wcz-layout 9.4.1 → 9.4.3

package/skills/client-db/SKILL.md

@@ -3,13 +3,14 @@ name: client-db
 description: "Use when: creating or modifying TanStack DB collections, live queries, optimistic collection writes, subset loading, collection preloading."
 ---
 
+> Mechanics (`createCollection`, `queryCollectionOptions`, the live-query builder, `createOptimisticAction`) are covered by TanStack's own skills — load `@tanstack/db#db-core/live-queries`, `#db-core/mutations-optimistic`, and `@tanstack/react-db` for the API details. This skill adds only the wcz-layout conventions on top.
+
 ## Rules
 
 - Use `eager` syncMode for top-level collections, `on-demand` for child/relational data.
 - Use `useLiveQuery` for list/grid pages and `useLiveSuspenseQuery` for detail components wrapped in suspense.
 - For mutations use `createOptimisticAction` — mirror the server mutation in `onMutate`, then call the server function and `collection.utils.refetch()` in `mutationFn`.
-- Use `meta.loadSubsetOptions` for relational subset loading.
-- Use Axios with auth interceptor `getAccessToken` but only for public REST APIs; use default `api` as a scope key.
+- For on-demand subset loading, convert `meta.loadSubsetOptions` with `fromTanDb()` (from `agnostic-query/tanstack-db`) before passing it to the server fn, and set `autoIndex: "eager"` with `defaultIndexType: BasicIndex` (from `@tanstack/react-db`).
 
 ## File Placement
 
@@ -18,24 +19,11 @@ src/db-collections/           — DB collections
 src/server/actions/           — server functions (select/update/insert/delete)
 src/lib/schemas/              — Zod schemas (shared between client and server)
 src/lib/auth/scopes.ts        — API scope keys
-wcz-layout/data               — queryClient instance
-wcz-layout/auth               — getAccessToken utility function
 ```
 
 ## Examples
 
 ```ts
-// src/db-collections/<feature>.ts
-export const api = axios.create({
-  baseURL: "/api/libraries",
-});
-
-api.interceptors.request.use(async (config) => {
-  const accessToken = await getAccessToken("api");
-  config.headers.set("Authorization", `Bearer ${accessToken}`);
-  return config;
-});
-
 // src/db-collections/<feature>.ts
 export const librariesCollection = createCollection(
   queryCollectionOptions({
@@ -48,15 +36,20 @@ export const librariesCollection = createCollection(
   }),
 );
 
-// src/db-collections/<feature>.ts
+// src/db-collections/<feature>.ts — child/relational (on-demand)
+import { BasicIndex } from "@tanstack/react-db";
+import { fromTanDb } from "agnostic-query/tanstack-db";
+
 export const bookCollection = createCollection(
   queryCollectionOptions({
     queryKey: ["books"],
-    queryFn: ({ meta }) => selectBooks({ data: meta?.loadSubsetOptions }),
+    queryFn: ({ meta }) => selectBooks({ data: fromTanDb(meta?.loadSubsetOptions) }),
     getKey: ({ id }) => id,
     schema: BookSchema,
     queryClient: queryClient,
     syncMode: "on-demand",
+    autoIndex: "eager",
+    defaultIndexType: BasicIndex,
   }),
 );
 

package/skills/dialogs/SKILL.md

@@ -48,7 +48,7 @@ try {
 // custom dialog
 const { open } = useDialogs();
 
-await open(EditFeatureDialog, id);
+await open(EditFeatureDialog, { id });
 
 // custom dialog component
 interface Payload {

package/skills/notifications/SKILL.md

@@ -7,9 +7,9 @@ description: "Use when: displaying success, error, warning, or informational fee
 
 - Use `useNotification()` for lightweight non-blocking user feedback.
 - Always use translation; add new keys for feature-specific messages.
-- Notifications are automatically queued and stacked by the provider.
-- Always set `autoHideDuration` between 5000 and 10000 ms to prevent stale messages.
-- Use `severity: "success" | "info" | "warning" | "error"` consistently with the outcome.
+- Notifications are automatically queued by the provider and shown one at a time.
+- `autoHideDuration` defaults to 5000 ms and is not capped by the library; keep overrides reasonable (~10000 ms) for messages that need more reading time.
+- Use `severity: "success" | "info" | "warning" | "error"` consistently with the outcome. Severity is optional — omitting it renders a plain snackbar (no colored `Alert`).
 - Use notifications for lightweight feedback; dialogs when the user must decide or acknowledge.
 
 ## File Placement

package/skills/routing/SKILL.md

@@ -3,9 +3,11 @@ name: routing
 description: "Use when: creating or modifying TanStack Router routes, feature folders, navigation, permissions, loaders, suspense flows, or route-scoped components/hooks."
 ---
 
+> Mechanics (`createFileRoute`, `beforeLoad`, `redirect`, `loader`, preloading, `pendingComponent`) are covered by TanStack's own skills — load `@tanstack/router-core#router-core/auth-and-guards`, `#router-core/data-loading`, and `#router-core/navigation` for the API details. This skill adds only the wcz-layout conventions on top.
+
 ## Rules
 
-- Always include `requirePermission("all")` in the route's `beforeLoad` function to enforce access control unless the route is meant to be public.
+- Include the `requirePermission(<permissionKey>)` function in the route's `beforeLoad` to enforce access control — pass a key defined in your app's `src/lib/auth/permissions.ts`; omit it only for intentionally public routes.
 - Use `Route.useRouteContext()` to access the authenticated user. User can be `null` if the route doesn't include `requirePermission`.
 - Use the route `loader` option to preload db collections. Preload only root-level collections.
 - Create a `pendingComponent` for routes that suspend or preload meaningful data.
@@ -15,6 +17,7 @@ description: "Use when: creating or modifying TanStack Router routes, feature fo
 - Colocate route-specific components/hooks inside `routes/<feature>/-components` or `-hooks`.
 - Root-level `components/` and `hooks/` are only for code shared across multiple routes.
 - After creating a new route, add or ask for a navigation item with a unique icon from `@mui/icons-material` in `src/routes/__root.tsx`.
+- For navigation and redirects, always use the type-safe router components from `wcz-layout/components` (`RouterButton`, `RouterIconButton`, `RouterLink`, `RouterFab`, `RouterTab`, `RouterListItemButton`, `RouterGridActionsCellItem`) rather than raw MUI with a manual `href` — they wrap `createLink`, so `to`/`params`/`search` are type-checked.
 
 ## Base Project Structure
 
@@ -64,7 +67,7 @@ import { requirePermission, uuidv7 } from "wcz-layout/utils";
 // src/routes/features/create.tsx
 export const Route = createFileRoute("/features/create")({
   component: RouteComponent,
-  beforeLoad: requirePermission("all"),
+  beforeLoad: requirePermission("admin"),
   pendingComponent: FeatureSkeleton,
   loader: () => {
     featureCollection.preload();
@@ -119,10 +122,11 @@ const navigation: Navigation = [
   },
 ];
 
-// Routes are public by default. Protect a route by adding requirePermission to
-// its beforeLoad — it redirects to login when signed out, then checks the group.
+// Routes are public unless guarded. By convention, protect every route by adding
+// requirePermission to its beforeLoad (omit only for intentionally public routes) —
+// it redirects to login when signed out, then checks the permission group.
 export const Route = createFileRoute("/feature-name")({
   component: RouteComponent,
-  beforeLoad: requirePermission("all"),
+  beforeLoad: requirePermission("admin"),
 });
 ```

package/skills/server-functions/SKILL.md

@@ -3,13 +3,15 @@ name: server-functions
 description: "Use when: creating or modifying TanStack Start server functions, REST routes, middleware, validation, database transactions, external service calls, or permission checks."
 ---
 
+> Mechanics (`createServerFn`, `.validator`, `createMiddleware`, `createHandlers`) are covered by TanStack's own skills — load `@tanstack/start-client-core#start-core/server-functions`, `#start-core/middleware`, and `#start-core/server-routes` for the API details. This skill adds only the wcz-layout middleware conventions on top.
+
 ## Rules
 
 - Before generating code, clarify whether the feature should be exposed as public REST API routes or implemented as internal TanStack Start server functions (recommended), and what permission should be required for access.
 - If permission is unknown, use `"all"`.
 - Every server function MUST include `authorizationMiddleware` — server functions are callable RPC endpoints, so a route-level `requirePermission` in `beforeLoad` only hides the UI and does not protect them.
-- Follow the chain order for server functions: `validator` → `middleware` → `handler`.
-- In middleware, always follow this order: `validationMiddleware` → `authorizationMiddleware` → `databaseMiddleware` (reject unauthorized callers before opening a DB transaction).
+- Follow the chain order for server functions: `middleware` → `validator` → `handler`.
+- `authorizationMiddleware` MUST be the LAST middleware in the array so its `context.user` (a non-null `User`) is the value that reaches the handler — `databaseMiddleware` re-derives `user` as nullable, so putting it after would widen the type back to `User | null`. Order: `[databaseMiddleware, authorizationMiddleware(<key>)]`. In REST routes, `validationMiddleware` also comes before `authorizationMiddleware`.
 - Use `validationMiddleware` only in REST API routes. Server functions use `.validator()`.
 - `databaseMiddleware` wraps the handler in a DB transaction and sets `app.user_name` so audit triggers can record who made the change.
 - Reuse schemas from `src/lib/schemas/`.
@@ -31,28 +33,28 @@ src/lib/auth/permissions.ts     — permission keys
 ```ts
 // src/server/actions/<feature>.ts
 export const selectFeatures = createServerFn()
-  .middleware([authorizationMiddleware("all"), databaseMiddleware])
+  .middleware([databaseMiddleware, authorizationMiddleware("all")])
   .handler(async ({ context }) => {
     return await context.db.select().from(featureTable);
   });
 
 export const insertFeature = createServerFn({ method: "POST" })
+  .middleware([databaseMiddleware, authorizationMiddleware("admin")])
   .validator(FeatureSchema)
-  .middleware([authorizationMiddleware("admin"), databaseMiddleware])
   .handler(async ({ data, context }) => {
     await context.db.insert(featureTable).values(data);
   });
 
 export const updateFeature = createServerFn({ method: "POST" })
+  .middleware([databaseMiddleware, authorizationMiddleware("admin")])
   .validator(FeatureSchema)
-  .middleware([authorizationMiddleware("admin"), databaseMiddleware])
   .handler(async ({ data, context }) => {
     await context.db.update(featureTable).set(data).where(eq(featureTable.id, data.id));
   });
 
 export const deleteFeature = createServerFn({ method: "POST" })
+  .middleware([databaseMiddleware, authorizationMiddleware("admin")])
   .validator(FeatureSchema.pick({ id: true }))
-  .middleware([authorizationMiddleware("admin"), databaseMiddleware])
   .handler(async ({ data, context }) => {
     await context.db.delete(featureTable).where(eq(featureTable.id, data.id));
   });
@@ -60,21 +62,18 @@ export const deleteFeature = createServerFn({ method: "POST" })
 // src/routes/api/<feature>s/index.ts
 export const Route = createFileRoute("/api/features/")({
   server: {
+    middleware: [databaseMiddleware],
     handlers: ({ createHandlers }) =>
       createHandlers({
         GET: {
-          middleware: [authorizationMiddleware("all"), databaseMiddleware],
+          middleware: [authorizationMiddleware("all")],
           handler: async ({ context }) => {
             const items = await context.db.select().from(featureTable);
             return Response.json(items);
           },
         },
         POST: {
-          middleware: [
-            validationMiddleware(FeatureSchema),
-            authorizationMiddleware("admin"),
-            databaseMiddleware,
-          ],
+          middleware: [validationMiddleware(FeatureSchema), authorizationMiddleware("admin")],
           handler: async ({ context }) => {
             const [response] = await context.db
               .insert(featureTable)
@@ -90,7 +89,7 @@ export const Route = createFileRoute("/api/features/")({
 // src/routes/api/<feature>s/$id.ts
 export const Route = createFileRoute("/api/features/$id")({
   server: {
-    middleware: [authorizationMiddleware("admin"), databaseMiddleware],
+    middleware: [databaseMiddleware, authorizationMiddleware("admin")],
     handlers: ({ createHandlers }) =>
       createHandlers({
         PUT: {

package/skills/services/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: services
-description: "Use when: integrating file, approval, PeopleSoft, email, or attendance services into your workflow."
+description: "Use when: working with file, approval, employee or email services into your workflow."
 ---
 
 ## Info
@@ -9,7 +9,9 @@ You can read about each service in the links below. Services are categorized as
 
 - **Client exports** — Contains `queryOptions` and `mutationOptions`; use for data fetching/mutations on the client with React Query.
 - **Server exports** — Server functions; prefer calling mutations inside other server functions or database transactions.
-- To read a step, open the linked file in the **File** column directly.
+- Invalidating mutation options take `{ queryClient }` so they can invalidate related queries; read-only ones (e.g. `downloadFileMutationOptions()`, `openFileMutationOptions()`) don't require it.
+- Access `queryClient` with `Route.useRouteContext()` in a route file, or `useRouteContext({ from: "path" })` in a component.
+- To read about a service, open the linked file in the **File** column directly.
 
 ## Import Paths
 

package/skills/services/docs/approval.md

@@ -163,8 +163,8 @@ const ApprovalSchema = z.object({
   createdBy: z.custom<ApprovalEmployee>(),
   updated: z.date().optional(),
   updatedBy: z.custom<ApprovalEmployee>().optional(),
-  approvalFlows: z.array(ApprovalFlow).min(1),
-  currentApprovers: z.array(ApprovalEmployee),
+  approvalFlows: z.array(z.custom<ApprovalFlow>()).min(1),
+  currentApprovers: z.array(z.custom<ApprovalEmployee>()),
   coRequestors: z.array(ApprovalCoRequestorSchema).optional(),
 });
 
@@ -245,11 +245,12 @@ const WithdrawApprovalSchema = z.object({
 ## Examples
 
 ```ts
-import { approvalQueryOptions } from "wcz-layout/data/client";
+import { approvalQueryOptions, approveApprovalMutationOptions } from "wcz-layout/data/client";
 import { approveApproval } from "wcz-layout/data/server";
 
 // client
 const { data: approval } = useQuery(approvalQueryOptions({ id }));
+const { mutate: approve } = useMutation(approveApprovalMutationOptions({ queryClient }));
 
 // server
 await approveApproval({ data: { id, result: "Approved", emailBody } });

package/skills/services/docs/file.md

@@ -44,11 +44,6 @@ const FileMetaSchema = z.object({
   createdDate: z.date(),
 });
 
-const FileActionsSchema = z.object({
-  download: z.boolean().optional(),
-  delete: z.boolean().optional(),
-});
-
 const GetFileMetasSchema = z.object({
   appName: z.string().min(1).max(255),
   subId: z.uuid(),
@@ -73,11 +68,41 @@ const UploadFileMetaSchema = z.object({
 ## Examples
 
 ```ts
-import { fileMetasQueryOptions, uploadFileMutationOptions } from "wcz-layout/data/client";
+import { fileMetasQueryOptions, fileQueryOptions, uploadFileMutationOptions } from "wcz-layout/data/client";
+import { Dropzone, FileViewer } from "wcz-layout/components";
+import { useInView } from "wcz-layout/hooks";
+
+// fetch metas + fetch first file
+const { ref, inView } = useInView();
+
+const { data: fileMetas = [] } = useQuery({
+  ...fileMetasQueryOptions({ appName: packageJson.name, subId }),
+  enabled: inView,
+});
+
+const { data: file } = useQuery({
+  ...fileQueryOptions({ appName: packageJson.name, id: fileMetas[0]?.id ?? "" }),
+  enabled: !!fileMetas[0],
+});
+
+// upload
+const [progress, setProgress] = useState(0);
+const { mutateAsync: uploadFile } = useMutation(uploadFileMutationOptions({ queryClient }));
+
+// Dropzone
+const onDrop = async (acceptedFiles: File[]) => {
+  await Promise.allSettled(
+    acceptedFiles.map((file) =>
+      uploadFile({ appName: packageJson.name, subId, file, setProgress }),
+    ),
+  );
+  setUploadProgress(0);
+};
 
-const { data: files = [] } = useQuery(fileMetasQueryOptions({ appName, subId }));
+<Dropzone onDrop={onDrop} progress={progress} />
 
-// upload (isPending drives an indeterminate loading state — no % progress)
-const { mutate: upload, isPending } = useMutation(uploadFileMutationOptions());
-upload({ appName, subId, file });
+// File Viewer - no manual fetch metas needed (default)
+<FileViewer appName={packageJson.name} subId={subId}>
+  {(component) => <component.Grid />} // or component.List
+</FileViewer>
 ```

package/skills/start/steps/01-git-setup.md

@@ -8,4 +8,4 @@
 2. Run `git branch --show-current`.
    - **Not `master`** → run `git branch -M master`.
    - **Already `master`** → continue.
-3. Run `npx vp config` to install the Git hooks (pre-commit checks + automatic version bump). It normally runs via the `prepare` script on install — running it again is a safe no-op.
+3. Run `npx vp config` to install the Git hooks (pre-commit checks + automatic version bump). Running it again is a safe no-op.

package/skills/start/steps/04-database-setup.md

@@ -1,5 +1,7 @@
 # Database Setup
 
+> Create `.env.local` if it does not exist, then preserve its existing keys when setting database values. Values written here are temporary when the project uses Vault: the Vault Setup step moves them into the Vault `default` secret. Both `DATABASE_URL` and `DATABASE_SCHEMA` stay in `.env.local` — drizzle-kit (`db:studio`, `db:generate`) reads both.
+
 ## User Input
 
 Ask: **"Do you already have a Postgres database created for this project? (yes/no)"**
@@ -32,6 +34,8 @@ docker run --name <project-name>-postgres -e POSTGRES_PASSWORD=<password> -d -p
 - **Success** → continue.
 - **Error** → stop and show the full error to the user.
 
-5. Update `.env.local` → set `DATABASE_URL=postgres://postgres:<password>@localhost:<PORT>/postgres`.
+5. Update `.env.local`:
+   - Set `DATABASE_URL=postgres://postgres:<password>@localhost:<PORT>/postgres`.
+   - Set `DATABASE_SCHEMA=public`.
 6. Output exactly:
    > ✅ Local Postgres database created successfully on port [PORT]

package/skills/start/steps/05-entra-setup.md

@@ -51,9 +51,9 @@ Wait for "continue", then proceed to Part C.
 
 ## Part C — Credentials
 
-Ask: **"Please provide the CLIENT_ID and CLIENT_SECRET for your Entra ID application."**
+Ask: **"Please provide the CLIENT_ID for your Entra ID application."**
 
 Once received:
 
-1. Update `.env.local` → set `ENTRA_CLIENT_ID=<CLIENT_ID>`.
-2. **CRITICAL**: Do **not** save `CLIENT_SECRET` to any file. Memorize it in context for use in the Vault Setup step only — local development loads it from Vault at dev-server start.
+1. Update `.env.local` → set `ENTRA_CLIENT_ID=<CLIENT_ID>`. (If the project uses Vault, this value moves into the Vault `default` secret during the Vault Setup step.)
+2. **CRITICAL**: Never ask for, print, or save the `CLIENT_SECRET`. The user enters it themselves in the Vault Setup step — into the Vault `default` secret, or directly into `.env.local` when not using Vault.

package/skills/start/steps/06-vault-setup.md

@@ -1,50 +1,71 @@
 # Vault Setup
 
-Execute parts A → B → C sequentially. Pause for user input at each part.
+Never print user-provided secret values into chat, files, or logs — reference only the env keys and where each value lives. The one value the AI generates itself is `SESSION_SECRET`: a fresh 64-char hex string via `node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"`. The template ships only `VITE_MUI_LICENSE_KEY` in `.env`; all project configuration goes into the gitignored `.env.local`, which may have been created by an earlier setup step and is normalized in this step.
 
-Never print secret values into chat, files, or logs — reference only the env keys and where each value lives.
+## User Input
 
----
+Ask: **"Do you use Vault for this project? (yes/no)"**
 
-## Part A — Default Secrets
+- **Yes** → Branch A.
+- **No** → Branch B.
 
-Output:
+---
 
-> 1. Navigate to the Vault UI (the `VAULT_ADDRESS` value from `.env.local`, path `/ui/`) and log in.
-> 2. Find your project, open the "default" secret path, click 'Edit' (toggle 'View as JSON').
-> 3. Fill in a JSON object with the following keys, then save. When finished, type 'done'.
+## Branch A — Vault
 
-The user fills the values; tell them where each one comes from:
+### Part 1 — Vault secrets (user fills these in the Vault UI)
 
-| Key                   | Value source                                                |
-| --------------------- | ----------------------------------------------------------- |
-| `DATABASE_URL`        | `.env.local`                                                 |
-| `ENTRA_CLIENT_ID`     | `.env.local`                                                 |
-| `ENTRA_CLIENT_SECRET` | the memorized secret from the Entra ID step                  |
-| `SESSION_SECRET`      | generate a fresh 64-char hex string (never reuse a default)  |
+Output:
+
+> 1. Navigate to your Vault UI and log in.
+> 2. In your app's root path, create a secret named exactly `harborvault`: toggle 'JSON' mode, then copy-paste the JSON values from another app's `harborvault` secret and save.
+> 3. Open your app's `default` secret, click 'Edit' (toggle 'View as JSON'), fill in these keys, then save. Provide user this in JSON to copy-paste — empty string values, except `SESSION_SECRET`, which you pre-fill with a freshly generated value:
+>
+> | Key                     | Value source                                          |
+> | ----------------------- | ----------------------------------------------------- |
+> | `ENTRA_CLIENT_ID`       | the Entra ID step                                     |
+> | `ENTRA_TENANT_ID`       | same for all Wistron apps — copy from another project |
+> | `ENTRA_CLIENT_SECRET`   | your Entra ID application                             |
+> | `SESSION_SECRET`        | already pre-filled in the JSON — generated by the AI  |
+> | `DATABASE_SCHEMA`       | the database step                                     |
+> | `DATABASE_AUTO_MIGRATE` | `true` unless you manage migrations manually          |
+> | `DATABASE_URL`          | the database step                                     |
+>
+> When finished, type 'done'.
 
 Wait for "done".
 
----
+### Part 2 — Normalize `.env.local`
 
-## Part B — Harbor Vault Secret
+Rewrite `.env.local` so it contains **only** the keys below. Never fill in secret values yourself — keep values empty except `DATABASE_URL` and `DATABASE_SCHEMA`, where you keep the values if the database step already set them (drizzle-kit reads both):
 
-Output:
+```dotenv
+VAULT_ADDRESS=
+VAULT_SECRET_PATH=
+VAULT_USERNAME=
+VAULT_PASSWORD=
 
-> Now, go to the root path of your project in Vault and click 'Create secret'.
->
-> 1. Name it exactly: `harborvault`
-> 2. Toggle 'JSON' mode.
-> 3. Go to another existing project in your Vault, copy the JSON values from its `harborvault` secret, and paste them into this new one, then save.
->
-> Once finished, type 'done'.
+DATABASE_URL=
+DATABASE_SCHEMA=
+```
 
-Wait for "done".
+Then ask the user to fill in the empty values directly in `.env.local` (not in chat) and type 'done'. Wait for "done".
 
 ---
 
-## Part C — Local Vault Credentials
+## Branch B — No Vault
+
+Create `.env.local` to contain exactly these keys — keep any values already set by earlier steps, fill `SESSION_SECRET` with a freshly generated value, and leave the rest empty:
+
+```dotenv
+ENTRA_CLIENT_ID=
+ENTRA_TENANT_ID=
+ENTRA_CLIENT_SECRET=
+SESSION_SECRET=<generated-64-char-hex>
 
-Ask: **"Please provide your Vault Username and Password so I can add them to your local environment."**
+DATABASE_SCHEMA=
+DATABASE_AUTO_MIGRATE=
+DATABASE_URL=
+```
 
-Once received, add the keys `VAULT_USERNAME` and `VAULT_PASSWORD` with the provided values to `.env.local`. The dev server pulls the remaining secrets from Vault at startup — `VAULT_ADDRESS` and `VAULT_SECRET_PATH` are already set in `.env`.
+Then ask the user to fill in the empty values directly in `.env.local` (not in chat) and wait for "done".

package/dist/file-C5-a_6W6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-C5-a_6W6.mjs","names":["createServerFn","serverEnv","getAppToken","getAccessToken","authenticationMiddleware","getFileUploadToken","method","middleware","optional","handler","token","endpoint","FILE_BASE_URL","mutationOptions","queryOptions","Upload","uuidv7","z","FileSchema","GetFileMetasSchema","UpdateFileMetaSchema","UploadFileMetaSchema","UploadFileResult","batchDeleteFiles","deleteFile","downloadFile","getFile","getFileMetas","getFileThumbnail","updateFileMeta","QueryClientParam","getFileUploadToken","QUERY_KEY","HOUR","baseOptions","staleTime","gcTime","refetchOnWindowFocus","streamToObjectUrl","stream","ReadableStream","Promise","blob","Response","URL","createObjectURL","saveBlob","Blob","fileName","url","anchor","document","createElement","href","download","click","revokeObjectURL","fileMetasQueryOptions","params","input","queryKey","appName","subId","queryFn","data","fileThumbnailQueryOptions","id","enabled","fileQueryOptions","downloadFileMutationOptions","mutationFn","fileExtension","openFileMutationOptions","Error","window","open","updateFileMetaMutationOptions","queryClient","onSettled","invalidateQueries","exact","deleteFileMutationOptions","batchDeleteFilesMutationOptions","uploadFileMutationOptions","file","setProgress","progress","token","endpoint","dotIndex","name","lastIndexOf","slice","resolve","reject","upload","chunkSize","metadata","mimeType","type","headers","Authorization","onProgress","bytesUploaded","bytesTotal","onError","onSuccess","start","result"],"sources":["../src/server/actions/file.ts","../src/data/client/file.ts"],"sourcesContent":["import { createServerFn } from \"@tanstack/react-start\";\r\nimport { serverEnv } from \"~/env\";\r\nimport { getAppToken } from \"~/lib/auth/msalServer\";\r\nimport { getAccessToken } from \"~/lib/auth/user\";\r\nimport { authenticationMiddleware } from \"~/middleware/authMiddleware\";\r\n\r\nexport const getFileUploadToken = createServerFn({ method: \"GET\" })\r\n  .middleware([authenticationMiddleware({ optional: true })])\r\n  .handler(async () => {\r\n    let token: string;\r\n    try {\r\n      token = await getAccessToken(\"file\");\r\n    } catch {\r\n      token = await getAppToken(\"file\");\r\n    }\r\n    return { token, endpoint: `${serverEnv.FILE_BASE_URL}/v1/upload` };\r\n  });\r\n","import { mutationOptions, queryOptions } from \"@tanstack/react-query\";\nimport { Upload } from \"tus-js-client\";\nimport { uuidv7 } from \"uuidv7\";\nimport type { z } from \"zod\";\nimport type {\n  FileSchema,\n  GetFileMetasSchema,\n  UpdateFileMetaSchema,\n  UploadFileMetaSchema,\n  UploadFileResult,\n} from \"~/data/server/file\";\nimport {\n  batchDeleteFiles,\n  deleteFile,\n  downloadFile,\n  getFile,\n  getFileMetas,\n  getFileThumbnail,\n  updateFileMeta,\n} from \"~/data/server/file\";\nimport type { QueryClientParam } from \"~/models/QueryClientParam\";\nimport { getFileUploadToken } from \"~/server/actions/file\";\n\nconst QUERY_KEY = \"file\";\nconst HOUR = 1000 * 60 * 60;\n\nconst baseOptions = {\n  staleTime: HOUR,\n  gcTime: HOUR,\n  refetchOnWindowFocus: false,\n};\n\nasync function streamToObjectUrl(stream: ReadableStream): Promise<string> {\n  const blob = await new Response(stream).blob();\n  return URL.createObjectURL(blob);\n}\n\nfunction saveBlob(blob: Blob, fileName: string): void {\n  const url = URL.createObjectURL(blob);\n  const anchor = document.createElement(\"a\");\n  anchor.href = url;\n  anchor.download = fileName;\n  anchor.click();\n  URL.revokeObjectURL(url);\n}\n\nexport const fileMetasQueryOptions = (params: z.input<typeof GetFileMetasSchema>) =>\n  queryOptions({\n    queryKey: [QUERY_KEY, \"meta\", params.appName, params.subId],\n    queryFn: () => getFileMetas({ data: params }),\n    ...baseOptions,\n  });\n\nexport const fileThumbnailQueryOptions = (params: z.input<typeof FileSchema>) =>\n  queryOptions({\n    queryKey: [QUERY_KEY, \"thumbnail\", params.appName, params.id],\n    queryFn: async () => streamToObjectUrl(await getFileThumbnail({ data: params })),\n    enabled: !!params.id,\n    ...baseOptions,\n  });\n\nexport const fileQueryOptions = (params: z.input<typeof FileSchema>) =>\n  queryOptions({\n    queryKey: [QUERY_KEY, params.appName, params.id],\n    queryFn: async () => streamToObjectUrl(await getFile({ data: params })),\n    enabled: !!params.id,\n    ...baseOptions,\n  });\n\nexport const downloadFileMutationOptions = () =>\n  mutationOptions({\n    mutationFn: async (\n      data: z.input<typeof FileSchema> & { fileName: string; fileExtension: string },\n    ) => {\n      const stream = await downloadFile({ data });\n      saveBlob(await new Response(stream).blob(), `${data.fileName}.${data.fileExtension}`);\n    },\n  });\n\nexport const openFileMutationOptions = () =>\n  mutationOptions<void, Error, z.input<typeof FileSchema>>({\n    mutationFn: async (data) => {\n      const stream = await getFile({ data });\n      window.open(await streamToObjectUrl(stream));\n    },\n  });\n\nexport const updateFileMetaMutationOptions = ({ queryClient }: QueryClientParam) =>\n  mutationOptions({\n    mutationFn: (data: z.input<typeof UpdateFileMetaSchema>) => updateFileMeta({ data }),\n    onSettled: () => queryClient.invalidateQueries({ queryKey: [QUERY_KEY, \"meta\"], exact: false }),\n  });\n\nexport const deleteFileMutationOptions = ({ queryClient }: QueryClientParam) =>\n  mutationOptions({\n    mutationFn: (data: z.input<typeof FileSchema>) => deleteFile({ data }),\n    onSettled: () => queryClient.invalidateQueries({ queryKey: [QUERY_KEY, \"meta\"], exact: false }),\n  });\n\nexport const batchDeleteFilesMutationOptions = ({ queryClient }: QueryClientParam) =>\n  mutationOptions({\n    mutationFn: (data: z.input<typeof GetFileMetasSchema>) => batchDeleteFiles({ data }),\n    onSettled: () => queryClient.invalidateQueries({ queryKey: [QUERY_KEY, \"meta\"], exact: false }),\n  });\n\nexport const uploadFileMutationOptions = ({ queryClient }: QueryClientParam) =>\n  mutationOptions({\n    mutationFn: async ({\n      appName,\n      subId,\n      file,\n      setProgress,\n    }: z.input<typeof UploadFileMetaSchema> & {\n      setProgress?: (progress: number) => void;\n    }): Promise<UploadFileResult> => {\n      const { token, endpoint } = await getFileUploadToken();\n      const id = uuidv7();\n      const dotIndex = file.name.lastIndexOf(\".\");\n      const fileExtension = dotIndex >= 0 ? file.name.slice(dotIndex + 1) : \"\";\n\n      await new Promise<void>((resolve, reject) => {\n        const upload = new Upload(file, {\n          endpoint,\n          chunkSize: 1_048_576,\n          metadata: { id, appName, subId, fileName: file.name, fileExtension, mimeType: file.type },\n          headers: { Authorization: `Bearer ${token}` },\n          onProgress: (bytesUploaded, bytesTotal) =>\n            setProgress?.((bytesUploaded / bytesTotal) * 100),\n          onError: reject,\n          onSuccess: () => resolve(),\n        });\n        upload.start();\n      });\n\n      return { id, appName, subId, fileName: file.name };\n    },\n    onSuccess: (result) =>\n      queryClient.invalidateQueries({\n        queryKey: [QUERY_KEY, \"meta\", result.appName, result.subId],\n        exact: false,\n      }),\n  });\n"],"mappings":";;;;;;;;;;AAMA,MAAaK,qBAAqBL,eAAe,EAAEM,QAAQ,MAAM,CAAC,CAAC,CAChEC,WAAW,CAACH,yBAAyB,EAAEI,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAC1DC,QAAQ,YAAY;CACnB,IAAIC;CACJ,IAAI;EACFA,QAAQ,MAAMP,eAAe,MAAM;CACrC,QAAQ;EACNO,QAAQ,MAAMR,YAAY,MAAM;CAClC;CACA,OAAO;EAAEQ;EAAOC,UAAU,GAAGV,UAAUW,cAAa;CAAa;AACnE,CAAC;;;ACOH,MAAMoB,YAAY;AAClB,MAAMC,OAAO,MAAO,KAAK;AAEzB,MAAMC,cAAc;CAClBC,WAAWF;CACXG,QAAQH;CACRI,sBAAsB;AACxB;AAEA,eAAeC,kBAAkBC,QAAyC;CACxE,MAAMG,OAAO,MAAM,IAAIC,SAASJ,MAAM,CAAC,CAACG,KAAK;CAC7C,OAAOE,IAAIC,gBAAgBH,IAAI;AACjC;AAEA,SAASI,SAASJ,MAAYM,UAAwB;CACpD,MAAMC,MAAML,IAAIC,gBAAgBH,IAAI;CACpC,MAAMQ,SAASC,SAASC,cAAc,GAAG;CACzCF,OAAOG,OAAOJ;CACdC,OAAOI,WAAWN;CAClBE,OAAOK,MAAM;CACbX,IAAIY,gBAAgBP,GAAG;AACzB;AAEA,MAAaQ,yBAAyBC,WACpC5C,aAAa;CACX8C,UAAU;EAAC5B;EAAW;EAAQ0B,OAAOG;EAASH,OAAOI;CAAK;CAC1DC,eAAepC,aAAa,EAAEqC,MAAMN,OAAO,CAAC;CAC5C,GAAGxB;AACL,CAAC;AAEH,MAAa+B,6BAA6BP,WACxC5C,aAAa;CACX8C,UAAU;EAAC5B;EAAW;EAAa0B,OAAOG;EAASH,OAAOQ;CAAE;CAC5DH,SAAS,YAAYzB,kBAAkB,MAAMV,iBAAiB,EAAEoC,MAAMN,OAAO,CAAC,CAAC;CAC/ES,SAAS,CAAC,CAACT,OAAOQ;CAClB,GAAGhC;AACL,CAAC;AAEH,MAAakC,oBAAoBV,WAC/B5C,aAAa;CACX8C,UAAU;EAAC5B;EAAW0B,OAAOG;EAASH,OAAOQ;CAAE;CAC/CH,SAAS,YAAYzB,kBAAkB,MAAMZ,QAAQ,EAAEsC,MAAMN,OAAO,CAAC,CAAC;CACtES,SAAS,CAAC,CAACT,OAAOQ;CAClB,GAAGhC;AACL,CAAC;AAEH,MAAamC,oCACXxD,gBAAgB,EACdyD,YAAY,OACVN,SACG;CACH,MAAMzB,SAAS,MAAMd,aAAa,EAAEuC,KAAK,CAAC;CAC1ClB,SAAS,MAAM,IAAIH,SAASJ,MAAM,CAAC,CAACG,KAAK,GAAG,GAAGsB,KAAKhB,SAAQ,GAAIgB,KAAKO,eAAe;AACtF,EACF,CAAC;AAEH,MAAaC,gCACX3D,gBAAyD,EACvDyD,YAAY,OAAON,SAAS;CAC1B,MAAMzB,SAAS,MAAMb,QAAQ,EAAEsC,KAAK,CAAC;CACrCU,OAAOC,KAAK,MAAMrC,kBAAkBC,MAAM,CAAC;AAC7C,EACF,CAAC;AAEH,MAAaqC,iCAAiC,EAAEC,kBAC9ChE,gBAAgB;CACdyD,aAAaN,SAA+CnC,eAAe,EAAEmC,KAAK,CAAC;CACnFc,iBAAiBD,YAAYE,kBAAkB;EAAEnB,UAAU,CAAC5B,WAAW,MAAM;EAAGgD,OAAO;CAAM,CAAC;AAChG,CAAC;AAEH,MAAaC,6BAA6B,EAAEJ,kBAC1ChE,gBAAgB;CACdyD,aAAaN,SAAqCxC,WAAW,EAAEwC,KAAK,CAAC;CACrEc,iBAAiBD,YAAYE,kBAAkB;EAAEnB,UAAU,CAAC5B,WAAW,MAAM;EAAGgD,OAAO;CAAM,CAAC;AAChG,CAAC;AAEH,MAAaE,mCAAmC,EAAEL,kBAChDhE,gBAAgB;CACdyD,aAAaN,SAA6CzC,iBAAiB,EAAEyC,KAAK,CAAC;CACnFc,iBAAiBD,YAAYE,kBAAkB;EAAEnB,UAAU,CAAC5B,WAAW,MAAM;EAAGgD,OAAO;CAAM,CAAC;AAChG,CAAC;AAEH,MAAaG,6BAA6B,EAAEN,kBAC1ChE,gBAAgB;CACdyD,YAAY,OAAO,EACjBT,SACAC,OACAsB,MACAC,kBAG+B;EAC/B,MAAM,EAAEE,OAAOC,aAAa,MAAMzD,mBAAmB;EACrD,MAAMmC,KAAKlD,OAAO;EAClB,MAAMyE,WAAWL,KAAKM,KAAKC,YAAY,GAAG;EAC1C,MAAMpB,gBAAgBkB,YAAY,IAAIL,KAAKM,KAAKE,MAAMH,WAAW,CAAC,IAAI;EAEtE,MAAM,IAAIhD,SAAeoD,SAASC,WAAW;GAW3CC,IAVmBhF,OAAOqE,MAAM;IAC9BI;IACAQ,WAAW;IACXC,UAAU;KAAE/B;KAAIL;KAASC;KAAOd,UAAUoC,KAAKM;KAAMnB;KAAe2B,UAAUd,KAAKe;IAAK;IACxFC,SAAS,EAAEC,eAAe,UAAUd,QAAQ;IAC5Ce,aAAaC,eAAeC,eAC1BnB,cAAekB,gBAAgBC,aAAc,GAAG;IAClDC,SAASX;IACTY,iBAAiBb,QAAQ;GAC3B,CACAE,CAAM,CAACY,MAAM;EACf,CAAC;EAED,OAAO;GAAEzC;GAAIL;GAASC;GAAOd,UAAUoC,KAAKM;EAAK;CACnD;CACAgB,YAAYE,WACV/B,YAAYE,kBAAkB;EAC5BnB,UAAU;GAAC5B;GAAW;GAAQ4E,OAAO/C;GAAS+C,OAAO9C;EAAK;EAC1DkB,OAAO;CACT,CAAC;AACL,CAAC"}

package/dist/file-DM1x40eJ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-DM1x40eJ.mjs","names":["createServerFn","setResponseHeaders","https","Readable","DefaultHttpStack","Upload","uuidv7","z","serverEnv","getAppToken","getAccessToken","apiMiddleware","authenticationMiddleware","FileMeta","FileMetaSchema","GetFileMetasSchema","object","appName","string","min","max","subId","uuid","FileSchema","id","UpdateFileMetaSchema","extend","fileName","DeleteFileSchema","BatchDeleteFilesSchema","UploadFileResult","UploadFileMetaSchema","file","instanceof","File","getFileMetas","method","validator","middleware","baseURL","scopeKey","handler","data","context","queryParams","URLSearchParams","append","fileMetas","api","request","Array","url","toString","getFileThumbnail","response","responseType","Headers","headers","toWeb","ReadableStream","getFile","downloadFile","updateFileMeta","deleteFile","batchDeleteFiles","insecureHttpsAgent","Agent","rejectUnauthorized","uploadFile","FormData","parse","get","Promise","accessToken","stream","fromWeb","dotIndex","name","lastIndexOf","fileExtension","slice","resolve","reject","upload","endpoint","FILE_BASE_URL","httpStack","agent","uploadSize","size","chunkSize","metadata","mimeType","type","Authorization","onError","onSuccess","start"],"sources":["../src/data/server/file.ts"],"sourcesContent":["import { createServerFn } from \"@tanstack/react-start\";\nimport { setResponseHeaders } from \"@tanstack/react-start/server\";\nimport https from \"node:https\";\nimport { Readable } from \"node:stream\";\nimport { DefaultHttpStack, Upload } from \"tus-js-client\";\nimport { uuidv7 } from \"uuidv7\";\nimport { z } from \"zod\";\nimport { serverEnv } from \"~/env\";\nimport { getAppToken } from \"~/lib/auth/msalServer\";\nimport { getAccessToken } from \"~/lib/auth/user\";\nimport { apiMiddleware } from \"~/middleware/apiMiddleware\";\nimport { authenticationMiddleware } from \"~/middleware/authMiddleware\";\nimport type { FileMeta } from \"~/models/file/FileMeta\";\nimport { FileMetaSchema } from \"~/models/file/FileMeta\";\n\nexport const GetFileMetasSchema = z.object({\n  appName: z.string().min(1).max(255),\n  subId: z.uuid(),\n});\n\nexport const FileSchema = z.object({\n  appName: z.string().min(1).max(255),\n  id: z.uuid(),\n});\n\nexport const UpdateFileMetaSchema = FileMetaSchema.extend({\n  fileName: z.string().min(1).max(255),\n});\n\nconst DeleteFileSchema = FileSchema;\n\nconst BatchDeleteFilesSchema = GetFileMetasSchema;\n\nexport interface UploadFileResult {\n  id: string;\n  appName: string;\n  subId: string;\n  fileName: string;\n}\n\nexport const UploadFileMetaSchema = z.object({\n  appName: z.string().min(1).max(255),\n  subId: z.uuid(),\n  file: z.instanceof(File),\n});\n\nexport const getFileMetas = createServerFn({ method: \"GET\" })\n  .validator(GetFileMetasSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"subId\", data.subId);\n\n    const { data: fileMetas } = await context.api.request<Array<FileMeta>>({\n      url: `/v1/meta?${queryParams.toString()}`,\n      method: \"GET\",\n    });\n    return fileMetas;\n  });\n\nexport const getFileThumbnail = createServerFn({ method: \"GET\" })\n  .validator(FileSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"id\", data.id);\n\n    const response = await context.api.request<Readable>({\n      url: `/v1/thumbnail?${queryParams.toString()}`,\n      method: \"GET\",\n      responseType: \"stream\",\n    });\n\n    setResponseHeaders(\n      new Headers({\n        \"Content-Type\": response.headers[\"content-type\"] as string,\n        \"Cache-Control\": \"private, max-age=3600, immutable\",\n      }),\n    );\n    return Readable.toWeb(response.data) as ReadableStream;\n  });\n\nexport const getFile = createServerFn({ method: \"GET\" })\n  .validator(FileSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"id\", data.id);\n\n    const response = await context.api.request<Readable>({\n      url: `/v1?${queryParams.toString()}`,\n      method: \"GET\",\n      responseType: \"stream\",\n    });\n\n    setResponseHeaders(\n      new Headers({\n        \"Content-Type\": response.headers[\"content-type\"] as string,\n        \"Cache-Control\": \"private, max-age=3600, immutable\",\n      }),\n    );\n    return Readable.toWeb(response.data) as ReadableStream;\n  });\n\nexport const downloadFile = createServerFn({ method: \"GET\" })\n  .validator(FileSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"id\", data.id);\n\n    const response = await context.api.request<Readable>({\n      url: `/v1/download?${queryParams.toString()}`,\n      method: \"GET\",\n      responseType: \"stream\",\n    });\n\n    setResponseHeaders(\n      new Headers({\n        \"Content-Type\": response.headers[\"content-type\"] as string,\n        \"Cache-Control\": \"private, max-age=3600, immutable\",\n      }),\n    );\n    return Readable.toWeb(response.data) as ReadableStream;\n  });\n\nexport const updateFileMeta = createServerFn({ method: \"POST\" })\n  .validator(UpdateFileMetaSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"id\", data.id);\n\n    await context.api.request({ url: `/v1/meta?${queryParams.toString()}`, method: \"PUT\", data });\n  });\n\nexport const deleteFile = createServerFn({ method: \"POST\" })\n  .validator(DeleteFileSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"id\", data.id);\n\n    await context.api.request({ url: `/v1?${queryParams.toString()}`, method: \"DELETE\" });\n  });\n\nexport const batchDeleteFiles = createServerFn({ method: \"POST\" })\n  .validator(BatchDeleteFilesSchema)\n  .middleware([apiMiddleware({ baseURL: \"FILE_BASE_URL\", scopeKey: \"file\" })])\n  .handler(async ({ data, context }) => {\n    const queryParams = new URLSearchParams();\n    queryParams.append(\"appName\", data.appName);\n    queryParams.append(\"subId\", data.subId);\n\n    await context.api.request({ url: `/v1?${queryParams.toString()}`, method: \"DELETE\" });\n  });\n\nconst insecureHttpsAgent = new https.Agent({ rejectUnauthorized: false });\n\nexport const uploadFile = createServerFn({ method: \"POST\" })\n  // File inputs must travel as multipart FormData — a File nested in a plain\n  // payload object can't be seroval-serialized, so the request never fires.\n  .validator((data: FormData) =>\n    UploadFileMetaSchema.parse({\n      appName: data.get(\"appName\"),\n      subId: data.get(\"subId\"),\n      file: data.get(\"file\"),\n    }),\n  )\n  .middleware([authenticationMiddleware()])\n  .handler(async ({ data }): Promise<UploadFileResult> => {\n    // Prefer the signed-in user's delegated token so the file service stamps\n    // createdBy; fall back to the app identity when there's no user session.\n    let accessToken: string;\n    try {\n      accessToken = await getAccessToken(\"file\");\n    } catch {\n      accessToken = await getAppToken(\"file\");\n    }\n    // Stream instead of buffering the whole file: in-process callers (e.g. a File\n    // from fs.openAsBlob) upload arbitrarily large files without holding them in RAM.\n    const stream = Readable.fromWeb(data.file.stream() as import(\"node:stream/web\").ReadableStream);\n    const id = uuidv7();\n    const dotIndex = data.file.name.lastIndexOf(\".\");\n    const fileExtension = dotIndex >= 0 ? data.file.name.slice(dotIndex + 1) : \"\";\n\n    // Server-originated edge cases only — browser uploads go direct to the file\n    // service via uploadFileMutationOptions (client) with the user's OBO token.\n    await new Promise<void>((resolve, reject) => {\n      const upload = new Upload(stream, {\n        endpoint: `${serverEnv.FILE_BASE_URL}/v1/upload`,\n        httpStack: new DefaultHttpStack({ agent: insecureHttpsAgent }),\n        uploadSize: data.file.size,\n        chunkSize: 1_048_576,\n        metadata: {\n          id,\n          appName: data.appName,\n          subId: data.subId,\n          fileName: data.file.name,\n          fileExtension,\n          mimeType: data.file.type,\n        },\n        headers: { Authorization: `Bearer ${accessToken}` },\n        onError: reject,\n        onSuccess: () => resolve(),\n      });\n      upload.start();\n    });\n\n    return {\n      id,\n      appName: data.appName,\n      subId: data.subId,\n      fileName: data.file.name,\n    };\n  });\n"],"mappings":";;;;;;;;;;;;;AAeA,MAAae,qBAAqBR,IAAES,OAAO;CACzCC,SAASV,IAAEW,OAAO,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG;CAClCC,OAAOd,IAAEe,KAAK;AAChB,CAAC;AAED,MAAaC,aAAahB,IAAES,OAAO;CACjCC,SAASV,IAAEW,OAAO,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG;CAClCI,IAAIjB,IAAEe,KAAK;AACb,CAAC;AAED,MAAaG,uBAAuBX,eAAeY,OAAO,EACxDC,UAAUpB,IAAEW,OAAO,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG,EACrC,CAAC;AAED,MAAMQ,mBAAmBL;AAEzB,MAAMM,yBAAyBd;AAS/B,MAAagB,uBAAuBxB,IAAES,OAAO;CAC3CC,SAASV,IAAEW,OAAO,CAAC,CAACC,IAAI,CAAC,CAAC,CAACC,IAAI,GAAG;CAClCC,OAAOd,IAAEe,KAAK;CACdU,MAAMzB,IAAE0B,WAAWC,IAAI;AACzB,CAAC;AAED,MAAaC,eAAenC,eAAe,EAAEoC,QAAQ,MAAM,CAAC,CAAC,CAC1DC,UAAUtB,kBAAkB,CAAC,CAC7BuB,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,SAASJ,KAAKrB,KAAK;CAEtC,MAAM,EAAEqB,MAAMK,cAAc,MAAMJ,QAAQK,IAAIC,QAAyB;EACrEE,KAAK,YAAYP,YAAYQ,SAAS;EACtChB,QAAQ;CACV,CAAC;CACD,OAAOW;AACT,CAAC;AAEH,MAAaM,mBAAmBrD,eAAe,EAAEoC,QAAQ,MAAM,CAAC,CAAC,CAC9DC,UAAUd,UAAU,CAAC,CACrBe,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,MAAMJ,KAAKlB,EAAE;CAEhC,MAAM8B,WAAW,MAAMX,QAAQK,IAAIC,QAAkB;EACnDE,KAAK,iBAAiBP,YAAYQ,SAAS;EAC3ChB,QAAQ;EACRmB,cAAc;CAChB,CAAC;CAEDtD,mBACE,IAAIuD,QAAQ;EACV,gBAAgBF,SAASG,QAAQ;EACjC,iBAAiB;CACnB,CAAC,CACH;CACA,OAAOtD,SAASuD,MAAMJ,SAASZ,IAAI;AACrC,CAAC;AAEH,MAAakB,UAAU5D,eAAe,EAAEoC,QAAQ,MAAM,CAAC,CAAC,CACrDC,UAAUd,UAAU,CAAC,CACrBe,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,MAAMJ,KAAKlB,EAAE;CAEhC,MAAM8B,WAAW,MAAMX,QAAQK,IAAIC,QAAkB;EACnDE,KAAK,OAAOP,YAAYQ,SAAS;EACjChB,QAAQ;EACRmB,cAAc;CAChB,CAAC;CAEDtD,mBACE,IAAIuD,QAAQ;EACV,gBAAgBF,SAASG,QAAQ;EACjC,iBAAiB;CACnB,CAAC,CACH;CACA,OAAOtD,SAASuD,MAAMJ,SAASZ,IAAI;AACrC,CAAC;AAEH,MAAamB,eAAe7D,eAAe,EAAEoC,QAAQ,MAAM,CAAC,CAAC,CAC1DC,UAAUd,UAAU,CAAC,CACrBe,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,MAAMJ,KAAKlB,EAAE;CAEhC,MAAM8B,WAAW,MAAMX,QAAQK,IAAIC,QAAkB;EACnDE,KAAK,gBAAgBP,YAAYQ,SAAS;EAC1ChB,QAAQ;EACRmB,cAAc;CAChB,CAAC;CAEDtD,mBACE,IAAIuD,QAAQ;EACV,gBAAgBF,SAASG,QAAQ;EACjC,iBAAiB;CACnB,CAAC,CACH;CACA,OAAOtD,SAASuD,MAAMJ,SAASZ,IAAI;AACrC,CAAC;AAEH,MAAaoB,iBAAiB9D,eAAe,EAAEoC,QAAQ,OAAO,CAAC,CAAC,CAC7DC,UAAUZ,oBAAoB,CAAC,CAC/Ba,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,MAAMJ,KAAKlB,EAAE;CAEhC,MAAMmB,QAAQK,IAAIC,QAAQ;EAAEE,KAAK,YAAYP,YAAYQ,SAAS;EAAKhB,QAAQ;EAAOM;CAAK,CAAC;AAC9F,CAAC;AAEH,MAAaqB,aAAa/D,eAAe,EAAEoC,QAAQ,OAAO,CAAC,CAAC,CACzDC,UAAUT,gBAAgB,CAAC,CAC3BU,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,MAAMJ,KAAKlB,EAAE;CAEhC,MAAMmB,QAAQK,IAAIC,QAAQ;EAAEE,KAAK,OAAOP,YAAYQ,SAAS;EAAKhB,QAAQ;CAAS,CAAC;AACtF,CAAC;AAEH,MAAa4B,mBAAmBhE,eAAe,EAAEoC,QAAQ,OAAO,CAAC,CAAC,CAC/DC,UAAUR,sBAAsB,CAAC,CACjCS,WAAW,CAAC3B,cAAc;CAAE4B,SAAS;CAAiBC,UAAU;AAAO,CAAC,CAAC,CAAC,CAAC,CAC3EC,QAAQ,OAAO,EAAEC,MAAMC,cAAc;CACpC,MAAMC,cAAc,IAAIC,gBAAgB;CACxCD,YAAYE,OAAO,WAAWJ,KAAKzB,OAAO;CAC1C2B,YAAYE,OAAO,SAASJ,KAAKrB,KAAK;CAEtC,MAAMsB,QAAQK,IAAIC,QAAQ;EAAEE,KAAK,OAAOP,YAAYQ,SAAS;EAAKhB,QAAQ;CAAS,CAAC;AACtF,CAAC;AAEH,MAAM6B,qBAAqB,IAAI/D,MAAMgE,MAAM,EAAEC,oBAAoB,MAAM,CAAC;AAExE,MAAaC,aAAapE,eAAe,EAAEoC,QAAQ,OAAO,CAAC,CAAA,CAGxDC,WAAWK,SACVX,qBAAqBuC,MAAM;CACzBrD,SAASyB,KAAK6B,IAAI,SAAS;CAC3BlD,OAAOqB,KAAK6B,IAAI,OAAO;CACvBvC,MAAMU,KAAK6B,IAAI,MAAM;AACvB,CAAC,CACH,CAAC,CACAjC,WAAW,CAAC1B,yBAAyB,CAAC,CAAC,CAAC,CACxC6B,QAAQ,OAAO,EAAEC,WAAsC;CAGtD,IAAI+B;CACJ,IAAI;EACFA,cAAc,MAAM/D,eAAe,MAAM;CAC3C,QAAQ;EACN+D,cAAc,MAAMhE,YAAY,MAAM;CACxC;CAGA,MAAMiE,SAASvE,SAASwE,QAAQjC,KAAKV,KAAK0C,OAAO,CAA6C;CAC9F,MAAMlD,KAAKlB,OAAO;CAClB,MAAMsE,WAAWlC,KAAKV,KAAK6C,KAAKC,YAAY,GAAG;CAC/C,MAAMC,gBAAgBH,YAAY,IAAIlC,KAAKV,KAAK6C,KAAKG,MAAMJ,WAAW,CAAC,IAAI;CAI3E,MAAM,IAAIJ,SAAeS,SAASC,WAAW;EAkB3CC,IAjBmB9E,OAAOqE,QAAQ;GAChCU,UAAU,GAAG5E,UAAU6E,cAAa;GACpCC,WAAW,IAAIlF,iBAAiB,EAAEmF,OAAOtB,mBAAmB,CAAC;GAC7DuB,YAAY9C,KAAKV,KAAKyD;GACtBC,WAAW;GACXC,UAAU;IACRnE;IACAP,SAASyB,KAAKzB;IACdI,OAAOqB,KAAKrB;IACZM,UAAUe,KAAKV,KAAK6C;IACpBE;IACAa,UAAUlD,KAAKV,KAAK6D;GACtB;GACApC,SAAS,EAAEqC,eAAe,UAAUrB,cAAc;GAClDsB,SAASb;GACTc,iBAAiBf,QAAQ;EAC3B,CACAE,CAAM,CAACc,MAAM;CACf,CAAC;CAED,OAAO;EACLzE;EACAP,SAASyB,KAAKzB;EACdI,OAAOqB,KAAKrB;EACZM,UAAUe,KAAKV,KAAK6C;CACtB;AACF,CAAC"}