libre-webui 0.16.1 → 0.18.0

package/backend/dist/routes/media.js

@@ -0,0 +1,429 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+import express from 'express';
+import rateLimit from 'express-rate-limit';
+import { authenticate } from '../middleware/auth.js';
+import galleryService from '../services/galleryService.js';
+import mediaGenerationJobService from '../services/mediaGenerationJobService.js';
+import pluginService from '../services/pluginService.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('routes:media');
+const router = express.Router();
+const generationRateLimiter = rateLimit({
+    windowMs: 60000,
+    max: 10,
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+const pollingRateLimiter = rateLimit({
+    windowMs: 60000,
+    max: 60,
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+const galleryRateLimiter = rateLimit({
+    windowMs: 60000,
+    max: 120,
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+// Umbrella limit ahead of authentication; per-route limiters below stay tighter.
+const routerRateLimiter = rateLimit({
+    windowMs: 60000,
+    max: 240,
+    standardHeaders: true,
+    legacyHeaders: false,
+});
+router.use(routerRateLimiter);
+router.use(authenticate);
+function userId(req) {
+    if (!req.user)
+        throw new Error('Authenticated user context is required');
+    return req.user.userId;
+}
+router.get('/models', async (req, res) => {
+    try {
+        const id = userId(req);
+        await Promise.all([
+            pluginService.refreshStaleCapabilityModels('video', id),
+            pluginService.refreshStaleCapabilityModels('tts', id),
+            pluginService.refreshStaleCapabilityModels('audio', id),
+        ]);
+        res.json({
+            success: true,
+            data: {
+                video: pluginService.getAvailableVideoGenModels(id),
+                audio: [
+                    ...pluginService
+                        .getAvailableAudioGenModels(id)
+                        .map(model => ({ ...model, mode: 'sound' })),
+                    ...pluginService
+                        .getAvailableTTSModels(id)
+                        .map(model => ({ ...model, mode: 'speech' })),
+                ],
+            },
+        });
+    }
+    catch (error) {
+        logger.error('Failed to load media generation models:', error);
+        res.status(500).json({
+            success: false,
+            message: 'Failed to load media generation models',
+        });
+    }
+});
+router.post('/audio/generate', generationRateLimiter, async (req, res) => {
+    try {
+        const { model, pluginId, input, voice, response_format, speed } = req.body;
+        if (typeof model !== 'string' ||
+            typeof pluginId !== 'string' ||
+            typeof input !== 'string' ||
+            input.trim().length === 0) {
+            res.status(400).json({
+                success: false,
+                message: 'model, pluginId, and input are required',
+            });
+            return;
+        }
+        const id = userId(req);
+        const format = isAudioFormat(response_format) ? response_format : 'mp3';
+        const audio = await pluginService.executeTTSRequest(model, input.trim(), {
+            pluginId,
+            userId: id,
+            ...(typeof voice === 'string' && voice ? { voice } : {}),
+            ...(typeof speed === 'number' ? { speed } : {}),
+            response_format: format,
+        });
+        const mimeType = audioMimeType(format);
+        const mediaData = `data:${mimeType};base64,${audio.toString('base64')}`;
+        const saved = galleryService.saveMedia(id, {
+            kind: 'audio',
+            prompt: input.trim(),
+            model,
+            pluginId,
+            mediaData,
+            mimeType,
+            metadata: { voice: voice || null, format },
+        });
+        if (!saved)
+            throw new Error('Failed to save generated audio');
+        res.json({ success: true, data: publicMedia(saved) });
+    }
+    catch (error) {
+        logger.error('Audio generation failed:', error);
+        res.status(500).json({
+            success: false,
+            message: error instanceof Error ? error.message : 'Audio generation failed',
+        });
+    }
+});
+router.post('/sound/generate', generationRateLimiter, async (req, res) => {
+    try {
+        const { model, pluginId, prompt, voice, format } = req.body;
+        if (typeof model !== 'string' ||
+            typeof pluginId !== 'string' ||
+            typeof prompt !== 'string' ||
+            prompt.trim().length === 0) {
+            res.status(400).json({
+                success: false,
+                message: 'model, pluginId, and prompt are required',
+            });
+            return;
+        }
+        const id = userId(req);
+        const generated = await pluginService.executeAudioGenRequest(model, prompt.trim(), {
+            pluginId,
+            userId: id,
+            ...(typeof voice === 'string' && voice ? { voice } : {}),
+            ...(isGeneratedAudioFormat(format) ? { format } : {}),
+        });
+        const mediaData = `data:${generated.mimeType};base64,${generated.audio.toString('base64')}`;
+        const saved = galleryService.saveMedia(id, {
+            kind: 'audio',
+            prompt: prompt.trim(),
+            model,
+            pluginId,
+            mediaData,
+            mimeType: generated.mimeType,
+            metadata: {
+                mode: 'sound',
+                voice: voice || null,
+                format: format || null,
+                transcript: generated.transcript || null,
+            },
+        });
+        if (!saved)
+            throw new Error('Failed to save generated audio');
+        res.json({ success: true, data: publicMedia(saved) });
+    }
+    catch (error) {
+        logger.error('Audio generation failed:', error);
+        res.status(500).json({
+            success: false,
+            message: error instanceof Error ? error.message : 'Audio generation failed',
+        });
+    }
+});
+router.post('/video/generate', generationRateLimiter, async (req, res) => {
+    try {
+        const { model, pluginId, prompt, duration, resolution, aspect_ratio, generate_audio, } = req.body;
+        if (typeof model !== 'string' ||
+            typeof pluginId !== 'string' ||
+            typeof prompt !== 'string' ||
+            prompt.trim().length === 0) {
+            res.status(400).json({
+                success: false,
+                message: 'model, pluginId, and prompt are required',
+            });
+            return;
+        }
+        const id = userId(req);
+        const options = {
+            ...(Number.isInteger(duration) && duration > 0 ? { duration } : {}),
+            ...(typeof resolution === 'string' && resolution ? { resolution } : {}),
+            ...(typeof aspect_ratio === 'string' && aspect_ratio
+                ? { aspectRatio: aspect_ratio }
+                : {}),
+            ...(typeof generate_audio === 'boolean'
+                ? { generateAudio: generate_audio }
+                : {}),
+        };
+        const submitted = await pluginService.submitVideoGenRequest(model, prompt.trim(), { pluginId, userId: id, ...options });
+        const job = mediaGenerationJobService.create(id, {
+            providerJobId: submitted.providerJobId,
+            pluginId,
+            model,
+            prompt: prompt.trim(),
+            options,
+        });
+        res.status(202).json({ success: true, data: publicJob(job) });
+    }
+    catch (error) {
+        logger.error('Video generation submission failed:', error);
+        res.status(500).json({
+            success: false,
+            message: error instanceof Error ? error.message : 'Video generation failed',
+        });
+    }
+});
+router.get('/video/jobs/:jobId', pollingRateLimiter, async (req, res) => {
+    try {
+        const id = userId(req);
+        const jobId = Array.isArray(req.params.jobId)
+            ? req.params.jobId[0]
+            : req.params.jobId;
+        const job = mediaGenerationJobService.get(jobId, id);
+        if (!job) {
+            res
+                .status(404)
+                .json({ success: false, message: 'Video job not found' });
+            return;
+        }
+        if (job.status === 'completed') {
+            res.json({
+                success: true,
+                data: {
+                    ...publicJob(job),
+                    media: publicMedia(galleryService.getMediaItem(job.galleryId, id)),
+                },
+            });
+            return;
+        }
+        if (job.status === 'failed') {
+            res.json({ success: true, data: publicJob(job) });
+            return;
+        }
+        const status = await pluginService.pollVideoGenRequest(job.model, job.providerJobId, job.pluginId, id);
+        if (status.status === 'failed') {
+            mediaGenerationJobService.update(job.id, id, 'failed', {
+                error: status.error || 'Video provider reported failure',
+            });
+            res.json({
+                success: true,
+                data: { ...publicJob(job), status: 'failed', error: status.error },
+            });
+            return;
+        }
+        if (status.status !== 'completed') {
+            mediaGenerationJobService.update(job.id, id, status.status);
+            res.json({
+                success: true,
+                data: { ...publicJob(job), status: status.status },
+            });
+            return;
+        }
+        const downloaded = await pluginService.downloadVideoGenResult(job.model, job.providerJobId, job.pluginId, id);
+        const media = galleryService.saveMedia(id, {
+            kind: 'video',
+            prompt: job.prompt,
+            model: job.model,
+            pluginId: job.pluginId,
+            mediaData: `data:${downloaded.mimeType};base64,${downloaded.video.toString('base64')}`,
+            mimeType: downloaded.mimeType,
+            metadata: { ...job.options, usage: status.usage || null },
+        });
+        if (!media)
+            throw new Error('Failed to save generated video');
+        mediaGenerationJobService.update(job.id, id, 'completed', {
+            galleryId: media.id,
+        });
+        res.json({
+            success: true,
+            data: {
+                ...publicJob(job),
+                status: 'completed',
+                media: publicMedia(media),
+            },
+        });
+    }
+    catch (error) {
+        logger.error('Video generation polling failed:', error);
+        res.status(500).json({
+            success: false,
+            message: error instanceof Error ? error.message : 'Video polling failed',
+        });
+    }
+});
+router.get('/gallery', galleryRateLimiter, (req, res) => {
+    const kind = req.query.kind;
+    if (kind && !['image', 'video', 'audio'].includes(String(kind))) {
+        res.status(400).json({ success: false, message: 'Invalid media kind' });
+        return;
+    }
+    const result = galleryService.getMedia(userId(req), {
+        limit: Number(req.query.limit) || 20,
+        offset: Number(req.query.offset) || 0,
+        ...(kind ? { kind: kind } : {}),
+    });
+    res.json({
+        success: true,
+        data: { ...result, media: result.media.map(publicMedia) },
+    });
+});
+router.get('/gallery/:mediaId/content', galleryRateLimiter, (req, res) => {
+    const mediaId = Array.isArray(req.params.mediaId)
+        ? req.params.mediaId[0]
+        : req.params.mediaId;
+    const item = galleryService.getMediaItem(mediaId, userId(req));
+    if (!item) {
+        res.status(404).json({ success: false, message: 'Media not found' });
+        return;
+    }
+    const match = /^data:([a-z0-9.+-]+\/[a-z0-9.+-]+);base64,([a-z0-9+/]+={0,2})$/i.exec(item.mediaData);
+    if (match) {
+        const encodedMimeType = match[1].toLowerCase();
+        if (encodedMimeType !== item.mimeType.toLowerCase() ||
+            !isSafeMediaMimeType(item.kind, encodedMimeType)) {
+            res
+                .status(422)
+                .json({ success: false, message: 'Stored media type is invalid' });
+            return;
+        }
+        const data = Buffer.from(match[2], 'base64');
+        if (data.length > 200 * 1024 * 1024) {
+            res.status(413).json({ success: false, message: 'Media is too large' });
+            return;
+        }
+        res.set({
+            'Content-Type': encodedMimeType,
+            'Content-Length': String(data.length),
+            'Cache-Control': 'private, max-age=300',
+            'Content-Security-Policy': "default-src 'none'; sandbox",
+            'X-Content-Type-Options': 'nosniff',
+        });
+        res.send(data);
+        return;
+    }
+    try {
+        const url = new URL(item.mediaData);
+        if (item.kind !== 'image' ||
+            (url.protocol !== 'http:' && url.protocol !== 'https:')) {
+            throw new Error();
+        }
+        res.redirect(302, url.toString());
+    }
+    catch {
+        res
+            .status(422)
+            .json({ success: false, message: 'Stored media is invalid' });
+    }
+});
+router.delete('/gallery/:mediaId', galleryRateLimiter, (req, res) => {
+    const mediaId = Array.isArray(req.params.mediaId)
+        ? req.params.mediaId[0]
+        : req.params.mediaId;
+    const deleted = galleryService.deleteMedia(mediaId, userId(req));
+    if (!deleted) {
+        res.status(404).json({ success: false, message: 'Media not found' });
+        return;
+    }
+    res.json({ success: true });
+});
+function isSafeMediaMimeType(kind, mimeType) {
+    const allowed = {
+        image: new Set([
+            'image/avif',
+            'image/gif',
+            'image/jpeg',
+            'image/png',
+            'image/webp',
+        ]),
+        video: new Set(['video/mp4', 'video/quicktime', 'video/webm']),
+        audio: new Set([
+            'audio/aac',
+            'audio/flac',
+            'audio/l16',
+            'audio/mpeg',
+            'audio/mp4',
+            'audio/ogg',
+            'audio/opus',
+            'audio/wav',
+            'audio/webm',
+        ]),
+    };
+    return allowed[kind].has(mimeType.toLowerCase());
+}
+function audioMimeType(format) {
+    return ({
+        mp3: 'audio/mpeg',
+        pcm: 'audio/L16',
+        wav: 'audio/wav',
+        opus: 'audio/opus',
+        aac: 'audio/aac',
+        flac: 'audio/flac',
+    }[format] || 'audio/mpeg');
+}
+function isAudioFormat(value) {
+    return (typeof value === 'string' &&
+        ['mp3', 'opus', 'aac', 'flac', 'wav', 'pcm'].includes(value));
+}
+function isGeneratedAudioFormat(value) {
+    return (typeof value === 'string' &&
+        ['wav', 'mp3', 'flac', 'opus', 'pcm16'].includes(value));
+}
+function publicJob(job) {
+    return {
+        id: job.id,
+        status: job.status,
+        model: job.model,
+        pluginId: job.pluginId,
+        galleryId: job.galleryId,
+        error: job.error,
+        createdAt: job.createdAt,
+        updatedAt: job.updatedAt,
+    };
+}
+function publicMedia(media) {
+    return media
+        ? {
+            ...media,
+            mediaData: `/api/media/gallery/${encodeURIComponent(media.id)}/content`,
+        }
+        : null;
+}
+export default router;
+//# sourceMappingURL=media.js.map

package/backend/dist/routes/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/routes/media.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAA6B,MAAM,uBAAuB,CAAC;AAChF,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AAChC,MAAM,qBAAqB,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,KAAM;IAChB,GAAG,EAAE,EAAE;IACP,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACnC,QAAQ,EAAE,KAAM;IAChB,GAAG,EAAE,EAAE;IACP,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACnC,QAAQ,EAAE,KAAM;IAChB,GAAG,EAAE,GAAG;IACR,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AACH,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,SAAS,CAAC;IAClC,QAAQ,EAAE,KAAM;IAChB,GAAG,EAAE,GAAG;IACR,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC9B,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEzB,SAAS,MAAM,CAAC,GAAyB;IACvC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAyB,EAAE,GAAG,EAAE,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,aAAa,CAAC,4BAA4B,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,aAAa,CAAC,4BAA4B,CAAC,KAAK,EAAE,EAAE,CAAC;YACrD,aAAa,CAAC,4BAA4B,CAAC,OAAO,EAAE,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,KAAK,EAAE,aAAa,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBACnD,KAAK,EAAE;oBACL,GAAG,aAAa;yBACb,0BAA0B,CAAC,EAAE,CAAC;yBAC9B,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,CAAC;oBACvD,GAAG,aAAa;yBACb,qBAAqB,CAAC,EAAE,CAAC;yBACzB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC,CAAC;iBACzD;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EAAE,GAAyB,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,GAC7D,GAAG,CAAC,IAAI,CAAC;QACX,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;YACvE,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,QAAQ,WAAW,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE;YACzC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE;YACpB,KAAK;YACL,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EAAE,GAAyB,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC5D,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAC1D,KAAK,EACL,MAAM,CAAC,IAAI,EAAE,EACb;YACE,QAAQ;YACR,MAAM,EAAE,EAAE;YACV,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CACF,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,SAAS,CAAC,QAAQ,WAAW,SAAS,CAAC,KAAK,CAAC,QAAQ,CAC7E,QAAQ,CACT,EAAE,CAAC;QACJ,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE;YACzC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,KAAK;YACL,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE;gBACR,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,KAAK,IAAI,IAAI;gBACpB,MAAM,EAAE,MAAM,IAAI,IAAI;gBACtB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;aACzC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EAAE,GAAyB,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,MAAM,EACJ,KAAK,EACL,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,cAAc,GACf,GAAG,GAAG,CAAC,IAAI,CAAC;QACb,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY;gBAClD,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE;gBAC/B,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,cAAc,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE;gBACnC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,qBAAqB,CACzD,KAAK,EACL,MAAM,CAAC,IAAI,EAAE,EACb,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CACrC,CAAC;QACF,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,CAAC,EAAE,EAAE;YAC/C,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,QAAQ;YACR,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;YACrB,OAAO;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,GAAG,CACR,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,EAAE,GAAyB,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QACrB,MAAM,GAAG,GAAG,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,GAAG,SAAS,CAAC,GAAG,CAAC;oBACjB,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,SAAU,EAAE,EAAE,CAAC,CAAC;iBACpE;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,mBAAmB,CACpD,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,QAAQ,EACZ,EAAE,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACrD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,iCAAiC;aACzD,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;aACnE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAC3D,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,QAAQ,EACZ,EAAE,CACH,CAAC;QACF,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE;YACzC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,QAAQ,UAAU,CAAC,QAAQ,WAAW,UAAU,CAAC,KAAK,CAAC,QAAQ,CACxE,QAAQ,CACT,EAAE;YACH,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC9D,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;YACxD,SAAS,EAAE,KAAK,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,GAAG,SAAS,CAAC,GAAG,CAAC;gBACjB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,EAAE,CAAC,GAAyB,EAAE,GAAG,EAAE,EAAE;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QAClD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACpC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC;QACP,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;KAC1D,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,GAAG,CACR,2BAA2B,EAC3B,kBAAkB,EAClB,CAAC,GAAyB,EAAE,GAAG,EAAE,EAAE;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IACvB,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GACT,iEAAiE,CAAC,IAAI,CACpE,IAAI,CAAC,SAAS,CACf,CAAC;IACJ,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/C,IACE,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YAC/C,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAChD,CAAC;YACD,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,GAAG,CAAC;YACN,cAAc,EAAE,eAAe;YAC/B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,eAAe,EAAE,sBAAsB;YACvC,yBAAyB,EAAE,6BAA6B;YACxD,wBAAwB,EAAE,SAAS;SACpC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IACE,IAAI,CAAC,IAAI,KAAK,OAAO;YACrB,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,EACvD,CAAC;YACD,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,CACX,mBAAmB,EACnB,kBAAkB,EAClB,CAAC,GAAyB,EAAE,GAAG,EAAE,EAAE;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IACvB,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CACF,CAAC;AAEF,SAAS,mBAAmB,CAC1B,IAAwB,EACxB,QAAgB;IAEhB,MAAM,OAAO,GAAoD;QAC/D,KAAK,EAAE,IAAI,GAAG,CAAC;YACb,YAAY;YACZ,WAAW;YACX,YAAY;YACZ,WAAW;YACX,YAAY;SACb,CAAC;QACF,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC9D,KAAK,EAAE,IAAI,GAAG,CAAC;YACb,WAAW;YACX,YAAY;YACZ,WAAW;YACX,YAAY;YACZ,WAAW;YACX,WAAW;YACX,YAAY;YACZ,WAAW;YACX,YAAY;SACb,CAAC;KACH,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,CAEH;QACE,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,WAAW;QAChB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,WAAW;QAChB,IAAI,EAAE,YAAY;KAErB,CAAC,MAAM,CAAC,IAAI,YAAY,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GASlB;IACC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAe;IAEf,OAAO,KAAK;QACV,CAAC,CAAC;YACE,GAAG,KAAK;YACR,SAAS,EAAE,sBAAsB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU;SACxE;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,eAAe,MAAM,CAAC"}

package/backend/dist/routes/ollama.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ollama.d.ts","sourceRoot":"","sources":["../../src/routes/ollama.ts"],"names":[],"mappings":"AA6BA,QAAA,MAAM,MAAM,4CAAmB,CAAC;AAwpBhC,eAAe,MAAM,CAAC"}
+{"version":3,"file":"ollama.d.ts","sourceRoot":"","sources":["../../src/routes/ollama.ts"],"names":[],"mappings":"AA+BA,QAAA,MAAM,MAAM,4CAAmB,CAAC;AA0kBhC,eAAe,MAAM,CAAC"}

package/backend/dist/routes/ollama.js

@@ -18,64 +18,10 @@ import express from 'express';
 import embeddingService from '../services/embeddingService.js';
 import ollamaService from '../services/ollamaService.js';
 import { getErrorMessage } from '../types/index.js';
-import { optionalAuth } from '../middleware/auth.js';
-import { authService } from '../services/authService.js';
-import { systemSettingsService } from '../services/systemSettingsService.js';
+import { authenticate, requireAdmin, } from '../middleware/auth.js';
 import { getOllamaLibraryModels, } from '../utils/ollamaLibrary.js';
 const router = express.Router();
-const getRequestToken = (req) => {
-    const authHeader = req.headers.authorization;
-    if (authHeader && authHeader.startsWith('Bearer ')) {
-        return authHeader.substring(7);
-    }
-    const queryToken = req.query.token;
-    if (typeof queryToken === 'string' && queryToken.trim()) {
-        return queryToken;
-    }
-    return null;
-};
-const checkModelPullPermission = (req) => {
-    // When enabled, preserve current behavior.
-    if (systemSettingsService.getAllowUserModelPull()) {
-        return { allowed: true };
-    }
-    const token = getRequestToken(req);
-    if (!token) {
-        return {
-            allowed: false,
-            status: 401,
-            error: 'Authentication required to install models',
-        };
-    }
-    const payload = authService.verifyToken(token);
-    if (!payload) {
-        return {
-            allowed: false,
-            status: 401,
-            error: 'Invalid or expired token',
-        };
-    }
-    req.user = payload;
-    if (payload.role !== 'admin') {
-        return {
-            allowed: false,
-            status: 403,
-            error: 'Only admins can install new models on this instance',
-        };
-    }
-    return { allowed: true };
-};
-const enforceModelPullPermission = (req, res, next) => {
-    const permission = checkModelPullPermission(req);
-    if (!permission.allowed) {
-        res.status(permission.status).json({
-            success: false,
-            error: permission.error,
-        });
-        return;
-    }
-    next();
-};
+router.use(authenticate);
 // Health check
 router.get('/health', async (req, res) => {
     try {
@@ -118,7 +64,7 @@ router.get('/models', async (req, res) => {
     }
 });
 // Pull all models
-router.post('/models/pull-all', async (req, res) => {
+router.post('/models/pull-all', requireAdmin, async (req, res) => {
     try {
         const result = await ollamaService.pullAllModels();
         res.json({
@@ -137,12 +83,11 @@ router.post('/models/pull-all', async (req, res) => {
     }
 });
 // Pull all models with streaming progress (GET for Server-Sent Events)
-router.get('/models/pull-all/stream', async (req, res) => {
+router.get('/models/pull-all/stream', requireAdmin, async (req, res) => {
     try {
         res.setHeader('Content-Type', 'text/event-stream');
         res.setHeader('Cache-Control', 'no-cache');
         res.setHeader('Connection', 'keep-alive');
-        res.setHeader('Access-Control-Allow-Origin', '*');
         await ollamaService.pullAllModelsStream(progress => {
             res.write(`data: ${JSON.stringify({ type: 'progress', ...progress })}\n\n`);
         }, () => {
@@ -159,7 +104,7 @@ router.get('/models/pull-all/stream', async (req, res) => {
     }
 });
 // Pull a new model (uses request body to support model names with slashes like hf.co/author/model:tag)
-router.post('/models/pull', enforceModelPullPermission, async (req, res) => {
+router.post('/models/pull', requireAdmin, async (req, res) => {
     try {
         const modelName = req.body.name;
         if (!modelName) {
@@ -184,19 +129,8 @@ router.post('/models/pull', enforceModelPullPermission, async (req, res) => {
 });
 // Pull a model with streaming progress
 // Uses query param ?model= to support model names with slashes (e.g., hf.co/author/model)
-// Optional ?token= can be provided for role checks when EventSource cannot set auth headers
-router.get('/pull/stream', async (req, res) => {
+router.get('/pull/stream', requireAdmin, async (req, res) => {
     try {
-        const permission = checkModelPullPermission(req);
-        if (!permission.allowed) {
-            res.setHeader('Content-Type', 'text/event-stream');
-            res.setHeader('Cache-Control', 'no-cache');
-            res.setHeader('Connection', 'keep-alive');
-            res.setHeader('Access-Control-Allow-Origin', '*');
-            res.write(`data: ${JSON.stringify({ type: 'error', error: permission.error })}\n\n`);
-            res.end();
-            return;
-        }
         const modelName = req.query.model;
         if (!modelName) {
             res
@@ -207,7 +141,6 @@ router.get('/pull/stream', async (req, res) => {
         res.setHeader('Content-Type', 'text/event-stream');
         res.setHeader('Cache-Control', 'no-cache');
         res.setHeader('Connection', 'keep-alive');
-        res.setHeader('Access-Control-Allow-Origin', '*');
         await ollamaService.pullModelStream(modelName, progress => {
             res.write(`data: ${JSON.stringify({ type: 'progress', ...progress })}\n\n`);
         }, error => {
@@ -224,7 +157,7 @@ router.get('/pull/stream', async (req, res) => {
     }
 });
 // Delete a model (uses query param ?name= to support model names with slashes like hf.co/author/model:tag)
-router.delete('/models', async (req, res) => {
+router.delete('/models', requireAdmin, async (req, res) => {
     try {
         const modelName = req.query.name;
         if (!modelName) {
@@ -270,7 +203,7 @@ router.get('/models/show', async (req, res) => {
     }
 });
 // Create a model
-router.post('/models', async (req, res) => {
+router.post('/models', requireAdmin, async (req, res) => {
     try {
         await ollamaService.createModel(req.body);
         res.json({ success: true, message: 'Model created successfully' });
@@ -283,7 +216,7 @@ router.post('/models', async (req, res) => {
     }
 });
 // Copy a model
-router.post('/models/copy', async (req, res) => {
+router.post('/models/copy', requireAdmin, async (req, res) => {
     try {
         const { source, destination } = req.body;
         await ollamaService.copyModel(source, destination);
@@ -297,7 +230,7 @@ router.post('/models/copy', async (req, res) => {
     }
 });
 // Push a model (uses request body to support model names with slashes like hf.co/author/model:tag)
-router.post('/models/push', async (req, res) => {
+router.post('/models/push', requireAdmin, async (req, res) => {
     try {
         const modelName = req.body.name;
         if (!modelName) {
@@ -321,7 +254,7 @@ router.post('/models/push', async (req, res) => {
     }
 });
 // Generate embeddings
-router.post('/embed', optionalAuth, async (req, res) => {
+router.post('/embed', async (req, res) => {
     try {
         const data = await embeddingService.generateEmbeddings(req.body, req.user?.userId);
         res.json({ success: true, data });
@@ -347,7 +280,7 @@ router.get('/running', async (req, res) => {
     }
 });
 // Unload a model from memory (free VRAM)
-router.post('/models/unload', async (req, res) => {
+router.post('/models/unload', requireAdmin, async (req, res) => {
     try {
         const modelName = req.body.name;
         if (!modelName) {
@@ -371,7 +304,7 @@ router.post('/models/unload', async (req, res) => {
     }
 });
 // Unload all running models from memory
-router.post('/models/unload-all', async (req, res) => {
+router.post('/models/unload-all', requireAdmin, async (req, res) => {
     try {
         await ollamaService.unloadAllModels();
         res.json({
@@ -418,7 +351,6 @@ router.post('/chat/stream', async (req, res) => {
         res.setHeader('Content-Type', 'text/event-stream');
         res.setHeader('Cache-Control', 'no-cache');
         res.setHeader('Connection', 'keep-alive');
-        res.setHeader('Access-Control-Allow-Origin', '*');
         await ollamaService.generateChatStreamResponse(req.body, chunk => {
             res.write(`data: ${JSON.stringify(chunk)}\n\n`);
         }, error => {
@@ -458,7 +390,7 @@ router.head('/blobs/:digest', async (req, res) => {
     }
 });
 // Push a blob
-router.post('/blobs/:digest', async (req, res) => {
+router.post('/blobs/:digest', requireAdmin, async (req, res) => {
     try {
         const digest = req.params.digest;
         // Only allow lowercase hex strings of length 64 (SHA256)
@@ -495,7 +427,7 @@ router.post('/blobs/:digest', async (req, res) => {
     }
 });
 // Legacy embeddings endpoint (deprecated)
-router.post('/embeddings', optionalAuth, async (req, res) => {
+router.post('/embeddings', async (req, res) => {
     try {
         const data = await embeddingService.generateEmbeddings({
             model: req.body.model,