this.collection.bulkWrite([{updateMany:{filter:{meta:{$exists:!1}},update:{$set:{meta:{}}}}},{updateMany:{filter:{isOnline:!0},update:{$set:{isOnline:!1}}}}])}#i=e=>{switch(e.operationType){case"insert":this.has(e.documentKey._id)||new y(this,e.fullDocument),this.users.get(e.fullDocument.user)?.trimSessions();break;case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};uid(){return`${xe()}~${Oe(32).toString("base64url")}`}load(e){new y(this,e)}async create(e,i){let t=Date.now(),s={userAgent:"",remoteAddress:"127.0.0.1",isOnline:!0,...i,_id:this.uid(),user:e._id,meta:{},createdAt:t,prolongedAt:t,expiresAt:new Date(t+G*1e3)},o=new y(this,s);return await this.collection.insertOne(s),o}async destroySession(e){let{deletedCount:i}=await this.collection.deleteOne({_id:e});return!!i}};import{Binary as Ie}from"insite-db";var ee={required:["_id","type","size","ts","data","meta"],properties:{_id:{bsonType:"string",pattern:c._id.source},type:{bsonType:"string",maxLength:256},size:{bsonType:"number"},ts:{bsonType:"string",maxLength:10},data:{bsonType:"binData"},meta:{bsonType:"object"}},additionalProperties:!1};var P=class{constructor(e,i={}){this.#e=e,this.collections=e.collections,this.initOptions=i}TYPES_ACCEPTED=["image/webp"];MAX_SIZE=1024*512;#e;collections;collection;initOptions;async init(){if(!this.#e.isInited){let{collection:e}=this.initOptions;this.collection=await this.collections.ensure("users.avatars",{...e,schema:ee}),await this.#i()}}async#i(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}async save(e,i,t){let s=Ie.createFromBase64(t.slice(t.indexOf(",")));if(!this.TYPES_ACCEPTED.includes(i))throw new Error("avatar.unacceptable-format");if(s.length()>this.MAX_SIZE)throw new Error("avatar.size-exceeds-limit");let o=Date.now().toString(36);await Promise.all([this.collection.replaceOne({_id:e},{type:i,size:s.length(),ts:o,data:s,meta:{}},{upsert:!0}),this.#e.collection.updateOne({_id:e},{$set:{avatar:o}})])}async deleteAvatar(e){let[{deletedCount:i}]=await Promise.all([this.collection.deleteOne({_id:e}),this.#e.collection.updateOne({_id:e},{$set:{avatar:null}})]);return!!i}};var g={required:["_id","email","password","roles","name","org","job","meta","createdAt"],properties:{_id:{bsonType:"string",pattern:c._id.source},email:{bsonType:"string",pattern:c.email.source},password:{bsonType:"string",pattern:c.argon2.source},roles:{bsonType:"array",uniqueItems:!0,items:{bsonType:"string",pattern:c.role.source},additionalItems:!1},name:{bsonType:"object",required:["first","middle","last"],properties:{first:{bsonType:"string",maxLength:512},middle:{bsonType:"string",maxLength:512},last:{bsonType:"string",maxLength:512}},additionalProperties:!1},org:{oneOf:[{bsonType:"string",pattern:c._id.source},{bsonType:"null"}]},job:{bsonType:"string",maxLength:512},avatar:{oneOf:[{bsonType:"string",maxLength:10},{bsonType:"null"}]},meta:{bsonType:"object"},createdAt:{bsonType:"number"}},additionalProperties:!1};import{_ids as ie,debounce as Re,empty as Ue,hasAny as Te,removeOne as Ce}from"@nesvet/n";var N=new WeakMap,L=new WeakMap,je=process.env.INSITE_STATIC_URL??"",h=class{constructor(e,i){this.#e=e,this._id=i._id,e.set(this._id,this),this.update(i),e.isInited&&e.emit("user-create",this)}_id;email;name={first:"",middle:"",last:""};initials="";displayLabel="";org;job="";avatar=null;avatarUrl=null;#e;isUser=!0;isRoot;roles=new Set;ownRoles=[];ownRoleIds=[];slaveRoles=new Set;slaveRoleIds=[];abilities={};slaveOrgs=new Set;slaveUsers=new Set;slaves=new Set;slaveIds=[];permissiveIds=[];sessions=new Set;isOnline=!1;update({_id:e,name:i,email:t,roles:s,org:o,avatar:r,...a}){Object.assign(this,a);let n;t&&this.email!==t&&(this.#e.byEmail.delete(this.email),this.email=t,this.#e.byEmail.set(t,this),n=!0);let d,A;i&&(this.name.first!==i.first||this.name.middle!==i.middle||this.name.last!==i.last)&&(A=this.name.last!==i.last,this.name={first:i.first??"",middle:i.middle??"",last:i.last??""},this.initials=((i.first?.[0]??"")+(i.last?.[0]??"")||this.email[0]).toUpperCase(),d=!0),(n||d)&&(this.displayLabel=`${this.name.first} ${this.name.last}`.trim()||this.name.middle||this.email);let z;if(s){this.ownRoleIds=s;let K=this.ownRoleIds.join(",");K!==N.get(this)&&(N.set(this,K),this.#e.isInited&&(this.updateRoles(),z=!0))}let F;o!==void 0&&this.org?._id!==o&&(this.org?.users.delete(this),this.org=o&&this.#e.orgs.get(o)||this.#e.orgs.null,this.org.users.add(this),F=!0),r!==void 0&&this.avatar!==r&&(this.avatar=r,this.avatarUrl=r&&`${je}/avatars/${this._id}-${r}.webp`),this.#e.isInited&&(z||F?(this.updatePermissions(),A&&(this.#e.isSortRequired=!0),this.#e.update()):A&&this.#e.sort())}updateRoles(){this.ownRoles=[],this.roles.clear(),this.slaveRoles.clear(),Ue(this.abilities);for(let e of this.ownRoleIds){let i=this.#e.roles.get(e);if(i){this.ownRoles.push(i),this.roles.add(i);for(let t of i.involves)this.roles.add(t),this.slaveRoles.add(t);this.slaveRoleIds=ie(this.slaveRoles),this.#e.abilities.merge(this.abilities,i.abilities)}}this.roles.has(this.#e.roles.root)&&(this.isRoot=!0),this.trimSessions()}updatePermissions(){this.slaveOrgs.clear(),this.slaveUsers.clear(),this.slaves.clear();let e=new Set;for(let s of this.#e.orgs.sorted)if((s.ownerUsers.has(this)||this.isRoot)&&!this.slaveOrgs.has(s)){this.slaveOrgs.add(s),this.slaves.add(s),e.add(s._id);for(let o of s.slaveOrgs)this.slaveOrgs.add(o),this.slaves.add(o),e.add(o._id)}for(let s of new Set([this.org,...this.slaveOrgs,this.#e.orgs.null]))for(let o of s.users)o!==this&&(Te(this.slaveRoles,o.ownRoles)||!o.ownRoles.length)&&(this.slaveUsers.add(o),this.slaves.add(o),e.add(o._id));this.slaveIds=[...e];let i=[];if(this.org._id){i.push(this.org._id);for(let s of this.org.slaveOrgs)this.slaveOrgs.has(s)||i.push(s._id)}this.permissiveIds=[...i,this._id,...e];let t=[this.permissiveIds.join(","),this.ownRoleIds.join(","),JSON.stringify(this.abilities),this.slaveRoleIds.join(",")].join(`
+`);t!==L.get(this)&&(L.set(this,t),this.#e.isInited&&this.#e.emit("user-permissions-change",this))}trimSessions(){let e=this.abilities.login?.sessionsLimit;if(typeof e=="number"&&this.sessions.size>e)return this.#e.sessions.collection.deleteMany({_id:{$in:ie([...this.sessions].sort((i,t)=>i.expiresAt.valueOf()-t.expiresAt.valueOf()).slice(0,this.sessions.size-e))}})}updateIsOnline(){let e=!1;for(let i of this.sessions)if(i.isOnline){e=!0;break}this.isOnline!==e&&(this.isOnline=e,this.#e.emit("user-is-online",this))}updateIsOnlineDebounced=Re(()=>this.updateIsOnline(),500);async delete(){this.org.users.delete(this),this.#e.delete(this._id),this.#e.byEmail.delete(this.email),Ce(this.#e.sorted,this),N.delete(this),L.delete(this),await this.#e.replace(this._id),this.#e.update()}};var Ne=[[{email:1},{unique:!0}],[{org:1}]],Le,W=class l extends Map{constructor(e,i){super();let t=new $e;this.#e=t,this._events=t._events,this._eventsCount=t._eventsCount,this.emit=t.emit,this.on=t.on,this.once=t.once,this.addListener=t.addListener,this.off=t.off,this.removeListener=t.removeListener,this.collections=e,this.abilities=new S(i.abilities),this.initOptions=i,this.init()}#e;_events;_eventsCount;emit;on(e,i,t){return this.#e.on(e,i,t),this}once;addListener;off;removeListener;initOptions;collections;abilities;collection;roles;sessions;orgs;avatars;byEmail=new Map;bySessionId=new Map;sorted=[];isSortRequired=!0;#i=!1;async preinit(){if(!this.#i){this.#i=!0;let{indexes:e,schema:i,initialRoot:t,collection:s}=this.initOptions;i&&(i.required&&Me(i.required,g.required),i.properties&&se(i,Object.keys(g.properties)));let o={...g,...i,required:[...g.required,...i?.required??[]],properties:{...g.properties,...i?.properties}};this.collection=await this.collections.ensure("users",{...s,schema:o}),await this.collection.ensureIndexes([...Ne,...e??[]]),await this.collection.countDocuments({roles:"root"})||await this.create({email:process.env.INSITE_ROOT_EMAIL??"insite@root.email",password:process.env.INSITE_ROOT_PASSWORD??"inSiteRootPassword",name:{first:"Root"},job:"Root",...t,roles:["root"],org:null,meta:{}}),await this.#t();for await(let r of this.collection.find())this.load(r)}}async#t(){await this.collection.updateMany({meta:{$exists:!1}},{$set:{meta:{}}})}isInited=!1;async init(){if(!this.isInited){let{roles:e,orgs:i,sessions:t,avatars:s,collection:{quiet:o}={}}=this.initOptions;this.roles=new w(this,{...e,collection:{quiet:o,...e?.collection}}),this.orgs=new v(this,{...i,collection:{quiet:o,...i?.collection}}),this.sessions=new O(this,{...t,collection:{quiet:o,...t?.collection}}),this.avatars=new P(this,{...s,collection:{quiet:o,...s?.collection}}),await this.roles.init(),await this.orgs.preinit(),await this.preinit(),this.orgs.init(),await this.avatars.init(),this.update(!0),this.collection.onChange(this.#o),await this.sessions.init(),delete this.initOptions,this.isInited=!0,this.#s.resolve(this)}}#o=e=>{switch(e.operationType){case"insert":new h(this,e.fullDocument);break;case"replace":this.get(e.documentKey._id)?.update(e.fullDocument);break;case"update":this.get(e.documentKey._id)?.update(e.updateDescription.updatedFields);break;case"delete":this.get(e.documentKey._id)?.delete()}};load(e){new h(this,e)}sort(){this.isSortRequired=!1,this.sorted=[...this.values()].sort((e,i)=>e.name.last>i.name.last?1:e.name.last<i.name.last?-1:0)}update(e){if(e)for(let i of this.values())i.updateRoles();for(let i of this.values())i.updatePermissions();this.isSortRequired&&this.sort()}#s=new ke;whenReady(){return this.#s}async create({email:e,password:i,roles:t,name:s,org:o,job:r,...a}){if(this.byEmail.has(e))throw new Error("User exists");let n=Ge();return await this.collection.insertOne({_id:n,email:e,password:await _(i),roles:this.isInited?this.roles.cleanUpIds(t):t,name:{first:s.first??"",middle:s.middle??"",last:s.last??""},org:o??null,job:r??"",meta:{},...se(a,["_id"]),createdAt:Date.now()}),n}async updateUser(e,i,t){let s=this.get(e);if(!s)return!1;i.roles&&(i.roles=s.isRoot?["root"]:this.roles.cleanUpIds(t?qe(s.ownRoleIds,t.slaveRoleIds).concat(i.roles):i.roles));let o;if(i.password!==void 0){if(typeof i.password!="string"||i.password==="")throw new Error("emptypasswordisnotallowed");o=c.argon2.test(i.password)?i.password:await _(i.password),i={...i,password:o}}let r=[this.collection.updateOne({_id:e},{$set:i})];return o!==void 0&&o!==s.password&&r.push(this.sessions.collection.deleteMany({user:e})),await Promise.all(r),!0}async changePassword(e,i){if(!this.has(e))throw new Error("usernotfound");if(!i)throw new Error("emptypasswordisnotallowed");await Promise.all([this.collection.updateOne({_id:e},{$set:{password:await _(i)}}),this.sessions.collection.deleteMany({user:e})])}async login(e,i,t){let s=this.byEmail.get(e);if(!s){try{await te(await(Le??=_("insite-unknown-user")),i)}catch{}throw new Error("usernotfound")}if(!await te(s.password,i))throw new Error("incorrectpassword");if(!s.abilities.login)throw new Error("userisnotabletologin");return this.sessions.create(s,t)}logout(e){return e.delete(),this.sessions.collection.deleteOne({_id:e._id})}#r(e,i){return e instanceof h&&i instanceof h?e.name.last&&i.name.last?e.name.last>i.name.last?1:e.name.last<i.name.last?-1:0:!e.name.last&&!i.name.last?e.displayLabel>i.displayLabel?1:e.displayLabel<i.displayLabel?-1:0:e.name.last?-1:1:e instanceof p&&i instanceof p?e.title>i.title?1:e.title<i.title?-1:0:e instanceof p?-1:1}sortIds(e){return Ee(e.map(i=>this.get(i)||this.orgs.get(i)).filter(Boolean).sort(this.#r))}replaceMap=new Map;replaceHandlers=new Set;async replace(e){let i=this.replaceMap.get(e)??null;i&&this.replaceMap.delete(e);for(let t of this.replaceHandlers)await t(e,i)}async deleteUser(e){let{deletedCount:i}=await this.collection.deleteOne({_id:e});return!!i}static init(e,i){return new l(e,i).whenReady()}};export{x as AbilityError,E as PermissionError,U as RolesError,$ as SubordinationError,j as UnauthorizedError,W as Users};
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/abilities/Error.ts", "../src/abilities/Map.ts", "../src/abilities/types.ts", "../src/roles/Error.ts", "../src/roles/Roles.ts", "../src/roles/Role.ts", "../src/lib/regexps.ts", "../src/roles/schema.ts", "../src/users/errors.ts", "../src/users/Users.ts", "../src/orgs/Orgs.ts", "../src/orgs/Org.ts", "../src/orgs/schema.ts", "../src/sessions/Sessions.ts", "../src/sessions/schema.ts", "../src/sessions/Session.ts", "../src/users/avatars/Avatars.ts", "../src/users/avatars/schema.ts", "../src/users/schema.ts", "../src/users/User.ts"],
-  "sourcesContent": ["import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class AbilityError extends Err {\n\tconstructor(payload?: Payload);\n\tconstructor(longId: string, payload?: Payload);\n\tconstructor(longId?: Payload | string, payload?: Payload) {\n\t\tif (typeof longId == \"object\") {\n\t\t\tpayload = longId;\n\t\t\tlongId = undefined;\n\t\t}\n\t\t\n\t\tsuper(\"User lacks ability\", \"lacksability\", {\n\t\t\t...longId && { ability: longId },\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"AbilityError\";\n\t\n}\n", "import {\n\tadd,\n\tassignPath,\n\tdeletePath,\n\tempty,\n\tgetPath,\n\tintersection,\n\tpick,\n\tsetPath\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema, AbilityParamSchema } from \"insite-common\";\nimport {\n\tisAbilityObject,\n\tisAbilityParamItems,\n\tisAbilityParamNumber,\n\ttype Ability,\n\ttype AbilityObject,\n\ttype AbilityParam,\n\ttype AbilityParamItems,\n\ttype AbilityParamNumber,\n\ttype AbilitySchema,\n\ttype GenericAbilities\n} from \"./types\";\n\n\nconst schemaParentMap = new Map<AbilitySchema, AbilitySchema | null>();\n\n\nexport class AbilitiesMap<AS extends AbilitiesSchema> extends Map<string, AbilitySchema> {\n\tconstructor(abilitiesSchema: AS) {\n\t\tsuper();\n\t\t\n\t\tfor (const subSchema of abilitiesSchema) {\n\t\t\tdelete subSchema.top;/* The first level is always top */\n\t\t\t\n\t\t\tthis.#hierarchical.push(subSchema as AbilitySchema);\n\t\t}\n\t\t\n\t\t(function parse(this: AbilitiesMap<AS>, schemas: AbilitiesSchema, parent: AbilitySchema | null, level: number) {\n\t\t\tfor (const schema of schemas as AbilitySchema[]) {\n\t\t\t\tschemaParentMap.set(schema, parent);\n\t\t\t\t\n\t\t\t\tschema.level = level;\n\t\t\t\t\n\t\t\t\tif (!parent || schema.top) {\n\t\t\t\t\tschema.longId = schema._id;\n\t\t\t\t\t\n\t\t\t\t\tif (this.has(schema._id))\n\t\t\t\t\t\tthrow new Error(`Top-level ability duplicate: ${schema._id}`);\n\t\t\t\t\t\n\t\t\t\t\tthis.set(schema._id, schema);\n\t\t\t\t} else\n\t\t\t\t\tschema.longId = parent ? `${parent.longId}.${schema._id}` : schema._id;\n\t\t\t\t\n\t\t\t\tif (schema.abilities)\n\t\t\t\t\tparse.call(this, schema.abilities, schema, level + 1);\n\t\t\t}\n\t\t\t\n\t\t}).call(this, abilitiesSchema, null, 0);\n\t\t\n\t}\n\t\n\t#hierarchical: AbilitySchema[] = [];\n\t\n\tget(longId: string, parent?: AbilitySchema | null) {\n\t\tconst subIds = longId.split(\".\");\n\t\tlet schema = parent ?? super.get(subIds.shift()!);\n\t\t\n\t\tif (schema && subIds.length)\n\t\t\tfor (const subId of subIds) {\n\t\t\t\tschema = schema?.abilities?.find(({ _id, top }) => !top && _id === subId);\n\t\t\t\tif (!schema)\n\t\t\t\t\tbreak;\n\t\t\t}\n\t\t\n\t\treturn schema;\n\t}\n\t\n\tgetSchema = this.get;\n\t\n\tgetParamSchema(longId: string, paramId: string) {\n\t\treturn this.get(longId)?.params?.find(({ _id }) => _id === paramId);\n\t}\n\t\n\tgetDefaultParam(longId: string, paramId: string, max?: boolean): AbilityParam | undefined;\n\tgetDefaultParam(schema: AbilityParamSchema, max?: boolean): AbilityParam;\n\tgetDefaultParam(schemaOrLongId: AbilityParamSchema | string, paramIdOrMax?: boolean | string, max?: boolean) {\n\t\tif (paramIdOrMax === undefined || typeof paramIdOrMax == \"boolean\")\n\t\t\tmax = paramIdOrMax;\n\t\t\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.getParamSchema(schemaOrLongId, paramIdOrMax as string) : schemaOrLongId;\n\t\t\n\t\tif (schema)\n\t\t\tswitch (schema.type) {\n\t\t\t\tcase \"number\":\n\t\t\t\t\treturn max ?\n\t\t\t\t\t\t(schema.max ?? Infinity) :\n\t\t\t\t\t\t(schema.min ?? 0);\n\t\t\t\t\n\t\t\t\tcase \"items\":\n\t\t\t\t\treturn max ?\n\t\t\t\t\t\tschema.items.map(({ _id }) => _id) :\n\t\t\t\t\t\t[];\n\t\t\t}\n\t\t\n\t\treturn undefined;// eslint-disable-line unicorn/no-useless-undefined\n\t}\n\t\n\tgetDefaultAbility(schema: string, max?: boolean): Ability | undefined;\n\tgetDefaultAbility(schema: AbilitySchema, max?: boolean): Ability;\n\tgetDefaultAbility(schema: AbilitySchema | string, max: boolean = !schema): Ability | undefined {\n\t\tif (typeof schema == \"string\")\n\t\t\tschema = this.get(schema)!;\n\t\t\n\t\tif (schema) {\n\t\t\tif (schema.abilities || schema.params) {\n\t\t\t\tconst ability = {} as AbilityObject;\n\t\t\t\t\n\t\t\t\tif (schema.params)\n\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\tability[paramSchema._id] = this.getDefaultParam(paramSchema, max);\n\t\t\t\t\n\t\t\t\tif (max && schema.abilities)\n\t\t\t\t\tfor (const subSchema of schema.abilities)\n\t\t\t\t\t\tif (!subSchema.top)\n\t\t\t\t\t\t\tability[subSchema._id] = this.getDefaultAbility(subSchema, max);\n\t\t\t\t\n\t\t\t\treturn ability;\n\t\t\t}\n\t\t\t\n\t\t\treturn true;\n\t\t}\n\t\t\n\t\treturn undefined;\n\t}\n\t\n\tgetDefaultAbilities(): Abilities<AS>;\n\tgetDefaultAbilities(schemas: AbilitySchema[], max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(schema: AbilitySchema, max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(longIds: string[], max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(longId: string, max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(schemasOrIds?: (AbilitySchema | string)[] | AbilitySchema | string, max: boolean = !schemasOrIds) {\n\t\t\n\t\tconst schemas = (\n\t\t\tschemasOrIds ?\n\t\t\t\t(Array.isArray(schemasOrIds) ? schemasOrIds : [ schemasOrIds ])\n\t\t\t\t\t.map(schema => (typeof schema == \"string\" ? this.get(schema) : schema))\n\t\t\t\t\t.filter(Boolean) as AbilitySchema[] :\n\t\t\t\t[ ...this.values() ]\n\t\t).sort((a, b) => a.level - b.level);\n\t\t\n\t\tconst schemaMaxMap = new Map<AbilitySchema, boolean>();\n\t\t\n\t\tfor (const schema of schemas) {\n\t\t\t(function resolve(_schema) {\n\t\t\t\tconst parentSchema = schemaParentMap.get(_schema);\n\t\t\t\t\n\t\t\t\tif (parentSchema) {\n\t\t\t\t\tresolve(parentSchema);\n\t\t\t\t\t\n\t\t\t\t\tif (!schemaMaxMap.has(parentSchema))\n\t\t\t\t\t\tschemaMaxMap.set(parentSchema, false);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t})(schema);\n\t\t\t\n\t\t\tif (max)\n\t\t\t\t(function resolve(_schema) {\n\t\t\t\t\tif (!schemaMaxMap.has(_schema))\n\t\t\t\t\t\tschemaMaxMap.set(_schema, true);\n\t\t\t\t\t\n\t\t\t\t\tif (_schema.abilities)\n\t\t\t\t\t\tfor (const subSchema of _schema.abilities)\n\t\t\t\t\t\t\tif (subSchema.top)\n\t\t\t\t\t\t\t\tresolve(subSchema);\n\t\t\t\t\t\n\t\t\t\t})(schema);\n\t\t\telse\n\t\t\t\tif (!schemaMaxMap.has(schema))\n\t\t\t\t\tschemaMaxMap.set(schema, false);\n\t\t}\n\t\t\n\t\treturn assignPath(\n\t\t\t{},\n\t\t\tObject.fromEntries(\n\t\t\t\t[ ...schemaMaxMap ]\n\t\t\t\t\t.map(([ schema, _max ]) => [ schema.longId, this.getDefaultAbility(schema, _max) ])\n\t\t\t)\n\t\t);\n\t}\n\t\n\tgetSchemeFor(abilities: GenericAbilities) {\n\t\tabilities = this.adjust(structuredClone(abilities));\n\t\t\n\t\treturn (function resolve(subSchemas: AbilitySchema[], subAbilities: GenericAbilities) {\n\t\t\tfor (let i = 0; i < subSchemas.length; i++) {\n\t\t\t\tconst schema = subSchemas[i];\n\t\t\t\tconst ability = schema.top ? abilities[schema._id] : subAbilities[schema._id];\n\t\t\t\t\n\t\t\t\tif (ability) {\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tfor (const paramSchema of schema.params) {\n\t\t\t\t\t\t\tconst abilityParam = (ability as AbilityObject)[paramSchema._id];\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\t\t\t\tparamSchema.max = abilityParam as AbilityParamNumber;\n\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\t\t\t\tparamSchema.items = paramSchema.items.filter(({ _id }) => (abilityParam as AbilityParamItems).includes(_id));\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities) {\n\t\t\t\t\t\tresolve(schema.abilities, ability as GenericAbilities);\n\t\t\t\t\t\t\n\t\t\t\t\t\tif (!schema.abilities.length)\n\t\t\t\t\t\t\tdelete schema.abilities;\n\t\t\t\t\t}\n\t\t\t\t} else\n\t\t\t\t\tsubSchemas.splice(i--, 1);\n\t\t\t}\n\t\t\t\n\t\t\treturn subSchemas;\n\t\t})(structuredClone(this.#hierarchical), abilities);\n\t}\n\t\n\tgetParam(abilities: GenericAbilities, longId: string, paramId: string) {\n\t\tif (this.getParamSchema(longId, paramId)) {\n\t\t\tconst value = getPath(abilities, `${longId}.${paramId}`) as AbilityParam;\n\t\t\t\n\t\t\tif (this.isParamFits(longId, paramId, value))\n\t\t\t\treturn value;\n\t\t\t\n\t\t\treturn this.getDefaultParam(longId, paramId)!;\n\t\t}\n\t\t\n\t\treturn undefined;// eslint-disable-line unicorn/no-useless-undefined\n\t}\n\t\n\tsetParam(abilities: GenericAbilities, longId: string, paramId: string, value: AbilityParam): Abilities<AS> {\n\t\tconst schema = this.getParamSchema(longId, paramId);\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability param: ${longId}.${paramId}`);\n\t\t\n\t\tsetPath(abilities, `${longId}.${paramId}`, this.adjustParam(schema, value));\n\t\t\n\t\treturn abilities as Abilities<AS>;\n\t}\n\t\n\tisParamFits(longId: string, paramId: string, value: AbilityParam, referenceValue?: AbilityParam) {\n\t\tif (value !== undefined) {\n\t\t\tconst paramSchema = this.getParamSchema(longId, paramId);\n\t\t\t\n\t\t\tif (paramSchema)\n\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\treturn (\n\t\t\t\t\t\t\tisAbilityParamNumber(value) &&\n\t\t\t\t\t\t\t(paramSchema.min === undefined || value >= paramSchema.min) && (\n\t\t\t\t\t\t\t\treferenceValue === undefined ?\n\t\t\t\t\t\t\t\t\t(paramSchema.max === undefined || value <= paramSchema.max) :\n\t\t\t\t\t\t\t\t\tvalue <= (referenceValue as AbilityParamNumber)\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t\t\n\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\treturn (\n\t\t\t\t\t\t\tisAbilityParamItems(value) &&\n\t\t\t\t\t\t\tvalue.length === new Set(value).size && (\n\t\t\t\t\t\t\t\treferenceValue === undefined ?\n\t\t\t\t\t\t\t\t\tvalue.every(itemId => paramSchema.items.find(({ _id }) => _id === itemId)) :\n\t\t\t\t\t\t\t\t\tvalue.every(itemId => (referenceValue as AbilityParamItems).includes(itemId))\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t}\n\t\t\n\t\treturn false;\n\t}\n\t\n\tadjustParam(paramSchema: AbilityParamSchema, value: AbilityParam) {\n\t\tswitch (paramSchema.type) {\n\t\t\tcase \"number\":\n\t\t\t\treturn (\n\t\t\t\t\tisAbilityParamNumber(value) ?\n\t\t\t\t\t\tMath.max(\n\t\t\t\t\t\t\tMath.min(\n\t\t\t\t\t\t\t\tvalue,\n\t\t\t\t\t\t\t\tparamSchema.max ?? Infinity\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\tparamSchema.min ?? 0\n\t\t\t\t\t\t) :\n\t\t\t\t\t\tparamSchema.min ?? 0\n\t\t\t\t);\n\t\t\t\n\t\t\tdefault/* paramSchema.type === \"items\" */:\n\t\t\t\treturn (\n\t\t\t\t\tisAbilityParamItems(value) ?\n\t\t\t\t\t\tintersection(paramSchema.items.map(item => item._id), value) :\n\t\t\t\t\t\t[]\n\t\t\t\t) as AbilityParamItems;\n\t\t}\n\t\t\n\t}\n\t\n\tadjust(abilities: GenericAbilities, parent?: AbilitySchema | null): Abilities<AS> {\n\t\tconst adjustedAbilities: GenericAbilities = {};\n\t\t\n\t\tfor (const [ _id, ability ] of Object.entries(abilities)) {\n\t\t\tconst schema = this.get(_id, parent);\n\t\t\t\n\t\t\tif (schema)\n\t\t\t\tif (schema.params || schema.abilities) {\n\t\t\t\t\tconst adjustedAbility: AbilityObject = {};\n\t\t\t\t\t\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tif (isAbilityObject(ability))\n\t\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\t\tadjustedAbility[paramSchema._id] = this.adjustParam(paramSchema, ability[paramSchema._id] as AbilityParam);\n\t\t\t\t\t\telse\n\t\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\t\tadjustedAbility[paramSchema._id] = this.getDefaultParam(paramSchema);\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities && isAbilityObject(ability))\n\t\t\t\t\t\tObject.assign(\n\t\t\t\t\t\t\tadjustedAbility,\n\t\t\t\t\t\t\tthis.adjust(\n\t\t\t\t\t\t\t\tpick(\n\t\t\t\t\t\t\t\t\tability,\n\t\t\t\t\t\t\t\t\tschema.abilities\n\t\t\t\t\t\t\t\t\t\t.filter(subSchema => !subSchema.top)\n\t\t\t\t\t\t\t\t\t\t.map(subSchema => subSchema._id)\n\t\t\t\t\t\t\t\t) as GenericAbilities,\n\t\t\t\t\t\t\t\tschema\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t\t\n\t\t\t\t\tadjustedAbilities[_id] = adjustedAbility;\n\t\t\t\t} else\n\t\t\t\t\tadjustedAbilities[_id] = true;\n\t\t}\n\t\t\n\t\treturn Object.assign(empty(abilities), adjustedAbilities) as Abilities<AS>;\n\t}\n\t\n\tmerge(target: GenericAbilities, source: GenericAbilities, parent?: AbilitySchema | null): Abilities<AS> {\n\t\tif (!parent) {\n\t\t\tthis.adjust(target);\n\t\t\tsource = this.adjust(structuredClone(source));\n\t\t}\n\t\t\n\t\tfor (const [ _id, ability ] of Object.entries(source)) {\n\t\t\tconst schema = this.get(_id, parent);\n\t\t\t\n\t\t\tif (schema && schema.isInheritable !== false)\n\t\t\t\tif (_id in target && (schema.params || schema.abilities)) {\n\t\t\t\t\tconst targetAbility = target[_id] as AbilityObject;\n\t\t\t\t\tconst sourceAbility = ability as AbilityObject;\n\t\t\t\t\t\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\tif (paramSchema.isInheritable !== false)\n\t\t\t\t\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] =\n\t\t\t\t\t\t\t\t\t\t\tMath.max(\n\t\t\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] as AbilityParamNumber,\n\t\t\t\t\t\t\t\t\t\t\t\tsourceAbility[paramSchema._id] as AbilityParamNumber\n\t\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\t\t\t\t\tadd(\n\t\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] as AbilityParamItems,\n\t\t\t\t\t\t\t\t\t\t\t...sourceAbility[paramSchema._id] as AbilityParamItems\n\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities)\n\t\t\t\t\t\tthis.merge(targetAbility as GenericAbilities, sourceAbility as GenericAbilities, schema);\n\t\t\t\t} else\n\t\t\t\t\ttarget[_id] = ability;\n\t\t}\n\t\t\n\t\treturn target as Abilities<AS>;\n\t}\n\t\n\thasAbility(abilities: GenericAbilities, longId: string) {\n\t\treturn Boolean(getPath(abilities, longId));\n\t}\n\t\n\tsetAbility(target: GenericAbilities, schema: AbilitySchema): Abilities<AS>;\n\tsetAbility(target: GenericAbilities, longId: string): Abilities<AS>;\n\tsetAbility(target: GenericAbilities, schemaOrLongId: AbilitySchema | string) {\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.get(schemaOrLongId) : schemaOrLongId;\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability: ${schemaOrLongId as string}`);\n\t\t\n\t\tthis.merge(target, this.getDefaultAbilities(schema));\n\t\t\n\t\treturn target as Abilities<AS>;\n\t}\n\t\n\tunsetAbility(target: GenericAbilities, schema: AbilitySchema): Abilities<AS>;\n\tunsetAbility(target: GenericAbilities, longId: string): Abilities<AS>;\n\tunsetAbility(target: GenericAbilities, schemaOrLongId: AbilitySchema | string) {\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.get(schemaOrLongId) : schemaOrLongId;\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability: ${schemaOrLongId as string}`);\n\t\t\n\t\t(function resolve(_schema) {\n\t\t\tdeletePath(target, _schema.longId);\n\t\t\t\n\t\t\tif (_schema.abilities)\n\t\t\t\tfor (const subSchema of _schema.abilities)\n\t\t\t\t\tresolve(subSchema);\n\t\t\t\n\t\t})(schema);\n\t\t\n\t\treturn target;\n\t}\n\t\n}\n", "import type { Prettify } from \"@nesvet/n\";\nimport type { AbilitySchema as OriginalAbilitySchema } from \"insite-common\";\n\n\ntype AbilityParamItem = string;\nexport type AbilityParamItems = AbilityParamItem[];\nexport type AbilityParamNumber = number;\nexport type AbilityParam = AbilityParamItems | AbilityParamNumber;\n\nexport type AbilityWithParams = Record<string, AbilityParam>;\nexport type AbilityObject = Record<string, Ability | AbilityParam>;\nexport type AbilityBoolean = true;\nexport type Ability = AbilityBoolean | { [key: string]: Ability | AbilityParam };\n\nexport type AbilitySchema = Prettify<\n\tOmit<OriginalAbilitySchema, \"abilities\"> & {\n\t\tlevel: number;\n\t\tlongId: string;\n\t\tabilities?: AbilitySchema[];\n\t}\n>;\n\nexport type GenericAbilities = Record<string, Ability>;\n\nexport function isAbilityObject(value: Ability): value is AbilityObject {\n\treturn typeof value == \"object\";\n}\n\nexport function isAbilityParamNumber(value: AbilityParam): value is AbilityParamNumber {\n\treturn typeof value == \"number\";\n}\n\nexport function isAbilityParamItems(value: AbilityParam): value is AbilityParamItems {\n\treturn Array.isArray(value);\n}\n", "import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class RolesError extends Err {\n\tconstructor(roleId: string, payload?: Payload);\n\tconstructor(roleIds: string[], payload?: Payload);\n\tconstructor(stringOrArray: Payload | string[] | string, payload?: Payload) {\n\t\tsuper(`User lacks role${Array.isArray(stringOrArray) ? \"s\" : \"\"}`, \"lacksroles\", {\n\t\t\troles: Array.isArray(stringOrArray) ? stringOrArray : [ stringOrArray ],\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"RolesError\";\n\t\n}\n", "import {\n\tdeleteProps,\n\tgetAll,\n\tintersection,\n\treAdd,\n\tremoveAll\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport type { ChangeStreamDocument, CollectionIndexes, WatchedCollection } from \"insite-db\";\nimport type { AbilityParam, GenericAbilities } from \"../abilities/types\";\nimport type { Users } from \"../users\";\nimport { Role } from \"./Role\";\nimport { basisSchema } from \"./schema\";\nimport type { NewRole, RoleDoc, RolesOptions } from \"./types\";\n\n\nconst indexes: CollectionIndexes = [\n\t[ { involves: 1 } ]\n];\n\nfunction preventDirectDelete() {\n\tthrow new Error(\"Direct usage of roles collection.deleteOne or .deleteMany is forbidden. Use roles.deleteRole instead.\");\n}\n\n\nexport class Roles<AS extends AbilitiesSchema> extends Map<string, Role<AS>> {\n\tconstructor(users: Users<AS>, options: RolesOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tconst {\n\t\t\troot: rootProps,\n\t\t\t...initOptions\n\t\t} = options;\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\tthis.abilities = users.abilities;\n\t\t\n\t\tthis.root = new Role<AS>(this, {\n\t\t\t...rootProps,\n\t\t\t_id: \"root\",\n\t\t\tinvolves: [],\n\t\t\tabilities: this.abilities.getDefaultAbilities(),\n\t\t\ttitle: \"Root\",\n\t\t\tdescription: \"Root\",\n\t\t\tmeta: {},\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\tthis.initOptions = initOptions;\n\t\t\n\t}\n\t\n\tusers;\n\tcollections;\n\tcollection!: WatchedCollection<RoleDoc> & {\n\t\t/** @deprecated Direct usage of roles collection.deleteOne is forbidden. Use roles.deleteRole instead. */\n\t\tdeleteOne: typeof preventDirectDelete;\n\t\t\n\t\t/** @deprecated Direct usage of roles collection.deleteMany is forbidden. Use roles.deleteRole instead. */\n\t\tdeleteMany: typeof preventDirectDelete;\n\t};\n\t\n\tabilities;\n\troot;\n\tprivate initOptions?;\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<RoleDoc>(\"roles\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\tdeleteOne: preventDirectDelete,\n\t\t\t\t\tdeleteMany: preventDirectDelete\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const roleDoc of this.collection.find()) {\n\t\t\t\tif (this.abilities.adjust(roleDoc.abilities))\n\t\t\t\t\tawait this.collection.updateOne({ _id: roleDoc._id }, { $set: { abilities: roleDoc.abilities } });\n\t\t\t\t\n\t\t\t\tthis.load(roleDoc);\n\t\t\t}\n\t\t\t\n\t\t\tthis.update();\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<RoleDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\": {\n\t\t\t\tnew Role<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tload(roleDoc: RoleDoc) {\n\t\tnew Role<AS>(this, roleDoc);\n\t\t\n\t}\n\t\n\tresolve(role: Role<AS>, involvedBy: Role<AS>[]) {\n\t\tinvolvedBy = [ role, ...involvedBy ];\n\t\t\n\t\tfor (const involvedRoleId of role.ownInvolveIds) {\n\t\t\tconst involvedRole = this.get(involvedRoleId);\n\t\t\tif (involvedRole) {\n\t\t\t\tfor (const involvedByRole of involvedBy) {\n\t\t\t\t\treAdd(involvedByRole.involves, involvedRole);\n\t\t\t\t\tthis.abilities.merge(involvedByRole.inheritedAbilities as GenericAbilities, involvedRole.abilities as GenericAbilities);\n\t\t\t\t}\n\t\t\t\tif (involvedRole !== role)\n\t\t\t\t\tthis.resolve(involvedRole, involvedBy);\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tsorted: Role<AS>[] = [];\n\t\n\t#sortRoles(a: Role<AS>, b: Role<AS>) {\n\t\treturn (\n\t\t\t(b.involves.size - a.involves.size) || (\n\t\t\t\t(a.title && b.title) ?\n\t\t\t\t\ta.title > b.title ? 1 : a.title < b.title ? -1 : 0 :\n\t\t\t\t\ta.title ?\n\t\t\t\t\t\t-1 :\n\t\t\t\t\t\tb.title ?\n\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\ta._id > b._id ?\n\t\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\t\ta._id < b._id ?\n\t\t\t\t\t\t\t\t\t-1 :\n\t\t\t\t\t\t\t\t\t0\n\t\t\t)\n\t\t);\n\t}\n\t\n\tupdate() {\n\t\t\n\t\tconst array = [ ...this.values() ];\n\t\t\n\t\tthis.root.ownInvolveIds = [];\n\t\tfor (const role of array) {\n\t\t\tif (role !== this.root && !array.some(anotherRole => anotherRole.ownInvolveIds.includes(role._id)))\n\t\t\t\tthis.root.ownInvolveIds.push(role._id);\n\t\t\trole.involves.clear();\n\t\t\trole.abilities = structuredClone(role.ownAbilities);\n\t\t\trole.inheritedAbilities = {};\n\t\t}\n\t\t\n\t\tthis.root.involves.add(this.root);\n\t\tthis.resolve(this.root, []);\n\t\t\n\t\tfor (const role of array)\n\t\t\trole.ownInvolves = getAll(this, role.ownInvolveIds, true).sort(this.#sortRoles).reverse();\n\t\t\n\t\tconst sorted = [ this.root ];\n\t\t\n\t\tfor (let i = 0; i < sorted.length; i++) {\n\t\t\tconst role = sorted[i];\n\t\t\tfor (const involvedRole of role.ownInvolves) {\n\t\t\t\tconst involvedRoleIndex = sorted.indexOf(involvedRole);\n\t\t\t\tif (~involvedRoleIndex) {\n\t\t\t\t\tsorted.splice(involvedRoleIndex, 1);\n\t\t\t\t\ti--;\n\t\t\t\t}\n\t\t\t\tsorted.splice(i + 1, 0, involvedRole);\n\t\t\t}\n\t\t}\n\t\t\n\t\tlet _o = 0;\n\t\tfor (const role of sorted) {\n\t\t\tthis.abilities.merge(role.abilities as GenericAbilities, role.inheritedAbilities as GenericAbilities);\n\t\t\trole._o = _o++;\n\t\t}\n\t\t\n\t\tthis.sorted = sorted;\n\t\t\n\t\tif (this.users.isInited)\n\t\t\tthis.users.update(true);\n\t\t\n\t}\n\t\n\tasync create({ _id, involves, title, description, ...restProps }: NewRole) {\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\tinvolves: involves || [],\n\t\t\tabilities: {},\n\t\t\ttitle: title ?? \"\",\n\t\t\tdescription: description ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"abilities\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateRole(roleId: string, updates: Omit<RoleDoc, \"abilities\" | \"createdAt\">) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.involves) {\n\t\t\tremoveAll(updates.involves, [ roleId ]);\n\t\t\t\n\t\t\tfor (const involvedRoleId of updates.involves)\n\t\t\t\tif (this.get(involvedRoleId)?.involves.has(role))\n\t\t\t\t\tremoveAll(updates.involves, [ involvedRoleId ]);\n\t\t\t\n\t\t\tupdates.involves = this.cleanUpIds(updates.involves);\n\t\t}\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: updates });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tdeleteRole(role: Role<AS> | string) {\n\t\tconst _id = typeof role == \"string\" ? role : role._id;\n\t\t\n\t\treturn this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { involves: _id }, update: { $pullAll: { involves: [ _id ] } } } },\n\t\t\t{ deleteOne: { filter: { _id } } }\n\t\t]);\n\t}\n\t\n\tcleanUpIds(ids: string[]) {\n\t\tconst roles = intersection(this.sorted, getAll(this, ids, true));\n\t\t\n\t\tconst cleanedUpIds = [];\n\t\t\n\t\tfor (const role of roles)\n\t\t\tif (roles.every(anotherRole => anotherRole === role || !anotherRole.involves.has(role)))\n\t\t\t\tcleanedUpIds.push(role._id);\n\t\t\n\t\treturn cleanedUpIds;\n\t}\n\t\n\tasync setAbility(roleId: string, abilityLongId: string, set: boolean) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: {\n\t\t\tabilities:\n\t\t\t\tset ?\n\t\t\t\t\tthis.abilities.setAbility(role.ownAbilities, abilityLongId) :\n\t\t\t\t\tthis.abilities.unsetAbility(role.ownAbilities, abilityLongId)\n\t\t} });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tasync setAbilityParam(roleId: string, abilityLongId: string, paramId: string, value: AbilityParam) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: {\n\t\t\tabilities: this.abilities.setParam(role.ownAbilities, abilityLongId, paramId, value)\n\t\t} });\n\t\t\n\t\treturn true;\n\t}\n\t\n}\n", "import type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport { Roles } from \"./Roles\";\nimport { RoleDoc } from \"./types\";\n\n\nconst snapshots = new WeakMap();\n\n\nexport class Role<AS extends AbilitiesSchema> {\n\tconstructor(roles: Roles<AS>, roleDoc: RoleDoc) {\n\t\tthis.#roles = roles;\n\t\t\n\t\tthis._id = roleDoc._id;\n\t\troles.set(this._id, this);\n\t\t\n\t\tvoid this.update(roleDoc);\n\t\t\n\t}\n\t\n\t#roles;\n\t\n\t_id;\n\townInvolveIds!: string[];\n\townAbilities!: Abilities<AS>;\n\ttitle = \"\";\n\tdisplayTitle = \"\";\n\t_o = 0;\n\t\n\townInvolves: Role<AS>[] = [];\n\tinvolves = new Set<Role<AS>>();\n\tabilities: Abilities<AS> = {};\n\tinheritedAbilities: Abilities<AS> = {};\n\t\n\tupdate({ _id, involves: ownInvolveIds, abilities: ownAbilities, title, ...restProps }: Partial<RoleDoc>) {\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tif (ownInvolveIds)\n\t\t\tthis.ownInvolveIds = ownInvolveIds;\n\t\t\n\t\tif (ownAbilities)\n\t\t\tthis.ownAbilities = ownAbilities as Abilities<AS>;\n\t\t\n\t\tif (title !== undefined) {\n\t\t\tthis.title = title;\n\t\t\tthis.displayTitle = title || this._id;\n\t\t}\n\t\t\n\t\tif (ownInvolveIds || ownAbilities) {\n\t\t\tconst snapshot = [\n\t\t\t\tthis.ownInvolveIds.join(\",\"),\n\t\t\t\tJSON.stringify(this.ownAbilities)\n\t\t\t].join(\"\\n\");\n\t\t\t\n\t\t\tif (snapshot !== snapshots.get(this)) {\n\t\t\t\tsnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.#roles.users.isInited)\n\t\t\t\t\tthis.#roles.update();\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tdelete() {\n\t\t\n\t\tthis.#roles.delete(this._id);\n\t\t\n\t\tsnapshots.delete(this);\n\t\t\n\t\tthis.#roles.update();\n\t\t\n\t}\n\t\n}\n", "export const regexps = {\n\t_id: /^[\\dA-Fa-f]{24}$/,\n\temail: /^[^\\s@]{1,63}@[^\\s@]{1,63}\\.[^\\s@]{1,63}$/,\n\targon2: /^\\$argon2(?:i|d|id)\\$v=\\d+\\$m=\\d+,t=\\d+,p=\\d+(?:\\$[\\d+/A-Za-z]+){2}$/,\n\t// eslint-disable-next-line unicorn/better-regex\n\tsessionId: /^(?:[\\dA-Fa-f]{16,32}\\$[\\dA-Fa-f]{16,32}|[0-9a-f]{24}~[A-Za-z0-9_-]{43})$/, // (?:old_format|new_format) - leave just the new after some time\n\trole: /^[\\d_a-z-]{1,64}$/,\n\tip: /^(?:\\d{1,3}\\.){3}\\d{1,3}$/\n};\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"involves\",\n\t\t\"abilities\",\n\t\t\"title\",\n\t\t\"description\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.role.source,\n\t\t\tnot: { enum: [ \"root\" ] }\n\t\t},\n\t\tinvolves: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps.role.source,\n\t\t\t\tnot: { enum: [ \"root\" ] }\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tabilities: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\ttitle: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 256\n\t\t},\n\t\tdescription: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 10240\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class UnauthorizedError extends Err {\n\tconstructor(payload?: Payload) {\n\t\tsuper(\"Unauthorized\", \"unauthorized\", payload);\n\t\t\n\t}\n\t\n\tname = \"UnauthorizedError\";\n\t\n}\n\n\ntype SubordinationType = \"_id\" | \"permissiveIds\" | \"slaveIds\";\n\nexport class SubordinationError extends Err {\n\tconstructor(payload?: Payload);\n\tconstructor(type: SubordinationType, payload?: Payload);\n\tconstructor(type: SubordinationType, ids: string[] | string, payload?: Payload);\n\tconstructor(type?: Payload | SubordinationType, ids?: Payload | string[] | string, payload?: Payload) {\n\t\tswitch (arguments.length) {\n\t\t\tcase 1:\n\t\t\t\tpayload = type as Payload;\n\t\t\t\ttype = undefined;\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase 2:\n\t\t\t\tpayload = ids as Payload;\n\t\t\t\tids = undefined;\n\t\t}\n\t\t\n\t\tsuper(\"Insubordination attempt\", \"subordination\", {\n\t\t\t...type && { type },\n\t\t\t...ids && { ids: Array.isArray(ids) ? ids : [ ids ] },\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"SubordinationError\";\n\t\n}\n\n\nexport class PermissionError extends Err {\n\tconstructor(payload?: Payload) {\n\t\tsuper(\"Insufficient permissions\", \"permissions\", payload);\n\t\t\n\t}\n\t\n\tname = \"PermissionError\";\n\t\n}\n", "import { hash, verify } from \"@node-rs/argon2\";\nimport EventEmitter from \"eventemitter3\";\nimport {\n\t_ids,\n\tdeleteProps,\n\tremoveAll,\n\tStatefulPromise,\n\twithout\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tCollections,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport { AbilitiesMap } from \"../abilities\";\nimport { Orgs } from \"../orgs\";\nimport { Org } from \"../orgs/Org\";\nimport { Roles } from \"../roles\";\nimport { Sessions } from \"../sessions\";\nimport { Session } from \"../sessions/Session\";\nimport type { SessionDoc } from \"../sessions/types\";\nimport { Avatars } from \"./avatars\";\nimport { basisSchema } from \"./schema\";\nimport { User } from \"./User\";\nimport type { NewUser, Options, UserDoc } from \"./types\";\n\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n\nconst indexes: CollectionIndexes = [\n\t[ { email: 1 }, { unique: true } ],\n\t[ { org: 1 } ]\n];\n\n\nexport class Users<AS extends AbilitiesSchema> extends Map<string, User<AS>> {\n\tconstructor(collections: Collections, options: Options<AS>) {\n\t\tsuper();\n\t\t\n\t\tconst eventEmitter = new EventEmitter() as EventEmitter & {\n\t\t\t_events: Record<string, object>;\n\t\t\t_eventsCount: number;\n\t\t};\n\t\tthis.#eventEmitter = eventEmitter;\n\t\tthis._events = eventEmitter._events;\n\t\tthis._eventsCount = eventEmitter._eventsCount;\n\t\tthis.emit = eventEmitter.emit;\n\t\tthis.on = eventEmitter.on as unknown as (...args: any[]) => this;\n\t\tthis.once = eventEmitter.once;\n\t\tthis.addListener = eventEmitter.addListener;\n\t\tthis.off = eventEmitter.off;\n\t\tthis.removeListener = eventEmitter.removeListener;\n\t\t\n\t\tthis.collections = collections;\n\t\t\n\t\tthis.abilities = new AbilitiesMap<AS>(options.abilities);\n\t\t\n\t\tthis.initOptions = options;\n\t\t\n\t\tvoid this.init();\n\t\t\n\t}\n\t\n\t#eventEmitter;\n\t_events;\n\t_eventsCount;\n\temit;\n\t\n\ton(event: \"user-create\" | \"user-is-online\" | \"user-permissions-change\", callback: (user: User<AS>) => void): this;\n\ton(event: \"session-delete\", callback: (session: Session<AS>) => void): this;\n\ton<T extends string | symbol>(event: T, callback: (...args: any[]) => void, context?: any) {\n\t\tthis.#eventEmitter.on(event, callback, context);\n\t\t\n\t\treturn this;\n\t}\n\t\n\tonce;\n\taddListener;\n\toff;\n\tremoveListener;\n\t\n\tprivate initOptions?;\n\t\n\tcollections;\n\tabilities;\n\t\n\tcollection!: WatchedCollection<UserDoc>;\n\troles!: Roles<AS>;\n\tsessions!: Sessions<AS>;\n\torgs!: Orgs<AS>;\n\tavatars!: Avatars;\n\t\n\tbyEmail = new Map();\n\tbySessionId = new Map();\n\tsorted: User<AS>[] = [];\n\t\n\tisSortRequired = true;\n\t\n\t#isPreinited = false;\n\t\n\tasync preinit() {\n\t\t\n\t\tif (!this.#isPreinited) {\n\t\t\tthis.#isPreinited = true;\n\t\t\t\n\t\t\tconst {\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tschema: customSchema,\n\t\t\t\tinitialRoot: initialRootProps,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string [], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = await this.collections.ensure<UserDoc>(\"users\", { ...collectionOptions, schema });\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tif (!await this.collection.countDocuments({ roles: \"root\" }))\n\t\t\t\tawait this.create({\n\t\t\t\t\temail: process.env.INSITE_ROOT_EMAIL ?? \"insite@root.email\",\n\t\t\t\t\tpassword: process.env.INSITE_ROOT_PASSWORD ?? \"inSiteRootPassword\",\n\t\t\t\t\tname: { first: \"Root\" },\n\t\t\t\t\tjob: \"Root\",\n\t\t\t\t\t...initialRootProps,\n\t\t\t\t\troles: [ \"root\" ],\n\t\t\t\t\torg: null,\n\t\t\t\t\tmeta: {}\n\t\t\t\t});\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const userDoc of this.collection.find())\n\t\t\t\tthis.load(userDoc);\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tisInited = false;\n\t\n\tprotected async init() {\n\t\t\n\t\tif (!this.isInited) {\n\t\t\tconst {\n\t\t\t\troles: rolesOptions,\n\t\t\t\torgs: orgsOptions,\n\t\t\t\tsessions: sessionsOptions,\n\t\t\t\tavatars: avatarsOptions,\n\t\t\t\tcollection: { quiet } = {}\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tthis.roles = new Roles<AS>(this, { ...rolesOptions, collection: { quiet, ...rolesOptions?.collection } });\n\t\t\tthis.orgs = new Orgs<AS>(this, { ...orgsOptions, collection: { quiet, ...orgsOptions?.collection } });\n\t\t\tthis.sessions = new Sessions<AS>(this, { ...sessionsOptions, collection: { quiet, ...sessionsOptions?.collection } });\n\t\t\tthis.avatars = new Avatars(this, { ...avatarsOptions, collection: { quiet, ...avatarsOptions?.collection } });\n\t\t\t\n\t\t\tawait this.roles.init();\n\t\t\tawait this.orgs.preinit();\n\t\t\tawait this.preinit();\n\t\t\tthis.orgs.init();\n\t\t\tawait this.avatars.init();\n\t\t\t\n\t\t\tthis.update(true);\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tawait this.sessions.init();\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t\t\n\t\t\tthis.isInited = true;\n\t\t\t\n\t\t\tthis.#initPromise.resolve(this);\n\t\t}\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<UserDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\":\n\t\t\t\tnew User<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\t\n\tload(userDoc: UserDoc) {\n\t\tnew User<AS>(this, userDoc);\n\t\t\n\t}\n\t\n\tsort() {\n\t\t\n\t\tthis.isSortRequired = false;\n\t\t\n\t\tthis.sorted = [ ...this.values() ].sort((a, b) => a.name.last > b.name.last ? 1 : a.name.last < b.name.last ? -1 : 0);\n\t\t\n\t}\n\t\n\tupdate(shouldUpdateRoles?: boolean) {\n\t\tif (shouldUpdateRoles)\n\t\t\tfor (const user of this.values())\n\t\t\t\tuser.updateRoles();\n\t\t\n\t\tfor (const user of this.values())\n\t\t\tuser.updatePermissions();\n\t\t\n\t\tif (this.isSortRequired)\n\t\t\tthis.sort();\n\t\t\n\t}\n\t\n\t#initPromise = new StatefulPromise<this>();\n\t\n\twhenReady() {\n\t\treturn this.#initPromise;\n\t}\n\t\n\tasync create({ email, password, roles, name, org, job, ...restProps }: NewUser) {\n\t\tif (this.byEmail.has(email))\n\t\t\tthrow new Error(\"User exists\");\n\t\t\n\t\tconst _id = newObjectIdString();\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\temail,\n\t\t\tpassword: await hash(password),\n\t\t\troles: this.isInited ? this.roles.cleanUpIds(roles) : roles,\n\t\t\tname: {\n\t\t\t\tfirst: name.first ?? \"\",\n\t\t\t\tmiddle: name.middle ?? \"\",\n\t\t\t\tlast: name.last ?? \"\"\n\t\t\t},\n\t\t\torg: org ?? null,\n\t\t\tjob: job ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"_id\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateUser(_id: string, updates: Omit<UserDoc, \"_id\" | \"createdAt\">, byUser?: User<AS>) {\n\t\tconst user = this.get(_id)!;\n\t\t\n\t\tif (!user)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.roles)\n\t\t\tupdates.roles =\n\t\t\t\tuser.isRoot ?\n\t\t\t\t\t[ \"root\" ] :\n\t\t\t\t\tthis.roles.cleanUpIds(\n\t\t\t\t\t\tbyUser ?\n\t\t\t\t\t\t\twithout(user.ownRoleIds, byUser.slaveRoleIds).concat(updates.roles) :\n\t\t\t\t\t\t\tupdates.roles\n\t\t\t\t\t);\n\t\t\n\t\tawait this.collection.updateOne({ _id }, { $set: updates });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tasync changePassword(_id: string, newPassword: string) {\n\t\tif (!this.has(_id))\n\t\t\tthrow new Error(\"usernotfound\");\n\t\t\n\t\tif (!newPassword)\n\t\t\tthrow new Error(\"emptypasswordisnotallowed\");\n\t\t\n\t\tawait Promise.all([\n\t\t\tthis.collection.updateOne({ _id }, { $set: { password: await hash(newPassword) } }),\n\t\t\tthis.sessions.collection.deleteMany({ user: _id })\n\t\t]);\n\t\t\n\t}\n\t\n\tasync login(email: string, password: string, sessionProps: Partial<SessionDoc>) {\n\t\tconst user = this.byEmail.get(email);\n\t\t\n\t\tif (!user)\n\t\t\tthrow new Error(\"usernotfound\");\n\t\t\n\t\tif (!await verify(user.password, password))\n\t\t\tthrow new Error(\"incorrectpassword\");\n\t\t\n\t\tif (!user.abilities.login)\n\t\t\tthrow new Error(\"userisnotabletologin\");\n\t\t\n\t\treturn this.sessions.create(user, sessionProps);\n\t}\n\t\n\tlogout(session: Session<AS>) {\n\t\tsession.delete();\n\t\t\n\t\treturn this.sessions.collection.deleteOne({ _id: session._id });\n\t}\n\t\n\t#sortUsersAndOrgs(a: Org<AS> | User<AS>, b: Org<AS> | User<AS>) {\n\t\treturn (\n\t\t\t(a instanceof User && b instanceof User) ?\n\t\t\t\t(a.name.last && b.name.last) ?\n\t\t\t\t\ta.name.last > b.name.last ?\n\t\t\t\t\t\t1 :\n\t\t\t\t\t\ta.name.last < b.name.last ? -1 : 0 :\n\t\t\t\t\t(!a.name.last && !b.name.last) ?\n\t\t\t\t\t\ta.displayLabel > b.displayLabel ?\n\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\ta.displayLabel < b.displayLabel ? -1 : 0 :\n\t\t\t\t\t\ta.name.last ? -1 : 1 :\n\t\t\t\t(a instanceof Org && b instanceof Org) ?\n\t\t\t\t\ta.title > b.title ?\n\t\t\t\t\t\t1 :\n\t\t\t\t\t\ta.title < b.title ? -1 : 0 :\n\t\t\t\t\ta instanceof Org ? -1 : 1\n\t\t);\n\t}\n\t\n\tsortIds(ids: string[]) {\n\t\treturn _ids((\n\t\t\tids\n\t\t\t\t.map(_id => this.get(_id) || this.orgs.get(_id))\n\t\t\t\t.filter(Boolean) as (Org<AS> | User<AS>)[]\n\t\t).sort(this.#sortUsersAndOrgs));\n\t}\n\t\n\treplaceMap = new Map<string, string>();\n\t\n\treplaceHandlers = new Set<(fromId: string, toId: string | null) => Promise<void> | void>();\n\t\n\tasync replace(fromId: string) {\n\t\tconst toId = this.replaceMap.get(fromId) ?? null;\n\t\tif (toId)\n\t\t\tthis.replaceMap.delete(fromId);\n\t\t\n\t\tfor (const handler of this.replaceHandlers)\n\t\t\tawait handler(fromId, toId);\n\t\t\n\t}\n\t\n\tasync deleteUser(_id: string) {\n\t\tconst { deletedCount } = await this.collection.deleteOne({ _id });\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n\t\n\tstatic init<IAS extends AbilitiesSchema>(collections: Collections, options: Options<IAS>) {\n\t\tconst users = new Users(collections, options);\n\t\t\n\t\treturn users.whenReady();\n\t}\n\t\n}\n", "import {\n\t_ids,\n\tdeleteProps,\n\tEmptyArray,\n\tEmptySet,\n\tremoveAll,\n\tsort,\n\tunion,\n\twithout\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport type { User, Users } from \"../users\";\nimport { Org } from \"./Org\";\nimport { basisSchema } from \"./schema\";\nimport type { NewOrg, OrgDoc, OrgsOptions } from \"./types\";\n\n\nconst indexes: CollectionIndexes = [\n\t[ { owners: 1 } ]\n];\n\nfunction preventDirectDelete() {\n\tthrow new Error(\"Direct usage of orgs collection.deleteOne or .deleteMany is forbidden. Use orgs.deleteOrg instead.\");\n}\n\n\nexport class Orgs<AS extends AbilitiesSchema> extends Map<string, Org<AS>> {\n\tconstructor(users: Users<AS>, options: OrgsOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.preinitOptions = options;\n\t\t\n\t}\n\t\n\tusers;\n\tcollections;\n\tprivate preinitOptions?;\n\t\n\tcollection!: WatchedCollection<OrgDoc> & {\n\t\t/** @deprecated Direct usage of roles collection.deleteOne is forbidden. Use orgs.deleteOrg instead. */\n\t\tdeleteOne: typeof preventDirectDelete;\n\t\t\n\t\t/** @deprecated Direct usage of roles collection.deleteMany is forbidden. Use orgs.deleteOrg instead. */\n\t\tdeleteMany: typeof preventDirectDelete;\n\t};\n\t\n\tnull!: Org<AS> & { _id: null };\n\t\n\t#isPreinited = false;\n\t\n\tasync preinit() {\n\t\t\n\t\tif (!this.#isPreinited) {\n\t\t\tthis.#isPreinited = true;\n\t\t\t\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tnull: nullProps,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.preinitOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string [], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<OrgDoc>(\"orgs\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\tdeleteOne: preventDirectDelete,\n\t\t\t\t\tdeleteMany: preventDirectDelete\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\t// TODO: customIndexes should be moved to collectionOptions\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tthis.null = Object.assign(\n\t\t\t\tnew Org<AS>(this, {\n\t\t\t\t\t...nullProps,\n\t\t\t\t\t_id: \"\",\n\t\t\t\t\ttitle: \"\",\n\t\t\t\t\tnote: \"\",\n\t\t\t\t\towners: [],\n\t\t\t\t\tmeta: {},\n\t\t\t\t\tcreatedAt: Date.now()\n\t\t\t\t}),\n\t\t\t\t{\n\t\t\t\t\t_id: null,\n\t\t\t\t\townerIds: new EmptyArray(),\n\t\t\t\t\townerOrgs: new EmptySet(),\n\t\t\t\t\townerUsers: new EmptySet(),\n\t\t\t\t\tslaveOrgs: new EmptySet()\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const orgDoc of this.collection.find())\n\t\t\t\tthis.load(orgDoc);\n\t\t\t\n\t\t\tdelete this.preinitOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tinit() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tthis.update();\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t}\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<OrgDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\": {\n\t\t\t\tnew Org<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tload(orgDoc: OrgDoc) {\n\t\tnew Org<AS>(this, orgDoc);\n\t\t\n\t}\n\t\n\t#resolve(org: Org<AS>, slaveOrgs: Org<AS>[]) {\n\t\tslaveOrgs = [ org, ...slaveOrgs ];\n\t\t\n\t\tfor (const ownerOrg of org.ownerOrgs) {\n\t\t\tthis.#resolve(ownerOrg, slaveOrgs);\n\t\t\tfor (const slaveOrg of slaveOrgs)\n\t\t\t\townerOrg.slaveOrgs.add(slaveOrg);\n\t\t}\n\t\t\n\t}\n\t\n\tsorted: Org<AS>[] = [];\n\t\n\tupdate() {\n\t\t\n\t\tconst array = [ ...this.values() ];\n\t\tconst sorted = [];\n\t\t\n\t\tfor (const org of array) {\n\t\t\torg.ownerOrgs.clear();\n\t\t\torg.ownerUsers.clear();\n\t\t\torg.slaveOrgs.clear();\n\t\t\t\n\t\t\tfor (const ownerId of org.ownerIds) {\n\t\t\t\tconst ownerOrg = this.get(ownerId);\n\t\t\t\tif (ownerOrg)\n\t\t\t\t\torg.ownerOrgs.add(ownerOrg);\n\t\t\t\telse {\n\t\t\t\t\tconst ownerUser = this.users.get(ownerId);\n\t\t\t\t\tif (ownerUser)\n\t\t\t\t\t\torg.ownerUsers.add(ownerUser);\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\tif (!org.ownerOrgs.size && org._id)\n\t\t\t\tsorted.push(org);\n\t\t}\n\t\t\n\t\tfor (const org of array)\n\t\t\tif (!array.some(anotherOrg => anotherOrg.ownerOrgs.has(org)))\n\t\t\t\tthis.#resolve(org, []);\n\t\t\n\t\tsorted.sort(this.#sortOrgs);\n\t\tfor (const org of array)\n\t\t\tsort(org.slaveOrgs, this.#sortOrgs);\n\t\t\n\t\tfor (let i = 0; i < sorted.length; i++) {\n\t\t\tconst org = sorted[i];\n\t\t\tfor (const slaveOrg of [ ...org.slaveOrgs ].reverse())\n\t\t\t\tif (slaveOrg.ownerOrgs.has(org)) {\n\t\t\t\t\tconst slaveOrgIndex = sorted.indexOf(slaveOrg);\n\t\t\t\t\tif (~slaveOrgIndex) {\n\t\t\t\t\t\tsorted.splice(slaveOrgIndex, 1);\n\t\t\t\t\t\ti--;\n\t\t\t\t\t}\n\t\t\t\t\tsorted.splice(i + 1, 0, slaveOrg);\n\t\t\t\t}\n\t\t}\n\t\tfor (let o = 0, { length } = sorted; o < length;)\n\t\t\tsorted[o]._o = o++;\n\t\t\n\t\tthis.sorted = sorted;\n\t\t\n\t\tif (this.users.isInited)\n\t\t\tthis.users.update();\n\t\t\n\t}\n\t\n\t#sortOrgs(a: Org<AS>, b: Org<AS>) {\n\t\treturn (\n\t\t\t(b.slaveOrgs.size - a.slaveOrgs.size) || (\n\t\t\t\ta.title > b.title ?\n\t\t\t\t\t1 :\n\t\t\t\t\ta.title < b.title ?\n\t\t\t\t\t\t-1 :\n\t\t\t\t\t\t0\n\t\t\t)\n\t\t);\n\t}\n\t\n\tasync create({ title, note, ...restProps }: NewOrg) {\n\t\t\n\t\tconst _id = newObjectIdString();\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\ttitle: title ?? \"\",\n\t\t\tnote: note ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"_id\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateOrg(_id: string, updates: Omit<OrgDoc, \"_id\" | \"createdAt\">, byUser?: User<AS>) {\n\t\tconst org = this.get(_id)!;\n\t\t\n\t\tif (!org)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.owners)\n\t\t\tupdates.owners =\n\t\t\t\tthis.users.sortIds(\n\t\t\t\t\tunion(\n\t\t\t\t\t\tbyUser ?\n\t\t\t\t\t\t\twithout(org.ownerIds, byUser.slaveIds) :\n\t\t\t\t\t\t\t[],\n\t\t\t\t\t\twithout(updates.owners, [ _id, ..._ids(org.slaveOrgs) ])\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\n\t\tawait this.collection.updateOne({ _id }, { $set: updates });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tdeleteOrg(org: Org<AS> | string) {\n\t\tconst _id = typeof org == \"string\" ? org : org._id;\n\t\t\n\t\treturn this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { owners: _id }, update: { $pullAll: { owners: [ _id ] } } } },\n\t\t\t{ deleteOne: { filter: { _id } } }\n\t\t]);\n\t}\n\t\n\treplaceMap = new Map<string, string>();\n\t\n\treplaceHandlers = new Set<(fromId: string, toId: string | null) => Promise<void> | void>();\n\t\n\tasync replace(fromId: string) {\n\t\tconst toId = this.replaceMap.get(fromId) ?? null;\n\t\tif (toId)\n\t\t\tthis.replaceMap.delete(fromId);\n\t\t\n\t\tfor (const handler of this.replaceHandlers)\n\t\t\tawait handler(fromId, toId);\n\t\t\n\t}\n\t\n}\n", "import type { AbilitiesSchema } from \"insite-common\";\nimport { User } from \"../users/User\";\nimport type { Orgs } from \"./Orgs\";\nimport type { OrgDoc } from \"./types\";\n\n\nconst snapshots = new WeakMap();\n\n\nexport class Org<AS extends AbilitiesSchema> {\n\tconstructor(orgs: Orgs<AS>, orgDoc: OrgDoc) {\n\t\tthis.orgs = orgs;\n\t\t\n\t\tthis._id = orgDoc._id;\n\t\torgs.set(this._id, this);\n\t\t\n\t\tvoid this.update(orgDoc);\n\t\t\n\t}\n\t\n\t_id;\n\ttitle = \"\";\n\tinitials = \"\";\n\tdisplayLabel = \"\";\n\t\n\t_o = 0;\n\t\n\torgs;\n\t\n\tisOrg = true;\n\t\n\townerOrgs = new Set<Org<AS>>();\n\townerUsers = new Set<User<AS>>();\n\t\n\tusers = new Set<User<AS>>();\n\t\n\tslaveOrgs = new Set<Org<AS>>();\n\t\n\townerIds: string[] = [];\n\t\n\tupdate({ _id, title, owners: ownerIds, ...restProps }: Partial<OrgDoc>) {\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tif (title !== undefined) {\n\t\t\tthis.title = title;\n\t\t\tthis.initials = title?.[0]?.toUpperCase() ?? \"\";\n\t\t\tthis.displayLabel = title;\n\t\t}\n\t\t\n\t\tif (ownerIds) {\n\t\t\tthis.ownerIds = ownerIds;\n\t\t\t\n\t\t\tconst snapshot = this.ownerIds.join(\",\");\n\t\t\t\n\t\t\tif (snapshot !== snapshots.get(this)) {\n\t\t\t\tsnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.orgs.users.isInited)\n\t\t\t\t\tthis.orgs.update();\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tasync delete() {\n\t\t\n\t\tthis.orgs.delete(this._id);\n\t\t\n\t\tsnapshots.delete(this);\n\t\t\n\t\tawait this.orgs.replace(this._id);\n\t\t\n\t\tthis.orgs.update();\n\t\t\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"title\",\n\t\t\"note\",\n\t\t\"owners\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\ttitle: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 512\n\t\t},\n\t\tnote: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 131072\n\t\t},\n\t\towners: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps._id.source\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { randomBytes } from \"node:crypto\";\nimport { deleteProps, removeAll } from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport { User } from \"../users/User\";\nimport type { Users } from \"../users\";\nimport { basisSchema } from \"./schema\";\nimport { Session } from \"./Session\";\nimport { SessionDoc, SessionsOptions } from \"./types\";\n\n\nconst expireAfterSeconds = 3600 * 24 * 7;\n\nconst indexes: CollectionIndexes = [\n\t[ { user: 1 } ],\n\t[ { expiresAt: 1 }, { expireAfterSeconds } ]\n];\n\n\nexport class Sessions<AS extends AbilitiesSchema> extends Map<string, Session<AS>> {\n\tconstructor(users: Users<AS>, options: SessionsOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.initOptions = options;\n\t}\n\t\n\tusers;\n\tcollections;\n\t\n\tprivate initOptions?;\n\t\n\tcollection!: WatchedCollection<SessionDoc> & {\n\t\texpireAfterSeconds: number;\n\t};\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<SessionDoc>(\"sessions\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\texpireAfterSeconds\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const sessionDoc of this.collection.find())\n\t\t\t\tthis.load(sessionDoc);\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { meta: { $exists: false } }, update: { $set: { meta: {} } } } },\n\t\t\t{ updateMany: { filter: { isOnline: true }, update: { $set: { isOnline: false } } } }\n\t\t]);\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<SessionDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\":\n\t\t\t\tif (!this.has(next.documentKey._id))\n\t\t\t\t\tnew Session<AS>(this, next.fullDocument);\n\t\t\t\t\n\t\t\t\tvoid this.users.get(next.fullDocument.user)?.trimSessions();\n\t\t\t\t\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tthis.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tthis.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tthis.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tuid() {\n\t\treturn `${newObjectIdString()}~${randomBytes(32).toString(\"base64url\")}`;\n\t}\n\t\n\tload(sessionDoc: SessionDoc) {\n\t\tnew Session<AS>(this, sessionDoc);\n\t\t\n\t}\n\t\n\tasync create(user: User<AS>, props: Partial<SessionDoc>) {\n\t\t\n\t\tconst ts = Date.now();\n\t\t\n\t\tconst sessionDoc: SessionDoc = {\n\t\t\tuserAgent: \"\",\n\t\t\tremoteAddress: \"127.0.0.1\",\n\t\t\tisOnline: true,\n\t\t\t...props,\n\t\t\t_id: this.uid(),\n\t\t\tuser: user._id,\n\t\t\tmeta: {},\n\t\t\tcreatedAt: ts,\n\t\t\tprolongedAt: ts,\n\t\t\texpiresAt: new Date(ts + (expireAfterSeconds * 1000))\n\t\t};\n\t\t\n\t\t/* new Session(\u2026) before await insertOne(\u2026) for avoid changeStream insert event to come earlier and create the session duplicate */\n\t\tconst session = new Session<AS>(this, sessionDoc);\n\t\t\n\t\tawait this.collection.insertOne(sessionDoc);\n\t\t\n\t\treturn session;\n\t}\n\t\n\tasync destroySession(_id: string) {\n\t\tconst { deletedCount } = await this.collection.deleteOne({ _id });\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"user\",\n\t\t\"remoteAddress\",\n\t\t\"isOnline\",\n\t\t\"meta\",\n\t\t\"createdAt\",\n\t\t\"prolongedAt\",\n\t\t\"expiresAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.sessionId.source\n\t\t},\n\t\tuser: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\tuserAgent: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 4096\n\t\t},\n\t\tremoteAddress: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.ip.source\n\t\t},\n\t\tisOnline: {\n\t\t\tbsonType: \"bool\"\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\tprolongedAt: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\texpiresAt: {\n\t\t\tbsonType: \"date\"\n\t\t}\n\t}\n\t// TODO: Restrict additional properties (not needed with meta)\n};\n", "import type { AbilitiesSchema } from \"insite-common\";\nimport type { User } from \"../users/User\";\nimport type { Sessions } from \"./Sessions\";\nimport type { SessionDoc } from \"./types\";\n\n\nexport class Session<AS extends AbilitiesSchema> {\n\tconstructor(sessions: Sessions<AS>, sessionDoc: SessionDoc) {\n\t\tconst user = sessions.users.get(sessionDoc.user);\n\t\t\n\t\tif (user) {\n\t\t\tthis.#sessions = sessions;\n\t\t\t\n\t\t\tthis._id = sessionDoc._id;\n\t\t\tthis.#sessions.set(this._id, this);\n\t\t\t\n\t\t\tthis.user = user;\n\t\t\tthis.user.sessions.add(this);\n\t\t\t\n\t\t\tthis.#sessions.users.bySessionId.set(this._id, this.user);\n\t\t\t\n\t\t\tthis.update(sessionDoc);\n\t\t} else\n\t\t\tvoid sessions.collection.deleteOne({ _id: sessionDoc._id });\n\t\t\n\t}\n\t\n\t_id!: string;\n\tuser!: User<AS>;\n\tisOnline = false;\n\t\n\tuserAgent!: string;\n\tremoteAddress!: string;\n\tcreatedAt!: number;\n\tprolongedAt!: number;\n\texpiresAt!: Date;\n\t\n\t#sessions!: Sessions<AS>;\n\t\n\tupdate({ _id, user, isOnline, ...restProps }: Partial<SessionDoc>) {\n\t\t\n\t\tif (isOnline !== undefined && this.isOnline !== isOnline) {\n\t\t\tthis.isOnline = isOnline;\n\t\t\t\n\t\t\tif (this.#sessions.users.isInited && this.user.isOnline !== this.isOnline)\n\t\t\t\tvoid this.user.updateIsOnlineDebounced();\n\t\t}\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t}\n\t\n\tprolong({ _id, user, ...updates }: Partial<SessionDoc>) {\n\t\t\n\t\tconst ts = Date.now();\n\t\t\n\t\tupdates.prolongedAt = ts;\n\t\tupdates.expiresAt = new Date(ts + (this.#sessions.collection.expireAfterSeconds * 1000));\n\t\t\n\t\tthis.update(updates);\n\t\t\n\t\treturn this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t}\n\t\n\tasync online() {\n\t\t\n\t\tif (!this.isOnline) {\n\t\t\tconst updates = { isOnline: true };\n\t\t\t\n\t\t\tthis.update(updates);\n\t\t\t\n\t\t\tawait this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t\t}\n\t\t\n\t}\n\t\n\tasync offline() {\n\t\t\n\t\tif (this.isOnline) {\n\t\t\tconst updates = { isOnline: false };\n\t\t\t\n\t\t\tthis.update(updates);\n\t\t\t\n\t\t\tawait this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t\t}\n\t\t\n\t}\n\t\n\tdelete() {\n\t\t\n\t\tthis.#sessions.delete(this._id);\n\t\tthis.user.sessions.delete(this);\n\t\tthis.#sessions.users.bySessionId.delete(this._id);\n\t\t\n\t\tthis.#sessions.users.emit(\"session-delete\", this);\n\t\t\n\t\tif (this.isOnline)\n\t\t\tthis.user.updateIsOnline();\n\t\t\n\t}\n\t\n}\n", "import { Binary, type WatchedCollection } from \"insite-db\";\nimport type { Users } from \"../Users\";\nimport { schema } from \"./schema\";\nimport type { AvatarDoc, AvatarsOptions } from \"./types\";\n\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n\nexport class Avatars {\n\tconstructor(users: Users<any>, options: AvatarsOptions = {}) {\n\t\tthis.#users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.initOptions = options;\n\t\t\n\t}\n\t\n\treadonly TYPES_ACCEPTED = [ \"image/webp\" ];\n\treadonly MAX_SIZE = 1024 * 512;\n\t\n\t#users;\n\tcollections;\n\t\n\tcollection!: WatchedCollection<AvatarDoc>;\n\t\n\tprivate initOptions?;\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.#users.isInited) {\n\t\t\tconst {\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tthis.collection = await this.collections.ensure<AvatarDoc>(\"users.avatars\", { ...collectionOptions, schema });\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tasync save(_id: string, type: string, data: string) {\n\t\tconst binaryData = Binary.createFromBase64(data.slice(data.indexOf(\",\")));\n\t\t\n\t\tconst ts = Date.now().toString(36);\n\t\t\n\t\tawait Promise.all([\n\t\t\tthis.collection.replaceOne({ _id }, {\n\t\t\t\ttype,\n\t\t\t\tsize: binaryData.length(),\n\t\t\t\tts,\n\t\t\t\tdata: binaryData,\n\t\t\t\tmeta: {}\n\t\t\t}, { upsert: true }),\n\t\t\tthis.#users.collection.updateOne({ _id }, { $set: { avatar: ts } })\n\t\t]);\n\t\t\n\t}\n\t\n\tasync deleteAvatar(_id: string) {\n\t\t\n\t\tconst [ { deletedCount } ] = await Promise.all([\n\t\t\tthis.collection.deleteOne({ _id }),\n\t\t\tthis.#users.collection.updateOne({ _id }, { $set: { avatar: null } })\n\t\t]);\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../../lib\";\n\n\nexport const schema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"type\",\n\t\t\"size\",\n\t\t\"ts\",\n\t\t\"data\",\n\t\t\"meta\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\ttype: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 256\n\t\t},\n\t\tsize: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\tts: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 10\n\t\t},\n\t\tdata: {\n\t\t\tbsonType: \"binData\"\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"email\",\n\t\t\"password\",\n\t\t\"roles\",\n\t\t\"name\",\n\t\t\"org\",\n\t\t\"job\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\temail: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.email.source\n\t\t},\n\t\tpassword: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.argon2.source\n\t\t},\n\t\troles: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps.role.source\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tname: {\n\t\t\tbsonType: \"object\",\n\t\t\trequired: [\n\t\t\t\t\"first\",\n\t\t\t\t\"middle\",\n\t\t\t\t\"last\"\n\t\t\t],\n\t\t\tproperties: {\n\t\t\t\tfirst: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t},\n\t\t\t\tmiddle: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t},\n\t\t\t\tlast: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t}\n\t\t\t},\n\t\t\tadditionalProperties: false\n\t\t},\n\t\torg: {\n\t\t\toneOf: [\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tpattern: regexps._id.source\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"null\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\tjob: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 512\n\t\t},\n\t\tavatar: {\n\t\t\toneOf: [\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 10\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"null\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import {\n\t_ids,\n\tdebounce,\n\tempty,\n\thasAny,\n\tremoveOne\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport type { GenericAbilities } from \"../abilities/types\";\nimport type { Org } from \"../orgs/Org\";\nimport type { Role } from \"../roles/Role\";\nimport type { Session } from \"../sessions/Session\";\nimport type { UserDoc } from \"./types\";\nimport type { Users } from \"./Users\";\n\n\nconst rolesSnapshots = new WeakMap();\nconst permissionsSnapshots = new WeakMap();\n\nconst staticUrl = process.env.INSITE_STATIC_URL ?? \"\";\n\n\nexport class User<AS extends AbilitiesSchema> {\n\tconstructor(users: Users<AS>, userDoc: UserDoc) {\n\t\tthis.#users = users;\n\t\t\n\t\tthis._id = userDoc._id;\n\t\tusers.set(this._id, this);\n\t\t\n\t\tvoid this.update(userDoc);\n\t\t\n\t\tif (users.isInited)\n\t\t\tusers.emit(\"user-create\", this);\n\t\t\n\t}\n\t\n\t_id;\n\temail!: string;\n\tname = {\n\t\tfirst: \"\",\n\t\tmiddle: \"\",\n\t\tlast: \"\"\n\t};\n\t\n\tinitials = \"\";\n\tdisplayLabel = \"\";\n\torg!: Org<AS>;\n\tjob: string = \"\";\n\tavatar: string | null = null;\n\tavatarUrl: string | null = null;\n\t\n\t#users;\n\t\n\tisUser = true;\n\tisRoot?: boolean;\n\t\n\troles = new Set<Role<AS>>();\n\townRoles: Role<AS>[] = [];\n\townRoleIds: string[] = [];\n\tslaveRoles = new Set<Role<AS>>();\n\tslaveRoleIds: string[] = [];\n\tabilities: Abilities<AS> = {};\n\t\n\tslaveOrgs = new Set<Org<AS>>();\n\tslaveUsers = new Set<User<AS>>();\n\tslaves = new Set<Org<AS> | User<AS>>();\n\t\n\tslaveIds: string[] = [];\n\tpermissiveIds: string[] = [];\n\t\n\tsessions = new Set<Session<AS>>();\n\t\n\tisOnline = false;\n\t\n\tupdate({ _id, name, email, roles: ownRoleIds, org: orgId, avatar, ...restProps }: Partial<UserDoc>) {\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tlet isEmailUpdated;\n\t\tif (email && this.email !== email) {\n\t\t\tthis.#users.byEmail.delete(this.email);\n\t\t\tthis.email = email;\n\t\t\tthis.#users.byEmail.set(email, this);\n\t\t\tisEmailUpdated = true;\n\t\t}\n\t\t\n\t\tlet isNameUpdated;\n\t\tlet isLastNameUpdated;\n\t\tif (name && (this.name.first !== name.first || this.name.middle !== name.middle || this.name.last !== name.last)) {\n\t\t\tisLastNameUpdated = this.name.last !== name.last;\n\t\t\tthis.name = {\n\t\t\t\tfirst: name.first ?? \"\",\n\t\t\t\tmiddle: name.middle ?? \"\",\n\t\t\t\tlast: name.last ?? \"\"\n\t\t\t};\n\t\t\tthis.initials = (((name.first?.[0] ?? \"\") + (name.last?.[0] ?? \"\")) || this.email[0]).toUpperCase();\n\t\t\tisNameUpdated = true;\n\t\t}\n\t\t\n\t\tif (isEmailUpdated || isNameUpdated)\n\t\t\tthis.displayLabel = `${this.name.first} ${this.name.last}`.trim() || this.name.middle || this.email;\n\t\t\n\t\tlet isRolesUpdated;\n\t\tif (ownRoleIds) {\n\t\t\tthis.ownRoleIds = ownRoleIds;\n\t\t\t\n\t\t\tconst snapshot = this.ownRoleIds.join(\",\");\n\t\t\t\n\t\t\tif (snapshot !== rolesSnapshots.get(this)) {\n\t\t\t\trolesSnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.#users.isInited) {\n\t\t\t\t\tthis.updateRoles();\n\t\t\t\t\tisRolesUpdated = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t\tlet isOrgUpdated;\n\t\tif (orgId !== undefined && this.org?._id !== orgId) {\n\t\t\tthis.org?.users.delete(this);\n\t\t\tthis.org = orgId && this.#users.orgs.get(orgId) || this.#users.orgs.null;// eslint-disable-line @stylistic/no-mixed-operators\n\t\t\tthis.org.users.add(this);\n\t\t\tisOrgUpdated = true;\n\t\t}\n\t\t\n\t\tif (avatar !== undefined && this.avatar !== avatar) {\n\t\t\tthis.avatar = avatar;\n\t\t\tthis.avatarUrl = avatar && `${staticUrl}/avatars/${this._id}-${avatar}.webp`;\n\t\t}\n\t\t\n\t\tif (this.#users.isInited)\n\t\t\tif (isRolesUpdated || isOrgUpdated) {\n\t\t\t\tthis.updatePermissions();\n\t\t\t\t\n\t\t\t\tif (isLastNameUpdated)\n\t\t\t\t\tthis.#users.isSortRequired = true;\n\t\t\t\t\n\t\t\t\tthis.#users.update();\n\t\t\t} else if (isLastNameUpdated)\n\t\t\t\tthis.#users.sort();\n\t\t\n\t}\n\t\n\tupdateRoles() {\n\t\t\n\t\tthis.ownRoles = [];\n\t\tthis.roles.clear();\n\t\tthis.slaveRoles.clear();\n\t\tempty(this.abilities);\n\t\t\n\t\tfor (const roleId of this.ownRoleIds) {\n\t\t\tconst role = this.#users.roles.get(roleId);\n\t\t\tif (role) {\n\t\t\t\t\n\t\t\t\tthis.ownRoles.push(role);\n\t\t\t\tthis.roles.add(role);\n\t\t\t\tfor (const involvedRole of role.involves) {\n\t\t\t\t\tthis.roles.add(involvedRole);\n\t\t\t\t\tthis.slaveRoles.add(involvedRole);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tthis.slaveRoleIds = _ids(this.slaveRoles);\n\t\t\t\t\n\t\t\t\tthis.#users.abilities.merge(this.abilities as GenericAbilities, role.abilities as GenericAbilities);\n\t\t\t}\n\t\t}\n\t\t\n\t\tif (this.roles.has(this.#users.roles.root))\n\t\t\tthis.isRoot = true;\n\t\t\n\t\tvoid this.trimSessions();\n\t\t\n\t}\n\t\n\tupdatePermissions() {\n\t\t\n\t\tthis.slaveOrgs.clear();\n\t\tthis.slaveUsers.clear();\n\t\tthis.slaves.clear();\n\t\tconst slaveIds = new Set<string>();\n\t\t\n\t\tfor (const org of this.#users.orgs.sorted)\n\t\t\tif ((org.ownerUsers.has(this) || this.isRoot) && !this.slaveOrgs.has(org)) {\n\t\t\t\tthis.slaveOrgs.add(org);\n\t\t\t\tthis.slaves.add(org);\n\t\t\t\tslaveIds.add(org._id);\n\t\t\t\tfor (const slaveOrg of org.slaveOrgs) {\n\t\t\t\t\tthis.slaveOrgs.add(slaveOrg);\n\t\t\t\t\tthis.slaves.add(slaveOrg);\n\t\t\t\t\tslaveIds.add(slaveOrg._id);\n\t\t\t\t}\n\t\t\t}\n\t\t\n\t\tfor (const org of new Set([ this.org, ...this.slaveOrgs, this.#users.orgs.null ]))\n\t\t\tfor (const user of org.users)\n\t\t\t\tif (user !== this && (hasAny(this.slaveRoles, user.ownRoles) || !user.ownRoles.length)) {\n\t\t\t\t\tthis.slaveUsers.add(user);\n\t\t\t\t\tthis.slaves.add(user);\n\t\t\t\t\tslaveIds.add(user._id);\n\t\t\t\t}\n\t\t\n\t\tthis.slaveIds = [ ...slaveIds ];\n\t\t\n\t\tconst permissiveOrgIds = [];\n\t\tif (this.org._id) {\n\t\t\tpermissiveOrgIds.push(this.org._id);\n\t\t\tfor (const slaveOrg of this.org.slaveOrgs)\n\t\t\t\tif (!this.slaveOrgs.has(slaveOrg))\n\t\t\t\t\tpermissiveOrgIds.push(slaveOrg._id);\n\t\t}\n\t\t\n\t\tthis.permissiveIds = [ ...permissiveOrgIds, this._id, ...slaveIds ];\n\t\t\n\t\t\n\t\tconst snapshot = [\n\t\t\tthis.permissiveIds.join(\",\"),\n\t\t\tthis.ownRoleIds.join(\",\"),\n\t\t\tJSON.stringify(this.abilities),\n\t\t\tthis.slaveRoleIds.join(\",\")\n\t\t].join(\"\\n\");\n\t\t\n\t\tif (snapshot !== permissionsSnapshots.get(this)) {\n\t\t\tpermissionsSnapshots.set(this, snapshot);\n\t\t\t\n\t\t\tif (this.#users.isInited)\n\t\t\t\tthis.#users.emit(\"user-permissions-change\", this);\n\t\t}\n\t\t\n\t}\n\t\n\ttrimSessions() {\n\t\t\n\t\tconst sessionsLimit = this.abilities.login?.sessionsLimit ?? 0;\n\t\t\n\t\tif (this.sessions.size > sessionsLimit)\n\t\t\treturn this.#users.sessions.collection.deleteMany({\n\t\t\t\t_id: {\n\t\t\t\t\t$in: _ids(\n\t\t\t\t\t\t[ ...this.sessions ]\n\t\t\t\t\t\t\t.sort((a, b) => a.expiresAt.valueOf() - b.expiresAt.valueOf())\n\t\t\t\t\t\t\t.slice(0, this.sessions.size - sessionsLimit)\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t});\n\t\t\n\t}\n\t\n\tupdateIsOnline() {\n\t\t\n\t\tlet isOnline = false;\n\t\t\n\t\tfor (const session of this.sessions)\n\t\t\tif (session.isOnline) {\n\t\t\t\tisOnline = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\n\t\tif (this.isOnline !== isOnline) {\n\t\t\tthis.isOnline = isOnline;\n\t\t\tthis.#users.emit(\"user-is-online\", this);\n\t\t}\n\t\t\n\t}\n\t\n\tupdateIsOnlineDebounced = debounce(() => this.updateIsOnline(), 500);\n\t\n\tasync delete() {\n\t\t\n\t\tthis.org.users.delete(this);\n\t\t\n\t\tthis.#users.delete(this._id);\n\t\tthis.#users.byEmail.delete(this.email);\n\t\tremoveOne(this.#users.sorted, this);\n\t\t\n\t\trolesSnapshots.delete(this);\n\t\tpermissionsSnapshots.delete(this);\n\t\t\n\t\tawait this.#users.replace(this._id);\n\t\t\n\t\tthis.#users.update();\n\t\t\n\t}\n\t\n}\n"],
-  "mappings": "AAAA,OAAS,OAAAA,OAAW,YAMb,IAAMC,EAAN,cAA2BD,EAAI,CAGrC,YAAYE,EAA2BC,EAAmB,CACrD,OAAOD,GAAU,WACpBC,EAAUD,EACVA,EAAS,QAGV,MAAM,qBAAsB,eAAgB,CAC3C,GAAGA,GAAU,CAAE,QAASA,CAAO,EAC/B,GAAGC,CACJ,CAAC,CAEF,CAEA,KAAO,cAER,ECxBA,OACC,OAAAC,GACA,cAAAC,GACA,cAAAC,GACA,SAAAC,GACA,WAAAC,EACA,gBAAAC,GACA,QAAAC,GACA,WAAAC,OACM,YCeA,SAASC,EAAgBC,EAAwC,CACvE,OAAO,OAAOA,GAAS,QACxB,CAEO,SAASC,EAAqBD,EAAkD,CACtF,OAAO,OAAOA,GAAS,QACxB,CAEO,SAASE,EAAoBF,EAAiD,CACpF,OAAO,MAAM,QAAQA,CAAK,CAC3B,CDTA,IAAMG,EAAkB,IAAI,IAGfC,EAAN,cAAuD,GAA2B,CACxF,YAAYC,EAAqB,CAChC,MAAM,EAEN,QAAWC,KAAaD,EACvB,OAAOC,EAAU,IAEjB,KAAKC,GAAc,KAAKD,CAA0B,GAGlD,SAASE,EAA8BC,EAA0BC,EAA8BC,EAAe,CAC9G,QAAWC,KAAUH,EAA4B,CAKhD,GAJAN,EAAgB,IAAIS,EAAQF,CAAM,EAElCE,EAAO,MAAQD,EAEX,CAACD,GAAUE,EAAO,IAAK,CAG1B,GAFAA,EAAO,OAASA,EAAO,IAEnB,KAAK,IAAIA,EAAO,GAAG,EACtB,MAAM,IAAI,MAAM,gCAAgCA,EAAO,GAAG,EAAE,EAE7D,KAAK,IAAIA,EAAO,IAAKA,CAAM,CAC5B,MACCA,EAAO,OAASF,EAAS,GAAGA,EAAO,MAAM,IAAIE,EAAO,GAAG,GAAKA,EAAO,IAEhEA,EAAO,WACVJ,EAAM,KAAK,KAAMI,EAAO,UAAWA,EAAQD,EAAQ,CAAC,CACtD,CAED,GAAG,KAAK,KAAMN,EAAiB,KAAM,CAAC,CAEvC,CAEAE,GAAiC,CAAC,EAElC,IAAIM,EAAgBH,EAA+B,CAClD,IAAMI,EAASD,EAAO,MAAM,GAAG,EAC3BD,EAASF,GAAU,MAAM,IAAII,EAAO,MAAM,CAAE,EAEhD,GAAIF,GAAUE,EAAO,QACpB,QAAWC,KAASD,EAEnB,GADAF,EAASA,GAAQ,WAAW,KAAK,CAAC,CAAE,IAAAI,EAAK,IAAAC,CAAI,IAAM,CAACA,GAAOD,IAAQD,CAAK,EACpE,CAACH,EACJ,MAGH,OAAOA,CACR,CAEA,UAAY,KAAK,IAEjB,eAAeC,EAAgBK,EAAiB,CAC/C,OAAO,KAAK,IAAIL,CAAM,GAAG,QAAQ,KAAK,CAAC,CAAE,IAAAG,CAAI,IAAMA,IAAQE,CAAO,CACnE,CAIA,gBAAgBC,EAA6CC,EAAiCC,EAAe,EACxGD,IAAiB,QAAa,OAAOA,GAAgB,aACxDC,EAAMD,GAEP,IAAMR,EAAS,OAAOO,GAAkB,SAAW,KAAK,eAAeA,EAAgBC,CAAsB,EAAID,EAEjH,GAAIP,EACH,OAAQA,EAAO,KAAM,CACpB,IAAK,SACJ,OAAOS,EACLT,EAAO,KAAO,IACdA,EAAO,KAAO,EAEjB,IAAK,QACJ,OAAOS,EACNT,EAAO,MAAM,IAAI,CAAC,CAAE,IAAAI,CAAI,IAAMA,CAAG,EACjC,CAAC,CACJ,CAGF,CAIA,kBAAkBJ,EAAgCS,EAAe,CAACT,EAA6B,CAI9F,GAHI,OAAOA,GAAU,WACpBA,EAAS,KAAK,IAAIA,CAAM,GAErBA,EAAQ,CACX,GAAIA,EAAO,WAAaA,EAAO,OAAQ,CACtC,IAAMU,EAAU,CAAC,EAEjB,GAAIV,EAAO,OACV,QAAWW,KAAeX,EAAO,OAChCU,EAAQC,EAAY,GAAG,EAAI,KAAK,gBAAgBA,EAAaF,CAAG,EAElE,GAAIA,GAAOT,EAAO,UACjB,QAAWN,KAAaM,EAAO,UACzBN,EAAU,MACdgB,EAAQhB,EAAU,GAAG,EAAI,KAAK,kBAAkBA,EAAWe,CAAG,GAEjE,OAAOC,CACR,CAEA,MAAO,EACR,CAGD,CAOA,oBAAoBE,EAAoEH,EAAe,CAACG,EAAc,CAErH,IAAMf,GACLe,GACE,MAAM,QAAQA,CAAY,EAAIA,EAAe,CAAEA,CAAa,GAC3D,IAAIZ,GAAW,OAAOA,GAAU,SAAW,KAAK,IAAIA,CAAM,EAAIA,CAAO,EACrE,OAAO,OAAO,EAChB,CAAE,GAAG,KAAK,OAAO,CAAE,GACnB,KAAK,CAACa,EAAGC,IAAMD,EAAE,MAAQC,EAAE,KAAK,EAE5BC,EAAe,IAAI,IAEzB,QAAWf,KAAUH,GACnB,SAASmB,EAAQC,EAAS,CAC1B,IAAMC,EAAe3B,EAAgB,IAAI0B,CAAO,EAE5CC,IACHF,EAAQE,CAAY,EAEfH,EAAa,IAAIG,CAAY,GACjCH,EAAa,IAAIG,EAAc,EAAK,EAGvC,GAAGlB,CAAM,EAELS,GACF,SAASO,EAAQC,EAAS,CAI1B,GAHKF,EAAa,IAAIE,CAAO,GAC5BF,EAAa,IAAIE,EAAS,EAAI,EAE3BA,EAAQ,UACX,QAAWvB,KAAauB,EAAQ,UAC3BvB,EAAU,KACbsB,EAAQtB,CAAS,CAErB,GAAGM,CAAM,EAEJe,EAAa,IAAIf,CAAM,GAC3Be,EAAa,IAAIf,EAAQ,EAAK,EAGjC,OAAOmB,GACN,CAAC,EACD,OAAO,YACN,CAAE,GAAGJ,CAAa,EAChB,IAAI,CAAC,CAAEf,EAAQoB,CAAK,IAAM,CAAEpB,EAAO,OAAQ,KAAK,kBAAkBA,EAAQoB,CAAI,CAAE,CAAC,CACpF,CACD,CACD,CAEA,aAAaC,EAA6B,CACzC,OAAAA,EAAY,KAAK,OAAO,gBAAgBA,CAAS,CAAC,GAE1C,SAASL,EAAQM,EAA6BC,EAAgC,CACrF,QAASC,EAAI,EAAGA,EAAIF,EAAW,OAAQE,IAAK,CAC3C,IAAMxB,EAASsB,EAAWE,CAAC,EACrBd,EAAUV,EAAO,IAAMqB,EAAUrB,EAAO,GAAG,EAAIuB,EAAavB,EAAO,GAAG,EAE5E,GAAIU,EAAS,CACZ,GAAIV,EAAO,OACV,QAAWW,KAAeX,EAAO,OAAQ,CACxC,IAAMyB,EAAgBf,EAA0BC,EAAY,GAAG,EAE/D,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJA,EAAY,IAAMc,EAClB,MAED,IAAK,QACJd,EAAY,MAAQA,EAAY,MAAM,OAAO,CAAC,CAAE,IAAAP,CAAI,IAAOqB,EAAmC,SAASrB,CAAG,CAAC,CAC7G,CACD,CAEGJ,EAAO,YACVgB,EAAQhB,EAAO,UAAWU,CAA2B,EAEhDV,EAAO,UAAU,QACrB,OAAOA,EAAO,UAEjB,MACCsB,EAAW,OAAOE,IAAK,CAAC,CAC1B,CAEA,OAAOF,CACR,GAAG,gBAAgB,KAAK3B,EAAa,EAAG0B,CAAS,CAClD,CAEA,SAASA,EAA6BpB,EAAgBK,EAAiB,CACtE,GAAI,KAAK,eAAeL,EAAQK,CAAO,EAAG,CACzC,IAAMoB,EAAQC,EAAQN,EAAW,GAAGpB,CAAM,IAAIK,CAAO,EAAE,EAEvD,OAAI,KAAK,YAAYL,EAAQK,EAASoB,CAAK,EACnCA,EAED,KAAK,gBAAgBzB,EAAQK,CAAO,CAC5C,CAGD,CAEA,SAASe,EAA6BpB,EAAgBK,EAAiBoB,EAAoC,CAC1G,IAAM1B,EAAS,KAAK,eAAeC,EAAQK,CAAO,EAElD,GAAI,CAACN,EACJ,MAAM,IAAI,MAAM,0BAA0BC,CAAM,IAAIK,CAAO,EAAE,EAE9D,OAAAsB,GAAQP,EAAW,GAAGpB,CAAM,IAAIK,CAAO,GAAI,KAAK,YAAYN,EAAQ0B,CAAK,CAAC,EAEnEL,CACR,CAEA,YAAYpB,EAAgBK,EAAiBoB,EAAqBG,EAA+B,CAChG,GAAIH,IAAU,OAAW,CACxB,IAAMf,EAAc,KAAK,eAAeV,EAAQK,CAAO,EAEvD,GAAIK,EACH,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJ,OACCmB,EAAqBJ,CAAK,IACzBf,EAAY,MAAQ,QAAae,GAASf,EAAY,OACtDkB,IAAmB,OACjBlB,EAAY,MAAQ,QAAae,GAASf,EAAY,IACvDe,GAAUG,GAId,IAAK,QACJ,OACCE,EAAoBL,CAAK,GACzBA,EAAM,SAAW,IAAI,IAAIA,CAAK,EAAE,OAC/BG,IAAmB,OAClBH,EAAM,MAAMM,GAAUrB,EAAY,MAAM,KAAK,CAAC,CAAE,IAAAP,CAAI,IAAMA,IAAQ4B,CAAM,CAAC,EACzEN,EAAM,MAAMM,GAAWH,EAAqC,SAASG,CAAM,CAAC,EAGjF,CACF,CAEA,MAAO,EACR,CAEA,YAAYrB,EAAiCe,EAAqB,CACjE,OAAQf,EAAY,OACd,SAEHmB,EAAqBJ,CAAK,EACzB,KAAK,IACJ,KAAK,IACJA,EACAf,EAAY,KAAO,GACpB,EACAA,EAAY,KAAO,CACpB,EACAA,EAAY,KAAO,EAKpBoB,EAAoBL,CAAK,EACxBO,GAAatB,EAAY,MAAM,IAAIuB,GAAQA,EAAK,GAAG,EAAGR,CAAK,EAC3D,CAAC,CAIN,CAEA,OAAOL,EAA6BvB,EAA8C,CACjF,IAAMqC,EAAsC,CAAC,EAE7C,OAAW,CAAE/B,EAAKM,CAAQ,IAAK,OAAO,QAAQW,CAAS,EAAG,CACzD,IAAMrB,EAAS,KAAK,IAAII,EAAKN,CAAM,EAEnC,GAAIE,EACH,GAAIA,EAAO,QAAUA,EAAO,UAAW,CACtC,IAAMoC,EAAiC,CAAC,EAExC,GAAIpC,EAAO,OACV,GAAIqC,EAAgB3B,CAAO,EAC1B,QAAWC,KAAeX,EAAO,OAChCoC,EAAgBzB,EAAY,GAAG,EAAI,KAAK,YAAYA,EAAaD,EAAQC,EAAY,GAAG,CAAiB,MAE1G,SAAWA,KAAeX,EAAO,OAChCoC,EAAgBzB,EAAY,GAAG,EAAI,KAAK,gBAAgBA,CAAW,EAElEX,EAAO,WAAaqC,EAAgB3B,CAAO,GAC9C,OAAO,OACN0B,EACA,KAAK,OACJE,GACC5B,EACAV,EAAO,UACL,OAAON,GAAa,CAACA,EAAU,GAAG,EAClC,IAAIA,GAAaA,EAAU,GAAG,CACjC,EACAM,CACD,CACD,EAEDmC,EAAkB/B,CAAG,EAAIgC,CAC1B,MACCD,EAAkB/B,CAAG,EAAI,EAC5B,CAEA,OAAO,OAAO,OAAOmC,GAAMlB,CAAS,EAAGc,CAAiB,CACzD,CAEA,MAAMK,EAA0BC,EAA0B3C,EAA8C,CAClGA,IACJ,KAAK,OAAO0C,CAAM,EAClBC,EAAS,KAAK,OAAO,gBAAgBA,CAAM,CAAC,GAG7C,OAAW,CAAErC,EAAKM,CAAQ,IAAK,OAAO,QAAQ+B,CAAM,EAAG,CACtD,IAAMzC,EAAS,KAAK,IAAII,EAAKN,CAAM,EAEnC,GAAIE,GAAUA,EAAO,gBAAkB,GACtC,GAAII,KAAOoC,IAAWxC,EAAO,QAAUA,EAAO,WAAY,CACzD,IAAM0C,EAAgBF,EAAOpC,CAAG,EAC1BuC,EAAgBjC,EAEtB,GAAIV,EAAO,QACV,QAAWW,KAAeX,EAAO,OAChC,GAAIW,EAAY,gBAAkB,GACjC,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJ+B,EAAc/B,EAAY,GAAG,EAC5B,KAAK,IACJ+B,EAAc/B,EAAY,GAAG,EAC7BgC,EAAchC,EAAY,GAAG,CAC9B,EACD,MAED,IAAK,QACJiC,GACCF,EAAc/B,EAAY,GAAG,EAC7B,GAAGgC,EAAchC,EAAY,GAAG,CACjC,CACF,EAECX,EAAO,WACV,KAAK,MAAM0C,EAAmCC,EAAmC3C,CAAM,CACzF,MACCwC,EAAOpC,CAAG,EAAIM,CACjB,CAEA,OAAO8B,CACR,CAEA,WAAWnB,EAA6BpB,EAAgB,CACvD,MAAO,EAAQ0B,EAAQN,EAAWpB,CAAM,CACzC,CAIA,WAAWuC,EAA0BjC,EAAwC,CAC5E,IAAMP,EAAS,OAAOO,GAAkB,SAAW,KAAK,IAAIA,CAAc,EAAIA,EAE9E,GAAI,CAACP,EACJ,MAAM,IAAI,MAAM,oBAAoBO,CAAwB,EAAE,EAE/D,YAAK,MAAMiC,EAAQ,KAAK,oBAAoBxC,CAAM,CAAC,EAE5CwC,CACR,CAIA,aAAaA,EAA0BjC,EAAwC,CAC9E,IAAMP,EAAS,OAAOO,GAAkB,SAAW,KAAK,IAAIA,CAAc,EAAIA,EAE9E,GAAI,CAACP,EACJ,MAAM,IAAI,MAAM,oBAAoBO,CAAwB,EAAE,EAE/D,OAAC,SAASS,EAAQC,EAAS,CAG1B,GAFA4B,GAAWL,EAAQvB,EAAQ,MAAM,EAE7BA,EAAQ,UACX,QAAWvB,KAAauB,EAAQ,UAC/BD,EAAQtB,CAAS,CAEpB,GAAGM,CAAM,EAEFwC,CACR,CAED,EE3aA,OAAS,OAAAM,OAAW,YAMb,IAAMC,EAAN,cAAyBD,EAAI,CAGnC,YAAYE,EAA4CC,EAAmB,CAC1E,MAAM,kBAAkB,MAAM,QAAQD,CAAa,EAAI,IAAM,EAAE,GAAI,aAAc,CAChF,MAAO,MAAM,QAAQA,CAAa,EAAIA,EAAgB,CAAEA,CAAc,EACtE,GAAGC,CACJ,CAAC,CAEF,CAEA,KAAO,YAER,ECnBA,OACC,eAAAC,EACA,UAAAC,EACA,gBAAAC,GACA,SAAAC,GACA,aAAAC,MACM,YCDP,IAAMC,EAAY,IAAI,QAGTC,EAAN,KAAuC,CAC7C,YAAYC,EAAkBC,EAAkB,CAC/C,KAAKC,GAASF,EAEd,KAAK,IAAMC,EAAQ,IACnBD,EAAM,IAAI,KAAK,IAAK,IAAI,EAEnB,KAAK,OAAOC,CAAO,CAEzB,CAEAC,GAEA,IACA,cACA,aACA,MAAQ,GACR,aAAe,GACf,GAAK,EAEL,YAA0B,CAAC,EAC3B,SAAW,IAAI,IACf,UAA2B,CAAC,EAC5B,mBAAoC,CAAC,EAErC,OAAO,CAAE,IAAAC,EAAK,SAAUC,EAAe,UAAWC,EAAc,MAAAC,EAAO,GAAGC,CAAU,EAAqB,CAcxG,GAbA,OAAO,OAAO,KAAMA,CAAS,EAEzBH,IACH,KAAK,cAAgBA,GAElBC,IACH,KAAK,aAAeA,GAEjBC,IAAU,SACb,KAAK,MAAQA,EACb,KAAK,aAAeA,GAAS,KAAK,KAG/BF,GAAiBC,EAAc,CAClC,IAAMG,EAAW,CAChB,KAAK,cAAc,KAAK,GAAG,EAC3B,KAAK,UAAU,KAAK,YAAY,CACjC,EAAE,KAAK;AAAA,CAAI,EAEPA,IAAaV,EAAU,IAAI,IAAI,IAClCA,EAAU,IAAI,KAAMU,CAAQ,EAExB,KAAKN,GAAO,MAAM,UACrB,KAAKA,GAAO,OAAO,EAEtB,CAED,CAEA,QAAS,CAER,KAAKA,GAAO,OAAO,KAAK,GAAG,EAE3BJ,EAAU,OAAO,IAAI,EAErB,KAAKI,GAAO,OAAO,CAEpB,CAED,ECzEO,IAAMO,EAAU,CACtB,IAAK,mBACL,MAAO,4CACP,OAAQ,uEAER,UAAW,4EACX,KAAM,oBACN,GAAI,2BACL,ECJO,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,WACA,YACA,QACA,cACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,KAAK,OACtB,IAAK,CAAE,KAAM,CAAE,MAAO,CAAE,CACzB,EACA,SAAU,CACT,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,KAAK,OACtB,IAAK,CAAE,KAAM,CAAE,MAAO,CAAE,CACzB,EACA,gBAAiB,EAClB,EACA,UAAW,CACV,SAAU,QACX,EACA,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,YAAa,CACZ,SAAU,SACV,UAAW,KACZ,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EHjCA,IAAMC,GAA6B,CAClC,CAAE,CAAE,SAAU,CAAE,CAAE,CACnB,EAEA,SAASC,GAAsB,CAC9B,MAAM,IAAI,MAAM,uGAAuG,CACxH,CAGO,IAAMC,EAAN,cAAgD,GAAsB,CAC5E,YAAYC,EAAkBC,EAAwB,CAAC,EAAG,CACzD,MAAM,EAEN,GAAM,CACL,KAAMC,EACN,GAAGC,CACJ,EAAIF,EAEJ,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YACzB,KAAK,UAAYA,EAAM,UAEvB,KAAK,KAAO,IAAII,EAAS,KAAM,CAC9B,GAAGF,EACH,IAAK,OACL,SAAU,CAAC,EACX,UAAW,KAAK,UAAU,oBAAoB,EAC9C,MAAO,OACP,YAAa,OACb,KAAM,CAAC,EACP,UAAW,KAAK,IAAI,CACrB,CAAC,EAED,KAAK,YAAcC,CAEpB,CAEA,MACA,YACA,WAQA,UACA,KACQ,YAER,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAK,MAAM,SAAU,CACzB,GAAM,CACL,OAAQE,EACR,QAASC,EACT,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,EAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,EAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAsB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAgB,QAAS,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EAChF,CACC,UAAWb,EACX,WAAYA,CACb,CACD,EAEA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGD,GAAS,GAAGS,GAAiB,CAAC,CAAE,CAAC,EAE1E,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAW,KAAK,WAAW,KAAK,EAC5C,KAAK,UAAU,OAAOA,EAAQ,SAAS,GAC1C,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKA,EAAQ,GAAI,EAAG,CAAE,KAAM,CAAE,UAAWA,EAAQ,SAAU,CAAE,CAAC,EAEjG,KAAK,KAAKA,CAAO,EAGlB,KAAK,OAAO,EAEZ,KAAK,WAAW,SAAS,KAAKC,EAAuB,EAErD,OAAO,KAAK,WACb,CAED,CAEA,KAAMF,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEAE,GAA2BC,GAAwC,CAClE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SAAU,CACd,IAAIX,EAAS,KAAMW,EAAK,YAAY,EACpC,KACD,CAEA,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAEA,KAAKF,EAAkB,CACtB,IAAIT,EAAS,KAAMS,CAAO,CAE3B,CAEA,QAAQG,EAAgBC,EAAwB,CAC/CA,EAAa,CAAED,EAAM,GAAGC,CAAW,EAEnC,QAAWC,KAAkBF,EAAK,cAAe,CAChD,IAAMG,EAAe,KAAK,IAAID,CAAc,EAC5C,GAAIC,EAAc,CACjB,QAAWC,KAAkBH,EAC5BI,GAAMD,EAAe,SAAUD,CAAY,EAC3C,KAAK,UAAU,MAAMC,EAAe,mBAAwCD,EAAa,SAA6B,EAEnHA,IAAiBH,GACpB,KAAK,QAAQG,EAAcF,CAAU,CACvC,CACD,CAED,CAEA,OAAqB,CAAC,EAEtBK,GAAWC,EAAaC,EAAa,CACpC,OACEA,EAAE,SAAS,KAAOD,EAAE,SAAS,OAC5BA,EAAE,OAASC,EAAE,MACbD,EAAE,MAAQC,EAAE,MAAQ,EAAID,EAAE,MAAQC,EAAE,MAAQ,GAAK,EACjDD,EAAE,MACD,GACAC,EAAE,OAEDD,EAAE,IAAMC,EAAE,IADV,EAGCD,EAAE,IAAMC,EAAE,IACT,GACA,EAGR,CAEA,QAAS,CAER,IAAMC,EAAQ,CAAE,GAAG,KAAK,OAAO,CAAE,EAEjC,KAAK,KAAK,cAAgB,CAAC,EAC3B,QAAWT,KAAQS,EACdT,IAAS,KAAK,MAAQ,CAACS,EAAM,KAAKC,GAAeA,EAAY,cAAc,SAASV,EAAK,GAAG,CAAC,GAChG,KAAK,KAAK,cAAc,KAAKA,EAAK,GAAG,EACtCA,EAAK,SAAS,MAAM,EACpBA,EAAK,UAAY,gBAAgBA,EAAK,YAAY,EAClDA,EAAK,mBAAqB,CAAC,EAG5B,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,EAChC,KAAK,QAAQ,KAAK,KAAM,CAAC,CAAC,EAE1B,QAAWA,KAAQS,EAClBT,EAAK,YAAcW,EAAO,KAAMX,EAAK,cAAe,EAAI,EAAE,KAAK,KAAKM,EAAU,EAAE,QAAQ,EAEzF,IAAMM,EAAS,CAAE,KAAK,IAAK,EAE3B,QAASC,EAAI,EAAGA,EAAID,EAAO,OAAQC,IAAK,CACvC,IAAMb,EAAOY,EAAOC,CAAC,EACrB,QAAWV,KAAgBH,EAAK,YAAa,CAC5C,IAAMc,EAAoBF,EAAO,QAAQT,CAAY,EACjD,CAACW,IACJF,EAAO,OAAOE,EAAmB,CAAC,EAClCD,KAEDD,EAAO,OAAOC,EAAI,EAAG,EAAGV,CAAY,CACrC,CACD,CAEA,IAAIY,EAAK,EACT,QAAWf,KAAQY,EAClB,KAAK,UAAU,MAAMZ,EAAK,UAA+BA,EAAK,kBAAsC,EACpGA,EAAK,GAAKe,IAGX,KAAK,OAASH,EAEV,KAAK,MAAM,UACd,KAAK,MAAM,OAAO,EAAI,CAExB,CAEA,MAAM,OAAO,CAAE,IAAAI,EAAK,SAAAC,EAAU,MAAAC,EAAO,YAAAC,EAAa,GAAGC,CAAU,EAAY,CAE1E,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAJ,EACA,SAAUC,GAAY,CAAC,EACvB,UAAW,CAAC,EACZ,MAAOC,GAAS,GAChB,YAAaC,GAAe,GAC5B,KAAM,CAAC,EACP,GAAGzB,EAAY0B,EAAW,CAAE,WAAY,CAAC,EACzC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMJ,CACR,CAEA,MAAM,WAAWK,EAAgBC,EAAmD,CACnF,IAAMtB,EAAO,KAAK,IAAIqB,CAAM,EAE5B,GAAI,CAACrB,EACJ,MAAO,GAER,GAAIsB,EAAQ,SAAU,CACrB9B,EAAU8B,EAAQ,SAAU,CAAED,CAAO,CAAC,EAEtC,QAAWnB,KAAkBoB,EAAQ,SAChC,KAAK,IAAIpB,CAAc,GAAG,SAAS,IAAIF,CAAI,GAC9CR,EAAU8B,EAAQ,SAAU,CAAEpB,CAAe,CAAC,EAEhDoB,EAAQ,SAAW,KAAK,WAAWA,EAAQ,QAAQ,CACpD,CAEA,aAAM,KAAK,WAAW,UAAU,CAAE,IAAKD,CAAO,EAAG,CAAE,KAAMC,CAAQ,CAAC,EAE3D,EACR,CAEA,WAAWtB,EAAyB,CACnC,IAAMgB,EAAM,OAAOhB,GAAQ,SAAWA,EAAOA,EAAK,IAElD,OAAO,KAAK,WAAW,UAAU,CAChC,CAAE,WAAY,CAAE,OAAQ,CAAE,SAAUgB,CAAI,EAAG,OAAQ,CAAE,SAAU,CAAE,SAAU,CAAEA,CAAI,CAAE,CAAE,CAAE,CAAE,EACzF,CAAE,UAAW,CAAE,OAAQ,CAAE,IAAAA,CAAI,CAAE,CAAE,CAClC,CAAC,CACF,CAEA,WAAWO,EAAe,CACzB,IAAMC,EAAQC,GAAa,KAAK,OAAQd,EAAO,KAAMY,EAAK,EAAI,CAAC,EAEzDG,EAAe,CAAC,EAEtB,QAAW1B,KAAQwB,EACdA,EAAM,MAAMd,GAAeA,IAAgBV,GAAQ,CAACU,EAAY,SAAS,IAAIV,CAAI,CAAC,GACrF0B,EAAa,KAAK1B,EAAK,GAAG,EAE5B,OAAO0B,CACR,CAEA,MAAM,WAAWL,EAAgBM,EAAuBC,EAAc,CACrE,IAAM5B,EAAO,KAAK,IAAIqB,CAAM,EAE5B,OAAKrB,GAGL,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKqB,CAAO,EAAG,CAAE,KAAM,CACxD,UACCO,EACC,KAAK,UAAU,WAAW5B,EAAK,aAAc2B,CAAa,EAC1D,KAAK,UAAU,aAAa3B,EAAK,aAAc2B,CAAa,CAC/D,CAAE,CAAC,EAEI,IATC,EAUT,CAEA,MAAM,gBAAgBN,EAAgBM,EAAuBE,EAAiBC,EAAqB,CAClG,IAAM9B,EAAO,KAAK,IAAIqB,CAAM,EAE5B,OAAKrB,GAGL,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKqB,CAAO,EAAG,CAAE,KAAM,CACxD,UAAW,KAAK,UAAU,SAASrB,EAAK,aAAc2B,EAAeE,EAASC,CAAK,CACpF,CAAE,CAAC,EAEI,IANC,EAOT,CAED,EIhUA,OAAS,OAAAC,MAAW,YAMb,IAAMC,EAAN,cAAgCD,CAAI,CAC1C,YAAYE,EAAmB,CAC9B,MAAM,eAAgB,eAAgBA,CAAO,CAE9C,CAEA,KAAO,mBAER,EAKaC,EAAN,cAAiCH,CAAI,CAI3C,YAAYI,EAAoCC,EAAmCH,EAAmB,CACrG,OAAQ,UAAU,OAAQ,CACzB,IAAK,GACJA,EAAUE,EACVA,EAAO,OACP,MAED,IAAK,GACJF,EAAUG,EACVA,EAAM,MACR,CAEA,MAAM,0BAA2B,gBAAiB,CACjD,GAAGD,GAAQ,CAAE,KAAAA,CAAK,EAClB,GAAGC,GAAO,CAAE,IAAK,MAAM,QAAQA,CAAG,EAAIA,EAAM,CAAEA,CAAI,CAAE,EACpD,GAAGH,CACJ,CAAC,CAEF,CAEA,KAAO,oBAER,EAGaI,EAAN,cAA8BN,CAAI,CACxC,YAAYE,EAAmB,CAC9B,MAAM,2BAA4B,cAAeA,CAAO,CAEzD,CAEA,KAAO,iBAER,ECxDA,OAAS,QAAAK,GAAM,UAAAC,OAAc,kBAC7B,OAAOC,OAAkB,gBACzB,OACC,QAAAC,GACA,eAAAC,GACA,aAAAC,GACA,mBAAAC,GACA,WAAAC,OACM,YAEP,OAIC,qBAAAC,OAEM,YChBP,OACC,QAAAC,GACA,eAAAC,EACA,cAAAC,GACA,YAAAC,EACA,aAAAC,GACA,QAAAC,GACA,SAAAC,GACA,WAAAC,MACM,YAEP,OAGC,qBAAAC,OAEM,YCVP,IAAMC,EAAY,IAAI,QAGTC,EAAN,KAAsC,CAC5C,YAAYC,EAAgBC,EAAgB,CAC3C,KAAK,KAAOD,EAEZ,KAAK,IAAMC,EAAO,IAClBD,EAAK,IAAI,KAAK,IAAK,IAAI,EAElB,KAAK,OAAOC,CAAM,CAExB,CAEA,IACA,MAAQ,GACR,SAAW,GACX,aAAe,GAEf,GAAK,EAEL,KAEA,MAAQ,GAER,UAAY,IAAI,IAChB,WAAa,IAAI,IAEjB,MAAQ,IAAI,IAEZ,UAAY,IAAI,IAEhB,SAAqB,CAAC,EAEtB,OAAO,CAAE,IAAAC,EAAK,MAAAC,EAAO,OAAQC,EAAU,GAAGC,CAAU,EAAoB,CAUvE,GARA,OAAO,OAAO,KAAMA,CAAS,EAEzBF,IAAU,SACb,KAAK,MAAQA,EACb,KAAK,SAAWA,IAAQ,CAAC,GAAG,YAAY,GAAK,GAC7C,KAAK,aAAeA,GAGjBC,EAAU,CACb,KAAK,SAAWA,EAEhB,IAAME,EAAW,KAAK,SAAS,KAAK,GAAG,EAEnCA,IAAaR,EAAU,IAAI,IAAI,IAClCA,EAAU,IAAI,KAAMQ,CAAQ,EAExB,KAAK,KAAK,MAAM,UACnB,KAAK,KAAK,OAAO,EAEpB,CAED,CAEA,MAAM,QAAS,CAEd,KAAK,KAAK,OAAO,KAAK,GAAG,EAEzBR,EAAU,OAAO,IAAI,EAErB,MAAM,KAAK,KAAK,QAAQ,KAAK,GAAG,EAEhC,KAAK,KAAK,OAAO,CAElB,CAED,ECzEO,IAAMS,EAAgC,CAC5C,SAAU,CACT,MACA,QACA,OACA,SACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,SACV,UAAW,MACZ,EACA,OAAQ,CACP,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,gBAAiB,EAClB,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EFpBA,IAAMC,GAA6B,CAClC,CAAE,CAAE,OAAQ,CAAE,CAAE,CACjB,EAEA,SAASC,GAAsB,CAC9B,MAAM,IAAI,MAAM,oGAAoG,CACrH,CAGO,IAAMC,EAAN,cAA+C,GAAqB,CAC1E,YAAYC,EAAkBC,EAAuB,CAAC,EAAG,CACxD,MAAM,EAEN,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YAEzB,KAAK,eAAiBC,CAEvB,CAEA,MACA,YACQ,eAER,WAQA,KAEAC,GAAe,GAEf,MAAM,SAAU,CAEf,GAAI,CAAC,KAAKA,GAAc,CACvB,KAAKA,GAAe,GAEpB,GAAM,CACL,OAAQC,EACR,QAASC,EACT,KAAMC,EACN,WAAYC,CACb,EAAI,KAAK,eAELH,IACCA,EAAa,UAChBI,GAAUJ,EAAa,SAAuBK,EAAY,QAAoB,EAC3EL,EAAa,YAChBM,EAAYN,EAAc,OAAO,KAAKK,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGL,EACH,SAAU,CAAE,GAAGK,EAAY,SAAsB,GAAGL,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGK,EAAY,WAAY,GAAGL,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAe,OAAQ,CAAE,GAAGG,EAAmB,OAAAI,CAAO,CAAC,EAC9E,CACC,UAAWZ,EACX,WAAYA,CACb,CACD,EAGA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGD,GAAS,GAAGO,GAAiB,CAAC,CAAE,CAAC,EAE1E,KAAK,KAAO,OAAO,OAClB,IAAIO,EAAQ,KAAM,CACjB,GAAGN,EACH,IAAK,GACL,MAAO,GACP,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,CAAC,EACP,UAAW,KAAK,IAAI,CACrB,CAAC,EACD,CACC,IAAK,KACL,SAAU,IAAIO,GACd,UAAW,IAAIC,EACf,WAAY,IAAIA,EAChB,UAAW,IAAIA,CAChB,CACD,EAEA,MAAM,KAAKC,GAAU,EAErB,cAAiBC,KAAU,KAAK,WAAW,KAAK,EAC/C,KAAK,KAAKA,CAAM,EAEjB,OAAO,KAAK,cACb,CAED,CAEA,KAAMD,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,MAAO,CAED,KAAK,MAAM,WACf,KAAK,OAAO,EAEZ,KAAK,WAAW,SAAS,KAAKE,EAAuB,EAGvD,CAEAA,GAA2BC,GAAuC,CACjE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SAAU,CACd,IAAIN,EAAQ,KAAMM,EAAK,YAAY,EACnC,KACD,CAEA,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAEA,KAAKF,EAAgB,CACpB,IAAIJ,EAAQ,KAAMI,CAAM,CAEzB,CAEAG,GAASC,EAAcC,EAAsB,CAC5CA,EAAY,CAAED,EAAK,GAAGC,CAAU,EAEhC,QAAWC,KAAYF,EAAI,UAAW,CACrC,KAAKD,GAASG,EAAUD,CAAS,EACjC,QAAWE,KAAYF,EACtBC,EAAS,UAAU,IAAIC,CAAQ,CACjC,CAED,CAEA,OAAoB,CAAC,EAErB,QAAS,CAER,IAAMC,EAAQ,CAAE,GAAG,KAAK,OAAO,CAAE,EAC3BC,EAAS,CAAC,EAEhB,QAAWL,KAAOI,EAAO,CACxBJ,EAAI,UAAU,MAAM,EACpBA,EAAI,WAAW,MAAM,EACrBA,EAAI,UAAU,MAAM,EAEpB,QAAWM,KAAWN,EAAI,SAAU,CACnC,IAAME,EAAW,KAAK,IAAII,CAAO,EACjC,GAAIJ,EACHF,EAAI,UAAU,IAAIE,CAAQ,MACtB,CACJ,IAAMK,EAAY,KAAK,MAAM,IAAID,CAAO,EACpCC,GACHP,EAAI,WAAW,IAAIO,CAAS,CAC9B,CACD,CAEI,CAACP,EAAI,UAAU,MAAQA,EAAI,KAC9BK,EAAO,KAAKL,CAAG,CACjB,CAEA,QAAWA,KAAOI,EACZA,EAAM,KAAKI,GAAcA,EAAW,UAAU,IAAIR,CAAG,CAAC,GAC1D,KAAKD,GAASC,EAAK,CAAC,CAAC,EAEvBK,EAAO,KAAK,KAAKI,EAAS,EAC1B,QAAWT,KAAOI,EACjBM,GAAKV,EAAI,UAAW,KAAKS,EAAS,EAEnC,QAAS,EAAI,EAAG,EAAIJ,EAAO,OAAQ,IAAK,CACvC,IAAML,EAAMK,EAAO,CAAC,EACpB,QAAWF,IAAY,CAAE,GAAGH,EAAI,SAAU,EAAE,QAAQ,EACnD,GAAIG,EAAS,UAAU,IAAIH,CAAG,EAAG,CAChC,IAAMW,EAAgBN,EAAO,QAAQF,CAAQ,EACzC,CAACQ,IACJN,EAAO,OAAOM,EAAe,CAAC,EAC9B,KAEDN,EAAO,OAAO,EAAI,EAAG,EAAGF,CAAQ,CACjC,CACF,CACA,QAASS,EAAI,EAAG,CAAE,OAAAC,CAAO,EAAIR,EAAQO,EAAIC,GACxCR,EAAOO,CAAC,EAAE,GAAKA,IAEhB,KAAK,OAASP,EAEV,KAAK,MAAM,UACd,KAAK,MAAM,OAAO,CAEpB,CAEAI,GAAUK,EAAYC,EAAY,CACjC,OACEA,EAAE,UAAU,KAAOD,EAAE,UAAU,OAC/BA,EAAE,MAAQC,EAAE,MACX,EACAD,EAAE,MAAQC,EAAE,MACX,GACA,EAGL,CAEA,MAAM,OAAO,CAAE,MAAAC,EAAO,KAAAC,EAAM,GAAGC,CAAU,EAAW,CAEnD,IAAMC,EAAMC,GAAkB,EAE9B,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAD,EACA,MAAOH,GAAS,GAChB,KAAMC,GAAQ,GACd,KAAM,CAAC,EACP,GAAG3B,EAAY4B,EAAW,CAAE,KAAM,CAAC,EACnC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMC,CACR,CAEA,MAAM,UAAUA,EAAaE,EAA4CC,EAAmB,CAC3F,IAAMtB,EAAM,KAAK,IAAImB,CAAG,EAExB,OAAKnB,GAGDqB,EAAQ,SACXA,EAAQ,OACP,KAAK,MAAM,QACVE,GACCD,EACCE,EAAQxB,EAAI,SAAUsB,EAAO,QAAQ,EACrC,CAAC,EACFE,EAAQH,EAAQ,OAAQ,CAAEF,EAAK,GAAGM,GAAKzB,EAAI,SAAS,CAAE,CAAC,CACxD,CACD,GAEF,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAmB,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,EAEnD,IAfC,EAgBT,CAEA,UAAUrB,EAAuB,CAChC,IAAMmB,EAAM,OAAOnB,GAAO,SAAWA,EAAMA,EAAI,IAE/C,OAAO,KAAK,WAAW,UAAU,CAChC,CAAE,WAAY,CAAE,OAAQ,CAAE,OAAQmB,CAAI,EAAG,OAAQ,CAAE,SAAU,CAAE,OAAQ,CAAEA,CAAI,CAAE,CAAE,CAAE,CAAE,EACrF,CAAE,UAAW,CAAE,OAAQ,CAAE,IAAAA,CAAI,CAAE,CAAE,CAClC,CAAC,CACF,CAEA,WAAa,IAAI,IAEjB,gBAAkB,IAAI,IAEtB,MAAM,QAAQO,EAAgB,CAC7B,IAAMC,EAAO,KAAK,WAAW,IAAID,CAAM,GAAK,KACxCC,GACH,KAAK,WAAW,OAAOD,CAAM,EAE9B,QAAWE,KAAW,KAAK,gBAC1B,MAAMA,EAAQF,EAAQC,CAAI,CAE5B,CAED,EGpTA,OAAS,eAAAE,OAAmB,cAC5B,OAAS,eAAAC,GAAa,aAAAC,OAAiB,YAEvC,OAGC,qBAAAC,OAEM,YCJA,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,OACA,gBACA,WACA,OACA,YACA,cACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,UAAU,MAC5B,EACA,KAAM,CACL,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,UAAW,CACV,SAAU,SACV,UAAW,IACZ,EACA,cAAe,CACd,SAAU,SACV,QAASA,EAAQ,GAAG,MACrB,EACA,SAAU,CACT,SAAU,MACX,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,EACA,YAAa,CACZ,SAAU,QACX,EACA,UAAW,CACV,SAAU,MACX,CACD,CAED,EC3CO,IAAMC,EAAN,KAA0C,CAChD,YAAYC,EAAwBC,EAAwB,CAC3D,IAAMC,EAAOF,EAAS,MAAM,IAAIC,EAAW,IAAI,EAE3CC,GACH,KAAKC,GAAYH,EAEjB,KAAK,IAAMC,EAAW,IACtB,KAAKE,GAAU,IAAI,KAAK,IAAK,IAAI,EAEjC,KAAK,KAAOD,EACZ,KAAK,KAAK,SAAS,IAAI,IAAI,EAE3B,KAAKC,GAAU,MAAM,YAAY,IAAI,KAAK,IAAK,KAAK,IAAI,EAExD,KAAK,OAAOF,CAAU,GAEjBD,EAAS,WAAW,UAAU,CAAE,IAAKC,EAAW,GAAI,CAAC,CAE5D,CAEA,IACA,KACA,SAAW,GAEX,UACA,cACA,UACA,YACA,UAEAE,GAEA,OAAO,CAAE,IAAAC,EAAK,KAAAF,EAAM,SAAAG,EAAU,GAAGC,CAAU,EAAwB,CAE9DD,IAAa,QAAa,KAAK,WAAaA,IAC/C,KAAK,SAAWA,EAEZ,KAAKF,GAAU,MAAM,UAAY,KAAK,KAAK,WAAa,KAAK,UAC3D,KAAK,KAAK,wBAAwB,GAGzC,OAAO,OAAO,KAAMG,CAAS,CAE9B,CAEA,QAAQ,CAAE,IAAAF,EAAK,KAAAF,EAAM,GAAGK,CAAQ,EAAwB,CAEvD,IAAMC,EAAK,KAAK,IAAI,EAEpB,OAAAD,EAAQ,YAAcC,EACtBD,EAAQ,UAAY,IAAI,KAAKC,EAAM,KAAKL,GAAU,WAAW,mBAAqB,GAAK,EAEvF,KAAK,OAAOI,CAAO,EAEZ,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAChF,CAEA,MAAM,QAAS,CAEd,GAAI,CAAC,KAAK,SAAU,CACnB,IAAMA,EAAU,CAAE,SAAU,EAAK,EAEjC,KAAK,OAAOA,CAAO,EAEnB,MAAM,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAC/E,CAED,CAEA,MAAM,SAAU,CAEf,GAAI,KAAK,SAAU,CAClB,IAAMA,EAAU,CAAE,SAAU,EAAM,EAElC,KAAK,OAAOA,CAAO,EAEnB,MAAM,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAC/E,CAED,CAEA,QAAS,CAER,KAAKJ,GAAU,OAAO,KAAK,GAAG,EAC9B,KAAK,KAAK,SAAS,OAAO,IAAI,EAC9B,KAAKA,GAAU,MAAM,YAAY,OAAO,KAAK,GAAG,EAEhD,KAAKA,GAAU,MAAM,KAAK,iBAAkB,IAAI,EAE5C,KAAK,UACR,KAAK,KAAK,eAAe,CAE3B,CAED,EFrFA,IAAMM,EAAqB,KAAO,GAAK,EAEjCC,GAA6B,CAClC,CAAE,CAAE,KAAM,CAAE,CAAE,EACd,CAAE,CAAE,UAAW,CAAE,EAAG,CAAE,mBAAAD,CAAmB,CAAE,CAC5C,EAGaE,EAAN,cAAmD,GAAyB,CAClF,YAAYC,EAAkBC,EAA2B,CAAC,EAAG,CAC5D,MAAM,EAEN,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YAEzB,KAAK,YAAcC,CACpB,CAEA,MACA,YAEQ,YAER,WAIA,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAK,MAAM,SAAU,CACzB,GAAM,CACL,OAAQC,EACR,QAASC,EACT,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,GAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,GAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAsB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAmB,WAAY,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EACtF,CACC,mBAAAX,CACD,CACD,EAEA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGC,GAAS,GAAGK,GAAiB,CAAC,CAAE,CAAC,EAE1E,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAc,KAAK,WAAW,KAAK,EACnD,KAAK,KAAKA,CAAU,EAErB,KAAK,WAAW,SAAS,KAAKC,EAAuB,EAErD,OAAO,KAAK,WACb,CAED,CAEA,KAAMF,IAAY,CAEjB,MAAM,KAAK,WAAW,UAAU,CAC/B,CAAE,WAAY,CAAE,OAAQ,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,OAAQ,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAE,CAAE,EACvF,CAAE,WAAY,CAAE,OAAQ,CAAE,SAAU,EAAK,EAAG,OAAQ,CAAE,KAAM,CAAE,SAAU,EAAM,CAAE,CAAE,CAAE,CACrF,CAAC,CAEF,CAEAE,GAA2BC,GAA2C,CACrE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GACjC,IAAIC,EAAY,KAAMD,EAAK,YAAY,EAEnC,KAAK,MAAM,IAAIA,EAAK,aAAa,IAAI,GAAG,aAAa,EAE1D,MAED,IAAK,UACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EACxD,MAED,IAAK,SACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EAC5E,MAED,IAAK,SACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CACzC,CAED,EAEA,KAAM,CACL,MAAO,GAAGE,GAAkB,CAAC,IAAIC,GAAY,EAAE,EAAE,SAAS,WAAW,CAAC,EACvE,CAEA,KAAKL,EAAwB,CAC5B,IAAIG,EAAY,KAAMH,CAAU,CAEjC,CAEA,MAAM,OAAOM,EAAgBC,EAA4B,CAExD,IAAMC,EAAK,KAAK,IAAI,EAEdR,EAAyB,CAC9B,UAAW,GACX,cAAe,YACf,SAAU,GACV,GAAGO,EACH,IAAK,KAAK,IAAI,EACd,KAAMD,EAAK,IACX,KAAM,CAAC,EACP,UAAWE,EACX,YAAaA,EACb,UAAW,IAAI,KAAKA,EAAMrB,EAAqB,GAAK,CACrD,EAGMsB,EAAU,IAAIN,EAAY,KAAMH,CAAU,EAEhD,aAAM,KAAK,WAAW,UAAUA,CAAU,EAEnCS,CACR,CAEA,MAAM,eAAeC,EAAa,CACjC,GAAM,CAAE,aAAAC,CAAa,EAAI,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAD,CAAI,CAAC,EAEhE,MAAO,EAAQC,CAChB,CAED,EGhKA,OAAS,UAAAC,OAAsC,YCIxC,IAAMC,EAA2B,CACvC,SAAU,CACT,MACA,OACA,OACA,KACA,OACA,MACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,KAAM,CACL,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,QACX,EACA,GAAI,CACH,SAAU,SACV,UAAW,EACZ,EACA,KAAM,CACL,SAAU,SACX,EACA,KAAM,CACL,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,ED5BO,IAAMC,EAAN,KAAc,CACpB,YAAYC,EAAmBC,EAA0B,CAAC,EAAG,CAC5D,KAAKC,GAASF,EACd,KAAK,YAAcA,EAAM,YAEzB,KAAK,YAAcC,CAEpB,CAES,eAAiB,CAAE,YAAa,EAChC,SAAW,KAAO,IAE3BC,GACA,YAEA,WAEQ,YAER,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAKA,GAAO,SAAU,CAC1B,GAAM,CACL,WAAYC,CACb,EAAI,KAAK,YAET,KAAK,WAAa,MAAM,KAAK,YAAY,OAAkB,gBAAiB,CAAE,GAAGA,EAAmB,OAAAC,CAAO,CAAC,EAE5G,MAAM,KAAKC,GAAU,CACtB,CAED,CAEA,KAAMA,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,MAAM,KAAKC,EAAaC,EAAcC,EAAc,CACnD,IAAMC,EAAaC,GAAO,iBAAiBF,EAAK,MAAMA,EAAK,QAAQ,GAAG,CAAC,CAAC,EAElEG,EAAK,KAAK,IAAI,EAAE,SAAS,EAAE,EAEjC,MAAM,QAAQ,IAAI,CACjB,KAAK,WAAW,WAAW,CAAE,IAAAL,CAAI,EAAG,CACnC,KAAAC,EACA,KAAME,EAAW,OAAO,EACxB,GAAAE,EACA,KAAMF,EACN,KAAM,CAAC,CACR,EAAG,CAAE,OAAQ,EAAK,CAAC,EACnB,KAAKP,GAAO,WAAW,UAAU,CAAE,IAAAI,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQK,CAAG,CAAE,CAAC,CACnE,CAAC,CAEF,CAEA,MAAM,aAAaL,EAAa,CAE/B,GAAM,CAAE,CAAE,aAAAM,CAAa,CAAE,EAAI,MAAM,QAAQ,IAAI,CAC9C,KAAK,WAAW,UAAU,CAAE,IAAAN,CAAI,CAAC,EACjC,KAAKJ,GAAO,WAAW,UAAU,CAAE,IAAAI,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQ,IAAK,CAAE,CAAC,CACrE,CAAC,EAED,MAAO,EAAQM,CAChB,CAED,EExEO,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,QACA,WACA,QACA,OACA,MACA,MACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,MAAM,MACxB,EACA,SAAU,CACT,SAAU,SACV,QAASA,EAAQ,OAAO,MACzB,EACA,MAAO,CACN,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,KAAK,MACvB,EACA,gBAAiB,EAClB,EACA,KAAM,CACL,SAAU,SACV,SAAU,CACT,QACA,SACA,MACD,EACA,WAAY,CACX,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,OAAQ,CACP,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,SACV,UAAW,GACZ,CACD,EACA,qBAAsB,EACvB,EACA,IAAK,CACJ,MAAO,CACN,CACC,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,CACC,SAAU,MACX,CACD,CACD,EACA,IAAK,CACJ,SAAU,SACV,UAAW,GACZ,EACA,OAAQ,CACP,MAAO,CACN,CACC,SAAU,SACV,UAAW,EACZ,EACA,CACC,SAAU,MACX,CACD,CACD,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EC/FA,OACC,QAAAC,GACA,YAAAC,GACA,SAAAC,GACA,UAAAC,GACA,aAAAC,OACM,YAUP,IAAMC,EAAiB,IAAI,QACrBC,EAAuB,IAAI,QAE3BC,GAAY,QAAQ,IAAI,mBAAqB,GAGtCC,EAAN,KAAuC,CAC7C,YAAYC,EAAkBC,EAAkB,CAC/C,KAAKC,GAASF,EAEd,KAAK,IAAMC,EAAQ,IACnBD,EAAM,IAAI,KAAK,IAAK,IAAI,EAEnB,KAAK,OAAOC,CAAO,EAEpBD,EAAM,UACTA,EAAM,KAAK,cAAe,IAAI,CAEhC,CAEA,IACA,MACA,KAAO,CACN,MAAO,GACP,OAAQ,GACR,KAAM,EACP,EAEA,SAAW,GACX,aAAe,GACf,IACA,IAAc,GACd,OAAwB,KACxB,UAA2B,KAE3BE,GAEA,OAAS,GACT,OAEA,MAAQ,IAAI,IACZ,SAAuB,CAAC,EACxB,WAAuB,CAAC,EACxB,WAAa,IAAI,IACjB,aAAyB,CAAC,EAC1B,UAA2B,CAAC,EAE5B,UAAY,IAAI,IAChB,WAAa,IAAI,IACjB,OAAS,IAAI,IAEb,SAAqB,CAAC,EACtB,cAA0B,CAAC,EAE3B,SAAW,IAAI,IAEf,SAAW,GAEX,OAAO,CAAE,IAAAC,EAAK,KAAAC,EAAM,MAAAC,EAAO,MAAOC,EAAY,IAAKC,EAAO,OAAAC,EAAQ,GAAGC,CAAU,EAAqB,CAEnG,OAAO,OAAO,KAAMA,CAAS,EAE7B,IAAIC,EACAL,GAAS,KAAK,QAAUA,IAC3B,KAAKH,GAAO,QAAQ,OAAO,KAAK,KAAK,EACrC,KAAK,MAAQG,EACb,KAAKH,GAAO,QAAQ,IAAIG,EAAO,IAAI,EACnCK,EAAiB,IAGlB,IAAIC,EACAC,EACAR,IAAS,KAAK,KAAK,QAAUA,EAAK,OAAS,KAAK,KAAK,SAAWA,EAAK,QAAU,KAAK,KAAK,OAASA,EAAK,QAC1GQ,EAAoB,KAAK,KAAK,OAASR,EAAK,KAC5C,KAAK,KAAO,CACX,MAAOA,EAAK,OAAS,GACrB,OAAQA,EAAK,QAAU,GACvB,KAAMA,EAAK,MAAQ,EACpB,EACA,KAAK,WAAcA,EAAK,QAAQ,CAAC,GAAK,KAAOA,EAAK,OAAO,CAAC,GAAK,KAAQ,KAAK,MAAM,CAAC,GAAG,YAAY,EAClGO,EAAgB,KAGbD,GAAkBC,KACrB,KAAK,aAAe,GAAG,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,GAAK,KAAK,KAAK,QAAU,KAAK,OAE/F,IAAIE,EACJ,GAAIP,EAAY,CACf,KAAK,WAAaA,EAElB,IAAMQ,EAAW,KAAK,WAAW,KAAK,GAAG,EAErCA,IAAalB,EAAe,IAAI,IAAI,IACvCA,EAAe,IAAI,KAAMkB,CAAQ,EAE7B,KAAKZ,GAAO,WACf,KAAK,YAAY,EACjBW,EAAiB,IAGpB,CAEA,IAAIE,EACAR,IAAU,QAAa,KAAK,KAAK,MAAQA,IAC5C,KAAK,KAAK,MAAM,OAAO,IAAI,EAC3B,KAAK,IAAMA,GAAS,KAAKL,GAAO,KAAK,IAAIK,CAAK,GAAK,KAAKL,GAAO,KAAK,KACpE,KAAK,IAAI,MAAM,IAAI,IAAI,EACvBa,EAAe,IAGZP,IAAW,QAAa,KAAK,SAAWA,IAC3C,KAAK,OAASA,EACd,KAAK,UAAYA,GAAU,GAAGV,EAAS,YAAY,KAAK,GAAG,IAAIU,CAAM,SAGlE,KAAKN,GAAO,WACXW,GAAkBE,GACrB,KAAK,kBAAkB,EAEnBH,IACH,KAAKV,GAAO,eAAiB,IAE9B,KAAKA,GAAO,OAAO,GACTU,GACV,KAAKV,GAAO,KAAK,EAEpB,CAEA,aAAc,CAEb,KAAK,SAAW,CAAC,EACjB,KAAK,MAAM,MAAM,EACjB,KAAK,WAAW,MAAM,EACtBT,GAAM,KAAK,SAAS,EAEpB,QAAWuB,KAAU,KAAK,WAAY,CACrC,IAAMC,EAAO,KAAKf,GAAO,MAAM,IAAIc,CAAM,EACzC,GAAIC,EAAM,CAET,KAAK,SAAS,KAAKA,CAAI,EACvB,KAAK,MAAM,IAAIA,CAAI,EACnB,QAAWC,KAAgBD,EAAK,SAC/B,KAAK,MAAM,IAAIC,CAAY,EAC3B,KAAK,WAAW,IAAIA,CAAY,EAGjC,KAAK,aAAe3B,GAAK,KAAK,UAAU,EAExC,KAAKW,GAAO,UAAU,MAAM,KAAK,UAA+Be,EAAK,SAA6B,CACnG,CACD,CAEI,KAAK,MAAM,IAAI,KAAKf,GAAO,MAAM,IAAI,IACxC,KAAK,OAAS,IAEV,KAAK,aAAa,CAExB,CAEA,mBAAoB,CAEnB,KAAK,UAAU,MAAM,EACrB,KAAK,WAAW,MAAM,EACtB,KAAK,OAAO,MAAM,EAClB,IAAMiB,EAAW,IAAI,IAErB,QAAWC,KAAO,KAAKlB,GAAO,KAAK,OAClC,IAAKkB,EAAI,WAAW,IAAI,IAAI,GAAK,KAAK,SAAW,CAAC,KAAK,UAAU,IAAIA,CAAG,EAAG,CAC1E,KAAK,UAAU,IAAIA,CAAG,EACtB,KAAK,OAAO,IAAIA,CAAG,EACnBD,EAAS,IAAIC,EAAI,GAAG,EACpB,QAAWC,KAAYD,EAAI,UAC1B,KAAK,UAAU,IAAIC,CAAQ,EAC3B,KAAK,OAAO,IAAIA,CAAQ,EACxBF,EAAS,IAAIE,EAAS,GAAG,CAE3B,CAED,QAAWD,KAAO,IAAI,IAAI,CAAE,KAAK,IAAK,GAAG,KAAK,UAAW,KAAKlB,GAAO,KAAK,IAAK,CAAC,EAC/E,QAAWoB,KAAQF,EAAI,MAClBE,IAAS,OAAS5B,GAAO,KAAK,WAAY4B,EAAK,QAAQ,GAAK,CAACA,EAAK,SAAS,UAC9E,KAAK,WAAW,IAAIA,CAAI,EACxB,KAAK,OAAO,IAAIA,CAAI,EACpBH,EAAS,IAAIG,EAAK,GAAG,GAGxB,KAAK,SAAW,CAAE,GAAGH,CAAS,EAE9B,IAAMI,EAAmB,CAAC,EAC1B,GAAI,KAAK,IAAI,IAAK,CACjBA,EAAiB,KAAK,KAAK,IAAI,GAAG,EAClC,QAAWF,KAAY,KAAK,IAAI,UAC1B,KAAK,UAAU,IAAIA,CAAQ,GAC/BE,EAAiB,KAAKF,EAAS,GAAG,CACrC,CAEA,KAAK,cAAgB,CAAE,GAAGE,EAAkB,KAAK,IAAK,GAAGJ,CAAS,EAGlE,IAAML,EAAW,CAChB,KAAK,cAAc,KAAK,GAAG,EAC3B,KAAK,WAAW,KAAK,GAAG,EACxB,KAAK,UAAU,KAAK,SAAS,EAC7B,KAAK,aAAa,KAAK,GAAG,CAC3B,EAAE,KAAK;AAAA,CAAI,EAEPA,IAAajB,EAAqB,IAAI,IAAI,IAC7CA,EAAqB,IAAI,KAAMiB,CAAQ,EAEnC,KAAKZ,GAAO,UACf,KAAKA,GAAO,KAAK,0BAA2B,IAAI,EAGnD,CAEA,cAAe,CAEd,IAAMsB,EAAgB,KAAK,UAAU,OAAO,eAAiB,EAE7D,GAAI,KAAK,SAAS,KAAOA,EACxB,OAAO,KAAKtB,GAAO,SAAS,WAAW,WAAW,CACjD,IAAK,CACJ,IAAKX,GACJ,CAAE,GAAG,KAAK,QAAS,EACjB,KAAK,CAACkC,EAAGC,IAAMD,EAAE,UAAU,QAAQ,EAAIC,EAAE,UAAU,QAAQ,CAAC,EAC5D,MAAM,EAAG,KAAK,SAAS,KAAOF,CAAa,CAC9C,CACD,CACD,CAAC,CAEH,CAEA,gBAAiB,CAEhB,IAAIG,EAAW,GAEf,QAAWC,KAAW,KAAK,SAC1B,GAAIA,EAAQ,SAAU,CACrBD,EAAW,GACX,KACD,CAEG,KAAK,WAAaA,IACrB,KAAK,SAAWA,EAChB,KAAKzB,GAAO,KAAK,iBAAkB,IAAI,EAGzC,CAEA,wBAA0BV,GAAS,IAAM,KAAK,eAAe,EAAG,GAAG,EAEnE,MAAM,QAAS,CAEd,KAAK,IAAI,MAAM,OAAO,IAAI,EAE1B,KAAKU,GAAO,OAAO,KAAK,GAAG,EAC3B,KAAKA,GAAO,QAAQ,OAAO,KAAK,KAAK,EACrCP,GAAU,KAAKO,GAAO,OAAQ,IAAI,EAElCN,EAAe,OAAO,IAAI,EAC1BC,EAAqB,OAAO,IAAI,EAEhC,MAAM,KAAKK,GAAO,QAAQ,KAAK,GAAG,EAElC,KAAKA,GAAO,OAAO,CAEpB,CAED,EV3PA,IAAM2B,GAA6B,CAClC,CAAE,CAAE,MAAO,CAAE,EAAG,CAAE,OAAQ,EAAK,CAAE,EACjC,CAAE,CAAE,IAAK,CAAE,CAAE,CACd,EAGaC,EAAN,MAAMC,UAA0C,GAAsB,CAC5E,YAAYC,EAA0BC,EAAsB,CAC3D,MAAM,EAEN,IAAMC,EAAe,IAAIC,GAIzB,KAAKC,GAAgBF,EACrB,KAAK,QAAUA,EAAa,QAC5B,KAAK,aAAeA,EAAa,aACjC,KAAK,KAAOA,EAAa,KACzB,KAAK,GAAKA,EAAa,GACvB,KAAK,KAAOA,EAAa,KACzB,KAAK,YAAcA,EAAa,YAChC,KAAK,IAAMA,EAAa,IACxB,KAAK,eAAiBA,EAAa,eAEnC,KAAK,YAAcF,EAEnB,KAAK,UAAY,IAAIK,EAAiBJ,EAAQ,SAAS,EAEvD,KAAK,YAAcA,EAEd,KAAK,KAAK,CAEhB,CAEAG,GACA,QACA,aACA,KAIA,GAA8BE,EAAUC,EAAoCC,EAAe,CAC1F,YAAKJ,GAAc,GAAGE,EAAOC,EAAUC,CAAO,EAEvC,IACR,CAEA,KACA,YACA,IACA,eAEQ,YAER,YACA,UAEA,WACA,MACA,SACA,KACA,QAEA,QAAU,IAAI,IACd,YAAc,IAAI,IAClB,OAAqB,CAAC,EAEtB,eAAiB,GAEjBC,GAAe,GAEf,MAAM,SAAU,CAEf,GAAI,CAAC,KAAKA,GAAc,CACvB,KAAKA,GAAe,GAEpB,GAAM,CACL,QAASC,EACT,OAAQC,EACR,YAAaC,EACb,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,GAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,GAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAuB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC9F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,MAAM,KAAK,YAAY,OAAgB,QAAS,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EAElG,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGpB,GAAS,GAAGa,GAAiB,CAAC,CAAE,CAAC,EAErE,MAAM,KAAK,WAAW,eAAe,CAAE,MAAO,MAAO,CAAC,GAC1D,MAAM,KAAK,OAAO,CACjB,MAAO,QAAQ,IAAI,mBAAqB,oBACxC,SAAU,QAAQ,IAAI,sBAAwB,qBAC9C,KAAM,CAAE,MAAO,MAAO,EACtB,IAAK,OACL,GAAGE,EACH,MAAO,CAAE,MAAO,EAChB,IAAK,KACL,KAAM,CAAC,CACR,CAAC,EAEF,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAW,KAAK,WAAW,KAAK,EAChD,KAAK,KAAKA,CAAO,CACnB,CAED,CAEA,KAAMD,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,SAAW,GAEX,MAAgB,MAAO,CAEtB,GAAI,CAAC,KAAK,SAAU,CACnB,GAAM,CACL,MAAOE,EACP,KAAMC,EACN,SAAUC,EACV,QAASC,EACT,WAAY,CAAE,MAAAC,CAAM,EAAI,CAAC,CAC1B,EAAI,KAAK,YAET,KAAK,MAAQ,IAAIC,EAAU,KAAM,CAAE,GAAGL,EAAc,WAAY,CAAE,MAAAI,EAAO,GAAGJ,GAAc,UAAW,CAAE,CAAC,EACxG,KAAK,KAAO,IAAIM,EAAS,KAAM,CAAE,GAAGL,EAAa,WAAY,CAAE,MAAAG,EAAO,GAAGH,GAAa,UAAW,CAAE,CAAC,EACpG,KAAK,SAAW,IAAIM,EAAa,KAAM,CAAE,GAAGL,EAAiB,WAAY,CAAE,MAAAE,EAAO,GAAGF,GAAiB,UAAW,CAAE,CAAC,EACpH,KAAK,QAAU,IAAIM,EAAQ,KAAM,CAAE,GAAGL,EAAgB,WAAY,CAAE,MAAAC,EAAO,GAAGD,GAAgB,UAAW,CAAE,CAAC,EAE5G,MAAM,KAAK,MAAM,KAAK,EACtB,MAAM,KAAK,KAAK,QAAQ,EACxB,MAAM,KAAK,QAAQ,EACnB,KAAK,KAAK,KAAK,EACf,MAAM,KAAK,QAAQ,KAAK,EAExB,KAAK,OAAO,EAAI,EAEhB,KAAK,WAAW,SAAS,KAAKM,EAAuB,EAErD,MAAM,KAAK,SAAS,KAAK,EAEzB,OAAO,KAAK,YAEZ,KAAK,SAAW,GAEhB,KAAKC,GAAa,QAAQ,IAAI,CAC/B,CAED,CAEAD,GAA2BE,GAAwC,CAClE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SACJ,IAAIC,EAAS,KAAMD,EAAK,YAAY,EACpC,MAED,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAGA,KAAKZ,EAAkB,CACtB,IAAIa,EAAS,KAAMb,CAAO,CAE3B,CAEA,MAAO,CAEN,KAAK,eAAiB,GAEtB,KAAK,OAAS,CAAE,GAAG,KAAK,OAAO,CAAE,EAAE,KAAK,CAACc,EAAGC,IAAMD,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,EAAID,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,GAAK,CAAC,CAErH,CAEA,OAAOC,EAA6B,CACnC,GAAIA,EACH,QAAWC,KAAQ,KAAK,OAAO,EAC9BA,EAAK,YAAY,EAEnB,QAAWA,KAAQ,KAAK,OAAO,EAC9BA,EAAK,kBAAkB,EAEpB,KAAK,gBACR,KAAK,KAAK,CAEZ,CAEAN,GAAe,IAAIO,GAEnB,WAAY,CACX,OAAO,KAAKP,EACb,CAEA,MAAM,OAAO,CAAE,MAAAQ,EAAO,SAAAC,EAAU,MAAAC,EAAO,KAAAC,EAAM,IAAAC,EAAK,IAAAC,EAAK,GAAGC,CAAU,EAAY,CAC/E,GAAI,KAAK,QAAQ,IAAIN,CAAK,EACzB,MAAM,IAAI,MAAM,aAAa,EAE9B,IAAMO,EAAMC,GAAkB,EAE9B,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAD,EACA,MAAAP,EACA,SAAU,MAAMS,GAAKR,CAAQ,EAC7B,MAAO,KAAK,SAAW,KAAK,MAAM,WAAWC,CAAK,EAAIA,EACtD,KAAM,CACL,MAAOC,EAAK,OAAS,GACrB,OAAQA,EAAK,QAAU,GACvB,KAAMA,EAAK,MAAQ,EACpB,EACA,IAAKC,GAAO,KACZ,IAAKC,GAAO,GACZ,KAAM,CAAC,EACP,GAAG3B,GAAY4B,EAAW,CAAE,KAAM,CAAC,EACnC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMC,CACR,CAEA,MAAM,WAAWA,EAAaG,EAA6CC,EAAmB,CAC7F,IAAMb,EAAO,KAAK,IAAIS,CAAG,EAEzB,OAAKT,GAGDY,EAAQ,QACXA,EAAQ,MACPZ,EAAK,OACJ,CAAE,MAAO,EACT,KAAK,MAAM,WACVa,EACCC,GAAQd,EAAK,WAAYa,EAAO,YAAY,EAAE,OAAOD,EAAQ,KAAK,EAClEA,EAAQ,KACV,GAEH,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAH,CAAI,EAAG,CAAE,KAAMG,CAAQ,CAAC,EAEnD,IAdC,EAeT,CAEA,MAAM,eAAeH,EAAaM,EAAqB,CACtD,GAAI,CAAC,KAAK,IAAIN,CAAG,EAChB,MAAM,IAAI,MAAM,cAAc,EAE/B,GAAI,CAACM,EACJ,MAAM,IAAI,MAAM,2BAA2B,EAE5C,MAAM,QAAQ,IAAI,CACjB,KAAK,WAAW,UAAU,CAAE,IAAAN,CAAI,EAAG,CAAE,KAAM,CAAE,SAAU,MAAME,GAAKI,CAAW,CAAE,CAAE,CAAC,EAClF,KAAK,SAAS,WAAW,WAAW,CAAE,KAAMN,CAAI,CAAC,CAClD,CAAC,CAEF,CAEA,MAAM,MAAMP,EAAeC,EAAkBa,EAAmC,CAC/E,IAAMhB,EAAO,KAAK,QAAQ,IAAIE,CAAK,EAEnC,GAAI,CAACF,EACJ,MAAM,IAAI,MAAM,cAAc,EAE/B,GAAI,CAAC,MAAMiB,GAAOjB,EAAK,SAAUG,CAAQ,EACxC,MAAM,IAAI,MAAM,mBAAmB,EAEpC,GAAI,CAACH,EAAK,UAAU,MACnB,MAAM,IAAI,MAAM,sBAAsB,EAEvC,OAAO,KAAK,SAAS,OAAOA,EAAMgB,CAAY,CAC/C,CAEA,OAAOE,EAAsB,CAC5B,OAAAA,EAAQ,OAAO,EAER,KAAK,SAAS,WAAW,UAAU,CAAE,IAAKA,EAAQ,GAAI,CAAC,CAC/D,CAEAC,GAAkBtB,EAAuBC,EAAuB,CAC/D,OACED,aAAaD,GAAQE,aAAaF,EACjCC,EAAE,KAAK,MAAQC,EAAE,KAAK,KACtBD,EAAE,KAAK,KAAOC,EAAE,KAAK,KACpB,EACAD,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,GAAK,EACjC,CAACD,EAAE,KAAK,MAAQ,CAACC,EAAE,KAAK,KACxBD,EAAE,aAAeC,EAAE,aAClB,EACAD,EAAE,aAAeC,EAAE,aAAe,GAAK,EACxCD,EAAE,KAAK,KAAO,GAAK,EACpBA,aAAauB,GAAOtB,aAAasB,EACjCvB,EAAE,MAAQC,EAAE,MACX,EACAD,EAAE,MAAQC,EAAE,MAAQ,GAAK,EAC1BD,aAAauB,EAAM,GAAK,CAE5B,CAEA,QAAQC,EAAe,CACtB,OAAOC,GACND,EACE,IAAIZ,GAAO,KAAK,IAAIA,CAAG,GAAK,KAAK,KAAK,IAAIA,CAAG,CAAC,EAC9C,OAAO,OAAO,EACf,KAAK,KAAKU,EAAiB,CAAC,CAC/B,CAEA,WAAa,IAAI,IAEjB,gBAAkB,IAAI,IAEtB,MAAM,QAAQI,EAAgB,CAC7B,IAAMC,EAAO,KAAK,WAAW,IAAID,CAAM,GAAK,KACxCC,GACH,KAAK,WAAW,OAAOD,CAAM,EAE9B,QAAWE,KAAW,KAAK,gBAC1B,MAAMA,EAAQF,EAAQC,CAAI,CAE5B,CAEA,MAAM,WAAWf,EAAa,CAC7B,GAAM,CAAE,aAAAiB,CAAa,EAAI,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAjB,CAAI,CAAC,EAEhE,MAAO,EAAQiB,CAChB,CAGA,OAAO,KAAkC9D,EAA0BC,EAAuB,CAGzF,OAFc,IAAIF,EAAMC,EAAaC,CAAO,EAE/B,UAAU,CACxB,CAED",
-  "names": ["Err", "AbilityError", "longId", "payload", "add", "assignPath", "deletePath", "empty", "getPath", "intersection", "pick", "setPath", "isAbilityObject", "value", "isAbilityParamNumber", "isAbilityParamItems", "schemaParentMap", "AbilitiesMap", "abilitiesSchema", "subSchema", "#hierarchical", "parse", "schemas", "parent", "level", "schema", "longId", "subIds", "subId", "_id", "top", "paramId", "schemaOrLongId", "paramIdOrMax", "max", "ability", "paramSchema", "schemasOrIds", "a", "b", "schemaMaxMap", "resolve", "_schema", "parentSchema", "assignPath", "_max", "abilities", "subSchemas", "subAbilities", "i", "abilityParam", "value", "getPath", "setPath", "referenceValue", "isAbilityParamNumber", "isAbilityParamItems", "itemId", "intersection", "item", "adjustedAbilities", "adjustedAbility", "isAbilityObject", "pick", "empty", "target", "source", "targetAbility", "sourceAbility", "add", "deletePath", "Err", "RolesError", "stringOrArray", "payload", "deleteProps", "getAll", "intersection", "reAdd", "removeAll", "snapshots", "Role", "roles", "roleDoc", "#roles", "_id", "ownInvolveIds", "ownAbilities", "title", "restProps", "snapshot", "regexps", "basisSchema", "regexps", "indexes", "preventDirectDelete", "Roles", "users", "options", "rootProps", "initOptions", "Role", "customSchema", "customIndexes", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "roleDoc", "#handleCollectionChange", "next", "role", "involvedBy", "involvedRoleId", "involvedRole", "involvedByRole", "reAdd", "#sortRoles", "a", "b", "array", "anotherRole", "getAll", "sorted", "i", "involvedRoleIndex", "_o", "_id", "involves", "title", "description", "restProps", "roleId", "updates", "ids", "roles", "intersection", "cleanedUpIds", "abilityLongId", "set", "paramId", "value", "Err", "UnauthorizedError", "payload", "SubordinationError", "type", "ids", "PermissionError", "hash", "verify", "EventEmitter", "_ids", "deleteProps", "removeAll", "StatefulPromise", "without", "newObjectIdString", "_ids", "deleteProps", "EmptyArray", "EmptySet", "removeAll", "sort", "union", "without", "newObjectIdString", "snapshots", "Org", "orgs", "orgDoc", "_id", "title", "ownerIds", "restProps", "snapshot", "basisSchema", "regexps", "indexes", "preventDirectDelete", "Orgs", "users", "options", "#isPreinited", "customSchema", "customIndexes", "nullProps", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "Org", "EmptyArray", "EmptySet", "#maintain", "orgDoc", "#handleCollectionChange", "next", "#resolve", "org", "slaveOrgs", "ownerOrg", "slaveOrg", "array", "sorted", "ownerId", "ownerUser", "anotherOrg", "#sortOrgs", "sort", "slaveOrgIndex", "o", "length", "a", "b", "title", "note", "restProps", "_id", "newObjectIdString", "updates", "byUser", "union", "without", "_ids", "fromId", "toId", "handler", "randomBytes", "deleteProps", "removeAll", "newObjectIdString", "basisSchema", "regexps", "Session", "sessions", "sessionDoc", "user", "#sessions", "_id", "isOnline", "restProps", "updates", "ts", "expireAfterSeconds", "indexes", "Sessions", "users", "options", "customSchema", "customIndexes", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "sessionDoc", "#handleCollectionChange", "next", "Session", "newObjectIdString", "randomBytes", "user", "props", "ts", "session", "_id", "deletedCount", "Binary", "schema", "regexps", "Avatars", "users", "options", "#users", "collectionOptions", "schema", "#maintain", "_id", "type", "data", "binaryData", "Binary", "ts", "deletedCount", "basisSchema", "regexps", "_ids", "debounce", "empty", "hasAny", "removeOne", "rolesSnapshots", "permissionsSnapshots", "staticUrl", "User", "users", "userDoc", "#users", "_id", "name", "email", "ownRoleIds", "orgId", "avatar", "restProps", "isEmailUpdated", "isNameUpdated", "isLastNameUpdated", "isRolesUpdated", "snapshot", "isOrgUpdated", "roleId", "role", "involvedRole", "slaveIds", "org", "slaveOrg", "user", "permissiveOrgIds", "sessionsLimit", "a", "b", "isOnline", "session", "indexes", "Users", "_Users", "collections", "options", "eventEmitter", "EventEmitter", "#eventEmitter", "AbilitiesMap", "event", "callback", "context", "#isPreinited", "customIndexes", "customSchema", "initialRootProps", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "userDoc", "rolesOptions", "orgsOptions", "sessionsOptions", "avatarsOptions", "quiet", "Roles", "Orgs", "Sessions", "Avatars", "#handleCollectionChange", "#initPromise", "next", "User", "a", "b", "shouldUpdateRoles", "user", "StatefulPromise", "email", "password", "roles", "name", "org", "job", "restProps", "_id", "newObjectIdString", "hash", "updates", "byUser", "without", "newPassword", "sessionProps", "verify", "session", "#sortUsersAndOrgs", "Org", "ids", "_ids", "fromId", "toId", "handler", "deletedCount"]
+  "sourcesContent": ["import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class AbilityError extends Err {\n\tconstructor(payload?: Payload);\n\tconstructor(longId: string, payload?: Payload);\n\tconstructor(longId?: Payload | string, payload?: Payload) {\n\t\tif (typeof longId == \"object\") {\n\t\t\tpayload = longId;\n\t\t\tlongId = undefined;\n\t\t}\n\t\t\n\t\tsuper(\"User lacks ability\", \"lacksability\", {\n\t\t\t...longId && { ability: longId },\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"AbilityError\";\n\t\n}\n", "import {\n\tadd,\n\tassignPath,\n\tdeletePath,\n\tempty,\n\tgetPath,\n\tintersection,\n\tpick,\n\tsetPath\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema, AbilityParamSchema } from \"insite-common\";\nimport {\n\tisAbilityObject,\n\tisAbilityParamItems,\n\tisAbilityParamNumber,\n\ttype Ability,\n\ttype AbilityObject,\n\ttype AbilityParam,\n\ttype AbilityParamItems,\n\ttype AbilityParamNumber,\n\ttype AbilitySchema,\n\ttype GenericAbilities\n} from \"./types\";\n\n\nconst schemaParentMap = new Map<AbilitySchema, AbilitySchema | null>();\n\n\nexport class AbilitiesMap<AS extends AbilitiesSchema> extends Map<string, AbilitySchema> {\n\tconstructor(abilitiesSchema: AS) {\n\t\tsuper();\n\t\t\n\t\tfor (const subSchema of abilitiesSchema) {\n\t\t\tdelete subSchema.top;/* The first level is always top */\n\t\t\t\n\t\t\tthis.#hierarchical.push(subSchema as AbilitySchema);\n\t\t}\n\t\t\n\t\t(function parse(this: AbilitiesMap<AS>, schemas: AbilitiesSchema, parent: AbilitySchema | null, level: number) {\n\t\t\tfor (const schema of schemas as AbilitySchema[]) {\n\t\t\t\tschemaParentMap.set(schema, parent);\n\t\t\t\t\n\t\t\t\tschema.level = level;\n\t\t\t\t\n\t\t\t\tif (!parent || schema.top) {\n\t\t\t\t\tschema.longId = schema._id;\n\t\t\t\t\t\n\t\t\t\t\tif (this.has(schema._id))\n\t\t\t\t\t\tthrow new Error(`Top-level ability duplicate: ${schema._id}`);\n\t\t\t\t\t\n\t\t\t\t\tthis.set(schema._id, schema);\n\t\t\t\t} else\n\t\t\t\t\tschema.longId = parent ? `${parent.longId}.${schema._id}` : schema._id;\n\t\t\t\t\n\t\t\t\tif (schema.abilities)\n\t\t\t\t\tparse.call(this, schema.abilities, schema, level + 1);\n\t\t\t}\n\t\t\t\n\t\t}).call(this, abilitiesSchema, null, 0);\n\t\t\n\t}\n\t\n\t#hierarchical: AbilitySchema[] = [];\n\t\n\tget(longId: string, parent?: AbilitySchema | null) {\n\t\tconst subIds = longId.split(\".\");\n\t\tlet schema = parent ?? super.get(subIds.shift()!);\n\t\t\n\t\tif (schema && subIds.length)\n\t\t\tfor (const subId of subIds) {\n\t\t\t\tschema = schema?.abilities?.find(({ _id, top }) => !top && _id === subId);\n\t\t\t\tif (!schema)\n\t\t\t\t\tbreak;\n\t\t\t}\n\t\t\n\t\treturn schema;\n\t}\n\t\n\tgetSchema = this.get;\n\t\n\tgetParamSchema(longId: string, paramId: string) {\n\t\treturn this.get(longId)?.params?.find(({ _id }) => _id === paramId);\n\t}\n\t\n\tgetDefaultParam(longId: string, paramId: string, max?: boolean): AbilityParam | undefined;\n\tgetDefaultParam(schema: AbilityParamSchema, max?: boolean): AbilityParam;\n\tgetDefaultParam(schemaOrLongId: AbilityParamSchema | string, paramIdOrMax?: boolean | string, max?: boolean) {\n\t\tif (paramIdOrMax === undefined || typeof paramIdOrMax == \"boolean\")\n\t\t\tmax = paramIdOrMax;\n\t\t\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.getParamSchema(schemaOrLongId, paramIdOrMax as string) : schemaOrLongId;\n\t\t\n\t\tif (schema)\n\t\t\tswitch (schema.type) {\n\t\t\t\tcase \"number\":\n\t\t\t\t\treturn max ?\n\t\t\t\t\t\t(schema.max ?? Infinity) :\n\t\t\t\t\t\t(schema.min ?? 0);\n\t\t\t\t\n\t\t\t\tcase \"items\":\n\t\t\t\t\treturn max ?\n\t\t\t\t\t\tschema.items.map(({ _id }) => _id) :\n\t\t\t\t\t\t[];\n\t\t\t}\n\t\t\n\t\treturn undefined;// eslint-disable-line unicorn/no-useless-undefined\n\t}\n\t\n\tgetDefaultAbility(schema: string, max?: boolean): Ability | undefined;\n\tgetDefaultAbility(schema: AbilitySchema, max?: boolean): Ability;\n\tgetDefaultAbility(schema: AbilitySchema | string, max: boolean = !schema): Ability | undefined {\n\t\tif (typeof schema == \"string\")\n\t\t\tschema = this.get(schema)!;\n\t\t\n\t\tif (schema) {\n\t\t\tif (schema.abilities || schema.params) {\n\t\t\t\tconst ability = {} as AbilityObject;\n\t\t\t\t\n\t\t\t\tif (schema.params)\n\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\tability[paramSchema._id] = this.getDefaultParam(paramSchema, max);\n\t\t\t\t\n\t\t\t\tif (max && schema.abilities)\n\t\t\t\t\tfor (const subSchema of schema.abilities)\n\t\t\t\t\t\tif (!subSchema.top)\n\t\t\t\t\t\t\tability[subSchema._id] = this.getDefaultAbility(subSchema, max);\n\t\t\t\t\n\t\t\t\treturn ability;\n\t\t\t}\n\t\t\t\n\t\t\treturn true;\n\t\t}\n\t\t\n\t\treturn undefined;\n\t}\n\t\n\tgetDefaultAbilities(): Abilities<AS>;\n\tgetDefaultAbilities(schemas: AbilitySchema[], max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(schema: AbilitySchema, max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(longIds: string[], max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(longId: string, max?: boolean): Abilities<AS>;\n\tgetDefaultAbilities(schemasOrIds?: (AbilitySchema | string)[] | AbilitySchema | string, max: boolean = !schemasOrIds) {\n\t\t\n\t\tconst schemas = (\n\t\t\tschemasOrIds ?\n\t\t\t\t(Array.isArray(schemasOrIds) ? schemasOrIds : [ schemasOrIds ])\n\t\t\t\t\t.map(schema => (typeof schema == \"string\" ? this.get(schema) : schema))\n\t\t\t\t\t.filter(Boolean) as AbilitySchema[] :\n\t\t\t\t[ ...this.values() ]\n\t\t).sort((a, b) => a.level - b.level);\n\t\t\n\t\tconst schemaMaxMap = new Map<AbilitySchema, boolean>();\n\t\t\n\t\tfor (const schema of schemas) {\n\t\t\t(function resolve(_schema) {\n\t\t\t\tconst parentSchema = schemaParentMap.get(_schema);\n\t\t\t\t\n\t\t\t\tif (parentSchema) {\n\t\t\t\t\tresolve(parentSchema);\n\t\t\t\t\t\n\t\t\t\t\tif (!schemaMaxMap.has(parentSchema))\n\t\t\t\t\t\tschemaMaxMap.set(parentSchema, false);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t})(schema);\n\t\t\t\n\t\t\tif (max)\n\t\t\t\t(function resolve(_schema) {\n\t\t\t\t\tif (!schemaMaxMap.has(_schema))\n\t\t\t\t\t\tschemaMaxMap.set(_schema, true);\n\t\t\t\t\t\n\t\t\t\t\tif (_schema.abilities)\n\t\t\t\t\t\tfor (const subSchema of _schema.abilities)\n\t\t\t\t\t\t\tif (subSchema.top)\n\t\t\t\t\t\t\t\tresolve(subSchema);\n\t\t\t\t\t\n\t\t\t\t})(schema);\n\t\t\telse\n\t\t\t\tif (!schemaMaxMap.has(schema))\n\t\t\t\t\tschemaMaxMap.set(schema, false);\n\t\t}\n\t\t\n\t\treturn assignPath(\n\t\t\t{},\n\t\t\tObject.fromEntries(\n\t\t\t\t[ ...schemaMaxMap ]\n\t\t\t\t\t.map(([ schema, _max ]) => [ schema.longId, this.getDefaultAbility(schema, _max) ])\n\t\t\t)\n\t\t);\n\t}\n\t\n\tgetSchemeFor(abilities: GenericAbilities) {\n\t\tabilities = this.adjust(structuredClone(abilities));\n\t\t\n\t\treturn (function resolve(subSchemas: AbilitySchema[], subAbilities: GenericAbilities) {\n\t\t\tfor (let i = 0; i < subSchemas.length; i++) {\n\t\t\t\tconst schema = subSchemas[i];\n\t\t\t\tconst ability = schema.top ? abilities[schema._id] : subAbilities[schema._id];\n\t\t\t\t\n\t\t\t\tif (ability) {\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tfor (const paramSchema of schema.params) {\n\t\t\t\t\t\t\tconst abilityParam = (ability as AbilityObject)[paramSchema._id];\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\t\t\t\tparamSchema.max = abilityParam as AbilityParamNumber;\n\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\t\t\t\tparamSchema.items = paramSchema.items.filter(({ _id }) => (abilityParam as AbilityParamItems).includes(_id));\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities) {\n\t\t\t\t\t\tresolve(schema.abilities, ability as GenericAbilities);\n\t\t\t\t\t\t\n\t\t\t\t\t\tif (!schema.abilities.length)\n\t\t\t\t\t\t\tdelete schema.abilities;\n\t\t\t\t\t}\n\t\t\t\t} else\n\t\t\t\t\tsubSchemas.splice(i--, 1);\n\t\t\t}\n\t\t\t\n\t\t\treturn subSchemas;\n\t\t})(structuredClone(this.#hierarchical), abilities);\n\t}\n\t\n\tgetParam(abilities: GenericAbilities, longId: string, paramId: string) {\n\t\tif (this.getParamSchema(longId, paramId)) {\n\t\t\tconst value = getPath(abilities, `${longId}.${paramId}`) as AbilityParam;\n\t\t\t\n\t\t\tif (this.isParamFits(longId, paramId, value))\n\t\t\t\treturn value;\n\t\t\t\n\t\t\treturn this.getDefaultParam(longId, paramId)!;\n\t\t}\n\t\t\n\t\treturn undefined;// eslint-disable-line unicorn/no-useless-undefined\n\t}\n\t\n\tsetParam(abilities: GenericAbilities, longId: string, paramId: string, value: AbilityParam): Abilities<AS> {\n\t\tconst schema = this.getParamSchema(longId, paramId);\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability param: ${longId}.${paramId}`);\n\t\t\n\t\tsetPath(abilities, `${longId}.${paramId}`, this.adjustParam(schema, value));\n\t\t\n\t\treturn abilities as Abilities<AS>;\n\t}\n\t\n\tisParamFits(longId: string, paramId: string, value: AbilityParam, referenceValue?: AbilityParam) {\n\t\tif (value !== undefined) {\n\t\t\tconst paramSchema = this.getParamSchema(longId, paramId);\n\t\t\t\n\t\t\tif (paramSchema)\n\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\treturn (\n\t\t\t\t\t\t\tisAbilityParamNumber(value) &&\n\t\t\t\t\t\t\t(paramSchema.min === undefined || value >= paramSchema.min) && (\n\t\t\t\t\t\t\t\treferenceValue === undefined ?\n\t\t\t\t\t\t\t\t\t(paramSchema.max === undefined || value <= paramSchema.max) :\n\t\t\t\t\t\t\t\t\tvalue <= (referenceValue as AbilityParamNumber)\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t\t\n\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\treturn (\n\t\t\t\t\t\t\tisAbilityParamItems(value) &&\n\t\t\t\t\t\t\tvalue.length === new Set(value).size && (\n\t\t\t\t\t\t\t\treferenceValue === undefined ?\n\t\t\t\t\t\t\t\t\tvalue.every(itemId => paramSchema.items.find(({ _id }) => _id === itemId)) :\n\t\t\t\t\t\t\t\t\tvalue.every(itemId => (referenceValue as AbilityParamItems).includes(itemId))\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t}\n\t\t}\n\t\t\n\t\treturn false;\n\t}\n\t\n\tadjustParam(paramSchema: AbilityParamSchema, value: AbilityParam) {\n\t\tswitch (paramSchema.type) {\n\t\t\tcase \"number\":\n\t\t\t\treturn (\n\t\t\t\t\tisAbilityParamNumber(value) ?\n\t\t\t\t\t\tMath.max(\n\t\t\t\t\t\t\tMath.min(\n\t\t\t\t\t\t\t\tvalue,\n\t\t\t\t\t\t\t\tparamSchema.max ?? Infinity\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\tparamSchema.min ?? 0\n\t\t\t\t\t\t) :\n\t\t\t\t\t\tparamSchema.min ?? 0\n\t\t\t\t);\n\t\t\t\n\t\t\tdefault/* paramSchema.type === \"items\" */:\n\t\t\t\treturn (\n\t\t\t\t\tisAbilityParamItems(value) ?\n\t\t\t\t\t\tintersection(paramSchema.items.map(item => item._id), value) :\n\t\t\t\t\t\t[]\n\t\t\t\t) as AbilityParamItems;\n\t\t}\n\t\t\n\t}\n\t\n\tadjust(abilities: GenericAbilities, parent?: AbilitySchema | null): Abilities<AS> {\n\t\tconst adjustedAbilities: GenericAbilities = {};\n\t\t\n\t\tfor (const [ _id, ability ] of Object.entries(abilities)) {\n\t\t\tconst schema = this.get(_id, parent);\n\t\t\t\n\t\t\tif (schema)\n\t\t\t\tif (schema.params || schema.abilities) {\n\t\t\t\t\tconst adjustedAbility: AbilityObject = {};\n\t\t\t\t\t\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tif (isAbilityObject(ability))\n\t\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\t\tadjustedAbility[paramSchema._id] = this.adjustParam(paramSchema, ability[paramSchema._id] as AbilityParam);\n\t\t\t\t\t\telse\n\t\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\t\tadjustedAbility[paramSchema._id] = this.getDefaultParam(paramSchema);\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities && isAbilityObject(ability))\n\t\t\t\t\t\tObject.assign(\n\t\t\t\t\t\t\tadjustedAbility,\n\t\t\t\t\t\t\tthis.adjust(\n\t\t\t\t\t\t\t\tpick(\n\t\t\t\t\t\t\t\t\tability,\n\t\t\t\t\t\t\t\t\tschema.abilities\n\t\t\t\t\t\t\t\t\t\t.filter(subSchema => !subSchema.top)\n\t\t\t\t\t\t\t\t\t\t.map(subSchema => subSchema._id)\n\t\t\t\t\t\t\t\t) as GenericAbilities,\n\t\t\t\t\t\t\t\tschema\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t);\n\t\t\t\t\t\n\t\t\t\t\tadjustedAbilities[_id] = adjustedAbility;\n\t\t\t\t} else\n\t\t\t\t\tadjustedAbilities[_id] = true;\n\t\t}\n\t\t\n\t\treturn Object.assign(empty(abilities), adjustedAbilities) as Abilities<AS>;\n\t}\n\t\n\tmerge(target: GenericAbilities, source: GenericAbilities, parent?: AbilitySchema | null): Abilities<AS> {\n\t\tif (!parent) {\n\t\t\tthis.adjust(target);\n\t\t\tsource = this.adjust(structuredClone(source));\n\t\t}\n\t\t\n\t\tfor (const [ _id, ability ] of Object.entries(source)) {\n\t\t\tconst schema = this.get(_id, parent);\n\t\t\t\n\t\t\tif (schema && schema.isInheritable !== false)\n\t\t\t\tif (_id in target && (schema.params || schema.abilities)) {\n\t\t\t\t\tconst targetAbility = target[_id] as AbilityObject;\n\t\t\t\t\tconst sourceAbility = ability as AbilityObject;\n\t\t\t\t\t\n\t\t\t\t\tif (schema.params)\n\t\t\t\t\t\tfor (const paramSchema of schema.params)\n\t\t\t\t\t\t\tif (paramSchema.isInheritable !== false)\n\t\t\t\t\t\t\t\tswitch (paramSchema.type) {\n\t\t\t\t\t\t\t\t\tcase \"number\":\n\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] =\n\t\t\t\t\t\t\t\t\t\t\tMath.max(\n\t\t\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] as AbilityParamNumber,\n\t\t\t\t\t\t\t\t\t\t\t\tsourceAbility[paramSchema._id] as AbilityParamNumber\n\t\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tcase \"items\":\n\t\t\t\t\t\t\t\t\t\tadd(\n\t\t\t\t\t\t\t\t\t\t\ttargetAbility[paramSchema._id] as AbilityParamItems,\n\t\t\t\t\t\t\t\t\t\t\t...sourceAbility[paramSchema._id] as AbilityParamItems\n\t\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\tif (schema.abilities)\n\t\t\t\t\t\tthis.merge(targetAbility as GenericAbilities, sourceAbility as GenericAbilities, schema);\n\t\t\t\t} else\n\t\t\t\t\ttarget[_id] = ability;\n\t\t}\n\t\t\n\t\treturn target as Abilities<AS>;\n\t}\n\t\n\thasAbility(abilities: GenericAbilities, longId: string) {\n\t\treturn Boolean(getPath(abilities, longId));\n\t}\n\t\n\tsetAbility(target: GenericAbilities, schema: AbilitySchema): Abilities<AS>;\n\tsetAbility(target: GenericAbilities, longId: string): Abilities<AS>;\n\tsetAbility(target: GenericAbilities, schemaOrLongId: AbilitySchema | string) {\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.get(schemaOrLongId) : schemaOrLongId;\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability: ${schemaOrLongId as string}`);\n\t\t\n\t\tthis.merge(target, this.getDefaultAbilities(schema));\n\t\t\n\t\treturn target as Abilities<AS>;\n\t}\n\t\n\tunsetAbility(target: GenericAbilities, schema: AbilitySchema): Abilities<AS>;\n\tunsetAbility(target: GenericAbilities, longId: string): Abilities<AS>;\n\tunsetAbility(target: GenericAbilities, schemaOrLongId: AbilitySchema | string) {\n\t\tconst schema = typeof schemaOrLongId == \"string\" ? this.get(schemaOrLongId) : schemaOrLongId;\n\t\t\n\t\tif (!schema)\n\t\t\tthrow new Error(`No such ability: ${schemaOrLongId as string}`);\n\t\t\n\t\t(function resolve(_schema) {\n\t\t\tdeletePath(target, _schema.longId);\n\t\t\t\n\t\t\tif (_schema.abilities)\n\t\t\t\tfor (const subSchema of _schema.abilities)\n\t\t\t\t\tresolve(subSchema);\n\t\t\t\n\t\t})(schema);\n\t\t\n\t\treturn target;\n\t}\n\t\n}\n", "import type { Prettify } from \"@nesvet/n\";\nimport type { AbilitySchema as OriginalAbilitySchema } from \"insite-common\";\n\n\ntype AbilityParamItem = string;\nexport type AbilityParamItems = AbilityParamItem[];\nexport type AbilityParamNumber = number;\nexport type AbilityParam = AbilityParamItems | AbilityParamNumber;\n\nexport type AbilityWithParams = Record<string, AbilityParam>;\nexport type AbilityObject = Record<string, Ability | AbilityParam>;\nexport type AbilityBoolean = true;\nexport type Ability = AbilityBoolean | { [key: string]: Ability | AbilityParam };\n\nexport type AbilitySchema = Prettify<\n\tOmit<OriginalAbilitySchema, \"abilities\"> & {\n\t\tlevel: number;\n\t\tlongId: string;\n\t\tabilities?: AbilitySchema[];\n\t}\n>;\n\nexport type GenericAbilities = Record<string, Ability>;\n\nexport function isAbilityObject(value: Ability): value is AbilityObject {\n\treturn typeof value == \"object\";\n}\n\nexport function isAbilityParamNumber(value: AbilityParam): value is AbilityParamNumber {\n\treturn typeof value == \"number\";\n}\n\nexport function isAbilityParamItems(value: AbilityParam): value is AbilityParamItems {\n\treturn Array.isArray(value);\n}\n", "import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class RolesError extends Err {\n\tconstructor(roleId: string, payload?: Payload);\n\tconstructor(roleIds: string[], payload?: Payload);\n\tconstructor(stringOrArray: Payload | string[] | string, payload?: Payload) {\n\t\tsuper(`User lacks role${Array.isArray(stringOrArray) ? \"s\" : \"\"}`, \"lacksroles\", {\n\t\t\troles: Array.isArray(stringOrArray) ? stringOrArray : [ stringOrArray ],\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"RolesError\";\n\t\n}\n", "import {\n\tdeleteProps,\n\tgetAll,\n\tintersection,\n\treAdd,\n\tremoveAll\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport type { ChangeStreamDocument, CollectionIndexes, WatchedCollection } from \"insite-db\";\nimport type { AbilityParam, GenericAbilities } from \"../abilities/types\";\nimport type { Users } from \"../users\";\nimport { Role } from \"./Role\";\nimport { basisSchema } from \"./schema\";\nimport type { NewRole, RoleDoc, RolesOptions } from \"./types\";\n\n\nconst indexes: CollectionIndexes = [\n\t[ { involves: 1 } ]\n];\n\nfunction preventDirectDelete() {\n\tthrow new Error(\"Direct usage of roles collection.deleteOne or .deleteMany is forbidden. Use roles.deleteRole instead.\");\n}\n\n\nexport class Roles<AS extends AbilitiesSchema> extends Map<string, Role<AS>> {\n\tconstructor(users: Users<AS>, options: RolesOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tconst {\n\t\t\troot: rootProps,\n\t\t\t...initOptions\n\t\t} = options;\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\tthis.abilities = users.abilities;\n\t\t\n\t\tthis.root = new Role<AS>(this, {\n\t\t\t...rootProps,\n\t\t\t_id: \"root\",\n\t\t\tinvolves: [],\n\t\t\tabilities: this.abilities.getDefaultAbilities(),\n\t\t\ttitle: \"Root\",\n\t\t\tdescription: \"Root\",\n\t\t\tmeta: {},\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\tthis.initOptions = initOptions;\n\t\t\n\t}\n\t\n\tusers;\n\tcollections;\n\tcollection!: WatchedCollection<RoleDoc> & {\n\t\t/** @deprecated Direct usage of roles collection.deleteOne is forbidden. Use roles.deleteRole instead. */\n\t\tdeleteOne: typeof preventDirectDelete;\n\t\t\n\t\t/** @deprecated Direct usage of roles collection.deleteMany is forbidden. Use roles.deleteRole instead. */\n\t\tdeleteMany: typeof preventDirectDelete;\n\t};\n\t\n\tabilities;\n\troot;\n\tprivate initOptions?;\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<RoleDoc>(\"roles\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\tdeleteOne: preventDirectDelete,\n\t\t\t\t\tdeleteMany: preventDirectDelete\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const roleDoc of this.collection.find()) {\n\t\t\t\tif (this.abilities.adjust(roleDoc.abilities))\n\t\t\t\t\tawait this.collection.updateOne({ _id: roleDoc._id }, { $set: { abilities: roleDoc.abilities } });\n\t\t\t\t\n\t\t\t\tthis.load(roleDoc);\n\t\t\t}\n\t\t\t\n\t\t\tthis.update();\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<RoleDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\": {\n\t\t\t\tnew Role<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tload(roleDoc: RoleDoc) {\n\t\tnew Role<AS>(this, roleDoc);\n\t\t\n\t}\n\t\n\tresolve(role: Role<AS>, involvedBy: Role<AS>[]) {\n\t\tinvolvedBy = [ role, ...involvedBy ];\n\t\t\n\t\tfor (const involvedRoleId of role.ownInvolveIds) {\n\t\t\tconst involvedRole = this.get(involvedRoleId);\n\t\t\tif (involvedRole) {\n\t\t\t\tfor (const involvedByRole of involvedBy) {\n\t\t\t\t\treAdd(involvedByRole.involves, involvedRole);\n\t\t\t\t\tthis.abilities.merge(involvedByRole.inheritedAbilities as GenericAbilities, involvedRole.abilities as GenericAbilities);\n\t\t\t\t}\n\t\t\t\tif (involvedRole !== role)\n\t\t\t\t\tthis.resolve(involvedRole, involvedBy);\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tsorted: Role<AS>[] = [];\n\t\n\t#sortRoles(a: Role<AS>, b: Role<AS>) {\n\t\treturn (\n\t\t\t(b.involves.size - a.involves.size) || (\n\t\t\t\t(a.title && b.title) ?\n\t\t\t\t\ta.title > b.title ? 1 : a.title < b.title ? -1 : 0 :\n\t\t\t\t\ta.title ?\n\t\t\t\t\t\t-1 :\n\t\t\t\t\t\tb.title ?\n\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\ta._id > b._id ?\n\t\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\t\ta._id < b._id ?\n\t\t\t\t\t\t\t\t\t-1 :\n\t\t\t\t\t\t\t\t\t0\n\t\t\t)\n\t\t);\n\t}\n\t\n\tupdate() {\n\t\t\n\t\tconst array = [ ...this.values() ];\n\t\t\n\t\tthis.root.ownInvolveIds = [];\n\t\tfor (const role of array) {\n\t\t\tif (role !== this.root && !array.some(anotherRole => anotherRole.ownInvolveIds.includes(role._id)))\n\t\t\t\tthis.root.ownInvolveIds.push(role._id);\n\t\t\trole.involves.clear();\n\t\t\trole.abilities = structuredClone(role.ownAbilities);\n\t\t\trole.inheritedAbilities = {};\n\t\t}\n\t\t\n\t\tthis.root.involves.add(this.root);\n\t\tthis.resolve(this.root, []);\n\t\t\n\t\tfor (const role of array)\n\t\t\trole.ownInvolves = getAll(this, role.ownInvolveIds, true).sort(this.#sortRoles).reverse();\n\t\t\n\t\tconst sorted = [ this.root ];\n\t\t\n\t\tfor (let i = 0; i < sorted.length; i++) {\n\t\t\tconst role = sorted[i];\n\t\t\tfor (const involvedRole of role.ownInvolves) {\n\t\t\t\tconst involvedRoleIndex = sorted.indexOf(involvedRole);\n\t\t\t\tif (~involvedRoleIndex) {\n\t\t\t\t\tsorted.splice(involvedRoleIndex, 1);\n\t\t\t\t\ti--;\n\t\t\t\t}\n\t\t\t\tsorted.splice(i + 1, 0, involvedRole);\n\t\t\t}\n\t\t}\n\t\t\n\t\tlet _o = 0;\n\t\tfor (const role of sorted) {\n\t\t\tthis.abilities.merge(role.abilities as GenericAbilities, role.inheritedAbilities as GenericAbilities);\n\t\t\trole._o = _o++;\n\t\t}\n\t\t\n\t\tthis.sorted = sorted;\n\t\t\n\t\tif (this.users.isInited)\n\t\t\tthis.users.update(true);\n\t\t\n\t}\n\t\n\tasync create({ _id, involves, title, description, ...restProps }: NewRole) {\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\tinvolves: involves || [],\n\t\t\tabilities: {},\n\t\t\ttitle: title ?? \"\",\n\t\t\tdescription: description ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"abilities\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateRole(roleId: string, updates: Omit<RoleDoc, \"abilities\" | \"createdAt\">) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.involves) {\n\t\t\tremoveAll(updates.involves, [ roleId ]);\n\t\t\t\n\t\t\tfor (const involvedRoleId of updates.involves)\n\t\t\t\tif (this.get(involvedRoleId)?.involves.has(role))\n\t\t\t\t\tremoveAll(updates.involves, [ involvedRoleId ]);\n\t\t\t\n\t\t\tupdates.involves = this.cleanUpIds(updates.involves);\n\t\t}\n\t\t\n\t\tconst { abilities } = updates as unknown as { abilities?: GenericAbilities };\n\t\t\n\t\tif (abilities && typeof abilities == \"object\")\n\t\t\t(updates as unknown as { abilities: GenericAbilities }).abilities = this.abilities.adjust(abilities);\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: updates });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tdeleteRole(role: Role<AS> | string) {\n\t\tconst _id = typeof role == \"string\" ? role : role._id;\n\t\t\n\t\treturn this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { involves: _id }, update: { $pullAll: { involves: [ _id ] } } } },\n\t\t\t{ deleteOne: { filter: { _id } } }\n\t\t]);\n\t}\n\t\n\tcleanUpIds(ids: string[]) {\n\t\tconst roles = intersection(this.sorted, getAll(this, ids, true));\n\t\t\n\t\tconst cleanedUpIds = [];\n\t\t\n\t\tfor (const role of roles)\n\t\t\tif (roles.every(anotherRole => anotherRole === role || !anotherRole.involves.has(role)))\n\t\t\t\tcleanedUpIds.push(role._id);\n\t\t\n\t\treturn cleanedUpIds;\n\t}\n\t\n\tasync setAbility(roleId: string, abilityLongId: string, set: boolean) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: {\n\t\t\tabilities:\n\t\t\t\tset ?\n\t\t\t\t\tthis.abilities.setAbility(role.ownAbilities, abilityLongId) :\n\t\t\t\t\tthis.abilities.unsetAbility(role.ownAbilities, abilityLongId)\n\t\t} });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tasync setAbilityParam(roleId: string, abilityLongId: string, paramId: string, value: AbilityParam) {\n\t\tconst role = this.get(roleId);\n\t\t\n\t\tif (!role)\n\t\t\treturn false;\n\t\t\n\t\tawait this.collection.updateOne({ _id: roleId }, { $set: {\n\t\t\tabilities: this.abilities.setParam(role.ownAbilities, abilityLongId, paramId, value)\n\t\t} });\n\t\t\n\t\treturn true;\n\t}\n\t\n}\n", "import type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport { Roles } from \"./Roles\";\nimport { RoleDoc } from \"./types\";\n\n\nconst snapshots = new WeakMap();\n\n\nexport class Role<AS extends AbilitiesSchema> {\n\tconstructor(roles: Roles<AS>, roleDoc: RoleDoc) {\n\t\tthis.#roles = roles;\n\t\t\n\t\tthis._id = roleDoc._id;\n\t\troles.set(this._id, this);\n\t\t\n\t\tvoid this.update(roleDoc);\n\t\t\n\t}\n\t\n\t#roles;\n\t\n\t_id;\n\townInvolveIds!: string[];\n\townAbilities!: Abilities<AS>;\n\ttitle = \"\";\n\tdisplayTitle = \"\";\n\t_o = 0;\n\t\n\townInvolves: Role<AS>[] = [];\n\tinvolves = new Set<Role<AS>>();\n\tabilities: Abilities<AS> = {};\n\tinheritedAbilities: Abilities<AS> = {};\n\t\n\tupdate({ _id, involves: ownInvolveIds, abilities: ownAbilities, title, ...restProps }: Partial<RoleDoc>) {\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tif (ownInvolveIds)\n\t\t\tthis.ownInvolveIds = ownInvolveIds;\n\t\t\n\t\tif (ownAbilities)\n\t\t\tthis.ownAbilities = typeof ownAbilities == \"object\" ?\n\t\t\t\tthis.#roles.abilities.adjust(ownAbilities) :\n\t\t\t\townAbilities as Abilities<AS>;\n\t\t\n\t\tif (title !== undefined) {\n\t\t\tthis.title = title;\n\t\t\tthis.displayTitle = title || this._id;\n\t\t}\n\t\t\n\t\tif (ownInvolveIds || ownAbilities) {\n\t\t\tconst snapshot = [\n\t\t\t\tthis.ownInvolveIds.join(\",\"),\n\t\t\t\tJSON.stringify(this.ownAbilities)\n\t\t\t].join(\"\\n\");\n\t\t\t\n\t\t\tif (snapshot !== snapshots.get(this)) {\n\t\t\t\tsnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.#roles.users.isInited)\n\t\t\t\t\tthis.#roles.update();\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tdelete() {\n\t\t\n\t\tthis.#roles.delete(this._id);\n\t\t\n\t\tsnapshots.delete(this);\n\t\t\n\t\tthis.#roles.update();\n\t\t\n\t}\n\t\n}\n", "export const regexps = {\n\t_id: /^[\\dA-Fa-f]{24}$/,\n\temail: /^[^\\s@]{1,63}@[^\\s@]{1,63}\\.[^\\s@]{1,63}$/,\n\targon2: /^\\$argon2(?:i|d|id)\\$v=\\d+\\$m=\\d+,t=\\d+,p=\\d+(?:\\$[\\d+/A-Za-z]+){2}$/,\n\t// eslint-disable-next-line unicorn/better-regex\n\tsessionId: /^(?:[\\dA-Fa-f]{16,32}\\$[\\dA-Fa-f]{16,32}|[0-9a-f]{24}~[A-Za-z0-9_-]{43})$/, // (?:old_format|new_format) - leave just the new after some time\n\trole: /^[\\d_a-z-]{1,64}$/,\n\tip: /^(?:(?:\\d{1,3}\\.){3}\\d{1,3}|(?:[\\dA-Fa-f]{0,4}:){2,7}[\\dA-Fa-f]{0,4})$/\n};\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"involves\",\n\t\t\"abilities\",\n\t\t\"title\",\n\t\t\"description\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.role.source,\n\t\t\tnot: { enum: [ \"root\" ] }\n\t\t},\n\t\tinvolves: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps.role.source,\n\t\t\t\tnot: { enum: [ \"root\" ] }\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tabilities: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\ttitle: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 256\n\t\t},\n\t\tdescription: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 10240\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { Err } from \"@nesvet/n\";\n\n\ntype Payload = Record<string, unknown>;\n\n\nexport class UnauthorizedError extends Err {\n\tconstructor(payload?: Payload) {\n\t\tsuper(\"Unauthorized\", \"unauthorized\", payload);\n\t\t\n\t}\n\t\n\tname = \"UnauthorizedError\";\n\t\n}\n\n\ntype SubordinationType = \"_id\" | \"permissiveIds\" | \"slaveIds\";\n\nexport class SubordinationError extends Err {\n\tconstructor(payload?: Payload);\n\tconstructor(type: SubordinationType, payload?: Payload);\n\tconstructor(type: SubordinationType, ids: string[] | string, payload?: Payload);\n\tconstructor(type?: Payload | SubordinationType, ids?: Payload | string[] | string, payload?: Payload) {\n\t\tswitch (arguments.length) {\n\t\t\tcase 1:\n\t\t\t\tpayload = type as Payload;\n\t\t\t\ttype = undefined;\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase 2:\n\t\t\t\tpayload = ids as Payload;\n\t\t\t\tids = undefined;\n\t\t}\n\t\t\n\t\tsuper(\"Insubordination attempt\", \"subordination\", {\n\t\t\t...type && { type },\n\t\t\t...ids && { ids: Array.isArray(ids) ? ids : [ ids ] },\n\t\t\t...payload\n\t\t});\n\t\t\n\t}\n\t\n\tname = \"SubordinationError\";\n\t\n}\n\n\nexport class PermissionError extends Err {\n\tconstructor(payload?: Payload) {\n\t\tsuper(\"Insufficient permissions\", \"permissions\", payload);\n\t\t\n\t}\n\t\n\tname = \"PermissionError\";\n\t\n}\n", "import { hash, verify } from \"@node-rs/argon2\";\nimport EventEmitter from \"eventemitter3\";\nimport {\n\t_ids,\n\tdeleteProps,\n\tremoveAll,\n\tStatefulPromise,\n\twithout\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tCollections,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport { AbilitiesMap } from \"../abilities\";\nimport { regexps } from \"../lib\";\nimport { Orgs } from \"../orgs\";\nimport { Org } from \"../orgs/Org\";\nimport { Roles } from \"../roles\";\nimport { Sessions } from \"../sessions\";\nimport { Session } from \"../sessions/Session\";\nimport type { SessionDoc } from \"../sessions/types\";\nimport { Avatars } from \"./avatars\";\nimport { basisSchema } from \"./schema\";\nimport { User } from \"./User\";\nimport type { NewUser, Options, UserDoc } from \"./types\";\n\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n\nconst indexes: CollectionIndexes = [\n\t[ { email: 1 }, { unique: true } ],\n\t[ { org: 1 } ]\n];\n\nlet unknownUserPasswordHash: Promise<string> | undefined;\n\n\nexport class Users<AS extends AbilitiesSchema> extends Map<string, User<AS>> {\n\tconstructor(collections: Collections, options: Options<AS>) {\n\t\tsuper();\n\t\t\n\t\tconst eventEmitter = new EventEmitter() as EventEmitter & {\n\t\t\t_events: Record<string, object>;\n\t\t\t_eventsCount: number;\n\t\t};\n\t\tthis.#eventEmitter = eventEmitter;\n\t\tthis._events = eventEmitter._events;\n\t\tthis._eventsCount = eventEmitter._eventsCount;\n\t\tthis.emit = eventEmitter.emit;\n\t\tthis.on = eventEmitter.on as unknown as (...args: any[]) => this;\n\t\tthis.once = eventEmitter.once;\n\t\tthis.addListener = eventEmitter.addListener;\n\t\tthis.off = eventEmitter.off;\n\t\tthis.removeListener = eventEmitter.removeListener;\n\t\t\n\t\tthis.collections = collections;\n\t\t\n\t\tthis.abilities = new AbilitiesMap<AS>(options.abilities);\n\t\t\n\t\tthis.initOptions = options;\n\t\t\n\t\tvoid this.init();\n\t\t\n\t}\n\t\n\t#eventEmitter;\n\t_events;\n\t_eventsCount;\n\temit;\n\t\n\ton(event: \"user-create\" | \"user-is-online\" | \"user-permissions-change\", callback: (user: User<AS>) => void): this;\n\ton(event: \"session-delete\", callback: (session: Session<AS>) => void): this;\n\ton<T extends string | symbol>(event: T, callback: (...args: any[]) => void, context?: any) {\n\t\tthis.#eventEmitter.on(event, callback, context);\n\t\t\n\t\treturn this;\n\t}\n\t\n\tonce;\n\taddListener;\n\toff;\n\tremoveListener;\n\t\n\tprivate initOptions?;\n\t\n\tcollections;\n\tabilities;\n\t\n\tcollection!: WatchedCollection<UserDoc>;\n\troles!: Roles<AS>;\n\tsessions!: Sessions<AS>;\n\torgs!: Orgs<AS>;\n\tavatars!: Avatars;\n\t\n\tbyEmail = new Map();\n\tbySessionId = new Map();\n\tsorted: User<AS>[] = [];\n\t\n\tisSortRequired = true;\n\t\n\t#isPreinited = false;\n\t\n\tasync preinit() {\n\t\t\n\t\tif (!this.#isPreinited) {\n\t\t\tthis.#isPreinited = true;\n\t\t\t\n\t\t\tconst {\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tschema: customSchema,\n\t\t\t\tinitialRoot: initialRootProps,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string [], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = await this.collections.ensure<UserDoc>(\"users\", { ...collectionOptions, schema });\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tif (!await this.collection.countDocuments({ roles: \"root\" }))\n\t\t\t\tawait this.create({\n\t\t\t\t\temail: process.env.INSITE_ROOT_EMAIL ?? \"insite@root.email\",\n\t\t\t\t\tpassword: process.env.INSITE_ROOT_PASSWORD ?? \"inSiteRootPassword\",\n\t\t\t\t\tname: { first: \"Root\" },\n\t\t\t\t\tjob: \"Root\",\n\t\t\t\t\t...initialRootProps,\n\t\t\t\t\troles: [ \"root\" ],\n\t\t\t\t\torg: null,\n\t\t\t\t\tmeta: {}\n\t\t\t\t});\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const userDoc of this.collection.find())\n\t\t\t\tthis.load(userDoc);\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tisInited = false;\n\t\n\tprotected async init() {\n\t\t\n\t\tif (!this.isInited) {\n\t\t\tconst {\n\t\t\t\troles: rolesOptions,\n\t\t\t\torgs: orgsOptions,\n\t\t\t\tsessions: sessionsOptions,\n\t\t\t\tavatars: avatarsOptions,\n\t\t\t\tcollection: { quiet } = {}\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tthis.roles = new Roles<AS>(this, { ...rolesOptions, collection: { quiet, ...rolesOptions?.collection } });\n\t\t\tthis.orgs = new Orgs<AS>(this, { ...orgsOptions, collection: { quiet, ...orgsOptions?.collection } });\n\t\t\tthis.sessions = new Sessions<AS>(this, { ...sessionsOptions, collection: { quiet, ...sessionsOptions?.collection } });\n\t\t\tthis.avatars = new Avatars(this, { ...avatarsOptions, collection: { quiet, ...avatarsOptions?.collection } });\n\t\t\t\n\t\t\tawait this.roles.init();\n\t\t\tawait this.orgs.preinit();\n\t\t\tawait this.preinit();\n\t\t\tthis.orgs.init();\n\t\t\tawait this.avatars.init();\n\t\t\t\n\t\t\tthis.update(true);\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tawait this.sessions.init();\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t\t\n\t\t\tthis.isInited = true;\n\t\t\t\n\t\t\tthis.#initPromise.resolve(this);\n\t\t}\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<UserDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\":\n\t\t\t\tnew User<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\t\n\tload(userDoc: UserDoc) {\n\t\tnew User<AS>(this, userDoc);\n\t\t\n\t}\n\t\n\tsort() {\n\t\t\n\t\tthis.isSortRequired = false;\n\t\t\n\t\tthis.sorted = [ ...this.values() ].sort((a, b) => a.name.last > b.name.last ? 1 : a.name.last < b.name.last ? -1 : 0);\n\t\t\n\t}\n\t\n\tupdate(shouldUpdateRoles?: boolean) {\n\t\tif (shouldUpdateRoles)\n\t\t\tfor (const user of this.values())\n\t\t\t\tuser.updateRoles();\n\t\t\n\t\tfor (const user of this.values())\n\t\t\tuser.updatePermissions();\n\t\t\n\t\tif (this.isSortRequired)\n\t\t\tthis.sort();\n\t\t\n\t}\n\t\n\t#initPromise = new StatefulPromise<this>();\n\t\n\twhenReady() {\n\t\treturn this.#initPromise;\n\t}\n\t\n\tasync create({ email, password, roles, name, org, job, ...restProps }: NewUser) {\n\t\tif (this.byEmail.has(email))\n\t\t\tthrow new Error(\"User exists\");\n\t\t\n\t\tconst _id = newObjectIdString();\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\temail,\n\t\t\tpassword: await hash(password),\n\t\t\troles: this.isInited ? this.roles.cleanUpIds(roles) : roles,\n\t\t\tname: {\n\t\t\t\tfirst: name.first ?? \"\",\n\t\t\t\tmiddle: name.middle ?? \"\",\n\t\t\t\tlast: name.last ?? \"\"\n\t\t\t},\n\t\t\torg: org ?? null,\n\t\t\tjob: job ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"_id\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateUser(_id: string, updates: Omit<UserDoc, \"_id\" | \"createdAt\">, byUser?: User<AS>) {\n\t\tconst user = this.get(_id)!;\n\t\t\n\t\tif (!user)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.roles)\n\t\t\tupdates.roles =\n\t\t\t\tuser.isRoot ?\n\t\t\t\t\t[ \"root\" ] :\n\t\t\t\t\tthis.roles.cleanUpIds(\n\t\t\t\t\t\tbyUser ?\n\t\t\t\t\t\t\twithout(user.ownRoleIds, byUser.slaveRoleIds).concat(updates.roles) :\n\t\t\t\t\t\t\tupdates.roles\n\t\t\t\t\t);\n\t\t\n\t\tlet nextPassword: string | undefined;\n\t\t\n\t\tif (updates.password !== undefined) {\n\t\t\tif (typeof updates.password != \"string\" || updates.password === \"\")\n\t\t\t\tthrow new Error(\"emptypasswordisnotallowed\");\n\t\t\t\n\t\t\tnextPassword = regexps.argon2.test(updates.password) ? updates.password : await hash(updates.password);\n\t\t\tupdates = { ...updates, password: nextPassword };\n\t\t}\n\t\t\n\t\tconst writes: Promise<unknown>[] = [\n\t\t\tthis.collection.updateOne({ _id }, { $set: updates })\n\t\t];\n\t\t\n\t\tif (nextPassword !== undefined && nextPassword !== (user as { password?: string }).password)\n\t\t\twrites.push(this.sessions.collection.deleteMany({ user: _id }));\n\t\t\n\t\tawait Promise.all(writes);\n\t\t\n\t\treturn true;\n\t}\n\t\n\tasync changePassword(_id: string, newPassword: string) {\n\t\tif (!this.has(_id))\n\t\t\tthrow new Error(\"usernotfound\");\n\t\t\n\t\tif (!newPassword)\n\t\t\tthrow new Error(\"emptypasswordisnotallowed\");\n\t\t\n\t\tawait Promise.all([\n\t\t\tthis.collection.updateOne({ _id }, { $set: { password: await hash(newPassword) } }),\n\t\t\tthis.sessions.collection.deleteMany({ user: _id })\n\t\t]);\n\t\t\n\t}\n\t\n\tasync login(email: string, password: string, sessionProps: Partial<SessionDoc>) {\n\t\tconst user = this.byEmail.get(email);\n\t\t\n\t\tif (!user) {\n\t\t\ttry {\n\t\t\t\tawait verify(await (unknownUserPasswordHash ??= hash(\"insite-unknown-user\")), password);\n\t\t\t} catch {\n\t\t\t\t// verify may reject; the response is still usernotfound\n\t\t\t}\n\t\t\t\n\t\t\tthrow new Error(\"usernotfound\");\n\t\t}\n\t\t\n\t\tif (!await verify(user.password, password))\n\t\t\tthrow new Error(\"incorrectpassword\");\n\t\t\n\t\tif (!user.abilities.login)\n\t\t\tthrow new Error(\"userisnotabletologin\");\n\t\t\n\t\treturn this.sessions.create(user, sessionProps);\n\t}\n\t\n\tlogout(session: Session<AS>) {\n\t\tsession.delete();\n\t\t\n\t\treturn this.sessions.collection.deleteOne({ _id: session._id });\n\t}\n\t\n\t#sortUsersAndOrgs(a: Org<AS> | User<AS>, b: Org<AS> | User<AS>) {\n\t\treturn (\n\t\t\t(a instanceof User && b instanceof User) ?\n\t\t\t\t(a.name.last && b.name.last) ?\n\t\t\t\t\ta.name.last > b.name.last ?\n\t\t\t\t\t\t1 :\n\t\t\t\t\t\ta.name.last < b.name.last ? -1 : 0 :\n\t\t\t\t\t(!a.name.last && !b.name.last) ?\n\t\t\t\t\t\ta.displayLabel > b.displayLabel ?\n\t\t\t\t\t\t\t1 :\n\t\t\t\t\t\t\ta.displayLabel < b.displayLabel ? -1 : 0 :\n\t\t\t\t\t\ta.name.last ? -1 : 1 :\n\t\t\t\t(a instanceof Org && b instanceof Org) ?\n\t\t\t\t\ta.title > b.title ?\n\t\t\t\t\t\t1 :\n\t\t\t\t\t\ta.title < b.title ? -1 : 0 :\n\t\t\t\t\ta instanceof Org ? -1 : 1\n\t\t);\n\t}\n\t\n\tsortIds(ids: string[]) {\n\t\treturn _ids((\n\t\t\tids\n\t\t\t\t.map(_id => this.get(_id) || this.orgs.get(_id))\n\t\t\t\t.filter(Boolean) as (Org<AS> | User<AS>)[]\n\t\t).sort(this.#sortUsersAndOrgs));\n\t}\n\t\n\treplaceMap = new Map<string, string>();\n\t\n\treplaceHandlers = new Set<(fromId: string, toId: string | null) => Promise<void> | void>();\n\t\n\tasync replace(fromId: string) {\n\t\tconst toId = this.replaceMap.get(fromId) ?? null;\n\t\tif (toId)\n\t\t\tthis.replaceMap.delete(fromId);\n\t\t\n\t\tfor (const handler of this.replaceHandlers)\n\t\t\tawait handler(fromId, toId);\n\t\t\n\t}\n\t\n\tasync deleteUser(_id: string) {\n\t\tconst { deletedCount } = await this.collection.deleteOne({ _id });\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n\t\n\tstatic init<IAS extends AbilitiesSchema>(collections: Collections, options: Options<IAS>) {\n\t\tconst users = new Users(collections, options);\n\t\t\n\t\treturn users.whenReady();\n\t}\n\t\n}\n", "import {\n\t_ids,\n\tdeleteProps,\n\tEmptyArray,\n\tEmptySet,\n\tremoveAll,\n\tsort,\n\tunion,\n\twithout\n} from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport type { User, Users } from \"../users\";\nimport { Org } from \"./Org\";\nimport { basisSchema } from \"./schema\";\nimport type { NewOrg, OrgDoc, OrgsOptions } from \"./types\";\n\n\nconst indexes: CollectionIndexes = [\n\t[ { owners: 1 } ]\n];\n\nfunction preventDirectDelete() {\n\tthrow new Error(\"Direct usage of orgs collection.deleteOne or .deleteMany is forbidden. Use orgs.deleteOrg instead.\");\n}\n\n\nexport class Orgs<AS extends AbilitiesSchema> extends Map<string, Org<AS>> {\n\tconstructor(users: Users<AS>, options: OrgsOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.preinitOptions = options;\n\t\t\n\t}\n\t\n\tusers;\n\tcollections;\n\tprivate preinitOptions?;\n\t\n\tcollection!: WatchedCollection<OrgDoc> & {\n\t\t/** @deprecated Direct usage of roles collection.deleteOne is forbidden. Use orgs.deleteOrg instead. */\n\t\tdeleteOne: typeof preventDirectDelete;\n\t\t\n\t\t/** @deprecated Direct usage of roles collection.deleteMany is forbidden. Use orgs.deleteOrg instead. */\n\t\tdeleteMany: typeof preventDirectDelete;\n\t};\n\t\n\tnull!: Org<AS> & { _id: null };\n\t\n\t#isPreinited = false;\n\t\n\tasync preinit() {\n\t\t\n\t\tif (!this.#isPreinited) {\n\t\t\tthis.#isPreinited = true;\n\t\t\t\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tnull: nullProps,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.preinitOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string [], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<OrgDoc>(\"orgs\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\tdeleteOne: preventDirectDelete,\n\t\t\t\t\tdeleteMany: preventDirectDelete\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\t// TODO: customIndexes should be moved to collectionOptions\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tthis.null = Object.assign(\n\t\t\t\tnew Org<AS>(this, {\n\t\t\t\t\t...nullProps,\n\t\t\t\t\t_id: \"\",\n\t\t\t\t\ttitle: \"\",\n\t\t\t\t\tnote: \"\",\n\t\t\t\t\towners: [],\n\t\t\t\t\tmeta: {},\n\t\t\t\t\tcreatedAt: Date.now()\n\t\t\t\t}),\n\t\t\t\t{\n\t\t\t\t\t_id: null,\n\t\t\t\t\townerIds: new EmptyArray(),\n\t\t\t\t\townerOrgs: new EmptySet(),\n\t\t\t\t\townerUsers: new EmptySet(),\n\t\t\t\t\tslaveOrgs: new EmptySet()\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const orgDoc of this.collection.find())\n\t\t\t\tthis.load(orgDoc);\n\t\t\t\n\t\t\tdelete this.preinitOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tinit() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tthis.update();\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t}\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<OrgDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\": {\n\t\t\t\tnew Org<AS>(this, next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tvoid this.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tload(orgDoc: OrgDoc) {\n\t\tnew Org<AS>(this, orgDoc);\n\t\t\n\t}\n\t\n\t#resolve(org: Org<AS>, slaveOrgs: Org<AS>[]) {\n\t\tslaveOrgs = [ org, ...slaveOrgs ];\n\t\t\n\t\tfor (const ownerOrg of org.ownerOrgs) {\n\t\t\tthis.#resolve(ownerOrg, slaveOrgs);\n\t\t\tfor (const slaveOrg of slaveOrgs)\n\t\t\t\townerOrg.slaveOrgs.add(slaveOrg);\n\t\t}\n\t\t\n\t}\n\t\n\tsorted: Org<AS>[] = [];\n\t\n\tupdate() {\n\t\t\n\t\tconst array = [ ...this.values() ];\n\t\tconst sorted = [];\n\t\t\n\t\tfor (const org of array) {\n\t\t\torg.ownerOrgs.clear();\n\t\t\torg.ownerUsers.clear();\n\t\t\torg.slaveOrgs.clear();\n\t\t\t\n\t\t\tfor (const ownerId of org.ownerIds) {\n\t\t\t\tconst ownerOrg = this.get(ownerId);\n\t\t\t\tif (ownerOrg)\n\t\t\t\t\torg.ownerOrgs.add(ownerOrg);\n\t\t\t\telse {\n\t\t\t\t\tconst ownerUser = this.users.get(ownerId);\n\t\t\t\t\tif (ownerUser)\n\t\t\t\t\t\torg.ownerUsers.add(ownerUser);\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\tif (!org.ownerOrgs.size && org._id)\n\t\t\t\tsorted.push(org);\n\t\t}\n\t\t\n\t\tfor (const org of array)\n\t\t\tif (!array.some(anotherOrg => anotherOrg.ownerOrgs.has(org)))\n\t\t\t\tthis.#resolve(org, []);\n\t\t\n\t\tsorted.sort(this.#sortOrgs);\n\t\tfor (const org of array)\n\t\t\tsort(org.slaveOrgs, this.#sortOrgs);\n\t\t\n\t\tfor (let i = 0; i < sorted.length; i++) {\n\t\t\tconst org = sorted[i];\n\t\t\tfor (const slaveOrg of [ ...org.slaveOrgs ].reverse())\n\t\t\t\tif (slaveOrg.ownerOrgs.has(org)) {\n\t\t\t\t\tconst slaveOrgIndex = sorted.indexOf(slaveOrg);\n\t\t\t\t\tif (~slaveOrgIndex) {\n\t\t\t\t\t\tsorted.splice(slaveOrgIndex, 1);\n\t\t\t\t\t\ti--;\n\t\t\t\t\t}\n\t\t\t\t\tsorted.splice(i + 1, 0, slaveOrg);\n\t\t\t\t}\n\t\t}\n\t\tfor (let o = 0, { length } = sorted; o < length;)\n\t\t\tsorted[o]._o = o++;\n\t\t\n\t\tthis.sorted = sorted;\n\t\t\n\t\tif (this.users.isInited)\n\t\t\tthis.users.update();\n\t\t\n\t}\n\t\n\t#sortOrgs(a: Org<AS>, b: Org<AS>) {\n\t\treturn (\n\t\t\t(b.slaveOrgs.size - a.slaveOrgs.size) || (\n\t\t\t\ta.title > b.title ?\n\t\t\t\t\t1 :\n\t\t\t\t\ta.title < b.title ?\n\t\t\t\t\t\t-1 :\n\t\t\t\t\t\t0\n\t\t\t)\n\t\t);\n\t}\n\t\n\tasync create({ title, note, ...restProps }: NewOrg) {\n\t\t\n\t\tconst _id = newObjectIdString();\n\t\t\n\t\tawait this.collection.insertOne({\n\t\t\t_id,\n\t\t\ttitle: title ?? \"\",\n\t\t\tnote: note ?? \"\",\n\t\t\tmeta: {},\n\t\t\t...deleteProps(restProps, [ \"_id\" ]),\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\t\n\t\treturn _id;\n\t}\n\t\n\tasync updateOrg(_id: string, updates: Omit<OrgDoc, \"_id\" | \"createdAt\">, byUser?: User<AS>) {\n\t\tconst org = this.get(_id)!;\n\t\t\n\t\tif (!org)\n\t\t\treturn false;\n\t\t\n\t\tif (updates.owners)\n\t\t\tupdates.owners =\n\t\t\t\tthis.users.sortIds(\n\t\t\t\t\tunion(\n\t\t\t\t\t\tbyUser ?\n\t\t\t\t\t\t\twithout(org.ownerIds, byUser.slaveIds) :\n\t\t\t\t\t\t\t[],\n\t\t\t\t\t\twithout(updates.owners, [ _id, ..._ids(org.slaveOrgs) ])\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\n\t\tawait this.collection.updateOne({ _id }, { $set: updates });\n\t\t\n\t\treturn true;\n\t}\n\t\n\tdeleteOrg(org: Org<AS> | string) {\n\t\tconst _id = typeof org == \"string\" ? org : org._id;\n\t\t\n\t\treturn this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { owners: _id }, update: { $pullAll: { owners: [ _id ] } } } },\n\t\t\t{ deleteOne: { filter: { _id } } }\n\t\t]);\n\t}\n\t\n\treplaceMap = new Map<string, string>();\n\t\n\treplaceHandlers = new Set<(fromId: string, toId: string | null) => Promise<void> | void>();\n\t\n\tasync replace(fromId: string) {\n\t\tconst toId = this.replaceMap.get(fromId) ?? null;\n\t\tif (toId)\n\t\t\tthis.replaceMap.delete(fromId);\n\t\t\n\t\tfor (const handler of this.replaceHandlers)\n\t\t\tawait handler(fromId, toId);\n\t\t\n\t}\n\t\n}\n", "import type { AbilitiesSchema } from \"insite-common\";\nimport { User } from \"../users/User\";\nimport type { Orgs } from \"./Orgs\";\nimport type { OrgDoc } from \"./types\";\n\n\nconst snapshots = new WeakMap();\n\n\nexport class Org<AS extends AbilitiesSchema> {\n\tconstructor(orgs: Orgs<AS>, orgDoc: OrgDoc) {\n\t\tthis.orgs = orgs;\n\t\t\n\t\tthis._id = orgDoc._id;\n\t\torgs.set(this._id, this);\n\t\t\n\t\tvoid this.update(orgDoc);\n\t\t\n\t}\n\t\n\t_id;\n\ttitle = \"\";\n\tinitials = \"\";\n\tdisplayLabel = \"\";\n\t\n\t_o = 0;\n\t\n\torgs;\n\t\n\tisOrg = true;\n\t\n\townerOrgs = new Set<Org<AS>>();\n\townerUsers = new Set<User<AS>>();\n\t\n\tusers = new Set<User<AS>>();\n\t\n\tslaveOrgs = new Set<Org<AS>>();\n\t\n\townerIds: string[] = [];\n\t\n\tupdate({ _id, title, owners: ownerIds, ...restProps }: Partial<OrgDoc>) {\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tif (title !== undefined) {\n\t\t\tthis.title = title;\n\t\t\tthis.initials = title?.[0]?.toUpperCase() ?? \"\";\n\t\t\tthis.displayLabel = title;\n\t\t}\n\t\t\n\t\tif (ownerIds) {\n\t\t\tthis.ownerIds = ownerIds;\n\t\t\t\n\t\t\tconst snapshot = this.ownerIds.join(\",\");\n\t\t\t\n\t\t\tif (snapshot !== snapshots.get(this)) {\n\t\t\t\tsnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.orgs.users.isInited)\n\t\t\t\t\tthis.orgs.update();\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\tasync delete() {\n\t\t\n\t\tthis.orgs.delete(this._id);\n\t\t\n\t\tsnapshots.delete(this);\n\t\t\n\t\tawait this.orgs.replace(this._id);\n\t\t\n\t\tthis.orgs.update();\n\t\t\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"title\",\n\t\t\"note\",\n\t\t\"owners\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\ttitle: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 512\n\t\t},\n\t\tnote: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 131072\n\t\t},\n\t\towners: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps._id.source\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { randomBytes } from \"node:crypto\";\nimport { deleteProps, removeAll } from \"@nesvet/n\";\nimport type { AbilitiesSchema } from \"insite-common\";\nimport {\n\tChangeStreamDocument,\n\tCollectionIndexes,\n\tnewObjectIdString,\n\tWatchedCollection\n} from \"insite-db\";\nimport { User } from \"../users/User\";\nimport type { Users } from \"../users\";\nimport { basisSchema } from \"./schema\";\nimport { Session } from \"./Session\";\nimport { SessionDoc, SessionsOptions } from \"./types\";\n\n\nconst expireAfterSeconds = 3600 * 24 * 7;\n\nconst indexes: CollectionIndexes = [\n\t[ { user: 1 } ],\n\t[ { expiresAt: 1 }, { expireAfterSeconds } ]\n];\n\n\nexport class Sessions<AS extends AbilitiesSchema> extends Map<string, Session<AS>> {\n\tconstructor(users: Users<AS>, options: SessionsOptions = {}) {\n\t\tsuper();\n\t\t\n\t\tthis.users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.initOptions = options;\n\t}\n\t\n\tusers;\n\tcollections;\n\t\n\tprivate initOptions?;\n\t\n\tcollection!: WatchedCollection<SessionDoc> & {\n\t\texpireAfterSeconds: number;\n\t};\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.users.isInited) {\n\t\t\tconst {\n\t\t\t\tschema: customSchema,\n\t\t\t\tindexes: customIndexes,\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tif (customSchema) {\n\t\t\t\tif (customSchema.required)\n\t\t\t\t\tremoveAll(customSchema.required as string[], basisSchema.required as string[]);\n\t\t\t\tif (customSchema.properties)\n\t\t\t\t\tdeleteProps(customSchema, Object.keys(basisSchema.properties!));\n\t\t\t}\n\t\t\t\n\t\t\tconst schema = {\n\t\t\t\t...basisSchema,\n\t\t\t\t...customSchema,\n\t\t\t\trequired: [ ...basisSchema.required as string[], ...customSchema?.required as string[] ?? [] ],\n\t\t\t\tproperties: { ...basisSchema.properties, ...customSchema?.properties }\n\t\t\t};\n\t\t\t\n\t\t\tthis.collection = Object.assign(\n\t\t\t\tawait this.collections.ensure<SessionDoc>(\"sessions\", { ...collectionOptions, schema }),\n\t\t\t\t{\n\t\t\t\t\texpireAfterSeconds\n\t\t\t\t}\n\t\t\t);\n\t\t\t\n\t\t\tawait this.collection.ensureIndexes([ ...indexes, ...customIndexes ?? [] ]);\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t\t\n\t\t\tfor await (const sessionDoc of this.collection.find())\n\t\t\t\tthis.load(sessionDoc);\n\t\t\t\n\t\t\tthis.collection.onChange(this.#handleCollectionChange);\n\t\t\t\n\t\t\tdelete this.initOptions;\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.bulkWrite([\n\t\t\t{ updateMany: { filter: { meta: { $exists: false } }, update: { $set: { meta: {} } } } },\n\t\t\t{ updateMany: { filter: { isOnline: true }, update: { $set: { isOnline: false } } } }\n\t\t]);\n\t\t\n\t}\n\t\n\t#handleCollectionChange = (next: ChangeStreamDocument<SessionDoc>) => {\n\t\tswitch (next.operationType) {\n\t\t\tcase \"insert\":\n\t\t\t\tif (!this.has(next.documentKey._id))\n\t\t\t\t\tnew Session<AS>(this, next.fullDocument);\n\t\t\t\t\n\t\t\t\tvoid this.users.get(next.fullDocument.user)?.trimSessions();\n\t\t\t\t\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"replace\":\n\t\t\t\tthis.get(next.documentKey._id)?.update(next.fullDocument);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"update\":\n\t\t\t\tthis.get(next.documentKey._id)?.update(next.updateDescription.updatedFields!);\n\t\t\t\tbreak;\n\t\t\t\n\t\t\tcase \"delete\":\n\t\t\t\tthis.get(next.documentKey._id)?.delete();\n\t\t}\n\t\t\n\t};\n\t\n\tuid() {\n\t\treturn `${newObjectIdString()}~${randomBytes(32).toString(\"base64url\")}`;\n\t}\n\t\n\tload(sessionDoc: SessionDoc) {\n\t\tnew Session<AS>(this, sessionDoc);\n\t\t\n\t}\n\t\n\tasync create(user: User<AS>, props: Partial<SessionDoc>) {\n\t\t\n\t\tconst ts = Date.now();\n\t\t\n\t\tconst sessionDoc: SessionDoc = {\n\t\t\tuserAgent: \"\",\n\t\t\tremoteAddress: \"127.0.0.1\",\n\t\t\tisOnline: true,\n\t\t\t...props,\n\t\t\t_id: this.uid(),\n\t\t\tuser: user._id,\n\t\t\tmeta: {},\n\t\t\tcreatedAt: ts,\n\t\t\tprolongedAt: ts,\n\t\t\texpiresAt: new Date(ts + (expireAfterSeconds * 1000))\n\t\t};\n\t\t\n\t\t/* new Session(\u2026) before await insertOne(\u2026) for avoid changeStream insert event to come earlier and create the session duplicate */\n\t\tconst session = new Session<AS>(this, sessionDoc);\n\t\t\n\t\tawait this.collection.insertOne(sessionDoc);\n\t\t\n\t\treturn session;\n\t}\n\t\n\tasync destroySession(_id: string) {\n\t\tconst { deletedCount } = await this.collection.deleteOne({ _id });\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"user\",\n\t\t\"remoteAddress\",\n\t\t\"isOnline\",\n\t\t\"meta\",\n\t\t\"createdAt\",\n\t\t\"prolongedAt\",\n\t\t\"expiresAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.sessionId.source\n\t\t},\n\t\tuser: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\tuserAgent: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 4096\n\t\t},\n\t\tremoteAddress: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.ip.source\n\t\t},\n\t\tisOnline: {\n\t\t\tbsonType: \"bool\"\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\tprolongedAt: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\texpiresAt: {\n\t\t\tbsonType: \"date\"\n\t\t}\n\t}\n\t// TODO: Restrict additional properties (not needed with meta)\n};\n", "import type { AbilitiesSchema } from \"insite-common\";\nimport type { User } from \"../users/User\";\nimport type { Sessions } from \"./Sessions\";\nimport type { SessionDoc } from \"./types\";\n\n\nexport class Session<AS extends AbilitiesSchema> {\n\tconstructor(sessions: Sessions<AS>, sessionDoc: SessionDoc) {\n\t\tconst user = sessions.users.get(sessionDoc.user);\n\t\t\n\t\tif (user) {\n\t\t\tthis.#sessions = sessions;\n\t\t\t\n\t\t\tthis._id = sessionDoc._id;\n\t\t\tthis.#sessions.set(this._id, this);\n\t\t\t\n\t\t\tthis.user = user;\n\t\t\tthis.user.sessions.add(this);\n\t\t\t\n\t\t\tthis.#sessions.users.bySessionId.set(this._id, this.user);\n\t\t\t\n\t\t\tthis.update(sessionDoc);\n\t\t} else\n\t\t\tvoid sessions.collection.deleteOne({ _id: sessionDoc._id });\n\t\t\n\t}\n\t\n\t_id!: string;\n\tuser!: User<AS>;\n\tisOnline = false;\n\t\n\tuserAgent!: string;\n\tremoteAddress!: string;\n\tcreatedAt!: number;\n\tprolongedAt!: number;\n\texpiresAt!: Date;\n\t\n\t#sessions!: Sessions<AS>;\n\t\n\tupdate({ _id, user, isOnline, ...restProps }: Partial<SessionDoc>) {\n\t\t\n\t\tif (isOnline !== undefined && this.isOnline !== isOnline) {\n\t\t\tthis.isOnline = isOnline;\n\t\t\t\n\t\t\tif (this.#sessions.users.isInited && this.user.isOnline !== this.isOnline)\n\t\t\t\tvoid this.user.updateIsOnlineDebounced();\n\t\t}\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t}\n\t\n\tprolong({ _id, user, ...updates }: Partial<SessionDoc>) {\n\t\t\n\t\tconst ts = Date.now();\n\t\t\n\t\tupdates.prolongedAt = ts;\n\t\tupdates.expiresAt = new Date(ts + (this.#sessions.collection.expireAfterSeconds * 1000));\n\t\t\n\t\tthis.update(updates);\n\t\t\n\t\treturn this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t}\n\t\n\tasync online() {\n\t\t\n\t\tif (!this.isOnline) {\n\t\t\tconst updates = { isOnline: true };\n\t\t\t\n\t\t\tthis.update(updates);\n\t\t\t\n\t\t\tawait this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t\t}\n\t\t\n\t}\n\t\n\tasync offline() {\n\t\t\n\t\tif (this.isOnline) {\n\t\t\tconst updates = { isOnline: false };\n\t\t\t\n\t\t\tthis.update(updates);\n\t\t\t\n\t\t\tawait this.#sessions.collection.updateOne({ _id: this._id }, { $set: updates });\n\t\t}\n\t\t\n\t}\n\t\n\tdelete() {\n\t\t\n\t\tthis.#sessions.delete(this._id);\n\t\tthis.user.sessions.delete(this);\n\t\tthis.#sessions.users.bySessionId.delete(this._id);\n\t\t\n\t\tthis.#sessions.users.emit(\"session-delete\", this);\n\t\t\n\t\tif (this.isOnline)\n\t\t\tthis.user.updateIsOnline();\n\t\t\n\t}\n\t\n}\n", "import { Binary, type WatchedCollection } from \"insite-db\";\nimport type { Users } from \"../Users\";\nimport { schema } from \"./schema\";\nimport type { AvatarDoc, AvatarsOptions } from \"./types\";\n\n\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\n\nexport class Avatars {\n\tconstructor(users: Users<any>, options: AvatarsOptions = {}) {\n\t\tthis.#users = users;\n\t\tthis.collections = users.collections;\n\t\t\n\t\tthis.initOptions = options;\n\t\t\n\t}\n\t\n\treadonly TYPES_ACCEPTED = [ \"image/webp\" ];\n\treadonly MAX_SIZE = 1024 * 512;\n\t\n\t#users;\n\tcollections;\n\t\n\tcollection!: WatchedCollection<AvatarDoc>;\n\t\n\tprivate initOptions?;\n\t\n\tasync init() {\n\t\t\n\t\tif (!this.#users.isInited) {\n\t\t\tconst {\n\t\t\t\tcollection: collectionOptions\n\t\t\t} = this.initOptions!;\n\t\t\t\n\t\t\tthis.collection = await this.collections.ensure<AvatarDoc>(\"users.avatars\", { ...collectionOptions, schema });\n\t\t\t\n\t\t\tawait this.#maintain();\n\t\t}\n\t\t\n\t}\n\t\n\tasync #maintain() {\n\t\t\n\t\tawait this.collection.updateMany({ meta: { $exists: false } }, { $set: { meta: {} } });\n\t\t\n\t}\n\t\n\tasync save(_id: string, type: string, data: string) {\n\t\tconst binaryData = Binary.createFromBase64(data.slice(data.indexOf(\",\")));\n\t\t\n\t\tif (!this.TYPES_ACCEPTED.includes(type))\n\t\t\tthrow new Error(\"avatar.unacceptable-format\");\n\t\t\n\t\tif (binaryData.length() > this.MAX_SIZE)\n\t\t\tthrow new Error(\"avatar.size-exceeds-limit\");\n\t\t\n\t\tconst ts = Date.now().toString(36);\n\t\t\n\t\tawait Promise.all([\n\t\t\tthis.collection.replaceOne({ _id }, {\n\t\t\t\ttype,\n\t\t\t\tsize: binaryData.length(),\n\t\t\t\tts,\n\t\t\t\tdata: binaryData,\n\t\t\t\tmeta: {}\n\t\t\t}, { upsert: true }),\n\t\t\tthis.#users.collection.updateOne({ _id }, { $set: { avatar: ts } })\n\t\t]);\n\t\t\n\t}\n\t\n\tasync deleteAvatar(_id: string) {\n\t\t\n\t\tconst [ { deletedCount } ] = await Promise.all([\n\t\t\tthis.collection.deleteOne({ _id }),\n\t\t\tthis.#users.collection.updateOne({ _id }, { $set: { avatar: null } })\n\t\t]);\n\t\t\n\t\treturn Boolean(deletedCount);\n\t}\n\t\n}\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../../lib\";\n\n\nexport const schema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"type\",\n\t\t\"size\",\n\t\t\"ts\",\n\t\t\"data\",\n\t\t\"meta\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\ttype: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 256\n\t\t},\n\t\tsize: {\n\t\t\tbsonType: \"number\"\n\t\t},\n\t\tts: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 10\n\t\t},\n\t\tdata: {\n\t\t\tbsonType: \"binData\"\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import { CollectionSchema } from \"insite-db\";\nimport { regexps } from \"../lib\";\n\n\nexport const basisSchema: CollectionSchema = {\n\trequired: [\n\t\t\"_id\",\n\t\t\"email\",\n\t\t\"password\",\n\t\t\"roles\",\n\t\t\"name\",\n\t\t\"org\",\n\t\t\"job\",\n\t\t\"meta\",\n\t\t\"createdAt\"\n\t],\n\tproperties: {\n\t\t_id: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps._id.source\n\t\t},\n\t\temail: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.email.source\n\t\t},\n\t\tpassword: {\n\t\t\tbsonType: \"string\",\n\t\t\tpattern: regexps.argon2.source\n\t\t},\n\t\troles: {\n\t\t\tbsonType: \"array\",\n\t\t\tuniqueItems: true,\n\t\t\titems: {\n\t\t\t\tbsonType: \"string\",\n\t\t\t\tpattern: regexps.role.source\n\t\t\t},\n\t\t\tadditionalItems: false\n\t\t},\n\t\tname: {\n\t\t\tbsonType: \"object\",\n\t\t\trequired: [\n\t\t\t\t\"first\",\n\t\t\t\t\"middle\",\n\t\t\t\t\"last\"\n\t\t\t],\n\t\t\tproperties: {\n\t\t\t\tfirst: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t},\n\t\t\t\tmiddle: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t},\n\t\t\t\tlast: {\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 512\n\t\t\t\t}\n\t\t\t},\n\t\t\tadditionalProperties: false\n\t\t},\n\t\torg: {\n\t\t\toneOf: [\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tpattern: regexps._id.source\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"null\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\tjob: {\n\t\t\tbsonType: \"string\",\n\t\t\tmaxLength: 512\n\t\t},\n\t\tavatar: {\n\t\t\toneOf: [\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"string\",\n\t\t\t\t\tmaxLength: 10\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tbsonType: \"null\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\tmeta: {\n\t\t\tbsonType: \"object\"\n\t\t},\n\t\tcreatedAt: {\n\t\t\tbsonType: \"number\"\n\t\t}\n\t},\n\tadditionalProperties: false\n};\n", "import {\n\t_ids,\n\tdebounce,\n\tempty,\n\thasAny,\n\tremoveOne\n} from \"@nesvet/n\";\nimport type { Abilities, AbilitiesSchema } from \"insite-common\";\nimport type { GenericAbilities } from \"../abilities/types\";\nimport type { Org } from \"../orgs/Org\";\nimport type { Role } from \"../roles/Role\";\nimport type { Session } from \"../sessions/Session\";\nimport type { UserDoc } from \"./types\";\nimport type { Users } from \"./Users\";\n\n\nconst rolesSnapshots = new WeakMap();\nconst permissionsSnapshots = new WeakMap();\n\nconst staticUrl = process.env.INSITE_STATIC_URL ?? \"\";\n\n\nexport class User<AS extends AbilitiesSchema> {\n\tconstructor(users: Users<AS>, userDoc: UserDoc) {\n\t\tthis.#users = users;\n\t\t\n\t\tthis._id = userDoc._id;\n\t\tusers.set(this._id, this);\n\t\t\n\t\tvoid this.update(userDoc);\n\t\t\n\t\tif (users.isInited)\n\t\t\tusers.emit(\"user-create\", this);\n\t\t\n\t}\n\t\n\t_id;\n\temail!: string;\n\tname = {\n\t\tfirst: \"\",\n\t\tmiddle: \"\",\n\t\tlast: \"\"\n\t};\n\t\n\tinitials = \"\";\n\tdisplayLabel = \"\";\n\torg!: Org<AS>;\n\tjob: string = \"\";\n\tavatar: string | null = null;\n\tavatarUrl: string | null = null;\n\t\n\t#users;\n\t\n\tisUser = true;\n\tisRoot?: boolean;\n\t\n\troles = new Set<Role<AS>>();\n\townRoles: Role<AS>[] = [];\n\townRoleIds: string[] = [];\n\tslaveRoles = new Set<Role<AS>>();\n\tslaveRoleIds: string[] = [];\n\tabilities: Abilities<AS> = {};\n\t\n\tslaveOrgs = new Set<Org<AS>>();\n\tslaveUsers = new Set<User<AS>>();\n\tslaves = new Set<Org<AS> | User<AS>>();\n\t\n\tslaveIds: string[] = [];\n\tpermissiveIds: string[] = [];\n\t\n\tsessions = new Set<Session<AS>>();\n\t\n\tisOnline = false;\n\t\n\tupdate({ _id, name, email, roles: ownRoleIds, org: orgId, avatar, ...restProps }: Partial<UserDoc>) {\n\t\t\n\t\tObject.assign(this, restProps);\n\t\t\n\t\tlet isEmailUpdated;\n\t\tif (email && this.email !== email) {\n\t\t\tthis.#users.byEmail.delete(this.email);\n\t\t\tthis.email = email;\n\t\t\tthis.#users.byEmail.set(email, this);\n\t\t\tisEmailUpdated = true;\n\t\t}\n\t\t\n\t\tlet isNameUpdated;\n\t\tlet isLastNameUpdated;\n\t\tif (name && (this.name.first !== name.first || this.name.middle !== name.middle || this.name.last !== name.last)) {\n\t\t\tisLastNameUpdated = this.name.last !== name.last;\n\t\t\tthis.name = {\n\t\t\t\tfirst: name.first ?? \"\",\n\t\t\t\tmiddle: name.middle ?? \"\",\n\t\t\t\tlast: name.last ?? \"\"\n\t\t\t};\n\t\t\tthis.initials = (((name.first?.[0] ?? \"\") + (name.last?.[0] ?? \"\")) || this.email[0]).toUpperCase();\n\t\t\tisNameUpdated = true;\n\t\t}\n\t\t\n\t\tif (isEmailUpdated || isNameUpdated)\n\t\t\tthis.displayLabel = `${this.name.first} ${this.name.last}`.trim() || this.name.middle || this.email;\n\t\t\n\t\tlet isRolesUpdated;\n\t\tif (ownRoleIds) {\n\t\t\tthis.ownRoleIds = ownRoleIds;\n\t\t\t\n\t\t\tconst snapshot = this.ownRoleIds.join(\",\");\n\t\t\t\n\t\t\tif (snapshot !== rolesSnapshots.get(this)) {\n\t\t\t\trolesSnapshots.set(this, snapshot);\n\t\t\t\t\n\t\t\t\tif (this.#users.isInited) {\n\t\t\t\t\tthis.updateRoles();\n\t\t\t\t\tisRolesUpdated = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t\tlet isOrgUpdated;\n\t\tif (orgId !== undefined && this.org?._id !== orgId) {\n\t\t\tthis.org?.users.delete(this);\n\t\t\tthis.org = orgId && this.#users.orgs.get(orgId) || this.#users.orgs.null;// eslint-disable-line @stylistic/no-mixed-operators\n\t\t\tthis.org.users.add(this);\n\t\t\tisOrgUpdated = true;\n\t\t}\n\t\t\n\t\tif (avatar !== undefined && this.avatar !== avatar) {\n\t\t\tthis.avatar = avatar;\n\t\t\tthis.avatarUrl = avatar && `${staticUrl}/avatars/${this._id}-${avatar}.webp`;\n\t\t}\n\t\t\n\t\tif (this.#users.isInited)\n\t\t\tif (isRolesUpdated || isOrgUpdated) {\n\t\t\t\tthis.updatePermissions();\n\t\t\t\t\n\t\t\t\tif (isLastNameUpdated)\n\t\t\t\t\tthis.#users.isSortRequired = true;\n\t\t\t\t\n\t\t\t\tthis.#users.update();\n\t\t\t} else if (isLastNameUpdated)\n\t\t\t\tthis.#users.sort();\n\t\t\n\t}\n\t\n\tupdateRoles() {\n\t\t\n\t\tthis.ownRoles = [];\n\t\tthis.roles.clear();\n\t\tthis.slaveRoles.clear();\n\t\tempty(this.abilities);\n\t\t\n\t\tfor (const roleId of this.ownRoleIds) {\n\t\t\tconst role = this.#users.roles.get(roleId);\n\t\t\tif (role) {\n\t\t\t\t\n\t\t\t\tthis.ownRoles.push(role);\n\t\t\t\tthis.roles.add(role);\n\t\t\t\tfor (const involvedRole of role.involves) {\n\t\t\t\t\tthis.roles.add(involvedRole);\n\t\t\t\t\tthis.slaveRoles.add(involvedRole);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tthis.slaveRoleIds = _ids(this.slaveRoles);\n\t\t\t\t\n\t\t\t\tthis.#users.abilities.merge(this.abilities as GenericAbilities, role.abilities as GenericAbilities);\n\t\t\t}\n\t\t}\n\t\t\n\t\tif (this.roles.has(this.#users.roles.root))\n\t\t\tthis.isRoot = true;\n\t\t\n\t\tvoid this.trimSessions();\n\t\t\n\t}\n\t\n\tupdatePermissions() {\n\t\t\n\t\tthis.slaveOrgs.clear();\n\t\tthis.slaveUsers.clear();\n\t\tthis.slaves.clear();\n\t\tconst slaveIds = new Set<string>();\n\t\t\n\t\tfor (const org of this.#users.orgs.sorted)\n\t\t\tif ((org.ownerUsers.has(this) || this.isRoot) && !this.slaveOrgs.has(org)) {\n\t\t\t\tthis.slaveOrgs.add(org);\n\t\t\t\tthis.slaves.add(org);\n\t\t\t\tslaveIds.add(org._id);\n\t\t\t\tfor (const slaveOrg of org.slaveOrgs) {\n\t\t\t\t\tthis.slaveOrgs.add(slaveOrg);\n\t\t\t\t\tthis.slaves.add(slaveOrg);\n\t\t\t\t\tslaveIds.add(slaveOrg._id);\n\t\t\t\t}\n\t\t\t}\n\t\t\n\t\tfor (const org of new Set([ this.org, ...this.slaveOrgs, this.#users.orgs.null ]))\n\t\t\tfor (const user of org.users)\n\t\t\t\tif (user !== this && (hasAny(this.slaveRoles, user.ownRoles) || !user.ownRoles.length)) {\n\t\t\t\t\tthis.slaveUsers.add(user);\n\t\t\t\t\tthis.slaves.add(user);\n\t\t\t\t\tslaveIds.add(user._id);\n\t\t\t\t}\n\t\t\n\t\tthis.slaveIds = [ ...slaveIds ];\n\t\t\n\t\tconst permissiveOrgIds = [];\n\t\tif (this.org._id) {\n\t\t\tpermissiveOrgIds.push(this.org._id);\n\t\t\tfor (const slaveOrg of this.org.slaveOrgs)\n\t\t\t\tif (!this.slaveOrgs.has(slaveOrg))\n\t\t\t\t\tpermissiveOrgIds.push(slaveOrg._id);\n\t\t}\n\t\t\n\t\tthis.permissiveIds = [ ...permissiveOrgIds, this._id, ...slaveIds ];\n\t\t\n\t\t\n\t\tconst snapshot = [\n\t\t\tthis.permissiveIds.join(\",\"),\n\t\t\tthis.ownRoleIds.join(\",\"),\n\t\t\tJSON.stringify(this.abilities),\n\t\t\tthis.slaveRoleIds.join(\",\")\n\t\t].join(\"\\n\");\n\t\t\n\t\tif (snapshot !== permissionsSnapshots.get(this)) {\n\t\t\tpermissionsSnapshots.set(this, snapshot);\n\t\t\t\n\t\t\tif (this.#users.isInited)\n\t\t\t\tthis.#users.emit(\"user-permissions-change\", this);\n\t\t}\n\t\t\n\t}\n\t\n\ttrimSessions() {\n\t\t\n\t\tconst sessionsLimit = this.abilities.login?.sessionsLimit;\n\t\t\n\t\tif (typeof sessionsLimit == \"number\" && this.sessions.size > sessionsLimit)\n\t\t\treturn this.#users.sessions.collection.deleteMany({\n\t\t\t\t_id: {\n\t\t\t\t\t$in: _ids(\n\t\t\t\t\t\t[ ...this.sessions ]\n\t\t\t\t\t\t\t.sort((a, b) => a.expiresAt.valueOf() - b.expiresAt.valueOf())\n\t\t\t\t\t\t\t.slice(0, this.sessions.size - sessionsLimit)\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t});\n\t\t\n\t}\n\t\n\tupdateIsOnline() {\n\t\t\n\t\tlet isOnline = false;\n\t\t\n\t\tfor (const session of this.sessions)\n\t\t\tif (session.isOnline) {\n\t\t\t\tisOnline = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\n\t\tif (this.isOnline !== isOnline) {\n\t\t\tthis.isOnline = isOnline;\n\t\t\tthis.#users.emit(\"user-is-online\", this);\n\t\t}\n\t\t\n\t}\n\t\n\tupdateIsOnlineDebounced = debounce(() => this.updateIsOnline(), 500);\n\t\n\tasync delete() {\n\t\t\n\t\tthis.org.users.delete(this);\n\t\t\n\t\tthis.#users.delete(this._id);\n\t\tthis.#users.byEmail.delete(this.email);\n\t\tremoveOne(this.#users.sorted, this);\n\t\t\n\t\trolesSnapshots.delete(this);\n\t\tpermissionsSnapshots.delete(this);\n\t\t\n\t\tawait this.#users.replace(this._id);\n\t\t\n\t\tthis.#users.update();\n\t\t\n\t}\n\t\n}\n"],
+  "mappings": "AAAA,OAAS,OAAAA,OAAW,YAMb,IAAMC,EAAN,cAA2BD,EAAI,CAGrC,YAAYE,EAA2BC,EAAmB,CACrD,OAAOD,GAAU,WACpBC,EAAUD,EACVA,EAAS,QAGV,MAAM,qBAAsB,eAAgB,CAC3C,GAAGA,GAAU,CAAE,QAASA,CAAO,EAC/B,GAAGC,CACJ,CAAC,CAEF,CAEA,KAAO,cAER,ECxBA,OACC,OAAAC,GACA,cAAAC,GACA,cAAAC,GACA,SAAAC,GACA,WAAAC,EACA,gBAAAC,GACA,QAAAC,GACA,WAAAC,OACM,YCeA,SAASC,EAAgBC,EAAwC,CACvE,OAAO,OAAOA,GAAS,QACxB,CAEO,SAASC,EAAqBD,EAAkD,CACtF,OAAO,OAAOA,GAAS,QACxB,CAEO,SAASE,EAAoBF,EAAiD,CACpF,OAAO,MAAM,QAAQA,CAAK,CAC3B,CDTA,IAAMG,EAAkB,IAAI,IAGfC,EAAN,cAAuD,GAA2B,CACxF,YAAYC,EAAqB,CAChC,MAAM,EAEN,QAAWC,KAAaD,EACvB,OAAOC,EAAU,IAEjB,KAAKC,GAAc,KAAKD,CAA0B,GAGlD,SAASE,EAA8BC,EAA0BC,EAA8BC,EAAe,CAC9G,QAAWC,KAAUH,EAA4B,CAKhD,GAJAN,EAAgB,IAAIS,EAAQF,CAAM,EAElCE,EAAO,MAAQD,EAEX,CAACD,GAAUE,EAAO,IAAK,CAG1B,GAFAA,EAAO,OAASA,EAAO,IAEnB,KAAK,IAAIA,EAAO,GAAG,EACtB,MAAM,IAAI,MAAM,gCAAgCA,EAAO,GAAG,EAAE,EAE7D,KAAK,IAAIA,EAAO,IAAKA,CAAM,CAC5B,MACCA,EAAO,OAASF,EAAS,GAAGA,EAAO,MAAM,IAAIE,EAAO,GAAG,GAAKA,EAAO,IAEhEA,EAAO,WACVJ,EAAM,KAAK,KAAMI,EAAO,UAAWA,EAAQD,EAAQ,CAAC,CACtD,CAED,GAAG,KAAK,KAAMN,EAAiB,KAAM,CAAC,CAEvC,CAEAE,GAAiC,CAAC,EAElC,IAAIM,EAAgBH,EAA+B,CAClD,IAAMI,EAASD,EAAO,MAAM,GAAG,EAC3BD,EAASF,GAAU,MAAM,IAAII,EAAO,MAAM,CAAE,EAEhD,GAAIF,GAAUE,EAAO,QACpB,QAAWC,KAASD,EAEnB,GADAF,EAASA,GAAQ,WAAW,KAAK,CAAC,CAAE,IAAAI,EAAK,IAAAC,CAAI,IAAM,CAACA,GAAOD,IAAQD,CAAK,EACpE,CAACH,EACJ,MAGH,OAAOA,CACR,CAEA,UAAY,KAAK,IAEjB,eAAeC,EAAgBK,EAAiB,CAC/C,OAAO,KAAK,IAAIL,CAAM,GAAG,QAAQ,KAAK,CAAC,CAAE,IAAAG,CAAI,IAAMA,IAAQE,CAAO,CACnE,CAIA,gBAAgBC,EAA6CC,EAAiCC,EAAe,EACxGD,IAAiB,QAAa,OAAOA,GAAgB,aACxDC,EAAMD,GAEP,IAAMR,EAAS,OAAOO,GAAkB,SAAW,KAAK,eAAeA,EAAgBC,CAAsB,EAAID,EAEjH,GAAIP,EACH,OAAQA,EAAO,KAAM,CACpB,IAAK,SACJ,OAAOS,EACLT,EAAO,KAAO,IACdA,EAAO,KAAO,EAEjB,IAAK,QACJ,OAAOS,EACNT,EAAO,MAAM,IAAI,CAAC,CAAE,IAAAI,CAAI,IAAMA,CAAG,EACjC,CAAC,CACJ,CAGF,CAIA,kBAAkBJ,EAAgCS,EAAe,CAACT,EAA6B,CAI9F,GAHI,OAAOA,GAAU,WACpBA,EAAS,KAAK,IAAIA,CAAM,GAErBA,EAAQ,CACX,GAAIA,EAAO,WAAaA,EAAO,OAAQ,CACtC,IAAMU,EAAU,CAAC,EAEjB,GAAIV,EAAO,OACV,QAAWW,KAAeX,EAAO,OAChCU,EAAQC,EAAY,GAAG,EAAI,KAAK,gBAAgBA,EAAaF,CAAG,EAElE,GAAIA,GAAOT,EAAO,UACjB,QAAWN,KAAaM,EAAO,UACzBN,EAAU,MACdgB,EAAQhB,EAAU,GAAG,EAAI,KAAK,kBAAkBA,EAAWe,CAAG,GAEjE,OAAOC,CACR,CAEA,MAAO,EACR,CAGD,CAOA,oBAAoBE,EAAoEH,EAAe,CAACG,EAAc,CAErH,IAAMf,GACLe,GACE,MAAM,QAAQA,CAAY,EAAIA,EAAe,CAAEA,CAAa,GAC3D,IAAIZ,GAAW,OAAOA,GAAU,SAAW,KAAK,IAAIA,CAAM,EAAIA,CAAO,EACrE,OAAO,OAAO,EAChB,CAAE,GAAG,KAAK,OAAO,CAAE,GACnB,KAAK,CAACa,EAAGC,IAAMD,EAAE,MAAQC,EAAE,KAAK,EAE5BC,EAAe,IAAI,IAEzB,QAAWf,KAAUH,GACnB,SAASmB,EAAQC,EAAS,CAC1B,IAAMC,EAAe3B,EAAgB,IAAI0B,CAAO,EAE5CC,IACHF,EAAQE,CAAY,EAEfH,EAAa,IAAIG,CAAY,GACjCH,EAAa,IAAIG,EAAc,EAAK,EAGvC,GAAGlB,CAAM,EAELS,GACF,SAASO,EAAQC,EAAS,CAI1B,GAHKF,EAAa,IAAIE,CAAO,GAC5BF,EAAa,IAAIE,EAAS,EAAI,EAE3BA,EAAQ,UACX,QAAWvB,KAAauB,EAAQ,UAC3BvB,EAAU,KACbsB,EAAQtB,CAAS,CAErB,GAAGM,CAAM,EAEJe,EAAa,IAAIf,CAAM,GAC3Be,EAAa,IAAIf,EAAQ,EAAK,EAGjC,OAAOmB,GACN,CAAC,EACD,OAAO,YACN,CAAE,GAAGJ,CAAa,EAChB,IAAI,CAAC,CAAEf,EAAQoB,CAAK,IAAM,CAAEpB,EAAO,OAAQ,KAAK,kBAAkBA,EAAQoB,CAAI,CAAE,CAAC,CACpF,CACD,CACD,CAEA,aAAaC,EAA6B,CACzC,OAAAA,EAAY,KAAK,OAAO,gBAAgBA,CAAS,CAAC,GAE1C,SAASL,EAAQM,EAA6BC,EAAgC,CACrF,QAASC,EAAI,EAAGA,EAAIF,EAAW,OAAQE,IAAK,CAC3C,IAAMxB,EAASsB,EAAWE,CAAC,EACrBd,EAAUV,EAAO,IAAMqB,EAAUrB,EAAO,GAAG,EAAIuB,EAAavB,EAAO,GAAG,EAE5E,GAAIU,EAAS,CACZ,GAAIV,EAAO,OACV,QAAWW,KAAeX,EAAO,OAAQ,CACxC,IAAMyB,EAAgBf,EAA0BC,EAAY,GAAG,EAE/D,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJA,EAAY,IAAMc,EAClB,MAED,IAAK,QACJd,EAAY,MAAQA,EAAY,MAAM,OAAO,CAAC,CAAE,IAAAP,CAAI,IAAOqB,EAAmC,SAASrB,CAAG,CAAC,CAC7G,CACD,CAEGJ,EAAO,YACVgB,EAAQhB,EAAO,UAAWU,CAA2B,EAEhDV,EAAO,UAAU,QACrB,OAAOA,EAAO,UAEjB,MACCsB,EAAW,OAAOE,IAAK,CAAC,CAC1B,CAEA,OAAOF,CACR,GAAG,gBAAgB,KAAK3B,EAAa,EAAG0B,CAAS,CAClD,CAEA,SAASA,EAA6BpB,EAAgBK,EAAiB,CACtE,GAAI,KAAK,eAAeL,EAAQK,CAAO,EAAG,CACzC,IAAMoB,EAAQC,EAAQN,EAAW,GAAGpB,CAAM,IAAIK,CAAO,EAAE,EAEvD,OAAI,KAAK,YAAYL,EAAQK,EAASoB,CAAK,EACnCA,EAED,KAAK,gBAAgBzB,EAAQK,CAAO,CAC5C,CAGD,CAEA,SAASe,EAA6BpB,EAAgBK,EAAiBoB,EAAoC,CAC1G,IAAM1B,EAAS,KAAK,eAAeC,EAAQK,CAAO,EAElD,GAAI,CAACN,EACJ,MAAM,IAAI,MAAM,0BAA0BC,CAAM,IAAIK,CAAO,EAAE,EAE9D,OAAAsB,GAAQP,EAAW,GAAGpB,CAAM,IAAIK,CAAO,GAAI,KAAK,YAAYN,EAAQ0B,CAAK,CAAC,EAEnEL,CACR,CAEA,YAAYpB,EAAgBK,EAAiBoB,EAAqBG,EAA+B,CAChG,GAAIH,IAAU,OAAW,CACxB,IAAMf,EAAc,KAAK,eAAeV,EAAQK,CAAO,EAEvD,GAAIK,EACH,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJ,OACCmB,EAAqBJ,CAAK,IACzBf,EAAY,MAAQ,QAAae,GAASf,EAAY,OACtDkB,IAAmB,OACjBlB,EAAY,MAAQ,QAAae,GAASf,EAAY,IACvDe,GAAUG,GAId,IAAK,QACJ,OACCE,EAAoBL,CAAK,GACzBA,EAAM,SAAW,IAAI,IAAIA,CAAK,EAAE,OAC/BG,IAAmB,OAClBH,EAAM,MAAMM,GAAUrB,EAAY,MAAM,KAAK,CAAC,CAAE,IAAAP,CAAI,IAAMA,IAAQ4B,CAAM,CAAC,EACzEN,EAAM,MAAMM,GAAWH,EAAqC,SAASG,CAAM,CAAC,EAGjF,CACF,CAEA,MAAO,EACR,CAEA,YAAYrB,EAAiCe,EAAqB,CACjE,OAAQf,EAAY,OACd,SAEHmB,EAAqBJ,CAAK,EACzB,KAAK,IACJ,KAAK,IACJA,EACAf,EAAY,KAAO,GACpB,EACAA,EAAY,KAAO,CACpB,EACAA,EAAY,KAAO,EAKpBoB,EAAoBL,CAAK,EACxBO,GAAatB,EAAY,MAAM,IAAIuB,GAAQA,EAAK,GAAG,EAAGR,CAAK,EAC3D,CAAC,CAIN,CAEA,OAAOL,EAA6BvB,EAA8C,CACjF,IAAMqC,EAAsC,CAAC,EAE7C,OAAW,CAAE/B,EAAKM,CAAQ,IAAK,OAAO,QAAQW,CAAS,EAAG,CACzD,IAAMrB,EAAS,KAAK,IAAII,EAAKN,CAAM,EAEnC,GAAIE,EACH,GAAIA,EAAO,QAAUA,EAAO,UAAW,CACtC,IAAMoC,EAAiC,CAAC,EAExC,GAAIpC,EAAO,OACV,GAAIqC,EAAgB3B,CAAO,EAC1B,QAAWC,KAAeX,EAAO,OAChCoC,EAAgBzB,EAAY,GAAG,EAAI,KAAK,YAAYA,EAAaD,EAAQC,EAAY,GAAG,CAAiB,MAE1G,SAAWA,KAAeX,EAAO,OAChCoC,EAAgBzB,EAAY,GAAG,EAAI,KAAK,gBAAgBA,CAAW,EAElEX,EAAO,WAAaqC,EAAgB3B,CAAO,GAC9C,OAAO,OACN0B,EACA,KAAK,OACJE,GACC5B,EACAV,EAAO,UACL,OAAON,GAAa,CAACA,EAAU,GAAG,EAClC,IAAIA,GAAaA,EAAU,GAAG,CACjC,EACAM,CACD,CACD,EAEDmC,EAAkB/B,CAAG,EAAIgC,CAC1B,MACCD,EAAkB/B,CAAG,EAAI,EAC5B,CAEA,OAAO,OAAO,OAAOmC,GAAMlB,CAAS,EAAGc,CAAiB,CACzD,CAEA,MAAMK,EAA0BC,EAA0B3C,EAA8C,CAClGA,IACJ,KAAK,OAAO0C,CAAM,EAClBC,EAAS,KAAK,OAAO,gBAAgBA,CAAM,CAAC,GAG7C,OAAW,CAAErC,EAAKM,CAAQ,IAAK,OAAO,QAAQ+B,CAAM,EAAG,CACtD,IAAMzC,EAAS,KAAK,IAAII,EAAKN,CAAM,EAEnC,GAAIE,GAAUA,EAAO,gBAAkB,GACtC,GAAII,KAAOoC,IAAWxC,EAAO,QAAUA,EAAO,WAAY,CACzD,IAAM0C,EAAgBF,EAAOpC,CAAG,EAC1BuC,EAAgBjC,EAEtB,GAAIV,EAAO,QACV,QAAWW,KAAeX,EAAO,OAChC,GAAIW,EAAY,gBAAkB,GACjC,OAAQA,EAAY,KAAM,CACzB,IAAK,SACJ+B,EAAc/B,EAAY,GAAG,EAC5B,KAAK,IACJ+B,EAAc/B,EAAY,GAAG,EAC7BgC,EAAchC,EAAY,GAAG,CAC9B,EACD,MAED,IAAK,QACJiC,GACCF,EAAc/B,EAAY,GAAG,EAC7B,GAAGgC,EAAchC,EAAY,GAAG,CACjC,CACF,EAECX,EAAO,WACV,KAAK,MAAM0C,EAAmCC,EAAmC3C,CAAM,CACzF,MACCwC,EAAOpC,CAAG,EAAIM,CACjB,CAEA,OAAO8B,CACR,CAEA,WAAWnB,EAA6BpB,EAAgB,CACvD,MAAO,EAAQ0B,EAAQN,EAAWpB,CAAM,CACzC,CAIA,WAAWuC,EAA0BjC,EAAwC,CAC5E,IAAMP,EAAS,OAAOO,GAAkB,SAAW,KAAK,IAAIA,CAAc,EAAIA,EAE9E,GAAI,CAACP,EACJ,MAAM,IAAI,MAAM,oBAAoBO,CAAwB,EAAE,EAE/D,YAAK,MAAMiC,EAAQ,KAAK,oBAAoBxC,CAAM,CAAC,EAE5CwC,CACR,CAIA,aAAaA,EAA0BjC,EAAwC,CAC9E,IAAMP,EAAS,OAAOO,GAAkB,SAAW,KAAK,IAAIA,CAAc,EAAIA,EAE9E,GAAI,CAACP,EACJ,MAAM,IAAI,MAAM,oBAAoBO,CAAwB,EAAE,EAE/D,OAAC,SAASS,EAAQC,EAAS,CAG1B,GAFA4B,GAAWL,EAAQvB,EAAQ,MAAM,EAE7BA,EAAQ,UACX,QAAWvB,KAAauB,EAAQ,UAC/BD,EAAQtB,CAAS,CAEpB,GAAGM,CAAM,EAEFwC,CACR,CAED,EE3aA,OAAS,OAAAM,OAAW,YAMb,IAAMC,EAAN,cAAyBD,EAAI,CAGnC,YAAYE,EAA4CC,EAAmB,CAC1E,MAAM,kBAAkB,MAAM,QAAQD,CAAa,EAAI,IAAM,EAAE,GAAI,aAAc,CAChF,MAAO,MAAM,QAAQA,CAAa,EAAIA,EAAgB,CAAEA,CAAc,EACtE,GAAGC,CACJ,CAAC,CAEF,CAEA,KAAO,YAER,ECnBA,OACC,eAAAC,EACA,UAAAC,EACA,gBAAAC,GACA,SAAAC,GACA,aAAAC,MACM,YCDP,IAAMC,EAAY,IAAI,QAGTC,EAAN,KAAuC,CAC7C,YAAYC,EAAkBC,EAAkB,CAC/C,KAAKC,GAASF,EAEd,KAAK,IAAMC,EAAQ,IACnBD,EAAM,IAAI,KAAK,IAAK,IAAI,EAEnB,KAAK,OAAOC,CAAO,CAEzB,CAEAC,GAEA,IACA,cACA,aACA,MAAQ,GACR,aAAe,GACf,GAAK,EAEL,YAA0B,CAAC,EAC3B,SAAW,IAAI,IACf,UAA2B,CAAC,EAC5B,mBAAoC,CAAC,EAErC,OAAO,CAAE,IAAAC,EAAK,SAAUC,EAAe,UAAWC,EAAc,MAAAC,EAAO,GAAGC,CAAU,EAAqB,CAgBxG,GAfA,OAAO,OAAO,KAAMA,CAAS,EAEzBH,IACH,KAAK,cAAgBA,GAElBC,IACH,KAAK,aAAe,OAAOA,GAAgB,SAC1C,KAAKH,GAAO,UAAU,OAAOG,CAAY,EACzCA,GAEEC,IAAU,SACb,KAAK,MAAQA,EACb,KAAK,aAAeA,GAAS,KAAK,KAG/BF,GAAiBC,EAAc,CAClC,IAAMG,EAAW,CAChB,KAAK,cAAc,KAAK,GAAG,EAC3B,KAAK,UAAU,KAAK,YAAY,CACjC,EAAE,KAAK;AAAA,CAAI,EAEPA,IAAaV,EAAU,IAAI,IAAI,IAClCA,EAAU,IAAI,KAAMU,CAAQ,EAExB,KAAKN,GAAO,MAAM,UACrB,KAAKA,GAAO,OAAO,EAEtB,CAED,CAEA,QAAS,CAER,KAAKA,GAAO,OAAO,KAAK,GAAG,EAE3BJ,EAAU,OAAO,IAAI,EAErB,KAAKI,GAAO,OAAO,CAEpB,CAED,EC3EO,IAAMO,EAAU,CACtB,IAAK,mBACL,MAAO,4CACP,OAAQ,uEAER,UAAW,4EACX,KAAM,oBACN,GAAI,wEACL,ECJO,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,WACA,YACA,QACA,cACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,KAAK,OACtB,IAAK,CAAE,KAAM,CAAE,MAAO,CAAE,CACzB,EACA,SAAU,CACT,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,KAAK,OACtB,IAAK,CAAE,KAAM,CAAE,MAAO,CAAE,CACzB,EACA,gBAAiB,EAClB,EACA,UAAW,CACV,SAAU,QACX,EACA,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,YAAa,CACZ,SAAU,SACV,UAAW,KACZ,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EHjCA,IAAMC,GAA6B,CAClC,CAAE,CAAE,SAAU,CAAE,CAAE,CACnB,EAEA,SAASC,GAAsB,CAC9B,MAAM,IAAI,MAAM,uGAAuG,CACxH,CAGO,IAAMC,EAAN,cAAgD,GAAsB,CAC5E,YAAYC,EAAkBC,EAAwB,CAAC,EAAG,CACzD,MAAM,EAEN,GAAM,CACL,KAAMC,EACN,GAAGC,CACJ,EAAIF,EAEJ,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YACzB,KAAK,UAAYA,EAAM,UAEvB,KAAK,KAAO,IAAII,EAAS,KAAM,CAC9B,GAAGF,EACH,IAAK,OACL,SAAU,CAAC,EACX,UAAW,KAAK,UAAU,oBAAoB,EAC9C,MAAO,OACP,YAAa,OACb,KAAM,CAAC,EACP,UAAW,KAAK,IAAI,CACrB,CAAC,EAED,KAAK,YAAcC,CAEpB,CAEA,MACA,YACA,WAQA,UACA,KACQ,YAER,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAK,MAAM,SAAU,CACzB,GAAM,CACL,OAAQE,EACR,QAASC,EACT,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,EAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,EAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAsB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAgB,QAAS,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EAChF,CACC,UAAWb,EACX,WAAYA,CACb,CACD,EAEA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGD,GAAS,GAAGS,GAAiB,CAAC,CAAE,CAAC,EAE1E,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAW,KAAK,WAAW,KAAK,EAC5C,KAAK,UAAU,OAAOA,EAAQ,SAAS,GAC1C,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKA,EAAQ,GAAI,EAAG,CAAE,KAAM,CAAE,UAAWA,EAAQ,SAAU,CAAE,CAAC,EAEjG,KAAK,KAAKA,CAAO,EAGlB,KAAK,OAAO,EAEZ,KAAK,WAAW,SAAS,KAAKC,EAAuB,EAErD,OAAO,KAAK,WACb,CAED,CAEA,KAAMF,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEAE,GAA2BC,GAAwC,CAClE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SAAU,CACd,IAAIX,EAAS,KAAMW,EAAK,YAAY,EACpC,KACD,CAEA,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAEA,KAAKF,EAAkB,CACtB,IAAIT,EAAS,KAAMS,CAAO,CAE3B,CAEA,QAAQG,EAAgBC,EAAwB,CAC/CA,EAAa,CAAED,EAAM,GAAGC,CAAW,EAEnC,QAAWC,KAAkBF,EAAK,cAAe,CAChD,IAAMG,EAAe,KAAK,IAAID,CAAc,EAC5C,GAAIC,EAAc,CACjB,QAAWC,KAAkBH,EAC5BI,GAAMD,EAAe,SAAUD,CAAY,EAC3C,KAAK,UAAU,MAAMC,EAAe,mBAAwCD,EAAa,SAA6B,EAEnHA,IAAiBH,GACpB,KAAK,QAAQG,EAAcF,CAAU,CACvC,CACD,CAED,CAEA,OAAqB,CAAC,EAEtBK,GAAWC,EAAaC,EAAa,CACpC,OACEA,EAAE,SAAS,KAAOD,EAAE,SAAS,OAC5BA,EAAE,OAASC,EAAE,MACbD,EAAE,MAAQC,EAAE,MAAQ,EAAID,EAAE,MAAQC,EAAE,MAAQ,GAAK,EACjDD,EAAE,MACD,GACAC,EAAE,OAEDD,EAAE,IAAMC,EAAE,IADV,EAGCD,EAAE,IAAMC,EAAE,IACT,GACA,EAGR,CAEA,QAAS,CAER,IAAMC,EAAQ,CAAE,GAAG,KAAK,OAAO,CAAE,EAEjC,KAAK,KAAK,cAAgB,CAAC,EAC3B,QAAWT,KAAQS,EACdT,IAAS,KAAK,MAAQ,CAACS,EAAM,KAAKC,GAAeA,EAAY,cAAc,SAASV,EAAK,GAAG,CAAC,GAChG,KAAK,KAAK,cAAc,KAAKA,EAAK,GAAG,EACtCA,EAAK,SAAS,MAAM,EACpBA,EAAK,UAAY,gBAAgBA,EAAK,YAAY,EAClDA,EAAK,mBAAqB,CAAC,EAG5B,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,EAChC,KAAK,QAAQ,KAAK,KAAM,CAAC,CAAC,EAE1B,QAAWA,KAAQS,EAClBT,EAAK,YAAcW,EAAO,KAAMX,EAAK,cAAe,EAAI,EAAE,KAAK,KAAKM,EAAU,EAAE,QAAQ,EAEzF,IAAMM,EAAS,CAAE,KAAK,IAAK,EAE3B,QAASC,EAAI,EAAGA,EAAID,EAAO,OAAQC,IAAK,CACvC,IAAMb,EAAOY,EAAOC,CAAC,EACrB,QAAWV,KAAgBH,EAAK,YAAa,CAC5C,IAAMc,EAAoBF,EAAO,QAAQT,CAAY,EACjD,CAACW,IACJF,EAAO,OAAOE,EAAmB,CAAC,EAClCD,KAEDD,EAAO,OAAOC,EAAI,EAAG,EAAGV,CAAY,CACrC,CACD,CAEA,IAAIY,EAAK,EACT,QAAWf,KAAQY,EAClB,KAAK,UAAU,MAAMZ,EAAK,UAA+BA,EAAK,kBAAsC,EACpGA,EAAK,GAAKe,IAGX,KAAK,OAASH,EAEV,KAAK,MAAM,UACd,KAAK,MAAM,OAAO,EAAI,CAExB,CAEA,MAAM,OAAO,CAAE,IAAAI,EAAK,SAAAC,EAAU,MAAAC,EAAO,YAAAC,EAAa,GAAGC,CAAU,EAAY,CAE1E,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAJ,EACA,SAAUC,GAAY,CAAC,EACvB,UAAW,CAAC,EACZ,MAAOC,GAAS,GAChB,YAAaC,GAAe,GAC5B,KAAM,CAAC,EACP,GAAGzB,EAAY0B,EAAW,CAAE,WAAY,CAAC,EACzC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMJ,CACR,CAEA,MAAM,WAAWK,EAAgBC,EAAmD,CACnF,IAAMtB,EAAO,KAAK,IAAIqB,CAAM,EAE5B,GAAI,CAACrB,EACJ,MAAO,GAER,GAAIsB,EAAQ,SAAU,CACrB9B,EAAU8B,EAAQ,SAAU,CAAED,CAAO,CAAC,EAEtC,QAAWnB,KAAkBoB,EAAQ,SAChC,KAAK,IAAIpB,CAAc,GAAG,SAAS,IAAIF,CAAI,GAC9CR,EAAU8B,EAAQ,SAAU,CAAEpB,CAAe,CAAC,EAEhDoB,EAAQ,SAAW,KAAK,WAAWA,EAAQ,QAAQ,CACpD,CAEA,GAAM,CAAE,UAAAC,CAAU,EAAID,EAEtB,OAAIC,GAAa,OAAOA,GAAa,WACnCD,EAAuD,UAAY,KAAK,UAAU,OAAOC,CAAS,GAEpG,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKF,CAAO,EAAG,CAAE,KAAMC,CAAQ,CAAC,EAE3D,EACR,CAEA,WAAWtB,EAAyB,CACnC,IAAMgB,EAAM,OAAOhB,GAAQ,SAAWA,EAAOA,EAAK,IAElD,OAAO,KAAK,WAAW,UAAU,CAChC,CAAE,WAAY,CAAE,OAAQ,CAAE,SAAUgB,CAAI,EAAG,OAAQ,CAAE,SAAU,CAAE,SAAU,CAAEA,CAAI,CAAE,CAAE,CAAE,CAAE,EACzF,CAAE,UAAW,CAAE,OAAQ,CAAE,IAAAA,CAAI,CAAE,CAAE,CAClC,CAAC,CACF,CAEA,WAAWQ,EAAe,CACzB,IAAMC,EAAQC,GAAa,KAAK,OAAQf,EAAO,KAAMa,EAAK,EAAI,CAAC,EAEzDG,EAAe,CAAC,EAEtB,QAAW3B,KAAQyB,EACdA,EAAM,MAAMf,GAAeA,IAAgBV,GAAQ,CAACU,EAAY,SAAS,IAAIV,CAAI,CAAC,GACrF2B,EAAa,KAAK3B,EAAK,GAAG,EAE5B,OAAO2B,CACR,CAEA,MAAM,WAAWN,EAAgBO,EAAuBC,EAAc,CACrE,IAAM7B,EAAO,KAAK,IAAIqB,CAAM,EAE5B,OAAKrB,GAGL,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKqB,CAAO,EAAG,CAAE,KAAM,CACxD,UACCQ,EACC,KAAK,UAAU,WAAW7B,EAAK,aAAc4B,CAAa,EAC1D,KAAK,UAAU,aAAa5B,EAAK,aAAc4B,CAAa,CAC/D,CAAE,CAAC,EAEI,IATC,EAUT,CAEA,MAAM,gBAAgBP,EAAgBO,EAAuBE,EAAiBC,EAAqB,CAClG,IAAM/B,EAAO,KAAK,IAAIqB,CAAM,EAE5B,OAAKrB,GAGL,MAAM,KAAK,WAAW,UAAU,CAAE,IAAKqB,CAAO,EAAG,CAAE,KAAM,CACxD,UAAW,KAAK,UAAU,SAASrB,EAAK,aAAc4B,EAAeE,EAASC,CAAK,CACpF,CAAE,CAAC,EAEI,IANC,EAOT,CAED,EIrUA,OAAS,OAAAC,MAAW,YAMb,IAAMC,EAAN,cAAgCD,CAAI,CAC1C,YAAYE,EAAmB,CAC9B,MAAM,eAAgB,eAAgBA,CAAO,CAE9C,CAEA,KAAO,mBAER,EAKaC,EAAN,cAAiCH,CAAI,CAI3C,YAAYI,EAAoCC,EAAmCH,EAAmB,CACrG,OAAQ,UAAU,OAAQ,CACzB,IAAK,GACJA,EAAUE,EACVA,EAAO,OACP,MAED,IAAK,GACJF,EAAUG,EACVA,EAAM,MACR,CAEA,MAAM,0BAA2B,gBAAiB,CACjD,GAAGD,GAAQ,CAAE,KAAAA,CAAK,EAClB,GAAGC,GAAO,CAAE,IAAK,MAAM,QAAQA,CAAG,EAAIA,EAAM,CAAEA,CAAI,CAAE,EACpD,GAAGH,CACJ,CAAC,CAEF,CAEA,KAAO,oBAER,EAGaI,EAAN,cAA8BN,CAAI,CACxC,YAAYE,EAAmB,CAC9B,MAAM,2BAA4B,cAAeA,CAAO,CAEzD,CAEA,KAAO,iBAER,ECxDA,OAAS,QAAAK,EAAM,UAAAC,OAAc,kBAC7B,OAAOC,OAAkB,gBACzB,OACC,QAAAC,GACA,eAAAC,GACA,aAAAC,GACA,mBAAAC,GACA,WAAAC,OACM,YAEP,OAIC,qBAAAC,OAEM,YChBP,OACC,QAAAC,GACA,eAAAC,EACA,cAAAC,GACA,YAAAC,EACA,aAAAC,GACA,QAAAC,GACA,SAAAC,GACA,WAAAC,MACM,YAEP,OAGC,qBAAAC,OAEM,YCVP,IAAMC,EAAY,IAAI,QAGTC,EAAN,KAAsC,CAC5C,YAAYC,EAAgBC,EAAgB,CAC3C,KAAK,KAAOD,EAEZ,KAAK,IAAMC,EAAO,IAClBD,EAAK,IAAI,KAAK,IAAK,IAAI,EAElB,KAAK,OAAOC,CAAM,CAExB,CAEA,IACA,MAAQ,GACR,SAAW,GACX,aAAe,GAEf,GAAK,EAEL,KAEA,MAAQ,GAER,UAAY,IAAI,IAChB,WAAa,IAAI,IAEjB,MAAQ,IAAI,IAEZ,UAAY,IAAI,IAEhB,SAAqB,CAAC,EAEtB,OAAO,CAAE,IAAAC,EAAK,MAAAC,EAAO,OAAQC,EAAU,GAAGC,CAAU,EAAoB,CAUvE,GARA,OAAO,OAAO,KAAMA,CAAS,EAEzBF,IAAU,SACb,KAAK,MAAQA,EACb,KAAK,SAAWA,IAAQ,CAAC,GAAG,YAAY,GAAK,GAC7C,KAAK,aAAeA,GAGjBC,EAAU,CACb,KAAK,SAAWA,EAEhB,IAAME,EAAW,KAAK,SAAS,KAAK,GAAG,EAEnCA,IAAaR,EAAU,IAAI,IAAI,IAClCA,EAAU,IAAI,KAAMQ,CAAQ,EAExB,KAAK,KAAK,MAAM,UACnB,KAAK,KAAK,OAAO,EAEpB,CAED,CAEA,MAAM,QAAS,CAEd,KAAK,KAAK,OAAO,KAAK,GAAG,EAEzBR,EAAU,OAAO,IAAI,EAErB,MAAM,KAAK,KAAK,QAAQ,KAAK,GAAG,EAEhC,KAAK,KAAK,OAAO,CAElB,CAED,ECzEO,IAAMS,EAAgC,CAC5C,SAAU,CACT,MACA,QACA,OACA,SACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,SACV,UAAW,MACZ,EACA,OAAQ,CACP,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,gBAAiB,EAClB,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EFpBA,IAAMC,GAA6B,CAClC,CAAE,CAAE,OAAQ,CAAE,CAAE,CACjB,EAEA,SAASC,GAAsB,CAC9B,MAAM,IAAI,MAAM,oGAAoG,CACrH,CAGO,IAAMC,EAAN,cAA+C,GAAqB,CAC1E,YAAYC,EAAkBC,EAAuB,CAAC,EAAG,CACxD,MAAM,EAEN,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YAEzB,KAAK,eAAiBC,CAEvB,CAEA,MACA,YACQ,eAER,WAQA,KAEAC,GAAe,GAEf,MAAM,SAAU,CAEf,GAAI,CAAC,KAAKA,GAAc,CACvB,KAAKA,GAAe,GAEpB,GAAM,CACL,OAAQC,EACR,QAASC,EACT,KAAMC,EACN,WAAYC,CACb,EAAI,KAAK,eAELH,IACCA,EAAa,UAChBI,GAAUJ,EAAa,SAAuBK,EAAY,QAAoB,EAC3EL,EAAa,YAChBM,EAAYN,EAAc,OAAO,KAAKK,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGL,EACH,SAAU,CAAE,GAAGK,EAAY,SAAsB,GAAGL,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGK,EAAY,WAAY,GAAGL,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAe,OAAQ,CAAE,GAAGG,EAAmB,OAAAI,CAAO,CAAC,EAC9E,CACC,UAAWZ,EACX,WAAYA,CACb,CACD,EAGA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGD,GAAS,GAAGO,GAAiB,CAAC,CAAE,CAAC,EAE1E,KAAK,KAAO,OAAO,OAClB,IAAIO,EAAQ,KAAM,CACjB,GAAGN,EACH,IAAK,GACL,MAAO,GACP,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,CAAC,EACP,UAAW,KAAK,IAAI,CACrB,CAAC,EACD,CACC,IAAK,KACL,SAAU,IAAIO,GACd,UAAW,IAAIC,EACf,WAAY,IAAIA,EAChB,UAAW,IAAIA,CAChB,CACD,EAEA,MAAM,KAAKC,GAAU,EAErB,cAAiBC,KAAU,KAAK,WAAW,KAAK,EAC/C,KAAK,KAAKA,CAAM,EAEjB,OAAO,KAAK,cACb,CAED,CAEA,KAAMD,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,MAAO,CAED,KAAK,MAAM,WACf,KAAK,OAAO,EAEZ,KAAK,WAAW,SAAS,KAAKE,EAAuB,EAGvD,CAEAA,GAA2BC,GAAuC,CACjE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SAAU,CACd,IAAIN,EAAQ,KAAMM,EAAK,YAAY,EACnC,KACD,CAEA,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAEA,KAAKF,EAAgB,CACpB,IAAIJ,EAAQ,KAAMI,CAAM,CAEzB,CAEAG,GAASC,EAAcC,EAAsB,CAC5CA,EAAY,CAAED,EAAK,GAAGC,CAAU,EAEhC,QAAWC,KAAYF,EAAI,UAAW,CACrC,KAAKD,GAASG,EAAUD,CAAS,EACjC,QAAWE,KAAYF,EACtBC,EAAS,UAAU,IAAIC,CAAQ,CACjC,CAED,CAEA,OAAoB,CAAC,EAErB,QAAS,CAER,IAAMC,EAAQ,CAAE,GAAG,KAAK,OAAO,CAAE,EAC3BC,EAAS,CAAC,EAEhB,QAAWL,KAAOI,EAAO,CACxBJ,EAAI,UAAU,MAAM,EACpBA,EAAI,WAAW,MAAM,EACrBA,EAAI,UAAU,MAAM,EAEpB,QAAWM,KAAWN,EAAI,SAAU,CACnC,IAAME,EAAW,KAAK,IAAII,CAAO,EACjC,GAAIJ,EACHF,EAAI,UAAU,IAAIE,CAAQ,MACtB,CACJ,IAAMK,EAAY,KAAK,MAAM,IAAID,CAAO,EACpCC,GACHP,EAAI,WAAW,IAAIO,CAAS,CAC9B,CACD,CAEI,CAACP,EAAI,UAAU,MAAQA,EAAI,KAC9BK,EAAO,KAAKL,CAAG,CACjB,CAEA,QAAWA,KAAOI,EACZA,EAAM,KAAKI,GAAcA,EAAW,UAAU,IAAIR,CAAG,CAAC,GAC1D,KAAKD,GAASC,EAAK,CAAC,CAAC,EAEvBK,EAAO,KAAK,KAAKI,EAAS,EAC1B,QAAWT,KAAOI,EACjBM,GAAKV,EAAI,UAAW,KAAKS,EAAS,EAEnC,QAASE,EAAI,EAAGA,EAAIN,EAAO,OAAQM,IAAK,CACvC,IAAMX,EAAMK,EAAOM,CAAC,EACpB,QAAWR,IAAY,CAAE,GAAGH,EAAI,SAAU,EAAE,QAAQ,EACnD,GAAIG,EAAS,UAAU,IAAIH,CAAG,EAAG,CAChC,IAAMY,EAAgBP,EAAO,QAAQF,CAAQ,EACzC,CAACS,IACJP,EAAO,OAAOO,EAAe,CAAC,EAC9BD,KAEDN,EAAO,OAAOM,EAAI,EAAG,EAAGR,CAAQ,CACjC,CACF,CACA,QAASU,EAAI,EAAG,CAAE,OAAAC,CAAO,EAAIT,EAAQQ,EAAIC,GACxCT,EAAOQ,CAAC,EAAE,GAAKA,IAEhB,KAAK,OAASR,EAEV,KAAK,MAAM,UACd,KAAK,MAAM,OAAO,CAEpB,CAEAI,GAAUM,EAAYC,EAAY,CACjC,OACEA,EAAE,UAAU,KAAOD,EAAE,UAAU,OAC/BA,EAAE,MAAQC,EAAE,MACX,EACAD,EAAE,MAAQC,EAAE,MACX,GACA,EAGL,CAEA,MAAM,OAAO,CAAE,MAAAC,EAAO,KAAAC,EAAM,GAAGC,CAAU,EAAW,CAEnD,IAAMC,EAAMC,GAAkB,EAE9B,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAD,EACA,MAAOH,GAAS,GAChB,KAAMC,GAAQ,GACd,KAAM,CAAC,EACP,GAAG5B,EAAY6B,EAAW,CAAE,KAAM,CAAC,EACnC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMC,CACR,CAEA,MAAM,UAAUA,EAAaE,EAA4CC,EAAmB,CAC3F,IAAMvB,EAAM,KAAK,IAAIoB,CAAG,EAExB,OAAKpB,GAGDsB,EAAQ,SACXA,EAAQ,OACP,KAAK,MAAM,QACVE,GACCD,EACCE,EAAQzB,EAAI,SAAUuB,EAAO,QAAQ,EACrC,CAAC,EACFE,EAAQH,EAAQ,OAAQ,CAAEF,EAAK,GAAGM,GAAK1B,EAAI,SAAS,CAAE,CAAC,CACxD,CACD,GAEF,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAoB,CAAI,EAAG,CAAE,KAAME,CAAQ,CAAC,EAEnD,IAfC,EAgBT,CAEA,UAAUtB,EAAuB,CAChC,IAAMoB,EAAM,OAAOpB,GAAO,SAAWA,EAAMA,EAAI,IAE/C,OAAO,KAAK,WAAW,UAAU,CAChC,CAAE,WAAY,CAAE,OAAQ,CAAE,OAAQoB,CAAI,EAAG,OAAQ,CAAE,SAAU,CAAE,OAAQ,CAAEA,CAAI,CAAE,CAAE,CAAE,CAAE,EACrF,CAAE,UAAW,CAAE,OAAQ,CAAE,IAAAA,CAAI,CAAE,CAAE,CAClC,CAAC,CACF,CAEA,WAAa,IAAI,IAEjB,gBAAkB,IAAI,IAEtB,MAAM,QAAQO,EAAgB,CAC7B,IAAMC,EAAO,KAAK,WAAW,IAAID,CAAM,GAAK,KACxCC,GACH,KAAK,WAAW,OAAOD,CAAM,EAE9B,QAAWE,KAAW,KAAK,gBAC1B,MAAMA,EAAQF,EAAQC,CAAI,CAE5B,CAED,EGpTA,OAAS,eAAAE,OAAmB,cAC5B,OAAS,eAAAC,GAAa,aAAAC,OAAiB,YAEvC,OAGC,qBAAAC,OAEM,YCJA,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,OACA,gBACA,WACA,OACA,YACA,cACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,UAAU,MAC5B,EACA,KAAM,CACL,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,UAAW,CACV,SAAU,SACV,UAAW,IACZ,EACA,cAAe,CACd,SAAU,SACV,QAASA,EAAQ,GAAG,MACrB,EACA,SAAU,CACT,SAAU,MACX,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,EACA,YAAa,CACZ,SAAU,QACX,EACA,UAAW,CACV,SAAU,MACX,CACD,CAED,EC3CO,IAAMC,EAAN,KAA0C,CAChD,YAAYC,EAAwBC,EAAwB,CAC3D,IAAMC,EAAOF,EAAS,MAAM,IAAIC,EAAW,IAAI,EAE3CC,GACH,KAAKC,GAAYH,EAEjB,KAAK,IAAMC,EAAW,IACtB,KAAKE,GAAU,IAAI,KAAK,IAAK,IAAI,EAEjC,KAAK,KAAOD,EACZ,KAAK,KAAK,SAAS,IAAI,IAAI,EAE3B,KAAKC,GAAU,MAAM,YAAY,IAAI,KAAK,IAAK,KAAK,IAAI,EAExD,KAAK,OAAOF,CAAU,GAEjBD,EAAS,WAAW,UAAU,CAAE,IAAKC,EAAW,GAAI,CAAC,CAE5D,CAEA,IACA,KACA,SAAW,GAEX,UACA,cACA,UACA,YACA,UAEAE,GAEA,OAAO,CAAE,IAAAC,EAAK,KAAAF,EAAM,SAAAG,EAAU,GAAGC,CAAU,EAAwB,CAE9DD,IAAa,QAAa,KAAK,WAAaA,IAC/C,KAAK,SAAWA,EAEZ,KAAKF,GAAU,MAAM,UAAY,KAAK,KAAK,WAAa,KAAK,UAC3D,KAAK,KAAK,wBAAwB,GAGzC,OAAO,OAAO,KAAMG,CAAS,CAE9B,CAEA,QAAQ,CAAE,IAAAF,EAAK,KAAAF,EAAM,GAAGK,CAAQ,EAAwB,CAEvD,IAAMC,EAAK,KAAK,IAAI,EAEpB,OAAAD,EAAQ,YAAcC,EACtBD,EAAQ,UAAY,IAAI,KAAKC,EAAM,KAAKL,GAAU,WAAW,mBAAqB,GAAK,EAEvF,KAAK,OAAOI,CAAO,EAEZ,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAChF,CAEA,MAAM,QAAS,CAEd,GAAI,CAAC,KAAK,SAAU,CACnB,IAAMA,EAAU,CAAE,SAAU,EAAK,EAEjC,KAAK,OAAOA,CAAO,EAEnB,MAAM,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAC/E,CAED,CAEA,MAAM,SAAU,CAEf,GAAI,KAAK,SAAU,CAClB,IAAMA,EAAU,CAAE,SAAU,EAAM,EAElC,KAAK,OAAOA,CAAO,EAEnB,MAAM,KAAKJ,GAAU,WAAW,UAAU,CAAE,IAAK,KAAK,GAAI,EAAG,CAAE,KAAMI,CAAQ,CAAC,CAC/E,CAED,CAEA,QAAS,CAER,KAAKJ,GAAU,OAAO,KAAK,GAAG,EAC9B,KAAK,KAAK,SAAS,OAAO,IAAI,EAC9B,KAAKA,GAAU,MAAM,YAAY,OAAO,KAAK,GAAG,EAEhD,KAAKA,GAAU,MAAM,KAAK,iBAAkB,IAAI,EAE5C,KAAK,UACR,KAAK,KAAK,eAAe,CAE3B,CAED,EFrFA,IAAMM,EAAqB,KAAO,GAAK,EAEjCC,GAA6B,CAClC,CAAE,CAAE,KAAM,CAAE,CAAE,EACd,CAAE,CAAE,UAAW,CAAE,EAAG,CAAE,mBAAAD,CAAmB,CAAE,CAC5C,EAGaE,EAAN,cAAmD,GAAyB,CAClF,YAAYC,EAAkBC,EAA2B,CAAC,EAAG,CAC5D,MAAM,EAEN,KAAK,MAAQD,EACb,KAAK,YAAcA,EAAM,YAEzB,KAAK,YAAcC,CACpB,CAEA,MACA,YAEQ,YAER,WAIA,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAK,MAAM,SAAU,CACzB,GAAM,CACL,OAAQC,EACR,QAASC,EACT,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,GAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,GAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAsB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC7F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,OAAO,OACxB,MAAM,KAAK,YAAY,OAAmB,WAAY,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EACtF,CACC,mBAAAX,CACD,CACD,EAEA,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGC,GAAS,GAAGK,GAAiB,CAAC,CAAE,CAAC,EAE1E,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAc,KAAK,WAAW,KAAK,EACnD,KAAK,KAAKA,CAAU,EAErB,KAAK,WAAW,SAAS,KAAKC,EAAuB,EAErD,OAAO,KAAK,WACb,CAED,CAEA,KAAMF,IAAY,CAEjB,MAAM,KAAK,WAAW,UAAU,CAC/B,CAAE,WAAY,CAAE,OAAQ,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,OAAQ,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAE,CAAE,EACvF,CAAE,WAAY,CAAE,OAAQ,CAAE,SAAU,EAAK,EAAG,OAAQ,CAAE,KAAM,CAAE,SAAU,EAAM,CAAE,CAAE,CAAE,CACrF,CAAC,CAEF,CAEAE,GAA2BC,GAA2C,CACrE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GACjC,IAAIC,EAAY,KAAMD,EAAK,YAAY,EAEnC,KAAK,MAAM,IAAIA,EAAK,aAAa,IAAI,GAAG,aAAa,EAE1D,MAED,IAAK,UACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EACxD,MAED,IAAK,SACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EAC5E,MAED,IAAK,SACJ,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CACzC,CAED,EAEA,KAAM,CACL,MAAO,GAAGE,GAAkB,CAAC,IAAIC,GAAY,EAAE,EAAE,SAAS,WAAW,CAAC,EACvE,CAEA,KAAKL,EAAwB,CAC5B,IAAIG,EAAY,KAAMH,CAAU,CAEjC,CAEA,MAAM,OAAOM,EAAgBC,EAA4B,CAExD,IAAMC,EAAK,KAAK,IAAI,EAEdR,EAAyB,CAC9B,UAAW,GACX,cAAe,YACf,SAAU,GACV,GAAGO,EACH,IAAK,KAAK,IAAI,EACd,KAAMD,EAAK,IACX,KAAM,CAAC,EACP,UAAWE,EACX,YAAaA,EACb,UAAW,IAAI,KAAKA,EAAMrB,EAAqB,GAAK,CACrD,EAGMsB,EAAU,IAAIN,EAAY,KAAMH,CAAU,EAEhD,aAAM,KAAK,WAAW,UAAUA,CAAU,EAEnCS,CACR,CAEA,MAAM,eAAeC,EAAa,CACjC,GAAM,CAAE,aAAAC,CAAa,EAAI,MAAM,KAAK,WAAW,UAAU,CAAE,IAAAD,CAAI,CAAC,EAEhE,MAAO,EAAQC,CAChB,CAED,EGhKA,OAAS,UAAAC,OAAsC,YCIxC,IAAMC,GAA2B,CACvC,SAAU,CACT,MACA,OACA,OACA,KACA,OACA,MACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,KAAM,CACL,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,QACX,EACA,GAAI,CACH,SAAU,SACV,UAAW,EACZ,EACA,KAAM,CACL,SAAU,SACX,EACA,KAAM,CACL,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,ED5BO,IAAMC,EAAN,KAAc,CACpB,YAAYC,EAAmBC,EAA0B,CAAC,EAAG,CAC5D,KAAKC,GAASF,EACd,KAAK,YAAcA,EAAM,YAEzB,KAAK,YAAcC,CAEpB,CAES,eAAiB,CAAE,YAAa,EAChC,SAAW,KAAO,IAE3BC,GACA,YAEA,WAEQ,YAER,MAAM,MAAO,CAEZ,GAAI,CAAC,KAAKA,GAAO,SAAU,CAC1B,GAAM,CACL,WAAYC,CACb,EAAI,KAAK,YAET,KAAK,WAAa,MAAM,KAAK,YAAY,OAAkB,gBAAiB,CAAE,GAAGA,EAAmB,OAAAC,EAAO,CAAC,EAE5G,MAAM,KAAKC,GAAU,CACtB,CAED,CAEA,KAAMA,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,MAAM,KAAKC,EAAaC,EAAcC,EAAc,CACnD,IAAMC,EAAaC,GAAO,iBAAiBF,EAAK,MAAMA,EAAK,QAAQ,GAAG,CAAC,CAAC,EAExE,GAAI,CAAC,KAAK,eAAe,SAASD,CAAI,EACrC,MAAM,IAAI,MAAM,4BAA4B,EAE7C,GAAIE,EAAW,OAAO,EAAI,KAAK,SAC9B,MAAM,IAAI,MAAM,2BAA2B,EAE5C,IAAME,EAAK,KAAK,IAAI,EAAE,SAAS,EAAE,EAEjC,MAAM,QAAQ,IAAI,CACjB,KAAK,WAAW,WAAW,CAAE,IAAAL,CAAI,EAAG,CACnC,KAAAC,EACA,KAAME,EAAW,OAAO,EACxB,GAAAE,EACA,KAAMF,EACN,KAAM,CAAC,CACR,EAAG,CAAE,OAAQ,EAAK,CAAC,EACnB,KAAKP,GAAO,WAAW,UAAU,CAAE,IAAAI,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQK,CAAG,CAAE,CAAC,CACnE,CAAC,CAEF,CAEA,MAAM,aAAaL,EAAa,CAE/B,GAAM,CAAE,CAAE,aAAAM,CAAa,CAAE,EAAI,MAAM,QAAQ,IAAI,CAC9C,KAAK,WAAW,UAAU,CAAE,IAAAN,CAAI,CAAC,EACjC,KAAKJ,GAAO,WAAW,UAAU,CAAE,IAAAI,CAAI,EAAG,CAAE,KAAM,CAAE,OAAQ,IAAK,CAAE,CAAC,CACrE,CAAC,EAED,MAAO,EAAQM,CAChB,CAED,EE9EO,IAAMC,EAAgC,CAC5C,SAAU,CACT,MACA,QACA,WACA,QACA,OACA,MACA,MACA,OACA,WACD,EACA,WAAY,CACX,IAAK,CACJ,SAAU,SACV,QAASC,EAAQ,IAAI,MACtB,EACA,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,MAAM,MACxB,EACA,SAAU,CACT,SAAU,SACV,QAASA,EAAQ,OAAO,MACzB,EACA,MAAO,CACN,SAAU,QACV,YAAa,GACb,MAAO,CACN,SAAU,SACV,QAASA,EAAQ,KAAK,MACvB,EACA,gBAAiB,EAClB,EACA,KAAM,CACL,SAAU,SACV,SAAU,CACT,QACA,SACA,MACD,EACA,WAAY,CACX,MAAO,CACN,SAAU,SACV,UAAW,GACZ,EACA,OAAQ,CACP,SAAU,SACV,UAAW,GACZ,EACA,KAAM,CACL,SAAU,SACV,UAAW,GACZ,CACD,EACA,qBAAsB,EACvB,EACA,IAAK,CACJ,MAAO,CACN,CACC,SAAU,SACV,QAASA,EAAQ,IAAI,MACtB,EACA,CACC,SAAU,MACX,CACD,CACD,EACA,IAAK,CACJ,SAAU,SACV,UAAW,GACZ,EACA,OAAQ,CACP,MAAO,CACN,CACC,SAAU,SACV,UAAW,EACZ,EACA,CACC,SAAU,MACX,CACD,CACD,EACA,KAAM,CACL,SAAU,QACX,EACA,UAAW,CACV,SAAU,QACX,CACD,EACA,qBAAsB,EACvB,EC/FA,OACC,QAAAC,GACA,YAAAC,GACA,SAAAC,GACA,UAAAC,GACA,aAAAC,OACM,YAUP,IAAMC,EAAiB,IAAI,QACrBC,EAAuB,IAAI,QAE3BC,GAAY,QAAQ,IAAI,mBAAqB,GAGtCC,EAAN,KAAuC,CAC7C,YAAYC,EAAkBC,EAAkB,CAC/C,KAAKC,GAASF,EAEd,KAAK,IAAMC,EAAQ,IACnBD,EAAM,IAAI,KAAK,IAAK,IAAI,EAEnB,KAAK,OAAOC,CAAO,EAEpBD,EAAM,UACTA,EAAM,KAAK,cAAe,IAAI,CAEhC,CAEA,IACA,MACA,KAAO,CACN,MAAO,GACP,OAAQ,GACR,KAAM,EACP,EAEA,SAAW,GACX,aAAe,GACf,IACA,IAAc,GACd,OAAwB,KACxB,UAA2B,KAE3BE,GAEA,OAAS,GACT,OAEA,MAAQ,IAAI,IACZ,SAAuB,CAAC,EACxB,WAAuB,CAAC,EACxB,WAAa,IAAI,IACjB,aAAyB,CAAC,EAC1B,UAA2B,CAAC,EAE5B,UAAY,IAAI,IAChB,WAAa,IAAI,IACjB,OAAS,IAAI,IAEb,SAAqB,CAAC,EACtB,cAA0B,CAAC,EAE3B,SAAW,IAAI,IAEf,SAAW,GAEX,OAAO,CAAE,IAAAC,EAAK,KAAAC,EAAM,MAAAC,EAAO,MAAOC,EAAY,IAAKC,EAAO,OAAAC,EAAQ,GAAGC,CAAU,EAAqB,CAEnG,OAAO,OAAO,KAAMA,CAAS,EAE7B,IAAIC,EACAL,GAAS,KAAK,QAAUA,IAC3B,KAAKH,GAAO,QAAQ,OAAO,KAAK,KAAK,EACrC,KAAK,MAAQG,EACb,KAAKH,GAAO,QAAQ,IAAIG,EAAO,IAAI,EACnCK,EAAiB,IAGlB,IAAIC,EACAC,EACAR,IAAS,KAAK,KAAK,QAAUA,EAAK,OAAS,KAAK,KAAK,SAAWA,EAAK,QAAU,KAAK,KAAK,OAASA,EAAK,QAC1GQ,EAAoB,KAAK,KAAK,OAASR,EAAK,KAC5C,KAAK,KAAO,CACX,MAAOA,EAAK,OAAS,GACrB,OAAQA,EAAK,QAAU,GACvB,KAAMA,EAAK,MAAQ,EACpB,EACA,KAAK,WAAcA,EAAK,QAAQ,CAAC,GAAK,KAAOA,EAAK,OAAO,CAAC,GAAK,KAAQ,KAAK,MAAM,CAAC,GAAG,YAAY,EAClGO,EAAgB,KAGbD,GAAkBC,KACrB,KAAK,aAAe,GAAG,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,GAAK,KAAK,KAAK,QAAU,KAAK,OAE/F,IAAIE,EACJ,GAAIP,EAAY,CACf,KAAK,WAAaA,EAElB,IAAMQ,EAAW,KAAK,WAAW,KAAK,GAAG,EAErCA,IAAalB,EAAe,IAAI,IAAI,IACvCA,EAAe,IAAI,KAAMkB,CAAQ,EAE7B,KAAKZ,GAAO,WACf,KAAK,YAAY,EACjBW,EAAiB,IAGpB,CAEA,IAAIE,EACAR,IAAU,QAAa,KAAK,KAAK,MAAQA,IAC5C,KAAK,KAAK,MAAM,OAAO,IAAI,EAC3B,KAAK,IAAMA,GAAS,KAAKL,GAAO,KAAK,IAAIK,CAAK,GAAK,KAAKL,GAAO,KAAK,KACpE,KAAK,IAAI,MAAM,IAAI,IAAI,EACvBa,EAAe,IAGZP,IAAW,QAAa,KAAK,SAAWA,IAC3C,KAAK,OAASA,EACd,KAAK,UAAYA,GAAU,GAAGV,EAAS,YAAY,KAAK,GAAG,IAAIU,CAAM,SAGlE,KAAKN,GAAO,WACXW,GAAkBE,GACrB,KAAK,kBAAkB,EAEnBH,IACH,KAAKV,GAAO,eAAiB,IAE9B,KAAKA,GAAO,OAAO,GACTU,GACV,KAAKV,GAAO,KAAK,EAEpB,CAEA,aAAc,CAEb,KAAK,SAAW,CAAC,EACjB,KAAK,MAAM,MAAM,EACjB,KAAK,WAAW,MAAM,EACtBT,GAAM,KAAK,SAAS,EAEpB,QAAWuB,KAAU,KAAK,WAAY,CACrC,IAAMC,EAAO,KAAKf,GAAO,MAAM,IAAIc,CAAM,EACzC,GAAIC,EAAM,CAET,KAAK,SAAS,KAAKA,CAAI,EACvB,KAAK,MAAM,IAAIA,CAAI,EACnB,QAAWC,KAAgBD,EAAK,SAC/B,KAAK,MAAM,IAAIC,CAAY,EAC3B,KAAK,WAAW,IAAIA,CAAY,EAGjC,KAAK,aAAe3B,GAAK,KAAK,UAAU,EAExC,KAAKW,GAAO,UAAU,MAAM,KAAK,UAA+Be,EAAK,SAA6B,CACnG,CACD,CAEI,KAAK,MAAM,IAAI,KAAKf,GAAO,MAAM,IAAI,IACxC,KAAK,OAAS,IAEV,KAAK,aAAa,CAExB,CAEA,mBAAoB,CAEnB,KAAK,UAAU,MAAM,EACrB,KAAK,WAAW,MAAM,EACtB,KAAK,OAAO,MAAM,EAClB,IAAMiB,EAAW,IAAI,IAErB,QAAWC,KAAO,KAAKlB,GAAO,KAAK,OAClC,IAAKkB,EAAI,WAAW,IAAI,IAAI,GAAK,KAAK,SAAW,CAAC,KAAK,UAAU,IAAIA,CAAG,EAAG,CAC1E,KAAK,UAAU,IAAIA,CAAG,EACtB,KAAK,OAAO,IAAIA,CAAG,EACnBD,EAAS,IAAIC,EAAI,GAAG,EACpB,QAAWC,KAAYD,EAAI,UAC1B,KAAK,UAAU,IAAIC,CAAQ,EAC3B,KAAK,OAAO,IAAIA,CAAQ,EACxBF,EAAS,IAAIE,EAAS,GAAG,CAE3B,CAED,QAAWD,KAAO,IAAI,IAAI,CAAE,KAAK,IAAK,GAAG,KAAK,UAAW,KAAKlB,GAAO,KAAK,IAAK,CAAC,EAC/E,QAAWoB,KAAQF,EAAI,MAClBE,IAAS,OAAS5B,GAAO,KAAK,WAAY4B,EAAK,QAAQ,GAAK,CAACA,EAAK,SAAS,UAC9E,KAAK,WAAW,IAAIA,CAAI,EACxB,KAAK,OAAO,IAAIA,CAAI,EACpBH,EAAS,IAAIG,EAAK,GAAG,GAGxB,KAAK,SAAW,CAAE,GAAGH,CAAS,EAE9B,IAAMI,EAAmB,CAAC,EAC1B,GAAI,KAAK,IAAI,IAAK,CACjBA,EAAiB,KAAK,KAAK,IAAI,GAAG,EAClC,QAAWF,KAAY,KAAK,IAAI,UAC1B,KAAK,UAAU,IAAIA,CAAQ,GAC/BE,EAAiB,KAAKF,EAAS,GAAG,CACrC,CAEA,KAAK,cAAgB,CAAE,GAAGE,EAAkB,KAAK,IAAK,GAAGJ,CAAS,EAGlE,IAAML,EAAW,CAChB,KAAK,cAAc,KAAK,GAAG,EAC3B,KAAK,WAAW,KAAK,GAAG,EACxB,KAAK,UAAU,KAAK,SAAS,EAC7B,KAAK,aAAa,KAAK,GAAG,CAC3B,EAAE,KAAK;AAAA,CAAI,EAEPA,IAAajB,EAAqB,IAAI,IAAI,IAC7CA,EAAqB,IAAI,KAAMiB,CAAQ,EAEnC,KAAKZ,GAAO,UACf,KAAKA,GAAO,KAAK,0BAA2B,IAAI,EAGnD,CAEA,cAAe,CAEd,IAAMsB,EAAgB,KAAK,UAAU,OAAO,cAE5C,GAAI,OAAOA,GAAiB,UAAY,KAAK,SAAS,KAAOA,EAC5D,OAAO,KAAKtB,GAAO,SAAS,WAAW,WAAW,CACjD,IAAK,CACJ,IAAKX,GACJ,CAAE,GAAG,KAAK,QAAS,EACjB,KAAK,CAACkC,EAAGC,IAAMD,EAAE,UAAU,QAAQ,EAAIC,EAAE,UAAU,QAAQ,CAAC,EAC5D,MAAM,EAAG,KAAK,SAAS,KAAOF,CAAa,CAC9C,CACD,CACD,CAAC,CAEH,CAEA,gBAAiB,CAEhB,IAAIG,EAAW,GAEf,QAAWC,KAAW,KAAK,SAC1B,GAAIA,EAAQ,SAAU,CACrBD,EAAW,GACX,KACD,CAEG,KAAK,WAAaA,IACrB,KAAK,SAAWA,EAChB,KAAKzB,GAAO,KAAK,iBAAkB,IAAI,EAGzC,CAEA,wBAA0BV,GAAS,IAAM,KAAK,eAAe,EAAG,GAAG,EAEnE,MAAM,QAAS,CAEd,KAAK,IAAI,MAAM,OAAO,IAAI,EAE1B,KAAKU,GAAO,OAAO,KAAK,GAAG,EAC3B,KAAKA,GAAO,QAAQ,OAAO,KAAK,KAAK,EACrCP,GAAU,KAAKO,GAAO,OAAQ,IAAI,EAElCN,EAAe,OAAO,IAAI,EAC1BC,EAAqB,OAAO,IAAI,EAEhC,MAAM,KAAKK,GAAO,QAAQ,KAAK,GAAG,EAElC,KAAKA,GAAO,OAAO,CAEpB,CAED,EV1PA,IAAM2B,GAA6B,CAClC,CAAE,CAAE,MAAO,CAAE,EAAG,CAAE,OAAQ,EAAK,CAAE,EACjC,CAAE,CAAE,IAAK,CAAE,CAAE,CACd,EAEIC,GAGSC,EAAN,MAAMC,UAA0C,GAAsB,CAC5E,YAAYC,EAA0BC,EAAsB,CAC3D,MAAM,EAEN,IAAMC,EAAe,IAAIC,GAIzB,KAAKC,GAAgBF,EACrB,KAAK,QAAUA,EAAa,QAC5B,KAAK,aAAeA,EAAa,aACjC,KAAK,KAAOA,EAAa,KACzB,KAAK,GAAKA,EAAa,GACvB,KAAK,KAAOA,EAAa,KACzB,KAAK,YAAcA,EAAa,YAChC,KAAK,IAAMA,EAAa,IACxB,KAAK,eAAiBA,EAAa,eAEnC,KAAK,YAAcF,EAEnB,KAAK,UAAY,IAAIK,EAAiBJ,EAAQ,SAAS,EAEvD,KAAK,YAAcA,EAEd,KAAK,KAAK,CAEhB,CAEAG,GACA,QACA,aACA,KAIA,GAA8BE,EAAUC,EAAoCC,EAAe,CAC1F,YAAKJ,GAAc,GAAGE,EAAOC,EAAUC,CAAO,EAEvC,IACR,CAEA,KACA,YACA,IACA,eAEQ,YAER,YACA,UAEA,WACA,MACA,SACA,KACA,QAEA,QAAU,IAAI,IACd,YAAc,IAAI,IAClB,OAAqB,CAAC,EAEtB,eAAiB,GAEjBC,GAAe,GAEf,MAAM,SAAU,CAEf,GAAI,CAAC,KAAKA,GAAc,CACvB,KAAKA,GAAe,GAEpB,GAAM,CACL,QAASC,EACT,OAAQC,EACR,YAAaC,EACb,WAAYC,CACb,EAAI,KAAK,YAELF,IACCA,EAAa,UAChBG,GAAUH,EAAa,SAAsBI,EAAY,QAAoB,EAC1EJ,EAAa,YAChBK,GAAYL,EAAc,OAAO,KAAKI,EAAY,UAAW,CAAC,GAGhE,IAAME,EAAS,CACd,GAAGF,EACH,GAAGJ,EACH,SAAU,CAAE,GAAGI,EAAY,SAAuB,GAAGJ,GAAc,UAAwB,CAAC,CAAE,EAC9F,WAAY,CAAE,GAAGI,EAAY,WAAY,GAAGJ,GAAc,UAAW,CACtE,EAEA,KAAK,WAAa,MAAM,KAAK,YAAY,OAAgB,QAAS,CAAE,GAAGE,EAAmB,OAAAI,CAAO,CAAC,EAElG,MAAM,KAAK,WAAW,cAAc,CAAE,GAAGrB,GAAS,GAAGc,GAAiB,CAAC,CAAE,CAAC,EAErE,MAAM,KAAK,WAAW,eAAe,CAAE,MAAO,MAAO,CAAC,GAC1D,MAAM,KAAK,OAAO,CACjB,MAAO,QAAQ,IAAI,mBAAqB,oBACxC,SAAU,QAAQ,IAAI,sBAAwB,qBAC9C,KAAM,CAAE,MAAO,MAAO,EACtB,IAAK,OACL,GAAGE,EACH,MAAO,CAAE,MAAO,EAChB,IAAK,KACL,KAAM,CAAC,CACR,CAAC,EAEF,MAAM,KAAKM,GAAU,EAErB,cAAiBC,KAAW,KAAK,WAAW,KAAK,EAChD,KAAK,KAAKA,CAAO,CACnB,CAED,CAEA,KAAMD,IAAY,CAEjB,MAAM,KAAK,WAAW,WAAW,CAAE,KAAM,CAAE,QAAS,EAAM,CAAE,EAAG,CAAE,KAAM,CAAE,KAAM,CAAC,CAAE,CAAE,CAAC,CAEtF,CAEA,SAAW,GAEX,MAAgB,MAAO,CAEtB,GAAI,CAAC,KAAK,SAAU,CACnB,GAAM,CACL,MAAOE,EACP,KAAMC,EACN,SAAUC,EACV,QAASC,EACT,WAAY,CAAE,MAAAC,CAAM,EAAI,CAAC,CAC1B,EAAI,KAAK,YAET,KAAK,MAAQ,IAAIC,EAAU,KAAM,CAAE,GAAGL,EAAc,WAAY,CAAE,MAAAI,EAAO,GAAGJ,GAAc,UAAW,CAAE,CAAC,EACxG,KAAK,KAAO,IAAIM,EAAS,KAAM,CAAE,GAAGL,EAAa,WAAY,CAAE,MAAAG,EAAO,GAAGH,GAAa,UAAW,CAAE,CAAC,EACpG,KAAK,SAAW,IAAIM,EAAa,KAAM,CAAE,GAAGL,EAAiB,WAAY,CAAE,MAAAE,EAAO,GAAGF,GAAiB,UAAW,CAAE,CAAC,EACpH,KAAK,QAAU,IAAIM,EAAQ,KAAM,CAAE,GAAGL,EAAgB,WAAY,CAAE,MAAAC,EAAO,GAAGD,GAAgB,UAAW,CAAE,CAAC,EAE5G,MAAM,KAAK,MAAM,KAAK,EACtB,MAAM,KAAK,KAAK,QAAQ,EACxB,MAAM,KAAK,QAAQ,EACnB,KAAK,KAAK,KAAK,EACf,MAAM,KAAK,QAAQ,KAAK,EAExB,KAAK,OAAO,EAAI,EAEhB,KAAK,WAAW,SAAS,KAAKM,EAAuB,EAErD,MAAM,KAAK,SAAS,KAAK,EAEzB,OAAO,KAAK,YAEZ,KAAK,SAAW,GAEhB,KAAKC,GAAa,QAAQ,IAAI,CAC/B,CAED,CAEAD,GAA2BE,GAAwC,CAClE,OAAQA,EAAK,cAAe,CAC3B,IAAK,SACJ,IAAIC,EAAS,KAAMD,EAAK,YAAY,EACpC,MAED,IAAK,UACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,YAAY,EAC7D,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAOA,EAAK,kBAAkB,aAAc,EACjF,MAED,IAAK,SACC,KAAK,IAAIA,EAAK,YAAY,GAAG,GAAG,OAAO,CAC9C,CAED,EAGA,KAAKZ,EAAkB,CACtB,IAAIa,EAAS,KAAMb,CAAO,CAE3B,CAEA,MAAO,CAEN,KAAK,eAAiB,GAEtB,KAAK,OAAS,CAAE,GAAG,KAAK,OAAO,CAAE,EAAE,KAAK,CAACc,EAAGC,IAAMD,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,EAAID,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,GAAK,CAAC,CAErH,CAEA,OAAOC,EAA6B,CACnC,GAAIA,EACH,QAAWC,KAAQ,KAAK,OAAO,EAC9BA,EAAK,YAAY,EAEnB,QAAWA,KAAQ,KAAK,OAAO,EAC9BA,EAAK,kBAAkB,EAEpB,KAAK,gBACR,KAAK,KAAK,CAEZ,CAEAN,GAAe,IAAIO,GAEnB,WAAY,CACX,OAAO,KAAKP,EACb,CAEA,MAAM,OAAO,CAAE,MAAAQ,EAAO,SAAAC,EAAU,MAAAC,EAAO,KAAAC,EAAM,IAAAC,EAAK,IAAAC,EAAK,GAAGC,CAAU,EAAY,CAC/E,GAAI,KAAK,QAAQ,IAAIN,CAAK,EACzB,MAAM,IAAI,MAAM,aAAa,EAE9B,IAAMO,EAAMC,GAAkB,EAE9B,aAAM,KAAK,WAAW,UAAU,CAC/B,IAAAD,EACA,MAAAP,EACA,SAAU,MAAMS,EAAKR,CAAQ,EAC7B,MAAO,KAAK,SAAW,KAAK,MAAM,WAAWC,CAAK,EAAIA,EACtD,KAAM,CACL,MAAOC,EAAK,OAAS,GACrB,OAAQA,EAAK,QAAU,GACvB,KAAMA,EAAK,MAAQ,EACpB,EACA,IAAKC,GAAO,KACZ,IAAKC,GAAO,GACZ,KAAM,CAAC,EACP,GAAG3B,GAAY4B,EAAW,CAAE,KAAM,CAAC,EACnC,UAAW,KAAK,IAAI,CACrB,CAAC,EAEMC,CACR,CAEA,MAAM,WAAWA,EAAaG,EAA6CC,EAAmB,CAC7F,IAAMb,EAAO,KAAK,IAAIS,CAAG,EAEzB,GAAI,CAACT,EACJ,MAAO,GAEJY,EAAQ,QACXA,EAAQ,MACPZ,EAAK,OACJ,CAAE,MAAO,EACT,KAAK,MAAM,WACVa,EACCC,GAAQd,EAAK,WAAYa,EAAO,YAAY,EAAE,OAAOD,EAAQ,KAAK,EAClEA,EAAQ,KACV,GAEH,IAAIG,EAEJ,GAAIH,EAAQ,WAAa,OAAW,CACnC,GAAI,OAAOA,EAAQ,UAAY,UAAYA,EAAQ,WAAa,GAC/D,MAAM,IAAI,MAAM,2BAA2B,EAE5CG,EAAeC,EAAQ,OAAO,KAAKJ,EAAQ,QAAQ,EAAIA,EAAQ,SAAW,MAAMD,EAAKC,EAAQ,QAAQ,EACrGA,EAAU,CAAE,GAAGA,EAAS,SAAUG,CAAa,CAChD,CAEA,IAAME,EAA6B,CAClC,KAAK,WAAW,UAAU,CAAE,IAAAR,CAAI,EAAG,CAAE,KAAMG,CAAQ,CAAC,CACrD,EAEA,OAAIG,IAAiB,QAAaA,IAAkBf,EAA+B,UAClFiB,EAAO,KAAK,KAAK,SAAS,WAAW,WAAW,CAAE,KAAMR,CAAI,CAAC,CAAC,EAE/D,MAAM,QAAQ,IAAIQ,CAAM,EAEjB,EACR,CAEA,MAAM,eAAeR,EAAaS,EAAqB,CACtD,GAAI,CAAC,KAAK,IAAIT,CAAG,EAChB,MAAM,IAAI,MAAM,cAAc,EAE/B,GAAI,CAACS,EACJ,MAAM,IAAI,MAAM,2BAA2B,EAE5C,MAAM,QAAQ,IAAI,CACjB,KAAK,WAAW,UAAU,CAAE,IAAAT,CAAI,EAAG,CAAE,KAAM,CAAE,SAAU,MAAME,EAAKO,CAAW,CAAE,CAAE,CAAC,EAClF,KAAK,SAAS,WAAW,WAAW,CAAE,KAAMT,CAAI,CAAC,CAClD,CAAC,CAEF,CAEA,MAAM,MAAMP,EAAeC,EAAkBgB,EAAmC,CAC/E,IAAMnB,EAAO,KAAK,QAAQ,IAAIE,CAAK,EAEnC,GAAI,CAACF,EAAM,CACV,GAAI,CACH,MAAMoB,GAAO,MAAO3D,KAA4BkD,EAAK,qBAAqB,GAAIR,CAAQ,CACvF,MAAQ,CAER,CAEA,MAAM,IAAI,MAAM,cAAc,CAC/B,CAEA,GAAI,CAAC,MAAMiB,GAAOpB,EAAK,SAAUG,CAAQ,EACxC,MAAM,IAAI,MAAM,mBAAmB,EAEpC,GAAI,CAACH,EAAK,UAAU,MACnB,MAAM,IAAI,MAAM,sBAAsB,EAEvC,OAAO,KAAK,SAAS,OAAOA,EAAMmB,CAAY,CAC/C,CAEA,OAAOE,EAAsB,CAC5B,OAAAA,EAAQ,OAAO,EAER,KAAK,SAAS,WAAW,UAAU,CAAE,IAAKA,EAAQ,GAAI,CAAC,CAC/D,CAEAC,GAAkBzB,EAAuBC,EAAuB,CAC/D,OACED,aAAaD,GAAQE,aAAaF,EACjCC,EAAE,KAAK,MAAQC,EAAE,KAAK,KACtBD,EAAE,KAAK,KAAOC,EAAE,KAAK,KACpB,EACAD,EAAE,KAAK,KAAOC,EAAE,KAAK,KAAO,GAAK,EACjC,CAACD,EAAE,KAAK,MAAQ,CAACC,EAAE,KAAK,KACxBD,EAAE,aAAeC,EAAE,aAClB,EACAD,EAAE,aAAeC,EAAE,aAAe,GAAK,EACxCD,EAAE,KAAK,KAAO,GAAK,EACpBA,aAAa0B,GAAOzB,aAAayB,EACjC1B,EAAE,MAAQC,EAAE,MACX,EACAD,EAAE,MAAQC,EAAE,MAAQ,GAAK,EAC1BD,aAAa0B,EAAM,GAAK,CAE5B,CAEA,QAAQC,EAAe,CACtB,OAAOC,GACND,EACE,IAAIf,GAAO,KAAK,IAAIA,CAAG,GAAK,KAAK,KAAK,IAAIA,CAAG,CAAC,EAC9C,OAAO,OAAO,EACf,KAAK,KAAKa,EAAiB,CAAC,CAC/B,CAEA,WAAa,IAAI,IAEjB,gBAAkB,IAAI,IAEtB,MAAM,QAAQI,EAAgB,CAC7B,IAAMC,EAAO,KAAK,WAAW,IAAID,CAAM,GAAK,KACxCC,GACH,KAAK,WAAW,OAAOD,CAAM,EAE9B,QAAWE,KAAW,KAAK,gBAC1B,MAAMA,EAAQF,EAAQC,CAAI,CAE5B,CAEA,MAAM,WAAWlB,EAAa,CAC7B,GAAM,CAAE,aAAAoB,CAAa,EAAI,MAAM,KAAK,WAAW,UAAU,CAAE,IAAApB,CAAI,CAAC,EAEhE,MAAO,EAAQoB,CAChB,CAGA,OAAO,KAAkCjE,EAA0BC,EAAuB,CAGzF,OAFc,IAAIF,EAAMC,EAAaC,CAAO,EAE/B,UAAU,CACxB,CAED",
+  "names": ["Err", "AbilityError", "longId", "payload", "add", "assignPath", "deletePath", "empty", "getPath", "intersection", "pick", "setPath", "isAbilityObject", "value", "isAbilityParamNumber", "isAbilityParamItems", "schemaParentMap", "AbilitiesMap", "abilitiesSchema", "subSchema", "#hierarchical", "parse", "schemas", "parent", "level", "schema", "longId", "subIds", "subId", "_id", "top", "paramId", "schemaOrLongId", "paramIdOrMax", "max", "ability", "paramSchema", "schemasOrIds", "a", "b", "schemaMaxMap", "resolve", "_schema", "parentSchema", "assignPath", "_max", "abilities", "subSchemas", "subAbilities", "i", "abilityParam", "value", "getPath", "setPath", "referenceValue", "isAbilityParamNumber", "isAbilityParamItems", "itemId", "intersection", "item", "adjustedAbilities", "adjustedAbility", "isAbilityObject", "pick", "empty", "target", "source", "targetAbility", "sourceAbility", "add", "deletePath", "Err", "RolesError", "stringOrArray", "payload", "deleteProps", "getAll", "intersection", "reAdd", "removeAll", "snapshots", "Role", "roles", "roleDoc", "#roles", "_id", "ownInvolveIds", "ownAbilities", "title", "restProps", "snapshot", "regexps", "basisSchema", "regexps", "indexes", "preventDirectDelete", "Roles", "users", "options", "rootProps", "initOptions", "Role", "customSchema", "customIndexes", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "roleDoc", "#handleCollectionChange", "next", "role", "involvedBy", "involvedRoleId", "involvedRole", "involvedByRole", "reAdd", "#sortRoles", "a", "b", "array", "anotherRole", "getAll", "sorted", "i", "involvedRoleIndex", "_o", "_id", "involves", "title", "description", "restProps", "roleId", "updates", "abilities", "ids", "roles", "intersection", "cleanedUpIds", "abilityLongId", "set", "paramId", "value", "Err", "UnauthorizedError", "payload", "SubordinationError", "type", "ids", "PermissionError", "hash", "verify", "EventEmitter", "_ids", "deleteProps", "removeAll", "StatefulPromise", "without", "newObjectIdString", "_ids", "deleteProps", "EmptyArray", "EmptySet", "removeAll", "sort", "union", "without", "newObjectIdString", "snapshots", "Org", "orgs", "orgDoc", "_id", "title", "ownerIds", "restProps", "snapshot", "basisSchema", "regexps", "indexes", "preventDirectDelete", "Orgs", "users", "options", "#isPreinited", "customSchema", "customIndexes", "nullProps", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "Org", "EmptyArray", "EmptySet", "#maintain", "orgDoc", "#handleCollectionChange", "next", "#resolve", "org", "slaveOrgs", "ownerOrg", "slaveOrg", "array", "sorted", "ownerId", "ownerUser", "anotherOrg", "#sortOrgs", "sort", "i", "slaveOrgIndex", "o", "length", "a", "b", "title", "note", "restProps", "_id", "newObjectIdString", "updates", "byUser", "union", "without", "_ids", "fromId", "toId", "handler", "randomBytes", "deleteProps", "removeAll", "newObjectIdString", "basisSchema", "regexps", "Session", "sessions", "sessionDoc", "user", "#sessions", "_id", "isOnline", "restProps", "updates", "ts", "expireAfterSeconds", "indexes", "Sessions", "users", "options", "customSchema", "customIndexes", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "sessionDoc", "#handleCollectionChange", "next", "Session", "newObjectIdString", "randomBytes", "user", "props", "ts", "session", "_id", "deletedCount", "Binary", "schema", "regexps", "Avatars", "users", "options", "#users", "collectionOptions", "schema", "#maintain", "_id", "type", "data", "binaryData", "Binary", "ts", "deletedCount", "basisSchema", "regexps", "_ids", "debounce", "empty", "hasAny", "removeOne", "rolesSnapshots", "permissionsSnapshots", "staticUrl", "User", "users", "userDoc", "#users", "_id", "name", "email", "ownRoleIds", "orgId", "avatar", "restProps", "isEmailUpdated", "isNameUpdated", "isLastNameUpdated", "isRolesUpdated", "snapshot", "isOrgUpdated", "roleId", "role", "involvedRole", "slaveIds", "org", "slaveOrg", "user", "permissiveOrgIds", "sessionsLimit", "a", "b", "isOnline", "session", "indexes", "unknownUserPasswordHash", "Users", "_Users", "collections", "options", "eventEmitter", "EventEmitter", "#eventEmitter", "AbilitiesMap", "event", "callback", "context", "#isPreinited", "customIndexes", "customSchema", "initialRootProps", "collectionOptions", "removeAll", "basisSchema", "deleteProps", "schema", "#maintain", "userDoc", "rolesOptions", "orgsOptions", "sessionsOptions", "avatarsOptions", "quiet", "Roles", "Orgs", "Sessions", "Avatars", "#handleCollectionChange", "#initPromise", "next", "User", "a", "b", "shouldUpdateRoles", "user", "StatefulPromise", "email", "password", "roles", "name", "org", "job", "restProps", "_id", "newObjectIdString", "hash", "updates", "byUser", "without", "nextPassword", "regexps", "writes", "newPassword", "sessionProps", "verify", "session", "#sortUsersAndOrgs", "Org", "ids", "_ids", "fromId", "toId", "handler", "deletedCount"]
 }

package/dist/roles/Role.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Role.d.ts","sourceRoot":"","sources":["../../src/roles/Role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAMlC,qBAAa,IAAI,CAAC,EAAE,SAAS,eAAe;;gBAC/B,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO;IAY9C,GAAG,SAAC;IACJ,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,YAAY,EAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,KAAK,SAAM;IACX,YAAY,SAAM;IAClB,EAAE,SAAK;IAEP,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAC7B,QAAQ,gBAAuB;IAC/B,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAM;IAC9B,kBAAkB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAM;IAEvC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC;IA8BvG,MAAM;CAUN"}
+{"version":3,"file":"Role.d.ts","sourceRoot":"","sources":["../../src/roles/Role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAMlC,qBAAa,IAAI,CAAC,EAAE,SAAS,eAAe;;gBAC/B,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO;IAY9C,GAAG,SAAC;IACJ,aAAa,EAAG,MAAM,EAAE,CAAC;IACzB,YAAY,EAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,KAAK,SAAM;IACX,YAAY,SAAM;IAClB,EAAE,SAAK;IAEP,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAC7B,QAAQ,gBAAuB;IAC/B,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAM;IAC9B,kBAAkB,EAAE,SAAS,CAAC,EAAE,CAAC,CAAM;IAEvC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC;IAgCvG,MAAM;CAUN"}

package/dist/roles/Roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Roles.d.ts","sourceRoot":"","sources":["../../src/roles/Roles.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAA2C,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO9D,iBAAS,mBAAmB,SAE3B;AAGD,qBAAa,KAAK,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC/D,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB;IA2BxD,KAAK,YAAC;IACN,WAAW,kCAAC;IACZ,UAAU,EAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG;QACzC,yGAAyG;QACzG,SAAS,EAAE,OAAO,mBAAmB,CAAC;QAEtC,0GAA0G;QAC1G,UAAU,EAAE,OAAO,mBAAmB,CAAC;KACvC,CAAC;IAEF,SAAS,gCAAC;IACV,IAAI,WAAC;IACL,OAAO,CAAC,WAAW,CAAC,CAAC;IAEf,IAAI;IA8EV,IAAI,CAAC,OAAO,EAAE,OAAO;IAKrB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE;IAiB9C,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAoBxB,MAAM;IA8CA,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO;IAgBnE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAAC;IAqBlF,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM;IASlC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE;IAYlB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO;IAgB9D,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY;CAajG"}
+{"version":3,"file":"Roles.d.ts","sourceRoot":"","sources":["../../src/roles/Roles.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAA2C,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO9D,iBAAS,mBAAmB,SAE3B;AAGD,qBAAa,KAAK,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC/D,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB;IA2BxD,KAAK,YAAC;IACN,WAAW,kCAAC;IACZ,UAAU,EAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG;QACzC,yGAAyG;QACzG,SAAS,EAAE,OAAO,mBAAmB,CAAC;QAEtC,0GAA0G;QAC1G,UAAU,EAAE,OAAO,mBAAmB,CAAC;KACvC,CAAC;IAEF,SAAS,gCAAC;IACV,IAAI,WAAC;IACL,OAAO,CAAC,WAAW,CAAC,CAAC;IAEf,IAAI;IA8EV,IAAI,CAAC,OAAO,EAAE,OAAO;IAKrB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE;IAiB9C,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAoBxB,MAAM;IA8CA,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO;IAgBnE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAAC;IA0BlF,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM;IASlC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE;IAYlB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO;IAgB9D,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY;CAajG"}

package/dist/users/Users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Users.d.ts","sourceRoot":"","sources":["../../src/users/Users.ts"],"names":[],"mappings":"AACA,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAIN,eAAe,EAEf,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAGN,WAAW,EAEX,iBAAiB,EACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAYzD,qBAAa,KAAK,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC/D,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IA4B1D,OAAO,yBAAC;IACR,YAAY,SAAC;IACb,IAAI,mEAAC;IAEL,EAAE,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,GAAG,yBAAyB,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,IAAI;IACjH,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,IAAI;IAO3E,IAAI;iBApCO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAmCjB;IACL,WAAW;iBArCA,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAoCV;IACZ,GAAG;iBAtCQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAqClB;IACJ,cAAc;iBAvCH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAsCP;IAEf,OAAO,CAAC,WAAW,CAAC,CAAC;IAErB,WAAW,cAAC;IACZ,SAAS,mBAAC;IAEV,UAAU,EAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,EAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,EAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,EAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,EAAG,OAAO,CAAC;IAElB,OAAO,gBAAa;IACpB,WAAW,gBAAa;IACxB,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAExB,cAAc,UAAQ;IAIhB,OAAO;IAwDb,QAAQ,UAAS;cAED,IAAI;IA0DpB,IAAI,CAAC,OAAO,EAAE,OAAO;IAKrB,IAAI;IAQJ,MAAM,CAAC,iBAAiB,CAAC,EAAE,OAAO;IAelC,SAAS;IAIH,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO;IA0BxE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IAqBtF,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;IAc/C,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC;IAe9E,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IA0B3B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE;IAQrB,UAAU,sBAA6B;IAEvC,eAAe,eAAoB,MAAM,QAAQ,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAI;IAErF,OAAO,CAAC,MAAM,EAAE,MAAM;IAUtB,UAAU,CAAC,GAAG,EAAE,MAAM;IAO5B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;CAMxF"}
+{"version":3,"file":"Users.d.ts","sourceRoot":"","sources":["../../src/users/Users.ts"],"names":[],"mappings":"AACA,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAIN,eAAe,EAEf,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAGN,WAAW,EAEX,iBAAiB,EACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAczD,qBAAa,KAAK,CAAC,EAAE,SAAS,eAAe,CAAE,SAAQ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC/D,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IA4B1D,OAAO,yBAAC;IACR,YAAY,SAAC;IACb,IAAI,mEAAC;IAEL,EAAE,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,GAAG,yBAAyB,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,IAAI;IACjH,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,IAAI;IAO3E,IAAI;iBApCO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAmCjB;IACL,WAAW;iBArCA,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAoCV;IACZ,GAAG;iBAtCQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAqClB;IACJ,cAAc;iBAvCH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;sBACjB,MAAM;MAsCP;IAEf,OAAO,CAAC,WAAW,CAAC,CAAC;IAErB,WAAW,cAAC;IACZ,SAAS,mBAAC;IAEV,UAAU,EAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,EAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,EAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,EAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,EAAG,OAAO,CAAC;IAElB,OAAO,gBAAa;IACpB,WAAW,gBAAa;IACxB,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAM;IAExB,cAAc,UAAQ;IAIhB,OAAO;IAwDb,QAAQ,UAAS;cAED,IAAI;IA0DpB,IAAI,CAAC,OAAO,EAAE,OAAO;IAKrB,IAAI;IAQJ,MAAM,CAAC,iBAAiB,CAAC,EAAE,OAAO;IAelC,SAAS;IAIH,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,OAAO;IA0BxE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IAsCtF,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;IAc/C,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC;IAsB9E,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IA0B3B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE;IAQrB,UAAU,sBAA6B;IAEvC,eAAe,eAAoB,MAAM,QAAQ,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAI;IAErF,OAAO,CAAC,MAAM,EAAE,MAAM;IAUtB,UAAU,CAAC,GAAG,EAAE,MAAM;IAO5B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;CAMxF"}

package/dist/users/avatars/Avatars.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Avatars.d.ts","sourceRoot":"","sources":["../../../src/users/avatars/Avatars.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAMzD,qBAAa,OAAO;;gBACP,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,GAAE,cAAmB;IAQ3D,QAAQ,CAAC,cAAc,WAAoB;IAC3C,QAAQ,CAAC,QAAQ,SAAc;IAG/B,WAAW,kCAAC;IAEZ,UAAU,EAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE1C,OAAO,CAAC,WAAW,CAAC,CAAC;IAEf,IAAI;IAoBJ,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAkB5C,YAAY,CAAC,GAAG,EAAE,MAAM;CAU9B"}
+{"version":3,"file":"Avatars.d.ts","sourceRoot":"","sources":["../../../src/users/avatars/Avatars.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAMzD,qBAAa,OAAO;;gBACP,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,GAAE,cAAmB;IAQ3D,QAAQ,CAAC,cAAc,WAAoB;IAC3C,QAAQ,CAAC,QAAQ,SAAc;IAG/B,WAAW,kCAAC;IAEZ,UAAU,EAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE1C,OAAO,CAAC,WAAW,CAAC,CAAC;IAEf,IAAI;IAoBJ,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAwB5C,YAAY,CAAC,GAAG,EAAE,MAAM;CAU9B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insite-users-server",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "Server-side users, orgs, roles, sessions for inSite",
   "keywords": [
     "insite",
@@ -47,11 +47,11 @@
     "@nesvet/n": "^1.2.1",
     "@node-rs/argon2": "^2.0.2",
     "eventemitter3": "^5.0.4",
-    "insite-common": "^2.4.0",
-    "insite-db": "^2.4.0"
+    "insite-common": "^2.6.0",
+    "insite-db": "^2.6.0"
   },
-  "packageManager": "bun@1.3.9",
   "engines": {
-    "node": ">=20.0.0"
+    "bun": ">=1.4.4",
+    "node": ">=22.0.0"
   }
 }