studiograph 1.3.48-next.13 → 1.3.48-next.130

package/dist/server/routes/ws.js

@@ -2,14 +2,37 @@
  * WebSocket endpoint — authenticates connections, registers them with the hub,
  * and handles Yjs binary sync/awareness messages via YjsManager.
  */
-import { isAdminOrOwner } from '../../services/auth-service.js';
-export async function registerWsRoute(fastify, wsHub, authService, yjsManager) {
+import * as access from '../../services/access-control.js';
+import { log } from '../../utils/log.js';
+/**
+ * Build a per-connection repo access predicate. In open mode (`user == null`)
+ * everything is allowed. Otherwise we delegate to access-control's
+ * hasRepoAccess so personal-folder restrictions and owner-on-shared-folder
+ * semantics match the HTTP API.
+ */
+function makeCanAccess(user, workspaceManager, authService) {
+    if (!user)
+        return () => true;
+    return (repo) => access.hasRepoAccess(user, repo, workspaceManager, authService);
+}
+/** docName encodes `${repo}/${entityType}/${entityId}`. Returns the repo
+ *  segment, or null if the format is malformed. */
+function parseRepoFromDocName(docName) {
+    const slash = docName.indexOf('/');
+    if (slash <= 0)
+        return null;
+    return docName.slice(0, slash);
+}
+export async function registerWsRoute(fastify, wsHub, authService, workspaceManager, yjsManager) {
     fastify.get('/ws', { websocket: true }, (socket, req) => {
         // Authenticate via JWT cookie or ?token= query param
         const cookies = req.cookies;
         const jwtFromCookie = cookies?.['__sg_token'];
         const jwtFromQuery = req.query?.token;
         const token = jwtFromCookie || jwtFromQuery;
+        // Client sends its IANA timezone so briefing staleness can be checked
+        // against the user's local calendar date instead of a rolling 24h window.
+        const tz = req.query?.tz || 'UTC';
         if (authService.hasUsers()) {
             if (!token) {
                 socket.send(JSON.stringify({ error: 'Unauthorized' }));
@@ -22,32 +45,35 @@ export async function registerWsRoute(fastify, wsHub, authService, yjsManager) {
                 socket.close(4001, 'Invalid token');
                 return;
             }
-            const collections = isAdminOrOwner(user.role)
-                ? null
-                : authService.getUserCollections(user.id);
-            const collectionSet = collections ? new Set(collections) : null;
-            wsHub.addClient(socket, user, collections);
-            wsHub.sendPresenceSnapshot(socket, collectionSet);
+            // Folder membership feeds presence visibility. Per-message access
+            // (Yjs sync, presence write, collab:join/leave) goes through canAccess
+            // which honors personal-folder restrictions even on stale grants.
+            const folders = authService.getUserFolders(user.id);
+            const folderSet = new Set(folders);
+            const canAccess = makeCanAccess(user, workspaceManager, authService);
+            wsHub.addClient(socket, user, folders, tz);
+            wsHub.sendPresenceSnapshot(socket, folderSet);
             socket.on('message', (raw) => {
                 // Binary messages = Yjs sync/awareness protocol
                 if (Buffer.isBuffer(raw) && raw.length >= 3 && raw[0] !== 0x7b) {
-                    handleYjsBinary(yjsManager, socket, raw);
+                    handleYjsBinary(yjsManager, socket, raw, canAccess);
                     return;
                 }
-                handleClientMessage(wsHub, yjsManager, socket, raw, String(user.id), user.displayName);
+                handleClientMessage(wsHub, yjsManager, socket, raw, String(user.id), user.displayName, canAccess);
             });
             socket.on('close', () => yjsManager.removeClientFromAll(socket));
         }
         else {
-            // Open mode — no auth, all collections
-            wsHub.addClient(socket, null, null);
+            // Open mode — no auth, all folders
+            const canAccess = makeCanAccess(null, workspaceManager, authService);
+            wsHub.addClient(socket, null, null, tz);
             wsHub.sendPresenceSnapshot(socket, null);
             socket.on('message', (raw) => {
                 if (Buffer.isBuffer(raw) && raw.length >= 3 && raw[0] !== 0x7b) {
-                    handleYjsBinary(yjsManager, socket, raw);
+                    handleYjsBinary(yjsManager, socket, raw, canAccess);
                     return;
                 }
-                handleClientMessage(wsHub, yjsManager, socket, raw, 'anon', 'Anonymous');
+                handleClientMessage(wsHub, yjsManager, socket, raw, 'anon', 'Anonymous', canAccess);
             });
             socket.on('close', () => yjsManager.removeClientFromAll(socket));
         }
@@ -59,12 +85,15 @@ export async function registerWsRoute(fastify, wsHub, authService, yjsManager) {
  *
  * Frame format: [2B docName length, uint16 BE][docName UTF-8][1B msgType][payload]
  */
-function handleYjsBinary(yjsManager, sender, raw) {
+function handleYjsBinary(yjsManager, sender, raw, canAccess) {
     try {
         const docNameLen = raw.readUInt16BE(0);
         if (raw.length < 2 + docNameLen + 1)
             return;
         const docName = raw.subarray(2, 2 + docNameLen).toString('utf8');
+        const repo = parseRepoFromDocName(docName);
+        if (!repo || !canAccess(repo))
+            return; // silently drop unauthorized frames
         const msgType = raw[2 + docNameLen];
         const payload = raw.subarray(2 + docNameLen + 1);
         yjsManager.handleMessage(docName, sender, msgType, payload);
@@ -73,13 +102,16 @@ function handleYjsBinary(yjsManager, sender, raw) {
         // ignore malformed binary frames
     }
 }
-function handleClientMessage(wsHub, yjsManager, socket, raw, userId, userName) {
+function handleClientMessage(wsHub, yjsManager, socket, raw, userId, userName, canAccess) {
     // Binary frames → Yjs sync/awareness protocol (NOT JSON)
     if (Buffer.isBuffer(raw) && raw.length >= 3) {
         // Decode binary frame: [2B nameLen][name][1B msgType][payload]
         const nameLen = raw.readUInt16BE(0);
         if (nameLen > 0 && 2 + nameLen + 1 <= raw.length) {
             const docName = raw.subarray(2, 2 + nameLen).toString('utf-8');
+            const repo = parseRepoFromDocName(docName);
+            if (!repo || !canAccess(repo))
+                return; // silently drop
             const msgType = raw[2 + nameLen];
             const payload = raw.subarray(2 + nameLen + 1);
             yjsManager.handleMessage(docName, socket, msgType, payload);
@@ -93,6 +125,11 @@ function handleClientMessage(wsHub, yjsManager, socket, raw, userId, userName) {
             return;
         }
         if (msg?.type === 'presence' && msg.action && msg.repo && msg.entityType && msg.entityId) {
+            // Drop presence writes / snapshot reads for repos the user can't see.
+            // Without this, an attacker could pollute the presence map for any
+            // folder and the snapshot reply discloses who's editing what.
+            if (!canAccess(msg.repo))
+                return;
             wsHub.handlePresence(msg.action, msg.repo, msg.entityType, msg.entityId, { id: userId, name: userName });
             // On enter: immediately send back current presence so the client
             // doesn't have to wait for others' 30s heartbeats.
@@ -114,13 +151,26 @@ function handleClientMessage(wsHub, yjsManager, socket, raw, userId, userName) {
             }
             return;
         }
-        // collab:join — register client for a Yjs doc (server seeds Y.Doc from disk)
+        // collab:join — register client for a Yjs doc. Server replies with a
+        // collab:joined ack JSON message after the doc is loaded (including any
+        // persisted snapshot); the client gates its sync-step-1 + awareness
+        // sends behind the ack so binary frames don't race the async load.
+        // Gate by per-repo access so docName can't be used to read/edit folders
+        // the user doesn't have access to.
         if (msg?.type === 'collab:join' && msg.docName) {
-            yjsManager.addClient(msg.docName, socket);
+            const repo = parseRepoFromDocName(msg.docName);
+            if (!repo || !canAccess(repo))
+                return;
+            yjsManager.addClient(msg.docName, socket).catch(err => {
+                log.error(`[ws] yjsManager.addClient(${msg.docName}) failed:`, err);
+            });
             return;
         }
         // collab:leave — unregister from a Yjs doc
         if (msg?.type === 'collab:leave' && msg.docName) {
+            const repo = parseRepoFromDocName(msg.docName);
+            if (!repo || !canAccess(repo))
+                return;
             yjsManager.removeClient(msg.docName, socket);
             return;
         }

package/dist/server/routes/ws.js.map

@@ -1 +1 @@
-{"version":3,"file":"ws.js","sourceRoot":"","sources":["../../../src/server/routes/ws.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,EAAoB,MAAM,gCAAgC,CAAC;AAIlF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAwB,EACxB,KAAY,EACZ,WAAwB,EACxB,UAAsB;IAEtB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtD,qDAAqD;QACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAA6C,CAAC;QAClE,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAI,GAAG,CAAC,KAAgC,EAAE,KAAK,CAAC;QAClE,MAAM,KAAK,GAAG,aAAa,IAAI,YAAY,CAAC;QAE5C,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3C,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE5C,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAC3C,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAClD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,EAAE;gBAC5C,gDAAgD;gBAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/D,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,EAAE;gBAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/D,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,UAAsB,EACtB,MAA8B,EAC9B,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC;YAAE,OAAO;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC;QAEjD,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAY,EACZ,UAAsB,EACtB,MAA8B,EAC9B,GAAoB,EACpB,MAAc,EACd,QAAgB;IAEhB,yDAAyD;IACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,+DAA+D;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;YAC9C,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzF,KAAK,CAAC,cAAc,CAClB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,QAAQ,EACZ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAC/B,CAAC;YAEF,iEAAiE;YACjE,mDAAmD;YACnD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7E,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;wBAAE,SAAS;oBACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,OAAO;wBACf,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,IAAI;wBACJ,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,IAAI,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/C,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,IAAI,GAAG,EAAE,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChD,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;AACH,CAAC"}
+{"version":3,"file":"ws.js","sourceRoot":"","sources":["../../../src/server/routes/ws.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAG3D,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEzC;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAqB,EACrB,gBAAkC,EAClC,WAAwB;IAExB,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC;IAC7B,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAC3F,CAAC;AAED;mDACmD;AACnD,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAwB,EACxB,KAAY,EACZ,WAAwB,EACxB,gBAAkC,EAClC,UAAsB;IAEtB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtD,qDAAqD;QACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAA6C,CAAC;QAClE,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAI,GAAG,CAAC,KAAgC,EAAE,KAAK,CAAC;QAClE,MAAM,KAAK,GAAG,aAAa,IAAI,YAAY,CAAC;QAC5C,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,EAAE,GAAI,GAAG,CAAC,KAAgC,EAAE,EAAE,IAAI,KAAK,CAAC;QAE9D,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,kEAAkE;YAClE,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACrE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,EAAE;gBAC5C,gDAAgD;gBAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/D,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBACD,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACpG,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,mCAAmC;YACnC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACrE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,EAAE;gBAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/D,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;gBACD,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,UAAsB,EACtB,MAA8B,EAC9B,GAAW,EACX,SAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC;YAAE,OAAO;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,oCAAoC;QAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC;QAEjD,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAY,EACZ,UAAsB,EACtB,MAA8B,EAC9B,GAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,SAAoC;IAEpC,yDAAyD;IACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,+DAA+D;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,gBAAgB;YACvD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;YAC9C,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzF,sEAAsE;YACtE,mEAAmE;YACnE,8DAA8D;YAC9D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YACjC,KAAK,CAAC,cAAc,CAClB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,QAAQ,EACZ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAC/B,CAAC;YAEF,iEAAiE;YACjE,mDAAmD;YACnD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7E,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;wBAAE,SAAS;oBACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACzB,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,OAAO;wBACf,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,IAAI;wBACJ,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAO;YACtC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACpD,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,WAAW,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,IAAI,GAAG,EAAE,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAO;YACtC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;AACH,CAAC"}

package/dist/server/session-manager.d.ts

@@ -6,9 +6,13 @@
  * is made covering all entities touched during that session, and a
  * `session_commit` WebSocket event is broadcast.
  *
- * This replaces the old CommitScheduler 30s threshold with a 5-minute idle
- * window per user, preventing git history pollution while keeping attribution
- * accurate per user.
+ * Persistence: the dirty set is mirrored to
+ * `<workspace>/.studiograph/pending-commits.json` on every markDirty/flush.
+ * On boot, recoverOnBoot() reads that file AND scans every repo for
+ * uncommitted working-tree changes — anything found is committed under a
+ * "system recovery" attribution. This guarantees no edit ever lives only in
+ * memory: a crash, OOM, or hard restart leaves the working tree dirty but
+ * recoverable on the next boot.
  */
 import type { WorkspaceManager } from '../core/workspace-manager.js';
 import type { GitUser } from '../services/git.js';
@@ -18,7 +22,19 @@ export declare class SessionManager {
     private timer;
     private workspaceManager;
     private wsHub;
+    private pendingPath;
     constructor(workspaceManager: WorkspaceManager, wsHub?: WsHub);
+    /**
+     * On boot: load any persisted sessions from the previous process, then
+     * walk every repo and commit anything in the working tree that wasn't
+     * committed (a crash, OOM, or hard restart left it dirty). Always safe
+     * to call — no-ops cleanly when there's nothing to recover.
+     */
+    recoverOnBoot(): Promise<{
+        persistedRepos: number;
+        sweptRepos: number;
+        totalCommits: number;
+    }>;
     /**
      * Record a disk write within a user's session for the given repo.
      * Resets the idle timer and accumulates entity + file path info.
@@ -31,10 +47,37 @@ export declare class SessionManager {
      */
     flush(repoName: string): Promise<boolean>;
     /**
-     * Flush all open sessions (called on server shutdown).
+     * Flush all open sessions (called on server shutdown via shutdown()).
      */
     flushAll(): Promise<void>;
+    /**
+     * Graceful shutdown — flushes pending sessions then tears down the timer.
+     * Safe to call multiple times. Always prefer this over destroy().
+     */
+    shutdown(): Promise<void>;
     private flushStale;
     private commitSession;
-    destroy(): void;
+    /**
+     * Snapshot of current dirty state, exposed for the health endpoint.
+     */
+    getDirtySessions(): Array<{
+        repo: string;
+        user: string;
+        entities: string[];
+        lastActivityAt: number;
+    }>;
+    /**
+     * Atomically write the current dirty set to disk. Best-effort: a
+     * persistence failure logs and returns; it never throws into the request
+     * path. The recovery sweep on next boot covers anything that didn't
+     * persist.
+     */
+    private persist;
+    private loadPersisted;
+    /**
+     * Tear down the timer + clear in-memory state. Does NOT commit pending
+     * sessions — call shutdown() for graceful exit. Made private to prevent
+     * accidental data loss; only flushAll() and shutdown() should reach it.
+     */
+    private destroy;
 }

package/dist/server/session-manager.js

@@ -6,22 +6,100 @@
  * is made covering all entities touched during that session, and a
  * `session_commit` WebSocket event is broadcast.
  *
- * This replaces the old CommitScheduler 30s threshold with a 5-minute idle
- * window per user, preventing git history pollution while keeping attribution
- * accurate per user.
+ * Persistence: the dirty set is mirrored to
+ * `<workspace>/.studiograph/pending-commits.json` on every markDirty/flush.
+ * On boot, recoverOnBoot() reads that file AND scans every repo for
+ * uncommitted working-tree changes — anything found is committed under a
+ * "system recovery" attribution. This guarantees no edit ever lives only in
+ * memory: a crash, OOM, or hard restart leaves the working tree dirty but
+ * recoverable on the next boot.
  */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { recordCommitAudit } from './commit-audit.js';
 const SESSION_IDLE_MS = 5 * 60_000; // 5 minutes idle → commit
 const CHECK_INTERVAL_MS = 30_000; // check for stale sessions every 30s
+const RECOVERY_USER = {
+    id: 'studiograph-recovery',
+    name: 'Studiograph (recovery)',
+    email: 'recovery@studiograph.local',
+};
 export class SessionManager {
     sessions = new Map(); // key: `${userId}:${repo}`
     timer = null;
     workspaceManager;
     wsHub;
+    pendingPath;
     constructor(workspaceManager, wsHub) {
         this.workspaceManager = workspaceManager;
         this.wsHub = wsHub;
+        this.pendingPath = join(workspaceManager.getWorkspacePath(), '.studiograph', 'pending-commits.json');
         this.timer = setInterval(() => this.flushStale(), CHECK_INTERVAL_MS);
     }
+    /**
+     * On boot: load any persisted sessions from the previous process, then
+     * walk every repo and commit anything in the working tree that wasn't
+     * committed (a crash, OOM, or hard restart left it dirty). Always safe
+     * to call — no-ops cleanly when there's nothing to recover.
+     */
+    async recoverOnBoot() {
+        let totalCommits = 0;
+        // 1. Replay persisted sessions (preserves original user attribution).
+        const persisted = this.loadPersisted();
+        let persistedRepos = 0;
+        if (persisted && persisted.sessions.length > 0) {
+            for (const ps of persisted.sessions) {
+                const session = {
+                    user: ps.user,
+                    repo: ps.repo,
+                    lastActivityAt: ps.lastActivityAt,
+                    entities: new Set(ps.entities),
+                    filePaths: new Set(ps.filePaths),
+                };
+                const committed = await this.commitSession(session, 'recovery-persisted');
+                if (committed)
+                    totalCommits += 1;
+                persistedRepos += 1;
+            }
+            // Clear persisted state — anything still dirty after this falls
+            // through to the working-tree sweep below.
+            this.persist();
+        }
+        // 2. Working-tree sweep — catches anything that bypassed the session
+        //    map entirely (silent commit failures, direct fs writes, etc.).
+        let sweptRepos = 0;
+        for (const repoName of this.workspaceManager.getRepoNames()) {
+            try {
+                const graph = this.workspaceManager.getGraph(repoName);
+                const gitService = graph.getGitService();
+                if (!gitService)
+                    continue;
+                if (!gitService.hasUncommittedChanges())
+                    continue;
+                const status = gitService.getStatus();
+                const fileCount = status.modified.length + status.added.length + status.deleted.length + status.untracked.length;
+                const message = `recovery: commit ${fileCount} uncommitted file(s) from prior session`;
+                gitService.commitAll(message, RECOVERY_USER);
+                recordCommitAudit(this.workspaceManager.getWorkspacePath(), {
+                    repo: repoName,
+                    source: 'recovery',
+                    user: RECOVERY_USER,
+                    message,
+                    fileCount,
+                });
+                sweptRepos += 1;
+                totalCommits += 1;
+                console.log(`[session-manager] recovery: committed ${fileCount} file(s) in ${repoName}`);
+            }
+            catch (err) {
+                console.warn(`[session-manager] recovery sweep failed for ${repoName}:`, err.message);
+            }
+        }
+        if (persistedRepos > 0 || sweptRepos > 0) {
+            console.log(`[session-manager] recoverOnBoot: ${persistedRepos} persisted, ${sweptRepos} swept, ${totalCommits} commit(s)`);
+        }
+        return { persistedRepos, sweptRepos, totalCommits };
+    }
     /**
      * Record a disk write within a user's session for the given repo.
      * Resets the idle timer and accumulates entity + file path info.
@@ -47,6 +125,7 @@ export class SessionManager {
                 session.filePaths.add(filePath);
             this.sessions.set(key, session);
         }
+        this.persist();
     }
     /**
      * Flush all sessions for a repo immediately.
@@ -63,18 +142,32 @@ export class SessionManager {
             return false;
         for (const [key] of toFlush)
             this.sessions.delete(key);
-        const results = await Promise.all(toFlush.map(([, session]) => this.commitSession(session)));
+        this.persist();
+        const results = await Promise.all(toFlush.map(([, session]) => this.commitSession(session, 'session-flush')));
         return results.some(Boolean);
     }
     /**
-     * Flush all open sessions (called on server shutdown).
+     * Flush all open sessions (called on server shutdown via shutdown()).
      */
     async flushAll() {
         const entries = Array.from(this.sessions.entries());
-        console.log(`[session-manager] flushAll: flushing ${entries.length} open session(s) on shutdown`);
+        if (entries.length > 0) {
+            console.log(`[session-manager] flushAll: flushing ${entries.length} open session(s) on shutdown`);
+        }
         this.sessions.clear();
-        await Promise.all(entries.map(([, session]) => this.commitSession(session)));
-        console.log(`[session-manager] flushAll: done`);
+        this.persist();
+        await Promise.all(entries.map(([, session]) => this.commitSession(session, 'session-flush')));
+        if (entries.length > 0) {
+            console.log(`[session-manager] flushAll: done`);
+        }
+    }
+    /**
+     * Graceful shutdown — flushes pending sessions then tears down the timer.
+     * Safe to call multiple times. Always prefer this over destroy().
+     */
+    async shutdown() {
+        await this.flushAll();
+        this.destroy();
     }
     async flushStale() {
         const now = Date.now();
@@ -84,11 +177,14 @@ export class SessionManager {
                 toFlush.push([key, session]);
             }
         }
+        if (toFlush.length === 0)
+            return;
         for (const [key] of toFlush)
             this.sessions.delete(key);
-        await Promise.all(toFlush.map(([, session]) => this.commitSession(session)));
+        this.persist();
+        await Promise.all(toFlush.map(([, session]) => this.commitSession(session, 'session-flush')));
     }
-    async commitSession(session) {
+    async commitSession(session, source) {
         try {
             const graph = this.workspaceManager.getGraph(session.repo);
             const gitService = graph.getGitService();
@@ -99,13 +195,22 @@ export class SessionManager {
             const entities = Array.from(session.entities);
             const listed = entities.slice(0, 3).join(', ');
             const overflow = entities.length > 3 ? ` (+${entities.length - 3} more)` : '';
-            const message = `Edit ${listed}${overflow}`;
+            const prefix = source === 'recovery-persisted' ? 'recovery: edit ' : 'Edit ';
+            const message = `${prefix}${listed}${overflow}`;
+            const fileCount = session.filePaths.size;
             if (session.filePaths.size > 0) {
                 gitService.commitFiles(Array.from(session.filePaths), message, session.user);
             }
             else {
                 gitService.commitAll(message, session.user);
             }
+            recordCommitAudit(this.workspaceManager.getWorkspacePath(), {
+                repo: session.repo,
+                source,
+                user: session.user,
+                message,
+                fileCount,
+            });
             this.wsHub?.broadcast({
                 type: 'session_commit',
                 repo: session.repo,
@@ -120,6 +225,65 @@ export class SessionManager {
             return false;
         }
     }
+    /**
+     * Snapshot of current dirty state, exposed for the health endpoint.
+     */
+    getDirtySessions() {
+        return Array.from(this.sessions.values()).map(s => ({
+            repo: s.repo,
+            user: s.user.name,
+            entities: Array.from(s.entities),
+            lastActivityAt: s.lastActivityAt,
+        }));
+    }
+    /**
+     * Atomically write the current dirty set to disk. Best-effort: a
+     * persistence failure logs and returns; it never throws into the request
+     * path. The recovery sweep on next boot covers anything that didn't
+     * persist.
+     */
+    persist() {
+        const state = {
+            version: 1,
+            savedAt: new Date().toISOString(),
+            sessions: Array.from(this.sessions.values()).map(s => ({
+                user: s.user,
+                repo: s.repo,
+                lastActivityAt: s.lastActivityAt,
+                entities: Array.from(s.entities),
+                filePaths: Array.from(s.filePaths),
+            })),
+        };
+        try {
+            mkdirSync(join(this.workspaceManager.getWorkspacePath(), '.studiograph'), { recursive: true });
+            const tmp = `${this.pendingPath}.tmp`;
+            writeFileSync(tmp, JSON.stringify(state, null, 2), 'utf-8');
+            renameSync(tmp, this.pendingPath);
+        }
+        catch (err) {
+            console.warn(`[session-manager] failed to persist pending commits:`, err.message);
+        }
+    }
+    loadPersisted() {
+        try {
+            if (!existsSync(this.pendingPath))
+                return null;
+            const raw = readFileSync(this.pendingPath, 'utf-8');
+            const parsed = JSON.parse(raw);
+            if (parsed.version !== 1 || !Array.isArray(parsed.sessions))
+                return null;
+            return parsed;
+        }
+        catch (err) {
+            console.warn(`[session-manager] failed to load pending commits:`, err.message);
+            return null;
+        }
+    }
+    /**
+     * Tear down the timer + clear in-memory state. Does NOT commit pending
+     * sessions — call shutdown() for graceful exit. Made private to prevent
+     * accidental data loss; only flushAll() and shutdown() should reach it.
+     */
     destroy() {
         if (this.timer) {
             clearInterval(this.timer);

package/dist/server/session-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/server/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,0BAA0B;AAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAG,qCAAqC;AAUzE,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC,CAAC,2BAA2B;IAClE,KAAK,GAA0C,IAAI,CAAC;IACpD,gBAAgB,CAAmB;IACnC,KAAK,CAAoB;IAEjC,YAAY,gBAAkC,EAAE,KAAa;QAC3D,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,QAAgB,EAAE,IAAa,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAiB;QAChG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;YACnD,IAAI,QAAQ;gBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAY;gBACvB,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAChD,SAAS,EAAE,IAAI,GAAG,EAAU;aAC7B,CAAC;YACF,IAAI,QAAQ;gBAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,wCAAwC,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC;QAClG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE;gBAAE,OAAO,KAAK,CAAC;YAEtD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,OAAO,GAAG,QAAQ,MAAM,GAAG,QAAQ,EAAE,CAAC;YAE5C,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,OAAO,CAAC,IAAI,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC5F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/server/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,0BAA0B;AAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAG,qCAAqC;AAEzE,MAAM,aAAa,GAAY;IAC7B,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,wBAAwB;IAC9B,KAAK,EAAE,4BAA4B;CACpC,CAAC;AAwBF,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC,CAAC,2BAA2B;IAClE,KAAK,GAA0C,IAAI,CAAC;IACpD,gBAAgB,CAAmB;IACnC,KAAK,CAAoB;IACzB,WAAW,CAAS;IAE5B,YAAY,gBAAkC,EAAE,KAAa;QAC3D,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC;QACrG,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa;QACjB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAY;oBACvB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,cAAc,EAAE,EAAE,CAAC,cAAc;oBACjC,QAAQ,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;oBAC9B,SAAS,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC;iBACjC,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;gBAC1E,IAAI,SAAS;oBAAE,YAAY,IAAI,CAAC,CAAC;gBACjC,cAAc,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,gEAAgE;YAChE,2CAA2C;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzC,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE;oBAAE,SAAS;gBAClD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;gBACjH,MAAM,OAAO,GAAG,oBAAoB,SAAS,yCAAyC,CAAC;gBACvF,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAC7C,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE;oBAC1D,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO;oBACP,SAAS;iBACV,CAAC,CAAC;gBACH,UAAU,IAAI,CAAC,CAAC;gBAChB,YAAY,IAAI,CAAC,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,yCAAyC,SAAS,eAAe,QAAQ,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,+CAA+C,QAAQ,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,oCAAoC,cAAc,eAAe,UAAU,WAAW,YAAY,YAAY,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,QAAgB,EAAE,IAAa,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAiB;QAChG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;YACnD,IAAI,QAAQ;gBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAY;gBACvB,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAChD,SAAS,EAAE,IAAI,GAAG,EAAU;aAC7B,CAAC;YACF,IAAI,QAAQ;gBAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9G,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,wCAAwC,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,MAA8C;QAC1F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE;gBAAE,OAAO,KAAK,CAAC;YAEtD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;YAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YACzC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;YAED,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE;gBAC1D,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,OAAO,CAAC,IAAI,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC5F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;YACjB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChC,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACK,OAAO;QACb,MAAM,KAAK,GAAmB;YAC5B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAChC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;aACnC,CAAC,CAAC;SACJ,CAAC;QACF,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,MAAM,CAAC;YACtC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;YACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,OAAO;QACb,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}